infrawise 0.8.2 → 0.8.3

package/dist/cli/commands/analyze.js

@@ -39,7 +39,9 @@ function buildMarkdownReport(findings, projectName) {
         renderGroup('Verify (check intent)', '🔵', verify),
         '',
         '_Generated by [infrawise](https://github.com/Sidd27/infrawise) — MCP server for AWS infrastructure analysis_',
-    ].filter((l) => l !== undefined).join('\n');
+    ]
+        .filter((l) => l !== undefined)
+        .join('\n');
 }
 function mkSpinner(text) {
     return ora({ text: chalk.dim(text), color: 'cyan' }).start();
@@ -56,8 +58,12 @@ export async function runAnalyze(options = {}) {
         process.exit(1);
     }
     const repoPath = options.repo ?? process.cwd();
-    const minSeverity = options.severity ? SEVERITY_ORDER[options.severity] ?? 1 : 0;
-    const awsCfg = { region: config.aws?.region, profile: config.aws?.profile, endpoint: config.aws?.endpoint };
+    const minSeverity = options.severity ? (SEVERITY_ORDER[options.severity] ?? 1) : 0;
+    const awsCfg = {
+        region: config.aws?.region,
+        profile: config.aws?.profile,
+        endpoint: config.aws?.endpoint,
+    };
     const dynamoMeta = [];
     const postgresMeta = [];
     const mysqlMeta = [];
@@ -72,7 +78,8 @@ export async function runAnalyze(options = {}) {
             s.succeed(chalk.green('DynamoDB') + chalk.dim(`  ${result.length} table(s)`));
         }
         catch (err) {
-            s.warn(chalk.yellow('DynamoDB skipped') + chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
+            s.warn(chalk.yellow('DynamoDB skipped') +
+                chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
         }
     }
     // ── PostgreSQL ──────────────────────────────────────────────────────────────
@@ -84,7 +91,8 @@ export async function runAnalyze(options = {}) {
             s.succeed(chalk.green('PostgreSQL') + chalk.dim(`  ${result.length} table(s)`));
         }
         catch (err) {
-            s.warn(chalk.yellow('PostgreSQL skipped') + chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
+            s.warn(chalk.yellow('PostgreSQL skipped') +
+                chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
         }
     }
     // ── MySQL ───────────────────────────────────────────────────────────────────
@@ -96,7 +104,8 @@ export async function runAnalyze(options = {}) {
             s.succeed(chalk.green('MySQL') + chalk.dim(`  ${result.length} table(s)`));
         }
         catch (err) {
-            s.warn(chalk.yellow('MySQL skipped') + chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
+            s.warn(chalk.yellow('MySQL skipped') +
+                chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
         }
     }
     // ── MongoDB ─────────────────────────────────────────────────────────────────
@@ -108,7 +117,8 @@ export async function runAnalyze(options = {}) {
             s.succeed(chalk.green('MongoDB') + chalk.dim(`  ${result.length} collection(s)`));
         }
         catch (err) {
-            s.warn(chalk.yellow('MongoDB skipped') + chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
+            s.warn(chalk.yellow('MongoDB skipped') +
+                chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
         }
     }
     // ── SQS ─────────────────────────────────────────────────────────────────────
@@ -120,7 +130,8 @@ export async function runAnalyze(options = {}) {
             s.succeed(chalk.green('SQS') + chalk.dim(`  ${result.length} queue(s)`));
         }
         catch (err) {
-            s.warn(chalk.yellow('SQS skipped') + chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
+            s.warn(chalk.yellow('SQS skipped') +
+                chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
         }
     }
     // ── SNS ─────────────────────────────────────────────────────────────────────
@@ -132,7 +143,8 @@ export async function runAnalyze(options = {}) {
             s.succeed(chalk.green('SNS') + chalk.dim(`  ${result.length} topic(s)`));
         }
         catch (err) {
-            s.warn(chalk.yellow('SNS skipped') + chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
+            s.warn(chalk.yellow('SNS skipped') +
+                chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
         }
     }
     // ── SSM Parameter Store ──────────────────────────────────────────────────────
@@ -141,10 +153,13 @@ export async function runAnalyze(options = {}) {
         try {
             const result = await extractSSMMetadata({ ...awsCfg, paths: config.ssm?.paths });
             servicesMeta.ssm = result;
-            s.succeed(chalk.green('SSM') + chalk.dim(`  ${result.length} parameter(s)  `) + chalk.dim('(metadata only, no values)'));
+            s.succeed(chalk.green('SSM') +
+                chalk.dim(`  ${result.length} parameter(s)  `) +
+                chalk.dim('(metadata only, no values)'));
         }
         catch (err) {
-            s.warn(chalk.yellow('SSM skipped') + chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
+            s.warn(chalk.yellow('SSM skipped') +
+                chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
         }
     }
     // ── Secrets Manager ──────────────────────────────────────────────────────────
@@ -153,10 +168,13 @@ export async function runAnalyze(options = {}) {
         try {
             const result = await extractSecretsMetadata(awsCfg);
             servicesMeta.secrets = result;
-            s.succeed(chalk.green('Secrets Manager') + chalk.dim(`  ${result.length} secret(s)  `) + chalk.dim('(names/rotation only, no values)'));
+            s.succeed(chalk.green('Secrets Manager') +
+                chalk.dim(`  ${result.length} secret(s)  `) +
+                chalk.dim('(names/rotation only, no values)'));
         }
         catch (err) {
-            s.warn(chalk.yellow('Secrets Manager skipped') + chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
+            s.warn(chalk.yellow('Secrets Manager skipped') +
+                chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
         }
     }
     // ── Lambda ───────────────────────────────────────────────────────────────────
@@ -168,7 +186,8 @@ export async function runAnalyze(options = {}) {
             s.succeed(chalk.green('Lambda') + chalk.dim(`  ${result.length} function(s)`));
         }
         catch (err) {
-            s.warn(chalk.yellow('Lambda skipped') + chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
+            s.warn(chalk.yellow('Lambda skipped') +
+                chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
         }
     }
     // ── EventBridge ──────────────────────────────────────────────────────────────
@@ -180,7 +199,8 @@ export async function runAnalyze(options = {}) {
             s.succeed(chalk.green('EventBridge') + chalk.dim(`  ${result.length} rule(s)`));
         }
         catch (err) {
-            s.warn(chalk.yellow('EventBridge skipped') + chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
+            s.warn(chalk.yellow('EventBridge skipped') +
+                chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
         }
     }
     // ── RDS ──────────────────────────────────────────────────────────────────────
@@ -192,7 +212,8 @@ export async function runAnalyze(options = {}) {
             s.succeed(chalk.green('RDS') + chalk.dim(`  ${result.length} instance(s)`));
         }
         catch (err) {
-            s.warn(chalk.yellow('RDS skipped') + chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
+            s.warn(chalk.yellow('RDS skipped') +
+                chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
         }
     }
     // ── S3 ────────────────────────────────────────────────────────────────────────
@@ -204,7 +225,8 @@ export async function runAnalyze(options = {}) {
             s.succeed(chalk.green('S3') + chalk.dim(`  ${result.length} bucket(s)`));
         }
         catch (err) {
-            s.warn(chalk.yellow('S3 skipped') + chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
+            s.warn(chalk.yellow('S3 skipped') +
+                chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
         }
     }
     // ── CloudWatch Logs ──────────────────────────────────────────────────────────
@@ -218,10 +240,12 @@ export async function runAnalyze(options = {}) {
             });
             servicesMeta.logs = result;
             const errorGroups = result.filter((lg) => lg.errorCount > 0).length;
-            s.succeed(chalk.green('CloudWatch Logs') + chalk.dim(`  ${result.length} group(s), ${errorGroups} with errors`));
+            s.succeed(chalk.green('CloudWatch Logs') +
+                chalk.dim(`  ${result.length} group(s), ${errorGroups} with errors`));
         }
         catch (err) {
-            s.warn(chalk.yellow('CloudWatch Logs skipped') + chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
+            s.warn(chalk.yellow('CloudWatch Logs skipped') +
+                chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
         }
     }
     // ── IaC schema (Terraform / CloudFormation / CDK) ────────────────────────────
@@ -230,16 +254,23 @@ export async function runAnalyze(options = {}) {
         const s = mkSpinner('Extracting IaC schema (Terraform / CloudFormation / CDK)...');
         try {
             const iacSchema = await extractIaCSchema(repoPath);
-            const total = iacSchema.dynamoTables.length + iacSchema.rdsInstances.length +
-                iacSchema.mongoClusters.length + iacSchema.queues.length + iacSchema.topics.length +
-                iacSchema.lambdas.length + iacSchema.buckets.length + iacSchema.parameters.length +
-                iacSchema.secrets.length + iacSchema.apiGateways.length;
+            const total = iacSchema.dynamoTables.length +
+                iacSchema.rdsInstances.length +
+                iacSchema.mongoClusters.length +
+                iacSchema.queues.length +
+                iacSchema.topics.length +
+                iacSchema.lambdas.length +
+                iacSchema.buckets.length +
+                iacSchema.parameters.length +
+                iacSchema.secrets.length +
+                iacSchema.apiGateways.length;
             iacDriftAnalyzer = new IaCDriftAnalyzer();
             iacDriftAnalyzer.setIaCSchema(iacSchema);
             s.succeed(chalk.green('IaC schema') + chalk.dim(`  ${total} resource(s) across TF/CFN/CDK`));
         }
         catch (err) {
-            s.warn(chalk.yellow('IaC scan skipped') + chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
+            s.warn(chalk.yellow('IaC scan skipped') +
+                chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
         }
     }
     // ── Repository scan ──────────────────────────────────────────────────────────
@@ -248,10 +279,12 @@ export async function runAnalyze(options = {}) {
         const s = mkSpinner(`Scanning ${path.basename(repoPath)} for service usage...`);
         try {
             operations = await scanRepository(repoPath);
-            s.succeed(chalk.green('Repository scanned') + chalk.dim(`  ${operations.length} service operation(s) found`));
+            s.succeed(chalk.green('Repository scanned') +
+                chalk.dim(`  ${operations.length} service operation(s) found`));
         }
         catch (err) {
-            s.warn(chalk.yellow('Repository scan failed') + chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
+            s.warn(chalk.yellow('Repository scan failed') +
+                chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
             operations = [];
         }
     }
@@ -260,59 +293,58 @@ export async function runAnalyze(options = {}) {
     {
         const s = mkSpinner('Building infrastructure graph...');
         graph = buildGraph(operations, dynamoMeta, postgresMeta, mysqlMeta, mongoMeta, servicesMeta);
-        s.succeed(chalk.green('Graph built') + chalk.dim(`  ${graph.nodes.length} nodes, ${graph.edges.length} edges`));
+        s.succeed(chalk.green('Graph built') +
+            chalk.dim(`  ${graph.nodes.length} nodes, ${graph.edges.length} edges`));
     }
     // ── Run analyzers ────────────────────────────────────────────────────────────
     let findings;
     {
         const s = mkSpinner('Running analyzers...');
         const analyzers = [
-            ...(config.dynamodb?.enabled === true ? [
-                new FullTableScanAnalyzer(),
-                new MissingGSIAnalyzer(),
-                new HotPartitionAnalyzer(),
-            ] : []),
-            ...(config.postgres?.enabled ? [
-                new MissingIndexAnalyzer(),
-                new NplusOneAnalyzer(),
-                new LargeSelectAnalyzer(),
-            ] : []),
-            ...(config.mysql?.enabled ? [
-                new MissingMySQLIndexAnalyzer(),
-                new MySQLFullTableScanAnalyzer(),
-            ] : []),
-            ...(config.mongodb?.enabled ? [
-                new MissingMongoIndexAnalyzer(),
-                new MongoCollectionScanAnalyzer(),
-            ] : []),
-            ...(config.sqs?.enabled === true ? [
-                new MissingDLQAnalyzer(),
-                new UnencryptedQueueAnalyzer(),
-                new LargeQueueBacklogAnalyzer(),
-            ] : []),
-            ...(config.secretsManager?.enabled === true ? [
-                new MissingSecretRotationAnalyzer(),
-            ] : []),
-            ...(config.cloudwatchLogs?.enabled ? [
-                new MissingLogRetentionAnalyzer(),
-            ] : []),
-            ...(config.lambda?.enabled === true ? [
-                new LambdaDefaultMemoryAnalyzer(),
-                new LambdaHighTimeoutAnalyzer(),
-                new LambdaMissingTriggerDLQAnalyzer(),
-            ] : []),
-            ...(config.rds?.enabled === true ? [
-                new RDSPubliclyAccessibleAnalyzer(),
-                new RDSNoBackupAnalyzer(),
-                new RDSUnencryptedAnalyzer(),
-                new RDSNoDeletionProtectionAnalyzer(),
-                new RDSNoMultiAZAnalyzer(),
-            ] : []),
-            ...(config.s3?.enabled === true ? [
-                new S3PublicAccessAnalyzer(),
-                new S3MissingVersioningAnalyzer(),
-                new S3UnencryptedAnalyzer(),
-            ] : []),
+            ...(config.dynamodb?.enabled === true
+                ? [new FullTableScanAnalyzer(), new MissingGSIAnalyzer(), new HotPartitionAnalyzer()]
+                : []),
+            ...(config.postgres?.enabled
+                ? [new MissingIndexAnalyzer(), new NplusOneAnalyzer(), new LargeSelectAnalyzer()]
+                : []),
+            ...(config.mysql?.enabled
+                ? [new MissingMySQLIndexAnalyzer(), new MySQLFullTableScanAnalyzer()]
+                : []),
+            ...(config.mongodb?.enabled
+                ? [new MissingMongoIndexAnalyzer(), new MongoCollectionScanAnalyzer()]
+                : []),
+            ...(config.sqs?.enabled === true
+                ? [
+                    new MissingDLQAnalyzer(),
+                    new UnencryptedQueueAnalyzer(),
+                    new LargeQueueBacklogAnalyzer(),
+                ]
+                : []),
+            ...(config.secretsManager?.enabled === true ? [new MissingSecretRotationAnalyzer()] : []),
+            ...(config.cloudwatchLogs?.enabled ? [new MissingLogRetentionAnalyzer()] : []),
+            ...(config.lambda?.enabled === true
+                ? [
+                    new LambdaDefaultMemoryAnalyzer(),
+                    new LambdaHighTimeoutAnalyzer(),
+                    new LambdaMissingTriggerDLQAnalyzer(),
+                ]
+                : []),
+            ...(config.rds?.enabled === true
+                ? [
+                    new RDSPubliclyAccessibleAnalyzer(),
+                    new RDSNoBackupAnalyzer(),
+                    new RDSUnencryptedAnalyzer(),
+                    new RDSNoDeletionProtectionAnalyzer(),
+                    new RDSNoMultiAZAnalyzer(),
+                ]
+                : []),
+            ...(config.s3?.enabled === true
+                ? [
+                    new S3PublicAccessAnalyzer(),
+                    new S3MissingVersioningAnalyzer(),
+                    new S3UnencryptedAnalyzer(),
+                ]
+                : []),
             ...(iacDriftAnalyzer ? [iacDriftAnalyzer] : []),
         ];
         findings = await runAllAnalyzers(graph, analyzers);
@@ -322,14 +354,22 @@ export async function runAnalyze(options = {}) {
     writeCache('graph', graph);
     writeCache('findings', findings);
     writeCache('operations', operations);
-    writeCache('meta', { dynamoMeta, postgresMeta, mysqlMeta, mongoMeta, servicesMeta });
+    writeCache('meta', {
+        dynamoMeta,
+        postgresMeta,
+        mysqlMeta,
+        mongoMeta,
+        servicesMeta,
+    });
     // ── Output ────────────────────────────────────────────────────────────────────
     const displayFindings = minSeverity > 0
         ? findings.filter((f) => (SEVERITY_ORDER[f.severity] ?? 0) >= minSeverity)
         : findings;
     console.log('');
     if (displayFindings.length === 0) {
-        const msg = minSeverity > 0 ? `No ${options.severity} (or higher) severity issues found.` : 'Your infrastructure looks clean.';
+        const msg = minSeverity > 0
+            ? `No ${options.severity} (or higher) severity issues found.`
+            : 'Your infrastructure looks clean.';
         console.log(`  ${chalk.green.bold('✓ No issues found!')}  ${chalk.dim(msg)}`);
     }
     else {
@@ -380,35 +420,42 @@ export async function runCodeRefresh(repoPath, config) {
     }
     const graph = buildGraph(operations, dynamoMeta, postgresMeta, mysqlMeta, mongoMeta, servicesMeta);
     const analyzers = [
-        ...(config.dynamodb?.enabled === true ? [
-            new FullTableScanAnalyzer(), new MissingGSIAnalyzer(), new HotPartitionAnalyzer(),
-        ] : []),
-        ...(config.postgres?.enabled ? [
-            new MissingIndexAnalyzer(), new NplusOneAnalyzer(), new LargeSelectAnalyzer(),
-        ] : []),
-        ...(config.mysql?.enabled ? [
-            new MissingMySQLIndexAnalyzer(), new MySQLFullTableScanAnalyzer(),
-        ] : []),
-        ...(config.mongodb?.enabled ? [
-            new MissingMongoIndexAnalyzer(), new MongoCollectionScanAnalyzer(),
-        ] : []),
-        ...(config.sqs?.enabled === true ? [
-            new MissingDLQAnalyzer(), new UnencryptedQueueAnalyzer(), new LargeQueueBacklogAnalyzer(),
-        ] : []),
+        ...(config.dynamodb?.enabled === true
+            ? [new FullTableScanAnalyzer(), new MissingGSIAnalyzer(), new HotPartitionAnalyzer()]
+            : []),
+        ...(config.postgres?.enabled
+            ? [new MissingIndexAnalyzer(), new NplusOneAnalyzer(), new LargeSelectAnalyzer()]
+            : []),
+        ...(config.mysql?.enabled
+            ? [new MissingMySQLIndexAnalyzer(), new MySQLFullTableScanAnalyzer()]
+            : []),
+        ...(config.mongodb?.enabled
+            ? [new MissingMongoIndexAnalyzer(), new MongoCollectionScanAnalyzer()]
+            : []),
+        ...(config.sqs?.enabled === true
+            ? [new MissingDLQAnalyzer(), new UnencryptedQueueAnalyzer(), new LargeQueueBacklogAnalyzer()]
+            : []),
         ...(config.secretsManager?.enabled === true ? [new MissingSecretRotationAnalyzer()] : []),
         ...(config.cloudwatchLogs?.enabled ? [new MissingLogRetentionAnalyzer()] : []),
-        ...(config.lambda?.enabled === true ? [
-            new LambdaDefaultMemoryAnalyzer(), new LambdaHighTimeoutAnalyzer(),
-        ] : []),
-        ...(config.rds?.enabled === true ? [
-            new RDSPubliclyAccessibleAnalyzer(), new RDSNoBackupAnalyzer(), new RDSUnencryptedAnalyzer(),
-            new RDSNoDeletionProtectionAnalyzer(), new RDSNoMultiAZAnalyzer(),
-        ] : []),
-        ...(config.s3?.enabled === true ? [
-            new S3PublicAccessAnalyzer(),
-            new S3MissingVersioningAnalyzer(),
-            new S3UnencryptedAnalyzer(),
-        ] : []),
+        ...(config.lambda?.enabled === true
+            ? [new LambdaDefaultMemoryAnalyzer(), new LambdaHighTimeoutAnalyzer()]
+            : []),
+        ...(config.rds?.enabled === true
+            ? [
+                new RDSPubliclyAccessibleAnalyzer(),
+                new RDSNoBackupAnalyzer(),
+                new RDSUnencryptedAnalyzer(),
+                new RDSNoDeletionProtectionAnalyzer(),
+                new RDSNoMultiAZAnalyzer(),
+            ]
+            : []),
+        ...(config.s3?.enabled === true
+            ? [
+                new S3PublicAccessAnalyzer(),
+                new S3MissingVersioningAnalyzer(),
+                new S3UnencryptedAnalyzer(),
+            ]
+            : []),
         ...(iacDriftAnalyzer ? [iacDriftAnalyzer] : []),
     ];
     const findings = await runAllAnalyzers(graph, analyzers);

package/dist/cli/commands/auth.js

@@ -25,7 +25,10 @@ export async function runAuth() {
         },
     ]);
     console.log('');
-    const spin = ora({ text: chalk.dim(`Validating "${selectedProfile}"...`), color: 'cyan' }).start();
+    const spin = ora({
+        text: chalk.dim(`Validating "${selectedProfile}"...`),
+        color: 'cyan',
+    }).start();
     const testConfig = {
         project: 'auth-test',
         aws: { profile: selectedProfile, region: 'us-east-1' },

package/dist/cli/commands/dev.js

@@ -147,10 +147,12 @@ export async function runDev(options = {}) {
                 try {
                     const { graph, findings } = await runCodeRefresh(repoPath, config);
                     setGraphState(graph, findings, config);
-                    spin.succeed(chalk.green('Analysis refreshed') + chalk.dim(`  ${graph.nodes.length} nodes · ${findings.length} finding(s)`));
+                    spin.succeed(chalk.green('Analysis refreshed') +
+                        chalk.dim(`  ${graph.nodes.length} nodes · ${findings.length} finding(s)`));
                 }
                 catch (err) {
-                    spin.warn(chalk.yellow('Refresh failed') + chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
+                    spin.warn(chalk.yellow('Refresh failed') +
+                        chalk.dim(`  ${err instanceof Error ? err.message : String(err)}`));
                 }
                 finally {
                     refreshing = false;

package/dist/cli/commands/doctor.js

@@ -58,7 +58,9 @@ export async function runDoctor(options = {}) {
         }
         catch (err) {
             return {
-                name: 'Config validation', status: 'fail', message: 'Invalid config',
+                name: 'Config validation',
+                status: 'fail',
+                message: 'Invalid config',
                 detail: err instanceof Error ? err.message : String(err),
             };
         }
@@ -75,7 +77,11 @@ export async function runDoctor(options = {}) {
             detail: hasCreds ? undefined : 'Run: aws configure',
         };
     }));
-    const awsCfg = { region: config?.aws?.region, profile: config?.aws?.profile, endpoint: config?.aws?.endpoint };
+    const awsCfg = {
+        region: config?.aws?.region,
+        profile: config?.aws?.profile,
+        endpoint: config?.aws?.endpoint,
+    };
     // DynamoDB
     results.push(await runCheck('Testing DynamoDB access...', async () => {
         if (!config)
@@ -84,11 +90,16 @@ export async function runDoctor(options = {}) {
             return { name: 'DynamoDB', status: 'skip', message: 'Disabled in config' };
         try {
             await probeDynamoAccess(config);
-            return { name: 'DynamoDB', status: 'pass', message: `Connected (profile: ${config.aws?.profile ?? 'default'})` };
+            return {
+                name: 'DynamoDB',
+                status: 'pass',
+                message: `Connected (profile: ${config.aws?.profile ?? 'default'})`,
+            };
         }
         catch (err) {
             return {
-                name: 'DynamoDB', status: 'warn',
+                name: 'DynamoDB',
+                status: 'warn',
                 message: err instanceof Error ? err.message : String(err),
                 detail: 'Check IAM: dynamodb:ListTables, dynamodb:DescribeTable',
             };
@@ -104,7 +115,8 @@ export async function runDoctor(options = {}) {
         }
         catch (err) {
             return {
-                name: 'SQS', status: 'warn',
+                name: 'SQS',
+                status: 'warn',
                 message: err instanceof Error ? err.message : String(err),
                 detail: 'Check IAM: sqs:ListQueues, sqs:GetQueueAttributes',
             };
@@ -120,7 +132,8 @@ export async function runDoctor(options = {}) {
         }
         catch (err) {
             return {
-                name: 'SNS', status: 'warn',
+                name: 'SNS',
+                status: 'warn',
                 message: err instanceof Error ? err.message : String(err),
                 detail: 'Check IAM: sns:ListTopics, sns:GetTopicAttributes, sns:ListSubscriptionsByTopic',
             };
@@ -136,7 +149,8 @@ export async function runDoctor(options = {}) {
         }
         catch (err) {
             return {
-                name: 'SSM', status: 'warn',
+                name: 'SSM',
+                status: 'warn',
                 message: err instanceof Error ? err.message : String(err),
                 detail: 'Check IAM: ssm:DescribeParameters',
             };
@@ -148,11 +162,16 @@ export async function runDoctor(options = {}) {
             return { name: 'Secrets Manager', status: 'skip', message: 'Disabled in config' };
         try {
             await validateSecretsAccess(awsCfg);
-            return { name: 'Secrets Manager', status: 'pass', message: 'Connected (names/rotation only)' };
+            return {
+                name: 'Secrets Manager',
+                status: 'pass',
+                message: 'Connected (names/rotation only)',
+            };
         }
         catch (err) {
             return {
-                name: 'Secrets Manager', status: 'warn',
+                name: 'Secrets Manager',
+                status: 'warn',
                 message: err instanceof Error ? err.message : String(err),
                 detail: 'Check IAM: secretsmanager:ListSecrets',
             };
@@ -168,7 +187,8 @@ export async function runDoctor(options = {}) {
         }
         catch (err) {
             return {
-                name: 'Lambda', status: 'warn',
+                name: 'Lambda',
+                status: 'warn',
                 message: err instanceof Error ? err.message : String(err),
                 detail: 'Check IAM: lambda:ListFunctions',
             };
@@ -184,7 +204,8 @@ export async function runDoctor(options = {}) {
         }
         catch (err) {
             return {
-                name: 'EventBridge', status: 'warn',
+                name: 'EventBridge',
+                status: 'warn',
                 message: err instanceof Error ? err.message : String(err),
                 detail: 'Check IAM: events:ListRules, events:ListTargetsByRule',
             };
@@ -200,7 +221,8 @@ export async function runDoctor(options = {}) {
         }
         catch (err) {
             return {
-                name: 'S3', status: 'warn',
+                name: 'S3',
+                status: 'warn',
                 message: err instanceof Error ? err.message : String(err),
                 detail: 'Check IAM: s3:ListBuckets, s3:GetBucketNotificationConfiguration, s3:GetBucketVersioning, s3:GetBucketEncryption, s3:GetPublicAccessBlock',
             };
@@ -216,7 +238,8 @@ export async function runDoctor(options = {}) {
         }
         catch (err) {
             return {
-                name: 'CloudWatch Logs', status: 'warn',
+                name: 'CloudWatch Logs',
+                status: 'warn',
                 message: err instanceof Error ? err.message : String(err),
                 detail: 'Check IAM: logs:DescribeLogGroups, logs:FilterLogEvents',
             };
@@ -230,13 +253,18 @@ export async function runDoctor(options = {}) {
         try {
             const ok = await validatePostgresAccess(config.postgres.connectionString);
             return {
-                name: 'PostgreSQL', status: ok ? 'pass' : 'fail',
+                name: 'PostgreSQL',
+                status: ok ? 'pass' : 'fail',
                 message: ok ? 'Connected' : 'Cannot connect',
                 detail: ok ? undefined : 'Check connection string and security group',
             };
         }
         catch (err) {
-            return { name: 'PostgreSQL', status: 'fail', message: err instanceof Error ? err.message : String(err) };
+            return {
+                name: 'PostgreSQL',
+                status: 'fail',
+                message: err instanceof Error ? err.message : String(err),
+            };
         }
     }));
     // MySQL
@@ -247,13 +275,18 @@ export async function runDoctor(options = {}) {
         try {
             const ok = await validateMySQLAccess(config.mysql.connectionString);
             return {
-                name: 'MySQL', status: ok ? 'pass' : 'fail',
+                name: 'MySQL',
+                status: ok ? 'pass' : 'fail',
                 message: ok ? 'Connected' : 'Cannot connect',
                 detail: ok ? undefined : 'Check connection string, host, port 3306',
             };
         }
         catch (err) {
-            return { name: 'MySQL', status: 'fail', message: err instanceof Error ? err.message : String(err) };
+            return {
+                name: 'MySQL',
+                status: 'fail',
+                message: err instanceof Error ? err.message : String(err),
+            };
         }
     }));
     // MongoDB
@@ -264,13 +297,18 @@ export async function runDoctor(options = {}) {
         try {
             const ok = await validateMongoAccess(config.mongodb.connectionString);
             return {
-                name: 'MongoDB', status: ok ? 'pass' : 'fail',
+                name: 'MongoDB',
+                status: ok ? 'pass' : 'fail',
                 message: ok ? 'Connected' : 'Cannot connect',
                 detail: ok ? undefined : 'Check connection string and port 27017',
             };
         }
         catch (err) {
-            return { name: 'MongoDB', status: 'fail', message: err instanceof Error ? err.message : String(err) };
+            return {
+                name: 'MongoDB',
+                status: 'fail',
+                message: err instanceof Error ? err.message : String(err),
+            };
         }
     }));
     // Project type
@@ -288,11 +326,13 @@ export async function runDoctor(options = {}) {
     results.push(await runCheck('Detecting IaC files...', async () => {
         const cwd = process.cwd();
         const hasTfFile = (dir) => fs.existsSync(dir) && fs.readdirSync(dir).some((f) => f.endsWith('.tf'));
-        const hasTF = hasTfFile(cwd) || fs.readdirSync(cwd).some((entry) => {
-            const full = path.join(cwd, entry);
-            return fs.statSync(full).isDirectory() && hasTfFile(full);
-        });
-        const hasCFN = fs.existsSync(path.join(cwd, 'template.yaml')) || fs.existsSync(path.join(cwd, 'template.json'));
+        const hasTF = hasTfFile(cwd) ||
+            fs.readdirSync(cwd).some((entry) => {
+                const full = path.join(cwd, entry);
+                return fs.statSync(full).isDirectory() && hasTfFile(full);
+            });
+        const hasCFN = fs.existsSync(path.join(cwd, 'template.yaml')) ||
+            fs.existsSync(path.join(cwd, 'template.json'));
         const hasCDK = fs.existsSync(path.join(cwd, 'cdk.json'));
         const hasCDKOut = fs.existsSync(path.join(cwd, 'cdk.out'));
         const found = [];