feat(telemetry): e2e test suite + create-blocks-app worker parity + cross-platform console

.changeset/telemetry-e2e-isolated-tests.md

@@ -0,0 +1,18 @@
+---
+"@aws-blocks/core": patch
+"@aws-blocks/create-blocks-app": patch
+---
+
+fix(telemetry): inherit worker stderr in debug mode; enable telemetry in CI for create-blocks-app
+
+- When `NODE_DEBUG=blocks-telemetry` is set, the telemetry worker subprocess
+  inherits the parent's stderr so delivery confirmation is observable. Silent
+  by default.
+- Remove CI telemetry suppression from create-blocks-app to match core behavior.
+  Telemetry is now enabled in CI (same as all other CLI commands).
+- Make `console` cross-platform and headless-safe: pick the OS browser opener
+  (`open`/`xdg-open`/`start`), resolve the region from the environment, and treat
+  a missing opener (CI / remote shells) as best-effort success instead of failing.
+- Add an isolated E2E telemetry test suite (`test-apps/telemetry`) that verifies
+  payload structure, delivery to the real endpoint, disable mechanisms, and
+  per-command success/failure events.

.github/workflows/pr-checks.yml

@@ -474,13 +474,62 @@ jobs:
           cd ${{ matrix.app-dir }}
           npx tsx test/sandbox-destroy.ts aws-blocks/index.cdk.ts || true
 
+  e2e-telemetry:
+    name: Telemetry E2E
+    needs: [build-and-test-local, detect-changes]
+    if: needs.detect-changes.outputs.source-changed == 'true' && github.event.pull_request.head.repo.full_name == github.repository
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    environment: publish
+    permissions:
+      contents: read
+      id-token: write
+    env:
+      BLOCKS_STACK_SUFFIX: telemetry-${{ github.event.pull_request.number || github.run_id }}-${{ github.run_attempt }}
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+          persist-credentials: false
+
+      - uses: actions/setup-node@v5
+        with:
+          node-version-file: '.nvmrc'
+          cache: npm
+
+      - run: npm ci
+
+      - run: npm run build
+
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v6
+        with:
+          role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
+          aws-region: us-east-1
+
+      - name: Seed fixed e2e telemetry installation ID
+        shell: bash
+        run: |
+          mkdir -p "$HOME/.blocks/telemetry"
+          printf '%s' '00000000-0000-0000-0000-000000000e2e' > "$HOME/.blocks/telemetry/installation-id"
+
+      - name: Telemetry E2E Tests
+        run: npm run test:telemetry
+
+      - name: Cleanup stacks
+        if: always()
+        run: |
+          cd test-apps/telemetry
+          npx tsx aws-blocks/scripts/sandbox-destroy.ts || true
+          npx tsx aws-blocks/scripts/destroy.ts || true
+
   # Gate job — matches the branch protection required check name.
   # Skipped E2E jobs (no source changes) are treated as passing.
   # Note: Amplify interop tests live in a separate workflow
   # (e2e-amplify-interop.yml) so their failures don't show red here.
   build-and-test:
     name: Build and Test
-    needs: [blocks-integrity, build-and-test-local, e2e-templates, e2e-sandbox, e2e-sandbox-vpc, e2e-production, e2e-supabase, e2e-hosting]
+    needs: [blocks-integrity, build-and-test-local, e2e-templates, e2e-sandbox, e2e-sandbox-vpc, e2e-production, e2e-supabase, e2e-hosting, e2e-telemetry]
     runs-on: ubuntu-latest
     if: always()
     steps:
@@ -502,7 +551,8 @@ jobs:
              [[ "${{ needs.e2e-sandbox-vpc.result }}" != "success" && "${{ needs.e2e-sandbox-vpc.result }}" != "skipped" ]] ||
              [[ "${{ needs.e2e-production.result }}" != "success" && "${{ needs.e2e-production.result }}" != "skipped" ]] ||
              [[ "${{ needs.e2e-supabase.result }}" != "success" && "${{ needs.e2e-supabase.result }}" != "skipped" ]] ||
-             [[ "${{ needs.e2e-hosting.result }}" != "success" && "${{ needs.e2e-hosting.result }}" != "skipped" ]]; then
+             [[ "${{ needs.e2e-hosting.result }}" != "success" && "${{ needs.e2e-hosting.result }}" != "skipped" ]] ||
+             [[ "${{ needs.e2e-telemetry.result }}" != "success" && "${{ needs.e2e-telemetry.result }}" != "skipped" ]]; then
             echo "One or more E2E jobs failed"
             exit 1
           fi