@prism-d1/cli 1.0.44 → 1.0.46

package/dist/assets/gitlab-workflows/.gitlab-ci.yml

@@ -0,0 +1,17 @@
+# PRISM D1 Velocity — GitLab CI/CD Pipeline
+#
+# Copy this file to .gitlab-ci.yml in your repo root.
+# Individual workflow files should be placed in .prism/gitlab-workflows/
+#
+# Required setup:
+#   1. Run: prism-cli bootstrapper setup-gitlab-oidc
+#   2. Add CI/CD variable PRISM_METRICS_ROLE_ARN with the output role ARN
+#   3. Copy gitlab-workflows/*.yml to .prism/gitlab-workflows/ in your repo
+#   4. (Optional) Set GITLAB_OIDC_AUDIENCE if not using gitlab.aws.dev
+#   5. (Optional) Create a pipeline schedule for prism-dora-weekly (Monday 09:00 UTC)
+
+include:
+  - local: '.prism/gitlab-workflows/prism-ai-metrics.yml'
+  - local: '.prism/gitlab-workflows/prism-dora-weekly.yml'
+  - local: '.prism/gitlab-workflows/prism-agent-eval.yml'
+  - local: '.prism/gitlab-workflows/prism-eval-gate.yml'

package/dist/assets/gitlab-workflows/prism-agent-eval.yml

@@ -0,0 +1,132 @@
+# prism-agent-eval.yml — Evaluate agent outputs on MRs that modify agent code.
+#
+# Include this file in your .gitlab-ci.yml:
+#   include:
+#     - local: '.prism/gitlab-workflows/prism-agent-eval.yml'
+#
+# Required setup:
+#   - CI/CD variable PRISM_METRICS_ROLE_ARN (IAM role with bedrock:InvokeModel + events:PutEvents)
+#   - CI/CD variable AWS_REGION (default: us-west-2)
+#   - .prism/config.json committed to the repo
+#   - .prism/eval-harness/ installed (run: prism-cli bootstrapper install-eval-harness)
+#   - (Optional) Agent entry point supports --mock flag for dry-run execution
+
+prism-agent-eval:
+  stage: test
+  image: python:3.12-slim
+  id_tokens:
+    GITLAB_OIDC_TOKEN:
+      aud: https://gitlab.aws.dev
+  rules:
+    - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
+      changes:
+        - agent/**
+        - agents/**
+        - mcp-servers/**
+        - "**/*agent*.py"
+        - "**/*agent*.ts"
+  variables:
+    AWS_DEFAULT_REGION: ${AWS_REGION:-us-west-2}
+  before_script:
+    - apt-get update -qq && apt-get install -y -qq jq bc git curl unzip
+    - curl -s "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o /tmp/awscliv2.zip
+    - unzip -q /tmp/awscliv2.zip -d /tmp && /tmp/aws/install
+    - pip install --quiet strands-agents strands-agents-tools requests
+    - git fetch --unshallow || true
+    - |
+      # Assume AWS role via GitLab OIDC
+      if [[ -n "${PRISM_METRICS_ROLE_ARN}" && -n "${GITLAB_OIDC_TOKEN}" ]]; then
+        CREDS=$(aws sts assume-role-with-web-identity \
+          --role-arn "${PRISM_METRICS_ROLE_ARN}" \
+          --role-session-name "gitlab-ci-${CI_JOB_ID}" \
+          --web-identity-token "${GITLAB_OIDC_TOKEN}" \
+          --query 'Credentials.[AccessKeyId,SecretAccessKey,SessionToken]' \
+          --output text)
+        export AWS_ACCESS_KEY_ID=$(echo "${CREDS}" | awk '{print $1}')
+        export AWS_SECRET_ACCESS_KEY=$(echo "${CREDS}" | awk '{print $2}')
+        export AWS_SESSION_TOKEN=$(echo "${CREDS}" | awk '{print $3}')
+      fi
+  script:
+    - |
+      TEAM_ID=$(jq -r '.team_id // "no_team"' .prism/config.json 2>/dev/null || echo "no_team")
+      BASE_SHA="${CI_MERGE_REQUEST_DIFF_BASE_SHA}"
+      HEAD_SHA="${CI_COMMIT_SHA}"
+
+      # Identify agent changes
+      AGENT_FILES=$(git diff --name-only "${BASE_SHA}..${HEAD_SHA}" \
+        | grep -E '(^agent/|^agents/|^mcp-servers/|agent.*\.(py|ts)$)' || true)
+
+      if [[ -z "${AGENT_FILES}" ]]; then
+        echo "No agent-related files changed. Skipping."
+        exit 0
+      fi
+
+      FILE_COUNT=$(echo "${AGENT_FILES}" | wc -l | tr -d ' ')
+      echo "Found ${FILE_COUNT} changed agent files."
+
+      # Run agent in mock mode
+      AGENT_ENTRY=""
+      for CANDIDATE in agent/main.py agents/main.py agent.py; do
+        [[ -f "${CANDIDATE}" ]] && AGENT_ENTRY="${CANDIDATE}" && break
+      done
+
+      MOCK_RAN="false"
+      if [[ -n "${AGENT_ENTRY}" ]]; then
+        echo "Running agent in mock mode: ${AGENT_ENTRY}"
+        MOCK_RAN="true"
+        set +e
+        python "${AGENT_ENTRY}" --mock > /tmp/agent-output.json 2>/tmp/agent-stderr.log
+        AGENT_EXIT=$?
+        set -e
+      else
+        echo "{}" > /tmp/agent-output.json
+        AGENT_EXIT=0
+      fi
+
+      # Evaluate
+      chmod +x .prism/eval-harness/run-eval.sh
+      RUBRIC=".prism/eval-harness/rubrics/agent-quality.json"
+
+      if [[ -s /tmp/agent-output.json ]]; then
+        EVAL_TARGET="/tmp/agent-output.json"
+      else
+        EVAL_TARGET=$(echo "${AGENT_FILES}" | head -1)
+      fi
+
+      set +e
+      OUTPUT=$(./.prism/eval-harness/run-eval.sh "${RUBRIC}" "${EVAL_TARGET}" 2>&1)
+      set -e
+
+      SCORE=$(echo "${OUTPUT}" | grep '^Score:' | awk '{print $2}' || echo "0")
+      RESULT=$(echo "${OUTPUT}" | grep '^Result:' | awk '{print $2}' || echo "UNKNOWN")
+
+      echo "Agent eval: score=${SCORE} result=${RESULT}"
+
+      # Post MR note
+      if [[ -n "${GITLAB_TOKEN:-${CI_JOB_TOKEN}}" ]]; then
+        EMOJI=$([[ "${RESULT}" == "PASS" ]] && echo "✅" || echo "❌")
+        NOTE="## ${EMOJI} PRISM Agent Eval — ${RESULT}\n\n**Score**: ${SCORE} | **Agent Files**: ${FILE_COUNT} | **Mock**: ${MOCK_RAN} (exit ${AGENT_EXIT})"
+        curl -s --request POST --header "PRIVATE-TOKEN: ${GITLAB_TOKEN:-${CI_JOB_TOKEN}}" \
+          --form "body=${NOTE}" \
+          "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/merge_requests/${CI_MERGE_REQUEST_IID}/notes" > /dev/null
+      fi
+
+      # Emit event
+      TIMESTAMP=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
+      EVAL_EVENT=$(jq -n \
+        --arg team_id "${TEAM_ID}" --arg repo "${CI_PROJECT_PATH}" --arg timestamp "${TIMESTAMP}" \
+        --argjson score "${SCORE:-0}" --arg result "${RESULT}" --argjson file_count "${FILE_COUNT}" \
+        --arg mr_iid "${CI_MERGE_REQUEST_IID}" --arg mock_ran "${MOCK_RAN}" \
+        '{team_id:$team_id, repo:$repo, timestamp:$timestamp, prism_level:3,
+         metric:{name:"agent_eval_score",value:$score,unit:"score"},
+         ai_context:{tool:"bedrock-eval",model:"anthropic.claude-sonnet-4-20250514",origin:"ai-generated"},
+         ai_dora:{eval_gate_pass_rate:(if $result == "PASS" then 1.0 else 0.0 end)},
+         agent_eval:{file_count:$file_count, result:$result, mock_ran:($mock_ran == "true"),
+                     mr_iid:($mr_iid | tonumber), rubric:"agent-quality"}}')
+
+      aws events put-events --region "${AWS_DEFAULT_REGION}" \
+        --entries "[{\"Source\":\"prism.d1.velocity\",\"DetailType\":\"prism.d1.agent.eval\",
+          \"EventBusName\":\"prism-d1-metrics\",
+          \"Detail\":$(echo "${EVAL_EVENT}" | jq -c '.' | jq -Rs '.')}]"
+
+      [[ "${RESULT}" == "FAIL" ]] && exit 1 || exit 0

package/dist/assets/gitlab-workflows/prism-ai-metrics.yml

@@ -0,0 +1,141 @@
+# prism-ai-metrics.yml — Emit AI-assisted development metrics on MR merge.
+#
+# Include this file in your .gitlab-ci.yml:
+#   include:
+#     - local: '.prism/gitlab-workflows/prism-ai-metrics.yml'
+#
+# Required setup:
+#   - CI/CD variable PRISM_METRICS_ROLE_ARN (IAM role ARN with events:PutEvents)
+#   - CI/CD variable AWS_REGION (default: us-west-2)
+#   - .prism/config.json committed to the repo
+#   - AWS credentials configured via OIDC or CI/CD variables
+
+prism-ai-metrics:
+  stage: .post
+  image:
+    name: amazon/aws-cli:latest
+    entrypoint: [""]
+  id_tokens:
+    GITLAB_OIDC_TOKEN:
+      aud: https://gitlab.aws.dev
+  rules:
+    - if: '$CI_PIPELINE_SOURCE == "merge_request_event" && $CI_MERGE_REQUEST_STATE == "merged"'
+    - if: '$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_PIPELINE_SOURCE == "push"'
+  variables:
+    AWS_DEFAULT_REGION: ${AWS_REGION:-us-west-2}
+  before_script:
+    - yum install -y -q jq bc git
+    - git fetch --unshallow || true
+    - |
+      # Assume AWS role via GitLab OIDC
+      if [[ -n "${PRISM_METRICS_ROLE_ARN}" && -n "${GITLAB_OIDC_TOKEN}" ]]; then
+        CREDS=$(aws sts assume-role-with-web-identity \
+          --role-arn "${PRISM_METRICS_ROLE_ARN}" \
+          --role-session-name "gitlab-ci-${CI_JOB_ID}" \
+          --web-identity-token "${GITLAB_OIDC_TOKEN}" \
+          --query 'Credentials.[AccessKeyId,SecretAccessKey,SessionToken]' \
+          --output text)
+        export AWS_ACCESS_KEY_ID=$(echo "${CREDS}" | awk '{print $1}')
+        export AWS_SECRET_ACCESS_KEY=$(echo "${CREDS}" | awk '{print $2}')
+        export AWS_SESSION_TOKEN=$(echo "${CREDS}" | awk '{print $3}')
+      fi
+  script:
+    - |
+      # Read team ID
+      TEAM_ID=$(jq -r '.team_id // "no_team"' .prism/config.json 2>/dev/null || echo "no_team")
+
+      # Determine commit range
+      if [[ -n "${CI_MERGE_REQUEST_DIFF_BASE_SHA}" ]]; then
+        BASE_SHA="${CI_MERGE_REQUEST_DIFF_BASE_SHA}"
+        HEAD_SHA="${CI_COMMIT_SHA}"
+      else
+        BASE_SHA=$(git rev-parse HEAD~1 2>/dev/null || git rev-parse HEAD)
+        HEAD_SHA="${CI_COMMIT_SHA}"
+      fi
+
+      TOTAL_COMMITS=$(git rev-list --count "${BASE_SHA}..${HEAD_SHA}" 2>/dev/null || echo "1")
+
+      # Count AI origin per-commit
+      AI_GENERATED=0; AI_ASSISTED=0; HUMAN_ONLY=0
+      TOTAL_INPUT_TOKENS=0; TOTAL_OUTPUT_TOKENS=0; TOTAL_COST="0"
+
+      for SHA in $(git rev-list "${BASE_SHA}..${HEAD_SHA}" 2>/dev/null || echo "${HEAD_SHA}"); do
+        MSG=$(git log -1 --format='%B' "${SHA}")
+        echo "${MSG}" | grep -q '^AI-Origin: ai-generated' && AI_GENERATED=$((AI_GENERATED + 1))
+        echo "${MSG}" | grep -q '^AI-Origin: ai-assisted' && AI_ASSISTED=$((AI_ASSISTED + 1))
+        echo "${MSG}" | grep -q '^AI-Origin: human' && HUMAN_ONLY=$((HUMAN_ONLY + 1))
+
+        INPUT_T=$(echo "${MSG}" | grep -oP '(?<=^AI-Input-Tokens: )\d+' || echo "0")
+        OUTPUT_T=$(echo "${MSG}" | grep -oP '(?<=^AI-Output-Tokens: )\d+' || echo "0")
+        COST_T=$(echo "${MSG}" | grep -oP '(?<=^AI-Cost: )[0-9.]+' || echo "0")
+        [[ ${INPUT_T} -gt 1000000 ]] && INPUT_T=0
+        [[ ${OUTPUT_T} -gt 1000000 ]] && OUTPUT_T=0
+        TOTAL_INPUT_TOKENS=$((TOTAL_INPUT_TOKENS + INPUT_T))
+        TOTAL_OUTPUT_TOKENS=$((TOTAL_OUTPUT_TOKENS + OUTPUT_T))
+        TOTAL_COST=$(echo "${TOTAL_COST} + ${COST_T}" | bc -l)
+      done
+
+      AI_COMMITS=$((AI_GENERATED + AI_ASSISTED))
+      [[ "${TOTAL_COMMITS}" -gt 0 ]] && AI_RATIO=$(echo "scale=4; ${AI_COMMITS} / ${TOTAL_COMMITS}" | bc -l | sed 's/^\./0./') || AI_RATIO="0"
+
+      # Calculate lead time (MR created to merged)
+      LEAD_TIME_SECONDS=0
+      if [[ -n "${CI_MERGE_REQUEST_CREATED_AT}" ]]; then
+        CREATED_TS=$(date -d "${CI_MERGE_REQUEST_CREATED_AT}" +%s 2>/dev/null || echo "0")
+        MERGED_TS=$(date +%s)
+        LEAD_TIME_SECONDS=$((MERGED_TS - CREATED_TS))
+      fi
+
+      TIMESTAMP=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
+
+      PR_EVENT=$(jq -n \
+        --arg team_id "${TEAM_ID}" \
+        --arg repo "${CI_PROJECT_PATH}" \
+        --arg timestamp "${TIMESTAMP}" \
+        --argjson ai_ratio "${AI_RATIO}" \
+        --argjson total_commits "${TOTAL_COMMITS}" \
+        --argjson ai_commits "${AI_COMMITS}" \
+        --argjson ai_generated "${AI_GENERATED}" \
+        --argjson ai_assisted "${AI_ASSISTED}" \
+        --argjson lead_time_seconds "${LEAD_TIME_SECONDS}" \
+        --arg mr_iid "${CI_MERGE_REQUEST_IID:-0}" \
+        --arg mr_author "${GITLAB_USER_LOGIN}" \
+        --argjson total_input_tokens "${TOTAL_INPUT_TOKENS}" \
+        --argjson total_output_tokens "${TOTAL_OUTPUT_TOKENS}" \
+        --arg total_cost "${TOTAL_COST}" \
+        '{
+          team_id: $team_id, repo: $repo, timestamp: $timestamp, prism_level: 2,
+          metric: {name: "ai_to_merge_ratio", value: $ai_ratio, unit: "ratio"},
+          ai_context: {tool: "gitlab-ci", model: "n/a",
+            origin: (if $ai_ratio > 0 then "ai-assisted" else "human" end)},
+          dora: {deployment_frequency: 1, lead_time_seconds: $lead_time_seconds},
+          ai_dora: {ai_to_merge_ratio: $ai_ratio, total_commits: $total_commits,
+            ai_commits: $ai_commits, ai_generated_commits: $ai_generated,
+            ai_assisted_commits: $ai_assisted,
+            total_input_tokens: $total_input_tokens,
+            total_output_tokens: $total_output_tokens,
+            total_cost_usd: (if $total_cost != "0" and $total_cost != "" then ($total_cost | tonumber) else 0 end)},
+          mr: {iid: ($mr_iid | tonumber), author: $mr_author}
+        }')
+
+      aws events put-events --region "${AWS_DEFAULT_REGION}" \
+        --entries "[{
+          \"Source\": \"prism.d1.velocity\",
+          \"DetailType\": \"prism.d1.pr\",
+          \"EventBusName\": \"prism-d1-metrics\",
+          \"Detail\": $(echo "${PR_EVENT}" | jq -c '.' | jq -Rs '.')
+        }]"
+
+      # Also emit deploy event
+      DEPLOY_EVENT=$(jq -n --arg team_id "${TEAM_ID}" --arg repo "${CI_PROJECT_PATH}" --arg timestamp "${TIMESTAMP}" \
+        '{team_id: $team_id, repo: $repo, timestamp: $timestamp, prism_level: 2,
+         metric: {name: "deployment", value: 1, unit: "count"},
+         dora: {deployment_frequency: 1}}')
+
+      aws events put-events --region "${AWS_DEFAULT_REGION}" \
+        --entries "[{
+          \"Source\": \"prism.d1.velocity\",
+          \"DetailType\": \"prism.d1.deploy\",
+          \"EventBusName\": \"prism-d1-metrics\",
+          \"Detail\": $(echo "${DEPLOY_EVENT}" | jq -c '.' | jq -Rs '.')
+        }]"

package/dist/assets/gitlab-workflows/prism-dora-weekly.yml

@@ -0,0 +1,168 @@
+# prism-dora-weekly.yml — Weekly DORA + AI-DORA metrics assessment.
+#
+# Include this file in your .gitlab-ci.yml:
+#   include:
+#     - local: '.prism/gitlab-workflows/prism-dora-weekly.yml'
+#
+# Required setup:
+#   - CI/CD variable PRISM_METRICS_ROLE_ARN (IAM role with events:PutEvents + cloudwatch:PutMetricData)
+#   - CI/CD variable AWS_REGION (default: us-west-2)
+#   - .prism/config.json committed to the repo
+#   - Pipeline schedule configured: weekly on Monday at 09:00 UTC
+
+prism-dora-weekly:
+  stage: .post
+  image:
+    name: amazon/aws-cli:latest
+    entrypoint: [""]
+  id_tokens:
+    GITLAB_OIDC_TOKEN:
+      aud: https://gitlab.aws.dev
+  rules:
+    - if: '$CI_PIPELINE_SOURCE == "schedule"'
+    - if: '$CI_PIPELINE_SOURCE == "web"'
+      when: manual
+  variables:
+    AWS_DEFAULT_REGION: ${AWS_REGION:-us-west-2}
+  before_script:
+    - yum install -y -q jq bc git curl
+    - git fetch --unshallow || true
+    - |
+      # Assume AWS role via GitLab OIDC
+      if [[ -n "${PRISM_METRICS_ROLE_ARN}" && -n "${GITLAB_OIDC_TOKEN}" ]]; then
+        CREDS=$(aws sts assume-role-with-web-identity \
+          --role-arn "${PRISM_METRICS_ROLE_ARN}" \
+          --role-session-name "gitlab-ci-${CI_JOB_ID}" \
+          --web-identity-token "${GITLAB_OIDC_TOKEN}" \
+          --query 'Credentials.[AccessKeyId,SecretAccessKey,SessionToken]' \
+          --output text)
+        export AWS_ACCESS_KEY_ID=$(echo "${CREDS}" | awk '{print $1}')
+        export AWS_SECRET_ACCESS_KEY=$(echo "${CREDS}" | awk '{print $2}')
+        export AWS_SESSION_TOKEN=$(echo "${CREDS}" | awk '{print $3}')
+      fi
+  script:
+    - |
+      TEAM_ID=$(jq -r '.team_id // "no_team"' .prism/config.json 2>/dev/null || echo "no_team")
+      SINCE_DATE=$(date -u -d '7 days ago' +"%Y-%m-%d")
+      REPO="${CI_PROJECT_PATH}"
+      NAMESPACE="PRISM/D1/Velocity"
+
+      # ---------------------------------------------------------------
+      # 1. Deployment Frequency — merged MRs to default branch (past 7 days)
+      # ---------------------------------------------------------------
+      SINCE_ISO=$(date -u -d '7 days ago' +"%Y-%m-%dT%H:%M:%SZ")
+      MERGED_MRS=$(curl -s --header "PRIVATE-TOKEN: ${GITLAB_TOKEN:-${CI_JOB_TOKEN}}" \
+        "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/merge_requests?state=merged&updated_after=${SINCE_ISO}&per_page=100" 2>/dev/null || echo "[]")
+      DEPLOY_COUNT=$(echo "${MERGED_MRS}" | jq 'length')
+      DEPLOY_FREQUENCY=$(echo "scale=2; ${DEPLOY_COUNT} / 7" | bc -l | sed 's/^\./0./')
+
+      # ---------------------------------------------------------------
+      # 2. Lead Time — avg time from MR open to merge
+      # ---------------------------------------------------------------
+      AVG_LEAD_TIME_HOURS=$(echo "${MERGED_MRS}" | jq '
+        if length == 0 then 0
+        else [.[] | select(.merged_at != null and .created_at != null) |
+          ((.merged_at | sub("\\.[0-9]+Z$"; "Z") | strptime("%Y-%m-%dT%H:%M:%SZ") | mktime) -
+           (.created_at | sub("\\.[0-9]+Z$"; "Z") | strptime("%Y-%m-%dT%H:%M:%SZ") | mktime)) / 3600
+        ] | if length > 0 then add / length | . * 100 | round / 100 else 0 end
+        end')
+
+      # ---------------------------------------------------------------
+      # 3. Change Failure Rate — MRs with "revert|hotfix|rollback" in title
+      # ---------------------------------------------------------------
+      FAILURE_MRS=$(echo "${MERGED_MRS}" | jq '[.[] | select(.title // "" | test("revert|hotfix|rollback"; "i"))] | length')
+      [[ "${DEPLOY_COUNT}" -gt 0 ]] && CHANGE_FAILURE_RATE=$(echo "scale=4; ${FAILURE_MRS} / ${DEPLOY_COUNT}" | bc -l | sed 's/^\./0./') || CHANGE_FAILURE_RATE="0"
+
+      # ---------------------------------------------------------------
+      # 4. MTTR — avg time for hotfix/revert MRs
+      # ---------------------------------------------------------------
+      MTTR_HOURS=$(echo "${MERGED_MRS}" | jq '
+        [.[] | select(.title // "" | test("revert|hotfix|rollback"; "i")) |
+         select(.merged_at != null and .created_at != null) |
+         ((.merged_at | sub("\\.[0-9]+Z$"; "Z") | strptime("%Y-%m-%dT%H:%M:%SZ") | mktime) -
+          (.created_at | sub("\\.[0-9]+Z$"; "Z") | strptime("%Y-%m-%dT%H:%M:%SZ") | mktime)) / 3600
+        ] | if length > 0 then add / length | . * 100 | round / 100 else 0 end')
+
+      # ---------------------------------------------------------------
+      # 5. AI-DORA metrics from commit trailers
+      # ---------------------------------------------------------------
+      TOTAL_COMMITS=$(git log --since="${SINCE_DATE}" --oneline "${CI_DEFAULT_BRANCH}" 2>/dev/null | wc -l | tr -d ' ')
+      AI_GENERATED=0; AI_ASSISTED=0; HUMAN_ONLY=0; SPEC_REFS=0
+      CLAUDE_CODE_COUNT=0; KIRO_COUNT=0; Q_DEV_COUNT=0
+
+      for SHA in $(git log --since="${SINCE_DATE}" --format='%H' "${CI_DEFAULT_BRANCH}" 2>/dev/null); do
+        MSG=$(git log -1 --format='%B' "${SHA}")
+        echo "${MSG}" | grep -q '^AI-Origin: ai-generated' && AI_GENERATED=$((AI_GENERATED + 1))
+        echo "${MSG}" | grep -q '^AI-Origin: ai-assisted' && AI_ASSISTED=$((AI_ASSISTED + 1))
+        echo "${MSG}" | grep -q '^AI-Origin: human' && HUMAN_ONLY=$((HUMAN_ONLY + 1))
+        echo "${MSG}" | grep -q '^Spec-Ref:' && SPEC_REFS=$((SPEC_REFS + 1))
+        TOOL=$(echo "${MSG}" | grep -oP '(?<=^AI-Tool: ).+' || true)
+        case "${TOOL}" in
+          *claude-code*) CLAUDE_CODE_COUNT=$((CLAUDE_CODE_COUNT + 1)) ;;
+          *kiro*)        KIRO_COUNT=$((KIRO_COUNT + 1)) ;;
+          *q-developer*) Q_DEV_COUNT=$((Q_DEV_COUNT + 1)) ;;
+        esac
+      done
+
+      UNTAGGED=$((TOTAL_COMMITS - AI_GENERATED - AI_ASSISTED - HUMAN_ONLY))
+      [[ "${UNTAGGED}" -lt 0 ]] && UNTAGGED=0
+      AI_TOTAL=$((AI_GENERATED + AI_ASSISTED))
+      [[ "${TOTAL_COMMITS}" -gt 0 ]] && AI_ADOPTION_RATE=$(echo "scale=4; ${AI_TOTAL} / ${TOTAL_COMMITS}" | bc -l | sed 's/^\./0./') || AI_ADOPTION_RATE="0"
+      [[ "${TOTAL_COMMITS}" -gt 0 ]] && SPEC_COVERAGE=$(echo "scale=4; ${SPEC_REFS} / ${TOTAL_COMMITS}" | bc -l | sed 's/^\./0./') || SPEC_COVERAGE="0"
+
+      # ---------------------------------------------------------------
+      # Emit assessment event
+      # ---------------------------------------------------------------
+      TIMESTAMP=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
+
+      ASSESSMENT_EVENT=$(jq -n \
+        --arg team_id "${TEAM_ID}" --arg repo "${REPO}" --arg timestamp "${TIMESTAMP}" \
+        --argjson deploy_count "${DEPLOY_COUNT}" --argjson deploy_frequency "${DEPLOY_FREQUENCY}" \
+        --argjson avg_lead_time_hours "${AVG_LEAD_TIME_HOURS}" \
+        --argjson change_failure_rate "${CHANGE_FAILURE_RATE}" --argjson mttr_hours "${MTTR_HOURS}" \
+        --argjson total_commits "${TOTAL_COMMITS}" --argjson ai_generated "${AI_GENERATED}" \
+        --argjson ai_assisted "${AI_ASSISTED}" --argjson human_only "${HUMAN_ONLY}" \
+        --argjson untagged "${UNTAGGED}" --argjson ai_adoption_rate "${AI_ADOPTION_RATE}" \
+        --argjson spec_coverage "${SPEC_COVERAGE}" \
+        --argjson claude_code "${CLAUDE_CODE_COUNT}" --argjson kiro "${KIRO_COUNT}" --argjson q_dev "${Q_DEV_COUNT}" \
+        '{team_id:$team_id, repo:$repo, timestamp:$timestamp, prism_level:2,
+         metric:{name:"weekly_assessment",value:1,unit:"assessment"},
+         dora:{deployment_frequency:$deploy_frequency, deployments:$deploy_count,
+               lead_time_hours:$avg_lead_time_hours, change_failure_rate:$change_failure_rate,
+               mttr_hours:$mttr_hours},
+         ai_dora:{ai_adoption_rate:$ai_adoption_rate, ai_to_merge_ratio:$ai_adoption_rate,
+                  total_commits:$total_commits, ai_generated_commits:$ai_generated,
+                  ai_assisted_commits:$ai_assisted, human_commits:$human_only,
+                  untagged_commits:$untagged, spec_coverage:$spec_coverage,
+                  tool_breakdown:{claude_code:$claude_code, kiro:$kiro, q_developer:$q_dev}}}')
+
+      aws events put-events --region "${AWS_DEFAULT_REGION}" \
+        --entries "[{\"Source\":\"prism.d1.velocity\",\"DetailType\":\"prism.d1.assessment\",
+          \"EventBusName\":\"prism-d1-metrics\",
+          \"Detail\":$(echo "${ASSESSMENT_EVENT}" | jq -c '.' | jq -Rs '.')}]"
+
+      # Emit CloudWatch metrics
+      for METRIC_DATA in \
+        "AIAdoptionRate:${AI_ADOPTION_RATE}:Percent" \
+        "SpecCoverage:${SPEC_COVERAGE}:Percent" \
+        "ClaudeCodeCommits:${CLAUDE_CODE_COUNT}:Count" \
+        "KiroCommits:${KIRO_COUNT}:Count" \
+        "QDeveloperCommits:${Q_DEV_COUNT}:Count" \
+        "UntaggedCommits:${UNTAGGED}:Count"; do
+        METRIC_NAME="${METRIC_DATA%%:*}"; REST="${METRIC_DATA#*:}"
+        METRIC_VALUE="${REST%%:*}"; METRIC_UNIT="${REST#*:}"
+        aws cloudwatch put-metric-data --region "${AWS_DEFAULT_REGION}" --namespace "${NAMESPACE}" \
+          --metric-data "[{\"MetricName\":\"${METRIC_NAME}\",\"Value\":${METRIC_VALUE},
+            \"Unit\":\"${METRIC_UNIT}\",\"Timestamp\":\"${TIMESTAMP}\",
+            \"Dimensions\":[{\"Name\":\"TeamId\",\"Value\":\"${TEAM_ID}\"},{\"Name\":\"Repository\",\"Value\":\"${REPO}\"}]}]"
+      done
+
+      echo "=== DORA Metrics ==="
+      echo "Deployment Frequency: ${DEPLOY_FREQUENCY}/day"
+      echo "Lead Time: ${AVG_LEAD_TIME_HOURS} hours"
+      echo "Change Failure Rate: ${CHANGE_FAILURE_RATE}"
+      echo "MTTR: ${MTTR_HOURS} hours"
+      echo "=== AI-DORA Metrics ==="
+      echo "AI Adoption Rate: ${AI_ADOPTION_RATE}"
+      echo "Spec Coverage: ${SPEC_COVERAGE}"
+      echo "Total Commits: ${TOTAL_COMMITS}"

package/dist/assets/gitlab-workflows/prism-eval-gate.yml

@@ -0,0 +1,141 @@
+# prism-eval-gate.yml — Evaluate AI-generated code quality on MRs.
+#
+# Include this file in your .gitlab-ci.yml:
+#   include:
+#     - local: '.prism/gitlab-workflows/prism-eval-gate.yml'
+#
+# Required setup:
+#   - CI/CD variable PRISM_METRICS_ROLE_ARN (IAM role with bedrock:InvokeModel + events:PutEvents)
+#   - CI/CD variable AWS_REGION (default: us-west-2)
+#   - .prism/eval-harness/ directory in your repo (run: prism-cli bootstrapper install-eval-harness)
+#   - At least one rubric JSON in .prism/eval-harness/rubrics/
+
+prism-eval-gate:
+  stage: test
+  image:
+    name: amazon/aws-cli:latest
+    entrypoint: [""]
+  id_tokens:
+    GITLAB_OIDC_TOKEN:
+      aud: https://gitlab.aws.dev
+  rules:
+    - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
+  variables:
+    AWS_DEFAULT_REGION: ${AWS_REGION:-us-west-2}
+  before_script:
+    - yum install -y -q jq bc git curl
+    - git fetch --unshallow || true
+    - |
+      # Assume AWS role via GitLab OIDC
+      if [[ -n "${PRISM_METRICS_ROLE_ARN}" && -n "${GITLAB_OIDC_TOKEN}" ]]; then
+        CREDS=$(aws sts assume-role-with-web-identity \
+          --role-arn "${PRISM_METRICS_ROLE_ARN}" \
+          --role-session-name "gitlab-ci-${CI_JOB_ID}" \
+          --web-identity-token "${GITLAB_OIDC_TOKEN}" \
+          --query 'Credentials.[AccessKeyId,SecretAccessKey,SessionToken]' \
+          --output text)
+        export AWS_ACCESS_KEY_ID=$(echo "${CREDS}" | awk '{print $1}')
+        export AWS_SECRET_ACCESS_KEY=$(echo "${CREDS}" | awk '{print $2}')
+        export AWS_SESSION_TOKEN=$(echo "${CREDS}" | awk '{print $3}')
+      fi
+  script:
+    - |
+      TEAM_ID=$(jq -r '.team_id // "no_team"' .prism/config.json 2>/dev/null || echo "no_team")
+      BASE_SHA="${CI_MERGE_REQUEST_DIFF_BASE_SHA}"
+      HEAD_SHA="${CI_COMMIT_SHA}"
+
+      # Identify AI-generated commits
+      AI_SHAS=""
+      for SHA in $(git rev-list "${BASE_SHA}..${HEAD_SHA}" 2>/dev/null); do
+        if git log -1 --format='%B' "${SHA}" | grep -q 'AI-Origin: ai-generated\|AI-Origin: ai-assisted'; then
+          AI_SHAS="${AI_SHAS} ${SHA}"
+        fi
+      done
+      AI_SHAS=$(echo "${AI_SHAS}" | xargs)
+
+      if [[ -z "${AI_SHAS}" ]]; then
+        echo "No AI-generated code detected. Skipping eval gate."
+        # Post skip note
+        curl -s --request POST --header "PRIVATE-TOKEN: ${GITLAB_TOKEN:-${CI_JOB_TOKEN}}" \
+          --form "body=✅ **PRISM Eval Gate** — No AI-generated code detected. Skipped." \
+          "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/merge_requests/${CI_MERGE_REQUEST_IID}/notes" > /dev/null 2>&1 || true
+        exit 0
+      fi
+
+      # Collect changed source files from AI commits
+      CHANGED_FILES=""
+      for SHA in ${AI_SHAS}; do
+        FILES=$(git diff-tree --no-commit-id --name-only -r "${SHA}" \
+          | grep -E '\.(ts|js|py|go|java|rs|tsx|jsx)$' | grep -v '\.test\.\|\.spec\.' || true)
+        CHANGED_FILES="${CHANGED_FILES}\n${FILES}"
+      done
+      echo -e "${CHANGED_FILES}" | sort -u | grep -v '^$' > /tmp/ai-changed-files.txt || true
+      FILE_COUNT=$(wc -l < /tmp/ai-changed-files.txt | tr -d ' ')
+
+      # Run evaluations
+      chmod +x .prism/eval-harness/run-eval.sh
+      PASS_COUNT=0; FAIL_COUNT=0; TOTAL_SCORE=0; TOTAL_HALLUCINATIONS=0; RESULTS=""
+
+      while IFS= read -r FILE; do
+        [[ -z "${FILE}" || ! -f "${FILE}" ]] && continue
+
+        # Auto-select rubric
+        if echo "${FILE}" | grep -qiE '(agent|assistant|orchestrat|workflow|chain)'; then
+          RUBRIC=".prism/eval-harness/rubrics/agent-quality.json"
+        elif echo "${FILE}" | grep -qiE '(auth|security|guard|policy|iam|permission|crypto)'; then
+          RUBRIC=".prism/eval-harness/rubrics/security-compliance.json"
+        elif echo "${FILE}" | grep -qiE '(api|handler|route|controller)'; then
+          RUBRIC=".prism/eval-harness/rubrics/api-response-quality.json"
+        else
+          RUBRIC=".prism/eval-harness/rubrics/code-quality.json"
+        fi
+        [[ -f "${RUBRIC}" ]] || RUBRIC=$(ls .prism/eval-harness/rubrics/*.json 2>/dev/null | head -1)
+        [[ -f "${RUBRIC}" ]] || { echo "No rubrics found"; exit 1; }
+
+        set +e
+        OUTPUT=$(./.prism/eval-harness/run-eval.sh "${RUBRIC}" "${FILE}" 2>&1)
+        set -e
+
+        SCORE=$(echo "${OUTPUT}" | grep '^Score:' | awk '{print $2}' || echo "0")
+        RESULT=$(echo "${OUTPUT}" | grep '^Result:' | awk '{print $2}' || echo "UNKNOWN")
+        HALLUC=$(echo "${OUTPUT}" | grep '^Hallucinations:' | awk '{print $2}' || echo "0")
+
+        TOTAL_SCORE=$(echo "${TOTAL_SCORE} + ${SCORE}" | bc -l)
+        TOTAL_HALLUCINATIONS=$((TOTAL_HALLUCINATIONS + HALLUC))
+
+        [[ "${RESULT}" == "SKIP" ]] && continue
+        [[ "${RESULT}" == "PASS" ]] && PASS_COUNT=$((PASS_COUNT + 1)) || FAIL_COUNT=$((FAIL_COUNT + 1))
+        RESULTS="${RESULTS}\n| \`${FILE}\` | $(basename "${RUBRIC}" .json) | ${SCORE} | ${RESULT} |"
+      done < /tmp/ai-changed-files.txt
+
+      TOTAL_FILES=$((PASS_COUNT + FAIL_COUNT))
+      [[ "${TOTAL_FILES}" -gt 0 ]] && AVG_SCORE=$(echo "scale=4; ${TOTAL_SCORE} / ${TOTAL_FILES}" | bc -l) || AVG_SCORE="0"
+      [[ "${FAIL_COUNT}" -gt 0 ]] && OVERALL="FAIL" || OVERALL="PASS"
+
+      # Post MR note
+      EMOJI=$([[ "${OVERALL}" == "PASS" ]] && echo "✅" || echo "❌")
+      NOTE="## ${EMOJI} PRISM Eval Gate — ${OVERALL}\n\n**Score**: ${AVG_SCORE} | **Files**: ${TOTAL_FILES} | **Pass**: ${PASS_COUNT} | **Fail**: ${FAIL_COUNT} | **Hallucinations**: ${TOTAL_HALLUCINATIONS}\n\n| File | Rubric | Score | Result |\n|---|---|---|---|\n$(echo -e "${RESULTS}")\n\n> Threshold: 0.82 | Model: claude-sonnet-4-20250514"
+      curl -s --request POST --header "PRIVATE-TOKEN: ${GITLAB_TOKEN:-${CI_JOB_TOKEN}}" \
+        --form "body=${NOTE}" \
+        "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/merge_requests/${CI_MERGE_REQUEST_IID}/notes" > /dev/null 2>&1 || true
+
+      # Emit event
+      TIMESTAMP=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
+      EVAL_EVENT=$(jq -n \
+        --arg team_id "${TEAM_ID}" --arg repo "${CI_PROJECT_PATH}" --arg timestamp "${TIMESTAMP}" \
+        --argjson score "${AVG_SCORE}" --arg result "${OVERALL}" \
+        --argjson total_files "${TOTAL_FILES}" --argjson pass_count "${PASS_COUNT}" \
+        --argjson fail_count "${FAIL_COUNT}" --argjson hallucinations "${TOTAL_HALLUCINATIONS}" \
+        --arg mr_iid "${CI_MERGE_REQUEST_IID}" \
+        '{team_id:$team_id, repo:$repo, timestamp:$timestamp, prism_level:2,
+         metric:{name:"eval_score",value:$score,unit:"score"},
+         ai_context:{tool:"bedrock-eval",model:"anthropic.claude-sonnet-4-20250514",origin:"ai-generated"},
+         eval:{total_files:$total_files, pass_count:$pass_count, fail_count:$fail_count,
+               result:$result, mr_iid:($mr_iid | tonumber), hallucinations_caught:$hallucinations}}')
+
+      aws events put-events --region "${AWS_DEFAULT_REGION}" \
+        --entries "[{\"Source\":\"prism.d1.velocity\",\"DetailType\":\"prism.d1.eval\",
+          \"EventBusName\":\"prism-d1-metrics\",
+          \"Detail\":$(echo "${EVAL_EVENT}" | jq -c '.' | jq -Rs '.')}]"
+
+      [[ "${OVERALL}" == "FAIL" ]] && exit 1 || exit 0

package/dist/src/commands/bootstrapper/install-gitlab-workflows.d.ts

@@ -0,0 +1,14 @@
+declare const _default: {
+    description: string;
+    options: {
+        flags: string;
+        description: string;
+        default: string;
+    }[];
+    action(opts: {
+        gitlabUrl?: string;
+        outputDir: string;
+    }): Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=install-gitlab-workflows.d.ts.map

package/dist/src/commands/bootstrapper/install-gitlab-workflows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-gitlab-workflows.d.ts","sourceRoot":"","sources":["../../../../src/commands/bootstrapper/install-gitlab-workflows.ts"],"names":[],"mappings":";;;;;;;iBAsBqB;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;;AAN9D,wBA2CE"}

package/dist/src/commands/bootstrapper/install-gitlab-workflows.js

@@ -0,0 +1,53 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { createInterface } from 'node:readline';
+import { getAssetPath } from '../../utils/root.js';
+function prompt(question, defaultValue) {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    const suffix = defaultValue ? ` [${defaultValue}]` : '';
+    return new Promise((resolve) => {
+        rl.question(`${question}${suffix}: `, (answer) => {
+            rl.close();
+            resolve(answer.trim() || defaultValue || '');
+        });
+    });
+}
+export default {
+    description: 'Install GitLab CI workflow templates into the current repo',
+    options: [
+        { flags: '--gitlab-url <url>', description: 'GitLab instance URL for OIDC audience', default: 'https://gitlab.aws.dev' },
+        { flags: '--output-dir <dir>', description: 'Output directory', default: '.prism/gitlab-workflows' },
+    ],
+    async action(opts) {
+        const gitlabUrl = opts.gitlabUrl || await prompt('GitLab instance URL', 'https://gitlab.aws.dev');
+        const outputDir = opts.outputDir;
+        console.log(`\n📦 Installing GitLab CI workflows`);
+        console.log(`   Audience: ${gitlabUrl}`);
+        console.log(`   Output:   ${outputDir}/\n`);
+        mkdirSync(outputDir, { recursive: true });
+        const assetDir = getAssetPath(import.meta.url, 'gitlab-workflows/.gitlab-ci.yml').replace('/.gitlab-ci.yml', '');
+        const files = readdirSync(assetDir).filter(f => f.endsWith('.yml'));
+        for (const file of files) {
+            let content = readFileSync(join(assetDir, file), 'utf-8');
+            // Template the audience
+            content = content.replace(/aud: https:\/\/gitlab\.aws\.dev/g, `aud: ${gitlabUrl}`);
+            writeFileSync(join(outputDir, file), content);
+            console.log(`  ✓ ${file}`);
+        }
+        // Update .gitlab-ci.yml include paths
+        const ciFile = join(outputDir, '.gitlab-ci.yml');
+        if (existsSync(ciFile)) {
+            let ci = readFileSync(ciFile, 'utf-8');
+            ci = ci.replace(/\.prism\/gitlab-workflows/g, outputDir);
+            writeFileSync(ciFile, ci);
+        }
+        console.log(`\n✅ Installed ${files.length} workflow files to ${outputDir}/`);
+        console.log(`\nNext steps:`);
+        console.log(`  1. Copy ${outputDir}/.gitlab-ci.yml to your repo root`);
+        console.log(`  2. Run: prism-cli bootstrapper setup-gitlab-oidc`);
+        console.log(`  3. Add CI/CD variable PRISM_METRICS_ROLE_ARN in GitLab`);
+        console.log(`  4. (Optional) Create pipeline schedule for weekly DORA assessment`);
+        console.log('');
+    },
+};
+//# sourceMappingURL=install-gitlab-workflows.js.map

package/dist/src/commands/bootstrapper/install-gitlab-workflows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-gitlab-workflows.js","sourceRoot":"","sources":["../../../../src/commands/bootstrapper/install-gitlab-workflows.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC1F,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,SAAS,MAAM,CAAC,QAAgB,EAAE,YAAqB;IACrD,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;YAC/C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,YAAY,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,eAAe;IACb,WAAW,EAAE,4DAA4D;IACzE,OAAO,EAAE;QACP,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,uCAAuC,EAAE,OAAO,EAAE,wBAAwB,EAAE;QACxH,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,kBAAkB,EAAE,OAAO,EAAE,yBAAyB,EAAE;KACrG;IACD,KAAK,CAAC,MAAM,CAAC,IAA+C;QAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,MAAM,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,CAAC;QAClG,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAEjC,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,gBAAgB,SAAS,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,gBAAgB,SAAS,KAAK,CAAC,CAAC;QAE5C,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1C,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QACjH,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAEpE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YAC1D,wBAAwB;YACxB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,kCAAkC,EAAE,QAAQ,SAAS,EAAE,CAAC,CAAC;YACnF,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAC7B,CAAC;QAED,sCAAsC;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACjD,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,IAAI,EAAE,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACvC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,4BAA4B,EAAE,SAAS,CAAC,CAAC;YACzD,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,MAAM,sBAAsB,SAAS,GAAG,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,aAAa,SAAS,mCAAmC,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;CACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prism-d1/cli",
-  "version": "1.0.44",
+  "version": "1.0.46",
   "description": "PRISM D1 Velocity CLI — AI development lifecycle assessment tool",
   "author": "andklee",
   "engines": {
@@ -22,7 +22,7 @@
     "access": "public"
   },
   "scripts": {
-    "build": "npx tsc && mkdir -p dist/assets/infra && cp -r ../bootstrapper/metric-hooks ../bootstrapper/eval-harness ../bootstrapper/github-workflows dist/assets/ && cp -r ../infra/bin ../infra/lib ../infra/package.json ../infra/tsconfig.json ../infra/cdk.json dist/assets/infra/",
+    "build": "npx tsc && mkdir -p dist/assets/infra && cp -r ../bootstrapper/metric-hooks ../bootstrapper/eval-harness ../bootstrapper/github-workflows ../bootstrapper/gitlab-workflows dist/assets/ && cp -r ../infra/bin ../infra/lib ../infra/package.json ../infra/tsconfig.json ../infra/cdk.json dist/assets/infra/",
     "prepublishOnly": "npm run build",
     "start": "tsx bin/prism-cli.ts",
     "dev": "tsx bin/prism-cli.ts"