@intutic/sync-daemon 2.1.0 → 2.3.0

package/dist/lib/decisionsDigest.js

@@ -16,7 +16,7 @@
  *
  * Opt-in via `WorkspaceSettings.decisionsLogEnabled` (default off). The
  * CALLER is responsible for that gate — `refreshDecisionsDigest` always
- * fetches and writes when invoked, so `syncLoop.ts` only calls it when the
+ * fetches and writes when invoked, so `intutic connect` only calls it when the
  * workspace has opted in. When disabled, the caller simply stops calling
  * this module; existing files are left as they were last written rather than
  * being force-deleted (a developer's editor may have that file open) or
@@ -29,13 +29,22 @@
  *     pattern (i): a DO-NOT-EDIT header + `atomicWrite`. Gitignored — runtime
  *     artifacts stay untracked, the same rule this repo's own CLAUDE.md doc
  *     comment states for daemon-generated governance files.
- *  2. A bounded, marker-delimited section (last ~10 entries) idempotently
- *     injected into the `claude-code` harness's own regenerated config file
- *     (`HARNESS_FILES['claude-code']`, i.e. `CLAUDE.md`) — this is what makes
- *     the digest something the agent actually reads without needing to know
- *     `.intutic/DECISIONS.md` exists. A marker pair
- *     (`INTUTIC:DECISIONS_LOG:START`/`END`) is replaced in place on every
- *     cycle, never re-appended.
+ *  2. The newest ~10 entries, delivered to every active harness that reads
+ *     an instructions file, where `HARNESS_RULES_FILES` says it reads them
+ *     (`decisionsTargetOf`) — this is what makes the digest something the
+ *     agent actually reads without needing to know `.intutic/DECISIONS.md`
+ *     exists. In a file the user also writes (`AGENTS.md`, `GEMINI.md`,
+ *     ...) it is a marked section of its own (`INTUTIC:DECISIONS_LOG`),
+ *     apart from the rules section; next to a rules file of Intutic's own it
+ *     is a second file (`.claude/rules/intutic-decisions.md`, ...). Claude
+ *     Code gets it from `.claude/rules/`, which it loads with or without a
+ *     `CLAUDE.md`; `CLAUDE.md` itself is never written. When Claude Code
+ *     also reads the workspace's `AGENTS.md` and that file carries the
+ *     section for another harness, Claude Code's own file is left out, so it
+ *     does not read the log twice (see `claudeAgentsMd.ts`).
+ *
+ * Earlier versions put the section in `CLAUDE.md`; {@link
+ * retireClaudeMdDigest} takes it out again on every sync.
  *
  * Deliberately does NOT reuse `configWriter.ts`'s own `fileHeader()` for the
  * DECISIONS.md header — that helper stamps `newIso()` (wall-clock "Last
@@ -49,13 +58,18 @@
 import * as fs from 'node:fs/promises';
 import * as path from 'node:path';
 import { createLogger } from '@intutic/logger';
-import { HarnessType } from '@intutic/shared-types';
-import { HARNESS_FILES, atomicWrite } from '../configWriter.js';
+import { HarnessType, decisionsTargetOf, rulesFileOf } from '@intutic/shared-types';
+import { atomicWrite } from '../configWriter.js';
+import { DECISIONS_MARKERS, removeRulesSection, retireRulesFile, writeRulesSection } from '../harness/rulesSection.js';
+import { claudeCodeReadsAgentsMd } from '../harness/claudeAgentsMd.js';
+import { openclawAgentWorkspace } from '../harness/openclawHooks.js';
+import { ensureAiderReadEntry } from '../harness/aiderConfigMerger.js';
+import { forgetOriginal, readOriginal, writeOwnedFile } from '../disconnect/originals.js';
 const log = createLogger('sync-decisions-digest');
 /** Relative to the workspace root. */
 export const DECISIONS_LOG_RELATIVE_PATH = path.join('.intutic', 'DECISIONS.md');
-const SECTION_START = '<!-- INTUTIC:DECISIONS_LOG:START -->';
-const SECTION_END = '<!-- INTUTIC:DECISIONS_LOG:END -->';
+/** First line of the decisions log's own files, which `intutic disconnect` recognises. */
+export const DECISIONS_FILE_HEADER = '# Intutic Governed Decisions Log (auto-generated)';
 /**
  * Trims trailing `/` without a regex — see the identical helper in
  * `egressPolicy.ts`/`approvedBypasses.ts`: `/\/+$/` is flagged by CodeQL as a
@@ -131,29 +145,93 @@ export function renderDecisionsMarkdown(entries) {
     const lines = entries.map((e) => `- ${e.timestamp} — ${e.summary}`);
     return header + lines.join('\n') + '\n';
 }
-/** Renders the bounded, marker-delimited section injected into the harness config file — the newest `limit` entries only. */
-export function renderBoundedSection(entries, limit = 10) {
+/** The newest `limit` entries, as the body of the section or file each harness reads. */
+export function renderDecisionsSectionBody(entries, limit = 10) {
     const bounded = entries.slice(0, limit);
     const lines = bounded.length > 0
         ? bounded.map((e) => `- ${e.timestamp} — ${e.summary}`)
         : ['_No governance decisions recorded yet._'];
-    return [SECTION_START, '## Recent Governed Decisions', '', ...lines, SECTION_END].join('\n');
+    return ['## Recent Governed Decisions', '', ...lines].join('\n');
+}
+/** A harness's decisions file: the product's front matter, the header, the entries. */
+function renderDecisionsFile(body, frontMatter) {
+    const head = frontMatter ? `---\n${frontMatter}\n---\n\n` : '';
+    return `${head}${DECISIONS_FILE_HEADER}\n# DO NOT EDIT — managed by intutic sync daemon\n\n${body}\n`;
+}
+async function readText(file) {
+    try {
+        return await fs.readFile(file, 'utf-8');
+    }
+    catch {
+        return null;
+    }
 }
 /**
- * Idempotently inject/replace the bounded section in `content`. If the
- * markers are present, everything between them (inclusive) is replaced — the
- * mechanism the `applyConfigEdits` SkillOpt writer already uses elsewhere in
- * this file's sibling module, `configWriter.ts` — never duplicated. If
- * absent, the section is appended once, with a separating blank line.
+ * Writes `body` wherever each of `harnesses` reads its instructions, once per
+ * file. Claude Code's own file is left out (and removed) when Claude Code
+ * reads the workspace's `AGENTS.md` and that file gets the section for
+ * another harness.
  */
-export function injectBoundedSection(content, section) {
-    const startIdx = content.indexOf(SECTION_START);
-    const endIdx = content.indexOf(SECTION_END);
-    if (startIdx !== -1 && endIdx !== -1 && endIdx > startIdx) {
-        return content.slice(0, startIdx) + section + content.slice(endIdx + SECTION_END.length);
+export async function writeDecisionsTargets(workspaceRoot, harnesses, body) {
+    const claudeFromAgentsMd = harnesses.includes(HarnessType.CLAUDE_CODE) &&
+        harnesses.some((h) => rulesFileOf(h) === 'AGENTS.md') &&
+        (await claudeCodeReadsAgentsMd(workspaceRoot));
+    const written = new Set();
+    for (const harness of harnesses) {
+        const target = decisionsTargetOf(harness);
+        if (!target)
+            continue;
+        const file = target.kind === 'section' && target.scope === 'user'
+            ? path.join(await openclawAgentWorkspace(), 'AGENTS.md')
+            : path.join(workspaceRoot, target.path);
+        if (harness === HarnessType.CLAUDE_CODE && claudeFromAgentsMd) {
+            await retireRulesFile(file, workspaceRoot);
+            continue;
+        }
+        if (written.has(file))
+            continue;
+        written.add(file);
+        if (target.kind === 'section') {
+            await writeRulesSection(file, workspaceRoot, body, DECISIONS_MARKERS);
+            continue;
+        }
+        const content = renderDecisionsFile(body, target.frontMatter?.('Intutic governed decisions log') ?? '');
+        if ((await readText(file)) !== content)
+            await writeOwnedFile(file, workspaceRoot, content);
+        // Aider loads no file it is not told about.
+        if (harness === HarnessType.AIDER)
+            await ensureAiderReadEntry(path.join(workspaceRoot, '.aider.conf.yml'), file);
     }
-    const sep = content.endsWith('\n\n') ? '' : content.endsWith('\n') ? '\n' : '\n\n';
-    return `${content}${sep}${section}\n`;
+}
+/**
+ * Takes out the decisions-log section earlier versions wrote into the
+ * workspace's `CLAUDE.md`, leaving the user's text as it was. A `CLAUDE.md`
+ * Intutic created that holds nothing else goes, with its record; one an
+ * earlier version wrote whole is given back (`retireRulesFile`). Runs on
+ * every sync, whether or not the decisions log is on.
+ */
+export async function retireClaudeMdDigest(workspaceRoot) {
+    const file = path.join(workspaceRoot, 'CLAUDE.md');
+    const text = await readText(file);
+    if (text === null)
+        return;
+    const next = removeRulesSection(text, DECISIONS_MARKERS);
+    if (next !== null) {
+        const record = await readOriginal(file, workspaceRoot);
+        if (next.trim() === '' && record && !record.existed) {
+            await fs.rm(file, { force: true });
+            await forgetOriginal(file, workspaceRoot);
+            log.info({ action: 'decisions_claude_md_removed', path: file }, 'Removed the CLAUDE.md an earlier version created for the decisions log');
+            return;
+        }
+        const mode = (await fs.stat(file)).mode & 0o7777;
+        const tmp = `${file}.intutic-tmp`;
+        await fs.writeFile(tmp, next, 'utf-8');
+        await fs.chmod(tmp, mode);
+        await fs.rename(tmp, file);
+        log.info({ action: 'decisions_claude_md_section_removed', path: file }, 'Took the decisions-log section out of CLAUDE.md');
+    }
+    await retireRulesFile(file, workspaceRoot);
 }
 /**
  * Fetch and write both files in one call, mirroring `refreshEgressPolicy`.
@@ -169,26 +247,7 @@ export async function refreshDecisionsDigest(opts) {
     try {
         const fullPath = path.join(opts.workspaceRoot, DECISIONS_LOG_RELATIVE_PATH);
         await atomicWrite(fullPath, renderDecisionsMarkdown(digest.entries));
-        if (opts.harnesses.includes(HarnessType.CLAUDE_CODE)) {
-            const claudeMdPath = path.join(opts.workspaceRoot, HARNESS_FILES[HarnessType.CLAUDE_CODE]);
-            let existing = null;
-            try {
-                existing = await fs.readFile(claudeMdPath, 'utf-8');
-            }
-            catch {
-                existing = null;
-            }
-            if (existing !== null) {
-                const section = renderBoundedSection(digest.entries, 10);
-                const updated = injectBoundedSection(existing, section);
-                if (updated !== existing) {
-                    await atomicWrite(claudeMdPath, updated);
-                }
-            }
-            else {
-                log.debug({ action: 'decisions_digest_skip_inject' }, 'claude-code config file not written yet this run — skipping bounded-section injection this cycle');
-            }
-        }
+        await writeDecisionsTargets(opts.workspaceRoot, opts.harnesses, renderDecisionsSectionBody(digest.entries, 10));
         return { entriesWritten: digest.entries.length };
     }
     catch (err) {

package/dist/lib/decisionsDigest.js.map

@@ -1 +1 @@
-{"version":3,"file":"decisionsDigest.js","sourceRoot":"","sources":["../../src/lib/decisionsDigest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAE/D,MAAM,GAAG,GAAG,YAAY,CAAC,uBAAuB,CAAC,CAAA;AAEjD,sCAAsC;AACtC,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAA;AAEhF,MAAM,aAAa,GAAG,sCAAsC,CAAA;AAC5D,MAAM,WAAW,GAAG,oCAAoC,CAAA;AAwBxD;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,CAAS;IACpC,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,CAAA;IAClB,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,SAAS;QAAE,GAAG,EAAE,CAAA;IAC/D,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AACxB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAC7D,MAAM,CAAC,GAAG,KAAgC,CAAA;IAC1C,OAAO,CACL,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;QACxB,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAC1B,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAC9B,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAgF;IAEhF,MAAM,GAAG,GACP,GAAG,mBAAmB,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC;QAChF,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAA;IACxD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,WAAW,EAAE;YACvF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,+BAA+B,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAC/D,kCAAkC,CACnC,CAAA;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAY,CAAA;QAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAC1D,MAAM,GAAG,GAAG,IAA+B,CAAA;QAC3C,MAAM,WAAW,GAAG,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAA;QAC5F,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACnF,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAA;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,+BAA+B,EAAE,GAAG,EAAE,EAAE,8BAA8B,CAAC,CAAA;QAC1F,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,SAAS,YAAY,CAAC,OAA+B;IACnD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,OAAO,CAAA;IAC/C,OAAO;QACL,mDAAmD;QACnD,gDAAgD;QAChD,wBAAwB,MAAM,EAAE;QAChC,GAAG;QACH,sEAAsE;QACtE,yEAAyE;QACzE,yCAAyC;QACzC,EAAE;QACF,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,uBAAuB,CAAC,OAA+B;IACrE,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IACpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,MAAM,2CAA2C,CAAA;IAC7D,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;IACnE,OAAO,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;AACzC,CAAC;AAED,6HAA6H;AAC7H,MAAM,UAAU,oBAAoB,CAAC,OAA+B,EAAE,KAAK,GAAG,EAAE;IAC9E,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IACvC,MAAM,KAAK,GACT,OAAO,CAAC,MAAM,GAAG,CAAC;QAChB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QACvD,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAA;IACjD,OAAO,CAAC,aAAa,EAAE,8BAA8B,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC9F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,OAAe;IACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;IAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAC3C,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC1D,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1F,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAA;IAClF,OAAO,GAAG,OAAO,GAAG,GAAG,GAAG,OAAO,IAAI,CAAA;AACvC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAA4B;IAE5B,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAA;IAC/C,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAEhC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAA;QAC3E,MAAM,WAAW,CAAC,QAAQ,EAAE,uBAAuB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;QAEpE,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;YACrD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAA;YAC1F,IAAI,QAAQ,GAAkB,IAAI,CAAA;YAClC,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;YACrD,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,IAAI,CAAA;YACjB,CAAC;YACD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;gBACxD,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;gBACvD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACzB,MAAM,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;gBAC1C,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,KAAK,CACP,EAAE,MAAM,EAAE,8BAA8B,EAAE,EAC1C,kGAAkG,CACnG,CAAA;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAA;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,+BAA+B,EAAE,GAAG,EAAE,EAAE,qCAAqC,CAAC,CAAA;QACjG,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}
+{"version":3,"file":"decisionsDigest.js","sourceRoot":"","sources":["../../src/lib/decisionsDigest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AACtH,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAA;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAA;AACtE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAEzF,MAAM,GAAG,GAAG,YAAY,CAAC,uBAAuB,CAAC,CAAA;AAEjD,sCAAsC;AACtC,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAA;AAEhF,0FAA0F;AAC1F,MAAM,CAAC,MAAM,qBAAqB,GAAG,mDAAmD,CAAA;AAwBxF;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,CAAS;IACpC,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,CAAA;IAClB,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,SAAS;QAAE,GAAG,EAAE,CAAA;IAC/D,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AACxB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAC7D,MAAM,CAAC,GAAG,KAAgC,CAAA;IAC1C,OAAO,CACL,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;QACxB,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAC1B,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAC9B,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAgF;IAEhF,MAAM,GAAG,GACP,GAAG,mBAAmB,CAAC,IAAI,CAAC,eAAe,CAAC,oCAAoC;QAChF,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAA;IACxD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,WAAW,EAAE;YACvF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,+BAA+B,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAC/D,kCAAkC,CACnC,CAAA;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAY,CAAA;QAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAC1D,MAAM,GAAG,GAAG,IAA+B,CAAA;QAC3C,MAAM,WAAW,GAAG,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAA;QAC5F,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACnF,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAA;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,+BAA+B,EAAE,GAAG,EAAE,EAAE,8BAA8B,CAAC,CAAA;QAC1F,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,SAAS,YAAY,CAAC,OAA+B;IACnD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,OAAO,CAAA;IAC/C,OAAO;QACL,mDAAmD;QACnD,gDAAgD;QAChD,wBAAwB,MAAM,EAAE;QAChC,GAAG;QACH,sEAAsE;QACtE,yEAAyE;QACzE,yCAAyC;QACzC,EAAE;QACF,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,uBAAuB,CAAC,OAA+B;IACrE,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IACpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,MAAM,2CAA2C,CAAA;IAC7D,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;IACnE,OAAO,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;AACzC,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,0BAA0B,CAAC,OAA+B,EAAE,KAAK,GAAG,EAAE;IACpF,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IACvC,MAAM,KAAK,GACT,OAAO,CAAC,MAAM,GAAG,CAAC;QAChB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QACvD,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAA;IACjD,OAAO,CAAC,8BAA8B,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAClE,CAAC;AAED,uFAAuF;AACvF,SAAS,mBAAmB,CAAC,IAAY,EAAE,WAAmB;IAC5D,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,WAAW,WAAW,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9D,OAAO,GAAG,IAAI,GAAG,qBAAqB,uDAAuD,IAAI,IAAI,CAAA;AACvG,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,aAAqB,EAAE,SAAiC,EAAE,IAAY;IAChH,MAAM,kBAAkB,GACtB,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC;QAC3C,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC;QACrD,CAAC,MAAM,uBAAuB,CAAC,aAAa,CAAC,CAAC,CAAA;IAChD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;QACzC,IAAI,CAAC,MAAM;YAAE,SAAQ;QACrB,MAAM,IAAI,GACR,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM;YAClD,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,sBAAsB,EAAE,EAAE,WAAW,CAAC;YACxD,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;QAC3C,IAAI,OAAO,KAAK,WAAW,CAAC,WAAW,IAAI,kBAAkB,EAAE,CAAC;YAC9D,MAAM,eAAe,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;YAC1C,SAAQ;QACV,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAQ;QAC/B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACjB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,iBAAiB,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAA;YACrE,SAAQ;QACV,CAAC;QACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,gCAAgC,CAAC,IAAI,EAAE,CAAC,CAAA;QACvG,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,OAAO;YAAE,MAAM,cAAc,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,CAAA;QAC1F,4CAA4C;QAC5C,IAAI,OAAO,KAAK,WAAW,CAAC,KAAK;YAAE,MAAM,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,iBAAiB,CAAC,EAAE,IAAI,CAAC,CAAA;IAClH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,aAAqB;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;IAClD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;IACjC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAM;IACzB,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAA;IACxD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;QACtD,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpD,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YAClC,MAAM,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;YACzC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,6BAA6B,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,wEAAwE,CAAC,CAAA;YACzI,OAAM;QACR,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAA;QAChD,MAAM,GAAG,GAAG,GAAG,IAAI,cAAc,CAAA;QACjC,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QACtC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QACzB,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAC1B,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,qCAAqC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,iDAAiD,CAAC,CAAA;IAC5H,CAAC;IACD,MAAM,eAAe,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;AAC5C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAA4B;IAE5B,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAA;IAC/C,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAEhC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAA;QAC3E,MAAM,WAAW,CAAC,QAAQ,EAAE,uBAAuB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;QAEpE,MAAM,qBAAqB,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,0BAA0B,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;QAE/G,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAA;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,+BAA+B,EAAE,GAAG,EAAE,EAAE,qCAAqC,CAAC,CAAA;QACjG,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/lib/egressPolicy.d.ts

@@ -1,8 +1,8 @@
 /**
  * egressPolicy.ts — ships the workspace's central egress policy *to* the
  * machine, so an admin sets `enforce`/`monitor` + an allow list once in the
- * control plane rather than in every developer's local proxy config
- * (LLD #63 §4). Mirrors `policySnapshot.ts` / `approvedBypasses.ts`: fetch from
+ * control plane rather than in every developer's local proxy config.
+ * Mirrors `policySnapshot.ts` / `approvedBypasses.ts`: fetch from
  * the control plane, write a local artifact under `.intutic/hooks` with
  * integrity headers, and let the consumer (here the Rust proxy) read it.
  *

package/dist/lib/egressPolicy.js

@@ -1,8 +1,8 @@
 /**
  * egressPolicy.ts — ships the workspace's central egress policy *to* the
  * machine, so an admin sets `enforce`/`monitor` + an allow list once in the
- * control plane rather than in every developer's local proxy config
- * (LLD #63 §4). Mirrors `policySnapshot.ts` / `approvedBypasses.ts`: fetch from
+ * control plane rather than in every developer's local proxy config.
+ * Mirrors `policySnapshot.ts` / `approvedBypasses.ts`: fetch from
  * the control plane, write a local artifact under `.intutic/hooks` with
  * integrity headers, and let the consumer (here the Rust proxy) read it.
  *

package/dist/lib/mcpRegistryPy.d.ts

@@ -0,0 +1,11 @@
+/**
+ * The MCP server registry and allowlist decisions in Python, for the bash
+ * gates (their extractor already requires python3).
+ *
+ * Byte-identical to `packages/intutic-clawde/intutic_clawde/gate/mcp_registry.py`,
+ * which a test compares; edit that file and copy it here. It is the
+ * transliteration of `@intutic/shared-types`'s mcpRegistryRecord.ts, and both
+ * run the shared vectors.
+ */
+export declare const MCP_REGISTRY_PY_SOURCE: string;
+//# sourceMappingURL=mcpRegistryPy.d.ts.map

package/dist/lib/mcpRegistryPy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpRegistryPy.d.ts","sourceRoot":"","sources":["../../src/lib/mcpRegistryPy.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,QAkKlC,CAAA"}

package/dist/lib/mcpRegistryPy.js

@@ -0,0 +1,173 @@
+/**
+ * The MCP server registry and allowlist decisions in Python, for the bash
+ * gates (their extractor already requires python3).
+ *
+ * Byte-identical to `packages/intutic-clawde/intutic_clawde/gate/mcp_registry.py`,
+ * which a test compares; edit that file and copy it here. It is the
+ * transliteration of `@intutic/shared-types`'s mcpRegistryRecord.ts, and both
+ * run the shared vectors.
+ */
+export const MCP_REGISTRY_PY_SOURCE = String.raw `"""The MCP server registry and allowlist decisions, read from the policy snapshot.
+
+A transliteration of packages/shared-types/src/mcpRegistryRecord.ts: the
+registry decision (evaluateMcpRegistry), the allowlist decision
+(evaluateMcpAllowlist), and the snapshot's @mcp_registry and @mcp_allowlist
+records. The control plane's hook gate, the MCP proxy and the JavaScript hook
+gates run the TypeScript; the bash hook gates and this package run this file,
+and every one of them runs packages/shared-types/fixtures/mcp-registry-vectors.json,
+so all of them refuse a call with the same code, rule id and reason.
+
+The bash gates emit this file verbatim (services/sync-daemon/src/lib/mcpRegistryPy.ts
+holds a byte-identical copy, which a test compares). It must stay
+self-contained: the standard library only, no module state beyond the
+constants below, and no backtick or dollar-brace, which the TypeScript copy
+cannot hold.
+
+Both records sit inside the snapshot's digest. A gate that finds the snapshot
+unverified (its digest broken or missing, or another workspace's) trusts
+neither: it refuses every MCP call with unverified_refusal, at block, in an
+observe-only workspace too.
+"""
+
+import base64
+import json
+
+MCP_REGISTRY_RECORD_TAG = "@mcp_registry"
+MCP_ALLOWLIST_RECORD_TAG = "@mcp_allowlist"
+
+
+def split_mcp_tool_name(tool):
+    """(server, tool) for a harness name mcp__<server>__<tool>, else None.
+
+    The server is the part before the first double underscore; the tool, the
+    rest, may hold more of them.
+    """
+    if not isinstance(tool, str) or not tool.startswith("mcp__"):
+        return None
+    rest = tool[len("mcp__"):]
+    sep = rest.find("__")
+    if sep <= 0:
+        return None
+    return rest[:sep], rest[sep + 2:]
+
+
+def _strings(value):
+    return [v for v in value if isinstance(v, str)] if isinstance(value, list) else []
+
+
+def parse_registry(value):
+    """The registry as the control plane sends it, or None for a non-object.
+
+    Wrong-typed lists read as empty, and any default but deny as allow.
+    """
+    if not isinstance(value, dict):
+        return None
+    disabled = {}
+    if isinstance(value.get("disabledTools"), dict):
+        for server, tools in value["disabledTools"].items():
+            names = _strings(tools)
+            if names:
+                disabled[server] = names
+    return {
+        "defaultPolicy": "deny" if value.get("defaultPolicy") == "deny" else "allow",
+        "approvedServers": _strings(value.get("approvedServers")),
+        "blockedServers": _strings(value.get("blockedServers")),
+        "heldServers": _strings(value.get("heldServers")),
+        "disabledTools": disabled,
+    }
+
+
+def decode_registry_record(line):
+    """The @mcp_registry line's registry; None for another line or a damaged one."""
+    parts = line.split("\t")
+    if len(parts) != 2 or parts[0] != MCP_REGISTRY_RECORD_TAG or not parts[1]:
+        return None
+    try:
+        return parse_registry(json.loads(base64.b64decode(parts[1], validate=True).decode("utf-8")))
+    except Exception:
+        return None
+
+
+def evaluate_registry(registry, server, tool):
+    """(code, rule_id, reason) refusing one MCP call, or None to let it continue.
+
+    A blocked server, then a held one, then (under deny) one not approved,
+    then a disabled tool.
+    """
+    if server in registry["blockedServers"]:
+        return (
+            "SERVER_BLOCKED",
+            "mcp_registry." + server,
+            "MCP server \"" + server + "\" is blocked in this workspace's MCP server registry. "
+            "An owner or admin can change that on the MCP Servers page.",
+        )
+    if server in registry["heldServers"]:
+        return (
+            "SERVER_HELD",
+            "mcp_registry." + server,
+            "MCP server \"" + server + "\" changed its tools in a way scored high risk, and this workspace "
+            "holds such a server until it is approved again. It is waiting in the approval queue on the MCP "
+            "Servers page for an owner or admin.",
+        )
+    if registry["defaultPolicy"] == "deny" and server not in registry["approvedServers"]:
+        return (
+            "SERVER_NOT_APPROVED",
+            "mcpDefaultPolicy",
+            "MCP server \"" + server + "\" is not approved in this workspace's MCP server registry, "
+            "and the workspace refuses unapproved servers (mcpDefaultPolicy: deny). It is waiting in "
+            "the approval queue on the MCP Servers page for an owner or admin.",
+        )
+    if tool in registry["disabledTools"].get(server, []):
+        return (
+            "TOOL_DISABLED",
+            "mcp_registry." + server + "." + tool,
+            "Tool \"" + tool + "\" is disabled on MCP server \"" + server + "\" in this workspace's "
+            "MCP server registry. An owner or admin can re-enable it on the MCP Servers page.",
+        )
+    return None
+
+
+def decode_allowlist_record(line):
+    """The @mcp_allowlist line as {"severity", "servers"}; None for another line.
+
+    A severity other than shadow reads as block, so a damaged one refuses.
+    """
+    parts = line.split("\t")
+    if len(parts) != 3 or parts[0] != MCP_ALLOWLIST_RECORD_TAG:
+        return None
+    return {
+        "severity": "shadow" if parts[1] == "shadow" else "block",
+        "servers": [s for s in parts[2].split(",") if s],
+    }
+
+
+def evaluate_allowlist(allowlist, server):
+    """(code, rule_id, reason) for a server the allowlist does not name, else None.
+
+    Under shadow the caller records the refusal instead of enforcing it.
+    """
+    if server in allowlist["servers"]:
+        return None
+    return (
+        "SERVER_NOT_ALLOWED",
+        "mcp_allowlist",
+        "MCP server \"" + server + "\" is not on the MCP server allowlist for this workspace",
+    )
+
+
+def unverified_refusal(server):
+    """(code, rule_id, reason) refusing an MCP call on an unverified snapshot.
+
+    Neither the registry's approvals nor the allowlist's servers can be
+    vouched for, and a deleted record looks like one never set, so the
+    snapshot admits no MCP server at all.
+    """
+    return (
+        "POLICY_SNAPSHOT_UNVERIFIED",
+        "policy_snapshot",
+        "MCP server \"" + server + "\" is refused because the policy snapshot on this machine failed its "
+        "integrity check, so its MCP server registry and allowlist admit no server until the sync daemon "
+        "restores a verified snapshot",
+    )
+`;
+//# sourceMappingURL=mcpRegistryPy.js.map

package/dist/lib/mcpRegistryPy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpRegistryPy.js","sourceRoot":"","sources":["../../src/lib/mcpRegistryPy.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkK/C,CAAA"}

package/dist/lib/phrasesPy.d.ts

@@ -0,0 +1,11 @@
+/**
+ * The phrase matcher in Python, for the gates that run Python: the bash gates
+ * (their extractor already requires python3) and the Open WebUI filter.
+ *
+ * Byte-identical to `packages/intutic-clawde/intutic_clawde/gate/phrases.py`,
+ * which a test compares; edit that file and copy it here. It is the
+ * transliteration of `@intutic/shared-types`'s phrases.ts, and both run the
+ * shared vectors.
+ */
+export declare const PHRASES_PY_SOURCE: string;
+//# sourceMappingURL=phrasesPy.d.ts.map

package/dist/lib/phrasesPy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"phrasesPy.d.ts","sourceRoot":"","sources":["../../src/lib/phrasesPy.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,QAoV7B,CAAA"}