@intutic/sync-daemon 2.2.0 → 2.4.0

package/dist/harness/gateKind.d.ts

@@ -1,164 +0,0 @@
-/**
- * gateKind.ts — classifies each harness by HOW its tool calls get governed,
- * for `agentReporter.ts`'s `guardrails` facet.
- *
- * # Why this exists
- *
- * `collectAgentReport` used to report `hook_gate: true` unconditionally for
- * every harness, with the comment "the daemon writes the hook gate for every
- * harness it supports." That was already false for `langgraph` — which has
- * no on-disk hook, only the SDK-side `intutic_clawde.gate` — and for `aider`,
- * whose only NO_GATE-registered mechanism is a post-edit, /run-blind
- * pre-commit hook (see `aiderConfigMerger.ts`'s NO_GATE row in
- * `__tests__/harness/gateRegistry.ts`). Wave 1 adds eight more SDK-gated
- * harnesses, which would have made the lie eight times larger without this
- * fix.
- *
- * # What this does NOT do
- *
- * This does not verify that a user actually pip-installed `intutic-clawde`
- * and wired `guard_tools`/`IntuticMiddleware`/etc. into their process — the
- * daemon cannot observe another process's imports, the same way it cannot
- * observe whether a written hook file was left executable. It only reports
- * which MECHANISM this harness's governance model uses (a file the daemon
- * itself writes and can verify existence of, vs. an SDK the harness's own
- * process must import), matching the trust level `hook_gate: true` already
- * carried for file-based harnesses before this fix.
- *
- * # Keeping this in sync with the gate registry
- *
- * `services/sync-daemon/__tests__/harness/gateRegistry.ts` (the GATES/NO_GATE
- * completeness registry exercised by `generatedGateBehaviour.test.ts`) is the
- * authoritative decision per harness, but it is a test-only module (it
- * dynamically imports every writer's compiled `.js` from a temp build dir)
- * and must not be imported from daemon runtime code. `gateKind.test.ts`
- * cross-checks the two lists so this file cannot silently drift from that
- * registry's own NO_GATE rows: `file: null` harnesses split between 'sdk'
- * (LangGraph + the Python frameworks — the gate ships in intutic-clawde),
- * 'delegated' (xirp — the gate is whichever wrapped harness's own gate is
- * running), and 'bridge' (trueforge-server — the gate runs in a separate
- * Intutic-operated service, not in any process this repo's writers touch);
- * the one non-null row (aiderConfigMerger.ts, "no ... exists") is 'none'.
- *
- * @module
- */
-import { type HarnessType as HarnessTypeT } from '@intutic/shared-types';
-/**
- * `'hook'`      — the daemon writes an on-disk hook/config file this harness
- *                 reads before running a tool call (the 19-harness majority).
- * `'sdk'`       — the blocking gate ships in `intutic-clawde`, imported into
- *                 the harness's own Python process; no file for the daemon
- *                 to write or verify (LangGraph + the eight Wave/Wave-2
- *                 frameworks).
- * `'none'`      — no enforcement point exists today at all (aider: its only
- *                 native hook is post-edit and /run-blind).
- * `'delegated'` — this harness has no gate mechanism of its own because it
- *                 does not run tools itself: it wraps OTHER harnesses that
- *                 are already `'hook'`- or `'sdk'`-gated, and a tool call
- *                 made inside it is governed by whichever wrapped harness's
- *                 own gate is running (Xirp, Agentic Orchestrator, and — a
- *                 different shape of the same idea — AgentCore Runtime,
- *                 which HOSTS a customer's already-gated framework code
- *                 rather than spawning it as a subprocess; see
- *                 gateRegistry.ts's NO_GATE rows for the reasoning this
- *                 precedent sets for future orchestrator/host-shaped
- *                 harnesses).
- *                 Every wrapped backend of the two orchestrators has a gate of
- *                 its own (Agentic Orchestrator's `opencode` backend since
- *                 TD-397 closed with `openCodeHooks.ts`), so `'delegated'`
- *                 claims exactly what happens. Distinct from
- *                 `'none'`: `'none'` means no enforcement point exists
- *                 ANYWHERE for this harness's tool calls; `'delegated'`
- *                 means one exists, just not one this harness's own row
- *                 owns or can be credited for independently — reporting it
- *                 as `'none'` would undercount real coverage, and reporting
- *                 it as `'hook'` would overclaim a file this daemon never
- *                 writes for the wrapping harness itself.
- * `'bridge'`    — the gate runs OUT OF PROCESS, in an Intutic-operated
- *                 service reacting to the harness's own async
- *                 approval/event API, rather than a file this daemon writes
- *                 (`'hook'`), an SDK imported into the harness's own process
- *                 (`'sdk'`), no enforcement point at all (`'none'`), or
- *                 governance credited to a wrapped harness's own gate
- *                 (`'delegated'`) — a fifth, genuinely different shape.
- *                 TRUEFORGE_SERVER is the first and so far only member: a
- *                 TrueForge standalone/hosted server is a separate process
- *                 nobody embeds an Intutic gate into (unlike TRUEFORGE,
- *                 embedded mode, which IS `'sdk'`-gated — see that row's own
- *                 doc), so `services/trueforge-bridge` watches its turn/event
- *                 stream externally and answers pending approvals over HTTP.
- *                 Distinct from `'delegated'`: a delegated harness's tool
- *                 calls are governed by ANOTHER HARNESS's own gate running
- *                 in that other harness's process; a bridge-gated harness's
- *                 tool calls are governed by a service this repo ships and
- *                 operates, running in neither the harness's process nor any
- *                 other harness's. Distinct from `'sdk'`: no code from this
- *                 repo ever runs inside the governed harness's own process
- *                 at all — the harness's only obligation is to expose the
- *                 async approval API the bridge polls/subscribes to.
- */
-export type GateKind = 'hook' | 'sdk' | 'none' | 'delegated' | 'bridge';
-/**
- * Harnesses whose blocking gate ships SDK-side, in the harness's own
- * process — no on-disk hook/config file exists to point a gate at. Mirrors
- * the `file: null` NO_GATE rows in `gateRegistry.ts`.
- *
- * MASTRA, VERCEL_AI_SDK (T2), EVE (A2), and TRUEFORGE (embedded-library mode
- * only — see its own HarnessType doc) are the JS/TS-native members of this
- * family: their blocking gate ships in `@intutic/gate/mastra`/
- * `@intutic/gate/vercel`/`@intutic/gate/eve`/`@intutic/gate/trueforge`
- * (packages/gate-js) rather than `intutic-clawde`, but the shape is
- * identical — no on-disk hook/config file, tools run as plain callables in
- * the harness's own process (for eve, as per-tool/per-connection `approval`
- * policies attached in the agent directory's own TypeScript; for TrueForge,
- * as `intuticApprovalResponder()` answering `tool.approval_required`
- * pauses — see `@intutic/gate/trueforge`'s module doc for why that shape
- * differs from mastra/vercel's single-callback pattern).
- *
- * AI_SDK_HARNESS and AI_SDK_WORKFLOW (A3) are the same `@intutic/gate`
- * family with one nuance worth naming: the VETO still runs SDK-side in the
- * caller's own Node.js process (an approval responder / a `needsApproval`
- * function), which is what `'sdk'` classifies — but for AI_SDK_HARNESS the
- * tool EXECUTION it vetoes happens server-side in a Vercel Sandbox microVM,
- * and its built-in sandbox tools have no veto surface at all beyond
- * `permissionMode` (defaults to 'allow-all'). `'sdk'` describes where the
- * gate mechanism lives, not a claim that every tool the harness can run
- * passes through it — see gateRegistry.ts's NO_GATE rows for the honest
- * scope statement per harness.
- */
-export declare const SDK_GATED_HARNESSES: ReadonlySet<HarnessTypeT>;
-/**
- * Harnesses with no enforcement point at all today. Mirrors the
- * `aiderConfigMerger.ts` NO_GATE row: aider's only native hook
- * (`--git-commit-verify`) is opt-in, post-edit, and blind to `/run`.
- */
-export declare const NO_GATE_HARNESSES: ReadonlySet<HarnessTypeT>;
-/**
- * Harnesses that wrap OTHER already-gated harnesses instead of running tools
- * themselves — no gate of their own, but not ungoverned either. Mirrors the
- * `file: null` NO_GATE rows for `xirp` and `agentic-orchestrator` in
- * `gateRegistry.ts`. Xirp was the first entry of this shape; Agentic
- * Orchestrator (O3) is the second. O2 (QM) is expected to add a third, same
- * "wraps other harnesses" shape, in a concurrent phase not yet merged as of
- * this one.
- */
-export declare const DELEGATED_GATE_HARNESSES: ReadonlySet<HarnessTypeT>;
-/**
- * Harnesses whose blocking gate runs OUT OF PROCESS, in an Intutic-operated
- * service reacting to the harness's own async approval/event API — not a
- * file this daemon writes, and not an SDK imported into the harness's own
- * process (no process of ours runs inside the harness at all). Mirrors the
- * `file: null` NO_GATE row for `trueforge-server` in `gateRegistry.ts`.
- *
- * TRUEFORGE_SERVER (B3) is the first member: a TrueForge standalone/hosted
- * server has no in-process host to hang an SDK gate off of (contrast
- * TRUEFORGE, embedded mode, in `SDK_GATED_HARNESSES` above) — instead
- * `services/trueforge-bridge` watches its turn/event stream externally and
- * answers pending `tool.approval_required` pauses over HTTP. See the
- * `'bridge'` `GateKind` doc above for the full distinction from `'sdk'` and
- * `'delegated'`.
- */
-export declare const BRIDGE_GATED_HARNESSES: ReadonlySet<HarnessTypeT>;
-/** How this harness's tool calls get gated. Defaults to `'hook'`. */
-export declare function gateKindForHarness(type: HarnessTypeT): GateKind;
-//# sourceMappingURL=gateKind.d.ts.map

package/dist/harness/gateKind.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gateKind.d.ts","sourceRoot":"","sources":["../../src/harness/gateKind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAe,KAAK,WAAW,IAAI,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAErF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAA;AAEvE;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,YAAY,CAkBxD,CAAA;AAEF;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,YAAY,CAAgC,CAAA;AAExF;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,EAAE,WAAW,CAAC,YAAY,CAO7D,CAAA;AAEF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,YAAY,CAA2C,CAAA;AAExG,qEAAqE;AACrE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,YAAY,GAAG,QAAQ,CAM/D"}

package/dist/harness/gateKind.js

@@ -1,144 +0,0 @@
-/**
- * gateKind.ts — classifies each harness by HOW its tool calls get governed,
- * for `agentReporter.ts`'s `guardrails` facet.
- *
- * # Why this exists
- *
- * `collectAgentReport` used to report `hook_gate: true` unconditionally for
- * every harness, with the comment "the daemon writes the hook gate for every
- * harness it supports." That was already false for `langgraph` — which has
- * no on-disk hook, only the SDK-side `intutic_clawde.gate` — and for `aider`,
- * whose only NO_GATE-registered mechanism is a post-edit, /run-blind
- * pre-commit hook (see `aiderConfigMerger.ts`'s NO_GATE row in
- * `__tests__/harness/gateRegistry.ts`). Wave 1 adds eight more SDK-gated
- * harnesses, which would have made the lie eight times larger without this
- * fix.
- *
- * # What this does NOT do
- *
- * This does not verify that a user actually pip-installed `intutic-clawde`
- * and wired `guard_tools`/`IntuticMiddleware`/etc. into their process — the
- * daemon cannot observe another process's imports, the same way it cannot
- * observe whether a written hook file was left executable. It only reports
- * which MECHANISM this harness's governance model uses (a file the daemon
- * itself writes and can verify existence of, vs. an SDK the harness's own
- * process must import), matching the trust level `hook_gate: true` already
- * carried for file-based harnesses before this fix.
- *
- * # Keeping this in sync with the gate registry
- *
- * `services/sync-daemon/__tests__/harness/gateRegistry.ts` (the GATES/NO_GATE
- * completeness registry exercised by `generatedGateBehaviour.test.ts`) is the
- * authoritative decision per harness, but it is a test-only module (it
- * dynamically imports every writer's compiled `.js` from a temp build dir)
- * and must not be imported from daemon runtime code. `gateKind.test.ts`
- * cross-checks the two lists so this file cannot silently drift from that
- * registry's own NO_GATE rows: `file: null` harnesses split between 'sdk'
- * (LangGraph + the Python frameworks — the gate ships in intutic-clawde),
- * 'delegated' (xirp — the gate is whichever wrapped harness's own gate is
- * running), and 'bridge' (trueforge-server — the gate runs in a separate
- * Intutic-operated service, not in any process this repo's writers touch);
- * the one non-null row (aiderConfigMerger.ts, "no ... exists") is 'none'.
- *
- * @module
- */
-import { HarnessType } from '@intutic/shared-types';
-/**
- * Harnesses whose blocking gate ships SDK-side, in the harness's own
- * process — no on-disk hook/config file exists to point a gate at. Mirrors
- * the `file: null` NO_GATE rows in `gateRegistry.ts`.
- *
- * MASTRA, VERCEL_AI_SDK (T2), EVE (A2), and TRUEFORGE (embedded-library mode
- * only — see its own HarnessType doc) are the JS/TS-native members of this
- * family: their blocking gate ships in `@intutic/gate/mastra`/
- * `@intutic/gate/vercel`/`@intutic/gate/eve`/`@intutic/gate/trueforge`
- * (packages/gate-js) rather than `intutic-clawde`, but the shape is
- * identical — no on-disk hook/config file, tools run as plain callables in
- * the harness's own process (for eve, as per-tool/per-connection `approval`
- * policies attached in the agent directory's own TypeScript; for TrueForge,
- * as `intuticApprovalResponder()` answering `tool.approval_required`
- * pauses — see `@intutic/gate/trueforge`'s module doc for why that shape
- * differs from mastra/vercel's single-callback pattern).
- *
- * AI_SDK_HARNESS and AI_SDK_WORKFLOW (A3) are the same `@intutic/gate`
- * family with one nuance worth naming: the VETO still runs SDK-side in the
- * caller's own Node.js process (an approval responder / a `needsApproval`
- * function), which is what `'sdk'` classifies — but for AI_SDK_HARNESS the
- * tool EXECUTION it vetoes happens server-side in a Vercel Sandbox microVM,
- * and its built-in sandbox tools have no veto surface at all beyond
- * `permissionMode` (defaults to 'allow-all'). `'sdk'` describes where the
- * gate mechanism lives, not a claim that every tool the harness can run
- * passes through it — see gateRegistry.ts's NO_GATE rows for the honest
- * scope statement per harness.
- */
-export const SDK_GATED_HARNESSES = new Set([
-    HarnessType.LANGGRAPH,
-    HarnessType.LANGCHAIN,
-    HarnessType.CREWAI,
-    HarnessType.AUTOGEN,
-    HarnessType.AG2,
-    HarnessType.GOOGLE_ADK,
-    HarnessType.OPENAI_AGENTS,
-    HarnessType.PYDANTIC_AI,
-    HarnessType.SMOLAGENTS,
-    HarnessType.STRANDS,
-    HarnessType.AGENT_FRAMEWORK,
-    HarnessType.MASTRA,
-    HarnessType.VERCEL_AI_SDK,
-    HarnessType.EVE,
-    HarnessType.TRUEFORGE,
-    HarnessType.AI_SDK_HARNESS,
-    HarnessType.AI_SDK_WORKFLOW,
-]);
-/**
- * Harnesses with no enforcement point at all today. Mirrors the
- * `aiderConfigMerger.ts` NO_GATE row: aider's only native hook
- * (`--git-commit-verify`) is opt-in, post-edit, and blind to `/run`.
- */
-export const NO_GATE_HARNESSES = new Set([HarnessType.AIDER]);
-/**
- * Harnesses that wrap OTHER already-gated harnesses instead of running tools
- * themselves — no gate of their own, but not ungoverned either. Mirrors the
- * `file: null` NO_GATE rows for `xirp` and `agentic-orchestrator` in
- * `gateRegistry.ts`. Xirp was the first entry of this shape; Agentic
- * Orchestrator (O3) is the second. O2 (QM) is expected to add a third, same
- * "wraps other harnesses" shape, in a concurrent phase not yet merged as of
- * this one.
- */
-export const DELEGATED_GATE_HARNESSES = new Set([
-    HarnessType.XIRP,
-    HarnessType.AGENTIC_ORCHESTRATOR,
-    // B2: AWS Bedrock AgentCore Runtime — hosts a customer's own framework
-    // code unchanged; governed by whichever already-supported framework
-    // adapter that code uses. See tools/cli/src/harness/agentcore.ts.
-    HarnessType.AGENTCORE_RUNTIME,
-]);
-/**
- * Harnesses whose blocking gate runs OUT OF PROCESS, in an Intutic-operated
- * service reacting to the harness's own async approval/event API — not a
- * file this daemon writes, and not an SDK imported into the harness's own
- * process (no process of ours runs inside the harness at all). Mirrors the
- * `file: null` NO_GATE row for `trueforge-server` in `gateRegistry.ts`.
- *
- * TRUEFORGE_SERVER (B3) is the first member: a TrueForge standalone/hosted
- * server has no in-process host to hang an SDK gate off of (contrast
- * TRUEFORGE, embedded mode, in `SDK_GATED_HARNESSES` above) — instead
- * `services/trueforge-bridge` watches its turn/event stream externally and
- * answers pending `tool.approval_required` pauses over HTTP. See the
- * `'bridge'` `GateKind` doc above for the full distinction from `'sdk'` and
- * `'delegated'`.
- */
-export const BRIDGE_GATED_HARNESSES = new Set([HarnessType.TRUEFORGE_SERVER]);
-/** How this harness's tool calls get gated. Defaults to `'hook'`. */
-export function gateKindForHarness(type) {
-    if (SDK_GATED_HARNESSES.has(type))
-        return 'sdk';
-    if (NO_GATE_HARNESSES.has(type))
-        return 'none';
-    if (DELEGATED_GATE_HARNESSES.has(type))
-        return 'delegated';
-    if (BRIDGE_GATED_HARNESSES.has(type))
-        return 'bridge';
-    return 'hook';
-}
-//# sourceMappingURL=gateKind.js.map

package/dist/harness/gateKind.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gateKind.js","sourceRoot":"","sources":["../../src/harness/gateKind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,WAAW,EAAoC,MAAM,uBAAuB,CAAA;AA0DrF;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,IAAI,GAAG,CAAC;IACpE,WAAW,CAAC,SAAS;IACrB,WAAW,CAAC,SAAS;IACrB,WAAW,CAAC,MAAM;IAClB,WAAW,CAAC,OAAO;IACnB,WAAW,CAAC,GAAG;IACf,WAAW,CAAC,UAAU;IACtB,WAAW,CAAC,aAAa;IACzB,WAAW,CAAC,WAAW;IACvB,WAAW,CAAC,UAAU;IACtB,WAAW,CAAC,OAAO;IACnB,WAAW,CAAC,eAAe;IAC3B,WAAW,CAAC,MAAM;IAClB,WAAW,CAAC,aAAa;IACzB,WAAW,CAAC,GAAG;IACf,WAAW,CAAC,SAAS;IACrB,WAAW,CAAC,cAAc;IAC1B,WAAW,CAAC,eAAe;CAC5B,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA8B,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA;AAExF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAA8B,IAAI,GAAG,CAAC;IACzE,WAAW,CAAC,IAAI;IAChB,WAAW,CAAC,oBAAoB;IAChC,uEAAuE;IACvE,oEAAoE;IACpE,kEAAkE;IAClE,WAAW,CAAC,iBAAiB;CAC9B,CAAC,CAAA;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA8B,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAA;AAExG,qEAAqE;AACrE,MAAM,UAAU,kBAAkB,CAAC,IAAkB;IACnD,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IAC/C,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAA;IAC9C,IAAI,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAA;IAC1D,IAAI,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAA;IACrD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/harness/rooCodeHooks.d.ts

@@ -1,31 +0,0 @@
-/**
- * rooCodeHooks.ts — Roo Code (ZooCode) governance hook generator.
- *
- * Roo Code uses `.roorules` for SOP rules and `.roomodes` for custom modes.
- * For hook interception, it reads hook config from `.roorules/hooks/hooks.json`.
- * The hook result format uses stdout JSON: {"cancel": true, "errorMessage": "..."}
- * rather than exit codes (unlike Claude Code's exit 2).
- *
- * Hook events are written via dual-path logEvent:
- *   Path B (reliable)  — synchronous append to .intutic/events/roo-hook-events.jsonl
- *   Path A (telemetry) — fire-and-forget https.request to the control plane
- *
- * LLD #14 — Phase 3 cross-harness defence (Gap 3, WS-B)
- * HLD §3.14 — Three-Tier Defense Cascade (Tier 1 Native Gating)
- *
- * @module
- */
-/**
- * Write the Roo Code governance hook configuration:
- *  1. `.roorules` — SOP rules in Roo Code markdown format.
- *  2. `.roorules/hooks/hooks.json` — hook config pointing to the Node.js gate.
- *  3. `.intutic/hooks/roo-check.js` — Node.js dual-path hook (stdout cancel JSON).
- *
- * Safe to call repeatedly — uses atomic rename (`.intutic-tmp` → final path).
- *
- * @param workspaceRoot - Absolute workspace root path.
- * @param proxyUrl      - Intutic proxy URL written into the hook script header.
- * @param workspaceId   - Workspace ID embedded in every hook event payload.
- */
-export declare function writeRooCodeHooks(workspaceRoot: string, proxyUrl: string, workspaceId?: string): Promise<void>;
-//# sourceMappingURL=rooCodeHooks.d.ts.map

package/dist/harness/rooCodeHooks.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rooCodeHooks.d.ts","sourceRoot":"","sources":["../../src/harness/rooCodeHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAsNH;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CACrC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,WAAW,SAAK,GACf,OAAO,CAAC,IAAI,CAAC,CAiEf"}

package/dist/harness/rooCodeHooks.js

@@ -1,281 +0,0 @@
-/**
- * rooCodeHooks.ts — Roo Code (ZooCode) governance hook generator.
- *
- * Roo Code uses `.roorules` for SOP rules and `.roomodes` for custom modes.
- * For hook interception, it reads hook config from `.roorules/hooks/hooks.json`.
- * The hook result format uses stdout JSON: {"cancel": true, "errorMessage": "..."}
- * rather than exit codes (unlike Claude Code's exit 2).
- *
- * Hook events are written via dual-path logEvent:
- *   Path B (reliable)  — synchronous append to .intutic/events/roo-hook-events.jsonl
- *   Path A (telemetry) — fire-and-forget https.request to the control plane
- *
- * LLD #14 — Phase 3 cross-harness defence (Gap 3, WS-B)
- * HLD §3.14 — Three-Tier Defense Cascade (Tier 1 Native Gating)
- *
- * @module
- */
-import * as fs from 'node:fs/promises';
-import * as path from 'node:path';
-import * as os from 'node:os';
-import { createLogger } from '@intutic/logger';
-import { keepOriginal, writeOwnedFile } from '../disconnect/originals.js';
-import { newIso } from '@intutic/id';
-import { emitJsGate, emitJsFailClosedPrelude } from './gateBody.js';
-import { UNIVERSAL_PROTECTED_PATHS } from './protectedPaths.js';
-const log = createLogger('sync-roo-code-hooks');
-/** Governance-sensitive paths that the hook gate protects. */
-// ─── Node.js hook script template ─────────────────────────────────────────────
-function buildRooCheckScript(proxyUrl, workspaceRoot, workspaceId) {
-    const hookEventsLog = path.join(workspaceRoot, '.intutic', 'events', 'roo-hook-events.jsonl');
-    const runtimeEnvPath = path.join(os.homedir(), '.intutic', 'env', 'runtime.env');
-    return `/**
- * Intutic Roo Code PreToolUse execution gate.
- * Auto-generated by intutic sync-daemon. DO NOT EDIT.
- *
- * Block format: stdout JSON {"cancel": true, "errorMessage": "..."}
- * Allow format: stdout JSON {"cancel": false}
- *
- * Dual-path logEvent:
- *   Path B — synchronous file append to roo-hook-events.jsonl
- *   Path A — fire-and-forget https.request to the control plane
- *
- * Proxy: ${proxyUrl}
- * Generated: ${newIso()}
- * Workspace: ${workspaceId}
- */
-'use strict';
-${emitJsFailClosedPrelude({ harness: 'roo-code', contract: 'stdout-cancel' })}
-const path = require('path');
-const os = require('os');
-const fs = require('fs');
-const https = require('https');
-const crypto = require('crypto');
-const url = require('url');
-
-// ── Runtime env loader (Path A credentials) ──────────────────────────────────
-const RUNTIME_ENV_PATH = ${JSON.stringify(runtimeEnvPath)};
-
-function loadRuntimeEnv() {
-  const env = {
-    INTUTIC_HOST: 'https://api.intutic.ai',
-    INTUTIC_API_KEY: '',
-    INTUTIC_WORKSPACE_ID: ${JSON.stringify(workspaceId)},
-  };
-  try {
-    const raw = fs.readFileSync(RUNTIME_ENV_PATH, 'utf-8');
-    for (const line of raw.split('\\n')) {
-      const stripped = line.trim();
-      if (!stripped || stripped.startsWith('#') || !stripped.includes('=')) continue;
-      const eq = stripped.indexOf('=');
-      const k = stripped.slice(0, eq).trim();
-      const v = stripped.slice(eq + 1).trim();
-      env[k] = v;
-    }
-  } catch { /* file may not exist yet */ }
-  return env;
-}
-
-// ── Governance-sensitive paths ────────────────────────────────────────────────
-${emitJsGate({ harness: "roo-code", contract: 'stdout-cancel' })}
-
-// ── Dual-path logEvent ────────────────────────────────────────────────────────
-const HOOK_EVENTS_LOG = ${JSON.stringify(hookEventsLog)};
-
-let _intuticSessionId = '';
-function logEvent(env, verdict, toolName, reason) {
-  const ts = new Date().toISOString();
-  const incidentId = crypto.createHash('sha1')
-    .update(ts + toolName + env.INTUTIC_WORKSPACE_ID)
-    .digest('hex').slice(0, 16);
-
-  const entry = {
-    // Passed through, not collapsed to two values: the advisory tier emits
-      // 'tool_flagged', and a ternary here silently recorded it as an allow.
-      event: verdict,
-    toolName,
-    reason: reason || '',
-    workspaceId: env.INTUTIC_WORKSPACE_ID,
-    harnessType: 'roo-code',
-    timestamp: ts,
-    incidentId,
-    ...(_intuticSessionId ? { sessionId: _intuticSessionId } : {}),
-  };
-
-  // Path B — reliable file append
-  try {
-    const dir = path.dirname(HOOK_EVENTS_LOG);
-    if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
-    fs.appendFileSync(HOOK_EVENTS_LOG, JSON.stringify(entry) + '\\n', { flag: 'a' });
-  } catch { /* never crash the hook */ }
-
-  // Path A — fire-and-forget https.request
-  if (env.INTUTIC_API_KEY) {
-    try {
-      const body = Buffer.from(JSON.stringify({ events: [entry] }));
-      const parsedUrl = url.parse(env.INTUTIC_HOST + '/api/v1/hook-events');
-      const req = https.request({
-        hostname: parsedUrl.hostname,
-        port: parsedUrl.port || 443,
-        path: parsedUrl.path,
-        method: 'POST',
-        headers: {
-          'Content-Type': 'application/json',
-          'Content-Length': body.length,
-          'Authorization': 'Bearer ' + env.INTUTIC_API_KEY,
-        },
-      });
-      req.on('error', () => {}); // fire-and-forget
-      req.write(body);
-      req.end();
-    } catch { /* never crash the hook */ }
-  }
-}
-
-function block(env, toolName, reason) {
-  logEvent(env, 'tool_blocked', toolName, reason);
-  process.stdout.write(JSON.stringify({ cancel: true, errorMessage: reason }));
-  process.exit(0);
-}
-
-function allow(env, toolName) {
-  logEvent(env, 'tool_allowed', toolName, '');
-  process.stdout.write(JSON.stringify({ cancel: false }));
-  process.exit(0);
-}
-
-// ── Main ──────────────────────────────────────────────────────────────────────
-const runtimeEnv = loadRuntimeEnv();
-let inputData = '';
-process.stdin.on('data', (chunk) => { inputData += chunk; });
-process.stdin.on('end', () => {
-  try {
-    const ctx = JSON.parse(inputData);
-    _intuticSessionId = ctx.session_id || ctx.sessionId || ctx.conversation_id || ctx.conversationId || ctx.task_id || ctx.taskId || '';
-    // An envelope carrying none of the tool fields extracts to empty strings,
-    // which match no rule — an allow. Refused instead, and the refusal CANCELS
-    // (this harness ignores exit codes); see intuticGuardEnvelope.
-    intuticGuardEnvelope(ctx, ['tool_name', 'toolName', 'tool_input', 'toolInput'],
-      (v, t, r) => logEvent(runtimeEnv, v, t, r));
-    const toolName = (ctx.tool_name || ctx.toolName || '').toLowerCase()
-    // Case preserved for the gate. A BLOCK: SOP compiles to a tool-name
-    // pattern the operator wrote as they see it (Bash, Write) and this
-    // harness lowercases the tool for its own matching. Handing the gate the
-    // lowercased form means every SOP tool rule silently matches nothing here
-    // while appearing active everywhere else.
-    const rawToolName = ctx.tool_name || ctx.toolName || '';
-    const toolInput = ctx.tool_input || ctx.toolInput || {};
-    const toolInputStr = JSON.stringify(toolInput);
-
-    // Roo Code ignores the exit code and reads a cancel object from stdout, so
-    // the shared gate is emitted with the stdout-cancel contract. Getting that
-    // wrong is invisible in review — the gate would exit 2 into a harness that
-    // never looks at it, and every call would proceed.
-    const targetPath = toolInput.path || toolInput.file_path || toolInput.filePath ||
-      toolInput.new_path || toolInput.target || toolInput.notebook_path || '';
-    const command = toolInput.command || toolInput.cmd || toolInput.script || '';
-    intuticGate(rawToolName, targetPath, command, (v, t, r) => logEvent(runtimeEnv, v, t, r), runtimeEnv.INTUTIC_WORKSPACE_ID, toolInput);
-
-    allow(runtimeEnv, toolName);
-  } catch (err) {
-    // Fail closed on parse error
-    const env = runtimeEnv;
-    logEvent(env, 'tool_blocked', 'unknown', String(err));
-    process.stdout.write(JSON.stringify({ cancel: true, errorMessage: '[Intutic] Hook error: ' + String(err) }));
-    process.exit(0);
-  }
-});
-`.trim();
-}
-// ─── .roorules SOP content ────────────────────────────────────────────────────
-function buildRooRulesContent() {
-    return [
-        '# Intutic Governance Rules (auto-generated)',
-        '# DO NOT EDIT — managed by intutic sync daemon',
-        `# Last sync: ${newIso()}`,
-        '',
-        '## Roo Code SOP Governance',
-        '',
-        'This workspace is governed by Intutic SOP policies. All tool executions are',
-        'monitored and may be blocked according to the active SOPs configured in the',
-        'Intutic control plane.',
-        '',
-        '### Protected Paths',
-        '',
-        'The following paths must not be modified by any agent:',
-        '',
-        ...UNIVERSAL_PROTECTED_PATHS.map((p) => `- \`${p}\``),
-        '',
-        '### Hook Events',
-        '',
-        'All tool executions are logged to `.intutic/events/roo-hook-events.jsonl`',
-        'and forwarded to the Intutic control plane on each sync cycle.',
-        '',
-    ].join('\n');
-}
-// ─── Main export ──────────────────────────────────────────────────────────────
-/**
- * Write the Roo Code governance hook configuration:
- *  1. `.roorules` — SOP rules in Roo Code markdown format.
- *  2. `.roorules/hooks/hooks.json` — hook config pointing to the Node.js gate.
- *  3. `.intutic/hooks/roo-check.js` — Node.js dual-path hook (stdout cancel JSON).
- *
- * Safe to call repeatedly — uses atomic rename (`.intutic-tmp` → final path).
- *
- * @param workspaceRoot - Absolute workspace root path.
- * @param proxyUrl      - Intutic proxy URL written into the hook script header.
- * @param workspaceId   - Workspace ID embedded in every hook event payload.
- */
-export async function writeRooCodeHooks(workspaceRoot, proxyUrl, workspaceId = '') {
-    // ── 1. Ensure directories ──────────────────────────────────────────────────
-    const hookScriptDir = path.join(workspaceRoot, '.intutic', 'hooks');
-    const hookEventsDir = path.join(workspaceRoot, '.intutic', 'events');
-    const rooRulesDir = path.join(workspaceRoot, '.roorules');
-    const rooHooksDir = path.join(rooRulesDir, 'hooks');
-    await keepOriginal(path.join(rooHooksDir, 'hooks.json'), workspaceRoot);
-    await Promise.all([
-        fs.mkdir(hookScriptDir, { recursive: true }),
-        fs.mkdir(hookEventsDir, { recursive: true }),
-        fs.mkdir(rooHooksDir, { recursive: true }),
-    ]);
-    // ── 2. Write hook script (atomic) ─────────────────────────────────────────
-    const hookScriptPath = path.join(hookScriptDir, 'roo-check.js');
-    const tmpScript = hookScriptPath + '.intutic-tmp';
-    await fs.writeFile(tmpScript, buildRooCheckScript(proxyUrl, workspaceRoot, workspaceId), 'utf-8');
-    await fs.rename(tmpScript, hookScriptPath);
-    log.info({ action: 'roo_hook_script_written', path: hookScriptPath }, 'Roo Code hook script written');
-    // ── 3. Write .roorules (atomic) ───────────────────────────────────────────
-    const rooRulesPath = path.join(workspaceRoot, '.roorules');
-    // .roorules is a file (not the directory used for hooks), so we check if
-    // it's already a directory and write a README inside it instead.
-    let rooRulesIsDir = false;
-    try {
-        const stat = await fs.stat(rooRulesPath);
-        rooRulesIsDir = stat.isDirectory();
-    }
-    catch {
-        // Doesn't exist — write as file
-    }
-    if (rooRulesIsDir) {
-        // Write README.md inside the directory
-        await writeOwnedFile(path.join(rooRulesPath, 'README.md'), workspaceRoot, buildRooRulesContent());
-    }
-    else {
-        await writeOwnedFile(rooRulesPath, workspaceRoot, buildRooRulesContent());
-    }
-    log.info({ action: 'roo_rules_written' }, 'Roo Code .roorules written');
-    // ── 4. Write .roorules/hooks/hooks.json (atomic) ──────────────────────────
-    const hooksJsonPath = path.join(rooHooksDir, 'hooks.json');
-    const hooksConfig = {
-        hooks: [
-            {
-                type: 'PreToolUse',
-                matcher: '.*',
-                command: `node ${hookScriptPath}`,
-            },
-        ],
-    };
-    await writeOwnedFile(hooksJsonPath, workspaceRoot, JSON.stringify(hooksConfig, null, 2) + '\n');
-    log.info({ action: 'roo_hooks_json_written', path: hooksJsonPath }, 'Roo Code hooks.json written');
-}
-//# sourceMappingURL=rooCodeHooks.js.map

package/dist/harness/rooCodeHooks.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rooCodeHooks.js","sourceRoot":"","sources":["../../src/harness/rooCodeHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AACnE,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AAE/D,MAAM,GAAG,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAA;AAE/C,8DAA8D;AAE9D,iFAAiF;AAEjF,SAAS,mBAAmB,CAC1B,QAAgB,EAChB,aAAqB,EACrB,WAAmB;IAEnB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,uBAAuB,CAAC,CAAA;IAC7F,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,CAAC,CAAA;IAEhF,OAAO;;;;;;;;;;;YAWG,QAAQ;gBACJ,MAAM,EAAE;gBACR,WAAW;;;EAGzB,uBAAuB,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;;;;;;;;;2BASlD,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;;;;;;4BAM7B,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;;;;;;;;;;;;;;;;;EAiBrD,UAAU,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;;;0BAGtC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyGtD,CAAC,IAAI,EAAE,CAAA;AACR,CAAC;AAED,iFAAiF;AAEjF,SAAS,oBAAoB;IAC3B,OAAO;QACL,6CAA6C;QAC7C,gDAAgD;QAChD,gBAAgB,MAAM,EAAE,EAAE;QAC1B,EAAE;QACF,4BAA4B;QAC5B,EAAE;QACF,6EAA6E;QAC7E,6EAA6E;QAC7E,wBAAwB;QACxB,EAAE;QACF,qBAAqB;QACrB,EAAE;QACF,wDAAwD;QACxD,EAAE;QACF,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QACrD,EAAE;QACF,iBAAiB;QACjB,EAAE;QACF,2EAA2E;QAC3E,gEAAgE;QAChE,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,aAAqB,EACrB,QAAgB,EAChB,WAAW,GAAG,EAAE;IAEhB,8EAA8E;IAE9E,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IACnE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAA;IACpE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;IACzD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;IAEnD,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,aAAa,CAAC,CAAA;IACvE,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC5C,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC5C,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;KAC3C,CAAC,CAAA;IAEF,6EAA6E;IAE7E,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAA;IAC/D,MAAM,SAAS,GAAG,cAAc,GAAG,cAAc,CAAA;IACjD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,mBAAmB,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAA;IACjG,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;IAE1C,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,8BAA8B,CAAC,CAAA;IAErG,6EAA6E;IAE7E,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;IAC1D,yEAAyE;IACzE,iEAAiE;IACjE,IAAI,aAAa,GAAG,KAAK,CAAA;IACzB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACxC,aAAa,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,uCAAuC;QACvC,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,aAAa,EAAE,oBAAoB,EAAE,CAAC,CAAA;IACnG,CAAC;SAAM,CAAC;QACN,MAAM,cAAc,CAAC,YAAY,EAAE,aAAa,EAAE,oBAAoB,EAAE,CAAC,CAAA;IAC3E,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,4BAA4B,CAAC,CAAA;IAEvE,6EAA6E;IAE7E,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;IAC1D,MAAM,WAAW,GAAG;QAClB,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,QAAQ,cAAc,EAAE;aAClC;SACF;KACF,CAAA;IAED,MAAM,cAAc,CAAC,aAAa,EAAE,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;IAE/F,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,wBAAwB,EAAE,IAAI,EAAE,aAAa,EAAE,EACzD,6BAA6B,CAC9B,CAAA;AACH,CAAC"}