@intutic/cli 2.2.0 → 2.3.0

package/dist/harness/codex.js

@@ -1,7 +1,12 @@
 /**
  * codex.ts — Codex adapter.
  *
- * Writes three things:
+ * Writes four things:
+ * - the rule sets, as the marked section of the workspace's `AGENTS.md`,
+ *   which Codex reads before any work, merged from `~/.codex` and every
+ *   directory from the project root down to where it runs
+ *   (https://developers.openai.com/codex/guides/agents-md), through the
+ *   shared writer (agentsMd.ts);
  * - `.env.intutic` in the workspace, with the proxy base URLs for shells and
  *   scripts that source it;
  * - `openai_base_url` in Codex's user config (`$CODEX_HOME/config.toml`,
@@ -17,11 +22,11 @@
 import { join } from 'node:path';
 import { homedir } from 'node:os';
 import { HarnessType, anthropicBaseUrl, openaiBaseUrl, proxyHost } from '@intutic/shared-types';
-import { hashFile } from '../lib/hash.js';
 import { loadCredentials } from '../config/store.js';
 import { newIso } from '@intutic/id';
 import { writeCodexHooks, mergeCodexConfig, writeOwnedFile } from '@intutic/sync-daemon';
-const CONFIG_FILE = '.env.intutic';
+import { AGENTS_MD, agentsMdHash, writeAgentsMd } from './agentsMd.js';
+const ENV_FILE = '.env.intutic';
 /** Codex's user config directory, resolved at call time so CODEX_HOME and
  *  HOME changes (and tests that move them) are honoured. */
 function codexHome() {
@@ -29,7 +34,7 @@ function codexHome() {
 }
 export const codexAdapter = {
     type: HarnessType.CODEX,
-    configFileName: CONFIG_FILE,
+    configFileName: AGENTS_MD,
     async detect(_workspaceRoot) {
         if (process.env.CODEX_HOME)
             return true;
@@ -47,9 +52,18 @@ export const codexAdapter = {
         catch { /* ignore */ }
         return false;
     },
+    async installGate(workspaceRoot, proxyUrl) {
+        // Codex user config — persists proxy routing across sessions without env
+        // sourcing. Merged; a config.toml that does not parse is left alone.
+        await mergeCodexConfig(join(codexHome(), 'config.toml'), openaiBaseUrl(proxyUrl));
+        // The PreToolUse gate. The routing above governs LLM egress only; the
+        // gate is what refuses tool calls.
+        const creds = await loadCredentials();
+        await writeCodexHooks(workspaceRoot, proxyUrl, creds?.workspaceId || 'local');
+    },
+    /** The `AGENTS.md` section, and the workspace `.env.intutic`. */
     async writeConfig(workspaceRoot, sops, proxyUrl) {
-        // 1. Workspace .env.intutic
-        const filePath = join(workspaceRoot, CONFIG_FILE);
+        const filePath = join(workspaceRoot, ENV_FILE);
         const envContent = [
             '# Intutic Governance Rules (auto-generated)',
             '# DO NOT EDIT — managed by intutic sync daemon',
@@ -63,22 +77,10 @@ export const codexAdapter = {
             '',
         ].join('\n');
         await writeOwnedFile(filePath, workspaceRoot, envContent);
-        // 2. Codex user config — persists proxy routing across sessions without
-        //    env sourcing. Merged; a config.toml that does not parse is left alone.
-        await mergeCodexConfig(join(codexHome(), 'config.toml'), openaiBaseUrl(proxyUrl));
-        // 3. The PreToolUse gate. The routing above governs LLM egress only; the
-        //    gate is what refuses tool calls.
-        const creds = await loadCredentials();
-        await writeCodexHooks(workspaceRoot, proxyUrl, creds?.workspaceId || 'local');
-        return filePath;
+        return (await writeAgentsMd(workspaceRoot, sops, proxyUrl)) ?? filePath;
     },
-    async readCurrentHash(workspaceRoot) {
-        try {
-            return await hashFile(join(workspaceRoot, CONFIG_FILE));
-        }
-        catch {
-            return null;
-        }
+    readCurrentHash(workspaceRoot) {
+        return agentsMdHash(workspaceRoot);
     },
 };
 //# sourceMappingURL=codex.js.map

package/dist/harness/codex.js.map

@@ -1 +1 @@
-{"version":3,"file":"codex.js","sourceRoot":"","sources":["../../src/harness/codex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAG/F,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAExF,MAAM,WAAW,GAAG,cAAc,CAAA;AAElC;4DAC4D;AAC5D,SAAS,SAAS;IAChB,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAA;AAC5D,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAoB;IAC3C,IAAI,EAAE,WAAW,CAAC,KAAK;IACvB,cAAc,EAAE,WAAW;IAE3B,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU;YAAE,OAAO,IAAI,CAAA;QACvC,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACzF,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;YAC9C,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,IAAI,CAAC;oBAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;oBAAC,OAAO,IAAI,CAAA;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxB,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;QAC7E,4BAA4B;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;QACjD,MAAM,UAAU,GAAG;YACjB,6CAA6C;YAC7C,gDAAgD;YAChD,gBAAgB,MAAM,EAAE,EAAE;YAC1B,yCAAyC;YACzC,EAAE;YACF,8BAA8B,gBAAgB,CAAC,QAAQ,CAAC,GAAG;YAC3D,2BAA2B,aAAa,CAAC,QAAQ,CAAC,GAAG;YACrD,6BAA6B,SAAS,CAAC,QAAQ,CAAC,GAAG;YACnD,4BAA4B,IAAI,CAAC,MAAM,EAAE;YACzC,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEZ,MAAM,cAAc,CAAC,QAAQ,EAAE,aAAa,EAAE,UAAU,CAAC,CAAA;QAEzD,wEAAwE;QACxE,4EAA4E;QAC5E,MAAM,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAA;QAEjF,yEAAyE;QACzE,sCAAsC;QACtC,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;QACrC,MAAM,eAAe,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,IAAI,OAAO,CAAC,CAAA;QAE7E,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,aAAqB;QACzC,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;CACF,CAAA"}
+{"version":3,"file":"codex.js","sourceRoot":"","sources":["../../src/harness/codex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAG/F,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACxF,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAEtE,MAAM,QAAQ,GAAG,cAAc,CAAA;AAE/B;4DAC4D;AAC5D,SAAS,SAAS;IAChB,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAA;AAC5D,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAoB;IAC3C,IAAI,EAAE,WAAW,CAAC,KAAK;IACvB,cAAc,EAAE,SAAS;IAEzB,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU;YAAE,OAAO,IAAI,CAAA;QACvC,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACzF,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;YAC9C,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,IAAI,CAAC;oBAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;oBAAC,OAAO,IAAI,CAAA;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxB,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,QAAgB;QACvD,yEAAyE;QACzE,qEAAqE;QACrE,MAAM,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAA;QAEjF,sEAAsE;QACtE,mCAAmC;QACnC,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;QACrC,MAAM,eAAe,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,IAAI,OAAO,CAAC,CAAA;IAC/E,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;QAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAA;QAC9C,MAAM,UAAU,GAAG;YACjB,6CAA6C;YAC7C,gDAAgD;YAChD,gBAAgB,MAAM,EAAE,EAAE;YAC1B,yCAAyC;YACzC,EAAE;YACF,8BAA8B,gBAAgB,CAAC,QAAQ,CAAC,GAAG;YAC3D,2BAA2B,aAAa,CAAC,QAAQ,CAAC,GAAG;YACrD,6BAA6B,SAAS,CAAC,QAAQ,CAAC,GAAG;YACnD,4BAA4B,IAAI,CAAC,MAAM,EAAE;YACzC,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEZ,MAAM,cAAc,CAAC,QAAQ,EAAE,aAAa,EAAE,UAAU,CAAC,CAAA;QACzD,OAAO,CAAC,MAAM,aAAa,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,IAAI,QAAQ,CAAA;IACzE,CAAC;IAED,eAAe,CAAC,aAAqB;QACnC,OAAO,YAAY,CAAC,aAAa,CAAC,CAAA;IACpC,CAAC;CACF,CAAA"}

package/dist/harness/continue.d.ts

@@ -4,10 +4,16 @@
  * Detects the Continue AI coding assistant and:
  * - sets `apiBase` on each OpenAI/Anthropic model in `~/.continue/config.yaml`
  *   so its LLM calls reach the proxy (merged; see continueConfigMerger.ts);
- * - installs the Continue CLI (`cn`) PreToolUse gate in
- *   `~/.continue/settings.json` and `<repo>/.continue/settings.json` (see
- *   continueHooks.ts). The IDE extension has no hook system, so for it proxy
- *   routing is the only mechanism.
+ * - installs no tool-call gate: the CLI (`cn`) loads PreToolUse hooks from
+ *   its settings but never fires them (`firePreToolUse` has no caller at
+ *   continuedev/continue main 5522c6f), and the IDE extension has no hook
+ *   system. The proxy and the rules below are what govern it;
+ * - writes the rule sets to `.continue/rules/intutic-governance.md` with
+ *   `alwaysApply: true`. The IDE extension reads the workspace root's
+ *   `.continue/rules/`, and the CLI the one in the directory it runs in,
+ *   which keeps only always-apply rules
+ *   (https://github.com/continuedev/continue/blob/5522c6f44ca0ac3528b37244818fbfa39b5af470/core/config/markdown/loadMarkdownRules.ts,
+ *   https://github.com/continuedev/continue/blob/5522c6f44ca0ac3528b37244818fbfa39b5af470/extensions/cli/src/systemMessage.ts).
  *
  * HLD §3.14 — Harness Onboarding Matrix
  * @module

package/dist/harness/continue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"continue.d.ts","sourceRoot":"","sources":["../../src/harness/continue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAWjD,eAAO,MAAM,eAAe,EAAE,eA6B7B,CAAA"}
+{"version":3,"file":"continue.d.ts","sourceRoot":"","sources":["../../src/harness/continue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAYjD,eAAO,MAAM,eAAe,EAAE,eA2B7B,CAAA"}

package/dist/harness/continue.js

@@ -4,10 +4,16 @@
  * Detects the Continue AI coding assistant and:
  * - sets `apiBase` on each OpenAI/Anthropic model in `~/.continue/config.yaml`
  *   so its LLM calls reach the proxy (merged; see continueConfigMerger.ts);
- * - installs the Continue CLI (`cn`) PreToolUse gate in
- *   `~/.continue/settings.json` and `<repo>/.continue/settings.json` (see
- *   continueHooks.ts). The IDE extension has no hook system, so for it proxy
- *   routing is the only mechanism.
+ * - installs no tool-call gate: the CLI (`cn`) loads PreToolUse hooks from
+ *   its settings but never fires them (`firePreToolUse` has no caller at
+ *   continuedev/continue main 5522c6f), and the IDE extension has no hook
+ *   system. The proxy and the rules below are what govern it;
+ * - writes the rule sets to `.continue/rules/intutic-governance.md` with
+ *   `alwaysApply: true`. The IDE extension reads the workspace root's
+ *   `.continue/rules/`, and the CLI the one in the directory it runs in,
+ *   which keeps only always-apply rules
+ *   (https://github.com/continuedev/continue/blob/5522c6f44ca0ac3528b37244818fbfa39b5af470/core/config/markdown/loadMarkdownRules.ts,
+ *   https://github.com/continuedev/continue/blob/5522c6f44ca0ac3528b37244818fbfa39b5af470/extensions/cli/src/systemMessage.ts).
  *
  * HLD §3.14 — Harness Onboarding Matrix
  * @module
@@ -15,10 +21,10 @@
 import { access, readdir } from 'node:fs/promises';
 import { join } from 'node:path';
 import { homedir } from 'node:os';
-import { HarnessType, openaiBaseUrl } from '@intutic/shared-types';
-import { hashFile } from '../lib/hash.js';
-import { loadCredentials } from '../config/store.js';
-import { mergeContinueConfig, writeContinueHooks } from '@intutic/sync-daemon';
+import { HarnessType, rulesFrontMatterOf, openaiBaseUrl } from '@intutic/shared-types';
+import { mergeContinueConfig } from '@intutic/sync-daemon';
+import { ownRulesFileHash, writeOwnRulesFile } from './rulesFiles.js';
+const RULES_FILE = '.continue/rules/intutic-governance.md';
 /** `~/.continue/<name>`, resolved at call time so HOME changes (and tests
  *  that move HOME) are honoured. */
 function continuePath(name) {
@@ -26,7 +32,7 @@ function continuePath(name) {
 }
 export const continueAdapter = {
     type: HarnessType.CONTINUE,
-    configFileName: continuePath('config.yaml'),
+    configFileName: RULES_FILE,
     async detect(_workspaceRoot) {
         for (const p of [continuePath('config.yaml'), continuePath('config.json')]) {
             try {
@@ -43,20 +49,14 @@ export const continueAdapter = {
             return false;
         }
     },
-    async writeConfig(workspaceRoot, _sops, proxyUrl) {
-        const configYaml = continuePath('config.yaml');
-        const routed = await mergeContinueConfig(configYaml, openaiBaseUrl(proxyUrl));
-        const creds = await loadCredentials();
-        await writeContinueHooks(workspaceRoot, proxyUrl, creds?.workspaceId || 'local');
-        return routed > 0 ? configYaml : null;
+    async installGate(workspaceRoot, proxyUrl) {
+        await mergeContinueConfig(continuePath('config.yaml'), openaiBaseUrl(proxyUrl));
     },
-    async readCurrentHash(_workspaceRoot) {
-        try {
-            return await hashFile(continuePath('config.yaml'));
-        }
-        catch {
-            return null;
-        }
+    writeConfig(workspaceRoot, sops, proxyUrl) {
+        return writeOwnRulesFile(workspaceRoot, RULES_FILE, sops, proxyUrl, rulesFrontMatterOf(HarnessType.CONTINUE, 'Intutic governance rules'));
+    },
+    readCurrentHash(workspaceRoot) {
+        return ownRulesFileHash(workspaceRoot, RULES_FILE);
     },
 };
 //# sourceMappingURL=continue.js.map

package/dist/harness/continue.js.map

@@ -1 +1 @@
-{"version":3,"file":"continue.js","sourceRoot":"","sources":["../../src/harness/continue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAGlE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAE9E;oCACoC;AACpC,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,CAAA;AAC3C,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAoB;IAC9C,IAAI,EAAE,WAAW,CAAC,QAAQ;IAC1B,cAAc,EAAE,YAAY,CAAC,aAAa,CAAC;IAE3C,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,KAAK,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,YAAY,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YAC3E,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAA;YACvE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,CAAA;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,KAAqB,EAAE,QAAgB;QAC9E,MAAM,UAAU,GAAG,YAAY,CAAC,aAAa,CAAC,CAAA;QAC9C,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAA;QAE7E,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;QACrC,MAAM,kBAAkB,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,IAAI,OAAO,CAAC,CAAA;QAEhF,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,cAAsB;QAC1C,IAAI,CAAC;YAAC,OAAO,MAAM,QAAQ,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAA;QAAC,CAAC;IAClF,CAAC;CACF,CAAA"}
+{"version":3,"file":"continue.js","sourceRoot":"","sources":["../../src/harness/continue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAGtF,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAErE,MAAM,UAAU,GAAG,uCAAuC,CAAA;AAE1D;oCACoC;AACpC,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,CAAA;AAC3C,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAoB;IAC9C,IAAI,EAAE,WAAW,CAAC,QAAQ;IAC1B,cAAc,EAAE,UAAU;IAE1B,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,KAAK,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,YAAY,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YAC3E,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAA;YACvE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,CAAA;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,QAAgB;QACvD,MAAM,mBAAmB,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAA;IACjF,CAAC;IAED,WAAW,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;QACvE,OAAO,iBAAiB,CAAC,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,kBAAkB,CAAC,WAAW,CAAC,QAAQ,EAAE,0BAA0B,CAAC,CAAC,CAAA;IAC3I,CAAC;IAED,eAAe,CAAC,aAAqB;QACnC,OAAO,gBAAgB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAA;IACpD,CAAC;CACF,CAAA"}

package/dist/harness/cursor.d.ts

@@ -1,8 +1,11 @@
 /**
  * cursor.ts — Cursor adapter (full implementation with 3-level hooks).
  *
- * Replaces the minimal createMarkdownAdapter stub with a full adapter that:
- * - Writes .cursorrules governance text (existing behaviour, kept)
+ * - Writes the rule sets to `.cursor/rules/intutic-governance.mdc`, a project
+ *   rule with `alwaysApply: true`, which Cursor adds to every request
+ *   (https://cursor.com/docs/context/rules; a plain `.md` there is ignored).
+ *   Earlier versions overwrote `.cursorrules`, a single file the current docs
+ *   no longer describe; the user's own copy of it comes back.
  * - Injects hooks.json at project-level AND user-level
  * - Enterprise system-level (/etc/cursor) is handled by the system administrator
  *

package/dist/harness/cursor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cursor.d.ts","sourceRoot":"","sources":["../../src/harness/cursor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAQjD,eAAO,MAAM,aAAa,EAAE,eA6B3B,CAAA"}
+{"version":3,"file":"cursor.d.ts","sourceRoot":"","sources":["../../src/harness/cursor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAOjD,eAAO,MAAM,aAAa,EAAE,eA2B3B,CAAA"}

package/dist/harness/cursor.js

@@ -1,8 +1,11 @@
 /**
  * cursor.ts — Cursor adapter (full implementation with 3-level hooks).
  *
- * Replaces the minimal createMarkdownAdapter stub with a full adapter that:
- * - Writes .cursorrules governance text (existing behaviour, kept)
+ * - Writes the rule sets to `.cursor/rules/intutic-governance.mdc`, a project
+ *   rule with `alwaysApply: true`, which Cursor adds to every request
+ *   (https://cursor.com/docs/context/rules; a plain `.md` there is ignored).
+ *   Earlier versions overwrote `.cursorrules`, a single file the current docs
+ *   no longer describe; the user's own copy of it comes back.
  * - Injects hooks.json at project-level AND user-level
  * - Enterprise system-level (/etc/cursor) is handled by the system administrator
  *
@@ -12,18 +15,17 @@
 import { access } from 'node:fs/promises';
 import { join } from 'node:path';
 import { homedir } from 'node:os';
-import { HarnessType } from '@intutic/shared-types';
-import { hashFile } from '../lib/hash.js';
-import { buildMarkdownContent } from './base.js';
+import { HarnessType, rulesFrontMatterOf } from '@intutic/shared-types';
 import { writeCursorHooks } from '@intutic/sync-daemon/harness/cursorHooks';
-import { writeOwnedFile } from '@intutic/sync-daemon';
-const CONFIG_FILE = '.cursorrules';
+import { ownRulesFileHash, retireLegacyRulesFile, writeOwnRulesFile } from './rulesFiles.js';
+const CONFIG_FILE = '.cursor/rules/intutic-governance.mdc';
+const LEGACY_FILE = '.cursorrules';
 export const cursorAdapter = {
     type: HarnessType.CURSOR,
     configFileName: CONFIG_FILE,
     async detect(workspaceRoot) {
         // .cursorrules or .cursor/ directory
-        for (const marker of [CONFIG_FILE, '.cursor']) {
+        for (const marker of [LEGACY_FILE, '.cursor']) {
             try {
                 await access(join(workspaceRoot, marker));
                 return true;
@@ -39,23 +41,17 @@ export const cursorAdapter = {
             return false;
         }
     },
-    async writeConfig(workspaceRoot, sops, proxyUrl) {
-        // 1. Write .cursorrules markdown governance text
-        const filePath = join(workspaceRoot, CONFIG_FILE);
-        const content = buildMarkdownContent(sops, proxyUrl);
-        await writeOwnedFile(filePath, workspaceRoot, content);
-        // 2. Inject hooks.json at project + user level (writeSystemLevel=false;
-        //    system level requires sudo execution)
+    /** hooks.json at project + user level; the system level needs
+     *  administrator rights and is `intutic enterprise install`'s job. */
+    async installGate(workspaceRoot, proxyUrl) {
         await writeCursorHooks(workspaceRoot, proxyUrl, '', false);
-        return filePath;
     },
-    async readCurrentHash(workspaceRoot) {
-        try {
-            return await hashFile(join(workspaceRoot, CONFIG_FILE));
-        }
-        catch {
-            return null;
-        }
+    async writeConfig(workspaceRoot, sops, proxyUrl) {
+        await retireLegacyRulesFile(workspaceRoot, LEGACY_FILE);
+        return writeOwnRulesFile(workspaceRoot, CONFIG_FILE, sops, proxyUrl, rulesFrontMatterOf(HarnessType.CURSOR, 'Intutic governance rules'));
+    },
+    readCurrentHash(workspaceRoot) {
+        return ownRulesFileHash(workspaceRoot, CONFIG_FILE);
     },
 };
 //# sourceMappingURL=cursor.js.map

package/dist/harness/cursor.js.map

@@ -1 +1 @@
-{"version":3,"file":"cursor.js","sourceRoot":"","sources":["../../src/harness/cursor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAA;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAErD,MAAM,WAAW,GAAG,cAAc,CAAA;AAElC,MAAM,CAAC,MAAM,aAAa,GAAoB;IAC5C,IAAI,EAAE,WAAW,CAAC,MAAM;IACxB,cAAc,EAAE,WAAW;IAE3B,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,qCAAqC;QACrC,KAAK,MAAM,MAAM,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAC7F,CAAC;QACD,kDAAkD;QAClD,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;YAAC,OAAO,IAAI,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAA;QAAC,CAAC;IACtF,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;QAC7E,iDAAiD;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;QACjD,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QACpD,MAAM,cAAc,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,CAAA;QAEtD,wEAAwE;QACxE,2CAA2C;QAC3C,MAAM,gBAAgB,CAAC,aAAa,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;QAE1D,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,aAAqB;QACzC,IAAI,CAAC;YAAC,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAA;QAAC,CAAC;IACvF,CAAC;CACF,CAAA"}
+{"version":3,"file":"cursor.js","sourceRoot":"","sources":["../../src/harness/cursor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAGvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAA;AAC3E,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAE5F,MAAM,WAAW,GAAG,sCAAsC,CAAA;AAC1D,MAAM,WAAW,GAAG,cAAc,CAAA;AAElC,MAAM,CAAC,MAAM,aAAa,GAAoB;IAC5C,IAAI,EAAE,WAAW,CAAC,MAAM;IACxB,cAAc,EAAE,WAAW;IAE3B,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,qCAAqC;QACrC,KAAK,MAAM,MAAM,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAC7F,CAAC;QACD,kDAAkD;QAClD,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;YAAC,OAAO,IAAI,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAA;QAAC,CAAC;IACtF,CAAC;IAED;0EACsE;IACtE,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,QAAgB;QACvD,MAAM,gBAAgB,CAAC,aAAa,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAC5D,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;QAC7E,MAAM,qBAAqB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;QACvD,OAAO,iBAAiB,CAAC,aAAa,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,kBAAkB,CAAC,WAAW,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC,CAAA;IAC1I,CAAC;IAED,eAAe,CAAC,aAAqB;QACnC,OAAO,gBAAgB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;IACrD,CAAC;CACF,CAAA"}

package/dist/harness/detector.d.ts

@@ -5,7 +5,6 @@
  * the workspace. Returns a DetectedHarness array for reporting.
  *
  * HLD §3.14 — Harness Onboarding Matrix
- * LLD #8 — Sync Daemon / CLI
  * @module
  */
 import type { DetectedHarness } from '@intutic/shared-types';

package/dist/harness/detector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"detector.d.ts","sourceRoot":"","sources":["../../src/harness/detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AA6CjD,uCAAuC;AACvC,eAAO,MAAM,YAAY,EAAE,eAAe,EA2CzC,CAAA;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAgBvF;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAEpE"}
+{"version":3,"file":"detector.d.ts","sourceRoot":"","sources":["../../src/harness/detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AA6CjD,uCAAuC;AACvC,eAAO,MAAM,YAAY,EAAE,eAAe,EA2CzC,CAAA;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAgBvF;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAEpE"}

package/dist/harness/detector.js

@@ -5,7 +5,6 @@
  * the workspace. Returns a DetectedHarness array for reporting.
  *
  * HLD §3.14 — Harness Onboarding Matrix
- * LLD #8 — Sync Daemon / CLI
  * @module
  */
 import { cursorAdapter } from './cursor.js';

package/dist/harness/detector.js.map

@@ -1 +1 @@
-{"version":3,"file":"detector.js","sourceRoot":"","sources":["../../src/harness/detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAA;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,uCAAuC;AACvC,MAAM,CAAC,MAAM,YAAY,GAAsB;IAC7C,aAAa;IACb,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,YAAY;IACZ,gBAAgB;IAChB,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,cAAc;IACd,eAAe;IACf,oBAAoB;IACpB,YAAY;IACZ,gBAAgB;IAChB,eAAe;IACf,SAAS;IACT,aAAa;IACb,oBAAoB;IACpB,gBAAgB;IAChB,WAAW;IACX,WAAW;IACX,eAAe;IACf,UAAU;IACV,WAAW;IACX,0BAA0B;IAC1B,gBAAgB;IAChB,aAAa;IACb,cAAc;IACd,UAAU;IACV,gBAAgB;IAChB,mBAAmB;IACnB,iBAAiB;IACjB,iBAAiB;IACjB,cAAc;IACd,qBAAqB;IACrB,aAAa;IACb,kBAAkB;IAClB,UAAU;IACV,gBAAgB;IAChB,mBAAmB;IACnB,oBAAoB;IACpB,gBAAgB;CACjB,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,aAAqB;IACzD,MAAM,OAAO,GAAsB,EAAE,CAAA;IAErC,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QACpD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,UAAU,EAAE,OAAO,CAAC,cAAc;gBAChC,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,cAAc,CAAC;gBAC7C,CAAC,CAAC,EAAE;YACN,QAAQ;YACR,WAAW,EAAE,IAAI;SAClB,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;AAClD,CAAC"}
+{"version":3,"file":"detector.js","sourceRoot":"","sources":["../../src/harness/detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAA;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,uCAAuC;AACvC,MAAM,CAAC,MAAM,YAAY,GAAsB;IAC7C,aAAa;IACb,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,YAAY;IACZ,gBAAgB;IAChB,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,cAAc;IACd,eAAe;IACf,oBAAoB;IACpB,YAAY;IACZ,gBAAgB;IAChB,eAAe;IACf,SAAS;IACT,aAAa;IACb,oBAAoB;IACpB,gBAAgB;IAChB,WAAW;IACX,WAAW;IACX,eAAe;IACf,UAAU;IACV,WAAW;IACX,0BAA0B;IAC1B,gBAAgB;IAChB,aAAa;IACb,cAAc;IACd,UAAU;IACV,gBAAgB;IAChB,mBAAmB;IACnB,iBAAiB;IACjB,iBAAiB;IACjB,cAAc;IACd,qBAAqB;IACrB,aAAa;IACb,kBAAkB;IAClB,UAAU;IACV,gBAAgB;IAChB,mBAAmB;IACnB,oBAAoB;IACpB,gBAAgB;CACjB,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,aAAqB;IACzD,MAAM,OAAO,GAAsB,EAAE,CAAA;IAErC,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QACpD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,UAAU,EAAE,OAAO,CAAC,cAAc;gBAChC,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,cAAc,CAAC;gBAC7C,CAAC,CAAC,EAAE;YACN,QAAQ;YACR,WAAW,EAAE,IAAI;SAClB,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;AAClD,CAAC"}

package/dist/harness/dsh.d.ts

@@ -2,9 +2,11 @@
  * dsh.ts — DeepSeek "dsh" adapter (binary `dsh`, `@deepseek-ai/dsh`,
  * developer preview since 2026-08-13).
  *
- * dsh is plugin-first (Cordis) and has no workspace-relative rules file this
- * adapter could write governance text into (see `types.ts`'s
- * `HARNESS_CONFIG_FILES.dsh`). The governance-critical half — the
+ * Rule sets go into the workspace's `AGENTS.md` through the shared writer
+ * (agentsMd.ts): dsh's default profile loads every `AGENTS.md` and
+ * `CLAUDE.md` from the git root down to where it runs
+ * (https://github.com/deepseek-ai/deepseek-harness/blob/5badb15009ae1756c3afe0ae0cef1faafc290ccc/packages/context/agent-instructions/README.md).
+ * The governance-critical half — the
  * `tools/pre-execute` Cordis plugin registration (`cordis.patch.yml` per
  * profile), the profile's `@intutic/gate` dependency, and the `llm-deepseek`
  * egress override in that same patch file — is delegated entirely to

package/dist/harness/dsh.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dsh.d.ts","sourceRoot":"","sources":["../../src/harness/dsh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAMH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAGjD,eAAO,MAAM,UAAU,EAAE,eA2ExB,CAAA"}
+{"version":3,"file":"dsh.d.ts","sourceRoot":"","sources":["../../src/harness/dsh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAMH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAIjD,eAAO,MAAM,UAAU,EAAE,eA4DxB,CAAA"}

package/dist/harness/dsh.js

@@ -2,9 +2,11 @@
  * dsh.ts — DeepSeek "dsh" adapter (binary `dsh`, `@deepseek-ai/dsh`,
  * developer preview since 2026-08-13).
  *
- * dsh is plugin-first (Cordis) and has no workspace-relative rules file this
- * adapter could write governance text into (see `types.ts`'s
- * `HARNESS_CONFIG_FILES.dsh`). The governance-critical half — the
+ * Rule sets go into the workspace's `AGENTS.md` through the shared writer
+ * (agentsMd.ts): dsh's default profile loads every `AGENTS.md` and
+ * `CLAUDE.md` from the git root down to where it runs
+ * (https://github.com/deepseek-ai/deepseek-harness/blob/5badb15009ae1756c3afe0ae0cef1faafc290ccc/packages/context/agent-instructions/README.md).
+ * The governance-critical half — the
  * `tools/pre-execute` Cordis plugin registration (`cordis.patch.yml` per
  * profile), the profile's `@intutic/gate` dependency, and the `llm-deepseek`
  * egress override in that same patch file — is delegated entirely to
@@ -17,15 +19,11 @@
 import { access } from 'node:fs/promises';
 import { join } from 'node:path';
 import { HarnessType } from '@intutic/shared-types';
-import { writeDshHooks, resolveDshHome, listDshProfileDirs } from '@intutic/sync-daemon/harness/dshHooks';
+import { writeDshHooks, resolveDshHome } from '@intutic/sync-daemon/harness/dshHooks';
+import { AGENTS_MD, agentsMdHash, writeAgentsMd } from './agentsMd.js';
 export const dshAdapter = {
     type: HarnessType.DEEPSEEK_HARNESS,
-    // No canonical workspace-relative config file — see types.ts's comment on
-    // this harness's HARNESS_CONFIG_FILES entry. detect/writeConfig/
-    // readCurrentHash below resolve dsh's real, $DSH_HOME-anchored paths
-    // directly, the same way goose.ts bypasses configFileName's
-    // workspaceRoot-join for its own home-anchored config.
-    configFileName: '',
+    configFileName: AGENTS_MD,
     async detect(_workspaceRoot) {
         const dshHome = resolveDshHome();
         // 1. `$DSH_HOME`/`~/.dsh` exists at all (settings.yaml, .credentials.yaml,
@@ -67,27 +65,17 @@ export const dshAdapter = {
         //    the CLI adapters this mirrors, not as an independent signal.
         return false;
     },
-    async writeConfig(workspaceRoot, _sops, proxyUrl) {
-        // No rules/markdown file for dsh — `sops` are not consulted here (same
-        // "no text-rules file" posture as goose.ts's own adapter). The plugin
-        // registration + egress row in each profile patch is the entirety of what this
-        // harness gets, and it happens for every existing profile, not one file.
+    // The plugin registration + egress row in each profile patch is the
+    // entirety of what this harness gets, and it happens for every existing
+    // profile, not one file.
+    async installGate(workspaceRoot, proxyUrl) {
         await writeDshHooks(workspaceRoot, proxyUrl, '');
-        const dshHome = resolveDshHome();
-        const profiles = await listDshProfileDirs(dshHome);
-        // Representative path for the connect-summary UI, matching the "return
-        // the path written" contract every other adapter follows — the first
-        // profile's patch file when one exists, otherwise the $DSH_HOME root
-        // itself (nothing was written yet; the next sync cycle picks it up once
-        // a profile exists, per dshHooks.ts's own module doc).
-        return profiles.length > 0 ? join(profiles[0], 'cordis.patch.yml') : dshHome;
     },
-    async readCurrentHash(_workspaceRoot) {
-        // No single canonical file to hash — dsh may have zero, one, or several
-        // profiles, each with its own cordis.patch.yml. Matching goose.ts/
-        // cline.ts's own "no rules file" precedent, this reports no hash rather
-        // than picking one arbitrary profile's file to represent all of them.
-        return null;
+    writeConfig(workspaceRoot, sops, proxyUrl) {
+        return writeAgentsMd(workspaceRoot, sops, proxyUrl);
+    },
+    readCurrentHash(workspaceRoot) {
+        return agentsMdHash(workspaceRoot);
     },
 };
 //# sourceMappingURL=dsh.js.map

package/dist/harness/dsh.js.map

@@ -1 +1 @@
-{"version":3,"file":"dsh.js","sourceRoot":"","sources":["../../src/harness/dsh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAA;AAEzG,MAAM,CAAC,MAAM,UAAU,GAAoB;IACzC,IAAI,EAAE,WAAW,CAAC,gBAAgB;IAClC,0EAA0E;IAC1E,iEAAiE;IACjE,qEAAqE;IACrE,4DAA4D;IAC5D,uDAAuD;IACvD,cAAc,EAAE,EAAE;IAElB,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAA;QAEhC,2EAA2E;QAC3E,yEAAyE;QACzE,KAAK,MAAM,MAAM,IAAI,CAAC,eAAe,EAAE,mBAAmB,EAAE,UAAU,CAAC,EAAE,CAAC;YACxE,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;gBACnC,OAAO,IAAI,CAAA;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,sEAAsE;QACtE,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACzF,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;YAC9C,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,IAAI,CAAC;oBACH,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAA;oBAC5B,OAAO,IAAI,CAAA;gBACb,CAAC;gBAAC,MAAM,CAAC;oBACP,cAAc;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QAED,2EAA2E;QAC3E,wEAAwE;QACxE,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,mEAAmE;QACnE,uEAAuE;QACvE,kEAAkE;QAClE,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,KAAqB,EAAE,QAAgB;QAC9E,uEAAuE;QACvE,sEAAsE;QACtE,+EAA+E;QAC/E,yEAAyE;QACzE,MAAM,aAAa,CAAC,aAAa,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;QAEhD,MAAM,OAAO,GAAG,cAAc,EAAE,CAAA;QAChC,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAA;QAClD,uEAAuE;QACvE,qEAAqE;QACrE,qEAAqE;QACrE,wEAAwE;QACxE,uDAAuD;QACvD,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;IAC/E,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,cAAsB;QAC1C,wEAAwE;QACxE,mEAAmE;QACnE,wEAAwE;QACxE,sEAAsE;QACtE,OAAO,IAAI,CAAA;IACb,CAAC;CACF,CAAA"}
+{"version":3,"file":"dsh.js","sourceRoot":"","sources":["../../src/harness/dsh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACrF,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAEtE,MAAM,CAAC,MAAM,UAAU,GAAoB;IACzC,IAAI,EAAE,WAAW,CAAC,gBAAgB;IAClC,cAAc,EAAE,SAAS;IAEzB,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAA;QAEhC,2EAA2E;QAC3E,yEAAyE;QACzE,KAAK,MAAM,MAAM,IAAI,CAAC,eAAe,EAAE,mBAAmB,EAAE,UAAU,CAAC,EAAE,CAAC;YACxE,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;gBACnC,OAAO,IAAI,CAAA;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,sEAAsE;QACtE,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACzF,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;YAC9C,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,IAAI,CAAC;oBACH,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAA;oBAC5B,OAAO,IAAI,CAAA;gBACb,CAAC;gBAAC,MAAM,CAAC;oBACP,cAAc;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QAED,2EAA2E;QAC3E,wEAAwE;QACxE,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,mEAAmE;QACnE,uEAAuE;QACvE,kEAAkE;QAClE,OAAO,KAAK,CAAA;IACd,CAAC;IAED,oEAAoE;IACpE,wEAAwE;IACxE,yBAAyB;IACzB,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,QAAgB;QACvD,MAAM,aAAa,CAAC,aAAa,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;IAClD,CAAC;IAED,WAAW,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;QACvE,OAAO,aAAa,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;IACrD,CAAC;IAED,eAAe,CAAC,aAAqB;QACnC,OAAO,YAAY,CAAC,aAAa,CAAC,CAAA;IACpC,CAAC;CACF,CAAA"}

package/dist/harness/eve.d.ts

@@ -16,20 +16,19 @@
  * No version floor: eve is pre-1.0 (0.39.x at integration time) and the
  * `approval` surface `@intutic/gate/eve` targets has no known major-version
  * boundary to gate on — the churn risk is handled by the gate package's own
- * pinned devDependency verification instead (TD-410).
+ * pinned devDependency verification instead.
  *
  * PREVIEW-CHURN NOTE (same shield the dsh integration established): eve is a
  * fast-moving preview product. `@intutic/gate/eve` was verified against
  * eve@0.71.0's shipped `.d.ts` (first 0.39.1) — see that module's doc for exactly what was
- * confirmed vs. assumed, and docs/TECH_DEBT.md TD-410/TD-411/TD-412.
+ * confirmed vs. assumed.
  *
  * LLM-egress note carried into the generated `.env.intutic`: eve routes
  * models through the Vercel AI Gateway by default, whose wire protocol the
  * Intutic proxy does not parse — and like the plain Vercel AI SDK it is
  * built on, eve has no env-var base-URL override. Only the in-code
  * direct-provider path (`defineAgent({ model: withIntuticProxy(...)(...) })`)
- * routes through the proxy. See TD-412 and
- * `apps/docs/integrations/eve.md`.
+ * routes through the proxy. See `apps/docs/integrations/eve.md`.
  *
  * HLD §3.14 — Harness Onboarding Matrix
  * @module

package/dist/harness/eve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"eve.d.ts","sourceRoot":"","sources":["../../src/harness/eve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAiBjD,2EAA2E;AAC3E,eAAO,MAAM,UAAU,EAAE,eAWxB,CAAA"}
+{"version":3,"file":"eve.d.ts","sourceRoot":"","sources":["../../src/harness/eve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAiBjD,2EAA2E;AAC3E,eAAO,MAAM,UAAU,EAAE,eAWxB,CAAA"}

package/dist/harness/eve.js

@@ -16,20 +16,19 @@
  * No version floor: eve is pre-1.0 (0.39.x at integration time) and the
  * `approval` surface `@intutic/gate/eve` targets has no known major-version
  * boundary to gate on — the churn risk is handled by the gate package's own
- * pinned devDependency verification instead (TD-410).
+ * pinned devDependency verification instead.
  *
  * PREVIEW-CHURN NOTE (same shield the dsh integration established): eve is a
  * fast-moving preview product. `@intutic/gate/eve` was verified against
  * eve@0.71.0's shipped `.d.ts` (first 0.39.1) — see that module's doc for exactly what was
- * confirmed vs. assumed, and docs/TECH_DEBT.md TD-410/TD-411/TD-412.
+ * confirmed vs. assumed.
  *
  * LLM-egress note carried into the generated `.env.intutic`: eve routes
  * models through the Vercel AI Gateway by default, whose wire protocol the
  * Intutic proxy does not parse — and like the plain Vercel AI SDK it is
  * built on, eve has no env-var base-URL override. Only the in-code
  * direct-provider path (`defineAgent({ model: withIntuticProxy(...)(...) })`)
- * routes through the proxy. See TD-412 and
- * `apps/docs/integrations/eve.md`.
+ * routes through the proxy. See `apps/docs/integrations/eve.md`.
  *
  * HLD §3.14 — Harness Onboarding Matrix
  * @module

package/dist/harness/eve.js.map

@@ -1 +1 @@
-{"version":3,"file":"eve.js","sourceRoot":"","sources":["../../src/harness/eve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAEnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAE9D,MAAM,IAAI,GAAG,qBAAqB,CAAC;IACjC,IAAI,EAAE,WAAW,CAAC,GAAG;IACrB,KAAK,EAAE,KAAK;IACZ,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC3B,UAAU,EAAE,eAAe;IAC3B,UAAU,EAAE,wEAAwE;IACpF,YAAY,EACV,6FAA6F;QAC7F,qFAAqF;QACrF,sFAAsF;QACtF,yFAAyF;IAC3F,QAAQ,EAAE,KAAK;CAChB,CAAC,CAAA;AAEF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,UAAU,GAAoB;IACzC,GAAG,IAAI;IAEP,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;QACrD,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA,CAAC,6DAA6D;QAC5E,CAAC;IACH,CAAC;CACF,CAAA"}
+{"version":3,"file":"eve.js","sourceRoot":"","sources":["../../src/harness/eve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAEnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAE9D,MAAM,IAAI,GAAG,qBAAqB,CAAC;IACjC,IAAI,EAAE,WAAW,CAAC,GAAG;IACrB,KAAK,EAAE,KAAK;IACZ,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC3B,UAAU,EAAE,eAAe;IAC3B,UAAU,EAAE,wEAAwE;IACpF,YAAY,EACV,6FAA6F;QAC7F,qFAAqF;QACrF,sFAAsF;QACtF,yFAAyF;IAC3F,QAAQ,EAAE,KAAK;CAChB,CAAC,CAAA;AAEF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,UAAU,GAAoB;IACzC,GAAG,IAAI;IAEP,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;QACrD,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA,CAAC,6DAA6D;QAC5E,CAAC;IACH,CAAC;CACF,CAAA"}

package/dist/harness/githubCopilot.d.ts

@@ -2,7 +2,10 @@
  * githubCopilot.ts — GitHub Copilot adapter.
  *
  * Detects GitHub Copilot presence (.git, .github, or .github/copilot-instructions.md),
- * writes Markdown rules to `.github/copilot-instructions.md`, and installs the
+ * writes the rule sets as a marked section of `.github/copilot-instructions.md`
+ * (the repository-wide instructions file Copilot adds to every chat, agent
+ * and code-review request; https://docs.github.com/en/copilot/how-tos/configure-custom-instructions/add-repository-instructions),
+ * keeping the team's own instructions in it, and installs the
  * VS Code agent-mode PreToolUse gate (`.github/hooks/intutic-governance.json`
  * and `~/.copilot/hooks/intutic-governance.json`) — see githubCopilotHooks.ts.
  *

package/dist/harness/githubCopilot.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"githubCopilot.d.ts","sourceRoot":"","sources":["../../src/harness/githubCopilot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAQjD,eAAO,MAAM,oBAAoB,EAAE,eAqClC,CAAA"}
+{"version":3,"file":"githubCopilot.d.ts","sourceRoot":"","sources":["../../src/harness/githubCopilot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAOjD,eAAO,MAAM,oBAAoB,EAAE,eA6BlC,CAAA"}

package/dist/harness/githubCopilot.js

@@ -2,7 +2,10 @@
  * githubCopilot.ts — GitHub Copilot adapter.
  *
  * Detects GitHub Copilot presence (.git, .github, or .github/copilot-instructions.md),
- * writes Markdown rules to `.github/copilot-instructions.md`, and installs the
+ * writes the rule sets as a marked section of `.github/copilot-instructions.md`
+ * (the repository-wide instructions file Copilot adds to every chat, agent
+ * and code-review request; https://docs.github.com/en/copilot/how-tos/configure-custom-instructions/add-repository-instructions),
+ * keeping the team's own instructions in it, and installs the
  * VS Code agent-mode PreToolUse gate (`.github/hooks/intutic-governance.json`
  * and `~/.copilot/hooks/intutic-governance.json`) — see githubCopilotHooks.ts.
  *
@@ -13,10 +16,9 @@ import { join } from 'node:path';
 import { access } from 'node:fs/promises';
 import { existsSync } from 'node:fs';
 import { HarnessType } from '@intutic/shared-types';
-import { hashFile } from '../lib/hash.js';
-import { buildMarkdownContent } from './base.js';
 import { loadCredentials } from '../config/store.js';
-import { writeGithubCopilotHooks, writeOwnedFile } from '@intutic/sync-daemon';
+import { writeGithubCopilotHooks } from '@intutic/sync-daemon';
+import { rulesSectionHash, writeRulesSectionFile } from './rulesFiles.js';
 const CONFIG_FILE = '.github/copilot-instructions.md';
 export const githubCopilotAdapter = {
     type: HarnessType.GITHUB_COPILOT,
@@ -35,25 +37,15 @@ export const githubCopilotAdapter = {
             return false;
         }
     },
-    async writeConfig(workspaceRoot, sops, proxyUrl) {
-        // The gate is installed even with zero SOPs: it is what refuses tool
-        // calls, and the built-in protections apply without any SOP.
+    async installGate(workspaceRoot, proxyUrl) {
         const creds = await loadCredentials();
         await writeGithubCopilotHooks(workspaceRoot, proxyUrl, creds?.workspaceId || 'local');
-        if (sops.length === 0)
-            return null;
-        const filePath = join(workspaceRoot, CONFIG_FILE);
-        const content = buildMarkdownContent(sops, proxyUrl);
-        await writeOwnedFile(filePath, workspaceRoot, content);
-        return filePath;
     },
-    async readCurrentHash(workspaceRoot) {
-        try {
-            return await hashFile(join(workspaceRoot, CONFIG_FILE));
-        }
-        catch {
-            return null;
-        }
+    writeConfig(workspaceRoot, sops, proxyUrl) {
+        return writeRulesSectionFile(workspaceRoot, CONFIG_FILE, sops, proxyUrl);
+    },
+    readCurrentHash(workspaceRoot) {
+        return rulesSectionHash(workspaceRoot, CONFIG_FILE);
     },
 };
 //# sourceMappingURL=githubCopilot.js.map