@intutic/cli 1.9.0 → 1.10.1

package/dist/commands/findings.d.ts

@@ -0,0 +1,84 @@
+/**
+ * `intutic findings` — List and adjudicate detector findings.
+ *
+ * `services/control-plane/src/routes/findings.ts` has carried a complete
+ * TP/FP adjudication API since it landed, with zero consumers: no CLI
+ * command, no dashboard page. Without a way to actually rule on a finding,
+ * `false_positive_rate` in `/stats` and the response-echo report can only
+ * ever return null — the labelling rate was structurally zero. This is that
+ * missing writer.
+ *
+ * Subcommands:
+ *   - `intutic findings list [--unadjudicated] [--detector <id>] [--limit N] [--json]`
+ *   - `intutic findings adjudicate <findingId> (--true-positive|--false-positive) [--note <text>]`
+ *   - `intutic findings stats [--json]`
+ *   - `intutic findings echo-report [--since <date>] [--until <date>] [--json]`
+ *
+ * The adjudicator identity is never a flag here — the server derives it from
+ * the authenticated session (`c.get('auth')`), the same reasoning
+ * `intutic decision approve|reject` documents: a client-supplied name makes
+ * the audit trail forgeable.
+ *
+ * @module
+ */
+interface FindingsCliOpts {
+    dev?: boolean;
+}
+/** Pad a string to a fixed VISIBLE width (right-pad with spaces). */
+export declare function pad(str: string, width: number): string;
+/**
+ * `intutic findings list` — List detector findings for the workspace.
+ *
+ * `--unadjudicated` matches the route's own default behaviour: omitted, the
+ * route returns every finding (adjudicated or not); passed, it adds
+ * `unadjudicated=true` and returns only the working queue. The CLI does not
+ * invent a different default than the route it calls.
+ */
+export declare function runFindingsList(opts: FindingsCliOpts & {
+    unadjudicated?: boolean;
+    detector?: string;
+    limit?: string;
+    json?: boolean;
+}): Promise<void>;
+/**
+ * `intutic findings adjudicate <findingId>` — Record a human ruling on one finding.
+ *
+ * Exactly one of `--true-positive` / `--false-positive` is required, checked
+ * client-side before any request is made — the same discipline
+ * `runGatewayAssign`'s `--gateway`/`--clear` pair and `runGatewayConfigSet`
+ * use for their own mutually-exclusive flags.
+ */
+export declare function runFindingsAdjudicate(findingId: string, opts: FindingsCliOpts & {
+    truePositive?: boolean;
+    falsePositive?: boolean;
+    note?: string;
+    json?: boolean;
+}): Promise<void>;
+/**
+ * `intutic findings stats` — Per-detector false-positive rate, over
+ * adjudicated findings only.
+ *
+ * The `caveats` array exists specifically to be read alongside the numbers
+ * it qualifies — this prints it verbatim, never summarized or suppressed.
+ */
+export declare function runFindingsStats(opts: FindingsCliOpts & {
+    json?: boolean;
+}): Promise<void>;
+/**
+ * `intutic findings echo-report` — The response-injection echo measurement
+ * report: precision per pattern, over the `response_injection:*` rows
+ * `persistFindings` synthesizes from a trace's echo scan.
+ *
+ * `tracesIngested` is the anti-vacuity denominator and is always printed
+ * prominently, even when zero. A top-level `refusal` (zero traffic in the
+ * window) is printed as a warning, never suppressed — same for a
+ * per-pattern `refusal` (below the adjudicated-count threshold), which
+ * replaces that row's rate cell instead of a null percentage.
+ */
+export declare function runFindingsEchoReport(opts: FindingsCliOpts & {
+    since?: string;
+    until?: string;
+    json?: boolean;
+}): Promise<void>;
+export {};
+//# sourceMappingURL=findings.d.ts.map

package/dist/commands/findings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"findings.d.ts","sourceRoot":"","sources":["../../src/commands/findings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AA+EH,UAAU,eAAe;IACvB,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AAuFD,qEAAqE;AACrE,wBAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAItD;AAqBD;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,eAAe,GAAG;IAAE,aAAa,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GACrG,OAAO,CAAC,IAAI,CAAC,CAwEf;AAED;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,eAAe,GAAG;IAAE,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GACzG,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,eAAe,GAAG;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuChG;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,eAAe,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GACzE,OAAO,CAAC,IAAI,CAAC,CAsDf"}

package/dist/commands/findings.js

@@ -0,0 +1,329 @@
+/**
+ * `intutic findings` — List and adjudicate detector findings.
+ *
+ * `services/control-plane/src/routes/findings.ts` has carried a complete
+ * TP/FP adjudication API since it landed, with zero consumers: no CLI
+ * command, no dashboard page. Without a way to actually rule on a finding,
+ * `false_positive_rate` in `/stats` and the response-echo report can only
+ * ever return null — the labelling rate was structurally zero. This is that
+ * missing writer.
+ *
+ * Subcommands:
+ *   - `intutic findings list [--unadjudicated] [--detector <id>] [--limit N] [--json]`
+ *   - `intutic findings adjudicate <findingId> (--true-positive|--false-positive) [--note <text>]`
+ *   - `intutic findings stats [--json]`
+ *   - `intutic findings echo-report [--since <date>] [--until <date>] [--json]`
+ *
+ * The adjudicator identity is never a flag here — the server derives it from
+ * the authenticated session (`c.get('auth')`), the same reasoning
+ * `intutic decision approve|reject` documents: a client-supplied name makes
+ * the audit trail forgeable.
+ *
+ * @module
+ */
+import { log } from '../lib/logger.js';
+import { NOT_AUTHENTICATED } from '../lib/authMessages.js';
+import { loadCredentials } from '../config/store.js';
+import { resolveControlPlaneUrl } from '../config/paths.js';
+import { createApiClient } from '../lib/api.js';
+import pc from 'picocolors';
+async function getClient(opts) {
+    const creds = await loadCredentials();
+    if (!creds) {
+        log.error(NOT_AUTHENTICATED);
+        process.exit(1);
+    }
+    const controlPlaneUrl = resolveControlPlaneUrl(opts.dev);
+    return createApiClient(controlPlaneUrl, creds.apiKey);
+}
+// ─── Formatting helpers (mirroring traces.ts's conventions) ───────────
+/** Truncate a finding ID for table display. */
+function truncateId(id) {
+    if (id.length <= 14)
+        return id;
+    return id.slice(0, 11) + '...';
+}
+/** Format ISO timestamp for compact table display. */
+function formatTimestamp(iso) {
+    const d = new Date(iso);
+    const pad2 = (n) => String(n).padStart(2, '0');
+    return `${d.getFullYear()}-${pad2(d.getMonth() + 1)}-${pad2(d.getDate())} ${pad2(d.getHours())}:${pad2(d.getMinutes())}:${pad2(d.getSeconds())}`;
+}
+function truncateText(text, width) {
+    return text.length > width ? text.slice(0, width - 1) + '…' : text;
+}
+/** Color (or dim) a finding's outcome. `null` is rendered as "unruled", dimmed. */
+function colorOutcome(outcome) {
+    if (outcome === null)
+        return pc.dim('unruled');
+    if (outcome === 'TRUE_POSITIVE')
+        return pc.green(outcome);
+    return pc.yellow(outcome);
+}
+/**
+ * A null rate is rendered as "no measured rate" — NEVER as "0" or "0%". A
+ * detector or pattern nobody has adjudicated has no measured rate; printing
+ * a number there would be an invention the route itself explicitly refuses
+ * to make (see `false_positive_rate`'s doc comment in routes/findings.ts).
+ */
+function formatRate(rate) {
+    if (rate === null)
+        return pc.dim('no measured rate');
+    return `${(rate * 100).toFixed(1)}%`;
+}
+/**
+ * ANSI escapes are zero-width. Measuring and slicing raw string length counts
+ * them, so a coloured cell is both mis-padded and cut mid-escape — e.g.
+ * `pc.dim('no measured rate')` is more characters than its 17 visible ones,
+ * and a naive `str.slice(0, width)` against a narrower column truncates
+ * inside the escape sequence, corrupting the visible text (see the same
+ * fix and its full writeup in `integrity.ts`'s `padCell`).
+ */
+// eslint-disable-next-line no-control-regex -- ESC () opens every SGR colour sequence; matching it is this pattern's whole purpose.
+const ANSI = /\[[0-9;]*m/g;
+function visibleLength(str) {
+    return str.replace(ANSI, '').length;
+}
+/** Cut to `width` VISIBLE characters, keeping escapes and closing any left open. */
+function truncateVisible(str, width) {
+    let out = '';
+    let seen = 0;
+    let i = 0;
+    let coloured = false;
+    while (i < str.length && seen < width) {
+        ANSI.lastIndex = i;
+        const m = ANSI.exec(str);
+        if (m && m.index === i) {
+            out += m[0];
+            coloured = m[0] !== '' && m[0] !== '';
+            i += m[0].length;
+            continue;
+        }
+        out += str[i];
+        seen += 1;
+        i += 1;
+    }
+    // Never leave a colour open — it would tint the border and every later row.
+    return coloured ? out + '' : out;
+}
+/** Pad a string to a fixed VISIBLE width (right-pad with spaces). */
+export function pad(str, width) {
+    const visible = visibleLength(str);
+    if (visible >= width)
+        return truncateVisible(str, width);
+    return str + ' '.repeat(width - visible);
+}
+/** Render a simple table with borders. */
+function renderTable(headers, widths, rows) {
+    const top = '┌' + widths.map((w) => '─'.repeat(w + 2)).join('┬') + '┐';
+    const mid = '├' + widths.map((w) => '─'.repeat(w + 2)).join('┼') + '┤';
+    const bot = '└' + widths.map((w) => '─'.repeat(w + 2)).join('┴') + '┘';
+    const fmtRow = (cells) => '│ ' + cells.map((c, i) => pad(c, widths[i])).join(' │ ') + ' │';
+    console.log(top);
+    console.log(fmtRow(headers));
+    console.log(mid);
+    for (const row of rows) {
+        console.log(fmtRow(row));
+    }
+    console.log(bot);
+}
+// ─── Commands ───────────────────────────────────────────────────────
+/**
+ * `intutic findings list` — List detector findings for the workspace.
+ *
+ * `--unadjudicated` matches the route's own default behaviour: omitted, the
+ * route returns every finding (adjudicated or not); passed, it adds
+ * `unadjudicated=true` and returns only the working queue. The CLI does not
+ * invent a different default than the route it calls.
+ */
+export async function runFindingsList(opts) {
+    const client = await getClient(opts);
+    const params = new URLSearchParams();
+    if (opts.unadjudicated)
+        params.set('unadjudicated', 'true');
+    if (opts.detector)
+        params.set('detector_id', opts.detector);
+    if (opts.limit)
+        params.set('limit', opts.limit);
+    try {
+        const data = await client.get(`/api/v1/findings?${params.toString()}`);
+        if (opts.json) {
+            console.log(JSON.stringify(data, null, 2));
+            return;
+        }
+        log.header('Intutic — Detector Findings');
+        if (data.findings.length === 0) {
+            log.dim('  No findings match your filters.');
+            return;
+        }
+        // `reason` is what makes a request-path finding triageable from the
+        // terminal at all (e.g. "Runaway recursion: graph depth 12 exceeds the
+        // maximum of 8") — Detector is trimmed from 28 to 20 (still enough for
+        // the longest `response_injection:*` id once truncated) to make room for
+        // it without the table ballooning further.
+        const headers = ['Finding ID', 'Created', 'Detector', 'Reason', 'Disposition', 'Outcome'];
+        const widths = [14, 19, 20, 26, 12, 14];
+        const rows = data.findings.map((f) => [
+            truncateId(f.finding_id),
+            formatTimestamp(f.created_at),
+            truncateText(f.detector_id, 20),
+            truncateText(f.reason ?? '—', 26),
+            f.disposition ?? '—',
+            colorOutcome(f.outcome),
+        ]);
+        renderTable(headers, widths, rows);
+        console.log(pc.dim(`Showing ${data.findings.length} finding(s)${opts.unadjudicated ? ' (unadjudicated only)' : ''}${opts.detector ? ` for detector ${opts.detector}` : ''}`));
+        // Keyed off `detector_id` prefix — already visible in the table above,
+        // zero new API surface needed — rather than a precise "has a live
+        // snippet" boolean, which the list route deliberately doesn't carry (see
+        // routes/findings.ts's own comment on why). "May have" is honest given
+        // retention (14 days, independent of adjudication) could already have
+        // expired it by the time anyone reads this. The dashboard, not this CLI,
+        // is the only surface that ever displays the excerpt content itself —
+        // a terminal has no way to "hide again" once printed (scrollback, shell
+        // history, and terminal recordings all retain it indefinitely), so this
+        // deliberately stops at a pointer.
+        const withSnippetCandidate = data.findings.filter((f) => f.detector_id.startsWith('response_injection:')).length;
+        if (withSnippetCandidate > 0) {
+            console.log(pc.dim(`${withSnippetCandidate} finding(s) may have a scrubbed response snippet available — view in the dashboard (Findings queue) to review it before adjudicating.`));
+        }
+    }
+    catch (err) {
+        log.error(`Failed to list findings: ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+    }
+}
+/**
+ * `intutic findings adjudicate <findingId>` — Record a human ruling on one finding.
+ *
+ * Exactly one of `--true-positive` / `--false-positive` is required, checked
+ * client-side before any request is made — the same discipline
+ * `runGatewayAssign`'s `--gateway`/`--clear` pair and `runGatewayConfigSet`
+ * use for their own mutually-exclusive flags.
+ */
+export async function runFindingsAdjudicate(findingId, opts) {
+    if (opts.truePositive && opts.falsePositive) {
+        log.error('Specify exactly one of --true-positive or --false-positive, not both.');
+        process.exit(1);
+    }
+    if (!opts.truePositive && !opts.falsePositive) {
+        log.error('Specify exactly one of --true-positive or --false-positive.');
+        process.exit(1);
+    }
+    const outcome = opts.truePositive ? 'TRUE_POSITIVE' : 'FALSE_POSITIVE';
+    const client = await getClient(opts);
+    try {
+        const res = await client.post(`/api/v1/findings/${encodeURIComponent(findingId)}/adjudicate`, { outcome, note: opts.note });
+        if (opts.json) {
+            console.log(JSON.stringify(res, null, 2));
+            return;
+        }
+        log.success(`Finding ${res.finding_id} adjudicated as ${res.outcome}.`);
+    }
+    catch (err) {
+        log.error(`Failed to adjudicate finding: ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+    }
+}
+/**
+ * `intutic findings stats` — Per-detector false-positive rate, over
+ * adjudicated findings only.
+ *
+ * The `caveats` array exists specifically to be read alongside the numbers
+ * it qualifies — this prints it verbatim, never summarized or suppressed.
+ */
+export async function runFindingsStats(opts) {
+    const client = await getClient(opts);
+    try {
+        const data = await client.get('/api/v1/findings/stats');
+        if (opts.json) {
+            console.log(JSON.stringify(data, null, 2));
+            return;
+        }
+        log.header('Intutic — Findings Stats (per detector)');
+        if (data.detectors.length === 0) {
+            log.dim('  No findings recorded yet.');
+        }
+        else {
+            const headers = ['Detector', 'Shadowed', 'Total', 'Adjudicated', 'FP Rate'];
+            const widths = [28, 9, 7, 12, 18];
+            const rows = data.detectors.map((d) => [
+                truncateText(d.detector_id, 28),
+                d.shadowed ? 'yes' : 'no',
+                String(d.total_findings),
+                String(d.adjudicated),
+                formatRate(d.false_positive_rate),
+            ]);
+            renderTable(headers, widths, rows);
+        }
+        console.log('');
+        log.header('Caveats');
+        for (const caveat of data.caveats) {
+            log.dim(`  - ${caveat}`);
+        }
+    }
+    catch (err) {
+        log.error(`Failed to fetch findings stats: ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+    }
+}
+/**
+ * `intutic findings echo-report` — The response-injection echo measurement
+ * report: precision per pattern, over the `response_injection:*` rows
+ * `persistFindings` synthesizes from a trace's echo scan.
+ *
+ * `tracesIngested` is the anti-vacuity denominator and is always printed
+ * prominently, even when zero. A top-level `refusal` (zero traffic in the
+ * window) is printed as a warning, never suppressed — same for a
+ * per-pattern `refusal` (below the adjudicated-count threshold), which
+ * replaces that row's rate cell instead of a null percentage.
+ */
+export async function runFindingsEchoReport(opts) {
+    const client = await getClient(opts);
+    const params = new URLSearchParams();
+    if (opts.since)
+        params.set('since', opts.since);
+    if (opts.until)
+        params.set('until', opts.until);
+    try {
+        const data = await client.get(`/api/v1/findings/response-echo/report?${params.toString()}`);
+        if (opts.json) {
+            console.log(JSON.stringify(data, null, 2));
+            return;
+        }
+        log.header('Intutic — Response-Echo Report');
+        log.field('Window', `${data.window.since} → ${data.window.until}`);
+        log.field('Traces ingested', String(data.tracesIngested));
+        if (data.refusal) {
+            console.log('');
+            log.warn(data.refusal);
+        }
+        console.log('');
+        // The table column is deliberately short ("withheld — see below") rather
+        // than the refusal text itself: renderTable's fixed-width cells truncate
+        // anything longer than the column, and a truncated refusal is a
+        // suppressed refusal wearing an ellipsis. The full text always follows,
+        // in full, below the table.
+        const headers = ['Pattern', 'Findings', 'Adjudicated', 'FP Rate'];
+        const widths = [28, 9, 12, 20];
+        const rows = data.patterns.map((p) => [
+            p.pattern,
+            String(p.findings),
+            String(p.adjudicated),
+            p.refusal ? 'withheld — see below' : formatRate(p.falsePositiveRate),
+        ]);
+        renderTable(headers, widths, rows);
+        const patternRefusals = data.patterns.filter((p) => p.refusal);
+        if (patternRefusals.length > 0) {
+            console.log('');
+            for (const p of patternRefusals) {
+                log.dim(`  ${p.pattern}: ${p.refusal}`);
+            }
+        }
+    }
+    catch (err) {
+        log.error(`Failed to fetch response-echo report: ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=findings.js.map

package/dist/commands/findings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"findings.js","sourceRoot":"","sources":["../../src/commands/findings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAkB,MAAM,eAAe,CAAA;AAC/D,OAAO,EAAE,MAAM,YAAY,CAAA;AA4E3B,KAAK,UAAU,SAAS,CAAC,IAAqB;IAC5C,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAA;QAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IACD,MAAM,eAAe,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACxD,OAAO,eAAe,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;AACvD,CAAC;AAED,yEAAyE;AAEzE,+CAA+C;AAC/C,SAAS,UAAU,CAAC,EAAU;IAC5B,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,EAAE,CAAA;IAC9B,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAA;AAChC,CAAC;AAED,sDAAsD;AACtD,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAA;IACvB,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACtD,OAAO,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,CAAA;AAClJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,KAAa;IAC/C,OAAO,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;AACpE,CAAC;AAED,mFAAmF;AACnF,SAAS,YAAY,CAAC,OAAuB;IAC3C,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAC9C,IAAI,OAAO,KAAK,eAAe;QAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACzD,OAAO,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;AAC3B,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,IAAmB;IACrC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;IACpD,OAAO,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAA;AACtC,CAAC;AAED;;;;;;;GAOG;AACH,qIAAqI;AACrI,MAAM,IAAI,GAAG,cAAc,CAAA;AAE3B,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAA;AACrC,CAAC;AAED,oFAAoF;AACpF,SAAS,eAAe,CAAC,GAAW,EAAE,KAAa;IACjD,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACtC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAA;QAClB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACxB,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YACvB,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;YACX,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAA;YAC9C,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;YAChB,SAAQ;QACV,CAAC;QACD,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAA;QACb,IAAI,IAAI,CAAC,CAAA;QACT,CAAC,IAAI,CAAC,CAAA;IACR,CAAC;IACD,4EAA4E;IAC5E,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAA;AACtC,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,KAAa;IAC5C,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;IAClC,IAAI,OAAO,IAAI,KAAK;QAAE,OAAO,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACxD,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,CAAA;AAC1C,CAAC;AAED,0CAA0C;AAC1C,SAAS,WAAW,CAAC,OAAiB,EAAE,MAAgB,EAAE,IAAgB;IACxE,MAAM,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IACtE,MAAM,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IACtE,MAAM,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IAEtE,MAAM,MAAM,GAAG,CAAC,KAAe,EAAE,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAA;IAEpG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAChB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;IAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAChB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1B,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AAClB,CAAC;AAED,uEAAuE;AAEvE;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAsG;IAEtG,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAA;IAEpC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;IACpC,IAAI,IAAI,CAAC,aAAa;QAAE,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAA;IAC3D,IAAI,IAAI,CAAC,QAAQ;QAAE,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC3D,IAAI,IAAI,CAAC,KAAK;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAE/C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAuB,oBAAoB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QAE5F,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;YAC1C,OAAM;QACR,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,6BAA6B,CAAC,CAAA;QAEzC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,GAAG,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAA;YAC5C,OAAM;QACR,CAAC;QAED,oEAAoE;QACpE,uEAAuE;QACvE,uEAAuE;QACvE,yEAAyE;QACzE,2CAA2C;QAC3C,MAAM,OAAO,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAC,CAAA;QACzF,MAAM,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QAEvC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACpC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;YACxB,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC;YAC7B,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/B,YAAY,CAAC,CAAC,CAAC,MAAM,IAAI,GAAG,EAAE,EAAE,CAAC;YACjC,CAAC,CAAC,WAAW,IAAI,GAAG;YACpB,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;SACxB,CAAC,CAAA;QAEF,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QAElC,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CACJ,WAAW,IAAI,CAAC,QAAQ,CAAC,MAAM,cAAc,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,GAC5F,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EACrD,EAAE,CACH,CACF,CAAA;QAED,uEAAuE;QACvE,kEAAkE;QAClE,yEAAyE;QACzE,uEAAuE;QACvE,sEAAsE;QACtE,yEAAyE;QACzE,sEAAsE;QACtE,wEAAwE;QACxE,wEAAwE;QACxE,mCAAmC;QACnC,MAAM,oBAAoB,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAA;QAChH,IAAI,oBAAoB,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CACJ,GAAG,oBAAoB,uIAAuI,CAC/J,CACF,CAAA;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,4BAA4B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAiB,EACjB,IAA0G;IAE1G,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QAC5C,GAAG,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAA;QAClF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAC9C,GAAG,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAA;QACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,OAAO,GAAY,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,gBAAgB,CAAA;IAC/E,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAA;IAEpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAC3B,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,aAAa,EAC9D,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAC7B,CAAA;QAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;YACzC,OAAM;QACR,CAAC;QAED,GAAG,CAAC,OAAO,CAAC,WAAW,GAAG,CAAC,UAAU,mBAAmB,GAAG,CAAC,OAAO,GAAG,CAAC,CAAA;IACzE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,iCAAiC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC9F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAA0C;IAC/E,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAA;IAEpC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAwB,wBAAwB,CAAC,CAAA;QAE9E,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;YAC1C,OAAM;QACR,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAA;QAErD,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAA;QACxC,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,CAAA;YAC3E,MAAM,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;YAEjC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACrC,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC/B,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;gBACzB,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC;gBACxB,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;gBACrB,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC;aAClC,CAAC,CAAA;YAEF,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QACpC,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACf,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QACrB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,GAAG,CAAC,GAAG,CAAC,OAAO,MAAM,EAAE,CAAC,CAAA;QAC1B,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAChG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAA0E;IAE1E,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAA;IAEpC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;IACpC,IAAI,IAAI,CAAC,KAAK;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAC/C,IAAI,IAAI,CAAC,KAAK;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAE/C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAqB,yCAAyC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QAE/G,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;YAC1C,OAAM;QACR,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAA;QAC5C,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;QAClE,GAAG,CAAC,KAAK,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAA;QAEzD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACf,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACxB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAEf,yEAAyE;QACzE,yEAAyE;QACzE,gEAAgE;QAChE,wEAAwE;QACxE,4BAA4B;QAC5B,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,CAAC,CAAA;QACjE,MAAM,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QAE9B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACpC,CAAC,CAAC,OAAO;YACT,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;YAClB,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;YACrB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC;SACrE,CAAC,CAAA;QAEF,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QAElC,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;QAC9D,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACf,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;gBAChC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,yCAAyC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACtG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC"}

package/dist/commands/gateway.d.ts

@@ -0,0 +1,62 @@
+/**
+ * `intutic gateway` — manage self-hosted gateway registrations (LLD #66)
+ * and routing assignment (LLD #68 §2).
+ *
+ * Subcommands:
+ *   - `intutic gateway register --name <name> --target <docker|kubernetes|bare_metal>`
+ *   - `intutic gateway list [--json]`
+ *   - `intutic gateway status <gateway_id> [--json]`
+ *   - `intutic gateway rotate <gateway_id>`
+ *   - `intutic gateway revoke <gateway_id> [--reason <text>]`
+ *   - `intutic gateway config set <gateway_id> [--require-vk <bool>] [--require-provisioned-key <bool>]`
+ *   - `intutic gateway assign --gateway <gateway_id>|--clear [--org <org_id>]`
+ *   - `intutic gateway resolve [--json]`
+ *
+ * Server side: services/control-plane/src/routes/gateways.ts,
+ * routes/gatewayHeartbeat.ts, routes/orgs.ts (`PATCH .../gateway`). A
+ * gateway token (`gwk_...`) is a distinct credential from the `vk_`/JWT
+ * this command authenticates with — it is printed exactly once, on
+ * `register` and `rotate`, and never retrievable again, matching the
+ * server's own one-shot design.
+ *
+ * `assign`/`resolve` are client-side discovery, not traffic routing:
+ * there is no proxy-in-front-of-proxies in this architecture, so
+ * `resolve` tells you which gateway a client SHOULD point at; actually
+ * pointing one there (`CONTROL_PLANE_URL=...`) is still a manual step.
+ *
+ * @module
+ */
+interface GatewayCliOpts {
+    json?: boolean;
+    dev?: boolean;
+}
+/** `intutic gateway register` */
+export declare function runGatewayRegister(opts: GatewayCliOpts & {
+    name?: string;
+    target?: string;
+}): Promise<void>;
+/** `intutic gateway list` */
+export declare function runGatewayList(opts: GatewayCliOpts): Promise<void>;
+/** `intutic gateway status <gateway_id>` */
+export declare function runGatewayStatus(gatewayId: string, opts: GatewayCliOpts): Promise<void>;
+/** `intutic gateway rotate <gateway_id>` */
+export declare function runGatewayRotate(gatewayId: string, opts: GatewayCliOpts): Promise<void>;
+/** `intutic gateway revoke <gateway_id>` */
+export declare function runGatewayRevoke(gatewayId: string, opts: GatewayCliOpts & {
+    reason?: string;
+}): Promise<void>;
+/** `intutic gateway config set <gateway_id>` */
+export declare function runGatewayConfigSet(gatewayId: string, opts: GatewayCliOpts & {
+    requireVk?: string;
+    requireProvisionedKey?: string;
+}): Promise<void>;
+/** `intutic gateway assign` — LLD #68 §2. */
+export declare function runGatewayAssign(opts: GatewayCliOpts & {
+    gateway?: string;
+    clear?: boolean;
+    org?: string;
+}): Promise<void>;
+/** `intutic gateway resolve` — LLD #68 §2. */
+export declare function runGatewayResolve(opts: GatewayCliOpts): Promise<void>;
+export {};
+//# sourceMappingURL=gateway.d.ts.map

package/dist/commands/gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../../src/commands/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAaH,UAAU,cAAc;IACtB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AAgED,iCAAiC;AACjC,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,cAAc,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACxD,OAAO,CAAC,IAAI,CAAC,CAqCf;AAED,6BAA6B;AAC7B,wBAAsB,cAAc,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAiCxE;AAED,4CAA4C;AAC5C,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA4B7F;AAED,4CAA4C;AAC5C,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB7F;AAED,4CAA4C;AAC5C,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,cAAc,GAAG;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACzC,OAAO,CAAC,IAAI,CAAC,CAef;AAED,gDAAgD;AAChD,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,cAAc,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,qBAAqB,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5E,OAAO,CAAC,IAAI,CAAC,CA2Cf;AAED,6CAA6C;AAC7C,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,cAAc,GAAG;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACzE,OAAO,CAAC,IAAI,CAAC,CAoCf;AAcD,8CAA8C;AAC9C,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAiD3E"}