@intutic/sync-daemon 1.6.0

package/dist/harness/gooseHooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gooseHooks.d.ts","sourceRoot":"","sources":["../../src/harness/gooseHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAwBH;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,SAAe,EAAE,WAAW,SAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAqHrH"}

package/dist/harness/gooseHooks.js

@@ -0,0 +1,175 @@
+/**
+ * gooseHooks.ts — Goose PreToolUse governance plugin injection.
+ *
+ * Writes the Intutic governance plugin to the Goose plugin directory:
+ *   ~/.agents/plugins/intutic-governance/hooks/hooks.json
+ *   ~/.agents/plugins/intutic-governance/scripts/intutic-check.sh
+ *
+ * Also merges the Intutic proxy URL into ~/.config/goose/config.yaml.
+ * After writing, calls gooseHardener to apply chmod 444 + immutable flags.
+ *
+ * LLD #14 — Phase 3 cross-harness defence
+ * HLD §3.14 — Three-Tier Defense Cascade
+ *
+ * @module
+ */
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import * as os from 'node:os';
+import { createLogger } from '@intutic/logger';
+import { newIso } from '@intutic/id';
+import { hardenGoosePlugin, unharden } from './gooseHardener.js';
+const log = createLogger('sync-goose-hooks');
+const PLUGIN_DIR = path.join(os.homedir(), '.agents', 'plugins', 'intutic-governance');
+const GOOSE_CONFIG = path.join(os.homedir(), '.config', 'goose', 'config.yaml');
+const PROTECTED_PATHS = [
+    '.agents/plugins/intutic-governance',
+    '.intutic/hooks',
+    '.intutic/integrity.json',
+    '.claude/settings.json',
+    '.cursor/hooks.json',
+    '.cline/hooks',
+    '.openhands/hooks.json',
+];
+/**
+ * Write Goose governance plugin and harden it.
+ *
+ * @param proxyUrl    - Intutic proxy URL written into the plugin script.
+ * @param workspaceRoot - Absolute workspace root (for hook events log path).
+ * @param workspaceId - Workspace ID embedded in hook event payloads.
+ */
+export async function writeGooseHooks(proxyUrl, workspaceRoot = os.homedir(), workspaceId = '') {
+    const hooksDir = path.join(PLUGIN_DIR, 'hooks');
+    const scriptsDir = path.join(PLUGIN_DIR, 'scripts');
+    await fs.mkdir(hooksDir, { recursive: true });
+    await fs.mkdir(scriptsDir, { recursive: true });
+    // ── hooks.json ──────────────────────────────────────────────────────
+    const hooksConfig = {
+        _comment: 'Intutic governance plugin — auto-generated. DO NOT EDIT.',
+        _lastSync: newIso(),
+        name: 'intutic-governance',
+        version: '1.0.0',
+        hooks: {
+            PreToolUse: {
+                command: path.join(scriptsDir, 'intutic-check.sh'),
+                failClosed: true,
+            },
+            PostToolUse: {
+                command: path.join(scriptsDir, 'intutic-check.sh --event post'),
+                failClosed: false,
+            },
+        },
+    };
+    const hooksJsonPath = path.join(hooksDir, 'hooks.json');
+    // Unharden before writing (in case we're refreshing an existing install)
+    await unharden(hooksJsonPath);
+    const tmpHooks = hooksJsonPath + '.intutic-tmp';
+    await fs.writeFile(tmpHooks, JSON.stringify(hooksConfig, null, 2) + '\n', 'utf-8');
+    await fs.rename(tmpHooks, hooksJsonPath);
+    // ── intutic-check.sh ─────────────────────────────────────────────────
+    const checkScriptPath = path.join(scriptsDir, 'intutic-check.sh');
+    await unharden(checkScriptPath);
+    const hookEventsLog = path.join(workspaceRoot, '.intutic', 'events', 'hook-events.jsonl');
+    // Ensure events dir exists
+    await fs.mkdir(path.join(workspaceRoot, '.intutic', 'events'), { recursive: true });
+    const checkScript = `#!/usr/bin/env bash
+# Intutic Goose PreToolUse governance gate.
+# Auto-generated by intutic sync-daemon. DO NOT EDIT.
+# Proxy: ${proxyUrl}
+# Generated: ${newIso()}
+set -euo pipefail
+
+EVENT="\${1:-pre}"
+INPUT="\$(cat)"
+TOOL="$(echo "$INPUT" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('tool_name',''))" 2>/dev/null || true)"
+TARGET="$(echo "$INPUT" | python3 -c "import sys,json; d=json.load(sys.stdin); i=d.get('tool_input',{}); print(i.get('path',i.get('file_path','')))" 2>/dev/null || true)"
+
+HOOK_EVENTS_LOG=${JSON.stringify(hookEventsLog)}
+
+# ── Runtime credentials (sourced from ~/.intutic/env/runtime.env) ────────────────────────
+RUNTIME_ENV="$HOME/.intutic/env/runtime.env"
+INTUITIC_HOST="https://api.intutic.ai"
+INTUITIC_API_KEY=""
+INTUITIC_WORKSPACE_ID=${JSON.stringify(workspaceId)}
+[ -f "$RUNTIME_ENV" ] && source "$RUNTIME_ENV" 2>/dev/null || true
+
+log_event() {
+  local verdict="\$1" tool="\$2" reason="\$3"
+  local ts; ts="\$(date -u +%Y-%m-%dT%H:%M:%SZ)"
+  local incident_id; incident_id="\$(printf '%s' "\${ts}\${tool}\${INTUTIC_WORKSPACE_ID}" | sha1sum 2>/dev/null | cut -c1-16 || echo \"\$(date +%s)\")"
+  local entry="{\"event\":\"\${verdict}\",\"toolName\":\"\${tool}\",\"reason\":\"\${reason}\",\"workspaceId\":\"\${INTUTIC_WORKSPACE_ID}\",\"harnessType\":\"goose\",\"timestamp\":\"\${ts}\",\"incidentId\":\"\${incident_id}\"}"
+  # Path B: reliable file append
+  printf '%s\\n' "\$entry" >> "\$HOOK_EVENTS_LOG" 2>/dev/null || true
+  # Path A: fire-and-forget HTTP (non-blocking, near-real-time)
+  if [ -n "\$INTUTIC_API_KEY" ]; then
+    curl -s -o /dev/null --max-time 3 -X POST \\
+      -H "Content-Type: application/json" \\
+      -H "Authorization: Bearer \$INTUTIC_API_KEY" \\
+      -d "{\"events\":[\$entry]}" \\
+      "\${INTUTIC_HOST}/api/v1/hook-events" & disown 2>/dev/null || true
+  fi
+}
+
+PROTECTED_PATHS=(
+  ".agents/plugins/intutic-governance"
+  ".intutic/hooks"
+  ".intutic/integrity.json"
+  ".claude/settings.json"
+  ".cursor/hooks.json"
+  ".cline/hooks"
+  ".openhands/hooks.json"
+)
+
+for p in "\${PROTECTED_PATHS[@]}"; do
+  if echo "$TARGET" | grep -qF "$p"; then
+    REASON="Attempt to modify governance-protected path \\"$TARGET\\""
+    echo "[Intutic Governance] BLOCKED: $REASON" >&2
+    log_event "tool_blocked" "\$TOOL" "\$REASON"
+    exit 2
+  fi
+done
+
+log_event "tool_allowed" "\$TOOL" ""
+exit 0
+`;
+    const tmpScript = checkScriptPath + '.intutic-tmp';
+    await fs.writeFile(tmpScript, checkScript, 'utf-8');
+    await fs.rename(tmpScript, checkScriptPath);
+    await fs.chmod(checkScriptPath, 0o755);
+    // Apply immutable flags after writing
+    await hardenGoosePlugin(PLUGIN_DIR);
+    log.info({ action: 'goose_plugin_written', pluginDir: PLUGIN_DIR }, 'Goose governance plugin written and hardened');
+    // ── Merge proxy URL into goose config.yaml ───────────────────────────
+    await mergeGooseConfig(proxyUrl);
+}
+/**
+ * Merge provider host URL into ~/.config/goose/config.yaml.
+ */
+async function mergeGooseConfig(proxyUrl) {
+    let existing = '';
+    try {
+        existing = await fs.readFile(GOOSE_CONFIG, 'utf-8');
+    }
+    catch {
+        existing = '';
+    }
+    // Inject or update provider.host
+    // Goose config.yaml format: provider.host or OPENAI_HOST env var
+    if (existing.includes('provider:')) {
+        if (existing.includes('  host:')) {
+            existing = existing.replace(/^\s*host:\s*.*/m, `  host: "${proxyUrl}"`);
+        }
+        else {
+            existing = existing.replace(/^provider:/m, `provider:\n  host: "${proxyUrl}"`);
+        }
+    }
+    else {
+        existing += `\nprovider:\n  host: "${proxyUrl}"\n`;
+    }
+    const tmpConfig = GOOSE_CONFIG + '.intutic-tmp';
+    await fs.mkdir(path.dirname(GOOSE_CONFIG), { recursive: true });
+    await fs.writeFile(tmpConfig, existing, 'utf-8');
+    await fs.rename(tmpConfig, GOOSE_CONFIG);
+    log.info({ action: 'goose_config_written', path: GOOSE_CONFIG }, 'Goose config.yaml updated with proxy host');
+}
+//# sourceMappingURL=gooseHooks.js.map

package/dist/harness/gooseHooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gooseHooks.js","sourceRoot":"","sources":["../../src/harness/gooseHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAEhE,MAAM,GAAG,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAA;AAE5C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAA;AACtF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;AAE/E,MAAM,eAAe,GAAG;IACtB,oCAAoC;IACpC,gBAAgB;IAChB,yBAAyB;IACzB,uBAAuB;IACvB,oBAAoB;IACpB,cAAc;IACd,uBAAuB;CACxB,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,aAAa,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,GAAG,EAAE;IACpG,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IACnD,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7C,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE/C,uEAAuE;IACvE,MAAM,WAAW,GAAG;QAClB,QAAQ,EAAE,0DAA0D;QACpE,SAAS,EAAE,MAAM,EAAE;QACnB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE;YACL,UAAU,EAAE;gBACV,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC;gBAClD,UAAU,EAAE,IAAI;aACjB;YACD,WAAW,EAAE;gBACX,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,+BAA+B,CAAC;gBAC/D,UAAU,EAAE,KAAK;aAClB;SACF;KACF,CAAA;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;IAEvD,yEAAyE;IACzE,MAAM,QAAQ,CAAC,aAAa,CAAC,CAAA;IAE7B,MAAM,QAAQ,GAAG,aAAa,GAAG,cAAc,CAAA;IAC/C,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IAClF,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;IAExC,wEAAwE;IACxE,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAA;IACjE,MAAM,QAAQ,CAAC,eAAe,CAAC,CAAA;IAE/B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAA;IACzF,2BAA2B;IAC3B,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEnF,MAAM,WAAW,GAAG;;;WAGX,QAAQ;eACJ,MAAM,EAAE;;;;;;;;kBAQL,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;;;;;wBAMvB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyClD,CAAA;IAEC,MAAM,SAAS,GAAG,eAAe,GAAG,cAAc,CAAA;IAClD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;IACnD,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,CAAA;IAC3C,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAA;IAEtC,sCAAsC;IACtC,MAAM,iBAAiB,CAAC,UAAU,CAAC,CAAA;IAEnC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,sBAAsB,EAAE,SAAS,EAAE,UAAU,EAAE,EACzD,8CAA8C,CAC/C,CAAA;IAED,wEAAwE;IACxE,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAA;AAClC,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IAC9C,IAAI,QAAQ,GAAG,EAAE,CAAA;IACjB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,EAAE,CAAA;IACf,CAAC;IAED,iCAAiC;IACjC,iEAAiE;IACjE,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,YAAY,QAAQ,GAAG,CAAC,CAAA;QACzE,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,uBAAuB,QAAQ,GAAG,CAAC,CAAA;QAChF,CAAC;IACH,CAAC;SAAM,CAAC;QACN,QAAQ,IAAI,yBAAyB,QAAQ,KAAK,CAAA;IACpD,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,GAAG,cAAc,CAAA;IAC/C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/D,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;IAChD,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;IAExC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,2CAA2C,CAAC,CAAA;AAC/G,CAAC"}

package/dist/harness/gooseHooksWriter.d.ts

@@ -0,0 +1,27 @@
+/**
+ * gooseHooksWriter.ts — Goose pre_tool_use native hook writer.
+ *
+ * Writes two artefacts:
+ *   1. `~/.intutic/hooks/goose-pre-tool-use.sh` — bash gate script that
+ *      sources runtime credentials, POSTs to the Intutic hook-gate endpoint,
+ *      and exits 2 (block) or 0 (allow).
+ *   2. `~/.config/goose/config.yaml` — adds `hooks.pre_tool_use` key if it
+ *      is not already present (string operations only; no yaml dep needed).
+ *
+ * Fail-open semantics: if curl errors the script exits 0 so Goose continues.
+ * On block, a JSONL event line is also appended to
+ * `~/.intutic/events/hook-events.jsonl` for local audit.
+ *
+ * LLD #14 — Phase 4 WS-4C native hook script writers
+ * HLD §3.14 — Three-Tier Defense Cascade (Tier 1 Native Gating)
+ *
+ * @module
+ */
+/**
+ * Write the Goose pre_tool_use hook script and register it in config.yaml.
+ *
+ * @param workspaceRoot - Absolute path to the workspace root (unused directly;
+ *   included for API symmetry with other hook writers).
+ */
+export declare function writeGooseHooks(workspaceRoot: string): Promise<void>;
+//# sourceMappingURL=gooseHooksWriter.d.ts.map

package/dist/harness/gooseHooksWriter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gooseHooksWriter.d.ts","sourceRoot":"","sources":["../../src/harness/gooseHooksWriter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAwHH;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB1E"}

package/dist/harness/gooseHooksWriter.js

@@ -0,0 +1,147 @@
+/**
+ * gooseHooksWriter.ts — Goose pre_tool_use native hook writer.
+ *
+ * Writes two artefacts:
+ *   1. `~/.intutic/hooks/goose-pre-tool-use.sh` — bash gate script that
+ *      sources runtime credentials, POSTs to the Intutic hook-gate endpoint,
+ *      and exits 2 (block) or 0 (allow).
+ *   2. `~/.config/goose/config.yaml` — adds `hooks.pre_tool_use` key if it
+ *      is not already present (string operations only; no yaml dep needed).
+ *
+ * Fail-open semantics: if curl errors the script exits 0 so Goose continues.
+ * On block, a JSONL event line is also appended to
+ * `~/.intutic/events/hook-events.jsonl` for local audit.
+ *
+ * LLD #14 — Phase 4 WS-4C native hook script writers
+ * HLD §3.14 — Three-Tier Defense Cascade (Tier 1 Native Gating)
+ *
+ * @module
+ */
+import * as node_fs from 'node:fs/promises';
+import * as node_path from 'node:path';
+import * as node_os from 'node:os';
+import { createLogger } from '@intutic/logger';
+const log = createLogger('sync-goose-hooks-writer');
+const HOOKS_DIR = node_path.join(node_os.homedir(), '.intutic', 'hooks');
+const EVENTS_DIR = node_path.join(node_os.homedir(), '.intutic', 'events');
+const HOOK_SCRIPT = node_path.join(HOOKS_DIR, 'goose-pre-tool-use.sh');
+const HOOK_EVENTS_LOG = node_path.join(EVENTS_DIR, 'hook-events.jsonl');
+const GOOSE_CONFIG = node_path.join(node_os.homedir(), '.config', 'goose', 'config.yaml');
+/**
+ * Build the bash gate script content.
+ *
+ * Logic:
+ *   1. Source ~/.intutic/env/runtime.env for credentials.
+ *   2. Read full stdin JSON payload.
+ *   3. POST to $INTUTIC_CONTROL_PLANE_URL/api/v1/hook-gate (10 s timeout).
+ *   4. If curl fails → fail-open (exit 0).
+ *   5. If response body contains `"allowed":false` → append JSONL event, exit 2.
+ *   6. Otherwise → exit 0.
+ */
+function buildGooseHookScript() {
+    return `#!/usr/bin/env bash
+# Intutic Goose pre_tool_use governance gate.
+# Auto-generated by intutic sync-daemon. DO NOT EDIT.
+set -euo pipefail
+
+RUNTIME_ENV="$HOME/.intutic/env/runtime.env"
+HOOK_EVENTS_LOG=${JSON.stringify(HOOK_EVENTS_LOG)}
+INTUTIC_CONTROL_PLANE_URL="https://api.intutic.ai"
+INTUTIC_API_KEY=""
+INTUTIC_WORKSPACE_ID=""
+
+# Source runtime credentials (key rotation is automatic on next tool call)
+[ -f "$RUNTIME_ENV" ] && source "$RUNTIME_ENV" 2>/dev/null || true
+
+INPUT="$(cat)"
+TOOL_NAME="$(echo "$INPUT" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('tool_name',''))" 2>/dev/null || true)"
+
+# ── POST to hook-gate ─────────────────────────────────────────────────
+GATE_URL="\${INTUTIC_CONTROL_PLANE_URL}/api/v1/hook-gate"
+RESPONSE=""
+if [ -n "$INTUTIC_API_KEY" ]; then
+  RESPONSE="$(curl -s --max-time 10 -X POST \\
+    -H "Content-Type: application/json" \\
+    -H "Authorization: Bearer $INTUTIC_API_KEY" \\
+    -d "$INPUT" \\
+    "$GATE_URL" 2>/dev/null)" || true
+fi
+
+# Fail-open: empty response (curl error / no key) → allow
+if [ -z "$RESPONSE" ]; then
+  exit 0
+fi
+
+# Check decision
+ALLOWED="$(echo "$RESPONSE" | python3 -c "import sys,json; d=json.load(sys.stdin); print(str(d.get('allowed', True)).lower())" 2>/dev/null || echo "true")"
+
+if [ "$ALLOWED" = "false" ]; then
+  REASON="$(echo "$RESPONSE" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('reason',''))" 2>/dev/null || true)"
+  TS="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
+  INCIDENT_ID="$(printf '%s' "\${TS}\${TOOL_NAME}\${INTUTIC_WORKSPACE_ID}" | sha1sum 2>/dev/null | cut -c1-16 || echo "$(date +%s)")"
+  ENTRY="{\\"event\\":\\"tool_blocked\\",\\"toolName\\":\\"\${TOOL_NAME}\\",\\"reason\\":\\"\${REASON}\\",\\"workspaceId\\":\\"\${INTUTIC_WORKSPACE_ID}\\",\\"harnessType\\":\\"goose\\",\\"timestamp\\":\\"\${TS}\\",\\"incidentId\\":\\"\${INCIDENT_ID}\\"}"
+  mkdir -p "$(dirname "$HOOK_EVENTS_LOG")"
+  printf '%s\\n' "$ENTRY" >> "$HOOK_EVENTS_LOG" 2>/dev/null || true
+  echo "[Intutic Governance] BLOCKED: $REASON" >&2
+  exit 2
+fi
+
+exit 0
+`;
+}
+/**
+ * Merge `hooks.pre_tool_use` into Goose config.yaml using string operations.
+ *
+ * Reads the existing file (if any), checks if `pre_tool_use:` is already
+ * present under a `hooks:` section, and adds it only if absent.
+ * Creates the file (with a minimal `hooks:` block) if it does not exist.
+ */
+async function mergeGooseConfig() {
+    let existing = '';
+    try {
+        existing = await node_fs.readFile(GOOSE_CONFIG, 'utf-8');
+    }
+    catch {
+        existing = '';
+    }
+    const hookLine = `  pre_tool_use: ${HOOK_SCRIPT}`;
+    // Already registered — nothing to do
+    if (existing.includes('pre_tool_use:') && existing.includes(HOOK_SCRIPT)) {
+        log.debug({ action: 'goose_config_noop', path: GOOSE_CONFIG }, 'Goose config already contains pre_tool_use hook');
+        return;
+    }
+    if (existing.includes('hooks:')) {
+        // hooks: block exists — insert our line after the `hooks:` line
+        existing = existing.replace(/^hooks:/m, `hooks:\n${hookLine}`);
+    }
+    else {
+        // No hooks: block — append
+        existing = existing.trimEnd() + `\nhooks:\n${hookLine}\n`;
+    }
+    await node_fs.mkdir(node_path.dirname(GOOSE_CONFIG), { recursive: true });
+    const tmp = GOOSE_CONFIG + '.intutic-tmp';
+    await node_fs.writeFile(tmp, existing, 'utf-8');
+    await node_fs.rename(tmp, GOOSE_CONFIG);
+    log.info({ action: 'goose_config_written', path: GOOSE_CONFIG }, 'Goose config.yaml updated with pre_tool_use hook');
+}
+/**
+ * Write the Goose pre_tool_use hook script and register it in config.yaml.
+ *
+ * @param workspaceRoot - Absolute path to the workspace root (unused directly;
+ *   included for API symmetry with other hook writers).
+ */
+export async function writeGooseHooks(workspaceRoot) {
+    // Ensure target directories exist
+    await node_fs.mkdir(HOOKS_DIR, { recursive: true });
+    await node_fs.mkdir(EVENTS_DIR, { recursive: true });
+    // Write hook script atomically
+    const tmp = HOOK_SCRIPT + '.intutic-tmp';
+    await node_fs.writeFile(tmp, buildGooseHookScript(), 'utf-8');
+    await node_fs.rename(tmp, HOOK_SCRIPT);
+    await node_fs.chmod(HOOK_SCRIPT, 0o755);
+    log.info({ action: 'goose_hook_script_written', path: HOOK_SCRIPT }, 'Goose pre_tool_use hook script written');
+    // Register in config.yaml
+    await mergeGooseConfig();
+    log.info({ action: 'goose_hooks_done', workspaceRoot }, 'Goose native hooks written successfully');
+}
+//# sourceMappingURL=gooseHooksWriter.js.map

package/dist/harness/gooseHooksWriter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gooseHooksWriter.js","sourceRoot":"","sources":["../../src/harness/gooseHooksWriter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAA;AAC3C,OAAO,KAAK,SAAS,MAAM,WAAW,CAAA;AACtC,OAAO,KAAK,OAAO,MAAM,SAAS,CAAA;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,MAAM,GAAG,GAAG,YAAY,CAAC,yBAAyB,CAAC,CAAA;AAEnD,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;AACxE,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAA;AAC1E,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAA;AACtE,MAAM,eAAe,GAAG,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAA;AACvE,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;AAEzF;;;;;;;;;;GAUG;AACH,SAAS,oBAAoB;IAC3B,OAAO;;;;;;kBAMS,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0ChD,CAAA;AACD,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,gBAAgB;IAC7B,IAAI,QAAQ,GAAG,EAAE,CAAA;IACjB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,EAAE,CAAA;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,mBAAmB,WAAW,EAAE,CAAA;IAEjD,qCAAqC;IACrC,IAAI,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,iDAAiD,CAAC,CAAA;QACjH,OAAM;IACR,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,gEAAgE;QAChE,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,QAAQ,EAAE,CAAC,CAAA;IAChE,CAAC;SAAM,CAAC;QACN,2BAA2B;QAC3B,QAAQ,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,aAAa,QAAQ,IAAI,CAAA;IAC3D,CAAC;IAED,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACzE,MAAM,GAAG,GAAG,YAAY,GAAG,cAAc,CAAA;IACzC,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;IAC/C,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;IAEvC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,YAAY,EAAE,EACtD,kDAAkD,CACnD,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,aAAqB;IACzD,kCAAkC;IAClC,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACnD,MAAM,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEpD,+BAA+B;IAC/B,MAAM,GAAG,GAAG,WAAW,GAAG,cAAc,CAAA;IACxC,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,oBAAoB,EAAE,EAAE,OAAO,CAAC,CAAA;IAC7D,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;IACtC,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IAEvC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,2BAA2B,EAAE,IAAI,EAAE,WAAW,EAAE,EAC1D,wCAAwC,CACzC,CAAA;IAED,0BAA0B;IAC1B,MAAM,gBAAgB,EAAE,CAAA;IAExB,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,EAC7C,yCAAyC,CAC1C,CAAA;AACH,CAAC"}

package/dist/harness/hermesHooks.d.ts

@@ -0,0 +1,31 @@
+/**
+ * hermesHooks.ts — Hermes AI agent governance hook injection.
+ *
+ * Hermes is a skills-based AI agent that reads `~/.hermes/config.yaml`
+ * for configuration. Hook commands are registered under `hooks.preToolUse`.
+ * This module:
+ *
+ * 1. YAML-safe-merges `~/.hermes/config.yaml` to register the hook command.
+ * 2. Writes `~/.intutic/hooks/hermes-check.sh` — dual-path bash governance hook.
+ * 3. Writes `~/.hermes/skills/intutic-governance/SKILL.md` — governance skill.
+ * 4. Writes `.intutic/env/hermes.env` — env snippet for IDE/shell integration.
+ *
+ * WS-C1 — Hermes harness (Phase 3 cross-harness defence)
+ * LLD #14 — Phase 3 cross-harness defence (Gap 3)
+ * HLD §3.14 — Three-Tier Defense Cascade (Tier 1 Native Gating)
+ *
+ * @module
+ */
+/**
+ * Write the Hermes governance hook script, merge config, and write the
+ * governance skill for the Hermes AI agent.
+ *
+ * Safe to call repeatedly — uses atomic rename so partial writes never
+ * leave a corrupt state.
+ *
+ * @param workspaceRoot - Absolute workspace root path.
+ * @param proxyUrl      - Intutic proxy URL written into hook headers / skill.
+ * @param workspaceId   - Workspace ID embedded in every hook event payload.
+ */
+export declare function writeHermesHooks(workspaceRoot: string, proxyUrl: string, workspaceId?: string): Promise<void>;
+//# sourceMappingURL=hermesHooks.d.ts.map

package/dist/harness/hermesHooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hermesHooks.d.ts","sourceRoot":"","sources":["../../src/harness/hermesHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAiMH;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,WAAW,SAAK,GACf,OAAO,CAAC,IAAI,CAAC,CAiEf"}

package/dist/harness/hermesHooks.js

@@ -0,0 +1,245 @@
+/**
+ * hermesHooks.ts — Hermes AI agent governance hook injection.
+ *
+ * Hermes is a skills-based AI agent that reads `~/.hermes/config.yaml`
+ * for configuration. Hook commands are registered under `hooks.preToolUse`.
+ * This module:
+ *
+ * 1. YAML-safe-merges `~/.hermes/config.yaml` to register the hook command.
+ * 2. Writes `~/.intutic/hooks/hermes-check.sh` — dual-path bash governance hook.
+ * 3. Writes `~/.hermes/skills/intutic-governance/SKILL.md` — governance skill.
+ * 4. Writes `.intutic/env/hermes.env` — env snippet for IDE/shell integration.
+ *
+ * WS-C1 — Hermes harness (Phase 3 cross-harness defence)
+ * LLD #14 — Phase 3 cross-harness defence (Gap 3)
+ * HLD §3.14 — Three-Tier Defense Cascade (Tier 1 Native Gating)
+ *
+ * @module
+ */
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import * as os from 'node:os';
+import { createLogger } from '@intutic/logger';
+import { newIso } from '@intutic/id';
+const log = createLogger('sync-hermes-hooks');
+/** Path to the Hermes global config file. */
+const HERMES_CONFIG = path.join(os.homedir(), '.hermes', 'config.yaml');
+/** Governance-sensitive paths that the hook gate protects. */
+const PROTECTED_PATHS = [
+    '.gemini/settings.json',
+    '.intutic/hooks',
+    '.intutic/integrity.json',
+    '.intutic/events',
+    '.claude/settings.json',
+    '.cursor/hooks.json',
+    '.codeium/windsurf/hooks.json',
+    '.cline/hooks',
+    '.agents/plugins/intutic-governance',
+    '.openhands/hooks.json',
+    '.hermes/config.yaml',
+    '.hermes/skills/intutic-governance',
+];
+// ─── Bash hook script template ────────────────────────────────────────────────
+function buildHermesCheckScript(proxyUrl, workspaceRoot, workspaceId) {
+    const hookEventsLog = path.join(workspaceRoot, '.intutic', 'events', 'hook-events.jsonl');
+    const runtimeEnv = path.join(os.homedir(), '.intutic', 'env', 'runtime.env');
+    return `#!/usr/bin/env bash
+# Intutic Hermes PreToolUse governance gate.
+# Auto-generated by intutic sync-daemon. DO NOT EDIT.
+# Proxy: ${proxyUrl}
+# Generated: ${newIso()}
+# Workspace: ${workspaceId}
+set -euo pipefail
+
+# Source runtime credentials (never embedded in this file)
+if [ -f "${runtimeEnv}" ]; then
+  # shellcheck disable=SC1090
+  source "${runtimeEnv}"
+fi
+
+INTUTIC_HOST="\${INTUTIC_HOST:-https://api.intutic.ai}"
+INTUTIC_API_KEY="\${INTUTIC_API_KEY:-}"
+INTUTIC_WORKSPACE_ID="\${INTUTIC_WORKSPACE_ID:-${workspaceId}}"
+
+INPUT="$(cat)"
+TOOL_NAME="$(echo "$INPUT" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('tool_name',''))" 2>/dev/null || true)"
+TARGET_PATH="$(echo "$INPUT" | python3 -c "import sys,json; d=json.load(sys.stdin); i=d.get('tool_input',{}); print(i.get('path',i.get('file_path','')))" 2>/dev/null || true)"
+COMMAND="$(echo "$INPUT" | python3 -c "import sys,json; d=json.load(sys.stdin); i=d.get('tool_input',{}); print(i.get('command',i.get('cmd','')))" 2>/dev/null || true)"
+
+HOOK_EVENTS_LOG=${JSON.stringify(hookEventsLog)}
+
+log_event() {
+  local verdict="\$1" tool="\$2" reason="\$3"
+  local ts; ts="\$(date -u +%Y-%m-%dT%H:%M:%SZ)"
+  # incidentId = sha1(timestamp + toolName + workspaceId).slice(0,16)
+  local incident_id; incident_id="\$(echo -n \"\${ts}\${tool}\${INTUTIC_WORKSPACE_ID}\" | sha1sum | cut -c1-16)"
+  local entry="{\\\"event\\\":\\\"toolGovernance\\\",\\\"verdict\\\":\\\"\${verdict}\\\",\\\"toolName\\\":\\\"\${tool}\\\",\\\"reason\\\":\\\"\${reason}\\\",\\\"workspaceId\\\":\\\"\${INTUTIC_WORKSPACE_ID}\\\",\\\"harnessType\\\":\\\"hermes\\\",\\\"incidentId\\\":\\\"\${incident_id}\\\",\\\"timestamp\\\":\\\"\${ts}\\\"}"
+  # Path B: reliable file append (sync-daemon drains on FSEvents change)
+  printf '%s\\n' "\$entry" >> "\$HOOK_EVENTS_LOG" 2>/dev/null || true
+  # Path A: fire-and-forget HTTP POST (near-real-time dashboard, non-blocking)
+  if [ -n "\$INTUTIC_API_KEY" ]; then
+    curl -sf -X POST "\${INTUTIC_HOST}/api/v1/hook-events" \\
+      -H "Content-Type: application/json" \\
+      -H "Authorization: Bearer \${INTUTIC_API_KEY}" \\
+      -d "{\\\"events\\\":[\$entry]}" \\
+      --max-time 5 >/dev/null 2>&1 &
+  fi
+}
+
+PROTECTED_PATHS=(
+${PROTECTED_PATHS.map((p) => `  "${p}"`).join('\n')}
+)
+
+# 1. Protected-path guard
+for p in "\${PROTECTED_PATHS[@]}"; do
+  if echo "$TARGET_PATH" | grep -qF "$p"; then
+    REASON="Attempt to modify governance-protected path \\"$TARGET_PATH\\""
+    echo "[Intutic Governance] BLOCKED: $REASON" >&2
+    log_event "tool_blocked" "$TOOL_NAME" "$REASON"
+    exit 2
+  fi
+done
+
+# 2. Bash/shell command guard — block governance bypass patterns
+if [ -n "$COMMAND" ]; then
+  BYPASS_PATTERNS=(
+    "chflags nouchg"
+    "chattr -i"
+    "rm -rf .intutic"
+    "rm -rf .hermes/config"
+    "HERMES_PRE_TOOL_HOOK="
+    "rm -rf .gemini/settings"
+  )
+  for pattern in "\${BYPASS_PATTERNS[@]}"; do
+    if echo "$COMMAND" | grep -qF "$pattern"; then
+      REASON="Shell command matches governance bypass pattern: \\"$pattern\\""
+      echo "[Intutic Governance] BLOCKED: $REASON" >&2
+      log_event "tool_blocked" "$TOOL_NAME" "$REASON"
+      exit 2
+    fi
+  done
+fi
+
+log_event "tool_allowed" "$TOOL_NAME" ""
+exit 0
+`;
+}
+// ─── YAML merge helpers ───────────────────────────────────────────────────────
+/**
+ * YAML-safe merge of the Hermes config.
+ *
+ * Strategy (no YAML library — pure string manipulation):
+ * - If file doesn't exist: write fresh with just the hooks block.
+ * - If file exists and already contains `preToolUse:`: replace the command line.
+ * - If file exists but has no `preToolUse:`: append the hooks block.
+ * - If file has `hooks:` but no `preToolUse:`: insert inside existing hooks section.
+ */
+async function mergeHermesConfig(hookScriptPath) {
+    const hooksBlock = [
+        'hooks:',
+        '  preToolUse:',
+        `    command: ${hookScriptPath}`,
+    ].join('\n');
+    let existing = null;
+    try {
+        existing = await fs.readFile(HERMES_CONFIG, 'utf-8');
+    }
+    catch {
+        // File doesn't exist — write fresh
+    }
+    let merged;
+    if (existing === null) {
+        // Fresh write
+        merged = hooksBlock + '\n';
+    }
+    else if (/^\s*preToolUse:/m.test(existing)) {
+        // Replace the existing command line under preToolUse:
+        merged = existing.replace(/^(\s*command:\s*).*$/m, `$1${hookScriptPath}`);
+    }
+    else if (/^hooks:/m.test(existing)) {
+        // hooks: block exists but no preToolUse: — insert inside hooks section
+        merged = existing.replace(/^(hooks:\s*)$/m, `$1\n  preToolUse:\n    command: ${hookScriptPath}`);
+    }
+    else {
+        // No hooks: block at all — append
+        merged = existing.trimEnd() + '\n\n' + hooksBlock + '\n';
+    }
+    const tmpPath = HERMES_CONFIG + '.intutic-tmp';
+    await fs.writeFile(tmpPath, merged, 'utf-8');
+    await fs.rename(tmpPath, HERMES_CONFIG);
+}
+// ─── Governance skill template ────────────────────────────────────────────────
+function buildGovernanceSkill(proxyUrl) {
+    return `---
+name: intutic-governance
+description: Intutic governance awareness. Always check compliance before tool calls.
+triggers:
+  - before any tool call
+  - before any file write
+  - before any shell command
+---
+
+# Intutic Governance Policy
+
+Before every tool call, you MUST verify compliance with workspace SOPs.
+A pre-tool-use hook (\`~/.intutic/hooks/hermes-check.sh\`) enforces these rules automatically.
+
+If a tool call is blocked, do NOT attempt to circumvent the governance gate.
+To update policy, use the Intutic control plane at \`${proxyUrl}\`.
+`;
+}
+// ─── Main export ──────────────────────────────────────────────────────────────
+/**
+ * Write the Hermes governance hook script, merge config, and write the
+ * governance skill for the Hermes AI agent.
+ *
+ * Safe to call repeatedly — uses atomic rename so partial writes never
+ * leave a corrupt state.
+ *
+ * @param workspaceRoot - Absolute workspace root path.
+ * @param proxyUrl      - Intutic proxy URL written into hook headers / skill.
+ * @param workspaceId   - Workspace ID embedded in every hook event payload.
+ */
+export async function writeHermesHooks(workspaceRoot, proxyUrl, workspaceId = '') {
+    // ── 1. Ensure directories ──────────────────────────────────────────────────
+    const globalHookDir = path.join(os.homedir(), '.intutic', 'hooks');
+    const hookEventsDir = path.join(workspaceRoot, '.intutic', 'events');
+    const envDir = path.join(workspaceRoot, '.intutic', 'env');
+    const hermesDir = path.join(os.homedir(), '.hermes');
+    const skillsDir = path.join(hermesDir, 'skills', 'intutic-governance');
+    await Promise.all([
+        fs.mkdir(globalHookDir, { recursive: true }),
+        fs.mkdir(hookEventsDir, { recursive: true }),
+        fs.mkdir(envDir, { recursive: true }),
+        fs.mkdir(hermesDir, { recursive: true }),
+        fs.mkdir(skillsDir, { recursive: true }),
+    ]);
+    // ── 2. Write bash hook script ──────────────────────────────────────────────
+    const hookScriptPath = path.join(globalHookDir, 'hermes-check.sh');
+    const tmpScript = hookScriptPath + '.intutic-tmp';
+    await fs.writeFile(tmpScript, buildHermesCheckScript(proxyUrl, workspaceRoot, workspaceId), 'utf-8');
+    await fs.rename(tmpScript, hookScriptPath);
+    await fs.chmod(hookScriptPath, 0o755);
+    log.info({ action: 'hermes_hook_script_written', path: hookScriptPath }, 'Hermes hook script written');
+    // ── 3. YAML-safe merge into ~/.hermes/config.yaml ─────────────────────────
+    await mergeHermesConfig(hookScriptPath);
+    log.info({ action: 'hermes_config_merged', path: HERMES_CONFIG }, 'Merged Intutic hook into ~/.hermes/config.yaml');
+    // ── 4. Write governance skill ──────────────────────────────────────────────
+    const skillPath = path.join(skillsDir, 'SKILL.md');
+    const tmpSkill = skillPath + '.intutic-tmp';
+    await fs.writeFile(tmpSkill, buildGovernanceSkill(proxyUrl), 'utf-8');
+    await fs.rename(tmpSkill, skillPath);
+    log.info({ action: 'hermes_skill_written', path: skillPath }, 'Hermes governance skill written');
+    // ── 5. Write env snippet ───────────────────────────────────────────────────
+    const envSnippet = [
+        `# Intutic Hermes governance env`,
+        `INTUITIC_HERMES_HOOK=~/.intutic/hooks/hermes-check.sh`,
+        `INTUITIC_HERMES_CONFIG=~/.hermes/config.yaml`,
+    ].join('\n') + '\n';
+    const envFilePath = path.join(envDir, 'hermes.env');
+    const tmpEnv = envFilePath + '.intutic-tmp';
+    await fs.writeFile(tmpEnv, envSnippet, 'utf-8');
+    await fs.rename(tmpEnv, envFilePath);
+    log.info({ action: 'hermes_env_written', path: envFilePath }, 'Hermes env snippet written');
+}
+//# sourceMappingURL=hermesHooks.js.map