cloudburn 0.4.1 → 0.5.1

package/README.md

@@ -21,7 +21,8 @@ directory path you pass to `cloudburn scan`.
 cloudburn scan ./main.tf
 cloudburn scan ./template.yaml
 cloudburn scan ./iac
-cloudburn scan --live
+cloudburn discover
+cloudburn discover --region all
 ```
 
 `cloudburn scan --format json` emits the lean canonical grouped result:

package/dist/cli.js

@@ -4,55 +4,11 @@
 import { pathToFileURL } from "url";
 import { Command } from "commander";
 
-// src/commands/estimate.ts
-var registerEstimateCommand = (program) => {
-  program.command("estimate").description("Request optional pricing estimates from a self-hosted dashboard").option("--server <url>", "Dashboard API base URL").action((options) => {
-    if (!options.server) {
-      process.stdout.write("No server configured. This command is optional and requires a dashboard URL.\n");
-      return;
-    }
-    process.stdout.write(`Estimate request scaffold ready for server: ${options.server}
-`);
-  });
-};
-
-// src/commands/init.ts
-var starterConfig = `version: 1
-profile: dev
-
-profiles:
-  dev:
-    ec2-allowed-instance-types:
-      allow: [t3.micro, t3.small, t3.medium]
-
-rules:
-  ec2-allowed-instance-types:
-    severity: error
-
-live:
-  tags:
-    Project: myapp
-  regions: [us-east-1]
-`;
-var registerInitCommand = (program) => {
-  program.command("init").description("Print a starter .cloudburn.yml configuration").action(() => {
-    process.stdout.write(`${starterConfig}
-`);
-  });
-};
-
-// src/commands/rules-list.ts
-import { awsCorePreset } from "@cloudburn/sdk";
-var registerRulesListCommand = (program) => {
-  const rulesCommand = program.command("rules").description("Inspect built-in and custom rules");
-  rulesCommand.command("list").description("List built-in CloudBurn rule IDs").action(() => {
-    process.stdout.write(`${awsCorePreset.ruleIds.join("\n")}
-`);
-  });
-};
-
-// src/commands/scan.ts
-import { CloudBurnScanner } from "@cloudburn/sdk";
+// src/commands/discover.ts
+import {
+  assertValidAwsRegion,
+  CloudBurnClient
+} from "@cloudburn/sdk";
 import { InvalidArgumentError } from "commander";
 
 // src/exit-codes.ts
@@ -61,6 +17,11 @@ var EXIT_CODE_POLICY_VIOLATION = 1;
 var EXIT_CODE_RUNTIME_ERROR = 2;
 
 // src/formatters/error.ts
+import { isAwsDiscoveryErrorCode } from "@cloudburn/sdk";
+var sanitizeRuntimeErrorMessage = (message) => message.replace(/169\.254\.169\.254/g, "[redacted-host]").replace(/fd00:ec2::254/gi, "[redacted-host]").replace(/(https?:\/\/)([^/\s:@]+):([^/\s@]+)@/gi, "$1[redacted-auth]@").replace(
+  /([?&](?:access_token|authorization|token|x-amz-security-token|x-amz-signature|signature)=)[^&\s]+/gi,
+  "$1[redacted]"
+).replace(/(Bearer\s+)[A-Za-z0-9._~+/-]+/gi, "$1[redacted]");
 var formatError = (err) => {
   const envelope = { error: categorize(err) };
   return JSON.stringify(envelope, null, 2);
@@ -85,7 +46,17 @@ var categorize = (err) => {
     const path = err.path ?? "unknown";
     return { code: "PATH_NOT_FOUND", message: `Path not found: ${path}` };
   }
-  return { code: "RUNTIME_ERROR", message: err.message || "An unexpected error occurred." };
+  if ("code" in err && typeof err.code === "string" && isAwsDiscoveryErrorCode(err.code)) {
+    return {
+      code: err.code,
+      message: sanitizeRuntimeErrorMessage(err.message).trim() || "AWS Resource Explorer discovery failed."
+    };
+  }
+  const sanitizedMessage = sanitizeRuntimeErrorMessage(err.message).trim();
+  return {
+    code: "RUNTIME_ERROR",
+    message: sanitizedMessage || "An unexpected error occurred."
+  };
 };
 
 // src/formatters/json.ts
@@ -163,13 +134,163 @@ var formatTable = (result) => {
   }).join("\n");
 };
 
+// src/commands/discover.ts
+var supportedDiscoverFormats = ["table", "json", "sarif"];
+var parseDiscoverFormat = (value) => {
+  if (supportedDiscoverFormats.includes(value)) {
+    return value;
+  }
+  throw new InvalidArgumentError(`Invalid format "${value}". Allowed formats: ${supportedDiscoverFormats.join(", ")}.`);
+};
+var parseDiscoverListFormat = (value) => {
+  if (value === "table" || value === "json") {
+    return value;
+  }
+  throw new InvalidArgumentError("Invalid format. Allowed formats: table, json.");
+};
+var parseAwsRegion = (value) => {
+  try {
+    return assertValidAwsRegion(value);
+  } catch (err) {
+    throw new InvalidArgumentError(err instanceof Error ? err.message : "Invalid AWS region.");
+  }
+};
+var parseDiscoverRegion = (value) => {
+  if (value === "all") {
+    return value;
+  }
+  return parseAwsRegion(value);
+};
+var resolveDiscoveryTarget = (region) => region === void 0 ? { mode: "current" } : region === "all" ? { mode: "all" } : { mode: "region", region };
+var scanFormatters = {
+  json: formatJson,
+  sarif: formatSarif,
+  table: formatTable
+};
+var formatValue = (value) => JSON.stringify(value, null, 2);
+var formatEnabledRegions = (regions) => regions.length === 0 ? "No Resource Explorer indexes are enabled." : regions.map(({ region, type }) => `${region}	${type}`).join("\n");
+var formatSupportedResourceTypes = (resourceTypes) => resourceTypes.length === 0 ? "No supported resource types were returned." : resourceTypes.map(({ resourceType, service }) => `${resourceType}	${service ?? "unknown"}`).join("\n");
+var formatInitializationResult = (result) => result.status === "EXISTING" ? `Resource Explorer setup already exists in ${result.aggregatorRegion}.` : `Resource Explorer setup created in ${result.aggregatorRegion}.`;
+var resolveListFormat = (parentCommand, options) => parentCommand.opts().format === "json" ? "json" : options.format ?? "table";
+var runCommand = async (action) => {
+  try {
+    process.exitCode = await action() ?? EXIT_CODE_OK;
+  } catch (err) {
+    process.stderr.write(`${formatError(err)}
+`);
+    process.exitCode = EXIT_CODE_RUNTIME_ERROR;
+  }
+};
+var registerDiscoverCommand = (program) => {
+  const discoverCommand = program.command("discover").description("Run a live AWS discovery").enablePositionalOptions().option(
+    "--region <region>",
+    'Discovery region to use. Pass "all" to require an aggregator index.',
+    parseDiscoverRegion
+  ).option("--format <format>", "Output format: table|json|sarif", parseDiscoverFormat, "table").option("--exit-code", "Exit with code 1 when findings exist").addHelpText(
+    "after",
+    `
+Examples:
+  cloudburn discover
+  cloudburn discover --region eu-central-1
+  cloudburn discover --region all
+  cloudburn discover list-enabled-regions
+  cloudburn discover init
+`
+  ).action(async (options) => {
+    await runCommand(async () => {
+      const scanner = new CloudBurnClient();
+      const result = await scanner.discover({ target: resolveDiscoveryTarget(options.region) });
+      const output = scanFormatters[options.format ?? "table"](result);
+      process.stdout.write(`${output}
+`);
+      if (options.exitCode && countScanResultFindings(result) > 0) {
+        return EXIT_CODE_POLICY_VIOLATION;
+      }
+      return EXIT_CODE_OK;
+    });
+  });
+  discoverCommand.command("list-enabled-regions").description("List AWS regions with a local or aggregator Resource Explorer index").option("--format <format>", "Output format: table|json", parseDiscoverListFormat, "table").action(async (options) => {
+    await runCommand(async () => {
+      const scanner = new CloudBurnClient();
+      const regions = await scanner.listEnabledDiscoveryRegions();
+      const format = resolveListFormat(discoverCommand, options);
+      const output = format === "json" ? formatValue(regions) : formatEnabledRegions(regions);
+      process.stdout.write(`${output}
+`);
+      return EXIT_CODE_OK;
+    });
+  });
+  discoverCommand.command("init").description("Set up AWS Resource Explorer for CloudBurn").option("--region <region>", "Aggregator region to create or reuse during setup", parseAwsRegion).action(async (options) => {
+    await runCommand(async () => {
+      const scanner = new CloudBurnClient();
+      const parentRegion = discoverCommand.opts().region;
+      const region = options.region ?? (parentRegion === "all" ? void 0 : parentRegion);
+      const result = await scanner.initializeDiscovery({ region });
+      process.stdout.write(`${formatInitializationResult(result)}
+`);
+      return EXIT_CODE_OK;
+    });
+  });
+  discoverCommand.command("supported-resource-types").description("List Resource Explorer supported AWS resource types").option("--format <format>", "Output format: table|json", parseDiscoverListFormat, "table").action(async (options) => {
+    await runCommand(async () => {
+      const scanner = new CloudBurnClient();
+      const resourceTypes = await scanner.listSupportedDiscoveryResourceTypes();
+      const format = resolveListFormat(discoverCommand, options);
+      const output = format === "json" ? formatValue(resourceTypes) : formatSupportedResourceTypes(resourceTypes);
+      process.stdout.write(`${output}
+`);
+      return EXIT_CODE_OK;
+    });
+  });
+};
+
+// src/commands/estimate.ts
+var registerEstimateCommand = (program) => {
+  program.command("estimate").description("Request optional pricing estimates from a self-hosted dashboard").option("--server <url>", "Dashboard API base URL").action((options) => {
+    if (!options.server) {
+      process.stdout.write("No server configured. This command is optional and requires a dashboard URL.\n");
+      return;
+    }
+    process.stdout.write(`Estimate request scaffold ready for server: ${options.server}
+`);
+  });
+};
+
+// src/commands/init.ts
+var starterConfig = `version: 1
+profile: dev
+
+# Profiles are parsed but not applied yet, so configure the active rules block directly for now.
+rules:
+  ec2-instance-type-preferred:
+    severity: error
+`;
+var registerInitCommand = (program) => {
+  program.command("init").description("Print a starter .cloudburn.yml configuration").action(() => {
+    process.stdout.write(`${starterConfig}
+`);
+  });
+};
+
+// src/commands/rules-list.ts
+import { awsCorePreset } from "@cloudburn/sdk";
+var registerRulesListCommand = (program) => {
+  const rulesCommand = program.command("rules").description("Inspect built-in and custom rules");
+  rulesCommand.command("list").description("List built-in CloudBurn rule IDs").action(() => {
+    process.stdout.write(`${awsCorePreset.ruleIds.join("\n")}
+`);
+  });
+};
+
 // src/commands/scan.ts
+import { CloudBurnClient as CloudBurnClient2 } from "@cloudburn/sdk";
+import { InvalidArgumentError as InvalidArgumentError2 } from "commander";
 var supportedScanFormats = ["table", "json", "sarif"];
 var parseScanFormat = (value) => {
   if (supportedScanFormats.includes(value)) {
     return value;
   }
-  throw new InvalidArgumentError(`Invalid format "${value}". Allowed formats: ${supportedScanFormats.join(", ")}.`);
+  throw new InvalidArgumentError2(`Invalid format "${value}". Allowed formats: ${supportedScanFormats.join(", ")}.`);
 };
 var formatters = {
   json: formatJson,
@@ -177,19 +298,18 @@ var formatters = {
   table: formatTable
 };
 var registerScanCommand = (program) => {
-  program.command("scan").description("Run an autodetected static IaC scan, or a live AWS scan with --live").argument("[path]", "Terraform file, CloudFormation template, or directory to scan").option("--live", "Run live AWS scan").option("--format <format>", "Output format: table|json|sarif", parseScanFormat, "table").option("--exit-code", "Exit with code 1 when findings exist").addHelpText(
+  program.command("scan").description("Run an autodetected static IaC scan").argument("[path]", "Terraform file, CloudFormation template, or directory to scan").option("--format <format>", "Output format: table|json|sarif", parseScanFormat, "table").option("--exit-code", "Exit with code 1 when findings exist").addHelpText(
     "after",
     `
 Examples:
   cloudburn scan ./main.tf
   cloudburn scan ./template.yaml
   cloudburn scan ./iac
-  cloudburn scan --live
 `
   ).action(async (path, options) => {
     try {
-      const scanner = new CloudBurnScanner();
-      const result = options.live ? await scanner.scanLive() : await scanner.scanStatic(path ?? process.cwd());
+      const scanner = new CloudBurnClient2();
+      const result = await scanner.scanStatic(path ?? process.cwd());
       const format = formatters[options.format ?? "table"];
       const output = format(result);
       process.stdout.write(`${output}
@@ -210,7 +330,8 @@ Examples:
 // src/cli.ts
 var createProgram = () => {
   const program = new Command();
-  program.name("cloudburn").description("Know what you spend. Fix what you waste.").version("0.4.1");
+  program.name("cloudburn").description("Know what you spend. Fix what you waste.").version("0.5.1");
+  registerDiscoverCommand(program);
   registerScanCommand(program);
   registerInitCommand(program);
   registerRulesListCommand(program);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cloudburn",
-  "version": "0.4.1",
+  "version": "0.5.1",
   "description": "Cloudburn CLI for cloud cost optimization",
   "type": "module",
   "bin": {
@@ -11,7 +11,7 @@
   ],
   "dependencies": {
     "commander": "^13.1.0",
-    "@cloudburn/sdk": "0.7.0"
+    "@cloudburn/sdk": "0.8.1"
   },
   "devDependencies": {
     "@biomejs/biome": "^2.4.6",