@intutic/sync-daemon 1.6.0

package/dist/harness/aiderConfigMerger.js

@@ -0,0 +1,139 @@
+/**
+ * aiderConfigMerger.ts — Safe YAML merge for .aider.conf.yml.
+ *
+ * Reads any existing .aider.conf.yml, STRIPS dangerous auto-exec keys
+ * (test-cmd, lint-cmd, auto-test, auto-lint), merges in Intutic governance
+ * keys (openai-api-base, anthropic-api-base), and writes back atomically.
+ *
+ * Each strip emits a governance_config_sanitized log entry visible in
+ * the control plane audit feed.
+ *
+ * LLD #14 — Phase 3 cross-harness defence
+ * HLD §3.14 — Three-Tier Defense Cascade
+ *
+ * @module
+ */
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import { createLogger } from '@intutic/logger';
+import { newIso } from '@intutic/id';
+const log = createLogger('sync-aider-merger');
+/**
+ * Keys that Aider auto-executes on startup without user confirmation.
+ * Stripping these prevents supply-chain persistence attacks.
+ */
+const SUPPRESSED_KEYS = ['test-cmd', 'lint-cmd', 'auto-test', 'auto-lint', 'test_cmd', 'lint_cmd'];
+/**
+ * Minimal YAML parser for .aider.conf.yml — handles simple key: value lines
+ * and multi-line strings. Does not handle complex YAML. Good enough for the
+ * flat structure of .aider.conf.yml.
+ */
+function parseAiderYaml(raw) {
+    const result = {};
+    const lines = raw.split('\n');
+    let i = 0;
+    while (i < lines.length) {
+        const line = lines[i];
+        // Skip comments and blank lines
+        if (!line || line.trim().startsWith('#')) {
+            i++;
+            continue;
+        }
+        const colonIdx = line.indexOf(':');
+        if (colonIdx === -1) {
+            i++;
+            continue;
+        }
+        const key = line.slice(0, colonIdx).trim();
+        const rest = line.slice(colonIdx + 1).trim();
+        if (rest === '|' || rest === '>') {
+            // Multi-line block scalar — collect until next key or EOF
+            const blockLines = [];
+            i++;
+            while (i < lines.length && (lines[i].startsWith('  ') || lines[i] === '')) {
+                blockLines.push(lines[i].startsWith('  ') ? lines[i].slice(2) : '');
+                i++;
+            }
+            result[key] = blockLines.join('\n').trimEnd();
+        }
+        else {
+            // Strip inline quotes
+            result[key] = rest.replace(/^["']|["']$/g, '');
+            i++;
+        }
+    }
+    return result;
+}
+/**
+ * Minimal YAML serializer — writes flat key: value pairs.
+ * Multi-line values use the | block scalar style.
+ */
+function serializeAiderYaml(obj) {
+    const lines = [];
+    for (const [key, value] of Object.entries(obj)) {
+        if (typeof value === 'string' && value.includes('\n')) {
+            lines.push(`${key}: |`);
+            for (const ln of value.split('\n')) {
+                lines.push(`  ${ln}`);
+            }
+        }
+        else if (typeof value === 'boolean') {
+            lines.push(`${key}: ${value}`);
+        }
+        else {
+            lines.push(`${key}: ${String(value)}`);
+        }
+    }
+    return lines.join('\n');
+}
+/**
+ * Merge Intutic governance settings into .aider.conf.yml.
+ *
+ * Preserves all user keys EXCEPT the suppressed auto-exec keys.
+ * Adds/updates openai-api-base and anthropic-api-base.
+ *
+ * @param configPath - Absolute path to .aider.conf.yml
+ * @param proxyUrl   - Intutic proxy URL
+ * @param sopsText   - Optional SOP instructions for extra-instructions field
+ */
+export async function mergeAiderConfig(configPath, proxyUrl, sopsText) {
+    // Read existing config if present
+    let existing = {};
+    try {
+        const raw = await fs.readFile(configPath, 'utf-8');
+        existing = parseAiderYaml(raw);
+    }
+    catch {
+        // No existing file — start fresh
+    }
+    // Strip dangerous auto-exec keys
+    const stripped = [];
+    for (const key of SUPPRESSED_KEYS) {
+        if (key in existing) {
+            stripped.push(key);
+            delete existing[key];
+        }
+    }
+    if (stripped.length > 0) {
+        log.warn({ action: 'aider_keys_stripped', keys: stripped, path: configPath }, `Stripped dangerous auto-exec keys from .aider.conf.yml: ${stripped.join(', ')}`);
+    }
+    // Merge governance keys
+    existing['openai-api-base'] = proxyUrl;
+    existing['anthropic-api-base'] = proxyUrl;
+    if (sopsText) {
+        existing['extra-instructions'] = sopsText;
+    }
+    const header = [
+        '# Intutic Governance Rules (auto-generated — do not edit proxy keys)',
+        `# Last sync: ${newIso()}`,
+        `# WARNING: test-cmd and lint-cmd keys are suppressed by Intutic governance`,
+        '',
+    ].join('\n');
+    const content = header + serializeAiderYaml(existing) + '\n';
+    const tmpPath = configPath + '.intutic-tmp';
+    await fs.mkdir(path.dirname(configPath), { recursive: true });
+    await fs.writeFile(tmpPath, content, 'utf-8');
+    await fs.rename(tmpPath, configPath);
+    log.info({ action: 'aider_config_written', path: configPath, stripped }, 'Aider config merged with proxy URL and dangerous keys stripped');
+}
+//# sourceMappingURL=aiderConfigMerger.js.map

package/dist/harness/aiderConfigMerger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aiderConfigMerger.js","sourceRoot":"","sources":["../../src/harness/aiderConfigMerger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,MAAM,GAAG,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAA;AAE7C;;;GAGG;AACH,MAAM,eAAe,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;AAElG;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,MAAM,GAA4B,EAAE,CAAA;IAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC7B,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACrB,gCAAgC;QAChC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,SAAQ;QAAC,CAAC;QAE3D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAClC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,SAAQ;QAAC,CAAC;QAEtC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAA;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAE5C,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,0DAA0D;YAC1D,MAAM,UAAU,GAAa,EAAE,CAAA;YAC/B,CAAC,EAAE,CAAA;YACH,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;gBAC1E,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;gBACnE,CAAC,EAAE,CAAA;YACL,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAA;QAC/C,CAAC;aAAM,CAAC;YACN,sBAAsB;YACtB,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;YAC9C,CAAC,EAAE,CAAA;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,GAA4B;IACtD,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACtD,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,CAAA;YACvB,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;YACvB,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,KAAK,EAAE,CAAC,CAAA;QAChC,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACxC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAAkB,EAClB,QAAgB,EAChB,QAAiB;IAEjB,kCAAkC;IAClC,IAAI,QAAQ,GAA4B,EAAE,CAAA;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QAClD,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;IACnC,CAAC;IAED,iCAAiC;IACjC,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAClB,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAA;QACtB,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,qBAAqB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,EACnE,2DAA2D,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjF,CAAA;IACH,CAAC;IAED,wBAAwB;IACxB,QAAQ,CAAC,iBAAiB,CAAC,GAAG,QAAQ,CAAA;IACtC,QAAQ,CAAC,oBAAoB,CAAC,GAAG,QAAQ,CAAA;IAEzC,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,oBAAoB,CAAC,GAAG,QAAQ,CAAA;IAC3C,CAAC;IAED,MAAM,MAAM,GAAG;QACb,sEAAsE;QACtE,gBAAgB,MAAM,EAAE,EAAE;QAC1B,4EAA4E;QAC5E,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAEZ,MAAM,OAAO,GAAG,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAA;IAE5D,MAAM,OAAO,GAAG,UAAU,GAAG,cAAc,CAAA;IAC3C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7D,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IAC7C,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IAEpC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAC9D,gEAAgE,CACjE,CAAA;AACH,CAAC"}

package/dist/harness/antigravityHooks.d.ts

@@ -0,0 +1,43 @@
+/**
+ * antigravityHooks.ts — Gemini CLI (Antigravity) governance hook injection.
+ *
+ * Antigravity (Google DeepMind's Gemini CLI) supports a tool-level governance
+ * hook via the `ANTIGRAVITY_PRE_TOOL_HOOK` environment variable and an optional
+ * hook configuration file at `~/.gemini/settings.json`. This module:
+ *
+ * 1. Writes a pre-tool-check.sh script to `.intutic/hooks/antigravity-check.sh`
+ *    (same pattern as Goose / OpenHands bash hooks).
+ * 2. Merges the hook path into `~/.gemini/settings.json` under the
+ *    `hooks.preTool` key.
+ * 3. Optionally writes an `ANTIGRAVITY_PROXY_URL` env snippet to
+ *    `.intutic/env/antigravity.env` for IDE/shell integration.
+ *
+ * Why bash and not Node.js?
+ *   The Gemini CLI (antigravity) is a standalone binary; when it invokes
+ *   a pre-tool hook it sets the current directory to the workspace root.
+ *   A bash script is the most portable solution for the widest range of
+ *   user configurations (no Node.js version dependency, no CJS/ESM split).
+ *
+ * Hook events:
+ *   Every block/allow is appended to `.intutic/events/hook-events.jsonl`
+ *   and drained to the control plane via FSEvents-driven drain.
+ *
+ * LLD #14 — Phase 3 cross-harness defence (Gap 3)
+ * HLD §3.14 — Three-Tier Defense Cascade (Tier 1 Native Gating)
+ * HLD §3.x  — Gemini CLI / Antigravity harness
+ *
+ * @module
+ */
+/**
+ * Write the Antigravity (Gemini CLI) governance hook script and merge
+ * hook configuration into `~/.gemini/settings.json`.
+ *
+ * Safe to call repeatedly — uses atomic rename (`.intutic-tmp` → final path)
+ * so partial writes never leave a corrupt script in place.
+ *
+ * @param workspaceRoot - Absolute workspace root path.
+ * @param proxyUrl      - Intutic proxy URL written into the hook script header.
+ * @param workspaceId   - Workspace ID embedded in every hook event payload.
+ */
+export declare function writeAntigravityHooks(workspaceRoot: string, proxyUrl: string, workspaceId?: string): Promise<void>;
+//# sourceMappingURL=antigravityHooks.d.ts.map

package/dist/harness/antigravityHooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"antigravityHooks.d.ts","sourceRoot":"","sources":["../../src/harness/antigravityHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAgHH;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,WAAW,SAAK,GACf,OAAO,CAAC,IAAI,CAAC,CAsEf"}

package/dist/harness/antigravityHooks.js

@@ -0,0 +1,193 @@
+/**
+ * antigravityHooks.ts — Gemini CLI (Antigravity) governance hook injection.
+ *
+ * Antigravity (Google DeepMind's Gemini CLI) supports a tool-level governance
+ * hook via the `ANTIGRAVITY_PRE_TOOL_HOOK` environment variable and an optional
+ * hook configuration file at `~/.gemini/settings.json`. This module:
+ *
+ * 1. Writes a pre-tool-check.sh script to `.intutic/hooks/antigravity-check.sh`
+ *    (same pattern as Goose / OpenHands bash hooks).
+ * 2. Merges the hook path into `~/.gemini/settings.json` under the
+ *    `hooks.preTool` key.
+ * 3. Optionally writes an `ANTIGRAVITY_PROXY_URL` env snippet to
+ *    `.intutic/env/antigravity.env` for IDE/shell integration.
+ *
+ * Why bash and not Node.js?
+ *   The Gemini CLI (antigravity) is a standalone binary; when it invokes
+ *   a pre-tool hook it sets the current directory to the workspace root.
+ *   A bash script is the most portable solution for the widest range of
+ *   user configurations (no Node.js version dependency, no CJS/ESM split).
+ *
+ * Hook events:
+ *   Every block/allow is appended to `.intutic/events/hook-events.jsonl`
+ *   and drained to the control plane via FSEvents-driven drain.
+ *
+ * LLD #14 — Phase 3 cross-harness defence (Gap 3)
+ * HLD §3.14 — Three-Tier Defense Cascade (Tier 1 Native Gating)
+ * HLD §3.x  — Gemini CLI / Antigravity harness
+ *
+ * @module
+ */
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import * as os from 'node:os';
+import { createLogger } from '@intutic/logger';
+import { newIso } from '@intutic/id';
+const log = createLogger('sync-antigravity-hooks');
+/** Default path to the Gemini CLI global settings file. */
+const GEMINI_SETTINGS = path.join(os.homedir(), '.gemini', 'settings.json');
+/** Governance-sensitive paths that the hook gate protects. */
+const PROTECTED_PATHS = [
+    '.gemini/settings.json',
+    '.intutic/hooks',
+    '.intutic/integrity.json',
+    '.intutic/events',
+    '.claude/settings.json',
+    '.cursor/hooks.json',
+    '.codeium/windsurf/hooks.json',
+    '.cline/hooks',
+    '.agents/plugins/intutic-governance',
+    '.openhands/hooks.json',
+];
+// ─── Bash hook script template ────────────────────────────────────────────────
+function buildAntigravityCheckScript(proxyUrl, workspaceRoot, workspaceId) {
+    const hookEventsLog = path.join(workspaceRoot, '.intutic', 'events', 'hook-events.jsonl');
+    return `#!/usr/bin/env bash
+# Intutic Antigravity (Gemini CLI) PreToolUse governance gate.
+# Auto-generated by intutic sync-daemon. DO NOT EDIT.
+# Proxy: ${proxyUrl}
+# Generated: ${newIso()}
+# Workspace: ${workspaceId}
+set -euo pipefail
+
+INPUT="$(cat)"
+TOOL_NAME="$(echo "$INPUT" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('tool_name',''))" 2>/dev/null || true)"
+TARGET_PATH="$(echo "$INPUT" | python3 -c "import sys,json; d=json.load(sys.stdin); i=d.get('tool_input',{}); print(i.get('path',i.get('file_path','')))" 2>/dev/null || true)"
+COMMAND="$(echo "$INPUT" | python3 -c "import sys,json; d=json.load(sys.stdin); i=d.get('tool_input',{}); print(i.get('command',i.get('cmd','')))" 2>/dev/null || true)"
+
+HOOK_EVENTS_LOG=${JSON.stringify(hookEventsLog)}
+
+# Runtime credentials
+RUNTIME_ENV="$HOME/.intutic/env/runtime.env"
+INTUITIC_HOST="https://api.intutic.ai"
+INTUITIC_API_KEY=""
+INTUITIC_WORKSPACE_ID=${JSON.stringify(workspaceId)}
+[ -f "$RUNTIME_ENV" ] && source "$RUNTIME_ENV" 2>/dev/null || true
+
+log_event() {
+  local verdict="\$1" tool="\$2" reason="\$3"
+  local ts; ts="\$(date -u +%Y-%m-%dT%H:%M:%SZ)"
+  local incident_id; incident_id="\$(printf '%s' "\${ts}\${tool}\${INTUTIC_WORKSPACE_ID}" | sha1sum 2>/dev/null | cut -c1-16 || echo \"\$(date +%s)\")"
+  local entry="{\\"event\\":\\"\${verdict}\\",\\"toolName\\":\\"\${tool}\\",\\"reason\\":\\"\${reason}\\",\\"workspaceId\\":\\"\${INTUTIC_WORKSPACE_ID}\\",\\"harnessType\\":\\"antigravity\\",\\"timestamp\\":\\"\${ts}\\",\\"incidentId\\":\\"\${incident_id}\\"}"
+  printf '%s\\n' "\$entry" >> "\$HOOK_EVENTS_LOG" 2>/dev/null || true
+  if [ -n "\$INTUTIC_API_KEY" ]; then
+    curl -s -o /dev/null --max-time 3 -X POST \\
+      -H "Content-Type: application/json" \\
+      -H "Authorization: Bearer \$INTUTIC_API_KEY" \\
+      -d "{\"events\":[\$entry]}" \\
+      "\${INTUTIC_HOST}/api/v1/hook-events" & disown 2>/dev/null || true
+  fi
+}
+
+PROTECTED_PATHS=(
+${PROTECTED_PATHS.map((p) => `  "${p}"`).join('\n')}
+)
+
+# 1. Protected-path guard
+for p in "\${PROTECTED_PATHS[@]}"; do
+  if echo "$TARGET_PATH" | grep -qF "$p"; then
+    REASON="Attempt to modify governance-protected path \\"$TARGET_PATH\\""
+    echo "[Intutic Governance] BLOCKED: $REASON" >&2
+    log_event "tool_blocked" "$TOOL_NAME" "$REASON"
+    exit 2
+  fi
+done
+
+# 2. Bash/shell command guard — block governance bypass patterns
+if [ -n "$COMMAND" ]; then
+  BYPASS_PATTERNS=(
+    "chflags nouchg"
+    "chattr -i"
+    "rm -rf .intutic"
+    "rm -rf .gemini/settings"
+    "ANTIGRAVITY_PRE_TOOL_HOOK="
+  )
+  for pattern in "\${BYPASS_PATTERNS[@]}"; do
+    if echo "$COMMAND" | grep -qF "$pattern"; then
+      REASON="Shell command matches governance bypass pattern: \\"$pattern\\""
+      echo "[Intutic Governance] BLOCKED: $REASON" >&2
+      log_event "tool_blocked" "$TOOL_NAME" "$REASON"
+      exit 2
+    fi
+  done
+fi
+
+log_event "tool_allowed" "$TOOL_NAME" ""
+exit 0
+`;
+}
+// ─── Main export ──────────────────────────────────────────────────────────────
+/**
+ * Write the Antigravity (Gemini CLI) governance hook script and merge
+ * hook configuration into `~/.gemini/settings.json`.
+ *
+ * Safe to call repeatedly — uses atomic rename (`.intutic-tmp` → final path)
+ * so partial writes never leave a corrupt script in place.
+ *
+ * @param workspaceRoot - Absolute workspace root path.
+ * @param proxyUrl      - Intutic proxy URL written into the hook script header.
+ * @param workspaceId   - Workspace ID embedded in every hook event payload.
+ */
+export async function writeAntigravityHooks(workspaceRoot, proxyUrl, workspaceId = '') {
+    // ── 1. Ensure directories ──────────────────────────────────────────────────
+    const hookScriptDir = path.join(workspaceRoot, '.intutic', 'hooks');
+    const hookEventsDir = path.join(workspaceRoot, '.intutic', 'events');
+    const envDir = path.join(workspaceRoot, '.intutic', 'env');
+    await Promise.all([
+        fs.mkdir(hookScriptDir, { recursive: true }),
+        fs.mkdir(hookEventsDir, { recursive: true }),
+        fs.mkdir(envDir, { recursive: true }),
+        fs.mkdir(path.join(os.homedir(), '.gemini'), { recursive: true }),
+    ]);
+    // ── 2. Write hook script ───────────────────────────────────────────────────
+    const hookScriptPath = path.join(hookScriptDir, 'antigravity-check.sh');
+    const tmpScript = hookScriptPath + '.intutic-tmp';
+    await fs.writeFile(tmpScript, buildAntigravityCheckScript(proxyUrl, workspaceRoot, workspaceId), 'utf-8');
+    await fs.rename(tmpScript, hookScriptPath);
+    await fs.chmod(hookScriptPath, 0o755);
+    log.info({ action: 'antigravity_hook_script_written', path: hookScriptPath }, 'Antigravity hook script written');
+    // ── 3. Merge into ~/.gemini/settings.json ─────────────────────────────────
+    let existingSettings = {};
+    try {
+        const raw = await fs.readFile(GEMINI_SETTINGS, 'utf-8');
+        existingSettings = JSON.parse(raw);
+    }
+    catch {
+        // File doesn't exist yet — start fresh
+    }
+    const mergedSettings = {
+        ...existingSettings,
+        hooks: {
+            ...existingSettings.hooks,
+            // Register the pre-tool hook command
+            preTool: hookScriptPath,
+        },
+    };
+    const tmpSettings = GEMINI_SETTINGS + '.intutic-tmp';
+    await fs.writeFile(tmpSettings, JSON.stringify(mergedSettings, null, 2) + '\n', 'utf-8');
+    await fs.rename(tmpSettings, GEMINI_SETTINGS);
+    log.info({ action: 'antigravity_settings_written', path: GEMINI_SETTINGS }, 'Merged Intutic hook into ~/.gemini/settings.json');
+    // ── 4. Write env snippet (optional — for shell profiles / IDE env) ─────────
+    const envSnippet = [
+        `# Intutic Antigravity governance hook — auto-generated ${newIso()}`,
+        `# Source this file in ~/.bashrc or ~/.zshrc to apply governance to Gemini CLI.`,
+        `export ANTIGRAVITY_PRE_TOOL_HOOK=${JSON.stringify(hookScriptPath)}`,
+        proxyUrl ? `export ANTIGRAVITY_PROXY_URL=${JSON.stringify(proxyUrl)}` : '',
+    ].filter(Boolean).join('\n') + '\n';
+    const envFilePath = path.join(envDir, 'antigravity.env');
+    const tmpEnv = envFilePath + '.intutic-tmp';
+    await fs.writeFile(tmpEnv, envSnippet, 'utf-8');
+    await fs.rename(tmpEnv, envFilePath);
+    log.info({ action: 'antigravity_env_written', path: envFilePath }, 'Antigravity env snippet written');
+}
+//# sourceMappingURL=antigravityHooks.js.map

package/dist/harness/antigravityHooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"antigravityHooks.js","sourceRoot":"","sources":["../../src/harness/antigravityHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,MAAM,GAAG,GAAG,YAAY,CAAC,wBAAwB,CAAC,CAAA;AAElD,2DAA2D;AAC3D,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAA;AAE3E,8DAA8D;AAC9D,MAAM,eAAe,GAAG;IACtB,uBAAuB;IACvB,gBAAgB;IAChB,yBAAyB;IACzB,iBAAiB;IACjB,uBAAuB;IACvB,oBAAoB;IACpB,8BAA8B;IAC9B,cAAc;IACd,oCAAoC;IACpC,uBAAuB;CACxB,CAAA;AAED,iFAAiF;AAEjF,SAAS,2BAA2B,CAClC,QAAgB,EAChB,aAAqB,EACrB,WAAmB;IAEnB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAA;IACzF,OAAO;;;WAGE,QAAQ;eACJ,MAAM,EAAE;eACR,WAAW;;;;;;;;kBAQR,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;;;;;wBAMvB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;;;;;;;;;;;;;;;;;;;EAmBjD,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkClD,CAAA;AACD,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,aAAqB,EACrB,QAAgB,EAChB,WAAW,GAAG,EAAE;IAEhB,8EAA8E;IAE9E,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IACnE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAA;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;IAE1D,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC5C,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC5C,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACrC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;KAClE,CAAC,CAAA;IAEF,8EAA8E;IAE9E,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAA;IACvE,MAAM,SAAS,GAAG,cAAc,GAAG,cAAc,CAAA;IACjD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,2BAA2B,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAA;IACzG,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;IAC1C,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;IAErC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,iCAAiC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,iCAAiC,CAAC,CAAA;IAEhH,6EAA6E;IAE7E,IAAI,gBAAgB,GAA4B,EAAE,CAAA;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,CAAA;QACvD,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;IACzC,CAAC;IAED,MAAM,cAAc,GAAG;QACrB,GAAG,gBAAgB;QACnB,KAAK,EAAE;YACL,GAAI,gBAAgB,CAAC,KAAiC;YACtD,qCAAqC;YACrC,OAAO,EAAE,cAAc;SACxB;KACF,CAAA;IAED,MAAM,WAAW,GAAG,eAAe,GAAG,cAAc,CAAA;IACpD,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IACxF,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,eAAe,CAAC,CAAA;IAE7C,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,8BAA8B,EAAE,IAAI,EAAE,eAAe,EAAE,EACjE,kDAAkD,CACnD,CAAA;IAED,8EAA8E;IAE9E,MAAM,UAAU,GAAG;QACjB,0DAA0D,MAAM,EAAE,EAAE;QACpE,gFAAgF;QAChF,oCAAoC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE;QACpE,QAAQ,CAAC,CAAC,CAAC,gCAAgC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;KAC3E,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;IAEnC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;IACxD,MAAM,MAAM,GAAG,WAAW,GAAG,cAAc,CAAA;IAC3C,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IAC/C,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IAEpC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,yBAAyB,EAAE,IAAI,EAAE,WAAW,EAAE,EACxD,iCAAiC,CAClC,CAAA;AACH,CAAC"}

package/dist/harness/claudeCodeHooks.d.ts

@@ -0,0 +1,59 @@
+/**
+ * claudeCodeHooks.ts — Claude Code PreToolUse hook generator.
+ *
+ * Compiles SOP evaluation criteria and high risk tools into native Claude Code
+ * settings.json configurations (both permissions.deny rules and PreToolUse hooks).
+ * Writes configurations locally to the workspace and globally to ~/.claude/.
+ *
+ * LLD #14 — claudeCodeHooks.ts
+ * HLD §3.14 — Three-Tier Defense Cascade (Tier 1 Native Gating)
+ *
+ * @module
+ */
+import { z } from 'zod';
+import type { SyncSopEntry } from '@intutic/shared-types';
+/** Path to the local hook event log file appended by generated hook scripts. */
+export declare const HOOK_EVENTS_LOG = ".intutic/events/hook-events.jsonl";
+export declare const SopHookConstraintsSchema: z.ZodObject<{
+    highRiskTools: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    patterns: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    highRiskTools: string[];
+    patterns: string[];
+}, {
+    highRiskTools?: string[] | undefined;
+    patterns?: string[] | undefined;
+}>;
+export type SopHookConstraints = z.infer<typeof SopHookConstraintsSchema>;
+/**
+ * Extracts constraints from SOP registry entries.
+ * Looks inside SOP markdown content for structured JSON/YAML blocks or parses settings.
+ */
+export declare function parseSopConstraints(sops: SyncSopEntry[], settings?: Record<string, unknown> | import('@intutic/shared-types').WorkspaceSettings): SopHookConstraints;
+/**
+ * Compiles constraints into Claude Code settings.json format and writes it.
+ *
+ * @param workspaceRoot    - Workspace root path.
+ * @param sops             - The sync SOP list.
+ * @param settings         - Passthrough settings.
+ * @param controlPlaneUrl  - Control plane base URL embedded into the hook events log path comment.
+ * @param workspaceId      - Workspace ID embedded into hook event payloads.
+ * @param harnessType      - Harness type tag written into each hook event.
+ */
+export declare function updatePreToolUseHooks(workspaceRoot: string, sops: SyncSopEntry[], settings?: Record<string, unknown> | import('@intutic/shared-types').WorkspaceSettings, controlPlaneUrl?: string, workspaceId?: string, harnessType?: string): Promise<void>;
+/**
+ * Drains the local hook-events log file and POSTs all accumulated governance
+ * events to the control plane in a single batch request.
+ *
+ * Called by the sync-daemon's main loop (syncLoop.ts) on every cycle, after
+ * the main sync operations. On success, the log file is truncated to prevent
+ * unbounded growth. On network failure, events remain in the log and will be
+ * retried on the next cycle.
+ *
+ * @param workspaceRoot    - Workspace root (log file is at workspaceRoot/.intutic/events/hook-events.jsonl)
+ * @param controlPlaneUrl  - Control plane base URL
+ * @param apiKey           - Workspace API key (Bearer token)
+ * @returns number of events drained (0 if log was empty or network failed)
+ */
+export declare function drainHookEvents(workspaceRoot: string, controlPlaneUrl: string, apiKey: string): Promise<number>;
+//# sourceMappingURL=claudeCodeHooks.d.ts.map

package/dist/harness/claudeCodeHooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claudeCodeHooks.d.ts","sourceRoot":"","sources":["../../src/harness/claudeCodeHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAKzD,gFAAgF;AAChF,eAAO,MAAM,eAAe,sCAAsC,CAAA;AAGlE,eAAO,MAAM,wBAAwB;;;;;;;;;EAGnC,CAAA;AAEF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAEzE;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,YAAY,EAAE,EACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,uBAAuB,EAAE,iBAAiB,GACrF,kBAAkB,CAiEpB;AAED;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CACzC,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,YAAY,EAAE,EACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,uBAAuB,EAAE,iBAAiB,EACtF,eAAe,CAAC,EAAE,MAAM,EACxB,WAAW,CAAC,EAAE,MAAM,EACpB,WAAW,SAAgB,GAC1B,OAAO,CAAC,IAAI,CAAC,CA2Qf;AAID;;;;;;;;;;;;;GAaG;AACH,wBAAsB,eAAe,CACnC,aAAa,EAAE,MAAM,EACrB,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAwDjB"}