@intutic/cli 0.1.0

package/README.md

@@ -0,0 +1,107 @@
+# @intutic/cli
+
+> AI governance control plane for developer workspaces.
+
+Intutic intercepts agent-to-LLM traffic, enforces SOPs, detects anomalies, and tracks costs — all without changing how your team codes.
+
+## Quick Start
+
+```bash
+# Install globally
+npm install -g @intutic/cli
+
+# Or run directly
+npx @intutic/cli init
+```
+
+**5 minutes to your first governance verdict:**
+
+```bash
+intutic login              # Authenticate with control plane
+intutic init               # Detect harnesses, configure proxy
+intutic connect            # Start sync daemon (background)
+intutic traces list        # See governance verdicts
+```
+
+## Commands
+
+| Command | Description |
+|---------|-------------|
+| `intutic init` | Initialize workspace — detect harnesses, configure sync |
+| `intutic login` | Authenticate with control plane (`--api-key`, `--dev`) |
+| `intutic logout` | Clear stored credentials |
+| `intutic status` | Show workspace status — auth, harnesses, sync state |
+| `intutic whoami` | Show current authenticated identity |
+| `intutic connect` | Start sync daemon — bidirectional config sync (`--interval`) |
+| `intutic traces list` | List execution traces (`--limit`, `--since`, `--action`, `--model`, `--json`) |
+| `intutic traces inspect <id>` | Show full detail of a single trace |
+
+## Supported Harnesses
+
+Intutic auto-detects and configures these AI coding harnesses:
+
+| Harness | Detection | Config Method |
+|---------|-----------|---------------|
+| **Claude Code** | `~/.claude/` directory | `CLAUDE.md` + `settings.json` |
+| **Cursor** | `~/.cursor/` directory | `.cursorrules` file |
+| **Aider** | `~/.aider/` directory | `.aider.conf.yml` |
+| **Antigravity** | `~/.gemini/` directory | Environment variables |
+| **Codex** | `~/.codex/` directory | `codex.json` config |
+| **n8n** | Running n8n instance | API integration (stub) |
+| **OpenClaw** | `~/.openclaw/` directory | `config.yaml` |
+| **Hermes** | `~/.hermes/` directory | `config.toml` |
+
+## Trace Inspection
+
+View governance verdicts directly from the terminal:
+
+```bash
+# List recent traces (last 24h)
+intutic traces list
+
+# Filter by enforcement action
+intutic traces list --action KILL
+
+# Filter by model and time window
+intutic traces list --model claude-4 --since 7d
+
+# JSON output for scripting
+intutic traces list --json | jq '.traces[] | select(.enforcementAction == "HIJACK")'
+
+# Inspect a specific trace
+intutic traces inspect tr_abc123
+```
+
+## Configuration
+
+Credentials are stored at `~/.intutic/credentials.json` (mode `0600`).
+
+### Environment Variables
+
+| Variable | Description |
+|----------|-------------|
+| `INTUTIC_API_URL` | Control plane URL (default: `https://api.intutic.ai`) |
+| `INTUTIC_API_KEY` | API key for non-interactive auth (`vk_*` prefix) |
+
+### Development Mode
+
+Use `--dev` flag to point at local control plane (`http://localhost:3001`):
+
+```bash
+intutic login --dev
+intutic connect --dev
+intutic traces list --dev
+```
+
+## Documentation
+
+Full documentation: [docs.intutic.ai](https://docs.intutic.ai)
+
+- [Getting Started](https://docs.intutic.ai/guide/getting-started)
+- [Integration Guides](https://docs.intutic.ai/integrations/)
+- [CLI Reference](https://docs.intutic.ai/reference/cli)
+- [API Reference](https://docs.intutic.ai/reference/api)
+
+## License
+
+Proprietary — see [LICENSE](../../LICENSE) for details.

package/dist/cli.d.ts

@@ -0,0 +1,14 @@
+#!/usr/bin/env node
+/**
+ * Intutic CLI — Entry point
+ *
+ * AI governance control plane for developer workspaces.
+ * Provides harness detection, config sync, and workspace management.
+ *
+ * LLD #8 — Sync Daemon / CLI
+ * HLD §3.14 — Real-Time State Mirroring
+ *
+ * @module
+ */
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;GAUG"}

package/dist/cli.js

@@ -0,0 +1,92 @@
+#!/usr/bin/env node
+/**
+ * Intutic CLI — Entry point
+ *
+ * AI governance control plane for developer workspaces.
+ * Provides harness detection, config sync, and workspace management.
+ *
+ * LLD #8 — Sync Daemon / CLI
+ * HLD §3.14 — Real-Time State Mirroring
+ *
+ * @module
+ */
+import { Command } from 'commander';
+const program = new Command();
+program
+    .name('intutic')
+    .description('Intutic CLI — AI governance control plane for developer workspaces')
+    .version('0.1.0');
+program
+    .command('init')
+    .description('Initialize workspace — detect harnesses, configure sync')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (opts) => {
+    const { runInit } = await import('./commands/init.js');
+    await runInit(opts);
+});
+program
+    .command('login')
+    .description('Authenticate with the Intutic control plane')
+    .option('--api-key <key>', 'Authenticate with an API key (vk_*)')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (opts) => {
+    const { runLogin } = await import('./commands/login.js');
+    await runLogin(opts);
+});
+program
+    .command('logout')
+    .description('Clear stored credentials')
+    .action(async () => {
+    const { runLogout } = await import('./commands/logout.js');
+    await runLogout();
+});
+program
+    .command('status')
+    .description('Show workspace status — auth, harnesses, sync state')
+    .action(async () => {
+    const { runStatus } = await import('./commands/status.js');
+    await runStatus();
+});
+program
+    .command('whoami')
+    .description('Show current authenticated identity')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (opts) => {
+    const { runWhoami } = await import('./commands/whoami.js');
+    await runWhoami(opts);
+});
+program
+    .command('connect')
+    .description('Start sync daemon — bidirectional config sync with control plane')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .option('--interval <ms>', 'Poll interval in milliseconds', '30000')
+    .action(async (opts) => {
+    const { runConnect } = await import('./commands/connect.js');
+    await runConnect(opts);
+});
+const traces = program
+    .command('traces')
+    .description('Query execution traces — list, filter, and inspect');
+traces
+    .command('list')
+    .description('List execution traces for the workspace')
+    .option('--limit <n>', 'Number of traces to show (default: 20, max: 100)')
+    .option('--since <duration>', 'Time window, e.g. "24h", "7d", "30m" (default: "24h")')
+    .option('--action <type>', 'Filter by enforcement action (BYPASS|ENHANCE|HIJACK|KILL)')
+    .option('--model <name>', 'Filter by model name')
+    .option('--json', 'Output as JSON instead of table')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (opts) => {
+    const { runTracesList } = await import('./commands/traces.js');
+    await runTracesList(opts);
+});
+traces
+    .command('inspect <trace_id>')
+    .description('Show full detail of a single trace')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (traceId, opts) => {
+    const { runTracesInspect } = await import('./commands/traces.js');
+    await runTracesInspect(traceId, opts);
+});
+program.parse();
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAA;AAE7B,OAAO;KACJ,IAAI,CAAC,SAAS,CAAC;KACf,WAAW,CAAC,oEAAoE,CAAC;KACjF,OAAO,CAAC,OAAO,CAAC,CAAA;AAEnB,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,yDAAyD,CAAC;KACtE,MAAM,CAAC,OAAO,EAAE,iDAAiD,CAAC;KAClE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAA;IACtD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;AACrB,CAAC,CAAC,CAAA;AAEJ,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,6CAA6C,CAAC;KAC1D,MAAM,CAAC,iBAAiB,EAAE,qCAAqC,CAAC;KAChE,MAAM,CAAC,OAAO,EAAE,iDAAiD,CAAC;KAClE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAA;IACxD,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;AACtB,CAAC,CAAC,CAAA;AAEJ,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,0BAA0B,CAAC;KACvC,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAA;IAC1D,MAAM,SAAS,EAAE,CAAA;AACnB,CAAC,CAAC,CAAA;AAEJ,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,qDAAqD,CAAC;KAClE,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAA;IAC1D,MAAM,SAAS,EAAE,CAAA;AACnB,CAAC,CAAC,CAAA;AAEJ,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,qCAAqC,CAAC;KAClD,MAAM,CAAC,OAAO,EAAE,iDAAiD,CAAC;KAClE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAA;IAC1D,MAAM,SAAS,CAAC,IAAI,CAAC,CAAA;AACvB,CAAC,CAAC,CAAA;AAEJ,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,kEAAkE,CAAC;KAC/E,MAAM,CAAC,OAAO,EAAE,iDAAiD,CAAC;KAClE,MAAM,CAAC,iBAAiB,EAAE,+BAA+B,EAAE,OAAO,CAAC;KACnE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAA;IAC5D,MAAM,UAAU,CAAC,IAAI,CAAC,CAAA;AACxB,CAAC,CAAC,CAAA;AAEJ,MAAM,MAAM,GAAG,OAAO;KACnB,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,oDAAoD,CAAC,CAAA;AAEpE,MAAM;KACH,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,yCAAyC,CAAC;KACtD,MAAM,CAAC,aAAa,EAAE,kDAAkD,CAAC;KACzE,MAAM,CAAC,oBAAoB,EAAE,uDAAuD,CAAC;KACrF,MAAM,CAAC,iBAAiB,EAAE,2DAA2D,CAAC;KACtF,MAAM,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;KAChD,MAAM,CAAC,QAAQ,EAAE,iCAAiC,CAAC;KACnD,MAAM,CAAC,OAAO,EAAE,iDAAiD,CAAC;KAClE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAA;IAC9D,MAAM,aAAa,CAAC,IAAI,CAAC,CAAA;AAC3B,CAAC,CAAC,CAAA;AAEJ,MAAM;KACH,OAAO,CAAC,oBAAoB,CAAC;KAC7B,WAAW,CAAC,oCAAoC,CAAC;KACjD,MAAM,CAAC,OAAO,EAAE,iDAAiD,CAAC;KAClE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;IAC9B,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAA;IACjE,MAAM,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;AACvC,CAAC,CAAC,CAAA;AAEJ,OAAO,CAAC,KAAK,EAAE,CAAA"}

package/dist/commands/connect.d.ts

@@ -0,0 +1,18 @@
+/**
+ * `intutic connect` — Start the sync daemon.
+ *
+ * Runs a 30-second polling loop that:
+ * 1. Fetches config from control plane (active SOPs, proxy URL)
+ * 2. Writes SOP content to harness config files
+ * 3. Computes SHA-256 hashes of written files
+ * 4. Reports hashes + status to control plane
+ *
+ * HLD §3.14 — Real-Time State Mirroring
+ * LLD #8 — Sync Daemon / CLI
+ * @module
+ */
+export declare function runConnect(opts: {
+    dev?: boolean;
+    interval?: string;
+}): Promise<void>;
+//# sourceMappingURL=connect.d.ts.map

package/dist/commands/connect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../src/commands/connect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAcH,wBAAsB,UAAU,CAAC,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAgK1F"}

package/dist/commands/connect.js

@@ -0,0 +1,154 @@
+/**
+ * `intutic connect` — Start the sync daemon.
+ *
+ * Runs a 30-second polling loop that:
+ * 1. Fetches config from control plane (active SOPs, proxy URL)
+ * 2. Writes SOP content to harness config files
+ * 3. Computes SHA-256 hashes of written files
+ * 4. Reports hashes + status to control plane
+ *
+ * HLD §3.14 — Real-Time State Mirroring
+ * LLD #8 — Sync Daemon / CLI
+ * @module
+ */
+import { log } from '../lib/logger.js';
+import { loadCredentials, loadConfig, saveConfig, loadIntegrity, saveIntegrity } from '../config/store.js';
+import { resolveControlPlaneUrl } from '../config/paths.js';
+import { createApiClient } from '../lib/api.js';
+import { getAdapter } from '../harness/detector.js';
+import { newIso } from '@intutic/id';
+import pc from 'picocolors';
+const DEFAULT_POLL_INTERVAL = 30_000;
+export async function runConnect(opts) {
+    // 1. Load credentials + config
+    const creds = loadCredentials();
+    if (!creds) {
+        log.error('Not authenticated. Run `intutic login` first.');
+        process.exit(1);
+    }
+    const config = loadConfig();
+    if (!config) {
+        log.error('Workspace not initialized. Run `intutic init` first.');
+        process.exit(1);
+    }
+    const devMode = opts.dev || process.env.INTUTIC_DEV === '1' || config.devMode;
+    const controlPlaneUrl = resolveControlPlaneUrl(devMode);
+    const pollInterval = opts.interval ? parseInt(opts.interval, 10) : DEFAULT_POLL_INTERVAL;
+    const connectedSince = newIso();
+    const client = createApiClient(controlPlaneUrl, creds.apiKey);
+    log.header('Intutic — Sync Daemon');
+    log.field('Workspace', creds.workspaceId);
+    log.field('Control Plane', controlPlaneUrl);
+    log.field('Poll Interval', `${pollInterval / 1000}s`);
+    log.field('Harnesses', config.harnesses.join(', ') || '(none)');
+    console.log('');
+    log.info('Starting sync loop... (Ctrl+C to stop)');
+    console.log('');
+    // 2. AbortController for clean shutdown
+    const ac = new AbortController();
+    const shutdown = () => {
+        log.info('Shutting down...');
+        ac.abort();
+    };
+    process.on('SIGINT', shutdown);
+    process.on('SIGTERM', shutdown);
+    // 3. Sync loop
+    let localConfigVersion = config.configVersion;
+    while (!ac.signal.aborted) {
+        try {
+            // a. Fetch config from control plane
+            const syncConfig = await client.fetchConfig(creds.workspaceId);
+            let sopsWritten = 0;
+            // b. If config version is newer, write to harness files
+            if (syncConfig.configVersion > localConfigVersion) {
+                for (const harnessType of config.harnesses) {
+                    const adapter = getAdapter(harnessType);
+                    if (!adapter)
+                        continue;
+                    const targetSops = syncConfig.sops.filter((sop) => sop.harnessTargets.includes(harnessType));
+                    if (targetSops.length === 0)
+                        continue;
+                    const written = await adapter.writeConfig(config.workspaceRoot, targetSops, syncConfig.proxyUrl);
+                    if (written) {
+                        sopsWritten += targetSops.length;
+                    }
+                }
+                localConfigVersion = syncConfig.configVersion;
+                saveConfig({ ...config, configVersion: localConfigVersion });
+            }
+            // c. Compute file hashes + update integrity store
+            const fileHashes = [];
+            const canonicalHashes = {};
+            // Build canonical hash map from synced SOPs
+            const integrity = loadIntegrity(config.workspaceRoot);
+            if (integrity) {
+                Object.assign(canonicalHashes, integrity.files);
+            }
+            for (const harnessType of config.harnesses) {
+                const adapter = getAdapter(harnessType);
+                if (!adapter || !adapter.configFileName)
+                    continue;
+                const currentHash = await adapter.readCurrentHash(config.workspaceRoot);
+                if (!currentHash)
+                    continue;
+                const canonical = canonicalHashes[adapter.configFileName] ?? currentHash;
+                fileHashes.push({
+                    filePath: adapter.configFileName,
+                    localHash: currentHash,
+                    canonicalHash: canonical,
+                    drifted: currentHash !== canonical,
+                });
+                // Update canonical hash to current
+                canonicalHashes[adapter.configFileName] = currentHash;
+            }
+            // Save integrity store
+            saveIntegrity(config.workspaceRoot, {
+                lastSyncAt: newIso(),
+                configVersion: localConfigVersion,
+                files: canonicalHashes,
+            });
+            // d. Report hashes to control plane
+            let driftCount = 0;
+            if (fileHashes.length > 0) {
+                const hashReport = await client.reportHashes({
+                    workspaceId: creds.workspaceId,
+                    harnessType: config.harnesses[0],
+                    files: fileHashes,
+                    reportedAt: newIso(),
+                });
+                driftCount = hashReport.driftCount;
+            }
+            // e. Report status
+            await client.reportStatus({
+                workspaceId: creds.workspaceId,
+                configVersion: localConfigVersion,
+                connectedSince,
+                lastSyncAt: newIso(),
+                harnesses: config.harnesses.map((h) => ({
+                    type: h,
+                    configPath: getAdapter(h)?.configFileName ?? '',
+                    detected: true,
+                    lastWriteAt: sopsWritten > 0 ? newIso() : null,
+                })),
+            });
+            // f. Log result
+            const driftLabel = driftCount > 0 ? pc.yellow(` — ${driftCount} drift(s)`) : '';
+            log.dim(`[sync] Config v${localConfigVersion} — ${sopsWritten} SOPs synced${driftLabel} — next check in ${pollInterval / 1000}s`);
+        }
+        catch (err) {
+            // Per-iteration error — log and continue
+            log.error(`Sync failed: ${err instanceof Error ? err.message : String(err)}`);
+            log.dim('Will retry next interval...');
+        }
+        // g. Sleep until next poll (or abort)
+        await new Promise((resolve) => {
+            const timer = setTimeout(resolve, pollInterval);
+            ac.signal.addEventListener('abort', () => {
+                clearTimeout(timer);
+                resolve();
+            }, { once: true });
+        });
+    }
+    log.success('Sync daemon stopped.');
+}
+//# sourceMappingURL=connect.js.map

package/dist/commands/connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.js","sourceRoot":"","sources":["../../src/commands/connect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAC1G,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAE/C,OAAO,EAAE,UAAU,EAAgB,MAAM,wBAAwB,CAAA;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,OAAO,EAAE,MAAM,YAAY,CAAA;AAE3B,MAAM,qBAAqB,GAAG,MAAM,CAAA;AAEpC,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAA0C;IACzE,+BAA+B;IAC/B,MAAM,KAAK,GAAG,eAAe,EAAE,CAAA;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAA;QAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;IAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAA;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAA;IAC7E,MAAM,eAAe,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAA;IACvD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAA;IACxF,MAAM,cAAc,GAAG,MAAM,EAAE,CAAA;IAE/B,MAAM,MAAM,GAAG,eAAe,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IAE7D,GAAG,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAA;IACnC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;IACzC,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,eAAe,CAAC,CAAA;IAC3C,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,YAAY,GAAG,IAAI,GAAG,CAAC,CAAA;IACrD,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,CAAA;IAC/D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACf,GAAG,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAA;IAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAEf,wCAAwC;IACxC,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAA;IAChC,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QAC5B,EAAE,CAAC,KAAK,EAAE,CAAA;IACZ,CAAC,CAAA;IACD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC9B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;IAE/B,eAAe;IACf,IAAI,kBAAkB,GAAG,MAAM,CAAC,aAAa,CAAA;IAE7C,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,qCAAqC;YACrC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;YAE9D,IAAI,WAAW,GAAG,CAAC,CAAA;YAEnB,wDAAwD;YACxD,IAAI,UAAU,CAAC,aAAa,GAAG,kBAAkB,EAAE,CAAC;gBAClD,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;oBAC3C,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,CAAA;oBACvC,IAAI,CAAC,OAAO;wBAAE,SAAQ;oBAEtB,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CACvC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,WAA0B,CAAC,CACjE,CAAA;oBACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;wBAAE,SAAQ;oBAErC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CACvC,MAAM,CAAC,aAAa,EACpB,UAAU,EACV,UAAU,CAAC,QAAQ,CACpB,CAAA;oBACD,IAAI,OAAO,EAAE,CAAC;wBACZ,WAAW,IAAI,UAAU,CAAC,MAAM,CAAA;oBAClC,CAAC;gBACH,CAAC;gBAED,kBAAkB,GAAG,UAAU,CAAC,aAAa,CAAA;gBAC7C,UAAU,CAAC,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC,CAAA;YAC9D,CAAC;YAED,kDAAkD;YAClD,MAAM,UAAU,GAAkB,EAAE,CAAA;YACpC,MAAM,eAAe,GAA2B,EAAE,CAAA;YAElD,4CAA4C;YAC5C,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;YACrD,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,SAAS,CAAC,KAAK,CAAC,CAAA;YACjD,CAAC;YAED,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC3C,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,CAAA;gBACvC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc;oBAAE,SAAQ;gBAEjD,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;gBACvE,IAAI,CAAC,WAAW;oBAAE,SAAQ;gBAE1B,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,WAAW,CAAA;gBACxE,UAAU,CAAC,IAAI,CAAC;oBACd,QAAQ,EAAE,OAAO,CAAC,cAAc;oBAChC,SAAS,EAAE,WAAW;oBACtB,aAAa,EAAE,SAAS;oBACxB,OAAO,EAAE,WAAW,KAAK,SAAS;iBACnC,CAAC,CAAA;gBAEF,mCAAmC;gBACnC,eAAe,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,WAAW,CAAA;YACvD,CAAC;YAED,uBAAuB;YACvB,aAAa,CAAC,MAAM,CAAC,aAAa,EAAE;gBAClC,UAAU,EAAE,MAAM,EAAE;gBACpB,aAAa,EAAE,kBAAkB;gBACjC,KAAK,EAAE,eAAe;aACvB,CAAC,CAAA;YAEF,oCAAoC;YACpC,IAAI,UAAU,GAAG,CAAC,CAAA;YAClB,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC;oBAC3C,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAgB;oBAC/C,KAAK,EAAE,UAAU;oBACjB,UAAU,EAAE,MAAM,EAAE;iBACrB,CAAC,CAAA;gBACF,UAAU,GAAG,UAAU,CAAC,UAAU,CAAA;YACpC,CAAC;YAED,mBAAmB;YACnB,MAAM,MAAM,CAAC,YAAY,CAAC;gBACxB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,aAAa,EAAE,kBAAkB;gBACjC,cAAc;gBACd,UAAU,EAAE,MAAM,EAAE;gBACpB,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACtC,IAAI,EAAE,CAAgB;oBACtB,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,cAAc,IAAI,EAAE;oBAC/C,QAAQ,EAAE,IAAI;oBACd,WAAW,EAAE,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;iBAC/C,CAAC,CAAC;aACJ,CAAC,CAAA;YAEF,gBAAgB;YAChB,MAAM,UAAU,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,UAAU,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YAC/E,GAAG,CAAC,GAAG,CACL,kBAAkB,kBAAkB,MAAM,WAAW,eAAe,UAAU,oBAAoB,YAAY,GAAG,IAAI,GAAG,CACzH,CAAA;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yCAAyC;YACzC,GAAG,CAAC,KAAK,CACP,gBAAgB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACnE,CAAA;YACD,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAA;QACxC,CAAC;QAED,sCAAsC;QACtC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YAC/C,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;gBACvC,YAAY,CAAC,KAAK,CAAC,CAAA;gBACnB,OAAO,EAAE,CAAA;YACX,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACpB,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAA;AACrC,CAAC"}

package/dist/commands/init.d.ts

@@ -0,0 +1,13 @@
+/**
+ * `intutic init` — Initialize workspace.
+ *
+ * Detects workspace root, auto-detects harnesses, validates
+ * credentials, and writes local config.
+ *
+ * LLD #8 — Sync Daemon / CLI
+ * @module
+ */
+export declare function runInit(opts: {
+    dev?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=init.d.ts.map

package/dist/commands/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA2BH,wBAAsB,OAAO,CAAC,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuDpE"}

package/dist/commands/init.js

@@ -0,0 +1,84 @@
+/**
+ * `intutic init` — Initialize workspace.
+ *
+ * Detects workspace root, auto-detects harnesses, validates
+ * credentials, and writes local config.
+ *
+ * LLD #8 — Sync Daemon / CLI
+ * @module
+ */
+import { existsSync } from 'node:fs';
+import { join, resolve, dirname } from 'node:path';
+import { log } from '../lib/logger.js';
+import { loadCredentials, saveConfig } from '../config/store.js';
+import { detectHarnesses } from '../harness/detector.js';
+import pc from 'picocolors';
+/**
+ * Walk up from cwd looking for .git/ or package.json to find workspace root.
+ */
+function findWorkspaceRoot() {
+    let dir = process.cwd();
+    const root = resolve('/');
+    while (dir !== root) {
+        if (existsSync(join(dir, '.git')) || existsSync(join(dir, 'package.json'))) {
+            return dir;
+        }
+        const parent = dirname(dir);
+        if (parent === dir)
+            break;
+        dir = parent;
+    }
+    return null;
+}
+export async function runInit(opts) {
+    log.header('Intutic — Workspace Initialization');
+    // 1. Find workspace root
+    const workspaceRoot = findWorkspaceRoot();
+    if (!workspaceRoot) {
+        log.error('Could not find workspace root (no .git/ or package.json found)');
+        log.dim('Run this command from within a project directory.');
+        process.exit(1);
+    }
+    log.success(`Workspace root: ${workspaceRoot}`);
+    // 2. Detect harnesses
+    log.info('Detecting AI harnesses...');
+    const harnesses = await detectHarnesses(workspaceRoot);
+    const detected = harnesses.filter((h) => h.detected);
+    const notDetected = harnesses.filter((h) => !h.detected);
+    console.log('');
+    for (const h of detected) {
+        console.log(`  ${pc.green('✔')} ${pc.bold(h.type)} ${pc.dim(`→ ${h.configPath}`)}`);
+    }
+    for (const h of notDetected) {
+        console.log(`  ${pc.dim('○')} ${pc.dim(h.type)} ${pc.dim('(not detected)')}`);
+    }
+    console.log('');
+    if (detected.length === 0) {
+        log.warn('No harnesses detected. Intutic will still work via proxy redirect.');
+    }
+    else {
+        log.success(`Detected ${detected.length} harness${detected.length > 1 ? 'es' : ''}`);
+    }
+    // 3. Check credentials
+    const creds = loadCredentials();
+    if (!creds) {
+        log.warn('Not authenticated. Run `intutic login` to connect to the control plane.');
+    }
+    else {
+        log.success(`Authenticated as ${creds.email}`);
+    }
+    // 4. Write config
+    const devMode = opts.dev || process.env.INTUTIC_DEV === '1';
+    saveConfig({
+        workspaceRoot,
+        harnesses: detected.map((h) => h.type),
+        configVersion: 0,
+        devMode,
+    });
+    log.success('Workspace initialized.');
+    if (devMode) {
+        log.dim('Dev mode: using local control plane (http://localhost:3001)');
+    }
+    log.dim('Run `intutic connect` to start syncing governance rules.');
+}
+//# sourceMappingURL=init.js.map

package/dist/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAY,MAAM,SAAS,CAAA;AAC9C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAExD,OAAO,EAAE,MAAM,YAAY,CAAA;AAE3B;;GAEG;AACH,SAAS,iBAAiB;IACxB,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAA;IACvB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IACzB,OAAO,GAAG,KAAK,IAAI,EAAE,CAAC;QACpB,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;YAC3E,OAAO,GAAG,CAAA;QACZ,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,MAAM,KAAK,GAAG;YAAE,MAAK;QACzB,GAAG,GAAG,MAAM,CAAA;IACd,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAuB;IACnD,GAAG,CAAC,MAAM,CAAC,oCAAoC,CAAC,CAAA;IAEhD,yBAAyB;IACzB,MAAM,aAAa,GAAG,iBAAiB,EAAE,CAAA;IACzC,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,GAAG,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAA;QAC3E,GAAG,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAA;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IACD,GAAG,CAAC,OAAO,CAAC,mBAAmB,aAAa,EAAE,CAAC,CAAA;IAE/C,sBAAsB;IACtB,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;IACrC,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,CAAA;IACtD,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;IACpD,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;IAExD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACf,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC,CAAA;IACrF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAA;IAC/E,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAEf,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAA;IAChF,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,OAAO,CAAC,YAAY,QAAQ,CAAC,MAAM,WAAW,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACtF,CAAC;IAED,uBAAuB;IACvB,MAAM,KAAK,GAAG,eAAe,EAAE,CAAA;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAA;IACrF,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,OAAO,CAAC,oBAAoB,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA;IAChD,CAAC;IAED,kBAAkB;IAClB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,GAAG,CAAA;IAC3D,UAAU,CAAC;QACT,aAAa;QACb,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAmB,CAAC;QACrD,aAAa,EAAE,CAAC;QAChB,OAAO;KACR,CAAC,CAAA;IAEF,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAA;IACrC,IAAI,OAAO,EAAE,CAAC;QACZ,GAAG,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAA;IACxE,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAA;AACrE,CAAC"}

package/dist/commands/login.d.ts

@@ -0,0 +1,14 @@
+/**
+ * `intutic login` — Authenticate with the control plane.
+ *
+ * Supports API key (--api-key vk_...) or email+password.
+ * Stores credentials at ~/.intutic/credentials.json (mode 0o600).
+ *
+ * LLD #8 — Sync Daemon / CLI
+ * @module
+ */
+export declare function runLogin(opts: {
+    apiKey?: string;
+    dev?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=login.d.ts.map

package/dist/commands/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAsDH,wBAAsB,QAAQ,CAAC,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA6DtF"}

package/dist/commands/login.js

@@ -0,0 +1,121 @@
+/**
+ * `intutic login` — Authenticate with the control plane.
+ *
+ * Supports API key (--api-key vk_...) or email+password.
+ * Stores credentials at ~/.intutic/credentials.json (mode 0o600).
+ *
+ * LLD #8 — Sync Daemon / CLI
+ * @module
+ */
+import { log } from '../lib/logger.js';
+import { saveCredentials } from '../config/store.js';
+import { resolveControlPlaneUrl } from '../config/paths.js';
+import { createApiClient } from '../lib/api.js';
+import { newIso } from '@intutic/id';
+import { createInterface } from 'node:readline';
+/**
+ * Simple readline prompt (no external deps).
+ * For password input, uses muted output.
+ */
+async function prompt(question, hidden = false) {
+    const rl = createInterface({
+        input: process.stdin,
+        output: process.stdout,
+    });
+    return new Promise((resolve) => {
+        if (hidden && process.stdin.isTTY) {
+            // Mute output for password entry
+            process.stdout.write(question);
+            let input = '';
+            process.stdin.setRawMode(true);
+            process.stdin.resume();
+            process.stdin.on('data', (char) => {
+                const c = char.toString();
+                if (c === '\n' || c === '\r') {
+                    process.stdin.setRawMode(false);
+                    process.stdin.pause();
+                    console.log('');
+                    rl.close();
+                    resolve(input);
+                }
+                else if (c === '\u0003') {
+                    // Ctrl+C
+                    process.exit(0);
+                }
+                else if (c === '\u007f') {
+                    // Backspace
+                    input = input.slice(0, -1);
+                }
+                else {
+                    input += c;
+                    process.stdout.write('*');
+                }
+            });
+        }
+        else {
+            rl.question(question, (answer) => {
+                rl.close();
+                resolve(answer);
+            });
+        }
+    });
+}
+export async function runLogin(opts) {
+    log.header('Intutic — Authentication');
+    const controlPlaneUrl = resolveControlPlaneUrl(opts.dev);
+    log.dim(`Control plane: ${controlPlaneUrl}`);
+    if (opts.apiKey) {
+        // API key flow
+        if (!opts.apiKey.startsWith('vk_')) {
+            log.error('API key must start with "vk_"');
+            process.exit(1);
+        }
+        log.info('Validating API key...');
+        const client = createApiClient(controlPlaneUrl, opts.apiKey);
+        try {
+            const me = await client.getMe();
+            saveCredentials({
+                apiKey: opts.apiKey,
+                workspaceId: me.workspaceId,
+                controlPlaneUrl,
+                email: me.email,
+                storedAt: newIso(),
+            });
+            log.success(`Authenticated as ${me.email}`);
+            log.field('Workspace', me.workspaceId);
+            log.field('Role', me.role);
+        }
+        catch (err) {
+            log.error(`API key validation failed: ${err instanceof Error ? err.message : String(err)}`);
+            process.exit(1);
+        }
+    }
+    else {
+        // Email + password flow
+        const email = await prompt('Email: ');
+        const password = await prompt('Password: ', true);
+        if (!email || !password) {
+            log.error('Email and password are required.');
+            process.exit(1);
+        }
+        log.info('Authenticating...');
+        const client = createApiClient(controlPlaneUrl, ''); // No token yet
+        try {
+            const result = await client.login(email, password);
+            saveCredentials({
+                apiKey: result.accessToken,
+                workspaceId: result.workspaceId,
+                controlPlaneUrl,
+                email: result.email,
+                storedAt: newIso(),
+            });
+            log.success(`Authenticated as ${result.email}`);
+            log.field('Workspace', result.workspaceId);
+        }
+        catch (err) {
+            log.error(`Login failed: ${err instanceof Error ? err.message : String(err)}`);
+            process.exit(1);
+        }
+    }
+}
+//# sourceMappingURL=login.js.map