@intutic/cli 0.1.0 → 0.2.0

package/dist/commands/connect.d.ts

@@ -1,18 +1,20 @@
 /**
  * `intutic connect` — Start the sync daemon.
  *
- * Runs a 30-second polling loop that:
- * 1. Fetches config from control plane (active SOPs, proxy URL)
- * 2. Writes SOP content to harness config files
- * 3. Computes SHA-256 hashes of written files
- * 4. Reports hashes + status to control plane
+ * Runs a persistent WebSocket client for real-time config updates,
+ * a real-time filesystem watcher for configuration drift detection,
+ * and a 30-second HTTP polling loop as a secondary fallback.
  *
+ * LLD #14 — connect.ts
  * HLD §3.14 — Real-Time State Mirroring
- * LLD #8 — Sync Daemon / CLI
+ *
  * @module
  */
 export declare function runConnect(opts: {
     dev?: boolean;
     interval?: string;
+    workspaceId?: string;
+    apiKey?: string;
+    controlPlaneUrl?: string;
 }): Promise<void>;
 //# sourceMappingURL=connect.d.ts.map

package/dist/commands/connect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../src/commands/connect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAcH,wBAAsB,UAAU,CAAC,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAgK1F"}
+{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../src/commands/connect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAkCH,wBAAsB,UAAU,CAAC,IAAI,EAAE;IACrC,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiahB"}

package/dist/commands/connect.js

@@ -1,146 +1,380 @@
 /**
  * `intutic connect` — Start the sync daemon.
  *
- * Runs a 30-second polling loop that:
- * 1. Fetches config from control plane (active SOPs, proxy URL)
- * 2. Writes SOP content to harness config files
- * 3. Computes SHA-256 hashes of written files
- * 4. Reports hashes + status to control plane
+ * Runs a persistent WebSocket client for real-time config updates,
+ * a real-time filesystem watcher for configuration drift detection,
+ * and a 30-second HTTP polling loop as a secondary fallback.
  *
+ * LLD #14 — connect.ts
  * HLD §3.14 — Real-Time State Mirroring
- * LLD #8 — Sync Daemon / CLI
+ *
  * @module
  */
+import * as node_path from 'node:path';
+import * as node_fs from 'node:fs/promises';
 import { log } from '../lib/logger.js';
-import { loadCredentials, loadConfig, saveConfig, loadIntegrity, saveIntegrity } from '../config/store.js';
+import { loadCredentials, loadConfig, saveConfig, loadIntegrity, saveIntegrity, } from '../config/store.js';
 import { resolveControlPlaneUrl } from '../config/paths.js';
 import { createApiClient } from '../lib/api.js';
 import { getAdapter } from '../harness/detector.js';
+import { printOnboardingGuide } from '../lib/onboarding.js';
 import { newIso } from '@intutic/id';
 import pc from 'picocolors';
+import { SyncWsClient, startWatcher, updatePreToolUseHooks, injectMcpServer, guardSettingsFile, writeRuntimeEnv, runComplianceProbes, drainHookEvents, } from '@intutic/sync-daemon';
+import { watch } from 'chokidar';
 const DEFAULT_POLL_INTERVAL = 30_000;
 export async function runConnect(opts) {
     // 1. Load credentials + config
-    const creds = loadCredentials();
+    let creds = await loadCredentials();
+    if (opts.workspaceId && opts.apiKey) {
+        creds = {
+            workspaceId: opts.workspaceId,
+            apiKey: opts.apiKey,
+            email: 'daemon@intutic.ai',
+            controlPlaneUrl: opts.controlPlaneUrl ?? 'https://api.intutic.ai',
+            storedAt: newIso(),
+        };
+    }
     if (!creds) {
         log.error('Not authenticated. Run `intutic login` first.');
         process.exit(1);
     }
-    const config = loadConfig();
+    let config = loadConfig();
+    if (!config && opts.workspaceId && opts.apiKey) {
+        config = {
+            workspaceId: opts.workspaceId,
+            harnesses: [],
+            configVersion: 0,
+            devMode: opts.dev || false,
+        };
+    }
     if (!config) {
         log.error('Workspace not initialized. Run `intutic init` first.');
         process.exit(1);
     }
-    const devMode = opts.dev || process.env.INTUTIC_DEV === '1' || config.devMode;
-    const controlPlaneUrl = resolveControlPlaneUrl(devMode);
+    const safeCreds = creds;
+    const safeConfig = config;
+    const devMode = opts.dev || process.env.INTUTIC_DEV === '1' || safeConfig.devMode;
+    const controlPlaneUrl = opts.controlPlaneUrl || resolveControlPlaneUrl(devMode);
     const pollInterval = opts.interval ? parseInt(opts.interval, 10) : DEFAULT_POLL_INTERVAL;
     const connectedSince = newIso();
-    const client = createApiClient(controlPlaneUrl, creds.apiKey);
+    const client = createApiClient(controlPlaneUrl, safeCreds.apiKey);
     log.header('Intutic — Sync Daemon');
-    log.field('Workspace', creds.workspaceId);
+    log.field('Workspace', safeCreds.workspaceId);
     log.field('Control Plane', controlPlaneUrl);
     log.field('Poll Interval', `${pollInterval / 1000}s`);
-    log.field('Harnesses', config.harnesses.join(', ') || '(none)');
-    console.log('');
-    log.info('Starting sync loop... (Ctrl+C to stop)');
+    log.field('Harnesses', safeConfig.harnesses.join(', ') || '(none)');
+    // Print onboarding setup instructions for active harnesses
+    printOnboardingGuide(safeConfig.harnesses, safeCreds.apiKey, devMode);
+    log.info('Starting sync daemon... (Ctrl+C to stop)');
     console.log('');
     // 2. AbortController for clean shutdown
     const ac = new AbortController();
     const shutdown = () => {
-        log.info('Shutting down...');
+        log.info('Shutting down sync daemon...');
         ac.abort();
     };
     process.on('SIGINT', shutdown);
     process.on('SIGTERM', shutdown);
-    // 3. Sync loop
-    let localConfigVersion = config.configVersion;
-    while (!ac.signal.aborted) {
-        try {
-            // a. Fetch config from control plane
-            const syncConfig = await client.fetchConfig(creds.workspaceId);
-            let sopsWritten = 0;
-            // b. If config version is newer, write to harness files
-            if (syncConfig.configVersion > localConfigVersion) {
-                for (const harnessType of config.harnesses) {
-                    const adapter = getAdapter(harnessType);
-                    if (!adapter)
-                        continue;
-                    const targetSops = syncConfig.sops.filter((sop) => sop.harnessTargets.includes(harnessType));
-                    if (targetSops.length === 0)
-                        continue;
-                    const written = await adapter.writeConfig(config.workspaceRoot, targetSops, syncConfig.proxyUrl);
-                    if (written) {
-                        sopsWritten += targetSops.length;
-                    }
-                }
-                localConfigVersion = syncConfig.configVersion;
-                saveConfig({ ...config, configVersion: localConfigVersion });
-            }
-            // c. Compute file hashes + update integrity store
-            const fileHashes = [];
-            const canonicalHashes = {};
-            // Build canonical hash map from synced SOPs
-            const integrity = loadIntegrity(config.workspaceRoot);
-            if (integrity) {
-                Object.assign(canonicalHashes, integrity.files);
-            }
-            for (const harnessType of config.harnesses) {
+    let localConfigVersion = safeConfig.configVersion;
+    let lastCachedConfig = null;
+    // 3. Define configuration applier function
+    async function applySyncConfig(syncConfig, force = false) {
+        let sopsWritten = 0;
+        lastCachedConfig = syncConfig;
+        if (syncConfig.configVersion > localConfigVersion || force) {
+            log.info(`Applying configuration v${syncConfig.configVersion}...`);
+            // a. Write configs for all active harnesses
+            for (const harnessType of safeConfig.harnesses) {
                 const adapter = getAdapter(harnessType);
-                if (!adapter || !adapter.configFileName)
+                if (!adapter)
                     continue;
-                const currentHash = await adapter.readCurrentHash(config.workspaceRoot);
-                if (!currentHash)
+                const targetSops = syncConfig.sops.filter((sop) => sop.harnessTargets.includes(harnessType));
+                if (targetSops.length === 0 && !force)
                     continue;
-                const canonical = canonicalHashes[adapter.configFileName] ?? currentHash;
-                fileHashes.push({
-                    filePath: adapter.configFileName,
-                    localHash: currentHash,
-                    canonicalHash: canonical,
-                    drifted: currentHash !== canonical,
-                });
-                // Update canonical hash to current
-                canonicalHashes[adapter.configFileName] = currentHash;
+                const written = await adapter.writeConfig(safeConfig.workspaceRoot, targetSops, syncConfig.proxyUrl);
+                if (written) {
+                    sopsWritten += targetSops.length;
+                }
             }
-            // Save integrity store
-            saveIntegrity(config.workspaceRoot, {
-                lastSyncAt: newIso(),
-                configVersion: localConfigVersion,
-                files: canonicalHashes,
+            // b. Invalidate/update Claude Code hooks and settings
+            if (safeConfig.harnesses.includes('claude-code')) {
+                try {
+                    await updatePreToolUseHooks(safeConfig.workspaceRoot, syncConfig.sops, syncConfig.settings);
+                }
+                catch (err) {
+                    log.warn(`Failed to update Claude Code hooks: ${err instanceof Error ? err.message : String(err)}`);
+                }
+            }
+            // c. Inject + proxy-wrap MCP servers across all supported harnesses
+            try {
+                await injectMcpServer(safeConfig.workspaceRoot, safeCreds.workspaceId);
+            }
+            catch (err) {
+                log.warn(`Failed to inject MCP server configs: ${err instanceof Error ? err.message : String(err)}`);
+            }
+            localConfigVersion = syncConfig.configVersion;
+            saveConfig({ ...safeConfig, configVersion: localConfigVersion });
+        }
+        // c. Compute file hashes + update integrity store
+        const fileHashes = [];
+        const canonicalHashes = {};
+        // Load current integrity file list
+        const integrity = loadIntegrity(safeConfig.workspaceRoot);
+        if (integrity) {
+            Object.assign(canonicalHashes, integrity.files);
+        }
+        for (const harnessType of safeConfig.harnesses) {
+            const adapter = getAdapter(harnessType);
+            if (!adapter || !adapter.configFileName)
+                continue;
+            const currentHash = await adapter.readCurrentHash(safeConfig.workspaceRoot);
+            if (!currentHash)
+                continue;
+            const canonical = canonicalHashes[adapter.configFileName] ?? currentHash;
+            fileHashes.push({
+                filePath: adapter.configFileName,
+                localHash: currentHash,
+                canonicalHash: canonical,
+                drifted: currentHash !== canonical,
             });
-            // d. Report hashes to control plane
-            let driftCount = 0;
-            if (fileHashes.length > 0) {
+            // Update canonical hash to current
+            canonicalHashes[adapter.configFileName] = currentHash;
+        }
+        // Save integrity store
+        saveIntegrity(safeConfig.workspaceRoot, {
+            lastSyncAt: newIso(),
+            configVersion: localConfigVersion,
+            files: canonicalHashes,
+        });
+        // d. Report hashes to control plane
+        let driftCount = 0;
+        if (fileHashes.length > 0) {
+            try {
                 const hashReport = await client.reportHashes({
-                    workspaceId: creds.workspaceId,
-                    harnessType: config.harnesses[0],
+                    workspaceId: safeCreds.workspaceId,
+                    harnessType: safeConfig.harnesses[0],
                     files: fileHashes,
                     reportedAt: newIso(),
                 });
                 driftCount = hashReport.driftCount;
             }
-            // e. Report status
+            catch (err) {
+                log.warn(`Failed to report integrity hashes: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+        // e. Report status heartbeat
+        try {
             await client.reportStatus({
-                workspaceId: creds.workspaceId,
+                workspaceId: safeCreds.workspaceId,
                 configVersion: localConfigVersion,
                 connectedSince,
                 lastSyncAt: newIso(),
-                harnesses: config.harnesses.map((h) => ({
+                harnesses: safeConfig.harnesses.map((h) => ({
                     type: h,
                     configPath: getAdapter(h)?.configFileName ?? '',
                     detected: true,
                     lastWriteAt: sopsWritten > 0 ? newIso() : null,
                 })),
             });
-            // f. Log result
-            const driftLabel = driftCount > 0 ? pc.yellow(` — ${driftCount} drift(s)`) : '';
-            log.dim(`[sync] Config v${localConfigVersion} — ${sopsWritten} SOPs synced${driftLabel} — next check in ${pollInterval / 1000}s`);
         }
         catch (err) {
-            // Per-iteration error — log and continue
-            log.error(`Sync failed: ${err instanceof Error ? err.message : String(err)}`);
-            log.dim('Will retry next interval...');
+            log.warn(`Failed to send daemon heartbeat: ${err instanceof Error ? err.message : String(err)}`);
+        }
+        const driftLabel = driftCount > 0 ? pc.yellow(` — ${driftCount} drift(s) detected`) : '';
+        log.dim(`[sync] Config v${localConfigVersion} — ${sopsWritten} SOPs synced${driftLabel}`);
+        // Refresh runtime env with resolved settings
+        try {
+            await writeRuntimeEnv({
+                controlPlaneUrl,
+                apiKey: safeCreds.apiKey,
+                workspaceId: safeCreds.workspaceId,
+                mcpProxyFailBehavior: syncConfig.settings?.mcpProxyFailBehavior,
+                mcpProxyMode: syncConfig.settings?.mcpProxyMode,
+                bypassEnforcementTier: syncConfig.settings?.bypassEnforcementTier,
+            });
+        }
+        catch (err) {
+            log.warn(`Could not write runtime env file (non-fatal): ${err instanceof Error ? err.message : String(err)}`);
+        }
+        return sopsWritten;
+    }
+    // Helper to run compliance probes (Phase 6)
+    const runProbes = async () => {
+        try {
+            const hookEventsLog = node_path.join(safeConfig.workspaceRoot, '.intutic', 'events', 'hook-events.jsonl');
+            await node_fs.mkdir(node_path.dirname(hookEventsLog), { recursive: true });
+            const probeResults = await runComplianceProbes(safeCreds.workspaceId);
+            let hasBypass = false;
+            for (const res of probeResults) {
+                if (!res.contained && res.incident) {
+                    const entry = JSON.stringify(res.incident) + '\n';
+                    await node_fs.appendFile(hookEventsLog, entry, 'utf-8');
+                    hasBypass = true;
+                }
+            }
+            if (hasBypass) {
+                log.warn('[Security] Network containment bypass detected! Incident recorded.');
+            }
+        }
+        catch (err) {
+            log.warn(`Compliance probes failed (non-fatal): ${err instanceof Error ? err.message : String(err)}`);
+        }
+    };
+    // Helper to drain hook events (WS-A)
+    const runDrain = async () => {
+        try {
+            const drained = await drainHookEvents(safeConfig.workspaceRoot, controlPlaneUrl, safeCreds.apiKey);
+            if (drained > 0) {
+                log.info(`[sync-daemon] Drained ${drained} hook governance events to control plane`);
+            }
+        }
+        catch (err) {
+            log.warn(`[sync-daemon] Hook event drain error (non-fatal): ${err instanceof Error ? err.message : String(err)}`);
+        }
+    };
+    // Step 0: Write runtime env file (hook scripts source this for credentials)
+    try {
+        await writeRuntimeEnv({
+            controlPlaneUrl,
+            apiKey: safeCreds.apiKey,
+            workspaceId: safeCreds.workspaceId,
+        });
+    }
+    catch (err) {
+        log.warn(`Could not write runtime env file (non-fatal): ${err instanceof Error ? err.message : String(err)}`);
+    }
+    // 4. Start WebSocket client
+    const wsClient = new SyncWsClient({
+        controlPlaneUrl,
+        apiKey: safeCreds.apiKey,
+        workspaceId: safeCreds.workspaceId,
+        onConfigUpdate: async (syncConfig) => {
+            try {
+                await applySyncConfig(syncConfig);
+            }
+            catch (err) {
+                log.error(`Failed to apply push configuration: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        },
+        signal: ac.signal,
+    });
+    wsClient.connect();
+    // FSEvents-driven hook event drain
+    const hookEventsLog = node_path.join(safeConfig.workspaceRoot, '.intutic', 'events', 'hook-events.jsonl');
+    let fsWatcher = null;
+    let drainSafetyTimer = null;
+    try {
+        await node_fs.mkdir(node_path.dirname(hookEventsLog), { recursive: true });
+        fsWatcher = watch(hookEventsLog, { ignoreInitial: true, persistent: false });
+        fsWatcher.on('change', runDrain);
+        fsWatcher.on('add', runDrain);
+    }
+    catch (err) {
+        // chokidar unavailable - rely on fallback
+    }
+    // 60-second safety-net drain poll
+    drainSafetyTimer = setInterval(runDrain, 60_000);
+    // Run initial compliance check on startup
+    await runProbes();
+    // 5. Start Filesystem Watcher
+    const watcher = startWatcher(safeConfig.workspaceRoot, safeConfig.harnesses, async (changedPath) => {
+        const filename = node_path.basename(changedPath);
+        // A. Handle git-context.json
+        if (filename === 'git-context.json') {
+            try {
+                const raw = await node_fs.readFile(changedPath, 'utf-8');
+                const data = JSON.parse(raw);
+                wsClient.send({
+                    type: 'context_report',
+                    git: data.git,
+                });
+                log.info(`Git context reported to control plane: branch=${data.git?.branch}`);
+            }
+            catch (err) {
+                log.warn(`Failed to sync Git context metadata: ${err instanceof Error ? err.message : String(err)}`);
+            }
+            return;
+        }
+        // B. Handle Claude Code settings.json tamper detection (privilege escalation guard)
+        if (filename === 'settings.json' || filename === 'settings.local.json') {
+            try {
+                const sops = lastCachedConfig?.sops ?? [];
+                const tampered = await guardSettingsFile(changedPath, safeConfig.workspaceRoot, sops);
+                if (tampered) {
+                    log.warn(`[Security] Governance settings tamper detected and restored: ${changedPath}`);
+                    wsClient.send({
+                        type: 'drift_report',
+                        harnessType: 'claude-code',
+                        filePath: changedPath,
+                        localHash: '',
+                        canonicalHash: '',
+                    });
+                }
+            }
+            catch (err) {
+                log.error(`Settings guard error: ${err instanceof Error ? err.message : String(err)}`);
+            }
+            return;
+        }
+        // B. Handle governed harness file drift detection
+        const matchingHarness = safeConfig.harnesses.find((h) => getAdapter(h)?.configFileName === filename);
+        if (!matchingHarness)
+            return;
+        const adapter = getAdapter(matchingHarness);
+        if (!adapter)
+            return;
+        const currentHash = await adapter.readCurrentHash(safeConfig.workspaceRoot);
+        const integrity = loadIntegrity(safeConfig.workspaceRoot);
+        if (!integrity)
+            return;
+        const canonical = integrity.files[adapter.configFileName] ?? '';
+        if (currentHash !== canonical) {
+            log.warn(`Governed config file "${filename}" modification detected! Reverting to approved baseline...`);
+            // Backup drifted version first
+            try {
+                const content = await node_fs.readFile(changedPath, 'utf-8');
+                const backupPath = changedPath + '.drift-backup';
+                await node_fs.writeFile(backupPath, content, 'utf-8');
+                log.dim(`Drifted file backed up to: ${backupPath}`);
+            }
+            catch {
+                // Ignore backup failure
+            }
+            // Revert from cached config or fetch fresh config
+            try {
+                let syncConfig = lastCachedConfig;
+                if (!syncConfig) {
+                    syncConfig = await client.fetchConfig(safeCreds.workspaceId);
+                }
+                await applySyncConfig(syncConfig, true);
+                // Report incident via WebSocket/HTTP
+                wsClient.send({
+                    type: 'drift_report',
+                    harnessType: adapter.type,
+                    filePath: adapter.configFileName,
+                    localHash: currentHash || '',
+                    canonicalHash: canonical,
+                });
+            }
+            catch (err) {
+                log.error(`Failed to automatically revert file drift: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+    });
+    // 6. Secondary fallback HTTP poll loop
+    while (!ac.signal.aborted) {
+        try {
+            const syncConfig = await client.fetchConfig(safeCreds.workspaceId);
+            await applySyncConfig(syncConfig);
+            // Run compliance probes on each iteration
+            await runProbes();
+        }
+        catch (err) {
+            log.error(`Sync iteration failed: ${err instanceof Error ? err.message : String(err)}`);
+            log.dim(`Retrying in ${pollInterval / 1000}s...`);
         }
-        // g. Sleep until next poll (or abort)
+        // Sleep until next interval (AbortSignal-aware)
         await new Promise((resolve) => {
             const timer = setTimeout(resolve, pollInterval);
             ac.signal.addEventListener('abort', () => {
@@ -149,6 +383,12 @@ export async function runConnect(opts) {
             }, { once: true });
         });
     }
+    // Cleanup watcher, intervals, and WS connection on exit
+    watcher.stop();
+    fsWatcher?.close();
+    if (drainSafetyTimer)
+        clearInterval(drainSafetyTimer);
+    wsClient.close();
     log.success('Sync daemon stopped.');
 }
 //# sourceMappingURL=connect.js.map

package/dist/commands/connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"connect.js","sourceRoot":"","sources":["../../src/commands/connect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAC1G,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAE/C,OAAO,EAAE,UAAU,EAAgB,MAAM,wBAAwB,CAAA;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,OAAO,EAAE,MAAM,YAAY,CAAA;AAE3B,MAAM,qBAAqB,GAAG,MAAM,CAAA;AAEpC,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAA0C;IACzE,+BAA+B;IAC/B,MAAM,KAAK,GAAG,eAAe,EAAE,CAAA;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAA;QAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;IAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAA;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAA;IAC7E,MAAM,eAAe,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAA;IACvD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAA;IACxF,MAAM,cAAc,GAAG,MAAM,EAAE,CAAA;IAE/B,MAAM,MAAM,GAAG,eAAe,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IAE7D,GAAG,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAA;IACnC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;IACzC,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,eAAe,CAAC,CAAA;IAC3C,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,YAAY,GAAG,IAAI,GAAG,CAAC,CAAA;IACrD,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,CAAA;IAC/D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACf,GAAG,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAA;IAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAEf,wCAAwC;IACxC,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAA;IAChC,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QAC5B,EAAE,CAAC,KAAK,EAAE,CAAA;IACZ,CAAC,CAAA;IACD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC9B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;IAE/B,eAAe;IACf,IAAI,kBAAkB,GAAG,MAAM,CAAC,aAAa,CAAA;IAE7C,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,qCAAqC;YACrC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;YAE9D,IAAI,WAAW,GAAG,CAAC,CAAA;YAEnB,wDAAwD;YACxD,IAAI,UAAU,CAAC,aAAa,GAAG,kBAAkB,EAAE,CAAC;gBAClD,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;oBAC3C,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,CAAA;oBACvC,IAAI,CAAC,OAAO;wBAAE,SAAQ;oBAEtB,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CACvC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,WAA0B,CAAC,CACjE,CAAA;oBACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;wBAAE,SAAQ;oBAErC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CACvC,MAAM,CAAC,aAAa,EACpB,UAAU,EACV,UAAU,CAAC,QAAQ,CACpB,CAAA;oBACD,IAAI,OAAO,EAAE,CAAC;wBACZ,WAAW,IAAI,UAAU,CAAC,MAAM,CAAA;oBAClC,CAAC;gBACH,CAAC;gBAED,kBAAkB,GAAG,UAAU,CAAC,aAAa,CAAA;gBAC7C,UAAU,CAAC,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC,CAAA;YAC9D,CAAC;YAED,kDAAkD;YAClD,MAAM,UAAU,GAAkB,EAAE,CAAA;YACpC,MAAM,eAAe,GAA2B,EAAE,CAAA;YAElD,4CAA4C;YAC5C,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;YACrD,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,SAAS,CAAC,KAAK,CAAC,CAAA;YACjD,CAAC;YAED,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC3C,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,CAAA;gBACvC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc;oBAAE,SAAQ;gBAEjD,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;gBACvE,IAAI,CAAC,WAAW;oBAAE,SAAQ;gBAE1B,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,WAAW,CAAA;gBACxE,UAAU,CAAC,IAAI,CAAC;oBACd,QAAQ,EAAE,OAAO,CAAC,cAAc;oBAChC,SAAS,EAAE,WAAW;oBACtB,aAAa,EAAE,SAAS;oBACxB,OAAO,EAAE,WAAW,KAAK,SAAS;iBACnC,CAAC,CAAA;gBAEF,mCAAmC;gBACnC,eAAe,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,WAAW,CAAA;YACvD,CAAC;YAED,uBAAuB;YACvB,aAAa,CAAC,MAAM,CAAC,aAAa,EAAE;gBAClC,UAAU,EAAE,MAAM,EAAE;gBACpB,aAAa,EAAE,kBAAkB;gBACjC,KAAK,EAAE,eAAe;aACvB,CAAC,CAAA;YAEF,oCAAoC;YACpC,IAAI,UAAU,GAAG,CAAC,CAAA;YAClB,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC;oBAC3C,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAgB;oBAC/C,KAAK,EAAE,UAAU;oBACjB,UAAU,EAAE,MAAM,EAAE;iBACrB,CAAC,CAAA;gBACF,UAAU,GAAG,UAAU,CAAC,UAAU,CAAA;YACpC,CAAC;YAED,mBAAmB;YACnB,MAAM,MAAM,CAAC,YAAY,CAAC;gBACxB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,aAAa,EAAE,kBAAkB;gBACjC,cAAc;gBACd,UAAU,EAAE,MAAM,EAAE;gBACpB,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACtC,IAAI,EAAE,CAAgB;oBACtB,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,cAAc,IAAI,EAAE;oBAC/C,QAAQ,EAAE,IAAI;oBACd,WAAW,EAAE,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;iBAC/C,CAAC,CAAC;aACJ,CAAC,CAAA;YAEF,gBAAgB;YAChB,MAAM,UAAU,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,UAAU,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YAC/E,GAAG,CAAC,GAAG,CACL,kBAAkB,kBAAkB,MAAM,WAAW,eAAe,UAAU,oBAAoB,YAAY,GAAG,IAAI,GAAG,CACzH,CAAA;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yCAAyC;YACzC,GAAG,CAAC,KAAK,CACP,gBAAgB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACnE,CAAA;YACD,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAA;QACxC,CAAC;QAED,sCAAsC;QACtC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YAC/C,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;gBACvC,YAAY,CAAC,KAAK,CAAC,CAAA;gBACnB,OAAO,EAAE,CAAA;YACX,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACpB,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAA;AACrC,CAAC"}
+{"version":3,"file":"connect.js","sourceRoot":"","sources":["../../src/commands/connect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,SAAS,MAAM,WAAW,CAAA;AACtC,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,EACL,eAAe,EACf,UAAU,EACV,UAAU,EACV,aAAa,EACb,aAAa,GACd,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,OAAO,EAAE,MAAM,YAAY,CAAA;AAE3B,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,eAAe,GAChB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAA;AAEhC,MAAM,qBAAqB,GAAG,MAAM,CAAA;AAEpC,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAMhC;IACC,+BAA+B;IAC/B,IAAI,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;IACnC,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACpC,KAAK,GAAG;YACN,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,mBAAmB;YAC1B,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,wBAAwB;YACjE,QAAQ,EAAE,MAAM,EAAE;SACnB,CAAA;IACH,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAA;QAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,IAAI,MAAM,GAAG,UAAU,EAAE,CAAA;IACzB,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC/C,MAAM,GAAG;YACP,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,CAAC;YAChB,OAAO,EAAE,IAAI,CAAC,GAAG,IAAI,KAAK;SACpB,CAAA;IACV,CAAC;IAED,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAA;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAA;IACvB,MAAM,UAAU,GAAG,MAAM,CAAA;IAEzB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,GAAG,IAAI,UAAU,CAAC,OAAO,CAAA;IACjF,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAC/E,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAA;IACxF,MAAM,cAAc,GAAG,MAAM,EAAE,CAAA;IAE/B,MAAM,MAAM,GAAG,eAAe,CAAC,eAAe,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;IAEjE,GAAG,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAA;IACnC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,WAAW,CAAC,CAAA;IAC7C,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,eAAe,CAAC,CAAA;IAC3C,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,YAAY,GAAG,IAAI,GAAG,CAAC,CAAA;IACrD,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,CAAA;IAEnE,2DAA2D;IAC3D,oBAAoB,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAErE,GAAG,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAA;IACpD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAEf,wCAAwC;IACxC,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAA;IAChC,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,GAAG,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;QACxC,EAAE,CAAC,KAAK,EAAE,CAAA;IACZ,CAAC,CAAA;IACD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC9B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;IAE/B,IAAI,kBAAkB,GAAG,UAAU,CAAC,aAAa,CAAA;IACjD,IAAI,gBAAgB,GAA6B,IAAI,CAAA;IAErD,2CAA2C;IAC3C,KAAK,UAAU,eAAe,CAAC,UAA6B,EAAE,KAAK,GAAG,KAAK;QACzE,IAAI,WAAW,GAAG,CAAC,CAAA;QACnB,gBAAgB,GAAG,UAAU,CAAA;QAE7B,IAAI,UAAU,CAAC,aAAa,GAAG,kBAAkB,IAAI,KAAK,EAAE,CAAC;YAC3D,GAAG,CAAC,IAAI,CAAC,2BAA2B,UAAU,CAAC,aAAa,KAAK,CAAC,CAAA;YAElE,4CAA4C;YAC5C,KAAK,MAAM,WAAW,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;gBAC/C,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,CAAA;gBACvC,IAAI,CAAC,OAAO;oBAAE,SAAQ;gBAEtB,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAChD,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,WAA0B,CAAC,CACxD,CAAA;gBACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK;oBAAE,SAAQ;gBAE/C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CACvC,UAAU,CAAC,aAAa,EACxB,UAAU,EACV,UAAU,CAAC,QAAQ,CACpB,CAAA;gBACD,IAAI,OAAO,EAAE,CAAC;oBACZ,WAAW,IAAI,UAAU,CAAC,MAAM,CAAA;gBAClC,CAAC;YACH,CAAC;YAED,sDAAsD;YACtD,IAAI,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,aAA4B,CAAC,EAAE,CAAC;gBAChE,IAAI,CAAC;oBACH,MAAM,qBAAqB,CACzB,UAAU,CAAC,aAAa,EACxB,UAAU,CAAC,IAAI,EACf,UAAU,CAAC,QAA8C,CAC1D,CAAA;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,GAAG,CAAC,IAAI,CAAC,uCAAuC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;gBACrG,CAAC;YACH,CAAC;YAED,oEAAoE;YACpE,IAAI,CAAC;gBACH,MAAM,eAAe,CAAC,UAAU,CAAC,aAAa,EAAE,SAAS,CAAC,WAAW,CAAC,CAAA;YACxE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CAAC,wCAAwC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACtG,CAAC;YAED,kBAAkB,GAAG,UAAU,CAAC,aAAa,CAAA;YAC7C,UAAU,CAAC,EAAE,GAAG,UAAU,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAClE,CAAC;QAED,kDAAkD;QAClD,MAAM,UAAU,GAAkB,EAAE,CAAA;QACpC,MAAM,eAAe,GAA2B,EAAE,CAAA;QAElD,mCAAmC;QACnC,MAAM,SAAS,GAAG,aAAa,CAAC,UAAU,CAAC,aAAa,CAAC,CAAA;QACzD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,SAAS,CAAC,KAAK,CAAC,CAAA;QACjD,CAAC;QAED,KAAK,MAAM,WAAW,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;YAC/C,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,CAAA;YACvC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc;gBAAE,SAAQ;YAEjD,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,UAAU,CAAC,aAAa,CAAC,CAAA;YAC3E,IAAI,CAAC,WAAW;gBAAE,SAAQ;YAE1B,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,WAAW,CAAA;YACxE,UAAU,CAAC,IAAI,CAAC;gBACd,QAAQ,EAAE,OAAO,CAAC,cAAc;gBAChC,SAAS,EAAE,WAAW;gBACtB,aAAa,EAAE,SAAS;gBACxB,OAAO,EAAE,WAAW,KAAK,SAAS;aACnC,CAAC,CAAA;YAEF,mCAAmC;YACnC,eAAe,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,WAAW,CAAA;QACvD,CAAC;QAED,uBAAuB;QACvB,aAAa,CAAC,UAAU,CAAC,aAAa,EAAE;YACtC,UAAU,EAAE,MAAM,EAAE;YACpB,aAAa,EAAE,kBAAkB;YACjC,KAAK,EAAE,eAAe;SACvB,CAAC,CAAA;QAEF,oCAAoC;QACpC,IAAI,UAAU,GAAG,CAAC,CAAA;QAClB,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC;oBAC3C,WAAW,EAAE,SAAS,CAAC,WAAW;oBAClC,WAAW,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAgB;oBACnD,KAAK,EAAE,UAAU;oBACjB,UAAU,EAAE,MAAM,EAAE;iBACrB,CAAC,CAAA;gBACF,UAAU,GAAG,UAAU,CAAC,UAAU,CAAA;YACpC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CAAC,sCAAsC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACpG,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,YAAY,CAAC;gBACxB,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,aAAa,EAAE,kBAAkB;gBACjC,cAAc;gBACd,UAAU,EAAE,MAAM,EAAE;gBACpB,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC1C,IAAI,EAAE,CAAgB;oBACtB,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,cAAc,IAAI,EAAE;oBAC/C,QAAQ,EAAE,IAAI;oBACd,WAAW,EAAE,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;iBAC/C,CAAC,CAAC;aACJ,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAClG,CAAC;QAED,MAAM,UAAU,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,UAAU,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACxF,GAAG,CAAC,GAAG,CACL,kBAAkB,kBAAkB,MAAM,WAAW,eAAe,UAAU,EAAE,CACjF,CAAA;QAED,6CAA6C;QAC7C,IAAI,CAAC;YACH,MAAM,eAAe,CAAC;gBACpB,eAAe;gBACf,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,oBAAoB,EAAE,UAAU,CAAC,QAAQ,EAAE,oBAAoB;gBAC/D,YAAY,EAAE,UAAU,CAAC,QAAQ,EAAE,YAAY;gBAC/C,qBAAqB,EAAE,UAAU,CAAC,QAAQ,EAAE,qBAAqB;aAClE,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,iDAAiD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC/G,CAAC;QAED,OAAO,WAAW,CAAA;IACpB,CAAC;IAED,4CAA4C;IAC5C,MAAM,SAAS,GAAG,KAAK,IAAI,EAAE;QAC3B,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAA;YACzG,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAE1E,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;YACrE,IAAI,SAAS,GAAG,KAAK,CAAA;YACrB,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;gBAC/B,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;oBACnC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAA;oBACjD,MAAM,OAAO,CAAC,UAAU,CAAC,aAAa,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;oBACvD,SAAS,GAAG,IAAI,CAAA;gBAClB,CAAC;YACH,CAAC;YACD,IAAI,SAAS,EAAE,CAAC;gBACd,GAAG,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAA;YAChF,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,yCAAyC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACvG,CAAC;IACH,CAAC,CAAA;IAED,qCAAqC;IACrC,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,UAAU,CAAC,aAAa,EAAE,eAAe,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;YAClG,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,GAAG,CAAC,IAAI,CAAC,yBAAyB,OAAO,0CAA0C,CAAC,CAAA;YACtF,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,qDAAqD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACnH,CAAC;IACH,CAAC,CAAA;IAED,4EAA4E;IAC5E,IAAI,CAAC;QACH,MAAM,eAAe,CAAC;YACpB,eAAe;YACf,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,WAAW,EAAE,SAAS,CAAC,WAAW;SACnC,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,iDAAiD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC/G,CAAC;IAED,4BAA4B;IAC5B,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC;QAChC,eAAe;QACf,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YACnC,IAAI,CAAC;gBACH,MAAM,eAAe,CAAC,UAAU,CAAC,CAAA;YACnC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,uCAAuC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACtG,CAAC;QACH,CAAC;QACD,MAAM,EAAE,EAAE,CAAC,MAAM;KAClB,CAAC,CAAA;IAEF,QAAQ,CAAC,OAAO,EAAE,CAAA;IAElB,mCAAmC;IACnC,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAA;IACzG,IAAI,SAAS,GAAoC,IAAI,CAAA;IACrD,IAAI,gBAAgB,GAA0C,IAAI,CAAA;IAElE,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1E,SAAS,GAAG,KAAK,CAAC,aAAa,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAA;QAC5E,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QAChC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,0CAA0C;IAC5C,CAAC;IAED,kCAAkC;IAClC,gBAAgB,GAAG,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAEhD,0CAA0C;IAC1C,MAAM,SAAS,EAAE,CAAA;IAEjB,8BAA8B;IAC9B,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,aAAa,EAAE,UAAU,CAAC,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;QACjG,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QAEhD,6BAA6B;QAC7B,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;gBACxD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;gBAC5B,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,gBAAgB;oBACtB,GAAG,EAAE,IAAI,CAAC,GAAG;iBACd,CAAC,CAAA;gBACF,GAAG,CAAC,IAAI,CAAC,iDAAiD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;YAC/E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CAAC,wCAAwC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACtG,CAAC;YACD,OAAM;QACR,CAAC;QAED,oFAAoF;QACpF,IAAI,QAAQ,KAAK,eAAe,IAAI,QAAQ,KAAK,qBAAqB,EAAE,CAAC;YACvE,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,gBAAgB,EAAE,IAAI,IAAI,EAAE,CAAA;gBACzC,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;gBACrF,IAAI,QAAQ,EAAE,CAAC;oBACb,GAAG,CAAC,IAAI,CAAC,gEAAgE,WAAW,EAAE,CAAC,CAAA;oBACvF,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,cAAc;wBACpB,WAAW,EAAE,aAAa;wBAC1B,QAAQ,EAAE,WAAW;wBACrB,SAAS,EAAE,EAAE;wBACb,aAAa,EAAE,EAAE;qBAClB,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,yBAAyB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACxF,CAAC;YACD,OAAM;QACR,CAAC;QAED,kDAAkD;QAClD,MAAM,eAAe,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAC/C,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,cAAc,KAAK,QAAQ,CAClD,CAAA;QACD,IAAI,CAAC,eAAe;YAAE,OAAM;QAE5B,MAAM,OAAO,GAAG,UAAU,CAAC,eAAe,CAAC,CAAA;QAC3C,IAAI,CAAC,OAAO;YAAE,OAAM;QAEpB,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,UAAU,CAAC,aAAa,CAAC,CAAA;QAC3E,MAAM,SAAS,GAAG,aAAa,CAAC,UAAU,CAAC,aAAa,CAAC,CAAA;QACzD,IAAI,CAAC,SAAS;YAAE,OAAM;QACtB,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAA;QAE/D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,GAAG,CAAC,IAAI,CACN,yBAAyB,QAAQ,4DAA4D,CAC9F,CAAA;YAED,+BAA+B;YAC/B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;gBAC5D,MAAM,UAAU,GAAG,WAAW,GAAG,eAAe,CAAA;gBAChD,MAAM,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;gBACrD,GAAG,CAAC,GAAG,CAAC,8BAA8B,UAAU,EAAE,CAAC,CAAA;YACrD,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;YAED,kDAAkD;YAClD,IAAI,CAAC;gBACH,IAAI,UAAU,GAAG,gBAAgB,CAAA;gBACjC,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,UAAU,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;gBAC9D,CAAC;gBACD,MAAM,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;gBAEvC,qCAAqC;gBACrC,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,cAAc;oBACpB,WAAW,EAAE,OAAO,CAAC,IAAI;oBACzB,QAAQ,EAAE,OAAO,CAAC,cAAc;oBAChC,SAAS,EAAE,WAAW,IAAI,EAAE;oBAC5B,aAAa,EAAE,SAAS;iBACzB,CAAC,CAAA;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,8CAA8C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAC7G,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,uCAAuC;IACvC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;YAClE,MAAM,eAAe,CAAC,UAAU,CAAC,CAAA;YACjC,0CAA0C;YAC1C,MAAM,SAAS,EAAE,CAAA;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CACP,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC7E,CAAA;YACD,GAAG,CAAC,GAAG,CAAC,eAAe,YAAY,GAAG,IAAI,MAAM,CAAC,CAAA;QACnD,CAAC;QAED,gDAAgD;QAChD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YAC/C,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;gBACvC,YAAY,CAAC,KAAK,CAAC,CAAA;gBACnB,OAAO,EAAE,CAAA;YACX,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACpB,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,wDAAwD;IACxD,OAAO,CAAC,IAAI,EAAE,CAAA;IACd,SAAS,EAAE,KAAK,EAAE,CAAA;IAClB,IAAI,gBAAgB;QAAE,aAAa,CAAC,gBAAgB,CAAC,CAAA;IACrD,QAAQ,CAAC,KAAK,EAAE,CAAA;IAEhB,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAA;AACrC,CAAC"}

package/dist/commands/enterprise-install.d.ts

@@ -0,0 +1,36 @@
+/**
+ * enterprise-install.ts — `intutic enterprise-install` CLI command.
+ *
+ * Requires elevated privileges (sudo on macOS/Linux, admin on Windows).
+ * Writes system-level governance hooks that survive user-level tampering:
+ *
+ *   macOS:
+ *     - /etc/cursor/hooks.json (system Cursor hooks)
+ *     - System keychain CA trust entry for Intutic proxy CA cert
+ *     - MDM configuration profile generator
+ *
+ *   Linux:
+ *     - /etc/cursor/hooks.json
+ *     - /usr/local/share/ca-certificates/intutic-ca.crt + update-ca-certificates
+ *
+ *   Windows:
+ *     - certutil -addstore Root intutic-ca.crt
+ *     - HKLM registry-based Cursor hooks (via PowerShell)
+ *
+ * Usage: sudo intutic enterprise-install
+ *
+ * LLD #14 — Phase 3 cross-harness defence
+ * @module
+ */
+/**
+ * Main enterprise-install entry point.
+ * Called by the `intutic enterprise-install` CLI command.
+ */
+export declare function enterpriseInstall(options: {
+    proxyUrl: string;
+    workspaceRoot?: string;
+    mdmOutputDir?: string;
+    firewallOutputDir?: string;
+    generateMdmOnly?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=enterprise-install.d.ts.map

package/dist/commands/enterprise-install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enterprise-install.d.ts","sourceRoot":"","sources":["../../src/commands/enterprise-install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AA+OH;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE;IAC/C,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CAyDhB"}