@intutic/sync-daemon 1.6.0

package/dist/watcher/settingsGuard.js

@@ -0,0 +1,250 @@
+/**
+ * settingsGuard.ts — Multi-harness governance config tamper detection & restoration.
+ *
+ * Expanded from Claude Code-only to cover all 18 Intutic-supported harnesses.
+ * Called by the drift watcher whenever any protected governance config file changes.
+ *
+ * Behaviour per path type:
+ *   - JSON hook files (Cursor, Cline, OpenHands, Goose): validate marker presence, restore.
+ *   - Immutable files (Goose plugin): log governance_override_attempt incident instead of restoring.
+ *   - Text rules (.roorules, .clinerules): restore from last-written hash.
+ *   - Settings files (VS Code, Aider, claude_desktop_config.json): detect drift, restore.
+ *
+ * LLD #14 — settingsGuard.ts
+ * HLD §3.14 — Three-Tier Defense Cascade (Tier 1 Native Gating)
+ *
+ * @module
+ */
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import * as os from 'node:os';
+import * as crypto from 'node:crypto';
+import { createLogger } from '@intutic/logger';
+import { updatePreToolUseHooks, parseSopConstraints } from '../harness/claudeCodeHooks.js';
+import { writeClineHooks } from '../harness/clineHooks.js';
+import { writeCursorHooks } from '../harness/cursorHooks.js';
+import { writeOpenHandsHooks } from '../harness/openhandsHooks.js';
+import { writeGooseHooks } from '../harness/gooseHooks.js';
+import { writeWindsurfHooks } from '../harness/windsurfHooks.js';
+import { isImmutable } from '../harness/gooseHardener.js';
+const log = createLogger('sync-settings-guard');
+/** Marker embedded in every Intutic-generated hook command. */
+const HOOK_MARKER = '.intutic/hooks/';
+const home = os.homedir();
+// ─── All protected paths, grouped by harness ─────────────────────────
+/** Returns the full list of protected paths to watch. */
+export function buildProtectedPaths(workspaceRoot) {
+    return [
+        // ── Claude Code ──────────────────────────────────────────────────
+        path.join(home, '.claude', 'settings.json'),
+        path.join(workspaceRoot, '.claude', 'settings.json'),
+        // ── Cursor (3 levels) ────────────────────────────────────────────
+        '/etc/cursor/hooks.json',
+        path.join(home, '.cursor', 'hooks.json'),
+        path.join(workspaceRoot, '.cursor', 'hooks.json'),
+        // ── Windsurf ─────────────────────────────────────────────────────
+        path.join(home, '.codeium', 'windsurf', 'hooks.json'),
+        path.join(home, '.codeium', 'windsurf', 'settings.json'),
+        path.join(workspaceRoot, '.windsurf', 'hooks.json'),
+        // ── Cline ────────────────────────────────────────────────────────
+        path.join(workspaceRoot, '.clinerules', 'hooks', 'hooks.json'),
+        // ── OpenHands ────────────────────────────────────────────────────
+        path.join(workspaceRoot, '.openhands', 'hooks.json'),
+        // ── Goose (immutable — incident on tamper, not silent restore) ───
+        path.join(home, '.agents', 'plugins', 'intutic-governance', 'hooks', 'hooks.json'),
+        // ── Roo Code ─────────────────────────────────────────────────────
+        path.join(workspaceRoot, '.roorules'),
+        // ── VS Code settings (Cline / Roo Code) ──────────────────────────
+        path.join(home, '.config', 'Code', 'User', 'settings.json'),
+        path.join(home, 'Library', 'Application Support', 'Code', 'User', 'settings.json'),
+        path.join(workspaceRoot, '.vscode', 'settings.json'),
+        // ── Claude Desktop ────────────────────────────────────────────────
+        path.join(home, 'Library', 'Application Support', 'Claude', 'claude_desktop_config.json'),
+        path.join(home, '.config', 'Claude', 'claude_desktop_config.json'),
+        // ── Antigravity ───────────────────────────────────────────────────
+        path.join(workspaceRoot, '.gemini', 'settings.json'),
+    ];
+}
+// ─── Public entry point ──────────────────────────────────────────────
+/**
+ * Inspect any protected governance config file and restore if tampered.
+ *
+ * @param changedPath  - Absolute path of the file that changed.
+ * @param workspaceRoot - Workspace root for restoration helpers.
+ * @param sops          - Current SOP list.
+ * @param proxyUrl      - Current proxy URL.
+ * @param settings      - Optional passthrough settings.
+ * @returns true if tampering was detected.
+ */
+export async function guardSettingsFile(changedPath, workspaceRoot, sops, proxyUrl = '', settings) {
+    // ── Goose plugin: immutable file tamper → incident, not restore ───
+    if (changedPath.includes('intutic-governance')) {
+        if (await isImmutable(changedPath)) {
+            log.error({ action: 'governance_override_attempt', path: changedPath }, 'SECURITY: Immutable Goose governance file was modified — OS immutable flag bypassed. Emitting incident.');
+            // Resolve workspace ID from process env or local runtime-env file
+            let workspaceId = process.env.INTUTIC_WORKSPACE_ID || '';
+            if (!workspaceId) {
+                try {
+                    const envPath = path.join(workspaceRoot, '.intutic', 'runtime-env');
+                    const content = await fs.readFile(envPath, 'utf8');
+                    const match = content.match(/INTUTIC_WORKSPACE_ID=(.+)/);
+                    if (match && match[1]) {
+                        workspaceId = match[1].trim();
+                    }
+                }
+                catch {
+                    workspaceId = 'unknown';
+                }
+            }
+            // Emit incident to control plane via local hook-events queue
+            try {
+                const tamperEntry = JSON.stringify({
+                    event: 'config_tamper',
+                    toolName: 'goose_plugin',
+                    reason: 'SECURITY: Immutable Goose governance file was modified — OS immutable flag bypassed.',
+                    workspaceId,
+                    filePath: changedPath,
+                    timestamp: new Date().toISOString(),
+                    incidentId: crypto.createHash('sha1').update(changedPath + Date.now()).digest('hex').slice(0, 16),
+                }) + '\n';
+                const hookEventsJsonl = path.join(os.homedir(), '.intutic', 'events', 'hook-events.jsonl');
+                await fs.appendFile(hookEventsJsonl, tamperEntry, { flag: 'a' });
+            }
+            catch (err) {
+                log.warn({ err }, 'Failed to write Goose tamper incident to hook-events log');
+            }
+            return true;
+        }
+        // Not immutable (install in progress or first write) — restore normally
+        await writeGooseHooks(proxyUrl);
+        return true;
+    }
+    // ── Claude Code settings.json ─────────────────────────────────────
+    if (changedPath.includes('.claude') && changedPath.endsWith('settings.json')) {
+        return guardClaudeCodeSettings(changedPath, workspaceRoot, sops, settings);
+    }
+    // ── Cursor hooks.json ─────────────────────────────────────────────
+    if (changedPath.includes('.cursor') && changedPath.endsWith('hooks.json')) {
+        return guardJsonHookFile(changedPath, 'cursor', async () => {
+            await writeCursorHooks(workspaceRoot, proxyUrl, '', changedPath.startsWith('/etc'));
+        });
+    }
+    // ── Windsurf hooks.json ───────────────────────────────────────────
+    if ((changedPath.includes('.codeium') || changedPath.includes('.windsurf')) && changedPath.endsWith('hooks.json')) {
+        return guardJsonHookFile(changedPath, 'windsurf', async () => {
+            await writeWindsurfHooks(workspaceRoot, proxyUrl);
+        });
+    }
+    // ── Cline hooks.json ──────────────────────────────────────────────
+    if (changedPath.includes('.clinerules') && changedPath.endsWith('hooks.json')) {
+        return guardJsonHookFile(changedPath, 'cline', async () => {
+            await writeClineHooks(workspaceRoot, proxyUrl);
+        });
+    }
+    // ── OpenHands hooks.json ──────────────────────────────────────────
+    if (changedPath.includes('.openhands') && changedPath.endsWith('hooks.json')) {
+        return guardJsonHookFile(changedPath, 'openhands', async () => {
+            await writeOpenHandsHooks(workspaceRoot, proxyUrl);
+        });
+    }
+    // ── All other paths: file deleted or corrupted → log drift incident
+    const exists = await fileExists(changedPath);
+    if (!exists) {
+        log.warn({ action: 'governance_drift', path: changedPath }, `Governance config deleted: ${changedPath}`);
+        // Emit drift event — restoration depends on harness type (handled above for active harnesses)
+        return true;
+    }
+    log.debug({ action: 'settings_intact', path: changedPath }, 'Protected file changed but no action required');
+    return false;
+}
+// ─── Internal helpers ────────────────────────────────────────────────
+async function guardClaudeCodeSettings(settingsFilePath, workspaceRoot, sops, settings) {
+    let raw;
+    try {
+        raw = await fs.readFile(settingsFilePath, 'utf-8');
+    }
+    catch {
+        log.warn({ action: 'settings_deleted', path: settingsFilePath }, 'Claude Code settings.json deleted — restoring');
+        await updatePreToolUseHooks(workspaceRoot, sops, settings);
+        return true;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        log.warn({ action: 'settings_corrupted', path: settingsFilePath }, 'Claude Code settings.json corrupted — restoring');
+        await updatePreToolUseHooks(workspaceRoot, sops, settings);
+        return true;
+    }
+    const hooks = parsed.hooks ?? {};
+    const preToolUse = hooks.PreToolUse ?? [];
+    const hasIntuticHook = preToolUse.some((entry) => {
+        if (typeof entry !== 'object' || entry === null)
+            return false;
+        const h = entry.hooks ?? [];
+        return h.some((hh) => typeof hh.command === 'string'
+            && String(hh.command).includes(HOOK_MARKER));
+    });
+    if (!hasIntuticHook) {
+        log.warn({ action: 'hook_missing', path: settingsFilePath }, 'Claude Code PreToolUse hook missing — restoring');
+        await updatePreToolUseHooks(workspaceRoot, sops, settings);
+        return true;
+    }
+    const deny = parsed.permissions?.deny ?? [];
+    const constraints = parseSopConstraints(sops, settings);
+    const expectedDenyCount = constraints.highRiskTools.length + constraints.patterns.length;
+    if (deny.length < expectedDenyCount) {
+        log.warn({ action: 'deny_rules_cleared', path: settingsFilePath }, 'Deny rules cleared — restoring');
+        await updatePreToolUseHooks(workspaceRoot, sops, settings);
+        return true;
+    }
+    log.debug({ action: 'settings_intact', path: settingsFilePath }, 'Claude Code settings integrity OK');
+    return false;
+}
+async function guardJsonHookFile(filePath, harness, restore) {
+    let raw;
+    try {
+        raw = await fs.readFile(filePath, 'utf-8');
+    }
+    catch {
+        log.warn({ action: 'hook_file_deleted', harness, path: filePath }, `${harness} hooks.json deleted — restoring`);
+        await safeRestore(harness, restore);
+        return true;
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        // Check that the Intutic marker is present in the hooks config
+        const hasMarker = JSON.stringify(parsed).includes('intutic');
+        if (!hasMarker) {
+            log.warn({ action: 'hook_marker_missing', harness, path: filePath }, `${harness} hooks.json tampered — restoring`);
+            await safeRestore(harness, restore);
+            return true;
+        }
+    }
+    catch {
+        log.warn({ action: 'hook_file_corrupted', harness, path: filePath }, `${harness} hooks.json corrupted — restoring`);
+        await safeRestore(harness, restore);
+        return true;
+    }
+    return false;
+}
+async function safeRestore(harness, restore) {
+    try {
+        await restore();
+        log.info({ action: 'hook_restored', harness }, `${harness} governance hooks restored`);
+    }
+    catch (err) {
+        log.error({ action: 'hook_restore_failed', harness, err }, `Failed to restore ${harness} governance hooks`);
+    }
+}
+async function fileExists(p) {
+    try {
+        await fs.access(p);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=settingsGuard.js.map

package/dist/watcher/settingsGuard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settingsGuard.js","sourceRoot":"","sources":["../../src/watcher/settingsGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAA;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAA;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AAEzD,MAAM,GAAG,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAA;AAE/C,+DAA+D;AAC/D,MAAM,WAAW,GAAG,iBAAiB,CAAA;AAErC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAA;AAEzB,wEAAwE;AAExE,yDAAyD;AACzD,MAAM,UAAU,mBAAmB,CAAC,aAAqB;IACvD,OAAO;QACL,oEAAoE;QACpE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,eAAe,CAAC;QACpD,oEAAoE;QACpE,wBAAwB;QACxB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,YAAY,CAAC;QACjD,oEAAoE;QACpE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,CAAC;QACxD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,EAAE,YAAY,CAAC;QACnD,oEAAoE;QACpE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,OAAO,EAAE,YAAY,CAAC;QAC9D,oEAAoE;QACpE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,EAAE,YAAY,CAAC;QACpD,oEAAoE;QACpE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,oBAAoB,EAAE,OAAO,EAAE,YAAY,CAAC;QAClF,oEAAoE;QACpE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC;QACrC,oEAAoE;QACpE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC;QAClF,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,eAAe,CAAC;QACpD,qEAAqE;QACrE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,EAAE,4BAA4B,CAAC;QACzF,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,4BAA4B,CAAC;QAClE,qEAAqE;QACrE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,eAAe,CAAC;KACrD,CAAA;AACH,CAAC;AAED,wEAAwE;AAExE;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,WAAmB,EACnB,aAAqB,EACrB,IAAoB,EACpB,QAAQ,GAAG,EAAE,EACb,QAAkC;IAElC,qEAAqE;IACrE,IAAI,WAAW,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC/C,IAAI,MAAM,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,KAAK,CACP,EAAE,MAAM,EAAE,6BAA6B,EAAE,IAAI,EAAE,WAAW,EAAE,EAC5D,yGAAyG,CAC1G,CAAA;YAED,kEAAkE;YAClE,IAAI,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC;YACzD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;oBACpE,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;oBACzD,IAAI,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;wBACtB,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBAChC,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,WAAW,GAAG,SAAS,CAAC;gBAC1B,CAAC;YACH,CAAC;YAED,6DAA6D;YAC7D,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC;oBACjC,KAAK,EAAE,eAAe;oBACtB,QAAQ,EAAE,cAAc;oBACxB,MAAM,EAAE,sFAAsF;oBAC9F,WAAW;oBACX,QAAQ,EAAE,WAAW;oBACrB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;iBAClG,CAAC,GAAG,IAAI,CAAA;gBACT,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAA;gBAC1F,MAAM,EAAE,CAAC,UAAU,CAAC,eAAe,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;YAClE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,0DAA0D,CAAC,CAAA;YAC/E,CAAC;YAED,OAAO,IAAI,CAAA;QACb,CAAC;QACD,wEAAwE;QACxE,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAA;QAC/B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,qEAAqE;IACrE,IAAI,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC7E,OAAO,uBAAuB,CAAC,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC5E,CAAC;IAED,qEAAqE;IACrE,IAAI,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1E,OAAO,iBAAiB,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,gBAAgB,CAAC,aAAa,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;QACrF,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,qEAAqE;IACrE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAClH,OAAO,iBAAiB,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,kBAAkB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAA;QACnD,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,qEAAqE;IACrE,IAAI,WAAW,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9E,OAAO,iBAAiB,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,eAAe,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAA;QAChD,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,qEAAqE;IACrE,IAAI,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7E,OAAO,iBAAiB,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,mBAAmB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAA;QACpD,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,qEAAqE;IACrE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,CAAA;IAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,8BAA8B,WAAW,EAAE,CAAC,CAAA;QACxG,8FAA8F;QAC9F,OAAO,IAAI,CAAA;IACb,CAAC;IAED,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,+CAA+C,CAAC,CAAA;IAC5G,OAAO,KAAK,CAAA;AACd,CAAC;AAED,wEAAwE;AAExE,KAAK,UAAU,uBAAuB,CACpC,gBAAwB,EACxB,aAAqB,EACrB,IAAoB,EACpB,QAAkC;IAElC,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAA;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,+CAA+C,CAAC,CAAA;QACjH,MAAM,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;QAC1D,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,MAA+B,CAAA;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,iDAAiD,CAAC,CAAA;QACrH,MAAM,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;QAC1D,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,KAAK,GAAI,MAAM,CAAC,KAA6C,IAAI,EAAE,CAAA;IACzE,MAAM,UAAU,GAAI,KAAK,CAAC,UAAoC,IAAI,EAAE,CAAA;IACpE,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;QAC7D,MAAM,CAAC,GAAI,KAAmC,CAAC,KAAK,IAAI,EAAE,CAAA;QAC1D,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAQ,EAA8B,CAAC,OAAO,KAAK,QAAQ;eAC5E,MAAM,CAAE,EAA8B,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAA;IAC7E,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,iDAAiD,CAAC,CAAA;QAC/G,MAAM,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;QAC1D,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,IAAI,GAAK,MAAM,CAAC,WAAuC,EAAE,IAAkB,IAAI,EAAE,CAAA;IACvF,MAAM,WAAW,GAAG,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IACvD,MAAM,iBAAiB,GAAG,WAAW,CAAC,aAAa,CAAC,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAA;IACxF,IAAI,IAAI,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,gCAAgC,CAAC,CAAA;QACpG,MAAM,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;QAC1D,OAAO,IAAI,CAAA;IACb,CAAC;IAED,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,mCAAmC,CAAC,CAAA;IACrG,OAAO,KAAK,CAAA;AACd,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,QAAgB,EAChB,OAAe,EACf,OAA4B;IAE5B,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,iCAAiC,CAAC,CAAA;QAC/G,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACnC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC9B,+DAA+D;QAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;QAC5D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,kCAAkC,CAAC,CAAA;YAClH,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YACnC,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,mCAAmC,CAAC,CAAA;QACnH,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACnC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,OAAe,EAAE,OAA4B;IACtE,IAAI,CAAC;QACH,MAAM,OAAO,EAAE,CAAA;QACf,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,4BAA4B,CAAC,CAAA;IACxF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,qBAAqB,OAAO,mBAAmB,CAAC,CAAA;IAC7G,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,CAAS;IACjC,IAAI,CAAC;QAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAA;IAAC,CAAC;AAChE,CAAC"}

package/dist/wsClient.d.ts

@@ -0,0 +1,49 @@
+/**
+ * wsClient.ts — WebSocket client for real-time config updates.
+ *
+ * Establishes a persistent, auto-reconnecting WebSocket connection to
+ * the control plane. When a `config_update` event is received, it
+ * immediately applies the new configuration, bypassing HTTP polling latency.
+ *
+ * LLD #14 — wsClient.ts
+ * HLD §3.14 — Real-Time State Mirroring (WebSocket push)
+ *
+ * @module
+ */
+import type { SyncConfigPayload } from '@intutic/shared-types';
+export interface WsClientOptions {
+    controlPlaneUrl: string;
+    apiKey: string;
+    workspaceId: string;
+    onConfigUpdate: (config: SyncConfigPayload) => Promise<void>;
+    onContextSyncTrigger?: (adapterId: string) => Promise<void>;
+    onActiveLocalSopsUpdate?: (activeLocalSops: string[]) => Promise<void>;
+    signal?: AbortSignal;
+}
+export declare class SyncWsClient {
+    private readonly options;
+    private ws;
+    private reconnectTimeout;
+    private pingInterval;
+    private reconnectAttempt;
+    private maxReconnectDelayMs;
+    private baseReconnectDelayMs;
+    private isClosed;
+    constructor(options: WsClientOptions);
+    /**
+     * Start the connection.
+     */
+    connect(): void;
+    /**
+     * Send a custom event or report to the control plane.
+     */
+    send(message: unknown): void;
+    /**
+     * Close the connection.
+     */
+    close(): void;
+    private startHeartbeat;
+    private scheduleReconnect;
+    private cleanup;
+}
+//# sourceMappingURL=wsClient.d.ts.map

package/dist/wsClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wsClient.d.ts","sourceRoot":"","sources":["../src/wsClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAI9D,MAAM,WAAW,eAAe;IAC9B,eAAe,EAAE,MAAM,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,cAAc,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5D,oBAAoB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3D,uBAAuB,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACtE,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AAED,qBAAa,YAAY;IASX,OAAO,CAAC,QAAQ,CAAC,OAAO;IARpC,OAAO,CAAC,EAAE,CAAyB;IACnC,OAAO,CAAC,gBAAgB,CAA8B;IACtD,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,gBAAgB,CAAI;IAC5B,OAAO,CAAC,mBAAmB,CAAQ;IACnC,OAAO,CAAC,oBAAoB,CAAO;IACnC,OAAO,CAAC,QAAQ,CAAQ;gBAEK,OAAO,EAAE,eAAe;IAQrD;;OAEG;IACH,OAAO,IAAI,IAAI;IA6Df;;OAEG;IACH,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAQ5B;;OAEG;IACH,KAAK,IAAI,IAAI;IAcb,OAAO,CAAC,cAAc;IAQtB,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,OAAO;CAUhB"}

package/dist/wsClient.js

@@ -0,0 +1,149 @@
+/**
+ * wsClient.ts — WebSocket client for real-time config updates.
+ *
+ * Establishes a persistent, auto-reconnecting WebSocket connection to
+ * the control plane. When a `config_update` event is received, it
+ * immediately applies the new configuration, bypassing HTTP polling latency.
+ *
+ * LLD #14 — wsClient.ts
+ * HLD §3.14 — Real-Time State Mirroring (WebSocket push)
+ *
+ * @module
+ */
+import WebSocket from 'ws';
+import { createLogger } from '@intutic/logger';
+const log = createLogger('sync-ws-client');
+export class SyncWsClient {
+    options;
+    ws = null;
+    reconnectTimeout = null;
+    pingInterval = null;
+    reconnectAttempt = 0;
+    maxReconnectDelayMs = 30000;
+    baseReconnectDelayMs = 1000;
+    isClosed = false;
+    constructor(options) {
+        this.options = options;
+        if (this.options.signal) {
+            this.options.signal.addEventListener('abort', () => {
+                this.close();
+            });
+        }
+    }
+    /**
+     * Start the connection.
+     */
+    connect() {
+        if (this.isClosed || (this.options.signal && this.options.signal.aborted)) {
+            return;
+        }
+        // Convert http(s) URL to ws(s)
+        let wsUrl = this.options.controlPlaneUrl.replace(/^http/, 'ws');
+        if (!wsUrl.endsWith('/')) {
+            wsUrl += '/';
+        }
+        wsUrl += `api/v1/sync/ws?token=${encodeURIComponent(this.options.apiKey)}`;
+        log.info({ action: 'ws_connect_attempt', url: this.options.controlPlaneUrl }, 'Connecting to sync WebSocket server');
+        this.ws = new WebSocket(wsUrl);
+        this.ws.on('open', () => {
+            log.info({ action: 'ws_connected' }, 'WebSocket connection established');
+            this.reconnectAttempt = 0;
+            this.startHeartbeat();
+        });
+        this.ws.on('message', async (data) => {
+            try {
+                const payload = JSON.parse(data.toString());
+                log.debug({ action: 'ws_message_received', type: payload.type }, 'Received WebSocket event');
+                if (payload.type === 'config_update') {
+                    // Handle config update payload
+                    await this.options.onConfigUpdate(payload);
+                }
+                else if (payload.type === 'active_local_sops_update') {
+                    if (this.options.onActiveLocalSopsUpdate) {
+                        await this.options.onActiveLocalSopsUpdate(payload.activeLocalSops);
+                    }
+                }
+                else if (payload.type === 'context_sync_trigger') {
+                    // Trigger a ContextGraph filesystem scan and sync push
+                    if (this.options.onContextSyncTrigger) {
+                        await this.options.onContextSyncTrigger(payload.adapterId);
+                    }
+                }
+                else if (payload.type === 'pong') {
+                    log.debug({ action: 'ws_pong' }, 'Received pong from server');
+                }
+            }
+            catch (err) {
+                log.error({ action: 'ws_message_parse_error', err }, 'Failed to parse WebSocket message');
+            }
+        });
+        this.ws.on('close', (code, reason) => {
+            this.cleanup();
+            if (!this.isClosed) {
+                log.warn({ action: 'ws_closed', code, reason: reason.toString() }, 'WebSocket connection closed. Retrying...');
+                this.scheduleReconnect();
+            }
+        });
+        this.ws.on('error', (err) => {
+            log.error({ action: 'ws_error', err }, 'WebSocket client encountered an error');
+            // Close event will follow error event, handling the reconnect
+        });
+    }
+    /**
+     * Send a custom event or report to the control plane.
+     */
+    send(message) {
+        if (this.ws && this.ws.readyState === WebSocket.OPEN) {
+            this.ws.send(JSON.stringify(message));
+        }
+        else {
+            log.warn({ action: 'ws_send_skipped' }, 'Cannot send message: WebSocket is not open');
+        }
+    }
+    /**
+     * Close the connection.
+     */
+    close() {
+        this.isClosed = true;
+        this.cleanup();
+        if (this.ws) {
+            try {
+                this.ws.close();
+            }
+            catch {
+                // Ignore
+            }
+            this.ws = null;
+        }
+        log.info({ action: 'ws_closed_by_user' }, 'WebSocket client connection closed');
+    }
+    startHeartbeat() {
+        this.pingInterval = setInterval(() => {
+            if (this.ws && this.ws.readyState === WebSocket.OPEN) {
+                this.ws.send(JSON.stringify({ type: 'ping' }));
+            }
+        }, 30000);
+    }
+    scheduleReconnect() {
+        if (this.reconnectTimeout || this.isClosed)
+            return;
+        const delay = Math.min(this.baseReconnectDelayMs * Math.pow(2, this.reconnectAttempt), this.maxReconnectDelayMs);
+        this.reconnectAttempt++;
+        log.info({ action: 'ws_schedule_reconnect', delayMs: delay }, `Scheduling reconnect in ${delay}ms`);
+        this.reconnectTimeout = setTimeout(() => {
+            this.reconnectTimeout = null;
+            this.connect();
+        }, delay);
+    }
+    cleanup() {
+        if (this.pingInterval) {
+            clearInterval(this.pingInterval);
+            this.pingInterval = null;
+        }
+        if (this.reconnectTimeout) {
+            clearTimeout(this.reconnectTimeout);
+            this.reconnectTimeout = null;
+        }
+    }
+}
+//# sourceMappingURL=wsClient.js.map

package/dist/wsClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wsClient.js","sourceRoot":"","sources":["../src/wsClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,SAAS,MAAM,IAAI,CAAA;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAG9C,MAAM,GAAG,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAA;AAY1C,MAAM,OAAO,YAAY;IASM;IARrB,EAAE,GAAqB,IAAI,CAAA;IAC3B,gBAAgB,GAA0B,IAAI,CAAA;IAC9C,YAAY,GAA0B,IAAI,CAAA;IAC1C,gBAAgB,GAAG,CAAC,CAAA;IACpB,mBAAmB,GAAG,KAAK,CAAA;IAC3B,oBAAoB,GAAG,IAAI,CAAA;IAC3B,QAAQ,GAAG,KAAK,CAAA;IAExB,YAA6B,OAAwB;QAAxB,YAAO,GAAP,OAAO,CAAiB;QACnD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;gBACjD,IAAI,CAAC,KAAK,EAAE,CAAA;YACd,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,OAAO;QACL,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1E,OAAM;QACR,CAAC;QAED,+BAA+B;QAC/B,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAC/D,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,IAAI,GAAG,CAAA;QACd,CAAC;QACD,KAAK,IAAI,wBAAwB,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAA;QAE1E,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,qCAAqC,CAAC,CAAA;QAEpH,IAAI,CAAC,EAAE,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,CAAA;QAE9B,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACtB,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,kCAAkC,CAAC,CAAA;YACxE,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAA;YACzB,IAAI,CAAC,cAAc,EAAE,CAAA;QACvB,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAA;gBAC3C,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,0BAA0B,CAAC,CAAA;gBAE5F,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;oBACrC,+BAA+B;oBAC/B,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,OAA4B,CAAC,CAAA;gBACjE,CAAC;qBAAM,IAAI,OAAO,CAAC,IAAI,KAAK,0BAA0B,EAAE,CAAC;oBACvD,IAAI,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,CAAC;wBACzC,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;oBACrE,CAAC;gBACH,CAAC;qBAAM,IAAI,OAAO,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;oBACnD,uDAAuD;oBACvD,IAAI,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC;wBACtC,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;oBAC5D,CAAC;gBACH,CAAC;qBAAM,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBACnC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,2BAA2B,CAAC,CAAA;gBAC/D,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,wBAAwB,EAAE,GAAG,EAAE,EAAE,mCAAmC,CAAC,CAAA;YAC3F,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACnC,IAAI,CAAC,OAAO,EAAE,CAAA;YACd,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,0CAA0C,CAAC,CAAA;gBAC9G,IAAI,CAAC,iBAAiB,EAAE,CAAA;YAC1B,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC1B,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,uCAAuC,CAAC,CAAA;YAC/E,8DAA8D;QAChE,CAAC,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,OAAgB;QACnB,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YACrD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAA;QACvC,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,4CAA4C,CAAC,CAAA;QACvF,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;QACpB,IAAI,CAAC,OAAO,EAAE,CAAA;QACd,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAA;YACjB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,CAAC,EAAE,GAAG,IAAI,CAAA;QAChB,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,oCAAoC,CAAC,CAAA;IACjF,CAAC;IAEO,cAAc;QACpB,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;YACnC,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACrD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;YAChD,CAAC;QACH,CAAC,EAAE,KAAK,CAAC,CAAA;IACX,CAAC;IAEO,iBAAiB;QACvB,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAM;QAElD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,EAC9D,IAAI,CAAC,mBAAmB,CACzB,CAAA;QACD,IAAI,CAAC,gBAAgB,EAAE,CAAA;QAEvB,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,2BAA2B,KAAK,IAAI,CAAC,CAAA;QACnG,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,GAAG,EAAE;YACtC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAA;YAC5B,IAAI,CAAC,OAAO,EAAE,CAAA;QAChB,CAAC,EAAE,KAAK,CAAC,CAAA;IACX,CAAC;IAEO,OAAO;QACb,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAA;QAC1B,CAAC;QACD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;YACnC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAA;QAC9B,CAAC;IACH,CAAC;CACF"}

package/package.json

@@ -0,0 +1,96 @@
+{
+  "name": "@intutic/sync-daemon",
+  "version": "1.6.0",
+  "description": "Intutic Sync Daemon — bidirectional state sync between control plane and developer workspaces",
+  "type": "module",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/intutic/intutic",
+    "directory": "services/sync-daemon"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist/",
+    "README.md"
+  ],
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./harness/clineHooks": {
+      "import": "./dist/harness/clineHooks.js",
+      "types": "./dist/harness/clineHooks.d.ts"
+    },
+    "./harness/cursorHooks": {
+      "import": "./dist/harness/cursorHooks.js",
+      "types": "./dist/harness/cursorHooks.d.ts"
+    },
+    "./harness/openhandsHooks": {
+      "import": "./dist/harness/openhandsHooks.js",
+      "types": "./dist/harness/openhandsHooks.d.ts"
+    },
+    "./harness/gooseHooks": {
+      "import": "./dist/harness/gooseHooks.js",
+      "types": "./dist/harness/gooseHooks.d.ts"
+    },
+    "./harness/windsurfHooks": {
+      "import": "./dist/harness/windsurfHooks.js",
+      "types": "./dist/harness/windsurfHooks.d.ts"
+    },
+    "./harness/aiderConfigMerger": {
+      "import": "./dist/harness/aiderConfigMerger.js",
+      "types": "./dist/harness/aiderConfigMerger.d.ts"
+    }
+  },
+  "typesVersions": {
+    "*": {
+      "harness/clineHooks": [
+        "src/harness/clineHooks.ts"
+      ],
+      "harness/cursorHooks": [
+        "src/harness/cursorHooks.ts"
+      ],
+      "harness/openhandsHooks": [
+        "src/harness/openhandsHooks.ts"
+      ],
+      "harness/gooseHooks": [
+        "src/harness/gooseHooks.ts"
+      ],
+      "harness/windsurfHooks": [
+        "src/harness/windsurfHooks.ts"
+      ],
+      "harness/aiderConfigMerger": [
+        "src/harness/aiderConfigMerger.ts"
+      ]
+    }
+  },
+  "dependencies": {
+    "chokidar": "^5.0.0",
+    "ioredis": "^5.11.1",
+    "ws": "^8.21.0",
+    "zod": "^3",
+    "@intutic/id": "1.6.0",
+    "@intutic/logger": "1.6.0",
+    "@intutic/shared-types": "1.6.0",
+    "@intutic/mcp-governance-proxy": "1.6.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22",
+    "@types/ws": "^8.18.1",
+    "tsx": "^4",
+    "typescript": "^5.5",
+    "vitest": "^3"
+  },
+  "engines": {
+    "node": ">=20.19.0"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx watch src/index.ts",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run --passWithNoTests"
+  }
+}