cloudburn 0.9.8 → 0.9.10

package/README.md

@@ -60,21 +60,21 @@ Use `discover` to run the same rules against live AWS resources.
 
 Run `cloudburn discover init` first. It automatically configures AWS Resource Explorer indexes, which CloudBurn uses as its live service catalog before it evaluates rules.
 
-By default, `cloudburn discover` runs against your active AWS region. You can pass `--region <region>` to target another region, or use `--region all` to run against all indexed regions through the AWS Resource Explorer aggregator.
+By default, `cloudburn discover` runs against your active AWS region. You can pass `--region <region>` to target one explicit region.
 
 ```bash
 cloudburn discover init
 cloudburn discover
 cloudburn discover --region eu-central-1
-cloudburn discover --region all
 cloudburn discover --config .cloudburn.yml --enabled-rules CLDBRN-AWS-EBS-1
 cloudburn discover --service ec2,s3
-cloudburn discover list-enabled-regions --format text
+cloudburn --debug discover --region eu-central-1
 cloudburn rules list
 cloudburn rules list --service ec2 --source discovery
 ```
 
-`cloudburn discover --region all` needs an AWS Resource Explorer aggregator and an unfiltered default view in the aggregator region.
+The CLI targets one region per run. Multi-region discovery remains available through the SDK and still needs an AWS Resource Explorer aggregator plus an unfiltered default view in the aggregator region.
+Use `--debug` to print SDK and provider execution tracing to `stderr` without changing the normal `stdout` format.
 
 ## Shell Completion
 

package/dist/cli.js

@@ -557,6 +557,15 @@ var scanColumns = [
   { key: "column", header: "Column" },
   { key: "message", header: "Message" }
 ];
+var diagnosticColumns = [
+  { key: "provider", header: "Provider" },
+  { key: "status", header: "Status" },
+  { key: "ruleId", header: "RuleId" },
+  { key: "source", header: "Source" },
+  { key: "service", header: "Service" },
+  { key: "region", header: "Region" },
+  { key: "message", header: "Message" }
+];
 var ruleListColumns = [
   { key: "ruleId", header: "RuleId" },
   { key: "provider", header: "Provider" },
@@ -637,8 +646,22 @@ ${regionsTable}`;
     case "rule-list":
       return renderRuleTable(response.rules, response.emptyMessage);
     case "scan-result": {
-      const rows = projectScanRows(response.result);
-      return rows.length === 0 ? "No findings." : renderAsciiTable(rows, scanColumns);
+      const findingRows = projectFindingRows(response.result);
+      const diagnosticRows = projectDiagnosticRows(response.result);
+      if (findingRows.length === 0 && diagnosticRows.length === 0) {
+        return "No findings.";
+      }
+      if (findingRows.length === 0) {
+        return `Diagnostics
+${renderAsciiTable(diagnosticRows, diagnosticColumns)}`;
+      }
+      if (diagnosticRows.length === 0) {
+        return renderAsciiTable(findingRows, scanColumns);
+      }
+      return `${renderAsciiTable(findingRows, scanColumns)}
+
+Diagnostics
+${renderAsciiTable(diagnosticRows, diagnosticColumns)}`;
     }
     case "status":
       return renderAsciiTable(
@@ -655,34 +678,28 @@ ${regionsTable}`;
       );
   }
 };
-var projectScanRows = (result) => [
-  ...flattenScanResult(result).map(({ finding, message, provider, ruleId, service, source }) => ({
-    accountId: finding.accountId ?? "",
-    message,
-    path: finding.location?.path ?? "",
-    provider,
-    region: finding.region ?? "",
-    resourceId: finding.resourceId,
-    ruleId,
-    service,
-    source,
-    column: finding.location?.column ?? "",
-    line: finding.location?.line ?? ""
-  })),
-  ...getScanDiagnostics(result).map((diagnostic) => ({
-    accountId: "",
-    column: "",
-    line: "",
-    message: diagnostic.message,
-    path: "",
-    provider: diagnostic.provider,
-    region: diagnostic.region ?? "",
-    resourceId: "",
-    ruleId: "",
-    service: diagnostic.service,
-    source: diagnostic.source
-  }))
-];
+var projectFindingRows = (result) => flattenScanResult(result).map(({ finding, message, provider, ruleId, service, source }) => ({
+  accountId: finding.accountId ?? "",
+  message,
+  path: finding.location?.path ?? "",
+  provider,
+  region: finding.region ?? "",
+  resourceId: finding.resourceId,
+  ruleId,
+  service,
+  source,
+  column: finding.location?.column ?? "",
+  line: finding.location?.line ?? ""
+}));
+var projectDiagnosticRows = (result) => getScanDiagnostics(result).map((diagnostic) => ({
+  message: diagnostic.message,
+  provider: diagnostic.provider,
+  region: diagnostic.region ?? "",
+  ruleId: diagnostic.ruleId ?? "",
+  service: diagnostic.service,
+  source: diagnostic.source,
+  status: diagnostic.status
+}));
 var inferColumns = (rows) => {
   const keys = Array.from(new Set(rows.flatMap((row) => Object.keys(row)))).sort(
     (left, right) => left.localeCompare(right)
@@ -1023,9 +1040,24 @@ var registerConfigCommand = (program) => {
 };
 
 // src/commands/discover.ts
-import { assertValidAwsRegion, CloudBurnClient } from "@cloudburn/sdk";
+import { assertSupportedAwsRegion, CloudBurnClient } from "@cloudburn/sdk";
 import { InvalidArgumentError as InvalidArgumentError3 } from "commander";
 
+// src/debug.ts
+var isDebugEnabled = (command) => {
+  const options = command.optsWithGlobals();
+  return options.debug === true;
+};
+var resolveCliDebugLogger = (command) => {
+  if (!isDebugEnabled(command)) {
+    return void 0;
+  }
+  return (message) => {
+    process.stderr.write(`[debug] ${message}
+`);
+  };
+};
+
 // src/commands/config-options.ts
 import { builtInRuleMetadata } from "@cloudburn/sdk";
 import { InvalidArgumentError as InvalidArgumentError2 } from "commander";
@@ -1119,18 +1151,25 @@ var buildInitializationStatusData = (result, message, format) => {
 };
 var parseAwsRegion = (value) => {
   try {
-    return assertValidAwsRegion(value);
+    return assertSupportedAwsRegion(value);
   } catch (err) {
     throw new InvalidArgumentError3(err instanceof Error ? err.message : "Invalid AWS region.");
   }
 };
-var parseDiscoverRegion = (value) => {
-  if (value === "all") {
-    return value;
+var resolveDiscoveryTarget = (region) => region === void 0 ? { mode: "current" } : { mode: "regions", regions: [region] };
+var resolveNestedRegionOption = (command, subcommandName) => {
+  const rootCommand = command.parent?.parent;
+  const rawArgs = rootCommand?.rawArgs ?? [];
+  const subcommandIndex = rawArgs.lastIndexOf(subcommandName);
+  if (subcommandIndex === -1) {
+    return void 0;
   }
-  return parseAwsRegion(value);
+  const optionIndex = rawArgs.indexOf("--region", subcommandIndex + 1);
+  if (optionIndex === -1 || optionIndex + 1 >= rawArgs.length) {
+    return void 0;
+  }
+  return rawArgs[optionIndex + 1];
 };
-var resolveDiscoveryTarget = (region) => region === void 0 ? { mode: "current" } : region === "all" ? { mode: "all" } : { mode: "region", region };
 var toDiscoveryConfigOverride = (options) => {
   if (options.enabledRules === void 0 && options.disabledRules === void 0 && options.service === void 0) {
     return void 0;
@@ -1154,10 +1193,10 @@ var runCommand = async (action) => {
 };
 var registerDiscoverCommand = (program) => {
   const discoverCommand = setCommandExamples(
-    program.command("discover").description("Run a live AWS discovery").enablePositionalOptions().option(
+    program.command("discover").description("Run a live AWS discovery").option(
       "--region <region>",
-      'Discovery region to use. Defaults to the current AWS region from AWS_REGION; use this flag to override it. Pass "all" to check resources in all regions that are indexed in AWS Resource Explorer.',
-      parseDiscoverRegion
+      "AWS region to discover. Defaults to the current AWS region from AWS_REGION when omitted.",
+      parseAwsRegion
     ).option("--config <path>", "Explicit CloudBurn config file to load").option(
       "--enabled-rules <ruleIds>",
       "Comma-separated rule IDs to enable. When set, CloudBurn checks only these rules. By default, all rules are enabled.",
@@ -1172,7 +1211,8 @@ var registerDiscoverCommand = (program) => {
       parseDiscoveryServiceList
     ).option("--exit-code", "Exit with code 1 when findings exist").action(async (options, command) => {
       await runCommand(async () => {
-        const scanner = new CloudBurnClient();
+        const debugLogger = resolveCliDebugLogger(command);
+        const scanner = new CloudBurnClient({ debugLogger });
         const configOverride = toDiscoveryConfigOverride(options);
         const loadedConfig = await scanner.loadConfig(options.config);
         const discoveryOptions = {
@@ -1198,18 +1238,15 @@ var registerDiscoverCommand = (program) => {
     [
       "cloudburn discover",
       "cloudburn discover --region eu-central-1",
-      "cloudburn discover --region all",
       "cloudburn discover status",
-      "cloudburn discover list-enabled-regions",
       "cloudburn discover init"
     ]
   );
   discoverCommand.command("status").description("Show Resource Explorer status across all enabled AWS regions").action(async (_options, command) => {
     await runCommand(async () => {
-      const scanner = new CloudBurnClient();
-      const parentRegion = discoverCommand.opts().region;
-      const region = parentRegion === "all" ? void 0 : parentRegion;
-      const status = await scanner.getDiscoveryStatus({ region });
+      const debugLogger = resolveCliDebugLogger(command);
+      const scanner = new CloudBurnClient({ debugLogger });
+      const status = await scanner.getDiscoveryStatus({ region: void 0 });
       const format = resolveOutputFormat(command);
       const rows = format === "json" ? status.regions.map((regionStatus) => ({
         ...regionStatus,
@@ -1252,28 +1289,6 @@ var registerDiscoverCommand = (program) => {
         format
       );
       process.stdout.write(`${output}
-`);
-      return EXIT_CODE_OK;
-    });
-  });
-  discoverCommand.command("list-enabled-regions").description("List AWS regions with a local or aggregator Resource Explorer index").action(async (_options, command) => {
-    await runCommand(async () => {
-      const scanner = new CloudBurnClient();
-      const regions = await scanner.listEnabledDiscoveryRegions();
-      const format = resolveOutputFormat(command);
-      const output = renderResponse(
-        {
-          kind: "record-list",
-          columns: [
-            { key: "region", header: "Region" },
-            { key: "type", header: "Type" }
-          ],
-          emptyMessage: "No Resource Explorer indexes are enabled.",
-          rows: regions
-        },
-        format
-      );
-      process.stdout.write(`${output}
 `);
       return EXIT_CODE_OK;
     });
@@ -1284,9 +1299,9 @@ var registerDiscoverCommand = (program) => {
     parseAwsRegion
   ).action(async (options, command) => {
     await runCommand(async () => {
-      const scanner = new CloudBurnClient();
-      const parentRegion = discoverCommand.opts().region;
-      const region = options.region ?? (parentRegion === "all" ? void 0 : parentRegion);
+      const debugLogger = resolveCliDebugLogger(command);
+      const scanner = new CloudBurnClient({ debugLogger });
+      const region = options.region ?? resolveNestedRegionOption(command, "init");
       const result = await scanner.initializeDiscovery({ region });
       const message = describeInitializationMessage(result);
       const format = resolveOutputFormat(command);
@@ -1304,7 +1319,8 @@ var registerDiscoverCommand = (program) => {
   });
   discoverCommand.command("supported-resource-types").description("List Resource Explorer supported AWS resource types").action(async (_options, command) => {
     await runCommand(async () => {
-      const scanner = new CloudBurnClient();
+      const debugLogger = resolveCliDebugLogger(command);
+      const scanner = new CloudBurnClient({ debugLogger });
       const resourceTypes = await scanner.listSupportedDiscoveryResourceTypes();
       const format = resolveOutputFormat(command);
       const output = renderResponse(
@@ -1434,7 +1450,8 @@ var registerScanCommand = (program) => {
       parseRuleIdList
     ).option("--service <services>", "Comma-separated services to include in the scan rule set.", parseIaCServiceList).option("--exit-code", "Exit with code 1 when findings exist").action(async (path, options, command) => {
       try {
-        const scanner = new CloudBurnClient2();
+        const debugLogger = resolveCliDebugLogger(command);
+        const scanner = new CloudBurnClient2({ debugLogger });
         const configOverride = toScanConfigOverride(options);
         const loadedConfig = await scanner.loadConfig(options.config);
         const scanPath = path ?? process.cwd();
@@ -1474,7 +1491,7 @@ var isCliEntrypoint = (moduleUrl, argvEntry = process.argv[1]) => {
 };
 var createProgram = () => {
   const program = createCliCommand();
-  program.name("cloudburn").usage("[command]").description("Know what you spend. Fix what you waste.").version("0.9.8").option("--format <format>", OUTPUT_FORMAT_OPTION_DESCRIPTION, parseOutputFormat);
+  program.name("cloudburn").usage("[command]").description("Know what you spend. Fix what you waste.").version("0.9.10").option("--debug", "Write execution trace messages to stderr").option("--format <format>", OUTPUT_FORMAT_OPTION_DESCRIPTION, parseOutputFormat);
   configureCliHelp(program);
   registerCompletionCommand(program);
   registerConfigCommand(program);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cloudburn",
-  "version": "0.9.8",
+  "version": "0.9.10",
   "description": "Cloudburn CLI for cloud cost optimization",
   "homepage": "https://cloudburn.io/docs",
   "bugs": {
@@ -20,7 +20,7 @@
   ],
   "dependencies": {
     "commander": "^13.1.0",
-    "@cloudburn/sdk": "0.21.0"
+    "@cloudburn/sdk": "0.21.2"
   },
   "devDependencies": {
     "@biomejs/biome": "^2.4.6",