@intutic/cli 2.2.0 → 2.3.0

package/dist/harness/n8n.js

@@ -1,39 +1,29 @@
 /**
- * n8n adapter — Real-time REST parameter sync plus the workflow-level gate.
+ * n8n adapter — the workflow-level gate.
  *
- * Interacts with n8n workflow management API (GET/PUT /api/v1/workflows)
- * to inject Intutic proxy URL and SOP governance rules as workflow variables,
- * and writes the external-hook gate module (`~/.intutic/hooks/
+ * Writes the external-hook gate module (`~/.intutic/hooks/
  * n8n-governance-hook.js`) with its INSTALL.md — see n8nHooks.ts. The gate
  * takes effect only once the n8n operator sets EXTERNAL_HOOK_FILES to it.
  *
- * Supports local n8n instances by falling back to unauthenticated requests
- * if N8N_API_TOKEN is not provided.
+ * Rule sets are not written anywhere for n8n: n8n has no file or setting it
+ * loads as standing instructions. An AI Agent node's system message is a
+ * parameter of that node, written by whoever builds the workflow. Earlier
+ * versions put the rule sets in each workflow's `settings.variables` through
+ * `PUT /api/v1/workflows/{id}`, but the public API's workflow-settings schema
+ * has had `additionalProperties: false` since the API was introduced, with no
+ * free-text field, so every one of those updates was refused with a 400
+ * (https://github.com/n8n-io/n8n/blob/6fc0aeda35ea62ee353dd80b0f8d3e0f1f4e50d0/packages/cli/src/public-api/v1/handlers/workflows/spec/schemas/workflowSettings.yml).
+ * n8n's instance variables are no substitute: a value is capped at 1,000
+ * characters and the feature needs a paid licence
+ * (https://github.com/n8n-io/n8n/blob/6fc0aeda35ea62ee353dd80b0f8d3e0f1f4e50d0/packages/@n8n/api-types/src/dto/variables/base.dto.ts).
  *
  * HLD §3.14 — Harness Onboarding Matrix
- * Tech Debt: TD-037 — n8n API Adapter
  *
  * @module
  */
-import { createHash } from 'node:crypto';
 import { HarnessType } from '@intutic/shared-types';
 import { loadCredentials } from '../config/store.js';
 import { writeN8nHooks } from '@intutic/sync-daemon';
-// Format SOPs for n8n parameters
-function buildSopsMarkdown(sops) {
-    if (sops.length === 0)
-        return '';
-    return sops.map((sop) => `## ${sop.title}\n\n${sop.content}`).join('\n\n---\n\n') + '\n';
-}
-function getHeaders() {
-    const headers = {
-        'Content-Type': 'application/json',
-    };
-    if (process.env.N8N_API_TOKEN) {
-        headers['X-N8N-API-KEY'] = process.env.N8N_API_TOKEN;
-    }
-    return headers;
-}
 export const n8nAdapter = {
     type: HarnessType.N8N,
     configFileName: '',
@@ -47,167 +37,17 @@ export const n8nAdapter = {
             return !!process.env.N8N_API_TOKEN;
         }
     },
-    async writeConfig(workspaceRoot, sops, proxyUrl) {
-        // Written first and independently of the REST sync below: the gate file
-        // is local, and an unreachable n8n API must not stop it being refreshed.
+    /** The local external-hook gate. */
+    async installGate(workspaceRoot, proxyUrl) {
         const creds = await loadCredentials();
         await writeN8nHooks(workspaceRoot, proxyUrl, creds?.workspaceId || 'local');
-        const n8nUrl = process.env.N8N_URL || 'http://localhost:5678';
-        const sopsMarkdown = buildSopsMarkdown(sops);
-        try {
-            // 1. Get list of workflows
-            const listRes = await fetch(`${n8nUrl}/api/v1/workflows`, {
-                headers: getHeaders(),
-                signal: AbortSignal.timeout(5000),
-            });
-            if (!listRes.ok) {
-                throw new Error(`Failed to list workflows: ${listRes.statusText}`);
-            }
-            const listData = (await listRes.json());
-            const workflows = listData.data || [];
-            if (workflows.length === 0) {
-                return 'n8n:no_workflows';
-            }
-            // 2. Inject parameters into variables of each workflow
-            let updated = 0;
-            for (const w of workflows) {
-                const detailRes = await fetch(`${n8nUrl}/api/v1/workflows/${w.id}`, {
-                    headers: getHeaders(),
-                    signal: AbortSignal.timeout(5000),
-                });
-                if (!detailRes.ok)
-                    continue;
-                const detail = (await detailRes.json());
-                // Inject Intutic values, preserving the workflow's own settings and
-                // any variables it already had.
-                const settings = {
-                    ...detail.settings,
-                    variables: {
-                        ...detail.settings?.variables,
-                        intutic_proxy_url: proxyUrl,
-                        intutic_governance_rules: sopsMarkdown,
-                    },
-                };
-                // Only the writable fields — see N8nWorkflowUpdateBody. Echoing the
-                // whole GET payload back (which is what this used to do) is rejected
-                // by the API's additionalProperties check.
-                const body = {
-                    name: detail.name ?? w.name ?? 'Untitled',
-                    nodes: detail.nodes ?? [],
-                    connections: detail.connections ?? {},
-                    settings,
-                };
-                if (detail.staticData !== undefined) {
-                    body.staticData = detail.staticData;
-                }
-                // Save updated workflow
-                const updateRes = await fetch(`${n8nUrl}/api/v1/workflows/${w.id}`, {
-                    method: 'PUT',
-                    headers: getHeaders(),
-                    body: JSON.stringify(body),
-                    signal: AbortSignal.timeout(5000),
-                });
-                if (!updateRes.ok) {
-                    console.warn(`[n8n-adapter] workflow ${w.id} was not updated: HTTP ${updateRes.status} ${updateRes.statusText}`);
-                    continue;
-                }
-                updated++;
-            }
-            // Reporting a write that every workflow rejected as a success left the
-            // sync daemon recording a config version it had never applied.
-            if (updated === 0)
-                return null;
-            return `n8n:${updated}_workflows`;
-        }
-        catch (err) {
-            console.warn(`[n8n-adapter] failed to sync parameters:`, err);
-            return null;
-        }
     },
-    async readCurrentHash(_workspaceRoot) {
-        const n8nUrl = process.env.N8N_URL || 'http://localhost:5678';
-        try {
-            const listRes = await fetch(`${n8nUrl}/api/v1/workflows`, {
-                headers: getHeaders(),
-                signal: AbortSignal.timeout(3000),
-            });
-            if (!listRes.ok)
-                return null;
-            const listData = (await listRes.json());
-            const workflows = listData.data || [];
-            if (workflows.length === 0)
-                return null;
-            // Fetch the first workflow's variables to compute the hash
-            const firstId = workflows[0].id;
-            const detailRes = await fetch(`${n8nUrl}/api/v1/workflows/${firstId}`, {
-                headers: getHeaders(),
-                signal: AbortSignal.timeout(3000),
-            });
-            if (!detailRes.ok)
-                return null;
-            const detail = (await detailRes.json());
-            const rules = detail.settings?.variables?.intutic_governance_rules ?? '';
-            if (!rules)
-                return null;
-            return createHash('sha256').update(rules, 'utf-8').digest('hex');
-        }
-        catch {
-            return null;
-        }
+    /** No rules file: see the module doc. */
+    async writeConfig() {
+        return null;
+    },
+    async readCurrentHash() {
+        return null;
     },
 };
-/** The workflow variables `writeConfig` sets; `intutic disconnect` takes them out again. */
-const INTUTIC_VARIABLES = ['intutic_proxy_url', 'intutic_governance_rules'];
-/**
- * Plans removing the two variables `writeConfig` sets on every workflow in
- * the local n8n. Read-only until the plan is applied; an n8n that does not
- * answer gets a note instead.
- */
-export async function planN8nDisconnect(plan) {
-    const n8nUrl = process.env.N8N_URL || 'http://localhost:5678';
-    let workflows;
-    try {
-        const listRes = await fetch(`${n8nUrl}/api/v1/workflows`, { headers: getHeaders(), signal: AbortSignal.timeout(5000) });
-        if (!listRes.ok)
-            throw new Error(`HTTP ${listRes.status}`);
-        workflows = (await listRes.json()).data ?? [];
-    }
-    catch (err) {
-        plan.note(n8nUrl, `n8n did not answer (${err instanceof Error ? err.message : String(err)}), so its workflows were not checked for the ${INTUTIC_VARIABLES.join(' and ')} variables`);
-        return;
-    }
-    for (const w of workflows) {
-        const detailRes = await fetch(`${n8nUrl}/api/v1/workflows/${w.id}`, { headers: getHeaders(), signal: AbortSignal.timeout(5000) });
-        if (!detailRes.ok)
-            continue;
-        const detail = (await detailRes.json());
-        const variables = detail.settings?.variables;
-        if (!variables || !INTUTIC_VARIABLES.some((k) => k in variables))
-            continue;
-        plan.change(`${n8nUrl}/api/v1/workflows/${w.id}`, `remove the Intutic variables from workflow "${detail.name ?? w.name ?? w.id}"`, async () => {
-            const kept = Object.fromEntries(Object.entries(variables).filter(([k]) => !INTUTIC_VARIABLES.includes(k)));
-            const settings = { ...detail.settings };
-            if (Object.keys(kept).length > 0)
-                settings.variables = kept;
-            else
-                delete settings.variables;
-            const body = {
-                name: detail.name ?? w.name ?? 'Untitled',
-                nodes: detail.nodes ?? [],
-                connections: detail.connections ?? {},
-                settings,
-            };
-            if (detail.staticData !== undefined)
-                body.staticData = detail.staticData;
-            const res = await fetch(`${n8nUrl}/api/v1/workflows/${w.id}`, {
-                method: 'PUT',
-                headers: getHeaders(),
-                body: JSON.stringify(body),
-                signal: AbortSignal.timeout(5000),
-            });
-            if (!res.ok)
-                throw new Error(`n8n refused the update to workflow ${w.id}: HTTP ${res.status}`);
-        });
-    }
-}
 //# sourceMappingURL=n8n.js.map

package/dist/harness/n8n.js.map

@@ -1 +1 @@
-{"version":3,"file":"n8n.js","sourceRoot":"","sources":["../../src/harness/n8n.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,aAAa,EAAuB,MAAM,sBAAsB,CAAA;AAwDzE,iCAAiC;AACjC,SAAS,iBAAiB,CAAC,IAAoB;IAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAChC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,KAAK,OAAO,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,IAAI,CAAA;AAC1F,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;KACnC,CAAA;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;QAC9B,OAAO,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAA;IACtD,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAoB;IACzC,IAAI,EAAE,WAAW,CAAC,GAAG;IACrB,cAAc,EAAE,EAAE;IAElB,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAuB,CAAA;QAC7D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,gBAAgB,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACzF,OAAO,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAA;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAA;QACpC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;QAC7E,wEAAwE;QACxE,yEAAyE;QACzE,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;QACrC,MAAM,aAAa,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,IAAI,OAAO,CAAC,CAAA;QAE3E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAuB,CAAA;QAC7D,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;QAE5C,IAAI,CAAC;YACH,2BAA2B;YAC3B,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,mBAAmB,EAAE;gBACxD,OAAO,EAAE,UAAU,EAAE;gBACrB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAA;YAEF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;YACpE,CAAC;YAED,MAAM,QAAQ,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAA4B,CAAA;YAClE,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAA;YAErC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO,kBAAkB,CAAA;YAC3B,CAAC;YAED,uDAAuD;YACvD,IAAI,OAAO,GAAG,CAAC,CAAA;YACf,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;gBAC1B,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,qBAAqB,CAAC,CAAC,EAAE,EAAE,EAAE;oBAClE,OAAO,EAAE,UAAU,EAAE;oBACrB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBAClC,CAAC,CAAA;gBAEF,IAAI,CAAC,SAAS,CAAC,EAAE;oBAAE,SAAQ;gBAE3B,MAAM,MAAM,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAsB,CAAA;gBAE5D,oEAAoE;gBACpE,gCAAgC;gBAChC,MAAM,QAAQ,GAAwB;oBACpC,GAAG,MAAM,CAAC,QAAQ;oBAClB,SAAS,EAAE;wBACT,GAAG,MAAM,CAAC,QAAQ,EAAE,SAAS;wBAC7B,iBAAiB,EAAE,QAAQ;wBAC3B,wBAAwB,EAAE,YAAY;qBACvC;iBACF,CAAA;gBAED,oEAAoE;gBACpE,qEAAqE;gBACrE,2CAA2C;gBAC3C,MAAM,IAAI,GAA0B;oBAClC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,UAAU;oBACzC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;oBACzB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;oBACrC,QAAQ;iBACT,CAAA;gBACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;oBACpC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAA;gBACrC,CAAC;gBAED,wBAAwB;gBACxB,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,qBAAqB,CAAC,CAAC,EAAE,EAAE,EAAE;oBAClE,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,UAAU,EAAE;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBAClC,CAAC,CAAA;gBAEF,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;oBAClB,OAAO,CAAC,IAAI,CACV,0BAA0B,CAAC,CAAC,EAAE,0BAA0B,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,CACnG,CAAA;oBACD,SAAQ;gBACV,CAAC;gBACD,OAAO,EAAE,CAAA;YACX,CAAC;YAED,uEAAuE;YACvE,+DAA+D;YAC/D,IAAI,OAAO,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAA;YAE9B,OAAO,OAAO,OAAO,YAAY,CAAA;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAA;YAC7D,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,cAAsB;QAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAuB,CAAA;QAC7D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,mBAAmB,EAAE;gBACxD,OAAO,EAAE,UAAU,EAAE;gBACrB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAA;YAEF,IAAI,CAAC,OAAO,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAA;YAE5B,MAAM,QAAQ,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAA4B,CAAA;YAClE,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAA;YACrC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAA;YAEvC,2DAA2D;YAC3D,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YAC/B,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,qBAAqB,OAAO,EAAE,EAAE;gBACrE,OAAO,EAAE,UAAU,EAAE;gBACrB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAA;YAEF,IAAI,CAAC,SAAS,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAA;YAE9B,MAAM,MAAM,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAsB,CAAA;YAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,wBAAwB,IAAI,EAAE,CAAA;YACxE,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAA;YAEvB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;CACF,CAAA;AAED,4FAA4F;AAC5F,MAAM,iBAAiB,GAAG,CAAC,mBAAmB,EAAE,0BAA0B,CAAC,CAAA;AAE3E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAoB;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAuB,CAAA;IAC7D,IAAI,SAAiC,CAAA;IACrC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,mBAAmB,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACvH,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;QAC1D,SAAS,GAAI,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAA6B,CAAC,IAAI,IAAI,EAAE,CAAA;IAC5E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,IAAI,CACP,MAAM,EACN,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,gDAAgD,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CACnK,CAAA;QACD,OAAM;IACR,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,qBAAqB,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACjI,IAAI,CAAC,SAAS,CAAC,EAAE;YAAE,SAAQ;QAC3B,MAAM,MAAM,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAsB,CAAA;QAC5D,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAA;QAC5C,IAAI,CAAC,SAAS,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,SAAS,CAAC;YAAE,SAAQ;QAE1E,IAAI,CAAC,MAAM,CAAC,GAAG,MAAM,qBAAqB,CAAC,CAAC,EAAE,EAAE,EAAE,+CAA+C,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE;YAC5I,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC1G,MAAM,QAAQ,GAAwB,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAA;YAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAA;;gBACtD,OAAO,QAAQ,CAAC,SAAS,CAAA;YAC9B,MAAM,IAAI,GAA0B;gBAClC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,UAAU;gBACzC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;gBACzB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;gBACrC,QAAQ;aACT,CAAA;YACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;gBAAE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAA;YACxE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,qBAAqB,CAAC,CAAC,EAAE,EAAE,EAAE;gBAC5D,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,UAAU,EAAE;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAA;YACF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;QAChG,CAAC,CAAC,CAAA;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"n8n.js","sourceRoot":"","sources":["../../src/harness/n8n.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAEpD,MAAM,CAAC,MAAM,UAAU,GAAoB;IACzC,IAAI,EAAE,WAAW,CAAC,GAAG;IACrB,cAAc,EAAE,EAAE;IAElB,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAuB,CAAA;QAC7D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,gBAAgB,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACzF,OAAO,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAA;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAA;QACpC,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,QAAgB;QACvD,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;QACrC,MAAM,aAAa,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,IAAI,OAAO,CAAC,CAAA;IAC7E,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,OAAO,IAAI,CAAA;IACb,CAAC;CACF,CAAA"}

package/dist/harness/openWebUI.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openWebUI.d.ts","sourceRoot":"","sources":["../../src/harness/openWebUI.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAIjD,eAAO,MAAM,gBAAgB,EAAE,eAiB9B,CAAA"}
+{"version":3,"file":"openWebUI.d.ts","sourceRoot":"","sources":["../../src/harness/openWebUI.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAIjD,eAAO,MAAM,gBAAgB,EAAE,eAqB9B,CAAA"}

package/dist/harness/openWebUI.js

@@ -13,8 +13,6 @@
  * HLD §3.14 — Harness Onboarding Matrix
  * @module
  */
-import { join } from 'node:path';
-import { homedir } from 'node:os';
 import { HarnessType } from '@intutic/shared-types';
 import { loadCredentials } from '../config/store.js';
 import { writeOpenWebuiHooks } from '@intutic/sync-daemon';
@@ -24,10 +22,13 @@ export const openWebUIAdapter = {
     async detect(_workspaceRoot) {
         return false;
     },
-    async writeConfig(workspaceRoot, _sops, proxyUrl) {
+    async installGate(workspaceRoot, proxyUrl) {
         const creds = await loadCredentials();
         await writeOpenWebuiHooks(workspaceRoot, proxyUrl, creds?.workspaceId || 'local');
-        return join(homedir(), '.open-webui', 'intutic-governance-filter.py');
+    },
+    /** No rules file: the filter an admin installs is this harness's governance. */
+    async writeConfig() {
+        return null;
     },
     async readCurrentHash() {
         return null;

package/dist/harness/openWebUI.js.map

@@ -1 +1 @@
-{"version":3,"file":"openWebUI.js","sourceRoot":"","sources":["../../src/harness/openWebUI.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAE1D,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C,IAAI,EAAE,WAAW,CAAC,UAAU;IAC5B,cAAc,EAAE,EAAE;IAElB,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,KAAqB,EAAE,QAAgB;QAC9E,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;QACrC,MAAM,mBAAmB,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,IAAI,OAAO,CAAC,CAAA;QACjF,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,8BAA8B,CAAC,CAAA;IACvE,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,OAAO,IAAI,CAAA;IACb,CAAC;CACF,CAAA"}
+{"version":3,"file":"openWebUI.js","sourceRoot":"","sources":["../../src/harness/openWebUI.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAE1D,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C,IAAI,EAAE,WAAW,CAAC,UAAU;IAC5B,cAAc,EAAE,EAAE;IAElB,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,QAAgB;QACvD,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;QACrC,MAAM,mBAAmB,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,IAAI,OAAO,CAAC,CAAA;IACnF,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,OAAO,IAAI,CAAA;IACb,CAAC;CACF,CAAA"}

package/dist/harness/openaiAgents.d.ts

@@ -29,7 +29,7 @@
  * pointer comment differs. A workspace detected as TypeScript-only gets the
  * `@intutic/gate/openai` pointer; Python-only gets the Python pointer; a
  * monorepo with both gets the Python file with the TypeScript pointer
- * appended (TD-408 item 5 — until 2026-09-22 the TS half was only reachable
+ * appended (until 2026-09-22 the TS half was only reachable
  * through the docs page).
  *
  * HLD §3.14 — Harness Onboarding Matrix

package/dist/harness/openaiAgents.js

@@ -29,7 +29,7 @@
  * pointer comment differs. A workspace detected as TypeScript-only gets the
  * `@intutic/gate/openai` pointer; Python-only gets the Python pointer; a
  * monorepo with both gets the Python file with the TypeScript pointer
- * appended (TD-408 item 5 — until 2026-09-22 the TS half was only reachable
+ * appended (until 2026-09-22 the TS half was only reachable
  * through the docs page).
  *
  * HLD §3.14 — Harness Onboarding Matrix
@@ -87,7 +87,7 @@ export const openaiAgentsAdapter = {
         }
         const filePath = await pythonAdapter.writeConfig(workspaceRoot, sops, proxyUrl);
         if (filePath && js) {
-            // Both ecosystems in one workspace (TD-408 item 5): the file is the
+            // Both ecosystems in one workspace: the file is the
             // Python adapter's, so its pointer named only the Python gate and the
             // TypeScript half of the monorepo was left to find `@intutic/gate`
             // through the docs page. Say it here too.

package/dist/harness/openaiAgents.js.map

@@ -1 +1 @@
-{"version":3,"file":"openaiAgents.js","sourceRoot":"","sources":["../../src/harness/openaiAgents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAEnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAE9D;wEACwE;AACxE,MAAM,aAAa,GAAG,mBAAmB,CAAC;IACxC,IAAI,EAAE,WAAW,CAAC,aAAa;IAC/B,KAAK,EAAE,mBAAmB;IAC1B,QAAQ,EAAE,CAAC,eAAe,CAAC;IAC3B,UAAU,EAAE,+BAA+B;IAC3C,UAAU,EAAE,+EAA+E;IAC3F,YAAY,EACV,mFAAmF;QACnF,iDAAiD;IACnD,QAAQ,EAAE,eAAe;CAC1B,CAAC,CAAA;AAEF;;;;;0DAK0D;AAC1D,MAAM,SAAS,GAAG,qBAAqB,CAAC;IACtC,IAAI,EAAE,WAAW,CAAC,aAAa;IAC/B,KAAK,EAAE,gCAAgC;IACvC,QAAQ,EAAE,EAAE;IACZ,cAAc,EAAE,gBAAgB;IAChC,UAAU,EAAE,eAAe;IAC3B,UAAU,EAAE,qEAAqE;IACjF,YAAY,EACV,4FAA4F;QAC5F,2FAA2F;QAC3F,wFAAwF;QACxF,gCAAgC;IAClC,QAAQ,EAAE,eAAe;CAC1B,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAoB;IAClD,IAAI,EAAE,WAAW,CAAC,aAAa;IAC/B,cAAc,EAAE,cAAc;IAE9B,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,OAAO,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAA;IAC/F,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ;QAC7C,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACrC,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC;YACnC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC;SAChC,CAAC,CAAA;QACF,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,SAAS,CAAC,WAAW,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;QAC7D,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;QAC/E,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;YACnB,oEAAoE;YACpE,sEAAsE;YACtE,mEAAmE;YACnE,0CAA0C;YAC1C,MAAM,UAAU,CACd,QAAQ,EACR;gBACE,+EAA+E;gBAC/E,8EAA8E;gBAC9E,+BAA+B;gBAC/B,yEAAyE;gBACzE,0DAA0D;gBAC1D,EAAE;aACH,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,OAAO,CACR,CAAA;YACD,mGAAmG;YACnG,MAAM,WAAW,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAA;QAC/E,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,sEAAsE;IACtE,eAAe,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,eAAe,CAAC,aAAa,CAAC;CACjF,CAAA"}
+{"version":3,"file":"openaiAgents.js","sourceRoot":"","sources":["../../src/harness/openaiAgents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAEnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAE9D;wEACwE;AACxE,MAAM,aAAa,GAAG,mBAAmB,CAAC;IACxC,IAAI,EAAE,WAAW,CAAC,aAAa;IAC/B,KAAK,EAAE,mBAAmB;IAC1B,QAAQ,EAAE,CAAC,eAAe,CAAC;IAC3B,UAAU,EAAE,+BAA+B;IAC3C,UAAU,EAAE,+EAA+E;IAC3F,YAAY,EACV,mFAAmF;QACnF,iDAAiD;IACnD,QAAQ,EAAE,eAAe;CAC1B,CAAC,CAAA;AAEF;;;;;0DAK0D;AAC1D,MAAM,SAAS,GAAG,qBAAqB,CAAC;IACtC,IAAI,EAAE,WAAW,CAAC,aAAa;IAC/B,KAAK,EAAE,gCAAgC;IACvC,QAAQ,EAAE,EAAE;IACZ,cAAc,EAAE,gBAAgB;IAChC,UAAU,EAAE,eAAe;IAC3B,UAAU,EAAE,qEAAqE;IACjF,YAAY,EACV,4FAA4F;QAC5F,2FAA2F;QAC3F,wFAAwF;QACxF,gCAAgC;IAClC,QAAQ,EAAE,eAAe;CAC1B,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAoB;IAClD,IAAI,EAAE,WAAW,CAAC,aAAa;IAC/B,cAAc,EAAE,cAAc;IAE9B,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,OAAO,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAA;IAC/F,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ;QAC7C,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACrC,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC;YACnC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC;SAChC,CAAC,CAAA;QACF,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,SAAS,CAAC,WAAW,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;QAC7D,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;QAC/E,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;YACnB,oDAAoD;YACpD,sEAAsE;YACtE,mEAAmE;YACnE,0CAA0C;YAC1C,MAAM,UAAU,CACd,QAAQ,EACR;gBACE,+EAA+E;gBAC/E,8EAA8E;gBAC9E,+BAA+B;gBAC/B,yEAAyE;gBACzE,0DAA0D;gBAC1D,EAAE;aACH,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,OAAO,CACR,CAAA;YACD,mGAAmG;YACnG,MAAM,WAAW,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAA;QAC/E,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,sEAAsE;IACtE,eAAe,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,eAAe,CAAC,aAAa,CAAC;CACjF,CAAA"}

package/dist/harness/openclaw.d.ts

@@ -4,6 +4,14 @@
  * Detects OpenClaw presence and invokes the sync-daemon hooks compiler
  * to inject Intutic pre-tool use gates.
  *
+ * OpenClaw loads standing instructions only from its own agent workspace
+ * (`AGENTS.md` and the other bootstrap files), never from a project, even
+ * when it works in one. The rule sets therefore go into a marked section of
+ * that workspace's `AGENTS.md` (see `openclawAgentWorkspace`), and the rest
+ * of the file stays the user's. OpenClaw truncates a bootstrap file past
+ * 20,000 characters
+ * (https://github.com/openclaw/openclaw/blob/98457908cf3e4fbbd0354b530e0aa0d15b560158/docs/gateway/config-agents/workspace-and-bootstrap.md).
+ *
  * HLD §3.14 — Harness Onboarding Matrix
  * @module
  */

package/dist/harness/openclaw.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openclaw.d.ts","sourceRoot":"","sources":["../../src/harness/openclaw.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAQH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAOjD,eAAO,MAAM,eAAe,EAAE,eA+B7B,CAAA"}
+{"version":3,"file":"openclaw.d.ts","sourceRoot":"","sources":["../../src/harness/openclaw.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAQH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAQjD,eAAO,MAAM,eAAe,EAAE,eAqC7B,CAAA"}

package/dist/harness/openclaw.js

@@ -4,24 +4,34 @@
  * Detects OpenClaw presence and invokes the sync-daemon hooks compiler
  * to inject Intutic pre-tool use gates.
  *
+ * OpenClaw loads standing instructions only from its own agent workspace
+ * (`AGENTS.md` and the other bootstrap files), never from a project, even
+ * when it works in one. The rule sets therefore go into a marked section of
+ * that workspace's `AGENTS.md` (see `openclawAgentWorkspace`), and the rest
+ * of the file stays the user's. OpenClaw truncates a bootstrap file past
+ * 20,000 characters
+ * (https://github.com/openclaw/openclaw/blob/98457908cf3e4fbbd0354b530e0aa0d15b560158/docs/gateway/config-agents/workspace-and-bootstrap.md).
+ *
  * HLD §3.14 — Harness Onboarding Matrix
  * @module
  */
 import { join } from 'node:path';
-import { access } from 'node:fs/promises';
+import { access, readFile } from 'node:fs/promises';
 import { existsSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { HarnessType } from '@intutic/shared-types';
-import { hashFile } from '../lib/hash.js';
+import { hashString } from '../lib/hash.js';
 import { loadCredentials } from '../config/store.js';
-import { writeOpenclawHooks } from '@intutic/sync-daemon';
-const CONFIG_FILE = '.openclaw/openclaw.json';
+import { openclawAgentWorkspace, rulesSectionOf, writeOpenclawHooks, writeRulesSection } from '@intutic/sync-daemon';
+import { buildRulesBody } from './rulesFiles.js';
+const DETECT_FILE = '.openclaw/openclaw.json';
 export const openclawAdapter = {
     type: HarnessType.OPENCLAW,
-    configFileName: CONFIG_FILE,
+    // The rules file is outside the workspace.
+    configFileName: '',
     async detect(workspaceRoot) {
         const globalOpenclaw = join(homedir(), '.openclaw');
-        const localOpenclaw = join(workspaceRoot, CONFIG_FILE);
+        const localOpenclaw = join(workspaceRoot, DETECT_FILE);
         try {
             if (existsSync(globalOpenclaw))
                 return true;
@@ -32,16 +42,21 @@ export const openclawAdapter = {
             return false;
         }
     },
-    async writeConfig(workspaceRoot, _sops, proxyUrl) {
-        const filePath = join(workspaceRoot, CONFIG_FILE);
+    async installGate(workspaceRoot, proxyUrl) {
         const creds = await loadCredentials();
-        const workspaceId = creds?.workspaceId || 'local';
-        await writeOpenclawHooks(workspaceRoot, proxyUrl, workspaceId);
+        await writeOpenclawHooks(workspaceRoot, proxyUrl, creds?.workspaceId || 'local');
+    },
+    async writeConfig(workspaceRoot, sops, proxyUrl) {
+        if (sops.length === 0)
+            return null;
+        const filePath = join(await openclawAgentWorkspace(), 'AGENTS.md');
+        await writeRulesSection(filePath, workspaceRoot, buildRulesBody(sops, proxyUrl, 'section'));
         return filePath;
     },
-    async readCurrentHash(workspaceRoot) {
+    async readCurrentHash() {
         try {
-            return await hashFile(join(workspaceRoot, CONFIG_FILE));
+            const section = rulesSectionOf(await readFile(join(await openclawAgentWorkspace(), 'AGENTS.md'), 'utf-8'));
+            return section === null ? null : hashString(section);
         }
         catch {
             return null;

package/dist/harness/openclaw.js.map

@@ -1 +1 @@
-{"version":3,"file":"openclaw.js","sourceRoot":"","sources":["../../src/harness/openclaw.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAEzD,MAAM,WAAW,GAAG,yBAAyB,CAAA;AAE7C,MAAM,CAAC,MAAM,eAAe,GAAoB;IAC9C,IAAI,EAAE,WAAW,CAAC,QAAQ;IAC1B,cAAc,EAAE,WAAW;IAE3B,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAA;QACnD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;QACtD,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,cAAc,CAAC;gBAAE,OAAO,IAAI,CAAA;YAC3C,MAAM,MAAM,CAAC,aAAa,CAAC,CAAA;YAC3B,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,KAAqB,EAAE,QAAgB;QAC9E,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;QACjD,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;QACrC,MAAM,WAAW,GAAG,KAAK,EAAE,WAAW,IAAI,OAAO,CAAA;QACjD,MAAM,kBAAkB,CAAC,aAAa,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;QAC9D,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,aAAqB;QACzC,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;CACF,CAAA"}
+{"version":3,"file":"openclaw.js","sourceRoot":"","sources":["../../src/harness/openclaw.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACpH,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAEhD,MAAM,WAAW,GAAG,yBAAyB,CAAA;AAE7C,MAAM,CAAC,MAAM,eAAe,GAAoB;IAC9C,IAAI,EAAE,WAAW,CAAC,QAAQ;IAC1B,2CAA2C;IAC3C,cAAc,EAAE,EAAE;IAElB,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAA;QACnD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;QACtD,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,cAAc,CAAC;gBAAE,OAAO,IAAI,CAAA;YAC3C,MAAM,MAAM,CAAC,aAAa,CAAC,CAAA;YAC3B,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,QAAgB;QACvD,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;QACrC,MAAM,kBAAkB,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,IAAI,OAAO,CAAC,CAAA;IAClF,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;QAC7E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,sBAAsB,EAAE,EAAE,WAAW,CAAC,CAAA;QAClE,MAAM,iBAAiB,CAAC,QAAQ,EAAE,aAAa,EAAE,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAA;QAC3F,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,sBAAsB,EAAE,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;YAC1G,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;CACF,CAAA"}

package/dist/harness/opencode.d.ts

@@ -3,10 +3,9 @@
  * binary `opencode`).
  *
  * OpenCode is a terminal coding agent whose instructions file is `AGENTS.md`
- * (project, with a `CLAUDE.md` fallback, and `~/.config/opencode/AGENTS.md`)
- * — delivered here through the shared markdown builder every other
- * `AGENTS.md`/`CLAUDE.md` harness uses, so it grows no rules format of its
- * own.
+ * (project, with a `CLAUDE.md` fallback, and `~/.config/opencode/AGENTS.md`;
+ * https://opencode.ai/docs/rules/). The rule sets go there through the
+ * shared `AGENTS.md` writer (agentsMd.ts).
  *
  * The governance-critical half is a **plugin**, not a hook file: OpenCode
  * loads `.opencode/plugins/*.js` into its own process and runs the plugin's
@@ -14,7 +13,7 @@
  * every tool call; throwing refuses the call. That plugin is generated by
  * `@intutic/sync-daemon`'s `openCodeHooks.ts`, the same split Muse and Grok
  * use for their hook writers. This adapter does not write `opencode.json`;
- * the sync daemon's `mcpAutoWrite.ts` edits its `mcp` block only (TD-487) —
+ * the sync daemon's `mcpAutoWrite.ts` edits its `mcp` block only —
  * see the writer's module doc.
  *
  * HLD §3.14 — Harness Onboarding Matrix

package/dist/harness/opencode.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"opencode.d.ts","sourceRoot":"","sources":["../../src/harness/opencode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAcjD,eAAO,MAAM,eAAe,EAAE,eA0D7B,CAAA"}
+{"version":3,"file":"opencode.d.ts","sourceRoot":"","sources":["../../src/harness/opencode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AASjD,eAAO,MAAM,eAAe,EAAE,eA+C7B,CAAA"}

package/dist/harness/opencode.js

@@ -3,10 +3,9 @@
  * binary `opencode`).
  *
  * OpenCode is a terminal coding agent whose instructions file is `AGENTS.md`
- * (project, with a `CLAUDE.md` fallback, and `~/.config/opencode/AGENTS.md`)
- * — delivered here through the shared markdown builder every other
- * `AGENTS.md`/`CLAUDE.md` harness uses, so it grows no rules format of its
- * own.
+ * (project, with a `CLAUDE.md` fallback, and `~/.config/opencode/AGENTS.md`;
+ * https://opencode.ai/docs/rules/). The rule sets go there through the
+ * shared `AGENTS.md` writer (agentsMd.ts).
  *
  * The governance-critical half is a **plugin**, not a hook file: OpenCode
  * loads `.opencode/plugins/*.js` into its own process and runs the plugin's
@@ -14,7 +13,7 @@
  * every tool call; throwing refuses the call. That plugin is generated by
  * `@intutic/sync-daemon`'s `openCodeHooks.ts`, the same split Muse and Grok
  * use for their hook writers. This adapter does not write `opencode.json`;
- * the sync daemon's `mcpAutoWrite.ts` edits its `mcp` block only (TD-487) —
+ * the sync daemon's `mcpAutoWrite.ts` edits its `mcp` block only —
  * see the writer's module doc.
  *
  * HLD §3.14 — Harness Onboarding Matrix
@@ -24,19 +23,15 @@ import { join } from 'node:path';
 import { access } from 'node:fs/promises';
 import { homedir } from 'node:os';
 import { HarnessType } from '@intutic/shared-types';
-import { hashFile } from '../lib/hash.js';
-import { buildMarkdownContent } from './base.js';
 import { writeOpenCodeHooks } from '@intutic/sync-daemon/harness/openCodeHooks';
-import { writeOwnedFile } from '@intutic/sync-daemon';
-/** Workspace-relative rules file. OpenCode reads this, falling back to CLAUDE.md. */
-const CONFIG_FILE = 'AGENTS.md';
+import { AGENTS_MD, agentsMdHash, writeAgentsMd } from './agentsMd.js';
 /** `$OPENCODE_CONFIG_DIR` or `~/.config/opencode` — the user-level config dir. */
 function openCodeConfigDir() {
     return process.env.OPENCODE_CONFIG_DIR || join(homedir(), '.config', 'opencode');
 }
 export const opencodeAdapter = {
     type: HarnessType.OPENCODE,
-    configFileName: CONFIG_FILE,
+    configFileName: AGENTS_MD,
     async detect(workspaceRoot) {
         // 1. Project-local `.opencode/` directory or `opencode.json{,c}`. Not
         //    AGENTS.md alone — Muse and Grok read the same file.
@@ -70,27 +65,17 @@ export const opencodeAdapter = {
         catch { /* ignore */ }
         return false;
     },
-    async writeConfig(workspaceRoot, sops, proxyUrl) {
-        const agentsPath = join(workspaceRoot, CONFIG_FILE);
-        // 1. AGENTS.md rules file — same "skip when there is nothing to write"
-        //    convention every markdown adapter uses.
-        if (sops.length > 0) {
-            const content = buildMarkdownContent(sops, proxyUrl);
-            await writeOwnedFile(agentsPath, workspaceRoot, content);
-        }
-        // 2. The plugin gate. `intutic connect` has no workspace id in scope —
-        //    same limitation `museAdapter` has — the sync daemon re-runs this
-        //    with a real one on the next cycle.
+    /** The plugin gate. `intutic connect` has no workspace id in scope — same
+     *  limitation `museAdapter` has — the sync daemon re-runs this with a real
+     *  one on the next cycle. */
+    async installGate(workspaceRoot, proxyUrl) {
         await writeOpenCodeHooks(workspaceRoot, proxyUrl, '');
-        return agentsPath;
     },
-    async readCurrentHash(workspaceRoot) {
-        try {
-            return await hashFile(join(workspaceRoot, CONFIG_FILE));
-        }
-        catch {
-            return null;
-        }
+    writeConfig(workspaceRoot, sops, proxyUrl) {
+        return writeAgentsMd(workspaceRoot, sops, proxyUrl);
+    },
+    readCurrentHash(workspaceRoot) {
+        return agentsMdHash(workspaceRoot);
     },
 };
 //# sourceMappingURL=opencode.js.map

package/dist/harness/opencode.js.map

@@ -1 +1 @@
-{"version":3,"file":"opencode.js","sourceRoot":"","sources":["../../src/harness/opencode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAA;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAErD,qFAAqF;AACrF,MAAM,WAAW,GAAG,WAAW,CAAA;AAE/B,kFAAkF;AAClF,SAAS,iBAAiB;IACxB,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAA;AAClF,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAoB;IAC9C,IAAI,EAAE,WAAW,CAAC,QAAQ;IAC1B,cAAc,EAAE,WAAW;IAE3B,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,sEAAsE;QACtE,yDAAyD;QACzD,KAAK,MAAM,MAAM,IAAI,CAAC,WAAW,EAAE,eAAe,EAAE,gBAAgB,CAAC,EAAE,CAAC;YACtE,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAA;gBACzC,OAAO,IAAI,CAAA;YACb,CAAC;YAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;QAC5B,CAAC;QAED,wEAAwE;QACxE,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAA;YACjC,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;QAE1B,gEAAgE;QAChE,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACzF,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;YAC9C,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC;oBAC5C,IAAI,CAAC;wBAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;wBAAC,OAAO,IAAI,CAAA;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;gBAC1E,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxB,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;QAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;QAEnD,uEAAuE;QACvE,6CAA6C;QAC7C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;YACpD,MAAM,cAAc,CAAC,UAAU,EAAE,aAAa,EAAE,OAAO,CAAC,CAAA;QAC1D,CAAC;QAED,uEAAuE;QACvE,sEAAsE;QACtE,wCAAwC;QACxC,MAAM,kBAAkB,CAAC,aAAa,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;QAErD,OAAO,UAAU,CAAA;IACnB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,aAAqB;QACzC,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;CACF,CAAA"}
+{"version":3,"file":"opencode.js","sourceRoot":"","sources":["../../src/harness/opencode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAA;AAC/E,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAEtE,kFAAkF;AAClF,SAAS,iBAAiB;IACxB,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAA;AAClF,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAoB;IAC9C,IAAI,EAAE,WAAW,CAAC,QAAQ;IAC1B,cAAc,EAAE,SAAS;IAEzB,KAAK,CAAC,MAAM,CAAC,aAAqB;QAChC,sEAAsE;QACtE,yDAAyD;QACzD,KAAK,MAAM,MAAM,IAAI,CAAC,WAAW,EAAE,eAAe,EAAE,gBAAgB,CAAC,EAAE,CAAC;YACtE,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAA;gBACzC,OAAO,IAAI,CAAA;YACb,CAAC;YAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;QAC5B,CAAC;QAED,wEAAwE;QACxE,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAA;YACjC,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;QAE1B,gEAAgE;QAChE,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACzF,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;YAC9C,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC;oBAC5C,IAAI,CAAC;wBAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;wBAAC,OAAO,IAAI,CAAA;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;gBAC1E,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxB,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;iCAE6B;IAC7B,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,QAAgB;QACvD,MAAM,kBAAkB,CAAC,aAAa,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;IACvD,CAAC;IAED,WAAW,CAAC,aAAqB,EAAE,IAAoB,EAAE,QAAgB;QACvE,OAAO,aAAa,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;IACrD,CAAC;IAED,eAAe,CAAC,aAAqB;QACnC,OAAO,YAAY,CAAC,aAAa,CAAC,CAAA;IACpC,CAAC;CACF,CAAA"}

package/dist/harness/openhands.d.ts

@@ -1,9 +1,15 @@
 /**
  * openhands.ts — OpenHands adapter (full implementation with hooks + llm.base_url).
  *
- * Merges SOP content ([intutic]) and llm.base_url ([llm]) into config.toml,
- * keeping the rest of the file, and injects PreToolUse hooks via
- * .openhands/hooks.json.
+ * - rules: `.openhands/microagents/intutic-governance.md`, a repository
+ *   microagent with no triggers, which OpenHands keeps active in every
+ *   conversation (V0's `microagent.py`: "no triggers -> REPO (always
+ *   active)"; the V1 software-agent SDK loads the same directory as legacy
+ *   skills, "no keywords -> always active"). Earlier versions put the rules
+ *   in an `[intutic]` table of `config.toml`, which OpenHands never reads;
+ *   connect drops that table and disconnect removes it;
+ * - `[llm] base_url` merged into `config.toml`, keeping the rest of the file;
+ * - the PreToolUse hook in `.openhands/hooks.json`.
  *
  * HLD §3.14 — Harness Onboarding Matrix
  * @module

package/dist/harness/openhands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openhands.d.ts","sourceRoot":"","sources":["../../src/harness/openhands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAQjD,eAAO,MAAM,gBAAgB,EAAE,eA4D9B,CAAA"}
+{"version":3,"file":"openhands.d.ts","sourceRoot":"","sources":["../../src/harness/openhands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAMH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAUjD,eAAO,MAAM,gBAAgB,EAAE,eAwD9B,CAAA"}