@intutic/cli 0.1.0 → 0.2.0

package/dist/harness/detector.d.ts

@@ -1,7 +1,7 @@
 /**
  * Harness detector — auto-detect which AI harnesses are present.
  *
- * Instantiates all 8 adapters and checks each for presence in
+ * Instantiates all 14 adapters and checks each for presence in
  * the workspace. Returns a DetectedHarness array for reporting.
  *
  * HLD §3.14 — Harness Onboarding Matrix

package/dist/harness/detector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"detector.d.ts","sourceRoot":"","sources":["../../src/harness/detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAWjD,uCAAuC;AACvC,eAAO,MAAM,YAAY,EAAE,eAAe,EASzC,CAAA;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAgBvF;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAEpE"}
+{"version":3,"file":"detector.d.ts","sourceRoot":"","sources":["../../src/harness/detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAiBjD,uCAAuC;AACvC,eAAO,MAAM,YAAY,EAAE,eAAe,EAezC,CAAA;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAgBvF;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAEpE"}

package/dist/harness/detector.js

@@ -1,7 +1,7 @@
 /**
  * Harness detector — auto-detect which AI harnesses are present.
  *
- * Instantiates all 8 adapters and checks each for presence in
+ * Instantiates all 14 adapters and checks each for presence in
  * the workspace. Returns a DetectedHarness array for reporting.
  *
  * HLD §3.14 — Harness Onboarding Matrix
@@ -16,6 +16,12 @@ import { aiderAdapter } from './aider.js';
 import { openhandsAdapter } from './openhands.js';
 import { codexAdapter } from './codex.js';
 import { n8nAdapter } from './n8n.js';
+import { clineAdapter } from './cline.js';
+import { rooCodeAdapter } from './rooCode.js';
+import { continueAdapter } from './continue.js';
+import { claudeDesktopAdapter } from './claudeDesktop.js';
+import { gooseAdapter } from './goose.js';
+import { openWebUIAdapter } from './openWebUI.js';
 import { join } from 'node:path';
 /** All registered harness adapters. */
 export const ALL_ADAPTERS = [
@@ -27,6 +33,12 @@ export const ALL_ADAPTERS = [
     openhandsAdapter,
     codexAdapter,
     n8nAdapter,
+    clineAdapter,
+    rooCodeAdapter,
+    continueAdapter,
+    claudeDesktopAdapter,
+    gooseAdapter,
+    openWebUIAdapter,
 ];
 /**
  * Detect which harnesses are present in a workspace.

package/dist/harness/detector.js.map

@@ -1 +1 @@
-{"version":3,"file":"detector.js","sourceRoot":"","sources":["../../src/harness/detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,uCAAuC;AACvC,MAAM,CAAC,MAAM,YAAY,GAAsB;IAC7C,aAAa;IACb,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,YAAY;IACZ,gBAAgB;IAChB,YAAY;IACZ,UAAU;CACX,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,aAAqB;IACzD,MAAM,OAAO,GAAsB,EAAE,CAAA;IAErC,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QACpD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,UAAU,EAAE,OAAO,CAAC,cAAc;gBAChC,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,cAAc,CAAC;gBAC7C,CAAC,CAAC,EAAE;YACN,QAAQ;YACR,WAAW,EAAE,IAAI;SAClB,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;AAClD,CAAC"}
+{"version":3,"file":"detector.js","sourceRoot":"","sources":["../../src/harness/detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,uCAAuC;AACvC,MAAM,CAAC,MAAM,YAAY,GAAsB;IAC7C,aAAa;IACb,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,YAAY;IACZ,gBAAgB;IAChB,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,cAAc;IACd,eAAe;IACf,oBAAoB;IACpB,YAAY;IACZ,gBAAgB;CACjB,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,aAAqB;IACzD,MAAM,OAAO,GAAsB,EAAE,CAAA;IAErC,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QACpD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,UAAU,EAAE,OAAO,CAAC,cAAc;gBAChC,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,cAAc,CAAC;gBAC7C,CAAC,CAAC,EAAE;YACN,QAAQ;YACR,WAAW,EAAE,IAAI;SAClB,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;AAClD,CAAC"}

package/dist/harness/goose.d.ts

@@ -0,0 +1,13 @@
+/**
+ * goose.ts — Goose adapter (full implementation).
+ *
+ * Detects the Goose CLI agent, writes SOP rules, injects the Intutic
+ * governance plugin (PreToolUse hooks + immutable flags), and merges
+ * the proxy URL into ~/.config/goose/config.yaml.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import type { IHarnessAdapter } from './types.js';
+export declare const gooseAdapter: IHarnessAdapter;
+//# sourceMappingURL=goose.d.ts.map

package/dist/harness/goose.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"goose.d.ts","sourceRoot":"","sources":["../../src/harness/goose.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAQjD,eAAO,MAAM,YAAY,EAAE,eA0B1B,CAAA"}

package/dist/harness/goose.js

@@ -0,0 +1,45 @@
+/**
+ * goose.ts — Goose adapter (full implementation).
+ *
+ * Detects the Goose CLI agent, writes SOP rules, injects the Intutic
+ * governance plugin (PreToolUse hooks + immutable flags), and merges
+ * the proxy URL into ~/.config/goose/config.yaml.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import { access } from 'node:fs/promises';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { HarnessType } from '@intutic/shared-types';
+import { hashFile } from '../lib/hash.js';
+import { writeGooseHooks } from '@intutic/sync-daemon/harness/gooseHooks';
+const CONFIG_FILE = '.config/goose/config.yaml';
+const GOOSE_CONFIG = join(homedir(), CONFIG_FILE);
+export const gooseAdapter = {
+    type: HarnessType.GOOSE,
+    configFileName: CONFIG_FILE,
+    async detect(_workspaceRoot) {
+        try {
+            await access(GOOSE_CONFIG);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    },
+    async writeConfig(_workspaceRoot, sops, proxyUrl) {
+        // Write governance plugin + config proxy URL (gooseHooks handles both)
+        await writeGooseHooks(proxyUrl);
+        return GOOSE_CONFIG;
+    },
+    async readCurrentHash(_workspaceRoot) {
+        try {
+            return await hashFile(GOOSE_CONFIG);
+        }
+        catch {
+            return null;
+        }
+    },
+};
+//# sourceMappingURL=goose.js.map

package/dist/harness/goose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"goose.js","sourceRoot":"","sources":["../../src/harness/goose.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,MAAM,EAA4B,MAAM,kBAAkB,CAAA;AACnE,OAAO,EAAE,IAAI,EAAW,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAEzC,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAA;AAEzE,MAAM,WAAW,GAAG,2BAA2B,CAAA;AAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAA;AAEjD,MAAM,CAAC,MAAM,YAAY,GAAoB;IAC3C,IAAI,EAAE,WAAW,CAAC,KAAK;IACvB,cAAc,EAAE,WAAW;IAE3B,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,YAAY,CAAC,CAAA;YAC1B,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,cAAsB,EAAE,IAAoB,EAAE,QAAgB;QAC9E,uEAAuE;QACvE,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAA;QAC/B,OAAO,YAAY,CAAA;IACrB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,cAAsB;QAC1C,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAA;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;CACF,CAAA"}

package/dist/harness/n8n.d.ts

@@ -1,11 +1,15 @@
 /**
- * n8n adapter — STUB (Phase 2)
+ * n8n adapter — Real-time REST parameter sync.
  *
- * n8n requires API calls to the n8n instance to inject workflow
- * parameters, not file writes. Deferred to Phase 2.
+ * Interacts with n8n workflow management API (GET/PUT /api/v1/workflows)
+ * to inject Intutic proxy URL and SOP governance rules as workflow variables.
+ *
+ * Supports local n8n instances by falling back to unauthenticated requests
+ * if N8N_API_TOKEN is not provided.
  *
- * Tech Debt: TD-037 — n8n API Adapter
  * HLD §3.14 — Harness Onboarding Matrix
+ * Tech Debt: TD-037 — n8n API Adapter
+ *
  * @module
  */
 import type { IHarnessAdapter } from './types.js';

package/dist/harness/n8n.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"n8n.d.ts","sourceRoot":"","sources":["../../src/harness/n8n.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEjD,eAAO,MAAM,UAAU,EAAE,eAoBxB,CAAA"}
+{"version":3,"file":"n8n.d.ts","sourceRoot":"","sources":["../../src/harness/n8n.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAkBjD,eAAO,MAAM,UAAU,EAAE,eAuGxB,CAAA"}

package/dist/harness/n8n.js

@@ -1,30 +1,125 @@
 /**
- * n8n adapter — STUB (Phase 2)
+ * n8n adapter — Real-time REST parameter sync.
  *
- * n8n requires API calls to the n8n instance to inject workflow
- * parameters, not file writes. Deferred to Phase 2.
+ * Interacts with n8n workflow management API (GET/PUT /api/v1/workflows)
+ * to inject Intutic proxy URL and SOP governance rules as workflow variables.
+ *
+ * Supports local n8n instances by falling back to unauthenticated requests
+ * if N8N_API_TOKEN is not provided.
  *
- * Tech Debt: TD-037 — n8n API Adapter
  * HLD §3.14 — Harness Onboarding Matrix
+ * Tech Debt: TD-037 — n8n API Adapter
+ *
  * @module
  */
+import { createHash } from 'node:crypto';
 import { HarnessType } from '@intutic/shared-types';
+// Format SOPs for n8n parameters
+function buildSopsMarkdown(sops) {
+    if (sops.length === 0)
+        return '';
+    return sops.map((sop) => `## ${sop.title}\n\n${sop.content}`).join('\n\n---\n\n') + '\n';
+}
+function getHeaders() {
+    const headers = {
+        'Content-Type': 'application/json',
+    };
+    if (process.env.N8N_API_TOKEN) {
+        headers['X-N8N-API-KEY'] = process.env.N8N_API_TOKEN;
+    }
+    return headers;
+}
 export const n8nAdapter = {
     type: HarnessType.N8N,
     configFileName: '',
     async detect(_workspaceRoot) {
-        // Phase 2 — TD-037: n8n API adapter
-        // Detection would check for n8n instance URL in config or running process
-        return false;
+        const n8nUrl = process.env.N8N_URL || 'http://localhost:5678';
+        try {
+            const res = await fetch(`${n8nUrl}/api/v1/health`, { signal: AbortSignal.timeout(1000) });
+            return res.status === 200 || res.status === 401 || res.status === 403;
+        }
+        catch {
+            return !!process.env.N8N_API_TOKEN;
+        }
     },
-    async writeConfig(_workspaceRoot, _sops, _proxyUrl) {
-        // Phase 2 — TD-037: n8n API adapter
-        // Would call n8n REST API to set workflow parameters
-        return null;
+    async writeConfig(_workspaceRoot, sops, proxyUrl) {
+        const n8nUrl = process.env.N8N_URL || 'http://localhost:5678';
+        const sopsMarkdown = buildSopsMarkdown(sops);
+        try {
+            // 1. Get list of workflows
+            const listRes = await fetch(`${n8nUrl}/api/v1/workflows`, {
+                headers: getHeaders(),
+                signal: AbortSignal.timeout(5000),
+            });
+            if (!listRes.ok) {
+                throw new Error(`Failed to list workflows: ${listRes.statusText}`);
+            }
+            const listData = (await listRes.json());
+            const workflows = listData.data || [];
+            if (workflows.length === 0) {
+                return 'n8n:no_workflows';
+            }
+            // 2. Inject parameters into variables of each workflow
+            for (const w of workflows) {
+                const detailRes = await fetch(`${n8nUrl}/api/v1/workflows/${w.id}`, {
+                    headers: getHeaders(),
+                    signal: AbortSignal.timeout(5000),
+                });
+                if (!detailRes.ok)
+                    continue;
+                const detail = (await detailRes.json());
+                const settings = detail.settings || {};
+                const variables = settings.variables || {};
+                // Inject Intutic values
+                variables.intutic_proxy_url = proxyUrl;
+                variables.intutic_governance_rules = sopsMarkdown;
+                settings.variables = variables;
+                detail.settings = settings;
+                // Save updated workflow
+                await fetch(`${n8nUrl}/api/v1/workflows/${w.id}`, {
+                    method: 'PUT',
+                    headers: getHeaders(),
+                    body: JSON.stringify(detail),
+                    signal: AbortSignal.timeout(5000),
+                });
+            }
+            return `n8n:${workflows.length}_workflows`;
+        }
+        catch (err) {
+            console.warn(`[n8n-adapter] failed to sync parameters:`, err);
+            return null;
+        }
     },
     async readCurrentHash(_workspaceRoot) {
-        // Phase 2 — TD-037: n8n API adapter
-        return null;
+        const n8nUrl = process.env.N8N_URL || 'http://localhost:5678';
+        try {
+            const listRes = await fetch(`${n8nUrl}/api/v1/workflows`, {
+                headers: getHeaders(),
+                signal: AbortSignal.timeout(3000),
+            });
+            if (!listRes.ok)
+                return null;
+            const listData = (await listRes.json());
+            const workflows = listData.data || [];
+            if (workflows.length === 0)
+                return null;
+            // Fetch the first workflow's variables to compute the hash
+            const firstId = workflows[0].id;
+            const detailRes = await fetch(`${n8nUrl}/api/v1/workflows/${firstId}`, {
+                headers: getHeaders(),
+                signal: AbortSignal.timeout(3000),
+            });
+            if (!detailRes.ok)
+                return null;
+            const detail = (await detailRes.json());
+            const rules = detail.settings?.variables?.intutic_governance_rules || '';
+            if (!rules)
+                return null;
+            return createHash('sha256').update(rules, 'utf-8').digest('hex');
+        }
+        catch {
+            return null;
+        }
     },
 };
 //# sourceMappingURL=n8n.js.map

package/dist/harness/n8n.js.map

@@ -1 +1 @@
-{"version":3,"file":"n8n.js","sourceRoot":"","sources":["../../src/harness/n8n.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAInD,MAAM,CAAC,MAAM,UAAU,GAAoB;IACzC,IAAI,EAAE,WAAW,CAAC,GAAG;IACrB,cAAc,EAAE,EAAE;IAElB,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,oCAAoC;QACpC,0EAA0E;QAC1E,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,cAAsB,EAAE,KAAqB,EAAE,SAAiB;QAChF,oCAAoC;QACpC,qDAAqD;QACrD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,cAAsB;QAC1C,oCAAoC;QACpC,OAAO,IAAI,CAAA;IACb,CAAC;CACF,CAAA"}
+{"version":3,"file":"n8n.js","sourceRoot":"","sources":["../../src/harness/n8n.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAInD,iCAAiC;AACjC,SAAS,iBAAiB,CAAC,IAAoB;IAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAChC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,KAAK,OAAO,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,IAAI,CAAA;AAC1F,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;KACnC,CAAA;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;QAC9B,OAAO,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAA;IACtD,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAoB;IACzC,IAAI,EAAE,WAAW,CAAC,GAAG;IACrB,cAAc,EAAE,EAAE;IAElB,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAuB,CAAA;QAC7D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,gBAAgB,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACzF,OAAO,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAA;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAA;QACpC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,cAAsB,EAAE,IAAoB,EAAE,QAAgB;QAC9E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAuB,CAAA;QAC7D,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;QAE5C,IAAI,CAAC;YACH,2BAA2B;YAC3B,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,mBAAmB,EAAE;gBACxD,OAAO,EAAE,UAAU,EAAE;gBACrB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAA;YAEF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;YACpE,CAAC;YAED,MAAM,QAAQ,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAmD,CAAA;YACzF,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAA;YAErC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO,kBAAkB,CAAA;YAC3B,CAAC;YAED,uDAAuD;YACvD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;gBAC1B,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,qBAAqB,CAAC,CAAC,EAAE,EAAE,EAAE;oBAClE,OAAO,EAAE,UAAU,EAAE;oBACrB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBAClC,CAAC,CAAA;gBAEF,IAAI,CAAC,SAAS,CAAC,EAAE;oBAAE,SAAQ;gBAE3B,MAAM,MAAM,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAQ,CAAA;gBAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAA;gBACtC,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAA;gBAE1C,wBAAwB;gBACxB,SAAS,CAAC,iBAAiB,GAAG,QAAQ,CAAA;gBACtC,SAAS,CAAC,wBAAwB,GAAG,YAAY,CAAA;gBACjD,QAAQ,CAAC,SAAS,GAAG,SAAS,CAAA;gBAC9B,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAA;gBAE1B,wBAAwB;gBACxB,MAAM,KAAK,CAAC,GAAG,MAAM,qBAAqB,CAAC,CAAC,EAAE,EAAE,EAAE;oBAChD,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,UAAU,EAAE;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;oBAC5B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBAClC,CAAC,CAAA;YACJ,CAAC;YAED,OAAO,OAAO,SAAS,CAAC,MAAM,YAAY,CAAA;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAA;YAC7D,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,cAAsB;QAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAuB,CAAA;QAC7D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,mBAAmB,EAAE;gBACxD,OAAO,EAAE,UAAU,EAAE;gBACrB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAA;YAEF,IAAI,CAAC,OAAO,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAA;YAE5B,MAAM,QAAQ,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAqC,CAAA;YAC3E,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAA;YACrC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAA;YAEvC,2DAA2D;YAC3D,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YAC/B,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,qBAAqB,OAAO,EAAE,EAAE;gBACrE,OAAO,EAAE,UAAU,EAAE;gBACrB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAA;YAEF,IAAI,CAAC,SAAS,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAA;YAE9B,MAAM,MAAM,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAQ,CAAA;YAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,wBAAwB,IAAI,EAAE,CAAA;YACxE,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAA;YAEvB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;CACF,CAAA"}

package/dist/harness/openWebUI.d.ts

@@ -0,0 +1,13 @@
+/**
+ * OpenWebUI adapter — detection-only stub for the OpenWebUI interface.
+ *
+ * OpenWebUI is a Docker-based service and cannot be reliably detected
+ * via filesystem checks. Detection always returns false; the harness
+ * can be manually enabled via CLI flags or org config.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import type { IHarnessAdapter } from './types.js';
+export declare const openWebUIAdapter: IHarnessAdapter;
+//# sourceMappingURL=openWebUI.d.ts.map

package/dist/harness/openWebUI.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openWebUI.d.ts","sourceRoot":"","sources":["../../src/harness/openWebUI.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEjD,eAAO,MAAM,gBAAgB,EAAE,eAe9B,CAAA"}

package/dist/harness/openWebUI.js

@@ -0,0 +1,25 @@
+/**
+ * OpenWebUI adapter — detection-only stub for the OpenWebUI interface.
+ *
+ * OpenWebUI is a Docker-based service and cannot be reliably detected
+ * via filesystem checks. Detection always returns false; the harness
+ * can be manually enabled via CLI flags or org config.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import { HarnessType } from '@intutic/shared-types';
+export const openWebUIAdapter = {
+    type: HarnessType.OPEN_WEBUI,
+    configFileName: '',
+    async detect(_workspaceRoot) {
+        return false;
+    },
+    async writeConfig() {
+        return null;
+    },
+    async readCurrentHash() {
+        return null;
+    },
+};
+//# sourceMappingURL=openWebUI.js.map

package/dist/harness/openWebUI.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openWebUI.js","sourceRoot":"","sources":["../../src/harness/openWebUI.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C,IAAI,EAAE,WAAW,CAAC,UAAU;IAC5B,cAAc,EAAE,EAAE;IAElB,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,OAAO,IAAI,CAAA;IACb,CAAC;CACF,CAAA"}

package/dist/harness/openhands.d.ts

@@ -1,8 +1,8 @@
 /**
- * OpenHands adapter — config.toml
+ * openhands.ts — OpenHands adapter (full implementation with hooks + llm.base_url).
  *
- * Writes SOP content into a [intutic] section of the
- * OpenHands TOML config file.
+ * Writes SOP content into config.toml, injects PreToolUse hooks via
+ * .openhands/hooks.json, and writes llm.base_url into the [llm] section.
  *
  * HLD §3.14 — Harness Onboarding Matrix
  * @module

package/dist/harness/openhands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openhands.d.ts","sourceRoot":"","sources":["../../src/harness/openhands.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAMjD,eAAO,MAAM,gBAAgB,EAAE,eAiD9B,CAAA"}
+{"version":3,"file":"openhands.d.ts","sourceRoot":"","sources":["../../src/harness/openhands.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAOjD,eAAO,MAAM,gBAAgB,EAAE,eAuD9B,CAAA"}

package/dist/harness/openhands.js

@@ -1,8 +1,8 @@
 /**
- * OpenHands adapter — config.toml
+ * openhands.ts — OpenHands adapter (full implementation with hooks + llm.base_url).
  *
- * Writes SOP content into a [intutic] section of the
- * OpenHands TOML config file.
+ * Writes SOP content into config.toml, injects PreToolUse hooks via
+ * .openhands/hooks.json, and writes llm.base_url into the [llm] section.
  *
  * HLD §3.14 — Harness Onboarding Matrix
  * @module
@@ -12,6 +12,7 @@ import { access, writeFile, rename, mkdir } from 'node:fs/promises';
 import { HarnessType } from '@intutic/shared-types';
 import { hashFile } from '../lib/hash.js';
 import { newIso } from '@intutic/id';
+import { writeOpenHandsHooks } from '@intutic/sync-daemon/harness/openhandsHooks';
 const CONFIG_FILE = 'config.toml';
 export const openhandsAdapter = {
     type: HarnessType.OPENHANDS,
@@ -26,14 +27,12 @@ export const openhandsAdapter = {
         }
     },
     async writeConfig(workspaceRoot, sops, proxyUrl) {
-        if (sops.length === 0)
-            return null;
         const filePath = join(workspaceRoot, CONFIG_FILE);
         const tmpPath = filePath + '.intutic-tmp';
-        const instructions = sops
-            .map((sop) => `## ${sop.title}\n\n${sop.content}`)
-            .join('\n\n---\n\n');
-        // TOML format — [intutic] section with multi-line string
+        const instructions = sops.length > 0
+            ? sops.map((sop) => `## ${sop.title}\n\n${sop.content}`).join('\n\n---\n\n')
+            : '# Intutic governance active — no SOP rules configured yet.';
+        // TOML — [intutic] section for SOP text + [llm] for proxy base_url
         const toml = [
             '# Intutic Governance Rules (auto-generated)',
             '# DO NOT EDIT — managed by intutic sync daemon',
@@ -45,10 +44,15 @@ export const openhandsAdapter = {
             instructions,
             '"""',
             '',
+            '[llm]',
+            `base_url = "${proxyUrl}"`,
+            '',
         ].join('\n');
         await mkdir(dirname(filePath), { recursive: true });
         await writeFile(tmpPath, toml, 'utf-8');
         await rename(tmpPath, filePath);
+        // Inject .openhands/hooks.json PreToolUse hook
+        await writeOpenHandsHooks(workspaceRoot, proxyUrl);
         return filePath;
     },
     async readCurrentHash(workspaceRoot) {

package/dist/harness/openhands.js.map

@@ -1 +1 @@
-{"version":3,"file":"openhands.js","sourceRoot":"","sources":["../../src/harness/openhands.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,MAAM,WAAW,GAAG,aAAa,CAAA;AAEjC,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C,IAAI,EAAE,WAAW,CAAC,SAAS;IAC3B,cAAc,EAAE,WAAW;IAE3B,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;YAC9C,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;QAC7E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;QACjD,MAAM,OAAO,GAAG,QAAQ,GAAG,cAAc,CAAA;QAEzC,MAAM,YAAY,GAAG,IAAI;aACtB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,KAAK,OAAO,GAAG,CAAC,OAAO,EAAE,CAAC;aACjD,IAAI,CAAC,aAAa,CAAC,CAAA;QAEtB,yDAAyD;QACzD,MAAM,IAAI,GAAG;YACX,6CAA6C;YAC7C,gDAAgD;YAChD,gBAAgB,MAAM,EAAE,EAAE;YAC1B,EAAE;YACF,WAAW;YACX,gBAAgB,QAAQ,GAAG;YAC3B,oBAAoB;YACpB,YAAY;YACZ,KAAK;YACL,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEZ,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACnD,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QACvC,MAAM,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QAC/B,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,aAAqB;QACzC,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;CACF,CAAA"}
+{"version":3,"file":"openhands.js","sourceRoot":"","sources":["../../src/harness/openhands.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAA;AAEjF,MAAM,WAAW,GAAG,aAAa,CAAA;AAEjC,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C,IAAI,EAAE,WAAW,CAAC,SAAS;IAC3B,cAAc,EAAE,WAAW;IAE3B,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;YAC9C,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;QAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;QACjD,MAAM,OAAO,GAAG,QAAQ,GAAG,cAAc,CAAA;QAEzC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC;YAClC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,KAAK,OAAO,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;YAC5E,CAAC,CAAC,4DAA4D,CAAA;QAEhE,mEAAmE;QACnE,MAAM,IAAI,GAAG;YACX,6CAA6C;YAC7C,gDAAgD;YAChD,gBAAgB,MAAM,EAAE,EAAE;YAC1B,EAAE;YACF,WAAW;YACX,gBAAgB,QAAQ,GAAG;YAC3B,oBAAoB;YACpB,YAAY;YACZ,KAAK;YACL,EAAE;YACF,OAAO;YACP,eAAe,QAAQ,GAAG;YAC1B,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEZ,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACnD,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QACvC,MAAM,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QAE/B,+CAA+C;QAC/C,MAAM,mBAAmB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAA;QAElD,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,aAAqB;QACzC,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;CACF,CAAA"}

package/dist/harness/rooCode.d.ts

@@ -0,0 +1,14 @@
+/**
+ * rooCode.ts — Roo Code adapter (full implementation).
+ *
+ * Detects the Roo Code VS Code extension, writes Intutic governance rules
+ * as .roorules, and configures the proxy base URL via VS Code settings +
+ * .env.intutic sidecar. Roo Code's notification hooks are not yet blocking
+ * so we rely on proxy (Vector B) and drift guard (Vector C).
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import type { IHarnessAdapter } from './types.js';
+export declare const rooCodeAdapter: IHarnessAdapter;
+//# sourceMappingURL=rooCode.d.ts.map

package/dist/harness/rooCode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rooCode.d.ts","sourceRoot":"","sources":["../../src/harness/rooCode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAOjD,eAAO,MAAM,cAAc,EAAE,eA6D5B,CAAA"}

package/dist/harness/rooCode.js

@@ -0,0 +1,77 @@
+/**
+ * rooCode.ts — Roo Code adapter (full implementation).
+ *
+ * Detects the Roo Code VS Code extension, writes Intutic governance rules
+ * as .roorules, and configures the proxy base URL via VS Code settings +
+ * .env.intutic sidecar. Roo Code's notification hooks are not yet blocking
+ * so we rely on proxy (Vector B) and drift guard (Vector C).
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import { access, readdir, writeFile, rename, mkdir } from 'node:fs/promises';
+import { join, dirname } from 'node:path';
+import { homedir } from 'node:os';
+import { HarnessType } from '@intutic/shared-types';
+import { hashFile } from '../lib/hash.js';
+import { newIso } from '@intutic/id';
+import { injectRooCodeProxySettings } from './vscodeSettingsWriter.js';
+const CONFIG_FILE = '.roorules';
+export const rooCodeAdapter = {
+    type: HarnessType.ROO_CODE,
+    configFileName: CONFIG_FILE,
+    async detect(workspaceRoot) {
+        // Check for .roomodes or .roorules in workspace
+        for (const marker of ['.roomodes', '.roorules']) {
+            try {
+                await access(join(workspaceRoot, marker));
+                return true;
+            }
+            catch {
+                // fall through
+            }
+        }
+        // Check for VS Code extension directory
+        try {
+            const extensionsDir = join(homedir(), '.vscode', 'extensions');
+            const entries = await readdir(extensionsDir);
+            return entries.some((entry) => entry.startsWith('rooveterinaryinc.roo-cline-'));
+        }
+        catch {
+            return false;
+        }
+    },
+    async writeConfig(workspaceRoot, sops, proxyUrl) {
+        // 1. Write .roorules governance text
+        const filePath = join(workspaceRoot, CONFIG_FILE);
+        const instructions = sops.length > 0
+            ? sops.map((sop) => `## ${sop.title}\n\n${sop.content}`).join('\n\n---\n\n')
+            : '# Intutic governance active — no SOP rules configured yet.';
+        const content = [
+            '# Intutic Governance Rules (auto-generated)',
+            '# DO NOT EDIT — managed by intutic sync daemon',
+            `# Last sync: ${newIso()}`,
+            '# NOTE: Roo Code notification hooks are not blocking.',
+            '# Governance is enforced via proxy (Vector B) and drift guard (Vector C).',
+            '',
+            instructions,
+            '',
+        ].join('\n');
+        await mkdir(dirname(filePath), { recursive: true });
+        const tmp = filePath + '.intutic-tmp';
+        await writeFile(tmp, content, 'utf-8');
+        await rename(tmp, filePath);
+        // 2. Inject proxy URL into VS Code settings + .env.intutic sidecar
+        await injectRooCodeProxySettings(workspaceRoot, proxyUrl);
+        return filePath;
+    },
+    async readCurrentHash(workspaceRoot) {
+        try {
+            return await hashFile(join(workspaceRoot, CONFIG_FILE));
+        }
+        catch {
+            return null;
+        }
+    },
+};
+//# sourceMappingURL=rooCode.js.map

package/dist/harness/rooCode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rooCode.js","sourceRoot":"","sources":["../../src/harness/rooCode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AAC5E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAA;AAEtE,MAAM,WAAW,GAAG,WAAW,CAAA;AAE/B,MAAM,CAAC,MAAM,cAAc,GAAoB;IAC7C,IAAI,EAAE,WAAW,CAAC,QAAQ;IAC1B,cAAc,EAAE,WAAW;IAE3B,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,gDAAgD;QAChD,KAAK,MAAM,MAAM,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAA;gBACzC,OAAO,IAAI,CAAA;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,eAAe;YACjB,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,CAAA;YAC9D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,CAAA;YAC5C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,6BAA6B,CAAC,CAAC,CAAA;QACjF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;QAC7E,qCAAqC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;QACjD,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC;YAClC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,KAAK,OAAO,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;YAC5E,CAAC,CAAC,4DAA4D,CAAA;QAEhE,MAAM,OAAO,GAAG;YACd,6CAA6C;YAC7C,gDAAgD;YAChD,gBAAgB,MAAM,EAAE,EAAE;YAC1B,uDAAuD;YACvD,2EAA2E;YAC3E,EAAE;YACF,YAAY;YACZ,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEZ,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACnD,MAAM,GAAG,GAAG,QAAQ,GAAG,cAAc,CAAA;QACrC,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;QACtC,MAAM,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;QAE3B,mEAAmE;QACnE,MAAM,0BAA0B,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAA;QAEzD,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,aAAqB;QACzC,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;CACF,CAAA"}

package/dist/harness/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/harness/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAEtE,oDAAoD;AACpD,MAAM,WAAW,eAAe;IAC9B,+BAA+B;IAC/B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,mDAAmD;IACnD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,+DAA+D;IAC/D,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/C;;;OAGG;IACH,WAAW,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAClG,4FAA4F;IAC5F,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;CAC/D;AAED,4DAA4D;AAC5D,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAY5D,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/harness/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAEtE,oDAAoD;AACpD,MAAM,WAAW,eAAe;IAC9B,+BAA+B;IAC/B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,mDAAmD;IACnD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,+DAA+D;IAC/D,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/C;;;OAGG;IACH,WAAW,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAClG,4FAA4F;IAC5F,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;CAC/D;AAED,4DAA4D;AAC5D,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAkB5D,CAAA"}

package/dist/harness/types.js

@@ -21,5 +21,11 @@ export const HARNESS_CONFIG_FILES = {
     'openclaw': '', // Phase 2 — TD-037
     'hermes': '', // Phase 2 — TD-037
     'pi': '', // Phase 2 — TD-037
+    'cline': '',
+    'roo-code': '',
+    'continue': '',
+    'claude-desktop': '',
+    'goose': '',
+    'open-webui': '',
 };
 //# sourceMappingURL=types.js.map

package/dist/harness/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/harness/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAqBH,4DAA4D;AAC5D,MAAM,CAAC,MAAM,oBAAoB,GAAgC;IAC/D,QAAQ,EAAE,cAAc;IACxB,aAAa,EAAE,WAAW;IAC1B,aAAa,EAAE,uBAAuB;IACtC,UAAU,EAAE,gBAAgB;IAC5B,OAAO,EAAE,iBAAiB;IAC1B,WAAW,EAAE,aAAa;IAC1B,OAAO,EAAE,cAAc;IACvB,KAAK,EAAE,EAAE,EAAE,6CAA6C;IACxD,UAAU,EAAE,EAAE,EAAE,mBAAmB;IACnC,QAAQ,EAAE,EAAE,EAAE,mBAAmB;IACjC,IAAI,EAAE,EAAE,EAAE,mBAAmB;CAC9B,CAAA"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/harness/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAqBH,4DAA4D;AAC5D,MAAM,CAAC,MAAM,oBAAoB,GAAgC;IAC/D,QAAQ,EAAE,cAAc;IACxB,aAAa,EAAE,WAAW;IAC1B,aAAa,EAAE,uBAAuB;IACtC,UAAU,EAAE,gBAAgB;IAC5B,OAAO,EAAE,iBAAiB;IAC1B,WAAW,EAAE,aAAa;IAC1B,OAAO,EAAE,cAAc;IACvB,KAAK,EAAE,EAAE,EAAE,6CAA6C;IACxD,UAAU,EAAE,EAAE,EAAE,mBAAmB;IACnC,QAAQ,EAAE,EAAE,EAAE,mBAAmB;IACjC,IAAI,EAAE,EAAE,EAAE,mBAAmB;IAC7B,OAAO,EAAE,EAAE;IACX,UAAU,EAAE,EAAE;IACd,UAAU,EAAE,EAAE;IACd,gBAAgB,EAAE,EAAE;IACpB,OAAO,EAAE,EAAE;IACX,YAAY,EAAE,EAAE;CACjB,CAAA"}

package/dist/harness/vscodeSettingsWriter.d.ts

@@ -0,0 +1,40 @@
+/**
+ * vscodeSettingsWriter.ts — VS Code settings.json proxy injection.
+ *
+ * Shared by the Cline and Roo Code adapters. Merges Intutic proxy
+ * API base URL keys into:
+ *   - macOS: ~/Library/Application Support/Code/User/settings.json
+ *   - Linux: ~/.config/Code/User/settings.json
+ *   - Workspace: <workspaceRoot>/.vscode/settings.json
+ *
+ * Also writes ~/.intutic/.env.intutic with exported env vars for
+ * shells that source it before launching VS Code.
+ *
+ * LLD #14 — Phase 3 cross-harness defence
+ * HLD §3.14 — Three-Tier Defense Cascade
+ *
+ * @module
+ */
+/**
+ * Settings keys injected for each harness.
+ * These are checked during drift detection and restored on tamper.
+ */
+export declare const CLINE_PROXY_KEYS: readonly ["cline.apiBase", "cline.openAiBaseUrl"];
+export declare const ROO_CODE_PROXY_KEYS: readonly ["roo-cline.openAiBaseUrl", "roo-cline.apiBase"];
+/**
+ * Merge Intutic proxy URL into VS Code user + workspace settings.json
+ * for the Cline extension.
+ */
+export declare function injectClineProxySettings(workspaceRoot: string, proxyUrl: string): Promise<void>;
+/**
+ * Merge Intutic proxy URL into VS Code user + workspace settings.json
+ * for the Roo Code extension.
+ */
+export declare function injectRooCodeProxySettings(workspaceRoot: string, proxyUrl: string): Promise<void>;
+/**
+ * Write (or update) ~/.intutic/.env.intutic with proxy env vars.
+ * Users/CI pipelines can `source ~/.intutic/.env.intutic` to get proxy routing
+ * for any harness that respects OPENAI_BASE_URL / ANTHROPIC_BASE_URL.
+ */
+export declare function writeEnvSidecar(proxyUrl: string): Promise<void>;
+//# sourceMappingURL=vscodeSettingsWriter.d.ts.map

package/dist/harness/vscodeSettingsWriter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vscodeSettingsWriter.d.ts","sourceRoot":"","sources":["../../src/harness/vscodeSettingsWriter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAsBH;;;GAGG;AACH,eAAO,MAAM,gBAAgB,mDAAoD,CAAA;AACjF,eAAO,MAAM,mBAAmB,2DAA4D,CAAA;AAE5F;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CASf;AAED;;;GAGG;AACH,wBAAsB,0BAA0B,CAC9C,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CASf;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBrE"}