@prism-d1/cli 1.0.79 → 1.0.80

package/dist/assets/gitlab-workflows/prism-dora-weekly.yml

@@ -1,181 +0,0 @@
-# prism-dora-weekly.yml — Weekly DORA + AI-DORA metrics assessment.
-#
-# Include this file in your .gitlab-ci.yml:
-#   include:
-#     - local: '.prism/gitlab-workflows/prism-dora-weekly.yml'
-#
-# Required setup:
-#   - CI/CD variable PRISM_METRICS_ROLE_ARN (IAM role with events:PutEvents + cloudwatch:PutMetricData)
-#   - CI/CD variable AWS_REGION (default: us-west-2)
-#   - .prism/config.json committed to the repo
-#   - Pipeline schedule configured: weekly on Monday at 09:00 UTC
-
-prism-dora-weekly:
-  stage: test
-  image:
-    name: amazon/aws-cli:latest
-    entrypoint: [""]
-  id_tokens:
-    GITLAB_OIDC_TOKEN:
-      aud: https://gitlab.com
-  rules:
-    - if: '$CI_PIPELINE_SOURCE == "schedule"'
-    - if: '$CI_PIPELINE_SOURCE == "web"'
-      when: manual
-  variables:
-    AWS_DEFAULT_REGION: us-west-2
-  before_script:
-    - yum install -y -q jq bc git
-    - git fetch --unshallow || true
-    - |
-      # Assume AWS role via GitLab OIDC
-      if [[ -n "${PRISM_METRICS_ROLE_ARN}" && -n "${GITLAB_OIDC_TOKEN}" ]]; then
-        echo "Assuming role via OIDC: ${PRISM_METRICS_ROLE_ARN}"
-        if CREDS=$(aws sts assume-role-with-web-identity \
-          --role-arn "${PRISM_METRICS_ROLE_ARN}" \
-          --role-session-name "gitlab-ci-${CI_JOB_ID}" \
-          --web-identity-token "${GITLAB_OIDC_TOKEN}" \
-          --query 'Credentials.[AccessKeyId,SecretAccessKey,SessionToken]' \
-          --output text 2>&1); then
-          export AWS_ACCESS_KEY_ID=$(echo "${CREDS}" | awk '{print $1}')
-          export AWS_SECRET_ACCESS_KEY=$(echo "${CREDS}" | awk '{print $2}')
-          export AWS_SESSION_TOKEN=$(echo "${CREDS}" | awk '{print $3}')
-          echo "✓ OIDC credentials acquired."
-        else
-          echo "⚠️ OIDC assume-role failed: ${CREDS}"
-        fi
-      elif [[ -n "${PRISM_METRICS_ROLE_ARN}" ]]; then
-        echo "⚠️ PRISM_METRICS_ROLE_ARN set but GITLAB_OIDC_TOKEN is empty."
-      fi
-  script:
-    - |
-      # Skip if no AWS credentials available
-      if ! aws sts get-caller-identity &>/dev/null; then
-        echo "⚠️ No AWS credentials. Set PRISM_METRICS_ROLE_ARN or configure AWS access."
-        exit 0
-      fi
-
-      TEAM_ID=$(jq -r '.team_id // "no_team"' .prism/config.json 2>/dev/null || echo "no_team")
-      SINCE_DATE=$(date -u -d '7 days ago' +"%Y-%m-%d")
-      REPO="${CI_PROJECT_PATH}"
-      NAMESPACE="PRISM/D1/Velocity"
-
-      # ---------------------------------------------------------------
-      # 1. Deployment Frequency — merged MRs to default branch (past 7 days)
-      # ---------------------------------------------------------------
-      SINCE_ISO=$(date -u -d '7 days ago' +"%Y-%m-%dT%H:%M:%SZ")
-      MERGED_MRS=$(curl -s --header "PRIVATE-TOKEN: ${GITLAB_TOKEN:-${CI_JOB_TOKEN}}" \
-        "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/merge_requests?state=merged&updated_after=${SINCE_ISO}&per_page=100" 2>/dev/null || echo "[]")
-      DEPLOY_COUNT=$(echo "${MERGED_MRS}" | jq 'length')
-      DEPLOY_FREQUENCY=$(echo "scale=2; ${DEPLOY_COUNT} / 7" | bc -l | sed 's/^\./0./')
-
-      # ---------------------------------------------------------------
-      # 2. Lead Time — avg time from MR open to merge
-      # ---------------------------------------------------------------
-      AVG_LEAD_TIME_HOURS=$(echo "${MERGED_MRS}" | jq '
-        if length == 0 then 0
-        else [.[] | select(.merged_at != null and .created_at != null) |
-          ((.merged_at | sub("\\.[0-9]+Z$"; "Z") | strptime("%Y-%m-%dT%H:%M:%SZ") | mktime) -
-           (.created_at | sub("\\.[0-9]+Z$"; "Z") | strptime("%Y-%m-%dT%H:%M:%SZ") | mktime)) / 3600
-        ] | if length > 0 then add / length | . * 100 | round / 100 else 0 end
-        end')
-
-      # ---------------------------------------------------------------
-      # 3. Change Failure Rate — MRs with "revert|hotfix|rollback" in title
-      # ---------------------------------------------------------------
-      FAILURE_MRS=$(echo "${MERGED_MRS}" | jq '[.[] | select(.title // "" | test("revert|hotfix|rollback"; "i"))] | length')
-      [[ "${DEPLOY_COUNT}" -gt 0 ]] && CHANGE_FAILURE_RATE=$(echo "scale=4; ${FAILURE_MRS} / ${DEPLOY_COUNT}" | bc -l | sed 's/^\./0./') || CHANGE_FAILURE_RATE="0"
-
-      # ---------------------------------------------------------------
-      # 4. MTTR — avg time for hotfix/revert MRs
-      # ---------------------------------------------------------------
-      MTTR_HOURS=$(echo "${MERGED_MRS}" | jq '
-        [.[] | select(.title // "" | test("revert|hotfix|rollback"; "i")) |
-         select(.merged_at != null and .created_at != null) |
-         ((.merged_at | sub("\\.[0-9]+Z$"; "Z") | strptime("%Y-%m-%dT%H:%M:%SZ") | mktime) -
-          (.created_at | sub("\\.[0-9]+Z$"; "Z") | strptime("%Y-%m-%dT%H:%M:%SZ") | mktime)) / 3600
-        ] | if length > 0 then add / length | . * 100 | round / 100 else 0 end')
-
-      # ---------------------------------------------------------------
-      # 5. AI-DORA metrics from commit trailers
-      # ---------------------------------------------------------------
-      TOTAL_COMMITS=$(git log --since="${SINCE_DATE}" --oneline "${CI_DEFAULT_BRANCH}" 2>/dev/null | wc -l | tr -d ' ')
-      AI_GENERATED=0; AI_ASSISTED=0; HUMAN_ONLY=0; SPEC_REFS=0
-      CLAUDE_CODE_COUNT=0; KIRO_COUNT=0; Q_DEV_COUNT=0
-
-      for SHA in $(git log --since="${SINCE_DATE}" --format='%H' "${CI_DEFAULT_BRANCH}" 2>/dev/null); do
-        MSG=$(git log -1 --format='%B' "${SHA}")
-        echo "${MSG}" | grep -q '^AI-Origin: ai-generated' && AI_GENERATED=$((AI_GENERATED + 1))
-        echo "${MSG}" | grep -q '^AI-Origin: ai-assisted' && AI_ASSISTED=$((AI_ASSISTED + 1))
-        echo "${MSG}" | grep -q '^AI-Origin: human' && HUMAN_ONLY=$((HUMAN_ONLY + 1))
-        echo "${MSG}" | grep -q '^Spec-Ref:' && SPEC_REFS=$((SPEC_REFS + 1))
-        TOOL=$(echo "${MSG}" | grep -oP '(?<=^AI-Tool: ).+' || true)
-        case "${TOOL}" in
-          *claude-code*) CLAUDE_CODE_COUNT=$((CLAUDE_CODE_COUNT + 1)) ;;
-          *kiro*)        KIRO_COUNT=$((KIRO_COUNT + 1)) ;;
-          *q-developer*) Q_DEV_COUNT=$((Q_DEV_COUNT + 1)) ;;
-        esac
-      done
-
-      UNTAGGED=$((TOTAL_COMMITS - AI_GENERATED - AI_ASSISTED - HUMAN_ONLY))
-      [[ "${UNTAGGED}" -lt 0 ]] && UNTAGGED=0
-      AI_TOTAL=$((AI_GENERATED + AI_ASSISTED))
-      [[ "${TOTAL_COMMITS}" -gt 0 ]] && AI_ADOPTION_RATE=$(echo "scale=4; ${AI_TOTAL} / ${TOTAL_COMMITS}" | bc -l | sed 's/^\./0./') || AI_ADOPTION_RATE="0"
-      [[ "${TOTAL_COMMITS}" -gt 0 ]] && SPEC_COVERAGE=$(echo "scale=4; ${SPEC_REFS} / ${TOTAL_COMMITS}" | bc -l | sed 's/^\./0./') || SPEC_COVERAGE="0"
-
-      # ---------------------------------------------------------------
-      # Emit assessment event
-      # ---------------------------------------------------------------
-      TIMESTAMP=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
-
-      ASSESSMENT_EVENT=$(jq -n \
-        --arg team_id "${TEAM_ID}" --arg repo "${REPO}" --arg timestamp "${TIMESTAMP}" \
-        --argjson deploy_count "${DEPLOY_COUNT}" --argjson deploy_frequency "${DEPLOY_FREQUENCY}" \
-        --argjson avg_lead_time_hours "${AVG_LEAD_TIME_HOURS}" \
-        --argjson change_failure_rate "${CHANGE_FAILURE_RATE}" --argjson mttr_hours "${MTTR_HOURS}" \
-        --argjson total_commits "${TOTAL_COMMITS}" --argjson ai_generated "${AI_GENERATED}" \
-        --argjson ai_assisted "${AI_ASSISTED}" --argjson human_only "${HUMAN_ONLY}" \
-        --argjson untagged "${UNTAGGED}" --argjson ai_adoption_rate "${AI_ADOPTION_RATE}" \
-        --argjson spec_coverage "${SPEC_COVERAGE}" \
-        --argjson claude_code "${CLAUDE_CODE_COUNT}" --argjson kiro "${KIRO_COUNT}" --argjson q_dev "${Q_DEV_COUNT}" \
-        '{team_id:$team_id, repo:$repo, timestamp:$timestamp, prism_level:2,
-         metric:{name:"weekly_assessment",value:1,unit:"assessment"},
-         dora:{deployment_frequency:$deploy_frequency, deployments:$deploy_count,
-               lead_time_hours:$avg_lead_time_hours, change_failure_rate:$change_failure_rate,
-               mttr_hours:$mttr_hours},
-         ai_dora:{ai_adoption_rate:$ai_adoption_rate, ai_to_merge_ratio:$ai_adoption_rate,
-                  total_commits:$total_commits, ai_generated_commits:$ai_generated,
-                  ai_assisted_commits:$ai_assisted, human_commits:$human_only,
-                  untagged_commits:$untagged, spec_coverage:$spec_coverage,
-                  tool_breakdown:{claude_code:$claude_code, kiro:$kiro, q_developer:$q_dev}}}')
-
-      aws events put-events --region "${AWS_DEFAULT_REGION}" \
-        --entries "[{\"Source\":\"prism.d1.velocity\",\"DetailType\":\"prism.d1.assessment\",
-          \"EventBusName\":\"prism-d1-metrics\",
-          \"Detail\":$(echo "${ASSESSMENT_EVENT}" | jq -c '.' | jq -Rs '.')}]"
-
-      # Emit CloudWatch metrics
-      for METRIC_DATA in \
-        "AIAdoptionRate:${AI_ADOPTION_RATE}:Percent" \
-        "SpecCoverage:${SPEC_COVERAGE}:Percent" \
-        "ClaudeCodeCommits:${CLAUDE_CODE_COUNT}:Count" \
-        "KiroCommits:${KIRO_COUNT}:Count" \
-        "QDeveloperCommits:${Q_DEV_COUNT}:Count" \
-        "UntaggedCommits:${UNTAGGED}:Count"; do
-        METRIC_NAME="${METRIC_DATA%%:*}"; REST="${METRIC_DATA#*:}"
-        METRIC_VALUE="${REST%%:*}"; METRIC_UNIT="${REST#*:}"
-        aws cloudwatch put-metric-data --region "${AWS_DEFAULT_REGION}" --namespace "${NAMESPACE}" \
-          --metric-data "[{\"MetricName\":\"${METRIC_NAME}\",\"Value\":${METRIC_VALUE},
-            \"Unit\":\"${METRIC_UNIT}\",\"Timestamp\":\"${TIMESTAMP}\",
-            \"Dimensions\":[{\"Name\":\"TeamId\",\"Value\":\"${TEAM_ID}\"},{\"Name\":\"Repository\",\"Value\":\"${REPO}\"}]}]"
-      done
-
-      echo "=== DORA Metrics ==="
-      echo "Deployment Frequency: ${DEPLOY_FREQUENCY}/day"
-      echo "Lead Time: ${AVG_LEAD_TIME_HOURS} hours"
-      echo "Change Failure Rate: ${CHANGE_FAILURE_RATE}"
-      echo "MTTR: ${MTTR_HOURS} hours"
-      echo "=== AI-DORA Metrics ==="
-      echo "AI Adoption Rate: ${AI_ADOPTION_RATE}"
-      echo "Spec Coverage: ${SPEC_COVERAGE}"
-      echo "Total Commits: ${TOTAL_COMMITS}"

package/dist/assets/infra/lib/lambda/defect-correlator.ts

@@ -1,142 +0,0 @@
-import {
-  DynamoDBClient,
-  QueryCommand,
-} from '@aws-sdk/client-dynamodb';
-import {
-  EventBridgeClient,
-  PutEventsCommand,
-} from '@aws-sdk/client-eventbridge';
-
-const dynamoClient = new DynamoDBClient({});
-const eventBridgeClient = new EventBridgeClient({});
-
-const EVENTS_TABLE = process.env.EVENTS_TABLE!;
-const EVENT_BUS_NAME = process.env.EVENT_BUS_NAME!;
-const LOOKBACK_HOURS = parseInt(process.env.LOOKBACK_HOURS ?? '24', 10);
-
-interface DeployEvent {
-  source: string;
-  'detail-type': string;
-  detail: {
-    team_id: string;
-    repo: string;
-    timestamp: string;
-    dora?: {
-      change_failure_rate?: number;
-    };
-  };
-}
-
-/**
- * Triggered by failed deployment events.
- * Queries recent commits by AI origin, calculates AI vs human defect rates,
- * and emits a prism.d1.quality event.
- */
-export async function handler(event: DeployEvent): Promise<void> {
-  const detail = event.detail;
-
-  // Only process deployment failures
-  const cfr = detail.dora?.change_failure_rate ?? 0;
-  if (cfr === 0) {
-    console.log('Deployment succeeded, no defect correlation needed');
-    return;
-  }
-
-  console.log(`Processing failed deployment for ${detail.team_id}/${detail.repo}`);
-
-  const deployTime = new Date(detail.timestamp);
-  const lookbackStart = new Date(deployTime.getTime() - LOOKBACK_HOURS * 60 * 60 * 1000);
-
-  // Query recent commit events for this repo
-  try {
-    const result = await dynamoClient.send(
-      new QueryCommand({
-        TableName: EVENTS_TABLE,
-        KeyConditionExpression: 'pk = :pk AND sk BETWEEN :start AND :end',
-        ExpressionAttributeValues: {
-          ':pk': { S: `${detail.team_id}#${detail.repo}` },
-          ':start': { S: lookbackStart.toISOString() },
-          ':end': { S: deployTime.toISOString() },
-        },
-      }),
-    );
-
-    if (!result.Items || result.Items.length === 0) {
-      console.log('No recent commits found in lookback window');
-      return;
-    }
-
-    // Count commits by AI origin
-    let aiCommitCount = 0;
-    let humanCommitCount = 0;
-
-    for (const item of result.Items) {
-      const detailType = item.detail_type?.S ?? '';
-      if (detailType !== 'prism.d1.commit') continue;
-
-      const data = JSON.parse(item.data?.S ?? '{}');
-      const origin = data.ai_context?.origin ?? 'human';
-
-      if (origin === 'ai-generated' || origin === 'ai-assisted') {
-        aiCommitCount++;
-      } else {
-        humanCommitCount++;
-      }
-    }
-
-    const totalCommits = aiCommitCount + humanCommitCount;
-    if (totalCommits === 0) {
-      console.log('No commit events in lookback window');
-      return;
-    }
-
-    // Calculate defect rates using proportional distribution.
-    // Since we can't attribute a specific failure to a specific commit,
-    // we distribute the change failure rate proportionally by code origin.
-    // This gives a directional signal: if 80% of commits are AI and the
-    // deploy failed, AI code carries 80% of the attributed failure weight.
-    const aiDefectRate = aiCommitCount > 0 ? (cfr * aiCommitCount) / totalCommits : 0;
-    const humanDefectRate = humanCommitCount > 0 ? (cfr * humanCommitCount) / totalCommits : 0;
-
-    const qualityEvent = {
-      team_id: detail.team_id,
-      repo: detail.repo,
-      timestamp: detail.timestamp,
-      prism_level: 2,
-      metric: {
-        name: 'post_merge_defect_rate',
-        value: cfr,
-        unit: 'percent',
-      },
-      ai_dora: {
-        post_merge_defect_rate: cfr,
-      },
-      quality: {
-        deployment_id: `deploy-${Date.now()}`,
-        ai_defect_rate: Math.round(aiDefectRate * 10000) / 10000,
-        human_defect_rate: Math.round(humanDefectRate * 10000) / 10000,
-        total_ai_commits: aiCommitCount,
-        total_human_commits: humanCommitCount,
-      },
-    };
-
-    await eventBridgeClient.send(
-      new PutEventsCommand({
-        Entries: [
-          {
-            Source: 'prism.d1.velocity',
-            DetailType: 'prism.d1.quality',
-            EventBusName: EVENT_BUS_NAME,
-            Detail: JSON.stringify(qualityEvent),
-          },
-        ],
-      }),
-    );
-
-    console.log(
-      `Emitted quality event: AI defect rate ${aiDefectRate.toFixed(4)}, Human defect rate ${humanDefectRate.toFixed(4)}, ${aiCommitCount} AI commits, ${humanCommitCount} human commits`,
-    );
-  } catch (err) {
-    console.error('Failed to correlate defects:', err);
-  }
-}

package/dist/assets/infra/lib/lambda/spec-to-code-calculator.ts

@@ -1,123 +0,0 @@
-import {
-  DynamoDBClient,
-  QueryCommand,
-} from '@aws-sdk/client-dynamodb';
-import {
-  EventBridgeClient,
-  PutEventsCommand,
-} from '@aws-sdk/client-eventbridge';
-
-const dynamoClient = new DynamoDBClient({});
-const eventBridgeClient = new EventBridgeClient({});
-
-const EVENTS_TABLE = process.env.EVENTS_TABLE!;
-const EVENT_BUS_NAME = process.env.EVENT_BUS_NAME!;
-
-interface PrMergedEvent {
-  source: string;
-  'detail-type': string;
-  detail: {
-    team_id: string;
-    repo: string;
-    timestamp: string;
-    ai_context?: {
-      tool: string;
-      model: string;
-      origin: string;
-    };
-    pr?: {
-      spec_ref?: string;
-      merged_at?: string;
-    };
-  };
-}
-
-/**
- * Triggered by merged PR events that have a Spec-Ref.
- * Calculates spec-to-code hours by finding the earliest commit
- * referencing the same spec and computing the time delta to PR merge.
- */
-export async function handler(event: PrMergedEvent): Promise<void> {
-  const detail = event.detail;
-  const specRef = detail.pr?.spec_ref;
-
-  if (!specRef) {
-    console.log('No spec reference in PR event, skipping');
-    return;
-  }
-
-  console.log(`Calculating spec-to-code for spec: ${specRef}`);
-
-  // Query for the earliest commit event in this repo that references this spec.
-  // spec_ref is stored as a top-level DynamoDB attribute by the metrics-processor.
-  try {
-    const result = await dynamoClient.send(
-      new QueryCommand({
-        TableName: EVENTS_TABLE,
-        KeyConditionExpression: 'pk = :pk',
-        FilterExpression: 'spec_ref = :spec_ref AND detail_type = :dt',
-        ExpressionAttributeValues: {
-          ':pk': { S: `${detail.team_id}#${detail.repo}` },
-          ':spec_ref': { S: specRef },
-          ':dt': { S: 'prism.d1.commit' },
-        },
-        ScanIndexForward: true, // Oldest first
-        Limit: 1,
-      }),
-    );
-
-    if (!result.Items || result.Items.length === 0) {
-      console.log(`No commit events found referencing spec: ${specRef}`);
-      return;
-    }
-
-    const earliestSpecCommitTime = result.Items[0].sk?.S;
-    if (!earliestSpecCommitTime) {
-      console.log('Could not determine spec commit timestamp');
-      return;
-    }
-
-    const mergedAt = detail.pr?.merged_at ?? detail.timestamp;
-    const specTime = new Date(earliestSpecCommitTime);
-    const mergeTime = new Date(mergedAt);
-    const specToCodeHours = (mergeTime.getTime() - specTime.getTime()) / (1000 * 60 * 60);
-
-    if (specToCodeHours < 0) {
-      console.log('Negative spec-to-code time, likely data issue');
-      return;
-    }
-
-    const specEvent = {
-      team_id: detail.team_id,
-      repo: detail.repo,
-      timestamp: detail.timestamp,
-      prism_level: 3,
-      metric: {
-        name: 'spec_to_code_hours',
-        value: Math.round(specToCodeHours * 100) / 100,
-        unit: 'hours',
-      },
-      ai_context: detail.ai_context,
-      ai_dora: {
-        spec_to_code_hours: Math.round(specToCodeHours * 100) / 100,
-      },
-    };
-
-    await eventBridgeClient.send(
-      new PutEventsCommand({
-        Entries: [
-          {
-            Source: 'prism.d1.velocity',
-            DetailType: 'prism.d1.pr',
-            EventBusName: EVENT_BUS_NAME,
-            Detail: JSON.stringify(specEvent),
-          },
-        ],
-      }),
-    );
-
-    console.log(`Spec-to-code: ${specToCodeHours.toFixed(2)} hours for spec ${specRef}`);
-  } catch (err) {
-    console.error('Failed to calculate spec-to-code hours:', err);
-  }
-}

package/dist/assets/metric-hooks/README.md

@@ -1,107 +0,0 @@
-# Metric Hooks
-
-A `prepare-commit-msg` git hook that automatically tags commits with AI origin metadata and token usage.
-
-## What It Does
-
-Every commit gets trailers appended to the message:
-
-```
-feat: add order creation endpoint
-
-AI-Origin: ai-generated
-AI-Tool: claude-code
-AI-Model: us.anthropic.claude-sonnet-4-5-20250929-v1:0
-AI-Input-Tokens: 12450
-AI-Output-Tokens: 3200
-AI-Cost: $0.08
-Spec-Ref: specs/create-order-endpoint.md
-```
-
-These trailers are read by the `prism-ai-metrics.yml` GitHub workflow on PR merge to emit metrics to EventBridge.
-
-## Installation
-
-```bash
-bash prism-cli bootstrapper install-git-hooks --team-id my-team
-```
-
-Or interactively (prompts for team ID):
-
-```bash
-bash prism-cli bootstrapper install-git-hooks
-```
-
-To remove:
-
-```bash
-bash prism-cli bootstrapper install-git-hooks --uninstall
-```
-
-The installer also registers a Claude Code `SessionStart` hook in
-`~/.claude/settings.json` (served by `prism-cli git claude-session-context`).
-It captures the Claude session id into the environment so commits made during a
-Claude Code session are attributed correctly.
-
-## Prerequisites
-
-- **prism-cli** — Runs the hook logic (`prism-cli git commit-trailers`). Install: `npm install -g @prism-d1/cli`
-- **codeburn** *(optional)* — Token usage tracking for non-Kiro tools. Install: `npm install -g codeburn` (or `brew install codeburn` on macOS). Kiro sessions are parsed directly by prism-cli, no codeburn needed.
-
-> The hook is a thin bash delegator to prism-cli. It requires only `git` and
-> `bash` (with `prism-cli` on PATH) — **no `jq`, `bc`, or `sed`** — so it works
-> on Linux, macOS, and Windows Git Bash. If `prism-cli` is not installed, the
-> commit proceeds normally without trailers.
-
-## How AI Detection Works
-
-The hook (via `prism-cli git commit-trailers`) checks for AI tool involvement, in order:
-
-1. **Claude Code**: `CLAUDE_CODE` or `CLAUDE_CODE_SESSION_ID` environment variable
-2. **Kiro**: `KIRO_SESSION_ID` / `KIRO_SESSION` env var, `TERM_PROGRAM=kiro` (IDE terminal), or a `kiro` path in `VSCODE_GIT_ASKPASS_NODE` / `GIT_ASKPASS` (Source Control panel commits)
-3. **Q Developer**: `Q_DEVELOPER_SESSION` environment variable
-4. **Default**: No indicators → `AI-Origin: human`
-
-## Token Tracking
-
-When an AI tool is detected, the hook computes a per-commit delta:
-
-1. Collects lifetime token totals — Kiro sessions are parsed directly by prism-cli; other tools use `codeburn report -p all --format json`
-2. Compares against a snapshot from the previous commit (`~/.prism/tokentracker/<project-basename>.json`)
-3. Writes the delta as `AI-Input-Tokens` and `AI-Output-Tokens` trailers
-4. Saves the new snapshot for next time
-
-If no usage data is available (e.g. codeburn absent for a non-Kiro tool) or no AI tool is detected, token trailers are omitted.
-
-## Configuration
-
-The installer creates `.prism/config.json`:
-
-```json
-{
-  "team_id": "your-team",
-  "max_tokens": 1000000,
-  "max_cost": 100
-}
-```
-
-| Field | Description | Default |
-|-------|-------------|---------|
-| `team_id` | Team identifier for metric attribution | *(required)* |
-| `max_tokens` | Max input/output tokens per commit (capped at this value) | `1000000` |
-| `max_cost` | Max cost in USD per commit (capped at this value) | `100` |
-
-Set custom bounds at install time:
-
-```bash
-prism-cli bootstrapper install-git-hooks --team-id my-team --max-tokens 500000 --max-cost 50
-```
-
-Values exceeding bounds are clamped to the configured maximum. The workflow (`prism-ai-metrics.yml`) applies a second layer of enforcement, discarding values above 1M tokens / $100 to zero.
-
-## Safety
-
-- Never blocks a commit — exits 0 even if prism-cli or codeburn is missing or errors
-- Only appends trailers — never modifies code
-- Skips merge and squash commits
-- Won't duplicate trailers if already present