@aligndottech/cli 0.35.0 → 0.36.0

package/dist/lib/sessions/confirm-freetext.js

@@ -0,0 +1,82 @@
+import { DETERMINISTIC_TEMPERATURE } from '@aligndottech/connector-core';
+import { callChatDetailed, CLASSIFIER_MAX_TOKENS, hasConfiguredProvider, noProviderHintInline, RECOMMENDED_OLLAMA_PULL, resolveMaxTokens, } from '../local-llm.js';
+const SYSTEM_PROMPT = 'You review one turn from a coding-agent session transcript to decide whether the HUMAN ' +
+    'stated a decision or redirect mid-session (e.g. "let\'s use X instead", "go with Y", ' +
+    '"decided to switch to Z"). CONTEXT is the agent\'s reply and is background only - it tells ' +
+    'you what was actually resolved, but the thing being reviewed is the human\'s turn, not the ' +
+    'agent\'s. Respond ONLY with compact JSON: ' +
+    '{"isDecision": boolean, "title": short string naming what was decided, "confidence": number 0-1}. ' +
+    'Set isDecision to false when HUMAN_TEXT is a question, a bug report, a command, or anything ' +
+    'else that is not actually a decision or redirect.';
+function buildUserPrompt(candidate) {
+    return `HUMAN_TEXT: ${candidate.humanText}\n\nCONTEXT (the agent's reply, background only): ${candidate.contextText ?? '(none)'}`;
+}
+function parseConfirmation(text) {
+    const match = text.match(/\{[\s\S]*\}/);
+    if (!match)
+        return null;
+    try {
+        const obj = JSON.parse(match[0]);
+        if (typeof obj.isDecision !== 'boolean')
+            return null;
+        const confidence = typeof obj.confidence === 'number' ? Math.max(0, Math.min(1, obj.confidence)) : 0.5;
+        const title = typeof obj.title === 'string' ? obj.title.trim() : '';
+        return { isDecision: obj.isDecision, title, confidence };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * A per-reason hint, not one collapsed "no LLM configured" line - align-stack's own
+ * local-gateway-client.ts already documents why collapsing this union is wrong (ALI-420: "an
+ * unvetted local model gets its own remedy... nonsense to someone already running one") and
+ * ALI-692 for provider_stopped naming the model that actually failed. Only `no_llm_key` means
+ * nothing is configured; the other three all require a provider that DID answer or a model
+ * that IS installed, so telling that caller to "set a key or run Ollama" is actively wrong.
+ */
+export function describeConfirmFailure(reason, failure) {
+    switch (reason) {
+        case 'no_llm_key':
+            return noProviderHintInline('these can be confirmed');
+        case 'unvetted_local_model':
+            return ` Ollama is running, but no recognised model is installed: \`ollama pull ${RECOMMENDED_OLLAMA_PULL}\`, or set ALIGN_OLLAMA_MODEL to name your own.`;
+        case 'confirm_error':
+            return failure?.kind === 'provider_stopped'
+                ? ` ${failure.model} (${failure.provider}) returned an unusable response (${failure.detail}) - try again.`
+                : ' The configured provider did not answer usably - try again.';
+        case 'confirm_unparseable':
+            return ' The model replied without usable JSON - this is usually transient; try again.';
+    }
+}
+export async function confirmFreeTextCandidate(candidate) {
+    const maxTokens = resolveMaxTokens('ALIGN_CLASSIFIER_MAX_TOKENS', CLASSIFIER_MAX_TOKENS);
+    const result = await callChatDetailed(SYSTEM_PROMPT, buildUserPrompt(candidate), {
+        temperature: DETERMINISTIC_TEMPERATURE,
+        maxTokens,
+    });
+    if (!result.ok) {
+        const reason = result.failure.kind === 'unrecognised_local_models' ? 'unvetted_local_model'
+            : result.failure.kind === 'provider_stopped' ? 'confirm_error'
+                : hasConfiguredProvider() ? 'confirm_error' : 'no_llm_key';
+        return { ok: false, reason, failure: result.failure };
+    }
+    const parsed = parseConfirmation(result.text);
+    if (!parsed)
+        return { ok: false, reason: 'confirm_unparseable' };
+    if (!parsed.isDecision)
+        return { ok: true, decision: null };
+    return {
+        ok: true,
+        decision: {
+            agent: candidate.agent,
+            sessionId: candidate.sessionId,
+            messageId: candidate.messageId,
+            humanText: candidate.humanText,
+            title: parsed.title || candidate.humanText,
+            confidence: parsed.confidence,
+            timestamp: candidate.timestamp,
+        },
+    };
+}
+//# sourceMappingURL=confirm-freetext.js.map

package/dist/lib/sessions/confirm-freetext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirm-freetext.js","sourceRoot":"","sources":["../../../src/lib/sessions/confirm-freetext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,EAErB,oBAAoB,EACpB,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AA8BzB,MAAM,aAAa,GACjB,yFAAyF;IACzF,uFAAuF;IACvF,6FAA6F;IAC7F,6FAA6F;IAC7F,4CAA4C;IAC5C,oGAAoG;IACpG,8FAA8F;IAC9F,mDAAmD,CAAC;AAEtD,SAAS,eAAe,CAAC,SAA+B;IACtD,OAAO,eAAe,SAAS,CAAC,SAAS,qDAAqD,SAAS,CAAC,WAAW,IAAI,QAAQ,EAAE,CAAC;AACpI,CAAC;AAQD,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAoE,CAAC;QACpG,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACrD,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACvG,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA4B,EAAE,OAAoB;IACvF,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,YAAY;YACf,OAAO,oBAAoB,CAAC,wBAAwB,CAAC,CAAC;QACxD,KAAK,sBAAsB;YACzB,OAAO,2EAA2E,uBAAuB,iDAAiD,CAAC;QAC7J,KAAK,eAAe;YAClB,OAAO,OAAO,EAAE,IAAI,KAAK,kBAAkB;gBACzC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,QAAQ,oCAAoC,OAAO,CAAC,MAAM,gBAAgB;gBAC1G,CAAC,CAAC,6DAA6D,CAAC;QACpE,KAAK,qBAAqB;YACxB,OAAO,gFAAgF,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,SAA+B;IAC5E,MAAM,SAAS,GAAG,gBAAgB,CAAC,6BAA6B,EAAE,qBAAqB,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,aAAa,EAAE,eAAe,CAAC,SAAS,CAAC,EAAE;QAC/E,WAAW,EAAE,yBAAyB;QACtC,SAAS;KACV,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,MAAM,GACV,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,2BAA2B,CAAC,CAAC,CAAC,sBAAsB;YAC1E,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,eAAe;gBAC5D,CAAC,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY,CAAC;QACjE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACjE,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5D,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE;YACR,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC,SAAS;YAC1C,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS,EAAE,SAAS,CAAC,SAAS;SAC/B;KACF,CAAC;AACJ,CAAC"}

package/dist/lib/sessions/extract-freetext.d.ts

@@ -0,0 +1,26 @@
+import type { AgentName, CanonicalSession } from './types.js';
+/**
+ * ALI-809 Pass B, heuristic half: a HUMAN turn whose own words redirect or settle on an
+ * approach mid-session. Everything downstream (confirm-freetext.ts) treats this as a proposal
+ * only - "heuristic proposes, LLM adjudicates, only adjudicated results assert" is the same
+ * shape as decision_links' writer split (align decision ALI-409), applied here to candidates
+ * instead of edges.
+ */
+export interface RawFreeTextCandidate {
+    agent: AgentName;
+    sessionId: string;
+    /** `turn-<index>` into the parsed session's turns array - stable for one session file, and
+     *  used only as an object-reference-free identity in the source_url; nothing here needs it
+     *  to survive a re-parse of a DIFFERENT file. */
+    messageId: string;
+    /** The human's own words, verbatim - the only decider-authored content in this candidate. */
+    humanText: string;
+    /** The assistant turn immediately after, when there is one - CONTEXT for the LLM confirmation
+     *  pass to read, never itself scanned for the trigger phrase and never the source of the
+     *  claim (the same "don't let bot content pass as the human's own statement" principle as
+     *  align decision ALI-538, applied to a different pipeline). */
+    contextText: string | null;
+    timestamp: string | null;
+}
+export declare function findFreeTextCandidates(session: CanonicalSession): RawFreeTextCandidate[];
+//# sourceMappingURL=extract-freetext.d.ts.map

package/dist/lib/sessions/extract-freetext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract-freetext.d.ts","sourceRoot":"","sources":["../../../src/lib/sessions/extract-freetext.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9D;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,SAAS,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB;;qDAEiD;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,6FAA6F;IAC7F,SAAS,EAAE,MAAM,CAAC;IAClB;;;oEAGgE;IAChE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAsCD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,gBAAgB,GAAG,oBAAoB,EAAE,CAgBxF"}

package/dist/lib/sessions/extract-freetext.js

@@ -0,0 +1,53 @@
+/**
+ * Phrases a human types when redirecting or settling on an approach mid-session. Calibrated
+ * against four REAL captured sessions (fixtures/sessions/), not invented - see
+ * extract-freetext.test.ts's end-to-end block for which fixture drove which pattern. A miss
+ * here is a missed candidate, not a wrong one (the LLM pass only ever narrows further), so
+ * staying narrow and growing this as more real sessions are captured beats guessing at
+ * phrasings nobody has actually said.
+ */
+const DECISION_PHRASES = [
+    /\binstead of\b/i,
+    /\blet'?s (go with|use|do|switch to|just use|just go with)\b/i,
+    /\bdecid(e|ed|ing|ision)\b/i,
+    /\bgo with\b/i,
+    /\bswitch(ed|ing)? to\b/i,
+];
+function isDecisionShaped(text) {
+    return DECISION_PHRASES.some(p => p.test(text));
+}
+/**
+ * The assistant's reply to a human's redirect is rarely one turn: a commentary aside, a tool
+ * call, and the actual resolution routinely land as separate turns in the canonical shape
+ * (confirmed against the real codex and opencode fixtures - a tool-call turn carries text: ''
+ * and sits between the commentary and the resolution in both). Walks every CONSECUTIVE
+ * assistant turn starting at `from`, joining the non-empty ones, and stops at the next human
+ * turn or the end of the session - never crossing into a later human turn's own reply.
+ */
+function collectAssistantContext(turns, from) {
+    const parts = [];
+    for (let i = from; i < turns.length && turns[i].role === 'assistant'; i++) {
+        if (turns[i].text)
+            parts.push(turns[i].text);
+    }
+    return parts.length ? parts.join('\n') : null;
+}
+export function findFreeTextCandidates(session) {
+    const candidates = [];
+    session.turns.forEach((turn, i) => {
+        // toolCalls-only turns carry text: '' (types.ts), which no phrase can match - no special
+        // case needed beyond the phrase test itself.
+        if (turn.role !== 'user' || !isDecisionShaped(turn.text))
+            return;
+        candidates.push({
+            agent: session.agent,
+            sessionId: session.sessionId,
+            messageId: `turn-${i}`,
+            humanText: turn.text,
+            contextText: collectAssistantContext(session.turns, i + 1),
+            timestamp: turn.timestamp,
+        });
+    });
+    return candidates;
+}
+//# sourceMappingURL=extract-freetext.js.map

package/dist/lib/sessions/extract-freetext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract-freetext.js","sourceRoot":"","sources":["../../../src/lib/sessions/extract-freetext.ts"],"names":[],"mappings":"AA0BA;;;;;;;GAOG;AACH,MAAM,gBAAgB,GAAsB;IAC1C,iBAAiB;IACjB,8DAA8D;IAC9D,4BAA4B;IAC5B,cAAc;IACd,yBAAyB;CAC1B,CAAC;AAEF,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,uBAAuB,CAAC,KAAgC,EAAE,IAAY;IAC7E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1E,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAyB;IAC9D,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QAChC,yFAAyF;QACzF,6CAA6C;QAC7C,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO;QACjE,UAAU,CAAC,IAAI,CAAC;YACd,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,QAAQ,CAAC,EAAE;YACtB,SAAS,EAAE,IAAI,CAAC,IAAI;YACpB,WAAW,EAAE,uBAAuB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC;YAC1D,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/lib/token-estimate.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Chars per token, measured (2026-09-03 research doc) with Anthropic's count_tokens against a
+ * rendered decision corpus: 2.56 on 4.7+ models, 3.43 on older ones. The SMALLER ratio is the
+ * conservative one - it estimates MORE tokens per char - so Phase 0 uses it for every family.
+ * Never chars/4: that under-counts our corpus by ~36% and the under-count is silent.
+ * The per-family table is ALI-852.
+ */
+export declare const CHARS_PER_TOKEN = 2.56;
+export declare const ESTIMATE_MARGIN = 1.1;
+/** Conservative token estimate for a string: rounds UP, and adds a 10% margin on top. */
+export declare function estimateTokens(text: string): number;
+/**
+ * The char budget that fits `tokens`, inverse of estimateTokens. Rounds DOWN, so a caller
+ * that slices text to `charsForTokens(n)` characters never re-estimates above `n`.
+ */
+export declare function charsForTokens(tokens: number): number;
+//# sourceMappingURL=token-estimate.d.ts.map

package/dist/lib/token-estimate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-estimate.d.ts","sourceRoot":"","sources":["../../src/lib/token-estimate.ts"],"names":[],"mappings":"AAIA;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,OAAO,CAAC;AACpC,eAAO,MAAM,eAAe,MAAM,CAAC;AAEnC,yFAAyF;AACzF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAErD"}

package/dist/lib/token-estimate.js

@@ -0,0 +1,24 @@
+// ALI-845 Phase 0: no token-estimation helper existed anywhere in the CLI, so every
+// prompt was assembled by concatenating decision text with no cap. This is the
+// conservative estimator for that phase - a real per-family table is ALI-852's job.
+/**
+ * Chars per token, measured (2026-09-03 research doc) with Anthropic's count_tokens against a
+ * rendered decision corpus: 2.56 on 4.7+ models, 3.43 on older ones. The SMALLER ratio is the
+ * conservative one - it estimates MORE tokens per char - so Phase 0 uses it for every family.
+ * Never chars/4: that under-counts our corpus by ~36% and the under-count is silent.
+ * The per-family table is ALI-852.
+ */
+export const CHARS_PER_TOKEN = 2.56;
+export const ESTIMATE_MARGIN = 1.1;
+/** Conservative token estimate for a string: rounds UP, and adds a 10% margin on top. */
+export function estimateTokens(text) {
+    return Math.ceil((text.length / CHARS_PER_TOKEN) * ESTIMATE_MARGIN);
+}
+/**
+ * The char budget that fits `tokens`, inverse of estimateTokens. Rounds DOWN, so a caller
+ * that slices text to `charsForTokens(n)` characters never re-estimates above `n`.
+ */
+export function charsForTokens(tokens) {
+    return Math.floor((tokens * CHARS_PER_TOKEN) / ESTIMATE_MARGIN);
+}
+//# sourceMappingURL=token-estimate.js.map

package/dist/lib/token-estimate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-estimate.js","sourceRoot":"","sources":["../../src/lib/token-estimate.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,+EAA+E;AAC/E,oFAAoF;AAEpF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AACpC,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AAEnC,yFAAyF;AACzF,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC,GAAG,eAAe,CAAC,CAAC;AACtE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,eAAe,CAAC,GAAG,eAAe,CAAC,CAAC;AAClE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aligndottech/cli",
-  "version": "0.35.0",
+  "version": "0.36.0",
   "mcpName": "io.github.aligndottech/cli",
   "type": "module",
   "description": "Align CLI - capture decisions, check alignment, and manage connectors",
@@ -65,6 +65,15 @@
   "optionalDependencies": {
     "@huggingface/transformers": "^4.2.0"
   },
+  "overrides": {
+    "hono": "4.13.7",
+    "@hono/node-server": "1.19.17",
+    "undici": "6.28.1",
+    "fast-uri": "3.1.7",
+    "ip-address": "10.7.0",
+    "qs": "6.16.0",
+    "body-parser": "2.3.0"
+  },
   "engines": {
     "node": ">=22.16"
   },