@prism-d1/cli 1.0.79 → 1.0.81

package/dist/src/utils/tempfile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tempfile.d.ts","sourceRoot":"","sources":["../../../src/utils/tempfile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH,wBAAgB,eAAe,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,CAAC,GAAG,CAAC,CAS7F"}

package/dist/src/utils/tempfile.js

@@ -0,0 +1,32 @@
+/**
+ * Private temporary files for handing payloads to external commands.
+ *
+ * Two reasons this exists rather than writing to a fixed path under /tmp:
+ *
+ * `writeFileSync` follows symlinks. A predictable name like
+ * `/tmp/prism-request.json` can be pre-created by any local user as a symlink
+ * to a file the caller owns, and the write lands there instead. The sticky bit
+ * does not help — the attacker owns the symlink and we follow it. A fresh
+ * `mkdtemp` directory has an unpredictable name and mode 0700, so nothing can
+ * be planted inside it.
+ *
+ * The callback shape exists so the directory is reclaimed on every path. The
+ * first version of this helper returned the path and left callers to unlink
+ * only the file, which leaked one empty directory per invocation, and unlinked
+ * before throwing on failure so error paths leaked the file as well.
+ */
+import { mkdtempSync, writeFileSync, rmSync } from 'node:fs';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+export function withPrivateTemp(name, content, use) {
+    const dir = mkdtempSync(join(tmpdir(), 'prism-'));
+    try {
+        const file = join(dir, name);
+        writeFileSync(file, content, { mode: 0o600 });
+        return use(file);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=tempfile.js.map

package/dist/src/utils/tempfile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tempfile.js","sourceRoot":"","sources":["../../../src/utils/tempfile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,MAAM,UAAU,eAAe,CAAI,IAAY,EAAE,OAAe,EAAE,GAAwB;IACxF,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9C,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC"}

package/dist/src/utils/validate.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Validation for provider identity values collected at the prompt.
+ *
+ * These are NOT what prevents shell injection -- run() in ./exec.ts does that by
+ * never invoking a shell. Validation is here for two other reasons:
+ *
+ *  1. IAM role names are built from these values and accept only [\w+=,.@-].
+ *     A value containing a slash or a space otherwise reaches AWS and comes back
+ *     as a ValidationException that says nothing about which input was wrong.
+ *  2. Several of these values land inside an IAM trust policy condition. A
+ *     malformed one does not fail loudly -- it produces a policy whose sub claim
+ *     never matches (nothing can assume the role) or, worse, matches more
+ *     broadly than intended.
+ *
+ * Each helper exits the process with a message naming the offending value rather
+ * than throwing, matching how the bootstrapper commands report other input
+ * errors.
+ */
+export declare function validateGithubOwner(value: string, label?: string): string;
+export declare function validateGithubRepo(value: string, label?: string): string;
+/** A single GitLab group or username -- one segment, no slash. */
+export declare function validateGitlabNamespace(value: string, label?: string): string;
+/**
+ * A full GitLab project path, which may be nested: `group/subgroup/project`.
+ *
+ * Slashes are legal here, unlike a GitHub repo name, so this cannot reuse the
+ * GitHub validator. Every segment is checked individually; empty segments (from
+ * a leading, trailing, or doubled slash) are rejected because they silently
+ * change the project_path sub claim.
+ */
+export declare function validateGitlabProjectPath(value: string, label?: string): string;
+/**
+ * Normalizes a GitLab instance URL and returns the URL and its bare hostname.
+ *
+ * The hostname is used two ways that both break silently on a malformed value:
+ * as the last element of the OIDC provider ARN, and as the prefix of the
+ * `<host>:aud` / `<host>:sub` trust policy condition keys. Deriving it with a
+ * bare `.replace(/^https?:\/\//, '')` leaves any trailing slash or path in
+ * place, so `https://gitlab.com/` yields the condition key `gitlab.com/:sub`,
+ * which no token will ever match -- the role simply becomes unassumable, with
+ * no error at creation time.
+ */
+export declare function normalizeGitlabUrl(value: string, label?: string): {
+    url: string;
+    host: string;
+};
+/**
+ * A provider-assigned numeric id (GitHub owner/repo id, GitLab project id).
+ *
+ * These reach an IAM trust policy sub claim. A non-numeric value cannot be a
+ * real id, and permitting one risks widening the claim rather than failing.
+ */
+export declare function validateNumericId(value: string, label?: string): string;
+//# sourceMappingURL=validate.d.ts.map

package/dist/src/utils/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../src/utils/validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAuBH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAwB,GAAG,MAAM,CAQxF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAoB,GAAG,MAAM,CAQnF;AAgBD,kEAAkE;AAClE,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAA0B,GAAG,MAAM,CAS9F;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAwB,GAAG,MAAM,CAU9F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAwB,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAqB9G;AAID;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAO,GAAG,MAAM,CAKrE"}

package/dist/src/utils/validate.js

@@ -0,0 +1,143 @@
+/**
+ * Validation for provider identity values collected at the prompt.
+ *
+ * These are NOT what prevents shell injection -- run() in ./exec.ts does that by
+ * never invoking a shell. Validation is here for two other reasons:
+ *
+ *  1. IAM role names are built from these values and accept only [\w+=,.@-].
+ *     A value containing a slash or a space otherwise reaches AWS and comes back
+ *     as a ValidationException that says nothing about which input was wrong.
+ *  2. Several of these values land inside an IAM trust policy condition. A
+ *     malformed one does not fail loudly -- it produces a policy whose sub claim
+ *     never matches (nothing can assume the role) or, worse, matches more
+ *     broadly than intended.
+ *
+ * Each helper exits the process with a message naming the offending value rather
+ * than throwing, matching how the bootstrapper commands report other input
+ * errors.
+ */
+function fail(lines) {
+    for (const line of lines)
+        console.error(line);
+    process.exit(1);
+}
+// ---- GitHub ----
+/**
+ * GitHub owner (user or org): alphanumerics and hyphens, no leading or trailing
+ * hyphen, 39 characters max.
+ *
+ * Deliberately looser than GitHub's current signup rule, which forbids
+ * consecutive hyphens. That rule postdates a lot of accounts, so grandfathered
+ * owners containing `--` still exist and IAM accepts them fine. Rejecting one
+ * would block a legitimate user for no security gain.
+ */
+const GITHUB_OWNER = /^[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?$/;
+/** GitHub repository: alphanumerics plus `.`, `_`, `-`, 100 characters max. */
+const GITHUB_REPO = /^[A-Za-z0-9._-]{1,100}$/;
+export function validateGithubOwner(value, label = 'GitHub username/org') {
+    if (!GITHUB_OWNER.test(value)) {
+        fail([
+            `Error: ${label} "${value}" is not a valid GitHub owner name.`,
+            '  Expected letters, digits, and hyphens (max 39 characters), not starting or ending with a hyphen.',
+        ]);
+    }
+    return value;
+}
+export function validateGithubRepo(value, label = 'Repository name') {
+    if (!GITHUB_REPO.test(value) || value === '.' || value === '..') {
+        fail([
+            `Error: ${label} "${value}" is not a valid GitHub repository name.`,
+            '  Expected letters, digits, dots, underscores, and hyphens (max 100 characters).',
+        ]);
+    }
+    return value;
+}
+// ---- GitLab ----
+/**
+ * One segment of a GitLab namespace or project path.
+ *
+ * GitLab permits letters, digits, `_`, `.`, `-`, requires the first character to
+ * be alphanumeric, and reserves the `.git` and `.atom` suffixes.
+ */
+const GITLAB_SEGMENT = /^[A-Za-z0-9][A-Za-z0-9._-]{0,254}$/;
+function validGitlabSegment(seg) {
+    return GITLAB_SEGMENT.test(seg) && !/\.(git|atom)$/i.test(seg);
+}
+/** A single GitLab group or username -- one segment, no slash. */
+export function validateGitlabNamespace(value, label = 'GitLab group/username') {
+    if (!validGitlabSegment(value)) {
+        fail([
+            `Error: ${label} "${value}" is not a valid GitLab namespace.`,
+            '  Expected a single path segment of letters, digits, dots, underscores, and hyphens.',
+            '  Use --global with just the group name, not a full project path.',
+        ]);
+    }
+    return value;
+}
+/**
+ * A full GitLab project path, which may be nested: `group/subgroup/project`.
+ *
+ * Slashes are legal here, unlike a GitHub repo name, so this cannot reuse the
+ * GitHub validator. Every segment is checked individually; empty segments (from
+ * a leading, trailing, or doubled slash) are rejected because they silently
+ * change the project_path sub claim.
+ */
+export function validateGitlabProjectPath(value, label = 'GitLab project path') {
+    const segments = value.split('/');
+    if (segments.length < 2 || !segments.every(validGitlabSegment)) {
+        fail([
+            `Error: ${label} "${value}" is not a valid GitLab project path.`,
+            '  Expected group/project, optionally nested as group/subgroup/project.',
+            '  Each segment may contain letters, digits, dots, underscores, and hyphens.',
+        ]);
+    }
+    return value;
+}
+/**
+ * Normalizes a GitLab instance URL and returns the URL and its bare hostname.
+ *
+ * The hostname is used two ways that both break silently on a malformed value:
+ * as the last element of the OIDC provider ARN, and as the prefix of the
+ * `<host>:aud` / `<host>:sub` trust policy condition keys. Deriving it with a
+ * bare `.replace(/^https?:\/\//, '')` leaves any trailing slash or path in
+ * place, so `https://gitlab.com/` yields the condition key `gitlab.com/:sub`,
+ * which no token will ever match -- the role simply becomes unassumable, with
+ * no error at creation time.
+ */
+export function normalizeGitlabUrl(value, label = 'GitLab instance URL') {
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        return fail([
+            `Error: ${label} "${value}" is not a valid URL.`,
+            '  Expected something like https://gitlab.com or https://gitlab.example.com.',
+        ]);
+    }
+    if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:') {
+        fail([`Error: ${label} must use http or https, got "${parsed.protocol}".`]);
+    }
+    if (parsed.pathname !== '/' && parsed.pathname !== '') {
+        fail([
+            `Error: ${label} "${value}" must not include a path.`,
+            `  Use the instance root, e.g. ${parsed.protocol}//${parsed.host}`,
+        ]);
+    }
+    // GitLab's aud claim is the instance URL with no trailing slash.
+    return { url: `${parsed.protocol}//${parsed.host}`, host: parsed.host };
+}
+// ---- Shared ----
+/**
+ * A provider-assigned numeric id (GitHub owner/repo id, GitLab project id).
+ *
+ * These reach an IAM trust policy sub claim. A non-numeric value cannot be a
+ * real id, and permitting one risks widening the claim rather than failing.
+ */
+export function validateNumericId(value, label = 'ID') {
+    if (!/^\d+$/.test(value)) {
+        fail([`Error: ${label} "${value}" is not numeric.`]);
+    }
+    return value;
+}
+//# sourceMappingURL=validate.js.map

package/dist/src/utils/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../../src/utils/validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,SAAS,IAAI,CAAC,KAAe;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,mBAAmB;AAEnB;;;;;;;;GAQG;AACH,MAAM,YAAY,GAAG,iDAAiD,CAAC;AAEvE,+EAA+E;AAC/E,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAE9C,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,KAAK,GAAG,qBAAqB;IAC9E,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,UAAU,KAAK,KAAK,KAAK,qCAAqC;YAC9D,oGAAoG;SACrG,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,KAAK,GAAG,iBAAiB;IACzE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChE,IAAI,CAAC;YACH,UAAU,KAAK,KAAK,KAAK,0CAA0C;YACnE,kFAAkF;SACnF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mBAAmB;AAEnB;;;;;GAKG;AACH,MAAM,cAAc,GAAG,oCAAoC,CAAC;AAE5D,SAAS,kBAAkB,CAAC,GAAW;IACrC,OAAO,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjE,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,uBAAuB,CAAC,KAAa,EAAE,KAAK,GAAG,uBAAuB;IACpF,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,UAAU,KAAK,KAAK,KAAK,oCAAoC;YAC7D,sFAAsF;YACtF,mEAAmE;SACpE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAa,EAAE,KAAK,GAAG,qBAAqB;IACpF,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC;YACH,UAAU,KAAK,KAAK,KAAK,uCAAuC;YAChE,wEAAwE;YACxE,6EAA6E;SAC9E,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,KAAK,GAAG,qBAAqB;IAC7E,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;YACV,UAAU,KAAK,KAAK,KAAK,uBAAuB;YAChD,6EAA6E;SAC9E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChE,IAAI,CAAC,CAAC,UAAU,KAAK,iCAAiC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,GAAG,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,UAAU,KAAK,KAAK,KAAK,4BAA4B;YACrD,iCAAiC,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,EAAE;SACnE,CAAC,CAAC;IACL,CAAC;IACD,iEAAiE;IACjE,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAC1E,CAAC;AAED,mBAAmB;AAEnB;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,KAAK,GAAG,IAAI;IAC3D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,KAAK,mBAAmB,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prism-d1/cli",
-  "version": "1.0.79",
+  "version": "1.0.81",
   "description": "PRISM D1 Velocity CLI — AI development lifecycle assessment tool",
   "author": "andklee",
   "engines": {
@@ -22,7 +22,7 @@
     "access": "public"
   },
   "scripts": {
-    "build": "npx tsc && mkdir -p dist/assets/infra && cp -r ../bootstrapper/metric-hooks ../bootstrapper/eval-harness ../bootstrapper/github-workflows ../bootstrapper/gitlab-workflows dist/assets/ && cp -r ../infra/bin ../infra/lib ../infra/package.json ../infra/tsconfig.json ../infra/cdk.json dist/assets/infra/",
+    "build": "npx tsc && rm -rf dist/assets && mkdir -p dist/assets/infra && cp -r ../bootstrapper/metric-hooks ../bootstrapper/eval-harness ../bootstrapper/github-workflows ../bootstrapper/gitlab-workflows dist/assets/ && cp -r ../infra/bin ../infra/lib ../infra/package.json ../infra/tsconfig.json ../infra/cdk.json dist/assets/infra/",
     "prepublishOnly": "npm run build",
     "start": "tsx bin/prism-cli.ts",
     "dev": "tsx bin/prism-cli.ts"

package/dist/assets/eval-harness/README.md

@@ -1,144 +0,0 @@
-# Eval Harness
-
-Evaluate code quality in CI using either **kiro-cli headless mode** (recommended) or Amazon Bedrock rubrics.
-
-## Modes
-
-| Mode | Install Command | How It Works |
-|---|---|---|
-| **Kiro** (recommended) | `prism-cli bootstrapper install-eval-harness --mode kiro` | kiro-cli reads files, follows `.kiro/steering/code-review.md`, outputs structured JSON findings |
-| **Bedrock** (legacy) | `prism-cli bootstrapper install-eval-harness --with-rubrics` | Per-file rubric scoring via Bedrock API, weighted average client-side |
-
-## Kiro Mode
-
-```bash
-prism-cli bootstrapper install-eval-harness --mode kiro
-```
-
-This installs:
-- `.kiro/steering/code-review.md` — review rules (plain English)
-- `.github/workflows/prism-eval-gate.yml` — kiro-cli headless CI workflow
-
-**Requirements:**
-- `KIRO_API_KEY` repository secret (generate at https://app.kiro.dev → Settings → API Keys)
-- (Optional) `PRISM_METRICS_ROLE_ARN` for EventBridge metrics + AWS Continuum security scanning
-
-**How it works:**
-1. PR opened → workflow triggers
-2. kiro-cli reads changed files + the diff via `--trust-all-tools`
-3. Outputs structured JSON: findings with file/line, severity, score
-4. Gate fails if any high-severity finding or score < 0.82
-5. PR comment posted with findings table
-
-## Bedrock Mode (Legacy)
-
-## Bedrock Mode (Legacy) — Install
-
-```bash
-# Workshop mode — empty rubrics, create your own
-bash prism-cli bootstrapper install-eval-harness
-
-# Production mode — includes all 5 rubrics
-bash prism-cli bootstrapper install-eval-harness --with-rubrics
-
-# Non-interactive
-bash prism-cli bootstrapper install-eval-harness --model us.anthropic.claude-haiku-4-5-20251001-v1:0 --threshold 0.82 --with-rubrics
-```
-
-This installs into your repo:
-- `.prism/.prism/eval-harness/run-eval.sh` — evaluation script
-- `.prism/.prism/eval-harness/eval-config.json` — model, threshold, region
-- `.prism/.prism/eval-harness/rubrics/` — rubric JSON files
-- `.github/workflows/prism-eval-gate.yml` — CI workflow
-
-## Usage
-
-```bash
-# Evaluate a single file
-./.prism/.prism/eval-harness/run-eval.sh .prism/.prism/eval-harness/rubrics/code-quality.json src/handler.ts
-
-# With a spec file (for spec-compliance rubric)
-./.prism/.prism/eval-harness/run-eval.sh .prism/.prism/eval-harness/rubrics/spec-compliance.json src/api.ts --spec specs/api.md
-```
-
-### Output
-
-```
-correctness: 0.9 — Handles all inputs correctly including edge cases
-readability: 0.85 — Clear naming, minor style inconsistency in helper
-...
-
-Score: 0.8720
-Result: PASS
-Hallucinations: 0
-```
-
-Exit codes: `0` = pass, `1` = fail, `2` = error.
-
-## Configuration
-
-`eval-config.json`:
-
-| Field | Description | Default |
-|---|---|---|
-| `pass_threshold` | Minimum score to pass (0-1) | `0.82` |
-| `eval_model_id` | Bedrock model for evaluation | `us.anthropic.claude-haiku-4-5-20251001-v1:0` |
-| `aws_region` | AWS region | `us-west-2` |
-| `event_bus` | EventBridge bus name | `prism-d1-metrics` |
-| `emit_to_eventbridge` | Emit events (workflow handles this) | `true` |
-
-## Rubrics
-
-Five production rubrics are available:
-
-| Rubric | Auto-selected when file path matches |
-|---|---|
-| `code-quality.json` | Default fallback |
-| `api-response-quality.json` | `api`, `handler`, `route`, `controller` |
-| `agent-quality.json` | `agent`, `assistant`, `orchestrat`, `workflow`, `chain` |
-| `security-compliance.json` | `auth`, `security`, `guard`, `policy`, `iam`, `crypto` |
-| `spec-compliance.json` | Used when commit has `Spec-Ref:` trailer |
-
-### Creating a Custom Rubric
-
-```json
-{
-  "rubric_name": "my-rubric",
-  "criteria": [
-    {
-      "name": "criterion_name",
-      "weight": 0.30,
-      "description": "What this measures",
-      "scoring": "How to score 0.0-1.0"
-    }
-  ]
-}
-```
-
-Weights must sum to 1.0. The script calculates the weighted average client-side (does not trust the LLM to do math).
-
-## CI Workflow
-
-The `prism-eval-gate.yml` workflow:
-
-1. Detects commits with `AI-Origin:` trailers
-2. Identifies changed source files from those commits
-3. Auto-selects a rubric per file based on path
-4. Runs `run-eval.sh` per file
-5. Posts a PR comment with per-file scores
-6. Waits for AWS Security Agent review (if installed)
-7. Emits `prism.d1.eval` event to EventBridge
-8. Fails the check if any file scores below threshold or Security Agent finds issues
-
-### Requirements
-
-- OIDC provider configured for GitHub Actions
-- IAM role with `bedrock:InvokeModel` + `events:PutEvents`
-- Repository secret `PRISM_METRICS_ROLE_ARN`
-- `.prism/config.json` with `team_id`
-
-## Uninstall
-
-```bash
-bash prism-cli bootstrapper install-eval-harness --uninstall
-```

package/dist/assets/github-workflows/README.md

@@ -1,110 +0,0 @@
-# GitHub Actions Workflows
-
-Reusable GitHub Actions workflows for PRISM D1 Velocity metric collection.
-
-## Workflows
-
-| Workflow | Trigger | Purpose |
-|---|---|---|
-| `prism-ai-metrics.yml` | PR merge to main | Calculates AI-to-merge ratio, token usage, lead time. Emits `prism.d1.pr` + `prism.d1.deploy` events |
-| `prism-eval-gate.yml` | PR open/update | Evaluates AI-generated code per-file with auto-selected rubrics, waits for Security Agent, blocks merge on failure |
-| `prism-agent-eval.yml` | PR modifying agent code | Runs agent in mock mode, evaluates output with agent-quality rubric |
-| `prism-dora-weekly.yml` | Weekly (Monday 09:00 UTC) | Calculates DORA + AI-DORA metrics, emits to EventBridge + CloudWatch |
-
-## Setup
-
-### 1. Configure AWS OIDC
-
-```bash
-bash prism-cli bootstrapper setup-github-oidc
-```
-
-This interactively creates:
-- OIDC identity provider for `token.actions.githubusercontent.com`
-- IAM role `GitHubActions-<repo>` with trust policy scoped to your repo
-- Inline policy with `events:PutEvents` and `bedrock:InvokeModel`
-
-For the weekly workflow, manually add `cloudwatch:PutMetricData` to the role policy.
-
-### 2. Set Repository Secret
-
-In GitHub: Settings → Secrets and variables → Actions → New repository secret:
-
-| Secret | Value |
-|---|---|
-| `PRISM_METRICS_ROLE_ARN` | ARN printed by `setup-github-oidc` |
-
-### 3. Install Git Hooks + Config
-
-```bash
-bash prism-cli bootstrapper install-git-hooks
-```
-
-Creates `.prism/config.json` with your team ID (read by all workflows).
-
-### 4. Install Eval Harness
-
-```bash
-# Workshop mode — bring your own rubric
-bash prism-cli bootstrapper install-eval-harness
-
-# Production mode — includes all 5 rubrics
-bash prism-cli bootstrapper install-eval-harness --with-rubrics
-```
-
-This copies `.prism/eval-harness/`, `eval-config.json`, rubrics, and the `prism-eval-gate.yml` workflow.
-
-### 5. Copy Remaining Workflows
-
-```bash
-mkdir -p .github/workflows
-cp bootstrapper/github-workflows/prism-ai-metrics.yml .github/workflows/
-cp bootstrapper/github-workflows/prism-dora-weekly.yml .github/workflows/
-# Optional — only if you have agents with --mock support:
-cp bootstrapper/github-workflows/prism-agent-eval.yml .github/workflows/
-```
-
-## IAM Permissions
-
-The OIDC role needs:
-
-| Permission | Used by |
-|---|---|
-| `events:PutEvents` | All workflows |
-| `bedrock:InvokeModel` | eval-gate, agent-eval |
-| `cloudwatch:PutMetricData` | dora-weekly |
-
-## Customization
-
-| Setting | How |
-|---|---|
-| Branch | Edit `branches` in each workflow |
-| AWS region | Edit `aws-region` field + EventBridge commands |
-| Eval threshold | Edit `.prism/.prism/eval-harness/eval-config.json` → `pass_threshold` |
-| Eval model | Edit `.prism/.prism/eval-harness/eval-config.json` → `eval_model_id` |
-| Weekly schedule | Edit cron in `prism-dora-weekly.yml` (default: `0 9 * * 1`) |
-
-## Events Emitted
-
-| Detail Type | Source Workflow | Destination |
-|---|---|---|
-| `prism.d1.pr` | ai-metrics | EventBridge |
-| `prism.d1.deploy` | ai-metrics | EventBridge |
-| `prism.d1.eval` | eval-gate | EventBridge |
-| `prism.d1.agent.eval` | agent-eval | EventBridge |
-| `prism.d1.assessment` | dora-weekly | EventBridge |
-| `prism.d1.security.code_review` | eval-gate (Security Agent) | EventBridge |
-| `AIAdoptionRate`, `SpecCoverage`, tool counts | dora-weekly | CloudWatch |
-
-All EventBridge events use source `prism.d1.velocity` and bus `prism-d1-metrics`.
-
-## Troubleshooting
-
-| Issue | Solution |
-|---|---|
-| OIDC auth fails | Verify trust policy `sub` matches `repo:org/repo:*` |
-| EventBridge put fails | Check `events:PutEvents` on bus ARN |
-| Eval gate always skips | Ensure commits have `AI-Origin:` trailers (install git hooks) |
-| Weekly not running | Workflow must exist on default branch; test with `workflow_dispatch` |
-| Agent eval skips | No `agent/main.py` found — add `--mock` support to your agent |
-| Security Agent timeout | Agent takes 2+ min to start; workflow waits up to 12 min total |