@aligndottech/cli 0.48.0 → 0.50.0

package/dist/lib/launch/gemini-state.js

@@ -1,24 +1,14 @@
-import { createHash } from 'node:crypto';
 import { readFileSync } from 'node:fs';
 import path from 'node:path';
+import { geminiSystemFileRejection } from './gemini-system-file.js';
 import { geminiDir, geminiFolderTrust, geminiSystemDefaultsPath, geminiSystemSettingsPath } from './gemini-trust.js';
 import { foldLayers, isCanonicalLocalEntry, parseJsonc } from './strict-entry.js';
 /**
- * The launch-cache name of the merged copy of one system settings file. One name per SOURCE,
- * so two concurrent launches that read different system files never write the same copy.
+ * The launch-cache prefix of the merged system-settings copies align 0.49 to 0.51 wrote. Gemini
+ * skips such a copy (see gemini-system-file.ts), so nothing writes one now; the prefix is kept so
+ * the old ones, which hold the admin's settings, are aged out of the cache.
  */
 export const COPY_PREFIX = 'gemini-system-settings-';
-export function geminiCopyName(source) {
-    return `${COPY_PREFIX}${createHash('sha256').update(path.resolve(source)).digest('hex').slice(0, 12)}.json`;
-}
-function readSystem(file) {
-    try {
-        return { path: file, text: readFileSync(file, 'utf8'), unreadable: false };
-    }
-    catch (e) {
-        return { path: file, text: null, unreadable: e.code !== 'ENOENT' };
-    }
-}
 function readText(file) {
     try {
         return readFileSync(file, 'utf8');
@@ -27,33 +17,101 @@ function readText(file) {
         return null;
     }
 }
-const layer = (file, text) => ({ file, servers: parseJsonc(text)?.['mcpServers'] });
+const isObject = (v) => typeof v === 'object' && v !== null && !Array.isArray(v);
+const NAME = 'align-local';
+const names = (v) => (Array.isArray(v) ? v.filter((x) => typeof x === 'string') : null);
+const FLAGS = ['--allowed-mcp-server-names', '--allowedMcpServerNames'];
+/**
+ * The user's own --allowed-mcp-server-names. It REPLACES every settings allowlist and DROPS
+ * excluded (measured, 0.63.0). `--flag=a,b` gives both names; the space form gives only the FIRST
+ * value (`--flag other align-local` blocked align-local). null when the flag is absent.
+ */
+function flagList(passthrough) {
+    const end = passthrough.indexOf('--');
+    const args = end < 0 ? passthrough : passthrough.slice(0, end);
+    let found = null;
+    args.forEach((a, i) => {
+        const hit = FLAGS.find((f) => a === f || a.startsWith(`${f}=`));
+        if (!hit)
+            return;
+        const raw = a === hit ? args[i + 1] : a.slice(hit.length + 1);
+        found = { flag: hit, list: raw === undefined || (a === hit && raw.startsWith('-')) ? [] : raw.split(',') };
+    });
+    return found;
+}
+/**
+ * Settings that make a live Gemini session drop align-local although the entry is there, copied
+ * from McpClientManager.isBlockedBySettings (0.63.0, NOT `gemini mcp list`, which disagrees):
+ * EXACT-case matching, no trimming; excluded is a union over the loaded layers; allowed is an
+ * intersection across layers and an EMPTY result allows all. Not a blocker for a live session
+ * (measured): admin.mcp.enabled in user or workspace settings. NOT read: the system tier's
+ * admin.mcp.enabled and ~/.gemini/mcp-server-enablement.json - UNVERIFIED.
+ */
+function blockedBy(files, passthrough) {
+    const flag = flagList(passthrough);
+    if (flag) {
+        return flag.list.length === 0 || flag.list.includes(NAME) ? undefined : { file: flag.flag, why: 'it does not list align-local' };
+    }
+    for (const { file, settings } of files) {
+        const mcp = settings?.['mcp'];
+        if (isObject(mcp) && names(mcp['excluded'])?.includes(NAME))
+            return { file, why: 'mcp.excluded lists align-local' };
+    }
+    let allowed = null;
+    let from = '';
+    for (const { file, settings } of files) {
+        const mcp = settings?.['mcp'];
+        const list = isObject(mcp) ? names(mcp['allowed']) : null;
+        if (!list)
+            continue;
+        allowed = allowed === null ? list : allowed.filter((x) => list.includes(x));
+        from = file;
+    }
+    if (allowed !== null && allowed.length > 0 && !allowed.includes(NAME)) {
+        // Name the layer that narrowed it last; with one layer that is the only one.
+        return { file: from, why: 'mcp.allowed does not list align-local' };
+    }
+    return undefined;
+}
 /**
- * What Gemini CLI would already load here, in its merge order (gemini 0.58.0 mergeSettings:
- * system-defaults, user, workspace, system): system-defaults, ~/.gemini (or $GEMINI_CLI_HOME)
- * settings, the project's .gemini/settings.json ONLY when the folder is trusted (Gemini drops
- * the workspace layer otherwise), and the system file. Files are JSONC, as Gemini reads them.
- * mcpServers merges shallowly with the system tier last, so the injected system copy replaces
- * any align-local whole: a non-canonical one is overridden, never a conflict.
+ * What Gemini CLI would already load here, in its merge order (gemini 0.63.0 mergeSettings:
+ * system-defaults, user, workspace, system; mcpServers merges shallowly, LAST layer wins per name):
+ *  - system-defaults and system files, ONLY when Gemini will read them (root-owned tree, see
+ *    gemini-system-file.ts; `rejects` is a parameter so a test can name the answer);
+ *  - the user settings file;
+ *  - the project's .gemini/settings.json. It is ALWAYS folded for the conflict check, because
+ *    Gemini also trusts a folder through a connected IDE, which align cannot see; a false
+ *    conflict in a folder that really is untrusted is harmless. It counts as "present" only when
+ *    align's own verdict is trusted/off, and its mcp.allowed/excluded only then too.
+ * Repo config is untrusted input: per name only the effective (last) entry counts, so a repo
+ * `align` that replaces the user's canonical one is a conflict naming the repo file.
+ * Files are JSONC, as Gemini reads them. Align adds an entry; it never edits one that is there.
  */
-export function readGeminiState(cwd, home, opts, env, platform) {
-    const system = readSystem(geminiSystemSettingsPath(env, platform));
-    const trust = geminiFolderTrust(cwd, home, env, platform);
-    const defaultsPath = env['GEMINI_CLI_SYSTEM_DEFAULTS_PATH'] ? env['GEMINI_CLI_SYSTEM_DEFAULTS_PATH'] : geminiSystemDefaultsPath(system.path, platform);
-    const userPath = path.join(geminiDir(home, env), 'settings.json');
+export function readGeminiState(cwd, home, opts, env, platform, rejects = geminiSystemFileRejection, passthrough = []) {
+    const systemPath = geminiSystemSettingsPath(env, platform);
+    const defaultsPath = env['GEMINI_CLI_SYSTEM_DEFAULTS_PATH'] ? env['GEMINI_CLI_SYSTEM_DEFAULTS_PATH'] : geminiSystemDefaultsPath(systemPath, platform);
+    const settingsFile = path.join(geminiDir(home, env), 'settings.json');
     const workspacePath = path.join(cwd, '.gemini', 'settings.json');
-    const layers = [
-        layer(defaultsPath, readText(defaultsPath)),
-        layer(userPath, readText(userPath)),
-        ...(trust === 'trusted' || trust === 'off' ? [layer(workspacePath, readText(workspacePath))] : []),
-        layer(system.path, system.text),
+    const trust = geminiFolderTrust(cwd, home, env, platform, rejects);
+    const workspaceLoads = trust === 'trusted' || trust === 'off';
+    const text = (file, isSystem) => (isSystem && rejects(file, platform) !== null ? null : readText(file));
+    const sources = [
+        { file: defaultsPath, text: text(defaultsPath, true), live: true },
+        { file: settingsFile, text: text(settingsFile, false), live: true },
+        { file: workspacePath, text: readText(workspacePath), live: workspaceLoads },
+        { file: systemPath, text: text(systemPath, true), live: true },
     ];
+    const parsed = sources.map((s) => ({ ...s, json: parseJsonc(s.text) }));
+    const layers = parsed.map((s) => ({ file: s.file, servers: s.json?.['mcpServers'] }));
     const o = { ...opts, platform, host: 'mcpServers' };
-    const { overridden } = foldLayers(layers, o, () => true);
-    // Only the user's own `align` stands in for us. A canonical align-local does not: the system
-    // copy replaces it whole anyway, and skipping would let a workspace align-local trusted later
-    // take its place.
-    const present = layers.some((l) => isCanonicalLocalEntry(l.servers?.['align'], o));
-    return { present, overridden, systemSettings: system, trust };
+    const { present, conflict } = foldLayers(layers, o, () => false, { lastWins: true, countsAsPresent: (f) => f !== workspacePath || workspaceLoads });
+    // The effective `align` is the last layer that names it. From a LOADED workspace, and not
+    // already the conflict, it is something the repo chose and the user did not.
+    const aligns = layers.filter((l) => isObject(l.servers) && 'align' in l.servers);
+    const effective = aligns[aligns.length - 1];
+    const repoAlign = workspaceLoads && effective?.file === workspacePath && conflict !== workspacePath
+        && !isCanonicalLocalEntry(effective.servers['align'], o) ? workspacePath : undefined;
+    const blocked = blockedBy(parsed.filter((s) => s.live).map((s) => ({ file: s.file, settings: s.json })), passthrough);
+    return { present, ...(conflict !== undefined ? { conflict } : {}), settingsFile, trust, ...(blocked ? { blocked } : {}), ...(repoAlign ? { repoAlign } : {}) };
 }
 //# sourceMappingURL=gemini-state.js.map

package/dist/lib/launch/gemini-state.js.map

@@ -1 +1 @@
-{"version":3,"file":"gemini-state.js","sourceRoot":"","sources":["../../../src/lib/launch/gemini-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,wBAAwB,EAAoB,MAAM,mBAAmB,CAAC;AACvI,OAAO,EAAwB,UAAU,EAAE,qBAAqB,EAAc,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAgBpH;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAErD,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,OAAO,GAAG,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC;AAC9G,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC7E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAG,CAAuB,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,IAAmB,EAAS,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAElH;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAW,EACX,IAAY,EACZ,IAAiC,EACjC,GAAuC,EACvC,QAAgB;IAEhB,MAAM,MAAM,GAAG,UAAU,CAAC,wBAAwB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACvJ,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,eAAe,CAAC,CAAC;IAClE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IACjE,MAAM,MAAM,GAAY;QACtB,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC3C,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnC,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;KAChC,CAAC;IACF,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAqB,EAAE,CAAC;IAC7D,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACzD,6FAA6F;IAC7F,8FAA8F;IAC9F,kBAAkB;IAClB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAE,CAAC,CAAC,OAA+C,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5H,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAChE,CAAC"}
+{"version":3,"file":"gemini-state.js","sourceRoot":"","sources":["../../../src/lib/launch/gemini-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,wBAAwB,EAAoB,MAAM,mBAAmB,CAAC;AACvI,OAAO,EAAwB,UAAU,EAAE,qBAAqB,EAAc,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAYpH;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAErD,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAID,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAa,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACrG,MAAM,IAAI,GAAG,aAAa,CAAC;AAC3B,MAAM,KAAK,GAAG,CAAC,CAAU,EAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC/H,MAAM,KAAK,GAAG,CAAC,4BAA4B,EAAE,yBAAyB,CAAC,CAAC;AAExE;;;;GAIG;AACH,SAAS,QAAQ,CAAC,WAAqB;IACrC,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/D,IAAI,KAAK,GAA4C,IAAI,CAAC;IAC1D,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,MAAM,GAAG,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC9D,KAAK,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;IAC7G,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,KAAqD,EAAE,WAAqB;IAC7F,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACnC,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,8BAA8B,EAAE,CAAC;IACnI,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,KAAK,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,gCAAgC,EAAE,CAAC;IACtH,CAAC;IACD,IAAI,OAAO,GAAoB,IAAI,CAAC;IACpC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,KAAK,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,OAAO,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,6EAA6E;QAC7E,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,uCAAuC,EAAE,CAAC;IACtE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAW,EACX,IAAY,EACZ,IAAiC,EACjC,GAAuC,EACvC,QAAgB,EAChB,UAA6D,yBAAyB,EACtF,cAAwB,EAAE;IAE1B,MAAM,UAAU,GAAG,wBAAwB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACtJ,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,eAAe,CAAC,CAAC;IACtE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnE,MAAM,cAAc,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK,CAAC;IAC9D,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,QAAiB,EAAiB,EAAE,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACxI,MAAM,OAAO,GAAG;QACd,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;QAClE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;QACnE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE;QAC5E,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;KAC/D,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACxE,MAAM,MAAM,GAAY,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/F,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAqB,EAAE,CAAC;IAC7D,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,aAAa,IAAI,cAAc,EAAE,CAAC,CAAC;IACpJ,0FAA0F;IAC1F,6EAA6E;IAC7E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,cAAc,IAAI,SAAS,EAAE,IAAI,KAAK,aAAa,IAAI,QAAQ,KAAK,aAAa;WAC9F,CAAC,qBAAqB,CAAE,SAAS,CAAC,OAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;IACjG,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IACtH,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACjK,CAAC"}

package/dist/lib/launch/gemini-system-file.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Gemini CLI's rule for a SYSTEM settings or system-defaults file (0.63.0,
+ * isFileAndDirectorySecureSync in its bundle): the file is read only when the file AND every
+ * directory above it is owned by root (uid 0) and not writable by group or others, and no
+ * symlink on the way is owned by anyone else. Otherwise Gemini skips it with
+ * "Security Warning: Skipping system settings file ... not owned by root".
+ *
+ * Nothing under a user's home or cache dir can pass, so align can never hand Gemini a system
+ * tier file of its own. align reads the same rule only to know which of the machine's real
+ * system files Gemini will load, so a rejected one is not mistaken for config that applies.
+ *
+ * Returns why Gemini rejects the file, or null when it will read it (or the file does not
+ * exist, which Gemini does not check). Not judged on win32: Gemini checks ACLs through
+ * PowerShell there, and a wrong "rejected" would hide a file that is loaded.
+ */
+export declare function geminiSystemFileRejection(file: string, platform: string): string | null;
+//# sourceMappingURL=gemini-system-file.d.ts.map

package/dist/lib/launch/gemini-system-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-system-file.d.ts","sourceRoot":"","sources":["../../../src/lib/launch/gemini-system-file.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA6BvF"}

package/dist/lib/launch/gemini-system-file.js

@@ -0,0 +1,55 @@
+import { existsSync, lstatSync, realpathSync, statSync } from 'node:fs';
+import path from 'node:path';
+/**
+ * Gemini CLI's rule for a SYSTEM settings or system-defaults file (0.63.0,
+ * isFileAndDirectorySecureSync in its bundle): the file is read only when the file AND every
+ * directory above it is owned by root (uid 0) and not writable by group or others, and no
+ * symlink on the way is owned by anyone else. Otherwise Gemini skips it with
+ * "Security Warning: Skipping system settings file ... not owned by root".
+ *
+ * Nothing under a user's home or cache dir can pass, so align can never hand Gemini a system
+ * tier file of its own. align reads the same rule only to know which of the machine's real
+ * system files Gemini will load, so a rejected one is not mistaken for config that applies.
+ *
+ * Returns why Gemini rejects the file, or null when it will read it (or the file does not
+ * exist, which Gemini does not check). Not judged on win32: Gemini checks ACLs through
+ * PowerShell there, and a wrong "rejected" would hide a file that is loaded.
+ */
+export function geminiSystemFileRejection(file, platform) {
+    if (platform === 'win32' || !existsSync(file))
+        return null;
+    const abs = path.resolve(file);
+    let canonical = abs;
+    try {
+        canonical = realpathSync(abs);
+    }
+    catch {
+        // keep the lexical path
+    }
+    const paths = new Set();
+    for (const p of [abs, canonical]) {
+        paths.add(p);
+        for (let dir = path.dirname(p);; dir = path.dirname(dir)) {
+            paths.add(dir);
+            if (path.dirname(dir) === dir)
+                break;
+        }
+    }
+    for (const p of paths) {
+        try {
+            const link = lstatSync(p);
+            if (link.isSymbolicLink() && link.uid !== 0)
+                return `symlink ${p} is not owned by root`;
+            const st = statSync(p);
+            if (st.uid !== 0)
+                return `${p} is not owned by root`;
+            if ((st.mode & 0o022) !== 0)
+                return `${p} is writable by group or others`;
+        }
+        catch {
+            return `${p} could not be checked`;
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=gemini-system-file.js.map

package/dist/lib/launch/gemini-system-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-system-file.js","sourceRoot":"","sources":["../../../src/lib/launch/gemini-system-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY,EAAE,QAAgB;IACtE,IAAI,QAAQ,KAAK,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,SAAS,GAAG,GAAG,CAAC;IACpB,IAAI,CAAC;QACH,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACb,KAAK,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1D,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACf,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG;gBAAE,MAAM;QACvC,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC;gBAAE,OAAO,WAAW,CAAC,uBAAuB,CAAC;YACxF,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC;gBAAE,OAAO,GAAG,CAAC,uBAAuB,CAAC;YACrD,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;gBAAE,OAAO,GAAG,CAAC,iCAAiC,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,CAAC,uBAAuB,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/lib/launch/gemini-trust.d.ts

@@ -12,6 +12,7 @@ export declare function geminiSystemSettingsPath(env: Record<string, string | un
 export declare function geminiSystemDefaultsPath(systemSettingsPath: string, platform: string): string;
 /** ~/.gemini, or $GEMINI_CLI_HOME/.gemini when set. */
 export declare function geminiDir(home: string, env: Record<string, string | undefined>): string;
+type Rejects = (file: string, platform: string) => string | null;
 /**
  * Gemini CLI 0.58.0's folder-trust verdict for `cwd`, read from its own files and never written
  * (packages/core/src/utils/trust.ts, cli/src/config/trustedFolders.ts):
@@ -22,5 +23,6 @@ export declare function geminiDir(home: string, env: Record<string, string | und
  * Gemini also accepts a trust decision from a connected IDE; align cannot see that, so in an IDE
  * terminal this can say untrusted for a folder Gemini will treat as trusted (one extra line).
  */
-export declare function geminiFolderTrust(cwd: string, home: string, env: Record<string, string | undefined>, platform: string): GeminiTrust;
+export declare function geminiFolderTrust(cwd: string, home: string, env: Record<string, string | undefined>, platform: string, rejects?: Rejects): GeminiTrust;
+export {};
 //# sourceMappingURL=gemini-trust.d.ts.map

package/dist/lib/launch/gemini-trust.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gemini-trust.d.ts","sourceRoot":"","sources":["../../../src/lib/launch/gemini-trust.ts"],"names":[],"mappings":"AAIA;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,WAAW,GAAG,KAAK,GAAG,SAAS,CAAC;AAgBtE,qGAAqG;AACrG,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAK1G;AAED,oGAAoG;AACpG,wBAAgB,wBAAwB,CAAC,kBAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAG7F;AAED,uDAAuD;AACvD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,CAEvF;AAqCD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,WAAW,CAuBnI"}
+{"version":3,"file":"gemini-trust.d.ts","sourceRoot":"","sources":["../../../src/lib/launch/gemini-trust.ts"],"names":[],"mappings":"AAKA;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,WAAW,GAAG,KAAK,GAAG,SAAS,CAAC;AAgBtE,qGAAqG;AACrG,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAK1G;AAED,oGAAoG;AACpG,wBAAgB,wBAAwB,CAAC,kBAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAG7F;AAED,uDAAuD;AACvD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,CAEvF;AAED,KAAK,OAAO,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;AAsCjE;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,OAAmC,GAAG,WAAW,CAyBjL"}

package/dist/lib/launch/gemini-trust.js

@@ -1,5 +1,6 @@
 import { existsSync, readFileSync, realpathSync } from 'node:fs';
 import path from 'node:path';
+import { geminiSystemFileRejection } from './gemini-system-file.js';
 import { parseJsonc } from './strict-entry.js';
 const LEVELS = new Set(['TRUST_FOLDER', 'TRUST_PARENT', 'DO_NOT_TRUST']);
 /** Gemini reads these files through strip-json-comments, so comments are allowed. */
@@ -33,11 +34,14 @@ export function geminiDir(home, env) {
 }
 const folderTrustSetting = (s) => s?.['security']?.['folderTrust']?.['enabled'];
 /** security.folderTrust.enabled, merged system-defaults < user < system as Gemini does; default on. */
-function folderTrustEnabled(home, env, platform) {
+function folderTrustEnabled(home, env, platform, rejects) {
     const system = geminiSystemSettingsPath(env, platform);
     const defaults = env['GEMINI_CLI_SYSTEM_DEFAULTS_PATH'] ? env['GEMINI_CLI_SYSTEM_DEFAULTS_PATH'] : geminiSystemDefaultsPath(system, platform);
     let enabled = true;
+    // The two system tiers are skipped by Gemini unless root-owned; the user file is never checked.
     for (const file of [defaults, path.join(geminiDir(home, env), 'settings.json'), system]) {
+        if ((file === defaults || file === system) && rejects(file, platform) !== null)
+            continue;
         const v = folderTrustSetting(readJson(file));
         if (typeof v === 'boolean')
             enabled = v;
@@ -73,12 +77,15 @@ function isSubpath(parent, child, platform) {
  * Gemini also accepts a trust decision from a connected IDE; align cannot see that, so in an IDE
  * terminal this can say untrusted for a folder Gemini will treat as trusted (one extra line).
  */
-export function geminiFolderTrust(cwd, home, env, platform) {
+export function geminiFolderTrust(cwd, home, env, platform, rejects = geminiSystemFileRejection) {
+    // Gemini checks GEMINI_RESTRICTED_MODE before GEMINI_CLI_TRUST_WORKSPACE (checkPathTrust, 0.63.0).
+    if (env['GEMINI_RESTRICTED_MODE'] === 'true')
+        return 'untrusted';
     if (env['GEMINI_CLI_TRUST_WORKSPACE'] === 'true')
         return 'trusted';
     if (env['GEMINI_CLI_TRUST_WORKSPACE'] === 'false')
         return 'untrusted';
-    if (!folderTrustEnabled(home, env, platform))
+    if (!folderTrustEnabled(home, env, platform, rejects))
         return 'off';
     const file = env['GEMINI_CLI_TRUSTED_FOLDERS_PATH'] ? env['GEMINI_CLI_TRUSTED_FOLDERS_PATH'] : path.join(geminiDir(home, env), 'trustedFolders.json');
     if (!existsSync(file))

package/dist/lib/launch/gemini-trust.js.map

@@ -1 +1 @@
-{"version":3,"file":"gemini-trust.js","sourceRoot":"","sources":["../../../src/lib/launch/gemini-trust.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAY/C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;AAEzE,qFAAqF;AACrF,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAEvF,qGAAqG;AACrG,MAAM,UAAU,wBAAwB,CAAC,GAAuC,EAAE,QAAgB;IAChG,IAAI,GAAG,CAAC,iCAAiC,CAAC;QAAE,OAAO,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAC1F,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,sDAAsD,CAAC;IACzF,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,4CAA4C,CAAC;IAC9E,OAAO,+BAA+B,CAAC;AACzC,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,wBAAwB,CAAC,kBAA0B,EAAE,QAAgB;IACnF,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,sBAAsB,CAAC,CAAC;AACvE,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,GAAuC;IAC7E,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,kBAAkB,GAAG,CAAC,CAAc,EAAW,EAAE,CAAG,CAAC,EAAE,CAAC,UAAU,CAAsB,EAAE,CAAC,aAAa,CAAsB,EAAE,CAAC,SAAS,CAAC,CAAC;AAElJ,uGAAuG;AACvG,SAAS,kBAAkB,CAAC,IAAY,EAAE,GAAuC,EAAE,QAAgB;IACjG,MAAM,MAAM,GAAG,wBAAwB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC9I,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;QACxF,MAAM,CAAC,GAAG,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,SAAS,SAAS,CAAC,CAAS,EAAE,QAAgB;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AACjF,CAAC;AAED,iGAAiG;AACjG,SAAS,SAAS,CAAC,MAAc,EAAE,KAAa,EAAE,QAAgB;IAChE,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,IAAY,EAAE,GAAuC,EAAE,QAAgB;IACpH,IAAI,GAAG,CAAC,4BAA4B,CAAC,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IACnE,IAAI,GAAG,CAAC,4BAA4B,CAAC,KAAK,OAAO;QAAE,OAAO,WAAW,CAAC;IACtE,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAE3D,MAAM,IAAI,GAAG,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,qBAAqB,CAAC,CAAC;IACtJ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC;IAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAE3G,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpD,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC;IACjB,IAAI,OAA2B,CAAC;IAChC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAA4B,EAAE,CAAC;QAC5E,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;QACnG,IAAI,SAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;YACtE,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC;YACtB,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,KAAK,cAAc,IAAI,OAAO,KAAK,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;AAC5F,CAAC"}
+{"version":3,"file":"gemini-trust.js","sourceRoot":"","sources":["../../../src/lib/launch/gemini-trust.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAY/C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;AAEzE,qFAAqF;AACrF,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAEvF,qGAAqG;AACrG,MAAM,UAAU,wBAAwB,CAAC,GAAuC,EAAE,QAAgB;IAChG,IAAI,GAAG,CAAC,iCAAiC,CAAC;QAAE,OAAO,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAC1F,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,sDAAsD,CAAC;IACzF,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,4CAA4C,CAAC;IAC9E,OAAO,+BAA+B,CAAC;AACzC,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,wBAAwB,CAAC,kBAA0B,EAAE,QAAgB;IACnF,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,sBAAsB,CAAC,CAAC;AACvE,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,GAAuC;IAC7E,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AACtF,CAAC;AAGD,MAAM,kBAAkB,GAAG,CAAC,CAAc,EAAW,EAAE,CAAG,CAAC,EAAE,CAAC,UAAU,CAAsB,EAAE,CAAC,aAAa,CAAsB,EAAE,CAAC,SAAS,CAAC,CAAC;AAElJ,uGAAuG;AACvG,SAAS,kBAAkB,CAAC,IAAY,EAAE,GAAuC,EAAE,QAAgB,EAAE,OAAgB;IACnH,MAAM,MAAM,GAAG,wBAAwB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC9I,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,gGAAgG;IAChG,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;QACxF,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,IAAI;YAAE,SAAS;QACzF,MAAM,CAAC,GAAG,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,SAAS,SAAS,CAAC,CAAS,EAAE,QAAgB;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AACjF,CAAC;AAED,iGAAiG;AACjG,SAAS,SAAS,CAAC,MAAc,EAAE,KAAa,EAAE,QAAgB;IAChE,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,IAAY,EAAE,GAAuC,EAAE,QAAgB,EAAE,UAAmB,yBAAyB;IAClK,mGAAmG;IACnG,IAAI,GAAG,CAAC,wBAAwB,CAAC,KAAK,MAAM;QAAE,OAAO,WAAW,CAAC;IACjE,IAAI,GAAG,CAAC,4BAA4B,CAAC,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IACnE,IAAI,GAAG,CAAC,4BAA4B,CAAC,KAAK,OAAO;QAAE,OAAO,WAAW,CAAC;IACtE,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAEpE,MAAM,IAAI,GAAG,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,qBAAqB,CAAC,CAAC;IACtJ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC;IAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAE3G,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpD,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC;IACjB,IAAI,OAA2B,CAAC;IAChC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAA4B,EAAE,CAAC;QAC5E,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;QACnG,IAAI,SAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;YACtE,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC;YACtB,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,KAAK,cAAc,IAAI,OAAO,KAAK,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;AAC5F,CAAC"}

package/dist/lib/launch/goose-state.d.ts

@@ -0,0 +1,53 @@
+import type { AlignLocalState } from './strict-entry.js';
+export interface GooseProjectState extends Pick<AlignLocalState, 'present' | 'conflict'> {
+    /** The config could not be read with certainty: where, and why. */
+    unreadable?: {
+        file: string;
+        line: number;
+        reason: string;
+    };
+    /** The config.yaml Goose reads: where a clashing extension would sit. Read only, never written. */
+    configFile: string;
+}
+/**
+ * Whether a `goose` on PATH is Block's agent. `goose` is also pressly/goose, a common Go
+ * database-migration CLI, and Homebrew ships both under bin/goose (formula `goose` is pressly's,
+ * `block-goose-cli` is Block's). So it counts only from Block's documented install places, judged
+ * on the real path (a link in an allowed dir to pressly's binary does not pass):
+ *  - the installer's $GOOSE_BIN_DIR (download_cli.sh: default ~/.local/bin, %USERPROFILE%\goose
+ *    on Windows);
+ *  - Homebrew's Cellar/block-goose-cli.
+ * Nothing is executed. A Block goose installed any other way is not detected (fail closed).
+ */
+export declare function isGooseBin(found: string, env: Record<string, string | undefined>, platform: string): boolean;
+/**
+ * Goose's config.yaml (goose 1.54.0, `goose info` in a sandbox): GOOSE_PATH_ROOT/config, else the
+ * XDG config dir (Linux and macOS alike: `$XDG_CONFIG_HOME/goose`, default ~/.config/goose). On
+ * Windows %APPDATA%\Block\goose\config (goose docs, config files guide; not run on Windows).
+ */
+export declare function gooseConfigFile(home: string, env: Record<string, string | undefined>, platform: string): string;
+/**
+ * Whether Goose's config.yaml already holds an `align-local` extension (goose 1.54.0, seen in a
+ * sandbox): an ENABLED one with the same name makes goose refuse to start when Align adds its own
+ * ("extension name 'align-local' is already in use"); a disabled one does not clash.
+ *  - absent: no align-local, or a disabled one;
+ *  - present: enabled and exactly `align mcp --env local` (a bare `align mcp` where that reads the
+ *    local graph), with no key that could change what runs;
+ *  - conflict: anything else, including any mention this reader cannot place.
+ */
+export type YamlVerdict = 'absent' | 'present' | 'conflict' | 'unreadable';
+export declare function gooseAlignLocal(text: string | null, o: {
+    localIsDefault: boolean;
+    platform: string;
+}): YamlVerdict;
+/** What Goose would already load for align: its one config.yaml (it has no project-level extension config). */
+export declare function readGooseState(_cwd: string, home: string, opts: {
+    localIsDefault: boolean;
+}, env: Record<string, string | undefined>, platform: string): GooseProjectState;
+/**
+ * A recipe the user runs (`--recipe <file>`) that names align-local: goose would refuse to start
+ * if Align added its own under that name. Returns that file. Only a recipe given as a readable
+ * path is checked; a recipe named by its title is resolved by goose and not read here.
+ */
+export declare function gooseRecipeMentions(cwd: string, passthrough: string[]): string | undefined;
+//# sourceMappingURL=goose-state.d.ts.map

package/dist/lib/launch/goose-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"goose-state.d.ts","sourceRoot":"","sources":["../../../src/lib/launch/goose-state.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAIzD,MAAM,WAAW,iBAAkB,SAAQ,IAAI,CAAC,eAAe,EAAE,SAAS,GAAG,UAAU,CAAC;IACtF,mEAAmE;IACnE,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D,mGAAmG;IACnG,UAAU,EAAE,MAAM,CAAC;CACpB;AAYD;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAS5G;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAK/G;AAgBD;;;;;;;;GAQG;AACH,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,YAAY,CAAC;AAE3E,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,CAAC,EAAE;IAAE,cAAc,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,WAAW,CAElH;AA2CD,+GAA+G;AAC/G,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,cAAc,EAAE,OAAO,CAAA;CAAE,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,iBAAiB,CAK1K;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAK1F"}

package/dist/lib/launch/goose-state.js

@@ -0,0 +1,137 @@
+import { realpathSync } from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { optionValue, readText } from './layer-files.js';
+import { isCanonicalLocalEntry } from './strict-entry.js';
+import { fields, listValue, scalarValue, scanYaml, topLevelBlock } from './yaml-scan.js';
+const pathFor = (platform) => (platform === 'win32' ? path.win32 : path.posix);
+function real(p) {
+    try {
+        return realpathSync(p);
+    }
+    catch {
+        return p;
+    }
+}
+/**
+ * Whether a `goose` on PATH is Block's agent. `goose` is also pressly/goose, a common Go
+ * database-migration CLI, and Homebrew ships both under bin/goose (formula `goose` is pressly's,
+ * `block-goose-cli` is Block's). So it counts only from Block's documented install places, judged
+ * on the real path (a link in an allowed dir to pressly's binary does not pass):
+ *  - the installer's $GOOSE_BIN_DIR (download_cli.sh: default ~/.local/bin, %USERPROFILE%\goose
+ *    on Windows);
+ *  - Homebrew's Cellar/block-goose-cli.
+ * Nothing is executed. A Block goose installed any other way is not detected (fail closed).
+ */
+export function isGooseBin(found, env, platform) {
+    const p = pathFor(platform);
+    const resolved = platform === 'win32' ? found : real(found);
+    if (resolved.split(p.sep).join('/').includes('/Cellar/block-goose-cli/'))
+        return true;
+    const home = (platform === 'win32' ? env['USERPROFILE'] || env['HOME'] : env['HOME']) || os.homedir();
+    const dir = env['GOOSE_BIN_DIR'] ? p.resolve(env['GOOSE_BIN_DIR']) : platform === 'win32' ? p.join(home, 'goose') : p.join(home, '.local', 'bin');
+    const allowed = platform === 'win32' ? dir.toLowerCase() : real(dir);
+    const actual = platform === 'win32' ? p.dirname(resolved).toLowerCase() : p.dirname(resolved);
+    return actual === allowed;
+}
+/**
+ * Goose's config.yaml (goose 1.54.0, `goose info` in a sandbox): GOOSE_PATH_ROOT/config, else the
+ * XDG config dir (Linux and macOS alike: `$XDG_CONFIG_HOME/goose`, default ~/.config/goose). On
+ * Windows %APPDATA%\Block\goose\config (goose docs, config files guide; not run on Windows).
+ */
+export function gooseConfigFile(home, env, platform) {
+    const p = pathFor(platform);
+    if (env['GOOSE_PATH_ROOT'])
+        return p.join(p.resolve(env['GOOSE_PATH_ROOT']), 'config', 'config.yaml');
+    if (platform === 'win32')
+        return p.join(env['APPDATA'] || p.join(home, 'AppData', 'Roaming'), 'Block', 'goose', 'config', 'config.yaml');
+    return p.join(env['XDG_CONFIG_HOME'] || p.join(home, '.config'), 'goose', 'config.yaml');
+}
+/** The keys a goose stdio extension may carry and still be exactly Align's own, and what they must hold. */
+const ALLOWED = {
+    enabled: (f) => scalarValue(f) === 'true',
+    type: (f) => scalarValue(f) === 'stdio',
+    cmd: (f) => scalarValue(f) !== null,
+    args: (f) => listValue(f) !== null,
+    timeout: (f) => /^\d+$/.test(scalarValue(f) ?? ''),
+    description: (f) => f.children.length === 0,
+    bundled: (f) => ['null', '~', 'false'].includes(scalarValue(f) ?? '') || (f.inline === '' && f.children.length === 0),
+    envs: (f) => f.inline === '{}' && f.children.length === 0,
+    env_keys: (f) => f.inline === '[]' && f.children.length === 0,
+    available_tools: (f) => f.inline === '[]' && f.children.length === 0,
+};
+export function gooseAlignLocal(text, o) {
+    return gooseVerdict(text, o).verdict;
+}
+/** The verdict, and for `unreadable` the line and reason. */
+function gooseVerdict(text, o) {
+    if (text === null)
+        return { verdict: 'absent' };
+    const scanned = scanYaml(text);
+    if ('unreadable' in scanned)
+        return { verdict: 'unreadable', detail: scanned.unreadable };
+    const lines = scanned.lines;
+    const firstMention = (ls) => ls.find((l) => l.text.includes('align-local'));
+    const layout = (ls) => {
+        const m = firstMention(ls);
+        return m ? { verdict: 'unreadable', detail: { line: m.n, reason: 'a layout Align does not read' } } : { verdict: 'absent' };
+    };
+    const block = topLevelBlock(lines, 'extensions');
+    if (block === 'inline' || block === null)
+        return layout(lines);
+    const exts = fields(block);
+    if (!exts)
+        return layout(block);
+    // A mention of align-local anywhere but its own key: a `name:` field may rename an extension.
+    for (const [key, f] of exts)
+        if (key !== 'align-local' && (firstMention(f.children) || f.inline.includes('align-local')))
+            return { verdict: 'conflict' };
+    const local = exts.has('align-local') ? extension(exts.get('align-local'), 'align-local', o) : 'absent';
+    if (local === 'conflict')
+        return { verdict: 'conflict' };
+    // An enabled, exactly-ours extension under either name already serves the graph.
+    const align = exts.has('align') ? extension(exts.get('align'), 'align', o) : 'absent';
+    return { verdict: local === 'present' || align === 'present' ? 'present' : 'absent' };
+}
+/** One extension's verdict: disabled is absent, exactly Align's own is present, anything else a conflict. */
+function extension(f, name, o) {
+    if (f.inline !== '')
+        return 'conflict';
+    const body = fields(f.children);
+    if (!body)
+        return 'conflict';
+    const enabled = scalarValue(body.get('enabled'));
+    if (enabled === 'false')
+        return 'absent';
+    if (enabled !== 'true')
+        return 'conflict';
+    for (const [key, v] of body) {
+        if (key === 'name' ? scalarValue(v) !== name : !Object.hasOwn(ALLOWED, key) || !ALLOWED[key](v))
+            return 'conflict';
+    }
+    const cmd = scalarValue(body.get('cmd'));
+    const args = body.has('args') ? listValue(body.get('args')) : [];
+    const ours = isCanonicalLocalEntry({ command: cmd, args }, { localIsDefault: o.localIsDefault, platform: o.platform, host: 'mcpServers' });
+    return ours ? 'present' : 'conflict';
+}
+/** What Goose would already load for align: its one config.yaml (it has no project-level extension config). */
+export function readGooseState(_cwd, home, opts, env, platform) {
+    const configFile = gooseConfigFile(home, env, platform);
+    const { verdict, detail } = gooseVerdict(readText(configFile), { ...opts, platform });
+    if (verdict === 'unreadable')
+        return { present: false, configFile, unreadable: { file: configFile, ...detail } };
+    return verdict === 'conflict' ? { present: false, conflict: configFile, configFile } : { present: verdict === 'present', configFile };
+}
+/**
+ * A recipe the user runs (`--recipe <file>`) that names align-local: goose would refuse to start
+ * if Align added its own under that name. Returns that file. Only a recipe given as a readable
+ * path is checked; a recipe named by its title is resolved by goose and not read here.
+ */
+export function gooseRecipeMentions(cwd, passthrough) {
+    const r = optionValue(passthrough, '--recipe');
+    if (!r)
+        return undefined;
+    const file = path.resolve(cwd, r);
+    return readText(file)?.includes('align-local') ? file : undefined;
+}
+//# sourceMappingURL=goose-state.js.map

package/dist/lib/launch/goose-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"goose-state.js","sourceRoot":"","sources":["../../../src/lib/launch/goose-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAc,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAkC,MAAM,gBAAgB,CAAC;AASrI,MAAM,OAAO,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAEvF,SAAS,IAAI,CAAC,CAAS;IACrB,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa,EAAE,GAAuC,EAAE,QAAgB;IACjG,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QAAE,OAAO,IAAI,CAAC;IACtF,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACtG,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAClJ,MAAM,OAAO,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9F,OAAO,MAAM,KAAK,OAAO,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,GAAuC,EAAE,QAAgB;IACrG,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5B,IAAI,GAAG,CAAC,iBAAiB,CAAC;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IACtG,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IACzI,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;AAC3F,CAAC;AAED,4GAA4G;AAC5G,MAAM,OAAO,GAA0C;IACrD,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,MAAM;IACzC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,OAAO;IACvC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,IAAI;IACnC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI;IAClC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;IACrH,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;IACzD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;IAC7D,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;CACrE,CAAC;AAaF,MAAM,UAAU,eAAe,CAAC,IAAmB,EAAE,CAAgD;IACnG,OAAO,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AACvC,CAAC;AAED,6DAA6D;AAC7D,SAAS,YAAY,CAAC,IAAmB,EAAE,CAAgD;IACzF,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,YAAY,IAAI,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;IAC1F,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,YAAY,GAAG,CAAC,EAAc,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;IACxF,MAAM,MAAM,GAAG,CAAC,EAAc,EAAiD,EAAE;QAC/E,MAAM,CAAC,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;QAC3B,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,8BAA8B,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC9H,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACjD,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,8FAA8F;IAC9F,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,IAAI;QAAE,IAAI,GAAG,KAAK,aAAa,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACzJ,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAE,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACzG,IAAI,KAAK,KAAK,UAAU;QAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACzD,iFAAiF;IACjF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACvF,OAAO,EAAE,OAAO,EAAE,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AACxF,CAAC;AAED,6GAA6G;AAC7G,SAAS,SAAS,CAAC,CAAQ,EAAE,IAAY,EAAE,CAAgD;IACzF,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,UAAU,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,UAAU,CAAC;IAC7B,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC;IACzC,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,UAAU,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAE,CAAC,CAAC,CAAC;YAAE,OAAO,UAAU,CAAC;IACtH,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,MAAM,IAAI,GAAG,qBAAqB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAC3I,OAAO,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;AACvC,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,IAAY,EAAE,IAAiC,EAAE,GAAuC,EAAE,QAAgB;IACrJ,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACxD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtF,IAAI,OAAO,KAAK,YAAY;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,MAAO,EAAE,EAAE,CAAC;IAClH,OAAO,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,KAAK,SAAS,EAAE,UAAU,EAAE,CAAC;AACxI,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,WAAqB;IACpE,MAAM,CAAC,GAAG,WAAW,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAC/C,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAClC,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC"}

package/dist/lib/launch/grok-state.d.ts

@@ -0,0 +1,42 @@
+import { type AlignLocalState } from './strict-entry.js';
+export interface GrokProjectState extends AlignLocalState {
+    /** $GROK_HOME/config.toml (else ~/.grok/config.toml): the file align adds to. */
+    configFile: string;
+}
+/**
+ * $GROK_HOME verbatim when non-empty, else `<home>/.grok` with the home's symlinks resolved, as
+ * Grok Build's own installer and `grok_home()` do (xai-org/grok-build xai-dirs, npm postinstall.js).
+ */
+export declare function grokHome(env: Record<string, string | undefined>, platform: string, home?: string): string;
+export interface BinFs {
+    realpath(p: string): string;
+    exists(p: string): boolean;
+}
+/**
+ * `grok` is a generic name, so a `grok` on PATH is Grok Build only when its realpath sits where
+ * Grok Build's own installers put it:
+ *  - the install script (x.ai/cli/install.sh): `$GROK_HOME/downloads/grok-<platform>`, linked from
+ *    `$GROK_HOME/bin/grok` (and from `$GROK_BIN_DIR` or ~/.local/bin, which resolve to the same);
+ *  - its Windows script: a copy at `%USERPROFILE%\.grok\bin\grok.exe`;
+ *  - the npm package `@xai-official/grok`: its postinstall installs into `$GROK_HOME/bin`, and the
+ *    npm entry itself lives in `node_modules/@xai-official/grok[-<platform>]/`. On Windows npm's
+ *    `grok.cmd` shim sits beside `node_modules`, so it counts when that package is next to it.
+ * Anything else (another tool's `grok`) is not Grok Build, and counts as not installed.
+ */
+export declare function isGrokBuildBin(found: string, env: Record<string, string | undefined>, platform: string, fsx?: BinFs): boolean;
+/**
+ * What Grok Build (grok 1.0.50) would already load for align, measured with `grok mcp list` and
+ * `grok inspect` in a sandbox:
+ *  - `$GROK_HOME/config.toml` `[mcp_servers.*]`: the user file align writes to;
+ *  - a project `.grok/config.toml` (repo root down to the cwd; every ancestor is read here):
+ *    "A project file entirely replaces a same-named server from the user config", so a
+ *    non-canonical align-local there would replace ours: a conflict, nothing is written;
+ *  - ~/.claude.json and ~/.cursor/mcp.json (Grok imports them): a same-named server there LOSES
+ *    to config.toml (verified), so it is no conflict; a canonical local `align` there is present.
+ * A project `.mcp.json` is repo input and never counts as present. The project is `--cwd` when
+ * the user passes one.
+ */
+export declare function readGrokState(cwd: string, home: string, opts: {
+    localIsDefault: boolean;
+}, env: Record<string, string | undefined>, platform: string, passthrough?: string[]): GrokProjectState;
+//# sourceMappingURL=grok-state.d.ts.map

package/dist/lib/launch/grok-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok-state.d.ts","sourceRoot":"","sources":["../../../src/lib/launch/grok-state.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,eAAe,EAAqC,MAAM,mBAAmB,CAAC;AAE5F,MAAM,WAAW,gBAAiB,SAAQ,eAAe;IACvD,iFAAiF;IACjF,UAAU,EAAE,MAAM,CAAC;CACpB;AAqBD;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,SAAwB,GAAG,MAAM,CAGxH;AASD,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,MAAM,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CAC5B;AAGD;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAE,KAAc,GAAG,OAAO,CAkBrI;AAaD;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;IAAE,cAAc,EAAE,OAAO,CAAA;CAAE,EACjC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,QAAQ,EAAE,MAAM,EAChB,WAAW,GAAE,MAAM,EAAO,GACzB,gBAAgB,CA0BlB"}