@intutic/cli 1.4.1 → 1.6.0

package/dist/commands/benchmark.js

@@ -1,211 +0,0 @@
-/**
- * `intutic benchmark` — Run, compare, and manage PromptGrade benchmarks.
- *
- * Subcommands:
- *   - `intutic benchmark run --suite <id> [--harness <type>] [--dev]`
- *   - `intutic benchmark compare <runIdA> <runIdB> [--dev]`
- *   - `intutic benchmark suites [--dev]`
- *   - `intutic benchmark export <runId> [--format csv|json] [--dev]`
- *
- * WS-4E Advanced
- */
-import { log } from '../lib/logger.js';
-import { loadCredentials } from '../config/store.js';
-import { resolveControlPlaneUrl } from '../config/paths.js';
-import { createApiClient } from '../lib/api.js';
-import pc from 'picocolors';
-function pad(str, width) {
-    if (str.length >= width)
-        return str.slice(0, width);
-    return str + ' '.repeat(width - str.length);
-}
-function renderTable(headers, widths, rows) {
-    // Draw header line
-    const headerLine = headers.map((h, i) => pad(pc.bold(h), widths[i])).join(' │ ');
-    console.log(headerLine);
-    console.log(widths.map((w) => '─'.repeat(w)).join('─┼─'));
-    // Draw rows
-    for (const row of rows) {
-        const rowLine = row.map((val, i) => pad(val, widths[i])).join(' │ ');
-        console.log(rowLine);
-    }
-}
-function colorOutcome(outcome, expected) {
-    if (outcome === expected) {
-        return pc.green(outcome);
-    }
-    return pc.red(`${outcome} (expected ${expected})`);
-}
-function getGradeColor(score) {
-    const num = parseFloat(score);
-    if (num >= 0.90)
-        return pc.bold(pc.green('A+'));
-    if (num >= 0.80)
-        return pc.bold(pc.green('A'));
-    if (num >= 0.70)
-        return pc.bold(pc.yellow('B'));
-    if (num >= 0.60)
-        return pc.bold(pc.yellow('C'));
-    if (num >= 0.50)
-        return pc.bold(pc.red('D'));
-    return pc.bold(pc.red('F'));
-}
-export async function runBenchmark(opts) {
-    const creds = await loadCredentials();
-    if (!creds) {
-        log.error('Not authenticated. Run `intutic login` first.');
-        process.exit(1);
-    }
-    const controlPlaneUrl = resolveControlPlaneUrl(opts.dev);
-    const client = createApiClient(controlPlaneUrl, creds.apiKey);
-    log.header(`Starting PromptGrade Run`);
-    log.info(`Suite ID: ${pc.bold(opts.suite)}`);
-    log.info(`Harness: ${pc.bold(opts.harness || 'generic')}`);
-    try {
-        // 1. Trigger the benchmark run
-        const result = await client.post('/api/v1/benchmarks/runs', {
-            workspaceId: creds.workspaceId,
-            suiteId: opts.suite,
-            triggeredBy: creds.email || 'cli',
-            harnessType: opts.harness || 'generic',
-        });
-        const runId = result.runId;
-        log.success(`Run created: ${pc.bold(runId)}. Executing tasks...`);
-        // 2. Poll for progress
-        let completed = false;
-        let attempts = 0;
-        const maxAttempts = 120; // 2 minutes max
-        while (!completed && attempts < maxAttempts) {
-            await new Promise((resolve) => setTimeout(resolve, 1500));
-            attempts++;
-            const { run } = await client.get(`/api/v1/benchmarks/runs/${runId}`);
-            if (run.status === 'completed' || run.status === 'failed') {
-                completed = true;
-                if (run.status === 'failed') {
-                    log.error('Benchmark run failed.');
-                    process.exit(1);
-                }
-                // Fetch task results
-                const { results } = await client.get(`/api/v1/benchmarks/runs/${runId}/tasks`);
-                log.header('Benchmark Tasks Completion Summary');
-                const headers = ['Task ID', 'Expected', 'Actual', 'Passed', 'Godel Score', 'Tokens', 'Cost'];
-                const widths = [24, 10, 10, 8, 12, 10, 10];
-                const rows = results.map((r) => [
-                    r.taskId,
-                    r.actualOutcome === 'BLOCK' ? 'BLOCK' : 'ALLOW', // dummy expected since task title not stored here
-                    r.actualOutcome || 'ALLOW',
-                    r.passed ? pc.green('✓') : pc.red('✗'),
-                    parseFloat(r.godelScore || '0').toFixed(2),
-                    String(r.tokensUsed || 0),
-                    `$${parseFloat(r.costUsd || '0').toFixed(4)}`
-                ]);
-                renderTable(headers, widths, rows);
-                log.header('Overall Evaluation Results');
-                log.field('Composite Score', `${run.compositeScore || '0.0000'} (${getGradeColor(run.compositeScore || '0')})`);
-                log.field('Tasks Total', String(run.tasksTotal));
-                log.field('Tasks Passed', pc.green(String(run.tasksPassed)));
-                log.field('Tasks Failed', run.tasksFailed > 0 ? pc.red(String(run.tasksFailed)) : pc.green('0'));
-                log.field('Violations Blocked', pc.green(String(run.violationsCaught)));
-                log.field('Violations Missed', run.violationsMissed > 0 ? pc.red(String(run.violationsMissed)) : pc.green('0'));
-                log.field('Total Token Cost', `$${parseFloat(run.totalCostUsd).toFixed(4)}`);
-                log.field('Total Tokens', String(run.totalTokens));
-            }
-            else {
-                process.stdout.write(pc.dim('.'));
-            }
-        }
-        if (!completed) {
-            log.warn('Benchmark run execution timed out on the CLI. Check the dashboard for status.');
-        }
-    }
-    catch (err) {
-        log.error(`Failed to execute benchmark run: ${err instanceof Error ? err.message : String(err)}`);
-        process.exit(1);
-    }
-}
-export async function compareBenchmarks(runIdA, runIdB, opts) {
-    const creds = await loadCredentials();
-    if (!creds) {
-        log.error('Not authenticated. Run `intutic login` first.');
-        process.exit(1);
-    }
-    const controlPlaneUrl = resolveControlPlaneUrl(opts.dev);
-    const client = createApiClient(controlPlaneUrl, creds.apiKey);
-    log.header(`Comparing Run ${runIdA} vs Run ${runIdB}`);
-    try {
-        const report = await client.get(`/api/v1/benchmarks/compare/${runIdA}/${runIdB}`);
-        log.info(`Score Delta: ${report.scoreDelta >= 0 ? pc.green(`+${report.scoreDelta.toFixed(4)}`) : pc.red(report.scoreDelta.toFixed(4))}`);
-        log.field('Run A Composite Score', `${report.runA.compositeScore || '0.0000'} (${getGradeColor(report.runA.compositeScore || '0')})`);
-        log.field('Run B Composite Score', `${report.runB.compositeScore || '0.0000'} (${getGradeColor(report.runB.compositeScore || '0')})`);
-        log.header('Task Comparison Detail');
-        const headers = ['Task Title', 'Expected', 'Outcome A', 'Outcome B', 'Cost Delta', 'Tokens Delta'];
-        const widths = [30, 10, 24, 24, 12, 14];
-        const rows = report.taskComparisons.map((c) => [
-            c.title,
-            c.expectedOutcome,
-            colorOutcome(c.outcomeA, c.expectedOutcome),
-            colorOutcome(c.outcomeB, c.expectedOutcome),
-            c.costDelta === 0 ? '$0.0000' : (c.costDelta > 0 ? pc.red(`+$${c.costDelta.toFixed(4)}`) : pc.green(`-$${Math.abs(c.costDelta).toFixed(4)}`)),
-            c.tokenDelta === 0 ? '0' : (c.tokenDelta > 0 ? pc.red(`+${c.tokenDelta}`) : pc.green(`${c.tokenDelta}`))
-        ]);
-        renderTable(headers, widths, rows);
-    }
-    catch (err) {
-        log.error(`Failed to compare benchmarks: ${err instanceof Error ? err.message : String(err)}`);
-        process.exit(1);
-    }
-}
-export async function listSuites(opts) {
-    const creds = await loadCredentials();
-    if (!creds) {
-        log.error('Not authenticated. Run `intutic login` first.');
-        process.exit(1);
-    }
-    const controlPlaneUrl = resolveControlPlaneUrl(opts.dev);
-    const client = createApiClient(controlPlaneUrl, creds.apiKey);
-    log.header('PromptGrade Benchmark Suites');
-    try {
-        const { suites } = await client.get(`/api/v1/benchmarks/suites?workspaceId=${creds.workspaceId}`);
-        const headers = ['Suite ID', 'Name', 'Tasks', 'Type'];
-        const widths = [32, 30, 8, 12];
-        const rows = suites.map((s) => [
-            s.suiteId,
-            s.name,
-            String(s.taskCount),
-            s.isBuiltin ? pc.cyan('Built-in') : pc.yellow('Custom')
-        ]);
-        renderTable(headers, widths, rows);
-    }
-    catch (err) {
-        log.error(`Failed to list suites: ${err instanceof Error ? err.message : String(err)}`);
-        process.exit(1);
-    }
-}
-export async function exportBenchmark(runId, opts) {
-    const creds = await loadCredentials();
-    if (!creds) {
-        log.error('Not authenticated. Run `intutic login` first.');
-        process.exit(1);
-    }
-    const controlPlaneUrl = resolveControlPlaneUrl(opts.dev);
-    const client = createApiClient(controlPlaneUrl, creds.apiKey);
-    try {
-        const { run } = await client.get(`/api/v1/benchmarks/runs/${runId}`);
-        const { results } = await client.get(`/api/v1/benchmarks/runs/${runId}/tasks`);
-        if (opts.format === 'json') {
-            console.log(JSON.stringify({ run, results }, null, 2));
-        }
-        else {
-            // CSV format
-            console.log('Result ID,Task ID,Expected Outcome,Actual Outcome,Passed,Godel Score,Tokens Used,Cost USD,Latency MS,Error Detail');
-            for (const r of results) {
-                console.log(`"${r.resultId}","${r.taskId}","BLOCK","${r.actualOutcome || ''}","${r.passed ? 'true' : 'false'}","${r.godelScore || ''}","${r.tokensUsed || 0}","${r.costUsd || ''}","${r.latencyMs || 0}","${r.errorDetail || ''}"`);
-            }
-        }
-    }
-    catch (err) {
-        log.error(`Failed to export benchmark: ${err instanceof Error ? err.message : String(err)}`);
-        process.exit(1);
-    }
-}
-//# sourceMappingURL=benchmark.js.map

package/dist/commands/benchmark.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"benchmark.js","sourceRoot":"","sources":["../../src/commands/benchmark.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,MAAM,YAAY,CAAA;AAkB3B,SAAS,GAAG,CAAC,GAAW,EAAE,KAAa;IACrC,IAAI,GAAG,CAAC,MAAM,IAAI,KAAK;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IACnD,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAA;AAC7C,CAAC;AAED,SAAS,WAAW,CAAC,OAAiB,EAAE,MAAgB,EAAE,IAAgB;IACxE,mBAAmB;IACnB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAChF,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IACvB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IAEzD,YAAY;IACZ,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACtB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,QAAgB;IACrD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC1B,CAAC;IACD,OAAO,EAAE,CAAC,GAAG,CAAC,GAAG,OAAO,cAAc,QAAQ,GAAG,CAAC,CAAA;AACpD,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;IAC7B,IAAI,GAAG,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IAC/C,IAAI,GAAG,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9C,IAAI,GAAG,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IAC/C,IAAI,GAAG,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IAC/C,IAAI,GAAG,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IAC5C,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAyB;IAC1D,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAA;QAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,eAAe,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACxD,MAAM,MAAM,GAAG,eAAe,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IAE7D,GAAG,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAA;IACtC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAC5C,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,EAAE,CAAC,CAAA;IAE1D,IAAI,CAAC;QACH,+BAA+B;QAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAiC,yBAAyB,EAAE;YAC1F,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO,EAAE,IAAI,CAAC,KAAK;YACnB,WAAW,EAAE,KAAK,CAAC,KAAK,IAAI,KAAK;YACjC,WAAW,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS;SACvC,CAAC,CAAA;QAEF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;QAC1B,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAA;QAEjE,uBAAuB;QACvB,IAAI,SAAS,GAAG,KAAK,CAAA;QACrB,IAAI,QAAQ,GAAG,CAAC,CAAA;QAChB,MAAM,WAAW,GAAG,GAAG,CAAA,CAAC,gBAAgB;QAExC,OAAO,CAAC,SAAS,IAAI,QAAQ,GAAG,WAAW,EAAE,CAAC;YAC5C,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;YACzD,QAAQ,EAAE,CAAA;YAEV,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,GAAG,CAAwB,2BAA2B,KAAK,EAAE,CAAC,CAAA;YAE3F,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC1D,SAAS,GAAG,IAAI,CAAA;gBAEhB,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC5B,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAA;oBAClC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACjB,CAAC;gBAED,qBAAqB;gBACrB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,GAAG,CAAqC,2BAA2B,KAAK,QAAQ,CAAC,CAAA;gBAElH,GAAG,CAAC,MAAM,CAAC,oCAAoC,CAAC,CAAA;gBAChD,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;gBAC5F,MAAM,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;gBAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;oBAC9B,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,kDAAkD;oBACnG,CAAC,CAAC,aAAa,IAAI,OAAO;oBAC1B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;oBACtC,UAAU,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;oBAC1C,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC;oBACzB,IAAI,UAAU,CAAC,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;iBAC9C,CAAC,CAAA;gBAEF,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;gBAElC,GAAG,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAA;gBACxC,GAAG,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAG,GAAG,CAAC,cAAc,IAAI,QAAQ,KAAK,aAAa,CAAC,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;gBAC/G,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAA;gBAChD,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;gBAC5D,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;gBAChG,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAA;gBACvE,GAAG,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;gBAC/G,GAAG,CAAC,KAAK,CAAC,kBAAkB,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;gBAC5E,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAA;YAEpD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;YACnC,CAAC;QACH,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAA;QAC3F,CAAC;IAEH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACjG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAc,EAAE,MAAc,EAAE,IAAuB;IAC7F,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAA;QAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,eAAe,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACxD,MAAM,MAAM,GAAG,eAAe,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IAE7D,GAAG,CAAC,MAAM,CAAC,iBAAiB,MAAM,WAAW,MAAM,EAAE,CAAC,CAAA;IAEtD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAM,8BAA8B,MAAM,IAAI,MAAM,EAAE,CAAC,CAAA;QAEtF,GAAG,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACxI,GAAG,CAAC,KAAK,CAAC,uBAAuB,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,QAAQ,KAAK,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;QACrI,GAAG,CAAC,KAAK,CAAC,uBAAuB,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,QAAQ,KAAK,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;QAErI,GAAG,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAA;QACpC,MAAM,OAAO,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,CAAC,CAAA;QAClG,MAAM,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC;YAClD,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,eAAe;YACjB,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,eAAe,CAAC;YAC3C,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,eAAe,CAAC;YAC3C,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7I,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;SACzG,CAAC,CAAA;QAEF,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IAEpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,iCAAiC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC9F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAA4B;IAC3D,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAA;QAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,eAAe,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACxD,MAAM,MAAM,GAAG,eAAe,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IAE7D,GAAG,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAA;IAE1C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,GAAG,CAA+B,yCAAyC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;QAE/H,MAAM,OAAO,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QACrD,MAAM,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC7B,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,IAAI;YACN,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YACnB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;SACxD,CAAC,CAAA;QAEF,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IAEpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACvF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAa,EAAE,IAA4B;IAC/E,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAA;QAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,eAAe,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACxD,MAAM,MAAM,GAAG,eAAe,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IAE7D,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,GAAG,CAAwB,2BAA2B,KAAK,EAAE,CAAC,CAAA;QAC3F,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,GAAG,CAAqC,2BAA2B,KAAK,QAAQ,CAAC,CAAA;QAElH,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;QACxD,CAAC;aAAM,CAAC;YACN,aAAa;YACb,OAAO,CAAC,GAAG,CAAC,mHAAmH,CAAC,CAAA;YAChI,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,MAAM,cAAc,CAAC,CAAC,aAAa,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,UAAU,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,IAAI,EAAE,MAAM,CAAC,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,IAAI,EAAE,GAAG,CAAC,CAAA;YACrO,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,+BAA+B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC"}

package/dist/commands/budgetCompatibility.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=budgetCompatibility.test.d.ts.map

package/dist/commands/budgetCompatibility.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"budgetCompatibility.test.d.ts","sourceRoot":"","sources":["../../src/commands/budgetCompatibility.test.ts"],"names":[],"mappings":""}

package/dist/commands/budgetCompatibility.test.js

@@ -1,19 +0,0 @@
-import { describe, it, expect } from 'vitest';
-describe('CLI Budget Parser Compatibility', () => {
-    it('correctly resolves local budget using camelCase key', () => {
-        const config = { maxDailyBudgetUsd: 15.50 };
-        const maxDailyBudget = config?.maxDailyBudgetUsd ?? config?.max_daily_budget_usd ?? 10.0;
-        expect(maxDailyBudget).toBe(15.50);
-    });
-    it('correctly resolves local budget using snake_case alias key', () => {
-        const config = { max_daily_budget_usd: 22.75 };
-        const maxDailyBudget = config?.maxDailyBudgetUsd ?? config?.max_daily_budget_usd ?? 10.0;
-        expect(maxDailyBudget).toBe(22.75);
-    });
-    it('correctly defaults when neither key is present', () => {
-        const config = {};
-        const maxDailyBudget = config?.maxDailyBudgetUsd ?? config?.max_daily_budget_usd ?? 10.0;
-        expect(maxDailyBudget).toBe(10.0);
-    });
-});
-//# sourceMappingURL=budgetCompatibility.test.js.map

package/dist/commands/budgetCompatibility.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"budgetCompatibility.test.js","sourceRoot":"","sources":["../../src/commands/budgetCompatibility.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE7C,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,MAAM,GAAQ,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAA;QAChD,MAAM,cAAc,GAAG,MAAM,EAAE,iBAAiB,IAAI,MAAM,EAAE,oBAAoB,IAAI,IAAI,CAAA;QACxF,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,MAAM,GAAQ,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAA;QACnD,MAAM,cAAc,GAAG,MAAM,EAAE,iBAAiB,IAAI,MAAM,EAAE,oBAAoB,IAAI,IAAI,CAAA;QACxF,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,MAAM,GAAQ,EAAE,CAAA;QACtB,MAAM,cAAc,GAAG,MAAM,EAAE,iBAAiB,IAAI,MAAM,EAAE,oBAAoB,IAAI,IAAI,CAAA;QACxF,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/commands/enterprise-install.d.ts

@@ -1,36 +0,0 @@
-/**
- * enterprise-install.ts — `intutic enterprise-install` CLI command.
- *
- * Requires elevated privileges (sudo on macOS/Linux, admin on Windows).
- * Writes system-level governance hooks that survive user-level tampering:
- *
- *   macOS:
- *     - /etc/cursor/hooks.json (system Cursor hooks)
- *     - System keychain CA trust entry for Intutic proxy CA cert
- *     - MDM configuration profile generator
- *
- *   Linux:
- *     - /etc/cursor/hooks.json
- *     - /usr/local/share/ca-certificates/intutic-ca.crt + update-ca-certificates
- *
- *   Windows:
- *     - certutil -addstore Root intutic-ca.crt
- *     - HKLM registry-based Cursor hooks (via PowerShell)
- *
- * Usage: sudo intutic enterprise-install
- *
- * LLD #14 — Phase 3 cross-harness defence
- * @module
- */
-/**
- * Main enterprise-install entry point.
- * Called by the `intutic enterprise-install` CLI command.
- */
-export declare function enterpriseInstall(options: {
-    proxyUrl: string;
-    workspaceRoot?: string;
-    mdmOutputDir?: string;
-    firewallOutputDir?: string;
-    generateMdmOnly?: boolean;
-}): Promise<void>;
-//# sourceMappingURL=enterprise-install.d.ts.map

package/dist/commands/enterprise-install.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"enterprise-install.d.ts","sourceRoot":"","sources":["../../src/commands/enterprise-install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AA+OH;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE;IAC/C,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CAyDhB"}

package/dist/commands/enterprise-install.js

@@ -1,289 +0,0 @@
-/**
- * enterprise-install.ts — `intutic enterprise-install` CLI command.
- *
- * Requires elevated privileges (sudo on macOS/Linux, admin on Windows).
- * Writes system-level governance hooks that survive user-level tampering:
- *
- *   macOS:
- *     - /etc/cursor/hooks.json (system Cursor hooks)
- *     - System keychain CA trust entry for Intutic proxy CA cert
- *     - MDM configuration profile generator
- *
- *   Linux:
- *     - /etc/cursor/hooks.json
- *     - /usr/local/share/ca-certificates/intutic-ca.crt + update-ca-certificates
- *
- *   Windows:
- *     - certutil -addstore Root intutic-ca.crt
- *     - HKLM registry-based Cursor hooks (via PowerShell)
- *
- * Usage: sudo intutic enterprise-install
- *
- * LLD #14 — Phase 3 cross-harness defence
- * @module
- */
-import { writeFile, mkdir, readFile } from 'node:fs/promises';
-import { execFile } from 'node:child_process';
-import { promisify } from 'node:util';
-import { join } from 'node:path';
-import { homedir } from 'node:os';
-import { newIso } from '@intutic/id';
-import { createLogger } from '@intutic/logger';
-import { writeCursorHooks } from '@intutic/sync-daemon/harness/cursorHooks';
-const log = createLogger('enterprise-install');
-const execFileAsync = promisify(execFile);
-/** Check if running with root/admin privileges. */
-function isElevated() {
-    if (process.platform === 'win32') {
-        // On Windows, check if we have admin rights (heuristic)
-        return process.env.USERNAME === 'Administrator' || process.env.IS_ADMIN === '1';
-    }
-    return process.getuid?.() === 0;
-}
-/** Platform-specific system Cursor hooks path. */
-function systemCursorHooksPath() {
-    if (process.platform === 'darwin') {
-        return '/Library/Application Support/Cursor/hooks.json';
-    }
-    return '/etc/cursor/hooks.json';
-}
-/** Platform-specific CA injection command. */
-async function injectCaCert(caCertPath) {
-    switch (process.platform) {
-        case 'darwin':
-            await execFileAsync('security', [
-                'add-trusted-cert', '-d', '-r', 'trustRoot',
-                '-k', '/Library/Keychains/System.keychain',
-                caCertPath,
-            ]);
-            log.info({ action: 'ca_injected', platform: 'darwin' }, 'CA cert added to macOS System Keychain');
-            break;
-        case 'linux': {
-            const destCert = '/usr/local/share/ca-certificates/intutic-ca.crt';
-            const content = await readFile(caCertPath, 'utf-8');
-            await writeFile(destCert, content, 'utf-8');
-            await execFileAsync('update-ca-certificates');
-            log.info({ action: 'ca_injected', platform: 'linux' }, 'CA cert added via update-ca-certificates');
-            break;
-        }
-        case 'win32':
-            await execFileAsync('certutil', ['-addstore', 'Root', caCertPath]);
-            log.info({ action: 'ca_injected', platform: 'win32' }, 'CA cert added to Windows Root store');
-            break;
-        default:
-            log.warn({ action: 'ca_inject_skipped', platform: process.platform }, 'CA injection not supported on this platform');
-    }
-}
-/** Write system-level Cursor hooks.json (requires root). */
-async function writeSystemCursorHooks(proxyUrl, workspaceRoot) {
-    const systemPath = systemCursorHooksPath();
-    await mkdir(systemPath.substring(0, systemPath.lastIndexOf('/')), { recursive: true });
-    // Delegate to cursorHooks.ts with writeSystemLevel=true
-    await writeCursorHooks(workspaceRoot, proxyUrl, '', true);
-    log.info({ action: 'system_cursor_hooks_written', path: systemPath }, 'System-level Cursor hooks written');
-}
-/** Generate MDM deployment manifest for Cursor. */
-async function generateMdmManifest(proxyUrl, outputDir) {
-    await mkdir(outputDir, { recursive: true });
-    // Cursor hooks MDM manifest (JSON — deployable via Jamf, Intune, Chef)
-    const cursorManifest = {
-        _comment: 'Intutic Governance — Cursor system-level hooks.json for MDM deployment',
-        _generated: newIso(),
-        target_path: systemCursorHooksPath(),
-        content: {
-            failClosed: true,
-            hooks: {
-                beforeShellExecution: {
-                    command: 'node /opt/intutic/hooks/pre-tool-check.js',
-                    failClosed: true,
-                },
-                beforeMCPExecution: {
-                    command: 'node /opt/intutic/hooks/pre-tool-check.js',
-                    failClosed: true,
-                },
-                beforeFileEdit: {
-                    command: 'node /opt/intutic/hooks/pre-tool-check.js',
-                    failClosed: true,
-                },
-            },
-        },
-        deployment: {
-            jamf: 'Deploy as Extension Attribute with file target_path',
-            intune: 'Custom Configuration Profile > Files > target_path',
-            chef: 'cookbook: intutic-governance, recipe: cursor_hooks',
-        },
-    };
-    await writeFile(join(outputDir, 'cursor-hooks-manifest.json'), JSON.stringify(cursorManifest, null, 2), 'utf-8');
-    // Windsurf proxy settings MDM manifest
-    const windsurfManifest = {
-        _comment: 'Intutic Governance — Windsurf proxy settings for MDM deployment',
-        _generated: newIso(),
-        target_path: `${homedir()}/.codeium/windsurf/settings.json`,
-        note: 'User-level path — deploy per user via login script or MDM user config',
-        content: {
-            'http.proxy': 'http://127.0.0.1:8877',
-            'http.proxyStrictSSL': false,
-            'codeium.proxy': 'http://127.0.0.1:8877',
-        },
-    };
-    await writeFile(join(outputDir, 'windsurf-proxy-manifest.json'), JSON.stringify(windsurfManifest, null, 2), 'utf-8');
-    // macOS MDM configuration profile for CA trust + proxy
-    const mobileconfig = `<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<!-- Intutic Governance Proxy MDM Configuration Profile -->
-<!-- Deploy via Jamf, Apple Business Manager, or profiles install -->
-<!-- Generated: ${newIso()} -->
-<plist version="1.0">
-<dict>
-  <key>PayloadContent</key>
-  <array>
-    <dict>
-      <!-- CA Trust payload -->
-      <key>PayloadType</key>
-      <string>com.apple.security.root</string>
-      <key>PayloadIdentifier</key>
-      <string>ai.intutic.governance.ca</string>
-      <key>PayloadDisplayName</key>
-      <string>Intutic Governance Proxy CA</string>
-      <key>PayloadDescription</key>
-      <string>Trusts the Intutic local CA for AI traffic governance</string>
-      <key>PayloadVersion</key>
-      <integer>1</integer>
-      <key>PayloadUUID</key>
-      <string>4E89D13A-B6C2-4F1D-9E2A-7F3C5A8B2E6D</string>
-    </dict>
-    <dict>
-      <!-- System-wide HTTP proxy for Windsurf Cascade AI traffic -->
-      <key>PayloadType</key>
-      <string>com.apple.proxy.http</string>
-      <key>PayloadIdentifier</key>
-      <string>ai.intutic.governance.proxy</string>
-      <key>PayloadDisplayName</key>
-      <string>Intutic AI Governance Proxy</string>
-      <key>Enabled</key>
-      <true/>
-      <key>Server</key>
-      <string>127.0.0.1</string>
-      <key>Port</key>
-      <integer>8877</integer>
-      <key>ProxyType</key>
-      <string>HTTP</string>
-    </dict>
-  </array>
-  <key>PayloadDisplayName</key>
-  <string>Intutic AI Governance Proxy Configuration</string>
-  <key>PayloadIdentifier</key>
-  <string>ai.intutic.governance</string>
-  <key>PayloadType</key>
-  <string>Configuration</string>
-  <key>PayloadVersion</key>
-  <integer>1</integer>
-  <key>PayloadUUID</key>
-  <string>8A1C3F5E-D2B4-4A6C-8E0F-1D3B5A7C9E2F</string>
-</dict>
-</plist>`;
-    await writeFile(join(outputDir, 'intutic-governance.mobileconfig'), mobileconfig, 'utf-8');
-    log.info({ action: 'mdm_manifests_generated', outputDir }, 'MDM deployment manifests generated');
-}
-/** Generate pf (macOS) and iptables (Linux) firewall rules templates. */
-async function generateFirewallTemplates(outputDir) {
-    await mkdir(outputDir, { recursive: true });
-    // pf.conf template (macOS)
-    const pfConf = `# Intutic PF Firewall redirection rules for macOS
-# Redirects direct outbound traffic to AI providers to the local Intutic proxy (port 4000).
-# To load: sudo pfctl -f ${join(outputDir, 'pf.conf')}
-
-# AI Provider hostnames
-ai_hosts = "{ api.anthropic.com, api.openai.com, api2.cursor.sh, openrouter.ai, api.mistral.ai, api.cohere.com, api.together.xyz, generativelanguage.googleapis.com }"
-
-# Redirection rule: redirect outbound HTTPS traffic to these hosts to localhost:4000
-# To avoid loop, do not redirect traffic originating from the local proxy process itself (exclude user running the proxy)
-# Update 'intutic' to the user/UID running the proxy if needed.
-# rdr pass on lo0 proto tcp from any to $ai_hosts port 443 -> 127.0.0.1 port 4000 user intutic
-rdr pass on lo0 proto tcp from any to $ai_hosts port 443 -> 127.0.0.1 port 4000
-rdr pass on en0 proto tcp from any to $ai_hosts port 443 -> 127.0.0.1 port 4000
-rdr pass on en1 proto tcp from any to $ai_hosts port 443 -> 127.0.0.1 port 4000
-`;
-    await writeFile(join(outputDir, 'pf.conf'), pfConf, 'utf-8');
-    // iptables.rules template (Linux)
-    const iptablesRules = `# Intutic iptables redirection rules for Linux
-# Redirects direct outbound HTTPS traffic to AI providers to the local Intutic proxy (port 4000).
-# Load with: sudo iptables-restore < ${join(outputDir, 'iptables.rules')}
-
-*nat
-:PREROUTING ACCEPT [0:0]
-:INPUT ACCEPT [0:0]
-:OUTPUT ACCEPT [0:0]
-:POSTROUTING ACCEPT [0:0]
-
-# Create INTUTIC chain
--N INTUTIC
-
-# Redirect to local proxy port 4000
--A INTUTIC -p tcp --dport 443 -j REDIRECT --to-ports 4000
-
-# Intercept AI providers in OUTPUT chain (for local client processes)
-# Skip traffic originating from the proxy itself to prevent routing loop.
-# Assuming the proxy runs under a group 'intutic' or user 'intutic'.
-# Replace 'intutic' with the username/group running the proxy.
--A OUTPUT -p tcp -m owner --uid-owner intutic -j ACCEPT
--A OUTPUT -d api.anthropic.com -p tcp --dport 443 -j INTUTIC
--A OUTPUT -d api.openai.com -p tcp --dport 443 -j INTUTIC
--A OUTPUT -d api2.cursor.sh -p tcp --dport 443 -j INTUTIC
--A OUTPUT -d openrouter.ai -p tcp --dport 443 -j INTUTIC
--A OUTPUT -d api.mistral.ai -p tcp --dport 443 -j INTUTIC
--A OUTPUT -d api.cohere.com -p tcp --dport 443 -j INTUTIC
--A OUTPUT -d api.together.xyz -p tcp --dport 443 -j INTUTIC
--A OUTPUT -d generativelanguage.googleapis.com -p tcp --dport 443 -j INTUTIC
-
-COMMIT
-`;
-    await writeFile(join(outputDir, 'iptables.rules'), iptablesRules, 'utf-8');
-    log.info({ action: 'firewall_templates_generated', outputDir }, 'Firewall redirection templates generated');
-}
-/**
- * Main enterprise-install entry point.
- * Called by the `intutic enterprise-install` CLI command.
- */
-export async function enterpriseInstall(options) {
-    const { proxyUrl, workspaceRoot = process.cwd(), mdmOutputDir = join(process.cwd(), 'tools', 'cli', 'resources', 'mdm'), firewallOutputDir = join(process.cwd(), 'tools', 'cli', 'resources', 'firewall'), generateMdmOnly = false, } = options;
-    // Always generate MDM and firewall manifests (no privileges needed)
-    await generateMdmManifest(proxyUrl, mdmOutputDir);
-    await generateFirewallTemplates(firewallOutputDir);
-    if (generateMdmOnly) {
-        log.info('MDM and firewall templates generated. Use --generate-mdm-only to skip privilege-requiring steps.');
-        return;
-    }
-    if (!isElevated()) {
-        log.error('enterprise-install requires root/admin privileges. Run with sudo.');
-        console.error('\n❌ Error: intutic enterprise-install requires root privileges.\n   Run: sudo intutic enterprise-install\n');
-        process.exit(1);
-    }
-    // Write system-level Cursor hooks
-    await writeSystemCursorHooks(proxyUrl, workspaceRoot);
-    // Inject CA cert into system trust store
-    const caCertPath = join(homedir(), '.intutic', 'ca.crt');
-    try {
-        await readFile(caCertPath);
-        await injectCaCert(caCertPath);
-    }
-    catch {
-        log.warn({ action: 'ca_cert_missing', path: caCertPath }, 'CA cert not found — run `intutic init` first to generate it, then re-run enterprise-install');
-    }
-    log.info({ action: 'enterprise_install_complete', proxyUrl }, 'Enterprise install complete. Deploy MDM manifests and firewall rules from the generated output directories.');
-    console.log(`
-✅ Intutic Enterprise Install Complete
-
-System-level Cursor hooks: ${systemCursorHooksPath()}
-CA cert injected into system trust store
-MDM manifests written to: ${mdmOutputDir}
-Firewall rules written to: ${firewallOutputDir}
-
-Next steps:
-  1. Deploy intutic-governance.mobileconfig via Jamf/Apple Business Manager
-  2. Deploy cursor-hooks-manifest.json via your MDM solution
-  3. Load firewall redirection rules (e.g. pfctl or iptables) from: ${firewallOutputDir}
-  4. Start the Intutic proxy: intutic proxy start
-`);
-}
-//# sourceMappingURL=enterprise-install.js.map

package/dist/commands/enterprise-install.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"enterprise-install.js","sourceRoot":"","sources":["../../src/commands/enterprise-install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAA;AAE3E,MAAM,GAAG,GAAG,YAAY,CAAC,oBAAoB,CAAC,CAAA;AAC9C,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;AAEzC,mDAAmD;AACnD,SAAS,UAAU;IACjB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,wDAAwD;QACxD,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAA;IACjF,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAA;AACjC,CAAC;AAED,kDAAkD;AAClD,SAAS,qBAAqB;IAC5B,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,gDAAgD,CAAA;IACzD,CAAC;IACD,OAAO,wBAAwB,CAAA;AACjC,CAAC;AAED,8CAA8C;AAC9C,KAAK,UAAU,YAAY,CAAC,UAAkB;IAC5C,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzB,KAAK,QAAQ;YACX,MAAM,aAAa,CAAC,UAAU,EAAE;gBAC9B,kBAAkB,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW;gBAC3C,IAAI,EAAE,oCAAoC;gBAC1C,UAAU;aACX,CAAC,CAAA;YACF,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,wCAAwC,CAAC,CAAA;YACjG,MAAK;QAEP,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,QAAQ,GAAG,iDAAiD,CAAA;YAClE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;YACnD,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;YAC3C,MAAM,aAAa,CAAC,wBAAwB,CAAC,CAAA;YAC7C,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,0CAA0C,CAAC,CAAA;YAClG,MAAK;QACP,CAAC;QAED,KAAK,OAAO;YACV,MAAM,aAAa,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAA;YAClE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,qCAAqC,CAAC,CAAA;YAC7F,MAAK;QAEP;YACE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,6CAA6C,CAAC,CAAA;IACxH,CAAC;AACH,CAAC;AAED,4DAA4D;AAC5D,KAAK,UAAU,sBAAsB,CAAC,QAAgB,EAAE,aAAqB;IAC3E,MAAM,UAAU,GAAG,qBAAqB,EAAE,CAAA;IAC1C,MAAM,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACtF,wDAAwD;IACxD,MAAM,gBAAgB,CAAC,aAAa,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IACzD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,6BAA6B,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,mCAAmC,CAAC,CAAA;AAC5G,CAAC;AAED,mDAAmD;AACnD,KAAK,UAAU,mBAAmB,CAAC,QAAgB,EAAE,SAAiB;IACpE,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE3C,uEAAuE;IACvE,MAAM,cAAc,GAAG;QACrB,QAAQ,EAAE,wEAAwE;QAClF,UAAU,EAAE,MAAM,EAAE;QACpB,WAAW,EAAE,qBAAqB,EAAE;QACpC,OAAO,EAAE;YACP,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE;gBACL,oBAAoB,EAAE;oBACpB,OAAO,EAAE,2CAA2C;oBACpD,UAAU,EAAE,IAAI;iBACjB;gBACD,kBAAkB,EAAE;oBAClB,OAAO,EAAE,2CAA2C;oBACpD,UAAU,EAAE,IAAI;iBACjB;gBACD,cAAc,EAAE;oBACd,OAAO,EAAE,2CAA2C;oBACpD,UAAU,EAAE,IAAI;iBACjB;aACF;SACF;QACD,UAAU,EAAE;YACV,IAAI,EAAE,qDAAqD;YAC3D,MAAM,EAAE,oDAAoD;YAC5D,IAAI,EAAE,oDAAoD;SAC3D;KACF,CAAA;IACD,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,4BAA4B,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;IAEhH,uCAAuC;IACvC,MAAM,gBAAgB,GAAG;QACvB,QAAQ,EAAE,iEAAiE;QAC3E,UAAU,EAAE,MAAM,EAAE;QACpB,WAAW,EAAE,GAAG,OAAO,EAAE,kCAAkC;QAC3D,IAAI,EAAE,uEAAuE;QAC7E,OAAO,EAAE;YACP,YAAY,EAAE,uBAAuB;YACrC,qBAAqB,EAAE,KAAK;YAC5B,eAAe,EAAE,uBAAuB;SACzC;KACF,CAAA;IACD,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,8BAA8B,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;IAEpH,uDAAuD;IACvD,MAAM,YAAY,GAAG;;;;kBAIL,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SAiDjB,CAAA;IACP,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,iCAAiC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,CAAA;IAE1F,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,SAAS,EAAE,EAAE,oCAAoC,CAAC,CAAA;AAClG,CAAC;AAED,yEAAyE;AACzE,KAAK,UAAU,yBAAyB,CAAC,SAAiB;IACxD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE3C,2BAA2B;IAC3B,MAAM,MAAM,GAAG;;2BAEU,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC;;;;;;;;;;;;CAYpD,CAAA;IACC,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;IAE5D,kCAAkC;IAClC,MAAM,aAAa,GAAG;;uCAEe,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BvE,CAAA;IACC,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,CAAA;IAE1E,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,8BAA8B,EAAE,SAAS,EAAE,EAAE,0CAA0C,CAAC,CAAA;AAC7G,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAMvC;IACC,MAAM,EACJ,QAAQ,EACR,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE,EAC7B,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,EACtE,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,CAAC,EAChF,eAAe,GAAG,KAAK,GACxB,GAAG,OAAO,CAAA;IAEX,oEAAoE;IACpE,MAAM,mBAAmB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;IACjD,MAAM,yBAAyB,CAAC,iBAAiB,CAAC,CAAA;IAElD,IAAI,eAAe,EAAE,CAAC;QACpB,GAAG,CAAC,IAAI,CAAC,kGAAkG,CAAC,CAAA;QAC5G,OAAM;IACR,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAClB,GAAG,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAA;QAC9E,OAAO,CAAC,KAAK,CAAC,4GAA4G,CAAC,CAAA;QAC3H,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,kCAAkC;IAClC,MAAM,sBAAsB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;IAErD,yCAAyC;IACzC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAA;IACxD,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAA;QAC1B,MAAM,YAAY,CAAC,UAAU,CAAC,CAAA;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,UAAU,EAAE,EAC/C,6FAA6F,CAC9F,CAAA;IACH,CAAC;IAED,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,6BAA6B,EAAE,QAAQ,EAAE,EACnD,6GAA6G,CAC9G,CAAA;IACD,OAAO,CAAC,GAAG,CAAC;;;6BAGe,qBAAqB,EAAE;;4BAExB,YAAY;6BACX,iBAAiB;;;;;sEAKwB,iBAAiB;;CAEtF,CAAC,CAAA;AACF,CAAC"}

package/dist/commands/eval.d.ts

@@ -1,13 +0,0 @@
-/**
- * `intutic eval` — Run evaluator sandbox evaluations from CLI.
- *
- * Calls POST /api/v1/evaluator/runs to trigger and poll results.
- *
- * E6 — Evaluator Sandbox / CLI
- * @module
- */
-export declare function runEval(opts: {
-    dataset: string;
-    dev?: boolean;
-}): Promise<void>;
-//# sourceMappingURL=eval.d.ts.map

package/dist/commands/eval.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"eval.d.ts","sourceRoot":"","sources":["../../src/commands/eval.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAQH,wBAAsB,OAAO,CAAC,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA0DrF"}