@prism-d1/cli 1.0.42 → 1.0.43

package/dist/assets/infra/lib/metrics-pipeline-stack.ts

@@ -9,6 +9,7 @@ import * as path from 'path';
 import { Construct } from 'constructs';
 import { BedrockGuardrailConstruct, createDefaultPrismGuardrailProps } from './constructs/bedrock-guardrail-construct';
 import * as kms from 'aws-cdk-lib/aws-kms';
+import * as ec2 from 'aws-cdk-lib/aws-ec2';
 import { PrismVpcConstruct } from './constructs/prism-vpc-construct';
 import { GuardrailEnforcerConstruct } from './constructs/guardrail-enforcer-construct';
 import { SecurityAgentConstruct } from './constructs/security-agent-construct';
@@ -128,8 +129,21 @@ export class MetricsPipelineStack extends cdk.Stack {
 
     // -------------------------------------------------------
     // VPC for Lambda isolation (Pillar 6)
-    // -------------------------------------------------------
-    const vpcConstruct = new PrismVpcConstruct(this, 'VPC');
+    // Opt out with: cdk deploy -c skipVpc=true
+    // Use existing VPC: cdk deploy -c vpcId=vpc-0123456789abcdef0
+    // -------------------------------------------------------
+    const skipVpc = this.node.tryGetContext('skipVpc') === 'true';
+    const existingVpcId = this.node.tryGetContext('vpcId') as string | undefined;
+    const vpcConstruct = skipVpc
+      ? undefined
+      : existingVpcId
+        ? undefined
+        : new PrismVpcConstruct(this, 'VPC');
+    const lambdaVpcProps = skipVpc
+      ? {}
+      : existingVpcId
+        ? { vpc: ec2.Vpc.fromLookup(this, 'ExistingVpc', { vpcId: existingVpcId }) }
+        : { vpc: vpcConstruct!.vpc, securityGroups: [vpcConstruct!.lambdaSecurityGroup] };
 
     // -------------------------------------------------------
     // Metrics processor Lambda
@@ -138,8 +152,7 @@ export class MetricsPipelineStack extends cdk.Stack {
       functionName: 'prism-d1-metrics-processor',
       runtime: lambda.Runtime.NODEJS_22_X,
       handler: 'metrics-processor.handler',
-      vpc: vpcConstruct.vpc,
-      securityGroups: [vpcConstruct.lambdaSecurityGroup],
+      ...lambdaVpcProps,
       code: lambda.Code.fromAsset(path.join(__dirname, 'lambda'), {
         bundling: {
           image: lambda.Runtime.NODEJS_22_X.bundlingImage,
@@ -275,8 +288,7 @@ export class MetricsPipelineStack extends cdk.Stack {
       functionName: 'prism-d1-exfiltration-detector',
       runtime: lambda.Runtime.NODEJS_22_X,
       handler: 'exfiltration-detector.handler',
-      vpc: vpcConstruct.vpc,
-      securityGroups: [vpcConstruct.lambdaSecurityGroup],
+      ...lambdaVpcProps,
       code: lambda.Code.fromAsset(path.join(__dirname, 'lambda'), {
         bundling: {
           image: lambda.Runtime.NODEJS_22_X.bundlingImage,
@@ -338,8 +350,7 @@ export class MetricsPipelineStack extends cdk.Stack {
       functionName: 'prism-d1-defect-correlator',
       runtime: lambda.Runtime.NODEJS_22_X,
       handler: 'defect-correlator.handler',
-      vpc: vpcConstruct.vpc,
-      securityGroups: [vpcConstruct.lambdaSecurityGroup],
+      ...lambdaVpcProps,
       code: lambda.Code.fromAsset(path.join(__dirname, 'lambda'), {
         bundling: {
           image: lambda.Runtime.NODEJS_22_X.bundlingImage,
@@ -400,8 +411,7 @@ export class MetricsPipelineStack extends cdk.Stack {
       functionName: 'prism-d1-spec-to-code-calculator',
       runtime: lambda.Runtime.NODEJS_22_X,
       handler: 'spec-to-code-calculator.handler',
-      vpc: vpcConstruct.vpc,
-      securityGroups: [vpcConstruct.lambdaSecurityGroup],
+      ...lambdaVpcProps,
       code: lambda.Code.fromAsset(path.join(__dirname, 'lambda'), {
         bundling: {
           image: lambda.Runtime.NODEJS_22_X.bundlingImage,
@@ -461,8 +471,7 @@ export class MetricsPipelineStack extends cdk.Stack {
       functionName: 'prism-d1-security-agent-processor',
       runtime: lambda.Runtime.NODEJS_22_X,
       handler: 'security-agent-processor.handler',
-      vpc: vpcConstruct.vpc,
-      securityGroups: [vpcConstruct.lambdaSecurityGroup],
+      ...lambdaVpcProps,
       code: lambda.Code.fromAsset(path.join(__dirname, 'lambda'), {
         bundling: {
           image: lambda.Runtime.NODEJS_22_X.bundlingImage,
@@ -510,8 +519,7 @@ export class MetricsPipelineStack extends cdk.Stack {
       functionName: 'prism-d1-security-remediation-tracker',
       runtime: lambda.Runtime.NODEJS_22_X,
       handler: 'security-remediation-tracker.handler',
-      vpc: vpcConstruct.vpc,
-      securityGroups: [vpcConstruct.lambdaSecurityGroup],
+      ...lambdaVpcProps,
       code: lambda.Code.fromAsset(path.join(__dirname, 'lambda'), {
         bundling: {
           image: lambda.Runtime.NODEJS_22_X.bundlingImage,
@@ -569,8 +577,7 @@ export class MetricsPipelineStack extends cdk.Stack {
       functionName: 'prism-d1-security-response-automator',
       runtime: lambda.Runtime.NODEJS_22_X,
       handler: 'security-response-automator.handler',
-      vpc: vpcConstruct.vpc,
-      securityGroups: [vpcConstruct.lambdaSecurityGroup],
+      ...lambdaVpcProps,
       code: lambda.Code.fromAsset(path.join(__dirname, 'lambda'), {
         bundling: {
           image: lambda.Runtime.NODEJS_22_X.bundlingImage,

package/dist/src/commands/bootstrapper/setup-gitlab-oidc.d.ts

@@ -0,0 +1,6 @@
+declare const _default: {
+    description: string;
+    action(): Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=setup-gitlab-oidc.d.ts.map

package/dist/src/commands/bootstrapper/setup-gitlab-oidc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-gitlab-oidc.d.ts","sourceRoot":"","sources":["../../../../src/commands/bootstrapper/setup-gitlab-oidc.ts"],"names":[],"mappings":";;;;AAuBA,wBAyIE"}

package/dist/src/commands/bootstrapper/setup-gitlab-oidc.js

@@ -0,0 +1,158 @@
+import { execSync } from 'node:child_process';
+import { createInterface } from 'node:readline';
+function prompt(question, defaultValue) {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    const suffix = defaultValue ? ` [${defaultValue}]` : '';
+    return new Promise((resolve) => {
+        rl.question(`${question}${suffix}: `, (answer) => {
+            rl.close();
+            resolve(answer.trim() || defaultValue || '');
+        });
+    });
+}
+function run(cmd) {
+    try {
+        const stdout = execSync(cmd, { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();
+        return { ok: true, stdout, stderr: '' };
+    }
+    catch (err) {
+        return { ok: false, stdout: '', stderr: (err.stderr || err.message || '').trim() };
+    }
+}
+export default {
+    description: 'Set up GitLab OIDC identity provider and IAM role for GitLab CI/CD',
+    async action() {
+        console.log('\n🔐 GitLab OIDC Setup for AWS\n');
+        console.log('This will create an IAM OIDC identity provider and a role');
+        console.log('that GitLab CI/CD can assume to deploy to your AWS account.\n');
+        const gitlabUrl = await prompt('GitLab instance URL', 'https://gitlab.aws.dev');
+        const projectPath = await prompt('GitLab project path (e.g. group/repo)');
+        if (!projectPath) {
+            console.error('Error: Project path is required.');
+            process.exit(1);
+        }
+        console.log(`\nConfiguring OIDC for: ${projectPath} on ${gitlabUrl}`);
+        // Check AWS credentials
+        const sts = run('aws sts get-caller-identity --query Account --output text');
+        if (!sts.ok) {
+            console.error('Error: AWS credentials not configured. Run "aws configure" first.');
+            process.exit(1);
+        }
+        const accountId = sts.stdout;
+        console.log(`AWS Account: ${accountId}\n`);
+        // Derive provider hostname from URL
+        const providerHost = gitlabUrl.replace(/^https?:\/\//, '');
+        const providerArn = `arn:aws:iam::${accountId}:oidc-provider/${providerHost}`;
+        // Step 1: Create the OIDC provider
+        console.log('Step 1: Creating GitLab OIDC identity provider...');
+        const existingProvider = run(`aws iam get-open-id-connect-provider --open-id-connect-provider-arn ${providerArn}`);
+        if (existingProvider.ok) {
+            console.log('  ✓ OIDC provider already exists.');
+        }
+        else {
+            const createProvider = run(`aws iam create-open-id-connect-provider ` +
+                `--url ${gitlabUrl} ` +
+                `--client-id-list ${gitlabUrl} ` +
+                `--thumbprint-list 0000000000000000000000000000000000000000`);
+            if (createProvider.ok) {
+                console.log('  ✓ OIDC provider created.');
+            }
+            else {
+                console.error(`  ✗ Failed to create OIDC provider: ${createProvider.stderr}`);
+                process.exit(1);
+            }
+        }
+        // Step 2: Create the IAM role
+        const repoName = projectPath.split('/').pop() || 'prism';
+        const roleName = `GitLabCI-${repoName}`;
+        console.log(`\nStep 2: Creating IAM role "${roleName}"...`);
+        const trustPolicy = JSON.stringify({
+            Version: '2012-10-17',
+            Statement: [
+                {
+                    Effect: 'Allow',
+                    Principal: { Federated: providerArn },
+                    Action: 'sts:AssumeRoleWithWebIdentity',
+                    Condition: {
+                        StringEquals: {
+                            [`${providerHost}:aud`]: gitlabUrl,
+                        },
+                        StringLike: {
+                            [`${providerHost}:sub`]: `project_path:${projectPath}:*`,
+                        },
+                    },
+                },
+            ],
+        });
+        const existingRole = run(`aws iam get-role --role-name ${roleName}`);
+        if (existingRole.ok) {
+            console.log(`  ✓ Role "${roleName}" already exists. Updating trust policy...`);
+            const update = run(`aws iam update-assume-role-policy --role-name ${roleName} --policy-document '${trustPolicy}'`);
+            if (update.ok)
+                console.log('  ✓ Trust policy updated.');
+            else {
+                console.error(`  ✗ Failed: ${update.stderr}`);
+                process.exit(1);
+            }
+        }
+        else {
+            const createRole = run(`aws iam create-role --role-name ${roleName} ` +
+                `--assume-role-policy-document '${trustPolicy}' ` +
+                `--description "GitLab CI OIDC role for ${projectPath}"`);
+            if (createRole.ok)
+                console.log(`  ✓ Role "${roleName}" created.`);
+            else {
+                console.error(`  ✗ Failed: ${createRole.stderr}`);
+                process.exit(1);
+            }
+        }
+        // Step 3: Attach permissions policy
+        console.log('\nStep 3: Attaching permissions policy...');
+        const policyDocument = JSON.stringify({
+            Version: '2012-10-17',
+            Statement: [
+                {
+                    Effect: 'Allow',
+                    Action: 'events:PutEvents',
+                    Resource: `arn:aws:events:us-west-2:${accountId}:event-bus/prism-d1-metrics`,
+                },
+                {
+                    Effect: 'Allow',
+                    Action: 'bedrock:InvokeModel',
+                    Resource: '*',
+                },
+            ],
+        });
+        const policyName = 'PrismD1WorkshopPolicy';
+        const putPolicy = run(`aws iam put-role-policy --role-name ${roleName} --policy-name ${policyName} --policy-document '${policyDocument}'`);
+        if (putPolicy.ok)
+            console.log(`  ✓ Inline policy "${policyName}" attached.`);
+        else {
+            console.error(`  ✗ Failed: ${putPolicy.stderr}`);
+            process.exit(1);
+        }
+        // Summary
+        const roleArn = `arn:aws:iam::${accountId}:role/${roleName}`;
+        console.log('\n════════════════════════════════════════════════');
+        console.log('  ✅ GitLab OIDC setup complete!');
+        console.log('════════════════════════════════════════════════');
+        console.log(`\n  Role ARN: ${roleArn}`);
+        console.log(`  Project:  ${projectPath}`);
+        console.log(`  Provider: ${gitlabUrl}`);
+        console.log('\n  Next step: Add a CI/CD variable in GitLab');
+        console.log('');
+        console.log('  In your GitLab project, go to:');
+        console.log('    Settings > CI/CD > Variables > Add variable');
+        console.log('');
+        console.log(`    Key:   PRISM_METRICS_ROLE_ARN`);
+        console.log(`    Value: ${roleArn}`);
+        console.log('    Type:  Variable');
+        console.log('    Protect: Yes (only available on protected branches)');
+        console.log('');
+        console.log('  The PRISM GitLab workflows use id_tokens (GitLab 15.7+) for OIDC.');
+        console.log('  The token is configured automatically — no additional setup needed.');
+        console.log(`  Audience is set to: ${gitlabUrl}`);
+        console.log('');
+    },
+};
+//# sourceMappingURL=setup-gitlab-oidc.js.map

package/dist/src/commands/bootstrapper/setup-gitlab-oidc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-gitlab-oidc.js","sourceRoot":"","sources":["../../../../src/commands/bootstrapper/setup-gitlab-oidc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,SAAS,MAAM,CAAC,QAAgB,EAAE,YAAqB;IACrD,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;YAC/C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,YAAY,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,GAAG,CAAC,GAAW;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACrF,CAAC;AACH,CAAC;AAED,eAAe;IACb,WAAW,EAAE,oEAAoE;IACjF,KAAK,CAAC,MAAM;QACV,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;QAE7E,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,CAAC;QAChF,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,uCAAuC,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,2BAA2B,WAAW,OAAO,SAAS,EAAE,CAAC,CAAC;QAEtE,wBAAwB;QACxB,MAAM,GAAG,GAAG,GAAG,CAAC,2DAA2D,CAAC,CAAC;QAC7E,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,gBAAgB,SAAS,IAAI,CAAC,CAAC;QAE3C,oCAAoC;QACpC,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,WAAW,GAAG,gBAAgB,SAAS,kBAAkB,YAAY,EAAE,CAAC;QAE9E,mCAAmC;QACnC,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QACjE,MAAM,gBAAgB,GAAG,GAAG,CAAC,uEAAuE,WAAW,EAAE,CAAC,CAAC;QACnH,IAAI,gBAAgB,CAAC,EAAE,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,MAAM,cAAc,GAAG,GAAG,CACxB,0CAA0C;gBAC1C,SAAS,SAAS,GAAG;gBACrB,oBAAoB,SAAS,GAAG;gBAChC,4DAA4D,CAC7D,CAAC;YACF,IAAI,cAAc,CAAC,EAAE,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC5C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,uCAAuC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC;QACzD,MAAM,QAAQ,GAAG,YAAY,QAAQ,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,gCAAgC,QAAQ,MAAM,CAAC,CAAC;QAE5D,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC;YACjC,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE;gBACT;oBACE,MAAM,EAAE,OAAO;oBACf,SAAS,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE;oBACrC,MAAM,EAAE,+BAA+B;oBACvC,SAAS,EAAE;wBACT,YAAY,EAAE;4BACZ,CAAC,GAAG,YAAY,MAAM,CAAC,EAAE,SAAS;yBACnC;wBACD,UAAU,EAAE;4BACV,CAAC,GAAG,YAAY,MAAM,CAAC,EAAE,gBAAgB,WAAW,IAAI;yBACzD;qBACF;iBACF;aACF;SACF,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,GAAG,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;QACrE,IAAI,YAAY,CAAC,EAAE,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,aAAa,QAAQ,4CAA4C,CAAC,CAAC;YAC/E,MAAM,MAAM,GAAG,GAAG,CAAC,iDAAiD,QAAQ,uBAAuB,WAAW,GAAG,CAAC,CAAC;YACnH,IAAI,MAAM,CAAC,EAAE;gBAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;iBACnD,CAAC;gBAAC,OAAO,CAAC,KAAK,CAAC,eAAe,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;QAC1E,CAAC;aAAM,CAAC;YACN,MAAM,UAAU,GAAG,GAAG,CACpB,mCAAmC,QAAQ,GAAG;gBAC9C,kCAAkC,WAAW,IAAI;gBACjD,0CAA0C,WAAW,GAAG,CACzD,CAAC;YACF,IAAI,UAAU,CAAC,EAAE;gBAAE,OAAO,CAAC,GAAG,CAAC,aAAa,QAAQ,YAAY,CAAC,CAAC;iBAC7D,CAAC;gBAAC,OAAO,CAAC,KAAK,CAAC,eAAe,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;QAC9E,CAAC;QAED,oCAAoC;QACpC,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC;YACpC,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE;gBACT;oBACE,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,kBAAkB;oBAC1B,QAAQ,EAAE,4BAA4B,SAAS,6BAA6B;iBAC7E;gBACD;oBACE,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,qBAAqB;oBAC7B,QAAQ,EAAE,GAAG;iBACd;aACF;SACF,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,uBAAuB,CAAC;QAC3C,MAAM,SAAS,GAAG,GAAG,CACnB,uCAAuC,QAAQ,kBAAkB,UAAU,uBAAuB,cAAc,GAAG,CACpH,CAAC;QACF,IAAI,SAAS,CAAC,EAAE;YAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,UAAU,aAAa,CAAC,CAAC;aACxE,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,eAAe,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAE3E,UAAU;QACV,MAAM,OAAO,GAAG,gBAAgB,SAAS,SAAS,QAAQ,EAAE,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,eAAe,WAAW,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,SAAS,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAC;QACrF,OAAO,CAAC,GAAG,CAAC,yBAAyB,SAAS,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;CACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prism-d1/cli",
-  "version": "1.0.42",
+  "version": "1.0.43",
   "description": "PRISM D1 Velocity CLI — AI development lifecycle assessment tool",
   "author": "andklee",
   "engines": {