@intutic/sync-daemon 3.0.4 → 3.0.7

package/README.md

@@ -62,7 +62,7 @@ intutic connect --interval 10000  # Custom sync interval (milliseconds)
 
 ## Part of Intutic
 
-This package is part of the [Intutic](https://github.com/intutic/intutic) monorepo — an open-core AI governance control plane for developer teams.
+This package is part of the [Intutic](https://github.com/intutic/intutic) monorepo — policy as code for AI agents, enforced at the tool call.
 
 ## License
 

package/dist/agentReporter.d.ts

@@ -101,7 +101,7 @@ interface AgentFacets {
         /**
          * sha256 of the `SKILL.md` content this row describes, as the judge
          * receives it (`skillContentForTransport`: the first 65536 characters) (Phase S5) —
-         * lets `services/control-plane/src/routes/agents.ts` look up
+         * lets the control plane look up
          * a previously-judged semantic verdict
          * (`services/semanticSkillAnalysisService.ts`'s `skills:semantic:*`
          * Valkey entry) keyed by the exact content this cycle read, without this

package/dist/configReader.d.ts

@@ -29,7 +29,7 @@ export declare function redactConfigText(text: string): string;
  * was missing an `Array.isArray` guard the control-plane side had). Both
  * sides now derive from `packages/shared-types/src/governanceCoverage.ts`'s
  * single mapping — safe for this module to depend on since it is a leaf
- * package, not `services/control-plane` itself, so the publicly-mirrored
+ * package, not the control plane itself, so the publicly-mirrored
  * `services/sync-daemon` still never imports from the enterprise-only
  * service.
  */

package/dist/harness/claudeCodeHooks.d.ts

@@ -22,29 +22,10 @@ export declare const REVIEW_REQUESTS_BASENAME = "review-requests.jsonl";
 export declare const REVIEW_REQUESTS_LOG = ".intutic/events/review-requests.jsonl";
 export declare const REVIEW_REQUEST_VERSION = 1;
 export declare const SopHookConstraintsSchema: z.ZodObject<{
-    highRiskTools: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodString, "many">>, string[], unknown>;
-    patterns: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodString, "many">>, string[], unknown>;
-    /**
-     * Actions that must not run until a human has approved the run.
-     *
-     * Distinct from `patterns`, which is a permanent denial. This is a *hold*: the
-     * action is legitimate, and someone wants to see it before it happens.
-     *
-     * This is the half of the review gate that is genuinely pre-execution. The
-     * proxy can only refuse the request *after* a harness has already run the tool
-     * — it sees the call in the next message. The hook runs before, so declaring
-     * `action:deploy` here stops the push itself, not merely everything after it.
-     */
-    reviewBefore: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodString, "many">>, string[], unknown>;
-}, "strip", z.ZodTypeAny, {
-    highRiskTools: string[];
-    patterns: string[];
-    reviewBefore: string[];
-}, {
-    highRiskTools?: unknown;
-    patterns?: unknown;
-    reviewBefore?: unknown;
-}>;
+    highRiskTools: z.ZodPreprocess<z.ZodDefault<z.ZodArray<z.ZodString>>, unknown>;
+    patterns: z.ZodPreprocess<z.ZodDefault<z.ZodArray<z.ZodString>>, unknown>;
+    reviewBefore: z.ZodPreprocess<z.ZodDefault<z.ZodArray<z.ZodString>>, unknown>;
+}, z.core.$strip>;
 export type SopHookConstraints = z.infer<typeof SopHookConstraintsSchema>;
 export declare function parseSopConstraints(sops: SyncSopEntry[], settings?: Record<string, unknown> | import('@intutic/shared-types').WorkspaceSettings): SopHookConstraints;
 /**

package/dist/harness/claudeCodeHooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claudeCodeHooks.d.ts","sourceRoot":"","sources":["../../src/harness/claudeCodeHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AA8BzD,gFAAgF;AAChF,eAAO,MAAM,eAAe,sCAAsC,CAAA;AAElE;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,0BAAgC,CAAA;AACrE,eAAO,MAAM,mBAAmB,0CAA2B,CAAA;AAC3D,eAAO,MAAM,sBAAsB,IAA8B,CAAA;AAmBjE,eAAO,MAAM,wBAAwB;;;IAGnC;;;;;;;;;;OAUG;;;;;;;;;;EAEH,CAAA;AAEF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAsCzE,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,YAAY,EAAE,EACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,uBAAuB,EAAE,iBAAiB,GACrF,kBAAkB,CAgHpB;AAED;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CACzC,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,YAAY,EAAE,EACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,uBAAuB,EAAE,iBAAiB,EACtF,eAAe,CAAC,EAAE,MAAM,EACxB,WAAW,CAAC,EAAE,MAAM,EACpB,WAAW,SAAgB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAoXf;AAkPD;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,aAAa,EAAE,MAAM,EACrB,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAWjB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,mBAAmB,CACvC,aAAa,EAAE,MAAM,EACrB,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAQjB"}
+{"version":3,"file":"claudeCodeHooks.d.ts","sourceRoot":"","sources":["../../src/harness/claudeCodeHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AA8BzD,gFAAgF;AAChF,eAAO,MAAM,eAAe,sCAAsC,CAAA;AAElE;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,0BAAgC,CAAA;AACrE,eAAO,MAAM,mBAAmB,0CAA2B,CAAA;AAC3D,eAAO,MAAM,sBAAsB,IAA8B,CAAA;AAmBjE,eAAO,MAAM,wBAAwB;;;;iBAenC,CAAA;AAEF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAsCzE,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,YAAY,EAAE,EACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,uBAAuB,EAAE,iBAAiB,GACrF,kBAAkB,CAgHpB;AAED;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CACzC,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,YAAY,EAAE,EACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,uBAAuB,EAAE,iBAAiB,EACtF,eAAe,CAAC,EAAE,MAAM,EACxB,WAAW,CAAC,EAAE,MAAM,EACpB,WAAW,SAAgB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAoXf;AAkPD;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,aAAa,EAAE,MAAM,EACrB,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAWjB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,mBAAmB,CACvC,aAAa,EAAE,MAAM,EACrB,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAQjB"}

package/dist/harness/cursorHooks.d.ts

@@ -37,7 +37,7 @@ export declare function systemHooksDirFor(platform: NodeJS.Platform): string;
 /**
  * Build a Cursor hooks.json config object.
  *
- * Exported so `enterprise install` (`tools/cli/src/lib/mdmManifest.ts`) can
+ * Exported so `enterprise install` (the control-plane CLI plugin's mdmManifest) can
  * populate its generated MDM hooks manifest from the SAME shape this file
  * writes, rather than a hand-retyped literal — which is exactly how that
  * manifest drifted before (it named `pre-tool-check.js`, this file's real

package/dist/harness/cursorHooks.js

@@ -65,7 +65,7 @@ export function systemHooksDirFor(platform) {
 /**
  * Build a Cursor hooks.json config object.
  *
- * Exported so `enterprise install` (`tools/cli/src/lib/mdmManifest.ts`) can
+ * Exported so `enterprise install` (the control-plane CLI plugin's mdmManifest) can
  * populate its generated MDM hooks manifest from the SAME shape this file
  * writes, rather than a hand-retyped literal — which is exactly how that
  * manifest drifted before (it named `pre-tool-check.js`, this file's real

package/dist/lib/scopeMatchPy.js

@@ -44,7 +44,7 @@ SCOPE_MOVE_FROM_KEYS = ("source", "source_path", "from", "old_path")
 SCOPE_MOVE_TO_KEYS = ("destination", "destination_path", "to", "new_path")
 SCOPE_TARGET_MAX_BYTES = 512
 PLAN_EXEMPT_TOOLS = ("read", "readfile", "view", "cat", "open_file", "glob", "grep", "ls", "list_dir", "search",
-                     "todowrite")
+                     "todowrite", "read_file", "list_directory")
 FILE_WRITE_SHELL_PHRASES = ("sed -i", "perl -i", "perl -pi", "git apply", "git am", "git checkout", "git switch",
                             "git restore", "git reset", "git merge", "git pull", "git rebase", "git cherry-pick",
                             "git revert", "git stash pop", "git stash apply", "patch -p")

package/dist/syncCycle.d.ts

@@ -2,7 +2,7 @@
  * syncCycle.ts — the per-cycle work `intutic connect` runs against the
  * control plane.
  *
- * `intutic connect` (tools/cli/src/commands/connect.ts) owns the loop: it
+ * `intutic connect` (the control-plane CLI plugin's connect command) owns the loop: it
  * polls the control plane, listens for pushed config over the WebSocket, and
  * on each cycle calls the helpers below. They live here, not in the CLI, so
  * they can be tested without starting a daemon and so the gate-side caches

package/dist/syncCycle.js

@@ -2,7 +2,7 @@
  * syncCycle.ts — the per-cycle work `intutic connect` runs against the
  * control plane.
  *
- * `intutic connect` (tools/cli/src/commands/connect.ts) owns the loop: it
+ * `intutic connect` (the control-plane CLI plugin's connect command) owns the loop: it
  * polls the control plane, listens for pushed config over the WebSocket, and
  * on each cycle calls the helpers below. They live here, not in the CLI, so
  * they can be tested without starting a daemon and so the gate-side caches

package/dist/trajectoryMonitor.d.ts

@@ -2,7 +2,7 @@
  * Trajectory Monitor — Daemon-side session watcher.
  *
  * Runs in the `intutic connect` process, not a Worker thread:
- * `tools/cli/src/commands/connect.ts` subscribes to the Valkey pub/sub
+ * the `connect` command (the control-plane CLI plugin) subscribes to the Valkey pub/sub
  * `trace:live:*` channels and passes each event to `handleTraceEvent`. Events
  * are buffered per session in a sliding window, and trajectory summaries are
  * submitted to the control plane for analysis.

package/dist/trajectoryMonitor.js

@@ -2,7 +2,7 @@
  * Trajectory Monitor — Daemon-side session watcher.
  *
  * Runs in the `intutic connect` process, not a Worker thread:
- * `tools/cli/src/commands/connect.ts` subscribes to the Valkey pub/sub
+ * the `connect` command (the control-plane CLI plugin) subscribes to the Valkey pub/sub
  * `trace:live:*` channels and passes each event to `handleTraceEvent`. Events
  * are buffered per session in a sliding window, and trajectory summaries are
  * submitted to the control plane for analysis.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intutic/sync-daemon",
-  "version": "3.0.4",
+  "version": "3.0.7",
   "description": "Intutic Sync Daemon — bidirectional state sync between control plane and developer workspaces",
   "type": "module",
   "license": "MIT",
@@ -108,11 +108,11 @@
     "smol-toml": "^1.9.0",
     "ws": "^8.21.0",
     "yaml": "^2.9.0",
-    "zod": "^3",
-    "@intutic/logger": "3.0.4",
-    "@intutic/mcp-governance-proxy": "3.0.4",
-    "@intutic/shared-types": "3.0.4",
-    "@intutic/id": "3.0.4"
+    "zod": "^4.6.6",
+    "@intutic/id": "3.0.7",
+    "@intutic/mcp-governance-proxy": "3.0.7",
+    "@intutic/shared-types": "3.0.7",
+    "@intutic/logger": "3.0.7"
   },
   "devDependencies": {
     "@types/node": "^22",