@intutic/sync-daemon 2.1.0 → 2.3.0

package/dist/disconnect/recognise.js

@@ -0,0 +1,108 @@
+/**
+ * recognise.ts — how disconnect tells Intutic's entries from the user's.
+ *
+ * Every test here is on content Intutic writes and nothing else: a hook
+ * command that runs a gate script from an `.intutic/hooks/` directory, a
+ * rules file that starts with the generated header, a URL on the origin of
+ * the proxy connect pointed the harness at.
+ *
+ * @module
+ */
+import * as node_fs from 'node:fs/promises';
+import * as node_path from 'node:path';
+import { HARNESS_RULES_FILES, proxyHost } from '@intutic/shared-types';
+import { isObject } from './plan.js';
+/** First line of every rules file Intutic generates. */
+export const RULES_HEADER = '# Intutic Governance Rules (auto-generated)';
+export function startsWithRulesHeader(text) {
+    return text.startsWith(RULES_HEADER);
+}
+/** Whether `text` mentions `marker`, for owned files recognised by a line Intutic writes in them. */
+export function contains(marker) {
+    return (text) => text.includes(marker);
+}
+/**
+ * Whether `command` runs the gate script `script` from an `.intutic/hooks/`
+ * directory (any workspace's, or the home one) — however it is quoted or
+ * whichever interpreter runs it.
+ */
+export function runsGate(command, script) {
+    if (typeof command !== 'string')
+        return false;
+    const escaped = script.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+    return new RegExp(`[\\\\/]\\.intutic[\\\\/]hooks[\\\\/]${escaped}(?=["'\\s]|$)`).test(command);
+}
+/**
+ * Whether a `{ matcher, hooks: [{ command }] }` entry is Intutic's: every
+ * hook in it runs `script`. The shape Claude Code, Codex, Continue, Muse,
+ * Gemini CLI and Pi share.
+ */
+export function isGateEntry(script) {
+    return (entry) => {
+        if (!isObject(entry) || !Array.isArray(entry.hooks) || entry.hooks.length === 0)
+            return false;
+        return entry.hooks.every((h) => isObject(h) && runsGate(h.command, script));
+    };
+}
+/** Whether a `{ command }` entry (Cursor, Windsurf) runs `script`. */
+export function isGateCommandEntry(script) {
+    return (entry) => isObject(entry) && runsGate(entry.command, script);
+}
+/** Loopback hosts compare equal: connect writes `localhost` in one place and `127.0.0.1` in another. */
+function originOf(value) {
+    try {
+        const url = new URL(value);
+        const host = url.hostname === 'localhost' || url.hostname === '[::1]' ? '127.0.0.1' : url.hostname;
+        const port = url.port || (url.protocol === 'https:' ? '443' : '80');
+        return `${url.protocol}//${host}:${port}`;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * A test for "this value is a URL on the Intutic proxy", given the proxy
+ * URLs connect is known to have written. Any path on the proxy's origin
+ * counts: connect writes the bare host for Anthropic SDKs, `/v1` for OpenAI
+ * ones, and a trailing slash for Continue.
+ */
+export function proxyUrlMatcher(proxyUrls) {
+    const origins = new Set(proxyUrls.map((u) => originOf(proxyHost(u))).filter((o) => o !== null));
+    return (value) => typeof value === 'string' && origins.size > 0 && origins.has(originOf(value) ?? '');
+}
+/**
+ * Proxy URLs an earlier connect left in a workspace's own generated files:
+ * the "Proxy URL" line of a rules file and `INTUTIC_PROXY_URL` in
+ * `.env.intutic`. Used when connect predates the recorded list.
+ */
+export async function proxyUrlsInWorkspace(workspaceRoot) {
+    const found = new Set();
+    const files = [
+        ...new Set(Object.values(HARNESS_RULES_FILES).flatMap((t) => (t.kind !== 'none' && t.scope === 'workspace' ? [t.path] : []))),
+        // Where earlier versions wrote the rules whole.
+        'CLAUDE.md',
+        '.cursorrules',
+        '.windsurfrules',
+        '.roorules',
+        '.env.intutic',
+    ];
+    for (const rel of files) {
+        let text;
+        try {
+            text = await node_fs.readFile(node_path.join(workspaceRoot, rel), 'utf-8');
+        }
+        catch {
+            continue;
+        }
+        // A whole generated file, or one with the generated rules in it (a
+        // section, or after a rule file's front matter).
+        if (!text.includes(RULES_HEADER))
+            continue;
+        for (const m of text.matchAll(/^> \*\*Proxy URL:\*\* `([^`]+)`$/gm))
+            found.add(m[1]);
+        for (const m of text.matchAll(/^export INTUTIC_PROXY_URL="([^"]+)"$/gm))
+            found.add(m[1]);
+    }
+    return [...found];
+}
+//# sourceMappingURL=recognise.js.map

package/dist/disconnect/recognise.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recognise.js","sourceRoot":"","sources":["../../src/disconnect/recognise.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAA;AAC3C,OAAO,KAAK,SAAS,MAAM,WAAW,CAAA;AACtC,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AACtE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAEpC,wDAAwD;AACxD,MAAM,CAAC,MAAM,YAAY,GAAG,6CAA6C,CAAA;AAEzE,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAA;AACtC,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,QAAQ,CAAC,MAAc;IACrC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAgB,EAAE,MAAc;IACvD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAA;IAC7D,OAAO,IAAI,MAAM,CAAC,uCAAuC,OAAO,eAAe,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AAChG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,OAAO,CAAC,KAAK,EAAE,EAAE;QACf,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;QAC7F,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;IAC7E,CAAC,CAAA;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;AACtE,CAAC;AAED,wGAAwG;AACxG,SAAS,QAAQ,CAAC,KAAa;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;QAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAA;QAClG,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACnE,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,EAAE,CAAA;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,SAA4B;IAC1D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAA;IAC5G,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;AACvG,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,aAAqB;IAC9D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;IAC/B,MAAM,KAAK,GAAG;QACZ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7H,gDAAgD;QAChD,WAAW;QACX,cAAc;QACd,gBAAgB;QAChB,WAAW;QACX,cAAc;KACf,CAAA;IACD,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,IAAY,CAAA;QAChB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,CAAA;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,SAAQ;QACV,CAAC;QACD,mEAAmE;QACnE,iDAAiD;QACjD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,SAAQ;QAC1C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,oCAAoC,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAA;QACrF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,wCAAwC,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAA;IAC3F,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAA;AACnB,CAAC"}

package/dist/disconnect/tomlLines.d.ts

@@ -0,0 +1,39 @@
+/**
+ * tomlLines.ts — line-level TOML edits that keep the user's comments.
+ *
+ * Codex's and OpenHands' writers set a key or append a table by editing
+ * lines, so the user's comments survive; undoing them the same way keeps
+ * that promise. Only the shapes those writers produce are handled: a
+ * `key = value` line in the top level or in a `[table]`, and a whole table.
+ *
+ * @module
+ */
+interface Section {
+    /** Table name as written between the brackets, or null for the top level. */
+    name: string | null;
+    /** Index of the header line (-1 for the top level). */
+    header: number;
+    /** One past the last line of the section. */
+    end: number;
+}
+/** Splits lines into sections, ignoring `[` lines inside multi-line strings. */
+export declare function tomlSections(lines: readonly string[]): Section[];
+/** The value a one-line `key = value` assignment holds, or undefined when the line is not one. */
+export declare function lineValue(line: string, key: string): unknown;
+/** Index of `key`'s line in the first section named `table` (null: top level), or -1. */
+export declare function findKeyLine(lines: readonly string[], table: string | null, key: string): number;
+/**
+ * Removes the table named `table`, header to end, with the blank line a
+ * writer put before it when it appended the table.
+ */
+export declare function removeTable(lines: string[], table: string): boolean;
+/** Removes a `[table]` header with nothing left under it but blank lines. */
+export declare function removeEmptyTable(lines: string[], table: string): boolean;
+/**
+ * Puts back one key a writer set. When the original text had the key in
+ * the same section its line is restored; otherwise the line is removed.
+ * Only a line whose value `isIntutic` recognises is touched.
+ */
+export declare function restoreKeyLine(lines: string[], table: string | null, key: string, originalLines: readonly string[] | null, isIntutic: (value: unknown) => boolean): boolean;
+export {};
+//# sourceMappingURL=tomlLines.d.ts.map

package/dist/disconnect/tomlLines.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tomlLines.d.ts","sourceRoot":"","sources":["../../src/disconnect/tomlLines.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,UAAU,OAAO;IACf,6EAA6E;IAC7E,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAA;IACd,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,gFAAgF;AAChF,wBAAgB,YAAY,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,EAAE,CAuBhE;AAED,kGAAkG;AAClG,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAO5D;AAED,yFAAyF;AACzF,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAO/F;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAOnE;AAED,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAKxE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,EAAE,EACf,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,EACvC,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,GACrC,OAAO,CAWT"}

package/dist/disconnect/tomlLines.js

@@ -0,0 +1,105 @@
+/**
+ * tomlLines.ts — line-level TOML edits that keep the user's comments.
+ *
+ * Codex's and OpenHands' writers set a key or append a table by editing
+ * lines, so the user's comments survive; undoing them the same way keeps
+ * that promise. Only the shapes those writers produce are handled: a
+ * `key = value` line in the top level or in a `[table]`, and a whole table.
+ *
+ * @module
+ */
+import { parse as parseToml } from 'smol-toml';
+/** Splits lines into sections, ignoring `[` lines inside multi-line strings. */
+export function tomlSections(lines) {
+    const sections = [{ name: null, header: -1, end: lines.length }];
+    let inString = null;
+    lines.forEach((line, i) => {
+        if (inString === null) {
+            // `[table]` or `[[array.of.tables]]`; the name is what is between the brackets.
+            const header = /^\s*\[\[?\s*([^\][]+?)\s*\]\]?\s*(#.*)?$/.exec(line);
+            if (header) {
+                sections[sections.length - 1].end = i;
+                sections.push({ name: header[1], header: i, end: lines.length });
+                return;
+            }
+        }
+        for (const quote of ['"""', "'''"]) {
+            let at = line.indexOf(quote);
+            while (at !== -1) {
+                if (inString === null)
+                    inString = quote;
+                else if (inString === quote)
+                    inString = null;
+                at = line.indexOf(quote, at + 3);
+            }
+        }
+    });
+    return sections;
+}
+/** The value a one-line `key = value` assignment holds, or undefined when the line is not one. */
+export function lineValue(line, key) {
+    if (!new RegExp(`^\\s*${key}\\s*=`).test(line))
+        return undefined;
+    try {
+        return parseToml(line)[key];
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Index of `key`'s line in the first section named `table` (null: top level), or -1. */
+export function findKeyLine(lines, table, key) {
+    const section = tomlSections(lines).find((s) => s.name === table);
+    if (!section)
+        return -1;
+    for (let i = section.header + 1; i < section.end; i++) {
+        if (lineValue(lines[i], key) !== undefined)
+            return i;
+    }
+    return -1;
+}
+/**
+ * Removes the table named `table`, header to end, with the blank line a
+ * writer put before it when it appended the table.
+ */
+export function removeTable(lines, table) {
+    const section = tomlSections(lines).find((s) => s.name === table);
+    if (!section)
+        return false;
+    let start = section.header;
+    if (start > 0 && lines[start - 1].trim() === '')
+        start--;
+    lines.splice(start, section.end - start);
+    return true;
+}
+/** Removes a `[table]` header with nothing left under it but blank lines. */
+export function removeEmptyTable(lines, table) {
+    const section = tomlSections(lines).find((s) => s.name === table);
+    if (!section)
+        return false;
+    for (let i = section.header + 1; i < section.end; i++)
+        if (lines[i].trim() !== '')
+            return false;
+    return removeTable(lines, table);
+}
+/**
+ * Puts back one key a writer set. When the original text had the key in
+ * the same section its line is restored; otherwise the line is removed.
+ * Only a line whose value `isIntutic` recognises is touched.
+ */
+export function restoreKeyLine(lines, table, key, originalLines, isIntutic) {
+    const at = findKeyLine(lines, table, key);
+    if (at === -1 || !isIntutic(lineValue(lines[at], key)))
+        return false;
+    const was = originalLines ? findKeyLine(originalLines, table, key) : -1;
+    if (was !== -1) {
+        if (lines[at] === originalLines[was])
+            return false;
+        lines[at] = originalLines[was];
+    }
+    else {
+        lines.splice(at, 1);
+    }
+    return true;
+}
+//# sourceMappingURL=tomlLines.js.map

package/dist/disconnect/tomlLines.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tomlLines.js","sourceRoot":"","sources":["../../src/disconnect/tomlLines.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,WAAW,CAAA;AAW9C,gFAAgF;AAChF,MAAM,UAAU,YAAY,CAAC,KAAwB;IACnD,MAAM,QAAQ,GAAc,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;IAC3E,IAAI,QAAQ,GAAyB,IAAI,CAAA;IACzC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACxB,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,gFAAgF;YAChF,MAAM,MAAM,GAAG,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACpE,IAAI,MAAM,EAAE,CAAC;gBACX,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,GAAG,GAAG,CAAC,CAAA;gBACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;gBACjE,OAAM;YACR,CAAC;QACH,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,KAAK,EAAE,KAAK,CAAU,EAAE,CAAC;YAC5C,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YAC5B,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjB,IAAI,QAAQ,KAAK,IAAI;oBAAE,QAAQ,GAAG,KAAK,CAAA;qBAClC,IAAI,QAAQ,KAAK,KAAK;oBAAE,QAAQ,GAAG,IAAI,CAAA;gBAC5C,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;YAClC,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IACF,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,GAAW;IACjD,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAA;IAChE,IAAI,CAAC;QACH,OAAQ,SAAS,CAAC,IAAI,CAA6B,CAAC,GAAG,CAAC,CAAA;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,WAAW,CAAC,KAAwB,EAAE,KAAoB,EAAE,GAAW;IACrF,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAA;IACjE,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,CAAC,CAAA;IACvB,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACtD,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,GAAG,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAA;IACvD,CAAC;IACD,OAAO,CAAC,CAAC,CAAA;AACX,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAe,EAAE,KAAa;IACxD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAA;IACjE,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAA;IAC1B,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,CAAA;IAC1B,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,KAAK,EAAE,CAAA;IACzD,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,GAAG,KAAK,CAAC,CAAA;IACxC,OAAO,IAAI,CAAA;AACb,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,gBAAgB,CAAC,KAAe,EAAE,KAAa;IAC7D,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAA;IACjE,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAA;IAC1B,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE;QAAE,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,KAAK,CAAA;IAChG,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAe,EACf,KAAoB,EACpB,GAAW,EACX,aAAuC,EACvC,SAAsC;IAEtC,MAAM,EAAE,GAAG,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAA;IACzC,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAE,EAAE,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IACrE,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACvE,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QACf,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,aAAc,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAA;QACnD,KAAK,CAAC,EAAE,CAAC,GAAG,aAAc,CAAC,GAAG,CAAE,CAAA;IAClC,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;IACrB,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/harness/aiderConfigMerger.d.ts

@@ -15,8 +15,14 @@
  *   option; its model layer (LiteLLM) reads this variable, and wants the bare
  *   host because it appends `/v1/messages` itself. Entries the user set for
  *   other variables are kept.
- * - `read: .intutic/aider-sops.md` — the SOP text, as a read-only context
- *   file (Aider's own mechanism for conventions), written next to the config.
+ * - `read: <workspace>/.intutic/aider-sops.md` — the SOP text, as a
+ *   read-only context file (Aider's own mechanism for conventions), written
+ *   next to the config. The path is absolute: Aider resolves `read` entries
+ *   against the directory it was started in (`Path(fn).expanduser().resolve()`,
+ *   https://github.com/Aider-AI/aider/blob/main/aider/main.py), while it finds
+ *   this config at the git root from any subdirectory
+ *   (https://aider.chat/docs/config/aider_conf.html). A relative entry was
+ *   missed whenever Aider ran below the workspace root.
  *
  * Earlier versions wrote `anthropic-api-base` and `extra-instructions`, which
  * are not Aider options and stopped Aider from starting; both are removed.
@@ -26,13 +32,20 @@
  * Each strip emits a governance_config_sanitized log entry visible in
  * the control plane audit feed.
  *
- * LLD #14 — Phase 3 cross-harness defence
  * HLD §3.14 — Three-Tier Defense Cascade
  *
  * @module
  */
-/** SOP file, relative to the workspace root (where Aider runs). */
+/** SOP file, relative to the workspace root. */
 export declare const AIDER_SOPS_FILE = ".intutic/aider-sops.md";
+/** The decisions log's file, relative to the workspace root. */
+export declare const AIDER_DECISIONS_FILE = ".intutic/aider-decisions.md";
+/** Whether a `read` entry is the SOP file: the absolute path this version
+ *  writes, or the workspace-relative one earlier versions wrote. */
+export declare function isAiderSopsEntry(value: unknown, workspaceRoot: string): boolean;
+/** Whether a `read` entry is one connect added: the SOP file or the decisions log's. */
+export declare function isAiderIntuticEntry(value: unknown, workspaceRoot: string): boolean;
+export declare function stripOwnHeader(raw: string): string;
 /** Result of merging the Intutic keys into an Aider config's text. */
 export interface AiderMergeResult {
     /** New file content, or `null` when the file must be left untouched. */
@@ -43,11 +56,12 @@ export interface AiderMergeResult {
 /**
  * Merge the Intutic keys into the text of an `.aider.conf.yml`.
  *
- * @param raw      - Current file content ('' when the file does not exist).
- * @param proxyUrl - The proxy host (a trailing `/v1` is tolerated).
- * @param hasSops  - Whether the SOP file is to be listed under `read`.
+ * @param raw           - Current file content ('' when the file does not exist).
+ * @param proxyUrl      - The proxy host (a trailing `/v1` is tolerated).
+ * @param workspaceRoot - The directory holding the config.
+ * @param hasSops       - Whether the SOP file is to be listed under `read`.
  */
-export declare function mergeAiderYaml(raw: string, proxyUrl: string, hasSops: boolean): AiderMergeResult;
+export declare function mergeAiderYaml(raw: string, proxyUrl: string, workspaceRoot: string, hasSops: boolean): AiderMergeResult;
 /**
  * Merge Intutic governance settings into .aider.conf.yml.
  *
@@ -60,4 +74,11 @@ export declare function mergeAiderYaml(raw: string, proxyUrl: string, hasSops: b
  *          untouched because it is not a YAML mapping (a warning is logged).
  */
 export declare function mergeAiderConfig(configPath: string, proxyUrl: string, sopsText?: string): Promise<boolean>;
+/**
+ * Lists `entry` (an absolute path) under `read:` in the `.aider.conf.yml` at
+ * `configPath`, keeping everything else in it: the decisions log's file,
+ * which Aider loads only if listed. A config that does not parse as a YAML
+ * mapping is left alone and reported.
+ */
+export declare function ensureAiderReadEntry(configPath: string, entry: string): Promise<void>;
 //# sourceMappingURL=aiderConfigMerger.d.ts.map

package/dist/harness/aiderConfigMerger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aiderConfigMerger.d.ts","sourceRoot":"","sources":["../../src/harness/aiderConfigMerger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAmBH,mEAAmE;AACnE,eAAO,MAAM,eAAe,2BAA2B,CAAA;AAuBvD,sEAAsE;AACtE,MAAM,WAAW,gBAAgB;IAC/B,wEAAwE;IACxE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,yCAAyC;IACzC,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAYD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,gBAAgB,CA2BhG;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CA4ClB"}
+{"version":3,"file":"aiderConfigMerger.d.ts","sourceRoot":"","sources":["../../src/harness/aiderConfigMerger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAoBH,gDAAgD;AAChD,eAAO,MAAM,eAAe,2BAA2B,CAAA;AAUvD,gEAAgE;AAChE,eAAO,MAAM,oBAAoB,gCAAgC,CAAA;AAEjE;oEACoE;AACpE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAE/E;AAED,wFAAwF;AACxF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAElF;AAMD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAOlD;AAED,sEAAsE;AACtE,MAAM,WAAW,gBAAgB;IAC/B,wEAAwE;IACxE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,yCAAyC;IACzC,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAYD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,gBAAgB,CA2BvH;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CA8ClB;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAoB3F"}

package/dist/harness/aiderConfigMerger.js

@@ -15,8 +15,14 @@
  *   option; its model layer (LiteLLM) reads this variable, and wants the bare
  *   host because it appends `/v1/messages` itself. Entries the user set for
  *   other variables are kept.
- * - `read: .intutic/aider-sops.md` — the SOP text, as a read-only context
- *   file (Aider's own mechanism for conventions), written next to the config.
+ * - `read: <workspace>/.intutic/aider-sops.md` — the SOP text, as a
+ *   read-only context file (Aider's own mechanism for conventions), written
+ *   next to the config. The path is absolute: Aider resolves `read` entries
+ *   against the directory it was started in (`Path(fn).expanduser().resolve()`,
+ *   https://github.com/Aider-AI/aider/blob/main/aider/main.py), while it finds
+ *   this config at the git root from any subdirectory
+ *   (https://aider.chat/docs/config/aider_conf.html). A relative entry was
+ *   missed whenever Aider ran below the workspace root.
  *
  * Earlier versions wrote `anthropic-api-base` and `extra-instructions`, which
  * are not Aider options and stopped Aider from starting; both are removed.
@@ -26,7 +32,6 @@
  * Each strip emits a governance_config_sanitized log entry visible in
  * the control plane audit feed.
  *
- * LLD #14 — Phase 3 cross-harness defence
  * HLD §3.14 — Three-Tier Defense Cascade
  *
  * @module
@@ -35,6 +40,7 @@ import * as fs from 'node:fs/promises';
 import * as path from 'node:path';
 import { parseDocument, isMap, isSeq, isScalar, YAMLSeq } from 'yaml';
 import { createLogger } from '@intutic/logger';
+import { keepOriginal } from '../disconnect/originals.js';
 import { anthropicBaseUrl, openaiBaseUrl } from '@intutic/shared-types';
 const log = createLogger('sync-aider-merger');
 /**
@@ -44,7 +50,7 @@ const log = createLogger('sync-aider-merger');
 const SUPPRESSED_KEYS = ['test-cmd', 'lint-cmd', 'auto-test', 'auto-lint', 'test_cmd', 'lint_cmd'];
 /** Keys earlier versions wrote that Aider rejects as unrecognized arguments. */
 const INVALID_LEGACY_KEYS = ['anthropic-api-base', 'extra-instructions'];
-/** SOP file, relative to the workspace root (where Aider runs). */
+/** SOP file, relative to the workspace root. */
 export const AIDER_SOPS_FILE = '.intutic/aider-sops.md';
 /** Header written at the top of the file. Kept short: it sits above the
  *  user's own content, and is replaced, not stacked, on every sync. */
@@ -53,10 +59,21 @@ const HEADER = [
     `# ${AIDER_SOPS_FILE} read entry are managed by intutic connect. test-cmd,`,
     '# lint-cmd, auto-test and auto-lint are removed on every sync.',
 ];
+/** The decisions log's file, relative to the workspace root. */
+export const AIDER_DECISIONS_FILE = '.intutic/aider-decisions.md';
+/** Whether a `read` entry is the SOP file: the absolute path this version
+ *  writes, or the workspace-relative one earlier versions wrote. */
+export function isAiderSopsEntry(value, workspaceRoot) {
+    return value === AIDER_SOPS_FILE || value === path.join(workspaceRoot, AIDER_SOPS_FILE);
+}
+/** Whether a `read` entry is one connect added: the SOP file or the decisions log's. */
+export function isAiderIntuticEntry(value, workspaceRoot) {
+    return isAiderSopsEntry(value, workspaceRoot) || value === path.join(workspaceRoot, AIDER_DECISIONS_FILE);
+}
 /** Leading lines this product wrote (the header above, or the one earlier
  *  versions wrote), removed before the file is parsed. */
 const OWN_HEADER_LINE = /^# (Intutic: |Intutic Governance Rules \(auto-generated|Last sync: |WARNING: test-cmd and lint-cmd keys are suppressed|\.intutic\/aider-sops\.md read entry|lint-cmd, auto-test and auto-lint are removed)/;
-function stripOwnHeader(raw) {
+export function stripOwnHeader(raw) {
     const lines = raw.split('\n');
     let i = 0;
     while (i < lines.length && OWN_HEADER_LINE.test(lines[i]))
@@ -81,11 +98,12 @@ function ensureSeq(doc, key) {
 /**
  * Merge the Intutic keys into the text of an `.aider.conf.yml`.
  *
- * @param raw      - Current file content ('' when the file does not exist).
- * @param proxyUrl - The proxy host (a trailing `/v1` is tolerated).
- * @param hasSops  - Whether the SOP file is to be listed under `read`.
+ * @param raw           - Current file content ('' when the file does not exist).
+ * @param proxyUrl      - The proxy host (a trailing `/v1` is tolerated).
+ * @param workspaceRoot - The directory holding the config.
+ * @param hasSops       - Whether the SOP file is to be listed under `read`.
  */
-export function mergeAiderYaml(raw, proxyUrl, hasSops) {
+export function mergeAiderYaml(raw, proxyUrl, workspaceRoot, hasSops) {
     const doc = parseDocument(stripOwnHeader(raw));
     if (doc.errors.length > 0)
         return { content: null, stripped: [] };
@@ -107,9 +125,9 @@ export function mergeAiderYaml(raw, proxyUrl, hasSops) {
     });
     setEnv.add(`ANTHROPIC_BASE_URL=${anthropicBaseUrl(proxyUrl)}`);
     const read = ensureSeq(doc, 'read');
-    read.items = read.items.filter((item) => (isScalar(item) ? item.value : item) !== AIDER_SOPS_FILE);
+    read.items = read.items.filter((item) => !isAiderSopsEntry(isScalar(item) ? item.value : item, workspaceRoot));
     if (hasSops)
-        read.add(AIDER_SOPS_FILE);
+        read.add(path.join(workspaceRoot, AIDER_SOPS_FILE));
     if (read.items.length === 0)
         doc.delete('read');
     return { content: `${HEADER.join('\n')}\n\n${doc.toString()}`, stripped };
@@ -134,7 +152,7 @@ export async function mergeAiderConfig(configPath, proxyUrl, sopsText) {
         if (err.code !== 'ENOENT')
             throw err;
     }
-    const { content, stripped } = mergeAiderYaml(raw, proxyUrl, Boolean(sopsText));
+    const { content, stripped } = mergeAiderYaml(raw, proxyUrl, path.dirname(configPath), Boolean(sopsText));
     if (content === null) {
         log.warn({ action: 'aider_config_merge_skipped', path: configPath }, `${configPath} is not a YAML mapping — left untouched; fix it and the next sync will add the Intutic keys`);
         return false;
@@ -154,10 +172,43 @@ export async function mergeAiderConfig(configPath, proxyUrl, sopsText) {
         await fs.rm(sopsPath, { force: true });
     }
     const tmpPath = configPath + '.intutic-tmp';
+    // The config sits at the workspace root, so its directory is the workspace.
+    await keepOriginal(configPath, path.dirname(configPath));
     await fs.mkdir(path.dirname(configPath), { recursive: true });
     await fs.writeFile(tmpPath, content, 'utf-8');
     await fs.rename(tmpPath, configPath);
     log.info({ action: 'aider_config_written', path: configPath, stripped }, 'Aider config merged with proxy URL and dangerous keys stripped');
     return true;
 }
+/**
+ * Lists `entry` (an absolute path) under `read:` in the `.aider.conf.yml` at
+ * `configPath`, keeping everything else in it: the decisions log's file,
+ * which Aider loads only if listed. A config that does not parse as a YAML
+ * mapping is left alone and reported.
+ */
+export async function ensureAiderReadEntry(configPath, entry) {
+    let raw = '';
+    try {
+        raw = await fs.readFile(configPath, 'utf-8');
+    }
+    catch (err) {
+        if (err.code !== 'ENOENT')
+            throw err;
+    }
+    const doc = parseDocument(raw);
+    if (doc.contents === null && doc.errors.length === 0)
+        doc.contents = doc.createNode({});
+    if (doc.errors.length > 0 || !isMap(doc.contents)) {
+        log.warn({ action: 'aider_read_entry_skipped', path: configPath }, `${configPath} is not a YAML mapping — left untouched`);
+        return;
+    }
+    const read = ensureSeq(doc, 'read');
+    if (read.items.some((item) => (isScalar(item) ? item.value : item) === entry))
+        return;
+    read.add(entry);
+    await keepOriginal(configPath, path.dirname(configPath));
+    const tmpPath = configPath + '.intutic-tmp';
+    await fs.writeFile(tmpPath, doc.toString(), 'utf-8');
+    await fs.rename(tmpPath, configPath);
+}
 //# sourceMappingURL=aiderConfigMerger.js.map

package/dist/harness/aiderConfigMerger.js.map

@@ -1 +1 @@
-{"version":3,"file":"aiderConfigMerger.js","sourceRoot":"","sources":["../../src/harness/aiderConfigMerger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAiB,MAAM,MAAM,CAAA;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAEvE,MAAM,GAAG,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAA;AAE7C;;;GAGG;AACH,MAAM,eAAe,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;AAElG,gFAAgF;AAChF,MAAM,mBAAmB,GAAG,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAA;AAExE,mEAAmE;AACnE,MAAM,CAAC,MAAM,eAAe,GAAG,wBAAwB,CAAA;AAEvD;uEACuE;AACvE,MAAM,MAAM,GAAG;IACb,0EAA0E;IAC1E,KAAK,eAAe,uDAAuD;IAC3E,gEAAgE;CACjE,CAAA;AAED;0DAC0D;AAC1D,MAAM,eAAe,GAAG,4MAA4M,CAAA;AAEpO,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC7B,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAE,CAAC,EAAE,CAAA;IAC9D,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAA;IACvB,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,CAAC,EAAE,CAAA;IACtD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAClC,CAAC;AAUD,6EAA6E;AAC7E,SAAS,SAAS,CAAC,GAAa,EAAE,GAAW;IAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAA;IAClC,MAAM,GAAG,GAAG,IAAI,OAAO,EAAE,CAAA;IACzB,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,KAAK,EAAE;QAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAC/F,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACjB,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,QAAgB,EAAE,OAAgB;IAC5E,MAAM,GAAG,GAAa,aAAa,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAA;IACxD,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IACjE,wEAAwE;IACxE,yEAAyE;IACzE,6DAA6D;IAC7D,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI;QAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;IAC5D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IAEhE,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9D,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,QAAQ,EAAE,GAAG,mBAAmB,CAAC;QAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAExE,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAA;IAEnD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IACxC,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;QAChD,OAAO,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;IACF,MAAM,CAAC,GAAG,CAAC,sBAAsB,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IAE9D,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IACnC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,eAAe,CAAC,CAAA;IAClG,IAAI,OAAO;QAAE,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;IACtC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAE/C,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAA;AAC3E,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAAkB,EAClB,QAAgB,EAChB,QAAiB;IAEjB,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAA;IACjE,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC9E,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,4BAA4B,EAAE,IAAI,EAAE,UAAU,EAAE,EAC1D,GAAG,UAAU,6FAA6F,CAC3G,CAAA;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,qBAAqB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,EACnE,2DAA2D,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjF,CAAA;IACH,CAAC;IAED,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,eAAe,CAAC,CAAA;IACrE,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3D,MAAM,OAAO,GAAG,QAAQ,GAAG,cAAc,CAAA;QACzC,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;QACrD,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IACpC,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACxC,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,GAAG,cAAc,CAAA;IAC3C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7D,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IAC7C,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IAEpC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAC9D,gEAAgE,CACjE,CAAA;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}
+{"version":3,"file":"aiderConfigMerger.js","sourceRoot":"","sources":["../../src/harness/aiderConfigMerger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAiB,MAAM,MAAM,CAAA;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAA;AACzD,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAEvE,MAAM,GAAG,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAA;AAE7C;;;GAGG;AACH,MAAM,eAAe,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;AAElG,gFAAgF;AAChF,MAAM,mBAAmB,GAAG,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAA;AAExE,gDAAgD;AAChD,MAAM,CAAC,MAAM,eAAe,GAAG,wBAAwB,CAAA;AAEvD;uEACuE;AACvE,MAAM,MAAM,GAAG;IACb,0EAA0E;IAC1E,KAAK,eAAe,uDAAuD;IAC3E,gEAAgE;CACjE,CAAA;AAED,gEAAgE;AAChE,MAAM,CAAC,MAAM,oBAAoB,GAAG,6BAA6B,CAAA;AAEjE;oEACoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAE,aAAqB;IACpE,OAAO,KAAK,KAAK,eAAe,IAAI,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,CAAA;AACzF,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,aAAqB;IACvE,OAAO,gBAAgB,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAA;AAC3G,CAAC;AAED;0DAC0D;AAC1D,MAAM,eAAe,GAAG,4MAA4M,CAAA;AAEpO,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC7B,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAE,CAAC,EAAE,CAAA;IAC9D,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAA;IACvB,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,CAAC,EAAE,CAAA;IACtD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAClC,CAAC;AAUD,6EAA6E;AAC7E,SAAS,SAAS,CAAC,GAAa,EAAE,GAAW;IAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAA;IAClC,MAAM,GAAG,GAAG,IAAI,OAAO,EAAE,CAAA;IACzB,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,KAAK,EAAE;QAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAC/F,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACjB,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,QAAgB,EAAE,aAAqB,EAAE,OAAgB;IACnG,MAAM,GAAG,GAAa,aAAa,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAA;IACxD,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IACjE,wEAAwE;IACxE,yEAAyE;IACzE,6DAA6D;IAC7D,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI;QAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;IAC5D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IAEhE,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9D,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,QAAQ,EAAE,GAAG,mBAAmB,CAAC;QAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAExE,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAA;IAEnD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IACxC,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;QAChD,OAAO,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;IACF,MAAM,CAAC,GAAG,CAAC,sBAAsB,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IAE9D,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IACnC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAA;IAC9G,IAAI,OAAO;QAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,CAAA;IAChE,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAE/C,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAA;AAC3E,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAAkB,EAClB,QAAgB,EAChB,QAAiB;IAEjB,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAA;IACjE,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;IACxG,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,4BAA4B,EAAE,IAAI,EAAE,UAAU,EAAE,EAC1D,GAAG,UAAU,6FAA6F,CAC3G,CAAA;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,qBAAqB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,EACnE,2DAA2D,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjF,CAAA;IACH,CAAC;IAED,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,eAAe,CAAC,CAAA;IACrE,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3D,MAAM,OAAO,GAAG,QAAQ,GAAG,cAAc,CAAA;QACzC,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;QACrD,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IACpC,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACxC,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,GAAG,cAAc,CAAA;IAC3C,4EAA4E;IAC5E,MAAM,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAA;IACxD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7D,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IAC7C,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IAEpC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAC9D,gEAAgE,CACjE,CAAA;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,UAAkB,EAAE,KAAa;IAC1E,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAA;IACjE,CAAC;IACD,MAAM,GAAG,GAAa,aAAa,CAAC,GAAG,CAAC,CAAA;IACxC,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;IACvF,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,0BAA0B,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,GAAG,UAAU,yCAAyC,CAAC,CAAA;QAC1H,OAAM;IACR,CAAC;IACD,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IACnC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC;QAAE,OAAM;IACrF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACf,MAAM,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAA;IACxD,MAAM,OAAO,GAAG,UAAU,GAAG,cAAc,CAAA;IAC3C,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAA;IACpD,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;AACtC,CAAC"}

package/dist/harness/antigravityCliHooks.d.ts

@@ -0,0 +1,61 @@
+/**
+ * antigravityCliHooks.ts — Google Antigravity governance hook injection.
+ *
+ * Antigravity (the 2.0 desktop app, the IDE and Antigravity CLI, which
+ * replaced Gemini CLI for individual users in 2026) runs command hooks from
+ * `<workspace>/.agents/hooks.json` and `~/.gemini/config/hooks.json`
+ * (https://antigravity.google/docs/hooks/). This module:
+ *
+ * 1. Writes the gate script to `.intutic/hooks/antigravity-cli-check.js`.
+ * 2. Merges an `intutic-governance` entry into `~/.gemini/config/hooks.json`,
+ *    keeping every other hook in the file. A file that is not a plain JSON
+ *    object is left alone and reported.
+ *
+ * # The hook contract, from the documentation
+ *
+ * The file's top-level keys are hook names; each maps event names to
+ * handlers. `PreToolUse` takes `{matcher, hooks: [{type, command, timeout?}]}`
+ * entries, where a matcher of `"*"` applies to every tool. The command gets
+ * `{toolCall: {name, args}, conversationId, workspacePaths, ...}` on stdin,
+ * camelCase, with Antigravity's own tool names (`run_command` with
+ * `CommandLine`, `write_to_file` and `replace_file_content` with
+ * `TargetFile`). It refuses a call by printing
+ * `{"decision":"deny","reason":"..."}` on stdout — the same shape as Grok
+ * Build's, so the gate uses the `stdout-decision-deny` contract.
+ *
+ * On an allowed call the gate prints `{}`: a JSON object, which every hook
+ * must print, with no decision in it, so Antigravity's own permission
+ * settings decide. The documented values all change what the user sees:
+ * `allow` is documented to auto-approve the call past the permission prompts
+ * the user configured, `ask` and `force_ask` to prompt, and
+ * `deny_unless_prior_grant` to refuse what was never granted. The
+ * documentation marks `decision` as required without saying how a result
+ * without one is read, so it was read from Antigravity itself (2.21.1, its
+ * `language_server`): `decision` is an optional string, `{}` parses to an
+ * empty one, and an empty decision is the lowest-ranked result when several
+ * hooks answer (deny > force_ask > deny_unless_prior_grant > ask >
+ * auto_approve > allow > none), so it never overrides another hook, and the
+ * permission check skips it, leaving the call to the user's own permission
+ * settings. A decision Antigravity does not know is reported as an error.
+ *
+ * HLD §3.14 — Three-Tier Defense Cascade (Tier 1 Native Gating)
+ * @module
+ */
+/** The key Intutic owns in Antigravity's hooks file. */
+export declare const ANTIGRAVITY_HOOK_NAME = "intutic-governance";
+/** The gate script's file name in `.intutic/hooks/`. */
+export declare const ANTIGRAVITY_CLI_GATE = "antigravity-cli-check.js";
+/** `~/.gemini/config/hooks.json`, resolved at call time so a moved HOME is honoured. */
+export declare function antigravityHooksPath(): string;
+/** The `intutic-governance` entry for Antigravity's hooks file. */
+export declare function buildAntigravityHookEntry(hookScriptPath: string): Record<string, unknown>;
+/**
+ * Write the Antigravity gate script and merge its registration into
+ * `~/.gemini/config/hooks.json`.
+ *
+ * @param workspaceRoot - Absolute workspace root path.
+ * @param proxyUrl      - Intutic proxy URL written into the script header.
+ * @param workspaceId   - Workspace ID embedded in every hook event payload.
+ */
+export declare function writeAntigravityCliHooks(workspaceRoot: string, proxyUrl: string, workspaceId?: string): Promise<void>;
+//# sourceMappingURL=antigravityCliHooks.d.ts.map

package/dist/harness/antigravityCliHooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"antigravityCliHooks.d.ts","sourceRoot":"","sources":["../../src/harness/antigravityCliHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAcH,wDAAwD;AACxD,eAAO,MAAM,qBAAqB,uBAAuB,CAAA;AAEzD,wDAAwD;AACxD,eAAO,MAAM,oBAAoB,6BAA6B,CAAA;AAE9D,wFAAwF;AACxF,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,mEAAmE;AACnE,wBAAgB,yBAAyB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAYzF;AAqGD;;;;;;;GAOG;AACH,wBAAsB,wBAAwB,CAC5C,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,WAAW,SAAK,GACf,OAAO,CAAC,IAAI,CAAC,CA2Bf"}