@intutic/sync-daemon 2.1.0 → 2.3.0

package/dist/harness/claudeDesktopHooks.js

@@ -1,254 +0,0 @@
-/**
- * claudeDesktopHooks.ts — Claude Desktop PreToolUse hook generator.
- *
- * Claude Desktop shares the same hook format as Claude Code (PreToolUse,
- * exit 2 on stdin JSON) but reads its config from an OS-specific location:
- *   macOS : ~/Library/Application Support/Claude/claude_desktop_config.json
- *   Linux : ~/.config/Claude/claude_desktop_config.json
- *
- * Hook events are written via dual-path logEvent:
- *   Path B (reliable)  — synchronous append to .intutic/events/claude-desktop-hook-events.jsonl
- *   Path A (telemetry) — fire-and-forget https.request to the control plane
- *
- * LLD #14 — Phase 3 cross-harness defence (Gap 3, WS-B)
- * HLD §3.14 — Three-Tier Defense Cascade (Tier 1 Native Gating)
- *
- * @module
- */
-import * as fs from 'node:fs/promises';
-import * as path from 'node:path';
-import * as os from 'node:os';
-import { createLogger } from '@intutic/logger';
-import { newIso } from '@intutic/id';
-import { emitJsGate, emitJsFailClosedPrelude } from './gateBody.js';
-const log = createLogger('sync-claude-desktop-hooks');
-/** Governance-sensitive paths that the hook gate protects (mirrors claudeCodeHooks). */
-/** Resolve the OS-specific claude_desktop_config.json path. */
-function resolveClaudeDesktopConfigPath() {
-    switch (process.platform) {
-        case 'darwin':
-            return path.join(os.homedir(), 'Library', 'Application Support', 'Claude', 'claude_desktop_config.json');
-        case 'linux':
-            return path.join(os.homedir(), '.config', 'Claude', 'claude_desktop_config.json');
-        default:
-            // Fallback to macOS path — Windows is out of scope for now
-            return path.join(os.homedir(), 'Library', 'Application Support', 'Claude', 'claude_desktop_config.json');
-    }
-}
-// ─── Node.js hook script template ─────────────────────────────────────────────
-function buildClaudeDesktopCheckScript(proxyUrl, workspaceRoot, workspaceId) {
-    const hookEventsLog = path.join(workspaceRoot, '.intutic', 'events', 'claude-desktop-hook-events.jsonl');
-    const runtimeEnvPath = path.join(os.homedir(), '.intutic', 'env', 'runtime.env');
-    return `/**
- * Intutic Claude Desktop PreToolUse execution gate.
- * Auto-generated by intutic sync-daemon. DO NOT EDIT.
- *
- * Dual-path logEvent:
- *   Path B — synchronous file append to hook-events.jsonl
- *   Path A — fire-and-forget https.request to the control plane
- *
- * Proxy: ${proxyUrl}
- * Generated: ${newIso()}
- * Workspace: ${workspaceId}
- */
-'use strict';
-${emitJsFailClosedPrelude({ harness: 'claude-desktop', contract: 'exit2' })}
-const path = require('path');
-const os = require('os');
-const fs = require('fs');
-const https = require('https');
-const crypto = require('crypto');
-const url = require('url');
-
-// ── Runtime env loader (Path A credentials) ──────────────────────────────────
-const RUNTIME_ENV_PATH = ${JSON.stringify(runtimeEnvPath)};
-
-function loadRuntimeEnv() {
-  const env = {
-    INTUTIC_HOST: 'https://api.intutic.ai',
-    INTUTIC_API_KEY: '',
-    INTUTIC_WORKSPACE_ID: ${JSON.stringify(workspaceId)},
-  };
-  try {
-    const raw = fs.readFileSync(RUNTIME_ENV_PATH, 'utf-8');
-    for (const line of raw.split('\\n')) {
-      const stripped = line.trim();
-      if (!stripped || stripped.startsWith('#') || !stripped.includes('=')) continue;
-      const eq = stripped.indexOf('=');
-      const k = stripped.slice(0, eq).trim();
-      const v = stripped.slice(eq + 1).trim();
-      env[k] = v;
-    }
-  } catch { /* file may not exist yet */ }
-  return env;
-}
-
-// ── Governance-sensitive paths ────────────────────────────────────────────────
-${emitJsGate({ harness: "claude-desktop", contract: 'exit2' })}
-
-// ── Dual-path logEvent ────────────────────────────────────────────────────────
-const HOOK_EVENTS_LOG = ${JSON.stringify(hookEventsLog)};
-
-let _intuticSessionId = '';
-function logEvent(env, verdict, toolName, reason) {
-  const ts = new Date().toISOString();
-  const incidentId = crypto.createHash('sha1')
-    .update(ts + toolName + env.INTUTIC_WORKSPACE_ID)
-    .digest('hex').slice(0, 16);
-
-  const entry = {
-    // Passed through, not collapsed to two values: the advisory tier emits
-      // 'tool_flagged', and a ternary here silently recorded it as an allow.
-      event: verdict,
-    toolName,
-    reason: reason || '',
-    workspaceId: env.INTUTIC_WORKSPACE_ID,
-    harnessType: 'claude-desktop',
-    timestamp: ts,
-    incidentId,
-    ...(_intuticSessionId ? { sessionId: _intuticSessionId } : {}),
-  };
-
-  // Path B — reliable file append
-  try {
-    const dir = path.dirname(HOOK_EVENTS_LOG);
-    if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
-    fs.appendFileSync(HOOK_EVENTS_LOG, JSON.stringify(entry) + '\\n', { flag: 'a' });
-  } catch { /* never crash the hook */ }
-
-  // Path A — fire-and-forget https.request
-  if (env.INTUTIC_API_KEY) {
-    try {
-      const body = Buffer.from(JSON.stringify({ events: [entry] }));
-      const parsedUrl = url.parse(env.INTUTIC_HOST + '/api/v1/hook-events');
-      const req = https.request({
-        hostname: parsedUrl.hostname,
-        port: parsedUrl.port || 443,
-        path: parsedUrl.path,
-        method: 'POST',
-        headers: {
-          'Content-Type': 'application/json',
-          'Content-Length': body.length,
-          'Authorization': 'Bearer ' + env.INTUTIC_API_KEY,
-        },
-      });
-      req.on('error', () => {}); // fire-and-forget
-      req.write(body);
-      req.end();
-    } catch { /* never crash the hook */ }
-  }
-}
-
-// ── Main ──────────────────────────────────────────────────────────────────────
-const runtimeEnv = loadRuntimeEnv();
-let inputData = '';
-process.stdin.on('data', (chunk) => { inputData += chunk; });
-process.stdin.on('end', () => {
-  try {
-    const ctx = JSON.parse(inputData);
-    _intuticSessionId = ctx.session_id || ctx.sessionId || ctx.conversation_id || ctx.conversationId || ctx.task_id || ctx.taskId || '';
-    // An envelope carrying none of the tool fields extracts to empty strings,
-    // which match no rule — an allow. Refused instead; see the guard itself.
-    intuticGuardEnvelope(ctx, ['tool_name', 'toolName', 'tool_input', 'toolInput'],
-      (v, t, r) => logEvent(runtimeEnv, v, t, r));
-    const toolName = (ctx.tool_name || ctx.toolName || '').toLowerCase()
-    // Case preserved for the gate. A BLOCK: SOP compiles to a tool-name
-    // pattern the operator wrote as they see it (Bash, Write) and this
-    // harness lowercases the tool for its own matching. Handing the gate the
-    // lowercased form means every SOP tool rule silently matches nothing here
-    // while appearing active everywhere else.
-    const rawToolName = ctx.tool_name || ctx.toolName || '';
-    const toolInput = ctx.tool_input || ctx.toolInput || {};
-    const toolInputStr = JSON.stringify(toolInput);
-
-    // Both guards used to be gated on the tool name — paths only for
-    // edit/write/multiedit, commands only for a tool literally called "bash".
-    // A harness that names its shell tool anything else (run_command, terminal,
-    // execute) walked past both. The shared gate keys on the *arguments*, so a
-    // tool name nobody anticipated is no longer a bypass.
-    const targetPath = toolInput.path || toolInput.file_path || toolInput.filePath ||
-      toolInput.new_path || toolInput.target || toolInput.notebook_path || '';
-    const command = toolInput.command || toolInput.cmd || toolInput.script || '';
-    intuticGate(rawToolName, targetPath, command, (v, t, r) => logEvent(runtimeEnv, v, t, r), runtimeEnv.INTUTIC_WORKSPACE_ID, toolInput);
-
-    logEvent(runtimeEnv, 'tool_allowed', toolName, '');
-    process.exit(0);
-  } catch (err) {
-    console.error('[Intutic Guardrail] Hook error (blocking for safety):', err);
-    logEvent(runtimeEnv, 'tool_blocked', 'unknown', String(err));
-    process.exit(2);
-  }
-});
-`.trim();
-}
-// ─── Main export ──────────────────────────────────────────────────────────────
-/**
- * Write the Claude Desktop governance hook script and merge hook configuration
- * into the OS-specific claude_desktop_config.json.
- *
- * Safe to call repeatedly — uses atomic rename (`.intutic-tmp` → final path).
- * Does NOT touch the `mcpServers` section of the config.
- *
- * @param workspaceRoot - Absolute workspace root path.
- * @param proxyUrl      - Intutic proxy URL written into the hook script header.
- * @param workspaceId   - Workspace ID embedded in every hook event payload.
- */
-export async function writeClaudeDesktopHooks(workspaceRoot, proxyUrl, workspaceId = '') {
-    // ── 1. Ensure directories ──────────────────────────────────────────────────
-    const hookScriptDir = path.join(workspaceRoot, '.intutic', 'hooks');
-    const hookEventsDir = path.join(workspaceRoot, '.intutic', 'events');
-    const desktopConfigPath = resolveClaudeDesktopConfigPath();
-    const desktopConfigDir = path.dirname(desktopConfigPath);
-    await Promise.all([
-        fs.mkdir(hookScriptDir, { recursive: true }),
-        fs.mkdir(hookEventsDir, { recursive: true }),
-        fs.mkdir(desktopConfigDir, { recursive: true }),
-    ]);
-    // ── 2. Write hook script (atomic) ─────────────────────────────────────────
-    const hookScriptPath = path.join(hookScriptDir, 'claude-desktop-check.js');
-    const tmpScript = hookScriptPath + '.intutic-tmp';
-    await fs.writeFile(tmpScript, buildClaudeDesktopCheckScript(proxyUrl, workspaceRoot, workspaceId), 'utf-8');
-    await fs.rename(tmpScript, hookScriptPath);
-    log.info({ action: 'claude_desktop_hook_script_written', path: hookScriptPath }, 'Claude Desktop hook script written');
-    // ── 3. Merge into claude_desktop_config.json (safe merge, preserve mcpServers) ──
-    let existingConfig = {};
-    try {
-        const raw = await fs.readFile(desktopConfigPath, 'utf-8');
-        existingConfig = JSON.parse(raw);
-    }
-    catch {
-        // File doesn't exist yet — start fresh
-    }
-    const existingHooks = existingConfig.hooks ?? {};
-    const existingPreToolUse = existingHooks.PreToolUse ?? [];
-    // De-duplicate: remove any existing Intutic entry for Bash then re-add
-    // M3: 'mcp__.*' routes Claude Desktop's mcp__<server>__<tool> calls into
-    // this same gate script — see the identical note in claudeCodeHooks.ts,
-    // which shares this harness's PreToolUse contract exactly.
-    const HOOK_MATCHERS = ['Bash', 'Edit', 'Write', 'MultiEdit', 'mcp__.*'];
-    const intuticCmd = `node ${hookScriptPath}`;
-    const filteredPTU = existingPreToolUse.filter((entry) => {
-        if (typeof entry !== 'object' || entry === null)
-            return true;
-        const e = entry;
-        // Remove entries where all inner hooks use the intutic command
-        const innerHooks = e.hooks ?? [];
-        return !innerHooks.every((h) => typeof h === 'object' && h !== null && h.command === intuticCmd);
-    });
-    const newPreToolUseEntries = HOOK_MATCHERS.map((matcher) => ({
-        matcher,
-        hooks: [{ type: 'command', command: intuticCmd }],
-    }));
-    const mergedConfig = {
-        ...existingConfig,
-        hooks: {
-            ...existingHooks,
-            PreToolUse: [...filteredPTU, ...newPreToolUseEntries],
-        },
-    };
-    const tmpConfig = desktopConfigPath + '.intutic-tmp';
-    await fs.writeFile(tmpConfig, JSON.stringify(mergedConfig, null, 2) + '\n', 'utf-8');
-    await fs.rename(tmpConfig, desktopConfigPath);
-    log.info({ action: 'claude_desktop_config_written', path: desktopConfigPath }, 'Merged Intutic hooks into claude_desktop_config.json');
-}
-//# sourceMappingURL=claudeDesktopHooks.js.map

package/dist/harness/claudeDesktopHooks.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"claudeDesktopHooks.js","sourceRoot":"","sources":["../../src/harness/claudeDesktopHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AAEnE,MAAM,GAAG,GAAG,YAAY,CAAC,2BAA2B,CAAC,CAAA;AAErD,wFAAwF;AAExF,+DAA+D;AAC/D,SAAS,8BAA8B;IACrC,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzB,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,EAAE,4BAA4B,CAAC,CAAA;QAC1G,KAAK,OAAO;YACV,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,4BAA4B,CAAC,CAAA;QACnF;YACE,2DAA2D;YAC3D,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,EAAE,4BAA4B,CAAC,CAAA;IAC5G,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,SAAS,6BAA6B,CACpC,QAAgB,EAChB,aAAqB,EACrB,WAAmB;IAEnB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,kCAAkC,CAAC,CAAA;IACxG,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,CAAC,CAAA;IAEhF,OAAO;;;;;;;;YAQG,QAAQ;gBACJ,MAAM,EAAE;gBACR,WAAW;;;EAGzB,uBAAuB,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;;;;;;;;;2BAShD,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;;;;;;4BAM7B,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;;;;;;;;;;;;;;;;;EAiBrD,UAAU,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;;;0BAGpC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4FtD,CAAC,IAAI,EAAE,CAAA;AACR,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,aAAqB,EACrB,QAAgB,EAChB,WAAW,GAAG,EAAE;IAEhB,8EAA8E;IAE9E,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IACnE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAA;IACpE,MAAM,iBAAiB,GAAG,8BAA8B,EAAE,CAAA;IAC1D,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAExD,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC5C,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC5C,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;KAChD,CAAC,CAAA;IAEF,6EAA6E;IAE7E,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAA;IAC1E,MAAM,SAAS,GAAG,cAAc,GAAG,cAAc,CAAA;IACjD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,6BAA6B,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAA;IAC3G,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;IAE1C,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oCAAoC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,oCAAoC,CAAC,CAAA;IAEtH,mFAAmF;IAEnF,IAAI,cAAc,GAA4B,EAAE,CAAA;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAA;QACzD,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;IACzC,CAAC;IAED,MAAM,aAAa,GAAI,cAAc,CAAC,KAAiC,IAAI,EAAE,CAAA;IAC7E,MAAM,kBAAkB,GAAI,aAAa,CAAC,UAAwB,IAAI,EAAE,CAAA;IAExE,uEAAuE;IACvE,yEAAyE;IACzE,wEAAwE;IACxE,2DAA2D;IAC3D,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,CAAA;IACvE,MAAM,UAAU,GAAG,QAAQ,cAAc,EAAE,CAAA;IAC3C,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,KAAc,EAAE,EAAE;QAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAC5D,MAAM,CAAC,GAAG,KAAgC,CAAA;QAC1C,+DAA+D;QAC/D,MAAM,UAAU,GAAI,CAAC,CAAC,KAAmB,IAAI,EAAE,CAAA;QAC/C,OAAO,CAAC,UAAU,CAAC,KAAK,CACtB,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAK,CAA6B,CAAC,OAAO,KAAK,UAAU,CAC7G,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,oBAAoB,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3D,OAAO;QACP,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;KAClD,CAAC,CAAC,CAAA;IAEH,MAAM,YAAY,GAAG;QACnB,GAAG,cAAc;QACjB,KAAK,EAAE;YACL,GAAG,aAAa;YAChB,UAAU,EAAE,CAAC,GAAG,WAAW,EAAE,GAAG,oBAAoB,CAAC;SACtD;KACF,CAAA;IAED,MAAM,SAAS,GAAG,iBAAiB,GAAG,cAAc,CAAA;IACpD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IACpF,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAA;IAE7C,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,+BAA+B,EAAE,IAAI,EAAE,iBAAiB,EAAE,EACpE,sDAAsD,CACvD,CAAA;AACH,CAAC"}

package/dist/harness/continueHooks.d.ts

@@ -1,63 +0,0 @@
-/**
- * continueHooks.ts — Continue CLI PreToolUse gate.
- *
- * Proxy routing for Continue (the `apiBase` of each OpenAI/Anthropic model in
- * `~/.continue/config.yaml`) is written by the CLI's Continue adapter
- * (tools/cli/src/harness/continue.ts). This module writes only the gate.
- *
- * **PreToolUse gate** (Continue **CLI `cn` only** — the IDE extension has
- *    no hook system): the CLI executes PreToolUse hooks registered in
- *    `~/.continue/settings.json` (user) and `<repo>/.continue/settings.json`
- *    (project), with a Claude-Code-compatible stdin contract —
- *    {tool_name, tool_input, tool_use_id} — refused via exit code 2 (or a
- *    stdout `{"permissionDecision":"deny"}`; exit 2 is used here, the contract
- *    every other exit-2 harness shares).
- *
- *    **LIVE-VERIFIED LIMITS (cn 1.5.47, 2026-08-10), do not oversell this
- *    gate:**
- *    - **Headless `-p`/`--print` mode does not execute PreToolUse hooks at
- *      all.** Verified against a real install with a bare marker hook: the
- *      terminal tool ran, the marker never fired, with the hook registered in
- *      every path the bundle's own search list names. The hooks engine (and
- *      this exact search list, including `.claude/settings.json`) is present
- *      in the shipped bundle — headless mode simply bypasses it. Interactive
- *      TUI sessions are the mode this registration targets; a headless `cn
- *      -p` run is governed by the proxy layer only.
- *    - **cn's hook engine fails OPEN on hook errors by its own design** —
- *      the bundled dispatcher catches a failed hook event and returns
- *      `{blocked: false}`. Our gate's own crash posture (fail-closed exit 2)
- *      cannot override the harness swallowing the failure; that is cn's
- *      contract, recorded here so the security matrix can say it honestly.
- *
- *    **Overlap, stated so nobody "fixes" it:** the Continue CLI ALSO reads
- *    `.claude/settings.json`, so on a machine where claude-code is governed,
- *    `cn` may already run the claude-code gate by accident. This writer makes
- *    that deliberate by registering in Continue's own settings files — the
- *    dedicated registration is still correct because a user who runs continue
- *    but not claude-code has no `.claude/settings.json` and would otherwise
- *    get no gate at all. Double registration is harmless: both gates evaluate
- *    the same rules, and an allow/allow or block/block pair is idempotent.
- *
- * The settings files are merged, never replaced: a file that is not a plain
- * JSON object is left alone and reported (see jsonMergeTarget.ts).
- *
- * LLD #14 — Phase 3 cross-harness defence (Gap 3, WS-B)
- * HLD §3.14 — Three-Tier Defense Cascade (Tier 1 Native Gating)
- *
- * @module
- */
-/**
- * Write the Continue CLI gate script `.intutic/hooks/continue-check.js` and
- * register it in `~/.continue/settings.json` and
- * `<root>/.continue/settings.json` (see the module header for the
- * `.claude/settings.json` overlap).
- *
- * Safe to call repeatedly — uses atomic rename (`.intutic-tmp` → final path)
- * and command-keyed de-duplication in both settings files.
- *
- * @param workspaceRoot - Absolute workspace root path.
- * @param proxyUrl      - Intutic proxy URL written into the gate header.
- * @param workspaceId   - Workspace ID embedded in every hook event payload.
- */
-export declare function writeContinueHooks(workspaceRoot: string, proxyUrl: string, workspaceId?: string): Promise<void>;
-//# sourceMappingURL=continueHooks.d.ts.map

package/dist/harness/continueHooks.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"continueHooks.d.ts","sourceRoot":"","sources":["../../src/harness/continueHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAiLH;;;;;;;;;;;;GAYG;AACH,wBAAsB,kBAAkB,CACtC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,WAAW,SAAK,GACf,OAAO,CAAC,IAAI,CAAC,CA6Bf"}

package/dist/harness/continueHooks.js

@@ -1,247 +0,0 @@
-/**
- * continueHooks.ts — Continue CLI PreToolUse gate.
- *
- * Proxy routing for Continue (the `apiBase` of each OpenAI/Anthropic model in
- * `~/.continue/config.yaml`) is written by the CLI's Continue adapter
- * (tools/cli/src/harness/continue.ts). This module writes only the gate.
- *
- * **PreToolUse gate** (Continue **CLI `cn` only** — the IDE extension has
- *    no hook system): the CLI executes PreToolUse hooks registered in
- *    `~/.continue/settings.json` (user) and `<repo>/.continue/settings.json`
- *    (project), with a Claude-Code-compatible stdin contract —
- *    {tool_name, tool_input, tool_use_id} — refused via exit code 2 (or a
- *    stdout `{"permissionDecision":"deny"}`; exit 2 is used here, the contract
- *    every other exit-2 harness shares).
- *
- *    **LIVE-VERIFIED LIMITS (cn 1.5.47, 2026-08-10), do not oversell this
- *    gate:**
- *    - **Headless `-p`/`--print` mode does not execute PreToolUse hooks at
- *      all.** Verified against a real install with a bare marker hook: the
- *      terminal tool ran, the marker never fired, with the hook registered in
- *      every path the bundle's own search list names. The hooks engine (and
- *      this exact search list, including `.claude/settings.json`) is present
- *      in the shipped bundle — headless mode simply bypasses it. Interactive
- *      TUI sessions are the mode this registration targets; a headless `cn
- *      -p` run is governed by the proxy layer only.
- *    - **cn's hook engine fails OPEN on hook errors by its own design** —
- *      the bundled dispatcher catches a failed hook event and returns
- *      `{blocked: false}`. Our gate's own crash posture (fail-closed exit 2)
- *      cannot override the harness swallowing the failure; that is cn's
- *      contract, recorded here so the security matrix can say it honestly.
- *
- *    **Overlap, stated so nobody "fixes" it:** the Continue CLI ALSO reads
- *    `.claude/settings.json`, so on a machine where claude-code is governed,
- *    `cn` may already run the claude-code gate by accident. This writer makes
- *    that deliberate by registering in Continue's own settings files — the
- *    dedicated registration is still correct because a user who runs continue
- *    but not claude-code has no `.claude/settings.json` and would otherwise
- *    get no gate at all. Double registration is harmless: both gates evaluate
- *    the same rules, and an allow/allow or block/block pair is idempotent.
- *
- * The settings files are merged, never replaced: a file that is not a plain
- * JSON object is left alone and reported (see jsonMergeTarget.ts).
- *
- * LLD #14 — Phase 3 cross-harness defence (Gap 3, WS-B)
- * HLD §3.14 — Three-Tier Defense Cascade (Tier 1 Native Gating)
- *
- * @module
- */
-import * as fs from 'node:fs/promises';
-import * as path from 'node:path';
-import * as os from 'node:os';
-import { createLogger } from '@intutic/logger';
-import { newIso } from '@intutic/id';
-import { emitJsGate, emitJsFailClosedPrelude } from './gateBody.js';
-import { readJsonObjectForMerge } from './jsonMergeTarget.js';
-const log = createLogger('sync-continue-hooks');
-// ─── PreToolUse gate (Continue CLI `cn`) ──────────────────────────────────────
-/**
- * The pre-tool gate script — receives the Continue CLI's Claude-Code-compatible
- * PreToolUse JSON on stdin, exits 0 to allow or 2 to block.
- */
-function buildHookScript(proxyUrl, workspaceRoot, workspaceId) {
-    const hookEventsLog = path.join(workspaceRoot, '.intutic', 'events', 'hook-events.jsonl');
-    return `#!/usr/bin/env node
-/**
- * Intutic Continue CLI governance gate.
- * Auto-generated by intutic sync-daemon. DO NOT EDIT.
- *
- * Applies to the Continue CLI (cn) only — the IDE extension has no hook
- * system. Note the CLI also reads .claude/settings.json, so a machine governed
- * for claude-code may run that gate too; both evaluate the same rules.
- *
- * Proxy: ${proxyUrl}
- * Generated: ${newIso()}
- */
-${emitJsFailClosedPrelude({ harness: 'continue', contract: 'exit2' })}
-const path = require('path');
-const os = require('os');
-const fs = require('fs');
-const crypto = require('crypto');
-const https = require('https');
-
-// Runtime credentials
-const _runtimeEnvPath = path.join(os.homedir(), '.intutic', 'env', 'runtime.env');
-let _intuticHost = 'https://api.intutic.ai', _intuticKey = '', _intuticWsId = ${JSON.stringify(workspaceId)};
-try {
-  fs.readFileSync(_runtimeEnvPath, 'utf-8').split('\\n').forEach(line => {
-    const eq = line.indexOf('='); if (eq < 0) return;
-    const k = line.slice(0, eq).trim(), v = line.slice(eq + 1).trim();
-    if (k === 'INTUTIC_HOST' && v) _intuticHost = v;
-    if (k === 'INTUTIC_API_KEY' && v) _intuticKey = v;
-    if (k === 'INTUTIC_WORKSPACE_ID' && v) _intuticWsId = v;
-  });
-} catch {}
-
-${emitJsGate({ harness: 'continue', contract: 'exit2' })}
-
-let _intuticSessionId = '';
-function logEvent(verdict, toolName, reason) {
-  try {
-    const ts = new Date().toISOString();
-    const incidentId = crypto.createHash('sha1').update(ts + toolName + _intuticWsId).digest('hex').slice(0, 16);
-    const entry = JSON.stringify({
-      // Passed through, not collapsed to two values: the advisory tier emits
-      // 'tool_flagged', and a ternary here silently recorded it as an allow.
-      event: verdict,
-      toolName, reason: reason || '',
-      workspaceId: _intuticWsId,
-      harnessType: 'continue',
-      timestamp: ts,
-      incidentId,
-      ...(_intuticSessionId ? { sessionId: _intuticSessionId } : {}),
-    }) + '\\n';
-    fs.appendFileSync(${JSON.stringify(hookEventsLog)}, entry, { flag: 'a' });
-    if (_intuticKey) {
-      try {
-        const body = JSON.stringify({ events: [JSON.parse(entry)] });
-        const urlObj = new URL('/api/v1/hook-events', _intuticHost);
-        const mod = urlObj.protocol === 'https:' ? https : require('http');
-        const req = mod.request({ hostname: urlObj.hostname, port: urlObj.port || 443, path: urlObj.pathname, method: 'POST', headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(body), 'Authorization': 'Bearer ' + _intuticKey } });
-        req.on('error', () => { /* fire-and-forget */ });
-        req.write(body); req.end();
-      } catch { /* never crash the hook */ }
-    }
-  } catch { /* never crash the hook */ }
-}
-
-let raw = '';
-process.stdin.on('data', (c) => { raw += c; });
-process.stdin.on('end', () => {
-  try {
-    const ctx = JSON.parse(raw);
-    _intuticSessionId = ctx.session_id || ctx.sessionId || '';
-    // Verified during the v5 audit: this writer did NOT have the envelope
-    // guard its Claude-Code-compatible contract implied it inherited — a
-    // payload with neither a tool name nor a tool_input defaulted to toolName
-    // 'tool' with empty fields, matched no rule, and was allowed. Refused now.
-    intuticGuardEnvelope(ctx, ['tool_name', 'toolName', 'tool_input', 'toolInput'], logEvent);
-    const input = ctx.tool_input || ctx.toolInput || {};
-    const toolName = ctx.tool_name || ctx.toolName || 'tool';
-
-    // Every spelling any harness uses, matching the bash extractor. A field
-    // name this list misses is a path guard that silently does not run — and
-    // the caller controls which spelling it sends.
-    const targetPath = input.path || input.file_path || input.filePath || input.file ||
-      input.target || input.notebook_path || '';
-    const command = input.command || input.cmd || input.script || '';
-
-    intuticGate(toolName, targetPath, command, logEvent, _intuticWsId, input);
-
-    // Allow
-    logEvent('tool_allowed', toolName, '');
-    process.exit(0);
-  } catch (err) {
-    // Fail CLOSED
-    const errMsg = String(err);
-    process.stderr.write('[Intutic Governance] Hook error (fail-closed): ' + errMsg + '\\n');
-    logEvent('tool_blocked', 'unknown', errMsg);
-    process.exit(2);
-  }
-});
-`;
-}
-/**
- * Merge the Intutic PreToolUse entry into a Continue settings.json, preserving
- * everything the user registered themselves.
- *
- * De-duplication is by command (any entry whose hooks all invoke this gate
- * script is ours and is replaced) — the claudeDesktopHooks convention — so
- * repeated syncs never stack duplicate entries.
- */
-async function mergeContinueSettings(settingsPath, hookScriptPath) {
-    const existing = await readJsonObjectForMerge(settingsPath);
-    if (existing === null)
-        return;
-    const existingHooks = existing.hooks ?? {};
-    const existingPreToolUse = Array.isArray(existingHooks.PreToolUse)
-        ? existingHooks.PreToolUse
-        : [];
-    const intuticCmd = `node "${hookScriptPath}"`;
-    const filtered = existingPreToolUse.filter((entry) => {
-        if (typeof entry !== 'object' || entry === null)
-            return true;
-        const inner = entry.hooks ?? [];
-        return !(inner.length > 0 &&
-            inner.every((h) => typeof h === 'object' && h !== null && h.command === intuticCmd));
-    });
-    const merged = {
-        ...existing,
-        _intutic_comment: 'Intutic governance PreToolUse hook (Continue CLI) — auto-managed entries only; your own hooks are preserved.',
-        _intutic_last_sync: newIso(),
-        hooks: {
-            ...existingHooks,
-            PreToolUse: [
-                ...filtered,
-                {
-                    // One catch-all matcher rather than a tool list: the gate itself
-                    // decides from the arguments, so a tool name nobody anticipated is
-                    // still evaluated rather than silently unmatched.
-                    matcher: '.*',
-                    hooks: [{ type: 'command', command: intuticCmd }],
-                },
-            ],
-        },
-    };
-    const tmp = settingsPath + '.intutic-tmp';
-    await fs.writeFile(tmp, JSON.stringify(merged, null, 2) + '\n', 'utf-8');
-    await fs.rename(tmp, settingsPath);
-}
-// ─── Main export ──────────────────────────────────────────────────────────────
-/**
- * Write the Continue CLI gate script `.intutic/hooks/continue-check.js` and
- * register it in `~/.continue/settings.json` and
- * `<root>/.continue/settings.json` (see the module header for the
- * `.claude/settings.json` overlap).
- *
- * Safe to call repeatedly — uses atomic rename (`.intutic-tmp` → final path)
- * and command-keyed de-duplication in both settings files.
- *
- * @param workspaceRoot - Absolute workspace root path.
- * @param proxyUrl      - Intutic proxy URL written into the gate header.
- * @param workspaceId   - Workspace ID embedded in every hook event payload.
- */
-export async function writeContinueHooks(workspaceRoot, proxyUrl, workspaceId = '') {
-    const hookScriptDir = path.join(workspaceRoot, '.intutic', 'hooks');
-    await fs.mkdir(hookScriptDir, { recursive: true });
-    await fs.mkdir(path.join(workspaceRoot, '.intutic', 'events'), { recursive: true });
-    // Named after its writer — see the note in claudeCodeHooks.ts about two
-    // writers overwriting one `pre-tool-check.js`.
-    const hookScriptPath = path.join(hookScriptDir, 'continue-check.js');
-    const tmpScript = hookScriptPath + '.intutic-tmp';
-    await fs.writeFile(tmpScript, buildHookScript(proxyUrl, workspaceRoot, workspaceId), 'utf-8');
-    await fs.rename(tmpScript, hookScriptPath);
-    await fs.chmod(hookScriptPath, 0o755);
-    // Project-level: <root>/.continue/settings.json
-    const projectContinueDir = path.join(workspaceRoot, '.continue');
-    await fs.mkdir(projectContinueDir, { recursive: true });
-    await mergeContinueSettings(path.join(projectContinueDir, 'settings.json'), hookScriptPath);
-    // User-level: ~/.continue/settings.json. homedir() read at call time so
-    // tests that move HOME before invoking are honoured — see the gooseHooks
-    // note in generatedShellIntegrity.test.ts.
-    const userContinueDir = path.join(os.homedir(), '.continue');
-    await fs.mkdir(userContinueDir, { recursive: true });
-    await mergeContinueSettings(path.join(userContinueDir, 'settings.json'), hookScriptPath);
-    log.info({ action: 'continue_gate_written', path: hookScriptPath }, 'Continue CLI PreToolUse gate written and registered (project + user settings.json)');
-}
-//# sourceMappingURL=continueHooks.js.map

package/dist/harness/continueHooks.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"continueHooks.js","sourceRoot":"","sources":["../../src/harness/continueHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAE7D,MAAM,GAAG,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAA;AAE/C,iFAAiF;AAEjF;;;GAGG;AACH,SAAS,eAAe,CAAC,QAAgB,EAAE,aAAqB,EAAE,WAAmB;IACnF,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAA;IACzF,OAAO;;;;;;;;;YASG,QAAQ;gBACJ,MAAM,EAAE;;EAEtB,uBAAuB,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;;;;;;;;;gFASW,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;;;;;;;;;;;EAWzG,UAAU,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;;;;;;;;;;;;;;;;;;wBAkBhC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgDpD,CAAA;AACD,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,qBAAqB,CAAC,YAAoB,EAAE,cAAsB;IAC/E,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,YAAY,CAAC,CAAA;IAC3D,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAM;IAE7B,MAAM,aAAa,GAAI,QAAQ,CAAC,KAAiC,IAAI,EAAE,CAAA;IACvE,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC;QAChE,CAAC,CAAE,aAAa,CAAC,UAAwB;QACzC,CAAC,CAAC,EAAE,CAAA;IAEN,MAAM,UAAU,GAAG,SAAS,cAAc,GAAG,CAAA;IAC7C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,KAAc,EAAE,EAAE;QAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAC5D,MAAM,KAAK,GAAK,KAAiC,CAAC,KAAmB,IAAI,EAAE,CAAA;QAC3E,OAAO,CAAC,CACN,KAAK,CAAC,MAAM,GAAG,CAAC;YAChB,KAAK,CAAC,KAAK,CACT,CAAC,CAAU,EAAE,EAAE,CACb,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAK,CAA6B,CAAC,OAAO,KAAK,UAAU,CAC/F,CACF,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG;QACb,GAAG,QAAQ;QACX,gBAAgB,EAAE,8GAA8G;QAChI,kBAAkB,EAAE,MAAM,EAAE;QAC5B,KAAK,EAAE;YACL,GAAG,aAAa;YAChB,UAAU,EAAE;gBACV,GAAG,QAAQ;gBACX;oBACE,iEAAiE;oBACjE,mEAAmE;oBACnE,kDAAkD;oBAClD,OAAO,EAAE,IAAI;oBACb,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;iBAClD;aACF;SACF;KACF,CAAA;IAED,MAAM,GAAG,GAAG,YAAY,GAAG,cAAc,CAAA;IACzC,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IACxE,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;AACpC,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,aAAqB,EACrB,QAAgB,EAChB,WAAW,GAAG,EAAE;IAEhB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IACnE,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAClD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEnF,wEAAwE;IACxE,+CAA+C;IAC/C,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAA;IACpE,MAAM,SAAS,GAAG,cAAc,GAAG,cAAc,CAAA;IACjD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAA;IAC7F,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;IAC1C,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;IAErC,gDAAgD;IAChD,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;IAChE,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACvD,MAAM,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,eAAe,CAAC,EAAE,cAAc,CAAC,CAAA;IAE3F,wEAAwE;IACxE,yEAAyE;IACzE,2CAA2C;IAC3C,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAA;IAC5D,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACpD,MAAM,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,EAAE,cAAc,CAAC,CAAA;IAExF,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,uBAAuB,EAAE,IAAI,EAAE,cAAc,EAAE,EACzD,oFAAoF,CACrF,CAAA;AACH,CAAC"}