@intutic/cli 1.3.0

package/dist/commands/status.d.ts

@@ -0,0 +1,11 @@
+/**
+ * `intutic status` — Show workspace status.
+ *
+ * Displays auth state, detected harnesses, last sync time,
+ * and config version.
+ *
+ * LLD #8 — Sync Daemon / CLI
+ * @module
+ */
+export declare function runStatus(): Promise<void>;
+//# sourceMappingURL=status.d.ts.map

package/dist/commands/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/commands/status.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAyBH,wBAAsB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAgF/C"}

package/dist/commands/status.js

@@ -0,0 +1,107 @@
+/**
+ * `intutic status` — Show workspace status.
+ *
+ * Displays auth state, detected harnesses, last sync time,
+ * and config version.
+ *
+ * LLD #8 — Sync Daemon / CLI
+ * @module
+ */
+import { log } from '../lib/logger.js';
+import { loadCredentials, loadConfig, loadIntegrity } from '../config/store.js';
+import { getActiveAgentProcesses, isSyncDaemonRunning } from '../lib/process.js';
+import pc from 'picocolors';
+const HARNESS_TO_PROCESS_NAME = {
+    cursor: ['Cursor'],
+    'claude-code': ['Claude Code'],
+    antigravity: ['Antigravity'],
+    n8n: ['n8n'],
+    codex: ['Codex'],
+    windsurf: ['Windsurf'],
+    aider: ['Aider'],
+    openhands: ['OpenHands'],
+    openclaw: ['OpenClaw'],
+    cline: ['VS Code'],
+    'roo-code': ['VS Code'],
+    continue: ['VS Code', 'JetBrains IDE'],
+    'claude-desktop': ['Claude Desktop'],
+    goose: ['Goose'],
+    'open-webui': ['OpenWebUI'],
+};
+export async function runStatus() {
+    log.header('Intutic — Workspace Status');
+    // Auth
+    const creds = await loadCredentials();
+    if (creds) {
+        log.field('Email', creds.email);
+        log.field('Workspace', creds.workspaceId);
+        log.field('Control Plane', creds.controlPlaneUrl);
+    }
+    else {
+        log.warn('Not authenticated. Run `intutic login` first.');
+    }
+    // Config
+    const config = loadConfig();
+    if (config) {
+        log.field('Workspace Root', config.workspaceRoot);
+        log.field('Dev Mode', config.devMode ? 'yes' : 'no');
+        log.field('Config Version', String(config.configVersion));
+        console.log('');
+        log.info('Detected harnesses:');
+        if (config.harnesses.length === 0) {
+            log.dim('  (none)');
+        }
+        else {
+            for (const h of config.harnesses) {
+                console.log(`  ${pc.green('✔')} ${h}`);
+            }
+        }
+        // Integrity
+        const integrity = loadIntegrity(config.workspaceRoot);
+        if (integrity) {
+            log.field('Last Sync', integrity.lastSyncAt);
+            log.field('Tracked Files', String(Object.keys(integrity.files).length));
+        }
+        else {
+            log.dim('  No sync data yet. Run `intutic connect` to start syncing.');
+        }
+        // Active Processes
+        const activeProcs = getActiveAgentProcesses();
+        const daemonRunning = isSyncDaemonRunning();
+        console.log('');
+        log.info('Active Running Processes:');
+        if (activeProcs.length === 0) {
+            log.dim('  (none detected)');
+        }
+        else {
+            for (const p of activeProcs) {
+                console.log(`  ${pc.yellow('●')} ${pc.bold(p.name)} (PID: ${p.pid}) — ${pc.dim(p.command)}`);
+            }
+        }
+        console.log('');
+        log.field('Sync Daemon State', daemonRunning ? pc.green('Running') : pc.red('Stopped'));
+        // Warning highlights
+        if (!daemonRunning && activeProcs.length > 0) {
+            const runningNames = new Set(activeProcs.map(p => p.name));
+            const configuredHarnesses = config.harnesses;
+            let runningConfiguredHarness = false;
+            for (const h of configuredHarnesses) {
+                const procNames = HARNESS_TO_PROCESS_NAME[h] || [];
+                if (procNames.some(name => runningNames.has(name))) {
+                    runningConfiguredHarness = true;
+                    break;
+                }
+            }
+            if (runningConfiguredHarness) {
+                console.log('');
+                log.warn(pc.yellow(pc.bold('Active agent process(es) detected, but the sync daemon ("intutic connect") is NOT running.')));
+                log.dim('  Configuration changes or SOP rules will not be synced to these agents until you start the daemon.');
+                log.dim('  Run `intutic connect` to start the sync daemon.');
+            }
+        }
+    }
+    else {
+        log.warn('Not initialized. Run `intutic init` first.');
+    }
+}
+//# sourceMappingURL=status.js.map

package/dist/commands/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/commands/status.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAC/E,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAChF,OAAO,EAAE,MAAM,YAAY,CAAA;AAE3B,MAAM,uBAAuB,GAA6B;IACxD,MAAM,EAAE,CAAC,QAAQ,CAAC;IAClB,aAAa,EAAE,CAAC,aAAa,CAAC;IAC9B,WAAW,EAAE,CAAC,aAAa,CAAC;IAC5B,GAAG,EAAE,CAAC,KAAK,CAAC;IACZ,KAAK,EAAE,CAAC,OAAO,CAAC;IAChB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,KAAK,EAAE,CAAC,OAAO,CAAC;IAChB,SAAS,EAAE,CAAC,WAAW,CAAC;IACxB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,KAAK,EAAE,CAAC,SAAS,CAAC;IAClB,UAAU,EAAE,CAAC,SAAS,CAAC;IACvB,QAAQ,EAAE,CAAC,SAAS,EAAE,eAAe,CAAC;IACtC,gBAAgB,EAAE,CAAC,gBAAgB,CAAC;IACpC,KAAK,EAAE,CAAC,OAAO,CAAC;IAChB,YAAY,EAAE,CAAC,WAAW,CAAC;CAC5B,CAAA;AAED,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,GAAG,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAA;IAExC,OAAO;IACP,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;IACrC,IAAI,KAAK,EAAE,CAAC;QACV,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;QAC/B,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;QACzC,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,CAAA;IACnD,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAA;IAC3D,CAAC;IAED,SAAS;IACT,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;IAC3B,IAAI,MAAM,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,MAAM,CAAC,aAAa,CAAC,CAAA;QACjD,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACpD,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAA;QAEzD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACf,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;QAC/B,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACrB,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACxC,CAAC;QACH,CAAC;QAED,YAAY;QACZ,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QACrD,IAAI,SAAS,EAAE,CAAC;YACd,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,UAAU,CAAC,CAAA;YAC5C,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;QACzE,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAA;QACxE,CAAC;QAED,mBAAmB;QACnB,MAAM,WAAW,GAAG,uBAAuB,EAAE,CAAA;QAC7C,MAAM,aAAa,GAAG,mBAAmB,EAAE,CAAA;QAE3C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACf,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;QACrC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;QAC9B,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YAC9F,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACf,GAAG,CAAC,KAAK,CAAC,mBAAmB,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAA;QAEvF,qBAAqB;QACrB,IAAI,CAAC,aAAa,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;YAC1D,MAAM,mBAAmB,GAAG,MAAM,CAAC,SAAS,CAAA;YAE5C,IAAI,wBAAwB,GAAG,KAAK,CAAA;YACpC,KAAK,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC;gBACpC,MAAM,SAAS,GAAG,uBAAuB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;gBAClD,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;oBACnD,wBAAwB,GAAG,IAAI,CAAA;oBAC/B,MAAK;gBACP,CAAC;YACH,CAAC;YAED,IAAI,wBAAwB,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;gBACf,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,4FAA4F,CAAC,CAAC,CAAC,CAAA;gBAC1H,GAAG,CAAC,GAAG,CAAC,qGAAqG,CAAC,CAAA;gBAC9G,GAAG,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAA;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAA;IACxD,CAAC;AACH,CAAC"}

package/dist/commands/syncContext.d.ts

@@ -0,0 +1,18 @@
+/**
+ * syncContext.ts — CLI command to sync Git context (branch, commit) to daemon.
+ *
+ * Saves current Git status details locally to `.intutic/git-context.json`
+ * which is picked up by the sync daemon and reported to the control plane.
+ *
+ * LLD #14 — gitHooks.ts & syncContext.ts
+ * HLD §3.14 — Real-Time State Mirroring (Git hooks context integration)
+ *
+ * @module
+ */
+export interface SyncContextOpts {
+    git?: boolean;
+    branch?: string;
+    commit?: string;
+}
+export declare function runSyncContext(opts: SyncContextOpts): Promise<void>;
+//# sourceMappingURL=syncContext.d.ts.map

package/dist/commands/syncContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncContext.d.ts","sourceRoot":"","sources":["../../src/commands/syncContext.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBzE"}

package/dist/commands/syncContext.js

@@ -0,0 +1,37 @@
+/**
+ * syncContext.ts — CLI command to sync Git context (branch, commit) to daemon.
+ *
+ * Saves current Git status details locally to `.intutic/git-context.json`
+ * which is picked up by the sync daemon and reported to the control plane.
+ *
+ * LLD #14 — gitHooks.ts & syncContext.ts
+ * HLD §3.14 — Real-Time State Mirroring (Git hooks context integration)
+ *
+ * @module
+ */
+import * as node_fs from 'node:fs/promises';
+import * as node_path from 'node:path';
+import { log } from '../lib/logger.js';
+import { newIso } from '@intutic/id';
+export async function runSyncContext(opts) {
+    const workspaceRoot = process.cwd();
+    const intuticDir = node_path.join(workspaceRoot, '.intutic');
+    try {
+        await node_fs.mkdir(intuticDir, { recursive: true });
+        const contextPath = node_path.join(intuticDir, 'git-context.json');
+        const contextData = {
+            git: {
+                branch: opts.branch || '',
+                commit: opts.commit || '',
+            },
+            updatedAt: newIso(),
+        };
+        await node_fs.writeFile(contextPath, JSON.stringify(contextData, null, 2) + '\n', 'utf-8');
+        log.dim(`Saved Git context to .intutic/git-context.json: branch=${opts.branch}, commit=${opts.commit}`);
+    }
+    catch (err) {
+        log.error(`Failed to write Git context: ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=syncContext.js.map

package/dist/commands/syncContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncContext.js","sourceRoot":"","sources":["../../src/commands/syncContext.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAA;AAC3C,OAAO,KAAK,SAAS,MAAM,WAAW,CAAA;AACtC,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAQpC,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAqB;IACxD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE,CAAA;IACnC,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAA;IAE5D,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACpD,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAA;QAElE,MAAM,WAAW,GAAG;YAClB,GAAG,EAAE;gBACH,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;gBACzB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;aAC1B;YACD,SAAS,EAAE,MAAM,EAAE;SACpB,CAAA;QAED,MAAM,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;QAC1F,GAAG,CAAC,GAAG,CAAC,0DAA0D,IAAI,CAAC,MAAM,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IACzG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,gCAAgC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC7F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC"}

package/dist/commands/traces.d.ts

@@ -0,0 +1,32 @@
+/**
+ * `intutic traces` — List and inspect execution traces.
+ *
+ * Subcommands:
+ *   - `intutic traces list [--limit N] [--since 24h] [--action TYPE] [--model NAME] [--json]`
+ *   - `intutic traces inspect <trace_id>`
+ *
+ * LLD #9 — PLG Self-Serve (Appendix: CLI Traces Commands)
+ * TD-059
+ *
+ * @module
+ */
+interface TraceListCliOpts {
+    limit?: string;
+    since?: string;
+    action?: string;
+    model?: string;
+    json?: boolean;
+    dev?: boolean;
+}
+/**
+ * `intutic traces list` — List execution traces for the authenticated workspace.
+ */
+export declare function runTracesList(opts: TraceListCliOpts): Promise<void>;
+/**
+ * `intutic traces inspect <trace_id>` — Show full detail of a single trace.
+ */
+export declare function runTracesInspect(traceId: string, opts: {
+    dev?: boolean;
+}): Promise<void>;
+export {};
+//# sourceMappingURL=traces.d.ts.map

package/dist/commands/traces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"traces.d.ts","sourceRoot":"","sources":["../../src/commands/traces.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAWH,UAAU,gBAAgB;IACxB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AA2HD;;GAEG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgEzE;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GACtB,OAAO,CAAC,IAAI,CAAC,CAmCf"}

package/dist/commands/traces.js

@@ -0,0 +1,207 @@
+/**
+ * `intutic traces` — List and inspect execution traces.
+ *
+ * Subcommands:
+ *   - `intutic traces list [--limit N] [--since 24h] [--action TYPE] [--model NAME] [--json]`
+ *   - `intutic traces inspect <trace_id>`
+ *
+ * LLD #9 — PLG Self-Serve (Appendix: CLI Traces Commands)
+ * TD-059
+ *
+ * @module
+ */
+import { log } from '../lib/logger.js';
+import { loadCredentials } from '../config/store.js';
+import { resolveControlPlaneUrl } from '../config/paths.js';
+import { createApiClient } from '../lib/api.js';
+import pc from 'picocolors';
+// ─── Duration Parser ────────────────────────────────────────────────
+/**
+ * Parses a human-friendly duration string (e.g. "24h", "7d", "30m")
+ * into an ISO timestamp for the `since` query parameter.
+ */
+function parseSince(since) {
+    const match = since.match(/^(\d+)(m|h|d)$/i);
+    if (!match) {
+        // Treat as raw ISO timestamp if not a duration
+        return since;
+    }
+    const value = parseInt(match[1], 10);
+    const unit = match[2].toLowerCase();
+    const now = Date.now();
+    let ms;
+    switch (unit) {
+        case 'm':
+            ms = value * 60 * 1000;
+            break;
+        case 'h':
+            ms = value * 60 * 60 * 1000;
+            break;
+        case 'd':
+            ms = value * 24 * 60 * 60 * 1000;
+            break;
+        default:
+            ms = 24 * 60 * 60 * 1000;
+    }
+    return new Date(now - ms).toISOString();
+}
+// ─── Formatting Helpers ─────────────────────────────────────────────
+/** Truncate a trace ID for table display (e.g. "tr_abc123..." → 14 chars). */
+function truncateId(id) {
+    if (id.length <= 14)
+        return id;
+    return id.slice(0, 11) + '...';
+}
+/** Format ISO timestamp for compact table display. */
+function formatTimestamp(iso) {
+    const d = new Date(iso);
+    const pad = (n) => String(n).padStart(2, '0');
+    return `${d.getFullYear()}-${pad(d.getMonth() + 1)}-${pad(d.getDate())} ${pad(d.getHours())}:${pad(d.getMinutes())}:${pad(d.getSeconds())}`;
+}
+/** Color enforcement action based on severity. */
+function colorAction(action) {
+    switch (action) {
+        case 'BYPASS':
+            return pc.green(action);
+        case 'ENHANCE':
+            return pc.cyan(action);
+        case 'HIJACK':
+            return pc.yellow(action);
+        case 'KILL':
+            return pc.red(action);
+        default:
+            return action;
+    }
+}
+/** Color compliance score (green ≥0.8, yellow ≥0.5, red <0.5). */
+function colorScore(score) {
+    const s = score.toFixed(2);
+    if (score >= 0.8)
+        return pc.green(s);
+    if (score >= 0.5)
+        return pc.yellow(s);
+    return pc.red(s);
+}
+/** Format cost as USD with dollar sign. */
+function formatCost(usd) {
+    return `$${usd.toFixed(4)}`;
+}
+/** Pad a string to a fixed width (right-pad with spaces). */
+function pad(str, width) {
+    if (str.length >= width)
+        return str.slice(0, width);
+    return str + ' '.repeat(width - str.length);
+}
+/** Render a simple table with borders. */
+function renderTable(headers, widths, rows) {
+    const top = '┌' + widths.map((w) => '─'.repeat(w + 2)).join('┬') + '┐';
+    const mid = '├' + widths.map((w) => '─'.repeat(w + 2)).join('┼') + '┤';
+    const bot = '└' + widths.map((w) => '─'.repeat(w + 2)).join('┴') + '┘';
+    const fmtRow = (cells) => '│ ' + cells.map((c, i) => pad(c, widths[i])).join(' │ ') + ' │';
+    console.log(top);
+    console.log(fmtRow(headers));
+    console.log(mid);
+    for (const row of rows) {
+        console.log(fmtRow(row));
+    }
+    console.log(bot);
+}
+// ─── Friendly duration label (for footer) ───────────────────────────
+function friendlyDuration(since) {
+    const match = since.match(/^(\d+)(m|h|d)$/i);
+    if (!match)
+        return since;
+    const val = match[1];
+    const unit = match[2].toLowerCase();
+    const labels = { m: 'minute', h: 'hour', d: 'day' };
+    const label = labels[unit] ?? unit;
+    return `${val} ${label}${Number(val) !== 1 ? 's' : ''}`;
+}
+// ─── Commands ───────────────────────────────────────────────────────
+/**
+ * `intutic traces list` — List execution traces for the authenticated workspace.
+ */
+export async function runTracesList(opts) {
+    const creds = await loadCredentials();
+    if (!creds) {
+        log.error('Not authenticated. Run `intutic login` first.');
+        process.exit(1);
+    }
+    const controlPlaneUrl = resolveControlPlaneUrl(opts.dev);
+    const client = createApiClient(controlPlaneUrl, creds.apiKey);
+    // Build query params
+    const params = new URLSearchParams();
+    if (opts.limit)
+        params.set('limit', opts.limit);
+    if (opts.since)
+        params.set('since', parseSince(opts.since));
+    if (opts.action)
+        params.set('enforcement', opts.action);
+    if (opts.model)
+        params.set('model', opts.model);
+    try {
+        const data = await client.get(`/api/v1/traces?${params.toString()}`);
+        // ── JSON output mode ──
+        if (opts.json) {
+            console.log(JSON.stringify(data, null, 2));
+            return;
+        }
+        // ── Table output mode ──
+        log.header('Intutic — Execution Traces');
+        if (data.traces.length === 0) {
+            log.dim('  No traces found matching your filters.');
+            return;
+        }
+        const headers = ['Trace ID', 'Timestamp', 'Model', 'Action', 'Score', 'Cost'];
+        const widths = [14, 19, 16, 8, 5, 9];
+        const rows = data.traces.map((t) => [
+            truncateId(t.traceId),
+            formatTimestamp(t.timestamp),
+            t.requestedModel.length > 16
+                ? t.requestedModel.slice(0, 15) + '…'
+                : t.requestedModel,
+            colorAction(t.enforcementAction),
+            colorScore(t.complianceScore),
+            formatCost(t.actualCostUsd),
+        ]);
+        renderTable(headers, widths, rows);
+        const sinceLabel = opts.since ?? '24h';
+        console.log(pc.dim(`Showing ${data.traces.length} of ${data.total} traces (last ${friendlyDuration(sinceLabel)})`));
+    }
+    catch (err) {
+        log.error(`Failed to list traces: ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+    }
+}
+/**
+ * `intutic traces inspect <trace_id>` — Show full detail of a single trace.
+ */
+export async function runTracesInspect(traceId, opts) {
+    const creds = await loadCredentials();
+    if (!creds) {
+        log.error('Not authenticated. Run `intutic login` first.');
+        process.exit(1);
+    }
+    const controlPlaneUrl = resolveControlPlaneUrl(opts.dev);
+    const client = createApiClient(controlPlaneUrl, creds.apiKey);
+    try {
+        const data = await client.get(`/api/v1/traces/${encodeURIComponent(traceId)}`);
+        log.header(`Intutic — Trace Detail`);
+        log.field('Trace ID', String(data.traceId));
+        console.log('');
+        // Syntax-highlighted JSON output
+        const json = JSON.stringify(data, null, 2);
+        const highlighted = json
+            .replace(/"([^"]+)":/g, (_, key) => `${pc.cyan(`"${key}"`)}:`)
+            .replace(/: "([^"]+)"/g, (_, val) => `: ${pc.green(`"${val}"`)}`)
+            .replace(/: (\d+\.?\d*)/g, (_, num) => `: ${pc.yellow(num)}`)
+            .replace(/: (true|false)/g, (_, b) => `: ${pc.magenta(b)}`)
+            .replace(/: (null)/g, (_, n) => `: ${pc.dim(n)}`);
+        console.log(highlighted);
+    }
+    catch (err) {
+        log.error(`Failed to inspect trace: ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=traces.js.map

package/dist/commands/traces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"traces.js","sourceRoot":"","sources":["../../src/commands/traces.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,MAAM,YAAY,CAAA;AAc3B,uEAAuE;AAEvE;;;GAGG;AACH,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAA;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,+CAA+C;QAC/C,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAEtB,IAAI,EAAU,CAAA;IACd,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,GAAG;YACN,EAAE,GAAG,KAAK,GAAG,EAAE,GAAG,IAAI,CAAA;YACtB,MAAK;QACP,KAAK,GAAG;YACN,EAAE,GAAG,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;YAC3B,MAAK;QACP,KAAK,GAAG;YACN,EAAE,GAAG,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;YAChC,MAAK;QACP;YACE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;IAC5B,CAAC;IAED,OAAO,IAAI,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;AACzC,CAAC;AAED,uEAAuE;AAEvE,8EAA8E;AAC9E,SAAS,UAAU,CAAC,EAAU;IAC5B,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,EAAE,CAAA;IAC9B,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAA;AAChC,CAAC;AAED,sDAAsD;AACtD,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAA;IACvB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACrD,OAAO,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,CAAA;AAC7I,CAAC;AAED,kDAAkD;AAClD,SAAS,WAAW,CAAC,MAAc;IACjC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACzB,KAAK,SAAS;YACZ,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACxB,KAAK,QAAQ;YACX,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC1B,KAAK,MAAM;YACT,OAAO,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACvB;YACE,OAAO,MAAM,CAAA;IACjB,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IAC1B,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACpC,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IACrC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AAClB,CAAC;AAED,2CAA2C;AAC3C,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAA;AAC7B,CAAC;AAED,6DAA6D;AAC7D,SAAS,GAAG,CAAC,GAAW,EAAE,KAAa;IACrC,IAAI,GAAG,CAAC,MAAM,IAAI,KAAK;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IACnD,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAA;AAC7C,CAAC;AAED,0CAA0C;AAC1C,SAAS,WAAW,CAClB,OAAiB,EACjB,MAAgB,EAChB,IAAgB;IAEhB,MAAM,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IACtE,MAAM,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IACtE,MAAM,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IAEtE,MAAM,MAAM,GAAG,CAAC,KAAe,EAAE,EAAE,CACjC,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAA;IAElE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAChB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;IAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAChB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1B,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AAClB,CAAC;AAED,uEAAuE;AAEvE,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAA;IAC5C,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAA;IACxB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IACpB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;IACnC,MAAM,MAAM,GAA2B,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAA;IAC3E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAA;IAClC,OAAO,GAAG,GAAG,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;AACzD,CAAC;AAED,uEAAuE;AAEvE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAsB;IACxD,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAA;QAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,eAAe,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACxD,MAAM,MAAM,GAAG,eAAe,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IAE7D,qBAAqB;IACrB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;IACpC,IAAI,IAAI,CAAC,KAAK;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAC/C,IAAI,IAAI,CAAC,KAAK;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IAC3D,IAAI,IAAI,CAAC,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;IACvD,IAAI,IAAI,CAAC,KAAK;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAE/C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAC3B,kBAAkB,MAAM,CAAC,QAAQ,EAAE,EAAE,CACtC,CAAA;QAED,yBAAyB;QACzB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;YAC1C,OAAM;QACR,CAAC;QAED,0BAA0B;QAC1B,GAAG,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAA;QAExC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAA;YACnD,OAAM;QACR,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QAC7E,MAAM,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QAEpC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAClC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;YACrB,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5B,CAAC,CAAC,cAAc,CAAC,MAAM,GAAG,EAAE;gBAC1B,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG;gBACrC,CAAC,CAAC,CAAC,CAAC,cAAc;YACpB,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC;YAChC,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC;YAC7B,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC;SAC5B,CAAC,CAAA;QAEF,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QAElC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAA;QACtC,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CACJ,WAAW,IAAI,CAAC,MAAM,CAAC,MAAM,OAAO,IAAI,CAAC,KAAK,iBAAiB,gBAAgB,CAAC,UAAU,CAAC,GAAG,CAC/F,CACF,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CACP,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC7E,CAAA;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,IAAuB;IAEvB,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAA;QAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,eAAe,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACxD,MAAM,MAAM,GAAG,eAAe,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IAE7D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAC3B,kBAAkB,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAChD,CAAA;QAED,GAAG,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAA;QACpC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;QAC3C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAEf,iCAAiC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAC1C,MAAM,WAAW,GAAG,IAAI;aACrB,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,GAAW,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC;aACrE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,GAAW,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;aACxE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,GAAW,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;aACpE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;aAClE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QAE3D,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CACP,4BAA4B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/E,CAAA;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC"}

package/dist/commands/whoami.d.ts

@@ -0,0 +1,12 @@
+/**
+ * `intutic whoami` — Show current authenticated identity.
+ *
+ * Calls GET /api/v1/auth/me to fetch fresh identity info.
+ *
+ * LLD #8 — Sync Daemon / CLI
+ * @module
+ */
+export declare function runWhoami(opts: {
+    dev?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=whoami.d.ts.map

package/dist/commands/whoami.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.d.ts","sourceRoot":"","sources":["../../src/commands/whoami.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,wBAAsB,SAAS,CAAC,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBtE"}

package/dist/commands/whoami.js

@@ -0,0 +1,34 @@
+/**
+ * `intutic whoami` — Show current authenticated identity.
+ *
+ * Calls GET /api/v1/auth/me to fetch fresh identity info.
+ *
+ * LLD #8 — Sync Daemon / CLI
+ * @module
+ */
+import { log } from '../lib/logger.js';
+import { loadCredentials } from '../config/store.js';
+import { resolveControlPlaneUrl } from '../config/paths.js';
+import { createApiClient } from '../lib/api.js';
+export async function runWhoami(opts) {
+    const creds = await loadCredentials();
+    if (!creds) {
+        log.error('Not authenticated. Run `intutic login` first.');
+        process.exit(1);
+    }
+    const controlPlaneUrl = resolveControlPlaneUrl(opts.dev);
+    const client = createApiClient(controlPlaneUrl, creds.apiKey);
+    try {
+        const me = await client.getMe();
+        log.header('Intutic — Identity');
+        log.field('Email', me.email);
+        log.field('Member ID', me.memberId);
+        log.field('Workspace', me.workspaceId);
+        log.field('Role', me.role);
+    }
+    catch (err) {
+        log.error(`Failed to fetch identity: ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=whoami.js.map

package/dist/commands/whoami.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.js","sourceRoot":"","sources":["../../src/commands/whoami.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAE/C,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAuB;IACrD,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAA;QAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,eAAe,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACxD,MAAM,MAAM,GAAG,eAAe,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IAE7D,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QAC/B,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAA;QAChC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,CAAA;QAC5B,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAA;QACnC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,CAAA;QACtC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC1F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC"}

package/dist/config/keychain.d.ts

@@ -0,0 +1,28 @@
+/**
+ * keychain.ts — Secure credential storage using native OS commands.
+ *
+ * Utilizes:
+ * - macOS: `security` command line tool
+ * - Linux: `secret-tool` (libsecret-tools package)
+ * - Windows: `cmdkey` (Credential Manager CLI) and PowerShell fallback
+ *
+ * Falls back to local credentials.json if OS keychain utility is unavailable.
+ *
+ * LLD #14 — keychain.ts
+ * HLD §3.14 — OS Keychain Storage
+ *
+ * @module
+ */
+/**
+ * Stores token in OS Keychain. Returns true on success, false on failure/fallback.
+ */
+export declare function storeToken(workspaceId: string, token: string): Promise<boolean>;
+/**
+ * Retrieves token from OS Keychain. Returns null if absent/fallback.
+ */
+export declare function retrieveToken(workspaceId: string): Promise<string | null>;
+/**
+ * Deletes token from OS Keychain. Returns true on success.
+ */
+export declare function deleteToken(workspaceId: string): Promise<boolean>;
+//# sourceMappingURL=keychain.d.ts.map

package/dist/config/keychain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain.d.ts","sourceRoot":"","sources":["../../src/config/keychain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAQH;;GAEG;AACH,wBAAsB,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAiCrF;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA+B/E;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CA6BvE"}

package/dist/config/keychain.js

@@ -0,0 +1,98 @@
+/**
+ * keychain.ts — Secure credential storage using native OS commands.
+ *
+ * Utilizes:
+ * - macOS: `security` command line tool
+ * - Linux: `secret-tool` (libsecret-tools package)
+ * - Windows: `cmdkey` (Credential Manager CLI) and PowerShell fallback
+ *
+ * Falls back to local credentials.json if OS keychain utility is unavailable.
+ *
+ * LLD #14 — keychain.ts
+ * HLD §3.14 — OS Keychain Storage
+ *
+ * @module
+ */
+import { execFileSync } from 'node:child_process';
+import { log } from '../lib/logger.js';
+const SERVICE_NAME = 'intutic';
+const ACCOUNT_NAME = 'token';
+/**
+ * Stores token in OS Keychain. Returns true on success, false on failure/fallback.
+ */
+export async function storeToken(workspaceId, token) {
+    const target = `${SERVICE_NAME}:workspace:${workspaceId}`;
+    try {
+        if (process.platform === 'darwin') {
+            // macOS keychain
+            execFileSync('security', ['add-generic-password', '-a', ACCOUNT_NAME, '-s', target, '-w', token, '-U'], { stdio: 'ignore' });
+            return true;
+        }
+        else if (process.platform === 'linux') {
+            // Linux libsecret (secret-tool)
+            // Pass token via stdin to avoid exposing it in process tree
+            execFileSync('secret-tool', ['store', `--label=Intutic Workspace ${workspaceId}`, 'workspace', workspaceId, 'service', SERVICE_NAME], { input: token, stdio: 'pipe' });
+            return true;
+        }
+        else if (process.platform === 'win32') {
+            // Windows cmdkey (Credential Manager)
+            execFileSync('cmdkey', [`/generic:${target}`, `/user:${ACCOUNT_NAME}`, `/pass:${token}`], { stdio: 'ignore' });
+            return true;
+        }
+    }
+    catch (err) {
+        log.dim(`OS Keychain save failed (falling back to credentials.json): ${err instanceof Error ? err.message : String(err)}`);
+    }
+    return false;
+}
+/**
+ * Retrieves token from OS Keychain. Returns null if absent/fallback.
+ */
+export async function retrieveToken(workspaceId) {
+    const target = `${SERVICE_NAME}:workspace:${workspaceId}`;
+    try {
+        if (process.platform === 'darwin') {
+            const output = execFileSync('security', ['find-generic-password', '-a', ACCOUNT_NAME, '-s', target, '-w'], { encoding: 'utf-8', stdio: 'pipe' });
+            return output.trim();
+        }
+        else if (process.platform === 'linux') {
+            const output = execFileSync('secret-tool', ['lookup', 'workspace', workspaceId, 'service', SERVICE_NAME], { encoding: 'utf-8', stdio: 'pipe' });
+            return output.trim();
+        }
+        else if (process.platform === 'win32') {
+            // Windows Credential Manager lookup via PowerShell
+            const psCommand = `[void][Windows.Security.Credentials.PasswordVault,Windows.Security.Credentials,ContentType=WindowsRuntime]; $v = New-Object Windows.Security.Credentials.PasswordVault; try { $c = $v.Retrieve("${target.replace(/"/g, '')}", "${ACCOUNT_NAME}"); $c.RetrievePassword(); $c.Password } catch { exit 1 }`;
+            const output = execFileSync('powershell', ['-Command', psCommand], { encoding: 'utf-8', stdio: 'pipe' });
+            return output.trim();
+        }
+    }
+    catch {
+        // Normal case: key doesn't exist, or tool unavailable. Fallback handles it.
+    }
+    return null;
+}
+/**
+ * Deletes token from OS Keychain. Returns true on success.
+ */
+export async function deleteToken(workspaceId) {
+    const target = `${SERVICE_NAME}:workspace:${workspaceId}`;
+    try {
+        if (process.platform === 'darwin') {
+            execFileSync('security', ['delete-generic-password', '-a', ACCOUNT_NAME, '-s', target], { stdio: 'ignore' });
+            return true;
+        }
+        else if (process.platform === 'linux') {
+            execFileSync('secret-tool', ['clear', 'workspace', workspaceId, 'service', SERVICE_NAME], { stdio: 'ignore' });
+            return true;
+        }
+        else if (process.platform === 'win32') {
+            execFileSync('cmdkey', [`/delete:${target}`], { stdio: 'ignore' });
+            return true;
+        }
+    }
+    catch {
+        // Key might not exist or tool unavailable
+    }
+    return false;
+}
+//# sourceMappingURL=keychain.js.map

package/dist/config/keychain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain.js","sourceRoot":"","sources":["../../src/config/keychain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAY,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AAEtC,MAAM,YAAY,GAAG,SAAS,CAAA;AAC9B,MAAM,YAAY,GAAG,OAAO,CAAA;AAE5B;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,WAAmB,EAAE,KAAa;IACjE,MAAM,MAAM,GAAG,GAAG,YAAY,cAAc,WAAW,EAAE,CAAA;IACzD,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,iBAAiB;YACjB,YAAY,CACV,UAAU,EACV,CAAC,sBAAsB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,EAC7E,EAAE,KAAK,EAAE,QAAQ,EAAE,CACpB,CAAA;YACD,OAAO,IAAI,CAAA;QACb,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACxC,gCAAgC;YAChC,4DAA4D;YAC5D,YAAY,CACV,aAAa,EACb,CAAC,OAAO,EAAE,6BAA6B,WAAW,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,CAAC,EACxG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAChC,CAAA;YACD,OAAO,IAAI,CAAA;QACb,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACxC,sCAAsC;YACtC,YAAY,CACV,QAAQ,EACR,CAAC,YAAY,MAAM,EAAE,EAAE,SAAS,YAAY,EAAE,EAAE,SAAS,KAAK,EAAE,CAAC,EACjE,EAAE,KAAK,EAAE,QAAQ,EAAE,CACpB,CAAA;YACD,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,GAAG,CAAC,+DAA+D,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC5H,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,WAAmB;IACrD,MAAM,MAAM,GAAG,GAAG,YAAY,cAAc,WAAW,EAAE,CAAA;IACzD,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,YAAY,CACzB,UAAU,EACV,CAAC,uBAAuB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EACjE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CACrC,CAAA;YACD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAA;QACtB,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,YAAY,CACzB,aAAa,EACb,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,CAAC,EAC7D,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CACrC,CAAA;YACD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAA;QACtB,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACxC,mDAAmD;YACnD,MAAM,SAAS,GAAG,mMAAmM,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,YAAY,2DAA2D,CAAA;YAC3T,MAAM,MAAM,GAAG,YAAY,CACzB,YAAY,EACZ,CAAC,UAAU,EAAE,SAAS,CAAC,EACvB,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CACrC,CAAA;YACD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAA;QACtB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;IAC9E,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,WAAmB;IACnD,MAAM,MAAM,GAAG,GAAG,YAAY,cAAc,WAAW,EAAE,CAAA;IACzD,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,YAAY,CACV,UAAU,EACV,CAAC,yBAAyB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,EAC7D,EAAE,KAAK,EAAE,QAAQ,EAAE,CACpB,CAAA;YACD,OAAO,IAAI,CAAA;QACb,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACxC,YAAY,CACV,aAAa,EACb,CAAC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,CAAC,EAC5D,EAAE,KAAK,EAAE,QAAQ,EAAE,CACpB,CAAA;YACD,OAAO,IAAI,CAAA;QACb,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACxC,YAAY,CACV,QAAQ,EACR,CAAC,WAAW,MAAM,EAAE,CAAC,EACrB,EAAE,KAAK,EAAE,QAAQ,EAAE,CACpB,CAAA;YACD,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0CAA0C;IAC5C,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}