@intentic/gate 1.176.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Artur Kurowski
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,64 @@
+# @intentic/gate
+
+The one-line CI step for a release gate — POSTs what the pipeline knows to a gated workflow's webhook, waits for the run, and exits on the verdict.
+
+## Responsibilities
+
+A gated workflow (see `_sandbox/sandbox`, gate.routes.ts) already answers a bare `curl`: POST the request, hold
+the connection, read `{outcome, reason, runId}` back. What every team then writes around that curl is the same
+six lines of shell — map `pass`/`fail`/`blocked` to exit codes, print the reason where the log will show it,
+keep the client's timeout longer than the server's hold. This package is those six lines, written once:
+
+```sh
+npx @intentic/gate "commit $SHA on $BRANCH — preview at $URL"
+```
+
+- `pass` exits 0, `fail` exits 1.
+- `blocked` — the gate could not judge — exits 0 by default, because "the check broke" must not read as "the
+  product broke". `--blocked <code>` points it at a real neutral where the CI system has one.
+- Exit 2 is never a verdict: it means the exchange itself failed (wrong token, no such gate, the daily run
+  ceiling, network), which needs the pipeline's owner rather than the product's.
+
+The URL (token and all) comes from `--url` or the `INTENTIC_GATE_URL` environment variable — the shape every
+CI secret store hands things over in. The request is the arguments joined, or stdin when none are given. The
+`--wait` deadline (default 1800 s) rides to the server, and the HTTP client waits a minute longer, so the
+deadline that fires is the server's — which stops the run instead of abandoning it mid-spend.
+
+## Pipeline templates
+
+GitHub Actions has a step of its own — the Marketplace action (`_sandbox/gate-action`), which wraps this
+package's exchange and composes the request from the workflow's context:
+
+```yaml
+- name: Release gate
+  uses: intentic/gate-action@v1
+  with:
+    url: ${{ secrets.INTENTIC_GATE_URL }}
+```
+
+GitLab CI — `allow_failure: exit_codes` is a real neutral, so `blocked` can have its own colour:
+
+```yaml
+release-gate:
+  image: node:24-alpine
+  script:
+    - npx --yes @intentic/gate --blocked 3 "commit $CI_COMMIT_SHA on $CI_COMMIT_REF_NAME"
+  allow_failure:
+    exit_codes: [3]
+```
+
+## How it fits
+
+The gate route is the daemon's door for a caller with no identity; the designer's gate panel (the workflows
+extension) is where a gate is declared and its URL copied. This package is the third leg: the caller's side of
+the exchange, distributed on npm so a pipeline runs it cold with `npx`. On GitHub specifically the same
+exchange wears Marketplace clothes — `@intentic/gate-action` bundles this package's pure functions into the
+`intentic/gate-action` action — and every other CI system runs this CLI. It deliberately depends on nothing —
+every dependency would be install time on every pipeline of every team — and its hand-rolled verdict reader is
+held against `@intentic/sandbox-contract`'s schema by a test instead of by an import.
+
+## Key files
+
+- [src/gate.ts](src/gate.ts) — everything the CLI decides, as pure functions: argument parsing, the dialled URL, the verdict reader, the exit mapping.
+- [src/cli.ts](src/cli.ts) — the process around them: stdin, one fetch, stdout, an exit code.
+- [src/gate.test.ts](src/gate.test.ts) — the behaviour a pipeline relies on, including the reader-versus-contract agreement test.

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,61 @@
+#!/usr/bin/env node
+import { clientTimeoutMs, exitOf, parseArgs, readVerdict, targetOf, USAGE } from "./gate.js";
+const readStdin = async () => {
+    const chunks = [];
+    for await (const chunk of process.stdin) {
+        chunks.push(chunk);
+    }
+    return Buffer.concat(chunks).toString("utf8");
+};
+const parsed = parseArgs(process.argv.slice(2), process.env["INTENTIC_GATE_URL"]);
+if (parsed.kind === "help") {
+    console.log(USAGE);
+    process.exit(0);
+}
+if (parsed.kind === "error") {
+    console.error(parsed.message);
+    console.error(`\n${USAGE}`);
+    process.exit(2);
+}
+const { call } = parsed;
+const request = call.request !== "" ? call.request : process.stdin.isTTY ? "" : (await readStdin()).trim();
+let response;
+try {
+    response = await fetch(targetOf(call.url, call.waitS), {
+        method: "POST",
+        body: request,
+        signal: AbortSignal.timeout(clientTimeoutMs(call.waitS)),
+    });
+}
+catch (error) {
+    console.error(`the gate could not be reached: ${error instanceof Error ? error.message : String(error)}`);
+    process.exit(2);
+}
+const text = await response.text();
+if (!response.ok) {
+    let detail = text;
+    try {
+        const body = JSON.parse(text);
+        detail = typeof body.error === "string" ? body.error : text;
+    }
+    catch {
+    }
+    console.error(`the gate answered ${response.status}: ${detail}`);
+    process.exit(2);
+}
+let body;
+try {
+    body = JSON.parse(text);
+}
+catch {
+    body = undefined;
+}
+const verdict = readVerdict(body);
+if (verdict === undefined) {
+    console.error(`the gate's answer was not a verdict: ${text.slice(0, 200)}`);
+    process.exit(2);
+}
+console.log(`${verdict.outcome}: ${verdict.reason}`);
+console.log(`run ${verdict.runId}`);
+process.exit(exitOf(verdict, call.blockedExit));
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAW7F,MAAM,SAAS,GAAG,KAAK,IAAqB,EAAE;IAC1C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAClD,CAAC,CAAC;AAEF,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAClF,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AACD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;IAC1B,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;AAGxB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAE3G,IAAI,QAAkB,CAAC;AACvB,IAAI,CAAC;IACD,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;QACnD,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;KAC3D,CAAC,CAAC;AACP,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACb,OAAO,CAAC,KAAK,CAAC,kCAAkC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;AACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;IAEf,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAwB,CAAC;QACrD,MAAM,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;IAET,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,qBAAqB,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC;IACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,IAAI,IAAa,CAAC;AAClB,IAAI,CAAC;IACD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAAC,MAAM,CAAC;IACL,IAAI,GAAG,SAAS,CAAC;AACrB,CAAC;AACD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;AAClC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;IACxB,OAAO,CAAC,KAAK,CAAC,wCAAwC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAID,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AACrD,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;AACpC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC"}

package/dist/gate.d.ts

@@ -0,0 +1,29 @@
+export interface GateVerdict {
+    readonly outcome: "pass" | "fail" | "blocked";
+    readonly reason: string;
+    readonly runId: string;
+    readonly value?: string;
+}
+export interface GateCall {
+    readonly url: string;
+    readonly waitS: number;
+    readonly blockedExit: number;
+    readonly request: string;
+}
+export type Parsed = {
+    kind: "call";
+    call: GateCall;
+} | {
+    kind: "help";
+} | {
+    kind: "error";
+    message: string;
+};
+export declare const WAIT_DEFAULT_S = 1800;
+export declare const USAGE = "intentic-gate \u2014 run an intentic release gate and exit on its verdict\n\nusage: intentic-gate [options] [request...]\n\nThe request \u2014 what this pipeline knows: commit, branch, preview URL \u2014 is the arguments joined,\nor stdin when none are given (so `git log -1 | intentic-gate` works).\n\noptions:\n  --url <url>       the gate's webhook URL, token and all (or env INTENTIC_GATE_URL)\n  --wait <seconds>  how long the gate holds the connection (default 1800; the server caps at 3h)\n  --blocked <code>  exit code for a blocked verdict (default 0 \u2014 \"could not judge\" is not a failed build)\n  -h, --help        this text\n\nexit codes:  0 pass (and blocked, unless --blocked says otherwise) \u00B7 1 fail \u00B7 2 the exchange itself\nfailed \u2014 wrong token, no such gate, daily ceiling reached, network. 2 is never a verdict: it means\nthe pipeline's wiring needs a person, not that the product does.";
+export declare const parseArgs: (argv: readonly string[], envUrl: string | undefined) => Parsed;
+export declare const targetOf: (url: string, waitS: number) => string;
+export declare const clientTimeoutMs: (waitS: number) => number;
+export declare const readVerdict: (body: unknown) => GateVerdict | undefined;
+export declare const exitOf: (verdict: GateVerdict, blockedExit: number) => number;
+//# sourceMappingURL=gate.d.ts.map

package/dist/gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,QAAQ;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAErB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAIvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAG7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9G,eAAO,MAAM,cAAc,OAAO,CAAC;AAEnC,eAAO,MAAM,KAAK,i6BAe+C,CAAC;AAElE,eAAO,MAAM,SAAS,SAAU,SAAS,MAAM,EAAE,UAAU,MAAM,GAAG,SAAS,KAAG,MAwC/E,CAAC;AAIF,eAAO,MAAM,QAAQ,QAAS,MAAM,SAAS,MAAM,KAAG,MAIrD,CAAC;AAIF,eAAO,MAAM,eAAe,UAAW,MAAM,KAAG,MAA8B,CAAC;AAM/E,eAAO,MAAM,WAAW,SAAU,OAAO,KAAG,WAAW,GAAG,SAczD,CAAC;AAEF,eAAO,MAAM,MAAM,YAAa,WAAW,eAAe,MAAM,KAAG,MAKlE,CAAC"}

package/dist/gate.js

@@ -0,0 +1,88 @@
+export const WAIT_DEFAULT_S = 1800;
+export const USAGE = `intentic-gate — run an intentic release gate and exit on its verdict
+
+usage: intentic-gate [options] [request...]
+
+The request — what this pipeline knows: commit, branch, preview URL — is the arguments joined,
+or stdin when none are given (so \`git log -1 | intentic-gate\` works).
+
+options:
+  --url <url>       the gate's webhook URL, token and all (or env INTENTIC_GATE_URL)
+  --wait <seconds>  how long the gate holds the connection (default ${WAIT_DEFAULT_S}; the server caps at 3h)
+  --blocked <code>  exit code for a blocked verdict (default 0 — "could not judge" is not a failed build)
+  -h, --help        this text
+
+exit codes:  0 pass (and blocked, unless --blocked says otherwise) · 1 fail · 2 the exchange itself
+failed — wrong token, no such gate, daily ceiling reached, network. 2 is never a verdict: it means
+the pipeline's wiring needs a person, not that the product does.`;
+export const parseArgs = (argv, envUrl) => {
+    let url = envUrl;
+    let waitS = WAIT_DEFAULT_S;
+    let blockedExit = 0;
+    const words = [];
+    for (let at = 0; at < argv.length; at += 1) {
+        const arg = argv[at];
+        if (arg === "-h" || arg === "--help") {
+            return { kind: "help" };
+        }
+        if (arg === "--url" || arg === "--wait" || arg === "--blocked") {
+            const value = argv[at + 1];
+            if (value === undefined) {
+                return { kind: "error", message: `${arg} needs a value` };
+            }
+            at += 1;
+            if (arg === "--url") {
+                url = value;
+                continue;
+            }
+            const numeric = Number(value);
+            if (!Number.isInteger(numeric) || numeric < 0) {
+                return { kind: "error", message: `${arg} needs a whole number, not "${value}"` };
+            }
+            if (arg === "--wait") {
+                waitS = numeric;
+            }
+            else {
+                blockedExit = numeric;
+            }
+            continue;
+        }
+        if (arg.startsWith("--")) {
+            return { kind: "error", message: `unknown option ${arg}` };
+        }
+        words.push(arg);
+    }
+    if (url === undefined || url === "") {
+        return { kind: "error", message: "no gate URL: pass --url or set INTENTIC_GATE_URL" };
+    }
+    return { kind: "call", call: { url, waitS, blockedExit, request: words.join(" ") } };
+};
+export const targetOf = (url, waitS) => {
+    const target = new URL(url);
+    target.searchParams.set("wait", String(waitS));
+    return target.toString();
+};
+export const clientTimeoutMs = (waitS) => (waitS + 60) * 1_000;
+const OUTCOMES = new Set(["pass", "fail", "blocked"]);
+export const readVerdict = (body) => {
+    if (typeof body !== "object" || body === null) {
+        return undefined;
+    }
+    const { outcome, reason, runId, value } = body;
+    if (typeof outcome !== "string" || !OUTCOMES.has(outcome) || typeof reason !== "string" || typeof runId !== "string") {
+        return undefined;
+    }
+    return {
+        outcome: outcome,
+        reason,
+        runId,
+        ...(typeof value === "string" ? { value } : {}),
+    };
+};
+export const exitOf = (verdict, blockedExit) => {
+    if (verdict.outcome === "pass") {
+        return 0;
+    }
+    return verdict.outcome === "fail" ? 1 : blockedExit;
+};
+//# sourceMappingURL=gate.js.map

package/dist/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAgCA,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC;AAEnC,MAAM,CAAC,MAAM,KAAK,GAAG;;;;;;;;;sEASiD,cAAc;;;;;;iEAMnB,CAAC;AAElE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAuB,EAAE,MAA0B,EAAU,EAAE;IACrF,IAAI,GAAG,GAAG,MAAM,CAAC;IACjB,IAAI,KAAK,GAAG,cAAc,CAAC;IAC3B,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAW,CAAC;QAC/B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC5B,CAAC;QACD,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACtB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,GAAG,gBAAgB,EAAE,CAAC;YAC9D,CAAC;YACD,EAAE,IAAI,CAAC,CAAC;YACR,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;gBAClB,GAAG,GAAG,KAAK,CAAC;gBACZ,SAAS;YACb,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAC5C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,GAAG,+BAA+B,KAAK,GAAG,EAAE,CAAC;YACrF,CAAC;YACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACnB,KAAK,GAAG,OAAO,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACJ,WAAW,GAAG,OAAO,CAAC;YAC1B,CAAC;YACD,SAAS;QACb,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,kBAAkB,GAAG,EAAE,EAAE,CAAC;QAC/D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;IAC1F,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;AACzF,CAAC,CAAC;AAIF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,KAAa,EAAU,EAAE;IAC3D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC7B,CAAC,CAAC;AAIF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC;AAE/E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAItD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAa,EAA2B,EAAE;IAClE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAA+B,CAAC;IAC1E,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACnH,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,OAAO;QACH,OAAO,EAAE,OAAiC;QAC1C,MAAM;QACN,KAAK;QACL,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAoB,EAAE,WAAmB,EAAU,EAAE;IACxE,IAAI,OAAO,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC7B,OAAO,CAAC,CAAC;IACb,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;AACxD,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,50 @@
+{
+  "name": "@intentic/gate",
+  "version": "1.176.3",
+  "description": "Run an intentic release gate from a CI pipeline — POST what the pipeline knows, wait for the run, exit on the verdict",
+  "license": "MIT",
+  "type": "module",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/intentic/intentic.git",
+    "directory": "_sandbox/gate"
+  },
+  "types": "./dist/gate.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/gate.d.ts",
+      "import": {
+        "@intentic/src": "./src/gate.ts",
+        "default": "./dist/gate.js"
+      }
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "bin": {
+    "intentic-gate": "./dist/cli.js"
+  },
+  "dependencies": {
+    "tslib": "2.8.1"
+  },
+  "devDependencies": {
+    "@types/node": "24.13.2",
+    "@typescript/native-preview": "7.0.0-dev.20260707.2",
+    "vitest": "4.1.10",
+    "@intentic/sandbox-contract": "1.176.3",
+    "@intentic/testing": "0.0.0",
+    "@intentic/tsconfig": "0.0.0"
+  },
+  "scripts": {
+    "build": "tsgo",
+    "typecheck": "tsgo --noEmit -p tsconfig.test.json",
+    "watch": "tsgo --build --watch",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  }
+}