@intutic/sync-daemon 1.6.0

package/dist/harness/n8nHooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"n8nHooks.js","sourceRoot":"","sources":["../../src/harness/n8nHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,MAAM,GAAG,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAA;AAE1C,iDAAiD;AACjD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;AAE1D,iFAAiF;AAEjF,MAAM,eAAe,GAAK,sCAAsC,CAAA;AAChE,MAAM,UAAU,GAAU,sCAAsC,CAAA;AAChE,MAAM,YAAY,GAAQ,sCAAsC,CAAA;AAChE,MAAM,aAAa,GAAO,sCAAsC,CAAA;AAChE,MAAM,WAAW,GAAS,sCAAsC,CAAA;AAEhE,iFAAiF;AAEjF,SAAS,gBAAgB,CAAC,QAAgB,EAAE,WAAmB;IAC7D,OAAO;QACL,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,kCAAkC;QACxC,MAAM,EAAE,IAAI;QACZ,IAAI,EAAE;YACJ,UAAU,EAAE,qBAAqB;YACjC,2BAA2B,EAAE,IAAI;SAClC;QACD,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QACnD,yBAAyB;QACzB,QAAQ,EAAE;YACR,cAAc,EAAE,IAAI;YACpB,oBAAoB,EAAE,KAAK;YAC3B,YAAY,EAAE,wBAAwB;YACtC,aAAa,EAAE,EAAE;SAClB;QACD,oEAAoE;QACpE,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE;YACL,wEAAwE;YACxE;gBACE,EAAE,EAAE,eAAe;gBACnB,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,wBAAwB;gBAC9B,WAAW,EAAE,CAAC;gBACd,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;gBACpB,UAAU,EAAE;oBACV,UAAU,EAAE,MAAM;oBAClB,IAAI,EAAE,oBAAoB;oBAC1B,YAAY,EAAE,YAAY;oBAC1B,YAAY,EAAE,YAAY;oBAC1B,OAAO,EAAE,EAAE;iBACZ;gBACD,SAAS,EAAE,oBAAoB;aAChC;YACD,wEAAwE;YACxE;gBACE,EAAE,EAAE,UAAU;gBACd,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,mBAAmB;gBACzB,WAAW,EAAE,CAAC;gBACd,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;gBACpB,UAAU,EAAE;oBACV,UAAU,EAAE;wBACV,MAAM,EAAE;4BACN;gCACE,MAAM,EAAE,yBAAyB;gCACjC,SAAS,EAAE,OAAO;gCAClB,MAAM,EAAE,cAAc;6BACvB;yBACF;qBACF;iBACF;aACF;YACD,yEAAyE;YACzE;gBACE,EAAE,EAAE,YAAY;gBAChB,IAAI,EAAE,oBAAoB;gBAC1B,IAAI,EAAE,4BAA4B;gBAClC,WAAW,EAAE,CAAC;gBACd,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;gBACpB,UAAU,EAAE;oBACV,MAAM,EAAE,MAAM;oBACd,GAAG,EAAE,GAAG,QAAQ,qBAAqB;oBACrC,WAAW,EAAE,IAAI;oBACjB,gBAAgB,EAAE;wBAChB,UAAU,EAAE;4BACV;gCACE,IAAI,EAAE,cAAc;gCACpB,KAAK,EAAE,kBAAkB;6BAC1B;4BACD;gCACE,IAAI,EAAE,eAAe;gCACrB,mEAAmE;gCACnE,KAAK,EAAE,mCAAmC;6BAC3C;4BACD;gCACE,IAAI,EAAE,wBAAwB;gCAC9B,KAAK,EAAE,WAAW;6BACnB;yBACF;qBACF;oBACD,QAAQ,EAAE,IAAI;oBACd,cAAc,EAAE;wBACd,UAAU,EAAE,EAAE;qBACf;oBACD,WAAW,EAAE,MAAM;oBACnB,QAAQ,EAAE,iDAAiD;oBAC3D,OAAO,EAAE;wBACP,OAAO,EAAE,KAAK;qBACf;iBACF;aACF;YACD,yEAAyE;YACzE;gBACE,EAAE,EAAE,aAAa;gBACjB,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,qBAAqB;gBAC3B,WAAW,EAAE,CAAC;gBACd,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;gBACpB,UAAU,EAAE,EAAE;aACf;SACF;QACD,6BAA6B;QAC7B,WAAW,EAAE;YACX,iBAAiB,EAAE;gBACjB,IAAI,EAAE;oBACJ;wBACE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE;qBAChD;iBACF;aACF;YACD,aAAa,EAAE;gBACb,IAAI,EAAE;oBACJ,yCAAyC;oBACzC,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;oBACxD,uBAAuB;oBACvB,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;iBACtD;aACF;SACF;QACD,oBAAoB;QACpB,YAAY,EAAE;YACZ,WAAW,EAAE,qBAAqB;YAClC,WAAW,EAAE,MAAM,EAAE;YACrB,WAAW;YACX,QAAQ;YACR,WAAW,EAAE,6BAA6B;SAC3C;KACF,CAAA;AACH,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,aAAqB,EACrB,QAAgB,EAChB,WAAW,GAAG,EAAE;IAEhB,8EAA8E;IAE9E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;IAE1D,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACtC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;KACtC,CAAC,CAAA;IAEF,6EAA6E;IAE7E,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAA;IACnE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;IACxD,MAAM,WAAW,GAAG,YAAY,GAAG,cAAc,CAAA;IACjD,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IAClF,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;IAE1C,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,YAAY,EAAE,EACtD,iCAAiC,CAClC,CAAA;IAED,6EAA6E;IAE7E,MAAM,UAAU,GAAG;QACjB,iDAAiD,MAAM,EAAE,EAAE;QAC3D,iEAAiE;QACjE,sEAAsE;QACtE,0EAA0E;QAC1E,+DAA+D;QAC/D,4EAA4E;QAC5E,WAAW,CAAC,CAAC,CAAC,wBAAwB,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE;KACzD,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;IAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IAChD,MAAM,MAAM,GAAG,WAAW,GAAG,cAAc,CAAA;IAC3C,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IAC/C,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IAEpC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,WAAW,EAAE,EAChD,yBAAyB,CAC1B,CAAA;AACH,CAAC"}

package/dist/harness/openWebuiHooks.d.ts

@@ -0,0 +1,31 @@
+/**
+ * openWebuiHooks.ts — Open WebUI governance filter generator.
+ *
+ * Open WebUI uses Python `inlet()` filter functions loaded from the admin UI.
+ * This module generates an `intutic-governance-filter.py` file and an env
+ * snippet with installation instructions.
+ *
+ * The generated Python filter:
+ *   - Reads ~/.intutic/env/runtime.env at call time for fresh credentials.
+ *   - Logs every prompt (inlet) via dual-path: file append + urllib.request.
+ *   - Generates incidentId via hashlib.sha1.
+ *
+ * LLD #14 — Phase 3 cross-harness defence (Gap 3, WS-B)
+ * HLD §3.14 — Three-Tier Defense Cascade (Tier 1 Native Gating)
+ *
+ * @module
+ */
+/**
+ * Write the Open WebUI governance filter and installation instructions.
+ *
+ *  1. Creates `~/.open-webui/intutic-governance-filter.py` — Python inlet filter.
+ *  2. Writes `.intutic/env/open-webui.env` with installation instructions.
+ *
+ * Safe to call repeatedly — uses atomic rename (`.intutic-tmp` → final path).
+ *
+ * @param workspaceRoot - Absolute workspace root path.
+ * @param proxyUrl      - Intutic proxy URL embedded in filter header.
+ * @param workspaceId   - Workspace ID embedded in every filter event payload.
+ */
+export declare function writeOpenWebuiHooks(workspaceRoot: string, proxyUrl: string, workspaceId?: string): Promise<void>;
+//# sourceMappingURL=openWebuiHooks.d.ts.map

package/dist/harness/openWebuiHooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openWebuiHooks.d.ts","sourceRoot":"","sources":["../../src/harness/openWebuiHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAmHH;;;;;;;;;;;GAWG;AACH,wBAAsB,mBAAmB,CACvC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,WAAW,SAAK,GACf,OAAO,CAAC,IAAI,CAAC,CA2Cf"}

package/dist/harness/openWebuiHooks.js

@@ -0,0 +1,166 @@
+/**
+ * openWebuiHooks.ts — Open WebUI governance filter generator.
+ *
+ * Open WebUI uses Python `inlet()` filter functions loaded from the admin UI.
+ * This module generates an `intutic-governance-filter.py` file and an env
+ * snippet with installation instructions.
+ *
+ * The generated Python filter:
+ *   - Reads ~/.intutic/env/runtime.env at call time for fresh credentials.
+ *   - Logs every prompt (inlet) via dual-path: file append + urllib.request.
+ *   - Generates incidentId via hashlib.sha1.
+ *
+ * LLD #14 — Phase 3 cross-harness defence (Gap 3, WS-B)
+ * HLD §3.14 — Three-Tier Defense Cascade (Tier 1 Native Gating)
+ *
+ * @module
+ */
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import * as os from 'node:os';
+import { createLogger } from '@intutic/logger';
+import { newIso } from '@intutic/id';
+const log = createLogger('sync-open-webui-hooks');
+/** Default target directory for the Open WebUI governance filter. */
+const OPEN_WEBUI_DIR = path.join(os.homedir(), '.open-webui');
+// ─── Python filter template ───────────────────────────────────────────────────
+function buildOpenWebuiFilter(workspaceId, proxyUrl) {
+    return `"""
+Intutic Governance Filter for Open WebUI.
+Auto-generated by intutic sync-daemon. DO NOT EDIT.
+Generated: ${newIso()}
+Proxy: ${proxyUrl}
+Workspace: ${workspaceId}
+"""
+import os
+import json
+import urllib.request
+import hashlib
+import time
+from typing import Optional
+from datetime import datetime, timezone
+
+WORKSPACE_ID = ${JSON.stringify(workspaceId)}
+HARNESS_TYPE = "open-webui"
+RUNTIME_ENV_PATH = os.path.expanduser("~/.intutic/env/runtime.env")
+
+
+def _load_runtime_env():
+    env = {
+        "INTUTIC_HOST": "https://api.intutic.ai",
+        "INTUTIC_API_KEY": "",
+        "INTUTIC_WORKSPACE_ID": WORKSPACE_ID,
+    }
+    try:
+        with open(RUNTIME_ENV_PATH) as f:
+            for line in f:
+                line = line.strip()
+                if "=" in line and not line.startswith("#"):
+                    k, v = line.split("=", 1)
+                    env[k.strip()] = v.strip()
+    except Exception:
+        pass
+    return env
+
+
+def _log_event(env: dict, event: dict):
+    """Dual-path log: Path B file append + Path A urllib.request (fire-and-forget)."""
+    # Path B — reliable file append
+    try:
+        log_path = os.path.expanduser("~/.intutic/events/open-webui-hook-events.jsonl")
+        os.makedirs(os.path.dirname(log_path), exist_ok=True)
+        with open(log_path, "a") as f:
+            f.write(json.dumps(event) + "\\n")
+    except Exception:
+        pass
+
+    # Path A — fire-and-forget HTTP POST
+    if env.get("INTUTIC_API_KEY"):
+        try:
+            body = json.dumps({"events": [event]}).encode()
+            req = urllib.request.Request(
+                f"{env['INTUTIC_HOST']}/api/v1/hook-events",
+                data=body,
+                headers={
+                    "Content-Type": "application/json",
+                    "Authorization": f"Bearer {env['INTUTIC_API_KEY']}",
+                },
+                method="POST",
+            )
+            urllib.request.urlopen(req, timeout=3)
+        except Exception:
+            pass
+
+
+class Filter:
+    """Intutic governance inlet filter for Open WebUI."""
+
+    def inlet(self, body: dict, __user__: Optional[dict] = None) -> dict:
+        """Called before every prompt — log to Intutic governance."""
+        env = _load_runtime_env()
+        ts = datetime.now(timezone.utc).isoformat()
+        model = body.get("model", "unknown")
+        workspace_id = env["INTUTIC_WORKSPACE_ID"]
+        incident_id = hashlib.sha1(
+            f"{ts}{model}{workspace_id}".encode()
+        ).hexdigest()[:16]
+        event = {
+            "event": "tool_allowed",
+            "toolName": f"open-webui:{model}",
+            "reason": "",
+            "workspaceId": workspace_id,
+            "harnessType": HARNESS_TYPE,
+            "timestamp": ts,
+            "incidentId": incident_id,
+        }
+        _log_event(env, event)
+        return body
+
+    def outlet(self, body: dict, __user__: Optional[dict] = None) -> dict:
+        """Pass-through outlet — no modification required."""
+        return body
+`;
+}
+// ─── Main export ──────────────────────────────────────────────────────────────
+/**
+ * Write the Open WebUI governance filter and installation instructions.
+ *
+ *  1. Creates `~/.open-webui/intutic-governance-filter.py` — Python inlet filter.
+ *  2. Writes `.intutic/env/open-webui.env` with installation instructions.
+ *
+ * Safe to call repeatedly — uses atomic rename (`.intutic-tmp` → final path).
+ *
+ * @param workspaceRoot - Absolute workspace root path.
+ * @param proxyUrl      - Intutic proxy URL embedded in filter header.
+ * @param workspaceId   - Workspace ID embedded in every filter event payload.
+ */
+export async function writeOpenWebuiHooks(workspaceRoot, proxyUrl, workspaceId = '') {
+    // ── 1. Ensure directories ──────────────────────────────────────────────────
+    const envDir = path.join(workspaceRoot, '.intutic', 'env');
+    await Promise.all([
+        fs.mkdir(OPEN_WEBUI_DIR, { recursive: true }),
+        fs.mkdir(envDir, { recursive: true }),
+    ]);
+    // ── 2. Write Python filter (atomic) ───────────────────────────────────────
+    const filterPath = path.join(OPEN_WEBUI_DIR, 'intutic-governance-filter.py');
+    const tmpFilter = filterPath + '.intutic-tmp';
+    await fs.writeFile(tmpFilter, buildOpenWebuiFilter(workspaceId, proxyUrl), 'utf-8');
+    await fs.rename(tmpFilter, filterPath);
+    log.info({ action: 'open_webui_filter_written', path: filterPath }, 'Open WebUI governance filter written');
+    // ── 3. Write .intutic/env/open-webui.env (atomic) ─────────────────────────
+    const envContent = [
+        `# Intutic Open WebUI governance env — auto-generated ${newIso()}`,
+        `# This file is managed by the Intutic sync-daemon. DO NOT EDIT.`,
+        `INTUTIC_OPEN_WEBUI_FILTER=${filterPath}`,
+        `# To install: copy the filter file to your Open WebUI Functions directory via the admin UI.`,
+        `# Admin > Settings > Functions > + New Function > paste content of:`,
+        `#   ${filterPath}`,
+        workspaceId ? `INTUTIC_WORKSPACE_ID=${workspaceId}` : '',
+    ].filter((l) => l !== '').join('\n') + '\n';
+    const envFilePath = path.join(envDir, 'open-webui.env');
+    const tmpEnv = envFilePath + '.intutic-tmp';
+    await fs.writeFile(tmpEnv, envContent, 'utf-8');
+    await fs.rename(tmpEnv, envFilePath);
+    log.info({ action: 'open_webui_env_written', path: envFilePath }, 'Open WebUI env snippet written');
+}
+//# sourceMappingURL=openWebuiHooks.js.map

package/dist/harness/openWebuiHooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openWebuiHooks.js","sourceRoot":"","sources":["../../src/harness/openWebuiHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,MAAM,GAAG,GAAG,YAAY,CAAC,uBAAuB,CAAC,CAAA;AAEjD,qEAAqE;AACrE,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAA;AAE7D,iFAAiF;AAEjF,SAAS,oBAAoB,CAAC,WAAmB,EAAE,QAAgB;IACjE,OAAO;;;aAGI,MAAM,EAAE;SACZ,QAAQ;aACJ,WAAW;;;;;;;;;;iBAUP,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+E3C,CAAA;AACD,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,aAAqB,EACrB,QAAgB,EAChB,WAAW,GAAG,EAAE;IAEhB,8EAA8E;IAE9E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;IAE1D,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC7C,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;KACtC,CAAC,CAAA;IAEF,6EAA6E;IAE7E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,8BAA8B,CAAC,CAAA;IAC5E,MAAM,SAAS,GAAG,UAAU,GAAG,cAAc,CAAA;IAC7C,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,oBAAoB,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAA;IACnF,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;IAEtC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,2BAA2B,EAAE,IAAI,EAAE,UAAU,EAAE,EACzD,sCAAsC,CACvC,CAAA;IAED,6EAA6E;IAE7E,MAAM,UAAU,GAAG;QACjB,wDAAwD,MAAM,EAAE,EAAE;QAClE,iEAAiE;QACjE,6BAA6B,UAAU,EAAE;QACzC,6FAA6F;QAC7F,qEAAqE;QACrE,OAAO,UAAU,EAAE;QACnB,WAAW,CAAC,CAAC,CAAC,wBAAwB,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE;KACzD,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;IAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;IACvD,MAAM,MAAM,GAAG,WAAW,GAAG,cAAc,CAAA;IAC3C,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IAC/C,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IAEpC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,wBAAwB,EAAE,IAAI,EAAE,WAAW,EAAE,EACvD,gCAAgC,CACjC,CAAA;AACH,CAAC"}

package/dist/harness/openclawHooks.d.ts

@@ -0,0 +1,34 @@
+/**
+ * openclawHooks.ts — Openclaw governance hook injection.
+ *
+ * Openclaw uses `~/.openclaw/openclaw.json` (JSON5 format — may have comments
+ * and trailing commas). The hook entry is registered under
+ * `hooks.internal.entries["intutic-governance"]`. This module:
+ *
+ * 1. JSON5-safe-merges `~/.openclaw/openclaw.json` with the hook entry.
+ * 2. Writes `~/.intutic/hooks/openclaw-check.js` — dual-path Node.js hook.
+ * 3. Writes `.intutic/env/openclaw.env` — env snippet.
+ * 4. Optionally validates with `openclaw hooks check` (non-fatal).
+ *
+ * Hook protocol: stdin JSON `{tool_name, tool_input, transcript_path}`,
+ * exit 0 = allow, exit 2 = block (stderr shown to agent).
+ *
+ * WS-C2 — Openclaw harness (Phase 3 cross-harness defence)
+ * LLD #14 — Phase 3 cross-harness defence (Gap 3)
+ * HLD §3.14 — Three-Tier Defense Cascade (Tier 1 Native Gating)
+ *
+ * @module
+ */
+/**
+ * Write the Openclaw governance hook script and merge hook configuration
+ * into `~/.openclaw/openclaw.json`.
+ *
+ * Safe to call repeatedly — uses atomic rename so partial writes never
+ * leave a corrupt state.
+ *
+ * @param workspaceRoot - Absolute workspace root path.
+ * @param proxyUrl      - Intutic proxy URL written into hook headers.
+ * @param workspaceId   - Workspace ID embedded in every hook event payload.
+ */
+export declare function writeOpenclawHooks(workspaceRoot: string, proxyUrl: string, workspaceId?: string): Promise<void>;
+//# sourceMappingURL=openclawHooks.d.ts.map

package/dist/harness/openclawHooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclawHooks.d.ts","sourceRoot":"","sources":["../../src/harness/openclawHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAiOH;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CACtC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,WAAW,SAAK,GACf,OAAO,CAAC,IAAI,CAAC,CAiFf"}

package/dist/harness/openclawHooks.js

@@ -0,0 +1,296 @@
+/**
+ * openclawHooks.ts — Openclaw governance hook injection.
+ *
+ * Openclaw uses `~/.openclaw/openclaw.json` (JSON5 format — may have comments
+ * and trailing commas). The hook entry is registered under
+ * `hooks.internal.entries["intutic-governance"]`. This module:
+ *
+ * 1. JSON5-safe-merges `~/.openclaw/openclaw.json` with the hook entry.
+ * 2. Writes `~/.intutic/hooks/openclaw-check.js` — dual-path Node.js hook.
+ * 3. Writes `.intutic/env/openclaw.env` — env snippet.
+ * 4. Optionally validates with `openclaw hooks check` (non-fatal).
+ *
+ * Hook protocol: stdin JSON `{tool_name, tool_input, transcript_path}`,
+ * exit 0 = allow, exit 2 = block (stderr shown to agent).
+ *
+ * WS-C2 — Openclaw harness (Phase 3 cross-harness defence)
+ * LLD #14 — Phase 3 cross-harness defence (Gap 3)
+ * HLD §3.14 — Three-Tier Defense Cascade (Tier 1 Native Gating)
+ *
+ * @module
+ */
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import * as os from 'node:os';
+import { exec } from 'node:child_process';
+import { promisify } from 'node:util';
+import { createLogger } from '@intutic/logger';
+import { newIso } from '@intutic/id';
+const log = createLogger('sync-openclaw-hooks');
+const execAsync = promisify(exec);
+/** Path to the Openclaw global config file. */
+const OPENCLAW_CONFIG = path.join(os.homedir(), '.openclaw', 'openclaw.json');
+/** Governance-sensitive paths that the hook gate protects. */
+const PROTECTED_PATHS = [
+    '.gemini/settings.json',
+    '.intutic/hooks',
+    '.intutic/integrity.json',
+    '.intutic/events',
+    '.claude/settings.json',
+    '.cursor/hooks.json',
+    '.codeium/windsurf/hooks.json',
+    '.cline/hooks',
+    '.agents/plugins/intutic-governance',
+    '.openhands/hooks.json',
+    '.openclaw/openclaw.json',
+];
+// ─── Node.js hook script template ────────────────────────────────────────────
+function buildOpenclawCheckScript(hookEventsLog, workspaceId) {
+    return `#!/usr/bin/env node
+/**
+ * Intutic Openclaw PreToolUse execution gate.
+ * Auto-generated by intutic sync-daemon. DO NOT EDIT.
+ * Generated: ${newIso()}
+ * Workspace: ${workspaceId}
+ */
+'use strict';
+const path = require('path');
+const os = require('os');
+const fs = require('fs');
+const crypto = require('crypto');
+const https = require('https');
+
+// ── Runtime credentials (sourced from ~/.intutic/env/runtime.env at invocation time) ──
+const _runtimeEnvPath = path.join(os.homedir(), '.intutic', 'env', 'runtime.env');
+let _intuticHost = 'https://api.intutic.ai', _intuticKey = '', _intuticWsId = ${JSON.stringify(workspaceId)};
+try {
+  fs.readFileSync(_runtimeEnvPath, 'utf-8').split('\\n').forEach(line => {
+    const eq = line.indexOf('='); if (eq < 0) return;
+    const k = line.slice(0, eq).trim(), v = line.slice(eq + 1).trim();
+    if (k === 'INTUTIC_HOST' && v) _intuticHost = v;
+    if (k === 'INTUTIC_API_KEY' && v) _intuticKey = v;
+    if (k === 'INTUTIC_WORKSPACE_ID' && v) _intuticWsId = v;
+  });
+} catch { /* runtime.env not yet written — use defaults */ }
+
+// Governance-sensitive paths that no agent may modify.
+const PROTECTED_PATHS = ${JSON.stringify(PROTECTED_PATHS, null, 2)};
+
+/**
+ * Appends a governance event to the local hook-events log (Path B)
+ * and fires a non-blocking HTTP POST to the control plane (Path A).
+ */
+function logEvent(verdict, toolName, reason) {
+  try {
+    const ts = new Date().toISOString();
+    // incidentId = sha1(timestamp + toolName + workspaceId).slice(0,16)
+    const incidentId = crypto.createHash('sha1').update(ts + toolName + _intuticWsId).digest('hex').slice(0, 16);
+    const entry = JSON.stringify({
+      event: verdict === 'blocked' ? 'tool_blocked' : 'tool_allowed',
+      toolName,
+      reason: reason || '',
+      workspaceId: _intuticWsId,
+      harnessType: 'openclaw',
+      timestamp: ts,
+      incidentId,
+    }) + '\\n';
+    // Path B: reliable file append (sync-daemon drains on FSEvents change)
+    fs.appendFileSync(${JSON.stringify(hookEventsLog)}, entry, { flag: 'a' });
+    // Path A: fire-and-forget HTTP POST (near-real-time dashboard, non-blocking)
+    if (_intuticKey) {
+      try {
+        const body = JSON.stringify({ events: [JSON.parse(entry)] });
+        const urlObj = new URL('/api/v1/hook-events', _intuticHost);
+        const isHttps = urlObj.protocol === 'https:';
+        const mod = isHttps ? https : require('http');
+        const req = mod.request({
+          hostname: urlObj.hostname,
+          port: urlObj.port || (isHttps ? 443 : 80),
+          path: urlObj.pathname,
+          method: 'POST',
+          headers: {
+            'Content-Type': 'application/json',
+            'Content-Length': Buffer.byteLength(body),
+            'Authorization': 'Bearer ' + _intuticKey,
+          },
+        });
+        req.on('error', () => { /* fire-and-forget — ignore errors */ });
+        req.write(body);
+        req.end();
+      } catch { /* never crash the hook */ }
+    }
+  } catch { /* never crash the hook */ }
+}
+
+// Read stdin containing Openclaw's tool context
+let inputData = '';
+process.stdin.on('data', (chunk) => { inputData += chunk; });
+process.stdin.on('end', () => {
+  try {
+    const ctx = JSON.parse(inputData);
+    const toolName = (ctx.tool_name || ctx.toolName || '').toLowerCase();
+    const toolInput = ctx.tool_input || ctx.toolInput || {};
+
+    // 1. Protected-path guard
+    const targetPath = toolInput.path || toolInput.file_path || toolInput.new_path || toolInput.target || '';
+    for (const p of PROTECTED_PATHS) {
+      if (String(targetPath).includes(p) || String(targetPath).startsWith(p)) {
+        const reason = \`Attempt to modify governance-protected path: "\${targetPath}". \` +
+          'To change governance policy, update your SOP via the Intutic control plane.';
+        console.error(\`[Intutic Governance] BLOCKED: \${reason}\`);
+        logEvent('blocked', toolName, reason);
+        process.exit(2);
+      }
+    }
+
+    // 2. Bash/shell command guard — block governance bypass patterns
+    const command = toolInput.command || toolInput.cmd || '';
+    const BYPASS_PATTERNS = [
+      'chflags nouchg',
+      'chattr -i',
+      'rm -rf .intutic',
+      'rm -rf .openclaw',
+      'OPENCLAW_PRE_TOOL_HOOK=',
+      'rm -rf .gemini/settings',
+    ];
+    for (const pattern of BYPASS_PATTERNS) {
+      if (String(command).includes(pattern)) {
+        const reason = \`Shell command matches governance bypass pattern: "\${pattern}"\`;
+        console.error(\`[Intutic Governance] BLOCKED: \${reason}\`);
+        logEvent('blocked', toolName, reason);
+        process.exit(2);
+      }
+    }
+
+    logEvent('allowed', toolName, '');
+    process.exit(0);
+  } catch (err) {
+    // Fail CLOSED — any hook execution error blocks the tool call.
+    console.error('[Intutic Governance] Hook error (blocking for safety):', err);
+    logEvent('blocked', 'unknown', String(err));
+    process.exit(2);
+  }
+});
+`;
+}
+// ─── JSON5 merge helpers ──────────────────────────────────────────────────────
+/**
+ * Attempt to parse a JSON5-like string by progressively stripping
+ * non-standard syntax. Returns a plain JS object or throws if unparseable.
+ */
+function parseJson5Like(raw) {
+    // Attempt 1: vanilla JSON
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        // pass
+    }
+    // Attempt 2: strip single-line // comments
+    let stripped = raw.replace(/\/\/[^\n]*/g, '');
+    try {
+        return JSON.parse(stripped);
+    }
+    catch {
+        // pass
+    }
+    // Attempt 3: also strip trailing commas before } or ]
+    stripped = stripped.replace(/,(\s*[}\]])/g, '$1');
+    return JSON.parse(stripped);
+}
+/**
+ * Deep-merge `hooks.internal.entries["intutic-governance"]` into the parsed
+ * openclaw config object and return the merged result.
+ */
+function mergeOpenclawConfig(existing, hookScriptPath) {
+    const hooks = existing.hooks ?? {};
+    const internal = hooks.internal ?? {};
+    const entries = internal.entries ?? {};
+    return {
+        ...existing,
+        hooks: {
+            ...hooks,
+            internal: {
+                ...internal,
+                entries: {
+                    ...entries,
+                    'intutic-governance': {
+                        enabled: true,
+                        event: 'PreToolUse',
+                        command: hookScriptPath,
+                    },
+                },
+            },
+        },
+    };
+}
+// ─── Main export ──────────────────────────────────────────────────────────────
+/**
+ * Write the Openclaw governance hook script and merge hook configuration
+ * into `~/.openclaw/openclaw.json`.
+ *
+ * Safe to call repeatedly — uses atomic rename so partial writes never
+ * leave a corrupt state.
+ *
+ * @param workspaceRoot - Absolute workspace root path.
+ * @param proxyUrl      - Intutic proxy URL written into hook headers.
+ * @param workspaceId   - Workspace ID embedded in every hook event payload.
+ */
+export async function writeOpenclawHooks(workspaceRoot, proxyUrl, workspaceId = '') {
+    // ── 1. Ensure directories ──────────────────────────────────────────────────
+    const globalHookDir = path.join(os.homedir(), '.intutic', 'hooks');
+    const hookEventsDir = path.join(workspaceRoot, '.intutic', 'events');
+    const envDir = path.join(workspaceRoot, '.intutic', 'env');
+    const openclawDir = path.join(os.homedir(), '.openclaw');
+    await Promise.all([
+        fs.mkdir(globalHookDir, { recursive: true }),
+        fs.mkdir(hookEventsDir, { recursive: true }),
+        fs.mkdir(envDir, { recursive: true }),
+        fs.mkdir(openclawDir, { recursive: true }),
+    ]);
+    // ── 2. Write Node.js hook script ──────────────────────────────────────────
+    const hookScriptPath = path.join(globalHookDir, 'openclaw-check.js');
+    const hookEventsLog = path.join(hookEventsDir, 'hook-events.jsonl');
+    const tmpScript = hookScriptPath + '.intutic-tmp';
+    await fs.writeFile(tmpScript, buildOpenclawCheckScript(hookEventsLog, workspaceId), 'utf-8');
+    await fs.rename(tmpScript, hookScriptPath);
+    await fs.chmod(hookScriptPath, 0o755);
+    log.info({ action: 'openclaw_hook_script_written', path: hookScriptPath }, 'Openclaw hook script written');
+    // ── 3. JSON5-safe merge into ~/.openclaw/openclaw.json ────────────────────
+    let existingConfig = {};
+    try {
+        const raw = await fs.readFile(OPENCLAW_CONFIG, 'utf-8');
+        existingConfig = parseJson5Like(raw);
+    }
+    catch {
+        // File doesn't exist or is unparseable — start fresh
+    }
+    const mergedConfig = mergeOpenclawConfig(existingConfig, hookScriptPath);
+    const tmpConfig = OPENCLAW_CONFIG + '.intutic-tmp';
+    await fs.writeFile(tmpConfig, JSON.stringify(mergedConfig, null, 2) + '\n', 'utf-8');
+    await fs.rename(tmpConfig, OPENCLAW_CONFIG);
+    log.info({ action: 'openclaw_config_merged', path: OPENCLAW_CONFIG }, 'Merged Intutic hook into ~/.openclaw/openclaw.json');
+    // ── 4. Write env snippet ───────────────────────────────────────────────────
+    const envSnippet = [
+        `# Intutic openclaw governance env`,
+        `INTUITIC_OPENCLAW_HOOK=~/.intutic/hooks/openclaw-check.js`,
+        `INTUITIC_OPENCLAW_CONFIG=~/.openclaw/openclaw.json`,
+        `# Validate: openclaw hooks check`,
+    ].join('\n') + '\n';
+    const envFilePath = path.join(envDir, 'openclaw.env');
+    const tmpEnv = envFilePath + '.intutic-tmp';
+    await fs.writeFile(tmpEnv, envSnippet, 'utf-8');
+    await fs.rename(tmpEnv, envFilePath);
+    log.info({ action: 'openclaw_env_written', path: envFilePath }, 'Openclaw env snippet written');
+    // ── 5. Optional validation (non-fatal) ────────────────────────────────────
+    try {
+        const { stdout, stderr } = await execAsync('openclaw hooks check', { timeout: 5000 });
+        log.info({ action: 'openclaw_hooks_check', stdout: stdout.trim(), stderr: stderr.trim() }, 'openclaw hooks check passed');
+    }
+    catch (err) {
+        // Not installed or check failed — non-fatal
+        log.debug({ action: 'openclaw_hooks_check_skipped', err }, 'openclaw hooks check skipped (binary not in PATH or check failed)');
+    }
+    void proxyUrl; // proxyUrl captured in hook script header via newIso comment
+}
+//# sourceMappingURL=openclawHooks.js.map

package/dist/harness/openclawHooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclawHooks.js","sourceRoot":"","sources":["../../src/harness/openclawHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,MAAM,GAAG,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAA;AAC/C,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;AAEjC,+CAA+C;AAC/C,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,eAAe,CAAC,CAAA;AAE7E,8DAA8D;AAC9D,MAAM,eAAe,GAAG;IACtB,uBAAuB;IACvB,gBAAgB;IAChB,yBAAyB;IACzB,iBAAiB;IACjB,uBAAuB;IACvB,oBAAoB;IACpB,8BAA8B;IAC9B,cAAc;IACd,oCAAoC;IACpC,uBAAuB;IACvB,yBAAyB;CAC1B,CAAA;AAED,gFAAgF;AAEhF,SAAS,wBAAwB,CAC/B,aAAqB,EACrB,WAAmB;IAEnB,OAAO;;;;gBAIO,MAAM,EAAE;gBACR,WAAW;;;;;;;;;;;gFAWqD,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;;;;;;;;;;;;0BAYjF,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;wBAqB1C,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4EpD,CAAA;AACD,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,SAAS,cAAc,CAAC,GAAW;IACjC,0BAA0B;IAC1B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAA;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,2CAA2C;IAC3C,IAAI,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;IAC7C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA4B,CAAA;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,sDAAsD;IACtD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAA;IACjD,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA4B,CAAA;AACxD,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAC1B,QAAiC,EACjC,cAAsB;IAEtB,MAAM,KAAK,GAAI,QAAQ,CAAC,KAA6C,IAAI,EAAE,CAAA;IAC3E,MAAM,QAAQ,GAAI,KAAK,CAAC,QAAgD,IAAI,EAAE,CAAA;IAC9E,MAAM,OAAO,GAAI,QAAQ,CAAC,OAA+C,IAAI,EAAE,CAAA;IAE/E,OAAO;QACL,GAAG,QAAQ;QACX,KAAK,EAAE;YACL,GAAG,KAAK;YACR,QAAQ,EAAE;gBACR,GAAG,QAAQ;gBACX,OAAO,EAAE;oBACP,GAAG,OAAO;oBACV,oBAAoB,EAAE;wBACpB,OAAO,EAAE,IAAI;wBACb,KAAK,EAAE,YAAY;wBACnB,OAAO,EAAE,cAAc;qBACxB;iBACF;aACF;SACF;KACF,CAAA;AACH,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,aAAqB,EACrB,QAAgB,EAChB,WAAW,GAAG,EAAE;IAEhB,8EAA8E;IAE9E,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IAClE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAA;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;IAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAA;IAExD,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC5C,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC5C,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACrC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;KAC3C,CAAC,CAAA;IAEF,6EAA6E;IAE7E,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAA;IACpE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAA;IAEnE,MAAM,SAAS,GAAG,cAAc,GAAG,cAAc,CAAA;IACjD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,wBAAwB,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAA;IAC5F,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;IAC1C,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;IAErC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,8BAA8B,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,8BAA8B,CAAC,CAAA;IAE1G,6EAA6E;IAE7E,IAAI,cAAc,GAA4B,EAAE,CAAA;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,CAAA;QACvD,cAAc,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,qDAAqD;IACvD,CAAC;IAED,MAAM,YAAY,GAAG,mBAAmB,CAAC,cAAc,EAAE,cAAc,CAAC,CAAA;IAExE,MAAM,SAAS,GAAG,eAAe,GAAG,cAAc,CAAA;IAClD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IACpF,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,CAAA;IAE3C,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,wBAAwB,EAAE,IAAI,EAAE,eAAe,EAAE,EAC3D,oDAAoD,CACrD,CAAA;IAED,8EAA8E;IAE9E,MAAM,UAAU,GAAG;QACjB,mCAAmC;QACnC,2DAA2D;QAC3D,oDAAoD;QACpD,kCAAkC;KACnC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;IAEnB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IACrD,MAAM,MAAM,GAAG,WAAW,GAAG,cAAc,CAAA;IAC3C,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IAC/C,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IAEpC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,WAAW,EAAE,EACrD,8BAA8B,CAC/B,CAAA;IAED,6EAA6E;IAE7E,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QACrF,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAChF,6BAA6B,CAC9B,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,4CAA4C;QAC5C,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,8BAA8B,EAAE,GAAG,EAAE,EAAE,mEAAmE,CAAC,CAAA;IACjI,CAAC;IAED,KAAK,QAAQ,CAAA,CAAC,6DAA6D;AAC7E,CAAC"}

package/dist/harness/openhandsHooks.d.ts

@@ -0,0 +1,24 @@
+/**
+ * openhandsHooks.ts — OpenHands .openhands/hooks.json injection
+ * and llm.base_url proxy write.
+ *
+ * OpenHands supports PreToolUse, Stop, SessionStart hooks via
+ * a JSON file at .openhands/hooks.json in the repository root.
+ * The hooks file lives within the agent's sandbox working directory,
+ * so we also register it with the drift watcher.
+ *
+ * LLD #14 — Phase 3 cross-harness defence
+ * HLD §3.14 — Three-Tier Defense Cascade
+ *
+ * @module
+ */
+/**
+ * Write .openhands/hooks.json and the pre-tool-check shell script.
+ * Also merges llm.base_url into config.toml if it exists.
+ *
+ * @param workspaceRoot - Absolute workspace root.
+ * @param proxyUrl      - Intutic proxy URL.
+ * @param workspaceId   - Workspace ID embedded in hook event payloads.
+ */
+export declare function writeOpenHandsHooks(workspaceRoot: string, proxyUrl: string, workspaceId?: string): Promise<void>;
+//# sourceMappingURL=openhandsHooks.d.ts.map

package/dist/harness/openhandsHooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openhandsHooks.d.ts","sourceRoot":"","sources":["../../src/harness/openhandsHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAoBH;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,WAAW,SAAK,GACf,OAAO,CAAC,IAAI,CAAC,CA6Gf"}