@intutic/clawde 1.10.0 → 1.10.1

package/README.md

@@ -15,6 +15,7 @@ npm install @intutic/clawde
 - **Circuit Breaker:** Wraps tasks with strict fallback parameters to isolate execution failures.
 - **Schema Normalization:** Intercepts and translates Anthropic payloads to OpenAI structures.
 - **Policy Callbacks:** Simple event subscriptions for policy execution events (e.g. `hijack`, `kill`).
+- **Control-Plane Management (`ControlPlaneClient`):** Org signup, team/workspace creation, gateway registration and assignment, and provider-credential provisioning — the CLI's management surface, callable programmatically. See the [SDK reference](https://docs.intutic.ai/reference/clawde-sdk#control-plane-management-controlplaneclient).
 
 ## License
 

package/dist/budget-checker.d.ts

@@ -2,9 +2,21 @@ import { BudgetCheckResult } from './types';
 export declare class BudgetChecker {
     private cache;
     private cacheTtl;
-    private baseUrl;
+    private controlPlaneUrl;
     private apiKey;
-    constructor(baseUrl: string, apiKey: string);
+    constructor(controlPlaneUrl: string, apiKey: string);
+    /**
+     * Historically called a `/v1/budget/check` route on the proxy that never
+     * existed anywhere in the backend -- every real call threw. The only real
+     * budget endpoint is `GET /api/v1/budget` on the control plane, which
+     * reports current workspace-level spend/remaining, not a per-request
+     * allow/decision for a specific `model`+`estimatedTokens` pair (the real
+     * endpoint takes no such params). This is therefore a narrower, honestly
+     * different check than the name implies: "does this workspace currently
+     * have budget headroom at all", not "would this specific call fit" --
+     * `model`/`estimatedTokens` are kept only as the existing cache key shape,
+     * for API/cache-behavior compatibility with callers already using them.
+     */
     checkBudget(model: string, estimatedTokens: number): Promise<BudgetCheckResult>;
     updateCachedBudget(model: string, estimatedTokens: number, remainingUsd: number, allowed: boolean): void;
 }

package/dist/budget-checker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"budget-checker.d.ts","sourceRoot":"","sources":["../src/budget-checker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAQ3C,qBAAa,aAAa;IACxB,OAAO,CAAC,KAAK,CAAgC;IAC7C,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,MAAM,CAAQ;gBAEV,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAK9B,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAmCrF,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO;CAOzG"}
+{"version":3,"file":"budget-checker.d.ts","sourceRoot":"","sources":["../src/budget-checker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAc3C,qBAAa,aAAa;IACxB,OAAO,CAAC,KAAK,CAAgC;IAC7C,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,eAAe,CAAQ;IAC/B,OAAO,CAAC,MAAM,CAAQ;gBAEV,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAKnD;;;;;;;;;;;OAWG;IACU,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAsCrF,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO;CAOzG"}

package/dist/budget-checker.js

@@ -5,12 +5,24 @@ const errors_1 = require("./errors");
 class BudgetChecker {
     cache = new Map();
     cacheTtl = 30000; // 30s TTL
-    baseUrl;
+    controlPlaneUrl;
     apiKey;
-    constructor(baseUrl, apiKey) {
-        this.baseUrl = baseUrl;
+    constructor(controlPlaneUrl, apiKey) {
+        this.controlPlaneUrl = controlPlaneUrl;
         this.apiKey = apiKey;
     }
+    /**
+     * Historically called a `/v1/budget/check` route on the proxy that never
+     * existed anywhere in the backend -- every real call threw. The only real
+     * budget endpoint is `GET /api/v1/budget` on the control plane, which
+     * reports current workspace-level spend/remaining, not a per-request
+     * allow/decision for a specific `model`+`estimatedTokens` pair (the real
+     * endpoint takes no such params). This is therefore a narrower, honestly
+     * different check than the name implies: "does this workspace currently
+     * have budget headroom at all", not "would this specific call fit" --
+     * `model`/`estimatedTokens` are kept only as the existing cache key shape,
+     * for API/cache-behavior compatibility with callers already using them.
+     */
     async checkBudget(model, estimatedTokens) {
         const cacheKey = `${model}:${estimatedTokens}`;
         const now = Date.now();
@@ -19,10 +31,7 @@ class BudgetChecker {
             return cached.result;
         }
         try {
-            const url = new URL(`${this.baseUrl}/v1/budget/check`);
-            url.searchParams.append('model', model);
-            url.searchParams.append('estimated_tokens', String(estimatedTokens));
-            const response = await fetch(url.toString(), {
+            const response = await fetch(`${this.controlPlaneUrl}/api/v1/budget`, {
                 method: 'GET',
                 headers: {
                     'Authorization': `Bearer ${this.apiKey}`,
@@ -32,12 +41,19 @@ class BudgetChecker {
             if (!response.ok) {
                 throw new Error(`Budget check failed with status: ${response.status}`);
             }
-            const result = (await response.json());
+            const body = (await response.json());
+            const result = {
+                allowed: body.budget_remaining_usd > 0,
+                remaining_usd: body.budget_remaining_usd,
+                reason: body.alert_triggered
+                    ? 'Workspace is at or above its budget alert threshold'
+                    : undefined,
+            };
             this.cache.set(cacheKey, { result, timestamp: now });
             return result;
         }
         catch (err) {
-            throw new errors_1.ClawdeConnectionError(`Could not reach budget check endpoint: ${err.message}`);
+            throw new errors_1.ClawdeConnectionError(`Could not reach control-plane budget endpoint: ${err.message}`);
         }
     }
     // Helper to manually update/pre-populate budget cache from response headers

package/dist/budget-checker.js.map

@@ -1 +1 @@
-{"version":3,"file":"budget-checker.js","sourceRoot":"","sources":["../src/budget-checker.ts"],"names":[],"mappings":";;;AACA,qCAAgD;AAOhD,MAAa,aAAa;IAChB,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAA;IACrC,QAAQ,GAAG,KAAK,CAAA,CAAC,UAAU;IAC3B,OAAO,CAAQ;IACf,MAAM,CAAQ;IAEtB,YAAY,OAAe,EAAE,MAAc;QACzC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,eAAuB;QAC7D,MAAM,QAAQ,GAAG,GAAG,KAAK,IAAI,eAAe,EAAE,CAAA;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAEvC,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrD,OAAO,MAAM,CAAC,MAAM,CAAA;QACtB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,kBAAkB,CAAC,CAAA;YACtD,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;YACvC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAA;YAEpE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;gBAC3C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;oBACxC,QAAQ,EAAE,kBAAkB;iBAC7B;aACF,CAAC,CAAA;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;YACxE,CAAC;YAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAsB,CAAA;YAC3D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAA;YACpD,OAAO,MAAM,CAAA;QACf,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,8BAAqB,CAAC,0CAA0C,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;QAC1F,CAAC;IACH,CAAC;IAED,4EAA4E;IACrE,kBAAkB,CAAC,KAAa,EAAE,eAAuB,EAAE,YAAoB,EAAE,OAAgB;QACtG,MAAM,QAAQ,GAAG,GAAG,KAAK,IAAI,eAAe,EAAE,CAAA;QAC9C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;YACvB,MAAM,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE;YAChD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAA;IACJ,CAAC;CACF;AArDD,sCAqDC"}
+{"version":3,"file":"budget-checker.js","sourceRoot":"","sources":["../src/budget-checker.ts"],"names":[],"mappings":";;;AACA,qCAAgD;AAahD,MAAa,aAAa;IAChB,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAA;IACrC,QAAQ,GAAG,KAAK,CAAA,CAAC,UAAU;IAC3B,eAAe,CAAQ;IACvB,MAAM,CAAQ;IAEtB,YAAY,eAAuB,EAAE,MAAc;QACjD,IAAI,CAAC,eAAe,GAAG,eAAe,CAAA;QACtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;IAED;;;;;;;;;;;OAWG;IACI,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,eAAuB;QAC7D,MAAM,QAAQ,GAAG,GAAG,KAAK,IAAI,eAAe,EAAE,CAAA;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAEvC,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrD,OAAO,MAAM,CAAC,MAAM,CAAA;QACtB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,eAAe,gBAAgB,EAAE;gBACpE,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;oBACxC,QAAQ,EAAE,kBAAkB;iBAC7B;aACF,CAAC,CAAA;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;YACxE,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0B,CAAA;YAC7D,MAAM,MAAM,GAAsB;gBAChC,OAAO,EAAE,IAAI,CAAC,oBAAoB,GAAG,CAAC;gBACtC,aAAa,EAAE,IAAI,CAAC,oBAAoB;gBACxC,MAAM,EAAE,IAAI,CAAC,eAAe;oBAC1B,CAAC,CAAC,qDAAqD;oBACvD,CAAC,CAAC,SAAS;aACd,CAAA;YACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAA;YACpD,OAAO,MAAM,CAAA;QACf,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,8BAAqB,CAAC,kDAAkD,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;QAClG,CAAC;IACH,CAAC;IAED,4EAA4E;IACrE,kBAAkB,CAAC,KAAa,EAAE,eAAuB,EAAE,YAAoB,EAAE,OAAgB;QACtG,MAAM,QAAQ,GAAG,GAAG,KAAK,IAAI,eAAe,EAAE,CAAA;QAC9C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;YACvB,MAAM,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE;YAChD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAA;IACJ,CAAC;CACF;AApED,sCAoEC"}

package/dist/client.d.ts

@@ -2,10 +2,13 @@ import { ClawdeClientOptions, ChatParams, ChatResponse, ResolvedContext, BudgetC
 export declare class ClawdeClient {
     private apiKey;
     private baseUrl;
+    private controlPlaneUrl;
     private provider?;
     private autoContext;
     private timeout;
     private retries;
+    /** This client's position in the agent graph — see `graph-identity`. */
+    private identity;
     private budgetChecker;
     private circuitBreakerWrapper;
     private eventEmitter;

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,YAAY,EACZ,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,qBAAqB,EACtB,MAAM,SAAS,CAAA;AAQhB,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAQ;IACtB,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,QAAQ,CAAC,CAAmC;IACpD,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,OAAO,CAAQ;IAEvB,OAAO,CAAC,aAAa,CAAe;IACpC,OAAO,CAAC,qBAAqB,CAAgB;IAC7C,OAAO,CAAC,YAAY,CAAoB;gBAE5B,OAAO,EAAE,mBAAmB;IAiBjC,EAAE,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,EAAE,QAAQ,EAAE,aAAa,GAAG,IAAI;IAIlF,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,GAAG,IAAI;IAK3C,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAK/E,cAAc,IAAI,OAAO,CAAC,eAAe,CAAC;IAQhD,cAAc,CAAC,CAAC,EACrB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,qBAA0B,GAClC,CAAC,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC;IAK1B,IAAI,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC;CAoG7D"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,YAAY,EACZ,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,qBAAqB,EACtB,MAAM,SAAS,CAAA;AAShB,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAQ;IACtB,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,eAAe,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,CAAmC;IACpD,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,OAAO,CAAQ;IAEvB,wEAAwE;IACxE,OAAO,CAAC,QAAQ,CAAe;IAE/B,OAAO,CAAC,aAAa,CAAe;IACpC,OAAO,CAAC,qBAAqB,CAAgB;IAC7C,OAAO,CAAC,YAAY,CAAoB;gBAE5B,OAAO,EAAE,mBAAmB;IAuBjC,EAAE,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,EAAE,QAAQ,EAAE,aAAa,GAAG,IAAI;IAIlF,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,GAAG,IAAI;IAK3C,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAK/E,cAAc,IAAI,OAAO,CAAC,eAAe,CAAC;IAQhD,cAAc,CAAC,CAAC,EACrB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,qBAA0B,GAClC,CAAC,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC;IAK1B,IAAI,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC;CAwG7D"}

package/dist/client.js

@@ -7,13 +7,17 @@ const context_resolver_1 = require("./context-resolver");
 const budget_checker_1 = require("./budget-checker");
 const circuit_breaker_1 = require("./circuit-breaker");
 const event_emitter_1 = require("./event-emitter");
+const graph_identity_1 = require("./graph-identity");
 class ClawdeClient {
     apiKey;
     baseUrl;
+    controlPlaneUrl;
     provider;
     autoContext;
     timeout;
     retries;
+    /** This client's position in the agent graph — see `graph-identity`. */
+    identity;
     budgetChecker;
     circuitBreakerWrapper;
     eventEmitter;
@@ -23,11 +27,16 @@ class ClawdeClient {
         }
         this.apiKey = options.apiKey;
         this.baseUrl = options.baseUrl || process.env.INTUTIC_BASE_URL || 'http://localhost:4000';
+        this.controlPlaneUrl =
+            options.controlPlaneUrl || process.env.INTUTIC_CONTROL_PLANE_URL || 'https://app.intutic.ai';
         this.provider = options.provider;
         this.autoContext = options.autoContext ?? true;
         this.timeout = options.timeout ?? 30000;
         this.retries = options.retries ?? 2;
-        this.budgetChecker = new budget_checker_1.BudgetChecker(this.baseUrl, this.apiKey);
+        // Inherited from the process that spawned this one, so an agent that runs
+        // another agent is recorded as its parent without either of them being told.
+        this.identity = (0, graph_identity_1.deriveIdentity)(options.graphIdentity);
+        this.budgetChecker = new budget_checker_1.BudgetChecker(this.controlPlaneUrl, this.apiKey);
         this.circuitBreakerWrapper = new circuit_breaker_1.CircuitBreaker(this);
         this.eventEmitter = new event_emitter_1.ClawdeEventEmitter();
     }
@@ -70,6 +79,10 @@ class ClawdeClient {
                     'Content-Type': 'application/json',
                     'Authorization': `Bearer ${this.apiKey}`,
                     'X-Intutic-Context': JSON.stringify(context),
+                    // Without these the proxy sees graph_id == session_id, treats every
+                    // request as a graph of one, and skips membership, fleet spend and
+                    // node counting entirely.
+                    ...(0, graph_identity_1.identityHeaders)(this.identity),
                 };
                 if (params.max_cost_usd !== undefined) {
                     headers['X-Intutic-Cost-Limit'] = String(params.max_cost_usd);

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";;;AASA,qCAAoE;AACpE,uDAAuE;AACvE,yDAAmD;AACnD,qDAAgD;AAChD,uDAAkD;AAClD,mDAAoD;AAEpD,MAAa,YAAY;IACf,MAAM,CAAQ;IACd,OAAO,CAAQ;IACf,QAAQ,CAAoC;IAC5C,WAAW,CAAS;IACpB,OAAO,CAAQ;IACf,OAAO,CAAQ;IAEf,aAAa,CAAe;IAC5B,qBAAqB,CAAgB;IACrC,YAAY,CAAoB;IAExC,YAAY,OAA4B;QACtC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;QACpE,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,uBAAuB,CAAA;QACzF,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;QAChC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAA;QAC9C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAA;QACvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAA;QAEnC,IAAI,CAAC,aAAa,GAAG,IAAI,8BAAa,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QACjE,IAAI,CAAC,qBAAqB,GAAG,IAAI,gCAAc,CAAC,IAAI,CAAC,CAAA;QACrD,IAAI,CAAC,YAAY,GAAG,IAAI,kCAAkB,EAAE,CAAA;IAC9C,CAAC;IAED,0BAA0B;IACnB,EAAE,CAAC,KAA+C,EAAE,QAAuB;QAChF,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IACvC,CAAC;IAEM,GAAG,CAAC,KAAa,EAAE,QAAuB;QAC/C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IACxC,CAAC;IAED,0BAA0B;IACnB,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,eAAuB;QAC7D,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,EAAE,eAAe,CAAC,CAAA;IAC/D,CAAC;IAED,8BAA8B;IACvB,KAAK,CAAC,cAAc;QACzB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO,EAAE,CAAA;QACX,CAAC;QACD,OAAO,IAAA,iCAAc,GAAE,CAAA;IACzB,CAAC;IAED,mCAAmC;IAC5B,cAAc,CACnB,QAAgB,EAChB,UAAiC,EAAE;QAEnC,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAI,QAAQ,EAAE,OAAO,CAAC,CAAA;IAC9D,CAAC;IAED,mCAAmC;IAC5B,KAAK,CAAC,IAAI,CAAC,MAAkB;QAClC,qBAAqB;QACrB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAE3C,yCAAyC;QACzC,MAAM,cAAc,GAAG,IAAA,kCAAgB,EAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QAE9D,uCAAuC;QACvC,IAAI,SAAS,GAAQ,IAAI,CAAA;QACzB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,CAAA;QAEpC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;YACxD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;YACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;YAEhE,IAAI,CAAC;gBACH,MAAM,OAAO,GAA2B;oBACtC,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;oBACxC,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;iBAC7C,CAAA;gBAED,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;oBACtC,OAAO,CAAC,sBAAsB,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;gBAC/D,CAAC;gBACD,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;oBAC1C,OAAO,CAAC,uBAAuB,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;gBACpE,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,sBAAsB,EAAE;oBAClE,MAAM,EAAE,MAAM;oBACd,OAAO;oBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;oBACpC,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAA;gBAEF,YAAY,CAAC,KAAK,CAAC,CAAA;gBAEnB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CAAC,cAAc,QAAQ,CAAC,MAAM,KAAK,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;gBAC5E,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;gBAClC,MAAM,UAAU,GAAG,IAAA,mCAAiB,EAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;gBAEzD,sCAAsC;gBACtC,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAA;gBAC1E,MAAM,qBAAqB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAA;gBAChF,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;gBAEpE,UAAU,CAAC,OAAO,GAAG,aAAoB,CAAA;gBACzC,IAAI,qBAAqB,EAAE,CAAC;oBAC1B,UAAU,CAAC,kBAAkB,GAAG,UAAU,CAAC,qBAAqB,CAAC,CAAA;gBACnE,CAAC;gBACD,IAAI,eAAe,EAAE,CAAC;oBACpB,UAAU,CAAC,aAAa,GAAG,UAAU,CAAC,eAAe,CAAC,CAAA;gBACxD,CAAC;gBAED,+BAA+B;gBAC/B,IAAI,UAAU,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;oBAChD,IAAI,CAAC,aAAa,CAAC,kBAAkB,CACnC,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB;oBACxC,UAAU,CAAC,kBAAkB,EAC7B,aAAa,KAAK,MAAM,CACzB,CAAA;gBACH,CAAC;gBAED,4BAA4B;gBAC5B,IAAI,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;oBACzD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;gBACxD,CAAC;gBAED,wBAAwB;gBACxB,IAAI,UAAU,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;oBAClC,MAAM,IAAI,2BAAkB,CAAC,MAAM,EAAE,2CAA2C,CAAC,CAAA;gBACnF,CAAC;gBAED,OAAO,UAAU,CAAA;YACnB,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,YAAY,CAAC,KAAK,CAAC,CAAA;gBACnB,SAAS,GAAG,GAAG,CAAA;gBAEf,IAAI,GAAG,YAAY,2BAAkB,EAAE,CAAC;oBACtC,MAAM,GAAG,CAAA,CAAC,yCAAyC;gBACrD,CAAC;gBAED,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;oBAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;wBACzC,OAAO,CAAC,IAAI,CAAC,wBAAwB,OAAO,+BAA+B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;oBAC3F,CAAC;oBACD,gBAAgB;oBAChB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,GAAG,CAAC,CAAC,CAAA;oBAClE,SAAQ;gBACV,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,IAAI,8BAAqB,CAAC,wBAAwB,WAAW,0BAA0B,SAAS,CAAC,OAAO,EAAE,CAAC,CAAA;IACnH,CAAC;CACF;AA/JD,oCA+JC"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";;;AASA,qCAAoE;AACpE,uDAAuE;AACvE,yDAAmD;AACnD,qDAAgD;AAChD,uDAAkD;AAClD,mDAAoD;AACpD,qDAAsF;AAEtF,MAAa,YAAY;IACf,MAAM,CAAQ;IACd,OAAO,CAAQ;IACf,eAAe,CAAQ;IACvB,QAAQ,CAAoC;IAC5C,WAAW,CAAS;IACpB,OAAO,CAAQ;IACf,OAAO,CAAQ;IAEvB,wEAAwE;IAChE,QAAQ,CAAe;IAEvB,aAAa,CAAe;IAC5B,qBAAqB,CAAgB;IACrC,YAAY,CAAoB;IAExC,YAAY,OAA4B;QACtC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;QACpE,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,uBAAuB,CAAA;QACzF,IAAI,CAAC,eAAe;YAClB,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,wBAAwB,CAAA;QAC9F,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;QAChC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAA;QAC9C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAA;QACvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAA;QAEnC,0EAA0E;QAC1E,6EAA6E;QAC7E,IAAI,CAAC,QAAQ,GAAG,IAAA,+BAAc,EAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QAErD,IAAI,CAAC,aAAa,GAAG,IAAI,8BAAa,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QACzE,IAAI,CAAC,qBAAqB,GAAG,IAAI,gCAAc,CAAC,IAAI,CAAC,CAAA;QACrD,IAAI,CAAC,YAAY,GAAG,IAAI,kCAAkB,EAAE,CAAA;IAC9C,CAAC;IAED,0BAA0B;IACnB,EAAE,CAAC,KAA+C,EAAE,QAAuB;QAChF,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IACvC,CAAC;IAEM,GAAG,CAAC,KAAa,EAAE,QAAuB;QAC/C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IACxC,CAAC;IAED,0BAA0B;IACnB,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,eAAuB;QAC7D,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,EAAE,eAAe,CAAC,CAAA;IAC/D,CAAC;IAED,8BAA8B;IACvB,KAAK,CAAC,cAAc;QACzB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO,EAAE,CAAA;QACX,CAAC;QACD,OAAO,IAAA,iCAAc,GAAE,CAAA;IACzB,CAAC;IAED,mCAAmC;IAC5B,cAAc,CACnB,QAAgB,EAChB,UAAiC,EAAE;QAEnC,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAI,QAAQ,EAAE,OAAO,CAAC,CAAA;IAC9D,CAAC;IAED,mCAAmC;IAC5B,KAAK,CAAC,IAAI,CAAC,MAAkB;QAClC,qBAAqB;QACrB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAE3C,yCAAyC;QACzC,MAAM,cAAc,GAAG,IAAA,kCAAgB,EAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QAE9D,uCAAuC;QACvC,IAAI,SAAS,GAAQ,IAAI,CAAA;QACzB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,CAAA;QAEpC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;YACxD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;YACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;YAEhE,IAAI,CAAC;gBACH,MAAM,OAAO,GAA2B;oBACtC,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;oBACxC,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;oBAC5C,oEAAoE;oBACpE,mEAAmE;oBACnE,0BAA0B;oBAC1B,GAAG,IAAA,gCAAe,EAAC,IAAI,CAAC,QAAQ,CAAC;iBAClC,CAAA;gBAED,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;oBACtC,OAAO,CAAC,sBAAsB,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;gBAC/D,CAAC;gBACD,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;oBAC1C,OAAO,CAAC,uBAAuB,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;gBACpE,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,sBAAsB,EAAE;oBAClE,MAAM,EAAE,MAAM;oBACd,OAAO;oBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;oBACpC,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAA;gBAEF,YAAY,CAAC,KAAK,CAAC,CAAA;gBAEnB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CAAC,cAAc,QAAQ,CAAC,MAAM,KAAK,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;gBAC5E,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;gBAClC,MAAM,UAAU,GAAG,IAAA,mCAAiB,EAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;gBAEzD,sCAAsC;gBACtC,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAA;gBAC1E,MAAM,qBAAqB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAA;gBAChF,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;gBAEpE,UAAU,CAAC,OAAO,GAAG,aAAoB,CAAA;gBACzC,IAAI,qBAAqB,EAAE,CAAC;oBAC1B,UAAU,CAAC,kBAAkB,GAAG,UAAU,CAAC,qBAAqB,CAAC,CAAA;gBACnE,CAAC;gBACD,IAAI,eAAe,EAAE,CAAC;oBACpB,UAAU,CAAC,aAAa,GAAG,UAAU,CAAC,eAAe,CAAC,CAAA;gBACxD,CAAC;gBAED,+BAA+B;gBAC/B,IAAI,UAAU,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;oBAChD,IAAI,CAAC,aAAa,CAAC,kBAAkB,CACnC,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB;oBACxC,UAAU,CAAC,kBAAkB,EAC7B,aAAa,KAAK,MAAM,CACzB,CAAA;gBACH,CAAC;gBAED,4BAA4B;gBAC5B,IAAI,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;oBACzD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;gBACxD,CAAC;gBAED,wBAAwB;gBACxB,IAAI,UAAU,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;oBAClC,MAAM,IAAI,2BAAkB,CAAC,MAAM,EAAE,2CAA2C,CAAC,CAAA;gBACnF,CAAC;gBAED,OAAO,UAAU,CAAA;YACnB,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,YAAY,CAAC,KAAK,CAAC,CAAA;gBACnB,SAAS,GAAG,GAAG,CAAA;gBAEf,IAAI,GAAG,YAAY,2BAAkB,EAAE,CAAC;oBACtC,MAAM,GAAG,CAAA,CAAC,yCAAyC;gBACrD,CAAC;gBAED,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;oBAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;wBACzC,OAAO,CAAC,IAAI,CAAC,wBAAwB,OAAO,+BAA+B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;oBAC3F,CAAC;oBACD,gBAAgB;oBAChB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,GAAG,CAAC,CAAC,CAAA;oBAClE,SAAQ;gBACV,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,IAAI,8BAAqB,CAAC,wBAAwB,WAAW,0BAA0B,SAAS,CAAC,OAAO,EAAE,CAAC,CAAA;IACnH,CAAC;CACF;AA7KD,oCA6KC"}

package/dist/control-plane.d.ts

@@ -0,0 +1,113 @@
+import type { ControlPlaneClientOptions, WhoamiResult, OrgSignupParams, OrgSignupResult, StartDomainVerificationResult, CheckDomainVerificationResult, CreateOrgParams, CreateOrgResult, Team, Workspace, GatewayRegisterParams, GatewayRegisterResult, Gateway, GatewayRotateResult, GatewayStatus, GatewayConfigUpdate, GatewayConfigResult, GatewayResolution, ProviderCredentialStatus } from './types';
+/**
+ * Control-plane management client (LLD #69) — org/team/gateway/credentials
+ * administration, as distinct from `ClawdeClient`'s data-plane chat calls.
+ *
+ * Deliberately a separate class, not new methods on `ClawdeClient`:
+ * `ClawdeClient.baseUrl` targets the *proxy* (default `http://localhost:4000`);
+ * the control plane is a different origin entirely (default
+ * `https://app.intutic.ai`, or a self-hosted `CONTROL_PLANE_URL`). Bolting
+ * management calls onto `ClawdeClient` would silently need a second base URL
+ * on a class whose whole contract today is "one client, one proxy."
+ *
+ * Every endpoint here is mirrored 1:1 from `tools/cli/src/commands/{org,
+ * team,gateway,credentials,whoami}.ts` — the CLI's own already-tested
+ * contracts, not re-derived. Endpoints deliberately NOT included: session
+ * establishment (`login`/`logout` — an SDK caller supplies `apiKey`
+ * directly), and local-environment/terminal concerns (`init`, `doctor`,
+ * `install-daemon`, `integrity`, `rollback`, `connect`, `exec`, `start`,
+ * `syncContext`, `skill`) that have no meaning for a library embedded in
+ * someone else's process.
+ *
+ * Works unmodified against a self-hosted control plane — there is no
+ * SaaS-vs-self-hosted branch anywhere in this file. An open-core user who
+ * runs the proxy standalone with no control plane configured simply never
+ * constructs this class (or does, points it at nothing, and gets a
+ * `ClawdeConnectionError` on the first call) — the same framing
+ * `whoami.ts` already uses: "This command needs an Intutic control plane,
+ * which open core does not include."
+ *
+ * Auth: the same `apiKey` type `ClawdeClient` accepts — a `vk_` token or a
+ * JWT both satisfy `services/control-plane/src/middleware/auth.ts`, which
+ * resolves either to an `AuthContext` with a role; endpoints gated
+ * `requireRole('OWNER','ADMIN')` server-side reject an under-privileged
+ * token exactly as they would for the CLI using the same token.
+ */
+export declare class ControlPlaneClient {
+    private apiKey;
+    private baseUrl;
+    constructor(options: ControlPlaneClientOptions);
+    private request;
+    /** GET /api/v1/auth/me */
+    whoami(): Promise<WhoamiResult>;
+    /**
+     * POST /api/v1/auth/signup/org — unauthenticated, creates the calling user.
+     *
+     * Closed by default in production (`INTUTIC_PUBLIC_ORG_SIGNUP`, off unless
+     * a deployment has built its own anonymous domain-verification story):
+     * creating a real org auto-provisions a real managed gateway cell (LLD
+     * #71), so org creation now requires DNS domain-ownership proof, and an
+     * anonymous caller has no session to own a verification attempt against.
+     * Prefer `startDomainVerification` + `checkDomainVerification` +
+     * `createOrg` with an already-authenticated `apiKey` — the same flow the
+     * CLI's `intutic org create` and the dashboard's "Create Organization"
+     * modal use.
+     */
+    signupOrg(params: OrgSignupParams): Promise<OrgSignupResult>;
+    /**
+     * POST /api/v1/domain-verification/start — mints a DNS TXT-record
+     * verification token for `domain`. Publish a TXT record at
+     * `txtRecordName` with value `txtRecordValue`, then poll
+     * `checkDomainVerification` until `status` is `'verified'`.
+     */
+    startDomainVerification(domain: string): Promise<StartDomainVerificationResult>;
+    /**
+     * GET /api/v1/domain-verification/:id — re-checks DNS for the TXT record.
+     * Safe to call repeatedly; performs a fresh lookup every call.
+     */
+    checkDomainVerification(verificationId: string): Promise<CheckDomainVerificationResult>;
+    /**
+     * POST /api/v1/orgs — creates a real org from an already-authenticated
+     * caller. Requires a `verified`, unconsumed domain verification (see
+     * `startDomainVerification`); the verification is consumed atomically
+     * inside the org-insert transaction, so it backs exactly this one org.
+     */
+    createOrg(params: CreateOrgParams): Promise<CreateOrgResult>;
+    /** GET /api/v1/orgs/:orgId/teams */
+    listTeams(orgId: string): Promise<Team[]>;
+    /** POST /api/v1/orgs/:orgId/teams */
+    createTeam(orgId: string, name: string): Promise<Team>;
+    /** GET /api/v1/teams/:teamId/workspaces */
+    listTeamWorkspaces(teamId: string): Promise<Workspace[]>;
+    /** POST /api/v1/teams/:teamId/workspaces */
+    createWorkspace(teamId: string, name: string): Promise<Workspace>;
+    /** POST /api/v1/gateways */
+    registerGateway(params: GatewayRegisterParams): Promise<GatewayRegisterResult>;
+    /** GET /api/v1/gateways */
+    listGateways(): Promise<Gateway[]>;
+    /** GET /api/v1/gateways/:id/status */
+    getGatewayStatus(gatewayId: string): Promise<GatewayStatus>;
+    /** POST /api/v1/gateways/:id/rotate */
+    rotateGatewayToken(gatewayId: string): Promise<GatewayRotateResult>;
+    /** DELETE /api/v1/gateways/:id */
+    revokeGateway(gatewayId: string, reason?: string): Promise<void>;
+    /** PATCH /api/v1/gateways/:id/config */
+    setGatewayConfig(gatewayId: string, config: GatewayConfigUpdate): Promise<GatewayConfigResult>;
+    /** PATCH /api/v1/workspace/gateway — pass null to clear the override. */
+    assignWorkspaceGateway(gatewayId: string | null): Promise<{
+        gatewayId: string | null;
+    }>;
+    /** PATCH /api/v1/orgs/:orgId/gateway — pass null to clear the org default. */
+    assignOrgGateway(orgId: string, gatewayId: string | null): Promise<{
+        gatewayId: string | null;
+    }>;
+    /** GET /api/v1/workspace/gateway-resolution */
+    resolveGateway(): Promise<GatewayResolution>;
+    /** GET /api/v1/workspace/provider-credentials */
+    listProviderCredentials(): Promise<ProviderCredentialStatus[]>;
+    /** PUT /api/v1/workspace/provider-credentials/:provider */
+    setProviderCredential(provider: string, fields: Record<string, string>): Promise<ProviderCredentialStatus>;
+    /** DELETE /api/v1/workspace/provider-credentials/:provider */
+    unsetProviderCredential(provider: string): Promise<void>;
+}
+//# sourceMappingURL=control-plane.d.ts.map

package/dist/control-plane.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane.d.ts","sourceRoot":"","sources":["../src/control-plane.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,yBAAyB,EACzB,YAAY,EACZ,eAAe,EACf,eAAe,EACf,6BAA6B,EAC7B,6BAA6B,EAC7B,eAAe,EACf,eAAe,EACf,IAAI,EACJ,SAAS,EACT,qBAAqB,EACrB,qBAAqB,EACrB,OAAO,EACP,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,SAAS,CAAA;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAQ;IACtB,OAAO,CAAC,OAAO,CAAQ;gBAEX,OAAO,EAAE,yBAAyB;YAShC,OAAO;IAuBrB,0BAA0B;IACb,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC;IAI5C;;;;;;;;;;;;OAYG;IACU,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IAIzE;;;;;OAKG;IACU,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAI5F;;;OAGG;IACU,uBAAuB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAIpG;;;;;OAKG;IACU,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IAIzE,oCAAoC;IACvB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAKtD,qCAAqC;IACxB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAInE,2CAA2C;IAC9B,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAQrE,4CAA4C;IAC/B,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAI9E,4BAA4B;IACf,eAAe,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI3F,2BAA2B;IACd,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAK/C,sCAAsC;IACzB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAIxE,uCAAuC;IAC1B,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAIhF,kCAAkC;IACrB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7E,wCAAwC;IAC3B,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAI3G,yEAAyE;IAC5D,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAIpG,8EAA8E;IACjE,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAI7G,+CAA+C;IAClC,cAAc,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAIzD,iDAAiD;IACpC,uBAAuB,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;IAQ3E,2DAA2D;IAC9C,qBAAqB,CAChC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,OAAO,CAAC,wBAAwB,CAAC;IAIpC,8DAA8D;IACjD,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGtE"}

package/dist/control-plane.js

@@ -0,0 +1,186 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ControlPlaneClient = void 0;
+const errors_1 = require("./errors");
+/**
+ * Control-plane management client (LLD #69) — org/team/gateway/credentials
+ * administration, as distinct from `ClawdeClient`'s data-plane chat calls.
+ *
+ * Deliberately a separate class, not new methods on `ClawdeClient`:
+ * `ClawdeClient.baseUrl` targets the *proxy* (default `http://localhost:4000`);
+ * the control plane is a different origin entirely (default
+ * `https://app.intutic.ai`, or a self-hosted `CONTROL_PLANE_URL`). Bolting
+ * management calls onto `ClawdeClient` would silently need a second base URL
+ * on a class whose whole contract today is "one client, one proxy."
+ *
+ * Every endpoint here is mirrored 1:1 from `tools/cli/src/commands/{org,
+ * team,gateway,credentials,whoami}.ts` — the CLI's own already-tested
+ * contracts, not re-derived. Endpoints deliberately NOT included: session
+ * establishment (`login`/`logout` — an SDK caller supplies `apiKey`
+ * directly), and local-environment/terminal concerns (`init`, `doctor`,
+ * `install-daemon`, `integrity`, `rollback`, `connect`, `exec`, `start`,
+ * `syncContext`, `skill`) that have no meaning for a library embedded in
+ * someone else's process.
+ *
+ * Works unmodified against a self-hosted control plane — there is no
+ * SaaS-vs-self-hosted branch anywhere in this file. An open-core user who
+ * runs the proxy standalone with no control plane configured simply never
+ * constructs this class (or does, points it at nothing, and gets a
+ * `ClawdeConnectionError` on the first call) — the same framing
+ * `whoami.ts` already uses: "This command needs an Intutic control plane,
+ * which open core does not include."
+ *
+ * Auth: the same `apiKey` type `ClawdeClient` accepts — a `vk_` token or a
+ * JWT both satisfy `services/control-plane/src/middleware/auth.ts`, which
+ * resolves either to an `AuthContext` with a role; endpoints gated
+ * `requireRole('OWNER','ADMIN')` server-side reject an under-privileged
+ * token exactly as they would for the CLI using the same token.
+ */
+class ControlPlaneClient {
+    apiKey;
+    baseUrl;
+    constructor(options) {
+        if (!options.apiKey) {
+            throw new Error('API key is required to initialize ControlPlaneClient.');
+        }
+        this.apiKey = options.apiKey;
+        this.baseUrl =
+            options.baseUrl || process.env.INTUTIC_CONTROL_PLANE_URL || 'https://app.intutic.ai';
+    }
+    async request(method, path, body, auth = true) {
+        const headers = { 'Content-Type': 'application/json' };
+        if (auth)
+            headers['Authorization'] = `Bearer ${this.apiKey}`;
+        let res;
+        try {
+            res = await fetch(`${this.baseUrl}${path}`, {
+                method,
+                headers,
+                body: body !== undefined ? JSON.stringify(body) : undefined,
+            });
+        }
+        catch (err) {
+            throw new errors_1.ClawdeConnectionError(`Could not reach control plane at ${this.baseUrl}: ${err.message}`);
+        }
+        if (!res.ok) {
+            const text = await res.text().catch(() => 'Unknown error');
+            throw new errors_1.ClawdeConnectionError(`Control plane ${method} ${path} failed (${res.status}): ${text}`);
+        }
+        return (await res.json());
+    }
+    /** GET /api/v1/auth/me */
+    async whoami() {
+        return this.request('GET', '/api/v1/auth/me');
+    }
+    /**
+     * POST /api/v1/auth/signup/org — unauthenticated, creates the calling user.
+     *
+     * Closed by default in production (`INTUTIC_PUBLIC_ORG_SIGNUP`, off unless
+     * a deployment has built its own anonymous domain-verification story):
+     * creating a real org auto-provisions a real managed gateway cell (LLD
+     * #71), so org creation now requires DNS domain-ownership proof, and an
+     * anonymous caller has no session to own a verification attempt against.
+     * Prefer `startDomainVerification` + `checkDomainVerification` +
+     * `createOrg` with an already-authenticated `apiKey` — the same flow the
+     * CLI's `intutic org create` and the dashboard's "Create Organization"
+     * modal use.
+     */
+    async signupOrg(params) {
+        return this.request('POST', '/api/v1/auth/signup/org', params, false);
+    }
+    /**
+     * POST /api/v1/domain-verification/start — mints a DNS TXT-record
+     * verification token for `domain`. Publish a TXT record at
+     * `txtRecordName` with value `txtRecordValue`, then poll
+     * `checkDomainVerification` until `status` is `'verified'`.
+     */
+    async startDomainVerification(domain) {
+        return this.request('POST', '/api/v1/domain-verification/start', { domain });
+    }
+    /**
+     * GET /api/v1/domain-verification/:id — re-checks DNS for the TXT record.
+     * Safe to call repeatedly; performs a fresh lookup every call.
+     */
+    async checkDomainVerification(verificationId) {
+        return this.request('GET', `/api/v1/domain-verification/${encodeURIComponent(verificationId)}`);
+    }
+    /**
+     * POST /api/v1/orgs — creates a real org from an already-authenticated
+     * caller. Requires a `verified`, unconsumed domain verification (see
+     * `startDomainVerification`); the verification is consumed atomically
+     * inside the org-insert transaction, so it backs exactly this one org.
+     */
+    async createOrg(params) {
+        return this.request('POST', '/api/v1/orgs', params);
+    }
+    /** GET /api/v1/orgs/:orgId/teams */
+    async listTeams(orgId) {
+        const res = await this.request('GET', `/api/v1/orgs/${encodeURIComponent(orgId)}/teams`);
+        return res.data ?? [];
+    }
+    /** POST /api/v1/orgs/:orgId/teams */
+    async createTeam(orgId, name) {
+        return this.request('POST', `/api/v1/orgs/${encodeURIComponent(orgId)}/teams`, { name });
+    }
+    /** GET /api/v1/teams/:teamId/workspaces */
+    async listTeamWorkspaces(teamId) {
+        const res = await this.request('GET', `/api/v1/teams/${encodeURIComponent(teamId)}/workspaces`);
+        return res.data ?? [];
+    }
+    /** POST /api/v1/teams/:teamId/workspaces */
+    async createWorkspace(teamId, name) {
+        return this.request('POST', `/api/v1/teams/${encodeURIComponent(teamId)}/workspaces`, { name });
+    }
+    /** POST /api/v1/gateways */
+    async registerGateway(params) {
+        return this.request('POST', '/api/v1/gateways', params);
+    }
+    /** GET /api/v1/gateways */
+    async listGateways() {
+        const res = await this.request('GET', '/api/v1/gateways');
+        return res.data ?? [];
+    }
+    /** GET /api/v1/gateways/:id/status */
+    async getGatewayStatus(gatewayId) {
+        return this.request('GET', `/api/v1/gateways/${encodeURIComponent(gatewayId)}/status`);
+    }
+    /** POST /api/v1/gateways/:id/rotate */
+    async rotateGatewayToken(gatewayId) {
+        return this.request('POST', `/api/v1/gateways/${encodeURIComponent(gatewayId)}/rotate`, {});
+    }
+    /** DELETE /api/v1/gateways/:id */
+    async revokeGateway(gatewayId, reason) {
+        await this.request('DELETE', `/api/v1/gateways/${encodeURIComponent(gatewayId)}`, { reason });
+    }
+    /** PATCH /api/v1/gateways/:id/config */
+    async setGatewayConfig(gatewayId, config) {
+        return this.request('PATCH', `/api/v1/gateways/${encodeURIComponent(gatewayId)}/config`, config);
+    }
+    /** PATCH /api/v1/workspace/gateway — pass null to clear the override. */
+    async assignWorkspaceGateway(gatewayId) {
+        return this.request('PATCH', '/api/v1/workspace/gateway', { gatewayId });
+    }
+    /** PATCH /api/v1/orgs/:orgId/gateway — pass null to clear the org default. */
+    async assignOrgGateway(orgId, gatewayId) {
+        return this.request('PATCH', `/api/v1/orgs/${encodeURIComponent(orgId)}/gateway`, { gatewayId });
+    }
+    /** GET /api/v1/workspace/gateway-resolution */
+    async resolveGateway() {
+        return this.request('GET', '/api/v1/workspace/gateway-resolution');
+    }
+    /** GET /api/v1/workspace/provider-credentials */
+    async listProviderCredentials() {
+        const res = await this.request('GET', '/api/v1/workspace/provider-credentials');
+        return res.data ?? [];
+    }
+    /** PUT /api/v1/workspace/provider-credentials/:provider */
+    async setProviderCredential(provider, fields) {
+        return this.request('PUT', `/api/v1/workspace/provider-credentials/${encodeURIComponent(provider)}`, fields);
+    }
+    /** DELETE /api/v1/workspace/provider-credentials/:provider */
+    async unsetProviderCredential(provider) {
+        await this.request('DELETE', `/api/v1/workspace/provider-credentials/${encodeURIComponent(provider)}`);
+    }
+}
+exports.ControlPlaneClient = ControlPlaneClient;
+//# sourceMappingURL=control-plane.js.map

package/dist/control-plane.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane.js","sourceRoot":"","sources":["../src/control-plane.ts"],"names":[],"mappings":";;;AAAA,qCAAgD;AAuBhD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAa,kBAAkB;IACrB,MAAM,CAAQ;IACd,OAAO,CAAQ;IAEvB,YAAY,OAAkC;QAC5C,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;QAC1E,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;QAC5B,IAAI,CAAC,OAAO;YACV,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,wBAAwB,CAAA;IACxF,CAAC;IAEO,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc,EAAE,IAAI,GAAG,IAAI;QAChF,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAA;QAC9E,IAAI,IAAI;YAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,IAAI,CAAC,MAAM,EAAE,CAAA;QAE5D,IAAI,GAAa,CAAA;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;gBAC1C,MAAM;gBACN,OAAO;gBACP,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;aAC5D,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,8BAAqB,CAAC,oCAAoC,IAAI,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;QACrG,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,CAAA;YAC1D,MAAM,IAAI,8BAAqB,CAAC,iBAAiB,MAAM,IAAI,IAAI,YAAY,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAA;QACpG,CAAC;QAED,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAA;IAChC,CAAC;IAED,0BAA0B;IACnB,KAAK,CAAC,MAAM;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAA;IAC/C,CAAC;IAED;;;;;;;;;;;;OAYG;IACI,KAAK,CAAC,SAAS,CAAC,MAAuB;QAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,yBAAyB,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;IACvE,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,uBAAuB,CAAC,MAAc;QACjD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,mCAAmC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IAC9E,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,uBAAuB,CAAC,cAAsB;QACzD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,+BAA+B,kBAAkB,CAAC,cAAc,CAAC,EAAE,CAAC,CAAA;IACjG,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,SAAS,CAAC,MAAuB;QAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,CAAA;IACrD,CAAC;IAED,oCAAoC;IAC7B,KAAK,CAAC,SAAS,CAAC,KAAa;QAClC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAmB,KAAK,EAAE,gBAAgB,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAC1G,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAAA;IACvB,CAAC;IAED,qCAAqC;IAC9B,KAAK,CAAC,UAAU,CAAC,KAAa,EAAE,IAAY;QACjD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1F,CAAC;IAED,2CAA2C;IACpC,KAAK,CAAC,kBAAkB,CAAC,MAAc;QAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAC5B,KAAK,EACL,iBAAiB,kBAAkB,CAAC,MAAM,CAAC,aAAa,CACzD,CAAA;QACD,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAAA;IACvB,CAAC;IAED,4CAA4C;IACrC,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,IAAY;QACvD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,iBAAiB,kBAAkB,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;IACjG,CAAC;IAED,4BAA4B;IACrB,KAAK,CAAC,eAAe,CAAC,MAA6B;QACxD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAA;IACzD,CAAC;IAED,2BAA2B;IACpB,KAAK,CAAC,YAAY;QACvB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAsB,KAAK,EAAE,kBAAkB,CAAC,CAAA;QAC9E,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAAA;IACvB,CAAC;IAED,sCAAsC;IAC/B,KAAK,CAAC,gBAAgB,CAAC,SAAiB;QAC7C,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IACxF,CAAC;IAED,uCAAuC;IAChC,KAAK,CAAC,kBAAkB,CAAC,SAAiB;QAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IAC7F,CAAC;IAED,kCAAkC;IAC3B,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,MAAe;QAC3D,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IAC/F,CAAC;IAED,wCAAwC;IACjC,KAAK,CAAC,gBAAgB,CAAC,SAAiB,EAAE,MAA2B;QAC1E,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IAClG,CAAC;IAED,yEAAyE;IAClE,KAAK,CAAC,sBAAsB,CAAC,SAAwB;QAC1D,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,2BAA2B,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;IAC1E,CAAC;IAED,8EAA8E;IACvE,KAAK,CAAC,gBAAgB,CAAC,KAAa,EAAE,SAAwB;QACnE,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,kBAAkB,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;IAClG,CAAC;IAED,+CAA+C;IACxC,KAAK,CAAC,cAAc;QACzB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,sCAAsC,CAAC,CAAA;IACpE,CAAC;IAED,iDAAiD;IAC1C,KAAK,CAAC,uBAAuB;QAClC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAC5B,KAAK,EACL,wCAAwC,CACzC,CAAA;QACD,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAAA;IACvB,CAAC;IAED,2DAA2D;IACpD,KAAK,CAAC,qBAAqB,CAChC,QAAgB,EAChB,MAA8B;QAE9B,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,0CAA0C,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;IAC9G,CAAC;IAED,8DAA8D;IACvD,KAAK,CAAC,uBAAuB,CAAC,QAAgB;QACnD,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,0CAA0C,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IACxG,CAAC;CACF;AAlLD,gDAkLC"}

package/dist/graph-identity.d.ts

@@ -0,0 +1,37 @@
+/**
+ * This client's position in the agent graph.
+ *
+ * A multi-agent run is a graph — a lead spawns workers, workers spawn their own —
+ * and the proxy can only reason about its shape (fan-out, recursion depth,
+ * orphaned children, fleet spend) if each request says which node it came from.
+ * Nothing set that: the proxy read `baggage` and `x-intutic-*` headers no
+ * component emitted, so `graph_id` always fell back to `session_id` and every
+ * request looked like a graph of one.
+ *
+ * Identity is inherited through the environment, because that is what a spawned
+ * child process gets for free. An agent that runs another agent is recorded as
+ * its parent without either of them being told anything.
+ *
+ * Client-supplied and unverifiable, like the headers it complements: it describes
+ * shape for observability, never authorisation. The proxy clamps depth so a
+ * caller cannot fake a recursion breach.
+ *
+ * @module
+ */
+export interface GraphIdentity {
+    graphId: string;
+    nodeId: string;
+    /** Empty for a root node. */
+    parentId: string;
+    depth: number;
+}
+/**
+ * Derive this client's identity, preferring one supplied explicitly.
+ *
+ * An explicit identity is how a host application that manages its own fan-out —
+ * one process, many logical agents — describes a graph the environment cannot.
+ */
+export declare function deriveIdentity(explicit?: Partial<GraphIdentity>): GraphIdentity;
+/** The headers the proxy reads. The SDK controls its own requests, so no path prefix is needed. */
+export declare function identityHeaders(identity: GraphIdentity): Record<string, string>;
+//# sourceMappingURL=graph-identity.d.ts.map

package/dist/graph-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-identity.d.ts","sourceRoot":"","sources":["../src/graph-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAUH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,6BAA6B;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;CACd;AAMD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,aAAa,CAyB/E;AAED,mGAAmG;AACnG,wBAAgB,eAAe,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAO/E"}

package/dist/graph-identity.js

@@ -0,0 +1,71 @@
+"use strict";
+/**
+ * This client's position in the agent graph.
+ *
+ * A multi-agent run is a graph — a lead spawns workers, workers spawn their own —
+ * and the proxy can only reason about its shape (fan-out, recursion depth,
+ * orphaned children, fleet spend) if each request says which node it came from.
+ * Nothing set that: the proxy read `baggage` and `x-intutic-*` headers no
+ * component emitted, so `graph_id` always fell back to `session_id` and every
+ * request looked like a graph of one.
+ *
+ * Identity is inherited through the environment, because that is what a spawned
+ * child process gets for free. An agent that runs another agent is recorded as
+ * its parent without either of them being told anything.
+ *
+ * Client-supplied and unverifiable, like the headers it complements: it describes
+ * shape for observability, never authorisation. The proxy clamps depth so a
+ * caller cannot fake a recursion breach.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deriveIdentity = deriveIdentity;
+exports.identityHeaders = identityHeaders;
+/** Environment carriers, shared with the `intutic` CLI. */
+const ENV_GRAPH_ID = 'INTUTIC_GRAPH_ID';
+const ENV_NODE_ID = 'INTUTIC_NODE_ID';
+const ENV_DEPTH = 'INTUTIC_DEPTH';
+/** Matches the proxy's clamp: a graph this deep is a runaway to detect, not a number to keep. */
+const MAX_DEPTH = 1024;
+function newIdentifier(prefix) {
+    return `${prefix}${Math.random().toString(16).slice(2, 10)}${Date.now().toString(16).slice(-6)}`;
+}
+/**
+ * Derive this client's identity, preferring one supplied explicitly.
+ *
+ * An explicit identity is how a host application that manages its own fan-out —
+ * one process, many logical agents — describes a graph the environment cannot.
+ */
+function deriveIdentity(explicit) {
+    const env = typeof process !== 'undefined' ? process.env : {};
+    const inheritedGraph = explicit?.graphId ?? env[ENV_GRAPH_ID];
+    const inheritedNode = env[ENV_NODE_ID];
+    if (!inheritedGraph) {
+        return {
+            graphId: newIdentifier('g_'),
+            nodeId: explicit?.nodeId ?? newIdentifier('n_'),
+            parentId: explicit?.parentId ?? '',
+            depth: explicit?.depth ?? 0,
+        };
+    }
+    const parsed = Number.parseInt(env[ENV_DEPTH] ?? '0', 10);
+    const inheritedDepth = Number.isFinite(parsed) ? Math.max(0, parsed) : 0;
+    return {
+        graphId: inheritedGraph,
+        nodeId: explicit?.nodeId ?? newIdentifier('n_'),
+        // The process that spawned this one is the parent, by definition.
+        parentId: explicit?.parentId ?? inheritedNode ?? '',
+        depth: explicit?.depth ?? Math.min(inheritedDepth + 1, MAX_DEPTH),
+    };
+}
+/** The headers the proxy reads. The SDK controls its own requests, so no path prefix is needed. */
+function identityHeaders(identity) {
+    return {
+        'X-Intutic-Graph-Id': identity.graphId,
+        'X-Intutic-Node-Id': identity.nodeId,
+        'X-Intutic-Parent-Session': identity.parentId,
+        'X-Intutic-Depth': String(identity.depth),
+    };
+}
+//# sourceMappingURL=graph-identity.js.map

package/dist/graph-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-identity.js","sourceRoot":"","sources":["../src/graph-identity.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;AA4BH,wCAyBC;AAGD,0CAOC;AA7DD,2DAA2D;AAC3D,MAAM,YAAY,GAAG,kBAAkB,CAAA;AACvC,MAAM,WAAW,GAAG,iBAAiB,CAAA;AACrC,MAAM,SAAS,GAAG,eAAe,CAAA;AAEjC,iGAAiG;AACjG,MAAM,SAAS,GAAG,IAAI,CAAA;AAUtB,SAAS,aAAa,CAAC,MAAc;IACnC,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AAClG,CAAC;AAED;;;;;GAKG;AACH,SAAgB,cAAc,CAAC,QAAiC;IAC9D,MAAM,GAAG,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IAE7D,MAAM,cAAc,GAAG,QAAQ,EAAE,OAAO,IAAI,GAAG,CAAC,YAAY,CAAC,CAAA;IAC7D,MAAM,aAAa,GAAG,GAAG,CAAC,WAAW,CAAC,CAAA;IAEtC,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC;YAC5B,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,aAAa,CAAC,IAAI,CAAC;YAC/C,QAAQ,EAAE,QAAQ,EAAE,QAAQ,IAAI,EAAE;YAClC,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,CAAC;SAC5B,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAA;IACzD,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAExE,OAAO;QACL,OAAO,EAAE,cAAc;QACvB,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,aAAa,CAAC,IAAI,CAAC;QAC/C,kEAAkE;QAClE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,IAAI,aAAa,IAAI,EAAE;QACnD,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,EAAE,SAAS,CAAC;KAClE,CAAA;AACH,CAAC;AAED,mGAAmG;AACnG,SAAgB,eAAe,CAAC,QAAuB;IACrD,OAAO;QACL,oBAAoB,EAAE,QAAQ,CAAC,OAAO;QACtC,mBAAmB,EAAE,QAAQ,CAAC,MAAM;QACpC,0BAA0B,EAAE,QAAQ,CAAC,QAAQ;QAC7C,iBAAiB,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;KAC1C,CAAA;AACH,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 export { ClawdeClient } from './client';
+export { ControlPlaneClient } from './control-plane';
 export * from './types';
 export * from './errors';
 export { resolveContext } from './context-resolver';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AACvC,cAAc,SAAS,CAAA;AACvB,cAAc,UAAU,CAAA;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACpD,cAAc,SAAS,CAAA;AACvB,cAAc,UAAU,CAAA;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA"}

package/dist/index.js

@@ -14,9 +14,11 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.normalizeResponse = exports.normalizeRequest = exports.resolveContext = exports.ClawdeClient = void 0;
+exports.normalizeResponse = exports.normalizeRequest = exports.resolveContext = exports.ControlPlaneClient = exports.ClawdeClient = void 0;
 var client_1 = require("./client");
 Object.defineProperty(exports, "ClawdeClient", { enumerable: true, get: function () { return client_1.ClawdeClient; } });
+var control_plane_1 = require("./control-plane");
+Object.defineProperty(exports, "ControlPlaneClient", { enumerable: true, get: function () { return control_plane_1.ControlPlaneClient; } });
 __exportStar(require("./types"), exports);
 __exportStar(require("./errors"), exports);
 var context_resolver_1 = require("./context-resolver");

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,mCAAuC;AAA9B,sGAAA,YAAY,OAAA;AACrB,0CAAuB;AACvB,2CAAwB;AACxB,uDAAmD;AAA1C,kHAAA,cAAc,OAAA;AACvB,qDAAuE;AAA9D,mHAAA,gBAAgB,OAAA;AAAE,oHAAA,iBAAiB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,mCAAuC;AAA9B,sGAAA,YAAY,OAAA;AACrB,iDAAoD;AAA3C,mHAAA,kBAAkB,OAAA;AAC3B,0CAAuB;AACvB,2CAAwB;AACxB,uDAAmD;AAA1C,kHAAA,cAAc,OAAA;AACvB,qDAAuE;AAA9D,mHAAA,gBAAgB,OAAA;AAAE,oHAAA,iBAAiB,OAAA"}

package/dist/types.d.ts

@@ -1,10 +1,23 @@
 export interface ClawdeClientOptions {
     apiKey: string;
     baseUrl?: string;
+    /**
+     * Control-plane base URL used by checkBudget() (a different origin from
+     * `baseUrl` — see control-plane.ts's doc comment). Default:
+     * INTUTIC_CONTROL_PLANE_URL env or https://app.intutic.ai.
+     */
+    controlPlaneUrl?: string;
     provider?: 'openai' | 'anthropic' | 'google';
     autoContext?: boolean;
     timeout?: number;
     retries?: number;
+    /**
+     * This client's position in the agent graph. Omit and it is inherited from the
+     * environment, so a spawned agent is automatically a child of its spawner.
+     * Supply it when one process drives several logical agents and the environment
+     * cannot describe the shape.
+     */
+    graphIdentity?: Partial<import('./graph-identity').GraphIdentity>;
 }
 export interface ChatMessage {
     role: 'system' | 'user' | 'assistant' | 'tool';
@@ -68,4 +81,153 @@ export type EventCallback = (data: {
     budgetPctUsed?: number;
     [key: string]: any;
 }) => void | Promise<void>;
+export interface ControlPlaneClientOptions {
+    apiKey: string;
+    baseUrl?: string;
+}
+export interface WhoamiResult {
+    email: string;
+    memberId: string;
+    workspaceId: string;
+    role: string;
+}
+export interface OrgSignupParams {
+    email: string;
+    password: string;
+    name: string;
+    orgName: string;
+}
+export interface OrgSignupResult {
+    user: {
+        id: string;
+        email: string;
+        name: string;
+        emailVerified: boolean;
+    };
+    org: {
+        id: string;
+        name: string;
+        planTier: string;
+        trialExpiresAt: string;
+    };
+    workspace: {
+        id: string;
+        name: string;
+        planTier: string;
+        trialExpiresAt: string;
+    };
+    accessToken: string;
+    refreshToken: string;
+    cliInstall: string;
+    isNewUser: boolean;
+}
+export interface StartDomainVerificationResult {
+    verificationId: string;
+    domain: string;
+    txtRecordName: string;
+    txtRecordValue: string;
+    expiresAt: string;
+}
+export interface CheckDomainVerificationResult {
+    verificationId: string;
+    domain: string;
+    status: 'pending' | 'verified' | 'consumed' | 'expired';
+    txtRecordName: string;
+    txtRecordValue: string;
+    verifiedAt: string | null;
+}
+export interface CreateOrgParams {
+    orgName: string;
+    domain: string;
+    verificationId: string;
+    /** Gateway cell region ('us' | 'eu' | ...). Omit for the deployment's home region; server-validated. */
+    region?: string;
+}
+export interface CreateOrgResult {
+    orgId: string;
+    teamId: string;
+    workspaceId: string;
+    name: string;
+    planTier: string;
+    region?: string;
+}
+export interface Team {
+    teamId: string;
+    orgId: string;
+    name: string;
+    slug: string;
+    createdAt: string;
+}
+export interface Workspace {
+    workspaceId: string;
+    name: string;
+    slug: string;
+    planTier: string;
+    createdAt: string;
+}
+export interface GatewayRegisterParams {
+    name: string;
+    deploymentTarget: 'docker' | 'kubernetes' | 'bare_metal';
+}
+export interface GatewayRegisterResult {
+    gatewayId: string;
+    name: string;
+    deploymentTarget: string;
+    status: string;
+    /** Shown once — not retrievable again after this response. */
+    token: string;
+    instructions: string;
+}
+export interface Gateway {
+    gatewayId: string;
+    name: string;
+    deploymentTarget: string;
+    status: string;
+    keyPrefix: string;
+    lastHeartbeatAt: string | null;
+    proxyVersion: string | null;
+    createdAt: string;
+    revokedAt: string | null;
+}
+export interface GatewayRotateResult {
+    gatewayId: string;
+    /** Shown once — not retrievable again after this response. */
+    token: string;
+    previousTokenValidUntil: string;
+    instructions: string;
+}
+export interface GatewayStatus {
+    status: 'online' | 'degraded' | 'unreachable' | 'pending';
+    proxyVersion: string | null;
+    uptimeSeconds: number | null;
+    activeWorkspaces: number | null;
+    litellmReachable: boolean | null;
+    lastError: string | null;
+    reportedAt: string | null;
+}
+export interface GatewayConfigUpdate {
+    requireVk?: boolean;
+    requireProvisionedKey?: boolean;
+}
+export interface GatewayConfigResult {
+    config: Record<string, unknown>;
+    configVersion: number;
+}
+export interface GatewayResolution {
+    source: 'workspace' | 'org' | 'default';
+    gateway: {
+        gatewayId: string;
+        name: string;
+        deploymentTarget: string;
+        status: string;
+    } | null;
+    staleAssignment?: string;
+}
+export interface ProviderCredentialStatus {
+    provider: string;
+    routingLive: boolean;
+    provisioned: boolean;
+    lastFour: string | null;
+    updatedAt: string | null;
+}
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAA;IAC5C,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAA;IAC9C,OAAO,EAAE,MAAM,GAAG,GAAG,EAAE,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,UAAU,CAAC,EAAE,GAAG,EAAE,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,WAAW,EAAE,CAAA;IACvB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,GAAG,EAAE,CAAA;IACb,WAAW,CAAC,EAAE,GAAG,CAAA;IACjB,eAAe,CAAC,EAAE,GAAG,CAAA;IACrB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,CAAA;QACb,OAAO,EAAE,WAAW,CAAA;QACpB,aAAa,EAAE,MAAM,CAAA;KACtB,EAAE,CAAA;IACH,KAAK,CAAC,EAAE;QACN,aAAa,EAAE,MAAM,CAAA;QACrB,iBAAiB,EAAE,MAAM,CAAA;QACzB,YAAY,EAAE,MAAM,CAAA;KACrB,CAAA;IAED,OAAO,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAA;IAC5D,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,eAAe,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAA;IACxD,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAA;IAChB,aAAa,EAAE,MAAM,CAAA;IACrB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE;IACjC,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAA;IAC3D,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CACnB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,EAAE,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAA;IAC5C,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC,OAAO,kBAAkB,EAAE,aAAa,CAAC,CAAA;CAClE;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAA;IAC9C,OAAO,EAAE,MAAM,GAAG,GAAG,EAAE,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,UAAU,CAAC,EAAE,GAAG,EAAE,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,WAAW,EAAE,CAAA;IACvB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,GAAG,EAAE,CAAA;IACb,WAAW,CAAC,EAAE,GAAG,CAAA;IACjB,eAAe,CAAC,EAAE,GAAG,CAAA;IACrB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,CAAA;QACb,OAAO,EAAE,WAAW,CAAA;QACpB,aAAa,EAAE,MAAM,CAAA;KACtB,EAAE,CAAA;IACH,KAAK,CAAC,EAAE;QACN,aAAa,EAAE,MAAM,CAAA;QACrB,iBAAiB,EAAE,MAAM,CAAA;QACzB,YAAY,EAAE,MAAM,CAAA;KACrB,CAAA;IAED,OAAO,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAA;IAC5D,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,eAAe,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAA;IACxD,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAA;IAChB,aAAa,EAAE,MAAM,CAAA;IACrB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE;IACjC,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAA;IAC3D,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CACnB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;AAI1B,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAA;IACzE,GAAG,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAA;IAC3E,SAAS,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAA;IACjF,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,OAAO,CAAA;CACnB;AAED,MAAM,WAAW,6BAA6B;IAC5C,cAAc,EAAE,MAAM,CAAA;IACtB,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,EAAE,MAAM,CAAA;IACrB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,6BAA6B;IAC5C,cAAc,EAAE,MAAM,CAAA;IACtB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,CAAA;IACvD,aAAa,EAAE,MAAM,CAAA;IACrB,cAAc,EAAE,MAAM,CAAA;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;IACtB,wGAAwG;IACxG,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,IAAI;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,gBAAgB,EAAE,QAAQ,GAAG,YAAY,GAAG,YAAY,CAAA;CACzD;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,gBAAgB,EAAE,MAAM,CAAA;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,8DAA8D;IAC9D,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,OAAO;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,gBAAgB,EAAE,MAAM,CAAA;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,8DAA8D;IAC9D,KAAK,EAAE,MAAM,CAAA;IACb,uBAAuB,EAAE,MAAM,CAAA;IAC/B,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,aAAa,GAAG,SAAS,CAAA;IACzD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,gBAAgB,EAAE,OAAO,GAAG,IAAI,CAAA;IAChC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,qBAAqB,CAAC,EAAE,OAAO,CAAA;CAChC;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,WAAW,GAAG,KAAK,GAAG,SAAS,CAAA;IACvC,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IAC7F,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,OAAO,CAAA;IACpB,WAAW,EAAE,OAAO,CAAA;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intutic/clawde",
-  "version": "1.10.0",
+  "version": "1.10.1",
   "publishConfig": {
     "access": "public"
   },
@@ -18,12 +18,13 @@
   "dependencies": {},
   "devDependencies": {
     "typescript": "^5.5",
-    "vitest": "^3"
+    "vitest": "^4"
   },
   "engines": {
     "node": ">=18"
   },
   "scripts": {
+    "lint": "eslint src",
     "build": "tsc",
     "test": "vitest run --passWithNoTests",
     "typecheck": "tsc --noEmit"