@intutic/cli 2.2.0 → 2.3.0

package/dist/commands/mcp.js

@@ -0,0 +1,65 @@
+/**
+ * `intutic mcp` — the workspace's MCP server registry and the decisions every
+ * MCP proxy enforces on it.
+ *
+ * Subcommands:
+ *   - `intutic mcp list [--json]`
+ *   - `intutic mcp approve|block|reset <server_id> [--json]`
+ *   - `intutic mcp enable-tool|disable-tool <server_id> <tool> [--json]`
+ *
+ * Server side: services/control-plane/src/routes/mcpServers.ts. Approving,
+ * blocking, resetting and switching tools need OWNER or ADMIN; listing needs
+ * any member. The registry-wide settings (`mcpDefaultPolicy`,
+ * `mcpHighRiskToolChange`, `mcpBudgets`) are workspace settings, changed with
+ * `intutic settings set`.
+ *
+ * @module
+ */
+import pc from 'picocolors';
+import { log } from '../lib/logger.js';
+import { runApiCommand } from './apiCommand.js';
+const STATUS_FOR = { approve: 'approved', block: 'blocked', reset: 'candidate' };
+function statusLabel(s) {
+    const label = s.status === 'approved' ? pc.green(s.status) : s.status === 'blocked' ? pc.red(s.status) : pc.yellow(s.status);
+    return s.heldForReview ? `${label} (held: high-risk tool change)` : label;
+}
+/** `intutic mcp list` */
+export async function runMcpList(opts) {
+    await runApiCommand(opts, 'Failed to list MCP servers', (client) => client.get('/api/v1/mcp/servers'), (res) => {
+        log.header('Intutic — MCP Servers');
+        log.field('Default policy', res.defaultPolicy);
+        log.field('High-risk tool change', res.highRiskToolChange);
+        log.field('Awaiting a decision', String(res.pendingCount));
+        if (res.servers.length === 0) {
+            log.dim('  No MCP servers seen yet.');
+            return;
+        }
+        for (const s of res.servers) {
+            console.log('');
+            log.field('Server ID', s.serverId);
+            log.field('Name', s.serverName);
+            log.field('Status', statusLabel(s));
+            log.field('Tools', `${s.tools.length}${s.disabledTools.length > 0 ? ` (disabled: ${s.disabledTools.join(', ')})` : ''}`);
+            log.field('Last seen', s.lastSeenAt);
+        }
+    });
+}
+/** `intutic mcp approve|block|reset <server_id>` */
+export async function runMcpDecide(action, serverId, opts) {
+    await runApiCommand(opts, `Failed to ${action} MCP server ${serverId}`, (client) => client.post(`/api/v1/mcp/servers/${encodeURIComponent(serverId)}/status`, {
+        status: STATUS_FOR[action],
+    }), (res) => {
+        if (action === 'reset')
+            log.success(`${res.server.serverName} is back in the approval queue.`);
+        else
+            log.success(`${res.server.serverName} ${STATUS_FOR[action]}.`);
+    });
+}
+/** `intutic mcp enable-tool|disable-tool <server_id> <tool>` */
+export async function runMcpTool(serverId, tool, enabled, opts) {
+    await runApiCommand(opts, `Failed to ${enabled ? 'enable' : 'disable'} ${tool}`, (client) => client.post(`/api/v1/mcp/servers/${encodeURIComponent(serverId)}/tools`, {
+        tool,
+        enabled,
+    }), (res) => log.success(`${tool} on ${res.server.serverName} ${enabled ? 'enabled' : 'disabled'}.`));
+}
+//# sourceMappingURL=mcp.js.map

package/dist/commands/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/commands/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,MAAM,YAAY,CAAA;AAC3B,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,EAAE,aAAa,EAAuB,MAAM,iBAAiB,CAAA;AAwBpE,MAAM,UAAU,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAW,CAAA;AAEzF,SAAS,WAAW,CAAC,CAAe;IAClC,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IAC5H,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC,CAAC,KAAK,CAAA;AAC3E,CAAC;AAED,yBAAyB;AACzB,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAoB;IACnD,MAAM,aAAa,CACjB,IAAI,EACJ,4BAA4B,EAC5B,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAwB,qBAAqB,CAAC,EACpE,CAAC,GAAG,EAAE,EAAE;QACN,GAAG,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAA;QACnC,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,GAAG,CAAC,aAAa,CAAC,CAAA;QAC9C,GAAG,CAAC,KAAK,CAAC,uBAAuB,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAA;QAC1D,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAA;QAC1D,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAA;YACrC,OAAM;QACR,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACf,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAA;YAClC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,CAAA;YAC/B,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;YACnC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;YACxH,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC,CAAA;QACtC,CAAC;IACH,CAAC,CACF,CAAA;AACH,CAAC;AAED,oDAAoD;AACpD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAA+B,EAC/B,QAAgB,EAChB,IAAoB;IAEpB,MAAM,aAAa,CACjB,IAAI,EACJ,aAAa,MAAM,eAAe,QAAQ,EAAE,EAC5C,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,IAAI,CAA4B,uBAAuB,kBAAkB,CAAC,QAAQ,CAAC,SAAS,EAAE;QACnG,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC;KAC3B,CAAC,EACJ,CAAC,GAAG,EAAE,EAAE;QACN,IAAI,MAAM,KAAK,OAAO;YAAE,GAAG,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,iCAAiC,CAAC,CAAA;;YACzF,GAAG,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACrE,CAAC,CACF,CAAA;AACH,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,QAAgB,EAChB,IAAY,EACZ,OAAgB,EAChB,IAAoB;IAEpB,MAAM,aAAa,CACjB,IAAI,EACJ,aAAa,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,EAAE,EACrD,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,IAAI,CAA4B,uBAAuB,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,EAAE;QAClG,IAAI;QACJ,OAAO;KACR,CAAC,EACJ,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CACjG,CAAA;AACH,CAAC"}

package/dist/commands/notifications.d.ts

@@ -0,0 +1,54 @@
+/**
+ * `intutic notifications` — notification rules: which events go to which
+ * Slack channel, email addresses, webhook or PagerDuty service.
+ *
+ * Subcommands:
+ *   - `intutic notifications list [--json]`
+ *   - `intutic notifications create --event <type> --channel <channel> <target flag> [filters] [--json]`
+ *   - `intutic notifications update <rule_id> [fields] [--json]`
+ *   - `intutic notifications delete <rule_id> [--json]`
+ *   - `intutic notifications rotate-secret <rule_id> [--json]`
+ *
+ * Server side: services/control-plane/src/routes/notifications.ts. A webhook
+ * rule's signing secret is generated by the server and returned once — in the
+ * response that created it (create, a switch to the webhook channel, or a
+ * rotation) — so this prints it once, with a warning to copy it.
+ *
+ * @module
+ */
+import { type ApiCommandOpts } from './apiCommand.js';
+/** The flags `create` and `update` share. */
+export interface RuleFlags {
+    event?: string;
+    channel?: string;
+    slackChannel?: string;
+    email?: string;
+    webhookUrl?: string;
+    pagerdutyKey?: string;
+    severity?: string;
+    harness?: string;
+    user?: string;
+    cooldown?: string;
+}
+/**
+ * The request body for the given flags: only the fields a flag set, so an
+ * update leaves everything else as it is. Channel config and filters are each
+ * replaced whole when any of their flags is given, as the route stores them.
+ */
+export declare function ruleBody(flags: RuleFlags): Record<string, unknown>;
+/** `intutic notifications list` */
+export declare function runNotificationsList(opts: ApiCommandOpts): Promise<void>;
+/** `intutic notifications create` */
+export declare function runNotificationsCreate(opts: ApiCommandOpts & RuleFlags & {
+    disabled?: boolean;
+}): Promise<void>;
+/** `intutic notifications update <rule_id>` */
+export declare function runNotificationsUpdate(ruleId: string, opts: ApiCommandOpts & RuleFlags & {
+    enable?: boolean;
+    disable?: boolean;
+}): Promise<void>;
+/** `intutic notifications delete <rule_id>` */
+export declare function runNotificationsDelete(ruleId: string, opts: ApiCommandOpts): Promise<void>;
+/** `intutic notifications rotate-secret <rule_id>` */
+export declare function runNotificationsRotateSecret(ruleId: string, opts: ApiCommandOpts): Promise<void>;
+//# sourceMappingURL=notifications.d.ts.map

package/dist/commands/notifications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.d.ts","sourceRoot":"","sources":["../../src/commands/notifications.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,OAAO,EAA8D,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAwBjH,6CAA6C;AAC7C,MAAM,WAAW,SAAS;IACxB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAkBD;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA4BlE;AAsBD,mCAAmC;AACnC,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAiB9E;AAED,qCAAqC;AACrC,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,cAAc,GAAG,SAAS,GAAG;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAarH;AAED,+CAA+C;AAC/C,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,cAAc,GAAG,SAAS,GAAG;IAAE,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GACzE,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED,+CAA+C;AAC/C,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAOhG;AAED,sDAAsD;AACtD,wBAAsB,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAatG"}

package/dist/commands/notifications.js

@@ -0,0 +1,151 @@
+/**
+ * `intutic notifications` — notification rules: which events go to which
+ * Slack channel, email addresses, webhook or PagerDuty service.
+ *
+ * Subcommands:
+ *   - `intutic notifications list [--json]`
+ *   - `intutic notifications create --event <type> --channel <channel> <target flag> [filters] [--json]`
+ *   - `intutic notifications update <rule_id> [fields] [--json]`
+ *   - `intutic notifications delete <rule_id> [--json]`
+ *   - `intutic notifications rotate-secret <rule_id> [--json]`
+ *
+ * Server side: services/control-plane/src/routes/notifications.ts. A webhook
+ * rule's signing secret is generated by the server and returned once — in the
+ * response that created it (create, a switch to the webhook channel, or a
+ * rotation) — so this prints it once, with a warning to copy it.
+ *
+ * @module
+ */
+import pc from 'picocolors';
+import { NOTIFICATION_EVENT_TYPES } from '@intutic/shared-types';
+import { log } from '../lib/logger.js';
+import { fail, list, positiveInt, printSigningSecret, runApiCommand } from './apiCommand.js';
+const CHANNELS = ['slack', 'email', 'webhook', 'pagerduty'];
+/**
+ * Fails on an event type the API would refuse, suggesting the ones in the
+ * same family (`decision.pend` → `decision.pending`, …), or all of them when
+ * none share its first segment.
+ */
+function checkEventType(event) {
+    if (NOTIFICATION_EVENT_TYPES.includes(event))
+        return;
+    const family = event.split('.')[0];
+    const near = NOTIFICATION_EVENT_TYPES.filter((t) => t.split('.')[0] === family);
+    fail(`--event "${event}" is not a notification event type. ` +
+        (near.length > 0 ? `Did you mean ${near.join(', ')}?` : `Valid types: ${NOTIFICATION_EVENT_TYPES.join(', ')}.`) +
+        ' Every type is described at https://docs.intutic.ai/guide/settings#notifications');
+}
+/**
+ * The request body for the given flags: only the fields a flag set, so an
+ * update leaves everything else as it is. Channel config and filters are each
+ * replaced whole when any of their flags is given, as the route stores them.
+ */
+export function ruleBody(flags) {
+    const body = {};
+    if (flags.event !== undefined) {
+        checkEventType(flags.event);
+        body.eventType = flags.event;
+    }
+    if (flags.channel !== undefined) {
+        if (!CHANNELS.includes(flags.channel)) {
+            fail(`--channel must be one of ${CHANNELS.join(', ')}, got "${flags.channel}"`);
+        }
+        body.channel = flags.channel;
+    }
+    const config = {};
+    if (flags.slackChannel !== undefined)
+        config.slackChannelId = flags.slackChannel;
+    if (flags.email !== undefined)
+        config.emailRecipients = list(flags.email);
+    if (flags.webhookUrl !== undefined)
+        config.webhookUrl = flags.webhookUrl;
+    if (flags.pagerdutyKey !== undefined)
+        config.pagerdutyRoutingKey = flags.pagerdutyKey;
+    if (Object.keys(config).length > 0)
+        body.channelConfig = config;
+    const filters = {};
+    if (flags.severity !== undefined)
+        filters.severity = list(flags.severity);
+    if (flags.harness !== undefined)
+        filters.harnessType = list(flags.harness);
+    if (flags.user !== undefined)
+        filters.userId = list(flags.user);
+    if (Object.keys(filters).length > 0)
+        body.filters = filters;
+    if (flags.cooldown !== undefined)
+        body.cooldownMinutes = positiveInt(flags.cooldown, '--cooldown');
+    return body;
+}
+function target(rule) {
+    const c = rule.channelConfig;
+    switch (rule.channel) {
+        case 'slack': return c.slackChannelName ?? c.slackChannelId ?? '—';
+        case 'email': return c.emailRecipients?.join(', ') ?? '—';
+        case 'webhook': return c.webhookUrl ?? '—';
+        case 'pagerduty': return 'routing key set';
+    }
+}
+function printRule(rule) {
+    log.field('Rule ID', rule.ruleId);
+    log.field('Event', rule.eventType);
+    log.field('Channel', `${rule.channel} → ${target(rule)}`);
+    const filters = Object.entries(rule.filters).filter(([, v]) => v && v.length > 0);
+    if (filters.length > 0)
+        log.field('Filters', filters.map(([k, v]) => `${k}=${v.join(',')}`).join('; '));
+    log.field('Cooldown', `${rule.cooldownMinutes} min`);
+    log.field('Enabled', rule.enabled ? pc.green('yes') : pc.dim('no'));
+}
+/** `intutic notifications list` */
+export async function runNotificationsList(opts) {
+    await runApiCommand(opts, 'Failed to list notification rules', (client) => client.get('/api/v1/notifications/rules'), (res) => {
+        log.header('Intutic — Notification Rules');
+        if (res.rules.length === 0) {
+            log.dim('  No notification rules.');
+            return;
+        }
+        for (const rule of res.rules) {
+            console.log('');
+            printRule(rule);
+        }
+    });
+}
+/** `intutic notifications create` */
+export async function runNotificationsCreate(opts) {
+    const body = ruleBody(opts);
+    if (opts.disabled)
+        body.enabled = false;
+    await runApiCommand(opts, 'Failed to create notification rule', (client) => client.post('/api/v1/notifications/rules', body), (rule) => {
+        log.success('Notification rule created.');
+        printRule(rule);
+        printSigningSecret(rule.signingSecret);
+    });
+}
+/** `intutic notifications update <rule_id>` */
+export async function runNotificationsUpdate(ruleId, opts) {
+    if (opts.enable && opts.disable)
+        fail('Pass --enable or --disable, not both.');
+    const body = ruleBody(opts);
+    if (opts.enable)
+        body.enabled = true;
+    if (opts.disable)
+        body.enabled = false;
+    if (Object.keys(body).length === 0)
+        fail('Nothing to update: pass at least one field to change.');
+    await runApiCommand(opts, `Failed to update notification rule ${ruleId}`, (client) => client.put(`/api/v1/notifications/rules/${encodeURIComponent(ruleId)}`, body), (rule) => {
+        log.success('Notification rule updated.');
+        printRule(rule);
+        printSigningSecret(rule.signingSecret);
+    });
+}
+/** `intutic notifications delete <rule_id>` */
+export async function runNotificationsDelete(ruleId, opts) {
+    await runApiCommand(opts, `Failed to delete notification rule ${ruleId}`, (client) => client.del(`/api/v1/notifications/rules/${encodeURIComponent(ruleId)}`), () => log.success(`Notification rule ${ruleId} deleted.`));
+}
+/** `intutic notifications rotate-secret <rule_id>` */
+export async function runNotificationsRotateSecret(ruleId, opts) {
+    await runApiCommand(opts, `Failed to replace the signing secret of ${ruleId}`, (client) => client.post(`/api/v1/notifications/rules/${encodeURIComponent(ruleId)}/signing-secret`), (res) => {
+        log.success(`New signing secret for ${res.ruleId}; deliveries are signed with it from now on.`);
+        printSigningSecret(res.signingSecret);
+    });
+}
+//# sourceMappingURL=notifications.js.map

package/dist/commands/notifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.js","sourceRoot":"","sources":["../../src/commands/notifications.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,MAAM,YAAY,CAAA;AAC3B,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAChE,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,kBAAkB,EAAE,aAAa,EAAuB,MAAM,iBAAiB,CAAA;AAEjH,MAAM,QAAQ,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,CAAU,CAAA;AAoCpE;;;;GAIG;AACH,SAAS,cAAc,CAAC,KAAa;IACnC,IAAK,wBAA8C,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAM;IAC3E,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAClC,MAAM,IAAI,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAA;IAC/E,IAAI,CACF,YAAY,KAAK,sCAAsC;QACrD,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAC/G,kFAAkF,CACrF,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAgB;IACvC,MAAM,IAAI,GAA4B,EAAE,CAAA;IACxC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC3B,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,KAAK,CAAA;IAC9B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAE,QAA8B,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7D,IAAI,CAAC,4BAA4B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,OAAO,GAAG,CAAC,CAAA;QACjF,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;IAC9B,CAAC;IAED,MAAM,MAAM,GAAkB,EAAE,CAAA;IAChC,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;QAAE,MAAM,CAAC,cAAc,GAAG,KAAK,CAAC,YAAY,CAAA;IAChF,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACzE,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;QAAE,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAA;IACxE,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;QAAE,MAAM,CAAC,mBAAmB,GAAG,KAAK,CAAC,YAAY,CAAA;IACrF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,aAAa,GAAG,MAAM,CAAA;IAE/D,MAAM,OAAO,GAAgC,EAAE,CAAA;IAC/C,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IACzE,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC1E,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC/D,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IAE3D,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,eAAe,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;IAClG,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,MAAM,CAAC,IAAsB;IACpC,MAAM,CAAC,GAAG,IAAI,CAAC,aAAa,CAAA;IAC5B,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC,cAAc,IAAI,GAAG,CAAA;QAClE,KAAK,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAA;QACzD,KAAK,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,IAAI,GAAG,CAAA;QAC1C,KAAK,WAAW,CAAC,CAAC,OAAO,iBAAiB,CAAA;IAC5C,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAsB;IACvC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;IACjC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;IAClC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACzD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACjF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAK,CAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IACrH,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,eAAe,MAAM,CAAC,CAAA;IACpD,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;AACrE,CAAC;AAED,mCAAmC;AACnC,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAoB;IAC7D,MAAM,aAAa,CACjB,IAAI,EACJ,mCAAmC,EACnC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAgC,6BAA6B,CAAC,EACpF,CAAC,GAAG,EAAE,EAAE;QACN,GAAG,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAA;QAC1C,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAA;YACnC,OAAM;QACR,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACf,SAAS,CAAC,IAAI,CAAC,CAAA;QACjB,CAAC;IACH,CAAC,CACF,CAAA;AACH,CAAC;AAED,qCAAqC;AACrC,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAAyD;IACpG,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC3B,IAAI,IAAI,CAAC,QAAQ;QAAE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;IACvC,MAAM,aAAa,CACjB,IAAI,EACJ,oCAAoC,EACpC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAmB,6BAA6B,EAAE,IAAI,CAAC,EAC9E,CAAC,IAAI,EAAE,EAAE;QACP,GAAG,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAA;QACzC,SAAS,CAAC,IAAI,CAAC,CAAA;QACf,kBAAkB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IACxC,CAAC,CACF,CAAA;AACH,CAAC;AAED,+CAA+C;AAC/C,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAc,EACd,IAA0E;IAE1E,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO;QAAE,IAAI,CAAC,uCAAuC,CAAC,CAAA;IAC9E,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC3B,IAAI,IAAI,CAAC,MAAM;QAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;IACpC,IAAI,IAAI,CAAC,OAAO;QAAE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;IACtC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,IAAI,CAAC,uDAAuD,CAAC,CAAA;IACjG,MAAM,aAAa,CACjB,IAAI,EACJ,sCAAsC,MAAM,EAAE,EAC9C,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAmB,+BAA+B,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,EAC3G,CAAC,IAAI,EAAE,EAAE;QACP,GAAG,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAA;QACzC,SAAS,CAAC,IAAI,CAAC,CAAA;QACf,kBAAkB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IACxC,CAAC,CACF,CAAA;AACH,CAAC;AAED,+CAA+C;AAC/C,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAAc,EAAE,IAAoB;IAC/E,MAAM,aAAa,CACjB,IAAI,EACJ,sCAAsC,MAAM,EAAE,EAC9C,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAkB,+BAA+B,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,EACpG,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,qBAAqB,MAAM,WAAW,CAAC,CAC1D,CAAA;AACH,CAAC;AAED,sDAAsD;AACtD,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,MAAc,EAAE,IAAoB;IACrF,MAAM,aAAa,CACjB,IAAI,EACJ,2CAA2C,MAAM,EAAE,EACnD,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,IAAI,CACT,+BAA+B,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAC3E,EACH,CAAC,GAAG,EAAE,EAAE;QACN,GAAG,CAAC,OAAO,CAAC,0BAA0B,GAAG,CAAC,MAAM,8CAA8C,CAAC,CAAA;QAC/F,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IACvC,CAAC,CACF,CAAA;AACH,CAAC"}

package/dist/commands/org.d.ts

@@ -1,9 +1,9 @@
 /**
  * `intutic org create` — create a real org from an already-authenticated
- * session (tenancy phase 4/7, LLD #65).
+ * session.
  *
- * Real org creation now requires DNS domain-ownership verification (LLD #71
- * follow-up): creating an org auto-provisions a real managed gateway cell,
+ * Real org creation now requires DNS domain-ownership verification:
+ * creating an org auto-provisions a real managed gateway cell,
  * so an org's claimed domain must be proven before `POST /api/v1/orgs` will
  * create it. There's no anonymous-compatible verification flow (no session
  * exists yet to own a verification attempt against), so the old anonymous

package/dist/commands/org.js

@@ -1,9 +1,9 @@
 /**
  * `intutic org create` — create a real org from an already-authenticated
- * session (tenancy phase 4/7, LLD #65).
+ * session.
  *
- * Real org creation now requires DNS domain-ownership verification (LLD #71
- * follow-up): creating an org auto-provisions a real managed gateway cell,
+ * Real org creation now requires DNS domain-ownership verification:
+ * creating an org auto-provisions a real managed gateway cell,
  * so an org's claimed domain must be proven before `POST /api/v1/orgs` will
  * create it. There's no anonymous-compatible verification flow (no session
  * exists yet to own a verification attempt against), so the old anonymous

package/dist/commands/policy.d.ts

@@ -113,11 +113,16 @@ export declare const explainUnsupportedImport: typeof explainWasmImport;
  * Instantiates a compiled rule with the proxy's host imports and evaluates it
  * against one mock context, returning the raw verdict code.
  *
+ * The rule is metered as the MCP proxy meters it, against the proxies'
+ * budget (`DEFAULT_FUEL_BUDGET`, the Rust proxy's `limits::NATIVE`): a rule
+ * that runs out of instructions there throws here, saying so. `budget` is
+ * for tests.
+ *
  * The import set here is the proxy's, not a convenient superset: a rule that
  * links in this sandbox must link in the proxy, or install validation passes
  * something the proxy then silently bypasses.
  */
-export declare function instantiateAndEvaluate(wasmBuffer: Uint8Array, mockStr: string): Promise<number>;
+export declare function instantiateAndEvaluate(wasmBuffer: Uint8Array, mockStr: string, budget?: number): Promise<number>;
 export declare function runPolicyTest(opts: {
     wasm: string;
     mock: string;

package/dist/commands/policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/commands/policy.ts"],"names":[],"mappings":"AAOA,OAAO,EAEL,sBAAsB,EACtB,iBAAiB,EAClB,MAAM,uBAAuB,CAAA;AAG9B,OAAO,EAAmB,KAAK,SAAS,EAAE,MAAM,eAAe,CAAA;AAE/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AA0C9F,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsB9F;AAED,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsB/F;AAED,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GACvC,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,YAAY,EAAE,YAAY,GAAG,IAAI,CAAA;IACjC,+DAA+D;IAC/D,iBAAiB,EAAE,MAAM,CAAA;IACzB,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,gBAAgB,EAAE,gBAAgB,GAAG,IAAI,CAAA;IACzC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,8EAA8E;IAC9E,UAAU,EAAE,OAAO,CAAA;IACnB,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAA;IACxB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAkB3F;AAED;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA0C9E;AAED;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,QAW7B,CAAA;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,iEAAoB,CAAA;AAElD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,YAAY;IAC3B,gFAAgF;IAChF,MAAM,EAAE,WAAW,CAAC,MAAM,CAAA;IAC1B,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;IAC9B,sEAAsE;IACtE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;CACjD;AAwFD;;;;;GAKG;AACH;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,+BAAyB,CAAA;AACxD,eAAO,MAAM,wBAAwB,0BAAoB,CAAA;AAEzD;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,CA2JjB;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA6CvF;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAM5C;AAED,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAUtF;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAGxE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,EAAE,CAQhG;AAID,gFAAgF;AAChF,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,kJAAkJ;AAClJ,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CA4BlI;AAWD;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EACnC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAgCf;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,GAAG,CAAC,EAAE,OAAO,CAAA;CACd,GAAG,OAAO,CAAC,IAAI,CAAC,CA8DhB;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqEhB;AAwBD;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GACtD,OAAO,CAAC,IAAI,CAAC,CAgEf;AAED,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CA6BxD"}
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/commands/policy.ts"],"names":[],"mappings":"AAOA,OAAO,EAIL,sBAAsB,EACtB,iBAAiB,EAIlB,MAAM,uBAAuB,CAAA;AAI9B,OAAO,EAAmB,KAAK,SAAS,EAAE,MAAM,eAAe,CAAA;AAE/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AA0C9F,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsB9F;AAED,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsB/F;AAED,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GACvC,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,YAAY,EAAE,YAAY,GAAG,IAAI,CAAA;IACjC,+DAA+D;IAC/D,iBAAiB,EAAE,MAAM,CAAA;IACzB,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,gBAAgB,EAAE,gBAAgB,GAAG,IAAI,CAAA;IACzC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,8EAA8E;IAC9E,UAAU,EAAE,OAAO,CAAA;IACnB,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAA;IACxB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAkB3F;AAED;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA0C9E;AAED;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,QAW7B,CAAA;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,iEAAoB,CAAA;AAElD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,YAAY;IAC3B,gFAAgF;IAChF,MAAM,EAAE,WAAW,CAAC,MAAM,CAAA;IAC1B,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;IAC9B,sEAAsE;IACtE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;CACjD;AAyFD;;;;;GAKG;AACH;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,+BAAyB,CAAA;AACxD,eAAO,MAAM,wBAAwB,0BAAoB,CAAA;AAEzD;;;;;;;;;;;;GAYG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,MAAM,EACf,MAAM,SAAsB,GAC3B,OAAO,CAAC,MAAM,CAAC,CAsKjB;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAkDvF;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAM5C;AAED,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAUtF;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAGxE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,EAAE,CAQhG;AAID,gFAAgF;AAChF,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,kJAAkJ;AAClJ,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CA4BlI;AAWD;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EACnC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAgCf;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,GAAG,CAAC,EAAE,OAAO,CAAA;CACd,GAAG,OAAO,CAAC,IAAI,CAAC,CA8DhB;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkFhB;AAwBD;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GACtD,OAAO,CAAC,IAAI,CAAC,CAsEf;AAED,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CA6BxD"}

package/dist/commands/policy.js

@@ -5,7 +5,8 @@ import { createHash } from 'node:crypto';
 import { spawn } from 'node:child_process';
 import { log } from '../lib/logger.js';
 import { NOT_AUTHENTICATED } from '../lib/authMessages.js';
-import { WASM_HOST_IMPORTS, unsupportedWasmImports, explainWasmImport, } from '@intutic/shared-types';
+import { DEFAULT_FUEL_BUDGET, FUEL_EXPORT, WASM_HOST_IMPORTS, unsupportedWasmImports, explainWasmImport, isOpaModule, meterFuel, } from '@intutic/shared-types';
+import { decideCase, loadMeteredRegoRule } from './rules.js';
 import { loadCredentials, loadConfig } from '../config/store.js';
 import { resolveControlPlaneUrl } from '../config/paths.js';
 import { createApiClient } from '../lib/api.js';
@@ -230,7 +231,8 @@ function resolveGuestAbi(instance) {
     }
     // Accept exactly the allocator exports the proxy runner accepts
     // (packages/proxy/src/wasm/runner.rs: `allocate`, then `__new`) — anything
-    // looser would validate rules the proxy then silently fails open on.
+    // looser would validate rules the proxy then cannot run: they reach no
+    // verdict on every call, so every call is refused.
     let allocate;
     const allocateExport = exportedFunction(exports, 'allocate');
     if (allocateExport) {
@@ -301,11 +303,16 @@ export const explainUnsupportedImport = explainWasmImport;
  * Instantiates a compiled rule with the proxy's host imports and evaluates it
  * against one mock context, returning the raw verdict code.
  *
+ * The rule is metered as the MCP proxy meters it, against the proxies'
+ * budget (`DEFAULT_FUEL_BUDGET`, the Rust proxy's `limits::NATIVE`): a rule
+ * that runs out of instructions there throws here, saying so. `budget` is
+ * for tests.
+ *
  * The import set here is the proxy's, not a convenient superset: a rule that
  * links in this sandbox must link in the proxy, or install validation passes
  * something the proxy then silently bypasses.
  */
-export async function instantiateAndEvaluate(wasmBuffer, mockStr) {
+export async function instantiateAndEvaluate(wasmBuffer, mockStr, budget = DEFAULT_FUEL_BUDGET) {
     let instanceRef = null;
     /**
      * Guest memory, or null before `WebAssembly.instantiate` has resolved.
@@ -426,7 +433,7 @@ export async function instantiateAndEvaluate(wasmBuffer, mockStr) {
     // error: function import requires a callable". Same outcome either way — the
     // instantiate below would throw — but a rule author needs to know it was
     // `Math.random()`.
-    const compiled = await WebAssembly.compile(new Uint8Array(wasmBuffer));
+    const compiled = await WebAssembly.compile(meterFuel(new Uint8Array(wasmBuffer), budget));
     const unsupported = unsupportedImports(compiled);
     if (unsupported.length > 0) {
         throw new Error(`rule imports ${unsupported.length} function(s) the proxy sandbox does not provide:\n` +
@@ -436,13 +443,22 @@ export async function instantiateAndEvaluate(wasmBuffer, mockStr) {
     const instance = await WebAssembly.instantiate(compiled, imports);
     instanceRef = instance;
     const abi = resolveGuestAbi(instance);
-    const jsonBytes = Buffer.from(mockStr);
-    const offset = abi.allocate(jsonBytes.length);
-    // Re-read `abi.memory.buffer` here rather than caching a view: `allocate` can
-    // grow the memory, which detaches every ArrayBuffer taken before the call.
-    const memView = new Uint8Array(abi.memory.buffer, offset, jsonBytes.length);
-    memView.set(jsonBytes);
-    return abi.evaluate(offset, jsonBytes.length);
+    const fuel = instance.exports[FUEL_EXPORT];
+    try {
+        const jsonBytes = Buffer.from(mockStr);
+        const offset = abi.allocate(jsonBytes.length);
+        // Re-read `abi.memory.buffer` here rather than caching a view: `allocate` can
+        // grow the memory, which detaches every ArrayBuffer taken before the call.
+        const memView = new Uint8Array(abi.memory.buffer, offset, jsonBytes.length);
+        memView.set(jsonBytes);
+        return abi.evaluate(offset, jsonBytes.length);
+    }
+    catch (err) {
+        if (fuel instanceof WebAssembly.Global && fuel.value < 0) {
+            throw new Error(`WASM rule ran out of its ${budget}-instruction budget; a proxy reaches no verdict and refuses the call as GOVERNANCE_UNAVAILABLE`, { cause: err });
+        }
+        throw err;
+    }
 }
 export async function runPolicyTest(opts) {
     log.header('Intutic — Test Local WASM Policy Rule');
@@ -463,6 +479,10 @@ export async function runPolicyTest(opts) {
         log.error(`Failed to read or parse mock context JSON at "${opts.mock}": ${errMessage(err)}`);
         process.exit(1);
     }
+    if (isOpaModule(new WebAssembly.Module(new Uint8Array(wasmBuffer)))) {
+        log.error(`"${opts.wasm}" is a Rego rule. Test it with: intutic rules test ${opts.wasm} --input <cases.json>`);
+        process.exit(1);
+    }
     try {
         const verdict = await instantiateAndEvaluate(wasmBuffer, mockStr);
         log.info(`Dry-run evaluation executed successfully.`);
@@ -484,8 +504,8 @@ export async function runPolicyTest(opts) {
         }
         else {
             log.error(`Result: unmapped verdict code ${verdict}`);
-            log.info('  Valid codes are 0 (allow), 1 (block) and 3 (reask). The proxy allows');
-            log.info('  anything else, so a rule returning this enforces nothing.');
+            log.info('  Valid codes are 0 (allow), 1 (block) and 3 (reask). Anything else is');
+            log.info('  no verdict: the proxy refuses the call with GOVERNANCE_UNAVAILABLE.');
         }
     }
     catch (err) {
@@ -609,7 +629,7 @@ export async function uploadCandidateBundle(client, candidateId, wasmPath, sourc
         log.error(`Rule candidate "${candidateId}" was not found in this workspace.`);
         process.exit(1);
     }
-    if (status === 400 || status === 409) {
+    if (status === 400 || status === 403 || status === 409) {
         log.error(`Refused: ${body.error ?? `HTTP ${status}`}${body.detail ? ` — ${body.detail}` : ''}`);
         process.exit(1);
     }
@@ -698,33 +718,46 @@ export async function runPolicyInstall(opts) {
         log.error(`Failed to read WASM file at "${opts.wasm}": ${errMessage(err)}`);
         process.exit(1);
     }
-    // Refuse to install a rule that cannot instantiate or evaluate — a broken
-    // rule enforces nothing (the proxy sandbox fails open).
+    // A Rego rule is validated by the Rego host: it must load (a builtin the
+    // host lacks is refused here, by name) and evaluate an input.
+    let rego;
     try {
-        const validationVerdict = await instantiateAndEvaluate(wasmBuffer, DEFAULT_ALLOW_MOCK);
-        // Refuse a code the proxy does not map. Everything outside {0,1,2,3} is
-        // allowed at runtime with a warning, so a rule inventing a rung installs
-        // clean and then enforces nothing — the same silent shape as a rule that
-        // cannot link. 2 is accepted here because already-installed rules use it,
-        // but it is deprecated and reported as such.
-        if (validationVerdict === 2) {
-            // Accepted, because refusing it would break reinstalling a rule that
-            // already shipped — but never silently. The guest never receives the
-            // request body, so redaction was never expressible, and the proxy maps 2
-            // to a block. An author who believes they are redacting is blocking.
-            log.warn('Rule returned verdict code 2 (REDACT), which is deprecated. The proxy treats it ' +
-                'as a block. Return 1 to block, or 3 to reask.');
-        }
-        if (![0, 1, 2, 3].includes(validationVerdict)) {
-            log.error(`Rule returned verdict code ${validationVerdict}, which the proxy does not map — ` +
-                'it would be allowed on every request. Valid codes: 0 allow, 1 block, 3 reask.');
-            process.exit(1);
-        }
+        rego = loadMeteredRegoRule(wasmBuffer);
+        if (rego)
+            decideCase(rego, { tool: null, args: null });
     }
     catch (err) {
-        log.error(`Rule failed validation and was NOT installed: ${errMessage(err)}`);
+        log.error(`Rego rule failed validation and was NOT installed: ${errMessage(err)}`);
         process.exit(1);
     }
+    // Refuse to install a rule that cannot instantiate or evaluate — a broken
+    // rule reaches no verdict on any call, so every call would be refused.
+    if (!rego) {
+        try {
+            const validationVerdict = await instantiateAndEvaluate(wasmBuffer, DEFAULT_ALLOW_MOCK);
+            // Refuse a code the proxy does not map. Everything outside {0,1,2,3} is
+            // no verdict at runtime, so a rule inventing a rung would install clean
+            // and then refuse every call. 2 is accepted here because already-installed rules use it,
+            // but it is deprecated and reported as such.
+            if (validationVerdict === 2) {
+                // Accepted, because refusing it would break reinstalling a rule that
+                // already shipped — but never silently. The guest never receives the
+                // request body, so redaction was never expressible, and the proxy maps 2
+                // to a block. An author who believes they are redacting is blocking.
+                log.warn('Rule returned verdict code 2 (REDACT), which is deprecated. The proxy treats it ' +
+                    'as a block. Return 1 to block, or 3 to reask.');
+            }
+            if (![0, 1, 2, 3].includes(validationVerdict)) {
+                log.error(`Rule returned verdict code ${validationVerdict}, which is not a verdict — ` +
+                    'the proxy would refuse every such call with GOVERNANCE_UNAVAILABLE. Valid codes: 0 allow, 1 block, 3 reask.');
+                process.exit(1);
+            }
+        }
+        catch (err) {
+            log.error(`Rule failed validation and was NOT installed: ${errMessage(err)}`);
+            process.exit(1);
+        }
+    }
     const priority = parseInt(opts.priority ?? '100', 10);
     if (isNaN(priority) || priority < 0) {
         log.error(`Invalid priority "${opts.priority}". Must be a non-negative integer.`);
@@ -743,7 +776,9 @@ export async function runPolicyInstall(opts) {
         process.exit(1);
     }
     const sha256 = createHash('sha256').update(wasmBuffer).digest('hex');
-    log.success(`Installed rule "${name}"`);
+    log.success(`Installed ${rego ? 'Rego ' : ''}rule "${name}"`);
+    if (rego)
+        log.field('Entrypoint', rego.entrypoint);
     log.field('Path', dest);
     log.field('Priority', String(priority));
     log.field('SHA-256', sha256);
@@ -800,6 +835,11 @@ export async function runPolicyReplay(ruleId, opts) {
             }
             process.exit(1);
         }
+        if (status === 403) {
+            const detail = result.detail;
+            log.error(`Replay refused: ${detail ?? 'your role cannot replay rules'}`);
+            process.exit(1);
+        }
         if (status !== 200) {
             log.error(`Replay failed (${status}): ${JSON.stringify(result)}`);
             process.exit(1);