@intutic/cli 2.2.0 → 2.3.0

package/dist/harness/agenticOrchestrator.js.map

@@ -1 +1 @@
-{"version":3,"file":"agenticOrchestrator.js","sourceRoot":"","sources":["../../src/harness/agenticOrchestrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAInD,sEAAsE;AACtE,MAAM,kCAAkC,GAAG,uBAAuB,CAAA;AAClE;yEACyE;AACzE,MAAM,6BAA6B,GAAG,4BAA4B,CAAA;AAElE,MAAM,CAAC,MAAM,0BAA0B,GAAoB;IACzD,IAAI,EAAE,WAAW,CAAC,oBAAoB;IACtC,2EAA2E;IAC3E,wEAAwE;IACxE,uEAAuE;IACvE,kEAAkE;IAClE,cAAc,EAAE,EAAE;IAElB,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,yEAAyE;QACzE,mEAAmE;QACnE,wEAAwE;QACxE,qEAAqE;QACrE,uEAAuE;QACvE,mBAAmB;QACnB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,kCAAkC,CAAC,CAAC,CAAA;YACjE,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAE9B,uEAAuE;QACvE,oEAAoE;QACpE,oDAAoD;QACpD,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACzF,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAA;gBACjC,OAAO,IAAI,CAAA;YACb,CAAC;YAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;QAC5B,CAAC;QAED,wEAAwE;QACxE,mEAAmE;QACnE,oEAAoE;QACpE,gCAAgC;QAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAA;gBAC3C,OAAO,IAAI,CAAA;YACb,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAChC,CAAC;QAED,OAAO,KAAK,CAAA;IACd,CAAC;IAED,oEAAoE;IACpE,mEAAmE;IACnE,0EAA0E;IAC1E,oEAAoE;IACpE,oDAAoD;IACpD,KAAK,CAAC,WAAW,CAAC,cAAsB,EAAE,KAAqB,EAAE,SAAiB;QAChF,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,cAAsB;QAC1C,OAAO,IAAI,CAAA;IACb,CAAC;CACF,CAAA"}
+{"version":3,"file":"agenticOrchestrator.js","sourceRoot":"","sources":["../../src/harness/agenticOrchestrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAInD,sEAAsE;AACtE,MAAM,kCAAkC,GAAG,uBAAuB,CAAA;AAClE;yEACyE;AACzE,MAAM,6BAA6B,GAAG,4BAA4B,CAAA;AAElE,MAAM,CAAC,MAAM,0BAA0B,GAAoB;IACzD,IAAI,EAAE,WAAW,CAAC,oBAAoB;IACtC,2EAA2E;IAC3E,iEAAiE;IACjE,uEAAuE;IACvE,kEAAkE;IAClE,cAAc,EAAE,EAAE;IAElB,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,yEAAyE;QACzE,mEAAmE;QACnE,wEAAwE;QACxE,qEAAqE;QACrE,uEAAuE;QACvE,mBAAmB;QACnB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,kCAAkC,CAAC,CAAC,CAAA;YACjE,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAE9B,uEAAuE;QACvE,oEAAoE;QACpE,oDAAoD;QACpD,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACzF,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAA;gBACjC,OAAO,IAAI,CAAA;YACb,CAAC;YAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;QAC5B,CAAC;QAED,wEAAwE;QACxE,mEAAmE;QACnE,oEAAoE;QACpE,gCAAgC;QAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAA;gBAC3C,OAAO,IAAI,CAAA;YACb,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAChC,CAAC;QAED,OAAO,KAAK,CAAA;IACd,CAAC;IAED,oEAAoE;IACpE,mEAAmE;IACnE,0EAA0E;IAC1E,oEAAoE;IACpE,oDAAoD;IACpD,KAAK,CAAC,WAAW,CAAC,cAAsB,EAAE,KAAqB,EAAE,SAAiB;QAChF,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,cAAsB;QAC1C,OAAO,IAAI,CAAA;IACb,CAAC;CACF,CAAA"}

package/dist/harness/agentsMd.d.ts

@@ -0,0 +1,24 @@
+/**
+ * agentsMd.ts — the one writer of `AGENTS.md`.
+ *
+ * `AGENTS.md` is the cross-tool instructions file (https://agents.md). Codex,
+ * Grok Build, OpenCode, Muse Code and Pi all load the workspace's copy, and
+ * it is often the team's own, so every one of them writes the same marked
+ * section through this module instead of each writing the whole file: the
+ * last writer used to replace the rules of the others, and the user's own
+ * text with them.
+ *
+ * `intutic connect` hands each of them every rule set aimed at any
+ * `AGENTS.md` reader configured in the workspace (`writeHarnessConfigs`), so
+ * whichever writes, the section is the same. A rule set aimed at one of them
+ * is therefore read by all of them: they share the file.
+ *
+ * @module
+ */
+import type { SyncSopEntry } from '@intutic/shared-types';
+export declare const AGENTS_MD = "AGENTS.md";
+/** Writes the rule sets as the marked section of the workspace's `AGENTS.md`. */
+export declare function writeAgentsMd(workspaceRoot: string, sops: SyncSopEntry[], proxyUrl: string): Promise<string | null>;
+/** The section's hash, for drift. */
+export declare function agentsMdHash(workspaceRoot: string): Promise<string | null>;
+//# sourceMappingURL=agentsMd.d.ts.map

package/dist/harness/agentsMd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentsMd.d.ts","sourceRoot":"","sources":["../../src/harness/agentsMd.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAGzD,eAAO,MAAM,SAAS,cAAc,CAAA;AAEpC,iFAAiF;AACjF,wBAAgB,aAAa,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAEnH;AAED,qCAAqC;AACrC,wBAAgB,YAAY,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAE1E"}

package/dist/harness/agentsMd.js

@@ -0,0 +1,28 @@
+/**
+ * agentsMd.ts — the one writer of `AGENTS.md`.
+ *
+ * `AGENTS.md` is the cross-tool instructions file (https://agents.md). Codex,
+ * Grok Build, OpenCode, Muse Code and Pi all load the workspace's copy, and
+ * it is often the team's own, so every one of them writes the same marked
+ * section through this module instead of each writing the whole file: the
+ * last writer used to replace the rules of the others, and the user's own
+ * text with them.
+ *
+ * `intutic connect` hands each of them every rule set aimed at any
+ * `AGENTS.md` reader configured in the workspace (`writeHarnessConfigs`), so
+ * whichever writes, the section is the same. A rule set aimed at one of them
+ * is therefore read by all of them: they share the file.
+ *
+ * @module
+ */
+import { rulesSectionHash, writeRulesSectionFile } from './rulesFiles.js';
+export const AGENTS_MD = 'AGENTS.md';
+/** Writes the rule sets as the marked section of the workspace's `AGENTS.md`. */
+export function writeAgentsMd(workspaceRoot, sops, proxyUrl) {
+    return writeRulesSectionFile(workspaceRoot, AGENTS_MD, sops, proxyUrl);
+}
+/** The section's hash, for drift. */
+export function agentsMdHash(workspaceRoot) {
+    return rulesSectionHash(workspaceRoot, AGENTS_MD);
+}
+//# sourceMappingURL=agentsMd.js.map

package/dist/harness/agentsMd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentsMd.js","sourceRoot":"","sources":["../../src/harness/agentsMd.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAEzE,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,CAAA;AAEpC,iFAAiF;AACjF,MAAM,UAAU,aAAa,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;IACzF,OAAO,qBAAqB,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;AACxE,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,YAAY,CAAC,aAAqB;IAChD,OAAO,gBAAgB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAA;AACnD,CAAC"}

package/dist/harness/aider.d.ts

@@ -4,7 +4,9 @@
  * Merges proxy routing into .aider.conf.yml using the aiderConfigMerger,
  * which keeps the user's own keys, strips dangerous auto-exec keys
  * (test-cmd, lint-cmd) that Aider auto-executes on startup, and lists the
- * SOP text as a read-only context file (.intutic/aider-sops.md).
+ * SOP text as a read-only context file (.intutic/aider-sops.md) by absolute
+ * path: Aider loads no instructions file it is not told about
+ * (https://aider.chat/docs/usage/conventions.html).
  *
  * HLD §3.14 — Harness Onboarding Matrix
  * @module

package/dist/harness/aider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aider.d.ts","sourceRoot":"","sources":["../../src/harness/aider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAMjD,eAAO,MAAM,YAAY,EAAE,eAiC1B,CAAA"}
+{"version":3,"file":"aider.d.ts","sourceRoot":"","sources":["../../src/harness/aider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAOjD,eAAO,MAAM,YAAY,EAAE,eAgC1B,CAAA"}

package/dist/harness/aider.js

@@ -4,7 +4,9 @@
  * Merges proxy routing into .aider.conf.yml using the aiderConfigMerger,
  * which keeps the user's own keys, strips dangerous auto-exec keys
  * (test-cmd, lint-cmd) that Aider auto-executes on startup, and lists the
- * SOP text as a read-only context file (.intutic/aider-sops.md).
+ * SOP text as a read-only context file (.intutic/aider-sops.md) by absolute
+ * path: Aider loads no instructions file it is not told about
+ * (https://aider.chat/docs/usage/conventions.html).
  *
  * HLD §3.14 — Harness Onboarding Matrix
  * @module
@@ -13,11 +15,13 @@ import { access } from 'node:fs/promises';
 import { join } from 'node:path';
 import { HarnessType } from '@intutic/shared-types';
 import { hashFile } from '../lib/hash.js';
-import { mergeAiderConfig } from '@intutic/sync-daemon/harness/aiderConfigMerger';
+import { AIDER_SOPS_FILE, mergeAiderConfig } from '@intutic/sync-daemon/harness/aiderConfigMerger';
+import { buildSopSections } from './rulesFiles.js';
 const CONFIG_FILE = '.aider.conf.yml';
 export const aiderAdapter = {
     type: HarnessType.AIDER,
-    configFileName: CONFIG_FILE,
+    // Drift is tracked on the rules file, which .aider.conf.yml lists under `read:`.
+    configFileName: AIDER_SOPS_FILE,
     async detect(workspaceRoot) {
         try {
             await access(join(workspaceRoot, CONFIG_FILE));
@@ -29,9 +33,7 @@ export const aiderAdapter = {
     },
     async writeConfig(workspaceRoot, sops, proxyUrl) {
         const filePath = join(workspaceRoot, CONFIG_FILE);
-        const sopsText = sops.length > 0
-            ? sops.map((sop) => `## ${sop.title}\n\n${sop.content}`).join('\n\n---\n\n')
-            : undefined;
+        const sopsText = sops.length > 0 ? buildSopSections(sops) : undefined;
         // Safe merge: strips test-cmd/lint-cmd, preserves all other user keys,
         // routes OpenAI (openai-api-base) and Anthropic (set-env) models through
         // the proxy and lists the SOPs as a read-only context file.
@@ -39,7 +41,7 @@ export const aiderAdapter = {
     },
     async readCurrentHash(workspaceRoot) {
         try {
-            return await hashFile(join(workspaceRoot, CONFIG_FILE));
+            return await hashFile(join(workspaceRoot, AIDER_SOPS_FILE));
         }
         catch {
             return null;

package/dist/harness/aider.js.map

@@ -1 +1 @@
-{"version":3,"file":"aider.js","sourceRoot":"","sources":["../../src/harness/aider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAA;AAEjF,MAAM,WAAW,GAAG,iBAAiB,CAAA;AAErC,MAAM,CAAC,MAAM,YAAY,GAAoB;IAC3C,IAAI,EAAE,WAAW,CAAC,KAAK;IACvB,cAAc,EAAE,WAAW;IAE3B,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;YAC9C,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;QAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;QAEjD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC;YAC9B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,KAAK,OAAO,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;YAC5E,CAAC,CAAC,SAAS,CAAA;QAEb,uEAAuE;QACvE,yEAAyE;QACzE,4DAA4D;QAC5D,OAAO,CAAC,MAAM,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAA;IACjF,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,aAAqB;QACzC,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;CACF,CAAA"}
+{"version":3,"file":"aider.js","sourceRoot":"","sources":["../../src/harness/aider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAA;AAClG,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAElD,MAAM,WAAW,GAAG,iBAAiB,CAAA;AAErC,MAAM,CAAC,MAAM,YAAY,GAAoB;IAC3C,IAAI,EAAE,WAAW,CAAC,KAAK;IACvB,iFAAiF;IACjF,cAAc,EAAE,eAAe;IAE/B,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;YAC9C,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;QAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;QAEjD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAErE,uEAAuE;QACvE,yEAAyE;QACzE,4DAA4D;QAC5D,OAAO,CAAC,MAAM,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAA;IACjF,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,aAAqB;QACzC,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,CAAA;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;CACF,CAAA"}

package/dist/harness/antigravity.d.ts

@@ -1,10 +1,28 @@
 /**
- * Antigravity adapter — .gemini/settings.json
+ * Antigravity adapter — Google Antigravity and Gemini CLI.
  *
- * Merges SOP content into the customInstructions field of the workspace's
- * Gemini settings JSON file, and installs the Gemini CLI `BeforeTool` gate in
- * `~/.gemini/settings.json` (see antigravityHooks.ts). A settings file that is
- * not a plain JSON object is left alone and reported.
+ * Google's terminal agent was Gemini CLI until Antigravity CLI replaced it
+ * for individual users in 2026; enterprise and API-key users keep Gemini
+ * CLI. Both live under `~/.gemini`, and this one harness governs both:
+ *
+ * - the Antigravity gate (app, IDE and CLI): a `PreToolUse` hook in
+ *   `~/.gemini/config/hooks.json` (see antigravityCliHooks.ts);
+ * - the Gemini CLI gate: a `BeforeTool` hook in `~/.gemini/settings.json`
+ *   (see antigravityHooks.ts);
+ * - rules: a marked section of the workspace's `GEMINI.md`, the context file
+ *   both products load as persistent instructions (see rulesSection.ts).
+ *   Gemini CLI reads `GEMINI.md` from the workspace up to the git root (its
+ *   `context.fileName` setting can rename it); Antigravity reads `GEMINI.md`
+ *   and `AGENTS.md` in every directory from the file it works on up to the
+ *   workspace root. Neither reads a `customInstructions` key in
+ *   `.gemini/settings.json`, where earlier versions put the rules;
+ *   `intutic disconnect` removes that key.
+ *
+ * A hooks file that is not a plain JSON object is left alone and reported.
+ *
+ * The two gates report under their own gate ids, `antigravity` and
+ * `gemini-cli` (gateIdentity.ts in @intutic/shared-types), so the control
+ * plane can tell the products apart; the harness stays one.
  *
  * HLD §3.14 — Harness Onboarding Matrix
  * @module

package/dist/harness/antigravity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"antigravity.d.ts","sourceRoot":"","sources":["../../src/harness/antigravity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAQjD,eAAO,MAAM,kBAAkB,EAAE,eAsDhC,CAAA"}
+{"version":3,"file":"antigravity.d.ts","sourceRoot":"","sources":["../../src/harness/antigravity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAOjD,eAAO,MAAM,kBAAkB,EAAE,eA8BhC,CAAA"}

package/dist/harness/antigravity.js

@@ -1,72 +1,62 @@
 /**
- * Antigravity adapter — .gemini/settings.json
+ * Antigravity adapter — Google Antigravity and Gemini CLI.
  *
- * Merges SOP content into the customInstructions field of the workspace's
- * Gemini settings JSON file, and installs the Gemini CLI `BeforeTool` gate in
- * `~/.gemini/settings.json` (see antigravityHooks.ts). A settings file that is
- * not a plain JSON object is left alone and reported.
+ * Google's terminal agent was Gemini CLI until Antigravity CLI replaced it
+ * for individual users in 2026; enterprise and API-key users keep Gemini
+ * CLI. Both live under `~/.gemini`, and this one harness governs both:
+ *
+ * - the Antigravity gate (app, IDE and CLI): a `PreToolUse` hook in
+ *   `~/.gemini/config/hooks.json` (see antigravityCliHooks.ts);
+ * - the Gemini CLI gate: a `BeforeTool` hook in `~/.gemini/settings.json`
+ *   (see antigravityHooks.ts);
+ * - rules: a marked section of the workspace's `GEMINI.md`, the context file
+ *   both products load as persistent instructions (see rulesSection.ts).
+ *   Gemini CLI reads `GEMINI.md` from the workspace up to the git root (its
+ *   `context.fileName` setting can rename it); Antigravity reads `GEMINI.md`
+ *   and `AGENTS.md` in every directory from the file it works on up to the
+ *   workspace root. Neither reads a `customInstructions` key in
+ *   `.gemini/settings.json`, where earlier versions put the rules;
+ *   `intutic disconnect` removes that key.
+ *
+ * A hooks file that is not a plain JSON object is left alone and reported.
+ *
+ * The two gates report under their own gate ids, `antigravity` and
+ * `gemini-cli` (gateIdentity.ts in @intutic/shared-types), so the control
+ * plane can tell the products apart; the harness stays one.
  *
  * HLD §3.14 — Harness Onboarding Matrix
  * @module
  */
-import { join } from 'node:path';
-import { access, writeFile, rename, mkdir } from 'node:fs/promises';
-import { dirname } from 'node:path';
 import { HarnessType } from '@intutic/shared-types';
-import { hashFile } from '../lib/hash.js';
-import { newIso } from '@intutic/id';
 import { loadCredentials } from '../config/store.js';
-import { keepOriginal, readJsonObjectForMerge, writeAntigravityHooks } from '@intutic/sync-daemon';
-const CONFIG_FILE = '.gemini/settings.json';
+import { antigravityGateIdentities, writeAntigravityCliHooks, writeAntigravityHooks } from '@intutic/sync-daemon';
+import { rulesSectionHash, writeRulesSectionFile } from './rulesFiles.js';
+const CONFIG_FILE = 'GEMINI.md';
 export const antigravityAdapter = {
     type: HarnessType.ANTIGRAVITY,
     configFileName: CONFIG_FILE,
+    /**
+     * Either product, found the way the sync daemon finds it for the agent
+     * report and the AI inventory (antigravityProducts.ts): Antigravity's
+     * app-data directories or a project `.agents/hooks.json`; Gemini CLI's
+     * `gemini` on PATH, a project `.gemini` directory or its own
+     * `~/.gemini/settings.json`. A plain Gemini CLI install with no `.gemini`
+     * in the workspace is found by the binary and the settings file.
+     */
     async detect(workspaceRoot) {
-        try {
-            await access(join(workspaceRoot, '.gemini'));
-            return true;
-        }
-        catch {
-            return false;
-        }
+        return (await antigravityGateIdentities(workspaceRoot)).length > 0;
+    },
+    async installGate(workspaceRoot, proxyUrl) {
+        const workspaceId = (await loadCredentials())?.workspaceId || 'local';
+        await writeAntigravityCliHooks(workspaceRoot, proxyUrl, workspaceId);
+        await writeAntigravityHooks(workspaceRoot, proxyUrl, workspaceId);
     },
-    async writeConfig(workspaceRoot, sops, proxyUrl) {
-        // The gate is installed even with zero SOPs: it is what refuses tool
-        // calls, and the built-in protections apply without any SOP.
-        const creds = await loadCredentials();
-        await writeAntigravityHooks(workspaceRoot, proxyUrl, creds?.workspaceId || 'local');
-        if (sops.length === 0)
-            return null;
-        const filePath = join(workspaceRoot, CONFIG_FILE);
-        const tmpPath = filePath + '.intutic-tmp';
-        await keepOriginal(filePath, workspaceRoot);
-        const settings = await readJsonObjectForMerge(filePath);
-        if (settings === null)
-            return null;
-        // Merge governance instructions
-        const instructions = sops
-            .map((sop) => `## ${sop.title}\n\n${sop.content}`)
-            .join('\n\n---\n\n');
-        settings.customInstructions = [
-            '# Intutic Governance Rules (auto-generated)',
-            `# DO NOT EDIT — managed by intutic sync daemon`,
-            `# Last sync: ${newIso()}`,
-            `# Proxy URL: ${proxyUrl}`,
-            '',
-            instructions,
-        ].join('\n');
-        await mkdir(dirname(filePath), { recursive: true });
-        await writeFile(tmpPath, JSON.stringify(settings, null, 2) + '\n', 'utf-8');
-        await rename(tmpPath, filePath);
-        return filePath;
+    writeConfig(workspaceRoot, sops, proxyUrl) {
+        return writeRulesSectionFile(workspaceRoot, CONFIG_FILE, sops, proxyUrl);
     },
-    async readCurrentHash(workspaceRoot) {
-        try {
-            return await hashFile(join(workspaceRoot, CONFIG_FILE));
-        }
-        catch {
-            return null;
-        }
+    /** The section only: the user's own edits elsewhere in `GEMINI.md` are not drift. */
+    readCurrentHash(workspaceRoot) {
+        return rulesSectionHash(workspaceRoot, CONFIG_FILE);
     },
 };
 //# sourceMappingURL=antigravity.js.map

package/dist/harness/antigravity.js.map

@@ -1 +1 @@
-{"version":3,"file":"antigravity.js","sourceRoot":"","sources":["../../src/harness/antigravity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACnE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAElG,MAAM,WAAW,GAAG,uBAAuB,CAAA;AAE3C,MAAM,CAAC,MAAM,kBAAkB,GAAoB;IACjD,IAAI,EAAE,WAAW,CAAC,WAAW;IAC7B,cAAc,EAAE,WAAW;IAE3B,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAA;YAC5C,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;QAC7E,qEAAqE;QACrE,6DAA6D;QAC7D,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;QACrC,MAAM,qBAAqB,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,IAAI,OAAO,CAAC,CAAA;QAEnF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;QACjD,MAAM,OAAO,GAAG,QAAQ,GAAG,cAAc,CAAA;QAEzC,MAAM,YAAY,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;QAC3C,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,QAAQ,CAAC,CAAA;QACvD,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAElC,gCAAgC;QAChC,MAAM,YAAY,GAAG,IAAI;aACtB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,KAAK,OAAO,GAAG,CAAC,OAAO,EAAE,CAAC;aACjD,IAAI,CAAC,aAAa,CAAC,CAAA;QAEtB,QAAQ,CAAC,kBAAkB,GAAG;YAC5B,6CAA6C;YAC7C,gDAAgD;YAChD,gBAAgB,MAAM,EAAE,EAAE;YAC1B,gBAAgB,QAAQ,EAAE;YAC1B,EAAE;YACF,YAAY;SACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEZ,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACnD,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;QAC3E,MAAM,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QAC/B,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,aAAqB;QACzC,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;CACF,CAAA"}
+{"version":3,"file":"antigravity.js","sourceRoot":"","sources":["../../src/harness/antigravity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AACjH,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAEzE,MAAM,WAAW,GAAG,WAAW,CAAA;AAE/B,MAAM,CAAC,MAAM,kBAAkB,GAAoB;IACjD,IAAI,EAAE,WAAW,CAAC,WAAW;IAC7B,cAAc,EAAE,WAAW;IAE3B;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,OAAO,CAAC,MAAM,yBAAyB,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;IACpE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,QAAgB;QACvD,MAAM,WAAW,GAAG,CAAC,MAAM,eAAe,EAAE,CAAC,EAAE,WAAW,IAAI,OAAO,CAAA;QACrE,MAAM,wBAAwB,CAAC,aAAa,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;QACpE,MAAM,qBAAqB,CAAC,aAAa,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;IACnE,CAAC;IAED,WAAW,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;QACvE,OAAO,qBAAqB,CAAC,aAAa,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC1E,CAAC;IAED,qFAAqF;IACrF,eAAe,CAAC,aAAqB;QACnC,OAAO,gBAAgB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;IACrD,CAAC;CACF,CAAA"}

package/dist/harness/autogen.d.ts

@@ -15,7 +15,7 @@
  * calls never go through the runtime at all, so for `AssistantAgent`-based
  * code the framework-agnostic `@guard`/`guard_tools` helpers (governing the
  * tool objects directly) remain the applicable coverage, same as before this
- * adapter existed (see TD-374).
+ * adapter existed.
  *
  * HLD §3.14 — Harness Onboarding Matrix
  * @module

package/dist/harness/autogen.js

@@ -15,7 +15,7 @@
  * calls never go through the runtime at all, so for `AssistantAgent`-based
  * code the framework-agnostic `@guard`/`guard_tools` helpers (governing the
  * tool objects directly) remain the applicable coverage, same as before this
- * adapter existed (see TD-374).
+ * adapter existed.
  *
  * HLD §3.14 — Harness Onboarding Matrix
  * @module
@@ -28,7 +28,7 @@ export const autogenAdapter = makeSdkGatedAdapter({
     keywords: ['autogen-agentchat', 'autogen-core', 'autogen-ext'],
     pipInstall: 'intutic-clawde[autogen]',
     importLine: 'from intutic_clawde.gate.adapters.autogen import IntuticInterventionHandler',
-    usageSummary: 'IntuticInterventionHandler vetoes a runtime-routed FunctionCall via on_send (see TD-374: ' +
+    usageSummary: 'IntuticInterventionHandler vetoes a runtime-routed FunctionCall via on_send (' +
         'invisible to AssistantAgent\'s own tool calls — wrap those tools with @guard/guard_tools ' +
         'instead).',
     docsSlug: 'autogen',

package/dist/harness/autogen.js.map

@@ -1 +1 @@
-{"version":3,"file":"autogen.js","sourceRoot":"","sources":["../../src/harness/autogen.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAE1D,MAAM,CAAC,MAAM,cAAc,GAAG,mBAAmB,CAAC;IAChD,IAAI,EAAE,WAAW,CAAC,OAAO;IACzB,KAAK,EAAE,SAAS;IAChB,QAAQ,EAAE,CAAC,mBAAmB,EAAE,cAAc,EAAE,aAAa,CAAC;IAC9D,UAAU,EAAE,yBAAyB;IACrC,UAAU,EAAE,6EAA6E;IACzF,YAAY,EACV,2FAA2F;QAC3F,2FAA2F;QAC3F,WAAW;IACb,QAAQ,EAAE,SAAS;CACpB,CAAC,CAAA"}
+{"version":3,"file":"autogen.js","sourceRoot":"","sources":["../../src/harness/autogen.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAE1D,MAAM,CAAC,MAAM,cAAc,GAAG,mBAAmB,CAAC;IAChD,IAAI,EAAE,WAAW,CAAC,OAAO;IACzB,KAAK,EAAE,SAAS;IAChB,QAAQ,EAAE,CAAC,mBAAmB,EAAE,cAAc,EAAE,aAAa,CAAC;IAC9D,UAAU,EAAE,yBAAyB;IACrC,UAAU,EAAE,6EAA6E;IACzF,YAAY,EACV,+EAA+E;QAC/E,2FAA2F;QAC3F,WAAW;IACb,QAAQ,EAAE,SAAS;CACpB,CAAC,CAAA"}

package/dist/harness/claudeCode.d.ts

@@ -1,2 +1,23 @@
-export declare const claudeCodeAdapter: import("./types.js").IHarnessAdapter;
+/**
+ * Claude Code adapter — rule sets in `.claude/rules/intutic-governance.md`.
+ *
+ * Claude Code loads every `.claude/rules/*.md` without `paths:` front matter
+ * at launch, with the priority of `.claude/CLAUDE.md`
+ * (https://code.claude.com/docs/en/memory). Not `CLAUDE.md` itself, which is
+ * usually the team's own: and under Claude Code's default setting a project
+ * `CLAUDE.md` stops it reading `AGENTS.md`, so creating one would hide a
+ * team's `AGENTS.md` from it. Earlier versions overwrote `CLAUDE.md`; the
+ * user's own copy comes back. The decisions log goes next to it, in
+ * `.claude/rules/intutic-decisions.md` (decisionsDigest.ts). A rule set that
+ * also reaches Claude Code through `AGENTS.md` is left out of its own file
+ * (`writeHarnessConfigs`), so Claude Code does not load it twice.
+ *
+ * The gate is installed by `intutic connect`'s own step, with the synced
+ * settings its deny rules need.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import type { IHarnessAdapter } from './types.js';
+export declare const claudeCodeAdapter: IHarnessAdapter;
 //# sourceMappingURL=claudeCode.d.ts.map

package/dist/harness/claudeCode.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claudeCode.d.ts","sourceRoot":"","sources":["../../src/harness/claudeCode.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,iBAAiB,sCAA8D,CAAA"}
+{"version":3,"file":"claudeCode.d.ts","sourceRoot":"","sources":["../../src/harness/claudeCode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAMH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAMjD,eAAO,MAAM,iBAAiB,EAAE,eA2B/B,CAAA"}

package/dist/harness/claudeCode.js

@@ -1,9 +1,53 @@
 /**
- * Claude Code adapter — CLAUDE.md
+ * Claude Code adapter — rule sets in `.claude/rules/intutic-governance.md`.
+ *
+ * Claude Code loads every `.claude/rules/*.md` without `paths:` front matter
+ * at launch, with the priority of `.claude/CLAUDE.md`
+ * (https://code.claude.com/docs/en/memory). Not `CLAUDE.md` itself, which is
+ * usually the team's own: and under Claude Code's default setting a project
+ * `CLAUDE.md` stops it reading `AGENTS.md`, so creating one would hide a
+ * team's `AGENTS.md` from it. Earlier versions overwrote `CLAUDE.md`; the
+ * user's own copy comes back. The decisions log goes next to it, in
+ * `.claude/rules/intutic-decisions.md` (decisionsDigest.ts). A rule set that
+ * also reaches Claude Code through `AGENTS.md` is left out of its own file
+ * (`writeHarnessConfigs`), so Claude Code does not load it twice.
+ *
+ * The gate is installed by `intutic connect`'s own step, with the synced
+ * settings its deny rules need.
+ *
  * HLD §3.14 — Harness Onboarding Matrix
  * @module
  */
+import { access } from 'node:fs/promises';
+import { join } from 'node:path';
 import { HarnessType } from '@intutic/shared-types';
-import { createMarkdownAdapter } from './base.js';
-export const claudeCodeAdapter = createMarkdownAdapter(HarnessType.CLAUDE_CODE, 'CLAUDE.md');
+import { ownRulesFileHash, retireLegacyRulesFile, writeOwnRulesFile } from './rulesFiles.js';
+const RULES_FILE = '.claude/rules/intutic-governance.md';
+const LEGACY_FILE = 'CLAUDE.md';
+export const claudeCodeAdapter = {
+    type: HarnessType.CLAUDE_CODE,
+    configFileName: RULES_FILE,
+    async detect(workspaceRoot) {
+        try {
+            await access(join(workspaceRoot, LEGACY_FILE));
+            return true;
+        }
+        catch {
+            return false;
+        }
+    },
+    /** With no rule set left for it (they all reach it through `AGENTS.md`;
+     *  see `writeHarnessConfigs`), its own file goes rather than repeat them. */
+    async writeConfig(workspaceRoot, sops, proxyUrl) {
+        await retireLegacyRulesFile(workspaceRoot, LEGACY_FILE);
+        if (sops.length === 0) {
+            await retireLegacyRulesFile(workspaceRoot, RULES_FILE);
+            return null;
+        }
+        return writeOwnRulesFile(workspaceRoot, RULES_FILE, sops, proxyUrl);
+    },
+    readCurrentHash(workspaceRoot) {
+        return ownRulesFileHash(workspaceRoot, RULES_FILE);
+    },
+};
 //# sourceMappingURL=claudeCode.js.map

package/dist/harness/claudeCode.js.map

@@ -1 +1 @@
-{"version":3,"file":"claudeCode.js","sourceRoot":"","sources":["../../src/harness/claudeCode.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAA;AAEjD,MAAM,CAAC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,WAAW,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA"}
+{"version":3,"file":"claudeCode.js","sourceRoot":"","sources":["../../src/harness/claudeCode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAE5F,MAAM,UAAU,GAAG,qCAAqC,CAAA;AACxD,MAAM,WAAW,GAAG,WAAW,CAAA;AAE/B,MAAM,CAAC,MAAM,iBAAiB,GAAoB;IAChD,IAAI,EAAE,WAAW,CAAC,WAAW;IAC7B,cAAc,EAAE,UAAU;IAE1B,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;YAC9C,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED;iFAC6E;IAC7E,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;QAC7E,MAAM,qBAAqB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;QACvD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,qBAAqB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAA;YACtD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,iBAAiB,CAAC,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;IACrE,CAAC;IAED,eAAe,CAAC,aAAqB;QACnC,OAAO,gBAAgB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAA;IACpD,CAAC;CACF,CAAA"}

package/dist/harness/cline.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cline.d.ts","sourceRoot":"","sources":["../../src/harness/cline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AASjD,eAAO,MAAM,YAAY,EAAE,eA4D1B,CAAA"}
+{"version":3,"file":"cline.d.ts","sourceRoot":"","sources":["../../src/harness/cline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AASjD,eAAO,MAAM,YAAY,EAAE,eA8C1B,CAAA"}

package/dist/harness/cline.js

@@ -20,9 +20,9 @@ import { homedir } from 'node:os';
 import { HarnessType } from '@intutic/shared-types';
 import { hashFile } from '../lib/hash.js';
 import { loadCredentials } from '../config/store.js';
-import { newIso } from '@intutic/id';
 import { writeClineHooks, ensureClinerulesDirectory } from '@intutic/sync-daemon/harness/clineHooks';
-import { keepOriginal, writeOwnedFile } from '@intutic/sync-daemon';
+import { keepOriginal } from '@intutic/sync-daemon';
+import { writeOwnRulesFile } from './rulesFiles.js';
 const CONFIG_FILE = '.clinerules/intutic-governance.md';
 export const clineAdapter = {
     type: HarnessType.CLINE,
@@ -46,30 +46,21 @@ export const clineAdapter = {
             return false;
         }
     },
+    /** The PreToolUse gate in .clinerules/hooks/. */
+    async installGate(workspaceRoot, proxyUrl) {
+        const creds = await loadCredentials();
+        await writeClineHooks(workspaceRoot, proxyUrl, creds?.workspaceId || 'local');
+    },
+    /** Rules, as one file in the .clinerules directory Cline reads; every
+     *  file there is applied (https://docs.cline.bot/features/cline-rules). */
     async writeConfig(workspaceRoot, sops, proxyUrl) {
-        // 1. Rules, as one file in the .clinerules directory Cline reads.
-        let filePath = null;
+        if (sops.length === 0)
+            return null;
         // Kept before `.clinerules` is created, so disconnect knows it made the directory.
         await keepOriginal(join(workspaceRoot, CONFIG_FILE), workspaceRoot);
-        if (await ensureClinerulesDirectory(workspaceRoot)) {
-            filePath = join(workspaceRoot, CONFIG_FILE);
-            const instructions = sops.length > 0
-                ? sops.map((sop) => `## ${sop.title}\n\n${sop.content}`).join('\n\n---\n\n')
-                : '# Intutic governance active — no SOP rules configured yet.';
-            const content = [
-                '# Intutic Governance Rules (auto-generated)',
-                '# DO NOT EDIT — managed by intutic sync daemon',
-                `# Last sync: ${newIso()}`,
-                '',
-                instructions,
-                '',
-            ].join('\n');
-            await writeOwnedFile(filePath, workspaceRoot, content);
-        }
-        // 2. The PreToolUse gate in .clinerules/hooks/.
-        const creds = await loadCredentials();
-        await writeClineHooks(workspaceRoot, proxyUrl, creds?.workspaceId || 'local');
-        return filePath;
+        if (!(await ensureClinerulesDirectory(workspaceRoot)))
+            return null;
+        return writeOwnRulesFile(workspaceRoot, CONFIG_FILE, sops, proxyUrl);
     },
     async readCurrentHash(workspaceRoot) {
         try {

package/dist/harness/cline.js.map

@@ -1 +1 @@
-{"version":3,"file":"cline.js","sourceRoot":"","sources":["../../src/harness/cline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAA;AACpG,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAEnE,MAAM,WAAW,GAAG,mCAAmC,CAAA;AAEvD,MAAM,CAAC,MAAM,YAAY,GAAoB;IAC3C,IAAI,EAAE,WAAW,CAAC,KAAK;IACvB,cAAc,EAAE,WAAW;IAE3B,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,yDAAyD;QACzD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAA;YAChD,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;QAED,wCAAwC;QACxC,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,CAAA;YAC9D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,CAAA;YAC5C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC,CAAA;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;QAC7E,kEAAkE;QAClE,IAAI,QAAQ,GAAkB,IAAI,CAAA;QAClC,mFAAmF;QACnF,MAAM,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,aAAa,CAAC,CAAA;QACnE,IAAI,MAAM,yBAAyB,CAAC,aAAa,CAAC,EAAE,CAAC;YACnD,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;YAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC;gBAClC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,KAAK,OAAO,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;gBAC5E,CAAC,CAAC,4DAA4D,CAAA;YAEhE,MAAM,OAAO,GAAG;gBACd,6CAA6C;gBAC7C,gDAAgD;gBAChD,gBAAgB,MAAM,EAAE,EAAE;gBAC1B,EAAE;gBACF,YAAY;gBACZ,EAAE;aACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAEZ,MAAM,cAAc,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,CAAA;QACxD,CAAC;QAED,gDAAgD;QAChD,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;QACrC,MAAM,eAAe,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,IAAI,OAAO,CAAC,CAAA;QAE7E,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,aAAqB;QACzC,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;CACF,CAAA"}
+{"version":3,"file":"cline.js","sourceRoot":"","sources":["../../src/harness/cline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAA;AACpG,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAEnD,MAAM,WAAW,GAAG,mCAAmC,CAAA;AAEvD,MAAM,CAAC,MAAM,YAAY,GAAoB;IAC3C,IAAI,EAAE,WAAW,CAAC,KAAK;IACvB,cAAc,EAAE,WAAW;IAE3B,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,yDAAyD;QACzD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAA;YAChD,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;QAED,wCAAwC;QACxC,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,CAAA;YAC9D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,CAAA;YAC5C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC,CAAA;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,QAAgB;QACvD,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;QACrC,MAAM,eAAe,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,IAAI,OAAO,CAAC,CAAA;IAC/E,CAAC;IAED;+EAC2E;IAC3E,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;QAC7E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QAClC,mFAAmF;QACnF,MAAM,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,aAAa,CAAC,CAAA;QACnE,IAAI,CAAC,CAAC,MAAM,yBAAyB,CAAC,aAAa,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;QAClE,OAAO,iBAAiB,CAAC,aAAa,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;IACtE,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,aAAqB;QACzC,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;CACF,CAAA"}

package/dist/harness/codex.d.ts

@@ -1,7 +1,12 @@
 /**
  * codex.ts — Codex adapter.
  *
- * Writes three things:
+ * Writes four things:
+ * - the rule sets, as the marked section of the workspace's `AGENTS.md`,
+ *   which Codex reads before any work, merged from `~/.codex` and every
+ *   directory from the project root down to where it runs
+ *   (https://developers.openai.com/codex/guides/agents-md), through the
+ *   shared writer (agentsMd.ts);
  * - `.env.intutic` in the workspace, with the proxy base URLs for shells and
  *   scripts that source it;
  * - `openai_base_url` in Codex's user config (`$CODEX_HOME/config.toml`,

package/dist/harness/codex.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../src/harness/codex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAMH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAcjD,eAAO,MAAM,YAAY,EAAE,eAqD1B,CAAA"}
+{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../src/harness/codex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAMH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAcjD,eAAO,MAAM,YAAY,EAAE,eAkD1B,CAAA"}