@intutic/cli 1.10.0 → 2.0.0

package/dist/harness/trueforge.d.ts

@@ -0,0 +1,25 @@
+/**
+ * trueforge.ts — TrueForge (embedded) adapter (env-file config, SDK-side gate).
+ *
+ * Same shape as mastra.ts/vercelAiSdk.ts (see jsSdkGatedAdapter.ts): detected
+ * via `@truefoundry/trueforge-core` in `package.json`, and points at
+ * `@intutic/gate/trueforge`'s `intuticApprovalResponder()` rather than an
+ * `intutic-clawde` import.
+ *
+ * Covers ONLY the embedded-library deployment mode — another team's Node
+ * process importing `@truefoundry/trueforge-core` directly. TrueForge run as
+ * its own standalone/hosted server (`npx @truefoundry/trueforge`, Docker
+ * Compose, or the Helm chart) is a separate, not-yet-built HarnessType and is
+ * NOT detected by this adapter.
+ *
+ * NOTE (confirmed against a real install, `@truefoundry/trueforge-core@0.1.4`):
+ * unlike Mastra's `beforeToolCall`/Vercel AI SDK's `toolApproval`, TrueForge
+ * has no synchronous in-process approval callback at all — the gate is a
+ * batch responder answering `tool.approval_required` turn pauses. See
+ * `@intutic/gate/trueforge`'s module doc for the full record.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+export declare const trueforgeAdapter: import("./types.js").IHarnessAdapter;
+//# sourceMappingURL=trueforge.d.ts.map

package/dist/harness/trueforge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trueforge.d.ts","sourceRoot":"","sources":["../../src/harness/trueforge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAKH,eAAO,MAAM,gBAAgB,sCAc3B,CAAA"}

package/dist/harness/trueforge.js

@@ -0,0 +1,40 @@
+/**
+ * trueforge.ts — TrueForge (embedded) adapter (env-file config, SDK-side gate).
+ *
+ * Same shape as mastra.ts/vercelAiSdk.ts (see jsSdkGatedAdapter.ts): detected
+ * via `@truefoundry/trueforge-core` in `package.json`, and points at
+ * `@intutic/gate/trueforge`'s `intuticApprovalResponder()` rather than an
+ * `intutic-clawde` import.
+ *
+ * Covers ONLY the embedded-library deployment mode — another team's Node
+ * process importing `@truefoundry/trueforge-core` directly. TrueForge run as
+ * its own standalone/hosted server (`npx @truefoundry/trueforge`, Docker
+ * Compose, or the Helm chart) is a separate, not-yet-built HarnessType and is
+ * NOT detected by this adapter.
+ *
+ * NOTE (confirmed against a real install, `@truefoundry/trueforge-core@0.1.4`):
+ * unlike Mastra's `beforeToolCall`/Vercel AI SDK's `toolApproval`, TrueForge
+ * has no synchronous in-process approval callback at all — the gate is a
+ * batch responder answering `tool.approval_required` turn pauses. See
+ * `@intutic/gate/trueforge`'s module doc for the full record.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import { HarnessType } from '@intutic/shared-types';
+import { makeJsSdkGatedAdapter } from './jsSdkGatedAdapter.js';
+export const trueforgeAdapter = makeJsSdkGatedAdapter({
+    type: HarnessType.TRUEFORGE,
+    label: 'TrueForge (embedded)',
+    requires: [{ name: '@truefoundry/trueforge-core' }],
+    npmInstall: '@intutic/gate',
+    importLine: "import { intuticApprovalResponder } from '@intutic/gate/trueforge'",
+    usageSummary: 'intuticApprovalResponder() answers tool.approval_required pauses with a real ' +
+        'Gate.guard() verdict, producing user.tool_approval items for your next ' +
+        "session.createTurn() call. NOTE: TrueForge has no synchronous approval callback to " +
+        'hang a function off — this is a batch responder, not a beforeToolCall/toolApproval ' +
+        'option. Covers embedded-library mode only; the standalone/hosted server is not yet ' +
+        'supported.',
+    docsSlug: 'trueforge',
+});
+//# sourceMappingURL=trueforge.js.map

package/dist/harness/trueforge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trueforge.js","sourceRoot":"","sources":["../../src/harness/trueforge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAE9D,MAAM,CAAC,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;IACpD,IAAI,EAAE,WAAW,CAAC,SAAS;IAC3B,KAAK,EAAE,sBAAsB;IAC7B,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC;IACnD,UAAU,EAAE,eAAe;IAC3B,UAAU,EAAE,oEAAoE;IAChF,YAAY,EACV,+EAA+E;QAC/E,yEAAyE;QACzE,qFAAqF;QACrF,qFAAqF;QACrF,qFAAqF;QACrF,YAAY;IACd,QAAQ,EAAE,WAAW;CACtB,CAAC,CAAA"}

package/dist/harness/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/harness/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAEtE,oDAAoD;AACpD,MAAM,WAAW,eAAe;IAC9B,+BAA+B;IAC/B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,mDAAmD;IACnD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,+DAA+D;IAC/D,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/C;;;OAGG;IACH,WAAW,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAClG,4FAA4F;IAC5F,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;CAC/D;AAED,4DAA4D;AAC5D,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAmB5D,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/harness/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAEtE,oDAAoD;AACpD,MAAM,WAAW,eAAe;IAC9B,+BAA+B;IAC/B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,mDAAmD;IACnD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,+DAA+D;IAC/D,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/C;;;OAGG;IACH,WAAW,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAClG,4FAA4F;IAC5F,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;CAC/D;AAED,4DAA4D;AAC5D,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAyF5D,CAAA"}

package/dist/harness/types.js

@@ -28,5 +28,75 @@ export const HARNESS_CONFIG_FILES = {
     'claude-desktop': '',
     'goose': '',
     'open-webui': '',
+    'langgraph': '.env.intutic',
+    // Muse Code reads AGENTS.md (falling back to CLAUDE.md) — see muse.ts.
+    'muse-code': 'AGENTS.md',
+    // AGENTS.md is Grok Build's native rules file — the same cross-tool
+    // convention Codex/Amp read. Delivered via the generic markdown formatter
+    // (`buildMarkdownContent`/`formatMarkdown`) every `---`-separated rules
+    // file in this codebase already shares (Cursor, Claude Code, Windsurf,
+    // GitHub Copilot) — not a bespoke format.
+    'grok': 'AGENTS.md',
+    // OpenCode reads AGENTS.md (CLAUDE.md fallback) — see opencode.ts. The gate
+    // is the plugin `openCodeHooks.ts` generates, not this file.
+    'opencode': 'AGENTS.md',
+    // dsh has no workspace-relative rules file in the research this phase could
+    // verify — its config lives entirely under $DSH_HOME (profiles/*/cordis.patch.yml,
+    // settings.yaml), not the project workspace. Empty, matching goose/cline/
+    // continue/claude-desktop/open-webui's precedent for "no single canonical
+    // file" harnesses; dsh.ts's own adapter resolves its real paths directly.
+    'dsh': '',
+    // Xirp writes no config of its own — see xirp.ts's module doc. It
+    // orchestrates other already-gated harnesses (Claude Code, Codex,
+    // Antigravity/Gemini CLI), whose own adapters do the real writing.
+    'xirp': '',
+    // Agentic Orchestrator writes no config of its own — see
+    // agenticOrchestrator.ts's module doc. It orchestrates other CLI backends
+    // (Claude Code, Codex, OpenCode), whose own adapters do the real writing.
+    'agentic-orchestrator': '',
+    // Wave 1 SDK-gated frameworks — same rationale as langgraph above: no
+    // on-disk hook/config file exists to gate tool calls, so each of these
+    // writes .env.intutic (proxy base-URL vars + an SDK-gate pointer comment).
+    'langchain': '.env.intutic',
+    'crewai': '.env.intutic',
+    'autogen': '.env.intutic',
+    'ag2': '.env.intutic',
+    'google-adk': '.env.intutic',
+    'openai-agents': '.env.intutic',
+    'pydantic-ai': '.env.intutic',
+    'smolagents': '.env.intutic',
+    // A4: AWS Strands Agents — same Python SDK-gated rationale as the Wave 1
+    // family above (gate ships in intutic_clawde.gate.adapters.strands).
+    'strands': '.env.intutic',
+    // T2: JS/TS SDK-gated frameworks — same rationale as the Wave 1 Python
+    // family above, but the blocking gate ships in @intutic/gate
+    // (packages/gate-js) rather than intutic-clawde.
+    'mastra': '.env.intutic',
+    'vercel-ai-sdk': '.env.intutic',
+    // eve (Vercel, PREVIEW) — same JS/TS SDK-gated family; detection is a
+    // compound `eve` dep + `agent/` directory check — see eve.ts.
+    'eve': '.env.intutic',
+    // TrueForge (embedded-library mode only — see trueforge.ts's module doc
+    // and the HarnessType.TRUEFORGE doc comment); same JS/TS SDK-gated family.
+    'trueforge': '.env.intutic',
+    // A3: Vercel platform-agent runtimes — same @intutic/gate family. Note the
+    // env vars are weaker still for ai-sdk-harness (tool execution is
+    // server-side in Vercel Sandbox microVMs; see aiSdkHarness.ts's module doc
+    // and the envPreamble override it carries).
+    'ai-sdk-harness': '.env.intutic',
+    'ai-sdk-workflow': '.env.intutic',
+    // B2: AWS Bedrock AgentCore Runtime — hosts the customer's own framework
+    // code unchanged; the actual tool-call gate belongs to whichever
+    // already-supported framework adapter that code uses (Strands, LangGraph,
+    // ...), same 'delegated'/no-file-of-its-own shape as xirp/
+    // agentic-orchestrator above. See agentcore.ts's module doc.
+    'agentcore-runtime': '',
+    // B3: TrueForge, standalone/hosted server (see the HarnessType.TRUEFORGE_SERVER
+    // doc comment) — no CLI adapter exists for this row at all: it is an
+    // operator-configured deployment, not a package.json dependency of
+    // whatever repo `intutic init` runs against, so there is nothing for this
+    // detector to find and no config file to write. Governed entirely by
+    // services/trueforge-bridge instead (GateKind: 'bridge').
+    'trueforge-server': '',
 };
 //# sourceMappingURL=types.js.map

package/dist/harness/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/harness/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAqBH,4DAA4D;AAC5D,MAAM,CAAC,MAAM,oBAAoB,GAAgC;IAC/D,QAAQ,EAAE,cAAc;IACxB,aAAa,EAAE,WAAW;IAC1B,aAAa,EAAE,uBAAuB;IACtC,UAAU,EAAE,gBAAgB;IAC5B,OAAO,EAAE,iBAAiB;IAC1B,WAAW,EAAE,aAAa;IAC1B,OAAO,EAAE,cAAc;IACvB,KAAK,EAAE,EAAE,EAAE,6CAA6C;IACxD,UAAU,EAAE,yBAAyB;IACrC,QAAQ,EAAE,qBAAqB;IAC/B,IAAI,EAAE,gBAAgB;IACtB,gBAAgB,EAAE,iCAAiC;IACnD,OAAO,EAAE,EAAE;IACX,UAAU,EAAE,EAAE;IACd,UAAU,EAAE,EAAE;IACd,gBAAgB,EAAE,EAAE;IACpB,OAAO,EAAE,EAAE;IACX,YAAY,EAAE,EAAE;CACjB,CAAA"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/harness/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAqBH,4DAA4D;AAC5D,MAAM,CAAC,MAAM,oBAAoB,GAAgC;IAC/D,QAAQ,EAAE,cAAc;IACxB,aAAa,EAAE,WAAW;IAC1B,aAAa,EAAE,uBAAuB;IACtC,UAAU,EAAE,gBAAgB;IAC5B,OAAO,EAAE,iBAAiB;IAC1B,WAAW,EAAE,aAAa;IAC1B,OAAO,EAAE,cAAc;IACvB,KAAK,EAAE,EAAE,EAAE,6CAA6C;IACxD,UAAU,EAAE,yBAAyB;IACrC,QAAQ,EAAE,qBAAqB;IAC/B,IAAI,EAAE,gBAAgB;IACtB,gBAAgB,EAAE,iCAAiC;IACnD,OAAO,EAAE,EAAE;IACX,UAAU,EAAE,EAAE;IACd,UAAU,EAAE,EAAE;IACd,gBAAgB,EAAE,EAAE;IACpB,OAAO,EAAE,EAAE;IACX,YAAY,EAAE,EAAE;IAChB,WAAW,EAAE,cAAc;IAC3B,uEAAuE;IACvE,WAAW,EAAE,WAAW;IACxB,oEAAoE;IACpE,0EAA0E;IAC1E,wEAAwE;IACxE,uEAAuE;IACvE,0CAA0C;IAC1C,MAAM,EAAE,WAAW;IACnB,4EAA4E;IAC5E,6DAA6D;IAC7D,UAAU,EAAE,WAAW;IACvB,4EAA4E;IAC5E,mFAAmF;IACnF,0EAA0E;IAC1E,0EAA0E;IAC1E,0EAA0E;IAC1E,KAAK,EAAE,EAAE;IACT,kEAAkE;IAClE,kEAAkE;IAClE,mEAAmE;IACnE,MAAM,EAAE,EAAE;IACV,yDAAyD;IACzD,0EAA0E;IAC1E,0EAA0E;IAC1E,sBAAsB,EAAE,EAAE;IAC1B,sEAAsE;IACtE,uEAAuE;IACvE,2EAA2E;IAC3E,WAAW,EAAE,cAAc;IAC3B,QAAQ,EAAE,cAAc;IACxB,SAAS,EAAE,cAAc;IACzB,KAAK,EAAE,cAAc;IACrB,YAAY,EAAE,cAAc;IAC5B,eAAe,EAAE,cAAc;IAC/B,aAAa,EAAE,cAAc;IAC7B,YAAY,EAAE,cAAc;IAC5B,yEAAyE;IACzE,qEAAqE;IACrE,SAAS,EAAE,cAAc;IACzB,uEAAuE;IACvE,6DAA6D;IAC7D,iDAAiD;IACjD,QAAQ,EAAE,cAAc;IACxB,eAAe,EAAE,cAAc;IAC/B,sEAAsE;IACtE,8DAA8D;IAC9D,KAAK,EAAE,cAAc;IACrB,wEAAwE;IACxE,2EAA2E;IAC3E,WAAW,EAAE,cAAc;IAC3B,2EAA2E;IAC3E,kEAAkE;IAClE,2EAA2E;IAC3E,4CAA4C;IAC5C,gBAAgB,EAAE,cAAc;IAChC,iBAAiB,EAAE,cAAc;IACjC,yEAAyE;IACzE,iEAAiE;IACjE,0EAA0E;IAC1E,2DAA2D;IAC3D,6DAA6D;IAC7D,mBAAmB,EAAE,EAAE;IACvB,gFAAgF;IAChF,qEAAqE;IACrE,mEAAmE;IACnE,0EAA0E;IAC1E,qEAAqE;IACrE,0DAA0D;IAC1D,kBAAkB,EAAE,EAAE;CACvB,CAAA"}

package/dist/harness/vercelAiSdk.d.ts

@@ -0,0 +1,31 @@
+/**
+ * vercelAiSdk.ts — Vercel AI SDK adapter (env-file config, SDK-side gate).
+ *
+ * Same shape as langgraph.ts's Python-side siblings (see
+ * jsSdkGatedAdapter.ts), but JS/TS-native: detected via `ai` at major
+ * version >= 6 (the `toolApproval` veto point this points at is a v6+ API —
+ * a bare `ai` presence check would false-positive on pre-6 workspaces whose
+ * tool-loop surface does not have this hook at all) PLUS at least one
+ * `@ai-sdk/*` provider package, since `ai` alone declares the tool-loop
+ * surface but ships no model provider.
+ *
+ * DOCUMENTED LIMITATION carried into the generated `.env.intutic`: unlike
+ * every other harness this env-file convention covers, the Vercel AI SDK
+ * has no environment-variable LLM-egress override — the written
+ * `ANTHROPIC_BASE_URL`/`OPENAI_BASE_URL`/`INTUTIC_PROXY_URL` vars are
+ * therefore INERT for this framework's own LLM calls (a plain `source
+ * .env.intutic` does nothing for `ai`) unless the caller's own provider
+ * construction reads them explicitly — routing requires in-code
+ * `createOpenAI({ baseURL })`/`createGateway({ baseURL })` via
+ * `@intutic/gate/vercel`'s `withIntuticProxy()`. The vars are still
+ * written (a workspace may run OTHER harnesses that DO honour them, or a
+ * caller may wire them in manually), but this is not a "zero-code" proxy
+ * hookup the way it is for `langchain`/`langgraph`. See
+ * `@intutic/gate/vercel`'s module doc and
+ * `apps/docs/integrations/vercel-ai-sdk.md`.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+export declare const vercelAiSdkAdapter: import("./types.js").IHarnessAdapter;
+//# sourceMappingURL=vercelAiSdk.d.ts.map

package/dist/harness/vercelAiSdk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercelAiSdk.d.ts","sourceRoot":"","sources":["../../src/harness/vercelAiSdk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAKH,eAAO,MAAM,kBAAkB,sCAY7B,CAAA"}

package/dist/harness/vercelAiSdk.js

@@ -0,0 +1,44 @@
+/**
+ * vercelAiSdk.ts — Vercel AI SDK adapter (env-file config, SDK-side gate).
+ *
+ * Same shape as langgraph.ts's Python-side siblings (see
+ * jsSdkGatedAdapter.ts), but JS/TS-native: detected via `ai` at major
+ * version >= 6 (the `toolApproval` veto point this points at is a v6+ API —
+ * a bare `ai` presence check would false-positive on pre-6 workspaces whose
+ * tool-loop surface does not have this hook at all) PLUS at least one
+ * `@ai-sdk/*` provider package, since `ai` alone declares the tool-loop
+ * surface but ships no model provider.
+ *
+ * DOCUMENTED LIMITATION carried into the generated `.env.intutic`: unlike
+ * every other harness this env-file convention covers, the Vercel AI SDK
+ * has no environment-variable LLM-egress override — the written
+ * `ANTHROPIC_BASE_URL`/`OPENAI_BASE_URL`/`INTUTIC_PROXY_URL` vars are
+ * therefore INERT for this framework's own LLM calls (a plain `source
+ * .env.intutic` does nothing for `ai`) unless the caller's own provider
+ * construction reads them explicitly — routing requires in-code
+ * `createOpenAI({ baseURL })`/`createGateway({ baseURL })` via
+ * `@intutic/gate/vercel`'s `withIntuticProxy()`. The vars are still
+ * written (a workspace may run OTHER harnesses that DO honour them, or a
+ * caller may wire them in manually), but this is not a "zero-code" proxy
+ * hookup the way it is for `langchain`/`langgraph`. See
+ * `@intutic/gate/vercel`'s module doc and
+ * `apps/docs/integrations/vercel-ai-sdk.md`.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import { HarnessType } from '@intutic/shared-types';
+import { makeJsSdkGatedAdapter } from './jsSdkGatedAdapter.js';
+export const vercelAiSdkAdapter = makeJsSdkGatedAdapter({
+    type: HarnessType.VERCEL_AI_SDK,
+    label: 'Vercel AI SDK',
+    requires: [{ name: 'ai', minMajor: 6 }],
+    requiresPrefix: '@ai-sdk/',
+    npmInstall: '@intutic/gate',
+    importLine: "import { intuticToolApproval, withIntuticProxy } from '@intutic/gate/vercel'",
+    usageSummary: 'generateText({ ..., toolApproval: intuticToolApproval() }) — the toolApproval veto point. ' +
+        'NOTE: this framework has NO env-var LLM-egress routing; use withIntuticProxy(createOpenAI)( ' +
+        '...) or equivalent in code — the env vars above do not route this framework on their own.',
+    docsSlug: 'vercel-ai-sdk',
+});
+//# sourceMappingURL=vercelAiSdk.js.map

package/dist/harness/vercelAiSdk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercelAiSdk.js","sourceRoot":"","sources":["../../src/harness/vercelAiSdk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAE9D,MAAM,CAAC,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;IACtD,IAAI,EAAE,WAAW,CAAC,aAAa;IAC/B,KAAK,EAAE,eAAe;IACtB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACvC,cAAc,EAAE,UAAU;IAC1B,UAAU,EAAE,eAAe;IAC3B,UAAU,EAAE,8EAA8E;IAC1F,YAAY,EACV,4FAA4F;QAC5F,8FAA8F;QAC9F,2FAA2F;IAC7F,QAAQ,EAAE,eAAe;CAC1B,CAAC,CAAA"}

package/dist/harness/xirp.d.ts

@@ -0,0 +1,43 @@
+/**
+ * xirp.ts — Spotify "Xirp" adapter (macOS-only desktop orchestrator, beta
+ * since 2026-08-11).
+ *
+ * Xirp is NOT itself an AI agent — it is an orchestrator that spawns one or
+ * more ALREADY-INSTALLED CLI coding agents (Claude Code, Codex, Gemini CLI)
+ * each inside its own tmux session and `git worktree`, so a developer can run
+ * several parallel agent sessions against the same repository without their
+ * working-tree state colliding. Per Xirp's own public FAQ, it preserves each
+ * wrapped harness's NATIVE, UNMODIFIED configuration — it introduces no
+ * config format of its own for Intutic to parse or gate.
+ *
+ * That means this adapter exists for DETECTION/reporting only. `writeConfig`
+ * writes nothing: whatever Intutic already writes for the wrapped harness
+ * (`claudeCode.ts` / `codex.ts` / `antigravity.ts`'s own adapters) is what
+ * governs a tool call made inside a Xirp-managed session — PROVIDED those
+ * files actually reach the git worktree Xirp creates for that session, which
+ * they do not by default: a worktree checkout has its own independent
+ * working tree, and project-tier governance files are untracked. Part B of
+ * the phase that added this adapter (`services/sync-daemon/src/lib/
+ * gitWorktrees.ts` + its wiring into `syncLoop.ts`) is what closes that gap;
+ * this adapter's only job is recognising that a Xirp-managed workspace is
+ * present at all, so `intutic status`/`intutic init` can report it.
+ *
+ * See `services/sync-daemon/__tests__/harness/gateRegistry.ts`'s NO_GATE row
+ * for `xirp` for the full governance rationale, and
+ * `apps/docs/integrations/xirp.md` for user-facing docs.
+ *
+ * # Unconfirmed facts (flagged, not silently assumed)
+ *
+ * Xirp is a macOS-only beta app with no CLI/npm package and no public
+ * download available in this environment, so none of the detection paths
+ * below were live-verified against a real install — they follow this
+ * codebase's own convention for comparable tools (`~/.grok`, `~/.muse`,
+ * `<Name>.app` in `/Applications`) rather than a confirmed Xirp source. See
+ * TD-390.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import type { IHarnessAdapter } from './types.js';
+export declare const xirpAdapter: IHarnessAdapter;
+//# sourceMappingURL=xirp.d.ts.map

package/dist/harness/xirp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xirp.d.ts","sourceRoot":"","sources":["../../src/harness/xirp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAOjD,eAAO,MAAM,WAAW,EAAE,eAgDzB,CAAA"}

package/dist/harness/xirp.js

@@ -0,0 +1,95 @@
+/**
+ * xirp.ts — Spotify "Xirp" adapter (macOS-only desktop orchestrator, beta
+ * since 2026-08-11).
+ *
+ * Xirp is NOT itself an AI agent — it is an orchestrator that spawns one or
+ * more ALREADY-INSTALLED CLI coding agents (Claude Code, Codex, Gemini CLI)
+ * each inside its own tmux session and `git worktree`, so a developer can run
+ * several parallel agent sessions against the same repository without their
+ * working-tree state colliding. Per Xirp's own public FAQ, it preserves each
+ * wrapped harness's NATIVE, UNMODIFIED configuration — it introduces no
+ * config format of its own for Intutic to parse or gate.
+ *
+ * That means this adapter exists for DETECTION/reporting only. `writeConfig`
+ * writes nothing: whatever Intutic already writes for the wrapped harness
+ * (`claudeCode.ts` / `codex.ts` / `antigravity.ts`'s own adapters) is what
+ * governs a tool call made inside a Xirp-managed session — PROVIDED those
+ * files actually reach the git worktree Xirp creates for that session, which
+ * they do not by default: a worktree checkout has its own independent
+ * working tree, and project-tier governance files are untracked. Part B of
+ * the phase that added this adapter (`services/sync-daemon/src/lib/
+ * gitWorktrees.ts` + its wiring into `syncLoop.ts`) is what closes that gap;
+ * this adapter's only job is recognising that a Xirp-managed workspace is
+ * present at all, so `intutic status`/`intutic init` can report it.
+ *
+ * See `services/sync-daemon/__tests__/harness/gateRegistry.ts`'s NO_GATE row
+ * for `xirp` for the full governance rationale, and
+ * `apps/docs/integrations/xirp.md` for user-facing docs.
+ *
+ * # Unconfirmed facts (flagged, not silently assumed)
+ *
+ * Xirp is a macOS-only beta app with no CLI/npm package and no public
+ * download available in this environment, so none of the detection paths
+ * below were live-verified against a real install — they follow this
+ * codebase's own convention for comparable tools (`~/.grok`, `~/.muse`,
+ * `<Name>.app` in `/Applications`) rather than a confirmed Xirp source. See
+ * TD-390.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import { access } from 'node:fs/promises';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { HarnessType } from '@intutic/shared-types';
+/** Best-effort assumed default — see module doc's "Unconfirmed facts". */
+const XIRP_HOME_FRAGMENT = '.xirp';
+/** Best-effort assumed default — see module doc's "Unconfirmed facts". */
+const XIRP_APP_PATH = '/Applications/Xirp.app';
+export const xirpAdapter = {
+    type: HarnessType.XIRP,
+    // No config file of its own — see module doc. Matches the goose/cline-
+    // style convention of an empty HARNESS_CONFIG_FILES entry for a harness
+    // whose governance-relevant writes are not a single named file (in Xirp's
+    // case: no writes of its own at all).
+    configFileName: '',
+    async detect(_workspaceRoot) {
+        // Xirp is macOS-only (per its own FAQ) — guard before touching any
+        // macOS-specific path so this adapter is a clean no-op elsewhere.
+        if (process.platform !== 'darwin')
+            return false;
+        // 1. `$XIRP_HOME` env var, if the user (or Xirp itself) has set one.
+        const envHome = process.env.XIRP_HOME;
+        if (envHome) {
+            try {
+                await access(envHome);
+                return true;
+            }
+            catch { /* fall through */ }
+        }
+        // 2. `~/.xirp` — assumed default install/state directory.
+        try {
+            await access(join(homedir(), XIRP_HOME_FRAGMENT));
+            return true;
+        }
+        catch { /* fall through */ }
+        // 3. `Xirp.app` installed in /Applications.
+        try {
+            await access(XIRP_APP_PATH);
+            return true;
+        }
+        catch { /* fall through */ }
+        return false;
+    },
+    // Xirp introduces no config format of its own — see module doc. Nothing to
+    // write; the wrapped harness's own adapter is what writes real governance
+    // content, once per worktree Xirp creates (the sync daemon's worktree
+    // propagation, not this adapter).
+    async writeConfig(_workspaceRoot, _sops, _proxyUrl) {
+        return null;
+    },
+    async readCurrentHash(_workspaceRoot) {
+        return null;
+    },
+};
+//# sourceMappingURL=xirp.js.map

package/dist/harness/xirp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xirp.js","sourceRoot":"","sources":["../../src/harness/xirp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAInD,0EAA0E;AAC1E,MAAM,kBAAkB,GAAG,OAAO,CAAA;AAClC,0EAA0E;AAC1E,MAAM,aAAa,GAAG,wBAAwB,CAAA;AAE9C,MAAM,CAAC,MAAM,WAAW,GAAoB;IAC1C,IAAI,EAAE,WAAW,CAAC,IAAI;IACtB,uEAAuE;IACvE,wEAAwE;IACxE,0EAA0E;IAC1E,sCAAsC;IACtC,cAAc,EAAE,EAAE;IAElB,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,mEAAmE;QACnE,kEAAkE;QAClE,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QAE/C,qEAAqE;QACrE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAA;QACrC,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,OAAO,CAAC,CAAA;gBACrB,OAAO,IAAI,CAAA;YACb,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAChC,CAAC;QAED,0DAA0D;QAC1D,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAA;YACjD,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAE9B,4CAA4C;QAC5C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,aAAa,CAAC,CAAA;YAC3B,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAE9B,OAAO,KAAK,CAAA;IACd,CAAC;IAED,2EAA2E;IAC3E,0EAA0E;IAC1E,sEAAsE;IACtE,kCAAkC;IAClC,KAAK,CAAC,WAAW,CAAC,cAAsB,EAAE,KAAqB,EAAE,SAAiB;QAChF,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,cAAsB;QAC1C,OAAO,IAAI,CAAA;IACb,CAAC;CACF,CAAA"}

package/dist/lib/api.d.ts

@@ -33,10 +33,49 @@ export interface ApiClient {
     }>;
     /** Generic GET request for arbitrary API paths. */
     get<T>(path: string): Promise<T>;
+    /**
+     * GET that hands back the status instead of throwing on it.
+     *
+     * For endpoints where a non-2xx *is* the answer: `/api/v1/integrity/chain`
+     * returns 409 with the whole chain walk in the body when a root names a
+     * predecessor that is not there. `get()` throws on any non-2xx, which would
+     * leave the caller digging the break out of an error message.
+     */
+    getWithStatus<T>(path: string): Promise<{
+        status: number;
+        body: T;
+    }>;
     /** Generic POST request for arbitrary API paths. */
     post<T>(path: string, body?: unknown): Promise<T>;
+    /**
+     * POST that hands back the status instead of throwing on it.
+     *
+     * Same rationale as `getWithStatus`: `POST /api/v1/wasm-rules/:id/replay`
+     * returns 422 with `{error: 'not_enough_traffic', contextCount, minRequired}`
+     * when the workspace has too little sampled history, and that body is the
+     * answer a caller needs to report, not a failure to unwrap and discard.
+     */
+    postWithStatus<T>(path: string, body?: unknown): Promise<{
+        status: number;
+        body: T;
+    }>;
+    /**
+     * Multipart POST that hands back the status.
+     *
+     * `POST /api/v1/rule-candidates/:id/bundle` reads a `file` field and a
+     * `source_sha256` field; `post()` JSON-encodes, so it cannot carry either.
+     * The content type is left to `fetch`, which writes the boundary.
+     */
+    postForm<T>(path: string, form: FormData): Promise<{
+        status: number;
+        body: T;
+    }>;
     /** Generic PUT request for arbitrary API paths. */
     put<T>(path: string, body?: unknown): Promise<T>;
+    /** Generic PATCH request for arbitrary API paths. */
+    patch<T>(path: string, body?: unknown): Promise<T>;
+    /** Generic DELETE request for arbitrary API paths. */
+    del<T>(path: string, body?: unknown): Promise<T>;
 }
 /**
  * Create an API client bound to a control plane URL and API key.
@@ -45,4 +84,33 @@ export interface ApiClient {
  * @param apiKey - API key (vk_*) or JWT access token
  */
 export declare function createApiClient(controlPlaneUrl: string, apiKey: string): ApiClient;
+/**
+ * Decodes a TOON payload, normalising "not TOON" to an empty list.
+ *
+ * The format lives in `@intutic/shared-types`, imported rather than copied. It
+ * used to be a private `splitCells` here, byte-identical to one in the dashboard
+ * and a third in the control plane, with a comment in each saying they must not
+ * diverge. They did — an escaping fix reached the encoder and the control
+ * plane's own decoder, which nothing calls, while these two kept the old code
+ * and a CRITICAL incident carried on printing as its trace id.
+ *
+ * The shared decoder returns `null` for input that is not TOON; this surface has
+ * always returned a list, and its caller assigns the result straight onto the
+ * response object, so the shape is preserved here rather than pushed outward.
+ */
+export declare function toonDecode(toon: string): Record<string, unknown>[];
+/**
+ * Move a TOON-encoded list out of its envelope and onto `listProperty`.
+ *
+ * Extracted from `request` because it was inline and therefore untestable, and
+ * it was wrong: the old code assigned the decoded rows and only THEN deleted
+ * `data`. `listProperty` names where the rows should land, and for
+ * `/api/v1/incidents` that name IS `data` — so the rows were written and
+ * immediately deleted, and any incidents response over the 20-row TOON
+ * threshold arrived as `{meta:{total:22}}`. Zero rows, no error.
+ * `/api/v1/traces` escaped only because its listProperty is `traces`.
+ *
+ * Non-TOON bodies pass through untouched.
+ */
+export declare function unwrapToonEnvelope(data: unknown): unknown;
 //# sourceMappingURL=api.d.ts.map

package/dist/lib/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/lib/api.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACd,MAAM,uBAAuB,CAAA;AAE9B,kDAAkD;AAClD,MAAM,WAAW,SAAS;IACxB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAC5D,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACpF,YAAY,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACpE,KAAK,IAAI,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACxF,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACpJ,mDAAmD;IACnD,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IAChC,oDAAoD;IACpD,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IACjD,mDAAmD;IACnD,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;CACjD;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,CAuElF"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/lib/api.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACd,MAAM,uBAAuB,CAAA;AAI9B,kDAAkD;AAClD,MAAM,WAAW,SAAS;IACxB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAC5D,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACpF,YAAY,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACpE,KAAK,IAAI,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACxF,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACpJ,mDAAmD;IACnD,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IAChC;;;;;;;OAOG;IACH,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,CAAC,CAAA;KAAE,CAAC,CAAA;IACpE,oDAAoD;IACpD,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IACjD;;;;;;;OAOG;IACH,cAAc,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,CAAC,CAAA;KAAE,CAAC,CAAA;IACrF;;;;;;OAMG;IACH,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,CAAC,CAAA;KAAE,CAAC,CAAA;IAC/E,mDAAmD;IACnD,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IAChD,qDAAqD;IACrD,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IAClD,sDAAsD;IACtD,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;CACjD;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,CAmHlF;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAElE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAmBzD"}