@intutic/sync-daemon 1.9.0 → 1.10.1

package/dist/harness/gooseHooks.js

@@ -19,18 +19,10 @@ import * as os from 'node:os';
 import { createLogger } from '@intutic/logger';
 import { newIso } from '@intutic/id';
 import { hardenGoosePlugin, unharden } from './gooseHardener.js';
+import { emitShellGate, SHELL_EXTRACT, SHELL_FAIL_CLOSED, REVIEW_REQUESTS_BASENAME } from './gateBody.js';
 const log = createLogger('sync-goose-hooks');
 const PLUGIN_DIR = path.join(os.homedir(), '.agents', 'plugins', 'intutic-governance');
 const GOOSE_CONFIG = path.join(os.homedir(), '.config', 'goose', 'config.yaml');
-const PROTECTED_PATHS = [
-    '.agents/plugins/intutic-governance',
-    '.intutic/hooks',
-    '.intutic/integrity.json',
-    '.claude/settings.json',
-    '.cursor/hooks.json',
-    '.cline/hooks',
-    '.openhands/hooks.json',
-];
 /**
  * Write Goose governance plugin and harden it.
  *
@@ -78,26 +70,48 @@ export async function writeGooseHooks(proxyUrl, workspaceRoot = os.homedir(), wo
 # Proxy: ${proxyUrl}
 # Generated: ${newIso()}
 set -euo pipefail
-
+${SHELL_FAIL_CLOSED}
 EVENT="\${1:-pre}"
 INPUT="\$(cat)"
-TOOL="$(echo "$INPUT" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('tool_name',''))" 2>/dev/null || true)"
-TARGET="$(echo "$INPUT" | python3 -c "import sys,json; d=json.load(sys.stdin); i=d.get('tool_input',{}); print(i.get('path',i.get('file_path','')))" 2>/dev/null || true)"
+${SHELL_EXTRACT}
 
 HOOK_EVENTS_LOG=${JSON.stringify(hookEventsLog)}
 
 # ── Runtime credentials (sourced from ~/.intutic/env/runtime.env) ────────────────────────
+# These are defaults, and they are also the only thing standing between
+# \`set -u\` and a fatal unbound-variable error: log_event reads all three, so on
+# a machine with no runtime.env to source, an unset name kills the gate before
+# it can exit 2. Spelling matters — INTUTIC_, never INTUITIC_.
 RUNTIME_ENV="$HOME/.intutic/env/runtime.env"
-INTUITIC_HOST="https://api.intutic.ai"
-INTUITIC_API_KEY=""
-INTUITIC_WORKSPACE_ID=${JSON.stringify(workspaceId)}
+INTUTIC_HOST="https://api.intutic.ai"
+INTUTIC_API_KEY=""
+INTUTIC_WORKSPACE_ID=${JSON.stringify(workspaceId)}
 [ -f "$RUNTIME_ENV" ] && source "$RUNTIME_ENV" 2>/dev/null || true
 
 log_event() {
   local verdict="\$1" tool="\$2" reason="\$3"
+  # \`tool\` and \`reason\` carry agent-controlled text — the tool name, and the
+  # target path quoted into the block reason — and both are spliced into the
+  # JSON string below. Escape first: one unescaped quote yields a line
+  # JSON.parse rejects, and drainHookEvents drops malformed lines then wipes the
+  # log on a successful drain, so the record of a block is destroyed rather than
+  # delayed. A crafted path could otherwise close the string and forge fields.
+  tool="\${tool//\\\\/\\\\\\\\}";     tool="\${tool//\\"/\\\\\\"}"
+  reason="\${reason//\\\\/\\\\\\\\}"; reason="\${reason//\\"/\\\\\\"}"
+  # Every C0 control character, not just newline and carriage return. JSON
+  # forbids all of U+0000-U+001F unescaped, so a plain TAB in a filename — no
+  # adversary required — was still enough to produce a line JSON.parse rejects.
+  # (NUL cannot appear in a bash variable, so the range starts at \\x01.)
+  tool="\${tool//[\$'\\x01'-\$'\\x1f']/ }"; reason="\${reason//[\$'\\x01'-\$'\\x1f']/ }"
+  # The workspace id is spliced into the same JSON string. It comes from
+  # runtime.env on disk rather than from the agent, so it is lower risk — but a
+  # value with a quote in it breaks every audit line the same way, and "lower
+  # risk" is not "cannot happen" for a file the operator edits by hand.
+  local ws="\${INTUTIC_WORKSPACE_ID}"
+  ws="\${ws//\\\\/\\\\\\\\}"; ws="\${ws//\\"/\\\\\\"}"; ws="\${ws//[\$'\\x01'-\$'\\x1f']/ }"
   local ts; ts="\$(date -u +%Y-%m-%dT%H:%M:%SZ)"
   local incident_id; incident_id="\$(printf '%s' "\${ts}\${tool}\${INTUTIC_WORKSPACE_ID}" | sha1sum 2>/dev/null | cut -c1-16 || echo \"\$(date +%s)\")"
-  local entry="{\"event\":\"\${verdict}\",\"toolName\":\"\${tool}\",\"reason\":\"\${reason}\",\"workspaceId\":\"\${INTUTIC_WORKSPACE_ID}\",\"harnessType\":\"goose\",\"timestamp\":\"\${ts}\",\"incidentId\":\"\${incident_id}\"}"
+  local entry="{\\"event\\":\\"\${verdict}\\",\\"toolName\\":\\"\${tool}\\",\\"reason\\":\\"\${reason}\\",\\"workspaceId\\":\\"\${ws}\\",\\"harnessType\\":\\"goose\\",\\"timestamp\\":\\"\${ts}\\",\\"incidentId\\":\\"\${incident_id}\\"}"
   # Path B: reliable file append
   printf '%s\\n' "\$entry" >> "\$HOOK_EVENTS_LOG" 2>/dev/null || true
   # Path A: fire-and-forget HTTP (non-blocking, near-real-time)
@@ -105,29 +119,12 @@ log_event() {
     curl -s -o /dev/null --max-time 3 -X POST \\
       -H "Content-Type: application/json" \\
       -H "Authorization: Bearer \$INTUTIC_API_KEY" \\
-      -d "{\"events\":[\$entry]}" \\
+      -d "{\\"events\\":[\$entry]}" \\
       "\${INTUTIC_HOST}/api/v1/hook-events" & disown 2>/dev/null || true
   fi
 }
 
-PROTECTED_PATHS=(
-  ".agents/plugins/intutic-governance"
-  ".intutic/hooks"
-  ".intutic/integrity.json"
-  ".claude/settings.json"
-  ".cursor/hooks.json"
-  ".cline/hooks"
-  ".openhands/hooks.json"
-)
-
-for p in "\${PROTECTED_PATHS[@]}"; do
-  if echo "$TARGET" | grep -qF "$p"; then
-    REASON="Attempt to modify governance-protected path \\"$TARGET\\""
-    echo "[Intutic Governance] BLOCKED: $REASON" >&2
-    log_event "tool_blocked" "\$TOOL" "\$REASON"
-    exit 2
-  fi
-done
+${emitShellGate({ harness: 'goose', reviewRequestFile: path.join(workspaceRoot, '.intutic', 'events', REVIEW_REQUESTS_BASENAME) })}
 
 log_event "tool_allowed" "\$TOOL" ""
 exit 0
@@ -143,7 +140,20 @@ exit 0
     await mergeGooseConfig(proxyUrl);
 }
 /**
- * Merge provider host URL into ~/.config/goose/config.yaml.
+ * Merge the provider host **and** the `hooks.pre_tool_use` registration into
+ * `~/.config/goose/config.yaml`.
+ *
+ * The hook registration used to live in a second module, `gooseHooksWriter.ts`,
+ * which wrote its own gate script and registered *that* one here — so goose had
+ * two co-installed gates with contradictory models: this one, which enforces
+ * locally and fails closed, and that one, which POSTed to the control plane and
+ * failed open. Which of them actually ran depended on whether goose honours the
+ * plugin `hooks.json` or this config key, and nothing in the tree established
+ * which.
+ *
+ * Absorbing the registration here settles it without needing to know: both
+ * mechanisms now name the same script. That is why the answer to "which one does
+ * goose read" stopped mattering, rather than being looked up.
  */
 async function mergeGooseConfig(proxyUrl) {
     let existing = '';
@@ -151,7 +161,9 @@ async function mergeGooseConfig(proxyUrl) {
         existing = await fs.readFile(GOOSE_CONFIG, 'utf-8');
     }
     catch {
-        existing = '';
+        // Deliberate fail-open: no config.yaml yet (first run) or it is unreadable.
+        // Fall through with `existing` at its '' initialiser so the block below
+        // writes a fresh provider stanza rather than aborting the whole sync.
     }
     // Inject or update provider.host
     // Goose config.yaml format: provider.host or OPENAI_HOST env var
@@ -166,6 +178,24 @@ async function mergeGooseConfig(proxyUrl) {
     else {
         existing += `\nprovider:\n  host: "${proxyUrl}"\n`;
     }
+    // Register the gate under `hooks.pre_tool_use`, pointing at the script this
+    // module writes.
+    const hookScript = path.join(PLUGIN_DIR, 'scripts', 'intutic-check.sh');
+    const hookLine = `  pre_tool_use: ${hookScript}`;
+    if (!(existing.includes('pre_tool_use:') && existing.includes(hookScript))) {
+        // Replace any stale pre_tool_use line rather than adding a second one — an
+        // earlier install pointed this at gooseHooksWriter's script, and two
+        // registrations under one key is how the double gate started.
+        if (/^\s*pre_tool_use:.*$/m.test(existing)) {
+            existing = existing.replace(/^\s*pre_tool_use:.*$/m, hookLine);
+        }
+        else if (/^hooks:/m.test(existing)) {
+            existing = existing.replace(/^hooks:/m, `hooks:\n${hookLine}`);
+        }
+        else {
+            existing = existing.trimEnd() + `\nhooks:\n${hookLine}\n`;
+        }
+    }
     const tmpConfig = GOOSE_CONFIG + '.intutic-tmp';
     await fs.mkdir(path.dirname(GOOSE_CONFIG), { recursive: true });
     await fs.writeFile(tmpConfig, existing, 'utf-8');

package/dist/harness/gooseHooks.js.map

@@ -1 +1 @@
-{"version":3,"file":"gooseHooks.js","sourceRoot":"","sources":["../../src/harness/gooseHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAEhE,MAAM,GAAG,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAA;AAE5C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAA;AACtF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;AAE/E,MAAM,eAAe,GAAG;IACtB,oCAAoC;IACpC,gBAAgB;IAChB,yBAAyB;IACzB,uBAAuB;IACvB,oBAAoB;IACpB,cAAc;IACd,uBAAuB;CACxB,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,aAAa,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,GAAG,EAAE;IACpG,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IACnD,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7C,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE/C,uEAAuE;IACvE,MAAM,WAAW,GAAG;QAClB,QAAQ,EAAE,0DAA0D;QACpE,SAAS,EAAE,MAAM,EAAE;QACnB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE;YACL,UAAU,EAAE;gBACV,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC;gBAClD,UAAU,EAAE,IAAI;aACjB;YACD,WAAW,EAAE;gBACX,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,+BAA+B,CAAC;gBAC/D,UAAU,EAAE,KAAK;aAClB;SACF;KACF,CAAA;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;IAEvD,yEAAyE;IACzE,MAAM,QAAQ,CAAC,aAAa,CAAC,CAAA;IAE7B,MAAM,QAAQ,GAAG,aAAa,GAAG,cAAc,CAAA;IAC/C,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IAClF,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;IAExC,wEAAwE;IACxE,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAA;IACjE,MAAM,QAAQ,CAAC,eAAe,CAAC,CAAA;IAE/B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAA;IACzF,2BAA2B;IAC3B,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEnF,MAAM,WAAW,GAAG;;;WAGX,QAAQ;eACJ,MAAM,EAAE;;;;;;;;kBAQL,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;;;;;wBAMvB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyClD,CAAA;IAEC,MAAM,SAAS,GAAG,eAAe,GAAG,cAAc,CAAA;IAClD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;IACnD,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,CAAA;IAC3C,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAA;IAEtC,sCAAsC;IACtC,MAAM,iBAAiB,CAAC,UAAU,CAAC,CAAA;IAEnC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,sBAAsB,EAAE,SAAS,EAAE,UAAU,EAAE,EACzD,8CAA8C,CAC/C,CAAA;IAED,wEAAwE;IACxE,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAA;AAClC,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IAC9C,IAAI,QAAQ,GAAG,EAAE,CAAA;IACjB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,EAAE,CAAA;IACf,CAAC;IAED,iCAAiC;IACjC,iEAAiE;IACjE,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,YAAY,QAAQ,GAAG,CAAC,CAAA;QACzE,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,uBAAuB,QAAQ,GAAG,CAAC,CAAA;QAChF,CAAC;IACH,CAAC;SAAM,CAAC;QACN,QAAQ,IAAI,yBAAyB,QAAQ,KAAK,CAAA;IACpD,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,GAAG,cAAc,CAAA;IAC/C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/D,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;IAChD,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;IAExC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,2CAA2C,CAAC,CAAA;AAC/G,CAAC"}
+{"version":3,"file":"gooseHooks.js","sourceRoot":"","sources":["../../src/harness/gooseHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAChE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAA;AAEzG,MAAM,GAAG,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAA;AAE5C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAA;AACtF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;AAE/E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,aAAa,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,GAAG,EAAE;IACpG,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IACnD,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7C,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE/C,uEAAuE;IACvE,MAAM,WAAW,GAAG;QAClB,QAAQ,EAAE,0DAA0D;QACpE,SAAS,EAAE,MAAM,EAAE;QACnB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE;YACL,UAAU,EAAE;gBACV,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC;gBAClD,UAAU,EAAE,IAAI;aACjB;YACD,WAAW,EAAE;gBACX,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,+BAA+B,CAAC;gBAC/D,UAAU,EAAE,KAAK;aAClB;SACF;KACF,CAAA;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;IAEvD,yEAAyE;IACzE,MAAM,QAAQ,CAAC,aAAa,CAAC,CAAA;IAE7B,MAAM,QAAQ,GAAG,aAAa,GAAG,cAAc,CAAA;IAC/C,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IAClF,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;IAExC,wEAAwE;IACxE,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAA;IACjE,MAAM,QAAQ,CAAC,eAAe,CAAC,CAAA;IAE/B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAA;IACzF,2BAA2B;IAC3B,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEnF,MAAM,WAAW,GAAG;;;WAGX,QAAQ;eACJ,MAAM,EAAE;;EAErB,iBAAiB;;;EAGjB,aAAa;;kBAEG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;;;;;;;;;uBAUxB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuChD,aAAa,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,wBAAwB,CAAC,EAAE,CAAC;;;;CAIjI,CAAA;IAEC,MAAM,SAAS,GAAG,eAAe,GAAG,cAAc,CAAA;IAClD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;IACnD,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,CAAA;IAC3C,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAA;IAEtC,sCAAsC;IACtC,MAAM,iBAAiB,CAAC,UAAU,CAAC,CAAA;IAEnC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,sBAAsB,EAAE,SAAS,EAAE,UAAU,EAAE,EACzD,8CAA8C,CAC/C,CAAA;IAED,wEAAwE;IACxE,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAA;AAClC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IAC9C,IAAI,QAAQ,GAAG,EAAE,CAAA;IACjB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,wEAAwE;QACxE,sEAAsE;IACxE,CAAC;IAED,iCAAiC;IACjC,iEAAiE;IACjE,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,YAAY,QAAQ,GAAG,CAAC,CAAA;QACzE,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,uBAAuB,QAAQ,GAAG,CAAC,CAAA;QAChF,CAAC;IACH,CAAC;SAAM,CAAC;QACN,QAAQ,IAAI,yBAAyB,QAAQ,KAAK,CAAA;IACpD,CAAC;IAED,4EAA4E;IAC5E,iBAAiB;IACjB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAA;IACvE,MAAM,QAAQ,GAAG,mBAAmB,UAAU,EAAE,CAAA;IAChD,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAC3E,2EAA2E;QAC3E,qEAAqE;QACrE,8DAA8D;QAC9D,IAAI,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3C,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,uBAAuB,EAAE,QAAQ,CAAC,CAAA;QAChE,CAAC;aAAM,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,QAAQ,EAAE,CAAC,CAAA;QAChE,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,aAAa,QAAQ,IAAI,CAAA;QAC3D,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,GAAG,cAAc,CAAA;IAC/C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/D,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;IAChD,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;IAExC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,2CAA2C,CAAC,CAAA;AAC/G,CAAC"}

package/dist/harness/grokHooks.d.ts

@@ -0,0 +1,77 @@
+/**
+ * grokHooks.ts — xAI Grok Build (`grok`, GA 2026-05, open-sourced 2026-07-15)
+ * governance hook injection.
+ *
+ * Writes the Intutic PreToolUse gate script and registers it at project and
+ * user level:
+ *   - `<workspaceRoot>/.grok/hooks/intutic-governance.json`
+ *   - `~/.grok/hooks/intutic-governance.json`
+ *
+ * Also merges the Intutic proxy `base_url` into `config.toml`'s `[model.*]`
+ * tables at both `<workspaceRoot>/.grok/config.toml` and
+ * `~/.grok/config.toml` — the LLM-egress half of coverage, same split every
+ * other harness in this file uses (the gate refuses tool calls; the config
+ * merge routes the model traffic itself).
+ *
+ * # Blocking contract — CONFIRMED, not assumed
+ *
+ * Grok Build's `PreToolUse` hook carries no `matcher` (it fires for every
+ * tool call), has a default `timeout` of 5s (ample for a local
+ * policy-snapshot evaluation), and — this is the part that is independently
+ * confirmed, unlike Muse Code's — signals a block by writing
+ * `{"decision":"deny","reason":"..."}` as JSON on **stdout** and exiting 0.
+ * That is a *different* stdout shape from Cline/Roo Code's `{"cancel":true}`
+ * — Grok Build does not recognise `cancel`, and Cline/Roo Code do not
+ * recognise `decision` — so this writer uses its own `BlockContract` value,
+ * `'stdout-decision-deny'` (see gateBody.ts's module doc for why the two
+ * stdout shapes are not folded into one contract), rather than reusing
+ * `'stdout-cancel'` and silently going inert.
+ *
+ * # Double-gating with the Claude Code / Cursor compat paths
+ *
+ * Grok Build ALSO natively reads and executes `.claude/settings.json` hooks
+ * and `.cursor/hooks.json` hooks if present (a compatibility feature) — so
+ * if a workspace already has Intutic's Claude Code or Cursor gate installed,
+ * BOTH that gate and this native one fire for the same Grok Build tool call.
+ * This is the same "both layers firing is expected, not a bug" posture this
+ * codebase already documents for the mcp-proxy + PreToolUse gate combination
+ * (see apps/docs/guide/mcp-governance.md, "Both layers firing on the same
+ * blocked call is expected, not a bug"): a block wins if EITHER gate blocks,
+ * neither gate knows about the other's decision, and an operator may see a
+ * `tool_blocked` event recorded twice for what was, from the developer's
+ * point of view, one refused action. That is redundancy, not a discrepancy
+ * to reconcile — see `grokHooks.test.ts` for a test pinning that a
+ * double-fired block does not corrupt the audit log or the exit/stdout
+ * contract of either gate.
+ *
+ * # `[model.*]` table naming — CONFIRMED against the real open-sourced parser
+ *
+ * The shape is `[model."<id>"]` with a per-model `base_url` (and many other
+ * override fields — `xai_grok_shell::agent::config::ConfigModelOverride`),
+ * keyed by model id and consulted only for the model whose id equals `<id>`;
+ * it does not fall back to any other key. `xai-grok-models/default_models.json`
+ * (embedded at compile time) pins the operative default id, CONFIRMED live by
+ * cloning `github.com/xai-org/grok-build` (open-sourced 2026-07-15) and
+ * reading it directly: `"default": "grok-4.6"` — NOT the literal string
+ * `"default"`. This writer therefore overrides `base_url` on every EXISTING
+ * `[model.*]` table (never invents one if the user already configured
+ * models), and — only when no `[model.*]` table exists at all — seeds
+ * `[model."grok-4.6"]`, the confirmed compiled-in default id, not a guess.
+ * A future Grok Build release that changes its compiled default would make
+ * this seeded table inert again until re-synced against a newer clone —
+ * the same residual risk `windsurfHooks.ts`'s "confirmed, not evergreen"
+ * caveat already documents for a versioned upstream default.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+/**
+ * Write Grok Build hooks at project and user level, and merge the Intutic
+ * proxy into `config.toml`'s `[model.*]` tables at both levels.
+ *
+ * @param workspaceRoot - Absolute workspace root.
+ * @param proxyUrl      - Intutic proxy URL (also merged into config.toml).
+ * @param workspaceId   - Workspace ID embedded in hook event payloads.
+ */
+export declare function writeGrokHooks(workspaceRoot: string, proxyUrl: string, workspaceId?: string): Promise<void>;
+//# sourceMappingURL=grokHooks.d.ts.map

package/dist/harness/grokHooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grokHooks.d.ts","sourceRoot":"","sources":["../../src/harness/grokHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkEG;AA+RH;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,WAAW,SAAK,GACf,OAAO,CAAC,IAAI,CAAC,CA0Bf"}

package/dist/harness/grokHooks.js

@@ -0,0 +1,350 @@
+/**
+ * grokHooks.ts — xAI Grok Build (`grok`, GA 2026-05, open-sourced 2026-07-15)
+ * governance hook injection.
+ *
+ * Writes the Intutic PreToolUse gate script and registers it at project and
+ * user level:
+ *   - `<workspaceRoot>/.grok/hooks/intutic-governance.json`
+ *   - `~/.grok/hooks/intutic-governance.json`
+ *
+ * Also merges the Intutic proxy `base_url` into `config.toml`'s `[model.*]`
+ * tables at both `<workspaceRoot>/.grok/config.toml` and
+ * `~/.grok/config.toml` — the LLM-egress half of coverage, same split every
+ * other harness in this file uses (the gate refuses tool calls; the config
+ * merge routes the model traffic itself).
+ *
+ * # Blocking contract — CONFIRMED, not assumed
+ *
+ * Grok Build's `PreToolUse` hook carries no `matcher` (it fires for every
+ * tool call), has a default `timeout` of 5s (ample for a local
+ * policy-snapshot evaluation), and — this is the part that is independently
+ * confirmed, unlike Muse Code's — signals a block by writing
+ * `{"decision":"deny","reason":"..."}` as JSON on **stdout** and exiting 0.
+ * That is a *different* stdout shape from Cline/Roo Code's `{"cancel":true}`
+ * — Grok Build does not recognise `cancel`, and Cline/Roo Code do not
+ * recognise `decision` — so this writer uses its own `BlockContract` value,
+ * `'stdout-decision-deny'` (see gateBody.ts's module doc for why the two
+ * stdout shapes are not folded into one contract), rather than reusing
+ * `'stdout-cancel'` and silently going inert.
+ *
+ * # Double-gating with the Claude Code / Cursor compat paths
+ *
+ * Grok Build ALSO natively reads and executes `.claude/settings.json` hooks
+ * and `.cursor/hooks.json` hooks if present (a compatibility feature) — so
+ * if a workspace already has Intutic's Claude Code or Cursor gate installed,
+ * BOTH that gate and this native one fire for the same Grok Build tool call.
+ * This is the same "both layers firing is expected, not a bug" posture this
+ * codebase already documents for the mcp-proxy + PreToolUse gate combination
+ * (see apps/docs/guide/mcp-governance.md, "Both layers firing on the same
+ * blocked call is expected, not a bug"): a block wins if EITHER gate blocks,
+ * neither gate knows about the other's decision, and an operator may see a
+ * `tool_blocked` event recorded twice for what was, from the developer's
+ * point of view, one refused action. That is redundancy, not a discrepancy
+ * to reconcile — see `grokHooks.test.ts` for a test pinning that a
+ * double-fired block does not corrupt the audit log or the exit/stdout
+ * contract of either gate.
+ *
+ * # `[model.*]` table naming — CONFIRMED against the real open-sourced parser
+ *
+ * The shape is `[model."<id>"]` with a per-model `base_url` (and many other
+ * override fields — `xai_grok_shell::agent::config::ConfigModelOverride`),
+ * keyed by model id and consulted only for the model whose id equals `<id>`;
+ * it does not fall back to any other key. `xai-grok-models/default_models.json`
+ * (embedded at compile time) pins the operative default id, CONFIRMED live by
+ * cloning `github.com/xai-org/grok-build` (open-sourced 2026-07-15) and
+ * reading it directly: `"default": "grok-4.6"` — NOT the literal string
+ * `"default"`. This writer therefore overrides `base_url` on every EXISTING
+ * `[model.*]` table (never invents one if the user already configured
+ * models), and — only when no `[model.*]` table exists at all — seeds
+ * `[model."grok-4.6"]`, the confirmed compiled-in default id, not a guess.
+ * A future Grok Build release that changes its compiled default would make
+ * this seeded table inert again until re-synced against a newer clone —
+ * the same residual risk `windsurfHooks.ts`'s "confirmed, not evergreen"
+ * caveat already documents for a versioned upstream default.
+ *
+ * HLD §3.14 — Harness Onboarding Matrix
+ * @module
+ */
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import * as os from 'node:os';
+import { parse as parseToml, stringify as stringifyToml } from 'smol-toml';
+import { createLogger } from '@intutic/logger';
+import { newIso } from '@intutic/id';
+import { emitJsGate, emitJsFailClosedPrelude } from './gateBody.js';
+const log = createLogger('sync-grok-hooks');
+const GROK_USER_DIR = path.join(os.homedir(), '.grok');
+/** The single self-contained hook file this writer owns. Grok Build's hook
+ *  directory is a glob of independent files (`.grok/hooks/*.json`), unlike
+ *  Codex/Windsurf's one shared `hooks.json` — so, unlike those writers, this
+ *  one never needs to merge into or preserve anything else in the
+ *  directory: dropping its own uniquely-named file cannot clobber a hook the
+ *  user registered themselves. */
+const HOOK_FILENAME = 'intutic-governance.json';
+/**
+ * Builds the per-file registration this writer drops at
+ * `.grok/hooks/intutic-governance.json` (project) and `~/.grok/hooks/intutic-governance.json`
+ * (user).
+ *
+ * **Shape CONFIRMED against the real, now-open-source parser** (xAI open-sourced
+ * `grok-build` 2026-07-15 — `github.com/xai-org/grok-build`, `crates/codegen/xai-grok-hooks`):
+ * `xai_grok_hooks::config::parse_hook_file` (called identically for both a
+ * settings-file source and a `.grok/hooks/*.json` directory entry — the SAME
+ * function, see `discovery.rs`'s `load_hooks_from_settings_file`/
+ * `load_hooks_from_directory`) requires a TOP-LEVEL `"hooks"` key; a file
+ * without one returns an EMPTY spec set, silently — no error, no warning. The
+ * value under `"hooks"` is keyed by event name to an ARRAY of `MatcherGroup`s
+ * (`{matcher?: string, hooks: [{type, command, timeout?, ...}]}`), each entry
+ * of which becomes one `HookSpec` — the exact shape Claude Code's own
+ * `settings.json` `hooks` block uses, not the flat `{event, command, timeout}`
+ * record this writer emitted before this fix (which the real parser silently
+ * ignored — ZERO hooks ever registered, confirmed by having no top-level
+ * `"hooks"` key at all). No `matcher` field on the group means "fires for
+ * every tool call" (`MatcherGroup.matcher: Option<String>`, `#[serde(default)]`).
+ */
+function buildHookRegistration(hookScriptPath) {
+    return {
+        _comment: 'Intutic governance hook — auto-generated. DO NOT EDIT.',
+        _lastSync: newIso(),
+        hooks: {
+            // No matcher — CONFIRMED to apply to every tool call.
+            PreToolUse: [
+                {
+                    hooks: [
+                        {
+                            type: 'command',
+                            command: `node "${hookScriptPath}"`,
+                            // Grok Build's documented default; stated explicitly rather than
+                            // left to fall back, since a local policy-snapshot evaluation is
+                            // cheap but a future default change upstream should not silently
+                            // starve this hook.
+                            timeout: 5,
+                        },
+                    ],
+                },
+            ],
+        },
+    };
+}
+function buildHookScript(proxyUrl, workspaceRoot, workspaceId) {
+    const hookEventsLog = path.join(workspaceRoot, '.intutic', 'events', 'hook-events.jsonl');
+    return `#!/usr/bin/env node
+/**
+ * Intutic Grok Build governance gate.
+ * Auto-generated by intutic sync-daemon. DO NOT EDIT.
+ * Proxy: ${proxyUrl}
+ * Generated: ${newIso()}
+ */
+${emitJsFailClosedPrelude({ harness: 'grok', contract: 'stdout-decision-deny' })}
+const fs = require('fs');
+const crypto = require('crypto');
+const https = require('https');
+
+// Runtime credentials
+const _runtimeEnvPath = require('path').join(require('os').homedir(), '.intutic', 'env', 'runtime.env');
+let _intuticHost = 'https://api.intutic.ai', _intuticKey = '', _intuticWsId = ${JSON.stringify(workspaceId)};
+try {
+  fs.readFileSync(_runtimeEnvPath, 'utf-8').split('\\n').forEach(line => {
+    const eq = line.indexOf('='); if (eq < 0) return;
+    const k = line.slice(0, eq).trim(), v = line.slice(eq + 1).trim();
+    if (k === 'INTUTIC_HOST' && v) _intuticHost = v;
+    if (k === 'INTUTIC_API_KEY' && v) _intuticKey = v;
+    if (k === 'INTUTIC_WORKSPACE_ID' && v) _intuticWsId = v;
+  });
+} catch {}
+
+${emitJsGate({ harness: 'grok', contract: 'stdout-decision-deny' })}
+
+let _intuticSessionId = '';
+function logEvent(verdict, toolName, reason) {
+  try {
+    const ts = new Date().toISOString();
+    const incidentId = crypto.createHash('sha1').update(ts + toolName + _intuticWsId).digest('hex').slice(0, 16);
+    const entry = JSON.stringify({
+      // Passed through, not collapsed to two values: the advisory tier emits
+      // 'tool_flagged', and a ternary here silently recorded it as an allow.
+      event: verdict,
+      toolName, reason: reason || '',
+      workspaceId: _intuticWsId,
+      harnessType: 'grok',
+      timestamp: ts,
+      incidentId,
+      ...(_intuticSessionId ? { sessionId: _intuticSessionId } : {}),
+    }) + '\\n';
+    fs.appendFileSync(${JSON.stringify(hookEventsLog)}, entry, { flag: 'a' });
+    if (_intuticKey) {
+      try {
+        const body = JSON.stringify({ events: [JSON.parse(entry)] });
+        const urlObj = new URL('/api/v1/hook-events', _intuticHost);
+        const mod = urlObj.protocol === 'https:' ? https : require('http');
+        const req = mod.request({ hostname: urlObj.hostname, port: urlObj.port || 443, path: urlObj.pathname, method: 'POST', headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(body), 'Authorization': 'Bearer ' + _intuticKey } });
+        req.on('error', () => { /* fire-and-forget */ });
+        req.write(body); req.end();
+      } catch { /* never crash the hook */ }
+    }
+  } catch { /* never crash the hook */ }
+}
+
+let raw = '';
+process.stdin.on('data', (c) => { raw += c; });
+process.stdin.on('end', () => {
+  try {
+    const ctx = JSON.parse(raw);
+    _intuticSessionId = ctx.session_id || ctx.sessionId || '';
+    intuticGuardEnvelope(ctx, ['tool_name', 'toolName', 'tool_input', 'toolInput'], logEvent);
+    const input = ctx.tool_input || ctx.toolInput || {};
+    const toolName = ctx.tool_name || ctx.toolName || 'tool';
+
+    const targetPath = input.path || input.file_path || input.filePath || input.file ||
+      input.target || input.notebook_path || '';
+    const command = input.command || input.cmd || input.script || '';
+
+    intuticGate(toolName, targetPath, command, logEvent, _intuticWsId, input);
+
+    // Allow — no stdout object at all, which Grok Build reads as "not denied".
+    logEvent('tool_allowed', toolName, '');
+    process.exit(0);
+  } catch (err) {
+    // Fail CLOSED — the stdout-decision-deny contract, even on a crash inside
+    // this handler (the module-level prelude above covers crashes outside it).
+    const errMsg = String(err);
+    process.stderr.write('[Intutic Governance] Hook error (fail-closed): ' + errMsg + '\\n');
+    logEvent('tool_blocked', 'unknown', errMsg);
+    process.stdout.write(JSON.stringify({ decision: 'deny', reason: '[Intutic Governance] Hook error (fail-closed): ' + errMsg }) + '\\n');
+    process.exit(0);
+  }
+});
+`;
+}
+async function atomicWriteJson(filePath, data) {
+    const tmp = filePath + '.intutic-tmp';
+    await fs.mkdir(path.dirname(filePath), { recursive: true });
+    await fs.writeFile(tmp, JSON.stringify(data, null, 2) + '\n', 'utf-8');
+    await fs.rename(tmp, filePath);
+}
+/**
+ * Grok Build's compiled-in default model id — CONFIRMED live (2026-08-20)
+ * against `github.com/xai-org/grok-build`'s `crates/codegen/xai-grok-models/default_models.json`
+ * `"default"` key, NOT a guess. See this module's `[model.*]` doc comment.
+ * A future upstream release may change this; re-verify against a fresh
+ * clone if this writer's seeded table stops being honoured.
+ */
+const GROK_DEFAULT_MODEL_ID = 'grok-4.6';
+/**
+ * The pre-parser fallback: append a `[model."<default id>"]` block only,
+ * never touching (or even parsing) anything else in the file — mirroring
+ * `injectGooseAppendOnly`'s reasoning exactly: a parser that cannot safely
+ * represent a malformed file cannot safely round-trip it either, so the safe
+ * degrade is "never touch anything but the block we control".
+ */
+async function mergeGrokConfigTomlAppendOnly(configPath, existingRaw, proxyUrl) {
+    let text = existingRaw;
+    const tableHeader = `[model."${GROK_DEFAULT_MODEL_ID}"]`;
+    if (!text.includes(tableHeader) && !text.includes(`[model.${GROK_DEFAULT_MODEL_ID}]`)) {
+        text = text.trimEnd() + `\n\n${tableHeader}\nbase_url = ${JSON.stringify(proxyUrl)}\n`;
+    }
+    if (text === existingRaw)
+        return;
+    await fs.mkdir(path.dirname(configPath), { recursive: true });
+    const tmp = configPath + '.intutic-tmp';
+    await fs.writeFile(tmp, text, 'utf-8');
+    await fs.rename(tmp, configPath);
+    log.info({ action: 'grok_config_written', path: configPath, mode: 'append_only_fallback' }, 'Grok config.toml updated (append-only fallback — did not parse as TOML)');
+}
+/**
+ * Structurally merges the Intutic proxy `base_url` into every `[model.*]`
+ * table in `config.toml`, via `smol-toml` — the same "parse structurally,
+ * write-if-changed, fall back to append-only on a parse failure" shape
+ * `injectGoose` established for YAML, applied to TOML since no TOML-parsing
+ * dependency existed anywhere in this monorepo before this writer (checked:
+ * `openhandsHooks.ts`'s own `config.toml` edits are regex text-surgery, not
+ * a real parse — the OpenHands precedent that predates this one).
+ *
+ * Never invents a model id if the user already configured one or more —
+ * only overrides `base_url` on each existing `[model.*]` table. Only when
+ * NO `[model.*]` table exists at all does it seed a `[model."<default id>"]`
+ * table (`GROK_DEFAULT_MODEL_ID` below) — see this module's doc comment for
+ * why that id is CONFIRMED against the real open-sourced default, not a guess.
+ */
+async function mergeGrokConfigToml(configPath, proxyUrl) {
+    let existing = '';
+    try {
+        existing = await fs.readFile(configPath, 'utf-8');
+    }
+    catch {
+        // Deliberate fail-open: no config.toml yet (first run) or unreadable.
+        // Falls through with `existing` at '' so a fresh file is written below.
+    }
+    let doc;
+    try {
+        doc = existing.trim() ? parseToml(existing) : {};
+    }
+    catch (err) {
+        log.warn({ action: 'grok_toml_unparseable', path: configPath, err: err.message }, 'Grok config.toml did not parse as TOML — falling back to append-only text injection');
+        await mergeGrokConfigTomlAppendOnly(configPath, existing, proxyUrl);
+        return;
+    }
+    const model = doc.model && typeof doc.model === 'object' ? doc.model : {};
+    const modelNames = Object.keys(model);
+    let changed = false;
+    if (modelNames.length === 0) {
+        // No [model.*] table exists yet — GROK_DEFAULT_MODEL_ID is CONFIRMED
+        // against the real open-sourced compiled default (see module doc), not
+        // a guess.
+        model[GROK_DEFAULT_MODEL_ID] = { ...(model[GROK_DEFAULT_MODEL_ID] ?? {}), base_url: proxyUrl };
+        changed = true;
+    }
+    else {
+        for (const name of modelNames) {
+            const entry = model[name] && typeof model[name] === 'object' ? model[name] : {};
+            if (entry.base_url !== proxyUrl) {
+                model[name] = { ...entry, base_url: proxyUrl };
+                changed = true;
+            }
+        }
+    }
+    if (!changed) {
+        // Already present and unchanged — write-if-changed, same reasoning
+        // mcpAutoWrite.ts's writeJsonFile/injectGoose document: this runs every
+        // sync cycle, so a no-op merge must not churn the file's mtime.
+        return;
+    }
+    doc.model = model;
+    await fs.mkdir(path.dirname(configPath), { recursive: true });
+    const tmp = configPath + '.intutic-tmp';
+    await fs.writeFile(tmp, stringifyToml(doc), 'utf-8');
+    await fs.rename(tmp, configPath);
+    log.info({ action: 'grok_config_written', path: configPath, mode: 'toml' }, 'Grok config.toml updated (structural TOML edit)');
+}
+// ─── Public API ─────────────────────────────────────────────────────────
+/**
+ * Write Grok Build hooks at project and user level, and merge the Intutic
+ * proxy into `config.toml`'s `[model.*]` tables at both levels.
+ *
+ * @param workspaceRoot - Absolute workspace root.
+ * @param proxyUrl      - Intutic proxy URL (also merged into config.toml).
+ * @param workspaceId   - Workspace ID embedded in hook event payloads.
+ */
+export async function writeGrokHooks(workspaceRoot, proxyUrl, workspaceId = '') {
+    const hookScriptDir = path.join(workspaceRoot, '.intutic', 'hooks');
+    await fs.mkdir(hookScriptDir, { recursive: true });
+    await fs.mkdir(path.join(workspaceRoot, '.intutic', 'events'), { recursive: true });
+    const hookScriptPath = path.join(hookScriptDir, 'grok-check.js');
+    const tmpScript = hookScriptPath + '.intutic-tmp';
+    await fs.writeFile(tmpScript, buildHookScript(proxyUrl, workspaceRoot, workspaceId), 'utf-8');
+    await fs.rename(tmpScript, hookScriptPath);
+    await fs.chmod(hookScriptPath, 0o755);
+    const registration = buildHookRegistration(hookScriptPath);
+    // 1. Project-level: <root>/.grok/hooks/intutic-governance.json
+    const projectHooksDir = path.join(workspaceRoot, '.grok', 'hooks');
+    await atomicWriteJson(path.join(projectHooksDir, HOOK_FILENAME), registration);
+    log.info({ action: 'grok_hooks_written', level: 'project', path: projectHooksDir }, 'Grok project-level hooks written');
+    // 2. User-level: ~/.grok/hooks/intutic-governance.json
+    const userHooksDir = path.join(GROK_USER_DIR, 'hooks');
+    await atomicWriteJson(path.join(userHooksDir, HOOK_FILENAME), registration);
+    log.info({ action: 'grok_hooks_written', level: 'user', path: userHooksDir }, 'Grok user-level hooks written');
+    // 3. config.toml model base_url — project and user level.
+    await mergeGrokConfigToml(path.join(workspaceRoot, '.grok', 'config.toml'), proxyUrl);
+    await mergeGrokConfigToml(path.join(GROK_USER_DIR, 'config.toml'), proxyUrl);
+}
+//# sourceMappingURL=grokHooks.js.map

package/dist/harness/grokHooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grokHooks.js","sourceRoot":"","sources":["../../src/harness/grokHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkEG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,WAAW,CAAA;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AAEnE,MAAM,GAAG,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAA;AAE3C,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAA;AAEtD;;;;;kCAKkC;AAClC,MAAM,aAAa,GAAG,yBAAyB,CAAA;AAE/C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAS,qBAAqB,CAAC,cAAsB;IACnD,OAAO;QACL,QAAQ,EAAE,wDAAwD;QAClE,SAAS,EAAE,MAAM,EAAE;QACnB,KAAK,EAAE;YACL,sDAAsD;YACtD,UAAU,EAAE;gBACV;oBACE,KAAK,EAAE;wBACL;4BACE,IAAI,EAAE,SAAS;4BACf,OAAO,EAAE,SAAS,cAAc,GAAG;4BACnC,iEAAiE;4BACjE,iEAAiE;4BACjE,iEAAiE;4BACjE,oBAAoB;4BACpB,OAAO,EAAE,CAAC;yBACX;qBACF;iBACF;aACF;SACF;KACF,CAAA;AACH,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,aAAqB,EAAE,WAAmB;IACnF,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAA;IACzF,OAAO;;;;YAIG,QAAQ;gBACJ,MAAM,EAAE;;EAEtB,uBAAuB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,sBAAsB,EAAE,CAAC;;;;;;;gFAOA,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;;;;;;;;;;;EAWzG,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,sBAAsB,EAAE,CAAC;;;;;;;;;;;;;;;;;;wBAkB3C,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2CpD,CAAA;AACD,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,IAAa;IAC5D,MAAM,GAAG,GAAG,QAAQ,GAAG,cAAc,CAAA;IACrC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3D,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IACtE,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;AAChC,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,qBAAqB,GAAG,UAAU,CAAA;AAExC;;;;;;GAMG;AACH,KAAK,UAAU,6BAA6B,CAC1C,UAAkB,EAClB,WAAmB,EACnB,QAAgB;IAEhB,IAAI,IAAI,GAAG,WAAW,CAAA;IACtB,MAAM,WAAW,GAAG,WAAW,qBAAqB,IAAI,CAAA;IACxD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,qBAAqB,GAAG,CAAC,EAAE,CAAC;QACtF,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,OAAO,WAAW,gBAAgB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAA;IACxF,CAAC;IACD,IAAI,IAAI,KAAK,WAAW;QAAE,OAAM;IAEhC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7D,MAAM,GAAG,GAAG,UAAU,GAAG,cAAc,CAAA;IACvC,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;IACtC,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;IAChC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,qBAAqB,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,sBAAsB,EAAE,EACjF,yEAAyE,CAC1E,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,mBAAmB,CAAC,UAAkB,EAAE,QAAgB;IACrE,IAAI,QAAQ,GAAG,EAAE,CAAA;IACjB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,wEAAwE;IAC1E,CAAC;IAED,IAAI,GAAgB,CAAA;IACpB,IAAI,CAAC;QACH,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAE,SAAS,CAAC,QAAQ,CAAiB,CAAC,CAAC,CAAC,EAAE,CAAA;IACnE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,uBAAuB,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,EAClF,qFAAqF,CACtF,CAAA;QACD,MAAM,6BAA6B,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAA;QACnE,OAAM;IACR,CAAC;IAED,MAAM,KAAK,GACT,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;IAC7D,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACrC,IAAI,OAAO,GAAG,KAAK,CAAA;IAEnB,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,qEAAqE;QACrE,uEAAuE;QACvE,WAAW;QACX,KAAK,CAAC,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAA;QAC9F,OAAO,GAAG,IAAI,CAAA;IAChB,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YAC/E,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAChC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAA;gBAC9C,OAAO,GAAG,IAAI,CAAA;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,mEAAmE;QACnE,wEAAwE;QACxE,gEAAgE;QAChE,OAAM;IACR,CAAC;IAED,GAAG,CAAC,KAAK,GAAG,KAAK,CAAA;IACjB,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7D,MAAM,GAAG,GAAG,UAAU,GAAG,cAAc,CAAA;IACvC,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAA;IACpD,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;IAChC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,iDAAiD,CAAC,CAAA;AAChI,CAAC;AAED,2EAA2E;AAE3E;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,aAAqB,EACrB,QAAgB,EAChB,WAAW,GAAG,EAAE;IAEhB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IACnE,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAClD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEnF,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,CAAA;IAChE,MAAM,SAAS,GAAG,cAAc,GAAG,cAAc,CAAA;IACjD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAA;IAC7F,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;IAC1C,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;IAErC,MAAM,YAAY,GAAG,qBAAqB,CAAC,cAAc,CAAC,CAAA;IAE1D,+DAA+D;IAC/D,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IAClE,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,EAAE,YAAY,CAAC,CAAA;IAC9E,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,kCAAkC,CAAC,CAAA;IAEvH,uDAAuD;IACvD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAA;IACtD,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,EAAE,YAAY,CAAC,CAAA;IAC3E,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,+BAA+B,CAAC,CAAA;IAE9G,0DAA0D;IAC1D,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,QAAQ,CAAC,CAAA;IACrF,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,EAAE,QAAQ,CAAC,CAAA;AAC9E,CAAC"}

package/dist/harness/hermesHooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hermesHooks.d.ts","sourceRoot":"","sources":["../../src/harness/hermesHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAiMH;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,WAAW,SAAK,GACf,OAAO,CAAC,IAAI,CAAC,CAiEf"}
+{"version":3,"file":"hermesHooks.d.ts","sourceRoot":"","sources":["../../src/harness/hermesHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAmKH;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,WAAW,SAAK,GACf,OAAO,CAAC,IAAI,CAAC,CAiEf"}