anton-bakker-deploy-engine 0.7.13 → 0.9.0

package/dist/ingest-verify.js

@@ -0,0 +1,261 @@
+/**
+ * ingest-verify.ts
+ * Location: anton-bakker-deploy-engine/src/ingest-verify.ts
+ *
+ * Verification gate for the CENTRAL INGEST storage principle (ralph central-ingest-service).
+ *
+ * The central store is reached ONLY through an authenticated API: a consuming application mints a
+ * short-lived JWT from the issuer (OAuth2 client-credentials, M2M) and writes records to the generic
+ * `/records/{collection}` ingest API using that token. The application holds no AWS principal; the
+ * server attributes every write to the verified token identity (the `client_id` claim) and enforces
+ * "own data only" — a token for app A cannot touch app B's records.
+ *
+ * This module is deploy-engine's FUNCTIONAL verification of that principle for a given app: it proves,
+ * end-to-end against the live deployment, that the app can obtain a token, write its own record, and
+ * is correctly BLOCKED from another app's partition and from writing without the right scope. It is
+ * the gate the central-ingest design calls for ("deploy-engine can provision a new app's credential
+ * and verify it end-to-end — mint token → write own record → 403 on another app's partition").
+ *
+ * Design posture (matches this package):
+ *   - Zero new runtime deps: token mint + API calls use Node's built-in `fetch` (injectable for tests).
+ *   - The AWS SDK is used ONLY for the optional SSM client-id discovery helper, and is lazy-imported
+ *     (dynamic import) so it stays an optional dependency.
+ *   - Every check returns the shared `CheckResult`, so these compose into the normal gate pipeline.
+ *   - Nothing is hardcoded: endpoints, token URL, client ids and scopes are all parameters/SSM.
+ *
+ * @module ingest-verify
+ */
+/** OAuth2 scope that authorises an ingest WRITE (namespaced under the asset resource server). */
+export const INGEST_WRITE_SCOPE = 'assets/write';
+/** OAuth2 scope that authorises an ingest own-data READ. */
+export const INGEST_READ_SCOPE = 'assets/read';
+function assertHttps(url, label) {
+    let u;
+    try {
+        u = new URL(url);
+    }
+    catch {
+        throw new Error(`ingest-verify: ${label} is not a valid URL: ${url}`);
+    }
+    if (u.protocol !== 'https:') {
+        throw new Error(`ingest-verify: ${label} must be https:// (got ${u.protocol}//) — refusing plaintext`);
+    }
+}
+/**
+ * Mint a short-lived JWT via the OAuth2 client-credentials grant. Pure HTTP (no AWS SDK). Throws on a
+ * transport/credential failure so a verification check can surface it as a failed CheckResult.
+ *
+ * @param cfg endpoint config (tokenUrl)
+ * @param cred the app's client id + secret
+ * @param scope space-delimited scopes to request (default: write + read)
+ * @param deps.fetchImpl injectable fetch (tests)
+ */
+export async function mintClientCredentialsToken(cfg, cred, scope = `${INGEST_WRITE_SCOPE} ${INGEST_READ_SCOPE}`, deps = {}) {
+    assertHttps(cfg.tokenUrl, 'tokenUrl');
+    const doFetch = deps.fetchImpl ?? globalThis.fetch;
+    if (typeof doFetch !== 'function')
+        throw new Error('ingest-verify: no fetch implementation available');
+    const basic = Buffer.from(`${cred.clientId}:${cred.clientSecret}`).toString('base64');
+    const res = await doFetch(cfg.tokenUrl, {
+        method: 'POST',
+        headers: {
+            'content-type': 'application/x-www-form-urlencoded',
+            authorization: `Basic ${basic}`,
+        },
+        body: `grant_type=client_credentials&scope=${encodeURIComponent(scope)}`,
+    });
+    const data = (await res.json());
+    if (!res.ok || !data.access_token) {
+        throw new Error(`ingest-verify: token mint failed (${res.status}): ${data.error || ''} ${data.error_description || ''}`.trim());
+    }
+    return { accessToken: data.access_token, tokenType: data.token_type ?? 'Bearer', expiresIn: data.expires_in ?? 0 };
+}
+/** Internal: make an authenticated ingest API call, returning the raw status + parsed body. */
+async function ingestCall(cfg, token, method, path, body, doFetch) {
+    const base = cfg.apiUrl.replace(/\/$/, '');
+    const res = await doFetch(`${base}${path}`, {
+        method,
+        headers: {
+            authorization: `Bearer ${token}`,
+            ...(body !== undefined ? { 'content-type': 'application/json' } : {}),
+            accept: 'application/json',
+        },
+        ...(body !== undefined ? { body: JSON.stringify(body) } : {}),
+    });
+    let parsed = {};
+    try {
+        parsed = (await res.json());
+    }
+    catch { /* non-JSON */ }
+    return { status: res.status, body: parsed };
+}
+/**
+ * Verify an app can WRITE its own record through the ingest API (functional check).
+ * Mints a write-scoped token, POSTs a record to `/records/{collection}`, and asserts 200 + success.
+ *
+ * @returns CheckResult — passed when the write returns 200 and `{ success: true }`.
+ */
+export async function verifyIngestWrite(opts) {
+    const name = `ingest write (${opts.collection})`;
+    const doFetch = opts.fetchImpl ?? globalThis.fetch;
+    const started = Date.now();
+    try {
+        assertHttps(opts.endpoint.apiUrl, 'apiUrl');
+        const token = await mintClientCredentialsToken(opts.endpoint, opts.credential, INGEST_WRITE_SCOPE, { fetchImpl: doFetch });
+        const { status, body } = await ingestCall(opts.endpoint, token.accessToken, 'POST', `/records/${encodeURIComponent(opts.collection)}`, { item: opts.item }, doFetch);
+        const passed = status === 200 && body.success === true;
+        return {
+            name,
+            passed,
+            expected: '200 { success: true }',
+            actual: `${status} ${JSON.stringify(body).slice(0, 120)}`,
+            duration: Date.now() - started,
+            error: passed ? undefined : `write did not succeed (status ${status})`,
+        };
+    }
+    catch (err) {
+        return { name, passed: false, expected: '200 { success: true }', actual: 'exception', error: err.message, duration: Date.now() - started };
+    }
+}
+/**
+ * Verify OWN-DATA isolation: a token for `attacker` must NOT be able to mutate a record owned by
+ * `victimApp`. Attempts a PATCH on `/records/{collection}/{victimRecordId}` with the attacker token
+ * and asserts the server REJECTS it (403 forbidden-cross-app, or 404 because the record is invisible
+ * across the partition wall). A 200 here is a critical isolation failure.
+ *
+ * @returns CheckResult — passed when the cross-app mutation is rejected (403 or 404).
+ */
+export async function verifyOwnDataIsolation(opts) {
+    const name = `ingest own-data isolation (${opts.collection})`;
+    const doFetch = opts.fetchImpl ?? globalThis.fetch;
+    const started = Date.now();
+    try {
+        assertHttps(opts.endpoint.apiUrl, 'apiUrl');
+        const token = await mintClientCredentialsToken(opts.endpoint, opts.attackerCredential, `${INGEST_WRITE_SCOPE} ${INGEST_READ_SCOPE}`, { fetchImpl: doFetch });
+        const { status, body } = await ingestCall(opts.endpoint, token.accessToken, 'PATCH', `/records/${encodeURIComponent(opts.collection)}/${encodeURIComponent(opts.victimRecordId)}`, { patch: { status: 'tampered' } }, doFetch);
+        // Rejection = isolation holds. 403 (forbidden cross-app) or 404 (invisible across partition).
+        const passed = status === 403 || status === 404;
+        return {
+            name,
+            passed,
+            expected: '403 or 404 (cross-app rejected)',
+            actual: `${status} ${JSON.stringify(body).slice(0, 120)}`,
+            duration: Date.now() - started,
+            error: passed ? undefined : `CRITICAL: cross-app mutation was NOT rejected (status ${status}) — own-data isolation is broken`,
+        };
+    }
+    catch (err) {
+        return { name, passed: false, expected: '403 or 404 (cross-app rejected)', actual: 'exception', error: err.message, duration: Date.now() - started };
+    }
+}
+/**
+ * Verify a token WITHOUT the write scope is rejected when it attempts a write (gateway scope
+ * enforcement). Mints a read-only token and POSTs; asserts 403.
+ *
+ * @returns CheckResult — passed when the scopeless write is rejected (403).
+ */
+export async function verifyWriteScopeEnforced(opts) {
+    const name = `ingest write-scope enforced (${opts.collection})`;
+    const doFetch = opts.fetchImpl ?? globalThis.fetch;
+    const started = Date.now();
+    try {
+        assertHttps(opts.endpoint.apiUrl, 'apiUrl');
+        const token = await mintClientCredentialsToken(opts.endpoint, opts.credential, INGEST_READ_SCOPE, { fetchImpl: doFetch });
+        const { status } = await ingestCall(opts.endpoint, token.accessToken, 'POST', `/records/${encodeURIComponent(opts.collection)}`, { item: { description: 'scope-check — must be rejected' } }, doFetch);
+        const passed = status === 403;
+        return {
+            name,
+            passed,
+            expected: '403 (missing assets/write)',
+            actual: String(status),
+            duration: Date.now() - started,
+            error: passed ? undefined : `CRITICAL: a read-only token was allowed to write (status ${status})`,
+        };
+    }
+    catch (err) {
+        return { name, passed: false, expected: '403 (missing assets/write)', actual: 'exception', error: err.message, duration: Date.now() - started };
+    }
+}
+/**
+ * End-to-end ingest access verification for a newly-provisioned app (the central-ingest AC-5 gate).
+ *
+ * Runs, in order:
+ *   1. the app writes its OWN record (expect 200);
+ *   2. the app's token is BLOCKED from a victim app's record (expect 403/404);  [if a victim is given]
+ *   3. a read-only token is BLOCKED from writing (expect 403).                  [optional]
+ *
+ * Returns the individual CheckResults — compose them into a gate with `summarize` (from verify.ts).
+ *
+ * @param opts.verifyItem the record the app writes in step 1 (content only). A unique id is
+ *                        recommended so the written record can be cleaned up by the caller.
+ */
+export async function verifyIngestAccess(opts) {
+    const results = [];
+    results.push(await verifyIngestWrite({
+        endpoint: opts.endpoint, credential: opts.credential, collection: opts.collection, item: opts.verifyItem, fetchImpl: opts.fetchImpl,
+    }));
+    if (opts.isolation) {
+        results.push(await verifyOwnDataIsolation({
+            endpoint: opts.endpoint, attackerCredential: opts.credential, collection: opts.collection,
+            victimRecordId: opts.isolation.victimRecordId, fetchImpl: opts.fetchImpl,
+        }));
+    }
+    if (opts.checkScopeEnforcement !== false) {
+        results.push(await verifyWriteScopeEnforced({
+            endpoint: opts.endpoint, credential: opts.credential, collection: opts.collection, fetchImpl: opts.fetchImpl,
+        }));
+    }
+    return results;
+}
+/**
+ * Discover a provisioned app's ingest client id from SSM (published by the ingest CDK stack at
+ * `/ralph/ingest-service/apps/<app>/client-id`). The AWS SDK is lazy-imported so it stays optional —
+ * callers that already know the client id (e.g. from stack outputs) need not use this.
+ *
+ * Note: this returns only the NON-SECRET client id. The client SECRET must be resolved out-of-band
+ * (SSM SecureString / password manager) and never logged or committed.
+ *
+ * @param appName the application name
+ * @param opts.region AWS region (default from AWS_REGION)
+ * @param opts.ssmPrefix SSM path prefix (default /ralph/ingest-service/apps)
+ * @param opts.ssmClient injectable SSM client (tests)
+ * @returns the client id, or null if the parameter is absent
+ */
+export async function resolveIngestClientId(appName, opts = {}) {
+    const prefix = opts.ssmPrefix ?? '/ralph/ingest-service/apps';
+    const paramName = `${prefix}/${appName}/client-id`;
+    let client = opts.ssmClient;
+    let GetParameterCommand;
+    if (!client) {
+        // `@aws-sdk/client-ssm` is an OPTIONAL dependency, so there are no compile-time types for it here;
+        // the dynamic import is typed as unknown and narrowed at runtime. This is the standard pattern for
+        // an optional peer the package does not force on every consumer.
+        let sdk;
+        try {
+            sdk = (await import(/* @vite-ignore */ '@aws-sdk/client-ssm'));
+        }
+        catch {
+            // Fail LOUD and actionable — never silent. Consumers without the optional dep can pass the
+            // client id directly (it is available from the ingest CDK stack outputs).
+            throw new Error('ingest-verify: resolveIngestClientId needs "@aws-sdk/client-ssm" (optional dependency). '
+                + 'Install it, or pass the client id directly (e.g. from the ingest stack output / known value).');
+        }
+        GetParameterCommand = sdk.GetParameterCommand;
+        client = new sdk.SSMClient(opts.region ? { region: opts.region } : {});
+    }
+    else {
+        // Injected client: provide a minimal command shape it will recognise in tests.
+        GetParameterCommand = class {
+            input;
+            constructor(input) { this.input = input; }
+        };
+    }
+    try {
+        const out = await client.send(new GetParameterCommand({ Name: paramName }));
+        return out.Parameter?.Value ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=ingest-verify.js.map

package/dist/ingest-verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest-verify.js","sourceRoot":"","sources":["../src/ingest-verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAIH,iGAAiG;AACjG,MAAM,CAAC,MAAM,kBAAkB,GAAG,cAAc,CAAC;AACjD,4DAA4D;AAC5D,MAAM,CAAC,MAAM,iBAAiB,GAAG,aAAa,CAAC;AAgC/C,SAAS,WAAW,CAAC,GAAW,EAAE,KAAa;IAC7C,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,wBAAwB,GAAG,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,0BAA0B,CAAC,CAAC,QAAQ,0BAA0B,CAAC,CAAC;IACzG,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,GAA2C,EAC3C,IAAsB,EACtB,QAAgB,GAAG,kBAAkB,IAAI,iBAAiB,EAAE,EAC5D,OAAkC,EAAE;IAEpC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAK,UAAU,CAAC,KAA8B,CAAC;IAC7E,IAAI,OAAO,OAAO,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAEvG,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE;QACtC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;YACnD,aAAa,EAAE,SAAS,KAAK,EAAE;SAChC;QACD,IAAI,EAAE,uCAAuC,kBAAkB,CAAC,KAAK,CAAC,EAAE;KACzE,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAoH,CAAC;IACnJ,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,qCAAqC,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,KAAK,IAAI,EAAE,IAAI,IAAI,CAAC,iBAAiB,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAClI,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,CAAC,EAAE,CAAC;AACrH,CAAC;AAED,+FAA+F;AAC/F,KAAK,UAAU,UAAU,CACvB,GAAyC,EACzC,KAAa,EACb,MAAc,EACd,IAAY,EACZ,IAAyB,EACzB,OAAkB;IAElB,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE;QAC1C,MAAM;QACN,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,EAAE,kBAAkB;SAC3B;QACD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC,CAAC;IACH,IAAI,MAAM,GAA4B,EAAE,CAAC;IACzC,IAAI,CAAC;QAAC,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;IACxF,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAOvC;IACC,MAAM,IAAI,GAAG,iBAAiB,IAAI,CAAC,UAAU,GAAG,CAAC;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAK,UAAU,CAAC,KAA8B,CAAC;IAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,0BAA0B,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,kBAAkB,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3H,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;QACrK,MAAM,MAAM,GAAG,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC;QACvD,OAAO;YACL,IAAI;YACJ,MAAM;YACN,QAAQ,EAAE,uBAAuB;YACjC,MAAM,EAAE,GAAG,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;YACzD,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAC9B,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iCAAiC,MAAM,GAAG;SACvE,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IACxJ,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAQ5C;IACC,MAAM,IAAI,GAAG,8BAA8B,IAAI,CAAC,UAAU,GAAG,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAK,UAAU,CAAC,KAA8B,CAAC;IAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,0BAA0B,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,kBAAkB,EAAE,GAAG,kBAAkB,IAAI,iBAAiB,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7J,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CACvC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,EACzC,YAAY,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,EAC5F,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,CAC3C,CAAC;QACF,8FAA8F;QAC9F,MAAM,MAAM,GAAG,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;QAChD,OAAO;YACL,IAAI;YACJ,MAAM;YACN,QAAQ,EAAE,iCAAiC;YAC3C,MAAM,EAAE,GAAG,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;YACzD,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAC9B,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,yDAAyD,MAAM,kCAAkC;SAC9H,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,iCAAiC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IAClK,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAK9C;IACC,MAAM,IAAI,GAAG,gCAAgC,IAAI,CAAC,UAAU,GAAG,CAAC;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAK,UAAU,CAAC,KAA8B,CAAC;IAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,0BAA0B,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,iBAAiB,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1H,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,gCAAgC,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QACvM,MAAM,MAAM,GAAG,MAAM,KAAK,GAAG,CAAC;QAC9B,OAAO;YACL,IAAI;YACJ,MAAM;YACN,QAAQ,EAAE,4BAA4B;YACtC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;YACtB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAC9B,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,4DAA4D,MAAM,GAAG;SAClG,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,4BAA4B,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IAC7J,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAWxC;IACC,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,OAAO,CAAC,IAAI,CAAC,MAAM,iBAAiB,CAAC;QACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS;KACpI,CAAC,CAAC,CAAC;IACJ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,MAAM,sBAAsB,CAAC;YACxC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,kBAAkB,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU;YACzF,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS;SACzE,CAAC,CAAC,CAAC;IACN,CAAC;IACD,IAAI,IAAI,CAAC,qBAAqB,KAAK,KAAK,EAAE,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,MAAM,wBAAwB,CAAC;YAC1C,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS;SAC7G,CAAC,CAAC,CAAC;IACN,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAe,EACf,OAAqI,EAAE;IAEvI,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,IAAI,4BAA4B,CAAC;IAC9D,MAAM,SAAS,GAAG,GAAG,MAAM,IAAI,OAAO,YAAY,CAAC;IACnD,IAAI,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC;IAC5B,IAAI,mBAA6D,CAAC;IAClE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,mGAAmG;QACnG,mGAAmG;QACnG,iEAAiE;QACjE,IAAI,GAAuH,CAAC;QAC5H,IAAI,CAAC;YACH,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,qBAA+B,CAAC,CAA0B,CAAC;QACpG,CAAC;QAAC,MAAM,CAAC;YACP,2FAA2F;YAC3F,0EAA0E;YAC1E,MAAM,IAAI,KAAK,CACb,0FAA0F;kBACxF,+FAA+F,CAClG,CAAC;QACJ,CAAC;QACD,mBAAmB,GAAG,GAAG,CAAC,mBAAmB,CAAC;QAC9C,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;SAAM,CAAC;QACN,+EAA+E;QAC/E,mBAAmB,GAAG;YAAQ,KAAK,CAAmB;YAAC,YAAY,KAAuB,IAAI,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC;SAAyD,CAAC;IAC/K,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAO,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAC7E,OAAO,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,IAAI,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/telemetry.d.ts

@@ -6,7 +6,7 @@
  * Uses dynamic import for @aws-sdk/client-dynamodb to preserve the
  * zero-hard-dependency contract (consumer must install the SDK).
  */
-import type { DeployEvent, TelemetryConfig, PipelineState, ExecutionContext, GateSummaryEntry } from './types.js';
+import type { DeployEvent, TelemetryConfig, PipelineState, ExecutionContext, GateSummaryEntry, GroupSummaryEntry } from './types.js';
 /**
  * Build a DeployEvent from a finalised PipelineState and TelemetryConfig.
  * Pure function — no side effects, no I/O.
@@ -40,4 +40,73 @@ export declare function recordTelemetry(ctx: ExecutionContext, state: PipelineSt
  * - Never throws — all errors swallowed
  */
 export declare function emitGateEvent(ctx: ExecutionContext, state: PipelineState, gate: GateSummaryEntry): void;
+/**
+ * Context for a group event — shared fields needed by emitGroupEvent.
+ */
+export interface GroupEventContext {
+    /** ISO 8601 start timestamp of the overall deploy run */
+    startedAt: string;
+    /** Environment name (e.g. 'staging') */
+    environment: string;
+    /** Full git commit SHA */
+    commit: string;
+    /** 7-character short commit SHA */
+    commitShort: string;
+}
+/**
+ * Payload for a single group telemetry event.
+ */
+export interface GroupEventPayload {
+    /** Parent gate ID */
+    gateId: string;
+    /** Group ID */
+    groupId: string;
+    /** Human-readable group name */
+    name: string;
+    /** Failure mode for this group */
+    failureMode: 'fail-fast' | 'accumulate';
+    /** Group outcome */
+    status: 'passed' | 'failed' | 'skipped';
+    /** Duration in milliseconds */
+    duration: number;
+    /** Total number of checks in the group */
+    checksCount: number;
+    /** Optional group summary for gate event */
+    groupSummary?: GroupSummaryEntry[];
+}
+/**
+ * Payload for a single check telemetry event.
+ */
+export interface CheckEventPayload {
+    /** Parent gate ID */
+    gateId: string;
+    /** Check name */
+    checkName: string;
+    /** Check outcome */
+    status: 'passed' | 'failed';
+    /** Duration in milliseconds */
+    duration: number;
+    /** Error message if status is 'failed' */
+    error?: string;
+}
+/**
+ * Fire-and-forget: emit a single group completion event to DynamoDB.
+ *
+ * SK pattern: `group#{startedAt}#{gateId}#{groupId}`
+ *
+ * Guards:
+ * - Returns immediately if ctx.telemetry is absent or ctx.dryRun is true
+ * - Never throws — all errors swallowed
+ */
+export declare function emitGroupEvent(ctx: ExecutionContext, deployCtx: GroupEventContext, payload: GroupEventPayload): void;
+/**
+ * Fire-and-forget: emit a single check completion event to DynamoDB.
+ *
+ * SK pattern: `check#{startedAt}#{gateId}#{checkName}`
+ *
+ * Guards:
+ * - Returns immediately if ctx.telemetry is absent or ctx.dryRun is true
+ * - Never throws — all errors swallowed
+ */
+export declare function emitCheckEvent(ctx: ExecutionContext, deployCtx: GroupEventContext, payload: CheckEventPayload): void;
 //# sourceMappingURL=telemetry.d.ts.map

package/dist/telemetry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,aAAa,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAElH;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,GAAG,WAAW,CAmC3F;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CA6BpG;AAED;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBhG;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAkCvG"}
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,aAAa,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAErI;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,GAAG,WAAW,CAmC3F;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CA6BpG;AAED;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBhG;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAkCvG;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,0BAA0B;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,mCAAmC;IACnC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,qBAAqB;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,WAAW,EAAE,WAAW,GAAG,YAAY,CAAC;IACxC,oBAAoB;IACpB,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IACxC,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,4CAA4C;IAC5C,YAAY,CAAC,EAAE,iBAAiB,EAAE,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,qBAAqB;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB;IACpB,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,gBAAgB,EACrB,SAAS,EAAE,iBAAiB,EAC5B,OAAO,EAAE,iBAAiB,GACzB,IAAI,CAsCN;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,gBAAgB,EACrB,SAAS,EAAE,iBAAiB,EAC5B,OAAO,EAAE,iBAAiB,GACzB,IAAI,CAuCN"}

package/dist/telemetry.js

@@ -140,4 +140,94 @@ export function emitGateEvent(ctx, state, gate) {
         }
     })();
 }
+/**
+ * Fire-and-forget: emit a single group completion event to DynamoDB.
+ *
+ * SK pattern: `group#{startedAt}#{gateId}#{groupId}`
+ *
+ * Guards:
+ * - Returns immediately if ctx.telemetry is absent or ctx.dryRun is true
+ * - Never throws — all errors swallowed
+ */
+export function emitGroupEvent(ctx, deployCtx, payload) {
+    if (!ctx.telemetry || ctx.dryRun)
+        return;
+    const config = ctx.telemetry;
+    void (async () => {
+        try {
+            const { DynamoDBClient } = await import('@aws-sdk/client-dynamodb');
+            const { DynamoDBDocumentClient, PutCommand } = await import('@aws-sdk/lib-dynamodb');
+            const client = DynamoDBDocumentClient.from(new DynamoDBClient({ region: config.region }));
+            const item = {
+                pk: `project#${config.projectId}`,
+                sk: `group#${deployCtx.startedAt}#${payload.gateId}#${payload.groupId}`,
+                projectId: config.projectId,
+                environment: deployCtx.environment,
+                commit: deployCtx.commit,
+                commitShort: deployCtx.commitShort,
+                gateId: payload.gateId,
+                id: payload.groupId,
+                name: payload.name,
+                failureMode: payload.failureMode,
+                status: payload.status,
+                duration: payload.duration,
+                checks: payload.checksCount,
+                recordedAt: new Date().toISOString(),
+                ttl: Math.floor(Date.now() / 1000) + 7_776_000, // 90 days
+            };
+            await client.send(new PutCommand({
+                TableName: config.tableName,
+                Item: item,
+            }));
+        }
+        catch {
+            // Fire-and-forget — never block the pipeline
+        }
+    })();
+}
+/**
+ * Fire-and-forget: emit a single check completion event to DynamoDB.
+ *
+ * SK pattern: `check#{startedAt}#{gateId}#{checkName}`
+ *
+ * Guards:
+ * - Returns immediately if ctx.telemetry is absent or ctx.dryRun is true
+ * - Never throws — all errors swallowed
+ */
+export function emitCheckEvent(ctx, deployCtx, payload) {
+    if (!ctx.telemetry || ctx.dryRun)
+        return;
+    const config = ctx.telemetry;
+    void (async () => {
+        try {
+            const { DynamoDBClient } = await import('@aws-sdk/client-dynamodb');
+            const { DynamoDBDocumentClient, PutCommand } = await import('@aws-sdk/lib-dynamodb');
+            const client = DynamoDBDocumentClient.from(new DynamoDBClient({ region: config.region }));
+            const item = {
+                pk: `project#${config.projectId}`,
+                sk: `check#${deployCtx.startedAt}#${payload.gateId}#${payload.checkName}`,
+                projectId: config.projectId,
+                environment: deployCtx.environment,
+                commit: deployCtx.commit,
+                commitShort: deployCtx.commitShort,
+                gateId: payload.gateId,
+                checkName: payload.checkName,
+                status: payload.status,
+                duration: payload.duration,
+                recordedAt: new Date().toISOString(),
+                ttl: Math.floor(Date.now() / 1000) + 7_776_000, // 90 days
+            };
+            if (payload.error !== undefined) {
+                item.error = payload.error;
+            }
+            await client.send(new PutCommand({
+                TableName: config.tableName,
+                Item: item,
+            }));
+        }
+        catch {
+            // Fire-and-forget — never block the pipeline
+        }
+    })();
+}
 //# sourceMappingURL=telemetry.js.map

package/dist/telemetry.js.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAoB,EAAE,MAAuB;IAC5E,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClE,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAClC,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;IAEnF,MAAM,OAAO,GAAG,KAAK,CAAC,MAA6C,CAAC;IAEpE,MAAM,WAAW,GAAuB,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5D,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,UAAU,EAAE,CAAC,CAAC,QAAQ;KACvB,CAAC,CAAC,CAAC;IAEJ,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IAEhE,MAAM,KAAK,GAAgB;QACzB,EAAE,EAAE,WAAW,MAAM,CAAC,SAAS,EAAE;QACjC,EAAE,EAAE,UAAU,SAAS,EAAE;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO;QACP,SAAS;QACT,WAAW;QACX,UAAU;QACV,WAAW;KACZ,CAAC;IAEF,IAAI,OAAO,KAAK,QAAQ,IAAI,UAAU,EAAE,CAAC;QACvC,KAAK,CAAC,YAAY,GAAG,UAAU,CAAC,EAAE,CAAC;IACrC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAkB,EAAE,MAAuB;IACnF,mEAAmE;IACnE,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACpE,MAAM,EAAE,sBAAsB,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAErF,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAE1F,MAAM,IAAI,GAA4B;QACpC,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;IAEF,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACzC,CAAC;IAED,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC;QAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,IAAI,EAAE,IAAI;KACX,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAqB,EAAE,KAAoB;IAC/E,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACnB,OAAO;IACT,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,GAAG,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAErD,IAAI,CAAC;QACH,MAAM,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,GAAG,CAAC,yCAA0C,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,GAAqB,EAAE,KAAoB,EAAE,IAAsB;IAC/F,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM;QAAE,OAAO;IAEzC,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC;IAE7B,0CAA0C;IAC1C,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,IAAI,CAAC;YACH,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;YACpE,MAAM,EAAE,sBAAsB,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAErF,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAE1F,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC;gBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,IAAI,EAAE;oBACJ,EAAE,EAAE,WAAW,MAAM,CAAC,SAAS,EAAE;oBACjC,EAAE,EAAE,QAAQ,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,EAAE,EAAE;oBACxC,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACpC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,EAAE,UAAU;iBAC3D;aACF,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;QAC/C,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;AACP,CAAC"}
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAoB,EAAE,MAAuB;IAC5E,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClE,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAClC,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;IAEnF,MAAM,OAAO,GAAG,KAAK,CAAC,MAA6C,CAAC;IAEpE,MAAM,WAAW,GAAuB,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5D,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,UAAU,EAAE,CAAC,CAAC,QAAQ;KACvB,CAAC,CAAC,CAAC;IAEJ,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IAEhE,MAAM,KAAK,GAAgB;QACzB,EAAE,EAAE,WAAW,MAAM,CAAC,SAAS,EAAE;QACjC,EAAE,EAAE,UAAU,SAAS,EAAE;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO;QACP,SAAS;QACT,WAAW;QACX,UAAU;QACV,WAAW;KACZ,CAAC;IAEF,IAAI,OAAO,KAAK,QAAQ,IAAI,UAAU,EAAE,CAAC;QACvC,KAAK,CAAC,YAAY,GAAG,UAAU,CAAC,EAAE,CAAC;IACrC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAkB,EAAE,MAAuB;IACnF,mEAAmE;IACnE,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACpE,MAAM,EAAE,sBAAsB,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAErF,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAE1F,MAAM,IAAI,GAA4B;QACpC,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;IAEF,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACzC,CAAC;IAED,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC;QAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,IAAI,EAAE,IAAI;KACX,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAqB,EAAE,KAAoB;IAC/E,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACnB,OAAO;IACT,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,GAAG,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAErD,IAAI,CAAC;QACH,MAAM,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,GAAG,CAAC,yCAA0C,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,GAAqB,EAAE,KAAoB,EAAE,IAAsB;IAC/F,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM;QAAE,OAAO;IAEzC,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC;IAE7B,0CAA0C;IAC1C,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,IAAI,CAAC;YACH,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;YACpE,MAAM,EAAE,sBAAsB,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAErF,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAE1F,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC;gBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,IAAI,EAAE;oBACJ,EAAE,EAAE,WAAW,MAAM,CAAC,SAAS,EAAE;oBACjC,EAAE,EAAE,QAAQ,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,EAAE,EAAE;oBACxC,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACpC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,EAAE,UAAU;iBAC3D;aACF,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;QAC/C,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;AACP,CAAC;AAsDD;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAqB,EACrB,SAA4B,EAC5B,OAA0B;IAE1B,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM;QAAE,OAAO;IAEzC,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC;IAE7B,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,IAAI,CAAC;YACH,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;YACpE,MAAM,EAAE,sBAAsB,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAErF,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAE1F,MAAM,IAAI,GAA4B;gBACpC,EAAE,EAAE,WAAW,MAAM,CAAC,SAAS,EAAE;gBACjC,EAAE,EAAE,SAAS,SAAS,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE;gBACvE,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,EAAE,EAAE,OAAO,CAAC,OAAO;gBACnB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,OAAO,CAAC,WAAW;gBAC3B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,EAAE,UAAU;aAC3D,CAAC;YAEF,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC;gBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,IAAI,EAAE,IAAI;aACX,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;QAC/C,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;AACP,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAqB,EACrB,SAA4B,EAC5B,OAA0B;IAE1B,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM;QAAE,OAAO;IAEzC,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC;IAE7B,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,IAAI,CAAC;YACH,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;YACpE,MAAM,EAAE,sBAAsB,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAErF,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAE1F,MAAM,IAAI,GAA4B;gBACpC,EAAE,EAAE,WAAW,MAAM,CAAC,SAAS,EAAE;gBACjC,EAAE,EAAE,SAAS,SAAS,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,EAAE;gBACzE,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,EAAE,UAAU;aAC3D,CAAC;YAEF,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAChC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YAC7B,CAAC;YAED,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC;gBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,IAAI,EAAE,IAAI;aACX,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;QAC/C,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;AACP,CAAC"}

package/dist/tui.d.ts

@@ -10,6 +10,13 @@ export interface Step {
     status: StepStatus;
     durationMs?: number;
     error?: string;
+    /**
+     * Bounded live-progress detail for a long-running step (e.g. GSI convergence,
+     * CDK deploy). Rendered as an indented region beneath the step while it is
+     * `running`, and collapsed (cleared) once the step reaches a terminal status.
+     * Only the most recent {@link MAX_STEP_DETAIL_LINES} lines are retained.
+     */
+    detail?: string[];
 }
 export interface Category {
     name: string;
@@ -25,6 +32,12 @@ export interface TuiState {
     errorOutput?: string;
     startedAt: number;
 }
+/**
+ * Maximum number of live-detail lines retained and rendered for a running step.
+ * The detail region is height-bounded: appending more lines drops the oldest,
+ * so a long-running step never grows the layout or scrolls the panel off-screen.
+ */
+export declare const MAX_STEP_DETAIL_LINES = 8;
 /**
  * Render full-screen frame.
  */
@@ -46,10 +59,31 @@ export declare class DeployTui {
     stop(): void;
     private render;
     private ciLog;
+    /**
+     * Emit live-detail lines to the CI log (no alt-screen). Keeps progress of a
+     * long-running step visible in CI output, where the interactive panel is not
+     * rendered. Each line is prefixed so it is greppable alongside ciLog output.
+     */
+    private ciDetail;
     startCategory(index: number): void;
     passCategory(index: number, durationMs: number): void;
     failCategory(index: number, durationMs: number): void;
     startStep(catIndex: number, stepIndex: number): void;
+    /**
+     * Append bounded live-progress detail to a running step.
+     *
+     * The step's detail region shows the most recent {@link MAX_STEP_DETAIL_LINES}
+     * lines; appending more drops the oldest (no unbounded growth, no layout
+     * break). In TUI mode the lines render indented beneath the running step; in
+     * CI mode they are logged (no alt-screen) so progress stays visible in CI logs.
+     *
+     * This is additive: steps that never call stepDetail render exactly as before.
+     *
+     * @param catIndex   Category index
+     * @param stepIndex  Step index within the category
+     * @param lines      New detail lines to append (already human-readable)
+     */
+    stepDetail(catIndex: number, stepIndex: number, lines: string[]): void;
     passStep(catIndex: number, stepIndex: number, durationMs: number): void;
     failStep(catIndex: number, stepIndex: number, durationMs: number, error: string): void;
     skipStep(catIndex: number, stepIndex: number): void;

package/dist/tui.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tui.d.ts","sourceRoot":"","sources":["../src/tui.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAyBH,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEjF,MAAM,WAAW,IAAI;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,EAAE,QAAQ,EAAE,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAwDD;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CA+FnD;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,KAAK,CAAW;IACxB,OAAO,CAAC,QAAQ,CAA+C;IAC/D,OAAO,CAAC,IAAI,CAAU;IACtB,OAAO,CAAC,aAAa,CAA6B;gBAEtC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE;IAe/F,KAAK,IAAI,IAAI;IAyBb,IAAI,IAAI,IAAI;IAeZ,OAAO,CAAC,MAAM;IAOd,OAAO,CAAC,KAAK;IAOb,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAOlC,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAMrD,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAMrD,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAMpD,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAOvE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAStF,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAKnD,sEAAsE;IACtE,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;CAa3D"}
+{"version":3,"file":"tui.d.ts","sourceRoot":"","sources":["../src/tui.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAwBH,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEjF,MAAM,WAAW,IAAI;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,EAAE,QAAQ,EAAE,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAKD;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,IAAI,CAAC;AA+DvC;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CA4GnD;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,KAAK,CAAW;IACxB,OAAO,CAAC,QAAQ,CAA+C;IAC/D,OAAO,CAAC,IAAI,CAAU;IACtB,OAAO,CAAC,aAAa,CAA6B;gBAEtC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE;IAe/F,KAAK,IAAI,IAAI;IAyBb,IAAI,IAAI,IAAI;IAeZ,OAAO,CAAC,MAAM;IAOd,OAAO,CAAC,KAAK;IAOb;;;;OAIG;IACH,OAAO,CAAC,QAAQ;IAOhB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAOlC,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAMrD,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAMrD,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAMpD;;;;;;;;;;;;;OAaG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI;IAYtE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAUvE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAWtF,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAMnD,sEAAsE;IACtE,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;CAa3D"}