@aligndottech/cli 0.48.0 → 0.50.0

package/dist/lib/mcp-backfill.d.ts

@@ -0,0 +1,89 @@
+/**
+ * L3: the MCP tool `align_backfill({ source, since })` - read more history from a source the
+ * user already connected.
+ *
+ * What it does, and what it cannot:
+ * - A connected, healthy source: record the window in `source_sync` and start the SAME command
+ *   a person would type (`align connect --env local --source <id> --since <when> --yes --json`) as a
+ *   detached child (Decision 9). A tool call never runs a bulk fetch in the MCP server's own
+ *   process, and it returns inside journey 5's 500 ms.
+ * - Not connected, or waiting on re-authentication: start nothing and return the exact command
+ *   for the human. Connecting, re-authenticating and every token or key stay with the person
+ *   (Decision 16): the input schema is closed, so a `token` property is refused before anything
+ *   else happens, and no credential is ever read into, echoed by, or passed on argv from here.
+ * - It never classifies. `align connect` imports with the classifier off (L1); this adds no
+ *   other path.
+ *
+ * Children are capped (one per source, three in all; backfill-state.ts) and leave a status file
+ * under the state directory, so none is silently orphaned and `align_sync` (L5) can find them.
+ * "Started" is claimed only after the OS confirmed the child, and the window is recorded after.
+ *
+ * Not here yet (L5): the `align sync --background` child, the lock and the watermark. Until then
+ * the child is `align connect --env local`. The import is an upsert, so an overlap costs time and
+ * never duplicates a row.
+ */
+import { type BackfillStatus, type Reservation } from './backfill-state.js';
+import type { EnvironmentConfig } from './config.js';
+export declare const BACKFILL_TOOL = "align_backfill";
+/** The sources `align connect --source` takes (the paste-token ones). Equal to
+ *  `localConnectorIds()` by test; spelled here so the MCP server does not import setup.ts. */
+export declare const BACKFILL_SOURCES: readonly ["github", "jira", "confluence", "slack", "teams", "gitlab", "linear", "notion"];
+/** The tool as `tools/list` publishes it. Closed (`additionalProperties: false`) so a client that
+ *  validates sees no place to put a secret, and runBackfill refuses one regardless. A write: it
+ *  records a window and starts an import (mcp-tool-annotations.test.ts). */
+export declare const BACKFILL_TOOL_SCHEMA: {
+    readonly name: "align_backfill";
+    readonly annotations: {
+        readonly readOnlyHint: false;
+        readonly destructiveHint: false;
+    };
+    readonly description: string;
+    readonly inputSchema: {
+        readonly type: "object";
+        readonly properties: {
+            readonly source: {
+                readonly type: "string";
+                readonly enum: readonly ["github", "jira", "confluence", "slack", "teams", "gitlab", "linear", "notion"];
+                readonly description: "Which connected source to read from";
+            };
+            readonly since: {
+                readonly type: "string";
+                readonly description: "How far back: 30d, 2w, 6m, 1y or all. Default 180 days. A ceiling per source still applies";
+            };
+        };
+        readonly required: readonly ["source"];
+        readonly additionalProperties: false;
+    };
+};
+export interface BackfillDeps {
+    now(): Date;
+    isConnected(source: string): boolean;
+    needsReauth(source: string): boolean;
+    /** Is a `align sync` of this source running? The two read and write the same history, so one waits for the other. */
+    syncRunning?(source: string): boolean;
+    recordWindow(source: string, since: string | null, agent: string): void;
+    /** Take a slot SYNCHRONOUSLY (check and take in one tick, no await): MCP does not queue requests,
+     *  so parallel calls would otherwise all pass the cap. Released when the child is confirmed
+     *  (its status file then holds the slot) or has failed to start. */
+    reserve(source: string): Reservation;
+    /** How the previous backfill of this source ended, if it left a status file. */
+    lastRun(source: string): BackfillStatus | null;
+    /** Start `align <argv>` detached and wait briefly for the OS to confirm it exists. */
+    start(source: string, argv: string[]): Promise<{
+        ok: boolean;
+        pid?: number;
+    }>;
+}
+export interface BackfillResult {
+    started: boolean;
+    text: string;
+}
+/**
+ * The child's arguments. `--env local` is not optional: for a logged-in user the default env is
+ * hosted, where `align connect --since` is refused with exit 2 (the hosted scan takes --from/--to)
+ * and, with stdio ignored, nobody would hear. check.ts spawns its child the same way (--env).
+ */
+export declare function backfillArgv(source: string, sinceArg: string): string[];
+export declare function defaultBackfillDeps(env: EnvironmentConfig): BackfillDeps;
+export declare function runBackfill(args: Record<string, unknown> | undefined, env: EnvironmentConfig, injected?: BackfillDeps): Promise<BackfillResult>;
+//# sourceMappingURL=mcp-backfill.d.ts.map

package/dist/lib/mcp-backfill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-backfill.d.ts","sourceRoot":"","sources":["../../src/lib/mcp-backfill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAe,KAAK,cAAc,EAAc,KAAK,WAAW,EAA+C,MAAM,qBAAqB,CAAC;AAClJ,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AASrD,eAAO,MAAM,aAAa,mBAAmB,CAAC;AAE9C;8FAC8F;AAC9F,eAAO,MAAM,gBAAgB,2FAAgB,CAAC;AAO9C;;4EAE4E;AAC5E,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;CAiBvB,CAAC;AAEX,MAAM,WAAW,YAAY;IAC3B,GAAG,IAAI,IAAI,CAAC;IACZ,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACrC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACrC,qHAAqH;IACrH,WAAW,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACtC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACxE;;wEAEoE;IACpE,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC;IACrC,gFAAgF;IAChF,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAAC;IAC/C,sFAAsF;IACtF,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC/E;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAEvE;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,iBAAiB,GAAG,YAAY,CA2BxE;AAED,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EACzC,GAAG,EAAE,iBAAiB,EACtB,QAAQ,CAAC,EAAE,YAAY,GACtB,OAAO,CAAC,cAAc,CAAC,CAuGzB"}

package/dist/lib/mcp-backfill.js

@@ -0,0 +1,194 @@
+/**
+ * L3: the MCP tool `align_backfill({ source, since })` - read more history from a source the
+ * user already connected.
+ *
+ * What it does, and what it cannot:
+ * - A connected, healthy source: record the window in `source_sync` and start the SAME command
+ *   a person would type (`align connect --env local --source <id> --since <when> --yes --json`) as a
+ *   detached child (Decision 9). A tool call never runs a bulk fetch in the MCP server's own
+ *   process, and it returns inside journey 5's 500 ms.
+ * - Not connected, or waiting on re-authentication: start nothing and return the exact command
+ *   for the human. Connecting, re-authenticating and every token or key stay with the person
+ *   (Decision 16): the input schema is closed, so a `token` property is refused before anything
+ *   else happens, and no credential is ever read into, echoed by, or passed on argv from here.
+ * - It never classifies. `align connect` imports with the classifier off (L1); this adds no
+ *   other path.
+ *
+ * Children are capped (one per source, three in all; backfill-state.ts) and leave a status file
+ * under the state directory, so none is silently orphaned and `align_sync` (L5) can find them.
+ * "Started" is claimed only after the OS confirmed the child, and the window is recorded after.
+ *
+ * Not here yet (L5): the `align sync --background` child, the lock and the watermark. Until then
+ * the child is `align connect --env local`. The import is an upsert, so an overlap costs time and
+ * never duplicates a row.
+ */
+import { backfillDir, readStatus, reserveSlot, startBackfillChild, statusPath } from './backfill-state.js';
+import { createConfigStore } from './config.js';
+import { SYNC_CEILINGS, SYNC_WINDOW_DEFAULT_DAYS } from './import-defaults.js';
+import { parseSince } from './since.js';
+import { lockHolder } from './sync/lock.js';
+import { KNOWN_SOURCES } from './sync/source-ids.js';
+import { syncChildEnv } from './sync/spawn-background.js';
+import { readSyncStatus, recordWindowSince } from './source-sync-state.js';
+export const BACKFILL_TOOL = 'align_backfill';
+/** The sources `align connect --source` takes (the paste-token ones). Equal to
+ *  `localConnectorIds()` by test; spelled here so the MCP server does not import setup.ts. */
+export const BACKFILL_SOURCES = KNOWN_SOURCES;
+/** Attribution until LM maps the MCP client's `clientInfo.name` onto the registry's closed list.
+ *  The closed value, never a free-text client name (Decision 16). */
+const UNKNOWN_AGENT = 'unknown';
+/** The tool as `tools/list` publishes it. Closed (`additionalProperties: false`) so a client that
+ *  validates sees no place to put a secret, and runBackfill refuses one regardless. A write: it
+ *  records a window and starts an import (mcp-tool-annotations.test.ts). */
+export const BACKFILL_TOOL_SCHEMA = {
+    name: BACKFILL_TOOL,
+    annotations: { readOnlyHint: false, destructiveHint: false },
+    description: 'Import more history from a source the user has ALREADY connected (for example the last year of GitHub PRs) into the local graph on this machine. ' +
+        'Offer it when the user asks for older context than the graph holds. It runs in the background, only reads from the source, and makes no LLM calls. ' +
+        'It never takes a token or key: if the source is not connected, or its saved token was refused, nothing starts and the reply gives the exact `align connect <source>` command for the user to run themselves. ' +
+        'Do not ask the user to paste a token into the chat.',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            source: { type: 'string', enum: [...BACKFILL_SOURCES], description: 'Which connected source to read from' },
+            since: { type: 'string', description: 'How far back: 30d, 2w, 6m, 1y or all. Default 180 days. A ceiling per source still applies' },
+        },
+        required: ['source'],
+        additionalProperties: false,
+    },
+};
+/**
+ * The child's arguments. `--env local` is not optional: for a logged-in user the default env is
+ * hosted, where `align connect --since` is refused with exit 2 (the hosted scan takes --from/--to)
+ * and, with stdio ignored, nobody would hear. check.ts spawns its child the same way (--env).
+ */
+export function backfillArgv(source, sinceArg) {
+    return ['connect', '--env', 'local', '--source', source, '--since', sinceArg, '--yes', '--json'];
+}
+export function defaultBackfillDeps(env) {
+    const config = createConfigStore();
+    const dbPath = env.localDbPath;
+    const need = () => {
+        if (!dbPath)
+            throw new Error('align_backfill needs the local graph path, and this server has none configured.');
+        return dbPath;
+    };
+    return {
+        now: () => new Date(),
+        isConnected: (source) => Boolean(config.getConnectorFields('local', source)?.['token']),
+        needsReauth: (source) => readSyncStatus(need(), source).needsReauth,
+        syncRunning: (source) => lockHolder(`sync-${source}`) !== undefined,
+        recordWindow: (source, since, agent) => recordWindowSince(need(), source, since, agent),
+        reserve: (source) => {
+            const dir = backfillDir();
+            return dir ? reserveSlot(dir, source) : { ok: false, reason: 'state', running: [] };
+        },
+        lastRun: (source) => {
+            const dir = backfillDir();
+            return dir ? readStatus(statusPath(dir, source)) : null;
+        },
+        start: async (source, argv) => {
+            const dir = backfillDir();
+            if (!dir)
+                return { ok: false };
+            return startBackfillChild(source, argv, statusPath(dir, source), undefined, 'mcp', syncChildEnv(process.env));
+        },
+    };
+}
+export async function runBackfill(args, env, injected) {
+    const input = args ?? {};
+    const unknownKeys = Object.keys(input).filter((k) => k !== 'source' && k !== 'since');
+    if (unknownKeys.length) {
+        // Names the keys, never their values: a rejected token must not be echoed back into the
+        // transcript it was typed into.
+        const names = unknownKeys.slice(0, 3).map((k) => JSON.stringify(k.slice(0, 16))).join(', ');
+        throw new Error(`${BACKFILL_TOOL} takes only "source" and "since", and does not accept ${names}. ` +
+            'It never accepts a token or key: the person connects a source themselves with `align connect <source>`.');
+    }
+    const source = input['source'];
+    if (typeof source !== 'string' || !BACKFILL_SOURCES.includes(source)) {
+        throw new Error(
+        // The value is never echoed: a token pasted into the wrong field fits any slice.
+        `${BACKFILL_TOOL} requires "source", one of: ${BACKFILL_SOURCES.join(', ')}. Call it again with one of those.`);
+    }
+    if (env.mode !== 'local-embedded') {
+        throw new Error(`${BACKFILL_TOOL} fills the local graph on this machine, and this server reads a hosted Align graph. ` +
+            'Use the local Align server (align mcp --env local), or run the hosted scan with align connect --all.');
+    }
+    const rawSince = input['since'];
+    if (rawSince !== undefined && typeof rawSince !== 'string')
+        throw new Error(`${BACKFILL_TOOL}: "since" must be a string such as 6m or 1y.`);
+    // Built only now, after every check that needs no config: a refused call opens nothing.
+    const deps = injected ?? defaultBackfillDeps(env);
+    const now = deps.now();
+    const window = parseSince(rawSince, now); // throws SinceError naming the accepted forms
+    const sinceArg = rawSince === undefined ? `${SYNC_WINDOW_DEFAULT_DAYS}d` : rawSince.trim().toLowerCase();
+    // How the previous run of this source ended, said first: a dead token ended "done" would hide it.
+    const prev = deps.lastRun(source);
+    const say = (r) => prev?.state === 'failed' && prev.last_line ? { ...r, text: `Last run failed: ${prev.last_line}. ${r.text}` } : r;
+    const proceed = async () => {
+        if (!deps.isConnected(source)) {
+            return {
+                started: false,
+                text: `${source} is not connected, so nothing was started. Connecting needs a token only the person can supply. Ask them to run: align connect ${source}`,
+            };
+        }
+        if (source === 'teams') {
+            // Decision 21: a Graph token lasts about an hour, so a background child would hold a dead one.
+            return {
+                started: false,
+                text: `Teams tokens last about an hour, so a refresh is manual and nothing was started. Ask the person to run: align connect teams --since ${sinceArg}`,
+            };
+        }
+        if (deps.needsReauth(source)) {
+            return {
+                started: false,
+                text: `${source} needs the person to re-authenticate (the provider refused its saved token), so nothing was started. Ask them to run: align connect ${source}`,
+            };
+        }
+        if (deps.syncRunning?.(source)) {
+            return { started: false, text: `A sync of ${source} is running and reads the same history, so nothing new was started. Ask again when it has finished.` };
+        }
+        // Taken in this same synchronous stretch (nothing above awaits): five parallel calls cannot all pass.
+        const slot = deps.reserve(source);
+        if (!slot.ok) {
+            if (slot.reason === 'state') {
+                return { started: false, text: `The state directory for backfills could not be used safely, so nothing was started. The person can run it themselves: align connect ${source} --since ${sinceArg}` };
+            }
+            const names = [...new Set(slot.running.map((r) => r.source))].join(', ');
+            return {
+                started: false,
+                text: slot.reason === 'source'
+                    ? `A backfill for ${source} is already running${slot.running[0]?.pid ? ` (started ${slot.running[0].started_at.slice(0, 16).replace('T', ' ')} UTC)` : ''}, so nothing new was started. It only reads and makes no LLM calls; ask again when it has finished.`
+                    : `${slot.running.length} backfills are already running (${names}), which is the most at once, so nothing new was started. Ask again when one has finished.`,
+            };
+        }
+        let started;
+        try {
+            started = await deps.start(source, backfillArgv(source, sinceArg));
+        }
+        finally {
+            slot.release();
+        }
+        if (!started.ok) {
+            return {
+                started: false,
+                text: `The background process for ${source} could not start, so nothing was started. The person can run it themselves: align connect ${source} --since ${sinceArg}`,
+            };
+        }
+        // Only now: the window is recorded for a child that exists.
+        deps.recordWindow(source, window.since ?? null, UNKNOWN_AGENT);
+        const reach = window.since === undefined
+            ? `as far back as the ceiling allows (${SYNC_CEILINGS[source]} items)`
+            : `back to ${window.since.slice(0, 10)}`;
+        const scope = source === 'github'
+            ? " Inside a repo it reads everyone's PRs and issues in that repo, as far as their access allows; elsewhere only the person's own."
+            : '';
+        return {
+            started: true,
+            text: `Backfill started for ${source} ${reach}. It runs in the background on this machine, only reads, and makes no LLM calls.${scope} New items appear in align_ask as they land.`,
+        };
+    };
+    return say(await proceed());
+}
+//# sourceMappingURL=mcp-backfill.js.map

package/dist/lib/mcp-backfill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-backfill.js","sourceRoot":"","sources":["../../src/lib/mcp-backfill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,WAAW,EAAuB,UAAU,EAAoB,WAAW,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAElJ,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3E,MAAM,CAAC,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAE9C;8FAC8F;AAC9F,MAAM,CAAC,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAG9C;qEACqE;AACrE,MAAM,aAAa,GAAG,SAAS,CAAC;AAEhC;;4EAE4E;AAC5E,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE;IAC5D,WAAW,EACT,mJAAmJ;QACnJ,qJAAqJ;QACrJ,+MAA+M;QAC/M,qDAAqD;IACvD,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,gBAAgB,CAAC,EAAE,WAAW,EAAE,qCAAqC,EAAE;YAC3G,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4FAA4F,EAAE;SACrI;QACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;QACpB,oBAAoB,EAAE,KAAK;KAC5B;CACO,CAAC;AAwBX;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,QAAgB;IAC3D,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AACnG,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAsB;IACxD,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC;IAC/B,MAAM,IAAI,GAAG,GAAW,EAAE;QACxB,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;QAChH,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,OAAO;QACL,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QACrB,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QACvF,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,WAAW;QACnE,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,MAAM,EAAE,CAAC,KAAK,SAAS;QACnE,YAAY,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC;QACvF,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE;YAClB,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;YAC1B,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACtF,CAAC;QACD,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE;YAClB,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;YAC1B,OAAO,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,CAAC;QACD,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YAC5B,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;YAC/B,OAAO,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAChH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAyC,EACzC,GAAsB,EACtB,QAAuB;IAEvB,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC;IACzB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,OAAO,CAAC,CAAC;IACtF,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;QACvB,wFAAwF;QACxF,gCAAgC;QAChC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5F,MAAM,IAAI,KAAK,CACb,GAAG,aAAa,yDAAyD,KAAK,IAAI;YAClF,yGAAyG,CAC1G,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAE,gBAAsC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,KAAK;QACb,iFAAiF;QACjF,GAAG,aAAa,+BAA+B,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,oCAAoC,CAC/G,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,GAAG,aAAa,sFAAsF;YACtG,sGAAsG,CACvG,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,aAAa,8CAA8C,CAAC,CAAC;IAC5I,wFAAwF;IACxF,MAAM,IAAI,GAAG,QAAQ,IAAI,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,8CAA8C;IACxF,MAAM,QAAQ,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,wBAAwB,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAEzG,kGAAkG;IAClG,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,CAAC,CAAiB,EAAkB,EAAE,CAChD,IAAI,EAAE,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,oBAAoB,IAAI,CAAC,SAAS,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACnH,MAAM,OAAO,GAAG,KAAK,IAA6B,EAAE;QAClD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,GAAG,MAAM,kIAAkI,MAAM,EAAE;aAC1J,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,+FAA+F;YAC/F,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,uIAAuI,QAAQ,EAAE;aACxJ,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,GAAG,MAAM,uIAAuI,MAAM,EAAE;aAC/J,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,MAAM,qGAAqG,EAAE,CAAC;QAC5J,CAAC;QAED,sGAAsG;QACtG,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,uIAAuI,MAAM,YAAY,QAAQ,EAAE,EAAE,CAAC;YACvM,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,IAAI,CAAC,MAAM,KAAK,QAAQ;oBAC5B,CAAC,CAAC,kBAAkB,MAAM,sBAAsB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,qGAAqG;oBAC9P,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,mCAAmC,KAAK,4FAA4F;aAC/J,CAAC;QACJ,CAAC;QACD,IAAI,OAAsC,CAAC;QAC3C,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QACrE,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,8BAA8B,MAAM,6FAA6F,MAAM,YAAY,QAAQ,EAAE;aACpK,CAAC;QACJ,CAAC;QACD,4DAA4D;QAC5D,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI,EAAE,aAAa,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK,SAAS;YACtC,CAAC,CAAC,sCAAsC,aAAa,CAAC,MAAwB,CAAC,SAAS;YACxF,CAAC,CAAC,WAAW,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,KAAK,QAAQ;YAC/B,CAAC,CAAC,iIAAiI;YACnI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,wBAAwB,MAAM,IAAI,KAAK,mFAAmF,KAAK,8CAA8C;SACpL,CAAC;IACJ,CAAC,CAAC;IACF,OAAO,GAAG,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC;AAC9B,CAAC"}

package/dist/lib/mcp-scope.d.ts

@@ -0,0 +1,90 @@
+/**
+ * L4: the MCP tool `align_scope({ action, source, ... })` - see, or change, what the sources the user already connected read.
+ *
+ * What it does, and what it cannot:
+ * - `view`: each connected source's scope (their own items, or everyone's in a named repo, project, team or space), with no network
+ *   call and nothing secret.
+ * - `set`: changes the scope of a CONNECTED source through `setScope`, the same function `align connect --scope` ends in, so a
+ *   change by an agent takes exactly the path a person's does. It records `via = 'mcp'` and the agent id on the scope's row, returns
+ *   the plain-words disclosure and what widening costs (a new scope re-reads the window), and never deletes an item.
+ * - Listing choices (is this Jira project visible?) uses the saved token inside this process. The token never appears in a result.
+ * - Connecting, re-authenticating and every token or key stay with the person: the input schema is closed, so a `token` or `api_key`
+ *   property is refused before anything runs, and the reply for an unconnected source is the `align connect <source>` command.
+ * - Zoom is only the user's own and says why. Slack, Notion and Teams already read all the token can see and have nothing to set.
+ *
+ * The server's `instructions` text is at its 2,048-byte budget, so the guidance for when to offer this tool lives here, in its description.
+ */
+import type { EnvironmentConfig } from './config.js';
+import { type ScopeDeps } from './scope.js';
+export declare const SCOPE_TOOL = "align_scope";
+export declare const SCOPE_ACTIONS: readonly ["view", "set"];
+/** Every source that can be connected, so Zoom gets its own honest refusal instead of "unknown source". */
+export declare const SCOPE_SOURCES: readonly ["github", "jira", "confluence", "slack", "teams", "gitlab", "linear", "notion", "zoom"];
+export declare const SCOPE_TOOL_SCHEMA: {
+    readonly name: "align_scope";
+    readonly annotations: {
+        readonly readOnlyHint: false;
+        readonly destructiveHint: false;
+    };
+    readonly description: string;
+    readonly inputSchema: {
+        readonly type: "object";
+        readonly properties: {
+            readonly action: {
+                readonly type: "string";
+                readonly enum: readonly ["view", "set"];
+                readonly description: "view: show the scopes. set: change one source's scope";
+            };
+            readonly source: {
+                readonly type: "string";
+                readonly enum: readonly ["github", "jira", "confluence", "slack", "teams", "gitlab", "linear", "notion", "zoom"];
+                readonly description: "With \"set\": which connected source to change";
+            };
+            readonly scope: {
+                readonly type: "string";
+                readonly enum: readonly ["yours", "team"];
+                readonly description: "With \"set\": \"yours\" goes back to only the user's own items. \"team\" is implied by passing the source's value below";
+            };
+            readonly repo: {
+                readonly type: "string";
+                readonly description: "GitHub: the repo as owner/repo";
+            };
+            readonly projects: {
+                readonly type: "array";
+                readonly items: {
+                    readonly type: "string";
+                };
+                readonly description: "Jira: project keys, for example [\"ALI\",\"OPS\"]";
+            };
+            readonly teams: {
+                readonly type: "array";
+                readonly items: {
+                    readonly type: "string";
+                };
+                readonly description: "Linear: team keys, for example [\"ENG\"]";
+            };
+            readonly gitlab_project: {
+                readonly type: "string";
+                readonly description: "GitLab: the project id or group/project path";
+            };
+            readonly spaces: {
+                readonly type: "array";
+                readonly items: {
+                    readonly type: "string";
+                };
+                readonly description: "Confluence: space keys, for example [\"ENG\"]";
+            };
+        };
+        readonly required: readonly ["action"];
+        readonly additionalProperties: false;
+    };
+};
+export interface ScopeToolResult {
+    text: string;
+    [k: string]: unknown;
+}
+export declare function defaultScopeToolDeps(env: EnvironmentConfig): ScopeDeps;
+export declare function runScopeTool(args: Record<string, unknown> | undefined, env: EnvironmentConfig, injected?: ScopeDeps, o?: {
+    agent?: string;
+}): Promise<ScopeToolResult>;
+//# sourceMappingURL=mcp-scope.d.ts.map

package/dist/lib/mcp-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-scope.d.ts","sourceRoot":"","sources":["../../src/lib/mcp-scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,KAAK,SAAS,EAAqD,MAAM,YAAY,CAAC;AAK/F,eAAO,MAAM,UAAU,gBAAgB,CAAC;AACxC,eAAO,MAAM,aAAa,0BAA2B,CAAC;AACtD,2GAA2G;AAC3G,eAAO,MAAM,aAAa,mGAAoG,CAAC;AAM/H,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0BpB,CAAC;AAEX,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE;AAIvE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,iBAAiB,GAAG,SAAS,CAItE;AAED,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EACzC,GAAG,EAAE,iBAAiB,EACtB,QAAQ,CAAC,EAAE,SAAS,EACpB,CAAC,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GACzB,OAAO,CAAC,eAAe,CAAC,CAoB1B"}

package/dist/lib/mcp-scope.js

@@ -0,0 +1,125 @@
+import { ScopeRefusal, setScope, viewScopes } from './scope.js';
+import { UNKNOWN_AGENT } from './mcp/tool-rules.js';
+import { realScopeDeps } from './scope-real.js';
+import { SCOPED_SOURCES } from './scope-values.js';
+export const SCOPE_TOOL = 'align_scope';
+export const SCOPE_ACTIONS = ['view', 'set'];
+/** Every source that can be connected, so Zoom gets its own honest refusal instead of "unknown source". */
+export const SCOPE_SOURCES = ['github', 'jira', 'confluence', 'slack', 'teams', 'gitlab', 'linear', 'notion', 'zoom'];
+/** The one value property each source takes for a team scope. */
+const VALUE_PROPERTY = { github: 'repo', jira: 'projects', linear: 'teams', gitlab: 'gitlab_project', confluence: 'spaces' };
+const VALUE_PROPERTIES = Object.values(VALUE_PROPERTY);
+export const SCOPE_TOOL_SCHEMA = {
+    name: SCOPE_TOOL,
+    annotations: { readOnlyHint: false, destructiveHint: false },
+    description: 'See, or change, what the sources the user has ALREADY connected read into the local graph on this machine: only their own items, or everyone\'s in one named GitHub repo, Jira project, Linear team, GitLab project or Confluence space that their token can see. ' +
+        'action "view" lists each connected source\'s scope (and any change waiting for the person); use it when asked what is read or why teammates\' items are missing. ' +
+        'action "set" changes one source; offer it when the user asks to include their team\'s items, or to go back to only their own. ' +
+        'Widening re-reads that source\'s history on its next sync (a few minutes; the reply says how far back). ' +
+        'It deletes nothing and reads other people\'s items onto this machine only. A team change you make WAITS: nothing reads it, in the background or via align_sync, until a person runs `align sync <source>` at a terminal, which shows what it reads and asks (default No). Tell them so, with the reply\'s disclosure sentence in your own words. That prompt is a speed bump, not proof of consent: an agent with shell access could answer it from a pseudo-terminal, and you must never do that. Narrowing to their own items is immediate. ' +
+        'Zoom is only the user\'s own; Slack, Notion and Teams already read all their token can see. ' +
+        'It never takes a token or key: for a source that is not connected, or whose saved token was refused, the reply gives the exact `align connect <source>` command for the user to run themselves. Do not ask the user to paste a token into the chat.',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            action: { type: 'string', enum: [...SCOPE_ACTIONS], description: 'view: show the scopes. set: change one source\'s scope' },
+            source: { type: 'string', enum: [...SCOPE_SOURCES], description: 'With "set": which connected source to change' },
+            scope: { type: 'string', enum: ['yours', 'team'], description: 'With "set": "yours" goes back to only the user\'s own items. "team" is implied by passing the source\'s value below' },
+            repo: { type: 'string', description: 'GitHub: the repo as owner/repo' },
+            projects: { type: 'array', items: { type: 'string' }, description: 'Jira: project keys, for example ["ALI","OPS"]' },
+            teams: { type: 'array', items: { type: 'string' }, description: 'Linear: team keys, for example ["ENG"]' },
+            gitlab_project: { type: 'string', description: 'GitLab: the project id or group/project path' },
+            spaces: { type: 'array', items: { type: 'string' }, description: 'Confluence: space keys, for example ["ENG"]' },
+        },
+        required: ['action'],
+        additionalProperties: false,
+    },
+};
+const KNOWN = new Set(Object.keys(SCOPE_TOOL_SCHEMA.inputSchema.properties));
+export function defaultScopeToolDeps(env) {
+    const dbPath = env.localDbPath;
+    if (!dbPath)
+        throw new Error(`${SCOPE_TOOL} needs the local graph path, and this server has none configured.`);
+    return realScopeDeps(dbPath);
+}
+export async function runScopeTool(args, env, injected, o = {}) {
+    const input = args ?? {};
+    const unknownKeys = Object.keys(input).filter((k) => !KNOWN.has(k));
+    if (unknownKeys.length) {
+        // Neither the values NOR the key names: a token pasted as a property name must not be echoed into the transcript it was typed into.
+        throw new Error(`${SCOPE_TOOL} does not accept ${unknownKeys.length === 1 ? 'an unknown property' : `${unknownKeys.length} unknown properties`} (the name is not printed back). It never accepts a token or key: the person connects a source themselves with \`align connect <source>\`.`);
+    }
+    const action = input['action'];
+    if (action !== 'view' && action !== 'set')
+        throw new Error(`${SCOPE_TOOL} requires "action", one of: ${SCOPE_ACTIONS.join(', ')}. Call it again with one of those.`);
+    if (env.mode !== 'local-embedded') {
+        throw new Error(`${SCOPE_TOOL} edits what the local graph on this machine reads, and this server reads a hosted Align graph. ` +
+            'Use the local Align server (align mcp --env local); a hosted graph reads what its connectors are set up to read.');
+    }
+    const deps = injected ?? defaultScopeToolDeps(env);
+    if (action === 'view')
+        return view(deps);
+    return set(input, deps, o.agent ?? UNKNOWN_AGENT);
+}
+async function view(deps) {
+    const sources = await viewScopes(deps);
+    if (sources.length === 0) {
+        return { text: 'No source is connected, so there is no scope to show. Connecting needs a token only the person can supply. Ask them to run: align connect <source>', sources: [] };
+    }
+    const name = (s) => s.charAt(0).toUpperCase() + s.slice(1);
+    const lines = sources.map((s) => `${name(s.source)}: ${s.label}${s.origin === 'detected' ? " (from this folder's git remote)" : ''}.`);
+    return { text: lines.join('\n'), sources };
+}
+/** The schema says which are lists (projects, teams, spaces) and which are one text value (repo, gitlab_project): hold the input to it. */
+function valueOf(property, v) {
+    const one = property === 'repo' || property === 'gitlab_project';
+    if (one && typeof v === 'string')
+        return v;
+    if (!one && Array.isArray(v) && v.every((x) => typeof x === 'string'))
+        return v;
+    throw new Error(`${SCOPE_TOOL} "${property}" must be ${one ? 'one text value' : 'a list of text values'}.`);
+}
+async function set(input, deps, agent) {
+    const source = input['source'];
+    if (source === undefined)
+        throw new Error(`${SCOPE_TOOL} requires "source" with action "set", one of: ${SCOPE_SOURCES.join(', ')}.`);
+    if (typeof source !== 'string' || !SCOPE_SOURCES.includes(source)) {
+        throw new Error(`${SCOPE_TOOL} "source" must be one of: ${SCOPE_SOURCES.join(', ')}.`);
+    }
+    const scope = input['scope'];
+    if (scope !== undefined && scope !== 'yours' && scope !== 'team')
+        throw new Error(`${SCOPE_TOOL} "scope" must be "yours" or "team".`);
+    const wanted = SCOPED_SOURCES.includes(source) ? VALUE_PROPERTY[source] : undefined;
+    const given = VALUE_PROPERTIES.filter((p) => input[p] !== undefined);
+    const wrong = given.filter((p) => p !== wanted);
+    if (wanted !== undefined && wrong.length > 0)
+        throw new Error(`${SCOPE_TOOL} for ${source} takes "${wanted}", not "${wrong[0]}".`);
+    let change;
+    if (scope === 'yours') {
+        if (given.length > 0)
+            throw new Error(`${SCOPE_TOOL} takes either scope "yours" or a value to read, not both.`);
+        change = { scope: 'yours' };
+    }
+    else if (wanted === undefined) {
+        // Zoom, Slack, Notion, Teams: setScope refuses with the honest reason for that source.
+        change = { scope: 'team', values: [] };
+    }
+    else {
+        if (input[wanted] === undefined)
+            throw new Error(`${SCOPE_TOOL} for ${source} needs "${wanted}" to name what to read, or scope "yours" to go back to the user's own items.`);
+        change = { scope: 'team', values: valueOf(wanted, input[wanted]) };
+    }
+    try {
+        const r = await setScope(deps, source, change, { via: 'mcp', agent });
+        return {
+            text: [r.text, r.disclosure].filter((x) => x !== undefined && x !== '').join(' '),
+            source: r.source, scope: r.scope, scope_key: r.scopeKey, new_scope: r.newRow, pending: r.pending === true,
+        };
+    }
+    catch (e) {
+        if (e instanceof ScopeRefusal)
+            throw new Error(e.message);
+        throw e;
+    }
+}
+//# sourceMappingURL=mcp-scope.js.map

package/dist/lib/mcp-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-scope.js","sourceRoot":"","sources":["../../src/lib/mcp-scope.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAkB,YAAY,EAAiB,QAAQ,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC/F,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CAAC;AACxC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,KAAK,CAAU,CAAC;AACtD,2GAA2G;AAC3G,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAU,CAAC;AAE/H,iEAAiE;AACjE,MAAM,cAAc,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,QAAQ,EAAW,CAAC;AACtI,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;AAEvD,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE;IAC5D,WAAW,EACT,oQAAoQ;QACpQ,mKAAmK;QACnK,gIAAgI;QAChI,0GAA0G;QAC1G,ghBAAghB;QAChhB,8FAA8F;QAC9F,qPAAqP;IACvP,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,aAAa,CAAC,EAAE,WAAW,EAAE,wDAAwD,EAAE;YAC3H,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,aAAa,CAAC,EAAE,WAAW,EAAE,8CAA8C,EAAE;YACjH,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,qHAAqH,EAAE;YACtL,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;YACvE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,+CAA+C,EAAE;YACpH,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,wCAAwC,EAAE;YAC1G,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8CAA8C,EAAE;YAC/F,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,6CAA6C,EAAE;SACjH;QACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;QACpB,oBAAoB,EAAE,KAAK;KAC5B;CACO,CAAC;AAIX,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC;AAE7E,MAAM,UAAU,oBAAoB,CAAC,GAAsB;IACzD,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC;IAC/B,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,mEAAmE,CAAC,CAAC;IAC/G,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAyC,EACzC,GAAsB,EACtB,QAAoB,EACpB,IAAwB,EAAE;IAE1B,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC;IACzB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;QACvB,oIAAoI;QACpI,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,oBAAoB,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,qBAAqB,4IAA4I,CAC3Q,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,+BAA+B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IACrK,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,iGAAiG;YAC9G,kHAAkH,CACnH,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,IAAI,aAAa,CAAC,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAe;IACjC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,oJAAoJ,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrL,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACvI,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;AAC7C,CAAC;AAED,2IAA2I;AAC3I,SAAS,OAAO,CAAC,QAAgB,EAAE,CAAU;IAC3C,MAAM,GAAG,GAAG,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,gBAAgB,CAAC;IACjE,IAAI,GAAG,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QAAE,OAAO,CAAa,CAAC;IAC5F,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,KAAK,QAAQ,aAAa,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,uBAAuB,GAAG,CAAC,CAAC;AAC9G,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,KAA8B,EAAE,IAAe,EAAE,KAAa;IAC/E,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,iDAAiD,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAE,aAAmC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,6BAA6B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,qCAAqC,CAAC,CAAC;IAEtI,MAAM,MAAM,GAAI,cAAoC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAqC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1I,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,QAAQ,MAAM,WAAW,MAAM,WAAW,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAEnI,IAAI,MAAgB,CAAC;IACrB,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QACtB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,2DAA2D,CAAC,CAAC;QAChH,MAAM,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC9B,CAAC;SAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,uFAAuF;QACvF,MAAM,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,QAAQ,MAAM,WAAW,MAAM,8EAA8E,CAAC,CAAC;QAC7K,MAAM,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;IACrE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,OAAO;YACL,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YACjF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,KAAK,IAAI;SAC1G,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC"}

package/dist/lib/mcp-sync.d.ts

@@ -0,0 +1,64 @@
+import type { EnvironmentConfig } from './config.js';
+import { estimateClassify } from './sync/classify.js';
+import { type StatusDeps } from './sync/status.js';
+export declare const SYNC_TOOL = "align_sync";
+export declare const SYNC_ACTIONS: readonly ["status", "run", "classify_estimate"];
+export declare const SYNC_TOOL_SCHEMA: {
+    readonly name: "align_sync";
+    readonly annotations: {
+        readonly readOnlyHint: false;
+        readonly destructiveHint: false;
+    };
+    readonly description: string;
+    readonly inputSchema: {
+        readonly type: "object";
+        readonly properties: {
+            readonly action: {
+                readonly type: "string";
+                readonly enum: readonly ["status", "run", "classify_estimate"];
+                readonly description: "What to do";
+            };
+            readonly source: {
+                readonly type: "string";
+                readonly enum: readonly ["github", "jira", "confluence", "slack", "teams", "gitlab", "linear", "notion"];
+                readonly description: "With \"run\": only this source. Default: every connected source";
+            };
+            readonly max: {
+                readonly type: "integer";
+                readonly minimum: 1;
+                readonly maximum: 1000;
+                readonly description: "With \"classify_estimate\": how many items the person would classify (default 25)";
+            };
+        };
+        readonly required: readonly ["action"];
+        readonly additionalProperties: false;
+    };
+};
+export interface SyncToolDeps {
+    dbPath: string;
+    status: StatusDeps;
+    needsReauth(source: string): boolean;
+    syncRunning(source: string): boolean;
+    backfillRunning(source: string): boolean;
+    /** Take a slot per source SYNCHRONOUSLY, before the child exists (MCP does not queue calls, so parallel `run`s would all pass
+     *  the lock check and start a child each). All or none: a refusal names the sources that are taken. */
+    reserve?(sources: string[]): {
+        ok: true;
+        release(): void;
+    } | {
+        ok: false;
+        busy: string[];
+    };
+    start(sources: string[]): Promise<{
+        ok: boolean;
+        pid?: number;
+    }>;
+    estimate: typeof estimateClassify;
+}
+export interface SyncToolResult {
+    text: string;
+    [k: string]: unknown;
+}
+export declare function defaultSyncDeps(env: EnvironmentConfig): SyncToolDeps;
+export declare function runSyncTool(args: Record<string, unknown> | undefined, env: EnvironmentConfig, injected?: SyncToolDeps): Promise<SyncToolResult>;
+//# sourceMappingURL=mcp-sync.d.ts.map

package/dist/lib/mcp-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-sync.d.ts","sourceRoot":"","sources":["../../src/lib/mcp-sync.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAKtD,OAAO,EAAkD,KAAK,UAAU,EAAc,MAAM,kBAAkB,CAAC;AAE/G,eAAO,MAAM,SAAS,eAAe,CAAC;AACtC,eAAO,MAAM,YAAY,iDAAkD,CAAC;AAI5E,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmBnB,CAAC;AAEX,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;IACnB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACrC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACrC,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACzC;2GACuG;IACvG,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,OAAO,IAAI,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC3F,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjE,QAAQ,EAAE,OAAO,gBAAgB,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE;AAEtE,wBAAgB,eAAe,CAAC,GAAG,EAAE,iBAAiB,GAAG,YAAY,CA+BpE;AAMD,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAAE,GAAG,EAAE,iBAAiB,EAAE,QAAQ,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAmDrJ"}