@aligndottech/cli 0.47.1 → 0.48.0

package/dist/lib/launch/adapters/gemini-cli.d.ts

@@ -0,0 +1,25 @@
+import { type GeminiProjectState } from '../gemini-state.js';
+import type { LaunchContext, LaunchSpec } from './claude-code.js';
+export interface GeminiLaunchContext extends Pick<LaunchContext, 'passthrough' | 'cachePath'>, GeminiProjectState {
+    /** The environment the child will inherit: the user's own GEMINI_CLI_* are read from here. */
+    env: Record<string, string | undefined>;
+    platform: string;
+}
+export declare const GEMINI_TRUST_NOTE = "Gemini turns off MCP servers, Align's included, in folders you haven't trusted. Trust this folder in Gemini to use the graph here.";
+/**
+ * Gemini CLI, per session, nothing written to the user's own config (gemini 0.58.0):
+ * GEMINI_CLI_SYSTEM_SETTINGS_PATH names the system settings file, and Gemini MERGES its
+ * mcpServers with the user's (verified: `gemini mcp list` shows both). That variable REPLACES
+ * the system file Gemini would otherwise read (the user's own value, or the platform default an
+ * admin may have filled), so align points it at a COPY of that file with align-local added,
+ * never at a file of align's alone. Gemini also derives system-defaults.json from that file's
+ * directory, so the original location is pinned with GEMINI_CLI_SYSTEM_DEFAULTS_PATH unless the
+ * user set it. A system file align cannot read or parse is never replaced: no injection, and
+ * one line saying why (the same rule as OpenCode's OPENCODE_CONFIG_CONTENT).
+ *
+ * Trust: Gemini turns off every MCP server in a folder it does not trust. align says so in one
+ * line and never trusts a folder for the user (no --skip-trust, no GEMINI_CLI_TRUST_WORKSPACE).
+ * Instructions come from the managed GEMINI.md block. Pass-through args are the whole of the args.
+ */
+export declare function buildGeminiLaunch(c: GeminiLaunchContext): LaunchSpec;
+//# sourceMappingURL=gemini-cli.d.ts.map

package/dist/lib/launch/adapters/gemini-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-cli.d.ts","sourceRoot":"","sources":["../../../../src/lib/launch/adapters/gemini-cli.ts"],"names":[],"mappings":"AACA,OAAO,EAA+B,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAG1F,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAElE,MAAM,WAAW,mBAAoB,SAAQ,IAAI,CAAC,aAAa,EAAE,aAAa,GAAG,WAAW,CAAC,EAAE,kBAAkB;IAC/G,8FAA8F;IAC9F,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAKD,eAAO,MAAM,iBAAiB,uIAAuI,CAAC;AActK;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,mBAAmB,GAAG,UAAU,CAkCpE"}

package/dist/lib/launch/adapters/gemini-cli.js

@@ -0,0 +1,73 @@
+import { alignServerEntry } from '../../mcp-setup.js';
+import { COPY_PREFIX, geminiCopyName } from '../gemini-state.js';
+import { geminiSystemDefaultsPath } from '../gemini-trust.js';
+import { parseJsonc } from '../strict-entry.js';
+/** Same reason as the Claude adapter: never shadow a user's own `align` server. */
+const INJECTED_SERVER_NAME = 'align-local';
+export const GEMINI_TRUST_NOTE = "Gemini turns off MCP servers, Align's included, in folders you haven't trusted. Trust this folder in Gemini to use the graph here.";
+const isObject = (v) => typeof v === 'object' && v !== null && !Array.isArray(v);
+/** The system settings (JSONC, as Gemini reads them) as an object we can add to, or null when we must not touch them. */
+function parseTheirs(text) {
+    if (text === null)
+        return {};
+    const parsed = parseJsonc(text);
+    if (!parsed)
+        return null;
+    if (parsed['mcpServers'] !== undefined && !isObject(parsed['mcpServers']))
+        return null;
+    return parsed;
+}
+/**
+ * Gemini CLI, per session, nothing written to the user's own config (gemini 0.58.0):
+ * GEMINI_CLI_SYSTEM_SETTINGS_PATH names the system settings file, and Gemini MERGES its
+ * mcpServers with the user's (verified: `gemini mcp list` shows both). That variable REPLACES
+ * the system file Gemini would otherwise read (the user's own value, or the platform default an
+ * admin may have filled), so align points it at a COPY of that file with align-local added,
+ * never at a file of align's alone. Gemini also derives system-defaults.json from that file's
+ * directory, so the original location is pinned with GEMINI_CLI_SYSTEM_DEFAULTS_PATH unless the
+ * user set it. A system file align cannot read or parse is never replaced: no injection, and
+ * one line saying why (the same rule as OpenCode's OPENCODE_CONFIG_CONTENT).
+ *
+ * Trust: Gemini turns off every MCP server in a folder it does not trust. align says so in one
+ * line and never trusts a folder for the user (no --skip-trust, no GEMINI_CLI_TRUST_WORKSPACE).
+ * Instructions come from the managed GEMINI.md block. Pass-through args are the whole of the args.
+ */
+export function buildGeminiLaunch(c) {
+    const env = { ALIGN_WRAPPED: '1' };
+    const files = [];
+    const notes = [];
+    const copy = geminiCopyName(c.systemSettings.path);
+    let injected = false;
+    if (c.overridden.length > 0 || !c.present) {
+        const theirs = c.systemSettings.unreadable ? null : parseTheirs(c.systemSettings.text);
+        if (!theirs) {
+            notes.push(`Gemini's system settings file ${c.systemSettings.path} is not readable JSON with an object "mcpServers", so Align's graph tools were not added to this session. Fix the file, or point GEMINI_CLI_SYSTEM_SETTINGS_PATH at one that is.`);
+        }
+        else {
+            // Set unconditionally: a canonical align-local here would have made `present` true with
+            // nothing overridden, so whatever is under this name now is replaced by ours.
+            const merged = { ...theirs, mcpServers: { ...(theirs['mcpServers'] ?? {}), [INJECTED_SERVER_NAME]: alignServerEntry('mcpServers', 'local') } };
+            // 0600: the copy carries whatever the admin's system file holds.
+            files.push({ name: copy, content: `${JSON.stringify(merged, null, 2)}\n`, mode: 0o600 });
+            env['GEMINI_CLI_SYSTEM_SETTINGS_PATH'] = c.cachePath(copy);
+            if (!c.env['GEMINI_CLI_SYSTEM_DEFAULTS_PATH'])
+                env['GEMINI_CLI_SYSTEM_DEFAULTS_PATH'] = geminiSystemDefaultsPath(c.systemSettings.path, c.platform);
+            if (c.overridden.length > 0)
+                notes.push(`Gemini will use Align's own align-local MCP server this session, not the one in ${c.overridden.join(', ')}.`);
+            injected = true;
+        }
+    }
+    if (c.trust === 'untrusted' || c.trust === 'unknown')
+        notes.push(GEMINI_TRUST_NOTE);
+    return {
+        bin: 'gemini',
+        args: [...c.passthrough],
+        env,
+        files,
+        // This source's copy is refreshed when used and removed when not. Other sources' copies may
+        // belong to a concurrent session, so they only age out (pruneLaunchFiles).
+        prune: { prefix: COPY_PREFIX, ...(injected ? { keep: copy } : { remove: copy }) },
+        ...(notes.length > 0 ? { notes } : {}),
+    };
+}
+//# sourceMappingURL=gemini-cli.js.map

package/dist/lib/launch/adapters/gemini-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-cli.js","sourceRoot":"","sources":["../../../../src/lib/launch/adapters/gemini-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,cAAc,EAA2B,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAShD,mFAAmF;AACnF,MAAM,oBAAoB,GAAG,aAAa,CAAC;AAE3C,MAAM,CAAC,MAAM,iBAAiB,GAAG,oIAAoI,CAAC;AAGtK,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAa,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAErG,yHAAyH;AACzH,SAAS,WAAW,CAAC,IAAmB;IACtC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACvF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB,CAAC,CAAsB;IACtD,MAAM,GAAG,GAA2B,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;IAC3D,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACvF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,cAAc,CAAC,IAAI,kLAAkL,CAAC,CAAC;QACvP,CAAC;aAAM,CAAC;YACN,wFAAwF;YACxF,8EAA8E;YAC9E,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,EAAE,GAAG,CAAE,MAAM,CAAC,YAAY,CAAsB,IAAI,EAAE,CAAC,EAAE,CAAC,oBAAoB,CAAC,EAAE,gBAAgB,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;YACrK,iEAAiE;YACjE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzF,GAAG,CAAC,iCAAiC,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC3D,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,iCAAiC,CAAC;gBAAE,GAAG,CAAC,iCAAiC,CAAC,GAAG,wBAAwB,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;YACpJ,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvJ,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACpF,OAAO;QACL,GAAG,EAAE,QAAQ;QACb,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC;QACxB,GAAG;QACH,KAAK;QACL,4FAA4F;QAC5F,2EAA2E;QAC3E,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE;QACjF,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvC,CAAC;AACJ,CAAC"}

package/dist/lib/launch/agents.d.ts

@@ -1,17 +1,27 @@
-import type { AgentName } from '../sessions/types.js';
+import type { LaunchAgentId } from './registry/types.js';
 export interface LaunchAgent {
-    name: AgentName;
+    name: LaunchAgentId;
     label: string;
     bin: string;
     /** per-session: nothing written to the user's config. written-once: later phases. */
     injection: 'per-session' | 'written-once';
     /** A launch target today. Later phases flip more entries to true; nothing else changes. */
     supported: boolean;
+    /** The install command or URL, as text. The structured form is on the registry spec. */
     install: string;
 }
 export declare const LAUNCH_AGENTS: readonly LaunchAgent[];
 export declare function agentByName(name: string | undefined): LaunchAgent | undefined;
 export declare const supportedAgents: () => LaunchAgent[];
+/**
+ * Which agent to take when several are installed and nobody can be asked (no terminal, or
+ * --approve). The agents launchable before wave A keep their old order, Claude Code first, so a
+ * scripted first run picks what it picked before; the wave A agents come after them.
+ */
+export declare const PICK_PRIORITY: readonly LaunchAgentId[];
+/** The agents launchable before wave A. */
+export declare const PRE_WAVE_A: ReadonlySet<LaunchAgentId>;
+export declare function byPriority(agents: LaunchAgent[]): LaunchAgent[];
 /**
  * The agent's binary on PATH, and where. Only `bin` is accepted: for Cursor that is `cursor-agent`,
  * which its installer always creates. Cursor's docs also call the command `agent`, but that name

package/dist/lib/launch/agents.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../../src/lib/launch/agents.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAGtD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,qFAAqF;IACrF,SAAS,EAAE,aAAa,GAAG,cAAc,CAAC;IAC1C,2FAA2F;IAC3F,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,aAAa,EAAE,SAAS,WAAW,EAE/C,CAAC;AAEF,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAE7E;AAED,eAAO,MAAM,eAAe,QAAO,WAAW,EAA8C,CAAC;AAE7F;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,CAAC,EAAE,WAAW,EACd,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,EAC/F,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,QAAQ,EAAE,MAAM,GACf;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAGtC"}
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../../src/lib/launch/agents.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,qFAAqF;IACrF,SAAS,EAAE,aAAa,GAAG,cAAc,CAAC;IAC1C,2FAA2F;IAC3F,SAAS,EAAE,OAAO,CAAC;IACnB,wFAAwF;IACxF,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,aAAa,EAAE,SAAS,WAAW,EAE/C,CAAC;AAEF,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAE7E;AAED,eAAO,MAAM,eAAe,QAAO,WAAW,EAA8C,CAAC;AAE7F;;;;GAIG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,aAAa,EAAkF,CAAC;AACrI,2CAA2C;AAC3C,eAAO,MAAM,UAAU,EAAE,WAAW,CAAC,aAAa,CAAwD,CAAC;AAE3G,wBAAgB,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,CAM/D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,CAAC,EAAE,WAAW,EACd,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,EAC/F,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,QAAQ,EAAE,MAAM,GACf;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAGtC"}

package/dist/lib/launch/agents.js

@@ -1,9 +1,25 @@
+import { installText } from './install.js';
 import { AGENT_REGISTRY } from './registry/index.js';
-export const LAUNCH_AGENTS = AGENT_REGISTRY.map(({ name, label, bin, injection, supported, install }) => ({ name, label, bin, injection, supported, install }));
+export const LAUNCH_AGENTS = AGENT_REGISTRY.map(({ name, label, bin, injection, supported, install }) => ({ name, label, bin, injection, supported, install: installText(install) }));
 export function agentByName(name) {
     return LAUNCH_AGENTS.find((a) => a.name === name);
 }
 export const supportedAgents = () => LAUNCH_AGENTS.filter((a) => a.supported);
+/**
+ * Which agent to take when several are installed and nobody can be asked (no terminal, or
+ * --approve). The agents launchable before wave A keep their old order, Claude Code first, so a
+ * scripted first run picks what it picked before; the wave A agents come after them.
+ */
+export const PICK_PRIORITY = ['claude-code', 'cursor', 'opencode', 'pi', 'codex', 'copilot', 'gemini-cli'];
+/** The agents launchable before wave A. */
+export const PRE_WAVE_A = new Set(['claude-code', 'cursor', 'opencode', 'pi']);
+export function byPriority(agents) {
+    const rank = (a) => {
+        const i = PICK_PRIORITY.indexOf(a.name);
+        return i < 0 ? PICK_PRIORITY.length : i;
+    };
+    return [...agents].sort((a, b) => rank(a) - rank(b));
+}
 /**
  * The agent's binary on PATH, and where. Only `bin` is accepted: for Cursor that is `cursor-agent`,
  * which its installer always creates. Cursor's docs also call the command `agent`, but that name

package/dist/lib/launch/agents.js.map

@@ -1 +1 @@
-{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../../src/lib/launch/agents.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAarD,MAAM,CAAC,MAAM,aAAa,GAA2B,cAAc,CAAC,GAAG,CACrE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAC/G,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,IAAwB;IAClD,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,GAAkB,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAE7F;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,CAAc,EACd,IAA+F,EAC/F,GAAuC,EACvC,QAAgB;IAEhB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC"}
+{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../../src/lib/launch/agents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAerD,MAAM,CAAC,MAAM,aAAa,GAA2B,cAAc,CAAC,GAAG,CACrE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CACrI,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,IAAwB;IAClD,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,GAAkB,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAE7F;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAA6B,CAAC,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;AACrI,2CAA2C;AAC3C,MAAM,CAAC,MAAM,UAAU,GAA+B,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;AAE3G,MAAM,UAAU,UAAU,CAAC,MAAqB;IAC9C,MAAM,IAAI,GAAG,CAAC,CAAc,EAAU,EAAE;QACtC,MAAM,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC;IACF,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,CAAc,EACd,IAA+F,EAC/F,GAAuC,EACvC,QAAgB;IAEhB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC"}

package/dist/lib/launch/codex-state.d.ts

@@ -0,0 +1,31 @@
+import { type AlignLocalState } from './strict-entry.js';
+export type CodexProjectState = AlignLocalState;
+/**
+ * The profile a user's own args select (`-p name`, `--profile name`, `--profile=name`, before
+ * any `--`). Codex layers $CODEX_HOME/<name>.config.toml for it. A name that could leave that
+ * directory (a separator, `..`) is never made into a path: undefined.
+ */
+export declare function codexProfile(passthrough: string[]): string | undefined;
+/**
+ * What Codex would already load for align, read with a TOML parser (sub-tables, dotted keys and
+ * inline tables all land on the same object).
+ *
+ * The CONFLICT scan reads every layer Codex might load, whatever the trust state, and fails
+ * closed. align cannot reproduce Codex's project resolution: a worktree resolves to its main
+ * repo's trust, an untrusted repo becomes trusted with one Enter at Codex's prompt and reloads
+ * WITH our -c overrides, and `project_root_markers` can put the project root ABOVE the git
+ * root (all verified on 0.153.0). So: /etc/codex/config.toml and managed_config.toml (both
+ * named in the 0.153.0 binary), $CODEX_HOME (or ~/.codex)/config.toml, the profile file a
+ * `-p`/`--profile` in the user's args selects, and EVERY .codex/config.toml from cwd up to the
+ * filesystem root (a superset, so it can only over-refuse). The user config met again as an
+ * ancestor is read once, as the user layer.
+ *
+ * "Already present" counts only the user, profile and system layers. A project's canonical
+ * align-local is simply overwritten by our identical -c values; a project's canonical `align`
+ * at worst duplicates tools.
+ */
+export declare function readCodexState(cwd: string, home: string, opts: {
+    localIsDefault: boolean;
+    systemDir?: string;
+}, env: Record<string, string | undefined>, platform: string, passthrough?: string[]): CodexProjectState;
+//# sourceMappingURL=codex-state.d.ts.map

package/dist/lib/launch/codex-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-state.d.ts","sourceRoot":"","sources":["../../../src/lib/launch/codex-state.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,eAAe,EAA0B,MAAM,mBAAmB,CAAC;AAEjF,MAAM,MAAM,iBAAiB,GAAG,eAAe,CAAC;AA4BhD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAUtE;AAKD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;IAAE,cAAc,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,EACrD,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,QAAQ,EAAE,MAAM,EAChB,WAAW,GAAE,MAAM,EAAO,GACzB,iBAAiB,CA0BnB"}

package/dist/lib/launch/codex-state.js

@@ -0,0 +1,92 @@
+import { readFileSync } from 'node:fs';
+import path from 'node:path';
+import { parse } from 'smol-toml';
+import { foldLayers } from './strict-entry.js';
+const isObject = (v) => typeof v === 'object' && v !== null && !Array.isArray(v);
+/**
+ * A config.toml as an object. Missing or unparseable reads as empty: Codex itself refuses to
+ * start on a config.toml it cannot parse and names the error, so no entry in it can run
+ * either, and injecting as if it were absent changes nothing about what the user sees.
+ */
+function readToml(file) {
+    try {
+        const parsed = parse(readFileSync(file, 'utf8'));
+        return isObject(parsed) ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+}
+/** cwd and every directory above it, to the filesystem root. */
+function ancestors(cwd) {
+    const dirs = [];
+    for (let dir = path.resolve(cwd);; dir = path.dirname(dir)) {
+        dirs.push(dir);
+        if (path.dirname(dir) === dir)
+            return dirs;
+    }
+}
+/**
+ * The profile a user's own args select (`-p name`, `--profile name`, `--profile=name`, before
+ * any `--`). Codex layers $CODEX_HOME/<name>.config.toml for it. A name that could leave that
+ * directory (a separator, `..`) is never made into a path: undefined.
+ */
+export function codexProfile(passthrough) {
+    let name;
+    for (let i = 0; i < passthrough.length; i++) {
+        const a = passthrough[i];
+        if (a === '--')
+            break;
+        if (a === '-p' || a === '--profile')
+            name = passthrough[++i];
+        else if (a.startsWith('--profile='))
+            name = a.slice('--profile='.length);
+    }
+    if (!name || /[/\\]/.test(name) || name.includes('..'))
+        return undefined;
+    return name;
+}
+/** Every key -c overrides when it replaces align-local: command, args, and enabled=true. */
+const REPLACEABLE = new Set(['command', 'args', 'enabled']);
+/**
+ * What Codex would already load for align, read with a TOML parser (sub-tables, dotted keys and
+ * inline tables all land on the same object).
+ *
+ * The CONFLICT scan reads every layer Codex might load, whatever the trust state, and fails
+ * closed. align cannot reproduce Codex's project resolution: a worktree resolves to its main
+ * repo's trust, an untrusted repo becomes trusted with one Enter at Codex's prompt and reloads
+ * WITH our -c overrides, and `project_root_markers` can put the project root ABOVE the git
+ * root (all verified on 0.153.0). So: /etc/codex/config.toml and managed_config.toml (both
+ * named in the 0.153.0 binary), $CODEX_HOME (or ~/.codex)/config.toml, the profile file a
+ * `-p`/`--profile` in the user's args selects, and EVERY .codex/config.toml from cwd up to the
+ * filesystem root (a superset, so it can only over-refuse). The user config met again as an
+ * ancestor is read once, as the user layer.
+ *
+ * "Already present" counts only the user, profile and system layers. A project's canonical
+ * align-local is simply overwritten by our identical -c values; a project's canonical `align`
+ * at worst duplicates tools.
+ */
+export function readCodexState(cwd, home, opts, env, platform, passthrough = []) {
+    const o = { localIsDefault: opts.localIsDefault, platform, host: 'codex' };
+    const replaceable = (e) => isObject(e) && Object.keys(e).every((k) => REPLACEABLE.has(k));
+    const at = (file) => ({ file, servers: readToml(file)['mcp_servers'] });
+    const systemDir = opts.systemDir ?? '/etc/codex';
+    const codexHome = env['CODEX_HOME'] ? env['CODEX_HOME'] : path.join(home, '.codex');
+    const userFile = path.resolve(codexHome, 'config.toml');
+    const profile = codexProfile(passthrough);
+    const base = foldLayers([
+        at(path.join(systemDir, 'config.toml')),
+        at(userFile),
+        ...(profile ? [at(path.join(codexHome, `${profile}.config.toml`))] : []),
+        at(path.join(systemDir, 'managed_config.toml')),
+    ], o, replaceable);
+    const projectFiles = ancestors(cwd).map((d) => path.join(d, '.codex', 'config.toml')).filter((f) => f !== userFile);
+    const project = foldLayers(projectFiles.map(at), o, replaceable);
+    const conflict = base.conflict ?? project.conflict;
+    return {
+        present: base.present,
+        overridden: [...base.overridden, ...project.overridden],
+        ...(conflict ? { conflict } : {}),
+    };
+}
+//# sourceMappingURL=codex-state.js.map

package/dist/lib/launch/codex-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-state.js","sourceRoot":"","sources":["../../../src/lib/launch/codex-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAwB,UAAU,EAAc,MAAM,mBAAmB,CAAC;AAKjF,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAa,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAErG;;;;GAIG;AACH,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1D,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;IAC7C,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,WAAqB;IAChD,IAAI,IAAwB,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,IAAI;YAAE,MAAM;QACtB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,WAAW;YAAE,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;aACxD,IAAI,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACzE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4FAA4F;AAC5F,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAE5D;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAW,EACX,IAAY,EACZ,IAAqD,EACrD,GAAuC,EACvC,QAAgB,EAChB,cAAwB,EAAE;IAE1B,MAAM,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAgB,EAAE,CAAC;IACpF,MAAM,WAAW,GAAG,CAAC,CAAU,EAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5G,MAAM,EAAE,GAAG,CAAC,IAAY,EAAS,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IACvF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,YAAY,CAAC;IACjD,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,UAAU,CACrB;QACE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACvC,EAAE,CAAC,QAAQ,CAAC;QACZ,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;KAChD,EACD,CAAC,EACD,WAAW,CACZ,CAAC;IACF,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;IACpH,MAAM,OAAO,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACnD,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;QACvD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClC,CAAC;AACJ,CAAC"}

package/dist/lib/launch/copilot-state.d.ts

@@ -0,0 +1,19 @@
+import { type AlignLocalState } from './strict-entry.js';
+export type CopilotProjectState = AlignLocalState;
+/**
+ * What Copilot CLI (1.0.95) would already load for align. User: $COPILOT_HOME (or ~/.copilot)
+ * /mcp-config.json. Workspace: .mcp.json and .github/mcp.json from cwd up to the git root.
+ *
+ * Copilot loads the workspace files only in a trusted folder, but that verdict comes from its
+ * native runtime and several sources (its own store, IDE workspace folders, settings), none of
+ * which align can read reliably; only COPILOT_ALLOW_ALL=true is certain. And whether
+ * --additional-mcp-config replaces a same-named server whole is also native. So, both ways safe:
+ *  - a workspace entry counts as "already present" only under COPILOT_ALLOW_ALL=true
+ *    (otherwise inject: the worst case is a duplicate server, never a missing graph);
+ *  - a non-canonical align-local in ANY of these files is a conflict (no injection), because
+ *    a merged, repo-shaped align-local must never be launched.
+ */
+export declare function readCopilotState(cwd: string, home: string, opts: {
+    localIsDefault: boolean;
+}, env: Record<string, string | undefined>, platform: string): CopilotProjectState;
+//# sourceMappingURL=copilot-state.d.ts.map

package/dist/lib/launch/copilot-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"copilot-state.d.ts","sourceRoot":"","sources":["../../../src/lib/launch/copilot-state.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,eAAe,EAAsC,MAAM,mBAAmB,CAAC;AAE7F,MAAM,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAsBlD;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;IAAE,cAAc,EAAE,OAAO,CAAA;CAAE,EACjC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,QAAQ,EAAE,MAAM,GACf,mBAAmB,CAgBrB"}

package/dist/lib/launch/copilot-state.js

@@ -0,0 +1,51 @@
+import { existsSync, readFileSync } from 'node:fs';
+import path from 'node:path';
+import { foldLayers, parseJsonc } from './strict-entry.js';
+function layer(file) {
+    let text = null;
+    try {
+        text = readFileSync(file, 'utf8');
+    }
+    catch {
+        // missing or unreadable: no servers
+    }
+    return { file, servers: parseJsonc(text)?.['mcpServers'] };
+}
+/** cwd up to and including the git root; with no .git anywhere above, cwd alone. Never past the root. */
+function workspaceDirs(cwd) {
+    const dirs = [];
+    for (let dir = cwd;; dir = path.dirname(dir)) {
+        dirs.push(dir);
+        if (existsSync(path.join(dir, '.git')))
+            return dirs;
+        if (path.dirname(dir) === dir)
+            return [cwd];
+    }
+}
+/**
+ * What Copilot CLI (1.0.95) would already load for align. User: $COPILOT_HOME (or ~/.copilot)
+ * /mcp-config.json. Workspace: .mcp.json and .github/mcp.json from cwd up to the git root.
+ *
+ * Copilot loads the workspace files only in a trusted folder, but that verdict comes from its
+ * native runtime and several sources (its own store, IDE workspace folders, settings), none of
+ * which align can read reliably; only COPILOT_ALLOW_ALL=true is certain. And whether
+ * --additional-mcp-config replaces a same-named server whole is also native. So, both ways safe:
+ *  - a workspace entry counts as "already present" only under COPILOT_ALLOW_ALL=true
+ *    (otherwise inject: the worst case is a duplicate server, never a missing graph);
+ *  - a non-canonical align-local in ANY of these files is a conflict (no injection), because
+ *    a merged, repo-shaped align-local must never be launched.
+ */
+export function readCopilotState(cwd, home, opts, env, platform) {
+    const o = { ...opts, platform, host: 'copilot' };
+    const userFile = path.join(env['COPILOT_HOME'] ? env['COPILOT_HOME'] : path.join(home, '.copilot'), 'mcp-config.json');
+    const never = () => false;
+    const user = foldLayers([layer(userFile)], o, never);
+    const workspace = foldLayers(workspaceDirs(cwd).reverse().flatMap((d) => [layer(path.join(d, '.mcp.json')), layer(path.join(d, '.github', 'mcp.json'))]), o, never);
+    const conflict = user.conflict ?? workspace.conflict;
+    return {
+        present: user.present || (env['COPILOT_ALLOW_ALL'] === 'true' && workspace.present),
+        overridden: [],
+        ...(conflict ? { conflict } : {}),
+    };
+}
+//# sourceMappingURL=copilot-state.js.map

package/dist/lib/launch/copilot-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"copilot-state.js","sourceRoot":"","sources":["../../../src/lib/launch/copilot-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAwB,UAAU,EAAc,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAI7F,SAAS,KAAK,CAAC,IAAY;IACzB,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,yGAAyG;AACzG,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,IAAI,GAAG,GAAG,GAAG,GAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpD,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAW,EACX,IAAY,EACZ,IAAiC,EACjC,GAAuC,EACvC,QAAgB;IAEhB,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAkB,EAAE,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACvH,MAAM,KAAK,GAAG,GAAY,EAAE,CAAC,KAAK,CAAC;IACnC,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,UAAU,CAC1B,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,EAC3H,CAAC,EACD,KAAK,CACN,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,QAAQ,CAAC;IACrD,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,MAAM,IAAI,SAAS,CAAC,OAAO,CAAC;QACnF,UAAU,EAAE,EAAE;QACd,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClC,CAAC;AACJ,CAAC"}

package/dist/lib/launch/gemini-state.d.ts

@@ -0,0 +1,32 @@
+import { type GeminiTrust } from './gemini-trust.js';
+import { type AlignLocalState } from './strict-entry.js';
+/** The system settings file Gemini would read with no help from align, and what it holds. */
+export interface GeminiSystemSettings {
+    path: string;
+    /** Its text; null when it does not exist (or is unreadable). */
+    text: string | null;
+    /** It exists but could not be read (a directory, no permission). */
+    unreadable: boolean;
+}
+export interface GeminiProjectState extends AlignLocalState {
+    systemSettings: GeminiSystemSettings;
+    trust: GeminiTrust;
+}
+/**
+ * The launch-cache name of the merged copy of one system settings file. One name per SOURCE,
+ * so two concurrent launches that read different system files never write the same copy.
+ */
+export declare const COPY_PREFIX = "gemini-system-settings-";
+export declare function geminiCopyName(source: string): string;
+/**
+ * What Gemini CLI would already load here, in its merge order (gemini 0.58.0 mergeSettings:
+ * system-defaults, user, workspace, system): system-defaults, ~/.gemini (or $GEMINI_CLI_HOME)
+ * settings, the project's .gemini/settings.json ONLY when the folder is trusted (Gemini drops
+ * the workspace layer otherwise), and the system file. Files are JSONC, as Gemini reads them.
+ * mcpServers merges shallowly with the system tier last, so the injected system copy replaces
+ * any align-local whole: a non-canonical one is overridden, never a conflict.
+ */
+export declare function readGeminiState(cwd: string, home: string, opts: {
+    localIsDefault: boolean;
+}, env: Record<string, string | undefined>, platform: string): GeminiProjectState;
+//# sourceMappingURL=gemini-state.d.ts.map

package/dist/lib/launch/gemini-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-state.d.ts","sourceRoot":"","sources":["../../../src/lib/launch/gemini-state.ts"],"names":[],"mappings":"AAGA,OAAO,EAAoF,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACvI,OAAO,EAAE,KAAK,eAAe,EAA6D,MAAM,mBAAmB,CAAC;AAEpH,6FAA6F;AAC7F,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,oEAAoE;IACpE,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,kBAAmB,SAAQ,eAAe;IACzD,cAAc,EAAE,oBAAoB,CAAC;IACrC,KAAK,EAAE,WAAW,CAAC;CACpB;AAED;;;GAGG;AACH,eAAO,MAAM,WAAW,4BAA4B,CAAC;AAErD,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAErD;AAoBD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;IAAE,cAAc,EAAE,OAAO,CAAA;CAAE,EACjC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,QAAQ,EAAE,MAAM,GACf,kBAAkB,CAmBpB"}

package/dist/lib/launch/gemini-state.js

@@ -0,0 +1,59 @@
+import { createHash } from 'node:crypto';
+import { readFileSync } from 'node:fs';
+import path from 'node:path';
+import { geminiDir, geminiFolderTrust, geminiSystemDefaultsPath, geminiSystemSettingsPath } from './gemini-trust.js';
+import { foldLayers, isCanonicalLocalEntry, parseJsonc } from './strict-entry.js';
+/**
+ * The launch-cache name of the merged copy of one system settings file. One name per SOURCE,
+ * so two concurrent launches that read different system files never write the same copy.
+ */
+export const COPY_PREFIX = 'gemini-system-settings-';
+export function geminiCopyName(source) {
+    return `${COPY_PREFIX}${createHash('sha256').update(path.resolve(source)).digest('hex').slice(0, 12)}.json`;
+}
+function readSystem(file) {
+    try {
+        return { path: file, text: readFileSync(file, 'utf8'), unreadable: false };
+    }
+    catch (e) {
+        return { path: file, text: null, unreadable: e.code !== 'ENOENT' };
+    }
+}
+function readText(file) {
+    try {
+        return readFileSync(file, 'utf8');
+    }
+    catch {
+        return null;
+    }
+}
+const layer = (file, text) => ({ file, servers: parseJsonc(text)?.['mcpServers'] });
+/**
+ * What Gemini CLI would already load here, in its merge order (gemini 0.58.0 mergeSettings:
+ * system-defaults, user, workspace, system): system-defaults, ~/.gemini (or $GEMINI_CLI_HOME)
+ * settings, the project's .gemini/settings.json ONLY when the folder is trusted (Gemini drops
+ * the workspace layer otherwise), and the system file. Files are JSONC, as Gemini reads them.
+ * mcpServers merges shallowly with the system tier last, so the injected system copy replaces
+ * any align-local whole: a non-canonical one is overridden, never a conflict.
+ */
+export function readGeminiState(cwd, home, opts, env, platform) {
+    const system = readSystem(geminiSystemSettingsPath(env, platform));
+    const trust = geminiFolderTrust(cwd, home, env, platform);
+    const defaultsPath = env['GEMINI_CLI_SYSTEM_DEFAULTS_PATH'] ? env['GEMINI_CLI_SYSTEM_DEFAULTS_PATH'] : geminiSystemDefaultsPath(system.path, platform);
+    const userPath = path.join(geminiDir(home, env), 'settings.json');
+    const workspacePath = path.join(cwd, '.gemini', 'settings.json');
+    const layers = [
+        layer(defaultsPath, readText(defaultsPath)),
+        layer(userPath, readText(userPath)),
+        ...(trust === 'trusted' || trust === 'off' ? [layer(workspacePath, readText(workspacePath))] : []),
+        layer(system.path, system.text),
+    ];
+    const o = { ...opts, platform, host: 'mcpServers' };
+    const { overridden } = foldLayers(layers, o, () => true);
+    // Only the user's own `align` stands in for us. A canonical align-local does not: the system
+    // copy replaces it whole anyway, and skipping would let a workspace align-local trusted later
+    // take its place.
+    const present = layers.some((l) => isCanonicalLocalEntry(l.servers?.['align'], o));
+    return { present, overridden, systemSettings: system, trust };
+}
+//# sourceMappingURL=gemini-state.js.map

package/dist/lib/launch/gemini-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-state.js","sourceRoot":"","sources":["../../../src/lib/launch/gemini-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,wBAAwB,EAAoB,MAAM,mBAAmB,CAAC;AACvI,OAAO,EAAwB,UAAU,EAAE,qBAAqB,EAAc,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAgBpH;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAErD,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,OAAO,GAAG,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC;AAC9G,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC7E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAG,CAAuB,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,IAAmB,EAAS,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAElH;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAW,EACX,IAAY,EACZ,IAAiC,EACjC,GAAuC,EACvC,QAAgB;IAEhB,MAAM,MAAM,GAAG,UAAU,CAAC,wBAAwB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACvJ,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,eAAe,CAAC,CAAC;IAClE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IACjE,MAAM,MAAM,GAAY;QACtB,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC3C,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnC,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;KAChC,CAAC;IACF,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAqB,EAAE,CAAC;IAC7D,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACzD,6FAA6F;IAC7F,8FAA8F;IAC9F,kBAAkB;IAClB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAE,CAAC,CAAC,OAA+C,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5H,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAChE,CAAC"}

package/dist/lib/launch/gemini-trust.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Whether Gemini CLI will run MCP servers in this folder. Gemini turns off EVERY MCP server,
+ * the injected align-local included, in a folder it does not trust.
+ *  - trusted / untrusted: what Gemini will decide.
+ *  - off: folder trust is turned off in the user's settings, so nothing is disabled.
+ *  - unknown: trustedFolders.json is unreadable or invalid (Gemini itself refuses to start then).
+ */
+export type GeminiTrust = 'trusted' | 'untrusted' | 'off' | 'unknown';
+/** Gemini's own default system settings file, used when GEMINI_CLI_SYSTEM_SETTINGS_PATH is unset. */
+export declare function geminiSystemSettingsPath(env: Record<string, string | undefined>, platform: string): string;
+/** GEMINI_CLI_SYSTEM_DEFAULTS_PATH, else `system-defaults.json` beside the system settings file. */
+export declare function geminiSystemDefaultsPath(systemSettingsPath: string, platform: string): string;
+/** ~/.gemini, or $GEMINI_CLI_HOME/.gemini when set. */
+export declare function geminiDir(home: string, env: Record<string, string | undefined>): string;
+/**
+ * Gemini CLI 0.58.0's folder-trust verdict for `cwd`, read from its own files and never written
+ * (packages/core/src/utils/trust.ts, cli/src/config/trustedFolders.ts):
+ *  - GEMINI_CLI_TRUST_WORKSPACE=true|false decides outright;
+ *  - folder trust turned off in settings means nothing is disabled;
+ *  - else the LONGEST matching rule in trustedFolders.json decides, where TRUST_PARENT matches
+ *    the rule's parent directory, and no matching rule is untrusted.
+ * Gemini also accepts a trust decision from a connected IDE; align cannot see that, so in an IDE
+ * terminal this can say untrusted for a folder Gemini will treat as trusted (one extra line).
+ */
+export declare function geminiFolderTrust(cwd: string, home: string, env: Record<string, string | undefined>, platform: string): GeminiTrust;
+//# sourceMappingURL=gemini-trust.d.ts.map

package/dist/lib/launch/gemini-trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-trust.d.ts","sourceRoot":"","sources":["../../../src/lib/launch/gemini-trust.ts"],"names":[],"mappings":"AAIA;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,WAAW,GAAG,KAAK,GAAG,SAAS,CAAC;AAgBtE,qGAAqG;AACrG,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAK1G;AAED,oGAAoG;AACpG,wBAAgB,wBAAwB,CAAC,kBAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAG7F;AAED,uDAAuD;AACvD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,CAEvF;AAqCD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,WAAW,CAuBnI"}