@prism-d1/cli 1.0.60 → 1.0.64

package/dist/assets/infra/lib/constructs/otel-collector-construct.ts

@@ -0,0 +1,302 @@
+/**
+ * PRISM D1 — OTEL Collector construct (opt-in).
+ *
+ * Server side of `codeburn sync`: an HTTP API serving the codeburn discovery
+ * doc and an OTLP/HTTP traces endpoint, authorized by OIDC JWT.
+ *
+ * Enable with:   cdk deploy -c enableOtelCollector=true
+ * BYO IdP with:  -c otelIssuer=... -c otelClientId=... [-c otelIdentityClaim=email]
+ *
+ * Default mode provisions a Cognito User Pool (admin-create-user only,
+ * username = email, PKCE public client) with loopback callback URLs matching
+ * codeburn's fixed callback ports (19876-19878). BYO mode skips Cognito and
+ * wires the JWT authorizer to the external issuer.
+ *
+ * Data flow: codeburn sync push → API Gateway (JWT authorizer) → receiver
+ * Lambda → S3 raw OTLP archive (external contract) + DynamoDB span/aggregate
+ * rows (PRISM dashboards).
+ */
+
+import * as cdk from 'aws-cdk-lib';
+import * as lambda from 'aws-cdk-lib/aws-lambda';
+import * as dynamodb from 'aws-cdk-lib/aws-dynamodb';
+import * as cognito from 'aws-cdk-lib/aws-cognito';
+import * as s3 from 'aws-cdk-lib/aws-s3';
+import * as kms from 'aws-cdk-lib/aws-kms';
+import * as logs from 'aws-cdk-lib/aws-logs';
+import * as apigwv2 from 'aws-cdk-lib/aws-apigatewayv2';
+import { HttpLambdaIntegration } from 'aws-cdk-lib/aws-apigatewayv2-integrations';
+import { HttpJwtAuthorizer } from 'aws-cdk-lib/aws-apigatewayv2-authorizers';
+import * as path from 'path';
+import { Construct } from 'constructs';
+import { NagSuppressions } from 'cdk-nag';
+
+/** codeburn sync fixed loopback callback ports (see codeburn src/sync/auth.ts). */
+const CODEBURN_CALLBACK_PORTS = [19876, 19877, 19878];
+
+export interface OtelCollectorConstructProps {
+  /** The prism-d1-ai-usage table — receiver writes SPAN# and OTEL#DAY# items. */
+  aiUsageTable: dynamodb.Table;
+  /** KMS key for the S3 archive bucket. */
+  kmsKey: kms.IKey;
+  /** VPC props spread applied to the receiver Lambda (matches stack pattern). */
+  lambdaVpcProps?: { vpc?: cdk.aws_ec2.IVpc; securityGroups?: cdk.aws_ec2.ISecurityGroup[] };
+  /** BYO IdP: OIDC issuer URL. When set, Cognito is NOT provisioned. */
+  externalIssuer?: string;
+  /** BYO IdP: OAuth client ID registered for codeburn (public client + PKCE). */
+  externalClientId?: string;
+  /** JWT claim used as the user identity key (default: username for Cognito, sub for BYO). */
+  identityClaim?: string;
+}
+
+export class OtelCollectorConstruct extends Construct {
+  public readonly httpApi: apigwv2.HttpApi;
+  public readonly archiveBucket: s3.Bucket;
+  public readonly userPool?: cognito.UserPool;
+  public readonly userPoolClient?: cognito.UserPoolClient;
+
+  constructor(scope: Construct, id: string, props: OtelCollectorConstructProps) {
+    super(scope, id);
+
+    const byoIdp = !!props.externalIssuer;
+    if (byoIdp && !props.externalClientId) {
+      throw new Error('otelClientId is required when otelIssuer is set');
+    }
+
+    // -------------------------------------------------------
+    // OIDC provider — Cognito (default) or BYO issuer
+    // -------------------------------------------------------
+    let issuer: string;
+    let clientId: string;
+    let identityClaim: string;
+
+    if (byoIdp) {
+      issuer = props.externalIssuer!.replace(/\/$/, '');
+      clientId = props.externalClientId!;
+      identityClaim = props.identityClaim ?? 'sub';
+    } else {
+      // Admin-create-user only (no self-signup); username = email so DDB keys
+      // line up with the USER#<email> key convention. We do NOT use
+      // signInAliases: { email: true } because that generates a random UUID
+      // as the internal username — the access token's `username` claim would
+      // carry the UUID, not the email. Instead, admins create users with
+      // --username dev@example.com and the `username` claim = the email.
+      this.userPool = new cognito.UserPool(this, 'UserPool', {
+        userPoolName: 'prism-d1-otel-users',
+        selfSignUpEnabled: false,
+        passwordPolicy: {
+          minLength: 12,
+          requireLowercase: true,
+          requireUppercase: true,
+          requireDigits: true,
+          requireSymbols: true,
+        },
+        advancedSecurityMode: cognito.AdvancedSecurityMode.ENFORCED,
+        featurePlan: cognito.FeaturePlan.PLUS,
+        removalPolicy: cdk.RemovalPolicy.RETAIN,
+      });
+
+      // Hosted UI domain — prefix must be globally unique per region.
+      this.userPool.addDomain('Domain', {
+        cognitoDomain: { domainPrefix: `prism-d1-otel-${cdk.Aws.ACCOUNT_ID}` },
+      });
+
+      // Public client (no secret) — codeburn does Authorization Code + PKCE
+      // with loopback redirects. Cognito allows http:// for localhost, 127.0.0.1,
+      // and [::1] (per CreateUserPoolClient API docs). codeburn uses 127.0.0.1.
+      const callbackUrls = CODEBURN_CALLBACK_PORTS.map(
+        (port) => `http://127.0.0.1:${port}/callback`,
+      );
+      this.userPoolClient = this.userPool.addClient('CodeburnClient', {
+        userPoolClientName: 'codeburn-sync',
+        generateSecret: false,
+        authFlows: { userSrp: true },
+        oAuth: {
+          flows: { authorizationCodeGrant: true },
+          scopes: [cognito.OAuthScope.OPENID, cognito.OAuthScope.EMAIL, cognito.OAuthScope.PROFILE],
+          callbackUrls,
+        },
+        preventUserExistenceErrors: true,
+        accessTokenValidity: cdk.Duration.hours(1),
+        refreshTokenValidity: cdk.Duration.days(30),
+      });
+
+      issuer = `https://cognito-idp.${cdk.Aws.REGION}.amazonaws.com/${this.userPool.userPoolId}`;
+      clientId = this.userPoolClient.userPoolClientId;
+      // Cognito ACCESS tokens carry `username` (no email claim) — with
+      // email-alias sign-in and admin-created users, username == email.
+      identityClaim = props.identityClaim ?? 'username';
+    }
+
+    // -------------------------------------------------------
+    // S3 archive — raw OTLP batches, the external consumption contract
+    // -------------------------------------------------------
+    this.archiveBucket = new s3.Bucket(this, 'ArchiveBucket', {
+      encryption: s3.BucketEncryption.KMS,
+      encryptionKey: props.kmsKey,
+      blockPublicAccess: s3.BlockPublicAccess.BLOCK_ALL,
+      enforceSSL: true,
+      removalPolicy: cdk.RemovalPolicy.RETAIN,
+      lifecycleRules: [{
+        id: 'expire-raw-otlp',
+        expiration: cdk.Duration.days(365),
+      }],
+    });
+
+    // -------------------------------------------------------
+    // Receiver Lambda — discovery doc + OTLP traces ingestion
+    // -------------------------------------------------------
+    const receiver = new lambda.Function(this, 'Receiver', {
+      functionName: 'prism-d1-otel-receiver',
+      runtime: lambda.Runtime.NODEJS_22_X,
+      handler: 'otel-receiver.handler',
+      ...(props.lambdaVpcProps ?? {}),
+      code: lambda.Code.fromAsset(path.join(__dirname, '..', 'lambda'), {
+        bundling: {
+          image: lambda.Runtime.NODEJS_22_X.bundlingImage,
+          command: [
+            'bash', '-c',
+            [
+              'npm init -y > /dev/null 2>&1',
+              'npm install --save @aws-sdk/client-dynamodb @aws-sdk/client-s3 esbuild > /dev/null 2>&1',
+              'npx esbuild otel-receiver.ts --bundle --platform=node --target=node22 --outfile=/asset-output/otel-receiver.js --external:@aws-sdk/*',
+            ].join(' && '),
+          ],
+          local: {
+            tryBundle(outputDir: string): boolean {
+              try {
+                const { execSync } = require('child_process');
+                execSync(
+                  `npx esbuild ${path.join(__dirname, '..', 'lambda', 'otel-receiver.ts')} --bundle --platform=node --target=node22 --outfile=${path.join(outputDir, 'otel-receiver.js')} --external:@aws-sdk/*`,
+                  { stdio: 'pipe' },
+                );
+                return true;
+              } catch {
+                return false;
+              }
+            },
+          },
+        },
+      }),
+      timeout: cdk.Duration.seconds(60),
+      memorySize: 512,
+      environment: {
+        AI_USAGE_TABLE: props.aiUsageTable.tableName,
+        ARCHIVE_BUCKET: this.archiveBucket.bucketName,
+        IDENTITY_CLAIM: identityClaim,
+        OIDC_ISSUER: issuer,
+        OIDC_CLIENT_ID: clientId,
+        MAX_BATCH_SIZE: '1000',
+        SPAN_TTL_DAYS: '90',
+      },
+      logRetention: logs.RetentionDays.ONE_MONTH,
+      description: 'Receives codeburn sync OTLP traces: S3 archive + per-user span/daily-aggregate rows',
+    });
+
+    props.aiUsageTable.grantReadWriteData(receiver);
+    this.archiveBucket.grantPut(receiver);
+    props.kmsKey.grantEncryptDecrypt(receiver);
+
+    // -------------------------------------------------------
+    // HTTP API — discovery (public) + traces (JWT)
+    // -------------------------------------------------------
+    this.httpApi = new apigwv2.HttpApi(this, 'Api', {
+      apiName: 'prism-d1-otel-collector',
+      description: 'PRISM D1 OTEL collector for codeburn sync',
+    });
+
+    const integration = new HttpLambdaIntegration('ReceiverIntegration', receiver);
+
+    // HTTP API JWT authorizers validate the `aud` claim, or `client_id` for
+    // Cognito access tokens — both paths work with jwtAudience = [clientId].
+    const authorizer = new HttpJwtAuthorizer('OtelJwtAuthorizer', issuer, {
+      jwtAudience: [clientId],
+    });
+
+    // Discovery doc — unauthenticated by design (it only exposes issuer +
+    // client_id, both public values in an OAuth public-client flow).
+    this.httpApi.addRoutes({
+      path: '/.well-known/codeburn-export.json',
+      methods: [apigwv2.HttpMethod.GET],
+      integration,
+    });
+
+    this.httpApi.addRoutes({
+      path: '/v1/traces',
+      methods: [apigwv2.HttpMethod.POST],
+      integration,
+      authorizer,
+    });
+
+    // Access logging on the default stage (AwsSolutions-APIG1).
+    const accessLogGroup = new logs.LogGroup(this, 'ApiAccessLogs', {
+      logGroupName: '/aws/apigateway/prism-d1-otel-collector',
+      retention: logs.RetentionDays.ONE_MONTH,
+      removalPolicy: cdk.RemovalPolicy.DESTROY,
+    });
+    const defaultStage = this.httpApi.defaultStage!.node.defaultChild as apigwv2.CfnStage;
+    defaultStage.accessLogSettings = {
+      destinationArn: accessLogGroup.logGroupArn,
+      format: JSON.stringify({
+        requestId: '$context.requestId',
+        ip: '$context.identity.sourceIp',
+        requestTime: '$context.requestTime',
+        httpMethod: '$context.httpMethod',
+        path: '$context.path',
+        status: '$context.status',
+        responseLength: '$context.responseLength',
+        userAgent: '$context.identity.userAgent',
+      }),
+    };
+
+    // -------------------------------------------------------
+    // cdk-nag suppressions (with evidence)
+    // -------------------------------------------------------
+    NagSuppressions.addResourceSuppressions(receiver, [
+      {
+        id: 'AwsSolutions-IAM5',
+        reason: 'grantPut generates s3:Abort* + bucket/* wildcard scoped to the single OTLP archive bucket',
+        appliesTo: ['Action::s3:Abort*', { regex: '/^Resource::<OtelCollectorArchiveBucket.*\\.Arn>\\/\\*$/g' }],
+      },
+      {
+        id: 'AwsSolutions-IAM5',
+        reason: 'grantReadWriteData generates a wildcard for the AI-usage table GSI index ARNs',
+        appliesTo: [{ regex: '/^Resource::<AiUsageTable.*\\.Arn>\\/index\\/\\*$/g' }],
+      },
+    ], true);
+    NagSuppressions.addResourceSuppressions(this.httpApi, [
+      {
+        id: 'AwsSolutions-APIG4',
+        reason: 'The codeburn discovery doc route is unauthenticated by design — it only publishes the OIDC issuer and public client_id (both non-secret in an OAuth public-client PKCE flow). The traces route is JWT-authorized.',
+      },
+    ], true);
+    NagSuppressions.addResourceSuppressions(this.archiveBucket, [
+      {
+        id: 'AwsSolutions-S1',
+        reason: 'Telemetry archive bucket for a sample project; access is limited to the receiver Lambda (put) and account principals. Enable S3 server access logging or CloudTrail data events for production hardening.',
+      },
+    ]);
+    if (this.userPool) {
+      NagSuppressions.addResourceSuppressions(this.userPool, [
+        {
+          id: 'AwsSolutions-COG2',
+          reason: 'MFA is not required for the codeburn telemetry-push user pool: users are admin-created, the client is scoped to telemetry writes only, and MFA on a CLI OIDC device flow adds friction disproportionate to the data sensitivity. Enable MFA for production hardening.',
+        },
+      ]);
+    }
+
+    // -------------------------------------------------------
+    // Outputs — everything needed to run `codeburn sync setup <url>`
+    // -------------------------------------------------------
+    new cdk.CfnOutput(this, 'OtelCollectorUrl', {
+      value: this.httpApi.apiEndpoint,
+      description: 'Run: codeburn sync setup <this URL>',
+    });
+    if (this.userPool) {
+      new cdk.CfnOutput(this, 'OtelUserPoolId', {
+        value: this.userPool.userPoolId,
+        description: 'Create users: aws cognito-idp admin-create-user --user-pool-id <this> --username <email>',
+      });
+    }
+  }
+}

package/dist/assets/infra/lib/constructs/prism-vpc-construct.ts

@@ -46,6 +46,11 @@ export class PrismVpcConstruct extends Construct {
       service: ec2.GatewayVpcEndpointAwsService.DYNAMODB,
     });
 
+    // --- Gateway endpoint: S3 (free; used by the OTEL receiver archive writes) ---
+    this.vpc.addGatewayEndpoint('S3Endpoint', {
+      service: ec2.GatewayVpcEndpointAwsService.S3,
+    });
+
     // --- Interface endpoints ---
     const interfaceEndpoints = [
       { id: 'EventBridgeEndpoint', service: ec2.InterfaceVpcEndpointAwsService.EVENTBRIDGE },

package/dist/assets/infra/lib/lambda/metrics-processor.ts

@@ -151,6 +151,7 @@ const EVENTS_TABLE = process.env.EVENTS_TABLE!;
 const METADATA_TABLE = process.env.METADATA_TABLE!;
 const METRIC_NAMESPACE = process.env.METRIC_NAMESPACE ?? 'PRISM/D1/Velocity';
 
+
 // ---- Handler ----
 
 export async function handler(event: EventBridgeEvent): Promise<void> {

package/dist/assets/infra/lib/lambda/otel-receiver.ts

@@ -0,0 +1,369 @@
+/**
+ * PRISM D1 — OTLP receiver for codeburn sync.
+ *
+ * Serves two routes on the OTEL collector HTTP API:
+ *   GET  /.well-known/codeburn-export.json  — discovery doc (no auth)
+ *   POST /v1/traces                         — OTLP/HTTP JSON traces (JWT-authorized)
+ *
+ * Trace flow: validate (JWT done by API Gateway) → archive raw OTLP batch to S3
+ * (external contract — standard OTLP JSON, Athena/replay-friendly) → per-span
+ * conditional DynamoDB write (dedup gate) → daily aggregate ADD (only for
+ * newly-seen spans, bucketed by SPAN date, not arrival date).
+ *
+ * Item shapes in the AI-usage table:
+ *   pk=USER#<identity>  sk=SPAN#<timestamp>#<spanId>       raw span, TTL 90d
+ *   pk=USER#<identity>  sk=OTEL#DAY#<yyyy-mm-dd>#<tool>    daily aggregate
+ */
+
+import {
+  DynamoDBClient,
+  PutItemCommand,
+  UpdateItemCommand,
+  ConditionalCheckFailedException,
+} from '@aws-sdk/client-dynamodb';
+import { S3Client, PutObjectCommand } from '@aws-sdk/client-s3';
+import { randomUUID } from 'crypto';
+
+const dynamoClient = new DynamoDBClient({});
+const s3Client = new S3Client({});
+
+const AI_USAGE_TABLE = process.env.AI_USAGE_TABLE || 'prism-d1-ai-usage';
+const ARCHIVE_BUCKET = process.env.ARCHIVE_BUCKET || '';
+const IDENTITY_CLAIM = process.env.IDENTITY_CLAIM || 'username';
+const OIDC_ISSUER = process.env.OIDC_ISSUER || '';
+const OIDC_CLIENT_ID = process.env.OIDC_CLIENT_ID || '';
+const MAX_BATCH_SIZE = Number(process.env.MAX_BATCH_SIZE || '1000');
+const SPAN_TTL_DAYS = Number(process.env.SPAN_TTL_DAYS || '90');
+
+/** codeburn provider names → PRISM tool names. */
+const PROVIDER_TO_TOOL: Record<string, string> = {
+  claude: 'claude-code',
+  kiro: 'kiro',
+  cursor: 'cursor',
+  codex: 'codex',
+  copilot: 'copilot',
+};
+
+// ---- Types (API Gateway HTTP API v2 proxy + OTLP JSON) ----
+
+interface HttpApiEvent {
+  rawPath: string;
+  requestContext: {
+    http: { method: string; path: string };
+    authorizer?: { jwt?: { claims?: Record<string, unknown> } };
+  };
+  body?: string;
+  isBase64Encoded?: boolean;
+}
+
+interface HttpApiResponse {
+  statusCode: number;
+  headers: Record<string, string>;
+  body: string;
+}
+
+type OtlpValue =
+  | { stringValue?: string; intValue?: string | number; doubleValue?: number; boolValue?: boolean };
+
+interface OtlpAttribute {
+  key: string;
+  value: OtlpValue;
+}
+
+interface OtlpSpan {
+  traceId?: string;
+  spanId?: string;
+  name?: string;
+  startTimeUnixNano?: string;
+  attributes?: OtlpAttribute[];
+}
+
+interface OtlpPayload {
+  resourceSpans?: Array<{
+    resource?: { attributes?: OtlpAttribute[] };
+    scopeSpans?: Array<{ spans?: OtlpSpan[] }>;
+  }>;
+}
+
+interface ParsedSpan {
+  spanId: string;
+  timestamp: string; // ISO from span start time
+  tool: string;
+  model: string;
+  inputTokens: number;
+  outputTokens: number;
+  costUsd: number;
+  project: string;
+  costEstimated: boolean;
+  deviceId: string;
+}
+
+// ---- Helpers ----
+
+function jsonResponse(statusCode: number, body: unknown): HttpApiResponse {
+  return {
+    statusCode,
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify(body),
+  };
+}
+
+function attrMap(attrs: OtlpAttribute[] | undefined): Map<string, OtlpValue> {
+  const m = new Map<string, OtlpValue>();
+  for (const a of attrs ?? []) {
+    if (a && typeof a.key === 'string' && a.value) m.set(a.key, a.value);
+  }
+  return m;
+}
+
+function str(v: OtlpValue | undefined): string {
+  return typeof v?.stringValue === 'string' ? v.stringValue : '';
+}
+
+function num(v: OtlpValue | undefined): number {
+  if (v?.intValue !== undefined) {
+    const n = Number(v.intValue);
+    return Number.isFinite(n) ? n : 0;
+  }
+  if (typeof v?.doubleValue === 'number' && Number.isFinite(v.doubleValue)) return v.doubleValue;
+  return 0;
+}
+
+function bool(v: OtlpValue | undefined): boolean {
+  return v?.boolValue === true;
+}
+
+/** Convert OTLP unix-nano string to ISO timestamp; empty string if invalid. */
+function nanoToIso(nano: string | undefined): string {
+  if (!nano || !/^\d+$/.test(nano)) return '';
+  try {
+    const ms = Number(BigInt(nano) / 1_000_000n);
+    if (!Number.isFinite(ms) || ms <= 0) return '';
+    const d = new Date(ms);
+    return isNaN(d.getTime()) ? '' : d.toISOString();
+  } catch {
+    return '';
+  }
+}
+
+/** Resolve caller identity from JWT claims (validated by the API Gateway authorizer). */
+function resolveIdentity(event: HttpApiEvent): string | null {
+  const claims = event.requestContext.authorizer?.jwt?.claims;
+  if (!claims) return null;
+  for (const claim of [IDENTITY_CLAIM, 'username', 'email', 'sub']) {
+    const v = claims[claim];
+    if (typeof v === 'string' && v.trim()) return v.trim().toLowerCase();
+  }
+  return null;
+}
+
+/** Extract and sanity-check spans from an OTLP payload. Returns spans + rejected count. */
+export function parseOtlpSpans(payload: OtlpPayload): { spans: ParsedSpan[]; rejected: number } {
+  const spans: ParsedSpan[] = [];
+  let rejected = 0;
+
+  for (const rs of payload.resourceSpans ?? []) {
+    const resourceAttrs = attrMap(rs.resource?.attributes);
+    const deviceId = str(resourceAttrs.get('codeburn.device_id')).slice(0, 64);
+
+    for (const ss of rs.scopeSpans ?? []) {
+      for (const span of ss.spans ?? []) {
+        const attrs = attrMap(span.attributes);
+        const spanId = typeof span.spanId === 'string' ? span.spanId : '';
+        const timestamp = nanoToIso(span.startTimeUnixNano);
+        const provider = str(attrs.get('ai.provider'));
+
+        // Minimum viable span: identity key parts must be present and sane.
+        if (!/^[0-9a-f]{16}$/i.test(spanId) || !timestamp || !provider) {
+          rejected++;
+          continue;
+        }
+
+        const inputTokens = num(attrs.get('ai.input_tokens'));
+        const outputTokens = num(attrs.get('ai.output_tokens'));
+        const costUsd = num(attrs.get('ai.cost_usd'));
+        // Clamp: reject absurd values (mirrors the CI trailer clamps).
+        if (
+          inputTokens < 0 || outputTokens < 0 || costUsd < 0 ||
+          inputTokens > 100_000_000 || outputTokens > 100_000_000 || costUsd > 10_000
+        ) {
+          rejected++;
+          continue;
+        }
+
+        spans.push({
+          spanId: spanId.toLowerCase(),
+          timestamp,
+          tool: PROVIDER_TO_TOOL[provider] ?? provider.slice(0, 32),
+          model: str(attrs.get('ai.model')).slice(0, 128),
+          inputTokens,
+          outputTokens,
+          costUsd,
+          project: str(attrs.get('ai.project')).slice(0, 256),
+          costEstimated: bool(attrs.get('ai.cost_estimated')),
+          deviceId,
+        });
+      }
+    }
+  }
+
+  return { spans, rejected };
+}
+
+// ---- Route: discovery doc ----
+
+function handleDiscovery(): HttpApiResponse {
+  return jsonResponse(200, {
+    version: 1,
+    issuer: OIDC_ISSUER,
+    client_id: OIDC_CLIENT_ID,
+    scopes: ['openid', 'email', 'profile'],
+    traces_path: '/v1/traces',
+    max_batch_size: MAX_BATCH_SIZE,
+  });
+}
+
+// ---- Route: traces ----
+
+async function archiveToS3(rawBody: string): Promise<void> {
+  if (!ARCHIVE_BUCKET) return;
+  const now = new Date();
+  const dt = now.toISOString().slice(0, 10);
+  const key = `otlp/dt=${dt}/${now.toISOString().replace(/[:.]/g, '-')}-${randomUUID()}.json`;
+  await s3Client.send(new PutObjectCommand({
+    Bucket: ARCHIVE_BUCKET,
+    Key: key,
+    Body: rawBody,
+    ContentType: 'application/json',
+  }));
+}
+
+/** Conditional raw-span write. Returns true if the span is NEW (write succeeded). */
+async function writeSpanIfNew(user: string, s: ParsedSpan): Promise<boolean> {
+  const ttl = Math.floor(Date.now() / 1000) + SPAN_TTL_DAYS * 24 * 60 * 60;
+  try {
+    await dynamoClient.send(new PutItemCommand({
+      TableName: AI_USAGE_TABLE,
+      Item: {
+        pk: { S: `USER#${user}` },
+        sk: { S: `SPAN#${s.timestamp}#${s.spanId}` },
+        record_type: { S: 'OTEL_SPAN' },
+        tool: { S: s.tool },
+        model: { S: s.model },
+        input_tokens: { N: String(s.inputTokens) },
+        output_tokens: { N: String(s.outputTokens) },
+        cost_usd: { N: String(s.costUsd) },
+        project: { S: s.project },
+        device_id: { S: s.deviceId },
+        cost_estimated: { BOOL: s.costEstimated },
+        timestamp: { S: s.timestamp },
+        ttl: { N: String(ttl) },
+      },
+      // Dedup gate: deterministic span IDs make retried batches no-ops.
+      ConditionExpression: 'attribute_not_exists(pk)',
+    }));
+    return true;
+  } catch (e) {
+    if (e instanceof ConditionalCheckFailedException) return false;
+    throw e;
+  }
+}
+
+/** ADD-increment the daily aggregate for a newly-seen span (bucketed by SPAN date). */
+async function bumpDailyAggregate(user: string, s: ParsedSpan): Promise<void> {
+  const day = s.timestamp.slice(0, 10);
+  await dynamoClient.send(new UpdateItemCommand({
+    TableName: AI_USAGE_TABLE,
+    Key: {
+      pk: { S: `USER#${user}` },
+      sk: { S: `OTEL#DAY#${day}#${s.tool}` },
+    },
+    UpdateExpression:
+      'ADD input_tokens :in, output_tokens :out, cost_usd :cost, call_count :one ' +
+      'SET record_type = :rt, tool = :tool, #day = :day, updated_at = :now',
+    ExpressionAttributeNames: { '#day': 'day' },
+    ExpressionAttributeValues: {
+      ':in': { N: String(s.inputTokens) },
+      ':out': { N: String(s.outputTokens) },
+      ':cost': { N: String(s.costUsd) },
+      ':one': { N: '1' },
+      ':rt': { S: 'OTEL_DAY' },
+      ':tool': { S: s.tool },
+      ':day': { S: day },
+      ':now': { S: new Date().toISOString() },
+    },
+  }));
+}
+
+/** Process spans with bounded concurrency. Returns count of newly-written spans. */
+async function processSpans(user: string, spans: ParsedSpan[]): Promise<number> {
+  const CONCURRENCY = 20;
+  let written = 0;
+  for (let i = 0; i < spans.length; i += CONCURRENCY) {
+    const chunk = spans.slice(i, i + CONCURRENCY);
+    const results = await Promise.all(chunk.map(async (s) => {
+      const isNew = await writeSpanIfNew(user, s);
+      if (isNew) await bumpDailyAggregate(user, s);
+      return isNew;
+    }));
+    written += results.filter(Boolean).length;
+  }
+  return written;
+}
+
+async function handleTraces(event: HttpApiEvent): Promise<HttpApiResponse> {
+  const user = resolveIdentity(event);
+  if (!user) {
+    return jsonResponse(401, { message: 'No resolvable identity claim in token' });
+  }
+
+  const rawBody = event.isBase64Encoded
+    ? Buffer.from(event.body ?? '', 'base64').toString('utf-8')
+    : (event.body ?? '');
+
+  let payload: OtlpPayload;
+  try {
+    payload = JSON.parse(rawBody) as OtlpPayload;
+  } catch {
+    return jsonResponse(400, { message: 'Body is not valid JSON' });
+  }
+
+  const { spans, rejected } = parseOtlpSpans(payload);
+
+  if (spans.length > MAX_BATCH_SIZE) {
+    return jsonResponse(400, { message: `Batch exceeds max_batch_size (${MAX_BATCH_SIZE})` });
+  }
+
+  // Archive the raw batch first — the S3 OTLP archive is the external contract.
+  // Archive failures are fatal (client retries the batch; dedup gate makes it safe).
+  await archiveToS3(rawBody);
+
+  const written = await processSpans(user, spans);
+  console.log(
+    `[otel-receiver] user=${user} received=${spans.length + rejected} accepted=${spans.length} ` +
+    `new=${written} duplicates=${spans.length - written} rejected=${rejected}`,
+  );
+
+  // OTLP/HTTP success response; report malformed spans via partialSuccess.
+  if (rejected > 0) {
+    return jsonResponse(200, {
+      partialSuccess: { rejectedSpans: rejected, errorMessage: 'Spans missing required ai.* attributes or failed validation' },
+    });
+  }
+  return jsonResponse(200, {});
+}
+
+// ---- Handler ----
+
+export async function handler(event: HttpApiEvent): Promise<HttpApiResponse> {
+  const method = event.requestContext.http.method;
+  const path = event.rawPath;
+
+  if (method === 'GET' && path === '/.well-known/codeburn-export.json') {
+    return handleDiscovery();
+  }
+  if (method === 'POST' && path === '/v1/traces') {
+    return handleTraces(event);
+  }
+  return jsonResponse(404, { message: 'Not found' });
+}

package/dist/assets/infra/lib/metrics-pipeline-stack.ts

@@ -13,15 +13,18 @@ import * as ec2 from 'aws-cdk-lib/aws-ec2';
 import { PrismVpcConstruct } from './constructs/prism-vpc-construct';
 import { GuardrailEnforcerConstruct } from './constructs/guardrail-enforcer-construct';
 import { SecurityAgentConstruct } from './constructs/security-agent-construct';
+import { OtelCollectorConstruct } from './constructs/otel-collector-construct';
 import { NagSuppressions } from 'cdk-nag';
 
 export class MetricsPipelineStack extends cdk.Stack {
   public readonly eventBus: events.EventBus;
   public readonly eventsTable: dynamodb.Table;
+  public readonly aiUsageTable: dynamodb.Table;
   public readonly metadataTable: dynamodb.Table;
   public readonly kmsKey: kms.Key;
   public readonly guardrail: BedrockGuardrailConstruct;
   public readonly securityAgent?: SecurityAgentConstruct;
+  public readonly otelCollector?: OtelCollectorConstruct;
 
   constructor(scope: Construct, id: string, props?: cdk.StackProps) {
     super(scope, id, props);
@@ -127,6 +130,38 @@ export class MetricsPipelineStack extends cdk.Stack {
       encryptionKey: prismKmsKey,
     });
 
+    // -------------------------------------------------------
+    // DynamoDB AI-usage table — user-keyed, KMS encrypted
+    // pk = USER#<email>
+    // sk = COMMIT#<ts>#<sha>#<tool> | SPAN#<ts>#<spanId> | OTEL#DAY#<date>#<tool>
+    // Sparse GSIs (only commit-level items set them) invert the user key so the
+    // same table answers by-repo / by-PR / by-commit / global-by-date.
+    // -------------------------------------------------------
+    this.aiUsageTable = new dynamodb.Table(this, 'AiUsageTable', {
+      tableName: 'prism-d1-ai-usage',
+      partitionKey: { name: 'pk', type: dynamodb.AttributeType.STRING },
+      sortKey: { name: 'sk', type: dynamodb.AttributeType.STRING },
+      billingMode: dynamodb.BillingMode.PAY_PER_REQUEST,
+      pointInTimeRecoverySpecification: { pointInTimeRecoveryEnabled: true },
+      removalPolicy: cdk.RemovalPolicy.RETAIN,
+      timeToLiveAttribute: 'ttl',
+      encryption: dynamodb.TableEncryption.CUSTOMER_MANAGED,
+      encryptionKey: prismKmsKey,
+    });
+    for (const [indexName, pkAttr, skAttr] of [
+      ['by-repo', 'gsi_repo', 'gsi_repo_sk'],
+      ['by-pr', 'gsi_pr', 'gsi_pr_sk'],
+      ['by-commit', 'gsi_commit', 'gsi_commit_sk'],
+      ['by-date', 'gsi_date', 'gsi_date_sk'],
+    ] as const) {
+      this.aiUsageTable.addGlobalSecondaryIndex({
+        indexName,
+        partitionKey: { name: pkAttr, type: dynamodb.AttributeType.STRING },
+        sortKey: { name: skAttr, type: dynamodb.AttributeType.STRING },
+        projectionType: dynamodb.ProjectionType.ALL,
+      });
+    }
+
     // -------------------------------------------------------
     // VPC for Lambda isolation (Pillar 6)
     // Opt out with: cdk deploy -c skipVpc=true
@@ -253,6 +288,25 @@ export class MetricsPipelineStack extends cdk.Stack {
     // -------------------------------------------------------
     this.guardrail = new BedrockGuardrailConstruct(this, 'PrismGuardrail', createDefaultPrismGuardrailProps());
 
+    // -------------------------------------------------------
+    // OTEL Collector (opt-in — server side of `codeburn sync`)
+    // Enable with: npx cdk deploy --context enableOtelCollector=true
+    // BYO IdP:     -c otelIssuer=... -c otelClientId=... [-c otelIdentityClaim=email]
+    // Per-user AI usage flows directly from codeburn sync to the
+    // ai-usage table (spans + daily aggregates).
+    // -------------------------------------------------------
+    const enableOtelCollector = this.node.tryGetContext('enableOtelCollector') === 'true';
+    if (enableOtelCollector) {
+      this.otelCollector = new OtelCollectorConstruct(this, 'OtelCollector', {
+        aiUsageTable: this.aiUsageTable,
+        kmsKey: prismKmsKey,
+        lambdaVpcProps,
+        externalIssuer: this.node.tryGetContext('otelIssuer') as string | undefined,
+        externalClientId: this.node.tryGetContext('otelClientId') as string | undefined,
+        identityClaim: this.node.tryGetContext('otelIdentityClaim') as string | undefined,
+      });
+    }
+
     // -------------------------------------------------------
     // AWS Security Agent (opt-in — requires Security Agent access)
     // Enable with: npx cdk deploy --context enableSecurityAgent=true
@@ -681,7 +735,7 @@ export class MetricsPipelineStack extends cdk.Stack {
       {
         id: 'AwsSolutions-IAM5',
         reason: 'CDK grantReadData on DynamoDB generates wildcard for GSI index ARNs via token reference',
-        appliesTo: ['Resource::<EventsTableD24865E5.Arn>/index/*'],
+        appliesTo: ['Resource::<EventsTableD24865E5.Arn>/index/*', 'Resource::<AiUsageTable79F37CE0.Arn>/index/*'],
       },
       { id: 'AwsSolutions-L1', reason: 'All Lambdas use nodejs22.x which is the latest Node.js runtime available' },
     ]);

package/dist/src/commands/git/commit-trailers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commit-trailers.d.ts","sourceRoot":"","sources":["../../../../src/commands/git/commit-trailers.ts"],"names":[],"mappings":";;;;;;iBAkIqB;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE;;AAP/E,wBA0FE"}
+{"version":3,"file":"commit-trailers.d.ts","sourceRoot":"","sources":["../../../../src/commands/git/commit-trailers.ts"],"names":[],"mappings":";;;;;;iBAwJqB;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE;;AAP/E,wBAgGE"}

package/dist/src/commands/git/commit-trailers.js

@@ -38,6 +38,18 @@ function detectTool() {
         origin = 'ai-generated';
         tool = 'q-developer';
     }
+    // Cursor (VS Code fork). Checked LAST so any commit made from within Cursor
+    // wins the single AI-Tool slot, even when another agent's session env vars are
+    // also present (e.g. a CLI agent run inside Cursor's integrated terminal).
+    // TERM_PROGRAM=vscode is NOT usable (Cursor inherits VS Code's value), so key
+    // off CURSOR_AGENT / CURSOR_TRACE_ID or the askpass path Cursor injects into
+    // its terminal + Source Control panel, which contains 'cursor'.
+    const cursorAskpass = `${env.VSCODE_GIT_ASKPASS_NODE || ''} ${env.VSCODE_GIT_ASKPASS_MAIN || ''} ${env.GIT_ASKPASS || ''}`.toLowerCase();
+    if (env.CURSOR_AGENT === '1' || env.CURSOR_TRACE_ID || cursorAskpass.includes('cursor')) {
+        origin = 'ai-generated';
+        tool = 'cursor';
+        model = '';
+    }
     return { origin, tool, model };
 }
 /** Find a spec reference: an explicit Spec-Ref in the message wins, else a staged spec file. */
@@ -54,12 +66,17 @@ function detectSpecRef(repoRoot, msg) {
     }
     return '';
 }
-/** Run `codeburn report` and parse its JSON. Returns null if codeburn is absent or errors. */
-function runCodeburn(projectFilter) {
+/** Run `codeburn report` and parse its JSON. Returns null if codeburn is absent or errors.
+ *  `provider` (optional) maps to codeburn's `--provider` filter (e.g. 'cursor', 'claude').
+ *  It is always a fixed internal literal — never user/LLM input — so the Windows shell
+ *  interpolation below is not an injection vector. */
+function runCodeburn(projectFilter, provider) {
     const isWin = process.platform === 'win32';
+    const providerArgs = provider ? ['--provider', provider] : [];
+    const providerCmd = provider ? `--provider ${provider} ` : '';
     const r = isWin
-        ? spawnSync(`codeburn report -p all --project "${projectFilter}" --format json`, { encoding: 'utf8', shell: true })
-        : spawnSync('codeburn', ['report', '-p', 'all', '--project', projectFilter, '--format', 'json'], { encoding: 'utf8' });
+        ? spawnSync(`codeburn report -p all ${providerCmd}--project "${projectFilter}" --format json`, { encoding: 'utf8', shell: true })
+        : spawnSync('codeburn', ['report', '-p', 'all', ...providerArgs, '--project', projectFilter, '--format', 'json'], { encoding: 'utf8' });
     if (!r || r.status !== 0 || !r.stdout)
         return null;
     try {
@@ -76,16 +93,23 @@ async function collectUsage(tool, projectBasename, projectFilter) {
         if (process.env.KIRO_SESSION_ID) {
             out = await collectKiroCli(process.env.KIRO_SESSION_ID, projectBasename);
         }
-        if (!out || out.overview.calls === 0) {
-            out = await collectKiroIde(projectBasename);
-        }
-        return out;
+        if (out && out.overview.calls > 0)
+            return { data: out, source: 'kiro-cli' };
+        out = await collectKiroIde(projectBasename);
+        if (out && out.overview.calls > 0)
+            return { data: out, source: 'kiro-ide' };
+        return null;
+    }
+    if (tool === 'cursor') {
+        let out = runCodeburn(projectFilter, 'cursor');
+        if (!out || out.overview.calls === 0)
+            out = runCodeburn(projectBasename, 'cursor');
+        return out ? { data: out, source: 'cursor' } : null;
     }
-    // claude-code / q-developer → codeburn (full-path slug, then basename fallback)
     let out = runCodeburn(projectFilter);
     if (!out || out.overview.calls === 0)
         out = runCodeburn(projectBasename);
-    return out;
+    return out ? { data: out, source: tool } : null;
 }
 function sumTokens(o, key) {
     return (o.models || []).reduce((s, m) => s + (m[key] || 0), 0);
@@ -140,13 +164,18 @@ export default {
         let outputTokens = null;
         let cost = null;
         if (tool) {
-            const usage = await collectUsage(tool, projectBasename, projectFilter);
-            if (usage) {
+            const result = await collectUsage(tool, projectBasename, projectFilter);
+            if (result) {
+                const { data: usage, source: usageSource } = result;
                 const curIn = sumTokens(usage, 'inputTokens');
                 const curOut = sumTokens(usage, 'outputTokens');
                 const curCost = usage.overview?.cost ?? 0;
                 const trackerDir = resolve(homedir(), '.prism', 'tokentracker');
-                const trackerFile = resolve(trackerDir, `${projectBasename}.json`);
+                // Snapshot baselines are keyed by (project, source) — NOT just (project, tool).
+                // Kiro has two sources (kiro-cli per-session vs kiro-ide lifetime) with
+                // vastly different cumulative totals. Sharing a tracker file between them
+                // produces massive false deltas when the fallback path switches.
+                const trackerFile = resolve(trackerDir, `${projectBasename}.${usageSource}.json`);
                 if (existsSync(trackerFile)) {
                     try {
                         const prev = JSON.parse(readFileSync(trackerFile, 'utf8'));

package/dist/src/commands/git/commit-trailers.js.map

@@ -1 +1 @@
-{"version":3,"file":"commit-trailers.js","sourceRoot":"","sources":["../../../../src/commands/git/commit-trailers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,cAAc,EAAuB,MAAM,gCAAgC,CAAC;AACrF,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAWhE,MAAM,oBAAoB,GAAG,8CAA8C,CAAC;AAE5E,SAAS,OAAO,CAAC,QAAiB;IAChC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACnF,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACvD,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;AACvB,CAAC;AAED,yEAAyE;AACzE,SAAS,UAAU;IACjB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,IAAI,MAAM,GAAG,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,CAAC;IAE5C,cAAc;IACd,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,sBAAsB,EAAE,CAAC;QAClD,MAAM,GAAG,cAAc,CAAC;QACxB,IAAI,GAAG,aAAa,CAAC;QACrB,KAAK,GAAG,GAAG,CAAC,eAAe,IAAI,oBAAoB,CAAC;IACtD,CAAC;IAED,kGAAkG;IAClG,IACE,GAAG,CAAC,eAAe;QACnB,GAAG,CAAC,YAAY;QAChB,GAAG,CAAC,YAAY,KAAK,MAAM;QAC3B,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QACpD,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EACxC,CAAC;QACD,MAAM,GAAG,cAAc,CAAC;QACxB,IAAI,GAAG,MAAM,CAAC;QACd,KAAK,GAAG,EAAE,CAAC;IACb,CAAC;IAED,qBAAqB;IACrB,IAAI,GAAG,CAAC,mBAAmB,EAAE,CAAC;QAC5B,MAAM,GAAG,cAAc,CAAC;QACxB,IAAI,GAAG,aAAa,CAAC;IACvB,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACjC,CAAC;AAED,gGAAgG;AAChG,SAAS,aAAa,CAAC,QAAgB,EAAE,GAAW;IAClD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAClD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;IAEzC,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrG,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,8FAA8F;AAC9F,SAAS,WAAW,CAAC,aAAqB;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC3C,MAAM,CAAC,GAAG,KAAK;QACb,CAAC,CAAC,SAAS,CAAC,qCAAqC,aAAa,iBAAiB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACnH,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACzH,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAmB,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC/E,CAAC;AAED,mEAAmE;AACnE,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,eAAuB,EAAE,aAAqB;IACtF,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,IAAI,GAAG,GAA0B,IAAI,CAAC;QACtC,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;YAChC,GAAG,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YACrC,GAAG,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,gFAAgF;IAChF,IAAI,GAAG,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC;QAAE,GAAG,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;IACzE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,CAAiB,EAAE,GAAmC;IACvE,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB;IAClC,IAAI,SAAS,GAAG,SAAS,EAAE,OAAO,GAAG,GAAG,CAAC;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IACvD,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;YAChD,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;gBAAE,SAAS,GAAG,CAAC,CAAC,UAAU,CAAC;YAC/D,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBAAE,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC,CAAC,8BAA8B,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAChC,CAAC;AAED,+FAA+F;AAC/F,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;AACpD,CAAC;AAED,eAAe;IACb,WAAW,EAAE,mGAAmG;IAChH,OAAO,EAAE;QACP,EAAE,KAAK,EAAE,0BAA0B,EAAE,WAAW,EAAE,uFAAuF,EAAE;QAC3I,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,uEAAuE,EAAE;QACpH,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,6DAA6D,EAAE;KACvG;IACD,KAAK,CAAC,MAAM,CAAC,IAAgE;QAC3E,4BAA4B;QAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO;QAEhE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEpC,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,aAAa,IAAI,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC;gBAAC,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxF,CAAC;QACD,4BAA4B;QAC5B,IAAI,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,OAAO;QAE7C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAErD,MAAM,eAAe,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAEtE,qEAAqE;QACrE,IAAI,WAAW,GAAkB,IAAI,CAAC;QACtC,IAAI,YAAY,GAAkB,IAAI,CAAC;QACvC,IAAI,IAAI,GAAkB,IAAI,CAAC;QAE/B,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;YACvE,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;gBAC9C,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;gBAChD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC;gBAE1C,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;gBAChE,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,EAAE,GAAG,eAAe,OAAO,CAAC,CAAC;gBAEnE,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC5B,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAa,CAAC;wBACvE,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,CAAC;wBAC3D,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC;wBAC9D,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;oBACjD,CAAC;oBAAC,MAAM,CAAC;wBACP,WAAW,GAAG,CAAC,CAAC;wBAAC,YAAY,GAAG,CAAC,CAAC;wBAAC,IAAI,GAAG,CAAC,CAAC;oBAC9C,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,wDAAwD;oBACxD,WAAW,GAAG,CAAC,CAAC;oBAAC,YAAY,GAAG,CAAC,CAAC;oBAAC,IAAI,GAAG,CAAC,CAAC;gBAC9C,CAAC;gBAED,uDAAuD;gBACvD,IAAI,CAAC;oBACH,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC3C,MAAM,IAAI,GAAa,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;oBACnF,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC1D,CAAC;gBAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,WAAW,KAAK,IAAI;YAAE,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACzE,IAAI,YAAY,KAAK,IAAI;YAAE,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAC5E,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,GAAG,OAAO;YAAE,IAAI,GAAG,OAAO,CAAC;QAEpD,sBAAsB;QACtB,MAAM,KAAK,GAAa,CAAC,cAAc,MAAM,EAAE,CAAC,CAAC;QACjD,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QACzC,IAAI,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC;QAC5C,IAAI,WAAW,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,WAAW,EAAE,CAAC,CAAC;QACxE,IAAI,YAAY,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,qBAAqB,YAAY,EAAE,CAAC,CAAC;QAC3E,IAAI,IAAI,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/D,IAAI,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE/B,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,mEAAmE;YACnE,IAAI,GAAG,GAAG,WAAW,CAAC;YACtB,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC;YAC3D,GAAG,IAAI,KAAK,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC;gBAAC,aAAa,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,wCAAwC,CAAC,CAAC;QACpG,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;CACF,CAAC"}
+{"version":3,"file":"commit-trailers.js","sourceRoot":"","sources":["../../../../src/commands/git/commit-trailers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,cAAc,EAAuB,MAAM,gCAAgC,CAAC;AACrF,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAWhE,MAAM,oBAAoB,GAAG,8CAA8C,CAAC;AAE5E,SAAS,OAAO,CAAC,QAAiB;IAChC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACnF,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACvD,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;AACvB,CAAC;AAED,yEAAyE;AACzE,SAAS,UAAU;IACjB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,IAAI,MAAM,GAAG,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,CAAC;IAE5C,cAAc;IACd,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,sBAAsB,EAAE,CAAC;QAClD,MAAM,GAAG,cAAc,CAAC;QACxB,IAAI,GAAG,aAAa,CAAC;QACrB,KAAK,GAAG,GAAG,CAAC,eAAe,IAAI,oBAAoB,CAAC;IACtD,CAAC;IAED,kGAAkG;IAClG,IACE,GAAG,CAAC,eAAe;QACnB,GAAG,CAAC,YAAY;QAChB,GAAG,CAAC,YAAY,KAAK,MAAM;QAC3B,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QACpD,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EACxC,CAAC;QACD,MAAM,GAAG,cAAc,CAAC;QACxB,IAAI,GAAG,MAAM,CAAC;QACd,KAAK,GAAG,EAAE,CAAC;IACb,CAAC;IAED,qBAAqB;IACrB,IAAI,GAAG,CAAC,mBAAmB,EAAE,CAAC;QAC5B,MAAM,GAAG,cAAc,CAAC;QACxB,IAAI,GAAG,aAAa,CAAC;IACvB,CAAC;IAED,4EAA4E;IAC5E,+EAA+E;IAC/E,2EAA2E;IAC3E,8EAA8E;IAC9E,6EAA6E;IAC7E,gEAAgE;IAChE,MAAM,aAAa,GAAG,GAAG,GAAG,CAAC,uBAAuB,IAAI,EAAE,IAAI,GAAG,CAAC,uBAAuB,IAAI,EAAE,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;IACzI,IAAI,GAAG,CAAC,YAAY,KAAK,GAAG,IAAI,GAAG,CAAC,eAAe,IAAI,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxF,MAAM,GAAG,cAAc,CAAC;QACxB,IAAI,GAAG,QAAQ,CAAC;QAChB,KAAK,GAAG,EAAE,CAAC;IACb,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACjC,CAAC;AAED,gGAAgG;AAChG,SAAS,aAAa,CAAC,QAAgB,EAAE,GAAW;IAClD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAClD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;IAEzC,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrG,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;sDAGsD;AACtD,SAAS,WAAW,CAAC,aAAqB,EAAE,QAAiB;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC3C,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,cAAc,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAK;QACb,CAAC,CAAC,SAAS,CAAC,0BAA0B,WAAW,cAAc,aAAa,iBAAiB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACjI,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1I,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAmB,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC/E,CAAC;AAED,mEAAmE;AACnE,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,eAAuB,EAAE,aAAqB;IACtF,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,IAAI,GAAG,GAA0B,IAAI,CAAC;QACtC,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;YAChC,GAAG,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC5E,GAAG,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,GAAG,GAAG,WAAW,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC;YAAE,GAAG,GAAG,WAAW,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;QACnF,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;IACD,IAAI,GAAG,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC;QAAE,GAAG,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;IACzE,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,SAAS,SAAS,CAAC,CAAiB,EAAE,GAAmC;IACvE,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB;IAClC,IAAI,SAAS,GAAG,SAAS,EAAE,OAAO,GAAG,GAAG,CAAC;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IACvD,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;YAChD,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;gBAAE,SAAS,GAAG,CAAC,CAAC,UAAU,CAAC;YAC/D,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBAAE,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC,CAAC,8BAA8B,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAChC,CAAC;AAED,+FAA+F;AAC/F,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;AACpD,CAAC;AAED,eAAe;IACb,WAAW,EAAE,mGAAmG;IAChH,OAAO,EAAE;QACP,EAAE,KAAK,EAAE,0BAA0B,EAAE,WAAW,EAAE,uFAAuF,EAAE;QAC3I,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,uEAAuE,EAAE;QACpH,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,6DAA6D,EAAE;KACvG;IACD,KAAK,CAAC,MAAM,CAAC,IAAgE;QAC3E,4BAA4B;QAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO;QAEhE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEpC,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,aAAa,IAAI,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC;gBAAC,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxF,CAAC;QACD,4BAA4B;QAC5B,IAAI,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,OAAO;QAE7C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAErD,MAAM,eAAe,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAEtE,qEAAqE;QACrE,IAAI,WAAW,GAAkB,IAAI,CAAC;QACtC,IAAI,YAAY,GAAkB,IAAI,CAAC;QACvC,IAAI,IAAI,GAAkB,IAAI,CAAC;QAE/B,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;YACxE,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;gBACpD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;gBAC9C,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;gBAChD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC;gBAE1C,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;gBAChE,gFAAgF;gBAChF,wEAAwE;gBACxE,0EAA0E;gBAC1E,iEAAiE;gBACjE,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,EAAE,GAAG,eAAe,IAAI,WAAW,OAAO,CAAC,CAAC;gBAElF,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC5B,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAa,CAAC;wBACvE,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,CAAC;wBAC3D,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC;wBAC9D,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;oBACjD,CAAC;oBAAC,MAAM,CAAC;wBACP,WAAW,GAAG,CAAC,CAAC;wBAAC,YAAY,GAAG,CAAC,CAAC;wBAAC,IAAI,GAAG,CAAC,CAAC;oBAC9C,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,wDAAwD;oBACxD,WAAW,GAAG,CAAC,CAAC;oBAAC,YAAY,GAAG,CAAC,CAAC;oBAAC,IAAI,GAAG,CAAC,CAAC;gBAC9C,CAAC;gBAED,uDAAuD;gBACvD,IAAI,CAAC;oBACH,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC3C,MAAM,IAAI,GAAa,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;oBACnF,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC1D,CAAC;gBAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,WAAW,KAAK,IAAI;YAAE,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACzE,IAAI,YAAY,KAAK,IAAI;YAAE,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAC5E,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,GAAG,OAAO;YAAE,IAAI,GAAG,OAAO,CAAC;QAGpD,sBAAsB;QACtB,MAAM,KAAK,GAAa,CAAC,cAAc,MAAM,EAAE,CAAC,CAAC;QACjD,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QACzC,IAAI,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC;QAC5C,IAAI,WAAW,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,WAAW,EAAE,CAAC,CAAC;QACxE,IAAI,YAAY,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,qBAAqB,YAAY,EAAE,CAAC,CAAC;QAC3E,IAAI,IAAI,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/D,IAAI,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE/B,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,mEAAmE;YACnE,IAAI,GAAG,GAAG,WAAW,CAAC;YACtB,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC;YAC3D,GAAG,IAAI,KAAK,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC;gBAAC,aAAa,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,wCAAwC,CAAC,CAAC;QACpG,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;CACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prism-d1/cli",
-  "version": "1.0.60",
+  "version": "1.0.64",
   "description": "PRISM D1 Velocity CLI — AI development lifecycle assessment tool",
   "author": "andklee",
   "engines": {