@intutic/sync-daemon 1.6.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Intutic
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPORTED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,73 @@
+# @intutic/sync-daemon
+
+> Bidirectional state sync between the Intutic control plane and developer workspaces.
+
+## Overview
+
+The sync daemon runs as a background process on developer machines, maintaining a live bidirectional link between the Intutic control plane and local AI coding harness configurations. It ensures that governance SOPs are always reflected in harness config files, and that local configuration changes are captured and reported upstream.
+
+## Core Loop
+
+```
+fetch config → write harness files → compute hashes → report drift
+```
+
+On each sync cycle the daemon:
+
+1. **Fetches** the latest SOP configuration from the control plane
+2. **Writes** harness-specific config files using 18 format-aware config writers
+3. **Computes** content hashes for drift detection
+4. **Reports** any detected drift back to the control plane
+
+## Features
+
+### Config Writers
+
+18 harness-specific config writers that translate governance SOPs into native configuration formats (YAML, JSON, TOML, Markdown, environment variables).
+
+### Atomic Writes
+
+All config file writes use a write-to-tmp + rename pattern to prevent partial writes from corrupting harness configurations.
+
+### macOS Immutable Flag Enforcement
+
+On macOS, the daemon sets the immutable flag (`chflags uchg`) on managed config files to prevent accidental manual edits that would cause governance drift.
+
+### Drift Detection
+
+Content-hash-based drift detection identifies when harness config files have been modified outside of the sync loop and reports the discrepancy to the control plane.
+
+### Trajectory Monitoring
+
+Monitors active agent sessions and streams trajectory data (tool calls, file edits, terminal commands) to the control plane for real-time governance evaluation.
+
+### Brain Indexing
+
+Indexes harness-specific context directories (BRAIN folders, memory files, skill definitions) and uploads structured metadata to the context graph.
+
+### Config Capture
+
+Captures point-in-time snapshots of all harness configurations for audit, compliance, and historical comparison.
+
+## Usage
+
+The daemon is typically started via the CLI:
+
+```bash
+intutic connect              # Start with default 30s interval
+intutic connect --interval 10  # Custom sync interval (seconds)
+```
+
+Or directly:
+
+```bash
+npx @intutic/sync-daemon --api-url https://api.intutic.ai --interval 30
+```
+
+## Part of Intutic
+
+This package is part of the [Intutic](https://github.com/intutic/intutic) monorepo — an open-core AI governance control plane for developer teams.
+
+## License
+
+MIT — see [LICENSE](../../LICENSE) for details.

package/dist/brainIndexer.d.ts

@@ -0,0 +1,51 @@
+/**
+ * BrainIndexer — WS1: ContextGraph & Codebase RAG Federation
+ *
+ * Implements the client-side filesystem scanner that recursively walks agent folders
+ * (.gemini/, .claude/, .cursor/) and root config files (.cursorrules, .clauderules),
+ * computes SHA-256 hashes, categorizes file types, and determines sync deltas.
+ *
+ * LLD #16 — Contextual Data Indexing
+ * HLD §3.18
+ *
+ * @module
+ */
+import type { IntegrityStore } from '@intutic/shared-types';
+export interface ScanResult {
+    workspaceRoot: string;
+    files: Record<string, {
+        hash: string;
+        size: number;
+        lastModified: string;
+        name: string;
+        type: 'plan' | 'walkthrough' | 'rule' | 'scratch' | 'general';
+    }>;
+}
+export interface DeltaPayload {
+    upserted: Array<{
+        path: string;
+        name: string;
+        hash: string;
+        size: number;
+        type: 'plan' | 'walkthrough' | 'rule' | 'scratch' | 'general';
+        lastModified: string;
+    }>;
+    deleted: string[];
+}
+export declare class BrainIndexer {
+    private static EXCLUSIONS;
+    private static AGENT_FOLDERS;
+    /**
+     * Scans the workspace root recursively for agent config folders.
+     */
+    static scanWorkspace(workspaceRoot: string): Promise<ScanResult>;
+    /**
+     * Categorizes files into standard types.
+     */
+    static categorizeFile(filePath: string): 'plan' | 'walkthrough' | 'rule' | 'scratch' | 'general';
+    /**
+     * Compares the scan result against the local integrity store to calculate changes.
+     */
+    static computeDelta(scanResult: ScanResult, integrityStore: IntegrityStore | null): DeltaPayload;
+}
+//# sourceMappingURL=brainIndexer.d.ts.map

package/dist/brainIndexer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"brainIndexer.d.ts","sourceRoot":"","sources":["../src/brainIndexer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAE3D,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,MAAM,CAAA;IACrB,KAAK,EAAE,MAAM,CACX,MAAM,EACN;QACE,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,YAAY,EAAE,MAAM,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAA;KAC9D,CACF,CAAA;CACF;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,KAAK,CAAC;QACd,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAA;QAC7D,YAAY,EAAE,MAAM,CAAA;KACrB,CAAC,CAAA;IACF,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAC,UAAU,CAAwE;IACjG,OAAO,CAAC,MAAM,CAAC,aAAa,CAA6C;IAEzE;;OAEG;WACU,aAAa,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAwEtE;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS;IA8BhG;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,GAAG,IAAI,GAAG,YAAY;CA8BjG"}

package/dist/brainIndexer.js

@@ -0,0 +1,148 @@
+/**
+ * BrainIndexer — WS1: ContextGraph & Codebase RAG Federation
+ *
+ * Implements the client-side filesystem scanner that recursively walks agent folders
+ * (.gemini/, .claude/, .cursor/) and root config files (.cursorrules, .clauderules),
+ * computes SHA-256 hashes, categorizes file types, and determines sync deltas.
+ *
+ * LLD #16 — Contextual Data Indexing
+ * HLD §3.18
+ *
+ * @module
+ */
+import * as node_fs from 'node:fs/promises';
+import * as node_path from 'node:path';
+import * as crypto from 'node:crypto';
+export class BrainIndexer {
+    static EXCLUSIONS = new Set(['node_modules', '.git', 'dist', 'build', '.dist', '.turbo']);
+    static AGENT_FOLDERS = new Set(['.gemini', '.claude', '.cursor']);
+    /**
+     * Scans the workspace root recursively for agent config folders.
+     */
+    static async scanWorkspace(workspaceRoot) {
+        const files = {};
+        async function walk(dir) {
+            let entries = [];
+            try {
+                entries = await node_fs.readdir(dir, { withFileTypes: true });
+            }
+            catch {
+                return; // Skip unreadable directories
+            }
+            for (const entry of entries) {
+                const fullPath = node_path.join(dir, entry.name);
+                if (entry.isDirectory()) {
+                    if (BrainIndexer.EXCLUSIONS.has(entry.name)) {
+                        continue;
+                    }
+                    // If we are at the workspace root, only traverse into .gemini, .claude, .cursor
+                    const relativeDir = node_path.relative(workspaceRoot, fullPath);
+                    const dirParts = relativeDir.split(node_path.sep);
+                    if (dirParts.length === 1 && !BrainIndexer.AGENT_FOLDERS.has(entry.name)) {
+                        continue;
+                    }
+                    await walk(fullPath);
+                }
+                else if (entry.isFile()) {
+                    const relativePath = node_path.relative(workspaceRoot, fullPath);
+                    const dirParts = relativePath.split(node_path.sep);
+                    const isInAgentFolder = dirParts.length > 1 && BrainIndexer.AGENT_FOLDERS.has(dirParts[0]);
+                    const isRootAgentFile = dirParts.length === 1 &&
+                        (entry.name === '.cursorrules' ||
+                            entry.name === '.clauderules' ||
+                            entry.name === '.gemini');
+                    if (!isInAgentFolder && !isRootAgentFile) {
+                        continue;
+                    }
+                    try {
+                        const stat = await node_fs.stat(fullPath);
+                        if (stat.size > 5 * 1024 * 1024) {
+                            continue; // 5MB cap limit
+                        }
+                        const hash = await computeFileHash(fullPath);
+                        files[relativePath] = {
+                            hash,
+                            size: stat.size,
+                            lastModified: stat.mtime.toISOString(),
+                            name: entry.name,
+                            type: BrainIndexer.categorizeFile(relativePath),
+                        };
+                    }
+                    catch {
+                        // Skip failed file reads
+                    }
+                }
+            }
+        }
+        try {
+            await node_fs.access(workspaceRoot);
+            await walk(workspaceRoot);
+        }
+        catch {
+            // Root folder inaccessible
+        }
+        return { workspaceRoot, files };
+    }
+    /**
+     * Categorizes files into standard types.
+     */
+    static categorizeFile(filePath) {
+        const name = node_path.basename(filePath).toLowerCase();
+        if (name.includes('plan') || name.includes('roadmap') || name.includes('implementation')) {
+            return 'plan';
+        }
+        if (name.includes('walkthrough') || name.includes('summary') || name.includes('report')) {
+            return 'walkthrough';
+        }
+        if (name.includes('rules') ||
+            name.includes('instructions') ||
+            name.includes('guidelines') ||
+            name.includes('system') ||
+            name.includes('claude.md') ||
+            name.includes('agents.md')) {
+            return 'rule';
+        }
+        if (name.includes('scratch') ||
+            name.includes('temp') ||
+            name.includes('test') ||
+            name.includes('debug') ||
+            name.includes('simulate')) {
+            return 'scratch';
+        }
+        return 'general';
+    }
+    /**
+     * Compares the scan result against the local integrity store to calculate changes.
+     */
+    static computeDelta(scanResult, integrityStore) {
+        const upserted = [];
+        const deleted = [];
+        const storeFiles = integrityStore?.files ?? {};
+        // Identify added or modified files
+        for (const [path, file] of Object.entries(scanResult.files)) {
+            const cachedHash = storeFiles[path];
+            if (!cachedHash || cachedHash !== file.hash) {
+                upserted.push({
+                    path,
+                    name: file.name,
+                    hash: file.hash,
+                    size: file.size,
+                    type: file.type,
+                    lastModified: file.lastModified,
+                });
+            }
+        }
+        // Identify deleted files
+        for (const path of Object.keys(storeFiles)) {
+            if (!scanResult.files[path]) {
+                deleted.push(path);
+            }
+        }
+        return { upserted, deleted };
+    }
+}
+async function computeFileHash(filePath) {
+    const content = await node_fs.readFile(filePath);
+    return crypto.createHash('sha256').update(content).digest('hex');
+}
+//# sourceMappingURL=brainIndexer.js.map

package/dist/brainIndexer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brainIndexer.js","sourceRoot":"","sources":["../src/brainIndexer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAA;AAC3C,OAAO,KAAK,SAAS,MAAM,WAAW,CAAA;AACtC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AA6BrC,MAAM,OAAO,YAAY;IACf,MAAM,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;IACzF,MAAM,CAAC,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;IAEzE;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,aAAqB;QAC9C,MAAM,KAAK,GAAwB,EAAE,CAAA;QAErC,KAAK,UAAU,IAAI,CAAC,GAAW;YAC7B,IAAI,OAAO,GAAU,EAAE,CAAA;YACvB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;YAC/D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAM,CAAC,8BAA8B;YACvC,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;gBAEhD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;oBACxB,IAAI,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC5C,SAAQ;oBACV,CAAC;oBAED,gFAAgF;oBAChF,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAA;oBAC/D,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;oBACjD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;wBACzE,SAAQ;oBACV,CAAC;oBAED,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAA;gBACtB,CAAC;qBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;oBAC1B,MAAM,YAAY,GAAG,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAA;oBAChE,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;oBAClD,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;oBAC1F,MAAM,eAAe,GACnB,QAAQ,CAAC,MAAM,KAAK,CAAC;wBACrB,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc;4BAC5B,KAAK,CAAC,IAAI,KAAK,cAAc;4BAC7B,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAA;oBAE7B,IAAI,CAAC,eAAe,IAAI,CAAC,eAAe,EAAE,CAAC;wBACzC,SAAQ;oBACV,CAAC;oBAED,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;wBACzC,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;4BAChC,SAAQ,CAAC,gBAAgB;wBAC3B,CAAC;wBAED,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAA;wBAC5C,KAAK,CAAC,YAAY,CAAC,GAAG;4BACpB,IAAI;4BACJ,IAAI,EAAE,IAAI,CAAC,IAAI;4BACf,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;4BACtC,IAAI,EAAE,KAAK,CAAC,IAAI;4BAChB,IAAI,EAAE,YAAY,CAAC,cAAc,CAAC,YAAY,CAAC;yBAChD,CAAA;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,yBAAyB;oBAC3B,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;YACnC,MAAM,IAAI,CAAC,aAAa,CAAC,CAAA;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;QAED,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAA;IACjC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,QAAgB;QACpC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAA;QACvD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACzF,OAAO,MAAM,CAAA;QACf,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxF,OAAO,aAAa,CAAA;QACtB,CAAC;QACD,IACE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YACtB,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;YAC7B,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC3B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACvB,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC1B,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAC1B,CAAC;YACD,OAAO,MAAM,CAAA;QACf,CAAC;QACD,IACE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YACxB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YACrB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YACtB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EACzB,CAAC;YACD,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,UAAsB,EAAE,cAAqC;QAC/E,MAAM,QAAQ,GAA6B,EAAE,CAAA;QAC7C,MAAM,OAAO,GAAa,EAAE,CAAA;QAE5B,MAAM,UAAU,GAAG,cAAc,EAAE,KAAK,IAAI,EAAE,CAAA;QAE9C,mCAAmC;QACnC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5D,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;YACnC,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC5C,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI;oBACJ,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,YAAY,EAAE,IAAI,CAAC,YAAY;iBAChC,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,yBAAyB;QACzB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACpB,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;IAC9B,CAAC;;AAGH,KAAK,UAAU,eAAe,CAAC,QAAgB;IAC7C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAChD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAClE,CAAC"}

package/dist/configReader.d.ts

@@ -0,0 +1,46 @@
+/**
+ * configReader.ts — Read harness config files and upload to control plane.
+ *
+ * The daemon reads config files (.cursorrules, CLAUDE.md, etc.) from the
+ * developer's workspace and POSTs them to the control plane for versioning,
+ * diff tracking, and SkillOpt analysis.
+ *
+ * LLD #51 — Harness Config Capture + SkillOpt Pipeline
+ *
+ * @module
+ */
+import type { HarnessType, CapturedConfigFile } from '@intutic/shared-types';
+/**
+ * Determine whether config capture should run on this iteration.
+ * Captures every Nth iteration to avoid flooding the control plane.
+ */
+export declare function shouldCaptureThisIteration(iterationCount: number): boolean;
+/**
+ * Read harness config files from the workspace.
+ * For each active harness, reads the config file, computes SHA-256 hash,
+ * and returns the content. Skips files that don't exist or are too large.
+ *
+ * @param workspaceRoot - Absolute path to the workspace root.
+ * @param harnesses - Active harness types detected in the workspace.
+ * @returns Array of captured config files with content and hashes.
+ */
+export declare function readHarnessConfigs(workspaceRoot: string, harnesses: HarnessType[]): Promise<CapturedConfigFile[]>;
+/**
+ * Upload captured config files to the control plane.
+ * Deduplicates locally: only uploads files whose content hash changed
+ * since the last upload.
+ *
+ * @param controlPlaneUrl - Control plane base URL.
+ * @param apiKey - API key for authentication.
+ * @param workspaceId - Workspace identifier.
+ * @param harnessType - Which harness these configs belong to.
+ * @param configs - Captured config files from readHarnessConfigs().
+ * @returns Number of files actually uploaded (after dedup).
+ */
+export declare function uploadConfigCapture(controlPlaneUrl: string, apiKey: string, workspaceId: string, harnessType: HarnessType, configs: CapturedConfigFile[]): Promise<number>;
+/**
+ * Full config capture cycle: read + upload.
+ * Groups by harness type for proper capture payloads.
+ */
+export declare function captureAndUpload(controlPlaneUrl: string, apiKey: string, workspaceId: string, workspaceRoot: string, harnesses: HarnessType[]): Promise<void>;
+//# sourceMappingURL=configReader.d.ts.map

package/dist/configReader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configReader.d.ts","sourceRoot":"","sources":["../src/configReader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAA6B,MAAM,uBAAuB,CAAA;AAkBvG;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAG1E;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,WAAW,EAAE,GACvB,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAgC/B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,mBAAmB,CACvC,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,WAAW,EACxB,OAAO,EAAE,kBAAkB,EAAE,GAC5B,OAAO,CAAC,MAAM,CAAC,CAsCjB;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,WAAW,EAAE,GACvB,OAAO,CAAC,IAAI,CAAC,CAgBf"}

package/dist/configReader.js

@@ -0,0 +1,133 @@
+/**
+ * configReader.ts — Read harness config files and upload to control plane.
+ *
+ * The daemon reads config files (.cursorrules, CLAUDE.md, etc.) from the
+ * developer's workspace and POSTs them to the control plane for versioning,
+ * diff tracking, and SkillOpt analysis.
+ *
+ * LLD #51 — Harness Config Capture + SkillOpt Pipeline
+ *
+ * @module
+ */
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import * as crypto from 'node:crypto';
+import { HARNESS_FILES } from './configWriter.js';
+// ─── Constants ───────────────────────────────────────────────────────
+/** Capture every Nth sync iteration (default: every 5th = ~2.5 min at 30s poll). */
+const DEFAULT_CAPTURE_INTERVAL = 5;
+/** Max file size to capture (prevent uploading massive files). */
+const MAX_FILE_SIZE_BYTES = 512 * 1024; // 512 KB
+// ─── Local hash cache ────────────────────────────────────────────────
+/** Cache of last-uploaded content hashes per file path. Avoids redundant uploads. */
+const lastUploadedHashes = new Map();
+// ─── Public API ──────────────────────────────────────────────────────
+/**
+ * Determine whether config capture should run on this iteration.
+ * Captures every Nth iteration to avoid flooding the control plane.
+ */
+export function shouldCaptureThisIteration(iterationCount) {
+    const interval = parseInt(process.env.CONFIG_CAPTURE_INTERVAL ?? '', 10) || DEFAULT_CAPTURE_INTERVAL;
+    return iterationCount > 0 && iterationCount % interval === 0;
+}
+/**
+ * Read harness config files from the workspace.
+ * For each active harness, reads the config file, computes SHA-256 hash,
+ * and returns the content. Skips files that don't exist or are too large.
+ *
+ * @param workspaceRoot - Absolute path to the workspace root.
+ * @param harnesses - Active harness types detected in the workspace.
+ * @returns Array of captured config files with content and hashes.
+ */
+export async function readHarnessConfigs(workspaceRoot, harnesses) {
+    const results = [];
+    for (const harness of harnesses) {
+        const filename = HARNESS_FILES[harness];
+        if (!filename)
+            continue;
+        const filePath = path.join(workspaceRoot, filename);
+        try {
+            const stat = await fs.stat(filePath);
+            if (stat.size > MAX_FILE_SIZE_BYTES) {
+                console.warn(`[config-reader] Skipping ${filename}: ${stat.size} bytes exceeds ${MAX_FILE_SIZE_BYTES} limit`);
+                continue;
+            }
+            const content = await fs.readFile(filePath, 'utf-8');
+            const contentHash = crypto.createHash('sha256').update(content).digest('hex');
+            results.push({
+                path: filename,
+                content,
+                contentHash,
+            });
+        }
+        catch (err) {
+            // File doesn't exist or unreadable — skip silently
+            if (err.code !== 'ENOENT') {
+                console.warn(`[config-reader] Could not read ${filename}:`, err);
+            }
+        }
+    }
+    return results;
+}
+/**
+ * Upload captured config files to the control plane.
+ * Deduplicates locally: only uploads files whose content hash changed
+ * since the last upload.
+ *
+ * @param controlPlaneUrl - Control plane base URL.
+ * @param apiKey - API key for authentication.
+ * @param workspaceId - Workspace identifier.
+ * @param harnessType - Which harness these configs belong to.
+ * @param configs - Captured config files from readHarnessConfigs().
+ * @returns Number of files actually uploaded (after dedup).
+ */
+export async function uploadConfigCapture(controlPlaneUrl, apiKey, workspaceId, harnessType, configs) {
+    // Filter out files whose hash hasn't changed since last upload
+    const changed = configs.filter(f => {
+        const lastHash = lastUploadedHashes.get(f.path);
+        return lastHash !== f.contentHash;
+    });
+    if (changed.length === 0)
+        return 0;
+    const payload = {
+        workspaceId,
+        harnessType,
+        files: changed,
+    };
+    const url = `${controlPlaneUrl}/api/v1/config/capture`;
+    const res = await fetch(url, {
+        method: 'POST',
+        headers: {
+            'content-type': 'application/json',
+            authorization: `Bearer ${apiKey}`,
+        },
+        body: JSON.stringify(payload),
+        signal: AbortSignal.timeout(10_000),
+    });
+    if (!res.ok) {
+        const body = await res.text().catch(() => '');
+        console.warn(`[config-reader] Upload failed (${res.status}): ${body}`);
+        return 0;
+    }
+    // Update local hash cache on success
+    for (const f of changed) {
+        lastUploadedHashes.set(f.path, f.contentHash);
+    }
+    return changed.length;
+}
+/**
+ * Full config capture cycle: read + upload.
+ * Groups by harness type for proper capture payloads.
+ */
+export async function captureAndUpload(controlPlaneUrl, apiKey, workspaceId, workspaceRoot, harnesses) {
+    for (const harness of harnesses) {
+        const configs = await readHarnessConfigs(workspaceRoot, [harness]);
+        if (configs.length > 0) {
+            const uploaded = await uploadConfigCapture(controlPlaneUrl, apiKey, workspaceId, harness, configs);
+            if (uploaded > 0) {
+                console.log(`[config-reader] Captured ${uploaded} ${harness} config file(s)`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=configReader.js.map

package/dist/configReader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configReader.js","sourceRoot":"","sources":["../src/configReader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAErC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAEjD,wEAAwE;AAExE,oFAAoF;AACpF,MAAM,wBAAwB,GAAG,CAAC,CAAA;AAElC,kEAAkE;AAClE,MAAM,mBAAmB,GAAG,GAAG,GAAG,IAAI,CAAA,CAAE,SAAS;AAEjD,wEAAwE;AAExE,qFAAqF;AACrF,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAkB,CAAA;AAEpD,wEAAwE;AAExE;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,cAAsB;IAC/D,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,wBAAwB,CAAA;IACpG,OAAO,cAAc,GAAG,CAAC,IAAI,cAAc,GAAG,QAAQ,KAAK,CAAC,CAAA;AAC9D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,aAAqB,EACrB,SAAwB;IAExB,MAAM,OAAO,GAAyB,EAAE,CAAA;IAExC,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,CAAC,QAAQ;YAAE,SAAQ;QAEvB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAA;QACnD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACpC,IAAI,IAAI,CAAC,IAAI,GAAG,mBAAmB,EAAE,CAAC;gBACpC,OAAO,CAAC,IAAI,CAAC,4BAA4B,QAAQ,KAAK,IAAI,CAAC,IAAI,kBAAkB,mBAAmB,QAAQ,CAAC,CAAA;gBAC7G,SAAQ;YACV,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;YACpD,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAE7E,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,OAAO;gBACP,WAAW;aACZ,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,mDAAmD;YACnD,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrD,OAAO,CAAC,IAAI,CAAC,kCAAkC,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAA;YAClE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,eAAuB,EACvB,MAAc,EACd,WAAmB,EACnB,WAAwB,EACxB,OAA6B;IAE7B,+DAA+D;IAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QACjC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QAC/C,OAAO,QAAQ,KAAK,CAAC,CAAC,WAAW,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IAElC,MAAM,OAAO,GAA8B;QACzC,WAAW;QACX,WAAW;QACX,KAAK,EAAE,OAAO;KACf,CAAA;IAED,MAAM,GAAG,GAAG,GAAG,eAAe,wBAAwB,CAAA;IACtD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,MAAM,EAAE;SAClC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QAC7B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAA;IAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;QAC7C,OAAO,CAAC,IAAI,CAAC,kCAAkC,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAA;QACtE,OAAO,CAAC,CAAA;IACV,CAAC;IAED,qCAAqC;IACrC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,CAAA;IAC/C,CAAC;IAED,OAAO,OAAO,CAAC,MAAM,CAAA;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,eAAuB,EACvB,MAAc,EACd,WAAmB,EACnB,aAAqB,EACrB,SAAwB;IAExB,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;QAClE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACxC,eAAe,EACf,MAAM,EACN,WAAW,EACX,OAAO,EACP,OAAO,CACR,CAAA;YACD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,4BAA4B,QAAQ,IAAI,OAAO,iBAAiB,CAAC,CAAA;YAC/E,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/configWriter.d.ts

@@ -0,0 +1,53 @@
+/**
+ * configWriter.ts — Write SOP content to harness config files.
+ *
+ * Each harness (Cursor, Claude Code, Antigravity, Windsurf, Aider,
+ * OpenHands, Codex) has a distinct config file format. This module
+ * resolves paths, formats content, and performs atomic writes
+ * (write-to-tmp → rename) to prevent partial/corrupt files.
+ *
+ * HLD §3.14 — Real-Time State Mirroring
+ * LLD #8 — Sync Daemon / CLI
+ *
+ * @module
+ */
+import type { HarnessType, SyncSopEntry, ConfigEdit } from '@intutic/shared-types';
+/**
+ * Maps each harness type to its expected config filename relative to
+ * the workspace root. Empty string means the harness is deferred to
+ * Phase 2 (e.g., n8n — TD-037).
+ */
+export declare const HARNESS_FILES: Record<HarnessType, string>;
+/** Result of a config-write operation across one or more harnesses. */
+export interface WriteResult {
+    /** Paths of files that were successfully written. */
+    filesWritten: string[];
+    /** Paths where the harness was skipped (not detected or deferred). */
+    filesSkipped: string[];
+}
+/**
+ * Write SOP content to all targeted harness config files.
+ *
+ * For each harness type, resolves the config file path, formats the
+ * content according to the harness-specific format, and performs an
+ * atomic write (tmp file → rename).
+ *
+ * @param workspaceRoot - Absolute path to the workspace root.
+ * @param sops - SOPs to write, each specifying which harnesses to target.
+ * @param proxyUrl - Intutic proxy URL for LLM API redirect.
+ * @param harnesses - Harness types detected in the workspace.
+ * @returns WriteResult with written and skipped file paths.
+ */
+export declare function writeConfigFiles(workspaceRoot: string, sops: SyncSopEntry[], proxyUrl: string, harnesses: HarnessType[], workspaceId?: string, 
+/** WS-5 Q3: 'rewrite' (default) | 'immutable' | 'alert-only' */
+bypassEnforcementTier?: string): Promise<WriteResult>;
+/**
+ * Apply a list of custom config edits (ADD, DELETE, REPLACE) to a workspace rule file.
+ */
+export declare function applyConfigEdits(workspaceRoot: string, appliedEdits: Array<{
+    suggestionId: string;
+    harnessType: string;
+    filePath: string;
+    edits: string | ConfigEdit[];
+}>, bypassEnforcementTier?: string): Promise<void>;
+//# sourceMappingURL=configWriter.d.ts.map

package/dist/configWriter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configWriter.d.ts","sourceRoot":"","sources":["../src/configWriter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAwClF;;;;GAIG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAmBrD,CAAA;AAID,uEAAuE;AACvE,MAAM,WAAW,WAAW;IAC1B,qDAAqD;IACrD,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,sEAAsE;IACtE,YAAY,EAAE,MAAM,EAAE,CAAA;CACvB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,YAAY,EAAE,EACpB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,WAAW,EAAE,EACxB,WAAW,SAAK;AAChB,gEAAgE;AAChE,qBAAqB,CAAC,EAAE,MAAM,GAC7B,OAAO,CAAC,WAAW,CAAC,CAwJtB;AAkCD;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,KAAK,CAAC;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,GAAG,UAAU,EAAE,CAAA;CAC7B,CAAC,EACF,qBAAqB,CAAC,EAAE,MAAM,GAC7B,OAAO,CAAC,IAAI,CAAC,CA2Df"}