@intutic/cli 1.9.0 → 1.10.1

package/dist/harness/crewai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crewai.js","sourceRoot":"","sources":["../../src/harness/crewai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAE1D,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAAC;IAC/C,IAAI,EAAE,WAAW,CAAC,MAAM;IACxB,KAAK,EAAE,QAAQ;IACf,QAAQ,EAAE,CAAC,QAAQ,CAAC;IACpB,UAAU,EAAE,wBAAwB;IACpC,UAAU,EAAE,yDAAyD;IACrE,YAAY,EACV,mFAAmF;QACnF,iBAAiB;IACnB,QAAQ,EAAE,QAAQ;CACnB,CAAC,CAAA"}

package/dist/harness/detector.d.ts

@@ -1,7 +1,7 @@
 /**
  * Harness detector — auto-detect which AI harnesses are present.
  *
- * Instantiates all 18 adapters and checks each for presence in
+ * Instantiates all 40 adapters and checks each for presence in
  * the workspace. Returns a DetectedHarness array for reporting.
  *
  * HLD §3.14 — Harness Onboarding Matrix

package/dist/harness/detector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"detector.d.ts","sourceRoot":"","sources":["../../src/harness/detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAqBjD,uCAAuC;AACvC,eAAO,MAAM,YAAY,EAAE,eAAe,EAmBzC,CAAA;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAgBvF;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAEpE"}
+{"version":3,"file":"detector.d.ts","sourceRoot":"","sources":["../../src/harness/detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AA4CjD,uCAAuC;AACvC,eAAO,MAAM,YAAY,EAAE,eAAe,EA0CzC,CAAA;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAgBvF;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAEpE"}

package/dist/harness/detector.js

@@ -1,7 +1,7 @@
 /**
  * Harness detector — auto-detect which AI harnesses are present.
  *
- * Instantiates all 18 adapters and checks each for presence in
+ * Instantiates all 40 adapters and checks each for presence in
  * the workspace. Returns a DetectedHarness array for reporting.
  *
  * HLD §3.14 — Harness Onboarding Matrix
@@ -26,6 +26,29 @@ import { openclawAdapter } from './openclaw.js';
 import { piAdapter } from './pi.js';
 import { hermesAdapter } from './hermes.js';
 import { githubCopilotAdapter } from './githubCopilot.js';
+import { langgraphAdapter } from './langgraph.js';
+import { museAdapter } from './muse.js';
+import { grokAdapter } from './grok.js';
+import { opencodeAdapter } from './opencode.js';
+import { dshAdapter } from './dsh.js';
+import { xirpAdapter } from './xirp.js';
+import { agenticOrchestratorAdapter } from './agenticOrchestrator.js';
+import { langchainAdapter } from './langchain.js';
+import { crewaiAdapter } from './crewai.js';
+import { autogenAdapter } from './autogen.js';
+import { ag2Adapter } from './ag2.js';
+import { googleAdkAdapter } from './googleAdk.js';
+import { openaiAgentsAdapter } from './openaiAgents.js';
+import { pydanticAiAdapter } from './pydanticAi.js';
+import { smolagentsAdapter } from './smolagents.js';
+import { strandsAdapter } from './strands.js';
+import { mastraAdapter } from './mastra.js';
+import { vercelAiSdkAdapter } from './vercelAiSdk.js';
+import { eveAdapter } from './eve.js';
+import { trueforgeAdapter } from './trueforge.js';
+import { aiSdkHarnessAdapter } from './aiSdkHarness.js';
+import { aiSdkWorkflowAdapter } from './aiSdkWorkflow.js';
+import { agentcoreAdapter } from './agentcore.js';
 import { join } from 'node:path';
 /** All registered harness adapters. */
 export const ALL_ADAPTERS = [
@@ -47,6 +70,29 @@ export const ALL_ADAPTERS = [
     piAdapter,
     hermesAdapter,
     githubCopilotAdapter,
+    langgraphAdapter,
+    museAdapter,
+    grokAdapter,
+    opencodeAdapter,
+    dshAdapter,
+    xirpAdapter,
+    agenticOrchestratorAdapter,
+    langchainAdapter,
+    crewaiAdapter,
+    autogenAdapter,
+    ag2Adapter,
+    googleAdkAdapter,
+    openaiAgentsAdapter,
+    pydanticAiAdapter,
+    smolagentsAdapter,
+    strandsAdapter,
+    mastraAdapter,
+    vercelAiSdkAdapter,
+    eveAdapter,
+    trueforgeAdapter,
+    aiSdkHarnessAdapter,
+    aiSdkWorkflowAdapter,
+    agentcoreAdapter,
 ];
 /**
  * Detect which harnesses are present in a workspace.

package/dist/harness/detector.js.map

@@ -1 +1 @@
-{"version":3,"file":"detector.js","sourceRoot":"","sources":["../../src/harness/detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,uCAAuC;AACvC,MAAM,CAAC,MAAM,YAAY,GAAsB;IAC7C,aAAa;IACb,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,YAAY;IACZ,gBAAgB;IAChB,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,cAAc;IACd,eAAe;IACf,oBAAoB;IACpB,YAAY;IACZ,gBAAgB;IAChB,eAAe;IACf,SAAS;IACT,aAAa;IACb,oBAAoB;CACrB,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,aAAqB;IACzD,MAAM,OAAO,GAAsB,EAAE,CAAA;IAErC,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QACpD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,UAAU,EAAE,OAAO,CAAC,cAAc;gBAChC,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,cAAc,CAAC;gBAC7C,CAAC,CAAC,EAAE;YACN,QAAQ;YACR,WAAW,EAAE,IAAI;SAClB,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;AAClD,CAAC"}
+{"version":3,"file":"detector.js","sourceRoot":"","sources":["../../src/harness/detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAA;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,uCAAuC;AACvC,MAAM,CAAC,MAAM,YAAY,GAAsB;IAC7C,aAAa;IACb,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,YAAY;IACZ,gBAAgB;IAChB,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,cAAc;IACd,eAAe;IACf,oBAAoB;IACpB,YAAY;IACZ,gBAAgB;IAChB,eAAe;IACf,SAAS;IACT,aAAa;IACb,oBAAoB;IACpB,gBAAgB;IAChB,WAAW;IACX,WAAW;IACX,eAAe;IACf,UAAU;IACV,WAAW;IACX,0BAA0B;IAC1B,gBAAgB;IAChB,aAAa;IACb,cAAc;IACd,UAAU;IACV,gBAAgB;IAChB,mBAAmB;IACnB,iBAAiB;IACjB,iBAAiB;IACjB,cAAc;IACd,aAAa;IACb,kBAAkB;IAClB,UAAU;IACV,gBAAgB;IAChB,mBAAmB;IACnB,oBAAoB;IACpB,gBAAgB;CACjB,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,aAAqB;IACzD,MAAM,OAAO,GAAsB,EAAE,CAAA;IAErC,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QACpD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,UAAU,EAAE,OAAO,CAAC,cAAc;gBAChC,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,cAAc,CAAC;gBAC7C,CAAC,CAAC,EAAE;YACN,QAAQ;YACR,WAAW,EAAE,IAAI;SAClB,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;AAClD,CAAC"}

package/dist/harness/dsh.d.ts

@@ -0,0 +1,19 @@
+/**
+ * dsh.ts — DeepSeek "dsh" adapter (binary `dsh`, `@deepseek-ai/dsh`,
+ * developer preview since 2026-08-13).
+ *
+ * dsh is plugin-first (Cordis) and has no workspace-relative rules file this
+ * adapter could write governance text into (see `types.ts`'s
+ * `HARNESS_CONFIG_FILES.dsh`). The governance-critical half — the
+ * `tools/pre-execute` Cordis plugin registration (`cordis.patch.yml` per
+ * profile), the profile's `@intutic/gate` dependency, and the `settings.yaml`
+ * `llm-pi-ai` proxy route — is delegated entirely to
+ * `@intutic/sync-daemon`'s `dshHooks.ts`, the same split Goose/Muse Code's
+ * adapters use for their own plugin installation.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import type { IHarnessAdapter } from './types.js';
+export declare const dshAdapter: IHarnessAdapter;
+//# sourceMappingURL=dsh.d.ts.map

package/dist/harness/dsh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dsh.d.ts","sourceRoot":"","sources":["../../src/harness/dsh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAMH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAGjD,eAAO,MAAM,UAAU,EAAE,eA2ExB,CAAA"}

package/dist/harness/dsh.js

@@ -0,0 +1,93 @@
+/**
+ * dsh.ts — DeepSeek "dsh" adapter (binary `dsh`, `@deepseek-ai/dsh`,
+ * developer preview since 2026-08-13).
+ *
+ * dsh is plugin-first (Cordis) and has no workspace-relative rules file this
+ * adapter could write governance text into (see `types.ts`'s
+ * `HARNESS_CONFIG_FILES.dsh`). The governance-critical half — the
+ * `tools/pre-execute` Cordis plugin registration (`cordis.patch.yml` per
+ * profile), the profile's `@intutic/gate` dependency, and the `settings.yaml`
+ * `llm-pi-ai` proxy route — is delegated entirely to
+ * `@intutic/sync-daemon`'s `dshHooks.ts`, the same split Goose/Muse Code's
+ * adapters use for their own plugin installation.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import { access } from 'node:fs/promises';
+import { join } from 'node:path';
+import { HarnessType } from '@intutic/shared-types';
+import { writeDshHooks, resolveDshHome, listDshProfileDirs } from '@intutic/sync-daemon/harness/dshHooks';
+export const dshAdapter = {
+    type: HarnessType.DEEPSEEK_HARNESS,
+    // No canonical workspace-relative config file — see types.ts's comment on
+    // this harness's HARNESS_CONFIG_FILES entry. detect/writeConfig/
+    // readCurrentHash below resolve dsh's real, $DSH_HOME-anchored paths
+    // directly, the same way goose.ts bypasses configFileName's
+    // workspaceRoot-join for its own home-anchored config.
+    configFileName: '',
+    async detect(_workspaceRoot) {
+        const dshHome = resolveDshHome();
+        // 1. `$DSH_HOME`/`~/.dsh` exists at all (settings.yaml, .credentials.yaml,
+        //    or profiles/ — any one of them means dsh has been run here before).
+        for (const marker of ['settings.yaml', '.credentials.yaml', 'profiles']) {
+            try {
+                await access(join(dshHome, marker));
+                return true;
+            }
+            catch {
+                /* not here */
+            }
+        }
+        // 2. `@deepseek-ai/dsh` on PATH (npm/pnpm global bin) or a local npx
+        //    cache entry — the same PATH-scan convention grok.ts/muse.ts use.
+        const pathDirs = (process.env.PATH ?? '').split(process.platform === 'win32' ? ';' : ':');
+        try {
+            const { accessSync } = await import('node:fs');
+            for (const dir of pathDirs) {
+                try {
+                    accessSync(join(dir, 'dsh'));
+                    return true;
+                }
+                catch {
+                    /* not here */
+                }
+            }
+        }
+        catch {
+            /* ignore */
+        }
+        // 3. npx's package cache (`~/.npm/_npx/*/node_modules/@deepseek-ai/dsh`) —
+        //    a developer who has only ever run `npx @deepseek-ai/dsh` without a
+        //    global install still leaves this behind. Best-effort: npx caches by
+        //    a content hash directory name this adapter cannot predict, so this
+        //    only catches the common `~/.npm/_npx` root existing AND dsh already
+        //    having created `$DSH_HOME` (marker 1 above already covers the
+        //    "actually run at least once" case) — listed for completeness with
+        //    the CLI adapters this mirrors, not as an independent signal.
+        return false;
+    },
+    async writeConfig(workspaceRoot, _sops, proxyUrl) {
+        // No rules/markdown file for dsh — `sops` are not consulted here (same
+        // "no text-rules file" posture as goose.ts's own adapter). The plugin
+        // registration + settings.yaml merge is the entirety of what this
+        // harness gets, and it happens for every existing profile, not one file.
+        await writeDshHooks(workspaceRoot, proxyUrl, '');
+        const dshHome = resolveDshHome();
+        const profiles = await listDshProfileDirs(dshHome);
+        // Representative path for the connect-summary UI, matching the "return
+        // the path written" contract every other adapter follows — the first
+        // profile's patch file when one exists, otherwise the $DSH_HOME root
+        // itself (nothing was written yet; the next sync cycle picks it up once
+        // a profile exists, per dshHooks.ts's own module doc).
+        return profiles.length > 0 ? join(profiles[0], 'cordis.patch.yml') : dshHome;
+    },
+    async readCurrentHash(_workspaceRoot) {
+        // No single canonical file to hash — dsh may have zero, one, or several
+        // profiles, each with its own cordis.patch.yml. Matching goose.ts/
+        // cline.ts's own "no rules file" precedent, this reports no hash rather
+        // than picking one arbitrary profile's file to represent all of them.
+        return null;
+    },
+};
+//# sourceMappingURL=dsh.js.map

package/dist/harness/dsh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dsh.js","sourceRoot":"","sources":["../../src/harness/dsh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAA;AAEzG,MAAM,CAAC,MAAM,UAAU,GAAoB;IACzC,IAAI,EAAE,WAAW,CAAC,gBAAgB;IAClC,0EAA0E;IAC1E,iEAAiE;IACjE,qEAAqE;IACrE,4DAA4D;IAC5D,uDAAuD;IACvD,cAAc,EAAE,EAAE;IAElB,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAA;QAEhC,2EAA2E;QAC3E,yEAAyE;QACzE,KAAK,MAAM,MAAM,IAAI,CAAC,eAAe,EAAE,mBAAmB,EAAE,UAAU,CAAC,EAAE,CAAC;YACxE,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;gBACnC,OAAO,IAAI,CAAA;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,sEAAsE;QACtE,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACzF,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;YAC9C,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,IAAI,CAAC;oBACH,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAA;oBAC5B,OAAO,IAAI,CAAA;gBACb,CAAC;gBAAC,MAAM,CAAC;oBACP,cAAc;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QAED,2EAA2E;QAC3E,wEAAwE;QACxE,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,mEAAmE;QACnE,uEAAuE;QACvE,kEAAkE;QAClE,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,KAAqB,EAAE,QAAgB;QAC9E,uEAAuE;QACvE,sEAAsE;QACtE,kEAAkE;QAClE,yEAAyE;QACzE,MAAM,aAAa,CAAC,aAAa,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;QAEhD,MAAM,OAAO,GAAG,cAAc,EAAE,CAAA;QAChC,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAA;QAClD,uEAAuE;QACvE,qEAAqE;QACrE,qEAAqE;QACrE,wEAAwE;QACxE,uDAAuD;QACvD,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;IAC/E,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,cAAsB;QAC1C,wEAAwE;QACxE,mEAAmE;QACnE,wEAAwE;QACxE,sEAAsE;QACtE,OAAO,IAAI,CAAA;IACb,CAAC;CACF,CAAA"}

package/dist/harness/eve.d.ts

@@ -0,0 +1,40 @@
+/**
+ * eve.ts — Vercel "eve" adapter (env-file config, SDK-side gate).
+ *
+ * Same family as mastra.ts/vercelAiSdk.ts (see jsSdkGatedAdapter.ts), with
+ * one difference the shared builder cannot express: detection is a COMPOUND
+ * check. The npm package name `eve` is short and generic enough that a
+ * dependency check alone over-detects, and `agent/` is a directory name half
+ * the JS ecosystem uses for something — so this adapter requires BOTH the
+ * `eve` dependency in `package.json` AND the framework's characteristic
+ * `agent/` directory at the workspace root (eve is filesystem-first: the
+ * agent IS that directory — `agent/instructions.md`, `agent/tools/*.ts`,
+ * `agent/hooks/`, ... — per eve's own getting-started layout). Implemented
+ * by wrapping the builder's adapter and tightening its `detect`, rather
+ * than growing the builder a one-consumer knob.
+ *
+ * No version floor: eve is pre-1.0 (0.39.x at integration time) and the
+ * `approval` surface `@intutic/gate/eve` targets has no known major-version
+ * boundary to gate on — the churn risk is handled by the gate package's own
+ * pinned devDependency verification instead (TD-410).
+ *
+ * PREVIEW-CHURN NOTE (same shield the dsh integration established): eve is a
+ * fast-moving preview product. `@intutic/gate/eve` was verified against
+ * eve@0.39.1's shipped `.d.ts` — see that module's doc for exactly what was
+ * confirmed vs. assumed, and docs/TECH_DEBT.md TD-410/TD-411/TD-412.
+ *
+ * LLM-egress note carried into the generated `.env.intutic`: eve routes
+ * models through the Vercel AI Gateway by default, whose wire protocol the
+ * Intutic proxy does not parse — and like the plain Vercel AI SDK it is
+ * built on, eve has no env-var base-URL override. Only the in-code
+ * direct-provider path (`defineAgent({ model: withIntuticProxy(...)(...) })`)
+ * routes through the proxy. See TD-412 and
+ * `apps/docs/integrations/eve.md`.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import type { IHarnessAdapter } from './types.js';
+/** Vercel eve adapter — the builder's adapter with a compound `detect`. */
+export declare const eveAdapter: IHarnessAdapter;
+//# sourceMappingURL=eve.d.ts.map

package/dist/harness/eve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eve.d.ts","sourceRoot":"","sources":["../../src/harness/eve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAiBjD,2EAA2E;AAC3E,eAAO,MAAM,UAAU,EAAE,eAWxB,CAAA"}

package/dist/harness/eve.js

@@ -0,0 +1,67 @@
+/**
+ * eve.ts — Vercel "eve" adapter (env-file config, SDK-side gate).
+ *
+ * Same family as mastra.ts/vercelAiSdk.ts (see jsSdkGatedAdapter.ts), with
+ * one difference the shared builder cannot express: detection is a COMPOUND
+ * check. The npm package name `eve` is short and generic enough that a
+ * dependency check alone over-detects, and `agent/` is a directory name half
+ * the JS ecosystem uses for something — so this adapter requires BOTH the
+ * `eve` dependency in `package.json` AND the framework's characteristic
+ * `agent/` directory at the workspace root (eve is filesystem-first: the
+ * agent IS that directory — `agent/instructions.md`, `agent/tools/*.ts`,
+ * `agent/hooks/`, ... — per eve's own getting-started layout). Implemented
+ * by wrapping the builder's adapter and tightening its `detect`, rather
+ * than growing the builder a one-consumer knob.
+ *
+ * No version floor: eve is pre-1.0 (0.39.x at integration time) and the
+ * `approval` surface `@intutic/gate/eve` targets has no known major-version
+ * boundary to gate on — the churn risk is handled by the gate package's own
+ * pinned devDependency verification instead (TD-410).
+ *
+ * PREVIEW-CHURN NOTE (same shield the dsh integration established): eve is a
+ * fast-moving preview product. `@intutic/gate/eve` was verified against
+ * eve@0.39.1's shipped `.d.ts` — see that module's doc for exactly what was
+ * confirmed vs. assumed, and docs/TECH_DEBT.md TD-410/TD-411/TD-412.
+ *
+ * LLM-egress note carried into the generated `.env.intutic`: eve routes
+ * models through the Vercel AI Gateway by default, whose wire protocol the
+ * Intutic proxy does not parse — and like the plain Vercel AI SDK it is
+ * built on, eve has no env-var base-URL override. Only the in-code
+ * direct-provider path (`defineAgent({ model: withIntuticProxy(...)(...) })`)
+ * routes through the proxy. See TD-412 and
+ * `apps/docs/integrations/eve.md`.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import { join } from 'node:path';
+import { stat } from 'node:fs/promises';
+import { HarnessType } from '@intutic/shared-types';
+import { makeJsSdkGatedAdapter } from './jsSdkGatedAdapter.js';
+const base = makeJsSdkGatedAdapter({
+    type: HarnessType.EVE,
+    label: 'eve',
+    requires: [{ name: 'eve' }],
+    npmInstall: '@intutic/gate',
+    importLine: "import { intuticApproval, intuticAuditHooks } from '@intutic/gate/eve'",
+    usageSummary: "defineTool({ ..., approval: intuticApproval() }) per tool (and intuticConnectionApproval() " +
+        'per MCP/OpenAPI connection) — eve has no agent-level default approval field. NOTE: ' +
+        "eve's default AI Gateway model routing is NOT proxy-governable; the vars above only " +
+        'reach a direct-provider model built in code via withIntuticProxy(...). PREVIEW product.',
+    docsSlug: 'eve',
+});
+/** Vercel eve adapter — the builder's adapter with a compound `detect`. */
+export const eveAdapter = {
+    ...base,
+    async detect(workspaceRoot) {
+        if (!(await base.detect(workspaceRoot)))
+            return false;
+        try {
+            return (await stat(join(workspaceRoot, 'agent'))).isDirectory();
+        }
+        catch {
+            return false; // no agent/ directory — an `eve` dep alone is not an eve app
+        }
+    },
+};
+//# sourceMappingURL=eve.js.map

package/dist/harness/eve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eve.js","sourceRoot":"","sources":["../../src/harness/eve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAEnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAE9D,MAAM,IAAI,GAAG,qBAAqB,CAAC;IACjC,IAAI,EAAE,WAAW,CAAC,GAAG;IACrB,KAAK,EAAE,KAAK;IACZ,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC3B,UAAU,EAAE,eAAe;IAC3B,UAAU,EAAE,wEAAwE;IACpF,YAAY,EACV,6FAA6F;QAC7F,qFAAqF;QACrF,sFAAsF;QACtF,yFAAyF;IAC3F,QAAQ,EAAE,KAAK;CAChB,CAAC,CAAA;AAEF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,UAAU,GAAoB;IACzC,GAAG,IAAI;IAEP,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;QACrD,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA,CAAC,6DAA6D;QAC5E,CAAC;IACH,CAAC;CACF,CAAA"}

package/dist/harness/googleAdk.d.ts

@@ -0,0 +1,18 @@
+/**
+ * googleAdk.ts — Google Agent Development Kit (ADK) adapter (env-file
+ * config, SDK-side gate).
+ *
+ * Same shape as langgraph.ts (see sdkGatedAdapter.ts). ADK tools run as
+ * plain Python callables inside the agent's own process — no on-disk
+ * hook/config file exists to gate a call, so the blocking gate ships
+ * SDK-side via `intutic_clawde.gate.adapters.google_adk.IntuticPlugin`,
+ * whose `before_tool_callback` is ADK's own documented veto point: when it
+ * returns a non-None dict, the real tool call is skipped and that dict
+ * becomes the (synthetic) tool result (verified live against
+ * google-adk==2.7.1).
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+export declare const googleAdkAdapter: import("./types.js").IHarnessAdapter;
+//# sourceMappingURL=googleAdk.d.ts.map

package/dist/harness/googleAdk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"googleAdk.d.ts","sourceRoot":"","sources":["../../src/harness/googleAdk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,eAAO,MAAM,gBAAgB,sCAU3B,CAAA"}

package/dist/harness/googleAdk.js

@@ -0,0 +1,29 @@
+/**
+ * googleAdk.ts — Google Agent Development Kit (ADK) adapter (env-file
+ * config, SDK-side gate).
+ *
+ * Same shape as langgraph.ts (see sdkGatedAdapter.ts). ADK tools run as
+ * plain Python callables inside the agent's own process — no on-disk
+ * hook/config file exists to gate a call, so the blocking gate ships
+ * SDK-side via `intutic_clawde.gate.adapters.google_adk.IntuticPlugin`,
+ * whose `before_tool_callback` is ADK's own documented veto point: when it
+ * returns a non-None dict, the real tool call is skipped and that dict
+ * becomes the (synthetic) tool result (verified live against
+ * google-adk==2.7.1).
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import { HarnessType } from '@intutic/shared-types';
+import { makeSdkGatedAdapter } from './sdkGatedAdapter.js';
+export const googleAdkAdapter = makeSdkGatedAdapter({
+    type: HarnessType.GOOGLE_ADK,
+    label: 'Google ADK',
+    keywords: ['google-adk'],
+    pipInstall: 'intutic-clawde[google-adk]',
+    importLine: 'from intutic_clawde.gate.adapters.google_adk import IntuticPlugin',
+    usageSummary: 'IntuticPlugin.before_tool_callback (App(plugins=[...]) — or the per-agent ' +
+        'before_tool_callback fallback) refuses denied calls before the tool body runs.',
+    docsSlug: 'google-adk',
+});
+//# sourceMappingURL=googleAdk.js.map

package/dist/harness/googleAdk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"googleAdk.js","sourceRoot":"","sources":["../../src/harness/googleAdk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAE1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;IAClD,IAAI,EAAE,WAAW,CAAC,UAAU;IAC5B,KAAK,EAAE,YAAY;IACnB,QAAQ,EAAE,CAAC,YAAY,CAAC;IACxB,UAAU,EAAE,4BAA4B;IACxC,UAAU,EAAE,mEAAmE;IAC/E,YAAY,EACV,4EAA4E;QAC5E,gFAAgF;IAClF,QAAQ,EAAE,YAAY;CACvB,CAAC,CAAA"}

package/dist/harness/goose.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"goose.d.ts","sourceRoot":"","sources":["../../src/harness/goose.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAQjD,eAAO,MAAM,YAAY,EAAE,eA0B1B,CAAA"}
+{"version":3,"file":"goose.d.ts","sourceRoot":"","sources":["../../src/harness/goose.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAOjD,eAAO,MAAM,YAAY,EAAE,eA8B1B,CAAA"}

package/dist/harness/goose.js

@@ -28,7 +28,11 @@ export const gooseAdapter = {
             return false;
         }
     },
-    async writeConfig(_workspaceRoot, sops, proxyUrl) {
+    // `_sops` is unused by design, unlike every markdown adapter: Goose has no
+    // text-rules file to write them to — `HARNESS_CONFIG_FILES.goose` is empty,
+    // and its governance is the PreToolUse plugin, whose gate is compiled from
+    // the shared protected-path list rather than from this array.
+    async writeConfig(_workspaceRoot, _sops, proxyUrl) {
         // Write governance plugin + config proxy URL (gooseHooks handles both)
         await writeGooseHooks(proxyUrl);
         return GOOSE_CONFIG;

package/dist/harness/goose.js.map

@@ -1 +1 @@
-{"version":3,"file":"goose.js","sourceRoot":"","sources":["../../src/harness/goose.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,MAAM,EAA4B,MAAM,kBAAkB,CAAA;AACnE,OAAO,EAAE,IAAI,EAAW,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAEzC,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAA;AAEzE,MAAM,WAAW,GAAG,2BAA2B,CAAA;AAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAA;AAEjD,MAAM,CAAC,MAAM,YAAY,GAAoB;IAC3C,IAAI,EAAE,WAAW,CAAC,KAAK;IACvB,cAAc,EAAE,WAAW;IAE3B,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,YAAY,CAAC,CAAA;YAC1B,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,cAAsB,EAAE,IAAoB,EAAE,QAAgB;QAC9E,uEAAuE;QACvE,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAA;QAC/B,OAAO,YAAY,CAAA;IACrB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,cAAsB;QAC1C,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAA;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;CACF,CAAA"}
+{"version":3,"file":"goose.js","sourceRoot":"","sources":["../../src/harness/goose.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAA;AAEzE,MAAM,WAAW,GAAG,2BAA2B,CAAA;AAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAA;AAEjD,MAAM,CAAC,MAAM,YAAY,GAAoB;IAC3C,IAAI,EAAE,WAAW,CAAC,KAAK;IACvB,cAAc,EAAE,WAAW;IAE3B,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,YAAY,CAAC,CAAA;YAC1B,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,8DAA8D;IAC9D,KAAK,CAAC,WAAW,CAAC,cAAsB,EAAE,KAAqB,EAAE,QAAgB;QAC/E,uEAAuE;QACvE,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAA;QAC/B,OAAO,YAAY,CAAA;IACrB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,cAAsB;QAC1C,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAA;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;CACF,CAAA"}

package/dist/harness/grok.d.ts

@@ -0,0 +1,16 @@
+/**
+ * grok.ts — xAI Grok Build adapter (binary `grok`, GA 2026-05, open-sourced
+ * 2026-07-15).
+ *
+ * Detects the Grok Build CLI, writes AGENTS.md governance text (the same
+ * cross-tool rules-file convention Codex/Amp read), and injects the Intutic
+ * governance hook (`grokHooks.ts` — PreToolUse, no matcher, confirmed
+ * `{"decision":"deny","reason":"..."}` stdout contract) plus the
+ * `config.toml` `[model.*]` `base_url` merge.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import type { IHarnessAdapter } from './types.js';
+export declare const grokAdapter: IHarnessAdapter;
+//# sourceMappingURL=grok.d.ts.map

package/dist/harness/grok.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok.d.ts","sourceRoot":"","sources":["../../src/harness/grok.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAOjD,eAAO,MAAM,WAAW,EAAE,eA0CzB,CAAA"}

package/dist/harness/grok.js

@@ -0,0 +1,78 @@
+/**
+ * grok.ts — xAI Grok Build adapter (binary `grok`, GA 2026-05, open-sourced
+ * 2026-07-15).
+ *
+ * Detects the Grok Build CLI, writes AGENTS.md governance text (the same
+ * cross-tool rules-file convention Codex/Amp read), and injects the Intutic
+ * governance hook (`grokHooks.ts` — PreToolUse, no matcher, confirmed
+ * `{"decision":"deny","reason":"..."}` stdout contract) plus the
+ * `config.toml` `[model.*]` `base_url` merge.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import { access, writeFile, rename, mkdir } from 'node:fs/promises';
+import { join, dirname } from 'node:path';
+import { homedir } from 'node:os';
+import { HarnessType } from '@intutic/shared-types';
+import { hashFile } from '../lib/hash.js';
+import { buildMarkdownContent } from './base.js';
+import { writeGrokHooks } from '@intutic/sync-daemon/harness/grokHooks';
+const CONFIG_FILE = 'AGENTS.md';
+export const grokAdapter = {
+    type: HarnessType.GROK,
+    configFileName: CONFIG_FILE,
+    async detect(workspaceRoot) {
+        // Workspace-local `.grok/` (project config/hooks dir) or AGENTS.md.
+        for (const marker of ['.grok', CONFIG_FILE]) {
+            try {
+                await access(join(workspaceRoot, marker));
+                return true;
+            }
+            catch { /* fall through */ }
+        }
+        // `~/.grok` (user has Grok Build installed and has run it at least once).
+        try {
+            await access(join(homedir(), '.grok'));
+            return true;
+        }
+        catch { /* fall through */ }
+        // `grok` on PATH — same PATH-scan convention codex.ts uses.
+        const pathDirs = (process.env.PATH ?? '').split(process.platform === 'win32' ? ';' : ':');
+        try {
+            const { accessSync } = await import('node:fs');
+            for (const dir of pathDirs) {
+                try {
+                    accessSync(join(dir, 'grok'));
+                    return true;
+                }
+                catch { /* not here */ }
+            }
+        }
+        catch { /* ignore */ }
+        return false;
+    },
+    async writeConfig(workspaceRoot, sops, proxyUrl) {
+        // 1. AGENTS.md — governance rules text, same markdown formatter every
+        //    other `---`-separated rules file in this codebase shares.
+        const filePath = join(workspaceRoot, CONFIG_FILE);
+        const content = buildMarkdownContent(sops, proxyUrl);
+        await mkdir(dirname(filePath), { recursive: true });
+        const tmp = filePath + '.intutic-tmp';
+        await writeFile(tmp, content, 'utf-8');
+        await rename(tmp, filePath);
+        // 2. PreToolUse gate (project + user level) + config.toml model base_url
+        //    merge (project + user level).
+        await writeGrokHooks(workspaceRoot, proxyUrl, '');
+        return filePath;
+    },
+    async readCurrentHash(workspaceRoot) {
+        try {
+            return await hashFile(join(workspaceRoot, CONFIG_FILE));
+        }
+        catch {
+            return null;
+        }
+    },
+};
+//# sourceMappingURL=grok.js.map

package/dist/harness/grok.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok.js","sourceRoot":"","sources":["../../src/harness/grok.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACnE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAA;AAEvE,MAAM,WAAW,GAAG,WAAW,CAAA;AAE/B,MAAM,CAAC,MAAM,WAAW,GAAoB;IAC1C,IAAI,EAAE,WAAW,CAAC,IAAI;IACtB,cAAc,EAAE,WAAW;IAE3B,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,oEAAoE;QACpE,KAAK,MAAM,MAAM,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAC7F,CAAC;QACD,0EAA0E;QAC1E,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;YAAC,OAAO,IAAI,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACxF,4DAA4D;QAC5D,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACzF,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;YAC9C,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,IAAI,CAAC;oBAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;oBAAC,OAAO,IAAI,CAAA;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxB,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;QAC7E,sEAAsE;QACtE,+DAA+D;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;QACjD,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QACpD,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACnD,MAAM,GAAG,GAAG,QAAQ,GAAG,cAAc,CAAA;QACrC,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;QACtC,MAAM,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;QAE3B,yEAAyE;QACzE,mCAAmC;QACnC,MAAM,cAAc,CAAC,aAAa,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;QAEjD,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,aAAqB;QACzC,IAAI,CAAC;YAAC,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAA;QAAC,CAAC;IACvF,CAAC;CACF,CAAA"}

package/dist/harness/jsSdkGatedAdapter.d.ts

@@ -0,0 +1,102 @@
+/**
+ * jsSdkGatedAdapter.ts — shared builder for harness adapters whose blocking
+ * gate ships SDK-side in `@intutic/gate` (packages/gate-js), with no on-disk
+ * hook/config file to write a tool-call gate into.
+ *
+ * The JS/TS-native counterpart of `sdkGatedAdapter.ts` (Wave 1's Python
+ * builder — see its module doc for why a shared factory exists instead of
+ * hand-copying one adapter per framework: the same defect-generator argument
+ * applies here). Two differences from the Python version drive most of this
+ * file's shape:
+ *
+ *   1. **Manifest format.** Python's manifests (`pyproject.toml`,
+ *      `requirements.txt`, `uv.lock`) are scanned as raw text for a
+ *      case-insensitive substring/regex match. `package.json` is scanned as
+ *      structured JSON — `dependencies`/`devDependencies`/`peerDependencies`
+ *      — because a JS/TS framework detection needs a VERSION check (the
+ *      Vercel AI SDK's `toolApproval` veto point is a v6+ API; the same
+ *      package name existed at lower majors with a materially different
+ *      surface), which a plain substring test cannot express.
+ *   2. **The pointer comment.** Python frameworks point at
+ *      `pip install intutic-clawde[...]` and a `from intutic_clawde...`
+ *      import. These point at `npm install @intutic/gate` and an
+ *      `import { ... } from '@intutic/gate/<subpath>'` line instead — the
+ *      env file's prose says "your own Node.js process", not "your own
+ *      Python process".
+ *
+ * @module
+ */
+import type { HarnessType } from '@intutic/shared-types';
+import type { IHarnessAdapter } from './types.js';
+/** One package.json dependency this framework requires to be detected.
+ *  `minMajor`, when set, requires the declared range's leading version
+ *  digits to be `>= minMajor` — a range this loose (`^7.0.0`, `~7.2.0`,
+ *  `>=7.0.0`, a bare `7.0.0`) is exactly what real `package.json` files
+ *  declare; anything the leading-digit scan cannot parse (`workspace:*`,
+ *  `latest`, a git URL) is treated as NOT satisfying a `minMajor`
+ *  requirement — silently assuming a floor is met is worse than asking the
+ *  operator to pin a real version. */
+export interface JsPackageRequirement {
+    name: string;
+    minMajor?: number;
+}
+export interface JsSdkGatedFrameworkSpec {
+    /** HarnessType enum value this adapter detects/configures. */
+    type: HarnessType;
+    /** Display name used in the generated comment, e.g. "Mastra". */
+    label: string;
+    /** ALL of these must be present (and satisfy their `minMajor`, if set). */
+    requires: readonly JsPackageRequirement[];
+    /**
+     * Additionally require at least one dependency whose name starts with
+     * this prefix (e.g. `"@ai-sdk/"` for the Vercel AI SDK's provider
+     * packages) — `ai` alone declares the tool-loop surface but ships no
+     * model provider, so a workspace with `ai` and no `@ai-sdk/*` package
+     * cannot actually call a model yet.
+     */
+    requiresPrefix?: string;
+    /**
+     * OR-semantics variant of `requiresPrefix`, for frameworks whose presence
+     * is signalled by any one of SEVERAL package families rather than one
+     * required package plus one prefix: at least one dependency must start
+     * with at least one of these prefixes (an exact package name works too —
+     * a name is a prefix of itself). Used by `@ai-sdk/harness` detection,
+     * where `@ai-sdk/harness`, any `@ai-sdk/harness-*` adapter, or any
+     * `@ai-sdk/sandbox-*` provider each independently indicate the framework.
+     * Evaluated IN ADDITION to `requires`/`requiresPrefix` when both are set.
+     */
+    requiresAnyPrefix?: readonly string[];
+    /** `npm install <npmInstall>` shown in the generated comment. */
+    npmInstall: string;
+    /**
+     * Replaces the default preamble lines of the generated comment block
+     * (`These env vars govern LLM egress only. <label> tools run in your own
+     * Node.js process, ...`) — each entry is one line, rendered with a leading
+     * `# `. For frameworks whose execution model makes the default prose
+     * FALSE rather than merely generic: `@ai-sdk/harness` tools execute
+     * server-side in Vercel Sandbox microVMs, so neither "tools run in your
+     * own Node.js process" nor an unqualified "these vars govern LLM egress"
+     * holds there. Omit for the standard in-process frameworks.
+     */
+    envPreamble?: readonly string[];
+    /** The `@intutic/gate/<subpath>` import line shown in the comment. */
+    importLine: string;
+    /** One line (no leading "# ") summarising how the imported symbol vetoes a call. */
+    usageSummary: string;
+    /** apps/docs/integrations/<slug> */
+    docsSlug: string;
+}
+/**
+ * Leading major version from a semver range string, without regex — plain
+ * linear scans over the (short, locally-authored) range string, matching
+ * `gate.ts`'s `trimTrailingSlashes`/`trimLeadingSlashes` style rather than
+ * an unbounded-quantifier regex. Handles the common range prefixes
+ * (`^`, `~`, `>=`, `<=`, `>`, `<`, `=`, a leading `v`, whitespace) by simply
+ * skipping every non-digit character before the first digit run. Returns
+ * `null` when no leading digit run exists at all (`"workspace:*"`,
+ * `"latest"`, `"*"`, a git/URL range).
+ */
+export declare function leadingMajorVersion(range: string): number | null;
+/** Builds an `IHarnessAdapter` for one JS/TS SDK-gated framework from its spec. */
+export declare function makeJsSdkGatedAdapter(spec: JsSdkGatedFrameworkSpec): IHarnessAdapter;
+//# sourceMappingURL=jsSdkGatedAdapter.d.ts.map