@intelligo-dev/cli 1.0.0-beta.1

package/dist/migrations-dir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations-dir.js","sourceRoot":"","sources":["../src/migrations-dir.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,iCAAiC;IACjC,oDAAoD;CAC5C,CAAC;AAEX,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,KAAK,MAAM,QAAQ,IAAI,mBAAmB,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACtC,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/migrations.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Migration-chain inspection.
+ *
+ * Drizzle keeps two sources of truth: the `.sql` files on disk and
+ * `meta/_journal.json`, which is what `drizzle-kit migrate` actually
+ * reads. Nothing keeps them in step. In this repo the journal stopped
+ * at entry 11 while 39 files accumulated, so `migrate` silently
+ * applied a quarter of the chain and every environment was really
+ * provisioned by `drizzle-kit push` from `schema.ts` instead — which
+ * is how a migration shipped documenting a unique constraint on a
+ * column no migration created.
+ *
+ * The drift is invisible until someone provisions a database from the
+ * migrations, at which point it is a production incident rather than a
+ * CI failure. These helpers make it a check.
+ */
+export type JournalEntry = {
+    idx: number;
+    version: string;
+    when: number;
+    tag: string;
+    breakpoints: boolean;
+};
+export type MigrationChain = {
+    dir: string;
+    /** `.sql` files present on disk, sorted by their numeric prefix. */
+    files: string[];
+    /** Tags drizzle-kit will actually apply, in order. */
+    journalTags: string[];
+    /** On disk but absent from the journal — `migrate` skips these. */
+    unregistered: string[];
+    /** In the journal but missing from disk — `migrate` fails on these. */
+    missing: string[];
+};
+export declare function readMigrationChain(dir: string): MigrationChain;
+export type ChainProblem = {
+    level: "error" | "warn";
+    message: string;
+};
+export declare function inspectMigrationChain(chain: MigrationChain): ChainProblem[];
+//# sourceMappingURL=migrations.d.ts.map

package/dist/migrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../src/migrations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,oEAAoE;IACpE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,sDAAsD;IACtD,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,mEAAmE;IACnE,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,uEAAuE;IACvE,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAMF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CA2B9D;AAED,MAAM,MAAM,YAAY,GAAG;IAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAExE,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,cAAc,GAAG,YAAY,EAAE,CA4D3E"}

package/dist/migrations.js

@@ -0,0 +1,99 @@
+/**
+ * Migration-chain inspection.
+ *
+ * Drizzle keeps two sources of truth: the `.sql` files on disk and
+ * `meta/_journal.json`, which is what `drizzle-kit migrate` actually
+ * reads. Nothing keeps them in step. In this repo the journal stopped
+ * at entry 11 while 39 files accumulated, so `migrate` silently
+ * applied a quarter of the chain and every environment was really
+ * provisioned by `drizzle-kit push` from `schema.ts` instead — which
+ * is how a migration shipped documenting a unique constraint on a
+ * column no migration created.
+ *
+ * The drift is invisible until someone provisions a database from the
+ * migrations, at which point it is a production incident rather than a
+ * CI failure. These helpers make it a check.
+ */
+import { readFileSync, readdirSync } from "node:fs";
+import path from "node:path";
+function tagOf(file) {
+    return file.replace(/\.sql$/, "");
+}
+export function readMigrationChain(dir) {
+    const files = readdirSync(dir)
+        .filter((f) => f.endsWith(".sql"))
+        .sort();
+    let journalTags = [];
+    try {
+        const journal = JSON.parse(readFileSync(path.join(dir, "meta", "_journal.json"), "utf8"));
+        journalTags = (journal.entries ?? []).map((e) => e.tag);
+    }
+    catch {
+        // No journal at all is itself the maximal drift: every file is
+        // unregistered, which the caller reports.
+        journalTags = [];
+    }
+    const registered = new Set(journalTags);
+    const onDisk = new Set(files.map(tagOf));
+    return {
+        dir,
+        files,
+        journalTags,
+        unregistered: files.map(tagOf).filter((t) => !registered.has(t)),
+        missing: journalTags.filter((t) => !onDisk.has(t)),
+    };
+}
+export function inspectMigrationChain(chain) {
+    const problems = [];
+    if (chain.files.length === 0) {
+        problems.push({ level: "error", message: `No .sql files in ${chain.dir}` });
+        return problems;
+    }
+    if (chain.missing.length > 0) {
+        problems.push({
+            level: "error",
+            message: `Journal references ${chain.missing.length} migration(s) that are not on disk ` +
+                `(drizzle-kit migrate will fail): ${chain.missing.join(", ")}`,
+        });
+    }
+    if (chain.unregistered.length > 0) {
+        problems.push({
+            level: "error",
+            message: `${chain.unregistered.length} of ${chain.files.length} migration files are not in ` +
+                `meta/_journal.json, so drizzle-kit migrate skips them: ` +
+                `${chain.unregistered.slice(0, 5).join(", ")}` +
+                (chain.unregistered.length > 5 ? ", …" : ""),
+        });
+    }
+    // Numbering problems. Two files sharing a prefix is worse than a
+    // gap: `migrate` orders by tag, so which one runs first depends on
+    // the rest of the filename rather than on intent.
+    const numbers = chain.files
+        .map((f) => Number.parseInt(f.slice(0, 4), 10))
+        .filter((n) => Number.isFinite(n));
+    const seen = new Map();
+    for (const n of numbers)
+        seen.set(n, (seen.get(n) ?? 0) + 1);
+    const duplicates = [...seen.entries()]
+        .filter(([, count]) => count > 1)
+        .map(([n]) => String(n).padStart(4, "0"));
+    if (duplicates.length > 0) {
+        problems.push({
+            level: "warn",
+            message: `Duplicate migration prefixes (apply order is filename-dependent): ${duplicates.join(", ")}`,
+        });
+    }
+    const unique = [...new Set(numbers)].sort((a, b) => a - b);
+    for (let i = 1; i < unique.length; i++) {
+        const prev = unique[i - 1];
+        const cur = unique[i];
+        if (cur > prev + 1) {
+            problems.push({
+                level: "warn",
+                message: `Gap in migration numbering: ${String(prev).padStart(4, "0")} → ${String(cur).padStart(4, "0")}`,
+            });
+        }
+    }
+    return problems;
+}
+//# sourceMappingURL=migrations.js.map

package/dist/migrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../src/migrations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,IAAI,MAAM,WAAW,CAAC;AAsB7B,SAAS,KAAK,CAAC,IAAY;IACzB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC;SAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SACjC,IAAI,EAAE,CAAC;IAEV,IAAI,WAAW,GAAa,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAC9B,CAAC;QAClC,WAAW,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;QAC/D,0CAA0C;QAC1C,WAAW,GAAG,EAAE,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAEzC,OAAO;QACL,GAAG;QACH,KAAK;QACL,WAAW;QACX,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChE,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;KACnD,CAAC;AACJ,CAAC;AAID,MAAM,UAAU,qBAAqB,CAAC,KAAqB;IACzD,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC5E,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,OAAO;YACd,OAAO,EACL,sBAAsB,KAAK,CAAC,OAAO,CAAC,MAAM,qCAAqC;gBAC/E,oCAAoC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SACjE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,OAAO;YACd,OAAO,EACL,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,8BAA8B;gBACnF,yDAAyD;gBACzD,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC9C,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/C,CAAC,CAAC;IACL,CAAC;IAED,iEAAiE;IACjE,mEAAmE;IACnE,kDAAkD;IAClD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK;SACxB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;SAC9C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAErC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;SACnC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC;SAChC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,QAAQ,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,qEAAqE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SACtG,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QACvB,IAAI,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,+BAA+B,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;aAC1G,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/package.json

@@ -0,0 +1,44 @@
+{
+  "name": "@intelligo-dev/cli",
+  "version": "1.0.0-beta.1",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/intelligo-mn/framework.git",
+    "directory": "packages/cli"
+  },
+  "homepage": "https://github.com/intelligo-mn/framework#readme",
+  "bugs": {
+    "url": "https://github.com/intelligo-mn/framework/issues"
+  },
+  "type": "module",
+  "bin": {
+    "intelligo": "./dist/bin.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "dependencies": {
+    "pg": "^8.18.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "@types/pg": "^8.16.0",
+    "typescript": "^5.7.2"
+  },
+  "files": [
+    "dist",
+    "templates"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "type-check": "tsc --noEmit",
+    "lint": "eslint .",
+    "build": "tsc -p tsconfig.build.json"
+  }
+}

package/templates/admin-page/admin-page.tsx.tpl

@@ -0,0 +1,56 @@
+/**
+ * The Intelligo operational console, mounted in your app.
+ *
+ * The screen itself ships from @intelligo-dev/admin so every deployment
+ * shows the same operational truth — a fork could quietly stop showing
+ * you unsettled executions. What is generated here is only the mount:
+ * the route, the authorization call, and your own page chrome
+ * (ADR-0002).
+ *
+ * Access is gated on PLATFORM_ADMIN_EMAILS, not on a workspace role.
+ * Workspace `owner` is per-tenant and every signup has one.
+ */
+
+import {
+  getPlatformOverview,
+  listUnsettledExecutions,
+  listWorkspaces,
+  requireAdmin,
+} from "@intelligo-dev/admin";
+import { PlatformOverviewView } from "@intelligo-dev/admin/views";
+
+import { composeIntelligo } from "@/lib/intelligo";
+
+export const dynamic = "force-dynamic";
+
+export default async function AdminPage() {
+  composeIntelligo();
+
+  try {
+    await requireAdmin("admin.overview.viewed");
+  } catch {
+    return (
+      <main style={{ fontFamily: "system-ui", padding: "2rem" }}>
+        <h1>Admin</h1>
+        <p>Not authorized.</p>
+      </main>
+    );
+  }
+
+  const [overview, workspaces, unsettled] = await Promise.all([
+    getPlatformOverview(),
+    listWorkspaces(20),
+    listUnsettledExecutions(),
+  ]);
+
+  return (
+    <main style={{ fontFamily: "system-ui", padding: "2rem" }}>
+      <h1>Admin</h1>
+      <PlatformOverviewView
+        overview={overview}
+        workspaces={workspaces}
+        unsettled={unsettled}
+      />
+    </main>
+  );
+}

package/templates/app-scaffold/assistant-route.ts.tpl

@@ -0,0 +1,66 @@
+/**
+ * Your assistant endpoint, generated once and now yours.
+ *
+ * The shape is the point: whatever model call you put in the middle,
+ * it runs inside an execution — entitlement decided, worst-case cost
+ * held, usage settled, audit emitted. Swap `callModel` for a Mastra
+ * agent, an AI SDK call, or anything else and nothing around it
+ * changes (ADR-0003).
+ */
+
+import { requireWorkspace } from "@intelligo-dev/auth";
+
+import { CAPABILITIES, composeIntelligo, executions } from "@/lib/intelligo";
+
+export const maxDuration = 60;
+
+async function callModel(prompt: string) {
+  // Replace this with your framework's call.
+  const inputTokens = Math.max(1, Math.ceil(prompt.length / 4));
+  return {
+    text: `Echo: ${prompt}`,
+    usage: { inputTokens, outputTokens: inputTokens * 2 },
+    model: "example/echo-1",
+  };
+}
+
+export async function POST(request: Request) {
+  composeIntelligo();
+
+  const body = (await request.json().catch(() => null)) as {
+    prompt?: unknown;
+  } | null;
+  if (!body || typeof body.prompt !== "string" || !body.prompt.trim()) {
+    return Response.json({ error: "prompt is required" }, { status: 400 });
+  }
+
+  let context;
+  try {
+    context = await requireWorkspace();
+  } catch {
+    return Response.json({ error: "unauthorized" }, { status: 401 });
+  }
+
+  const run = await executions.begin({
+    workspaceId: context.workspace.id,
+    userId: context.user.id,
+    capability: CAPABILITIES.assistantMessage,
+    model: "example/echo-1",
+  });
+
+  if (!run.allowed) {
+    return Response.json(
+      { error: run.reason ?? "quota exceeded", code: "QUOTA_EXCEEDED" },
+      { status: 429 }
+    );
+  }
+
+  try {
+    const result = await callModel(body.prompt);
+    await run.complete({ usage: result.usage, model: result.model });
+    return Response.json({ text: result.text });
+  } catch (error) {
+    await run.fail({ error });
+    return Response.json({ error: "assistant failed" }, { status: 500 });
+  }
+}

package/templates/app-scaffold/components.json.tpl

@@ -0,0 +1,23 @@
+{
+  "$schema": "https://ui.shadcn.com/schema.json",
+  "style": "new-york",
+  "rsc": true,
+  "tsx": true,
+  "tailwind": {
+    "config": "",
+    "css": "app/globals.css",
+    "baseColor": "neutral",
+    "cssVariables": true,
+    "prefix": ""
+  },
+  "iconLibrary": "lucide",
+  "rtl": false,
+  "aliases": {
+    "components": "@/components",
+    "utils": "@/lib/utils",
+    "ui": "@/components/ui",
+    "lib": "@/lib",
+    "hooks": "@/hooks"
+  },
+  "registries": {}
+}

package/templates/app-scaffold/env.example.tpl

@@ -0,0 +1,13 @@
+# Required — the app will not boot without these.
+DATABASE_URL=
+BETTER_AUTH_SECRET=
+NEXT_PUBLIC_APP_URL=http://localhost:3000
+
+# Which product's plans the billing engine bills against. Your
+# composition root also sets this via setDefaultProductSlug(); the
+# variable is here so CLI tooling can check it without booting the app.
+INTELLIGO_BILLING_PRODUCT=__APP_SLUG__
+
+# Comma-separated emails allowed to reach the Intelligo admin console.
+# Closed by default: with no value, nobody is a platform admin.
+PLATFORM_ADMIN_EMAILS=