@intutic/sync-daemon 1.10.0 → 1.10.1

package/dist/lib/approvedBypasses.js

@@ -0,0 +1,140 @@
+/**
+ * approvedBypasses.ts — ships approved `review_before` bypasses *to* the
+ * machine, mirroring how `policySnapshot.ts` ships policy.
+ *
+ * # Why a separate file from policySnapshot.ts
+ *
+ * A bypass entry is not a rule: it is a one-time, per-call approval keyed on
+ * (workspace, SOP rule id, normalised tool name, hashed command/target), with
+ * its own TTL, and it is additive in the *opposite* direction from a policy
+ * rule — a policy snapshot can only turn an allow into a block, this cache can
+ * only turn one already-held call into an allow, for the one caller who
+ * already approved it. Folding the two into one artifact would make either
+ * "what does this line do" or "is this additive in the safe direction"
+ * dependent on which column you are looking at.
+ *
+ * # The contract with the gate
+ *
+ * `.intutic/hooks/approved-bypasses.jsonl` — same directory as the policy
+ * snapshot, and for the same reason: `.intutic/hooks` is already in
+ * `UNIVERSAL_PROTECTED_PATHS`, so every gate already refuses an agent's own
+ * attempt to write here. Two header lines carry integrity, exactly like the
+ * `.rules` projection: `#digest` (sha256 of the JSONL body, first 32 hex
+ * chars) and `#workspace` (refused if it does not match the gate's own
+ * workspace id). Unlike the policy snapshot there is no `#generated` age
+ * check — each line carries its own `expiresAt`, and the gate compares that
+ * against wall-clock time on every read. A stale FILE degrades to "fewer
+ * valid bypasses" (fail closed toward the hold); it can never resurrect an
+ * entry whose own TTL has passed.
+ *
+ * Only `review_before` gates read this today (claudeCodeHooks.ts's
+ * `_intuticApprovedBypass`) — see that module's docstring for why the other
+ * harness writers are not wired to it: none of them implement `review_before`
+ * holds at all, so there is nothing for a bypass to apply to there yet.
+ *
+ * @module
+ */
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import * as os from 'node:os';
+import { createHash } from 'node:crypto';
+import { createLogger } from '@intutic/logger';
+const log = createLogger('sync-approved-bypasses');
+export const DEFAULT_BYPASS_CACHE_DIR = path.join(os.homedir(), '.intutic', 'hooks');
+export const APPROVED_BYPASSES_FILE = 'approved-bypasses.jsonl';
+/**
+ * Trims trailing `/` characters without a regex.
+ *
+ * `controlPlaneUrl` is operator-configured, not remotely attacker-controlled
+ * — but CodeQL's static analysis flags `/\/+$/` as a polynomial-time pattern
+ * on external input regardless of practical exploitability here, and the
+ * identical pattern already existed unflagged in `onboarding.ts` and
+ * `exec.ts` (fixed alongside this one). A loop is O(n), cannot be
+ * mis-classified as a ReDoS shape by any static analyzer, and needs no
+ * exemption to justify.
+ */
+function trimTrailingSlashes(s) {
+    let end = s.length;
+    while (end > 0 && s.charCodeAt(end - 1) === 47 /* '/' */)
+        end--;
+    return s.slice(0, end);
+}
+/** Fetches the workspace's currently-approved bypasses. Returns null on any
+ *  failure — the caller keeps the previous cache file rather than replacing
+ *  it with nothing, same rule `fetchResolvedPolicy` follows. */
+export async function fetchApprovedBypasses(opts) {
+    const url = `${trimTrailingSlashes(opts.controlPlaneUrl)}/api/v1/decisions/approved-bypasses` +
+        `?workspaceId=${encodeURIComponent(opts.workspaceId)}`;
+    try {
+        const res = await fetch(url, {
+            headers: { Authorization: `Bearer ${opts.apiKey}` },
+            signal: AbortSignal.timeout(10_000),
+        });
+        if (!res.ok) {
+            log.warn({ action: 'bypass_fetch_failed', status: res.status }, 'approved-bypasses returned non-OK');
+            return null;
+        }
+        const body = (await res.json());
+        if (typeof body !== 'object' || body === null)
+            return null;
+        const rec = body;
+        const rows = Array.isArray(rec.bypasses) ? rec.bypasses : [];
+        return rows.filter((r) => {
+            if (typeof r !== 'object' || r === null)
+                return false;
+            const x = r;
+            return (typeof x.workspaceId === 'string' &&
+                typeof x.sopRuleId === 'string' &&
+                typeof x.toolNameNormalized === 'string' &&
+                typeof x.targetHash === 'string' &&
+                typeof x.holdId === 'string' &&
+                typeof x.decidedBy === 'string' &&
+                typeof x.decidedAt === 'string' &&
+                typeof x.expiresAt === 'string');
+        });
+    }
+    catch (err) {
+        log.warn({ action: 'bypass_fetch_failed', err }, 'approved-bypasses unreachable');
+        return null;
+    }
+}
+/** Writes the cache file atomically, digest and workspace header included —
+ *  same convention as `writePolicySnapshot`. Exported so a test can assert
+ *  the on-disk shape directly. */
+export async function writeApprovedBypasses(entries, workspaceId, cacheDir = DEFAULT_BYPASS_CACHE_DIR) {
+    const lines = entries.map((e) => JSON.stringify(e));
+    const digest = createHash('sha256').update(lines.join('\n')).digest('hex').slice(0, 32);
+    const text = `# Intutic approved review_before bypasses — auto-generated. DO NOT EDIT.\n` +
+        `#digest ${digest}\n` +
+        `#workspace ${workspaceId}\n` +
+        `#generated ${new Date().toISOString()}\n` +
+        (lines.length > 0 ? lines.join('\n') + '\n' : '');
+    await fs.mkdir(cacheDir, { recursive: true });
+    const target = path.join(cacheDir, APPROVED_BYPASSES_FILE);
+    const tmp = target + '.tmp';
+    await fs.writeFile(tmp, text, { encoding: 'utf-8' });
+    // Same read-only-by-rename posture as the policy snapshot: the daemon
+    // never needs write access to the file itself after this, only to replace
+    // it wholesale on the next cycle.
+    await fs.chmod(tmp, 0o444);
+    await fs.rename(tmp, target);
+    log.debug({ action: 'approved_bypasses_written', digest, count: entries.length, dir: cacheDir }, 'Approved-bypass cache refreshed');
+    return { digest, count: entries.length };
+}
+/** Fetch and write in one call. Safe to run on every sync cycle. Never
+ *  throws — a failed poll must not take down the sync loop, and leaves the
+ *  previous cache in place (stale bypasses still expire on their own TTL,
+ *  which is what makes that safe). */
+export async function refreshApprovedBypasses(opts) {
+    const entries = await fetchApprovedBypasses(opts);
+    if (entries === null)
+        return null;
+    try {
+        return await writeApprovedBypasses(entries, opts.workspaceId, opts.cacheDir ?? DEFAULT_BYPASS_CACHE_DIR);
+    }
+    catch (err) {
+        log.warn({ action: 'approved_bypasses_write_failed', err }, 'Could not write approved-bypasses cache');
+        return null;
+    }
+}
+//# sourceMappingURL=approvedBypasses.js.map

package/dist/lib/approvedBypasses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvedBypasses.js","sourceRoot":"","sources":["../../src/lib/approvedBypasses.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,MAAM,GAAG,GAAG,YAAY,CAAC,wBAAwB,CAAC,CAAA;AAElD,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;AACpF,MAAM,CAAC,MAAM,sBAAsB,GAAG,yBAAyB,CAAA;AAsB/D;;;;;;;;;;GAUG;AACH,SAAS,mBAAmB,CAAC,CAAS;IACpC,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,CAAA;IAClB,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,SAAS;QAAE,GAAG,EAAE,CAAA;IAC/D,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AACxB,CAAC;AAED;;gEAEgE;AAChE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAA2B;IAE3B,MAAM,GAAG,GACP,GAAG,mBAAmB,CAAC,IAAI,CAAC,eAAe,CAAC,qCAAqC;QACjF,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAA;IACxD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE;YACnD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,mCAAmC,CAAC,CAAA;YACpG,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAY,CAAA;QAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAC1D,MAAM,GAAG,GAAG,IAA+B,CAAA;QAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;QAC5D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAA4B,EAAE;YACjD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAA;YACrD,MAAM,CAAC,GAAG,CAA4B,CAAA;YACtC,OAAO,CACL,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;gBACjC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;gBAC/B,OAAO,CAAC,CAAC,kBAAkB,KAAK,QAAQ;gBACxC,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;gBAChC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;gBAC5B,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;gBAC/B,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;gBAC/B,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAChC,CAAA;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,GAAG,EAAE,EAAE,+BAA+B,CAAC,CAAA;QACjF,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;kCAEkC;AAClC,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAA8B,EAC9B,WAAmB,EACnB,WAAmB,wBAAwB;IAE3C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;IACnD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACvF,MAAM,IAAI,GACR,4EAA4E;QAC5E,WAAW,MAAM,IAAI;QACrB,cAAc,WAAW,IAAI;QAC7B,cAAc,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI;QAC1C,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IAEnD,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAA;IAC1D,MAAM,GAAG,GAAG,MAAM,GAAG,MAAM,CAAA;IAC3B,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;IACpD,sEAAsE;IACtE,0EAA0E;IAC1E,kCAAkC;IAClC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAC1B,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAE5B,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,2BAA2B,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,iCAAiC,CAAC,CAAA;IACnI,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAA;AAC1C,CAAC;AAED;;;sCAGsC;AACtC,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAA2B;IAE3B,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAA;IACjD,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IACjC,IAAI,CAAC;QACH,OAAO,MAAM,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,IAAI,wBAAwB,CAAC,CAAA;IAC1G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,gCAAgC,EAAE,GAAG,EAAE,EAAE,yCAAyC,CAAC,CAAA;QACtG,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/lib/complianceProbes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"complianceProbes.d.ts","sourceRoot":"","sources":["../../src/lib/complianceProbes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAUH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE;QACT,KAAK,EAAE,gBAAgB,CAAA;QACvB,QAAQ,EAAE,MAAM,CAAA;QAChB,MAAM,EAAE,MAAM,CAAA;QACd,WAAW,EAAE,MAAM,CAAA;QACnB,SAAS,EAAE,MAAM,CAAA;QACjB,UAAU,EAAE,MAAM,CAAA;KACnB,CAAA;CACF;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,SAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAgF5G;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,SAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAiBjG"}
+{"version":3,"file":"complianceProbes.d.ts","sourceRoot":"","sources":["../../src/lib/complianceProbes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AASH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE;QACT,KAAK,EAAE,gBAAgB,CAAA;QACvB,QAAQ,EAAE,MAAM,CAAA;QAChB,MAAM,EAAE,MAAM,CAAA;QACd,WAAW,EAAE,MAAM,CAAA;QACnB,SAAS,EAAE,MAAM,CAAA;QACjB,UAAU,EAAE,MAAM,CAAA;KACnB,CAAA;CACF;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,SAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAqF5G;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,SAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAiBjG"}

package/dist/lib/complianceProbes.js

@@ -78,6 +78,11 @@ export function checkHostContainment(hostname, workspaceId, port = 443) {
             resolve({
                 host: hostname,
                 contained: true,
+                // `||`, not `??`, and deliberately. `??` only falls through on
+                // null/undefined, so an ErrnoException carrying `code: ''` would report
+                // `error: ''` and discard the message that says what actually happened.
+                // An empty code is the one case where these differ, and falling through
+                // is the behaviour worth having.
                 error: err.code || err.message,
             });
         });

package/dist/lib/complianceProbes.js.map

@@ -1 +1 @@
-{"version":3,"file":"complianceProbes.js","sourceRoot":"","sources":["../../src/lib/complianceProbes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AAGnC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,MAAM,GAAG,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAA;AAgB7C;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,WAAmB,EAAE,IAAI,GAAG,GAAG;IACpF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,QAAQ,GAAG,KAAK,CAAA;QAEpB,MAAM,WAAW,GAAyB;YACxC,QAAQ;YACR,IAAI;YACJ,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,IAAI;SACd,CAAA;QACD,8FAA8F;QAC9F,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CACtD;QAAC,WAAuC,CAAC,WAAW,CAAC,GAAG,KAAK,CAAA;QAE9D,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE;YAC7C,IAAI,QAAQ;gBAAE,OAAM;YACpB,QAAQ,GAAG,IAAI,CAAA;YAEf,MAAM,MAAM,GAAG,GAAG,CAAC,MAAuB,CAAA;YAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAA;YAExC,mEAAmE;YACnE,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YAClH,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YAEvH,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;YAEjF,GAAG,CAAC,OAAO,EAAE,CAAA;YAEb,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO,CAAC;oBACN,IAAI,EAAE,QAAQ;oBACd,SAAS,EAAE,IAAI;iBAChB,CAAC,CAAA;YACJ,CAAC;iBAAM,CAAC;gBACN,sDAAsD;gBACtD,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;gBACnC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,GAAG,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;gBAE3G,OAAO,CAAC;oBACN,IAAI,EAAE,QAAQ;oBACd,SAAS,EAAE,KAAK;oBAChB,QAAQ,EAAE;wBACR,KAAK,EAAE,gBAAgB;wBACvB,QAAQ,EAAE,QAAQ;wBAClB,MAAM,EAAE,wBAAwB,QAAQ,mCAAmC;wBAC3E,WAAW;wBACX,SAAS,EAAE,EAAE;wBACb,UAAU;qBACX;iBACF,CAAC,CAAA;YACJ,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAQ,EAAE,EAAE;YAC3B,IAAI,QAAQ;gBAAE,OAAM;YACpB,QAAQ,GAAG,IAAI,CAAA;YACf,2GAA2G;YAC3G,gDAAgD;YAChD,OAAO,CAAC;gBACN,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO;aAC/B,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACrB,IAAI,QAAQ;gBAAE,OAAM;YACpB,QAAQ,GAAG,IAAI,CAAA;YACf,GAAG,CAAC,OAAO,EAAE,CAAA;YACb,OAAO,CAAC;gBACN,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,SAAS;aACjB,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,GAAG,CAAC,GAAG,EAAE,CAAA;IACX,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,WAAmB,EAAE,IAAI,GAAG,GAAG;IACvE,MAAM,KAAK,GAAG,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAA;IACrD,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,oCAAoC,CAAC,CAAA;IAE1D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IAEnG,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IAClD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CACN,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EACtC,2DAA2D,CAC5D,CAAA;IACH,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,8DAA8D,CAAC,CAAA;IAC3E,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC"}
+{"version":3,"file":"complianceProbes.js","sourceRoot":"","sources":["../../src/lib/complianceProbes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AAEnC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,MAAM,GAAG,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAA;AAgB7C;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,WAAmB,EAAE,IAAI,GAAG,GAAG;IACpF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,QAAQ,GAAG,KAAK,CAAA;QAEpB,MAAM,WAAW,GAAyB;YACxC,QAAQ;YACR,IAAI;YACJ,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,IAAI;SACd,CAAA;QACD,8FAA8F;QAC9F,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CACtD;QAAC,WAAuC,CAAC,WAAW,CAAC,GAAG,KAAK,CAAA;QAE9D,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE;YAC7C,IAAI,QAAQ;gBAAE,OAAM;YACpB,QAAQ,GAAG,IAAI,CAAA;YAEf,MAAM,MAAM,GAAG,GAAG,CAAC,MAAuB,CAAA;YAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAA;YAExC,mEAAmE;YACnE,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YAClH,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YAEvH,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;YAEjF,GAAG,CAAC,OAAO,EAAE,CAAA;YAEb,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO,CAAC;oBACN,IAAI,EAAE,QAAQ;oBACd,SAAS,EAAE,IAAI;iBAChB,CAAC,CAAA;YACJ,CAAC;iBAAM,CAAC;gBACN,sDAAsD;gBACtD,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;gBACnC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,GAAG,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;gBAE3G,OAAO,CAAC;oBACN,IAAI,EAAE,QAAQ;oBACd,SAAS,EAAE,KAAK;oBAChB,QAAQ,EAAE;wBACR,KAAK,EAAE,gBAAgB;wBACvB,QAAQ,EAAE,QAAQ;wBAClB,MAAM,EAAE,wBAAwB,QAAQ,mCAAmC;wBAC3E,WAAW;wBACX,SAAS,EAAE,EAAE;wBACb,UAAU;qBACX;iBACF,CAAC,CAAA;YACJ,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAC7C,IAAI,QAAQ;gBAAE,OAAM;YACpB,QAAQ,GAAG,IAAI,CAAA;YACf,2GAA2G;YAC3G,gDAAgD;YAChD,OAAO,CAAC;gBACN,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,IAAI;gBACf,+DAA+D;gBAC/D,wEAAwE;gBACxE,wEAAwE;gBACxE,wEAAwE;gBACxE,iCAAiC;gBACjC,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO;aAC/B,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACrB,IAAI,QAAQ;gBAAE,OAAM;YACpB,QAAQ,GAAG,IAAI,CAAA;YACf,GAAG,CAAC,OAAO,EAAE,CAAA;YACb,OAAO,CAAC;gBACN,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,SAAS;aACjB,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,GAAG,CAAC,GAAG,EAAE,CAAA;IACX,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,WAAmB,EAAE,IAAI,GAAG,GAAG;IACvE,MAAM,KAAK,GAAG,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAA;IACrD,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,oCAAoC,CAAC,CAAA;IAE1D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IAEnG,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IAClD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CACN,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EACtC,2DAA2D,CAC5D,CAAA;IACH,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,8DAA8D,CAAC,CAAA;IAC3E,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/lib/decisionsDigest.d.ts

@@ -0,0 +1,99 @@
+/**
+ * decisionsDigest.ts — governed decisions log.
+ *
+ * Mirrors `egressPolicy.ts`'s thin-projection pattern (fetch a bounded,
+ * read-only projection from the control plane every sync cycle, write it
+ * locally) for a different payload: the last ~20 governance decisions
+ * (adjudications, approved/rejected decisions, resolved incidents,
+ * settings changes), rendered as one-line summaries SERVER-SIDE by
+ * `GET /api/v1/workspace/decisions-digest`. This module never parses or
+ * re-renders decision content — it only writes what it is given.
+ *
+ * Deliberately narrow, same boundary the control-plane route documents:
+ * governance-decision records only, never conversational memory or general
+ * context management (this repo pivoted away from that harness product —
+ * see this repo's own CLAUDE.md history, and `apps/docs/guide/decisions-log.md`).
+ *
+ * Opt-in via `WorkspaceSettings.decisionsLogEnabled` (default off). The
+ * CALLER is responsible for that gate — `refreshDecisionsDigest` always
+ * fetches and writes when invoked, so `syncLoop.ts` only calls it when the
+ * workspace has opted in. When disabled, the caller simply stops calling
+ * this module; existing files are left as they were last written rather than
+ * being force-deleted (a developer's editor may have that file open) or
+ * overwritten with a stale/misleading "disabled" placeholder.
+ *
+ * Two files:
+ *
+ *  1. `.intutic/DECISIONS.md` — the full bounded record (all entries the
+ *     digest returns), regenerated whole every cycle with `configWriter.ts`'s
+ *     pattern (i): a DO-NOT-EDIT header + `atomicWrite`. Gitignored — runtime
+ *     artifacts stay untracked, the same rule this repo's own CLAUDE.md doc
+ *     comment states for daemon-generated governance files.
+ *  2. A bounded, marker-delimited section (last ~10 entries) idempotently
+ *     injected into the `claude-code` harness's own regenerated config file
+ *     (`HARNESS_FILES['claude-code']`, i.e. `CLAUDE.md`) — this is what makes
+ *     the digest something the agent actually reads without needing to know
+ *     `.intutic/DECISIONS.md` exists. A marker pair
+ *     (`INTUTIC:DECISIONS_LOG:START`/`END`) is replaced in place on every
+ *     cycle, never re-appended.
+ *
+ * Deliberately does NOT reuse `configWriter.ts`'s own `fileHeader()` for the
+ * DECISIONS.md header — that helper stamps `newIso()` (wall-clock "Last
+ * sync"), which would make the file churn every cycle even when the digest
+ * itself hasn't changed. The header here instead derives its timestamp from
+ * the digest's own newest entry, so identical input renders an identical
+ * file — see the render-idempotence test.
+ *
+ * @module
+ */
+import { HarnessType } from '@intutic/shared-types';
+/** Relative to the workspace root. */
+export declare const DECISIONS_LOG_RELATIVE_PATH: string;
+/** One digest entry, exactly as `GET /api/v1/workspace/decisions-digest` returns it — the summary line is already rendered server-side. */
+export interface DecisionsDigestEntry {
+    id: string;
+    kind: string;
+    timestamp: string;
+    summary: string;
+}
+export interface DecisionsDigestResponse {
+    workspaceId: string;
+    entries: DecisionsDigestEntry[];
+}
+export interface DecisionsDigestOptions {
+    controlPlaneUrl: string;
+    apiKey: string;
+    workspaceId: string;
+    workspaceRoot: string;
+    /** Active harnesses this cycle — the bounded section is only injected when `claude-code` is among them. */
+    harnesses: HarnessType[];
+}
+/**
+ * Fetch this workspace's decisions digest. Returns null on any failure — the
+ * caller keeps whatever was written last cycle rather than replacing it with
+ * nothing, the same rule `egressPolicy.ts`'s fetch follows.
+ */
+export declare function fetchDecisionsDigest(opts: Pick<DecisionsDigestOptions, 'controlPlaneUrl' | 'apiKey' | 'workspaceId'>): Promise<DecisionsDigestResponse | null>;
+/** Renders the full bounded record written to `.intutic/DECISIONS.md`. */
+export declare function renderDecisionsMarkdown(entries: DecisionsDigestEntry[]): string;
+/** Renders the bounded, marker-delimited section injected into the harness config file — the newest `limit` entries only. */
+export declare function renderBoundedSection(entries: DecisionsDigestEntry[], limit?: number): string;
+/**
+ * Idempotently inject/replace the bounded section in `content`. If the
+ * markers are present, everything between them (inclusive) is replaced — the
+ * mechanism the `applyConfigEdits` SkillOpt writer already uses elsewhere in
+ * this file's sibling module, `configWriter.ts` — never duplicated. If
+ * absent, the section is appended once, with a separating blank line.
+ */
+export declare function injectBoundedSection(content: string, section: string): string;
+/**
+ * Fetch and write both files in one call, mirroring `refreshEgressPolicy`.
+ * Never throws — a failed poll must not take down the sync loop.
+ *
+ * Does NOT itself check `WorkspaceSettings.decisionsLogEnabled` — see this
+ * module's own doc comment for why that gate belongs to the caller.
+ */
+export declare function refreshDecisionsDigest(opts: DecisionsDigestOptions): Promise<{
+    entriesWritten: number;
+} | null>;
+//# sourceMappingURL=decisionsDigest.d.ts.map

package/dist/lib/decisionsDigest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisionsDigest.d.ts","sourceRoot":"","sources":["../../src/lib/decisionsDigest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAKH,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAKnD,sCAAsC;AACtC,eAAO,MAAM,2BAA2B,QAAwC,CAAA;AAKhF,2IAA2I;AAC3I,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,oBAAoB,EAAE,CAAA;CAChC;AAED,MAAM,WAAW,sBAAsB;IACrC,eAAe,EAAE,MAAM,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,2GAA2G;IAC3G,SAAS,EAAE,WAAW,EAAE,CAAA;CACzB;AAyBD;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,IAAI,CAAC,sBAAsB,EAAE,iBAAiB,GAAG,QAAQ,GAAG,aAAa,CAAC,GAC/E,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CA0BzC;AAkBD,0EAA0E;AAC1E,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,oBAAoB,EAAE,GAAG,MAAM,CAO/E;AAED,6HAA6H;AAC7H,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,EAAE,EAAE,KAAK,SAAK,GAAG,MAAM,CAOxF;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAQ7E;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC;IAAE,cAAc,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAmC5C"}

package/dist/lib/decisionsDigest.js

@@ -0,0 +1,199 @@
+/**
+ * decisionsDigest.ts — governed decisions log.
+ *
+ * Mirrors `egressPolicy.ts`'s thin-projection pattern (fetch a bounded,
+ * read-only projection from the control plane every sync cycle, write it
+ * locally) for a different payload: the last ~20 governance decisions
+ * (adjudications, approved/rejected decisions, resolved incidents,
+ * settings changes), rendered as one-line summaries SERVER-SIDE by
+ * `GET /api/v1/workspace/decisions-digest`. This module never parses or
+ * re-renders decision content — it only writes what it is given.
+ *
+ * Deliberately narrow, same boundary the control-plane route documents:
+ * governance-decision records only, never conversational memory or general
+ * context management (this repo pivoted away from that harness product —
+ * see this repo's own CLAUDE.md history, and `apps/docs/guide/decisions-log.md`).
+ *
+ * Opt-in via `WorkspaceSettings.decisionsLogEnabled` (default off). The
+ * CALLER is responsible for that gate — `refreshDecisionsDigest` always
+ * fetches and writes when invoked, so `syncLoop.ts` only calls it when the
+ * workspace has opted in. When disabled, the caller simply stops calling
+ * this module; existing files are left as they were last written rather than
+ * being force-deleted (a developer's editor may have that file open) or
+ * overwritten with a stale/misleading "disabled" placeholder.
+ *
+ * Two files:
+ *
+ *  1. `.intutic/DECISIONS.md` — the full bounded record (all entries the
+ *     digest returns), regenerated whole every cycle with `configWriter.ts`'s
+ *     pattern (i): a DO-NOT-EDIT header + `atomicWrite`. Gitignored — runtime
+ *     artifacts stay untracked, the same rule this repo's own CLAUDE.md doc
+ *     comment states for daemon-generated governance files.
+ *  2. A bounded, marker-delimited section (last ~10 entries) idempotently
+ *     injected into the `claude-code` harness's own regenerated config file
+ *     (`HARNESS_FILES['claude-code']`, i.e. `CLAUDE.md`) — this is what makes
+ *     the digest something the agent actually reads without needing to know
+ *     `.intutic/DECISIONS.md` exists. A marker pair
+ *     (`INTUTIC:DECISIONS_LOG:START`/`END`) is replaced in place on every
+ *     cycle, never re-appended.
+ *
+ * Deliberately does NOT reuse `configWriter.ts`'s own `fileHeader()` for the
+ * DECISIONS.md header — that helper stamps `newIso()` (wall-clock "Last
+ * sync"), which would make the file churn every cycle even when the digest
+ * itself hasn't changed. The header here instead derives its timestamp from
+ * the digest's own newest entry, so identical input renders an identical
+ * file — see the render-idempotence test.
+ *
+ * @module
+ */
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import { createLogger } from '@intutic/logger';
+import { HarnessType } from '@intutic/shared-types';
+import { HARNESS_FILES, atomicWrite } from '../configWriter.js';
+const log = createLogger('sync-decisions-digest');
+/** Relative to the workspace root. */
+export const DECISIONS_LOG_RELATIVE_PATH = path.join('.intutic', 'DECISIONS.md');
+const SECTION_START = '<!-- INTUTIC:DECISIONS_LOG:START -->';
+const SECTION_END = '<!-- INTUTIC:DECISIONS_LOG:END -->';
+/**
+ * Trims trailing `/` without a regex — see the identical helper in
+ * `egressPolicy.ts`/`approvedBypasses.ts`: `/\/+$/` is flagged by CodeQL as a
+ * polynomial-time pattern on external input, and a loop sidesteps the whole
+ * category.
+ */
+function trimTrailingSlashes(s) {
+    let end = s.length;
+    while (end > 0 && s.charCodeAt(end - 1) === 47 /* '/' */)
+        end--;
+    return s.slice(0, end);
+}
+function isDigestEntry(value) {
+    if (typeof value !== 'object' || value === null)
+        return false;
+    const e = value;
+    return (typeof e.id === 'string' &&
+        typeof e.kind === 'string' &&
+        typeof e.timestamp === 'string' &&
+        typeof e.summary === 'string');
+}
+/**
+ * Fetch this workspace's decisions digest. Returns null on any failure — the
+ * caller keeps whatever was written last cycle rather than replacing it with
+ * nothing, the same rule `egressPolicy.ts`'s fetch follows.
+ */
+export async function fetchDecisionsDigest(opts) {
+    const url = `${trimTrailingSlashes(opts.controlPlaneUrl)}/api/v1/workspace/decisions-digest` +
+        `?workspaceId=${encodeURIComponent(opts.workspaceId)}`;
+    try {
+        const res = await fetch(url, {
+            headers: { Authorization: `Bearer ${opts.apiKey}`, 'x-workspace-id': opts.workspaceId },
+            signal: AbortSignal.timeout(10_000),
+        });
+        if (!res.ok) {
+            log.warn({ action: 'decisions_digest_fetch_failed', status: res.status }, 'decisions-digest returned non-OK');
+            return null;
+        }
+        const body = (await res.json());
+        if (typeof body !== 'object' || body === null)
+            return null;
+        const rec = body;
+        const workspaceId = typeof rec.workspaceId === 'string' ? rec.workspaceId : opts.workspaceId;
+        const entries = Array.isArray(rec.entries) ? rec.entries.filter(isDigestEntry) : [];
+        return { workspaceId, entries };
+    }
+    catch (err) {
+        log.warn({ action: 'decisions_digest_fetch_failed', err }, 'decisions-digest unreachable');
+        return null;
+    }
+}
+/** Deterministic header: no wall-clock stamp, so identical input renders an identical file. */
+function renderHeader(entries) {
+    const latest = entries[0]?.timestamp ?? 'never';
+    return [
+        '# Intutic Governed Decisions Log (auto-generated)',
+        '# DO NOT EDIT — managed by intutic sync daemon',
+        `# Most recent entry: ${latest}`,
+        '#',
+        '# Governance-decision records only (adjudications, approved/rejected',
+        '# decisions, resolved incidents, settings changes) — NOT conversational',
+        '# memory or general context management.',
+        '',
+        '',
+    ].join('\n');
+}
+/** Renders the full bounded record written to `.intutic/DECISIONS.md`. */
+export function renderDecisionsMarkdown(entries) {
+    const header = renderHeader(entries);
+    if (entries.length === 0) {
+        return `${header}_No governance decisions recorded yet._\n`;
+    }
+    const lines = entries.map((e) => `- ${e.timestamp} — ${e.summary}`);
+    return header + lines.join('\n') + '\n';
+}
+/** Renders the bounded, marker-delimited section injected into the harness config file — the newest `limit` entries only. */
+export function renderBoundedSection(entries, limit = 10) {
+    const bounded = entries.slice(0, limit);
+    const lines = bounded.length > 0
+        ? bounded.map((e) => `- ${e.timestamp} — ${e.summary}`)
+        : ['_No governance decisions recorded yet._'];
+    return [SECTION_START, '## Recent Governed Decisions', '', ...lines, SECTION_END].join('\n');
+}
+/**
+ * Idempotently inject/replace the bounded section in `content`. If the
+ * markers are present, everything between them (inclusive) is replaced — the
+ * mechanism the `applyConfigEdits` SkillOpt writer already uses elsewhere in
+ * this file's sibling module, `configWriter.ts` — never duplicated. If
+ * absent, the section is appended once, with a separating blank line.
+ */
+export function injectBoundedSection(content, section) {
+    const startIdx = content.indexOf(SECTION_START);
+    const endIdx = content.indexOf(SECTION_END);
+    if (startIdx !== -1 && endIdx !== -1 && endIdx > startIdx) {
+        return content.slice(0, startIdx) + section + content.slice(endIdx + SECTION_END.length);
+    }
+    const sep = content.endsWith('\n\n') ? '' : content.endsWith('\n') ? '\n' : '\n\n';
+    return `${content}${sep}${section}\n`;
+}
+/**
+ * Fetch and write both files in one call, mirroring `refreshEgressPolicy`.
+ * Never throws — a failed poll must not take down the sync loop.
+ *
+ * Does NOT itself check `WorkspaceSettings.decisionsLogEnabled` — see this
+ * module's own doc comment for why that gate belongs to the caller.
+ */
+export async function refreshDecisionsDigest(opts) {
+    const digest = await fetchDecisionsDigest(opts);
+    if (digest === null)
+        return null;
+    try {
+        const fullPath = path.join(opts.workspaceRoot, DECISIONS_LOG_RELATIVE_PATH);
+        await atomicWrite(fullPath, renderDecisionsMarkdown(digest.entries));
+        if (opts.harnesses.includes(HarnessType.CLAUDE_CODE)) {
+            const claudeMdPath = path.join(opts.workspaceRoot, HARNESS_FILES[HarnessType.CLAUDE_CODE]);
+            let existing = null;
+            try {
+                existing = await fs.readFile(claudeMdPath, 'utf-8');
+            }
+            catch {
+                existing = null;
+            }
+            if (existing !== null) {
+                const section = renderBoundedSection(digest.entries, 10);
+                const updated = injectBoundedSection(existing, section);
+                if (updated !== existing) {
+                    await atomicWrite(claudeMdPath, updated);
+                }
+            }
+            else {
+                log.debug({ action: 'decisions_digest_skip_inject' }, 'claude-code config file not written yet this run — skipping bounded-section injection this cycle');
+            }
+        }
+        return { entriesWritten: digest.entries.length };
+    }
+    catch (err) {
+        log.warn({ action: 'decisions_digest_write_failed', err }, 'Could not write decisions-log files');
+        return null;
+    }
+}
+//# sourceMappingURL=decisionsDigest.js.map

package/dist/lib/decisionsDigest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisionsDigest.js","sourceRoot":"","sources":["../../src/lib/decisionsDigest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAE/D,MAAM,GAAG,GAAG,YAAY,CAAC,uBAAuB,CAAC,CAAA;AAEjD,sCAAsC;AACtC,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAA;AAEhF,MAAM,aAAa,GAAG,sCAAsC,CAAA;AAC5D,MAAM,WAAW,GAAG,oCAAoC,CAAA;AAwBxD;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,CAAS;IACpC,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,CAAA;IAClB,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,SAAS;QAAE,GAAG,EAAE,CAAA;IAC/D,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AACxB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAC7D,MAAM,CAAC,GAAG,KAAgC,CAAA;IAC1C,OAAO,CACL,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;QACxB,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAC1B,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAC9B,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAgF;IAEhF,MAAM,GAAG,GACP,GAAG,mBAAmB,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC;QAChF,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAA;IACxD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,WAAW,EAAE;YACvF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,+BAA+B,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAC/D,kCAAkC,CACnC,CAAA;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAY,CAAA;QAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAC1D,MAAM,GAAG,GAAG,IAA+B,CAAA;QAC3C,MAAM,WAAW,GAAG,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAA;QAC5F,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACnF,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAA;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,+BAA+B,EAAE,GAAG,EAAE,EAAE,8BAA8B,CAAC,CAAA;QAC1F,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,SAAS,YAAY,CAAC,OAA+B;IACnD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,OAAO,CAAA;IAC/C,OAAO;QACL,mDAAmD;QACnD,gDAAgD;QAChD,wBAAwB,MAAM,EAAE;QAChC,GAAG;QACH,sEAAsE;QACtE,yEAAyE;QACzE,yCAAyC;QACzC,EAAE;QACF,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,uBAAuB,CAAC,OAA+B;IACrE,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IACpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,MAAM,2CAA2C,CAAA;IAC7D,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;IACnE,OAAO,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;AACzC,CAAC;AAED,6HAA6H;AAC7H,MAAM,UAAU,oBAAoB,CAAC,OAA+B,EAAE,KAAK,GAAG,EAAE;IAC9E,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IACvC,MAAM,KAAK,GACT,OAAO,CAAC,MAAM,GAAG,CAAC;QAChB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QACvD,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAA;IACjD,OAAO,CAAC,aAAa,EAAE,8BAA8B,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC9F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,OAAe;IACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;IAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAC3C,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC1D,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1F,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAA;IAClF,OAAO,GAAG,OAAO,GAAG,GAAG,GAAG,OAAO,IAAI,CAAA;AACvC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAA4B;IAE5B,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAA;IAC/C,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAEhC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAA;QAC3E,MAAM,WAAW,CAAC,QAAQ,EAAE,uBAAuB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;QAEpE,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;YACrD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAA;YAC1F,IAAI,QAAQ,GAAkB,IAAI,CAAA;YAClC,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;YACrD,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,IAAI,CAAA;YACjB,CAAC;YACD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;gBACxD,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;gBACvD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACzB,MAAM,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;gBAC1C,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,KAAK,CACP,EAAE,MAAM,EAAE,8BAA8B,EAAE,EAC1C,kGAAkG,CACnG,CAAA;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAA;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,+BAA+B,EAAE,GAAG,EAAE,EAAE,qCAAqC,CAAC,CAAA;QACjG,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/lib/egressPolicy.d.ts

@@ -0,0 +1,69 @@
+/**
+ * egressPolicy.ts — ships the workspace's central egress policy *to* the
+ * machine, so an admin sets `enforce`/`monitor` + an allow list once in the
+ * control plane rather than in every developer's local proxy config
+ * (LLD #63 §4). Mirrors `policySnapshot.ts` / `approvedBypasses.ts`: fetch from
+ * the control plane, write a local artifact under `.intutic/hooks` with
+ * integrity headers, and let the consumer (here the Rust proxy) read it.
+ *
+ * # The contract with the proxy
+ *
+ * `.intutic/hooks/egress-policy.json` — same directory as the policy snapshot
+ * and for the same reason: `.intutic/hooks` is in `UNIVERSAL_PROTECTED_PATHS`,
+ * so a gate already refuses an agent's own write there. The file carries its
+ * own integrity: `digest` (sha256 of a canonical `mode\nallow…` string, first
+ * 32 hex) and `workspace`. The proxy recomputes the digest and refuses a file
+ * whose digest or workspace does not match, keeping its config-derived policy
+ * instead — a corrupt or foreign file degrades to "local config", never to a
+ * weaker enforcement than the operator configured.
+ *
+ * `mode: null` means "central management not configured": the proxy keeps its
+ * local `intutic_settings.egress` / `INTUTIC_EGRESS_MODE`. A `mode` of
+ * `off`/`monitor`/`enforce` is authoritative for the mode; the `allow` list is
+ * UNIONed with the proxy's local allow entries so a developer's local infra
+ * allowances are never dropped.
+ *
+ * @module
+ */
+export declare const DEFAULT_EGRESS_CACHE_DIR: string;
+export declare const EGRESS_POLICY_FILE = "egress-policy.json";
+export type EgressMode = 'off' | 'monitor' | 'enforce';
+/** The workspace egress policy, as `GET /api/v1/workspace/egress-policy` returns it. */
+export interface WorkspaceEgressPolicy {
+    /** null → central management not configured; the proxy keeps local config. */
+    mode: EgressMode | null;
+    allow: string[];
+}
+export interface EgressPolicyOptions {
+    controlPlaneUrl: string;
+    apiKey: string;
+    workspaceId: string;
+    /** Override the directory (tests). */
+    cacheDir?: string;
+}
+/**
+ * The canonical string the digest is computed over — identical on the daemon
+ * (here) and the proxy (Rust `load_local_egress_file`), so both derive the same
+ * digest. Mode (or empty) then each allow entry, newline-joined. Allow entries
+ * are hosts/CIDRs and never contain newlines.
+ */
+export declare function egressDigestInput(mode: EgressMode | null, allow: string[]): string;
+/** Fetch this workspace's central egress policy. Returns null on any failure —
+ *  the caller keeps the previous cache file rather than replacing it with
+ *  nothing, the same rule the policy snapshot follows. */
+export declare function fetchWorkspaceEgressPolicy(opts: EgressPolicyOptions): Promise<WorkspaceEgressPolicy | null>;
+/** Write the cache file atomically, digest + workspace header included — same
+ *  read-only-by-rename posture as the policy snapshot. Exported so a test can
+ *  assert the on-disk shape directly. */
+export declare function writeEgressPolicy(policy: WorkspaceEgressPolicy, workspaceId: string, cacheDir?: string): Promise<{
+    digest: string;
+    mode: EgressMode | null;
+}>;
+/** Fetch and write in one call. Safe to run on every sync cycle. Never throws —
+ *  a failed poll must not take down the sync loop, and leaves the previous
+ *  cache in place. */
+export declare function refreshEgressPolicy(opts: EgressPolicyOptions): Promise<{
+    digest: string;
+    mode: EgressMode | null;
+} | null>;
+//# sourceMappingURL=egressPolicy.d.ts.map

package/dist/lib/egressPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"egressPolicy.d.ts","sourceRoot":"","sources":["../../src/lib/egressPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAUH,eAAO,MAAM,wBAAwB,QAA+C,CAAA;AACpF,eAAO,MAAM,kBAAkB,uBAAuB,CAAA;AAEtD,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,SAAS,GAAG,SAAS,CAAA;AAEtD,wFAAwF;AACxF,MAAM,WAAW,qBAAqB;IACpC,8EAA8E;IAC9E,IAAI,EAAE,UAAU,GAAG,IAAI,CAAA;IACvB,KAAK,EAAE,MAAM,EAAE,CAAA;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,eAAe,EAAE,MAAM,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,sCAAsC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAaD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAElF;AAED;;0DAE0D;AAC1D,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CA0BvC;AAED;;yCAEyC;AACzC,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,qBAAqB,EAC7B,WAAW,EAAE,MAAM,EACnB,QAAQ,GAAE,MAAiC,GAC1C,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,GAAG,IAAI,CAAA;CAAE,CAAC,CAuBtD;AAED;;sBAEsB;AACtB,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAAC,CAS7D"}