@intutic/cli 1.10.0 → 2.0.0

package/dist/harness/agentcore.js

@@ -0,0 +1,119 @@
+/**
+ * agentcore.ts — AWS Bedrock AgentCore Runtime adapter (detection-only, no
+ * config file of its own).
+ *
+ * AgentCore (GA 2025-10) is a 13-module platform, not one thing. This
+ * adapter covers exactly one module: **Runtime**, a managed hosting
+ * environment that runs a customer's OWN agent code (any framework)
+ * unchanged. Because it is just running the customer's own code, the
+ * blocking tool-call gate is whichever ALREADY-SUPPORTED framework adapter
+ * that code uses — Strands (strands.ts), LangGraph (langgraph.ts), CrewAI
+ * (crewai.ts), etc. This adapter's `writeConfig` is therefore a no-op, the
+ * same shape as xirp.ts/agenticOrchestrator.ts: it exists so
+ * `intutic status`/`intutic init` can report "this workspace deploys to
+ * AgentCore Runtime" and point at the deployment-target caveats documented
+ * in apps/docs/integrations/agentcore.md (environment-variable caps, VPC/NAT
+ * egress topology, Bedrock's SigV4 traffic not being proxyable) — none of
+ * which belong in a repo-written file, since the actual proxy env vars are
+ * already written by whichever inner framework's own adapter detects.
+ *
+ * UNLIKE Xirp/Agentic Orchestrator, Runtime does not spawn an
+ * already-installed CLI harness as a subprocess — it hosts framework-SDK
+ * code as a deployment target. If that code uses no framework this registry
+ * supports (raw boto3, a hand-rolled tool loop), coverage is genuinely zero
+ * — an honest gap, stated rather than papered over.
+ *
+ * # Detection signals (all live-verified against real published artifacts —
+ * see packages/shared-types/src/enums.ts's HarnessType.AGENTCORE_RUNTIME doc
+ * for exactly how)
+ *
+ * 1. `bedrock-agentcore` in a Python manifest (pyproject.toml/
+ *    requirements.txt/uv.lock) — the PyPI SDK package (CONFIRMED 1.22.0).
+ * 2. `bedrock-agentcore-starter-toolkit` in a Python manifest — the optional
+ *    CLI/dev-loop toolkit (CONFIRMED 0.3.11); a weaker signal than #1 since a
+ *    project can depend on the SDK without the starter toolkit, but not the
+ *    reverse in practice.
+ * 3. `bedrock-agentcore` or `@aws/agentcore` in package.json dependencies —
+ *    the npm TypeScript SDK (CONFIRMED 0.4.3) and CLI (CONFIRMED 0.27.0).
+ * 4. `.bedrock_agentcore.yaml` at the workspace root — the config file the
+ *    Python starter toolkit's `agentcore configure`/`agentcore launch`
+ *    commands write (confirmed via `bedrock_agentcore_starter_toolkit/cli/
+ *    runtime/_configure_impl.py` and every other CLI subcommand module that
+ *    reads it).
+ * 5. `agentcore/agentcore.json` or `aws-targets.json` at the workspace root —
+ *    the config files the npm `@aws/agentcore` CLI writes (confirmed via the
+ *    literal strings in the published `dist/cli/index.mjs` bundle).
+ *
+ * No ReDoS surface: every check below is a plain substring/property test
+ * over locally-read files, never a regex over untrusted network input.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import { access, readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { HarnessType } from '@intutic/shared-types';
+/** Python manifests scanned for the SDK/toolkit package names. */
+const PYTHON_MANIFESTS = ['pyproject.toml', 'requirements.txt', 'uv.lock'];
+/** Config files the `agentcore` CLIs (npm + Python starter toolkit) write. */
+const CONFIG_FILE_SIGNALS = ['.bedrock_agentcore.yaml', 'agentcore/agentcore.json', 'aws-targets.json'];
+async function hasAnyConfigFile(workspaceRoot) {
+    for (const rel of CONFIG_FILE_SIGNALS) {
+        try {
+            await access(join(workspaceRoot, rel));
+            return true;
+        }
+        catch {
+            /* not here */
+        }
+    }
+    return false;
+}
+async function hasPythonManifestSignal(workspaceRoot) {
+    for (const manifest of PYTHON_MANIFESTS) {
+        try {
+            const content = (await readFile(join(workspaceRoot, manifest), 'utf-8')).toLowerCase();
+            if (content.includes('bedrock-agentcore') || content.includes('bedrock_agentcore'))
+                return true;
+        }
+        catch {
+            /* manifest not present */
+        }
+    }
+    return false;
+}
+async function hasNodeManifestSignal(workspaceRoot) {
+    try {
+        const raw = await readFile(join(workspaceRoot, 'package.json'), 'utf-8');
+        const manifest = JSON.parse(raw);
+        const deps = { ...manifest.peerDependencies, ...manifest.devDependencies, ...manifest.dependencies };
+        return 'bedrock-agentcore' in deps || '@aws/agentcore' in deps;
+    }
+    catch {
+        return false; // no package.json, or unparseable
+    }
+}
+export const agentcoreAdapter = {
+    type: HarnessType.AGENTCORE_RUNTIME,
+    // No config file of its own — see module doc. The proxy env vars a
+    // customer's deployed agent needs are already written by whichever inner
+    // framework's own adapter (strands.ts, langgraph.ts, ...) detects.
+    configFileName: '',
+    async detect(workspaceRoot) {
+        if (await hasAnyConfigFile(workspaceRoot))
+            return true;
+        if (await hasPythonManifestSignal(workspaceRoot))
+            return true;
+        return hasNodeManifestSignal(workspaceRoot);
+    },
+    // AgentCore Runtime introduces no config format of its own to gate — see
+    // module doc. Nothing to write; whichever inner framework's own adapter is
+    // present (if any) is what writes real governance content.
+    async writeConfig(_workspaceRoot, _sops, _proxyUrl) {
+        return null;
+    },
+    async readCurrentHash(_workspaceRoot) {
+        return null;
+    },
+};
+//# sourceMappingURL=agentcore.js.map

package/dist/harness/agentcore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentcore.js","sourceRoot":"","sources":["../../src/harness/agentcore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAEH,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAInD,kEAAkE;AAClE,MAAM,gBAAgB,GAAG,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,SAAS,CAAU,CAAA;AAEnF,8EAA8E;AAC9E,MAAM,mBAAmB,GAAG,CAAC,yBAAyB,EAAE,0BAA0B,EAAE,kBAAkB,CAAU,CAAA;AAEhH,KAAK,UAAU,gBAAgB,CAAC,aAAqB;IACnD,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,CAAA;YACtC,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,aAAqB;IAC1D,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;YACtF,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;gBAAE,OAAO,IAAI,CAAA;QACjG,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAQD,KAAK,UAAU,qBAAqB,CAAC,aAAqB;IACxD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAA;QACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAA;QACnD,MAAM,IAAI,GAAG,EAAE,GAAG,QAAQ,CAAC,gBAAgB,EAAE,GAAG,QAAQ,CAAC,eAAe,EAAE,GAAG,QAAQ,CAAC,YAAY,EAAE,CAAA;QACpG,OAAO,mBAAmB,IAAI,IAAI,IAAI,gBAAgB,IAAI,IAAI,CAAA;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA,CAAC,kCAAkC;IACjD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C,IAAI,EAAE,WAAW,CAAC,iBAAiB;IACnC,mEAAmE;IACnE,yEAAyE;IACzE,mEAAmE;IACnE,cAAc,EAAE,EAAE;IAElB,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,IAAI,MAAM,gBAAgB,CAAC,aAAa,CAAC;YAAE,OAAO,IAAI,CAAA;QACtD,IAAI,MAAM,uBAAuB,CAAC,aAAa,CAAC;YAAE,OAAO,IAAI,CAAA;QAC7D,OAAO,qBAAqB,CAAC,aAAa,CAAC,CAAA;IAC7C,CAAC;IAED,yEAAyE;IACzE,2EAA2E;IAC3E,2DAA2D;IAC3D,KAAK,CAAC,WAAW,CAAC,cAAsB,EAAE,KAAqB,EAAE,SAAiB;QAChF,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,cAAsB;QAC1C,OAAO,IAAI,CAAA;IACb,CAAC;CACF,CAAA"}

package/dist/harness/agenticOrchestrator.d.ts

@@ -0,0 +1,52 @@
+/**
+ * agenticOrchestrator.ts — DoorDash "Agentic Orchestrator" adapter (binary
+ * `agentico`, Go, Apache-2.0, `doordash-oss/agentic-orchestrator`).
+ *
+ * Agentic Orchestrator is NOT itself an AI agent — it is a desktop app +
+ * CLI that turns a feature prompt into a multi-phase workflow (research,
+ * planning, implementation, review, PR publish), delegating the actual
+ * model-driving work to ALREADY-INSTALLED CLI backends: Claude Code, Codex,
+ * and OpenCode (confirmed via `agentico server --help`'s `--providers`
+ * flag: "Available: claude, codex, opencode"). Each feature runs in its own
+ * `git worktree` under `~/.agentic-orchestrator/worktrees/` (confirmed via
+ * the project's own README), the same "one workflow, one worktree" shape
+ * Xirp uses — so the sync daemon's existing worktree propagation
+ * (`services/sync-daemon/src/lib/gitWorktrees.ts`) already covers these
+ * worktrees too, with no changes needed: `git worktree list --porcelain`
+ * enumerates every worktree of a watched repo regardless of where under the
+ * filesystem it lives.
+ *
+ * Unlike Xirp, this project's facts were LIVE-VERIFIED against the real
+ * released artifact, not just its README: the actual `agentico` binary
+ * (darwin_arm64, v0.152.0) was downloaded from a GitHub release and run
+ * directly (`agentico --version`, `agentico --help`, `agentico server
+ * --help`) during this integration's research. `--help`'s documented
+ * defaults for `--config` (`~/.agentic-orchestrator/config.yaml`) and
+ * `--state-dir` (`~/.agentic-orchestrator/features`) matched the README
+ * exactly, with no env-var override for either path documented anywhere in
+ * the binary's own help text (unlike Xirp's guessed `$XIRP_HOME`).
+ *
+ * `writeConfig` is a no-op for the same reason as Xirp's: this integration
+ * introduces no config format of its own to gate. `config.yaml`'s
+ * `defaults.models.*` keys select WHICH model each phase uses, not how that
+ * phase's chosen backend reaches its LLM provider — that routing is each
+ * wrapped backend's own concern (Claude Code's `.claude/settings.json` +
+ * env vars, Codex's `~/.codex/config.toml`, OpenCode's own config), exactly
+ * as it already is when those backends run standalone.
+ *
+ * All three wrapped backends have adapters of their own (`claudeCode.ts`,
+ * `codex.ts`, `opencode.ts` — the last since TD-397 closed on 2026-09-23),
+ * so a feature run against any `--providers` value is governed by that
+ * backend's gate inside the worktree. This adapter only detects that
+ * Agentic Orchestrator itself is present.
+ *
+ * See `services/sync-daemon/__tests__/harness/gateRegistry.ts`'s NO_GATE
+ * row for `agentic-orchestrator` for the full governance rationale, and
+ * `apps/docs/integrations/agentic-orchestrator.md` for user-facing docs.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import type { IHarnessAdapter } from './types.js';
+export declare const agenticOrchestratorAdapter: IHarnessAdapter;
+//# sourceMappingURL=agenticOrchestrator.d.ts.map

package/dist/harness/agenticOrchestrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agenticOrchestrator.d.ts","sourceRoot":"","sources":["../../src/harness/agenticOrchestrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAQH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAQjD,eAAO,MAAM,0BAA0B,EAAE,eAyDxC,CAAA"}

package/dist/harness/agenticOrchestrator.js

@@ -0,0 +1,115 @@
+/**
+ * agenticOrchestrator.ts — DoorDash "Agentic Orchestrator" adapter (binary
+ * `agentico`, Go, Apache-2.0, `doordash-oss/agentic-orchestrator`).
+ *
+ * Agentic Orchestrator is NOT itself an AI agent — it is a desktop app +
+ * CLI that turns a feature prompt into a multi-phase workflow (research,
+ * planning, implementation, review, PR publish), delegating the actual
+ * model-driving work to ALREADY-INSTALLED CLI backends: Claude Code, Codex,
+ * and OpenCode (confirmed via `agentico server --help`'s `--providers`
+ * flag: "Available: claude, codex, opencode"). Each feature runs in its own
+ * `git worktree` under `~/.agentic-orchestrator/worktrees/` (confirmed via
+ * the project's own README), the same "one workflow, one worktree" shape
+ * Xirp uses — so the sync daemon's existing worktree propagation
+ * (`services/sync-daemon/src/lib/gitWorktrees.ts`) already covers these
+ * worktrees too, with no changes needed: `git worktree list --porcelain`
+ * enumerates every worktree of a watched repo regardless of where under the
+ * filesystem it lives.
+ *
+ * Unlike Xirp, this project's facts were LIVE-VERIFIED against the real
+ * released artifact, not just its README: the actual `agentico` binary
+ * (darwin_arm64, v0.152.0) was downloaded from a GitHub release and run
+ * directly (`agentico --version`, `agentico --help`, `agentico server
+ * --help`) during this integration's research. `--help`'s documented
+ * defaults for `--config` (`~/.agentic-orchestrator/config.yaml`) and
+ * `--state-dir` (`~/.agentic-orchestrator/features`) matched the README
+ * exactly, with no env-var override for either path documented anywhere in
+ * the binary's own help text (unlike Xirp's guessed `$XIRP_HOME`).
+ *
+ * `writeConfig` is a no-op for the same reason as Xirp's: this integration
+ * introduces no config format of its own to gate. `config.yaml`'s
+ * `defaults.models.*` keys select WHICH model each phase uses, not how that
+ * phase's chosen backend reaches its LLM provider — that routing is each
+ * wrapped backend's own concern (Claude Code's `.claude/settings.json` +
+ * env vars, Codex's `~/.codex/config.toml`, OpenCode's own config), exactly
+ * as it already is when those backends run standalone.
+ *
+ * All three wrapped backends have adapters of their own (`claudeCode.ts`,
+ * `codex.ts`, `opencode.ts` — the last since TD-397 closed on 2026-09-23),
+ * so a feature run against any `--providers` value is governed by that
+ * backend's gate inside the worktree. This adapter only detects that
+ * Agentic Orchestrator itself is present.
+ *
+ * See `services/sync-daemon/__tests__/harness/gateRegistry.ts`'s NO_GATE
+ * row for `agentic-orchestrator` for the full governance rationale, and
+ * `apps/docs/integrations/agentic-orchestrator.md` for user-facing docs.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import { access } from 'node:fs/promises';
+import { accessSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { HarnessType } from '@intutic/shared-types';
+/** Confirmed default (via `agentico server --help`) — not a guess. */
+const AGENTIC_ORCHESTRATOR_HOME_FRAGMENT = '.agentic-orchestrator';
+/** Confirmed default install path for the macOS desktop app (README's
+ *  `xattr -dr com.apple.quarantine /Applications/Agentico.app` note). */
+const AGENTIC_ORCHESTRATOR_APP_PATH = '/Applications/Agentico.app';
+export const agenticOrchestratorAdapter = {
+    type: HarnessType.AGENTIC_ORCHESTRATOR,
+    // No config file of its own — see module doc. Matches xirp.ts's/goose.ts's
+    // convention of an empty HARNESS_CONFIG_FILES entry for a harness whose
+    // governance-relevant writes are not a single named workspace-relative
+    // file (in this case: no writes of its own at all, same as Xirp).
+    configFileName: '',
+    async detect(_workspaceRoot) {
+        // 1. `~/.agentic-orchestrator` — confirmed default home directory (holds
+        //    config.yaml, the features/ state dir, and worktrees/). Cross-
+        //    platform: unlike xirp.ts, no `process.platform !== 'darwin'` guard
+        //    here, since Agentic Orchestrator ships for both macOS and Linux
+        //    (confirmed via the project's own release artifacts: darwin/linux,
+        //    amd64/arm64).
+        try {
+            await access(join(homedir(), AGENTIC_ORCHESTRATOR_HOME_FRAGMENT));
+            return true;
+        }
+        catch { /* fall through */ }
+        // 2. `agentico` on PATH — the same PATH-scan convention dsh.ts/grok.ts
+        //    use for CLI-distributed binaries (Homebrew, a prebuilt release
+        //    tarball extracted onto PATH, or `go install`).
+        const pathDirs = (process.env.PATH ?? '').split(process.platform === 'win32' ? ';' : ':');
+        for (const dir of pathDirs) {
+            try {
+                accessSync(join(dir, 'agentico'));
+                return true;
+            }
+            catch { /* not here */ }
+        }
+        // 3. `Agentico.app` installed in /Applications — the desktop app, macOS
+        //    only. Confirmed path (see module doc); guarded to darwin only
+        //    since this specific check is platform-specific even though the
+        //    harness as a whole is not.
+        if (process.platform === 'darwin') {
+            try {
+                await access(AGENTIC_ORCHESTRATOR_APP_PATH);
+                return true;
+            }
+            catch { /* fall through */ }
+        }
+        return false;
+    },
+    // Agentic Orchestrator introduces no config format of its own — see
+    // module doc. Nothing to write; each wrapped backend's own adapter
+    // (claudeCode.ts / codex.ts / opencode.ts) is what writes real governance
+    // content, once per worktree Agentic Orchestrator creates (the sync
+    // daemon's worktree propagation, not this adapter).
+    async writeConfig(_workspaceRoot, _sops, _proxyUrl) {
+        return null;
+    },
+    async readCurrentHash(_workspaceRoot) {
+        return null;
+    },
+};
+//# sourceMappingURL=agenticOrchestrator.js.map

package/dist/harness/agenticOrchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agenticOrchestrator.js","sourceRoot":"","sources":["../../src/harness/agenticOrchestrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAInD,sEAAsE;AACtE,MAAM,kCAAkC,GAAG,uBAAuB,CAAA;AAClE;yEACyE;AACzE,MAAM,6BAA6B,GAAG,4BAA4B,CAAA;AAElE,MAAM,CAAC,MAAM,0BAA0B,GAAoB;IACzD,IAAI,EAAE,WAAW,CAAC,oBAAoB;IACtC,2EAA2E;IAC3E,wEAAwE;IACxE,uEAAuE;IACvE,kEAAkE;IAClE,cAAc,EAAE,EAAE;IAElB,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,yEAAyE;QACzE,mEAAmE;QACnE,wEAAwE;QACxE,qEAAqE;QACrE,uEAAuE;QACvE,mBAAmB;QACnB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,kCAAkC,CAAC,CAAC,CAAA;YACjE,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAE9B,uEAAuE;QACvE,oEAAoE;QACpE,oDAAoD;QACpD,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACzF,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAA;gBACjC,OAAO,IAAI,CAAA;YACb,CAAC;YAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;QAC5B,CAAC;QAED,wEAAwE;QACxE,mEAAmE;QACnE,oEAAoE;QACpE,gCAAgC;QAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAA;gBAC3C,OAAO,IAAI,CAAA;YACb,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAChC,CAAC;QAED,OAAO,KAAK,CAAA;IACd,CAAC;IAED,oEAAoE;IACpE,mEAAmE;IACnE,0EAA0E;IAC1E,oEAAoE;IACpE,oDAAoD;IACpD,KAAK,CAAC,WAAW,CAAC,cAAsB,EAAE,KAAqB,EAAE,SAAiB;QAChF,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,cAAsB;QAC1C,OAAO,IAAI,CAAA;IACb,CAAC;CACF,CAAA"}

package/dist/harness/aiSdkHarness.d.ts

@@ -0,0 +1,30 @@
+/**
+ * aiSdkHarness.ts — Vercel `@ai-sdk/harness` adapter (env-file config,
+ * SDK-side gate).
+ *
+ * Same shape as mastra.ts/vercelAiSdk.ts (see jsSdkGatedAdapter.ts), for
+ * Vercel's sandboxed coding-agent runtime (`HarnessAgent`): detected via
+ * `@ai-sdk/harness` itself, any `@ai-sdk/harness-*` runtime adapter
+ * (harness-claude-code, harness-grok-build, ...), or any `@ai-sdk/sandbox-*`
+ * provider in `package.json` — each family independently signals the
+ * framework, hence `requiresAnyPrefix` rather than a single required package.
+ *
+ * TWO DOCUMENTED LIMITATIONS carried into the generated `.env.intutic`
+ * (both confirmed against `@ai-sdk/harness@1.0.75`'s shipped types — see
+ * `@intutic/gate/harness`'s module doc for the full record):
+ *
+ *   1. Tool execution is SERVER-SIDE, in Vercel Sandbox microVMs — the
+ *      local Intutic proxy never sees sandbox egress, so the written
+ *      base-URL vars govern only LLM calls the CALLER's own process makes.
+ *      Egress governance for the sandbox itself is the sandbox's own
+ *      network policy (coarse, host-level), recommended via
+ *      `recommendedHarnessSettings()`.
+ *   2. Built-in sandbox tools (read/write/edit/bash/...) are governed only
+ *      by `permissionMode`, which DEFAULTS to `'allow-all'` — the gate can
+ *      only reach custom host-executed tools, via the approval flow.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+export declare const aiSdkHarnessAdapter: import("./types.js").IHarnessAdapter;
+//# sourceMappingURL=aiSdkHarness.d.ts.map

package/dist/harness/aiSdkHarness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aiSdkHarness.d.ts","sourceRoot":"","sources":["../../src/harness/aiSdkHarness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAKH,eAAO,MAAM,mBAAmB,sCAqB9B,CAAA"}

package/dist/harness/aiSdkHarness.js

@@ -0,0 +1,51 @@
+/**
+ * aiSdkHarness.ts — Vercel `@ai-sdk/harness` adapter (env-file config,
+ * SDK-side gate).
+ *
+ * Same shape as mastra.ts/vercelAiSdk.ts (see jsSdkGatedAdapter.ts), for
+ * Vercel's sandboxed coding-agent runtime (`HarnessAgent`): detected via
+ * `@ai-sdk/harness` itself, any `@ai-sdk/harness-*` runtime adapter
+ * (harness-claude-code, harness-grok-build, ...), or any `@ai-sdk/sandbox-*`
+ * provider in `package.json` — each family independently signals the
+ * framework, hence `requiresAnyPrefix` rather than a single required package.
+ *
+ * TWO DOCUMENTED LIMITATIONS carried into the generated `.env.intutic`
+ * (both confirmed against `@ai-sdk/harness@1.0.75`'s shipped types — see
+ * `@intutic/gate/harness`'s module doc for the full record):
+ *
+ *   1. Tool execution is SERVER-SIDE, in Vercel Sandbox microVMs — the
+ *      local Intutic proxy never sees sandbox egress, so the written
+ *      base-URL vars govern only LLM calls the CALLER's own process makes.
+ *      Egress governance for the sandbox itself is the sandbox's own
+ *      network policy (coarse, host-level), recommended via
+ *      `recommendedHarnessSettings()`.
+ *   2. Built-in sandbox tools (read/write/edit/bash/...) are governed only
+ *      by `permissionMode`, which DEFAULTS to `'allow-all'` — the gate can
+ *      only reach custom host-executed tools, via the approval flow.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import { HarnessType } from '@intutic/shared-types';
+import { makeJsSdkGatedAdapter } from './jsSdkGatedAdapter.js';
+export const aiSdkHarnessAdapter = makeJsSdkGatedAdapter({
+    type: HarnessType.AI_SDK_HARNESS,
+    label: 'AI SDK Harness',
+    requires: [],
+    requiresAnyPrefix: ['@ai-sdk/harness', '@ai-sdk/sandbox-'],
+    npmInstall: '@intutic/gate',
+    envPreamble: [
+        'These env vars govern LLM egress from THIS process only. AI SDK Harness',
+        'agents execute their tools server-side in Vercel Sandbox microVMs — that',
+        'traffic never crosses this proxy, and no config or hook file can gate the',
+        'sandbox from here. The blocking tool gate (custom host-executed tools',
+        'only) ships SDK-side:',
+    ],
+    importLine: "import { intuticApprovalResponder, intuticStaticApprovals, recommendedHarnessSettings } from '@intutic/gate/harness'",
+    usageSummary: "toolApproval: intuticStaticApprovals(tools) routes every custom tool through the approval flow; " +
+        'answer pauses with intuticApprovalResponder(). NOTE: built-in sandbox tools ignore toolApproval ' +
+        "entirely — set permissionMode (defaults to 'allow-all') via recommendedHarnessSettings(); sandbox " +
+        'egress never crosses this proxy — set a sandbox networkPolicy.',
+    docsSlug: 'ai-sdk-harness',
+});
+//# sourceMappingURL=aiSdkHarness.js.map

package/dist/harness/aiSdkHarness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aiSdkHarness.js","sourceRoot":"","sources":["../../src/harness/aiSdkHarness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAE9D,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;IACvD,IAAI,EAAE,WAAW,CAAC,cAAc;IAChC,KAAK,EAAE,gBAAgB;IACvB,QAAQ,EAAE,EAAE;IACZ,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;IAC1D,UAAU,EAAE,eAAe;IAC3B,WAAW,EAAE;QACX,yEAAyE;QACzE,0EAA0E;QAC1E,2EAA2E;QAC3E,uEAAuE;QACvE,uBAAuB;KACxB;IACD,UAAU,EACR,sHAAsH;IACxH,YAAY,EACV,kGAAkG;QAClG,kGAAkG;QAClG,oGAAoG;QACpG,gEAAgE;IAClE,QAAQ,EAAE,gBAAgB;CAC3B,CAAC,CAAA"}

package/dist/harness/aiSdkWorkflow.d.ts

@@ -0,0 +1,26 @@
+/**
+ * aiSdkWorkflow.ts — Vercel `@ai-sdk/workflow` adapter (env-file config,
+ * SDK-side gate).
+ *
+ * Same shape as mastra.ts/vercelAiSdk.ts (see jsSdkGatedAdapter.ts), for
+ * Vercel's durable workflow-agent runtime (`WorkflowAgent`): detected via
+ * `@ai-sdk/workflow` in `package.json`. The unscoped `workflow` package
+ * (the Workflow DevKit runtime, `workflow`/`wf` CLI) is deliberately NOT a
+ * detection trigger on its own: the bare name is far too generic to treat as
+ * framework evidence (any package named "workflow" in any stack would
+ * false-positive), and the durable runtime without `@ai-sdk/workflow` has no
+ * WorkflowAgent — nothing this integration's gate applies to. A workspace
+ * with both declares `@ai-sdk/workflow` anyway, which is the trigger.
+ *
+ * DOCUMENTED SEMANTICS carried into the generated `.env.intutic` (confirmed
+ * against `@ai-sdk/workflow@1.0.69` + `workflow@4.8.3` — see
+ * `@intutic/gate/workflow`'s module doc for the full record): WorkflowAgent
+ * has no agent-level approval option; the veto surface is per-tool
+ * `needsApproval`, and a refusal thrown from it must be FatalError-compatible
+ * or the durable runtime RETRIES the denial toward max attempts.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+export declare const aiSdkWorkflowAdapter: import("./types.js").IHarnessAdapter;
+//# sourceMappingURL=aiSdkWorkflow.d.ts.map

package/dist/harness/aiSdkWorkflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aiSdkWorkflow.d.ts","sourceRoot":"","sources":["../../src/harness/aiSdkWorkflow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAKH,eAAO,MAAM,oBAAoB,sCAY/B,CAAA"}

package/dist/harness/aiSdkWorkflow.js

@@ -0,0 +1,39 @@
+/**
+ * aiSdkWorkflow.ts — Vercel `@ai-sdk/workflow` adapter (env-file config,
+ * SDK-side gate).
+ *
+ * Same shape as mastra.ts/vercelAiSdk.ts (see jsSdkGatedAdapter.ts), for
+ * Vercel's durable workflow-agent runtime (`WorkflowAgent`): detected via
+ * `@ai-sdk/workflow` in `package.json`. The unscoped `workflow` package
+ * (the Workflow DevKit runtime, `workflow`/`wf` CLI) is deliberately NOT a
+ * detection trigger on its own: the bare name is far too generic to treat as
+ * framework evidence (any package named "workflow" in any stack would
+ * false-positive), and the durable runtime without `@ai-sdk/workflow` has no
+ * WorkflowAgent — nothing this integration's gate applies to. A workspace
+ * with both declares `@ai-sdk/workflow` anyway, which is the trigger.
+ *
+ * DOCUMENTED SEMANTICS carried into the generated `.env.intutic` (confirmed
+ * against `@ai-sdk/workflow@1.0.69` + `workflow@4.8.3` — see
+ * `@intutic/gate/workflow`'s module doc for the full record): WorkflowAgent
+ * has no agent-level approval option; the veto surface is per-tool
+ * `needsApproval`, and a refusal thrown from it must be FatalError-compatible
+ * or the durable runtime RETRIES the denial toward max attempts.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import { HarnessType } from '@intutic/shared-types';
+import { makeJsSdkGatedAdapter } from './jsSdkGatedAdapter.js';
+export const aiSdkWorkflowAdapter = makeJsSdkGatedAdapter({
+    type: HarnessType.AI_SDK_WORKFLOW,
+    label: 'AI SDK Workflow',
+    requires: [{ name: '@ai-sdk/workflow' }],
+    npmInstall: '@intutic/gate',
+    importLine: "import { intuticNeedsApproval, withIntuticApproval } from '@intutic/gate/workflow'",
+    usageSummary: 'new WorkflowAgent({ ..., tools: withIntuticApproval(tools) }) — attaches an async needsApproval ' +
+        'per tool (WorkflowAgent itself has no approval option). BLOCK throws a FatalError-compatible ' +
+        'refusal so the durable runtime aborts instead of retry-looping the denial; ALLOW resolves ' +
+        "false (or true with { onAllow: 'human' } to keep the durable human-approval pause).",
+    docsSlug: 'ai-sdk-workflow',
+});
+//# sourceMappingURL=aiSdkWorkflow.js.map

package/dist/harness/aiSdkWorkflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aiSdkWorkflow.js","sourceRoot":"","sources":["../../src/harness/aiSdkWorkflow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAE9D,MAAM,CAAC,MAAM,oBAAoB,GAAG,qBAAqB,CAAC;IACxD,IAAI,EAAE,WAAW,CAAC,eAAe;IACjC,KAAK,EAAE,iBAAiB;IACxB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;IACxC,UAAU,EAAE,eAAe;IAC3B,UAAU,EAAE,oFAAoF;IAChG,YAAY,EACV,kGAAkG;QAClG,+FAA+F;QAC/F,4FAA4F;QAC5F,qFAAqF;IACvF,QAAQ,EAAE,iBAAiB;CAC5B,CAAC,CAAA"}

package/dist/harness/autogen.d.ts

@@ -0,0 +1,24 @@
+/**
+ * autogen.ts — AutoGen adapter (env-file config, SDK-side gate).
+ *
+ * Same shape as langgraph.ts (see sdkGatedAdapter.ts). Detected via any of
+ * the `autogen-agentchat` / `autogen-core` / `autogen-ext` packages — any one
+ * present is treated as "AutoGen is here".
+ *
+ * The blocking gate ships SDK-side via
+ * `intutic_clawde.gate.adapters.autogen.IntuticInterventionHandler`, an
+ * `autogen_core.InterventionHandler.on_send` — verified live against
+ * autogen-core==0.7.5 by driving a real `SingleThreadedAgentRuntime` end to
+ * end. IMPORTANT, documented in that module's own doc: `on_send` only sees
+ * `FunctionCall` messages explicitly routed through
+ * `runtime.send_message`/`publish_message` — `AssistantAgent`'s own tool
+ * calls never go through the runtime at all, so for `AssistantAgent`-based
+ * code the framework-agnostic `@guard`/`guard_tools` helpers (governing the
+ * tool objects directly) remain the applicable coverage, same as before this
+ * adapter existed (see TD-374).
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+export declare const autogenAdapter: import("./types.js").IHarnessAdapter;
+//# sourceMappingURL=autogen.d.ts.map

package/dist/harness/autogen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autogen.d.ts","sourceRoot":"","sources":["../../src/harness/autogen.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH,eAAO,MAAM,cAAc,sCAWzB,CAAA"}

package/dist/harness/autogen.js

@@ -0,0 +1,36 @@
+/**
+ * autogen.ts — AutoGen adapter (env-file config, SDK-side gate).
+ *
+ * Same shape as langgraph.ts (see sdkGatedAdapter.ts). Detected via any of
+ * the `autogen-agentchat` / `autogen-core` / `autogen-ext` packages — any one
+ * present is treated as "AutoGen is here".
+ *
+ * The blocking gate ships SDK-side via
+ * `intutic_clawde.gate.adapters.autogen.IntuticInterventionHandler`, an
+ * `autogen_core.InterventionHandler.on_send` — verified live against
+ * autogen-core==0.7.5 by driving a real `SingleThreadedAgentRuntime` end to
+ * end. IMPORTANT, documented in that module's own doc: `on_send` only sees
+ * `FunctionCall` messages explicitly routed through
+ * `runtime.send_message`/`publish_message` — `AssistantAgent`'s own tool
+ * calls never go through the runtime at all, so for `AssistantAgent`-based
+ * code the framework-agnostic `@guard`/`guard_tools` helpers (governing the
+ * tool objects directly) remain the applicable coverage, same as before this
+ * adapter existed (see TD-374).
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import { HarnessType } from '@intutic/shared-types';
+import { makeSdkGatedAdapter } from './sdkGatedAdapter.js';
+export const autogenAdapter = makeSdkGatedAdapter({
+    type: HarnessType.AUTOGEN,
+    label: 'AutoGen',
+    keywords: ['autogen-agentchat', 'autogen-core', 'autogen-ext'],
+    pipInstall: 'intutic-clawde[autogen]',
+    importLine: 'from intutic_clawde.gate.adapters.autogen import IntuticInterventionHandler',
+    usageSummary: 'IntuticInterventionHandler vetoes a runtime-routed FunctionCall via on_send (see TD-374: ' +
+        'invisible to AssistantAgent\'s own tool calls — wrap those tools with @guard/guard_tools ' +
+        'instead).',
+    docsSlug: 'autogen',
+});
+//# sourceMappingURL=autogen.js.map

package/dist/harness/autogen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autogen.js","sourceRoot":"","sources":["../../src/harness/autogen.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAE1D,MAAM,CAAC,MAAM,cAAc,GAAG,mBAAmB,CAAC;IAChD,IAAI,EAAE,WAAW,CAAC,OAAO;IACzB,KAAK,EAAE,SAAS;IAChB,QAAQ,EAAE,CAAC,mBAAmB,EAAE,cAAc,EAAE,aAAa,CAAC;IAC9D,UAAU,EAAE,yBAAyB;IACrC,UAAU,EAAE,6EAA6E;IACzF,YAAY,EACV,2FAA2F;QAC3F,2FAA2F;QAC3F,WAAW;IACb,QAAQ,EAAE,SAAS;CACpB,CAAC,CAAA"}

package/dist/harness/base.js.map

@@ -1 +1 @@
-{"version":3,"file":"base.js","sourceRoot":"","sources":["../../src/harness/base.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,MAAM,EAAY,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAGnC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,uDAAuD;AACvD,SAAS,WAAW;IAClB,OAAO;QACL,6CAA6C;QAC7C,gDAAgD;QAChD,gBAAgB,MAAM,EAAE,EAAE;QAC1B,EAAE;QACF,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,oBAAoB,CAAC,IAAoB,EAAE,QAAgB;IACzE,MAAM,MAAM,GAAG,WAAW,EAAE,CAAA;IAC5B,MAAM,YAAY,GAAG,sBAAsB,QAAQ,QAAQ,CAAA;IAC3D,MAAM,WAAW,GAAG,IAAI;SACrB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,KAAK,OAAO,GAAG,CAAC,OAAO,EAAE,CAAC;SACjD,IAAI,CAAC,aAAa,CAAC,CAAA;IACtB,OAAO,MAAM,GAAG,YAAY,GAAG,WAAW,GAAG,IAAI,CAAA;AACnD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAiB,EACjB,cAAsB;IAEtB,OAAO;QACL,IAAI;QACJ,cAAc;QAEd,KAAK,CAAC,MAAM,CAAC,aAAqB;YAChC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,CAAA;gBACjD,OAAO,IAAI,CAAA;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAA;YACd,CAAC;QACH,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;YAC7E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAA;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAA;YACpD,MAAM,OAAO,GAAG,QAAQ,GAAG,cAAc,CAAA;YACzC,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;YACpD,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACnD,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;YAC1C,MAAM,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;YAC/B,OAAO,QAAQ,CAAA;QACjB,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,aAAqB;YACzC,IAAI,CAAC;gBACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,CAAA;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../src/harness/base.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACnE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAGnC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,uDAAuD;AACvD,SAAS,WAAW;IAClB,OAAO;QACL,6CAA6C;QAC7C,gDAAgD;QAChD,gBAAgB,MAAM,EAAE,EAAE;QAC1B,EAAE;QACF,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,oBAAoB,CAAC,IAAoB,EAAE,QAAgB;IACzE,MAAM,MAAM,GAAG,WAAW,EAAE,CAAA;IAC5B,MAAM,YAAY,GAAG,sBAAsB,QAAQ,QAAQ,CAAA;IAC3D,MAAM,WAAW,GAAG,IAAI;SACrB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,KAAK,OAAO,GAAG,CAAC,OAAO,EAAE,CAAC;SACjD,IAAI,CAAC,aAAa,CAAC,CAAA;IACtB,OAAO,MAAM,GAAG,YAAY,GAAG,WAAW,GAAG,IAAI,CAAA;AACnD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAiB,EACjB,cAAsB;IAEtB,OAAO;QACL,IAAI;QACJ,cAAc;QAEd,KAAK,CAAC,MAAM,CAAC,aAAqB;YAChC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,CAAA;gBACjD,OAAO,IAAI,CAAA;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAA;YACd,CAAC;QACH,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;YAC7E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAA;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAA;YACpD,MAAM,OAAO,GAAG,QAAQ,GAAG,cAAc,CAAA;YACzC,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;YACpD,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACnD,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;YAC1C,MAAM,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;YAC/B,OAAO,QAAQ,CAAA;QACjB,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,aAAqB;YACzC,IAAI,CAAC;gBACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,CAAA;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/harness/continue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"continue.d.ts","sourceRoot":"","sources":["../../src/harness/continue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AASjD,eAAO,MAAM,eAAe,EAAE,eAgE7B,CAAA"}
+{"version":3,"file":"continue.d.ts","sourceRoot":"","sources":["../../src/harness/continue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AASjD,eAAO,MAAM,eAAe,EAAE,eAiE7B,CAAA"}

package/dist/harness/continue.js

@@ -40,7 +40,8 @@ export const continueAdapter = {
     },
     async writeConfig(_workspaceRoot, _sops, proxyUrl) {
         // Merge apiBase into each model entry in config.yaml
-        let raw = '';
+        // Both branches below assign, so an initialiser here would always be dead.
+        let raw;
         try {
             raw = await readFile(CONFIG_YAML, 'utf-8');
         }

package/dist/harness/continue.js.map

@@ -1 +1 @@
-{"version":3,"file":"continue.js","sourceRoot":"","sources":["../../src/harness/continue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;AACtB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;AAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAA;AACrD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAA;AAErD,MAAM,CAAC,MAAM,eAAe,GAAoB;IAC9C,IAAI,EAAE,WAAW,CAAC,QAAQ;IAC1B,cAAc,EAAE,WAAW;IAE3B,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,KAAK,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAA;YAClE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,CAAA;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,cAAsB,EAAE,KAAqB,EAAE,QAAgB;QAC/E,qDAAqD;QACrD,IAAI,GAAG,GAAG,EAAE,CAAA;QACZ,IAAI,CAAC;YAAC,GAAG,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,GAAG,GAAG,EAAE,CAAA;QAAC,CAAC;QAErE,mDAAmD;QACnD,4EAA4E;QAC5E,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,IAAI,QAAQ,GAAG,KAAK,CAAA;QAEpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;YACrB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAEjB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;gBAAC,QAAQ,GAAG,IAAI,CAAC;gBAAC,SAAQ;YAAC,CAAC;YAC5D,IAAI,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClD,sEAAsE;gBACtE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;gBAC/B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;oBACxC,MAAM,CAAC,IAAI,CAAC,eAAe,QAAQ,GAAG,CAAC,CAAA;gBACzC,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3H,QAAQ,GAAG,KAAK,CAAA;YAClB,CAAC;QACH,CAAC;QAED,+EAA+E;QAC/E,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAA;YACtD,MAAM,CAAC,IAAI,CAAC,gBAAgB,MAAM,EAAE,EAAE,CAAC,CAAA;YACvC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACtB,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAA;YACjD,MAAM,CAAC,IAAI,CAAC,iBAAiB,QAAQ,GAAG,CAAC,CAAA;QAC3C,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9C,MAAM,GAAG,GAAG,WAAW,GAAG,cAAc,CAAA;QACxC,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;QACtC,MAAM,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;QAC9B,OAAO,WAAW,CAAA;IACpB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,cAAsB;QAC1C,IAAI,CAAC;YAAC,OAAO,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAA;QAAC,CAAC;IAClE,CAAC;CACF,CAAA"}
+{"version":3,"file":"continue.js","sourceRoot":"","sources":["../../src/harness/continue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;AACtB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;AAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAA;AACrD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAA;AAErD,MAAM,CAAC,MAAM,eAAe,GAAoB;IAC9C,IAAI,EAAE,WAAW,CAAC,QAAQ;IAC1B,cAAc,EAAE,WAAW;IAE3B,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,KAAK,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAA;YAClE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,CAAA;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,cAAsB,EAAE,KAAqB,EAAE,QAAgB;QAC/E,qDAAqD;QACrD,2EAA2E;QAC3E,IAAI,GAAW,CAAA;QACf,IAAI,CAAC;YAAC,GAAG,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,GAAG,GAAG,EAAE,CAAA;QAAC,CAAC;QAErE,mDAAmD;QACnD,4EAA4E;QAC5E,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,IAAI,QAAQ,GAAG,KAAK,CAAA;QAEpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;YACrB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAEjB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;gBAAC,QAAQ,GAAG,IAAI,CAAC;gBAAC,SAAQ;YAAC,CAAC;YAC5D,IAAI,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClD,sEAAsE;gBACtE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;gBAC/B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;oBACxC,MAAM,CAAC,IAAI,CAAC,eAAe,QAAQ,GAAG,CAAC,CAAA;gBACzC,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3H,QAAQ,GAAG,KAAK,CAAA;YAClB,CAAC;QACH,CAAC;QAED,+EAA+E;QAC/E,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAA;YACtD,MAAM,CAAC,IAAI,CAAC,gBAAgB,MAAM,EAAE,EAAE,CAAC,CAAA;YACvC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACtB,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAA;YACjD,MAAM,CAAC,IAAI,CAAC,iBAAiB,QAAQ,GAAG,CAAC,CAAA;QAC3C,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9C,MAAM,GAAG,GAAG,WAAW,GAAG,cAAc,CAAA;QACxC,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;QACtC,MAAM,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;QAC9B,OAAO,WAAW,CAAA;IACpB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,cAAsB;QAC1C,IAAI,CAAC;YAAC,OAAO,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAA;QAAC,CAAC;IAClE,CAAC;CACF,CAAA"}

package/dist/harness/crewai.d.ts

@@ -0,0 +1,15 @@
+/**
+ * crewai.ts — CrewAI adapter (env-file config, SDK-side gate).
+ *
+ * Same shape as langgraph.ts (see sdkGatedAdapter.ts). CrewAI tools are
+ * plain callables/CrewStructuredTool instances in the agent's own process —
+ * no on-disk hook/config file exists to gate a call, so the blocking gate
+ * ships SDK-side via `intutic_clawde.gate.adapters.crewai.install()`, which
+ * registers a `before_tool_call` hook (CrewAI's own documented interception
+ * point — verified live against crewai==1.15.16).
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+export declare const crewaiAdapter: import("./types.js").IHarnessAdapter;
+//# sourceMappingURL=crewai.d.ts.map

package/dist/harness/crewai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crewai.d.ts","sourceRoot":"","sources":["../../src/harness/crewai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,eAAO,MAAM,aAAa,sCAUxB,CAAA"}

package/dist/harness/crewai.js

@@ -0,0 +1,26 @@
+/**
+ * crewai.ts — CrewAI adapter (env-file config, SDK-side gate).
+ *
+ * Same shape as langgraph.ts (see sdkGatedAdapter.ts). CrewAI tools are
+ * plain callables/CrewStructuredTool instances in the agent's own process —
+ * no on-disk hook/config file exists to gate a call, so the blocking gate
+ * ships SDK-side via `intutic_clawde.gate.adapters.crewai.install()`, which
+ * registers a `before_tool_call` hook (CrewAI's own documented interception
+ * point — verified live against crewai==1.15.16).
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import { HarnessType } from '@intutic/shared-types';
+import { makeSdkGatedAdapter } from './sdkGatedAdapter.js';
+export const crewaiAdapter = makeSdkGatedAdapter({
+    type: HarnessType.CREWAI,
+    label: 'CrewAI',
+    keywords: ['crewai'],
+    pipInstall: 'intutic-clawde[crewai]',
+    importLine: 'from intutic_clawde.gate.adapters.crewai import install',
+    usageSummary: 'install() registers a before_tool_call hook that refuses denied calls before the ' +
+        'tool body runs.',
+    docsSlug: 'crewai',
+});
+//# sourceMappingURL=crewai.js.map