@prism-d1/cli 1.0.50 → 1.0.52

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/dist/assets/gitlab-workflows/prism-agent-eval.yml +18 -5
  2. package/dist/assets/gitlab-workflows/prism-ai-metrics.yml +18 -5
  3. package/dist/assets/gitlab-workflows/prism-dora-weekly.yml +18 -5
  4. package/dist/assets/gitlab-workflows/prism-eval-gate.yml +18 -5
  5. package/package.json +1 -1
package/dist/assets/gitlab-workflows/prism-agent-eval.yml CHANGED
@@ -36,18 +36,31 @@ prism-agent-eval:
36
36
  - |
37
37
  # Assume AWS role via GitLab OIDC
38
38
  if [[ -n "${PRISM_METRICS_ROLE_ARN}" && -n "${GITLAB_OIDC_TOKEN}" ]]; then
39
- CREDS=$(aws sts assume-role-with-web-identity \
39
+ echo "Assuming role via OIDC: ${PRISM_METRICS_ROLE_ARN}"
40
+ if CREDS=$(aws sts assume-role-with-web-identity \
40
41
  --role-arn "${PRISM_METRICS_ROLE_ARN}" \
41
42
  --role-session-name "gitlab-ci-${CI_JOB_ID}" \
42
43
  --web-identity-token "${GITLAB_OIDC_TOKEN}" \
43
44
  --query 'Credentials.[AccessKeyId,SecretAccessKey,SessionToken]' \
44
- --output text)
45
- export AWS_ACCESS_KEY_ID=$(echo "${CREDS}" | awk '{print $1}')
46
- export AWS_SECRET_ACCESS_KEY=$(echo "${CREDS}" | awk '{print $2}')
47
- export AWS_SESSION_TOKEN=$(echo "${CREDS}" | awk '{print $3}')
45
+ --output text 2>&1); then
46
+ export AWS_ACCESS_KEY_ID=$(echo "${CREDS}" | awk '{print $1}')
47
+ export AWS_SECRET_ACCESS_KEY=$(echo "${CREDS}" | awk '{print $2}')
48
+ export AWS_SESSION_TOKEN=$(echo "${CREDS}" | awk '{print $3}')
49
+ echo "✓ OIDC credentials acquired."
50
+ else
51
+ echo "⚠️ OIDC assume-role failed: ${CREDS}"
52
+ fi
53
+ elif [[ -n "${PRISM_METRICS_ROLE_ARN}" ]]; then
54
+ echo "⚠️ PRISM_METRICS_ROLE_ARN set but GITLAB_OIDC_TOKEN is empty."
48
55
  fi
49
56
  script:
50
57
  - |
58
+ # Skip if no AWS credentials available
59
+ if ! aws sts get-caller-identity &>/dev/null; then
60
+ echo "⚠️ No AWS credentials. Set PRISM_METRICS_ROLE_ARN or configure AWS access."
61
+ exit 0
62
+ fi
63
+
51
64
  TEAM_ID=$(jq -r '.team_id // "no_team"' .prism/config.json 2>/dev/null || echo "no_team")
52
65
  BASE_SHA="${CI_MERGE_REQUEST_DIFF_BASE_SHA}"
53
66
  HEAD_SHA="${CI_COMMIT_SHA}"
package/dist/assets/gitlab-workflows/prism-ai-metrics.yml CHANGED
@@ -28,18 +28,31 @@ prism-ai-metrics:
28
28
  - |
29
29
  # Assume AWS role via GitLab OIDC
30
30
  if [[ -n "${PRISM_METRICS_ROLE_ARN}" && -n "${GITLAB_OIDC_TOKEN}" ]]; then
31
- CREDS=$(aws sts assume-role-with-web-identity \
31
+ echo "Assuming role via OIDC: ${PRISM_METRICS_ROLE_ARN}"
32
+ if CREDS=$(aws sts assume-role-with-web-identity \
32
33
  --role-arn "${PRISM_METRICS_ROLE_ARN}" \
33
34
  --role-session-name "gitlab-ci-${CI_JOB_ID}" \
34
35
  --web-identity-token "${GITLAB_OIDC_TOKEN}" \
35
36
  --query 'Credentials.[AccessKeyId,SecretAccessKey,SessionToken]' \
36
- --output text)
37
- export AWS_ACCESS_KEY_ID=$(echo "${CREDS}" | awk '{print $1}')
38
- export AWS_SECRET_ACCESS_KEY=$(echo "${CREDS}" | awk '{print $2}')
39
- export AWS_SESSION_TOKEN=$(echo "${CREDS}" | awk '{print $3}')
37
+ --output text 2>&1); then
38
+ export AWS_ACCESS_KEY_ID=$(echo "${CREDS}" | awk '{print $1}')
39
+ export AWS_SECRET_ACCESS_KEY=$(echo "${CREDS}" | awk '{print $2}')
40
+ export AWS_SESSION_TOKEN=$(echo "${CREDS}" | awk '{print $3}')
41
+ echo "✓ OIDC credentials acquired."
42
+ else
43
+ echo "⚠️ OIDC assume-role failed: ${CREDS}"
44
+ fi
45
+ elif [[ -n "${PRISM_METRICS_ROLE_ARN}" ]]; then
46
+ echo "⚠️ PRISM_METRICS_ROLE_ARN set but GITLAB_OIDC_TOKEN is empty."
40
47
  fi
41
48
  script:
42
49
  - |
50
+ # Skip if no AWS credentials available
51
+ if ! aws sts get-caller-identity &>/dev/null; then
52
+ echo "⚠️ No AWS credentials. Set PRISM_METRICS_ROLE_ARN or configure AWS access."
53
+ exit 0
54
+ fi
55
+
43
56
  # Read team ID
44
57
  TEAM_ID=$(jq -r '.team_id // "no_team"' .prism/config.json 2>/dev/null || echo "no_team")
45
58
 
package/dist/assets/gitlab-workflows/prism-dora-weekly.yml CHANGED
@@ -30,18 +30,31 @@ prism-dora-weekly:
30
30
  - |
31
31
  # Assume AWS role via GitLab OIDC
32
32
  if [[ -n "${PRISM_METRICS_ROLE_ARN}" && -n "${GITLAB_OIDC_TOKEN}" ]]; then
33
- CREDS=$(aws sts assume-role-with-web-identity \
33
+ echo "Assuming role via OIDC: ${PRISM_METRICS_ROLE_ARN}"
34
+ if CREDS=$(aws sts assume-role-with-web-identity \
34
35
  --role-arn "${PRISM_METRICS_ROLE_ARN}" \
35
36
  --role-session-name "gitlab-ci-${CI_JOB_ID}" \
36
37
  --web-identity-token "${GITLAB_OIDC_TOKEN}" \
37
38
  --query 'Credentials.[AccessKeyId,SecretAccessKey,SessionToken]' \
38
- --output text)
39
- export AWS_ACCESS_KEY_ID=$(echo "${CREDS}" | awk '{print $1}')
40
- export AWS_SECRET_ACCESS_KEY=$(echo "${CREDS}" | awk '{print $2}')
41
- export AWS_SESSION_TOKEN=$(echo "${CREDS}" | awk '{print $3}')
39
+ --output text 2>&1); then
40
+ export AWS_ACCESS_KEY_ID=$(echo "${CREDS}" | awk '{print $1}')
41
+ export AWS_SECRET_ACCESS_KEY=$(echo "${CREDS}" | awk '{print $2}')
42
+ export AWS_SESSION_TOKEN=$(echo "${CREDS}" | awk '{print $3}')
43
+ echo "✓ OIDC credentials acquired."
44
+ else
45
+ echo "⚠️ OIDC assume-role failed: ${CREDS}"
46
+ fi
47
+ elif [[ -n "${PRISM_METRICS_ROLE_ARN}" ]]; then
48
+ echo "⚠️ PRISM_METRICS_ROLE_ARN set but GITLAB_OIDC_TOKEN is empty."
42
49
  fi
43
50
  script:
44
51
  - |
52
+ # Skip if no AWS credentials available
53
+ if ! aws sts get-caller-identity &>/dev/null; then
54
+ echo "⚠️ No AWS credentials. Set PRISM_METRICS_ROLE_ARN or configure AWS access."
55
+ exit 0
56
+ fi
57
+
45
58
  TEAM_ID=$(jq -r '.team_id // "no_team"' .prism/config.json 2>/dev/null || echo "no_team")
46
59
  SINCE_DATE=$(date -u -d '7 days ago' +"%Y-%m-%d")
47
60
  REPO="${CI_PROJECT_PATH}"
package/dist/assets/gitlab-workflows/prism-eval-gate.yml CHANGED
@@ -28,18 +28,31 @@ prism-eval-gate:
28
28
  - |
29
29
  # Assume AWS role via GitLab OIDC
30
30
  if [[ -n "${PRISM_METRICS_ROLE_ARN}" && -n "${GITLAB_OIDC_TOKEN}" ]]; then
31
- CREDS=$(aws sts assume-role-with-web-identity \
31
+ echo "Assuming role via OIDC: ${PRISM_METRICS_ROLE_ARN}"
32
+ if CREDS=$(aws sts assume-role-with-web-identity \
32
33
  --role-arn "${PRISM_METRICS_ROLE_ARN}" \
33
34
  --role-session-name "gitlab-ci-${CI_JOB_ID}" \
34
35
  --web-identity-token "${GITLAB_OIDC_TOKEN}" \
35
36
  --query 'Credentials.[AccessKeyId,SecretAccessKey,SessionToken]' \
36
- --output text)
37
- export AWS_ACCESS_KEY_ID=$(echo "${CREDS}" | awk '{print $1}')
38
- export AWS_SECRET_ACCESS_KEY=$(echo "${CREDS}" | awk '{print $2}')
39
- export AWS_SESSION_TOKEN=$(echo "${CREDS}" | awk '{print $3}')
37
+ --output text 2>&1); then
38
+ export AWS_ACCESS_KEY_ID=$(echo "${CREDS}" | awk '{print $1}')
39
+ export AWS_SECRET_ACCESS_KEY=$(echo "${CREDS}" | awk '{print $2}')
40
+ export AWS_SESSION_TOKEN=$(echo "${CREDS}" | awk '{print $3}')
41
+ echo "✓ OIDC credentials acquired."
42
+ else
43
+ echo "⚠️ OIDC assume-role failed: ${CREDS}"
44
+ fi
45
+ elif [[ -n "${PRISM_METRICS_ROLE_ARN}" ]]; then
46
+ echo "⚠️ PRISM_METRICS_ROLE_ARN set but GITLAB_OIDC_TOKEN is empty."
40
47
  fi
41
48
  script:
42
49
  - |
50
+ # Skip if no AWS credentials available
51
+ if ! aws sts get-caller-identity &>/dev/null; then
52
+ echo "⚠️ No AWS credentials. Set PRISM_METRICS_ROLE_ARN or configure AWS access."
53
+ exit 0
54
+ fi
55
+
43
56
  TEAM_ID=$(jq -r '.team_id // "no_team"' .prism/config.json 2>/dev/null || echo "no_team")
44
57
  BASE_SHA="${CI_MERGE_REQUEST_DIFF_BASE_SHA}"
45
58
  HEAD_SHA="${CI_COMMIT_SHA}"
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@prism-d1/cli",
3
- "version": "1.0.50",
3
+ "version": "1.0.52",
4
4
  "description": "PRISM D1 Velocity CLI — AI development lifecycle assessment tool",
5
5
  "author": "andklee",
6
6
  "engines": {