guardian-framework 0.1.90 → 0.1.92

package/dist/cli.js

@@ -3197,7 +3197,7 @@ __export(exports_package, {
   bin: () => bin,
   author: () => author
 });
-var name = "guardian-framework", version = "0.1.90", description = "Token-optimized agentic framework scaffolder with pi-first architecture", type = "module", main = "dist/exports.js", exports, types = "dist/exports.d.ts", bin, files, engines, scripts, publishConfig, pi, repository, homepage = "https://github.com/arman-jalili/guardian-framework#readme", bugs, dependencies, devDependencies, keywords, author = "Arman Wolkensteiner-Jalili", license = "MIT", package_default;
+var name = "guardian-framework", version = "0.1.92", description = "Token-optimized agentic framework scaffolder with pi-first architecture", type = "module", main = "dist/exports.js", exports, types = "dist/exports.d.ts", bin, files, engines, scripts, publishConfig, pi, repository, homepage = "https://github.com/arman-jalili/guardian-framework#readme", bugs, dependencies, devDependencies, keywords, author = "Arman Wolkensteiner-Jalili", license = "MIT", package_default;
 var init_package = __esm(() => {
   exports = {
     ".": {

package/dist/exports.js

@@ -1982,7 +1982,7 @@ __export(exports_package, {
   bin: () => bin,
   author: () => author
 });
-var name = "guardian-framework", version = "0.1.90", description = "Token-optimized agentic framework scaffolder with pi-first architecture", type = "module", main = "dist/exports.js", exports, types = "dist/exports.d.ts", bin, files, engines, scripts, publishConfig, pi, repository, homepage = "https://github.com/arman-jalili/guardian-framework#readme", bugs, dependencies, devDependencies, keywords, author = "Arman Wolkensteiner-Jalili", license = "MIT", package_default;
+var name = "guardian-framework", version = "0.1.92", description = "Token-optimized agentic framework scaffolder with pi-first architecture", type = "module", main = "dist/exports.js", exports, types = "dist/exports.d.ts", bin, files, engines, scripts, publishConfig, pi, repository, homepage = "https://github.com/arman-jalili/guardian-framework#readme", bugs, dependencies, devDependencies, keywords, author = "Arman Wolkensteiner-Jalili", license = "MIT", package_default;
 var init_package = __esm(() => {
   exports = {
     ".": {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "guardian-framework",
-	"version": "0.1.90",
+	"version": "0.1.92",
 	"description": "Token-optimized agentic framework scaffolder with pi-first architecture",
 	"type": "module",
 	"main": "dist/exports.js",

package/templates/pi/preflight_report.json

@@ -1,5 +1,5 @@
 {
-  "timestamp": "2026-07-17T05:58:35Z",
+  "timestamp": "2026-07-17T06:31:11Z",
   "mode": "all",
   "stages_run": [],
   "summary": {
@@ -8,7 +8,7 @@
     "failed": 1,
     "skipped": 12
   },
-  "duration_seconds": 1,
+  "duration_seconds": 0,
   "results": [
   {
     "name": "check_mr_traceability.sh",

package/templates/pi/scripts/languages/python/validate-ci.sh

@@ -95,7 +95,7 @@ fi
 echo ""
 echo "--- Security Audit ---"
 if command -v pip-audit &>/dev/null && [ -f "pyproject.toml" ]; then
-    AUDIT_OUT=$(pip-audit 2>&1 || true)
+    AUDIT_OUT=$(pip-audit 2>/dev/null || true)
     if echo "$AUDIT_OUT" | grep -q "no known vulnerabilities"; then
         pass "No known vulnerabilities"
     elif echo "$AUDIT_OUT" | grep -q "Dependency not found on PyPI"; then

package/templates/pi/scripts/languages/python/validate-security.sh

@@ -44,7 +44,7 @@ fi
 echo ""
 echo "--- Dependency Audit ---"
 if command -v pip-audit &>/dev/null && [ -f "pyproject.toml" ]; then
-    AUDIT_OUT=$(pip-audit 2>&1 || true)
+    AUDIT_OUT=$(pip-audit 2>/dev/null || true)
     if echo "$AUDIT_OUT" | grep -q "no known vulnerabilities"; then
         pass "No known vulnerabilities"
     elif echo "$AUDIT_OUT" | grep -q "Dependency not found on PyPI"; then

package/templates/pi/scripts/languages/rust/validate-ci.sh

@@ -108,7 +108,7 @@ fi
 echo ""
 echo "--- Security Audit ---"
 if command -v cargo &>/dev/null && cargo audit --version &>/dev/null; then
-    AUDIT_OUT=$(cargo audit 2>&1 || true)
+    AUDIT_OUT=$(cargo audit 2>/dev/null || true)
     if echo "$AUDIT_OUT" | grep -q "No advisabilities found\|No known vulnerabilities\|info"; then
         pass "No known vulnerabilities"
     else

package/templates/pi/scripts/languages/rust/validate-security.sh

@@ -73,7 +73,7 @@ fi
 echo ""
 echo "--- Dependency Audit ---"
 if command -v cargo &>/dev/null && cargo audit --version &>/dev/null; then
-    AUDIT_OUT=$(cargo audit 2>&1 || true)
+    AUDIT_OUT=$(cargo audit 2>/dev/null || true)
     if echo "$AUDIT_OUT" | grep -qE "No advisabilities found|No known vulnerabilities"; then
         pass "No known vulnerabilities (cargo audit)"
     else

package/templates/pi/scripts/languages/typescript/validate-ci.sh

@@ -192,13 +192,16 @@ fi
 echo ""
 echo "--- Security Audit ---"
 if [ "$PKG_MGR" = "bun" ] && command -v bun &>/dev/null; then
-    AUDIT_OUT=$(bun audit 2>/dev/null || true)
-    CRITICAL_COUNT=$(echo "$AUDIT_OUT" | grep -ci "critical" 2>/dev/null || echo "0")
-    HIGH_COUNT=$(echo "$AUDIT_OUT" | grep -ci "high" 2>/dev/null || echo "0")
-    if [ "$CRITICAL_COUNT" -gt 0 ] || [ "$HIGH_COUNT" -gt 0 ]; then
+    CRITICAL_COUNT=$(bun audit 2>/dev/null | grep -ci "critical" 2>/dev/null || echo "0")
+    HIGH_COUNT=$(bun audit 2>/dev/null | grep -ci "high" 2>/dev/null || echo "0")
+    # Strip non-numeric characters (some bun versions output progress bars to stdout)
+    CRITICAL_COUNT=${CRITICAL_COUNT//[!0-9]}
+    HIGH_COUNT=${HIGH_COUNT//[!0-9]}
+    if [ "${CRITICAL_COUNT:-0}" -gt 0 ] || [ "${HIGH_COUNT:-0}" -gt 0 ]; then
         fail "Security audit found critical/high vulnerabilities"
     else
-        MODERATE_COUNT=$(echo "$AUDIT_OUT" | grep -ci "moderate" 2>/dev/null || echo "0")
+        MODERATE_COUNT=$(bun audit 2>/dev/null | grep -ci "moderate" 2>/dev/null || echo "0")
+        MODERATE_COUNT=${MODERATE_COUNT//[!0-9]}
         if [ "$MODERATE_COUNT" -gt 0 ]; then
             warn "Security audit found moderate vulnerabilities (review recommended)"
         else

package/templates/pi/scripts/languages/typescript/validate-security.sh

@@ -65,7 +65,7 @@ fi
 echo ""
 echo "--- Dependency Audit ---"
 if [ "$PKG_MGR" = "bun" ] && command -v bun &>/dev/null; then
-    AUDIT_OUT=$(bun audit 2>&1 || true)
+    AUDIT_OUT=$(bun audit 2>/dev/null || true)
     CRITICAL=$(echo "$AUDIT_OUT" | grep -ci "critical" 2>/dev/null || echo "0")
     HIGH=$(echo "$AUDIT_OUT" | grep -ci "high" 2>/dev/null || echo "0")
     if [ "$CRITICAL" -gt 0 ] || [ "$HIGH" -gt 0 ]; then
@@ -74,7 +74,7 @@ if [ "$PKG_MGR" = "bun" ] && command -v bun &>/dev/null; then
         pass "No critical/high vulnerabilities in dependencies"
     fi
 elif command -v npm &>/dev/null; then
-    AUDIT_OUT=$(npm audit 2>&1 || true)
+    AUDIT_OUT=$(npm audit 2>/dev/null || true)
     if echo "$AUDIT_OUT" | grep -q "found 0 vulnerabilities" 2>/dev/null; then
         pass "No vulnerabilities in dependencies"
     else