cloudburn 0.9.13 → 0.10.0

package/README.md

@@ -23,7 +23,7 @@ npx cloudburn scan ./main.tf
 
 ### Config
 
-Config is optional. By default, CloudBurn runs all checks for the mode you use.
+Config is optional. By default, CloudBurn runs the AWS Core preset for the mode you use. Account-wide rules such as `CLDBRN-AWS-TAGGING-1` are opt-in through `enabled-rules` because they require an accessible Resource Explorer aggregator.
 
 Create a starter config with:
 
@@ -67,6 +67,7 @@ cloudburn discover init
 cloudburn discover
 cloudburn discover --region eu-central-1
 cloudburn discover --config .cloudburn.yml --enabled-rules CLDBRN-AWS-EBS-1
+cloudburn discover --enabled-rules CLDBRN-AWS-TAGGING-1
 cloudburn discover --service ec2,s3
 cloudburn --debug discover --region eu-central-1
 cloudburn rules list
@@ -74,6 +75,7 @@ cloudburn rules list --service ec2 --source discovery
 ```
 
 The CLI targets one region per run. Multi-region discovery remains available through the SDK and still needs an AWS Resource Explorer aggregator plus an unfiltered default view in the aggregator region.
+`CLDBRN-AWS-TAGGING-1` is opt-in and requires an accessible aggregator; a local-only setup cannot run account-wide tagging discovery.
 Use `--debug` to print SDK and provider execution tracing to `stderr` without changing the normal `stdout` format.
 
 ## Shell Completion

package/dist/cli.js

@@ -4,6 +4,7 @@
 import { realpathSync } from "fs";
 import { resolve as resolve2 } from "path";
 import { fileURLToPath } from "url";
+import { CommanderError } from "commander";
 
 // src/completion/engine.ts
 var buildCompletionTree = (command) => {
@@ -851,8 +852,9 @@ var renderAsciiTable = (rows, columns) => {
 // src/commands/config.ts
 var CONFIG_FILENAMES = [".cloudburn.yml", ".cloudburn.yaml"];
 var starterConfig = `# Static IaC scan configuration.
-# enabled-rules restricts scans to only the listed rule IDs.
-# disabled-rules removes specific rule IDs from the active set.
+# enabled-rules replaces the AWS Core preset with only the listed rule IDs.
+# It can also activate opt-in rules that are not in AWS Core.
+# disabled-rules removes specific rule IDs from the selected set.
 # services restricts scans to rules for the listed services.
 # format sets the default output format when --format is not passed.
 iac:
@@ -1040,7 +1042,10 @@ var registerConfigCommand = (program) => {
 };
 
 // src/commands/discover.ts
-import { assertSupportedAwsRegion, CloudBurnClient } from "@cloudburn/sdk";
+import {
+  assertSupportedAwsRegion,
+  CloudBurnClient
+} from "@cloudburn/sdk";
 import { InvalidArgumentError as InvalidArgumentError3 } from "commander";
 
 // src/debug.ts
@@ -1058,6 +1063,20 @@ var resolveCliDebugLogger = (command) => {
   };
 };
 
+// src/progress.ts
+var resolveCliDiscoveryProgressLogger = (command) => {
+  if (isDebugEnabled(command) || process.stderr.isTTY !== true) {
+    return void 0;
+  }
+  return (event) => {
+    process.stderr.write(
+      event.kind === "catalog" ? `discover: catalog ready with ${event.resourceCount} resources from ${event.searchRegion}
+` : `discover: datasets ${event.completedDatasets}/${event.totalDatasets} loaded (${event.datasetKey})
+`
+    );
+  };
+};
+
 // src/commands/config-options.ts
 import { builtInRuleMetadata } from "@cloudburn/sdk";
 import { InvalidArgumentError as InvalidArgumentError2 } from "commander";
@@ -1199,11 +1218,11 @@ var registerDiscoverCommand = (program) => {
       parseAwsRegion
     ).option("--config <path>", "Explicit CloudBurn config file to load").option(
       "--enabled-rules <ruleIds>",
-      "Comma-separated rule IDs to enable. When set, CloudBurn checks only these rules. By default, all rules are enabled.",
+      "Comma-separated rule IDs to enable. When set, CloudBurn checks only these rules. By default, AWS Core preset rules are enabled.",
       parseRuleIdList
     ).option(
       "--disabled-rules <ruleIds>",
-      "Comma-separated rule IDs to disable. By default, all rules are enabled; use this to exclude specific rules.",
+      "Comma-separated rule IDs to disable from the default AWS Core preset.",
       parseRuleIdList
     ).option(
       "--service <services>",
@@ -1212,6 +1231,7 @@ var registerDiscoverCommand = (program) => {
     ).option("--exit-code", "Exit with code 1 when findings exist").action(async (options, command) => {
       await runCommand(async () => {
         const debugLogger = resolveCliDebugLogger(command);
+        const onProgress = resolveCliDiscoveryProgressLogger(command);
         const scanner = new CloudBurnClient({ debugLogger });
         const configOverride = toDiscoveryConfigOverride(options);
         const loadedConfig = await scanner.loadConfig(options.config);
@@ -1224,6 +1244,9 @@ var registerDiscoverCommand = (program) => {
         if (options.config !== void 0) {
           discoveryOptions.configPath = options.config;
         }
+        if (onProgress !== void 0) {
+          discoveryOptions.onProgress = onProgress;
+        }
         const result = await scanner.discover(discoveryOptions);
         const format = resolveOutputFormat(command, void 0, loadedConfig.discovery.format ?? "table");
         const output = renderResponse({ kind: "scan-result", result }, format);
@@ -1442,11 +1465,11 @@ var registerScanCommand = (program) => {
   setCommandExamples(
     program.command("scan").description("Run an autodetected static IaC scan").argument("[path]", "Terraform file, CloudFormation template, or directory to scan").option("--config <path>", "Explicit CloudBurn config file to load").option(
       "--enabled-rules <ruleIds>",
-      "Comma-separated rule IDs to enable. When set, CloudBurn checks only these rules. By default, all rules are enabled.",
+      "Comma-separated rule IDs to enable. When set, CloudBurn checks only these rules. By default, AWS Core preset rules are enabled.",
       parseRuleIdList
     ).option(
       "--disabled-rules <ruleIds>",
-      "Comma-separated rule IDs to disable. By default, all rules are enabled; use this to exclude specific rules.",
+      "Comma-separated rule IDs to disable from the default AWS Core preset.",
       parseRuleIdList
     ).option("--service <services>", "Comma-separated services to include in the scan rule set.", parseIaCServiceList).option("--exit-code", "Exit with code 1 when findings exist").action(async (path, options, command) => {
       try {
@@ -1491,8 +1514,9 @@ var isCliEntrypoint = (moduleUrl, argvEntry = process.argv[1]) => {
 };
 var createProgram = () => {
   const program = createCliCommand();
-  program.name("cloudburn").usage("[command]").description("Know what you spend. Fix what you waste.").version("0.9.13").option("--debug", "Write execution trace messages to stderr").option("--format <format>", OUTPUT_FORMAT_OPTION_DESCRIPTION, parseOutputFormat);
+  program.name("cloudburn").usage("[command]").description("Know what you spend. Fix what you waste.").version("0.10.0").option("--debug", "Write execution trace messages to stderr").option("--format <format>", OUTPUT_FORMAT_OPTION_DESCRIPTION, parseOutputFormat);
   configureCliHelp(program);
+  program.exitOverride();
   registerCompletionCommand(program);
   registerConfigCommand(program);
   registerDiscoverCommand(program);
@@ -1502,7 +1526,15 @@ var createProgram = () => {
   return program;
 };
 var runCli = async () => {
-  await createProgram().parseAsync(process.argv);
+  try {
+    await createProgram().parseAsync(process.argv);
+  } catch (err) {
+    if (err instanceof CommanderError) {
+      process.exitCode = err.exitCode === 0 ? EXIT_CODE_OK : EXIT_CODE_RUNTIME_ERROR;
+      return;
+    }
+    throw err;
+  }
 };
 if (isCliEntrypoint(import.meta.url)) {
   await runCli();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cloudburn",
-  "version": "0.9.13",
+  "version": "0.10.0",
   "description": "Cloudburn CLI for cloud cost optimization",
   "homepage": "https://cloudburn.io/docs",
   "bugs": {
@@ -20,7 +20,7 @@
   ],
   "dependencies": {
     "commander": "^13.1.0",
-    "@cloudburn/sdk": "0.23.1"
+    "@cloudburn/sdk": "0.24.0"
   },
   "devDependencies": {
     "@biomejs/biome": "^2.5.3",