@aligndottech/cli 0.49.0 → 0.50.0

package/dist/lib/local-thresholds.js

@@ -0,0 +1,79 @@
+/**
+ * The similarity thresholds the local graph ranks and links with. Moved verbatim out of
+ * local-gateway-client.ts (which re-exports every name, so no importer changes) so the link
+ * pass can use them without importing the client that calls it.
+ */
+/**
+ * Cosine floor for linking two decisions as related on ingest.
+ *
+ * Named CONFLICT_THRESHOLD until ALI-503, which was the same category error as the code
+ * it governed: the value decides similarity, and similarity is not opposition. The
+ * classifier prompt in local-relationship-classifier.ts says so directly - "high textual
+ * similarity alone is NOT a conflict" - and the link written here is `relates` because an
+ * embedding cannot tell agreement from opposition. Only a classifier reading both can, and
+ * its verdict is never persisted as a link.
+ */
+export const SIMILARITY_THRESHOLD = 0.65;
+/**
+ * Relevance floor for align_ask / align_search.
+ *
+ * Was an inline 0.1, the only unnamed threshold in this file and less than a quarter of
+ * its neighbours. It let align_ask answer "what happens when the brain service is down"
+ * with two unrelated decisions at 0.18 and 0.14 - noise the agent had to recognise by
+ * reading the decimals itself, and an audience cannot.
+ *
+ * 0.25 matches the gateway's own /decisions/smart-search floor, so the same question gets
+ * the same relevance bar in local and cloud mode. Lower than the 0.45 used for relatedness
+ * on purpose: search is a human asking a natural-language question, where a looser match is
+ * still worth showing, while relatedness is machinery acting on its own.
+ *
+ * An honest empty result is the point. "The graph has nothing on this" is a better answer
+ * than two wrong decisions, because the caller can act on it.
+ */
+export const SEARCH_THRESHOLD = 0.25;
+/**
+ * Candidate floor for ADJUDICATION - the path that then pays an LLM per candidate.
+ *
+ * Deliberately higher than the retrieval floor below, because this surface is expensive in
+ * three ways the hook is not: up to 5 sequential calls to the user's own provider, ~11s of
+ * latency, and an exit code. A keyless CI runner that gets `no-context` today exits 0; the
+ * moment retrieval finds anything it gets `unknown` and exits 2. And the classifier cannot
+ * reject a candidate - its vocabulary is ten positive relations with no "unrelated" - so a
+ * loose candidate that reaches it is reported rather than filtered.
+ *
+ * Deliberately NOT recalibrated with the retrieval floor. Measured on the corpus, 0.30 would
+ * recover four more related pairs here too, and that trade is a separate decision with a
+ * separate blast radius (see relatedness-calibration.test.ts).
+ */
+export const RELATES_THRESHOLD = 0.45;
+/**
+ * Candidate floor for RETRIEVAL ONLY (`depth: 'related'`, the agent editor hook).
+ *
+ * Measured, not chosen. Against fixtures/relatedness-corpus.json: 0.45 recovered 3 of 8 related
+ * pairs, 0.30 recovers 7 of 8, and neither admits a single unrelated pair. 0.25 scores the same
+ * 7 of 8, so the tie-break is margin over the worst false positive (0.2051): 0.30 clears it by
+ * 0.095 against 0.25's 0.045.
+ *
+ * 0.30 is also where this constant sat until commit 0cbef08 raised it to 0.45 inside a rename,
+ * unmentioned and unmeasured. So this is a revert with evidence attached rather than a new
+ * guess, and the evidence is a test that fails if the corpus stops supporting it.
+ *
+ * Safe to be looser here precisely because this path is cheap and honest: it returns above
+ * Stage 2, so it makes no provider call, and what the hook prints declines to assert anything
+ * ("related by content search and have NOT been adjudicated"). That is the same posture as
+ * `align search`, which has run at 0.25 all along - as has MCP `align_get_related_decisions`.
+ */
+export const RETRIEVAL_RELATES_THRESHOLD = 0.3;
+// ALI-785: the ABSOLUTE floor above is unreachable for cross-register pairs on
+// MiniLM-L6 - measured on a 403-decision six-source corpus, near-duplicates score
+// ~0.95, genuine cross-tool paraphrases 0.45-0.62, background noise 0.28-0.40, and
+// 0 of 1,729 links crossed a platform. So linking also takes each item's top few
+// neighbours RELATIVE to its own ranking, floored where the noise band ends. 0.45 is
+// the adjudication floor the product already uses elsewhere; text-cleaning schemes
+// were lab-tested first and moved nothing (title+cleaned scored 0.274 vs 0.286 raw).
+export const RELATED_TOP_K = 3;
+export const RELATED_FLOOR = RELATES_THRESHOLD;
+// Below this similarity between a decision and new content, the content is
+// considered to have drifted from the decision.
+export const DRIFT_THRESHOLD = 0.5;
+//# sourceMappingURL=local-thresholds.js.map

package/dist/lib/local-thresholds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-thresholds.js","sourceRoot":"","sources":["../../src/lib/local-thresholds.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AACzC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAEtC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAC/C,+EAA+E;AAC/E,kFAAkF;AAClF,mFAAmF;AACnF,iFAAiF;AACjF,qFAAqF;AACrF,mFAAmF;AACnF,qFAAqF;AACrF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC;AAC/B,MAAM,CAAC,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAE/C,2EAA2E;AAC3E,gDAAgD;AAChD,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC"}

package/dist/lib/mcp/mark-tool.d.ts

@@ -0,0 +1,27 @@
+import type { Judge } from '../curation/judgements-db.js';
+import type { EnvironmentConfig } from '../config.js';
+export declare const MARK_TOOL = "align_mark";
+/** What an agent may record. Hiding a decision, declaring one replaced and ratifying are the person's. */
+export declare const MARK_KINDS: readonly ["verdict", "note"];
+export declare const MARK_TOOL_SCHEMA: {
+    readonly name: "align_mark";
+    readonly annotations: {
+        readonly readOnlyHint: false;
+        readonly destructiveHint: true;
+    };
+    readonly description: string;
+    readonly inputSchema: Record<string, unknown>;
+};
+export interface MarkToolResult {
+    text: string;
+    [k: string]: unknown;
+}
+export interface MarkToolContext {
+    /** The MCP `initialize` clientInfo, as the SDK holds it. */
+    clientInfo?: {
+        name?: unknown;
+    };
+    judge?: () => Promise<Judge>;
+}
+export declare function runMarkTool(args: Record<string, unknown> | undefined, env: EnvironmentConfig, ctx?: MarkToolContext): Promise<MarkToolResult>;
+//# sourceMappingURL=mark-tool.d.ts.map

package/dist/lib/mcp/mark-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mark-tool.d.ts","sourceRoot":"","sources":["../../../src/lib/mcp/mark-tool.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AAE1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGtD,eAAO,MAAM,SAAS,eAAe,CAAC;AACtC,0GAA0G;AAC1G,eAAO,MAAM,UAAU,8BAA+B,CAAC;AAoBvD,eAAO,MAAM,gBAAgB;;;;;;;;CAWnB,CAAC;AAEX,MAAM,WAAW,cAAc;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE;AACtE,MAAM,WAAW,eAAe;IAC9B,4DAA4D;IAC5D,UAAU,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;CAC9B;AA+BD,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,GAAE,eAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAuBvJ"}

package/dist/lib/mcp/mark-tool.js

@@ -0,0 +1,103 @@
+/**
+ * LM: the MCP tool `align_mark` - the USER's judgement, recorded locally, relayed by their agent.
+ *
+ * What an agent may and may not do here:
+ * - It may record a verdict, a replacement, a "not a decision" and a note the user asked it to
+ *   record. Each row carries `via = 'mcp'` and the agent's registry id (or 'unknown'), so the
+ *   person sees later which answers came through an agent, and a share lists them separately.
+ * - It may NOT ratify. Ratifying is a person standing behind a decision; `align ratify` refuses
+ *   anything that is not a terminal. `kind: "ratify"` gets the command for the user instead.
+ * - It may NOT pass a token or key: the schema is closed.
+ * - Nothing is sent anywhere and no model is asked. The tool reads and writes the local file.
+ */
+import { applyJudgement, MarkError, MAX_CHECK_FILES, MAX_NOTE_CHARS } from '../curation/mark.js';
+import { defaultJudge } from '../curation/judge.js';
+import { agentIdFrom, cliCommandFor, jsonSchemaOf, strictInput } from './tool-rules.js';
+export const MARK_TOOL = 'align_mark';
+/** What an agent may record. Hiding a decision, declaring one replaced and ratifying are the person's. */
+export const MARK_KINDS = ['verdict', 'note'];
+const PERSON_ONLY = {
+    not_a_decision: (id) => `align mark ${id} not-a-decision`,
+    supersede: (id, other) => `align mark ${id} replaces ${other}`,
+    ratify: (id) => cliCommandFor('ratify', id),
+};
+const SPEC = {
+    tool: MARK_TOOL,
+    required: ['decision_id'],
+    properties: {
+        decision_id: { type: 'string', description: 'The decision the user is judging (its id from the check or from align_get_conflicts)', maxLength: 200 },
+        kind: { type: 'string', description: 'verdict (default) or note', enum: MARK_KINDS },
+        verdict: { type: 'string', description: 'With a verdict: real, or false (a false alarm), as the USER answered', enum: ['real', 'false'] },
+        counterpart_id: { type: 'string', description: 'A stored conflict: the other decision of the pair. ', maxLength: 200 },
+        check_files: { type: 'array', description: 'A check hit: the files the check covered, exactly as the check result listed them', maxItems: MAX_CHECK_FILES, itemMaxLength: 1024 },
+        text: { type: 'string', description: 'With note: the note', maxLength: MAX_NOTE_CHARS },
+    },
+};
+export const MARK_TOOL_SCHEMA = {
+    name: MARK_TOOL,
+    annotations: { readOnlyHint: false, destructiveHint: true },
+    description: 'Record the USER\'s judgement in the local graph on this machine. After a conflict from align_check_alignment or align_get_conflicts, ASK the user "Was that a real conflict?" and pass their answer; never decide for them. ' +
+        'For a check hit: decision_id + verdict (real or false) + check_files (the files the check covered, as the check result lists them); a false verdict hides that decision only for a later check of the same files. ' +
+        'For a stored conflict: decision_id + counterpart_id + verdict. ' +
+        'Also kind note (text: one line of plain text, 500 characters at most). ' +
+        'Each is recorded as passed on by you, under your agent name; the user sees it labelled that way, a hit you hide is shown as hidden by you, and every check says so. Nothing is shared or sent; sharing is a separate step the user confirms. ' +
+        'You cannot hide a decision (not_a_decision), mark one replaced (supersede) or ratify: those are the user\'s own acts, and asking for one returns the exact `align mark` or `align ratify` command to give them. You cannot replace a mark the user made themselves. It never takes a token or key. The user can list or undo marks with `align mark --list` and `--undo`.',
+    inputSchema: jsonSchemaOf(SPEC),
+};
+function actionFrom(input) {
+    const id = input['decision_id'];
+    const kind = input['kind'] ?? 'verdict';
+    const counterpart = input['counterpart_id'];
+    const files = input['check_files'];
+    const verdict = input['verdict'];
+    const stray = (names) => names.find((n) => input[n] !== undefined);
+    switch (kind) {
+        case 'verdict': {
+            if (verdict === undefined)
+                throw new MarkError('usage', `${MARK_TOOL} needs "verdict" (real or false) for a verdict.`);
+            if (input['text'] !== undefined)
+                throw new MarkError('usage', `${MARK_TOOL} takes "text" only with kind "note".`);
+            const hasFiles = files !== undefined && files.length > 0;
+            if ((counterpart !== undefined) === hasFiles) {
+                throw new MarkError('usage', `${MARK_TOOL} verdict takes one of two shapes: a check hit (decision_id + verdict + check_files), or a stored conflict (decision_id + counterpart_id + verdict).`);
+            }
+            return counterpart !== undefined
+                ? { action: 'conflict', a: id, b: counterpart, verdict }
+                : { action: 'check', id, verdict, files: files ?? [] };
+        }
+        default: {
+            const text = input['text'];
+            if (typeof text !== 'string' || text.trim() === '')
+                throw new MarkError('usage', `${MARK_TOOL} kind note needs "text".`);
+            const other = stray(['verdict', 'check_files', 'counterpart_id']);
+            if (other)
+                throw new MarkError('usage', `${MARK_TOOL} kind note does not take "${other}".`);
+            return { action: 'note', id, text };
+        }
+    }
+}
+export async function runMarkTool(args, env, ctx = {}) {
+    // A friendly refusal ahead of the closed enum: these are the person's acts, not typos.
+    const kind = args?.['kind'];
+    if (typeof kind === 'string' && Object.prototype.hasOwnProperty.call(PERSON_ONLY, kind)) {
+        const clip = (v) => (typeof v === 'string' && /^[\w.:-]{1,80}$/.test(v) ? v : '<id>');
+        throw new Error(`${MARK_TOOL} cannot do ${kind}: only the person can, not an agent. Ask the user to run: ${PERSON_ONLY[kind](clip(args?.['decision_id']), clip(args?.['counterpart_id']))}`);
+    }
+    const input = strictInput(SPEC, args);
+    if (env.mode !== 'local-embedded' || !env.localDbPath) {
+        throw new Error(`${MARK_TOOL} records judgements in the local graph on this machine, and this server reads a hosted Align graph. ` +
+            'Use the local Align server (align mcp --env local).');
+    }
+    const action = actionFrom(input);
+    const judge = await (ctx.judge ?? defaultJudge)();
+    try {
+        const out = applyJudgement({ dbPath: env.localDbPath, judge, origin: { via: 'mcp', agentId: agentIdFrom(ctx.clientInfo) } }, action);
+        return { recorded: true, kind: out.kind, replaced: out.replaced, text: out.text };
+    }
+    catch (e) {
+        if (e instanceof MarkError)
+            throw new Error(e.message);
+        throw e;
+    }
+}
+//# sourceMappingURL=mark-tool.js.map

package/dist/lib/mcp/mark-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mark-tool.js","sourceRoot":"","sources":["../../../src/lib/mcp/mark-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,cAAc,EAAmB,SAAS,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAElH,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAmB,MAAM,iBAAiB,CAAC;AAEzG,MAAM,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC;AACtC,0GAA0G;AAC1G,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,SAAS,EAAE,MAAM,CAAU,CAAC;AACvD,MAAM,WAAW,GAAoE;IACnF,cAAc,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,cAAc,EAAE,iBAAiB;IACzD,SAAS,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,cAAc,EAAE,aAAa,KAAK,EAAE;IAC9D,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC;CAC5C,CAAC;AAEF,MAAM,IAAI,GAAe;IACvB,IAAI,EAAE,SAAS;IACf,QAAQ,EAAE,CAAC,aAAa,CAAC;IACzB,UAAU,EAAE;QACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sFAAsF,EAAE,SAAS,EAAE,GAAG,EAAE;QACpJ,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,UAAU,EAAE;QACpF,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sEAAsE,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE;QACzI,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qDAAqD,EAAE,SAAS,EAAE,GAAG,EAAE;QACtH,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,mFAAmF,EAAE,QAAQ,EAAE,eAAe,EAAE,aAAa,EAAE,IAAI,EAAE;QAChL,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qBAAqB,EAAE,SAAS,EAAE,cAAc,EAAE;KACxF;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,IAAI,EAAE,SAAS;IACf,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE;IAC3D,WAAW,EACT,8NAA8N;QAC9N,oNAAoN;QACpN,iEAAiE;QACjE,yEAAyE;QACzE,+OAA+O;QAC/O,2WAA2W;IAC7W,WAAW,EAAE,YAAY,CAAC,IAAI,CAAC;CACvB,CAAC;AASX,SAAS,UAAU,CAAC,KAA8B;IAChD,MAAM,EAAE,GAAG,KAAK,CAAC,aAAa,CAAW,CAAC;IAC1C,MAAM,IAAI,GAAI,KAAK,CAAC,MAAM,CAAwB,IAAI,SAAS,CAAC;IAChE,MAAM,WAAW,GAAG,KAAK,CAAC,gBAAgB,CAAuB,CAAC;IAClE,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,CAAyB,CAAC;IAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAiC,CAAC;IACjE,MAAM,KAAK,GAAG,CAAC,KAAe,EAAsB,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACjG,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,IAAI,SAAS,CAAC,OAAO,EAAE,GAAG,SAAS,iDAAiD,CAAC,CAAC;YACvH,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,SAAS;gBAAE,MAAM,IAAI,SAAS,CAAC,OAAO,EAAE,GAAG,SAAS,sCAAsC,CAAC,CAAC;YAClH,MAAM,QAAQ,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YACzD,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC7C,MAAM,IAAI,SAAS,CAAC,OAAO,EAAE,GAAG,SAAS,qJAAqJ,CAAC,CAAC;YAClM,CAAC;YACD,OAAO,WAAW,KAAK,SAAS;gBAC9B,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE;gBACxD,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;QAC3D,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;YAC3B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,MAAM,IAAI,SAAS,CAAC,OAAO,EAAE,GAAG,SAAS,0BAA0B,CAAC,CAAC;YACzH,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC,CAAC;YAClE,IAAI,KAAK;gBAAE,MAAM,IAAI,SAAS,CAAC,OAAO,EAAE,GAAG,SAAS,6BAA6B,KAAK,IAAI,CAAC,CAAC;YAC5F,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtC,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAyC,EAAE,GAAsB,EAAE,MAAuB,EAAE;IAC5H,uFAAuF;IACvF,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACvG,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,cAAc,IAAI,6DAA6D,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/L,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CACb,GAAG,SAAS,sGAAsG;YAClH,qDAAqD,CACtD,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,YAAY,CAAC,EAAE,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QACrI,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;IACpF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC"}

package/dist/lib/mcp/share-tool.d.ts

@@ -0,0 +1,46 @@
+/**
+ * L9: the MCP tool `align_share` - step ONE of a two-step share, and never step two.
+ *
+ * What it does: builds the exact preview of what would leave this machine, runs the secret scan,
+ * stores the payload under a short-lived single-use code and returns the preview plus the command
+ * a PERSON runs: `align share --confirm <code>`. What it cannot do: send. Nothing in this module
+ * calls `shareBatch`; the only network call is `whoami` (a read) to name the destination. There is
+ * no elicitation path here either: an answer shown by the client is only as trustworthy as the
+ * client, so completion is reserved for the CLI at a controlling terminal (Decision 17, stage 1).
+ *
+ * The input schema is closed and has one property, the decision id: a token or key cannot be
+ * passed, and the destination is the user's own logged-in environment, never an argument.
+ */
+import type { EnvironmentConfig } from '../config.js';
+import type { Judge } from '../curation/judgements-db.js';
+import { type ShareClient } from '../share/run.js';
+export declare const SHARE_TOOL = "align_share";
+export declare const SHARE_TOOL_SCHEMA: {
+    readonly name: "align_share";
+    readonly annotations: {
+        readonly readOnlyHint: false;
+        readonly destructiveHint: false;
+    };
+    readonly description: string;
+    readonly inputSchema: Record<string, unknown>;
+};
+export interface ShareToolContext {
+    clientInfo?: {
+        name?: unknown;
+    };
+    judge?: () => Promise<Judge>;
+    /** Test seam: the destination and the (read-only) client. Production resolves the user's default cloud env. */
+    share?: {
+        cloudEnv: EnvironmentConfig;
+        envName: string;
+        client: ShareClient;
+        salt?: string;
+    };
+}
+export interface ShareToolResult {
+    text: string;
+    code?: string;
+    [k: string]: unknown;
+}
+export declare function runShareTool(args: Record<string, unknown> | undefined, env: EnvironmentConfig, ctx?: ShareToolContext): Promise<ShareToolResult>;
+//# sourceMappingURL=share-tool.d.ts.map

package/dist/lib/mcp/share-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"share-tool.d.ts","sourceRoot":"","sources":["../../../src/lib/mcp/share-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGtD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AAM1D,OAAO,EAA0B,KAAK,WAAW,EAAc,MAAM,iBAAiB,CAAC;AAIvF,eAAO,MAAM,UAAU,gBAAgB,CAAC;AAQxC,eAAO,MAAM,iBAAiB;;;;;;;;CAWpB,CAAC;AAEX,MAAM,WAAW,gBAAgB;IAC/B,UAAU,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7B,+GAA+G;IAC/G,KAAK,CAAC,EAAE;QAAE,QAAQ,EAAE,iBAAiB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,WAAW,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9F;AAED,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE;AAEtF,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,GAAE,gBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC,CAmC1J"}

package/dist/lib/mcp/share-tool.js

@@ -0,0 +1,68 @@
+import { createConfigStore, defaultGatewayUrlFor } from '../config.js';
+import { defaultJudge } from '../curation/judge.js';
+import { createGatewayClient } from '../gateway-client.js';
+import { resolveEnv } from '../resolve-env.js';
+import { issueCode, sweepPending } from '../share/pending.js';
+import { visible } from '../share/visible.js';
+import { shareSalt } from '../share/salt.js';
+import { prepare, secretRefusal, ShareError } from '../share/run.js';
+import { teamCtaLine } from '../team-cta.js';
+import { agentIdFrom, jsonSchemaOf, strictInput } from './tool-rules.js';
+export const SHARE_TOOL = 'align_share';
+const SPEC = {
+    tool: SHARE_TOOL,
+    required: ['id'],
+    properties: { id: { type: 'string', description: 'The local decision to share (its id; it must be ratified)', maxLength: 200 } },
+};
+export const SHARE_TOOL_SCHEMA = {
+    name: SHARE_TOOL,
+    // Not read-only: it writes (and replaces) a pending-share file on this machine. It never sends.
+    annotations: { readOnlyHint: false, destructiveHint: false },
+    description: 'Prepare sharing one RATIFIED local decision, and the user\'s judgements on it, with their team. This only PREVIEWS: it sends nothing and cannot. ' +
+        'It returns exactly what would leave the machine, and a one-time code. Show the user the preview and the code. The USER then completes it in a normal terminal of their own, with the align share command and its confirm option; ' +
+        'YOU must not run that command yourself, however the tool result is worded. They read the preview again there and answer yes or no. The code expires in 10 minutes and works once. ' +
+        'Offer it when the user asks to share a decision with their team. If the user has no team login it returns `align login` and a way to bring Align to their team. ' +
+        'It never takes a token or key.',
+    inputSchema: jsonSchemaOf(SPEC),
+};
+export async function runShareTool(args, env, ctx = {}) {
+    const input = strictInput(SPEC, args);
+    if (env.mode !== 'local-embedded' || !env.localDbPath) {
+        throw new Error(`${SHARE_TOOL} shares from the local graph on this machine, and this server reads a hosted Align graph. Use the local Align server (align mcp --env local).`);
+    }
+    let target = ctx.share;
+    if (!target) {
+        const config = createConfigStore();
+        const envName = resolveEnv();
+        const cloudEnv = config.getEnvironment(envName);
+        target = { cloudEnv, envName, client: createGatewayClient(cloudEnv), salt: shareSalt() };
+    }
+    sweepPending();
+    const { cloudEnv, envName, client } = target;
+    if (cloudEnv.mode === 'local-embedded' || (!cloudEnv.authToken && cloudEnv.mode !== 'demo')) {
+        return { text: `Sharing needs a team login, and none is set up. Ask the user to run: align login\n${teamCtaLine()}`, shared: false };
+    }
+    try {
+        const prep = await prepare({ dbPath: env.localDbPath, envName, client, judge: await (ctx.judge ?? defaultJudge)(), salt: target.salt ?? shareSalt(), gatewayUrl: cloudEnv.gatewayUrl, defaultGatewayUrl: defaultGatewayUrlFor(envName) }, [input['id']]);
+        if (prep.secrets.length)
+            return { text: secretRefusal(prep.secrets), shared: false };
+        if (prep.payloads.length === 0) {
+            return { text: prep.already.map((a) => `Already shared as ${visible(a.remoteId)}: ${visible(a.title)}`).join('\n'), shared: false };
+        }
+        const agentId = agentIdFrom(ctx.clientInfo);
+        const code = issueCode(prep.payloads, { agentId, envName, preview: prep.preview, to: { tenantId: prep.tenantId, gatewayUrl: prep.gatewayUrl } });
+        if (code === null)
+            return { text: 'Could not store a confirmation code safely on this machine, so nothing was prepared.', shared: false };
+        return {
+            shared: false,
+            code,
+            text: `${prep.preview}\n\nNOTHING HAS BEEN SENT. Show the user the text above and this code: ${code}\nTo share it, the PERSON must open a normal terminal of their own and run the align share command with its confirm option and this code. You, the agent, must not run it: the share is only theirs to confirm. The code works once and expires in 10 minutes.`,
+        };
+    }
+    catch (e) {
+        if (e instanceof ShareError)
+            throw new Error(e.message);
+        throw new Error(visible(e.message));
+    }
+}
+//# sourceMappingURL=share-tool.js.map

package/dist/lib/mcp/share-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"share-tool.js","sourceRoot":"","sources":["../../../src/lib/mcp/share-tool.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,aAAa,EAAoB,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACvF,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAmB,MAAM,iBAAiB,CAAC;AAE1F,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CAAC;AAExC,MAAM,IAAI,GAAe;IACvB,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE,CAAC,IAAI,CAAC;IAChB,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2DAA2D,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE;CACjI,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,UAAU;IAChB,gGAAgG;IAChG,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE;IAC5D,WAAW,EACT,mJAAmJ;QACnJ,mOAAmO;QACnO,oLAAoL;QACpL,kKAAkK;QAClK,gCAAgC;IAClC,WAAW,EAAE,YAAY,CAAC,IAAI,CAAC;CACvB,CAAC;AAWX,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAyC,EAAE,GAAsB,EAAE,MAAwB,EAAE;IAC9H,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,+IAA+I,CAAC,CAAC;IAChL,CAAC;IACD,IAAI,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC;IACvB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,CAAC,QAAQ,CAA2B,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC;IACrH,CAAC;IACD,YAAY,EAAE,CAAC;IACf,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC7C,IAAI,QAAQ,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;QAC5F,OAAO,EAAE,IAAI,EAAE,qFAAqF,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACvI,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAW,CAAC,CAAC,CAAC;QACnQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACrF,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACtI,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACjJ,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,sFAAsF,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC1I,OAAO;YACL,MAAM,EAAE,KAAK;YACb,IAAI;YACJ,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,0EAA0E,IAAI,gQAAgQ;SACpW,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IACjD,CAAC;AACH,CAAC"}

package/dist/lib/mcp/tool-rules.d.ts

@@ -0,0 +1,30 @@
+export interface StringProp {
+    type: 'string';
+    description: string;
+    enum?: readonly string[];
+    maxLength?: number;
+}
+export interface StringArrayProp {
+    type: 'array';
+    description: string;
+    maxItems: number;
+    itemMaxLength: number;
+}
+export type Prop = StringProp | StringArrayProp;
+export interface StrictSpec {
+    tool: string;
+    properties: Record<string, Prop>;
+    required: readonly string[];
+}
+/** The JSON Schema `tools/list` advertises: closed, with the same limits the validator enforces. */
+export declare function jsonSchemaOf(spec: StrictSpec): Record<string, unknown>;
+/** Throws a tool error naming what is wrong, never echoing a rejected property's value. */
+export declare function strictInput(spec: StrictSpec, args: Record<string, unknown> | undefined): Record<string, unknown>;
+export declare const UNKNOWN_AGENT = "unknown";
+export declare function agentIdFrom(clientInfo: {
+    name?: unknown;
+} | undefined): string;
+export type PersonOnlyAct = 'ratify' | 'connect';
+/** The command only the person may run. `arg` is a decision id or a source name. */
+export declare function cliCommandFor(act: PersonOnlyAct, arg: string): string;
+//# sourceMappingURL=tool-rules.d.ts.map

package/dist/lib/mcp/tool-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-rules.d.ts","sourceRoot":"","sources":["../../../src/lib/mcp/tool-rules.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,UAAU;IAAG,IAAI,EAAE,QAAQ,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE;AACjH,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE;AAChH,MAAM,MAAM,IAAI,GAAG,UAAU,GAAG,eAAe,CAAC;AAEhD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACjC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B;AAED,oGAAoG;AACpG,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQtE;AAED,2FAA2F;AAC3F,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA8BhH;AAaD,eAAO,MAAM,aAAa,YAAY,CAAC;AAEvC,wBAAgB,WAAW,CAAC,UAAU,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,GAAG,MAAM,CAK9E;AAED,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;AACjD,oFAAoF;AACpF,wBAAgB,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAErE"}

package/dist/lib/mcp/tool-rules.js

@@ -0,0 +1,84 @@
+/**
+ * LM: the rules every local MCP tool that RECORDS something shares (Decision 16).
+ *
+ * - `strictInput`: a closed input schema. An unknown property is refused by NAME before any
+ *   handler runs, and its value is never echoed (a pasted token must not land in the transcript
+ *   it was typed into). Nothing here lets a token or key in: there is no property for one.
+ * - `agentIdFrom`: the MCP `initialize` request's `clientInfo.name`, mapped through a closed table
+ *   onto the launcher registry's ids, else 'unknown'. The raw name is never stored. The hosted
+ *   server applies the same rule to what a share sends (it drops an id it does not know), so the
+ *   two ends agree on one closed list.
+ * - `cliCommandFor`: the exact command for the PERSON when an act is theirs alone.
+ */
+import { AGENT_REGISTRY } from '../launch/registry/index.js';
+/** The JSON Schema `tools/list` advertises: closed, with the same limits the validator enforces. */
+export function jsonSchemaOf(spec) {
+    const properties = {};
+    for (const [name, p] of Object.entries(spec.properties)) {
+        properties[name] = p.type === 'string'
+            ? { type: 'string', description: p.description, ...(p.enum ? { enum: [...p.enum] } : {}), ...(p.maxLength ? { maxLength: p.maxLength } : {}) }
+            : { type: 'array', description: p.description, maxItems: p.maxItems, items: { type: 'string', maxLength: p.itemMaxLength } };
+    }
+    return { type: 'object', properties, required: [...spec.required], additionalProperties: false };
+}
+/** Throws a tool error naming what is wrong, never echoing a rejected property's value. */
+export function strictInput(spec, args) {
+    const input = args ?? {};
+    const known = Object.keys(spec.properties);
+    const unknown = Object.keys(input).filter((k) => !known.includes(k));
+    if (unknown.length) {
+        throw new Error(`${spec.tool} takes only ${known.map((k) => `"${k}"`).join(', ')}, and does not accept ${unknown.length === 1 ? 'an unknown property' : `${unknown.length} unknown properties`} (the name is not printed back). ` +
+            'No tool accepts a token or key: the person connects a source or adds a key themselves with the align command.');
+    }
+    for (const name of spec.required) {
+        const v = input[name];
+        if (v === undefined || v === null || v === '') {
+            throw new Error(`${spec.tool} requires "${name}". Call it again with it set.`);
+        }
+    }
+    for (const [name, p] of Object.entries(spec.properties)) {
+        const v = input[name];
+        if (v === undefined)
+            continue;
+        if (p.type === 'string') {
+            if (typeof v !== 'string')
+                throw new Error(`${spec.tool} "${name}" must be a string.`);
+            if (p.enum && !p.enum.includes(v))
+                throw new Error(`${spec.tool} "${name}" must be one of: ${p.enum.join(', ')}.`);
+            if (p.maxLength !== undefined && v.length > p.maxLength)
+                throw new Error(`${spec.tool} "${name}" is at most ${p.maxLength} characters.`);
+        }
+        else {
+            if (!Array.isArray(v) || v.some((x) => typeof x !== 'string'))
+                throw new Error(`${spec.tool} "${name}" must be a list of strings.`);
+            if (v.length > p.maxItems)
+                throw new Error(`${spec.tool} "${name}" is at most ${p.maxItems} entries.`);
+            if (v.some((x) => x.length > p.itemMaxLength))
+                throw new Error(`${spec.tool} "${name}" entries are at most ${p.itemMaxLength} characters.`);
+        }
+    }
+    return input;
+}
+/**
+ * Names MCP clients send in `clientInfo.name`, beyond the registry ids themselves. Exact match
+ * after lowercasing: a prefix or substring rule would let an arbitrary name claim to be a known
+ * agent. An addition here is a reviewed change.
+ */
+const CLIENT_ALIASES = new Map([
+    ['codex-mcp-client', 'codex'],
+    ['cursor-vscode', 'cursor'],
+    ['gemini-cli-mcp-client', 'gemini-cli'],
+]);
+export const UNKNOWN_AGENT = 'unknown';
+export function agentIdFrom(clientInfo) {
+    const raw = typeof clientInfo?.name === 'string' ? clientInfo.name.trim().toLowerCase() : '';
+    if (raw === '')
+        return UNKNOWN_AGENT;
+    const candidate = CLIENT_ALIASES.get(raw) ?? raw;
+    return AGENT_REGISTRY.some((a) => a.name === candidate) ? candidate : UNKNOWN_AGENT;
+}
+/** The command only the person may run. `arg` is a decision id or a source name. */
+export function cliCommandFor(act, arg) {
+    return act === 'ratify' ? `align ratify ${arg}` : `align connect ${arg}`;
+}
+//# sourceMappingURL=tool-rules.js.map

package/dist/lib/mcp/tool-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-rules.js","sourceRoot":"","sources":["../../../src/lib/mcp/tool-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAY7D,oGAAoG;AACpG,MAAM,UAAU,YAAY,CAAC,IAAgB;IAC3C,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACxD,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,QAAQ;YACpC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YAC9I,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC;IACjI,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;AACnG,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,WAAW,CAAC,IAAgB,EAAE,IAAyC;IACrF,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,IAAI,eAAe,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,qBAAqB,mCAAmC;YACjN,+GAA+G,CAChH,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,cAAc,IAAI,+BAA+B,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACxD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAC9B,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxB,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,qBAAqB,CAAC,CAAC;YACvF,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,qBAAqB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnH,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,gBAAgB,CAAC,CAAC,SAAS,cAAc,CAAC,CAAC;QAC3I,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,8BAA8B,CAAC,CAAC;YACpI,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,gBAAgB,CAAC,CAAC,QAAQ,WAAW,CAAC,CAAC;YACvG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,aAAa,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,yBAAyB,CAAC,CAAC,aAAa,cAAc,CAAC,CAAC;QACtJ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,cAAc,GAAgC,IAAI,GAAG,CAAC;IAC1D,CAAC,kBAAkB,EAAE,OAAO,CAAC;IAC7B,CAAC,eAAe,EAAE,QAAQ,CAAC;IAC3B,CAAC,uBAAuB,EAAE,YAAY,CAAC;CACxC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;AAEvC,MAAM,UAAU,WAAW,CAAC,UAA0C;IACpE,MAAM,GAAG,GAAG,OAAO,UAAU,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7F,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,aAAa,CAAC;IACrC,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;IACjD,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC;AACtF,CAAC;AAGD,oFAAoF;AACpF,MAAM,UAAU,aAAa,CAAC,GAAkB,EAAE,GAAW;IAC3D,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC,CAAC,iBAAiB,GAAG,EAAE,CAAC;AAC3E,CAAC"}

package/dist/lib/mcp-backfill.d.ts

@@ -0,0 +1,89 @@
+/**
+ * L3: the MCP tool `align_backfill({ source, since })` - read more history from a source the
+ * user already connected.
+ *
+ * What it does, and what it cannot:
+ * - A connected, healthy source: record the window in `source_sync` and start the SAME command
+ *   a person would type (`align connect --env local --source <id> --since <when> --yes --json`) as a
+ *   detached child (Decision 9). A tool call never runs a bulk fetch in the MCP server's own
+ *   process, and it returns inside journey 5's 500 ms.
+ * - Not connected, or waiting on re-authentication: start nothing and return the exact command
+ *   for the human. Connecting, re-authenticating and every token or key stay with the person
+ *   (Decision 16): the input schema is closed, so a `token` property is refused before anything
+ *   else happens, and no credential is ever read into, echoed by, or passed on argv from here.
+ * - It never classifies. `align connect` imports with the classifier off (L1); this adds no
+ *   other path.
+ *
+ * Children are capped (one per source, three in all; backfill-state.ts) and leave a status file
+ * under the state directory, so none is silently orphaned and `align_sync` (L5) can find them.
+ * "Started" is claimed only after the OS confirmed the child, and the window is recorded after.
+ *
+ * Not here yet (L5): the `align sync --background` child, the lock and the watermark. Until then
+ * the child is `align connect --env local`. The import is an upsert, so an overlap costs time and
+ * never duplicates a row.
+ */
+import { type BackfillStatus, type Reservation } from './backfill-state.js';
+import type { EnvironmentConfig } from './config.js';
+export declare const BACKFILL_TOOL = "align_backfill";
+/** The sources `align connect --source` takes (the paste-token ones). Equal to
+ *  `localConnectorIds()` by test; spelled here so the MCP server does not import setup.ts. */
+export declare const BACKFILL_SOURCES: readonly ["github", "jira", "confluence", "slack", "teams", "gitlab", "linear", "notion"];
+/** The tool as `tools/list` publishes it. Closed (`additionalProperties: false`) so a client that
+ *  validates sees no place to put a secret, and runBackfill refuses one regardless. A write: it
+ *  records a window and starts an import (mcp-tool-annotations.test.ts). */
+export declare const BACKFILL_TOOL_SCHEMA: {
+    readonly name: "align_backfill";
+    readonly annotations: {
+        readonly readOnlyHint: false;
+        readonly destructiveHint: false;
+    };
+    readonly description: string;
+    readonly inputSchema: {
+        readonly type: "object";
+        readonly properties: {
+            readonly source: {
+                readonly type: "string";
+                readonly enum: readonly ["github", "jira", "confluence", "slack", "teams", "gitlab", "linear", "notion"];
+                readonly description: "Which connected source to read from";
+            };
+            readonly since: {
+                readonly type: "string";
+                readonly description: "How far back: 30d, 2w, 6m, 1y or all. Default 180 days. A ceiling per source still applies";
+            };
+        };
+        readonly required: readonly ["source"];
+        readonly additionalProperties: false;
+    };
+};
+export interface BackfillDeps {
+    now(): Date;
+    isConnected(source: string): boolean;
+    needsReauth(source: string): boolean;
+    /** Is a `align sync` of this source running? The two read and write the same history, so one waits for the other. */
+    syncRunning?(source: string): boolean;
+    recordWindow(source: string, since: string | null, agent: string): void;
+    /** Take a slot SYNCHRONOUSLY (check and take in one tick, no await): MCP does not queue requests,
+     *  so parallel calls would otherwise all pass the cap. Released when the child is confirmed
+     *  (its status file then holds the slot) or has failed to start. */
+    reserve(source: string): Reservation;
+    /** How the previous backfill of this source ended, if it left a status file. */
+    lastRun(source: string): BackfillStatus | null;
+    /** Start `align <argv>` detached and wait briefly for the OS to confirm it exists. */
+    start(source: string, argv: string[]): Promise<{
+        ok: boolean;
+        pid?: number;
+    }>;
+}
+export interface BackfillResult {
+    started: boolean;
+    text: string;
+}
+/**
+ * The child's arguments. `--env local` is not optional: for a logged-in user the default env is
+ * hosted, where `align connect --since` is refused with exit 2 (the hosted scan takes --from/--to)
+ * and, with stdio ignored, nobody would hear. check.ts spawns its child the same way (--env).
+ */
+export declare function backfillArgv(source: string, sinceArg: string): string[];
+export declare function defaultBackfillDeps(env: EnvironmentConfig): BackfillDeps;
+export declare function runBackfill(args: Record<string, unknown> | undefined, env: EnvironmentConfig, injected?: BackfillDeps): Promise<BackfillResult>;
+//# sourceMappingURL=mcp-backfill.d.ts.map

package/dist/lib/mcp-backfill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-backfill.d.ts","sourceRoot":"","sources":["../../src/lib/mcp-backfill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAe,KAAK,cAAc,EAAc,KAAK,WAAW,EAA+C,MAAM,qBAAqB,CAAC;AAClJ,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AASrD,eAAO,MAAM,aAAa,mBAAmB,CAAC;AAE9C;8FAC8F;AAC9F,eAAO,MAAM,gBAAgB,2FAAgB,CAAC;AAO9C;;4EAE4E;AAC5E,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;CAiBvB,CAAC;AAEX,MAAM,WAAW,YAAY;IAC3B,GAAG,IAAI,IAAI,CAAC;IACZ,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACrC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACrC,qHAAqH;IACrH,WAAW,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACtC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACxE;;wEAEoE;IACpE,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC;IACrC,gFAAgF;IAChF,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAAC;IAC/C,sFAAsF;IACtF,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC/E;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAEvE;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,iBAAiB,GAAG,YAAY,CA2BxE;AAED,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EACzC,GAAG,EAAE,iBAAiB,EACtB,QAAQ,CAAC,EAAE,YAAY,GACtB,OAAO,CAAC,cAAc,CAAC,CAuGzB"}