@aligndottech/cli 0.48.0 → 0.50.0

package/dist/lib/share/ledger.js

@@ -0,0 +1,135 @@
+/**
+ * L9: reads and writes of `promotions` (schema v10), the record of what this machine shared where.
+ *
+ * Same pattern as curation/judgements-db.ts: every function opens its own short-lived handle so the
+ * MCP server, a sync child and the share command can all be live, and a reader never creates a
+ * missing graph file. A pre-v10 file reads as "nothing shared".
+ */
+import fs from 'node:fs';
+import { DatabaseSync } from 'node:sqlite';
+import { assertSchemaSupported } from '../local-db-migrate.js';
+import { LEDGER_COLUMNS } from '../local-db-v10.js';
+function parseSent(raw) {
+    try {
+        const v = JSON.parse(raw);
+        return Array.isArray(v) ? v.filter((x) => typeof x === 'string') : [];
+    }
+    catch {
+        return [];
+    }
+}
+const fromRow = (r) => ({
+    localId: r.local_id, env: r.env, tenantId: r.tenant_id, remoteId: r.remote_id, contentHash: r.content_hash,
+    matched: r.matched === 1, clientKey: r.client_key, sent: parseSent(r.sent), confirmPending: r.confirm_pending === 1, sharedAt: r.shared_at, retractedAt: r.retracted_at,
+});
+function withDb(dbPath, fn) {
+    const db = new DatabaseSync(dbPath);
+    try {
+        db.exec('PRAGMA busy_timeout = 30000');
+        assertSchemaSupported(db.prepare('PRAGMA user_version').get().user_version);
+        return fn(db);
+    }
+    finally {
+        db.close();
+    }
+}
+function readDb(dbPath, fallback, fn) {
+    if (dbPath === '' || !fs.existsSync(dbPath))
+        return fallback;
+    return withDb(dbPath, (db) => {
+        try {
+            return fn(db);
+        }
+        catch (e) {
+            if (/no such table/i.test(e.message))
+                return fallback;
+            throw e;
+        }
+    });
+}
+export function getPromotion(dbPath, localId, env, tenantId) {
+    return readDb(dbPath, null, (db) => {
+        const r = db.prepare('SELECT * FROM promotions WHERE local_id = ? AND env = ? AND tenant_id = ?').get(localId, env, tenantId);
+        return r ? fromRow(r) : null;
+    });
+}
+/** A row `align push` left before the ledger existed: it names no workspace. */
+export function getLegacyPromotion(dbPath, localId, env) {
+    return getPromotion(dbPath, localId, env, 'legacy');
+}
+/** Insert, or replace the hash and remote id of an existing row; a re-share clears an earlier retraction. */
+export function recordPromotion(dbPath, p) {
+    withDb(dbPath, (db) => {
+        db.prepare(`INSERT INTO promotions (local_id, env, tenant_id, remote_id, content_hash, matched, client_key, sent, confirm_pending) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+       ON CONFLICT (local_id, env, tenant_id) DO UPDATE SET
+         remote_id = excluded.remote_id, content_hash = excluded.content_hash, matched = excluded.matched,
+         client_key = excluded.client_key, sent = excluded.sent, confirm_pending = excluded.confirm_pending,
+         shared_at = datetime('now'), retracted_at = NULL`).run(p.localId, p.env, p.tenantId, p.remoteId, p.contentHash, p.matched ? 1 : 0, p.clientKey, JSON.stringify([...new Set(p.sent)]), p.confirmPending ? 1 : 0);
+    });
+}
+const UPSERT = `INSERT INTO promotions (local_id, env, tenant_id, remote_id, content_hash, matched, client_key, sent, confirm_pending) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+       ON CONFLICT (local_id, env, tenant_id) DO UPDATE SET
+         remote_id = excluded.remote_id, content_hash = excluded.content_hash, matched = excluded.matched,
+         client_key = excluded.client_key, sent = excluded.sent, confirm_pending = excluded.confirm_pending,
+         shared_at = datetime('now'), retracted_at = NULL`;
+/** Several rows in ONE transaction: all of them land or none do. */
+export function recordPromotions(dbPath, rows) {
+    if (rows.length === 0)
+        return;
+    withDb(dbPath, (db) => {
+        const up = db.prepare(UPSERT);
+        db.exec('BEGIN IMMEDIATE');
+        try {
+            for (const p of rows)
+                up.run(p.localId, p.env, p.tenantId, p.remoteId, p.contentHash, p.matched ? 1 : 0, p.clientKey, JSON.stringify([...new Set(p.sent)]), p.confirmPending ? 1 : 0);
+            db.exec('COMMIT');
+        }
+        catch (e) {
+            db.exec('ROLLBACK');
+            throw e;
+        }
+    });
+}
+export function markRetracted(dbPath, localId, env, tenantId) {
+    withDb(dbPath, (db) => {
+        db.prepare(`UPDATE promotions SET retracted_at = datetime('now') WHERE local_id = ? AND env = ? AND tenant_id = ?`).run(localId, env, tenantId);
+    });
+}
+/** Every live (not retracted) share into one workspace, keyed by local id. */
+export function listPromotions(dbPath, env, tenantId) {
+    return readDb(dbPath, new Map(), (db) => new Map(db.prepare('SELECT * FROM promotions WHERE env = ? AND tenant_id = ? AND retracted_at IS NULL').all(env, tenantId)
+        .map((r) => [r.local_id, fromRow(r)])));
+}
+/** Every ledger row, raw, so a reset can carry the record of what was shared across a wipe. [] when there is none. */
+export function exportLedger(dbPath) {
+    return readDb(dbPath, [], (db) => db.prepare('SELECT * FROM promotions').all());
+}
+/** Put exported rows back (replay-safe: the key is the table's primary key). */
+export function restoreLedger(dbPath, rows) {
+    if (rows.length === 0)
+        return;
+    withDb(dbPath, (db) => {
+        const ins = db.prepare(`INSERT OR REPLACE INTO promotions (local_id, env, tenant_id, remote_id, content_hash, matched, client_key, sent, confirm_pending, shared_at, retracted_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`);
+        db.exec('BEGIN IMMEDIATE');
+        try {
+            for (const r of rows)
+                ins.run(r.local_id, r.env, r.tenant_id, r.remote_id, r.content_hash, r.matched, r.client_key, r.sent, r.confirm_pending, r.shared_at, r.retracted_at);
+            db.exec('COMMIT');
+        }
+        catch (e) {
+            db.exec('ROLLBACK');
+            throw e;
+        }
+    });
+}
+/** True when the ledger table has every column this code uses. A share checks it BEFORE any request. */
+export function ledgerReady(dbPath) {
+    if (!fs.existsSync(dbPath))
+        return false;
+    return withDb(dbPath, (db) => {
+        const cols = new Set(db.prepare('PRAGMA table_info(promotions)').all().map((c) => c.name));
+        return LEDGER_COLUMNS.every((c) => cols.has(c));
+    });
+}
+//# sourceMappingURL=ledger.js.map

package/dist/lib/share/ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.js","sourceRoot":"","sources":["../../../src/lib/share/ledger.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAmCpD,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QACrC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACxB,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,CAAY,EAAa,EAAE,CAAC,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC,YAAY;IAC1G,OAAO,EAAE,CAAC,CAAC,OAAO,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,eAAe,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC,YAAY;CACxK,CAAC,CAAC;AAEH,SAAS,MAAM,CAAI,MAAc,EAAE,EAA2B;IAC5D,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,EAAE,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACvC,qBAAqB,CAAE,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAA+B,CAAC,YAAY,CAAC,CAAC;QAC1G,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAI,MAAc,EAAE,QAAW,EAAE,EAA2B;IACzE,IAAI,MAAM,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7D,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE;QAC3B,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,gBAAgB,CAAC,IAAI,CAAE,CAAW,CAAC,OAAO,CAAC;gBAAE,OAAO,QAAQ,CAAC;YACjE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,OAAe,EAAE,GAAW,EAAE,QAAgB;IACzF,OAAO,MAAM,CAAmB,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE;QACnD,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,2EAA2E,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAA0B,CAAC;QACvJ,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,OAAe,EAAE,GAAW;IAC7E,OAAO,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;AACtD,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,CAAiB;IAC/D,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE;QACpB,EAAE,CAAC,OAAO,CACR;;;;0DAIoD,CACrD,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjK,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,MAAM,GAAG;;;;0DAI2C,CAAC;AAE3D,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,IAA+B;IAC9E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE;QACpB,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9B,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC3B,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,IAAI,IAAI;gBAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACtL,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAAC,MAAM,CAAC,CAAC;QAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,OAAe,EAAE,GAAW,EAAE,QAAgB;IAC1F,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE;QACpB,EAAE,CAAC,OAAO,CAAC,uGAAuG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAClJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,GAAW,EAAE,QAAgB;IAC1E,OAAO,MAAM,CAAyB,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CACrE,EAAE,CAAC,OAAO,CAAC,mFAAmF,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAA4B;SAC3I,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAU,CAAC,CACjD,CAAC,CAAC;AACL,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO,MAAM,CAAc,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,GAAG,EAA4B,CAAC,CAAC;AACzH,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,IAA0B;IACtE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE;QACpB,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CACpB;gDAC0C,CAC3C,CAAC;QACF,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC3B,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,IAAI,IAAI;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;YAC5K,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAAC,MAAM,CAAC,CAAC;QAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE;QAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAE,EAAE,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC,GAAG,EAA8B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACxH,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/share/payload.d.ts

@@ -0,0 +1,92 @@
+import type { DecisionRow } from '../local-db.js';
+import type { JudgementRow } from '../curation/judgements-db.js';
+/** The gateway's per-item cap (MAX_JUDGEMENTS_PER_ITEM). Over it the batch is refused whole, so we cut first. */
+export declare const MAX_SHARED_JUDGEMENTS = 50;
+export type WireKind = 'ratify' | 'conflict_verdict' | 'check_verdict' | 'supersede' | 'not_a_decision' | 'note';
+export interface WireJudgement {
+    kind: WireKind;
+    value?: 'true_positive' | 'false_positive';
+    note?: string;
+    counterpart_id?: string;
+    judged_at: string;
+    origin: 'local_share' | 'local_share_mcp';
+    agent?: string;
+    confirm_team_text_hash?: string;
+}
+export interface WireItem {
+    source_url: string;
+    platform: string;
+    title: string;
+    /** Sent explicitly: the server keeps the caller's summary only when it is given (its extraction may rewrite the title). */
+    summary: string;
+    raw_text: string;
+    client_key: string;
+    created_at?: string;
+    judgements: WireJudgement[];
+}
+/** A judgement as the preview lists it: the wire form plus what a person needs to read it. */
+export interface ShownJudgement {
+    wire: WireJudgement;
+    /** Identity of this judgement for "already sent" (never includes the confirmation hash). */
+    hash: string;
+    via: 'cli' | 'mcp';
+    agentId: string | null;
+    counterpartTitle: string | null;
+}
+export interface LeftLocal {
+    kind: WireKind;
+    why: 'counterpart_not_shared' | 'over_limit';
+    counterpartTitle: string | null;
+}
+export interface SharePayload {
+    localId: string;
+    item: WireItem;
+    shown: ShownJudgement[];
+    leftLocal: LeftLocal[];
+    /** Pair judgements whose counterpart is not on the team graph YET: sendable once it is. */
+    deferredPairs: Array<{
+        row: JudgementRow;
+        counterpartLocalId: string;
+    }>;
+    /** Hash of the item AS SENT (only judgements not already sent). Binds a confirmation code. */
+    hash: string;
+    /** Hash of the item with EVERY judgement: what the ledger remembers, so an unchanged share is "already shared". */
+    fullHash: string;
+}
+export interface BuildInput {
+    row: DecisionRow;
+    /** This judge's rows that name the decision (either end), tombstones already excluded by the reader. */
+    judgements: JudgementRow[];
+    /** The team graph's id for a local decision this machine already shared, if any. */
+    remoteIdOf: (localId: string) => string | undefined;
+    titleOf: (localId: string) => string | null;
+    /** The opaque idempotency key: the one stored at the first share, else clientKeyFor(...). */
+    clientKey: string;
+    /** The install's private share salt, for the opaque local-only source URL. */
+    salt: string;
+    /** Hashes of judgements this workspace already stored; they are not sent (or shown) again. */
+    alreadySent: ReadonlySet<string>;
+}
+/**
+ * The idempotency key the server wants (a UUID), as an opaque hash of this install's secret salt and the
+ * local id. The raw local id never leaves the machine and two installs cannot be linked by it. It is
+ * derived ONCE: the caller stores it in the ledger at the first share and reuses that value, so a later
+ * change of local id (a twin fold) cannot mint a second key and a second team decision.
+ */
+export declare function clientKeyFor(salt: string, localId: string): string;
+/**
+ * A local row with no source URL still needs one on the wire. The raw local id never leaves the machine, so it is
+ * `align-local://decision/<hash of the share salt and the id>`. Matching by source key ignores this form (it names
+ * no connector item), and the server's identity for a share is (workspace, user, client_key), not the URL, so
+ * changing this form from the older raw-id one cannot mint a second team decision for a decision shared before.
+ */
+export declare function shareSourceUrl(row: {
+    id: string;
+    sourceUrl: string | null;
+}, salt: string): string;
+/** sha256 of the item with its keys sorted: the same payload hashes the same wherever it was built. */
+export declare function hashItem(item: WireItem): string;
+/** A judgement's identity for "already sent": its wire form without the confirmation hash. */
+export declare function judgementHash(w: WireJudgement): string;
+export declare function buildSharePayload(input: BuildInput): SharePayload;
+//# sourceMappingURL=payload.d.ts.map

package/dist/lib/share/payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../src/lib/share/payload.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAEjE,iHAAiH;AACjH,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,kBAAkB,GAAG,eAAe,GAAG,WAAW,GAAG,gBAAgB,GAAG,MAAM,CAAC;AAEjH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,CAAC,EAAE,eAAe,GAAG,gBAAgB,CAAC;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,GAAG,iBAAiB,CAAC;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,QAAQ;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,2HAA2H;IAC3H,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,aAAa,EAAE,CAAC;CAC7B;AAED,8FAA8F;AAC9F,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,aAAa,CAAC;IACpB,4FAA4F;IAC5F,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,KAAK,GAAG,KAAK,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,QAAQ,CAAC;IACf,GAAG,EAAE,wBAAwB,GAAG,YAAY,CAAC;IAC7C,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,2FAA2F;IAC3F,aAAa,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,YAAY,CAAC;QAAC,kBAAkB,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxE,8FAA8F;IAC9F,IAAI,EAAE,MAAM,CAAC;IACb,mHAAmH;IACnH,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,WAAW,CAAC;IACjB,wGAAwG;IACxG,UAAU,EAAE,YAAY,EAAE,CAAC;IAC3B,oFAAoF;IACpF,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACpD,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAC5C,6FAA6F;IAC7F,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,IAAI,EAAE,MAAM,CAAC;IACb,8FAA8F;IAC9F,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAClC;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAGlE;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAGlG;AAYD,uGAAuG;AACvG,wBAAgB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAE/C;AAED,8FAA8F;AAC9F,wBAAgB,aAAa,CAAC,CAAC,EAAE,aAAa,GAAG,MAAM,CAGtD;AAoBD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,YAAY,CAuDjE"}

package/dist/lib/share/payload.js

@@ -0,0 +1,138 @@
+/**
+ * L9: the ONE builder of what `align share` sends. The preview, the confirmation code's hash and
+ * the request body all come from the object this returns, so the preview cannot show something other
+ * than what is sent (a test compares the previewed JSON with the ingest argument).
+ *
+ * What leaves the machine, per decision: the title, the text (the summary, sent as `raw_text`), the
+ * source URL and platform, when it was decided, and the judgements below. What never does:
+ * - `judge_id` and `judge_label` (the git email): the server takes the person from the token, and a
+ *   label is personal data nobody asked for (Decision 11).
+ * - `context_key`, file paths, or a check verdict's scope: a check verdict goes as kind, value, time.
+ * - the local id as such: `client_key` is an OPAQUE key, a hash of this install's secret salt and the id (see
+ *   clientKeyFor), stored at the first share and reused, so the team graph cannot link a share back to a local id.
+ * - a verdict whose other decision is not on the team graph (it stays local, and the preview says so).
+ * - a tombstone (a verdict taken back, `value` NULL): the person withdrew it.
+ *
+ * Judgement mapping: local `real` is `true_positive`, `false` is `false_positive`. Ratification is
+ * read from the decision's own columns (Decision 14), never from `local_judgements`. A row an agent
+ * relayed goes as `origin: local_share_mcp` with the registry id as `agent`; the id 'unknown' is omitted.
+ */
+import { createHash } from 'node:crypto';
+/** The gateway's per-item cap (MAX_JUDGEMENTS_PER_ITEM). Over it the batch is refused whole, so we cut first. */
+export const MAX_SHARED_JUDGEMENTS = 50;
+/**
+ * The idempotency key the server wants (a UUID), as an opaque hash of this install's secret salt and the
+ * local id. The raw local id never leaves the machine and two installs cannot be linked by it. It is
+ * derived ONCE: the caller stores it in the ledger at the first share and reuses that value, so a later
+ * change of local id (a twin fold) cannot mint a second key and a second team decision.
+ */
+export function clientKeyFor(salt, localId) {
+    const h = createHash('sha256').update(`align-share-key\n${salt}\n${localId}`).digest('hex');
+    return `${h.slice(0, 8)}-${h.slice(8, 12)}-5${h.slice(13, 16)}-a${h.slice(17, 20)}-${h.slice(20, 32)}`;
+}
+/**
+ * A local row with no source URL still needs one on the wire. The raw local id never leaves the machine, so it is
+ * `align-local://decision/<hash of the share salt and the id>`. Matching by source key ignores this form (it names
+ * no connector item), and the server's identity for a share is (workspace, user, client_key), not the URL, so
+ * changing this form from the older raw-id one cannot mint a second team decision for a decision shared before.
+ */
+export function shareSourceUrl(row, salt) {
+    if (row.sourceUrl !== null)
+        return row.sourceUrl;
+    return `align-local://decision/${createHash('sha256').update(`align-share-url\n${salt}\n${row.id}`).digest('hex').slice(0, 32)}`;
+}
+const VALUE = { real: 'true_positive', false: 'false_positive' };
+function canonical(v) {
+    if (Array.isArray(v))
+        return `[${v.map(canonical).join(',')}]`;
+    if (v && typeof v === 'object') {
+        return `{${Object.entries(v).filter(([, x]) => x !== undefined).sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0)).map(([k, x]) => `${JSON.stringify(k)}:${canonical(x)}`).join(',')}}`;
+    }
+    return JSON.stringify(v) ?? 'null';
+}
+/** sha256 of the item with its keys sorted: the same payload hashes the same wherever it was built. */
+export function hashItem(item) {
+    return createHash('sha256').update(canonical(item)).digest('hex');
+}
+/** A judgement's identity for "already sent": its wire form without the confirmation hash. */
+export function judgementHash(w) {
+    const { confirm_team_text_hash: _c, ...rest } = w;
+    return createHash('sha256').update(canonical(rest)).digest('hex');
+}
+function wireFor(r, counterpart) {
+    const mcp = r.via === 'mcp';
+    const agent = mcp && r.agent_id && r.agent_id !== 'unknown' ? r.agent_id : undefined;
+    return {
+        kind: r.kind,
+        ...(r.value ? { value: VALUE[r.value] } : {}),
+        ...(r.kind === 'note' && r.note ? { note: r.note } : {}),
+        ...(counterpart ? { counterpart_id: counterpart } : {}),
+        judged_at: r.judged_at,
+        origin: mcp ? 'local_share_mcp' : 'local_share',
+        ...(agent ? { agent } : {}),
+    };
+}
+function shownOf(wire, via, agentId, counterpartTitle) {
+    return { wire, hash: judgementHash(wire), via, agentId, counterpartTitle };
+}
+export function buildSharePayload(input) {
+    const { row } = input;
+    const shown = [];
+    const leftLocal = [];
+    const deferredPairs = [];
+    if (row.ratifiedAt) {
+        shown.push(shownOf({ kind: 'ratify', judged_at: row.ratifiedAt, origin: 'local_share' }, 'cli', null, null));
+    }
+    const rows = [...input.judgements].sort((a, b) => (a.judged_at < b.judged_at ? -1 : a.judged_at > b.judged_at ? 1 : a.id < b.id ? -1 : 1));
+    for (const r of rows) {
+        // A withdrawn verdict is no verdict, whatever reader produced the list.
+        if (r.value === null && (r.kind === 'conflict_verdict' || r.kind === 'check_verdict'))
+            continue;
+        if (r.kind === 'conflict_verdict' || r.kind === 'supersede') {
+            if (r.counterpart_id === null)
+                continue;
+            // A supersede is directional: "decision_id replaces counterpart_id". It travels with the NEWER decision's share.
+            if (r.kind === 'supersede' && r.decision_id !== row.id)
+                continue;
+            const other = r.decision_id === row.id ? r.counterpart_id : r.decision_id;
+            const remote = input.remoteIdOf(other);
+            const counterpartTitle = input.titleOf(other);
+            if (!remote) {
+                leftLocal.push({ kind: r.kind, why: 'counterpart_not_shared', counterpartTitle });
+                deferredPairs.push({ row: r, counterpartLocalId: other });
+                continue;
+            }
+            shown.push(shownOf(wireFor(r, remote), r.via, r.agent_id, counterpartTitle));
+            continue;
+        }
+        if (r.decision_id !== row.id)
+            continue;
+        shown.push(shownOf(wireFor(r), r.via, r.agent_id, null));
+    }
+    // Everything the person has judged, whether or not it was sent before: the ledger's "unchanged" test reads this.
+    const everything = shown.map((x) => x.wire);
+    // What is SENT (and shown): only what this workspace has not stored yet, so a note is never posted twice.
+    const fresh = shown.filter((x) => !input.alreadySent.has(x.hash));
+    // The gateway refuses a whole batch over the cap, so cut here: the ratification first, then the newest.
+    let sending = fresh;
+    if (fresh.length > MAX_SHARED_JUDGEMENTS) {
+        const ratify = fresh.filter((x) => x.wire.kind === 'ratify');
+        const rest = fresh.filter((x) => x.wire.kind !== 'ratify');
+        const keep = new Set([...ratify, ...rest.slice(-(MAX_SHARED_JUDGEMENTS - ratify.length))]);
+        for (const dropped of fresh.filter((x) => !keep.has(x)))
+            leftLocal.push({ kind: dropped.wire.kind, why: 'over_limit', counterpartTitle: dropped.counterpartTitle });
+        sending = fresh.filter((x) => keep.has(x));
+    }
+    const base = {
+        source_url: shareSourceUrl(row, input.salt),
+        platform: row.platform,
+        title: row.title,
+        summary: row.summary,
+        raw_text: row.summary || row.title,
+        client_key: input.clientKey,
+        ...(row.decidedAt ? { created_at: row.decidedAt } : {}),
+    };
+    const item = { ...base, judgements: sending.map((x) => x.wire) };
+    return { localId: row.id, item, shown: sending, leftLocal, deferredPairs, hash: hashItem(item), fullHash: hashItem({ ...base, judgements: everything }) };
+}
+//# sourceMappingURL=payload.js.map

package/dist/lib/share/payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../src/lib/share/payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,iHAAiH;AACjH,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAuExC;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,OAAe;IACxD,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,oBAAoB,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5F,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;AACzG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,GAA6C,EAAE,IAAY;IACxF,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC,SAAS,CAAC;IACjD,OAAO,0BAA0B,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,oBAAoB,IAAI,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACnI,CAAC;AAED,MAAM,KAAK,GAAuD,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;AAErH,SAAS,SAAS,CAAC,CAAU;IAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/D,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,CAA4B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACnN,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;AACrC,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,QAAQ,CAAC,IAAc;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpE,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,aAAa,CAAC,CAAgB;IAC5C,MAAM,EAAE,sBAAsB,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;IAClD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,OAAO,CAAC,CAAe,EAAE,WAAoB;IACpD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC;IAC5B,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa;QAC/C,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5B,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,IAAmB,EAAE,GAAkB,EAAE,OAAsB,EAAE,gBAA+B;IAC/G,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAiB;IACjD,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IACtB,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,MAAM,SAAS,GAAgB,EAAE,CAAC;IAClC,MAAM,aAAa,GAAkC,EAAE,CAAC;IAExD,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/G,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3I,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,wEAAwE;QACxE,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC;YAAE,SAAS;QAChG,IAAI,CAAC,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC5D,IAAI,CAAC,CAAC,cAAc,KAAK,IAAI;gBAAE,SAAS;YACxC,iHAAiH;YACjH,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,EAAE;gBAAE,SAAS;YACjE,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;YAC1E,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACvC,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBAClF,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1D,SAAS;YACX,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC;YAC7E,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,EAAE;YAAE,SAAS;QACvC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,iHAAiH;IACjH,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5C,0GAA0G;IAC1G,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,wGAAwG;IACxG,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,KAAK,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3F,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACpK,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,IAAI,GAAG;QACX,UAAU,EAAE,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC;QAC3C,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK;QAClC,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC;IACF,MAAM,IAAI,GAAa,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;IAC3E,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AAC5J,CAAC"}

package/dist/lib/share/pending.d.ts

@@ -0,0 +1,48 @@
+import type { SharePayload } from './payload.js';
+export declare const PENDING_TTL_MS: number;
+export interface PendingShare {
+    code: string;
+    expiresAt: string;
+    agentId: string;
+    envName: string;
+    /** Hash over every payload hash, in order. */
+    hash: string;
+    localIds: string[];
+    /** The exact text previewed, so the confirmation re-renders what the agent's person was shown. */
+    preview: string;
+}
+/** Where a share goes: the workspace AND the gateway, so a code cannot be used after either changed. */
+export interface Binding {
+    tenantId: string;
+    gatewayUrl: string;
+}
+export declare function combinedHash(payloads: readonly SharePayload[], to: Binding): string;
+/**
+ * Issue a code. A live code for the SAME payload and destination is returned as it is (re-asking must not
+ * invalidate the one the person may already be typing); any other earlier code that names one of the same
+ * decisions is invalidated.
+ */
+export declare function issueCode(payloads: readonly SharePayload[], meta: {
+    agentId: string;
+    envName: string;
+    preview: string;
+    to: Binding;
+}, now?: Date): string | null;
+export type CodeCheck = {
+    ok: true;
+    pending: PendingShare;
+} | {
+    ok: false;
+    reason: 'malformed' | 'unknown' | 'expired';
+};
+/** Read a code without using it. An expired file is removed. */
+export declare function lookupCode(code: string, now?: Date): CodeCheck;
+/**
+ * Single use, and atomic: the file is RENAMED to a name only this call owns, and only the caller whose
+ * rename succeeded wins. Two racers cannot both pass an exists-then-delete check.
+ */
+export declare function consumeCode(code: string): boolean;
+export declare const PENDING_MAX_AGE_MS: number;
+/** Remove code files (and abandoned `.used` files) older than a day. Returns how many. Touches only its own directory. */
+export declare function sweepPending(now?: Date): number;
+//# sourceMappingURL=pending.d.ts.map

package/dist/lib/share/pending.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending.d.ts","sourceRoot":"","sources":["../../../src/lib/share/pending.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,eAAO,MAAM,cAAc,QAAiB,CAAC;AAG7C,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kGAAkG;IAClG,OAAO,EAAE,MAAM,CAAC;CACjB;AAaD,wGAAwG;AACxG,MAAM,WAAW,OAAO;IAAG,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE;AAEjE,wBAAgB,YAAY,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,EAAE,EAAE,EAAE,OAAO,GAAG,MAAM,CAEnF;AAMD;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,EAAE,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,OAAO,CAAA;CAAE,EAAE,GAAG,OAAa,GAAG,MAAM,GAAG,IAAI,CAmBtK;AAED,MAAM,MAAM,SAAS,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,SAAS,CAAA;CAAE,CAAC;AAEzH,gEAAgE;AAChE,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAa,GAAG,SAAS,CASpE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CASjD;AAED,eAAO,MAAM,kBAAkB,QAAsB,CAAC;AAEtD,0HAA0H;AAC1H,wBAAgB,YAAY,CAAC,GAAG,OAAa,GAAG,MAAM,CAYrD"}

package/dist/lib/share/pending.js

@@ -0,0 +1,130 @@
+/**
+ * L9: confirmation codes for a share an agent started (Decision 17, stage 1).
+ *
+ * `align_share` builds the preview, stores the exact payloads here under a short code, and returns
+ * the code. It never sends. A person completes it with `align share --confirm <code>` at a terminal.
+ * A code is single use, expires after 10 minutes, is bound to the payload hash (a changed local row
+ * is refused), and a new code for the same decisions invalidates the old one.
+ *
+ * Files live in `<state home>/align-cli/pending-shares/`, mode 0600 (they hold decision text), in a
+ * directory that is ours and private (alignStateDir's lstat checks refuse a planted link).
+ */
+import { randomBytes } from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { alignStateDir } from '../backfill-state.js';
+export const PENDING_TTL_MS = 10 * 60 * 1000;
+const CODE_RE = /^[a-z2-7]{10}$/;
+function dirOf() {
+    const base = alignStateDir();
+    if (base === null)
+        return null;
+    const dir = path.join(base, 'pending-shares');
+    try {
+        fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+        const st = fs.lstatSync(dir);
+        return st.isDirectory() && !st.isSymbolicLink() ? dir : null;
+    }
+    catch {
+        return null;
+    }
+}
+export function combinedHash(payloads, to) {
+    return [`to:${to.tenantId}@${to.gatewayUrl}`, ...payloads.map((p) => p.hash)].join('|');
+}
+function read(file) {
+    try {
+        return JSON.parse(fs.readFileSync(file, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Issue a code. A live code for the SAME payload and destination is returned as it is (re-asking must not
+ * invalidate the one the person may already be typing); any other earlier code that names one of the same
+ * decisions is invalidated.
+ */
+export function issueCode(payloads, meta, now = new Date()) {
+    const dir = dirOf();
+    if (dir === null)
+        return null;
+    const ids = payloads.map((p) => p.localId);
+    const hash = combinedHash(payloads, meta.to);
+    for (const f of fs.readdirSync(dir)) {
+        const old = read(path.join(dir, f));
+        if (!old || !old.localIds.some((i) => ids.includes(i)))
+            continue;
+        if (old.hash === hash && old.envName === meta.envName && Date.parse(old.expiresAt) > now.getTime())
+            return old.code;
+        fs.rmSync(path.join(dir, f), { force: true });
+    }
+    const alphabet = 'abcdefghijklmnopqrstuvwxyz234567';
+    const code = Array.from(randomBytes(10), (b) => alphabet[b % 32]).join('');
+    const rec = {
+        code, expiresAt: new Date(now.getTime() + PENDING_TTL_MS).toISOString(), agentId: meta.agentId, envName: meta.envName,
+        hash, localIds: ids, preview: meta.preview,
+    };
+    fs.writeFileSync(path.join(dir, `${code}.json`), JSON.stringify(rec), { mode: 0o600 });
+    return code;
+}
+/** Read a code without using it. An expired file is removed. */
+export function lookupCode(code, now = new Date()) {
+    if (!CODE_RE.test(code))
+        return { ok: false, reason: 'malformed' }; // never builds a path from free text
+    const dir = dirOf();
+    if (dir === null)
+        return { ok: false, reason: 'unknown' };
+    const file = path.join(dir, `${code}.json`);
+    const rec = read(file);
+    if (!rec)
+        return { ok: false, reason: 'unknown' };
+    if (Date.parse(rec.expiresAt) <= now.getTime()) {
+        fs.rmSync(file, { force: true });
+        return { ok: false, reason: 'expired' };
+    }
+    return { ok: true, pending: rec };
+}
+/**
+ * Single use, and atomic: the file is RENAMED to a name only this call owns, and only the caller whose
+ * rename succeeded wins. Two racers cannot both pass an exists-then-delete check.
+ */
+export function consumeCode(code) {
+    if (!CODE_RE.test(code))
+        return false;
+    const dir = dirOf();
+    if (dir === null)
+        return false;
+    const file = path.join(dir, `${code}.json`);
+    const mine = path.join(dir, `${code}.${process.pid}.${randomBytes(4).toString('hex')}.used`);
+    try {
+        fs.renameSync(file, mine);
+    }
+    catch {
+        return false;
+    }
+    fs.rmSync(mine, { force: true });
+    return true;
+}
+export const PENDING_MAX_AGE_MS = 24 * 60 * 60 * 1000;
+/** Remove code files (and abandoned `.used` files) older than a day. Returns how many. Touches only its own directory. */
+export function sweepPending(now = new Date()) {
+    const dir = dirOf();
+    if (dir === null)
+        return 0;
+    let n = 0;
+    for (const f of fs.readdirSync(dir)) {
+        if (!/\.(json|used)$/.test(f))
+            continue;
+        const file = path.join(dir, f);
+        try {
+            if (now.getTime() - fs.statSync(file).mtimeMs > PENDING_MAX_AGE_MS) {
+                fs.rmSync(file, { force: true });
+                n += 1;
+            }
+        }
+        catch { /* gone already */ }
+    }
+    return n;
+}
+//# sourceMappingURL=pending.js.map

package/dist/lib/share/pending.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending.js","sourceRoot":"","sources":["../../../src/lib/share/pending.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrD,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC7C,MAAM,OAAO,GAAG,gBAAgB,CAAC;AAcjC,SAAS,KAAK;IACZ,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAKD,MAAM,UAAU,YAAY,CAAC,QAAiC,EAAE,EAAW;IACzE,OAAO,CAAC,MAAM,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,UAAU,EAAE,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,IAAI,CAAC,IAAY;IACxB,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAiB,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAClG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,QAAiC,EAAE,IAAwE,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IACrJ,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;IACpB,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QACjE,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC;QACpH,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,QAAQ,GAAG,kCAAkC,CAAC;IACpD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAiB;QACxB,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,cAAc,CAAC,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO;QACrH,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO;KAC3C,CAAC;IACF,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvF,OAAO,IAAI,CAAC;AACd,CAAC;AAID,gEAAgE;AAChE,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IACvD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,qCAAqC;IACzG,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;IACpB,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAClD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAAC,CAAC;IAC9H,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;IACpB,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7F,IAAI,CAAC;QAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IAC1D,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtD,0HAA0H;AAC1H,MAAM,UAAU,YAAY,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE;IAC3C,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;IACpB,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC;IAC3B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,SAAS;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,kBAAkB,EAAE,CAAC;gBAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAAC,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;QACnH,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/lib/share/preview.d.ts

@@ -0,0 +1,18 @@
+import type { SharePayload } from './payload.js';
+export interface Destination {
+    /** The workspace name from the token's tenant. */
+    workspace: string;
+    env: string;
+    /** The signed-in account. */
+    email: string;
+    /** The gateway URL, present only when it is not the environment's default (an ALIGN_GATEWAY_URL override). */
+    gateway?: string;
+}
+export interface PreviewOptions {
+    /** Local ids this machine shared before: the preview says it is an update. */
+    updates?: ReadonlySet<string>;
+    /** Local ids an old `align push` sent without a workspace: a second share may make a second copy. */
+    legacy?: ReadonlySet<string>;
+}
+export declare function renderPreview(payloads: readonly SharePayload[], dest: Destination, opts?: PreviewOptions): string;
+//# sourceMappingURL=preview.d.ts.map

package/dist/lib/share/preview.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview.d.ts","sourceRoot":"","sources":["../../../src/lib/share/preview.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAa,YAAY,EAAkB,MAAM,cAAc,CAAC;AAE5E,MAAM,WAAW,WAAW;IAC1B,kDAAkD;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,6BAA6B;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,8GAA8G;IAC9G,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,8EAA8E;IAC9E,OAAO,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9B,qGAAqG;IACrG,MAAM,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC9B;AA4BD,wBAAgB,aAAa,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,GAAE,cAAmB,GAAG,MAAM,CAiCrH"}