@joshualiamzn/open-stack 0.0.1

package/src/render.mjs

@@ -0,0 +1,185 @@
+/**
+ * Renders the OSI pipeline YAML configuration from the resolved config.
+ *
+ * Serverless: uses template_type + template_content for all sinks
+ * Managed: uses index_type for logs, traces, and service-map
+ */
+
+// ── Index template content for serverless ────────────────────────────────────
+
+const LOGS_TEMPLATE_CONTENT = '{"version":1,"template":{"mappings":{"date_detection":false,"_source":{"enabled":true},"dynamic_templates":[{"long_resource_attributes":{"mapping":{"type":"long"},"path_match":"resource.attributes.*","match_mapping_type":"long"}},{"double_resource_attributes":{"mapping":{"type":"double"},"path_match":"resource.attributes.*","match_mapping_type":"double"}},{"string_resource_attributes":{"mapping":{"type":"keyword","ignore_above":256},"path_match":"resource.attributes.*","match_mapping_type":"string"}},{"long_scope_attributes":{"mapping":{"type":"long"},"path_match":"instrumentationScope.attributes.*","match_mapping_type":"long"}},{"double_scope_attributes":{"mapping":{"type":"double"},"path_match":"instrumentationScope.attributes.*","match_mapping_type":"double"}},{"string_scope_attributes":{"mapping":{"type":"keyword","ignore_above":256},"path_match":"instrumentationScope.attributes.*","match_mapping_type":"string"}},{"long_attributes":{"mapping":{"type":"long"},"path_match":"attributes.*","match_mapping_type":"long"}},{"double_attributes":{"mapping":{"type":"double"},"path_match":"attributes.*","match_mapping_type":"double"}},{"string_attributes":{"mapping":{"type":"keyword","ignore_above":256},"path_match":"attributes.*","match_mapping_type":"string"}}],"properties":{"droppedAttributesCount":{"type":"integer"},"instrumentationScope":{"properties":{"droppedAttributesCount":{"type":"integer"},"schemaUrl":{"type":"keyword","ignore_above":256},"name":{"type":"keyword","ignore_above":128},"version":{"type":"keyword","ignore_above":64}}},"resource":{"properties":{"droppedAttributesCount":{"type":"integer"},"schemaUrl":{"type":"keyword","ignore_above":256}}},"severity":{"properties":{"number":{"type":"integer"},"text":{"type":"keyword","ignore_above":"32"}}},"body":{"type":"text"},"@timestamp":{"type":"date_nanos"},"time":{"type":"date_nanos"},"observedTime":{"type":"date_nanos"},"traceId":{"type":"keyword","ignore_above":32},"spanId":{"type":"keyword","ignore_above":16},"flags":{"type":"long"}}}}}';
+
+const TRACES_TEMPLATE_CONTENT = '{"version":1,"template":{"mappings":{"date_detection":false,"_source":{"enabled":true},"dynamic_templates":[{"long_resource_attributes":{"mapping":{"type":"long"},"path_match":"resource.attributes.*","match_mapping_type":"long"}},{"double_resource_attributes":{"mapping":{"type":"double"},"path_match":"resource.attributes.*","match_mapping_type":"double"}},{"string_resource_attributes":{"mapping":{"type":"keyword","ignore_above":256},"path_match":"resource.attributes.*","match_mapping_type":"string"}},{"long_scope_attributes":{"mapping":{"type":"long"},"path_match":"instrumentationScope.attributes.*","match_mapping_type":"long"}},{"double_scope_attributes":{"mapping":{"type":"double"},"path_match":"instrumentationScope.attributes.*","match_mapping_type":"double"}},{"string_scope_attributes":{"mapping":{"type":"keyword","ignore_above":256},"path_match":"instrumentationScope.attributes.*","match_mapping_type":"string"}},{"long_attributes":{"mapping":{"type":"long"},"path_match":"attributes.*","match_mapping_type":"long"}},{"double_attributes":{"mapping":{"type":"double"},"path_match":"attributes.*","match_mapping_type":"double"}},{"string_attributes":{"mapping":{"type":"keyword","ignore_above":256},"path_match":"attributes.*","match_mapping_type":"string"}}],"properties":{"droppedAttributesCount":{"type":"integer"},"instrumentationScope":{"properties":{"droppedAttributesCount":{"type":"integer"},"schemaUrl":{"type":"keyword","ignore_above":256},"name":{"type":"keyword","ignore_above":128},"version":{"type":"keyword","ignore_above":64}}},"resource":{"properties":{"droppedAttributesCount":{"type":"integer"},"schemaUrl":{"type":"keyword","ignore_above":256}}},"traceId":{"type":"keyword","ignore_above":32},"spanId":{"type":"keyword","ignore_above":16},"parentSpanId":{"type":"keyword","ignore_above":16},"name":{"ignore_above":1024,"type":"keyword"},"traceState":{"ignore_above":1024,"type":"keyword"},"traceGroup":{"ignore_above":1024,"type":"keyword"},"traceGroupFields":{"properties":{"endTime":{"type":"date_nanos"},"durationInNanos":{"type":"long"},"statusCode":{"type":"integer"}}},"kind":{"type":"keyword","ignore_above":32},"serviceName":{"type":"keyword","ignore_above":256},"startTime":{"type":"date_nanos"},"endTime":{"type":"date_nanos"},"@timestamp":{"type":"date_nanos"},"time":{"type":"date_nanos"},"status":{"properties":{"code":{"type":"integer"},"message":{"type":"keyword","ignore_above":2048}}},"durationInNanos":{"type":"long"},"events":{"type":"nested","properties":{"name":{"type":"keyword","ignore_above":256},"attributes":{"type":"object"},"droppedAttributesCount":{"type":"integer"},"time":{"type":"date_nanos"}}},"droppedEventsCount":{"type":"integer"},"links":{"type":"nested","properties":{"traceId":{"type":"keyword","ignore_above":32},"spanId":{"type":"keyword","ignore_above":16},"traceState":{"ignore_above":1024,"type":"keyword"},"attributes":{"type":"object"},"droppedAttributesCount":{"type":"integer"}}},"droppedLinksCount":{"type":"integer"}}}}}';
+
+const SERVICE_MAP_TEMPLATE_CONTENT = '{"version":0,"template":{"mappings":{"date_detection":false,"dynamic_templates":[{"long_group_by_attributes":{"path_match":"*.groupByAttributes.*","match_mapping_type":"long","mapping":{"type":"long"}}},{"double_group_by_attributes":{"path_match":"*.groupByAttributes.*","match_mapping_type":"double","mapping":{"type":"double"}}},{"string_group_by_attributes":{"path_match":"*.groupByAttributes.*","match_mapping_type":"string","mapping":{"type":"keyword"}}},{"long_operation_attributes":{"path_match":"*.attributes.*","match_mapping_type":"long","mapping":{"type":"long"}}},{"double_operation_attributes":{"path_match":"*.attributes.*","match_mapping_type":"double","mapping":{"type":"double"}}},{"string_operation_attributes":{"path_match":"*.attributes.*","match_mapping_type":"string","mapping":{"type":"keyword"}}}],"_source":{"enabled":true},"properties":{"sourceNode":{"properties":{"type":{"type":"keyword"},"keyAttributes":{"properties":{"environment":{"type":"keyword"},"name":{"type":"keyword"}}},"groupByAttributes":{"type":"object","dynamic":"true"}}},"targetNode":{"properties":{"type":{"type":"keyword"},"keyAttributes":{"properties":{"environment":{"type":"keyword"},"name":{"type":"keyword"}}},"groupByAttributes":{"type":"object","dynamic":"true"}}},"sourceOperation":{"properties":{"name":{"type":"keyword"},"attributes":{"type":"object","dynamic":"true"}}},"targetOperation":{"properties":{"name":{"type":"keyword"},"attributes":{"type":"object","dynamic":"true"}}},"nodeConnectionHash":{"type":"keyword"},"operationConnectionHash":{"type":"keyword"},"timestamp":{"type":"date","format":"strict_date_optional_time||epoch_millis"}}}}}';
+
+// ── Sink config helpers ──────────────────────────────────────────────────────
+
+function logsSinkConfig(cfg) {
+  if (cfg.serverless) {
+    return `\
+        index: 'logs-otel-v1'
+        template_type: 'index-template'
+        template_content: '${LOGS_TEMPLATE_CONTENT}'`;
+  }
+  return `\
+        index_type: log-analytics-plain`;
+}
+
+function tracesSinkConfig(cfg) {
+  if (cfg.serverless) {
+    return `\
+        index: 'otel-v1-apm-span'
+        template_type: 'index-template'
+        template_content: '${TRACES_TEMPLATE_CONTENT}'`;
+  }
+  return `\
+        index_type: trace-analytics-plain-raw`;
+}
+
+function serviceMapSinkConfig(cfg) {
+  if (cfg.serverless) {
+    return `\
+        index: 'otel-v2-apm-service-map'
+        template_type: 'index-template'
+        template_content: '${SERVICE_MAP_TEMPLATE_CONTENT}'`;
+  }
+  return `\
+        index_type: otel-v2-apm-service-map`;
+}
+
+// ── Pipeline renderer ────────────────────────────────────────────────────────
+
+export function renderPipeline(cfg) {
+  const name = cfg.pipelineName;
+  const serverless = !!cfg.serverless;
+
+  return `\
+version: '2'
+extension:
+  osis_configuration_metadata:
+    builder_type: visual
+
+# Main OTLP pipeline - receives all telemetry and routes by signal type
+otlp-pipeline:
+  source:
+    otlp:
+      logs_path: '/${name}/v1/logs'
+      traces_path: '/${name}/v1/traces'
+      metrics_path: '/${name}/v1/metrics'
+  route:
+    - logs: 'getEventType() == "LOG"'
+    - traces: 'getEventType() == "TRACE"'
+    - metrics: 'getEventType() == "METRIC"'
+  processor: []
+  sink:
+    - pipeline:
+        name: otel-logs-pipeline
+        routes:
+          - logs
+    - pipeline:
+        name: otel-traces-pipeline
+        routes:
+          - traces
+    - pipeline:
+        name: otel-metrics-pipeline
+        routes:
+          - metrics
+
+# Log processing pipeline
+otel-logs-pipeline:
+  source:
+    pipeline:
+      name: otlp-pipeline
+  processor:
+    - copy_values:
+        entries:
+          - from_key: "time"
+            to_key: "@timestamp"
+  sink:
+    - opensearch:
+        hosts:
+          - '${cfg.opensearchEndpoint}'
+${logsSinkConfig(cfg)}
+        aws:
+          serverless: ${serverless}
+          region: '${cfg.region}'
+          sts_role_arn: "${cfg.iamRoleArn}"
+
+# Trace fan-out pipeline
+otel-traces-pipeline:
+  source:
+    pipeline:
+      name: otlp-pipeline
+  processor: []
+  sink:
+    - pipeline:
+        name: traces-raw-pipeline
+        routes: []
+    - pipeline:
+        name: service-map-pipeline
+        routes: []
+
+# Raw trace storage pipeline
+traces-raw-pipeline:
+  source:
+    pipeline:
+      name: otel-traces-pipeline
+  processor:
+    - otel_traces:
+  sink:
+    - opensearch:
+        hosts:
+          - '${cfg.opensearchEndpoint}'
+${tracesSinkConfig(cfg)}
+        aws:
+          serverless: ${serverless}
+          region: '${cfg.region}'
+          sts_role_arn: "${cfg.iamRoleArn}"
+
+# Service map generation pipeline (APM)
+service-map-pipeline:
+  source:
+    pipeline:
+      name: otel-traces-pipeline
+  processor:
+    - otel_apm_service_map:
+        db_path: /tmp/otel-apm-service-map
+        group_by_attributes:
+          - telemetry.sdk.language
+        window_duration: ${cfg.serviceMapWindow}
+  route:
+    - otel_apm_service_map_route: 'getEventType() == "SERVICE_MAP"'
+    - service_processed_metrics: 'getEventType() == "METRIC"'
+  sink:
+    - opensearch:
+        hosts:
+          - '${cfg.opensearchEndpoint}'
+        aws:
+          serverless: ${serverless}
+          region: '${cfg.region}'
+          sts_role_arn: "${cfg.iamRoleArn}"
+        routes:
+          - otel_apm_service_map_route
+${serviceMapSinkConfig(cfg)}
+    - prometheus:
+        url: '${cfg.prometheusUrl}'
+        aws:
+          region: '${cfg.region}'
+        routes:
+          - service_processed_metrics
+
+# Metrics processing pipeline
+otel-metrics-pipeline:
+  source:
+    pipeline:
+      name: otlp-pipeline
+  processor:
+    - otel_metrics:
+  sink:
+    - prometheus:
+        url: '${cfg.prometheusUrl}'
+        aws:
+          region: '${cfg.region}'
+`;
+}

package/src/repl.mjs

@@ -0,0 +1,91 @@
+import { select, input } from '@inquirer/prompts';
+import { STSClient, GetCallerIdentityCommand } from '@aws-sdk/client-sts';
+import {
+  printBanner, printError, printInfo,
+  printKeyHint, printPanel, theme,
+} from './ui.mjs';
+import { COMMANDS, COMMAND_CHOICES } from './commands/index.mjs';
+
+/**
+ * Initialize session — prompt for region and verify AWS credentials.
+ */
+async function initSession() {
+  const region = await input({
+    message: 'AWS region',
+    default: 'us-east-1',
+    validate: (v) => /^[a-z]{2}-[a-z]+-\d+$/.test(v) || 'Expected format: us-east-1',
+  });
+
+  console.error();
+  const sts = new STSClient({ region });
+  let identity;
+  try {
+    identity = await sts.send(new GetCallerIdentityCommand({}));
+  } catch (err) {
+    printError('AWS credentials are not configured or have expired');
+    printInfo(err.message);
+    printInfo('Run "aws configure" or "aws sso login" to set up credentials, then restart.');
+    throw err;
+  }
+
+  printPanel('Session', [
+    ['Account', identity.Account],
+    ['Region', region],
+    ['Identity', theme.muted(identity.Arn)],
+  ]);
+
+  return { region, accountId: identity.Account };
+}
+
+/**
+ * Start the interactive REPL loop.
+ */
+export async function startRepl() {
+  printBanner();
+
+  let session;
+  try {
+    session = await initSession();
+  } catch {
+    process.exit(1);
+  }
+
+  console.error();
+  printKeyHint([['Enter', 'select'], ['Esc', 'back'], ['Ctrl+C', 'exit']]);
+  console.error();
+
+  while (true) {
+    let cmd;
+    try {
+      cmd = await select({
+        message: theme.primary(`osi-pipeline [${session.region}]`),
+        choices: COMMAND_CHOICES,
+      });
+    } catch (err) {
+      // Ctrl+C at the menu level → exit
+      if (err.name === 'ExitPromptError') break;
+      throw err;
+    }
+
+    if (cmd === 'quit') break;
+
+    try {
+      await COMMANDS[cmd](session);
+    } catch (err) {
+      if (err.name === 'ExitPromptError') {
+        // Ctrl+C during a command → return to menu
+        console.error();
+        printInfo('Cancelled.');
+        console.error();
+        continue;
+      }
+      console.error();
+      printError(err.message);
+      console.error();
+    }
+  }
+
+  console.error();
+  console.error(`  ${theme.muted('Goodbye.')}`);
+  console.error();
+}

package/src/ui.mjs

@@ -0,0 +1,298 @@
+import chalk from 'chalk';
+import ora from 'ora';
+import readline from 'node:readline';
+
+// ── Theme colors ─────────────────────────────────────────────────────────────
+
+export const theme = {
+  primary: chalk.hex('#B07FFF'),       // soft purple (like Claude)
+  primaryBold: chalk.hex('#B07FFF').bold,
+  accent: chalk.hex('#6EC8F5'),        // light blue
+  accentBold: chalk.hex('#6EC8F5').bold,
+  success: chalk.hex('#6BCB77'),       // soft green
+  error: chalk.hex('#FF6B6B'),         // soft red
+  warn: chalk.hex('#FFD93D'),          // soft yellow
+  muted: chalk.dim,
+  mutedItalic: chalk.dim.italic,
+  label: chalk.bold,
+  highlight: chalk.hex('#E0C3FF'),     // light purple
+};
+
+// ── Symbols ──────────────────────────────────────────────────────────────────
+
+export const CHECK = '\u2713';
+export const CROSS = '\u2717';
+export const ARROW = '\u25B6'; // ▶
+export const STAR = '\u2605';
+export const DOT = '\u2022';
+export const DIAMOND = '\u25C6';
+
+// Box-drawing characters
+const BOX = {
+  tl: '\u256D', tr: '\u256E', bl: '\u2570', br: '\u256F', // rounded corners
+  h: '\u2500', v: '\u2502',
+  ltee: '\u251C', rtee: '\u2524',
+};
+
+// ── Box-drawing primitives ───────────────────────────────────────────────────
+
+/**
+ * Render a box with rounded corners around lines of text.
+ * @param {string[]} lines - Lines to display inside the box
+ * @param {Object} [opts]
+ * @param {number}  [opts.width]   - Fixed inner width (auto-detected if omitted)
+ * @param {string}  [opts.color]   - Chalk method to apply to border (e.g. 'dim')
+ * @param {string}  [opts.title]   - Optional title in the top border
+ * @param {number}  [opts.padding] - Left padding inside the box (default 1)
+ */
+export function renderBox(lines, opts = {}) {
+  const pad = opts.padding ?? 1;
+  const sp = ' '.repeat(pad);
+
+  // Strip ANSI for width calculation
+  const stripAnsi = (s) => s.replace(/\x1B\[[0-9;]*m/g, '');
+  const innerWidth = opts.width || Math.max(...lines.map((l) => stripAnsi(l).length)) + pad * 2;
+
+  const colorFn = opts.color === 'dim' ? chalk.dim
+    : opts.color === 'primary' ? theme.primary
+    : opts.color === 'accent' ? theme.accent
+    : chalk.dim;
+
+  let topBorder;
+  if (opts.title) {
+    const titleStr = ` ${opts.title} `;
+    const titleLen = stripAnsi(titleStr).length;
+    const remaining = innerWidth - titleLen;
+    topBorder = colorFn(BOX.tl + BOX.h) + theme.primaryBold(titleStr) + colorFn(BOX.h.repeat(Math.max(0, remaining)) + BOX.tr);
+  } else {
+    topBorder = colorFn(BOX.tl + BOX.h.repeat(innerWidth) + BOX.tr);
+  }
+
+  const bottomBorder = colorFn(BOX.bl + BOX.h.repeat(innerWidth) + BOX.br);
+
+  const boxLines = [topBorder];
+  for (const line of lines) {
+    const visLen = stripAnsi(line).length;
+    const rightPad = Math.max(0, innerWidth - pad * 2 - visLen);
+    boxLines.push(colorFn(BOX.v) + sp + line + ' '.repeat(rightPad) + sp + colorFn(BOX.v));
+  }
+  boxLines.push(bottomBorder);
+
+  return boxLines;
+}
+
+/**
+ * Print a box to stderr.
+ */
+export function printBox(lines, opts = {}) {
+  const indent = opts.indent ?? 2;
+  const prefix = ' '.repeat(indent);
+  for (const l of renderBox(lines, opts)) {
+    console.error(prefix + l);
+  }
+}
+
+/**
+ * Print a key-value panel inside a box.
+ * @param {string} title - Panel title
+ * @param {Array<[string, string]>} entries - [label, value] pairs; empty label = blank line
+ */
+export function printPanel(title, entries) {
+  const lines = [];
+  for (const [label, value] of entries) {
+    if (!label && !value) {
+      lines.push('');
+    } else if (!label) {
+      lines.push(value);
+    } else {
+      lines.push(`${theme.muted(label)}  ${value}`);
+    }
+  }
+  printBox(lines, { title, color: 'dim', padding: 1 });
+}
+
+// ── Print helpers — all write to stderr so stdout stays clean for YAML ───────
+
+export function printHeader() {
+  console.error();
+  const banner = [
+    '',
+    `${theme.primaryBold('Open Stack CLI')}`,
+    `${theme.muted('Create AWS resources and OpenSearch Ingestion pipelines')}`,
+    '',
+  ];
+  printBox(banner, { color: 'primary', padding: 2 });
+  console.error();
+}
+
+export function printStep(msg) {
+  console.error();
+  console.error(`  ${theme.primary(DIAMOND)} ${theme.primaryBold(msg)}`);
+}
+
+export function printSubStep(msg) {
+  console.error(`    ${theme.muted(DOT)} ${msg}`);
+}
+
+export function printSuccess(msg) {
+  console.error(`  ${theme.success(CHECK)} ${msg}`);
+}
+
+export function printError(msg) {
+  console.error(`  ${theme.error(CROSS)} ${msg}`);
+}
+
+export function printWarning(msg) {
+  console.error(`  ${theme.warn('!')} ${msg}`);
+}
+
+export function printInfo(msg) {
+  console.error(`    ${theme.muted(msg)}`);
+}
+
+// Spinner — wraps ora for consistent styling
+export function createSpinner(text) {
+  return ora({ text, stream: process.stderr, spinner: 'dots', color: 'magenta' });
+}
+
+// ── Key hints ────────────────────────────────────────────────────────────────
+
+export function printKeyHint(hints) {
+  // hints: array of [key, description] e.g. [['Ctrl+C', 'cancel'], ['Enter', 'select']]
+  const parts = hints.map(([key, desc]) =>
+    `${theme.muted('[')}${theme.accent(key)}${theme.muted(']')} ${theme.muted(desc)}`
+  );
+  console.error(`  ${parts.join('  ')}`);
+}
+
+// ── Pipeline status colorizer ────────────────────────────────────────────────
+
+const STATUS_COLORS = {
+  ACTIVE: theme.success,
+  CREATING: theme.warn,
+  UPDATING: theme.warn,
+  DELETING: theme.warn,
+  CREATE_FAILED: theme.error,
+  UPDATE_FAILED: theme.error,
+  STARTING: theme.accent,
+  STOPPING: theme.accent,
+  STOPPED: theme.muted,
+};
+
+export function colorStatus(status) {
+  const fn = STATUS_COLORS[status] || chalk.white;
+  return fn(status);
+}
+
+// ── Date formatter ───────────────────────────────────────────────────────────
+
+export function formatDate(d) {
+  if (!d) return '\u2014';
+  return new Date(d).toLocaleString('en-US', {
+    month: 'short', day: 'numeric', year: 'numeric',
+    hour: '2-digit', minute: '2-digit',
+  });
+}
+
+// ── REPL banner ──────────────────────────────────────────────────────────────
+
+export function printBanner() {
+  console.error();
+  const banner = [
+    '',
+    `${theme.primaryBold('Open Stack')}`,
+    `${theme.muted('Create, list, describe, and update OpenSearch Ingestion pipelines')}`,
+    '',
+  ];
+  printBox(banner, { color: 'primary', padding: 2 });
+}
+
+// ── Horizontal divider ──────────────────────────────────────────────────────
+
+export function printDivider() {
+  console.error(`  ${theme.muted(BOX.h.repeat(60))}`);
+}
+
+// ── Escape-to-go-back prompt wrapper ────────────────────────────────────────
+
+export const GoBack = Symbol('GoBack');
+
+let _keypressInit = false;
+
+/**
+ * Wrap an @inquirer/prompts function so that pressing Escape cancels
+ * the prompt and returns the GoBack sentinel instead of throwing.
+ */
+export function withEscape(promptFn) {
+  return (...args) => {
+    if (!_keypressInit && process.stdin.isTTY) {
+      readline.emitKeypressEvents(process.stdin);
+      _keypressInit = true;
+    }
+
+    const promise = promptFn(...args);
+    let escaped = false;
+
+    const onKeypress = (_ch, key) => {
+      if (key?.name === 'escape') {
+        escaped = true;
+        promise.cancel();
+      }
+    };
+
+    process.stdin.on('keypress', onKeypress);
+
+    return promise.then(
+      (val) => { process.stdin.removeListener('keypress', onKeypress); return val; },
+      (err) => {
+        process.stdin.removeListener('keypress', onKeypress);
+        if (escaped) return GoBack;
+        throw err;
+      },
+    );
+  };
+}
+
+// ── Table formatter with box borders ─────────────────────────────────────────
+
+export function printTable(headers, rows) {
+  if (rows.length === 0) return;
+
+  const stripAnsi = (s) => String(s).replace(/\x1B\[[0-9;]*m/g, '');
+
+  // Calculate column widths
+  const widths = headers.map((h, i) =>
+    Math.max(h.length, ...rows.map((r) => stripAnsi(r[i] ?? '').length))
+  );
+
+  const totalWidth = widths.reduce((a, b) => a + b, 0) + (widths.length - 1) * 3;
+
+  // Top border
+  console.error(`  ${theme.muted(BOX.tl + BOX.h.repeat(totalWidth + 2) + BOX.tr)}`);
+
+  // Header
+  const headerLine = headers
+    .map((h, i) => theme.accentBold(h.padEnd(widths[i])))
+    .join(theme.muted(' ' + BOX.v + ' '));
+  console.error(`  ${theme.muted(BOX.v)} ${headerLine} ${theme.muted(BOX.v)}`);
+
+  // Separator
+  const sep = widths.map((w) => BOX.h.repeat(w)).join(BOX.h + BOX.h + BOX.h);
+  console.error(`  ${theme.muted(BOX.ltee + sep + BOX.h + BOX.h + BOX.rtee)}`);
+
+  // Rows
+  for (const row of rows) {
+    const line = row
+      .map((cell, i) => {
+        const s = String(cell ?? '');
+        const pad = widths[i] - stripAnsi(s).length;
+        return s + ' '.repeat(Math.max(0, pad));
+      })
+      .join(theme.muted(' ' + BOX.v + ' '));
+    console.error(`  ${theme.muted(BOX.v)} ${line} ${theme.muted(BOX.v)}`);
+  }
+
+  // Bottom border
+  console.error(`  ${theme.muted(BOX.bl + BOX.h.repeat(totalWidth + 2) + BOX.br)}`);
+  console.error();
+}