vanguard-cli 3.1.2 → 3.1.6

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 3.1.3 (2026-01-24)
+
+
+### Features
+
+* enterprise-grade AI resilience with gemini-1.5-flash-latest 🛡️❄️🚀✨ ([3ab3f1d](https://github.com/bazobehram/vanguard/commit/3ab3f1da4866c3e8bb833efd039f43b1dd6e8942))
+* implement scanner resilience and add test suite 🛡️🧪🧬✨ ([20310c3](https://github.com/bazobehram/vanguard/commit/20310c30d2787cbc2dedb0a19d8d2a5d2b308d0d))
+* implement smart throttling and robust 429 recovery logic 🛡️❄️✨ ([4123794](https://github.com/bazobehram/vanguard/commit/4123794b1cced382fb628a1b828a466d83c24a3e))
+* initial public release of Vanguard V3 Enterprise Edition ��️🚀✨ ([2335c1a](https://github.com/bazobehram/vanguard/commit/2335c1aa78a95a871cc600e62dd45431147088b9))
+
 ## 3.1.2 (2026-01-24)
 
 

package/RECOVERY_GUIDE.md

@@ -0,0 +1,36 @@
+# Enterprise Publication Recovery Guide 🛡️🔑🏗️
+
+If you see an `ENEEDAUTH` or `Access token expired` error when publishing to NPM (like the one you saw on the homeserver), follow these steps to restore your automated shipping pipeline.
+
+## 1. Refresh Your Session 🔄
+Your CLI session for NPM has likely expired. Run this in your terminal to log back in:
+```bash
+npm login
+```
+*Note: This will likely open a browser windows or ask for your 2FA Passkey signature.*
+
+---
+
+## 2. Using a Permanent Token (Recommended) 🔑
+To avoid Passkey/Browser prompts on your remote servers, use a **Granular Access Token**:
+
+1.  **Generate Token**: Go to [NPM Tokens](https://www.npmjs.com/settings/tokens/granular-access-tokens/new).
+2.  **Permissions**: Select "Read and write" for the specific package.
+3.  **Bypass 2FA**: **CHECK THIS BOX** in the NPM settings for the token.
+4.  **Set Environment**: On your server, add this to your `.bashrc` or `.env`:
+    ```bash
+    export NPM_TOKEN="your_token_here"
+    ```
+
+---
+
+## 3. Finishing the Vanguard V3.1.5 Release 🚀
+I have already versioned and pushed the codes to GitHub. To finish the live NPM update, simply run:
+```bash
+npm run ship
+```
+- Select **"Patch"**.
+- When asked about 2FA, select **"No"** (after you've logged in or set the token).
+
+---
+🛡️ **Vanguard is perfectly synchronized and ready for the world.**

package/lib/commands/config.js

@@ -6,7 +6,8 @@ import { showBanner } from '../utils/ui.js';
 
 export async function runConfigWizard() {
     showBanner();
-    console.log('🛰️  Vanguard Configuration Wizard\n');
+    console.log('🛰️  Vanguard Configuration Wizard');
+    console.log(chalk.dim(`📂 Config Path: ${config.path}\n`));
 
     const { providerSelection } = await inquirer.prompt([
         {
@@ -14,7 +15,7 @@ export async function runConfigWizard() {
             name: 'providerSelection',
             message: 'Select AI Provider:',
             choices: [
-                { name: 'Google Gemini 2.0 (Cloud - Fast & Smart)', value: 'gemini' },
+                { name: 'Google Gemini (Cloud - Reliable & Smart)', value: 'gemini' },
                 { name: 'Local Ollama (Private - Offline)', value: 'ollama' },
             ],
         },
@@ -27,13 +28,15 @@ export async function runConfigWizard() {
             {
                 type: 'password',
                 name: 'apiKey',
-                message: 'Enter your Gemini API Key:',
-                default: config.get('GEMINI_KEY'),
-                validate: (val) => val.length > 0 || 'Key is required',
+                validate: (val) => {
+                    if (val.length === 0) return 'Key is required';
+                    if (val.startsWith('sk-')) return '⚠️ That looks like an OpenAI key. Gemini keys usually start with "AIza"';
+                    return true;
+                },
             },
         ]);
-        config.set('GEMINI_KEY', apiKey);
-        console.log('✅ Gemini 2.0 configured and saved.');
+        config.set('GEMINI_KEY', apiKey.trim());
+        console.log('✅ Gemini configured and saved.');
     } else {
         const spinner = createSpinner('🔍 Detecting local Ollama models...').start();
         try {

package/lib/services/scanner.js

@@ -77,20 +77,25 @@ RESPONSE FORMAT (JSON ONLY):
         return await this.scanWithOllama(content);
       }
     } catch (error) {
-      const isRateLimit = error.message.includes('429') || error.message.includes('Too Many Requests');
+      const isRateLimit =
+        error.message.includes('429') ||
+        error.message.includes('Too Many Requests') ||
+        error.message.includes('Quota');
+
       const isServerErr = error.message.includes('500') || error.message.includes('503');
 
       if (isRateLimit && attempt <= maxAttempts) {
+        const waitTime = attempt === 1 ? 30 : 60; // Increase wait on second failure
         if (spinner) {
           const originalText = spinner.text;
-          for (let i = 30; i > 0; i--) {
-            spinner.text = `❄️ Rate limit hit. Cooling down API (${i}s remaining)...`;
+          for (let i = waitTime; i > 0; i--) {
+            spinner.text = `❄️ Quota hit. Cooling down API (${i}s remaining)...`;
             await sleep(1000);
           }
           spinner.text = originalText;
         } else {
-          console.log(chalk.yellow(`\n⚠️ Rate limit hit. Cooling down for 30s (Attempt ${attempt}/${maxAttempts})...`));
-          await sleep(30000);
+          console.log(chalk.yellow(`\n⚠️ Rate limit hit. Cooling down for ${waitTime}s (Attempt ${attempt}/${maxAttempts})...`));
+          await sleep(waitTime * 1000);
         }
         return this.scanWithRetry(filePath, content, spinner, attempt + 1);
       }
@@ -108,9 +113,9 @@ RESPONSE FORMAT (JSON ONLY):
     const apiKey = config.get('GEMINI_KEY');
     if (!apiKey) throw new Error('Gemini API Key missing. Run "vanguard config"');
 
-    const genAI = new GoogleGenerativeAI(apiKey);
-    // Switch to higher limit model
-    const model = genAI.getGenerativeModel({ model: 'gemini-1.5-flash' });
+    const genAI = new GoogleGenerativeAI(apiKey.trim());
+    // Use the latest stable pro flash model for the best performance/quota ratio
+    const model = genAI.getGenerativeModel({ model: 'gemini-2.0-flash' });
     const instruction = await this.getSystemInstruction();
 
     const result = await model.generateContent({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vanguard-cli",
-  "version": "3.1.2",
+  "version": "3.1.6",
   "description": "AI-Powered Supply Chain Firewall for Git",
   "type": "module",
   "bin": {