@intutic/sync-daemon 2.0.0 → 2.1.0

package/dist/harness/cursorHooks.js

@@ -1,13 +1,23 @@
 /**
- * cursorHooks.ts — Cursor beforeShellExecution/beforeMCPExecution hook injection.
+ * cursorHooks.ts — Cursor hook injection.
  *
- * Writes hooks.json at THREE levels per enterprise-readiness requirement:
- *   1. Project-level:  <workspaceRoot>/.cursor/hooks.json
- *   2. User-level:     ~/.cursor/hooks.json
- *   3. System-level:   /etc/cursor/hooks.json (Linux) — written only by system administrators
+ * Registers the gate in Cursor's hooks.json (schema per cursor.com/docs/agent/
+ * hooks: `{version: 1, hooks: {<event>: [{command, matcher?, failClosed?}]}}`)
+ * for three events:
+ *   - `beforeShellExecution` — every shell command;
+ *   - `beforeMCPExecution`   — every MCP tool call;
+ *   - `preToolUse` matching `Write|Delete` — file writes and deletions, which
+ *     have no dedicated before-hook (`afterFileEdit` runs too late to refuse).
  *
- * All three levels use failClosed: true so that if the governance script
- * fails or is missing the tool call is blocked, not allowed.
+ * The gate refuses with exit code 2 and allows by printing
+ * `{"permission":"allow"}`: with `failClosed: true` Cursor blocks on a hook
+ * that crashes, times out or prints nothing, so an allow must be explicit.
+ *
+ * Levels: project (`<workspaceRoot>/.cursor/hooks.json`) and user
+ * (`~/.cursor/hooks.json`) on every sync; system level
+ * (`/Library/Application Support/Cursor` on macOS, `/etc/cursor` elsewhere)
+ * only through `intutic enterprise install`, which needs root. The project and
+ * user files are merged — hooks the user registered are kept.
  *
  * LLD #14 — Phase 3 cross-harness defence
  * HLD §3.14 — Three-Tier Defense Cascade
@@ -20,12 +30,13 @@ import * as os from 'node:os';
 import { createLogger } from '@intutic/logger';
 import { newIso } from '@intutic/id';
 import { emitJsGate, emitJsFailClosedPrelude } from './gateBody.js';
+import { readJsonObjectForMerge } from './jsonMergeTarget.js';
 const log = createLogger('sync-cursor-hooks');
-/** Hook events Cursor fires before execution. */
+/** The Cursor events the gate is registered for, with each one's matcher. */
 const HOOK_EVENTS = [
-    'beforeShellExecution',
-    'beforeMCPExecution',
-    'beforeFileEdit',
+    { event: 'beforeShellExecution' },
+    { event: 'beforeMCPExecution' },
+    { event: 'preToolUse', matcher: 'Write|Delete' },
 ];
 /**
  * Where system-level hooks.json lives for a given platform. Exported (not
@@ -51,18 +62,39 @@ export function systemHooksDirFor(platform) {
  */
 export function buildHooksConfig(hookScriptPath) {
     return {
-        _comment: 'Intutic governance hooks — auto-generated. DO NOT EDIT.',
-        _lastSync: newIso(),
-        failClosed: true,
-        hooks: Object.fromEntries(HOOK_EVENTS.map((event) => [
+        version: 1,
+        hooks: Object.fromEntries(HOOK_EVENTS.map(({ event, matcher }) => [
             event,
-            {
-                command: `node "${hookScriptPath}"`,
-                failClosed: true,
-            },
+            [{ command: `node "${hookScriptPath}"`, ...(matcher ? { matcher } : {}), failClosed: true }],
         ])),
     };
 }
+/**
+ * Merge the Intutic entries into an existing hooks.json object: the user's
+ * entries for every event are kept, entries running this gate are replaced,
+ * and the shape earlier versions wrote (an object per event, top-level
+ * `failClosed`/`_comment`/`_lastSync`, the nonexistent `beforeFileEdit`
+ * event) is dropped.
+ */
+export function mergeHooksConfig(existing, hookScriptPath) {
+    const ours = buildHooksConfig(hookScriptPath);
+    const command = `node "${hookScriptPath}"`;
+    const current = typeof existing.hooks === 'object' && existing.hooks !== null && !Array.isArray(existing.hooks)
+        ? { ...existing.hooks }
+        : {};
+    delete current.beforeFileEdit;
+    for (const [event, entries] of Object.entries(ours.hooks)) {
+        const kept = Array.isArray(current[event])
+            ? current[event].filter((e) => !(typeof e === 'object' && e !== null && e.command === command))
+            : [];
+        current[event] = [...kept, ...entries];
+    }
+    const rest = { ...existing };
+    delete rest.failClosed;
+    delete rest._comment;
+    delete rest._lastSync;
+    return { ...rest, version: typeof existing.version === 'number' ? existing.version : 1, hooks: current };
+}
 /**
  * The pre-tool-check.js script content — receives JSON context from Cursor
  * on stdin, exits 0 to allow or exits 2 to block.
@@ -169,7 +201,7 @@ process.stdin.on('end', () => {
     // hook_event_name: "beforeMCPExecution", ...}\`) — composed in here, once,
     // before anything reads \`toolName\`.
     if (event === 'beforemcpexecution' && ctx.tool_name) {
-      const mcpServer = ctx.command || ctx.url || ctx.server_name || ctx.serverName;
+      const mcpServer = ctx.mcp_server_name || ctx.command || ctx.url || ctx.server_name || ctx.serverName;
       if (mcpServer) toolName = 'mcp__' + mcpServer + '__' + ctx.tool_name;
     }
 
@@ -179,8 +211,10 @@ process.stdin.on('end', () => {
     // command and the target independently.
     intuticGate(toolName, targetPath, command, logEvent, _intuticWsId, input);
 
-    // Allow
+    // Allow — explicitly: with failClosed set, Cursor treats a hook that
+    // prints nothing as a failure and blocks the call.
     logEvent('tool_allowed', toolName, '');
+    process.stdout.write(JSON.stringify({ permission: 'allow' }));
     process.exit(0);
   } catch (err) {
     // Fail CLOSED
@@ -214,16 +248,15 @@ export async function writeCursorHooks(workspaceRoot, proxyUrl, workspaceId = ''
     await fs.writeFile(tmpScript, buildHookScript(proxyUrl, workspaceRoot, workspaceId), 'utf-8');
     await fs.rename(tmpScript, hookScriptPath);
     await fs.chmod(hookScriptPath, 0o755);
-    const config = buildHooksConfig(hookScriptPath);
     // 1. Project-level: .cursor/hooks.json
     const projectCursorDir = path.join(workspaceRoot, '.cursor');
     await fs.mkdir(projectCursorDir, { recursive: true });
-    await atomicWriteJson(path.join(projectCursorDir, 'hooks.json'), config);
+    await mergeHooksJsonFile(path.join(projectCursorDir, 'hooks.json'), hookScriptPath);
     log.info({ action: 'cursor_hooks_written', level: 'project', path: projectCursorDir }, 'Cursor project-level hooks written');
     // 2. User-level: ~/.cursor/hooks.json
     const userCursorDir = path.join(os.homedir(), '.cursor');
     await fs.mkdir(userCursorDir, { recursive: true });
-    await atomicWriteJson(path.join(userCursorDir, 'hooks.json'), config);
+    await mergeHooksJsonFile(path.join(userCursorDir, 'hooks.json'), hookScriptPath);
     log.info({ action: 'cursor_hooks_written', level: 'user', path: userCursorDir }, 'Cursor user-level hooks written');
     // 3. System-level (system administrator installation only). macOS has no
     // /etc/cursor convention Cursor itself reads — its own app-support
@@ -234,7 +267,7 @@ export async function writeCursorHooks(workspaceRoot, proxyUrl, workspaceId = ''
         const systemCursorDir = systemHooksDirFor(process.platform);
         try {
             await fs.mkdir(systemCursorDir, { recursive: true });
-            await atomicWriteJson(path.join(systemCursorDir, 'hooks.json'), config);
+            await mergeHooksJsonFile(path.join(systemCursorDir, 'hooks.json'), hookScriptPath);
             log.info({ action: 'cursor_hooks_written', level: 'system', path: systemCursorDir }, 'Cursor system-level hooks written');
         }
         catch (err) {
@@ -242,6 +275,14 @@ export async function writeCursorHooks(workspaceRoot, proxyUrl, workspaceId = ''
         }
     }
 }
+/** Merge the gate into one hooks.json; a file that does not parse is left
+ *  untouched (see jsonMergeTarget.ts). */
+async function mergeHooksJsonFile(filePath, hookScriptPath) {
+    const existing = await readJsonObjectForMerge(filePath);
+    if (existing === null)
+        return;
+    await atomicWriteJson(filePath, mergeHooksConfig(existing, hookScriptPath));
+}
 async function atomicWriteJson(filePath, data) {
     const tmp = filePath + '.intutic-tmp';
     await fs.writeFile(tmp, JSON.stringify(data, null, 2) + '\n', 'utf-8');

package/dist/harness/cursorHooks.js.map

@@ -1 +1 @@
-{"version":3,"file":"cursorHooks.js","sourceRoot":"","sources":["../../src/harness/cursorHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AAEnE,MAAM,GAAG,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAA;AAE7C,iDAAiD;AACjD,MAAM,WAAW,GAAG;IAClB,sBAAsB;IACtB,oBAAoB;IACpB,gBAAgB;CACR,CAAA;AAEV;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAyB;IACzD,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,aAAa,CAAA;AACtF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,cAAsB;IACrD,OAAO;QACL,QAAQ,EAAE,yDAAyD;QACnE,SAAS,EAAE,MAAM,EAAE;QACnB,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,MAAM,CAAC,WAAW,CACvB,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACzB,KAAK;YACL;gBACE,OAAO,EAAE,SAAS,cAAc,GAAG;gBACnC,UAAU,EAAE,IAAI;aACjB;SACF,CAAC,CACH;KACF,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,QAAgB,EAAE,aAAqB,EAAE,WAAmB;IACnF,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAA;IACzF,OAAO;;;;YAIG,QAAQ;gBACJ,MAAM,EAAE;;EAEtB,uBAAuB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;;;;;;;;;gFASa,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;;;;;;;;;;;EAWzG,UAAU,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;;;;;;;;;;;;;;;;;;wBAkB9B,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4EpD,CAAA;AACD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,aAAqB,EACrB,QAAgB,EAChB,WAAW,GAAG,EAAE,EAChB,gBAAgB,GAAG,KAAK;IAExB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IACnE,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAElD,0CAA0C;IAC1C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEnF,4EAA4E;IAC5E,8DAA8D;IAC9D,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAA;IAElE,wBAAwB;IACxB,MAAM,SAAS,GAAG,cAAc,GAAG,aAAa,CAAA;IAChD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAA;IAC7F,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;IAC1C,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;IAErC,MAAM,MAAM,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAA;IAE/C,uCAAuC;IACvC,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAA;IAC5D,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACrD,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAA;IACxE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,oCAAoC,CAAC,CAAA;IAE5H,sCAAsC;IACtC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAA;IACxD,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAClD,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAA;IACrE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,iCAAiC,CAAC,CAAA;IAEnH,yEAAyE;IACzE,mEAAmE;IACnE,0EAA0E;IAC1E,sEAAsE;IACtE,0EAA0E;IAC1E,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,eAAe,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC3D,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACpD,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAA;YACvE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,mCAAmC,CAAC,CAAA;QAC3H,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,4BAA4B,EAAE,GAAG,EAAE,EAAE,mDAAmD,CAAC,CAAA;QAC/G,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,IAAa;IAC5D,MAAM,GAAG,GAAG,QAAQ,GAAG,cAAc,CAAA;IACrC,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IACtE,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;AAChC,CAAC"}
+{"version":3,"file":"cursorHooks.js","sourceRoot":"","sources":["../../src/harness/cursorHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAE7D,MAAM,GAAG,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAA;AAE7C,6EAA6E;AAC7E,MAAM,WAAW,GAAuD;IACtE,EAAE,KAAK,EAAE,sBAAsB,EAAE;IACjC,EAAE,KAAK,EAAE,oBAAoB,EAAE;IAC/B,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE;CACjD,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAyB;IACzD,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,aAAa,CAAA;AACtF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,cAAsB;IACrD,OAAO;QACL,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,MAAM,CAAC,WAAW,CACvB,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YACtC,KAAK;YACL,CAAC,EAAE,OAAO,EAAE,SAAS,cAAc,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;SAC7F,CAAC,CACH;KACF,CAAA;AACH,CAAC;AASD;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAiC,EAAE,cAAsB;IACxF,MAAM,IAAI,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAA;IAC7C,MAAM,OAAO,GAAG,SAAS,cAAc,GAAG,CAAA;IAC1C,MAAM,OAAO,GAAG,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC7G,CAAC,CAAC,EAAE,GAAI,QAAQ,CAAC,KAAiC,EAAE;QACpD,CAAC,CAAC,EAAE,CAAA;IACN,OAAO,OAAO,CAAC,cAAc,CAAA;IAC7B,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACxC,CAAC,CAAE,OAAO,CAAC,KAAK,CAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAK,CAA2B,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;YACzI,CAAC,CAAC,EAAE,CAAA;QACN,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC,CAAA;IACxC,CAAC;IACD,MAAM,IAAI,GAA4B,EAAE,GAAG,QAAQ,EAAE,CAAA;IACrD,OAAO,IAAI,CAAC,UAAU,CAAA;IACtB,OAAO,IAAI,CAAC,QAAQ,CAAA;IACpB,OAAO,IAAI,CAAC,SAAS,CAAA;IACrB,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;AAC1G,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,QAAgB,EAAE,aAAqB,EAAE,WAAmB;IACnF,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAA;IACzF,OAAO;;;;YAIG,QAAQ;gBACJ,MAAM,EAAE;;EAEtB,uBAAuB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;;;;;;;;;gFASa,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;;;;;;;;;;;EAWzG,UAAU,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;;;;;;;;;;;;;;;;;;wBAkB9B,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8EpD,CAAA;AACD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,aAAqB,EACrB,QAAgB,EAChB,WAAW,GAAG,EAAE,EAChB,gBAAgB,GAAG,KAAK;IAExB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IACnE,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAElD,0CAA0C;IAC1C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEnF,4EAA4E;IAC5E,8DAA8D;IAC9D,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAA;IAElE,wBAAwB;IACxB,MAAM,SAAS,GAAG,cAAc,GAAG,aAAa,CAAA;IAChD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAA;IAC7F,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;IAC1C,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;IAErC,uCAAuC;IACvC,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAA;IAC5D,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACrD,MAAM,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,YAAY,CAAC,EAAE,cAAc,CAAC,CAAA;IACnF,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,oCAAoC,CAAC,CAAA;IAE5H,sCAAsC;IACtC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAA;IACxD,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAClD,MAAM,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE,cAAc,CAAC,CAAA;IAChF,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,iCAAiC,CAAC,CAAA;IAEnH,yEAAyE;IACzE,mEAAmE;IACnE,0EAA0E;IAC1E,sEAAsE;IACtE,0EAA0E;IAC1E,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,eAAe,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC3D,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACpD,MAAM,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,EAAE,cAAc,CAAC,CAAA;YAClF,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,mCAAmC,CAAC,CAAA;QAC3H,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,4BAA4B,EAAE,GAAG,EAAE,EAAE,mDAAmD,CAAC,CAAA;QAC/G,CAAC;IACH,CAAC;AACH,CAAC;AAED;0CAC0C;AAC1C,KAAK,UAAU,kBAAkB,CAAC,QAAgB,EAAE,cAAsB;IACxE,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,QAAQ,CAAC,CAAA;IACvD,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAM;IAC7B,MAAM,eAAe,CAAC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAA;AAC7E,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,IAAa;IAC5D,MAAM,GAAG,GAAG,QAAQ,GAAG,cAAc,CAAA;IACrC,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IACtE,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;AAChC,CAAC"}

package/dist/harness/dshHooks.d.ts

@@ -21,11 +21,11 @@
  * Muse Code/Grok Build in Wave 1. This writer was authored against a real
  * `npm pack` + read of those packages' shipped `.d.ts`/README files, not
  * solely the phase brief's prior research (see the TD entry this phase filed
- * for exactly what was checked and what is still genuinely unconfirmed —
- * dsh-permission, dsh-settings-local, and dsh-fs-policy 404'd as
- * `publishConfig.access: restricted`, so the exact settings.yaml schema
- * dsh-settings-local enforces was not directly inspected, only inferred from
- * `dsh-base`'s own `cordis.patch.yml` comments and `dsh-llm-pi-ai`'s README).
+ * for exactly what was checked). In 0.1 three packages (dsh-permission,
+ * dsh-settings-local, dsh-fs-policy) 404'd as restricted; 0.2.0-rc.2 no
+ * longer depends on them — their roles moved to the public `dsh-settings`,
+ * `dsh-config-editor`, `dsh-sandbox-policy`, `dsh-permission-presets` and
+ * `dsh-user-approval`, all read directly for the 0.2 re-verification.
  *
  * Confirmed facts this writer relies on:
  *
@@ -56,30 +56,31 @@
  *     for out-of-tree plugins) — which means `@intutic/gate` must actually be
  *     installed there; see {@link mergeProfileDependency} and the TD entry
  *     for why this writer cannot run `pnpm install` on the user's behalf.
- *   - `settings.yaml`'s `llm-pi-ai.providers.<id>.baseURL` path — CONFIRMED,
- *     not merely the plan's assumption: `dsh-llm-pi-ai`'s shipped README shows
- *     exactly this shape overriding an EXISTING catalog route's endpoint
- *     (`providers.openai.baseURL: https://proxy.example.com:8443`), the same
- *     "override base_url on what already resolves, don't invent a model
- *     picker entry" shape `grokHooks.ts`'s `[model.*]` merge uses. `llm-pi-ai`
- *     is NOT dsh's default LLM route (`llm-deepseek`, the native DeepSeek
- *     adapter, is — see `dsh-base`'s own `agent-default-model` row) and
- *     mounts **dormant** until a `llm-pi-ai:` settings section exists at all,
- *     so this override alone never redirected a fresh profile's DEFAULT
- *     egress — it only added a selectable route.
- *   - **TD-370 follow-up, closed this phase:** `@deepseek-ai/dsh-llm-deepseek`
- *     (registry-public, `npm pack`ed and read directly — 0.1.0-rc.8, the
- *     current prerelease at the time) IS the adapter `dsh-base`'s
- *     `agent-default-model` routes through by default, and its own shipped
- *     README CONFIRMS the same live-reload settings seam `llm-pi-ai` has:
- *     "the plugin registers the `llm-deepseek` namespace with this same
- *     `Config` schema ... so a `llm-deepseek:` section in the user settings
- *     document overrides any field without a restart." {@link mergeSettingsYaml}
- *     now also merges `llm-deepseek.baseURL`, touching only that one field
- *     (same "override base_url on what already resolves" discipline as the
- *     `llm-pi-ai` merge and `grokHooks.ts`'s `[model.*]` merge) — this is the
- *     one that actually redirects DEFAULT egress. The `llm-pi-ai` merge is
- *     kept alongside it (a selectable route remains useful), not replaced.
+ *   - **LLM egress, re-verified against dsh 0.2.0-rc.2 (TD-370, 2026-10-03).**
+ *     0.2 removed the harness-home `settings.yaml` document this writer used
+ *     to merge into: `@deepseek-ai/dsh-settings` now imports a leftover
+ *     `$DSH_HOME/settings.yaml` ONCE into whichever profile boots first
+ *     (renaming it to `settings.yaml.imported`), and live configuration
+ *     lives in each profile's `cordis.patch.yml` as an id-targeted override
+ *     row (`dsh-config-editor` persists Models-page edits the same way). The
+ *     default route is still the entry id `llm-deepseek` — in 0.2 that id
+ *     mounts `@deepseek-ai/dsh-llm-deepseek-api-key`, which registers the
+ *     `deepseek-official` provider `dsh-base`'s `agent-default-model` row
+ *     selects (`provider: deepseek-official, model: deepseek-flash`) — and
+ *     `dsh-llm-deepseek`'s README confirms its endpoint resolves "explicit
+ *     value, then `$DEEPSEEK_BASE_URL`, then the official root"
+ *     (`https://api.deepseek.com/anthropic`, Messages wire format; requests
+ *     go to `<baseURL>/v1/messages`). {@link mergeProfileLlmRoute} therefore
+ *     sets `config.baseURL` on that entry's override row in every profile
+ *     patch. Observed live (uat/evidence/live-verify/dsh-0.2.md): a headless
+ *     0.2.0-rc.2 session sent every model request to the configured base URL.
+ *     Two routes are deliberately NOT redirected: `llm-pi-ai` (0.2 refuses a
+ *     hand-declared route without a non-empty `models` list, so the old
+ *     `providers.intutic` route is now invalid config — dropped), and
+ *     `llm-deepseek-account` (`deepseek-account` provider; its token is only
+ *     released to `inferenceOrigin`, which accepts an alternate origin only
+ *     with a grant from DeepSeek's platform — an opt-in, signed-in route this
+ *     writer cannot point at a proxy). See the TD entry.
  *   - The `@intutic/gate/dsh` veto contract itself (`tools/pre-execute`,
  *     `PreToolDecision`'s real `'deny'`/`'allow'`/`'ask'` shape, Cordis's
  *     `waterfall` `next()` semantics) is confirmed from `dsh-tools`'s shipped
@@ -152,36 +153,42 @@ export declare function mergeProfilePatch(profileDir: string, workspaceRoot: str
  * writer in this codebase only ever writes config, never invokes a package
  * manager on the user's behalf. Until the user (or their own tooling) runs
  * one, the `cordis.patch.yml` row this module also writes resolves to a
- * MISSING module and dsh's own loader reports that row's activation failed
- * (`assertEntriesActivated`, confirmed from `dsh-app-boot`'s exports) rather
- * than silently no-op — a fail-LOUD gap, not a fail-open one, but a real
- * manual step nonetheless. See the TD entry and `apps/docs/integrations/dsh.md`.
+ * MISSING module. Observed live against dsh 0.2.0-rc.2: the loader prints
+ * `dsh: warning: 1 entry did not activate` / `intutic-governance
+ * (@intutic/gate/dsh): failed to import` on stderr and the session then runs
+ * UNGOVERNED — loud, but fail-OPEN (dsh's hard-fail list is global to the
+ * launcher; a profile row cannot mark itself required). See the TD entry and
+ * `apps/docs/integrations/dsh.md`.
+ *
+ * Adds the declaration only when the profile has none: an existing one was
+ * written by `dsh plugin --profile <name> add @intutic/gate` (pnpm records
+ * the installed range, e.g. `^2.0.0`) or by the user, and rewriting it to this
+ * writer's range on every sync would drift the manifest away from what is
+ * actually installed — observed live against dsh 0.2.0-rc.2, where the old
+ * `^0.1.0` overwrote pnpm's `^2.0.0`.
  */
 export declare function mergeProfileDependency(profileDir: string): Promise<void>;
 /**
- * Structurally merges the Intutic proxy into TWO `settings.yaml` sections:
+ * Points dsh's DEFAULT LLM route at the Intutic proxy by setting
+ * `config.baseURL` on the profile's `llm-deepseek` override row.
  *
- *  - `llm-deepseek.baseURL` — dsh's ACTUAL DEFAULT LLM route (CONFIRMED
- *    against `@deepseek-ai/dsh-llm-deepseek`'s own shipped README this
- *    phase — see module doc). Only `baseURL` is touched; `apiKeyEnv`,
- *    `thinking`, `models`, etc. round-trip untouched, the same
- *    "override base_url on what already resolves, never invent the rest of
- *    the section" discipline `grokHooks.ts`'s `[model.*]` merge uses. This
- *    is the merge that actually redirects DEFAULT egress — see the TD entry
- *    for why the `llm-pi-ai` merge alone (below) never did.
- *  - `llm-pi-ai.providers.intutic` — a SELECTABLE route (mounts dormant
- *    until this section exists at all — see module doc). Kept alongside the
- *    new default-route merge: a user, or a future sync, can still point a
- *    model at it explicitly.
+ * A Cordis id-targeted patch REPLACES the entry's whole `config`
+ * (`dsh-app-boot`'s README: "an id-targeted patch does not deep-merge"), so
+ * when the profile already overrides this entry (a Models-page save, a hand
+ * edit, or dsh 0.2's one-time import of a legacy `settings.yaml`), only
+ * `baseURL` is set on THAT row and every other field it restates
+ * (`apiKeyEnv`, `reasoningEffort`, `models`, ...) round-trips untouched.
+ * Otherwise a fresh `{ id, config: { baseURL } }` row is appended — the
+ * base bundle's row carries no config, so nothing is lost by replacing it.
  *
- * Both overrides preserve every other provider and every other top-level
- * section untouched.
+ * Same parse-structurally / write-if-changed / append-only-on-unparseable
+ * discipline as {@link mergeProfilePatch}, on the same file.
  */
-export declare function mergeSettingsYaml(dshHome: string, proxyUrl: string): Promise<void>;
+export declare function mergeProfileLlmRoute(profileDir: string, proxyUrl: string): Promise<void>;
 /**
  * Register the Intutic governance plugin against every existing dsh profile
- * on this machine, and merge the Intutic proxy into `settings.yaml`'s
- * `llm-deepseek` (default) and `llm-pi-ai` (selectable) routes.
+ * on this machine, and point each profile's `llm-deepseek` (default) LLM
+ * route at the Intutic proxy.
  *
  * A no-op (logged, not an error) when `$DSH_HOME/profiles` does not exist
  * yet — dsh has not been run with any `--profile <name>` on this machine, so
@@ -191,7 +198,7 @@ export declare function mergeSettingsYaml(dshHome: string, proxyUrl: string): Pr
  *
  * @param workspaceRoot - Absolute workspace root (stored in the plugin row's
  *   `config.repoRoot`).
- * @param proxyUrl       - Intutic proxy URL, merged into settings.yaml.
+ * @param proxyUrl       - Intutic proxy URL, set as the `llm-deepseek` row's `baseURL`.
  * @param workspaceId    - Workspace ID, stored in the plugin row's config.
  */
 export declare function writeDshHooks(workspaceRoot: string, proxyUrl: string, workspaceId?: string): Promise<void>;

package/dist/harness/dshHooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dshHooks.d.ts","sourceRoot":"","sources":["../../src/harness/dshHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2FG;AAiCH;;;;0CAI0C;AAC1C,wBAAgB,cAAc,IAAI,MAAM,CAIvC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAgB3E;AAoBD,MAAM,WAAW,cAAc;IAC7B;mFAC+E;IAC/E,WAAW,EAAE,OAAO,CAAA;IACpB,wEAAwE;IACxE,YAAY,EAAE,MAAM,CAAA;IACpB;8DAC0D;IAC1D,GAAG,EAAE,OAAO,CAAA;CACb;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,SAAmB,GAAG,OAAO,CAAC,cAAc,CAAC,CAQ9F;AAkED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA4DrH;AAID;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB9E;AAkDD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA4ExF;AAyED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,aAAa,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,SAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAiB5G"}
+{"version":3,"file":"dshHooks.d.ts","sourceRoot":"","sources":["../../src/harness/dshHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4FG;AAkCH;;;;0CAI0C;AAC1C,wBAAgB,cAAc,IAAI,MAAM,CAIvC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAgB3E;AAoBD,MAAM,WAAW,cAAc;IAC7B;mFAC+E;IAC/E,WAAW,EAAE,OAAO,CAAA;IACpB,wEAAwE;IACxE,YAAY,EAAE,MAAM,CAAA;IACpB;8DAC0D;IAC1D,GAAG,EAAE,OAAO,CAAA;CACb;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,SAAmB,GAAG,OAAO,CAAC,cAAc,CAAC,CAQ9F;AAkED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA4DrH;AAID;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB9E;AA0BD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD9F;AA0ED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,aAAa,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,SAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAmB5G"}