@intutic/cli 2.2.0 → 2.4.0

package/dist/cli.js

@@ -5,7 +5,6 @@
  * AI governance control plane for developer workspaces.
  * Provides harness detection, config sync, and workspace management.
  *
- * LLD #8 — Sync Daemon / CLI
  * HLD §3.14 — Real-Time State Mirroring
  *
  * @module
@@ -41,7 +40,7 @@ program
     const { runInit } = await import('./commands/init.js');
     await runInit(opts);
 });
-// ── Cohort setup wizard (LLD #70) ────────────────────────────────────────
+// ── Cohort setup wizard ──────────────────────────────────────────────────
 program
     .command('setup')
     .description('Guided setup: detect harnesses, configure a provider credential, and verify it')
@@ -111,9 +110,9 @@ program
     const { runRollback } = await import('./commands/rollback.js');
     await runRollback(opts);
 });
-program
+const budgetCmd = program
     .command('budget')
-    .description('Check remaining daily/monthly budget and list active loops')
+    .description('Check remaining daily/monthly budget and list active loops; set workspace, key and member budgets')
     .option('--dev', 'Use local control plane (http://localhost:3001)')
     .option('--watch', 'Continuously print machine-local and workspace spend, one line per tick')
     .option('--interval <seconds>', 'Tick interval in seconds for --watch', String(5))
@@ -126,6 +125,68 @@ program
     const { runBudget } = await import('./commands/budget.js');
     await runBudget(opts);
 });
+budgetCmd
+    .command('set')
+    .description("Set the workspace's daily and monthly caps, alert threshold and whether each cap refuses requests (OWNER, ADMIN)")
+    .option('--daily <usd>', 'Daily cap in USD (0: no daily cap; default: back to the $100 default)')
+    .option('--monthly <usd>', 'Monthly cap in USD (0: no monthly cap; default: back to the $500 default)')
+    .option('--threshold <pct>', 'Alert at this percentage of each cap')
+    .option('--daily-enforcement <mode>', 'hard (refuse what the day does not cover) or soft (alert only)')
+    .option('--monthly-enforcement <mode>', 'hard (refuse what the month does not cover) or soft (alert only)')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (_opts, cmd) => {
+    // optsWithGlobals: `budget` declares --dev too, and Commander gives a
+    // parent's option to the parent wherever it appears on the line.
+    const { runBudgetSet } = await import('./commands/budgetLimits.js');
+    await runBudgetSet(cmd.optsWithGlobals());
+});
+budgetCmd
+    .command('keys')
+    .description("Every virtual key's spend budgets, rate limit and spend today and this month")
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (_opts, cmd) => {
+    const { runBudgetKeys } = await import('./commands/budgetLimits.js');
+    await runBudgetKeys(cmd.optsWithGlobals());
+});
+budgetCmd
+    .command('key <keyId>')
+    .description("Set a virtual key's spend budgets and rate limit (OWNER, ADMIN)")
+    .option('--daily <usd>', 'Day budget in USD, or none to remove it')
+    .option('--monthly <usd>', 'Month budget in USD, or none to remove it')
+    .option('--daily-enforcement <mode>', 'hard (refuse) or soft (alert only) for the day budget')
+    .option('--monthly-enforcement <mode>', 'hard (refuse) or soft (alert only) for the month budget')
+    .option('--rpm <n>', 'Requests per minute, or none to remove the limit')
+    .option('--tpm <n>', 'Tokens per minute, or none to remove the limit')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (keyId, _opts, cmd) => {
+    const { runBudgetKey } = await import('./commands/budgetLimits.js');
+    await runBudgetKey(keyId, cmd.optsWithGlobals());
+});
+budgetCmd
+    .command('members')
+    .description("The default member budget, and each member's budgets and spend (Biz Org+)")
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (_opts, cmd) => {
+    const { runBudgetMembers } = await import('./commands/budgetLimits.js');
+    await runBudgetMembers(cmd.optsWithGlobals());
+});
+budgetCmd
+    .command('member <memberId>')
+    .description("Set a member's spend budgets, or the default member budget with `default` (OWNER, ADMIN; Biz Org+)")
+    .option('--daily <usd>', 'Day budget in USD, or none to remove it')
+    .option('--monthly <usd>', 'Month budget in USD, or none to remove it')
+    .option('--daily-enforcement <mode>', 'hard (refuse) or soft (alert only) for the day budget')
+    .option('--monthly-enforcement <mode>', 'hard (refuse) or soft (alert only) for the month budget')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (memberId, _opts, cmd) => {
+    const { runBudgetMember } = await import('./commands/budgetLimits.js');
+    await runBudgetMember(memberId, cmd.optsWithGlobals());
+});
 program
     .command('predict-cost')
     .description('Pre-flight cost estimate for a prompt/task before it runs (requires `intutic login`). ' +
@@ -257,7 +318,7 @@ policyCmd
 });
 policyCmd
     .command('install')
-    .description('Validate and install a compiled WASM rule into the local proxy rules dir')
+    .description('Validate and install a compiled WASM rule (native or Rego) into the local proxy rules dir')
     .requiredOption('--wasm <path>', 'Path to compiled WASM rule binary')
     .option('--name <name>', 'Rule name (defaults to the file name)')
     .option('--priority <NN>', 'Evaluation priority — lower runs first', '100')
@@ -283,7 +344,39 @@ policyCmd
     const { runPolicyReplay } = await import('./commands/policy.js');
     await runPolicyReplay(ruleId, opts);
 });
-// Policy Clause Ledger (LLD #71). `intutic policy` is the WASM loop and
+// Rego policies as rules: compiled with OPA and packaged with the metadata
+// the proxies read (`intutic rules build`), tested through the same host
+// (`intutic rules test`). Installing and uploading are the same as for any rule.
+const rulesCmd = program
+    .command('rules')
+    .description('Build and test Rego policies as Intutic rules');
+rulesCmd
+    .command('build')
+    .description('Compile Rego to a rule with OPA (opa build -t wasm) and package it with its entrypoint and risk tier.\n' +
+    '\n' +
+    '  Needs the opa binary on the PATH, or INTUTIC_OPA_BIN. Refuses a policy that\n' +
+    '  needs a builtin Intutic does not provide, naming it.')
+    .requiredOption('--rego <path>', 'Rego file or directory')
+    .requiredOption('--entrypoint <package/rule>', 'The rule to evaluate, e.g. intutic/shell/deny')
+    .option('--risk-tier <tier>', 'Default risk tier for its decisions: low | medium | high | critical')
+    .option('--out <path>', 'Output .wasm path (default: build/<entrypoint>.wasm)')
+    .action(async (opts) => {
+    const { runRulesBuild } = await import('./commands/rules.js');
+    await runRulesBuild(opts);
+});
+rulesCmd
+    .command('test <module>')
+    .description('Evaluate a Rego rule against sample inputs locally, through the same host the proxies use.\n' +
+    '\n' +
+    '  Each --input file holds one input document, or an array of\n' +
+    '  {"name", "input", "expect": "allow|deny|hold|reask"} cases. Exits 1 when a\n' +
+    '  case gets a decision other than the one it expects.')
+    .requiredOption('--input <file...>', 'JSON file(s) of inputs or cases')
+    .action(async (module, opts) => {
+    const { runRulesTest } = await import('./commands/rules.js');
+    await runRulesTest(module, opts);
+});
+// Policy Clause Ledger. `intutic policy` is the WASM loop and
 // `intutic sops` is files on disk; this namespace is the cited guardrails
 // extracted from policy documents and their shadow -> promote lifecycle.
 const guardrailsCmd = program
@@ -369,6 +462,7 @@ guardrailsCmd
     .description('List guardrails with their status and shadow evidence')
     .option('--status <status>', 'PROPOSED | SHADOW | ENFORCING | REJECTED | RETIRED')
     .option('--target <target>', 'hook_rule | sop_front_matter | wasm_rule | workspace_setting')
+    .option('--provenance <provenance>', 'extracted | authored')
     .option('--doc <docId>', 'Only guardrails cited from this document')
     .option('--limit <n>', 'Max rows (default 50, capped at 200)')
     .option('--json', 'Output as JSON')
@@ -386,6 +480,51 @@ guardrailsCmd
     const { runGuardrailsShow } = await import('./commands/guardrails.js');
     await runGuardrailsShow(guardrailId, opts);
 });
+/** The IR flags `guardrails create` and `guardrails update` share; a file (`--file`) is the alternative. */
+function guardrailIrOptions(cmd) {
+    return cmd
+        .option('--file <path>', 'YAML or JSON: a bare IR, or { name, description, ir }')
+        .option('--name <name>', 'One-line label (at most 80 characters)')
+        .option('--description <text>', 'What the rule is for; shown where an extracted guardrail shows its quote')
+        .option('--kind <kind>', 'hook_rule | deny_tools | review_before | requires_before | forbid_after | max_calls | forbid_with | wasm_predicate | allowed_models | egress_allow')
+        .option('--title <title>', 'hook_rule, wasm_predicate: the title in the block message')
+        .option('--tools <list>', 'hook_rule, deny_tools: comma-separated tool names')
+        .option('--tokens <list>', 'review_before: comma-separated tool or action tokens')
+        .option('--arg-contains <literal>', 'hook_rule: fire only when the input contains this (repeatable)', (v, prev = []) => [...prev, v])
+        .option('--arg-not-contains <literal>', 'hook_rule: fire only when the input does not contain this (repeatable)', (v, prev = []) => [...prev, v])
+        .option('--first <token>', 'requires_before, forbid_after: the first token')
+        .option('--then <token>', 'requires_before, forbid_after: the second token')
+        .option('--token <token>', 'max_calls, forbid_with: the token')
+        .option('--limit <n>', 'max_calls: the most calls allowed')
+        .option('--taint <taint>', 'forbid_with: secrets() | pii()')
+        .option('--roles <list>', 'Comma-separated roles the rule applies to (default: everyone)')
+        .option('--models <list>', 'allowed_models: comma-separated model ids')
+        .option('--hosts <list>', 'egress_allow: comma-separated hosts, suffixes or IPv4 CIDRs')
+        .option('--rationale <text>', 'wasm_predicate: why it re-asks')
+        .option('--predicate <json>', 'wasm_predicate: the predicate as JSON')
+        .option('--json', 'Output as JSON')
+        .option('--dev', 'Use local control plane (http://localhost:3001)');
+}
+guardrailIrOptions(guardrailsCmd.command('create').description('Author a guardrail directly: the same IR and checks as an extracted one, created PROPOSED')).action(async (opts) => {
+    const { runGuardrailsCreate } = await import('./commands/guardrails.js');
+    await runGuardrailsCreate(opts);
+});
+guardrailIrOptions(guardrailsCmd
+    .command('update <guardrailId>')
+    .description('Edit an authored guardrail: a name or description in place; a changed IR creates the next version, PROPOSED with no evidence')
+    .option('--clear-description', 'Remove the description')).action(async (guardrailId, opts) => {
+    const { runGuardrailsUpdate } = await import('./commands/guardrails.js');
+    await runGuardrailsUpdate(guardrailId, opts);
+});
+guardrailsCmd
+    .command('delete <guardrailId>')
+    .description('Retire an authored guardrail and undo what it wrote; its history is kept')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (guardrailId, opts) => {
+    const { runGuardrailsDelete } = await import('./commands/guardrails.js');
+    await runGuardrailsDelete(guardrailId, opts);
+});
 guardrailsCmd
     .command('approve-shadow <guardrailId>')
     .description('Ship a proposed guardrail in shadow: it reports, never blocks')
@@ -501,7 +640,7 @@ program
     const { runStart } = await import('./commands/start.js');
     await runStart(opts);
 });
-// L2 mandatory egress firewall (LLD #63 §5). Makes the governing proxy
+// L2 mandatory egress firewall. Makes the governing proxy
 // non-optional: default-deny host egress to everything except the proxy, DNS,
 // and declared infra. apply/remove need root; generate/status do not.
 const enforceCmd = program
@@ -602,8 +741,8 @@ program
 });
 program
     .command('decisions-log-refresh')
-    .description('One-shot refresh of the governed decisions log (.intutic/DECISIONS.md + the claude-code ' +
-    'harness config section) — no-ops if decisionsLogEnabled is off. Invoked by the optional ' +
+    .description('One-shot refresh of the governed decisions log (.intutic/DECISIONS.md, and the recent ' +
+    'entries in each governed harness\'s instructions file) — no-ops if decisionsLogEnabled is off. Invoked by the optional ' +
     'post-merge Git hook `intutic init` installs; safe to run manually.')
     .action(async () => {
     const { refreshDecisionsLog } = await import('./lib/decisionsLogRefresh.js');
@@ -617,8 +756,8 @@ program
     .command('exec')
     .description('Execute a command wrapped with Intutic proxy environment variables')
     .argument('[command...]', 'Command and arguments to execute (e.g. -- claude)')
-    // Run the agent inside an isolated sandbox whose ONLY egress is the proxy
-    // (LLD #63 §6): cap-drop, no-new-privileges, read-only rootfs, resource caps,
+    // Run the agent inside an isolated sandbox whose ONLY egress is the proxy:
+    // cap-drop, no-new-privileges, read-only rootfs, resource caps,
     // and a default-deny egress firewall the agent cannot undo.
     .option('--sandbox [kind]', 'Run the agent in an isolated sandbox (kind: oci | firecracker; default oci)')
     .option('--sandbox-image <image>', 'Sandbox image (must contain the agent + nftables + capsh); the default is built locally on first use', DEFAULT_SANDBOX_IMAGE)
@@ -717,6 +856,33 @@ findings
     const { runFindingsEchoReport } = await import('./commands/findings.js');
     await runFindingsEchoReport(opts);
 });
+// ── Governance incidents ───────────────────────────────────────────────────
+const incidentsCmd = program
+    .command('incidents')
+    .description('Governance incidents, as on Findings › Incidents (OWNER, ADMIN, EM)');
+incidentsCmd
+    .command('list')
+    .description('Incidents ranked by review priority, filtered by status, severity and type')
+    .option('--status <status>', 'Only incidents with this status: OPEN, RESOLVED or AUTO_RESOLVED')
+    .option('--severity <severity>', 'Only incidents of this severity: CRITICAL, HIGH, MEDIUM or LOW')
+    .option('--type <type>', 'Only incidents of this type, e.g. SCOPE_VIOLATION, WASM_RULE_REFUSED or SYSTEM_ANOMALY')
+    .option('--page <n>', 'The page to show (default 1)')
+    .option('--limit <n>', 'Incidents per page (default 20, at most 100)')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (opts) => {
+    const { runIncidentsList } = await import('./commands/incidents.js');
+    await runIncidentsList(opts);
+});
+incidentsCmd
+    .command('show <incidentId>')
+    .description('One incident in full, with its escalation details')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (incidentId, opts) => {
+    const { runIncidentsShow } = await import('./commands/incidents.js');
+    await runIncidentsShow(incidentId, opts);
+});
 // ── Trace integrity ────────────────────────────────────────────────────────
 const integrity = program
     .command('integrity')
@@ -874,8 +1040,8 @@ daemon
     .option('--mcp', 'Show the MCP proxy daemon instead of the sync-daemon')
     .action(async (opts) => {
     // `mcpDaemonStatus` was exported and never called by any command until the
-    // reachability test widened to the status/stop/start verbs (TD-153's
-    // shape, one more time).
+    // reachability test widened to the status/stop/start verbs (the same
+    // exported-but-unreachable shape, one more time).
     const { daemonStatus, proxyServiceStatus, mcpDaemonStatus } = await import('./commands/install-daemon.js');
     await (opts.proxy ? proxyServiceStatus() : opts.mcp ? mcpDaemonStatus() : daemonStatus());
 });
@@ -886,8 +1052,8 @@ daemon
     .option('--mcp', 'Stop the MCP proxy daemon instead of the sync-daemon')
     .action(async (opts) => {
     // `mcpDaemonStop` was exported and never called by any command until the
-    // reachability test widened to the status/stop/start verbs (TD-153's
-    // shape, one more time).
+    // reachability test widened to the status/stop/start verbs (the same
+    // exported-but-unreachable shape, one more time).
     const { daemonStop, proxyServiceStop, mcpDaemonStop } = await import('./commands/install-daemon.js');
     await (opts.proxy ? proxyServiceStop() : opts.mcp ? mcpDaemonStop() : daemonStop());
 });
@@ -898,8 +1064,8 @@ daemon
     .option('--mcp', 'Start the MCP proxy daemon instead of the sync-daemon')
     .action(async (opts) => {
     // `mcpDaemonStart` was exported and never called by any command until the
-    // reachability test widened to the status/stop/start verbs (TD-153's
-    // shape, one more time).
+    // reachability test widened to the status/stop/start verbs (the same
+    // exported-but-unreachable shape, one more time).
     const { daemonStart, proxyServiceStart, mcpDaemonStart } = await import('./commands/install-daemon.js');
     await (opts.proxy ? proxyServiceStart() : opts.mcp ? mcpDaemonStart() : daemonStart());
 });
@@ -1022,7 +1188,7 @@ decisionCmd
     const { runDecisionReject } = await import('./commands/decision.js');
     await runDecisionReject(holdId, opts);
 });
-// ── Gateway commands (LLD #66) ───────────────────────────────────────────
+// ── Gateway commands ─────────────────────────────────────────────────────
 //
 // Self-hosted gateway registration/management. Previously reachable only by
 // hand-written curl against services/control-plane/src/routes/gateways.ts —
@@ -1080,6 +1246,15 @@ gatewayCmd
 const gatewayConfigCmd = gatewayCmd
     .command('config')
     .description('Manage a gateway\'s remote config (requireVk, requireProvisionedKey)');
+gatewayConfigCmd
+    .command('get <gateway_id>')
+    .description('Show the config values set on a gateway and their version')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (gatewayId, opts) => {
+    const { runGatewayConfigGet } = await import('./commands/gateway.js');
+    await runGatewayConfigGet(gatewayId, opts);
+});
 gatewayConfigCmd
     .command('set <gateway_id>')
     .description('Update one or both config flags on a gateway')
@@ -1112,7 +1287,7 @@ gatewayCmd
     const { runGatewayResolve } = await import('./commands/gateway.js');
     await runGatewayResolve(opts);
 });
-// ── Provider credentials (LLD #64 §4, LLD #67) ───────────────────────────
+// ── Provider credentials ─────────────────────────────────────────────────
 //
 // Provision a workspace's own upstream provider keys — the BYO-key wizard's
 // API, previously dashboard-only. See commands/credentials.ts's module doc.
@@ -1132,6 +1307,7 @@ credentialsCmd
     .command('set <provider>')
     .description('Provision or rotate a provider credential (e.g. --field apiKey=sk-ant-...)')
     .option('--field <key=value>', 'A credential field; repeat for multi-field providers', (v, prev) => [...prev, v], [])
+    .option('--field-file <key=path>', 'A credential field read from a file (e.g. a service-account JSON key)', (v, prev) => [...prev, v], [])
     .option('--json', 'Output as JSON')
     .option('--dev', 'Use local control plane (http://localhost:3001)')
     .action(async (provider, opts) => {
@@ -1146,7 +1322,16 @@ credentialsCmd
     const { runCredentialsUnset } = await import('./commands/credentials.js');
     await runCredentialsUnset(provider, opts);
 });
-// ── DCT Token Attenuation (LLD #19 §2.1, HLD §5.6 Patent Family A) ───────
+credentialsCmd
+    .command('models <provider>')
+    .description('The models a provider credential can reach, as recorded when it was last checked')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (provider, opts) => {
+    const { runCredentialsModels } = await import('./commands/credentials.js');
+    await runCredentialsModels(provider, opts);
+});
+// ── DCT Token Attenuation (HLD §5.6 Patent Family A) ─────────────────────
 //
 // "CLI mints, dashboard audits": this is the mint/inspect half. See
 // commands/attenuate.ts's module doc.
@@ -1169,7 +1354,7 @@ attenuateCmd
     const { runAttenuateChain } = await import('./commands/attenuate.js');
     await runAttenuateChain(chainId, opts);
 });
-// ── Org signup + team management (LLD #65) ───────────────────────────────
+// ── Org signup + team management ─────────────────────────────────────────
 const orgCmd = program
     .command('org')
     .description('Create and manage orgs');
@@ -1228,5 +1413,381 @@ teamCmd
     const { runTeamCreateWorkspace } = await import('./commands/team.js');
     await runTeamCreateWorkspace(teamId, opts);
 });
+// ── Operator commands ────────────────────────────────────────────────────
+//
+// Workspace settings, the MCP server registry, notification rules, SIEM
+// destinations and the fleet reports, each over its existing control-plane
+// route. Previously dashboard-only. See commands/apiCommand.ts for the shape
+// they share.
+const settingsCmd = program
+    .command('settings')
+    .description('Read and change workspace settings (MCP policy, budgets, group policy, config content upload, ...)');
+settingsCmd
+    .command('get [key]')
+    .description('Print every workspace setting, or one')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (key, opts) => {
+    const { runSettingsGet } = await import('./commands/settings.js');
+    await runSettingsGet(key, opts);
+});
+settingsCmd
+    .command('set <key> [value]')
+    .description('Change one setting; the value is JSON when it parses as JSON, else a string')
+    .option('--file <path>', 'Read the value from a JSON file instead')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (key, value, opts) => {
+    const { runSettingsSet } = await import('./commands/settings.js');
+    await runSettingsSet(key, value, opts);
+});
+const mcpCmd = program
+    .command('mcp')
+    .description('Review the MCP servers the workspace\'s MCP proxies have seen, and decide on them');
+mcpCmd
+    .command('list')
+    .description('Every MCP server seen, its status and tools, and the registry\'s default policy')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (opts) => {
+    const { runMcpList } = await import('./commands/mcp.js');
+    await runMcpList(opts);
+});
+for (const [action, desc] of [
+    ['approve', 'Approve an MCP server; MCP proxies let it run'],
+    ['block', 'Block an MCP server; MCP proxies refuse it'],
+    ['reset', 'Return an MCP server to the approval queue'],
+]) {
+    mcpCmd
+        .command(`${action} <server_id>`)
+        .description(desc)
+        .option('--json', 'Output as JSON')
+        .option('--dev', 'Use local control plane (http://localhost:3001)')
+        .action(async (serverId, opts) => {
+        const { runMcpDecide } = await import('./commands/mcp.js');
+        await runMcpDecide(action, serverId, opts);
+    });
+}
+for (const [action, enabled, desc] of [
+    ['enable-tool', true, 'Switch one tool of an MCP server back on'],
+    ['disable-tool', false, 'Switch one tool of an MCP server off; MCP proxies refuse calls to it'],
+]) {
+    mcpCmd
+        .command(`${action} <server_id> <tool>`)
+        .description(desc)
+        .option('--json', 'Output as JSON')
+        .option('--dev', 'Use local control plane (http://localhost:3001)')
+        .action(async (serverId, tool, opts) => {
+        const { runMcpTool } = await import('./commands/mcp.js');
+        await runMcpTool(serverId, tool, enabled, opts);
+    });
+}
+const notificationsCmd = program
+    .command('notifications')
+    .description('Manage notification rules: which events go to Slack, email, a webhook or PagerDuty');
+function ruleOptions(cmd) {
+    return cmd
+        .option('--slack-channel <id>', 'Slack channel ID, for the slack channel')
+        .option('--email <addresses>', 'Comma-separated recipients (up to 20), for the email channel')
+        .option('--webhook-url <url>', 'HTTPS URL, for the webhook channel')
+        .option('--pagerduty-key <key>', 'Routing key, for the pagerduty channel')
+        .option('--severity <list>', 'Only events of these comma-separated severities')
+        .option('--harness <list>', 'Only events from these comma-separated harnesses')
+        .option('--user <ids>', 'Only events from these comma-separated user ids')
+        .option('--cooldown <minutes>', 'Minimum minutes between two notifications of this rule (1-1440)')
+        .option('--json', 'Output as JSON')
+        .option('--dev', 'Use local control plane (http://localhost:3001)');
+}
+notificationsCmd
+    .command('list')
+    .description('List notification rules')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (opts) => {
+    const { runNotificationsList } = await import('./commands/notifications.js');
+    await runNotificationsList(opts);
+});
+ruleOptions(notificationsCmd
+    .command('create')
+    .description('Create a notification rule; a webhook rule prints its signing secret once')
+    .requiredOption('--event <type>', 'Event type, e.g. incident.created or mcp.server.candidate')
+    .requiredOption('--channel <channel>', 'slack, email, webhook or pagerduty')
+    .option('--disabled', 'Create the rule switched off')).action(async (opts) => {
+    const { runNotificationsCreate } = await import('./commands/notifications.js');
+    await runNotificationsCreate(opts);
+});
+ruleOptions(notificationsCmd
+    .command('update <rule_id>')
+    .description('Change a notification rule; only the fields given change')
+    .option('--event <type>', 'Event type')
+    .option('--channel <channel>', 'slack, email, webhook or pagerduty')
+    .option('--enable', 'Switch the rule on')
+    .option('--disable', 'Switch the rule off')).action(async (ruleId, opts) => {
+    const { runNotificationsUpdate } = await import('./commands/notifications.js');
+    await runNotificationsUpdate(ruleId, opts);
+});
+notificationsCmd
+    .command('delete <rule_id>')
+    .description('Delete a notification rule')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (ruleId, opts) => {
+    const { runNotificationsDelete } = await import('./commands/notifications.js');
+    await runNotificationsDelete(ruleId, opts);
+});
+notificationsCmd
+    .command('rotate-secret <rule_id>')
+    .description('Replace a webhook rule\'s signing secret and print the new one once')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (ruleId, opts) => {
+    const { runNotificationsRotateSecret } = await import('./commands/notifications.js');
+    await runNotificationsRotateSecret(ruleId, opts);
+});
+const siemCmd = program
+    .command('siem')
+    .description('Manage SIEM export destinations and the event sources each receives');
+function destinationOptions(cmd) {
+    return cmd
+        .option('--sources <list>', 'Comma-separated event sources this destination receives (see `intutic siem sources`)')
+        .option('--default-sources', 'Receive the default set: every source except the opt-in ones')
+        .option('--batch-size <n>', 'Events per delivery batch')
+        .option('--flush-interval-ms <ms>', 'Longest wait before a partial batch is sent')
+        .option('--json', 'Output as JSON')
+        .option('--dev', 'Use local control plane (http://localhost:3001)');
+}
+siemCmd
+    .command('list')
+    .description('List SIEM destinations (credentials masked)')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (opts) => {
+    const { runSiemList } = await import('./commands/siem.js');
+    await runSiemList(opts);
+});
+siemCmd
+    .command('show <destination_id>')
+    .description('Show one SIEM destination (credentials masked)')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (destinationId, opts) => {
+    const { runSiemShow } = await import('./commands/siem.js');
+    await runSiemShow(destinationId, opts);
+});
+siemCmd
+    .command('sources')
+    .description('List the event sources a destination can receive, and which are opt-in')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (opts) => {
+    const { runSiemSources } = await import('./commands/siem.js');
+    await runSiemSources(opts);
+});
+destinationOptions(siemCmd
+    .command('create')
+    .description('Create a SIEM destination; a webhook destination prints its signing secret once')
+    .requiredOption('--name <name>', 'Display name')
+    .requiredOption('--type <adapter>', 'syslog_cef, webhook_https, splunk_hec, datadog_logs, gcs or s3')
+    .requiredOption('--config <path>', 'JSON file with the adapter settings and credentials')).action(async (opts) => {
+    const { runSiemCreate } = await import('./commands/siem.js');
+    await runSiemCreate(opts);
+});
+destinationOptions(siemCmd
+    .command('update <destination_id>')
+    .description('Change a SIEM destination; only the fields given change')
+    .option('--name <name>', 'Display name')
+    .option('--config <path>', 'JSON file with the new adapter settings; a secret left out or left masked keeps its stored value')
+    .option('--enable', 'Turn a deactivated destination back on')).action(async (destinationId, opts) => {
+    const { runSiemUpdate } = await import('./commands/siem.js');
+    await runSiemUpdate(destinationId, opts);
+});
+siemCmd
+    .command('delete <destination_id>')
+    .description('Deactivate a SIEM destination; it stops receiving events and stays listed')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (destinationId, opts) => {
+    const { runSiemDelete } = await import('./commands/siem.js');
+    await runSiemDelete(destinationId, opts);
+});
+siemCmd
+    .command('rotate-secret <destination_id>')
+    .description('Replace a webhook destination\'s signing secret and print the new one once')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (destinationId, opts) => {
+    const { runSiemRotateSecret } = await import('./commands/siem.js');
+    await runSiemRotateSecret(destinationId, opts);
+});
+const complianceCmd = program
+    .command('compliance')
+    .description('Compliance framework reports and the evidence archive');
+complianceCmd
+    .command('coverage <framework_id>')
+    .description('Coverage of eu_ai_act, iso_42001, nist_ai_rmf or mitre_atlas from the latest probe results')
+    .option('--format <format>', 'Download the report: json, md, csv or pdf')
+    .option('--out <path>', 'Write the report to this file instead of stdout')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (frameworkId, opts) => {
+    const { runComplianceCoverage } = await import('./commands/compliance.js');
+    await runComplianceCoverage(frameworkId, opts);
+});
+complianceCmd
+    .command('collect')
+    .description('Run a fresh evidence collection and seal it into an archive (OWNER, ADMIN)')
+    .option('--from <date>', 'Start of the evidence period, ISO 8601 (default: 90 days before --to)')
+    .option('--to <date>', 'End of the evidence period, ISO 8601 (default: now)')
+    .option('--out <path>', 'Also write the archive to this file')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (opts) => {
+    const { runComplianceCollect } = await import('./commands/compliance.js');
+    await runComplianceCollect(opts);
+});
+complianceCmd
+    .command('download <run_id>')
+    .description('Download a stored evidence archive (OWNER, ADMIN)')
+    .option('--out <path>', 'Write the archive to this file instead of stdout')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (runId, opts) => {
+    const { runComplianceDownload } = await import('./commands/compliance.js');
+    await runComplianceDownload(runId, opts);
+});
+complianceCmd
+    .command('verify <file>')
+    .description('Check an evidence archive\'s hashes and signature offline')
+    .option('--jwks <path>', 'The published signing keys, saved from /.well-known/intutic-trace-signing.json (default: fetch them)')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (file, opts) => {
+    const { runComplianceVerify } = await import('./commands/compliance.js');
+    await runComplianceVerify(file, opts);
+});
+const usageCmd = program
+    .command('usage')
+    .description('LLM usage across the fleet, by member, team, branch, commit or pull request');
+for (const [view, handler, desc] of [
+    ['members', 'runUsageMembers', 'Usage per member'],
+    ['teams', 'runUsageTeams', 'Usage per team (SCIM group)'],
+    ['branches', 'runUsageBranches', 'Usage per repository and branch'],
+    ['commits', 'runUsageCommits', 'Usage per HEAD commit'],
+]) {
+    usageCmd
+        .command(view)
+        .description(desc)
+        .option('--period <period>', 'daily (today) or monthly (this month)', 'monthly')
+        .option('--json', 'Output as JSON')
+        .option('--dev', 'Use local control plane (http://localhost:3001)')
+        .action(async (opts) => {
+        const usage = await import('./commands/usage.js');
+        await usage[handler](opts);
+    });
+}
+usageCmd
+    .command('pull-requests')
+    .description('Usage per GitHub pull request')
+    .option('--period <period>', 'daily (today) or monthly (this month)', 'monthly')
+    .option('--refresh', 'Look the branches up on GitHub first (OWNER, ADMIN, EM)')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (opts) => {
+    const { runUsagePullRequests } = await import('./commands/usage.js');
+    await runUsagePullRequests(opts);
+});
+const githubWebhookCmd = program
+    .command('github')
+    .description('GitHub integration for cost per pull request')
+    .command('webhook')
+    .description('The pull-request webhook: payload URL and signing secret');
+githubWebhookCmd
+    .command('show')
+    .description('Show the payload URL and when the secret was made')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (opts) => {
+    const { runGithubWebhookShow } = await import('./commands/github.js');
+    await runGithubWebhookShow(opts);
+});
+githubWebhookCmd
+    .command('rotate-secret')
+    .description('Make the webhook, or replace its secret (printed once)')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (opts) => {
+    const { runGithubWebhookRotateSecret } = await import('./commands/github.js');
+    await runGithubWebhookRotateSecret(opts);
+});
+const inventoryCmd = program
+    .command('inventory')
+    .description('AI harnesses, MCP servers and skills on connected developer machines, governed or not');
+inventoryCmd
+    .command('summary')
+    .description('Counts of machines, harnesses, MCP servers and skills, and how many are ungoverned')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (opts) => {
+    const { runInventorySummary } = await import('./commands/inventory.js');
+    await runInventorySummary(opts);
+});
+inventoryCmd
+    .command('devices')
+    .description('Every machine that reports, with its id (what --device takes), counts and last report')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (opts) => {
+    const { runInventoryDevices } = await import('./commands/inventory.js');
+    await runInventoryDevices(opts);
+});
+for (const [view, handler, desc] of [
+    ['harnesses', 'runInventoryHarnesses', 'Harnesses by machine, with gate state and status'],
+    ['mcp-servers', 'runInventoryMcpServers', 'MCP servers by machine, wrapped by the MCP proxy or not'],
+]) {
+    inventoryCmd
+        .command(view)
+        .description(desc)
+        .option('--status <status>', 'Only rows with this status')
+        .option('--harness <harness>', 'Only rows for this harness')
+        .option('--device <device_id>', 'Only rows from this machine')
+        .option('--search <text>', 'Only rows whose name or hostname contains this text')
+        .option('--csv', 'Download as CSV, the same file the dashboard exports')
+        .option('--out <path>', 'With --csv: write to this file instead of stdout')
+        .option('--json', 'Output as JSON')
+        .option('--dev', 'Use local control plane (http://localhost:3001)')
+        .action(async (opts) => {
+        const inventory = await import('./commands/inventory.js');
+        await inventory[handler](opts);
+    });
+}
+inventoryCmd
+    .command('skills')
+    .description('Skill bundles by machine, with their content scan result')
+    .option('--device <device_id>', 'Only rows from this machine')
+    .option('--search <text>', 'Only rows whose name or hostname contains this text')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (opts) => {
+    const { runInventorySkills } = await import('./commands/inventory.js');
+    await runInventorySkills(opts);
+});
+inventoryCmd
+    .command('disconnects')
+    .description('Machines that ran `intutic disconnect`, newest first: what they disconnected, who and when')
+    .option('--limit <n>', 'At most this many (default 100, at most 500)')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (opts) => {
+    const { runInventoryDisconnects } = await import('./commands/inventory.js');
+    await runInventoryDisconnects(opts);
+});
+program
+    .command('gate-liveness')
+    .description('Whether each installed harness\'s gate is reporting, and any open silent-gate alert')
+    .option('--json', 'Output as JSON')
+    .option('--dev', 'Use local control plane (http://localhost:3001)')
+    .action(async (opts) => {
+    const { runGateLiveness } = await import('./commands/gateLiveness.js');
+    await runGateLiveness(opts);
+});
 program.parse();
 //# sourceMappingURL=cli.js.map