@aligndottech/cli 0.49.0 → 0.50.0

package/dist/lib/sync/window.js

@@ -0,0 +1,112 @@
+/**
+ * L5: the pure decisions of an incremental sync - which window to read next and where the
+ * watermark stands after a run. No database, no clock of its own, no network.
+ *
+ * The watermark is the vendor's own `updated_at` (Decision 4), taken from the SDK's report, and
+ * it moves only on a COMPLETE read that carried one. Anything else leaves it where it was: a
+ * watermark that moved past data nobody read loses that data for good, while one that stays put
+ * costs a re-read the unchanged-skip makes cheap.
+ */
+import { SYNC_WINDOW_DEFAULT_DAYS } from '../import-defaults.js';
+/** Each run reads from a day before the watermark, so an item edited between two runs while the
+ *  vendor was behind on its own indexing is not missed. */
+export const OVERLAP_DAYS = 1;
+/** A hole that ended this many consecutive runs the same way is called persistent. */
+export const PERSISTENT_HOLE_RUNS = 5;
+const DAY_MS = 86_400_000;
+function parse(iso) {
+    if (iso === null || iso === undefined)
+        return undefined;
+    const ms = Date.parse(iso);
+    // NaN compares false with everything, in both directions (verification.md): refuse it here.
+    return Number.isNaN(ms) ? undefined : ms;
+}
+/**
+ * The window a NEW scope row starts with: the one the person asked for on this source, which is the `yours` row's (L3 records
+ * `since: all` as NULL there, and "all" stays all). A source with no `yours` row yet starts at the default window.
+ * The one writer: the sync's first run on a scope and a scope change from `align connect` or `align_scope` both call it.
+ */
+export function inheritedWindowSince(rows, now) {
+    const yours = rows.find((r) => r.scope_key === 'yours');
+    return yours ? yours.window_since : nextWindow(undefined, now).since;
+}
+export function minusDays(iso, days) {
+    const ms = parse(iso);
+    if (ms === undefined)
+        throw new Error(`Cannot read "${iso.slice(0, 40)}" as a date.`);
+    return new Date(ms - days * DAY_MS).toISOString();
+}
+/**
+ * What the next run asks the vendor for.
+ * - No row: the default window back from now (the first sync of a source).
+ * - A high_water: one overlap day before it. Otherwise the row's own window_since, untouched.
+ * - A pending_until: also an `until` there, so a run that a ceiling cut finishes the OLDER part.
+ * An unparseable stored stamp reads as absent, which can only widen the read.
+ */
+export function nextWindow(s, now) {
+    if (s === undefined)
+        return { since: new Date(now.getTime() - SYNC_WINDOW_DEFAULT_DAYS * DAY_MS).toISOString() };
+    // A stored watermark from the future (written by an older build, or by a clock that was wrong) is
+    // repaired by ignoring it: the read widens to the window, and the run's own result replaces it.
+    const hw = plausible(s.high_water ?? undefined, now) === undefined ? undefined : s.high_water;
+    const floor = hw !== undefined ? minusDays(hw, OVERLAP_DAYS) : parse(s.window_since) === undefined ? undefined : s.window_since;
+    const until = parse(s.pending_until) === undefined ? undefined : s.pending_until;
+    // A hole that keeps coming back keeps the watermark where it was, so the re-read would grow every day, and a source that
+    // reads more each time is more likely to hit its budget again. Bound it to the default window while a hole is open.
+    const bound = (s.hole_streak ?? 0) > 0 ? new Date(now.getTime() - SYNC_WINDOW_DEFAULT_DAYS * DAY_MS).toISOString() : undefined;
+    const since = bound !== undefined && (floor === undefined || Date.parse(floor) < Date.parse(bound)) ? bound : floor;
+    return { ...(since !== undefined ? { since } : {}), ...(until !== undefined ? { until } : {}) };
+}
+export function later(a, b) {
+    const pa = parse(a);
+    const pb = parse(b);
+    if (pa === undefined)
+        return pb === undefined ? null : b;
+    if (pb === undefined)
+        return a;
+    return pb > pa ? b : a;
+}
+function earlier(a, b) {
+    const pa = parse(a);
+    const pb = parse(b);
+    if (pa === undefined)
+        return pb === undefined ? null : b;
+    if (pb === undefined)
+        return a;
+    return pb < pa ? b : a;
+}
+export function plausible(iso, now) {
+    const t = parse(iso);
+    if (t === undefined)
+        return undefined;
+    return now !== undefined && t > now.getTime() + DAY_MS ? undefined : iso;
+}
+export function finishRun(prev, r) {
+    const prevHigh = plausible(prev.high_water ?? undefined, r.now) === undefined ? null : prev.high_water;
+    if (r.complete) {
+        return { high_water: later(later(prevHigh, plausible(r.highWater, r.now)), plausible(r.cycleNewest, r.now)), pending_until: null, status: 'ok' };
+    }
+    if (r.persistent === true) {
+        // The other streams are read and committed; only the hole is not. Say so in the status, and move on.
+        return { high_water: later(later(prevHigh, plausible(r.highWater, r.now)), plausible(r.cycleNewest, r.now)), pending_until: null, status: 'partial' };
+    }
+    if (r.cut === true)
+        return { high_water: prevHigh, pending_until: earlier(prev.pending_until, r.oldestReached), status: 'partial' };
+    return { high_water: prevHigh, pending_until: null, status: 'partial' };
+}
+/** Oldest first. A kill after batch N then leaves every older item committed, so a watermark equal
+ *  to the newest committed stamp never sits above an unread one. Items with no stamp lead. */
+export function ascendingByUpdated(items) {
+    const stamp = (i) => parse(i.updated_at) ?? Number.NEGATIVE_INFINITY;
+    return items.map((item, index) => ({ item, index }))
+        .sort((a, b) => (stamp(a.item) - stamp(b.item) || a.index - b.index) || 0)
+        .map((e) => e.item);
+}
+export function newestUpdated(items, now) {
+    let best;
+    for (const i of items)
+        if (plausible(i.updated_at, now) !== undefined)
+            best = later(best, i.updated_at) ?? best;
+    return best;
+}
+//# sourceMappingURL=window.js.map

package/dist/lib/sync/window.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"window.js","sourceRoot":"","sources":["../../../src/lib/sync/window.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEjE;2DAC2D;AAC3D,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAC9B,sFAAsF;AACtF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AACtC,MAAM,MAAM,GAAG,UAAU,CAAC;AAY1B,SAAS,KAAK,CAAC,GAA8B;IAC3C,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,4FAA4F;IAC5F,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAuE,EAAE,GAAS;IACrH,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,KAAM,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,IAAY;IACjD,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,EAAE,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC;IACtF,OAAO,IAAI,IAAI,CAAC,EAAE,GAAG,IAAI,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;AACpD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,CAA0B,EAAE,GAAS;IAC9D,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,wBAAwB,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IACjH,kGAAkG;IAClG,gGAAgG;IAChG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,IAAI,SAAS,EAAE,GAAG,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,UAAW,CAAC;IAC/F,MAAM,KAAK,GAAG,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,YAAa,CAAC;IACjI,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,aAAc,CAAC;IAClF,yHAAyH;IACzH,oHAAoH;IACpH,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,wBAAwB,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/H,MAAM,KAAK,GAAG,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACpH,OAAO,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAClG,CAAC;AAwBD,MAAM,UAAU,KAAK,CAAC,CAA4B,EAAE,CAA4B;IAC9E,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC;IAC1D,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,CAAE,CAAC;IAChC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAE,CAAC;AAC3B,CAAC;AAED,SAAS,OAAO,CAAC,CAA4B,EAAE,CAA4B;IACzE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC;IAC1D,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,CAAE,CAAC;IAChC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAE,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAuB,EAAE,GAAqB;IACtE,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACrB,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtC,OAAO,GAAG,KAAK,SAAS,IAAI,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,IAAuD,EACvD,CAAY;IAEZ,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,UAAU,IAAI,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;IACvG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACnJ,CAAC;IACD,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC1B,qGAAqG;QACrG,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACxJ,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACpI,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC1E,CAAC;AAED;8FAC8F;AAC9F,MAAM,UAAU,kBAAkB,CAAoC,KAAmB;IACvF,MAAM,KAAK,GAAG,CAAC,CAAI,EAAU,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,iBAAiB,CAAC;IAChF,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;SACjD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;SACzE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAA6C,EAAE,GAAU;IACrF,IAAI,IAAwB,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,IAAI,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,KAAK,SAAS;YAAE,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;IAChH,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/lib/team-cta.d.ts

@@ -0,0 +1,11 @@
+/**
+ * The one upgrade line the CLI prints, only at the share moment (a team action tried with no team
+ * login). One place for the booking link: the CLI links to a redirect Align owns, so routing the
+ * call to someone else later is a site change and needs no CLI release (plan 2026-10-09, Open
+ * Question 1). Flip TEAM_SIGNUP_OPEN when prod team signup opens.
+ */
+export declare const BOOK_CALL_URL = "https://align.tech/demo?ref=cli";
+export declare const TEAM_SIGNUP_URL = "https://app.align.tech/signup";
+export declare const TEAM_SIGNUP_OPEN = false;
+export declare function teamCtaLine(open?: boolean): string;
+//# sourceMappingURL=team-cta.d.ts.map

package/dist/lib/team-cta.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-cta.d.ts","sourceRoot":"","sources":["../../src/lib/team-cta.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAO,MAAM,aAAa,oCAAoC,CAAC;AAC/D,eAAO,MAAM,eAAe,kCAAkC,CAAC;AAC/D,eAAO,MAAM,gBAAgB,QAAQ,CAAC;AAEtC,wBAAgB,WAAW,CAAC,IAAI,GAAE,OAA0B,GAAG,MAAM,CAIpE"}

package/dist/lib/team-cta.js

@@ -0,0 +1,16 @@
+/**
+ * The one upgrade line the CLI prints, only at the share moment (a team action tried with no team
+ * login). One place for the booking link: the CLI links to a redirect Align owns, so routing the
+ * call to someone else later is a site change and needs no CLI release (plan 2026-10-09, Open
+ * Question 1). Flip TEAM_SIGNUP_OPEN when prod team signup opens.
+ */
+// Confirmed by Tom 2026-10-10: align.tech/demo?ref=cli redirects to the 30-minute booking page.
+export const BOOK_CALL_URL = 'https://align.tech/demo?ref=cli';
+export const TEAM_SIGNUP_URL = 'https://app.align.tech/signup';
+export const TEAM_SIGNUP_OPEN = false;
+export function teamCtaLine(open = TEAM_SIGNUP_OPEN) {
+    return open
+        ? `Start a team graph: ${TEAM_SIGNUP_URL}`
+        : `Bring this to your team. Book a 30-minute call: ${BOOK_CALL_URL}`;
+}
+//# sourceMappingURL=team-cta.js.map

package/dist/lib/team-cta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-cta.js","sourceRoot":"","sources":["../../src/lib/team-cta.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,gGAAgG;AAChG,MAAM,CAAC,MAAM,aAAa,GAAG,iCAAiC,CAAC;AAC/D,MAAM,CAAC,MAAM,eAAe,GAAG,+BAA+B,CAAC;AAC/D,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAEtC,MAAM,UAAU,WAAW,CAAC,OAAgB,gBAAgB;IAC1D,OAAO,IAAI;QACT,CAAC,CAAC,uBAAuB,eAAe,EAAE;QAC1C,CAAC,CAAC,mDAAmD,aAAa,EAAE,CAAC;AACzE,CAAC"}

package/dist/lib/telemetry-ci.d.ts

@@ -0,0 +1,2 @@
+export declare function inCi(env?: Record<string, string | undefined>): boolean;
+//# sourceMappingURL=telemetry-ci.d.ts.map

package/dist/lib/telemetry-ci.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-ci.d.ts","sourceRoot":"","sources":["../../src/lib/telemetry-ci.ts"],"names":[],"mappings":"AAiCA,wBAAgB,IAAI,CAAC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG,OAAO,CAInF"}

package/dist/lib/telemetry-ci.js

@@ -0,0 +1,21 @@
+import vendors from 'ci-info/vendors.json' with { type: 'json' };
+/** ci-info's generic flags, in its own order: any one of them set means CI. */
+const GENERIC = ['BUILD_ID', 'BUILD_NUMBER', 'CI', 'CI_APP_ID', 'CI_BUILD_ID', 'CI_BUILD_NUMBER', 'CI_NAME', 'CONTINUOUS_INTEGRATION', 'RUN_ID'];
+function matches(rule, env) {
+    if (typeof rule === 'string')
+        return Boolean(env[rule]);
+    if ('env' in rule && typeof rule.env === 'string' && 'includes' in rule) {
+        return Boolean(env[rule.env]?.includes(String(rule.includes)));
+    }
+    if ('any' in rule && Array.isArray(rule.any))
+        return rule.any.some((k) => Boolean(env[k]));
+    return Object.entries(rule).every(([k, v]) => env[k] === v);
+}
+export function inCi(env = process.env) {
+    if (env['CI'] === 'false')
+        return false;
+    if (GENERIC.some((k) => Boolean(env[k])))
+        return true;
+    return vendors.some((v) => (Array.isArray(v.env) ? v.env : [v.env]).every((r) => matches(r, env)));
+}
+//# sourceMappingURL=telemetry-ci.js.map

package/dist/lib/telemetry-ci.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-ci.js","sourceRoot":"","sources":["../../src/lib/telemetry-ci.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,sBAAsB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAqBjE,+EAA+E;AAC/E,MAAM,OAAO,GAAG,CAAC,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,iBAAiB,EAAE,SAAS,EAAE,wBAAwB,EAAE,QAAQ,CAAC,CAAC;AAEjJ,SAAS,OAAO,CAAC,IAAa,EAAE,GAAuC;IACrE,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;QACxE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,OAAO,MAAM,CAAC,OAAO,CAAC,IAA8B,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,MAA0C,OAAO,CAAC,GAAG;IACxE,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,OAAQ,OAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AACnH,CAAC"}

package/dist/lib/telemetry-consent.d.ts

@@ -1,32 +1,53 @@
+import type { TelemetryConsent } from './config.js';
 /**
  * Narrow interface rather than the whole config store, so this module (and its tests) does not
  * carry every unrelated accessor `createConfigStore()` exposes.
  */
-export interface TelemetryConsentStore {
-    getTelemetryConsent(): 'granted' | 'declined' | 'off' | undefined;
-    setTelemetryConsent(value: 'granted' | 'declined' | 'off'): void;
+export interface TelemetryNoticeStore {
+    getTelemetryConsent(): TelemetryConsent | undefined;
+    getTelemetryNoticeShownAt(): string | undefined;
+    markTelemetryNoticeShown(): void;
 }
 /**
- * ALI-618 D3: the one-time local-mode consent prompt, shown from `runLocalSetup()`.
- *
- * Never asks twice - a decision already on disk (granted, declined, or `align telemetry off`)
- * is left alone. Never prompts without a TTY on both streams: a piped `setup --local` run
- * hangs on a prompt it cannot answer, and a closed stdin crashes clack's raw-mode init AFTER
- * the real setup work has already succeeded (the align-cli#118 lesson,
- * `setup-local-non-tty.test.ts`). A non-interactive run leaves consent UNSET rather than
- * implicitly declined - a scripted first run may be a CI smoke test, not a real user's choice,
- * and it can still be asked on a later interactive run.
- *
- * ALI-954: an env var that already turns everything off (`DO_NOT_TRACK=1`, `ALIGN_TELEMETRY=0`)
- * skips the question with a one-line note - asking would imply the answer matters - and
- * leaves the decision unset for the same reason as the non-interactive case.
- *
- * The question is about USAGE (which commands you run). The two anonymous counts the docs
- * describe (install, setup completed) are not what is being asked about here and send either
- * way; `align telemetry off` is what stops those (docs/telemetry.md).
+ * C6: the disclosure. Local-mode telemetry is opt-out, and this notice is what makes it so: it
+ * prints once, to stderr, before anything is sent, and nothing that depends on it sends until
+ * it has printed (usage-telemetry.ts's localTierAllows). The founder-approved wording - change
+ * it only with the privacy page (align.tech/privacy#cli) and docs/telemetry.md in the same PR.
+ */
+export declare const TELEMETRY_NOTICE: string;
+export interface NoticeContext {
+    /** The invocation's command path ("ask", "telemetry off", "align" for the bare command). */
+    command: string;
+    /** Running as an agent hook (`check --hook` / `--advisory`): nobody is reading stderr. */
+    hook: boolean;
+    /** A cloud login token is in hand: cloud mode has its own, authenticated events. */
+    cloudSignedIn: boolean;
+}
+/**
+ * Shows the notice and marks it shown, or does neither. Skipped, and NOT marked, wherever
+ * nobody is reading it or it would be moot: no terminal on stdin and stderr, CI, an agent hook, `align mcp` (an agent's stdio
+ * server), a run inside a launched agent (ALIGN_WRAPPED), `align telemetry ...` (the off switch
+ * must not be raced by what it switches off), an env switch that already turns everything off,
+ * and any stored decision (granted, declined or off - that user was already asked or chose).
+ * Because it is not marked, nothing that waits on it sends from those runs either.
  *
- * Default is No: anything other than an explicit yes - the default answer, or Ctrl-C - leaves
- * telemetry off (D3).
+ * Returns whether it printed. Never throws: a broken config store costs the notice, which means
+ * nothing sends - the safe direction.
+ */
+export declare function maybeShowTelemetryNotice(config: TelemetryNoticeStore, ctx: NoticeContext, write?: (text: string) => void): boolean;
+/** The slice of the config store a sticky env opt-out needs. */
+export interface EnvOptOutStore {
+    getTelemetryConsent(): TelemetryConsent | undefined;
+    setTelemetryOffByEnv(via: string): void;
+}
+/**
+ * An explicit env opt-out (DO_NOT_TRACK, ALIGN_TELEMETRY) is made STICKY: stored as 'off' with
+ * its reason, so a process that does not inherit the variable still honours it. An MCP server
+ * started by an agent gets a trimmed environment, and the detached sync child inherits from that
+ * server, so the variable alone never reached them. Bare CI is not a user choice and is never
+ * stored (it is checked per process). A stored 'off' or 'declined' is left as it is. Called
+ * before anything in this process can send, and not subject to the terminal or hook rules above:
+ * a hook run that sees the variable stores it too. Never throws.
  */
-export declare function maybeRequestTelemetryConsent(config: TelemetryConsentStore, interactive: boolean): Promise<void>;
+export declare function storeEnvOptOut(config: EnvOptOutStore): boolean;
 //# sourceMappingURL=telemetry-consent.d.ts.map

package/dist/lib/telemetry-consent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry-consent.d.ts","sourceRoot":"","sources":["../../src/lib/telemetry-consent.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,mBAAmB,IAAI,SAAS,GAAG,UAAU,GAAG,KAAK,GAAG,SAAS,CAAC;IAClE,mBAAmB,CAAC,KAAK,EAAE,SAAS,GAAG,UAAU,GAAG,KAAK,GAAG,IAAI,CAAC;CAClE;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,qBAAqB,EAC7B,WAAW,EAAE,OAAO,GACnB,OAAO,CAAC,IAAI,CAAC,CAkBf"}
+{"version":3,"file":"telemetry-consent.d.ts","sourceRoot":"","sources":["../../src/lib/telemetry-consent.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,mBAAmB,IAAI,gBAAgB,GAAG,SAAS,CAAC;IACpD,yBAAyB,IAAI,MAAM,GAAG,SAAS,CAAC;IAChD,wBAAwB,IAAI,IAAI,CAAC;CAClC;AAED;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,QAI4D,CAAC;AAE1F,MAAM,WAAW,aAAa;IAC5B,4FAA4F;IAC5F,OAAO,EAAE,MAAM,CAAC;IAChB,0FAA0F;IAC1F,IAAI,EAAE,OAAO,CAAC;IACd,oFAAoF;IACpF,aAAa,EAAE,OAAO,CAAC;CACxB;AAID;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,oBAAoB,EAC5B,GAAG,EAAE,aAAa,EAClB,KAAK,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAExB,GACA,OAAO,CAqBT;AAED,gEAAgE;AAChE,MAAM,WAAW,cAAc;IAC7B,mBAAmB,IAAI,gBAAgB,GAAG,SAAS,CAAC;IACpD,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACzC;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAW9D"}

package/dist/lib/telemetry-consent.js

@@ -1,42 +1,81 @@
-import * as p from '@clack/prompts';
 import { telemetryDisabledByEnv } from './telemetry-env.js';
+import { inCi } from './telemetry-ci.js';
 /**
- * ALI-618 D3: the one-time local-mode consent prompt, shown from `runLocalSetup()`.
- *
- * Never asks twice - a decision already on disk (granted, declined, or `align telemetry off`)
- * is left alone. Never prompts without a TTY on both streams: a piped `setup --local` run
- * hangs on a prompt it cannot answer, and a closed stdin crashes clack's raw-mode init AFTER
- * the real setup work has already succeeded (the align-cli#118 lesson,
- * `setup-local-non-tty.test.ts`). A non-interactive run leaves consent UNSET rather than
- * implicitly declined - a scripted first run may be a CI smoke test, not a real user's choice,
- * and it can still be asked on a later interactive run.
- *
- * ALI-954: an env var that already turns everything off (`DO_NOT_TRACK=1`, `ALIGN_TELEMETRY=0`)
- * skips the question with a one-line note - asking would imply the answer matters - and
- * leaves the decision unset for the same reason as the non-interactive case.
- *
- * The question is about USAGE (which commands you run). The two anonymous counts the docs
- * describe (install, setup completed) are not what is being asked about here and send either
- * way; `align telemetry off` is what stops those (docs/telemetry.md).
+ * C6: the disclosure. Local-mode telemetry is opt-out, and this notice is what makes it so: it
+ * prints once, to stderr, before anything is sent, and nothing that depends on it sends until
+ * it has printed (usage-telemetry.ts's localTierAllows). The founder-approved wording - change
+ * it only with the privacy page (align.tech/privacy#cli) and docs/telemetry.md in the same PR.
+ */
+export const TELEMETRY_NOTICE = 'Align sends anonymous usage counts: which commands and coding agent you use,\n' +
+    'which tools you connect and how many items, the CLI version, and your OS.\n' +
+    'Never code, decision text, or file, repo or org names.\n' +
+    'Turn it off: align telemetry off (or DO_NOT_TRACK=1). Details: align.tech/privacy#cli';
+const isSet = (v) => v !== undefined && v !== '';
+/**
+ * Shows the notice and marks it shown, or does neither. Skipped, and NOT marked, wherever
+ * nobody is reading it or it would be moot: no terminal on stdin and stderr, CI, an agent hook, `align mcp` (an agent's stdio
+ * server), a run inside a launched agent (ALIGN_WRAPPED), `align telemetry ...` (the off switch
+ * must not be raced by what it switches off), an env switch that already turns everything off,
+ * and any stored decision (granted, declined or off - that user was already asked or chose).
+ * Because it is not marked, nothing that waits on it sends from those runs either.
  *
- * Default is No: anything other than an explicit yes - the default answer, or Ctrl-C - leaves
- * telemetry off (D3).
+ * Returns whether it printed. Never throws: a broken config store costs the notice, which means
+ * nothing sends - the safe direction.
  */
-export async function maybeRequestTelemetryConsent(config, interactive) {
-    if (config.getTelemetryConsent() !== undefined)
-        return;
-    if (!interactive)
-        return;
-    const envSwitch = telemetryDisabledByEnv();
-    if (envSwitch !== undefined) {
-        p.log.info(`Telemetry is off (${envSwitch} is set), so nothing is sent and you won't be asked.`);
-        return;
+export function maybeShowTelemetryNotice(config, ctx, write = (text) => {
+    process.stderr.write(text);
+}) {
+    try {
+        const top = ctx.command.split(' ')[0];
+        if (top === 'mcp' || top === 'telemetry')
+            return false;
+        if (ctx.hook || ctx.cloudSignedIn)
+            return false;
+        if (isSet(process.env['ALIGN_WRAPPED']))
+            return false;
+        if (telemetryDisabledByEnv() !== undefined || inCi())
+            return false;
+        if (config.getTelemetryConsent() !== undefined)
+            return false;
+        if (config.getTelemetryNoticeShownAt() !== undefined)
+            return false;
+        // The real control (review of e794c6e, P0): the notice is the disclosure every local send
+        // waits on, so it counts only when a person can read it. A person at a terminal has both
+        // stdin and stderr on it. Anything else - stderr to /dev/null, a pipe, a hook runner, cron,
+        // systemd, `docker build`, an agent's Bash tool - prints nothing and marks nothing, so
+        // nothing sends until a real terminal run shows it.
+        if (!process.stderr.isTTY || !process.stdin.isTTY)
+            return false;
+        write(`${TELEMETRY_NOTICE}\n\n`);
+        config.markTelemetryNoticeShown();
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * An explicit env opt-out (DO_NOT_TRACK, ALIGN_TELEMETRY) is made STICKY: stored as 'off' with
+ * its reason, so a process that does not inherit the variable still honours it. An MCP server
+ * started by an agent gets a trimmed environment, and the detached sync child inherits from that
+ * server, so the variable alone never reached them. Bare CI is not a user choice and is never
+ * stored (it is checked per process). A stored 'off' or 'declined' is left as it is. Called
+ * before anything in this process can send, and not subject to the terminal or hook rules above:
+ * a hook run that sees the variable stores it too. Never throws.
+ */
+export function storeEnvOptOut(config) {
+    try {
+        const via = telemetryDisabledByEnv();
+        if (via === undefined)
+            return false;
+        const stored = config.getTelemetryConsent();
+        if (stored === 'off' || stored === 'declined')
+            return false;
+        config.setTelemetryOffByEnv(via);
+        return true;
+    }
+    catch {
+        return false;
     }
-    const answer = await p.confirm({
-        message: 'Help improve Align? Send an anonymous count of which commands you run - no code, no ' +
-            'decisions, no file names, ever. You can change this any time with `align telemetry off`.',
-        initialValue: false,
-    });
-    config.setTelemetryConsent(!p.isCancel(answer) && answer ? 'granted' : 'declined');
 }
 //# sourceMappingURL=telemetry-consent.js.map

package/dist/lib/telemetry-consent.js.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry-consent.js","sourceRoot":"","sources":["../../src/lib/telemetry-consent.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAW5D;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,MAA6B,EAC7B,WAAoB;IAEpB,IAAI,MAAM,CAAC,mBAAmB,EAAE,KAAK,SAAS;QAAE,OAAO;IACvD,IAAI,CAAC,WAAW;QAAE,OAAO;IAEzB,MAAM,SAAS,GAAG,sBAAsB,EAAE,CAAC;IAC3C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,qBAAqB,SAAS,sDAAsD,CAAC,CAAC;QACjG,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC;QAC7B,OAAO,EACL,sFAAsF;YACtF,0FAA0F;QAC5F,YAAY,EAAE,KAAK;KACpB,CAAC,CAAC;IAEH,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;AACrF,CAAC"}
+{"version":3,"file":"telemetry-consent.js","sourceRoot":"","sources":["../../src/lib/telemetry-consent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAazC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAC3B,gFAAgF;IAChF,6EAA6E;IAC7E,0DAA0D;IAC1D,uFAAuF,CAAC;AAW1F,MAAM,KAAK,GAAG,CAAC,CAAqB,EAAW,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAA4B,EAC5B,GAAkB,EAClB,QAAgC,CAAC,IAAI,EAAE,EAAE;IACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,WAAW;YAAE,OAAO,KAAK,CAAC;QACvD,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC;QAChD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACtD,IAAI,sBAAsB,EAAE,KAAK,SAAS,IAAI,IAAI,EAAE;YAAE,OAAO,KAAK,CAAC;QACnE,IAAI,MAAM,CAAC,mBAAmB,EAAE,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7D,IAAI,MAAM,CAAC,yBAAyB,EAAE,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACnE,0FAA0F;QAC1F,yFAAyF;QACzF,4FAA4F;QAC5F,uFAAuF;QACvF,oDAAoD;QACpD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAChE,KAAK,CAAC,GAAG,gBAAgB,MAAM,CAAC,CAAC;QACjC,MAAM,CAAC,wBAAwB,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAQD;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,sBAAsB,EAAE,CAAC;QACrC,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC5C,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,UAAU;YAAE,OAAO,KAAK,CAAC;QAC5D,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/lib/telemetry-env.d.ts

@@ -1,6 +1,6 @@
 /**
  * ALI-954: the two environment variables that turn ALL telemetry off - both tiers, the
- * default-on beacons included. Its own module so the consent prompt (telemetry-consent.ts)
+ * default-on beacons included. Its own module so the one-time notice (telemetry-consent.ts)
  * can ask the same question without importing the emitter, which setup.test.ts mocks down to
  * one function.
  *

package/dist/lib/usage-telemetry.d.ts

@@ -5,36 +5,61 @@ import { type EnvironmentConfig, type TelemetryConsent } from './config.js';
  *
  * Cloud mode is opt-out: a cloud user is already on an authenticated connection to our
  * gateway, so an event about a call already being made is not a new phone-home. Local-embedded
- * mode has two tiers (ALI-954, superseding the ALI-618 "nothing by default" for local mode):
- * - Two anonymous BEACONS send by default: `cli.funnel.install` (once, on the first ever run,
- *   see recordInstallBeacon) and `cli.funnel.setup_completed`. They exist so the funnel has a
- *   denominator - opt-in usage alone cannot tell a 10% consent rate from 90%.
- * - Everything else (`cli.command`, the other funnel stages) sends only with the stored
- *   consent (`config.ts`'s `getTelemetryConsent`, set by the one-time prompt at the end of
- *   setup, default No). `--local` users have no account and no tenant, so there is nothing
- *   to authenticate an event against - the consent is the gate.
+ * mode is opt-out too since C6, disclosed by a one-time notice (telemetry-consent.ts) that cli.ts
+ * prints to stderr before the first send - nothing local sends until it has printed
+ * (localTierAllows). An install that answered No to the pre-C6 setup question ('declined')
+ * keeps that answer for usage; the two ALI-954 beacons (install, setup_completed) still send
+ * for it, as they did. `--local` users have no account and no tenant, so there is nothing to
+ * authenticate an event against - the notice, and the stored decision, are the gate.
  * Both modes send only a command name, never arguments or content. docs/telemetry.md lists
  * every event and field, and telemetry-docs-parity.test.ts keeps that page true.
  *
- * `ALIGN_TELEMETRY=0` and `DO_NOT_TRACK=1` (telemetry-env.ts) turn everything off, both tiers,
- * in both modes, over a granted local consent included (ALI-618 D3b - one consent model, not
- * two). `align telemetry off` stores 'off', which does the same thing without an env var.
+ * `ALIGN_TELEMETRY=0` and `DO_NOT_TRACK=1` (telemetry-env.ts), and running in CI
+ * (telemetry-ci.ts, C6), turn everything off, both tiers, in both modes, over a granted local
+ * consent included (ALI-618 D3b - one consent model, not two). `align telemetry off` stores 'off', which does the same thing without an env var.
  */
 export declare const TELEMETRY_TIMEOUT_MS = 2000;
+/**
+ * THE one predicate for "a stored answer forbids sending anything", read by every send path:
+ * local usage, local stages and beacons (localTierAllows), the install beacon's first-run
+ * consumption, cloud cli.command and cloud funnel stages, and `align telemetry status`.
+ * 'off' is `align telemetry off`; 'declined' is a No to the pre-C6 setup question. The privacy
+ * page promises "if you turned telemetry off earlier, it stays off", with no mode attached, so
+ * both stop everything in both modes (review of e794c6e, then the coordinator's call that a
+ * declined cloud user is off too).
+ */
+export declare function storedAnswerForbidsSending(consent: TelemetryConsent | undefined): boolean;
+/**
+ * The hard cap on the one send that is awaited: the first-run install beacon. Once per install,
+ * so ordinary runs never pay it.
+ */
+export declare const INSTALL_BEACON_CAP_MS = 800;
 export interface TelemetryStatus {
     enabled: boolean;
     reason: string;
 }
 /**
- * ALI-618 D3b: what `align telemetry status` prints. Takes the consent decision as a plain
- * argument rather than reading `config.ts` itself, so the two consent MODELS stay visibly
- * distinct in one function a reader can hold in their head - cloud's opt-out default and
- * local's stored decision (ALI-954: three values, and the two default-on beacons named where
- * usage is off but they are not) - with the env switches as the thing that overrides both,
- * checked first.
+ * ALI-618 D3b: what `align telemetry status` prints. Takes the consent decision and whether the
+ * C6 notice has printed as plain arguments rather than reading `config.ts` itself, so the
+ * model stays visible in one function a reader can hold in their head - cloud's opt-out
+ * default, and local's stored decision or the notice (ALI-954: the two default-on beacons named
+ * where usage is off but they are not) - with the env switches and CI overriding both, checked
+ * first.
  */
-export declare function getTelemetryStatus(env: EnvironmentConfig, localConsent: TelemetryConsent | undefined): TelemetryStatus;
-export declare function recordCommandUsage(env: EnvironmentConfig, command: string): Promise<void>;
+export declare function getTelemetryStatus(env: EnvironmentConfig, localConsent: TelemetryConsent | undefined, noticeShown?: boolean, offByEnv?: {
+    via: string;
+    at: string;
+}): TelemetryStatus;
+export declare function recordCommandUsage(env: EnvironmentConfig, command: string, opts?: {
+    capMs?: number;
+}): Promise<void>;
+/**
+ * ALI-795: the command groups whose second word is a SUBCOMMAND, mirroring the gateway's
+ * SUBCOMMAND_PARENTS (telemetryAnonymousRoutes.ts, align-stack#1990) - the two lists must
+ * agree or pings silently 400. A query-taking command (ask, search, capture...) sends its
+ * top-level word only, so a user's one-word query can never ride the command field.
+ */
+export declare const SUBCOMMAND_PARENTS: ReadonlySet<string>;
 /**
  * ALI-795: the activation-funnel stages, matching the gateway's closed enum
  * (telemetryAnonymousRoutes.ts). Repeat-use and D7 are deliberately absent - both derive
@@ -65,7 +90,31 @@ export declare function recordCommandUsage(env: EnvironmentConfig, command: stri
  * strings have one writer here as they now do on the gateway side (align-stack #2237).
  */
 export declare const SESSION_IMPORT_STAGES: readonly ["sessions_scanned", "candidates_found", "candidates_confirmed", "decisions_ratified"];
-export declare const FUNNEL_STAGES: readonly ["setup_started", "setup_completed", "import_completed", "mcp_wired", "first_useful_decision", "teammate_requested", "sessions_scanned", "candidates_found", "candidates_confirmed", "decisions_ratified", "agent_launched"];
+export declare const FUNNEL_STAGES: readonly ["setup_started", "setup_completed", "import_completed", "mcp_wired", "first_useful_decision", "teammate_requested", "sessions_scanned", "candidates_found", "candidates_confirmed", "decisions_ratified", "agent_launched", "source_synced"];
+/**
+ * L7: what `source_synced` reports. A count and four closed enums, nothing else - never a repo, a
+ * host, a space, a project, a title or an id. Each list is a mirror of the gateway's (align-stack
+ * telemetryAnonymousRoutes.ts: SOURCE_VALUES, SYNC_OUTCOME_VALUES, SCOPE_VALUES,
+ * SYNC_TRIGGER_VALUES), and `telemetry-server-parity.test.ts` checks them against that file.
+ * A value outside a list is a silent 400 there, so it is dropped here instead of sent.
+ *
+ * `SYNC_TRIGGERS` has no `mcp` although the plan wanted one: the gateway's list does not (it is
+ * `connect`, `background`, `manual`), and a sync an agent starts over MCP runs as the background
+ * child, so it reports `background`.
+ */
+export declare const SYNC_SOURCES: readonly ["git", "docs", "github", "jira", "confluence", "slack", "teams", "zoom", "gitlab", "linear", "notion"];
+export declare const SYNC_OUTCOMES: readonly ["ok", "partial", "needs_reauth", "error"];
+export declare const SYNC_SCOPES: readonly ["yours", "team"];
+export declare const SYNC_TRIGGERS: readonly ["connect", "background", "manual"];
+/** The gateway's `MAX_FUNNEL_COUNT`: above it the whole ping is a 400. */
+export declare const MAX_FUNNEL_COUNT = 100000;
+export interface SyncMeasurement {
+    count: number;
+    source: (typeof SYNC_SOURCES)[number];
+    outcome: (typeof SYNC_OUTCOMES)[number];
+    scope: (typeof SYNC_SCOPES)[number];
+    trigger: (typeof SYNC_TRIGGERS)[number];
+}
 /**
  * What a session-import stage reports. A count and the agent's name, and nothing else - never a
  * repo, a path, a session id or a line of any transcript. The gateway refuses both fields on
@@ -107,7 +156,9 @@ export declare const BEACON_STAGES: readonly ["install", "setup_completed"];
  * offers setup_started at several checkpoints because local-mode consent arrives
  * mid-wizard, and this is how it knows which offer landed (lib/setup-funnel.ts).
  */
-export declare function recordFunnelStage(env: EnvironmentConfig, stage: FunnelStage, command: string, measurement?: FunnelMeasurement | AgentMeasurement): Promise<boolean>;
+export declare function recordFunnelStage(env: EnvironmentConfig, stage: FunnelStage, command: string, measurement?: FunnelMeasurement | AgentMeasurement | SyncMeasurement, opts?: {
+    capMs?: number;
+}): Promise<boolean>;
 /**
  * ALI-954: the install beacon - the funnel's denominator. Sent from the preAction hook in
  * index.ts, so it goes out BEFORE any prompt on the very first run of this install id, and
@@ -182,5 +233,19 @@ export declare function envFlagOf(cmd: {
  * a local session. It costs one activation count on a once-per-machine command, in the direction
  * that cannot leak.
  */
-export declare function recordInvocationUsage(envFlag: string | undefined, command: string): Promise<void>;
+export declare function recordInvocationUsage(envFlag: string | undefined, command: string, opts?: {
+    background?: boolean;
+    capMs?: number;
+}): Promise<void>;
+/**
+ * C6: what runs before every command (cli.ts's preAction): the one-time notice, then the
+ * install beacon, both awaited. On every run but the first, the beacon returns after a config
+ * read and sends nothing. On the first run it is the one send that is awaited, capped at
+ * INSTALL_BEACON_CAP_MS (see recordInstallBeacon), so the command cannot exit before it is
+ * delivered. Every other event stays fire-and-forget. `hook` is the invocation's own flags (`check --hook` /
+ * `--advisory`), marked here because the command's action, which also marks it, runs later.
+ */
+export declare function beginInvocationTelemetry(commandPath: string, opts: {
+    hook: boolean;
+}): Promise<boolean>;
 //# sourceMappingURL=usage-telemetry.d.ts.map

package/dist/lib/usage-telemetry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"usage-telemetry.d.ts","sourceRoot":"","sources":["../../src/lib/usage-telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,KAAK,iBAAiB,EAAE,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAKtG;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,oBAAoB,OAAQ,CAAC;AAkC1C,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,iBAAiB,EACtB,YAAY,EAAE,gBAAgB,GAAG,SAAS,GACzC,eAAe,CAyBjB;AAED,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA+B/F;AAwCD;;;;;;;;;;;;;;;;GAgBG;AACH;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,qBAAqB,iGAExB,CAAC;AAEX,eAAO,MAAM,aAAa,uOAYhB,CAAC;AAEX;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AACD,oFAAoF;AACpF,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,yCAA0C,CAAC;AAErE;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,iBAAiB,EACtB,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,iBAAiB,GAAG,gBAAgB,GACjD,OAAO,CAAC,OAAO,CAAC,CAgFlB;AA2BD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAyB/E;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,aAAa,EAAE;IAAE,IAAI,IAAI,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,CAKhG;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE;IAAE,eAAe,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG,MAAM,GAAG,SAAS,CASjG;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAMf"}
+{"version":3,"file":"usage-telemetry.d.ts","sourceRoot":"","sources":["../../src/lib/usage-telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,KAAK,iBAAiB,EAAE,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAOtG;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,oBAAoB,OAAQ,CAAC;AAM1C;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,gBAAgB,GAAG,SAAS,GAAG,OAAO,CAEzF;AAyCD;;;GAGG;AACH,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAoCzC,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,iBAAiB,EACtB,YAAY,EAAE,gBAAgB,GAAG,SAAS,EAC1C,WAAW,UAAQ,EACnB,QAAQ,CAAC,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACrC,eAAe,CAoCjB;AAED,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAmC9H;AAwBD;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAEjD,CAAC;AAUH;;;;;;;;;;;;;;;;GAgBG;AACH;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,qBAAqB,iGAExB,CAAC;AAEX,eAAO,MAAM,aAAa,wPAchB,CAAC;AAEX;;;;;;;;;;GAUG;AACH,eAAO,MAAM,YAAY,kHAEf,CAAC;AACX,eAAO,MAAM,aAAa,qDAAsD,CAAC;AACjF,eAAO,MAAM,WAAW,4BAA6B,CAAC;AACtD,eAAO,MAAM,aAAa,8CAA+C,CAAC;AAC1E,0EAA0E;AAC1E,eAAO,MAAM,gBAAgB,SAAU,CAAC;AAExC,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;IACtC,OAAO,EAAE,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;IACxC,KAAK,EAAE,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;IACpC,OAAO,EAAE,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;CACzC;AAqBD;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AACD,oFAAoF;AACpF,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,yCAA0C,CAAC;AAErE;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,iBAAiB,EACtB,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,iBAAiB,GAAG,gBAAgB,GAAG,eAAe,EACpE,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC5B,OAAO,CAAC,OAAO,CAAC,CAuFlB;AAsCD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CA4D/E;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,aAAa,EAAE;IAAE,IAAI,IAAI,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,CAKhG;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE;IAAE,eAAe,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG,MAAM,GAAG,SAAS,CASjG;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,EAAE,MAAM,EACf,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAClD,OAAO,CAAC,IAAI,CAAC,CAUf;AAED;;;;;;;GAOG;AACH,wBAAsB,wBAAwB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAc7G"}