@intutic/cli 1.9.0 → 1.10.1

package/dist/lib/localTraces.d.ts

@@ -0,0 +1,61 @@
+/** The complete local verdict vocabulary — see this file's module doc. */
+export declare const LOCAL_VERDICTS: readonly ["allowed", "killed", "upstream_error", "reasked", "hijacked"];
+export type LocalVerdict = (typeof LOCAL_VERDICTS)[number];
+/**
+ * A trace row read from the local JSONL log, narrowed to what the `list`
+ * table and `--json` output actually use. Field names are camelCase here —
+ * the on-disk JSONL is the proxy's own snake_case `ExecutionTrace` — this
+ * module is the one place that translates between them.
+ */
+export interface LocalTraceRow {
+    traceId: string;
+    timestamp: string;
+    requestedModel: string;
+    actualModelRouted: string;
+    verdict: string;
+    rawCostUsd: number;
+    actualCostUsd: number;
+    harnessType: string;
+    latencyMs: number;
+    cacheHit: boolean;
+    breakGlass: boolean;
+}
+export interface LocalTracesResult {
+    traces: LocalTraceRow[];
+    /** Every trace found within the window, before `limit` truncation — not a fabricated estimate. */
+    total: number;
+    /** Lines that failed to parse or were missing a required field — counted, not silenced. */
+    malformedLines: number;
+    /**
+     * Day-files that had already reached the proxy's 64MB write cap
+     * (`MAX_TRACE_LOG_BYTES`, `local_spend.rs`) at read time. Writes past
+     * that size are silently dropped by the proxy, so a capped day's trace
+     * count is a floor, not a complete record — this is the only place a
+     * user can learn that.
+     */
+    cappedFiles: string[];
+}
+/**
+ * Reads every trace in `[since, now]` from the local daily-sharded log,
+ * walking day-files newest-first and, within each file, lines newest-first
+ * (append-only, so the last line of a day is that day's most recent trace).
+ * Stops scanning a file (and every earlier file) as soon as a line's
+ * timestamp falls before `since` — traces only get older from there.
+ */
+export declare function readLocalTraces(opts: {
+    logsDir: string;
+    since: Date;
+    limit: number;
+    /** Exact match against LocalTraceRow.verdict, applied before `limit`. */
+    verdict?: string;
+    /** Exact match against LocalTraceRow.requestedModel, applied before `limit`. */
+    model?: string;
+}): Promise<LocalTracesResult>;
+/**
+ * Finds one trace by id across every local day-file, newest day first, and
+ * returns its RAW parsed JSON (not narrowed to `LocalTraceRow`) — `inspect`
+ * shows everything the proxy recorded, not just the list-table's columns.
+ * Returns `null` if no day-file has a matching `trace_id`.
+ */
+export declare function findLocalTraceById(logsDir: string, traceId: string): Promise<Record<string, unknown> | null>;
+//# sourceMappingURL=localTraces.d.ts.map

package/dist/lib/localTraces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"localTraces.d.ts","sourceRoot":"","sources":["../../src/lib/localTraces.ts"],"names":[],"mappings":"AA8BA,0EAA0E;AAC1E,eAAO,MAAM,cAAc,yEAA0E,CAAA;AACrG,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAA;AAE1D;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;IACtB,iBAAiB,EAAE,MAAM,CAAA;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,OAAO,CAAA;IACjB,UAAU,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,aAAa,EAAE,CAAA;IACvB,kGAAkG;IAClG,KAAK,EAAE,MAAM,CAAA;IACb,2FAA2F;IAC3F,cAAc,EAAE,MAAM,CAAA;IACtB;;;;;;OAMG;IACH,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB;AA2CD;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,IAAI,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAqE7B;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAmBzC"}

package/dist/lib/localTraces.js

@@ -0,0 +1,173 @@
+/**
+ * Local traces reader — Wave 5 of the audit-remediation plan.
+ *
+ * `intutic traces list`/`inspect` used to require a connected control plane
+ * and exit(1) with no fallback, even though the proxy has been writing every
+ * trace to `~/.intutic/logs/traces-YYYY-MM-DD.jsonl` all along (see
+ * `packages/proxy/src/local_spend.rs`'s `log_offline_trace`). This is the
+ * reader for that log — the only place a standalone user can see their own
+ * traffic without a control plane.
+ *
+ * Deliberately its own narrow type (`LocalTraceRow`), not `TraceSummary`
+ * (`@intutic/shared-types`): that type's `complianceScore` is a required,
+ * non-optional field, and there is no compliance score locally — a
+ * standalone proxy's `response_integrity` is documented as explicitly not a
+ * quality or compliance measure. Reusing `TraceSummary` here would force
+ * either a fabricated score or a type-level lie; a narrower type that
+ * doesn't have the field at all is the honest option.
+ *
+ * The verdict vocabulary is also narrower than connected mode's
+ * BYPASS/ENHANCE/HIJACK/KILL (a control-plane PCAS concept). Locally,
+ * `ExecutionTrace.verdict` is exactly one of: allowed, killed,
+ * upstream_error, reasked, hijacked — see LOCAL_VERDICTS below, kept in
+ * sync with `telemetry.rs`'s construction sites by
+ * `localTracesFieldParity.test.ts`.
+ */
+import { readdir, stat } from 'node:fs/promises';
+import { createReadStream, existsSync } from 'node:fs';
+import { createInterface } from 'node:readline';
+import { join } from 'node:path';
+/** The complete local verdict vocabulary — see this file's module doc. */
+export const LOCAL_VERDICTS = ['allowed', 'killed', 'upstream_error', 'reasked', 'hijacked'];
+/** Matches the proxy's own filename shape from `log_offline_trace`. */
+const TRACE_FILE_RE = /^traces-(\d{4}-\d{2}-\d{2})\.jsonl$/;
+/** `local_spend.rs`'s `MAX_TRACE_LOG_BYTES` — kept in sync by localTracesFieldParity.test.ts. */
+const MAX_TRACE_LOG_BYTES = 64 * 1024 * 1024;
+function toLocalTraceRow(raw) {
+    if (typeof raw.trace_id !== 'string' ||
+        typeof raw.created_at !== 'string' ||
+        typeof raw.requested_model !== 'string' ||
+        typeof raw.actual_model_routed !== 'string' ||
+        typeof raw.verdict !== 'string') {
+        return null;
+    }
+    return {
+        traceId: raw.trace_id,
+        timestamp: raw.created_at,
+        requestedModel: raw.requested_model,
+        actualModelRouted: raw.actual_model_routed,
+        verdict: raw.verdict,
+        rawCostUsd: typeof raw.raw_cost_usd === 'number' ? raw.raw_cost_usd : 0,
+        actualCostUsd: typeof raw.actual_cost_usd === 'number' ? raw.actual_cost_usd : 0,
+        harnessType: typeof raw.harness_type === 'string' ? raw.harness_type : 'unknown',
+        latencyMs: typeof raw.latency_ms === 'number' ? raw.latency_ms : 0,
+        cacheHit: raw.cache_hit === true,
+        breakGlass: raw.break_glass === true,
+    };
+}
+/** Day-shard filenames under `logsDir`, most recent day first. */
+async function dayFilesDescending(logsDir) {
+    if (!existsSync(logsDir))
+        return [];
+    const entries = await readdir(logsDir);
+    return entries
+        .filter((name) => TRACE_FILE_RE.test(name))
+        .sort()
+        .reverse();
+}
+/**
+ * Reads every trace in `[since, now]` from the local daily-sharded log,
+ * walking day-files newest-first and, within each file, lines newest-first
+ * (append-only, so the last line of a day is that day's most recent trace).
+ * Stops scanning a file (and every earlier file) as soon as a line's
+ * timestamp falls before `since` — traces only get older from there.
+ */
+export async function readLocalTraces(opts) {
+    const { logsDir, since, limit, verdict, model } = opts;
+    const files = await dayFilesDescending(logsDir);
+    const collected = [];
+    let malformedLines = 0;
+    const cappedFiles = [];
+    for (const file of files) {
+        const path = join(logsDir, file);
+        try {
+            const { size } = await stat(path);
+            if (size >= MAX_TRACE_LOG_BYTES)
+                cappedFiles.push(file);
+        }
+        catch {
+            continue;
+        }
+        const lines = [];
+        const rl = createInterface({ input: createReadStream(path, 'utf-8'), crlfDelay: Infinity });
+        for await (const line of rl) {
+            if (line.trim().length > 0)
+                lines.push(line);
+        }
+        let dayExhausted = false;
+        for (let i = lines.length - 1; i >= 0; i--) {
+            let parsed;
+            try {
+                parsed = JSON.parse(lines[i]);
+            }
+            catch {
+                malformedLines++;
+                continue;
+            }
+            if (typeof parsed !== 'object' || parsed === null) {
+                malformedLines++;
+                continue;
+            }
+            const row = toLocalTraceRow(parsed);
+            if (!row) {
+                malformedLines++;
+                continue;
+            }
+            const ts = new Date(row.timestamp);
+            if (Number.isNaN(ts.getTime())) {
+                malformedLines++;
+                continue;
+            }
+            if (ts < since) {
+                // Lines before this one in the file, and every earlier day-file,
+                // are only older — nothing left in the window.
+                dayExhausted = true;
+                break;
+            }
+            if (verdict !== undefined && row.verdict !== verdict)
+                continue;
+            if (model !== undefined && row.requestedModel !== model)
+                continue;
+            collected.push(row);
+        }
+        if (dayExhausted)
+            break;
+    }
+    // Newest-first overall — collected is already in that order per file, and
+    // files were walked newest-day-first, so no re-sort is needed.
+    return {
+        traces: collected.slice(0, limit),
+        total: collected.length,
+        malformedLines,
+        cappedFiles,
+    };
+}
+/**
+ * Finds one trace by id across every local day-file, newest day first, and
+ * returns its RAW parsed JSON (not narrowed to `LocalTraceRow`) — `inspect`
+ * shows everything the proxy recorded, not just the list-table's columns.
+ * Returns `null` if no day-file has a matching `trace_id`.
+ */
+export async function findLocalTraceById(logsDir, traceId) {
+    const files = await dayFilesDescending(logsDir);
+    for (const file of files) {
+        const path = join(logsDir, file);
+        const rl = createInterface({ input: createReadStream(path, 'utf-8'), crlfDelay: Infinity });
+        for await (const line of rl) {
+            if (line.trim().length === 0)
+                continue;
+            try {
+                const parsed = JSON.parse(line);
+                if (parsed.trace_id === traceId) {
+                    rl.close();
+                    return parsed;
+                }
+            }
+            catch {
+                continue;
+            }
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=localTraces.js.map

package/dist/lib/localTraces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localTraces.js","sourceRoot":"","sources":["../../src/lib/localTraces.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,0EAA0E;AAC1E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE,UAAU,CAAU,CAAA;AAuCrG,uEAAuE;AACvE,MAAM,aAAa,GAAG,qCAAqC,CAAA;AAE3D,iGAAiG;AACjG,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AAE5C,SAAS,eAAe,CAAC,GAA4B;IACnD,IACE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAChC,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;QAClC,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ;QACvC,OAAO,GAAG,CAAC,mBAAmB,KAAK,QAAQ;QAC3C,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAC/B,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,cAAc,EAAE,GAAG,CAAC,eAAe;QACnC,iBAAiB,EAAE,GAAG,CAAC,mBAAmB;QAC1C,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,UAAU,EAAE,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACvE,aAAa,EAAE,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAChF,WAAW,EAAE,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;QAChF,SAAS,EAAE,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAClE,QAAQ,EAAE,GAAG,CAAC,SAAS,KAAK,IAAI;QAChC,UAAU,EAAE,GAAG,CAAC,WAAW,KAAK,IAAI;KACrC,CAAA;AACH,CAAC;AAED,kEAAkE;AAClE,KAAK,UAAU,kBAAkB,CAAC,OAAe;IAC/C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAA;IACnC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;IACtC,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC1C,IAAI,EAAE;SACN,OAAO,EAAE,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAQrC;IACC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;IACtD,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAE/C,MAAM,SAAS,GAAoB,EAAE,CAAA;IACrC,IAAI,cAAc,GAAG,CAAC,CAAA;IACtB,MAAM,WAAW,GAAa,EAAE,CAAA;IAEhC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAEhC,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAA;YACjC,IAAI,IAAI,IAAI,mBAAmB;gBAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,SAAQ;QACV,CAAC;QAED,MAAM,KAAK,GAAa,EAAE,CAAA;QAC1B,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC3F,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC9C,CAAC;QAED,IAAI,YAAY,GAAG,KAAK,CAAA;QACxB,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,IAAI,MAAe,CAAA;YACnB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc,EAAE,CAAA;gBAChB,SAAQ;YACV,CAAC;YACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBAClD,cAAc,EAAE,CAAA;gBAChB,SAAQ;YACV,CAAC;YACD,MAAM,GAAG,GAAG,eAAe,CAAC,MAAiC,CAAC,CAAA;YAC9D,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,cAAc,EAAE,CAAA;gBAChB,SAAQ;YACV,CAAC;YACD,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAClC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;gBAC/B,cAAc,EAAE,CAAA;gBAChB,SAAQ;YACV,CAAC;YACD,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC;gBACf,iEAAiE;gBACjE,+CAA+C;gBAC/C,YAAY,GAAG,IAAI,CAAA;gBACnB,MAAK;YACP,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO;gBAAE,SAAQ;YAC9D,IAAI,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,cAAc,KAAK,KAAK;gBAAE,SAAQ;YACjE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACrB,CAAC;QAED,IAAI,YAAY;YAAE,MAAK;IACzB,CAAC;IAED,0EAA0E;IAC1E,+DAA+D;IAC/D,OAAO;QACL,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;QACjC,KAAK,EAAE,SAAS,CAAC,MAAM;QACvB,cAAc;QACd,WAAW;KACZ,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAe,EACf,OAAe;IAEf,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAC/C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAChC,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC3F,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAQ;YACtC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAA;gBAC1D,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBAChC,EAAE,CAAC,KAAK,EAAE,CAAA;oBACV,OAAO,MAAM,CAAA;gBACf,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,SAAQ;YACV,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/lib/mdmManifest.d.ts

@@ -0,0 +1,73 @@
+/**
+ * MDM rollout artifact generators — CA-trust `.mobileconfig` and the
+ * Cursor system-hooks manifests handed to Jamf/Intune.
+ *
+ * Pure `params -> string` generators, same shape as
+ * `apps/dashboard/src/lib/gatewayManifest.ts` — no I/O here. `enterprise.ts`
+ * (`commands/enterprise.ts`) reads `~/.intutic/ca.crt` and calls these.
+ *
+ * Fixes over both the deleted `enterprise-install.ts` and the three static
+ * files that used to be checked into `resources/mdm/`: the `.mobileconfig`
+ * now actually embeds the CA certificate bytes (the old payload had no
+ * `PayloadContent` data key at all, so profiles installed but trusted
+ * nothing), UUIDs are fresh per call instead of baked in from one past
+ * invocation, and the non-functional `com.apple.proxy.http` payload is
+ * dropped rather than shipped as if it did something on an unsupervised
+ * device.
+ *
+ * @module
+ */
+/**
+ * A PEM certificate's body IS base64(DER) — stripping the armor lines and
+ * whitespace is the entire transform, no decode/re-encode required.
+ */
+export declare function pemToBase64Der(pem: string): string;
+export interface MobileconfigParams {
+    /** PEM-armored CA certificate, e.g. read from `~/.intutic/ca.crt`. */
+    caCertPem: string;
+    /** Optional label folded into the payload display names — XML-escaped. */
+    workspaceName?: string;
+}
+/**
+ * CA-trust-only configuration profile. Deliberately does not include an
+ * `com.apple.proxy.http` payload — that mechanism only takes effect on a
+ * supervised device, so shipping it as if it configures the system proxy on
+ * an ordinary Mac would be silently misleading.
+ */
+export declare function generateMobileconfig(params: MobileconfigParams): string;
+export interface HooksManifestParams {
+    /** Absolute path to the governance hook script on the TARGET machine, e.g. `/opt/intutic/hooks/cursor-check.js`. */
+    hookScriptPath: string;
+    /** Where the MDM tool should place the generated hooks.json. Defaults to the real system-hooks path for `platform` — see `systemHooksDirFor`. */
+    targetPath?: string;
+    /** Platform the default `targetPath` is resolved for. Defaults to this process's own platform. */
+    platform?: NodeJS.Platform;
+}
+/**
+ * Jamf-flavored deployment manifest wrapping the real `buildHooksConfig()`
+ * shape — not a hand-retyped literal, which is exactly how the deleted
+ * version drifted (it named `pre-tool-check.js`; the real script this repo
+ * writes is `cursor-check.js`).
+ */
+export declare function generateJamfManifest(params: HooksManifestParams): string;
+/** Same content as {@link generateJamfManifest}, Intune-flavored deployment notes. */
+export declare function generateIntuneManifest(params: HooksManifestParams): string;
+export interface FirewallDeploymentParams {
+    /** Absolute path to the intutic CLI binary on the TARGET machine, e.g. `/usr/local/bin/intutic`. */
+    cliBinaryPath: string;
+    /** Optional label folded into descriptions. */
+    workspaceName?: string;
+}
+/**
+ * Jamf-flavored managed-script deployment manifest for the egress firewall.
+ * Wraps `intutic enforce apply` as a recurring managed script — recurrence is
+ * what survives a local `intutic enforce remove`, not a static rules file.
+ * Deliberately does NOT embed generated pf/nftables/iptables rule content:
+ * the target machine's own `enforce apply` generates platform-correct rules
+ * at run time (see firewall.rs) — a snapshot here would drift exactly like
+ * the hand-retyped hooks.json this module already fixed once (see header).
+ */
+export declare function generateJamfFirewallManifest(params: FirewallDeploymentParams): string;
+/** Same content as {@link generateJamfFirewallManifest}, Intune-flavored deployment notes. */
+export declare function generateIntuneFirewallManifest(params: FirewallDeploymentParams): string;
+//# sourceMappingURL=mdmManifest.d.ts.map

package/dist/lib/mdmManifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mdmManifest.d.ts","sourceRoot":"","sources":["../../src/lib/mdmManifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAcH;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAMlD;AAUD,MAAM,WAAW,kBAAkB;IACjC,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAA;IACjB,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CA+CvE;AAED,MAAM,WAAW,mBAAmB;IAClC,oHAAoH;IACpH,cAAc,EAAE,MAAM,CAAA;IACtB,iJAAiJ;IACjJ,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,kGAAkG;IAClG,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAA;CAC3B;AAOD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAcxE;AAED,sFAAsF;AACtF,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAc1E;AAED,MAAM,WAAW,wBAAwB;IACvC,oGAAoG;IACpG,aAAa,EAAE,MAAM,CAAA;IACrB,+CAA+C;IAC/C,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAqBD;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,wBAAwB,GAAG,MAAM,CAkBrF;AAED,8FAA8F;AAC9F,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,wBAAwB,GAAG,MAAM,CAmBvF"}

package/dist/lib/mdmManifest.js

@@ -0,0 +1,190 @@
+/**
+ * MDM rollout artifact generators — CA-trust `.mobileconfig` and the
+ * Cursor system-hooks manifests handed to Jamf/Intune.
+ *
+ * Pure `params -> string` generators, same shape as
+ * `apps/dashboard/src/lib/gatewayManifest.ts` — no I/O here. `enterprise.ts`
+ * (`commands/enterprise.ts`) reads `~/.intutic/ca.crt` and calls these.
+ *
+ * Fixes over both the deleted `enterprise-install.ts` and the three static
+ * files that used to be checked into `resources/mdm/`: the `.mobileconfig`
+ * now actually embeds the CA certificate bytes (the old payload had no
+ * `PayloadContent` data key at all, so profiles installed but trusted
+ * nothing), UUIDs are fresh per call instead of baked in from one past
+ * invocation, and the non-functional `com.apple.proxy.http` payload is
+ * dropped rather than shipped as if it did something on an unsupervised
+ * device.
+ *
+ * @module
+ */
+import { randomUUID } from 'node:crypto';
+import { buildHooksConfig, systemHooksDirFor } from '@intutic/sync-daemon/harness/cursorHooks';
+function escapeXml(value) {
+    return value
+        .replace(/&/g, '&')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&apos;');
+}
+/**
+ * A PEM certificate's body IS base64(DER) — stripping the armor lines and
+ * whitespace is the entire transform, no decode/re-encode required.
+ */
+export function pemToBase64Der(pem) {
+    return pem
+        .split('\n')
+        .filter((line) => !line.startsWith('-----'))
+        .join('')
+        .replace(/\s+/g, '');
+}
+function wrapBase64(b64, lineLength = 76) {
+    const lines = [];
+    for (let i = 0; i < b64.length; i += lineLength) {
+        lines.push(b64.slice(i, i + lineLength));
+    }
+    return lines.join('\n');
+}
+/**
+ * CA-trust-only configuration profile. Deliberately does not include an
+ * `com.apple.proxy.http` payload — that mechanism only takes effect on a
+ * supervised device, so shipping it as if it configures the system proxy on
+ * an ordinary Mac would be silently misleading.
+ */
+export function generateMobileconfig(params) {
+    const caPayloadUuid = randomUUID().toUpperCase();
+    const topLevelUuid = randomUUID().toUpperCase();
+    const derBase64 = wrapBase64(pemToBase64Der(params.caCertPem));
+    const suffix = params.workspaceName ? ` (${escapeXml(params.workspaceName)})` : '';
+    return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<!-- Intutic Governance Proxy CA Trust Profile -->
+<!-- Deploy via Jamf, Apple Business Manager, or \`profiles install\` -->
+<!-- Generated: ${new Date().toISOString()} -->
+<plist version="1.0">
+<dict>
+  <key>PayloadContent</key>
+  <array>
+    <dict>
+      <key>PayloadType</key>
+      <string>com.apple.security.root</string>
+      <key>PayloadIdentifier</key>
+      <string>ai.intutic.governance.ca</string>
+      <key>PayloadDisplayName</key>
+      <string>Intutic Governance Proxy CA${suffix}</string>
+      <key>PayloadDescription</key>
+      <string>Trusts the Intutic local CA for AI traffic governance</string>
+      <key>PayloadVersion</key>
+      <integer>1</integer>
+      <key>PayloadUUID</key>
+      <string>${caPayloadUuid}</string>
+      <key>PayloadContent</key>
+      <data>
+${derBase64}
+      </data>
+    </dict>
+  </array>
+  <key>PayloadDisplayName</key>
+  <string>Intutic AI Governance Proxy Configuration${suffix}</string>
+  <key>PayloadIdentifier</key>
+  <string>ai.intutic.governance</string>
+  <key>PayloadType</key>
+  <string>Configuration</string>
+  <key>PayloadVersion</key>
+  <integer>1</integer>
+  <key>PayloadUUID</key>
+  <string>${topLevelUuid}</string>
+</dict>
+</plist>
+`;
+}
+function resolveTargetPath(params) {
+    if (params.targetPath)
+        return params.targetPath;
+    return `${systemHooksDirFor(params.platform ?? process.platform)}/hooks.json`;
+}
+/**
+ * Jamf-flavored deployment manifest wrapping the real `buildHooksConfig()`
+ * shape — not a hand-retyped literal, which is exactly how the deleted
+ * version drifted (it named `pre-tool-check.js`; the real script this repo
+ * writes is `cursor-check.js`).
+ */
+export function generateJamfManifest(params) {
+    return JSON.stringify({
+        _comment: 'Intutic Governance — Cursor system-level hooks.json for Jamf deployment',
+        _generated: new Date().toISOString(),
+        target_path: resolveTargetPath(params),
+        content: buildHooksConfig(params.hookScriptPath),
+        deployment: {
+            jamf: 'Deploy via Configuration Profile > Files & Processes (custom script), writing `content` to target_path.',
+        },
+    }, null, 2) + '\n';
+}
+/** Same content as {@link generateJamfManifest}, Intune-flavored deployment notes. */
+export function generateIntuneManifest(params) {
+    return JSON.stringify({
+        _comment: 'Intutic Governance — Cursor system-level hooks.json for Intune deployment',
+        _generated: new Date().toISOString(),
+        target_path: resolveTargetPath(params),
+        content: buildHooksConfig(params.hookScriptPath),
+        deployment: {
+            intune: 'Deploy via a Custom Configuration Profile (macOS: Files) or a Win32 app install script, writing `content` to target_path.',
+        },
+    }, null, 2) + '\n';
+}
+/**
+ * Shared body for the two firewall-deployment manifests below — same
+ * `content`/`schedule`/`prerequisites`/`honesty` fields, only the
+ * `_comment` and `deployment` note differ per MDM flavor.
+ */
+function buildFirewallManifestBody(params) {
+    const suffix = params.workspaceName ? ` (${params.workspaceName})` : '';
+    return {
+        suffix,
+        content: `${params.cliBinaryPath} enforce apply`,
+        prerequisites: [
+            `intutic CLI installed at ${params.cliBinaryPath} on the target machine`,
+            'MDM agent executes the script with root (macOS/Linux) or administrator (Windows) privilege — `enforce apply` needs that to write firewall rules',
+        ],
+        honesty: 'This re-asserts the firewall on the configured cadence; a user with root/administrator access can still run `intutic enforce remove` and stay unenforced until the next check-in. It is not tamper-proof, it is tamper-resistant on a schedule.',
+    };
+}
+/**
+ * Jamf-flavored managed-script deployment manifest for the egress firewall.
+ * Wraps `intutic enforce apply` as a recurring managed script — recurrence is
+ * what survives a local `intutic enforce remove`, not a static rules file.
+ * Deliberately does NOT embed generated pf/nftables/iptables rule content:
+ * the target machine's own `enforce apply` generates platform-correct rules
+ * at run time (see firewall.rs) — a snapshot here would drift exactly like
+ * the hand-retyped hooks.json this module already fixed once (see header).
+ */
+export function generateJamfFirewallManifest(params) {
+    const body = buildFirewallManifestBody(params);
+    return JSON.stringify({
+        _comment: `Intutic Governance — egress firewall re-assertion for Jamf deployment${body.suffix}`,
+        _generated: new Date().toISOString(),
+        content: body.content,
+        schedule: "Every 15 minutes via a Jamf policy with a Recurring Check-in trigger (or a Custom Trigger fired by a launchd job at the desired interval). Frequent re-assertion is the point — it's what survives a local `intutic enforce remove` between runs.",
+        prerequisites: body.prerequisites,
+        deployment: {
+            jamf: 'Deploy via Configuration Profile > Files & Processes, or a Jamf Policy with a Script payload and a recurring trigger (recommend \'Recurring Check-in\' or a Custom Trigger fired by a launchd job at the desired interval).',
+        },
+        honesty: body.honesty,
+    }, null, 2) + '\n';
+}
+/** Same content as {@link generateJamfFirewallManifest}, Intune-flavored deployment notes. */
+export function generateIntuneFirewallManifest(params) {
+    const body = buildFirewallManifestBody(params);
+    return JSON.stringify({
+        _comment: `Intutic Governance — egress firewall re-assertion for Intune deployment${body.suffix}`,
+        _generated: new Date().toISOString(),
+        content: body.content,
+        schedule: 'Daily platform script schedule, or trigger-on-checkin if the Intune script policy configuration supports it. Daily is the practical floor for a scripted policy run; tighten it if the Intune tenant supports more frequent check-ins.',
+        prerequisites: body.prerequisites,
+        deployment: {
+            intune: "Deploy via a macOS Shell script (Devices > Scripts) with 'Run script using signed-in credentials' as needed for root context, and a policy schedule; on Windows this would need an equivalent scheduled task — note this manifest's shell command is macOS/Linux-oriented since `enforce apply` is a Rust CLI subcommand available cross-platform but the recurring-execution mechanism differs by OS, and Windows Task Scheduler wiring is left to the operator.",
+        },
+        honesty: body.honesty,
+    }, null, 2) + '\n';
+}
+//# sourceMappingURL=mdmManifest.js.map

package/dist/lib/mdmManifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mdmManifest.js","sourceRoot":"","sources":["../../src/lib/mdmManifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAA;AAE9F,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,GAAG;SACP,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC;SACR,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AACxB,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,UAAU,GAAG,EAAE;IAC9C,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,CAAA;IAC1C,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAA0B;IAC7D,MAAM,aAAa,GAAG,UAAU,EAAE,CAAC,WAAW,EAAE,CAAA;IAChD,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC,WAAW,EAAE,CAAA;IAC/C,MAAM,SAAS,GAAG,UAAU,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;IAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IAElF,OAAO;;;;kBAIS,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;;;;;;;;;;;2CAWC,MAAM;;;;;;gBAMjC,aAAa;;;EAG3B,SAAS;;;;;qDAK0C,MAAM;;;;;;;;YAQ/C,YAAY;;;CAGvB,CAAA;AACD,CAAC;AAWD,SAAS,iBAAiB,CAAC,MAA2B;IACpD,IAAI,MAAM,CAAC,UAAU;QAAE,OAAO,MAAM,CAAC,UAAU,CAAA;IAC/C,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAA;AAC/E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAA2B;IAC9D,OAAO,IAAI,CAAC,SAAS,CACnB;QACE,QAAQ,EAAE,yEAAyE;QACnF,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,WAAW,EAAE,iBAAiB,CAAC,MAAM,CAAC;QACtC,OAAO,EAAE,gBAAgB,CAAC,MAAM,CAAC,cAAc,CAAC;QAChD,UAAU,EAAE;YACV,IAAI,EAAE,yGAAyG;SAChH;KACF,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CAAA;AACV,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,sBAAsB,CAAC,MAA2B;IAChE,OAAO,IAAI,CAAC,SAAS,CACnB;QACE,QAAQ,EAAE,2EAA2E;QACrF,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,WAAW,EAAE,iBAAiB,CAAC,MAAM,CAAC;QACtC,OAAO,EAAE,gBAAgB,CAAC,MAAM,CAAC,cAAc,CAAC;QAChD,UAAU,EAAE;YACV,MAAM,EAAE,2HAA2H;SACpI;KACF,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CAAA;AACV,CAAC;AASD;;;;GAIG;AACH,SAAS,yBAAyB,CAAC,MAAgC;IACjE,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IACvE,OAAO;QACL,MAAM;QACN,OAAO,EAAE,GAAG,MAAM,CAAC,aAAa,gBAAgB;QAChD,aAAa,EAAE;YACb,4BAA4B,MAAM,CAAC,aAAa,wBAAwB;YACxE,iJAAiJ;SAClJ;QACD,OAAO,EACL,iPAAiP;KACpP,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAgC;IAC3E,MAAM,IAAI,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAA;IAC9C,OAAO,IAAI,CAAC,SAAS,CACnB;QACE,QAAQ,EAAE,wEAAwE,IAAI,CAAC,MAAM,EAAE;QAC/F,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EACN,mPAAmP;QACrP,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,UAAU,EAAE;YACV,IAAI,EAAE,6NAA6N;SACpO;QACD,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CAAA;AACV,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,8BAA8B,CAAC,MAAgC;IAC7E,MAAM,IAAI,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAA;IAC9C,OAAO,IAAI,CAAC,SAAS,CACnB;QACE,QAAQ,EAAE,0EAA0E,IAAI,CAAC,MAAM,EAAE;QACjG,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EACN,wOAAwO;QAC1O,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,UAAU,EAAE;YACV,MAAM,EACJ,mcAAmc;SACtc;QACD,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CAAA;AACV,CAAC"}

package/dist/lib/onboarding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"onboarding.d.ts","sourceRoot":"","sources":["../../src/lib/onboarding.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA6BH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,OAAO,UAAQ,GAAG,IAAI,CAwKvG"}
+{"version":3,"file":"onboarding.d.ts","sourceRoot":"","sources":["../../src/lib/onboarding.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAyCH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,OAAO,UAAQ,GAAG,IAAI,CA2NvG"}

package/dist/lib/onboarding.js

@@ -20,6 +20,18 @@ function maskUserToken(tokenVal) {
         return '<YOUR_INTUTIC_API_KEY>';
     return `${tokenVal.substring(0, 4)}...${tokenVal.substring(tokenVal.length - 4)}`;
 }
+/**
+ * Trims trailing `/` characters without a regex — see the identical helper
+ * in `commands/exec.ts` for why: `/\/+$/` is flagged by static analysis as a
+ * polynomial-time pattern on external input, and a loop sidesteps the whole
+ * category rather than needing an exemption.
+ */
+function trimTrailingSlashes(s) {
+    let end = s.length;
+    while (end > 0 && s.charCodeAt(end - 1) === 47 /* '/' */)
+        end--;
+    return s.slice(0, end);
+}
 function writeCliOutput(line) {
     process.stdout.write(line + '\n');
 }
@@ -36,7 +48,7 @@ export function printOnboardingGuide(harnesses, userAuthToken, devMode = false)
     // send their agent traffic somewhere other than the proxy they had just
     // started. Set INTUTIC_PROXY_URL to override.
     void devMode;
-    const proxyHost = (process.env.INTUTIC_PROXY_URL ?? 'http://localhost:4000').replace(/\/+$/, '');
+    const proxyHost = trimTrailingSlashes(process.env.INTUTIC_PROXY_URL ?? 'http://localhost:4000');
     const proxyUrl = `${proxyHost}/v1`;
     writeCliOutput('');
     log.header('Intutic — Setup & Integration Instructions');
@@ -169,6 +181,53 @@ export function printOnboardingGuide(harnesses, userAuthToken, devMode = false)
             case 'windsurf':
                 writeCliOutput(`  Set the custom API base URL and key in the Windsurf settings tab.`);
                 break;
+            case 'dsh':
+                writeCliOutput(`  Every sync registers the Intutic gate into each EXISTING dsh profile`);
+                writeCliOutput(`  (${pc.bold('cordis.patch.yml')} + the ${pc.bold('@intutic/gate')} package.json dependency) and`);
+                writeCliOutput(`  redirects both the llm-deepseek (default) and llm-pi-ai (selectable) LLM`);
+                writeCliOutput(`  routes in ${pc.bold('settings.yaml')} through the Intutic proxy — no manual config edit.`);
+                writeCliOutput(`  `);
+                writeCliOutput(`  One manual step remains, PER PROFILE: this daemon cannot run a package`);
+                writeCliOutput(`  manager in a directory it does not own, so finish activation with:`);
+                writeCliOutput(`     ${pc.bold('dsh plugin --profile <name> add @intutic/gate')}`);
+                writeCliOutput(`  See ${pc.cyan('$DSH_HOME/INSTALL.md')} (auto-generated, lists your current profiles).`);
+                writeCliOutput(`  `);
+                writeCliOutput(`  Nothing is governed until your FIRST \`dsh --profile <name>\` run creates a`);
+                writeCliOutput(`  profile to register into.`);
+                break;
+            case 'xirp':
+                // Xirp is not itself an AI agent and writes no config of its own —
+                // see gateRegistry.ts's NO_GATE row. The generic `intutic exec`
+                // wrapper below does not apply (Xirp is a GUI .app you launch
+                // normally, not a CLI you'd wrap), so this replaces the default
+                // fallback rather than falling through to it.
+                writeCliOutput(`  Xirp orchestrates other harnesses (Claude Code, Codex, ...) — connect`);
+                writeCliOutput(`  THAT harness normally, against the repo's main checkout. Intutic's sync`);
+                writeCliOutput(`  daemon automatically propagates that harness's own gate/config into every`);
+                writeCliOutput(`  git worktree Xirp creates, every sync cycle — no separate Xirp setup step.`);
+                writeCliOutput(`  See: ${pc.cyan('apps/docs/integrations/xirp.md')}`);
+                break;
+            case 'opencode':
+                // The plugin is the gate; the only thing OpenCode cannot pick up from
+                // Intutic's files is where its model traffic goes.
+                writeCliOutput(`  OpenCode loads ${pc.cyan('.opencode/plugins/intutic-governance.js')} on its next start —`);
+                writeCliOutput(`  every tool call is checked before it runs. To route model traffic through`);
+                writeCliOutput(`  the proxy, set your provider's base URL in ${pc.cyan('opencode.json')}:`);
+                writeCliOutput(`    "provider": { "<id>": { "options": { "baseURL": "${proxyUrl}" } } }`);
+                writeCliOutput(`  (or the same JSON in ${pc.cyan('OPENCODE_CONFIG_CONTENT')}). See: ${pc.cyan('apps/docs/integrations/opencode.md')}`);
+                break;
+            case 'agentic-orchestrator':
+                // Same "orchestrator, not an agent, writes no config of its own"
+                // shape as xirp above — see gateRegistry.ts's NO_GATE row. All three
+                // wrapped backends are gated by their own adapters (OpenCode since
+                // TD-397 closed).
+                writeCliOutput(`  Agentic Orchestrator orchestrates other CLI backends (Claude Code, Codex,`);
+                writeCliOutput(`  and OpenCode) — connect the backend(s) you use normally, against the`);
+                writeCliOutput(`  repo's main checkout. Intutic's sync daemon automatically propagates each`);
+                writeCliOutput(`  backend's own gate/config into every git worktree Agentic Orchestrator`);
+                writeCliOutput(`  creates, every sync cycle — no separate setup step for it.`);
+                writeCliOutput(`  See: ${pc.cyan('apps/docs/integrations/agentic-orchestrator.md')}`);
+                break;
             default:
                 writeCliOutput(`  Launch your agent using the Intutic exec wrapper:`);
                 writeCliOutput(`     ${pc.bold(`intutic exec -- <your-agent-command>`)}`);