@aligndottech/cli 0.49.0 → 0.50.0

package/dist/lib/xdg.js

@@ -0,0 +1,56 @@
+import fs from 'node:fs';
+import path from 'node:path';
+/**
+ * The XDG base-directory variables. The XDG spec says a relative value is invalid and must be
+ * ignored. It matters beyond correctness: an agent that loads a repo's `.env` (cn, Cline) hands
+ * its MCP children whatever that file says, and XDG_CONFIG_HOME=./evilcfg once made
+ * `align mcp --env local` copy the user's local.db into the repo. One helper, used everywhere.
+ */
+export const XDG_VARS = ['XDG_CONFIG_HOME', 'XDG_DATA_HOME', 'XDG_CACHE_HOME', 'XDG_STATE_HOME'];
+/**
+ * A path under /proc or /dev/fd names another process's view of the filesystem (`/proc/self/cwd`
+ * is whatever directory the reader runs in): never a real config home.
+ */
+export function procLike(p) {
+    return /^\/(proc|dev\/fd)(\/|$)/.test(p);
+}
+/**
+ * The real path of `p`: its nearest existing ancestor resolved through symlinks, plus the rest.
+ * A path that does not exist yet still resolves through the links above it.
+ */
+export function realPathOf(p) {
+    const abs = path.resolve(p);
+    const rest = [];
+    for (let dir = abs;; dir = path.dirname(dir)) {
+        try {
+            return path.join(fs.realpathSync(dir), ...rest.reverse());
+        }
+        catch {
+            if (path.dirname(dir) === dir)
+                return abs;
+            rest.push(path.basename(dir));
+        }
+    }
+}
+/** The variable's value only when it is an absolute path outside /proc and /dev/fd; otherwise undefined. */
+export function absoluteXdg(env, name) {
+    const v = env[name];
+    return v && path.isAbsolute(v) && !procLike(v) && !procLike(realPathOf(v)) ? v : undefined;
+}
+/**
+ * Delete every relative XDG_* (and any under /proc or /dev/fd) from `env` (process.env at startup, before anything reads it:
+ * `conf` and env-paths read these themselves). An empty value is left alone, as it already
+ * means unset. Returns the names removed.
+ */
+export function dropRelativeXdg(env) {
+    const removed = [];
+    for (const name of XDG_VARS) {
+        const v = env[name];
+        if (v && (!path.isAbsolute(v) || procLike(v) || procLike(realPathOf(v)))) {
+            delete env[name];
+            removed.push(name);
+        }
+    }
+    return removed;
+}
+//# sourceMappingURL=xdg.js.map

package/dist/lib/xdg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xdg.js","sourceRoot":"","sources":["../../src/lib/xdg.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,CAAU,CAAC;AAG1G;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,CAAS;IAChC,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,IAAI,GAAG,GAAG,GAAG,GAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG;gBAAE,OAAO,GAAG,CAAC;YAC1C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;AACH,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,WAAW,CAAC,GAAuC,EAAE,IAAqB;IACxF,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,OAAO,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAuC;IACrE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aligndottech/cli",
-  "version": "0.49.0",
+  "version": "0.50.0",
   "mcpName": "io.github.aligndottech/cli",
   "type": "module",
   "description": "Align CLI - capture decisions, check alignment, and manage connectors",
@@ -35,10 +35,11 @@
     "test:coverage": "vitest run --coverage"
   },
   "dependencies": {
-    "@aligndottech/connector-core": "^0.7.0",
+    "@aligndottech/connector-core": "^0.10.1",
     "@clack/prompts": "^1.7.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "chalk": "^5.3.0",
+    "ci-info": "^4.4.0",
     "commander": "^12.1.0",
     "conf": "^13.0.1",
     "dotenv": "^16.4.7",

package/dist/commands/push.d.ts

@@ -1,25 +0,0 @@
-/**
- * `align push <id>` - promote ONE ratified local decision to the shared graph (ALI-831).
- *
- * Per-item, after ratify, never bulk: that is Tom's ruling (2026-09-03), and it is what
- * keeps a session's worth of agent claims from arriving in the team graph as facts. The row
- * travels through the existing ingestBatch contract with its platform and provenance
- * verbatim, so the cloud derives `decider_kind` from the platform the way it does for every
- * other capture (`agent-session` classifies agent once ALI-832 lands; until then the cloud's
- * platform CHECK rejects it, which is the right failure direction).
- *
- * The push is then ratified cloud-side by the same person, best-effort: the local
- * ratification is the human act, the cloud call carries it across. If that second call
- * fails the push stands and the command says what to run.
- */
-import type { Command } from 'commander';
-/** A local row with no source URL (a bare `align capture` of text) still needs one on the
- *  wire - the cloud keys decisions on it - and it must be STABLE so a re-push upserts the
- *  same cloud row rather than minting a twin. The local id is the only stable identity
- *  such a row has. */
-export declare function pushSourceUrl(row: {
-    id: string;
-    sourceUrl: string | null;
-}): string;
-export declare function registerPushCommand(program: Command): void;
-//# sourceMappingURL=push.d.ts.map

package/dist/commands/push.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"push.d.ts","sourceRoot":"","sources":["../../src/commands/push.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASzC;;;sBAGsB;AACtB,wBAAgB,aAAa,CAAC,GAAG,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,MAAM,CAEnF;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAiF1D"}

package/dist/commands/push.js

@@ -1,98 +0,0 @@
-import chalk from 'chalk';
-import ora from 'ora';
-import { createConfigStore } from '../lib/config.js';
-import { createGatewayClient } from '../lib/gateway-client.js';
-import { createLocalDb } from '../lib/local-db.js';
-import { resolveLocalIdentity } from '../lib/git.js';
-import { resolveEnv } from '../lib/resolve-env.js';
-/** A local row with no source URL (a bare `align capture` of text) still needs one on the
- *  wire - the cloud keys decisions on it - and it must be STABLE so a re-push upserts the
- *  same cloud row rather than minting a twin. The local id is the only stable identity
- *  such a row has. */
-export function pushSourceUrl(row) {
-    return row.sourceUrl ?? `align-local://decision/${row.id}`;
-}
-export function registerPushCommand(program) {
-    program
-        .command('push <id>')
-        .description('Promote one ratified local decision to the shared graph (per item, after align ratify)')
-        .option('--env <env>', 'Which shared environment to push to (prod, preview)')
-        .action(async (id, opts) => {
-        const config = createConfigStore();
-        // No local preference here, unlike every read command: the destination is the
-        // SHARED graph by definition, and a no-account user has nowhere to push to.
-        const envName = resolveEnv(opts.env);
-        const target = config.getEnvironment(envName);
-        if (target.mode === 'local-embedded') {
-            console.error(chalk.red('\n  align push sends a decision from your local graph to the shared one, and no shared environment is configured.'));
-            console.error(chalk.dim('  Name one with --env prod (or --env preview), after `align login`.\n'));
-            process.exit(1);
-            return;
-        }
-        const local = config.getEnvironment('local');
-        if (local.mode !== 'local-embedded' || !local.localDbPath) {
-            console.error(chalk.red('\n  There is no local graph on this machine to push from. `align setup --local` creates one.\n'));
-            process.exit(1);
-            return;
-        }
-        const db = createLocalDb(local.localDbPath);
-        try {
-            const row = db.getDecisionById(id);
-            if (!row) {
-                console.error(chalk.red(`\n  No decision ${id} in your local graph. \`align decisions list\` shows what is there.\n`));
-                process.exit(1);
-                return;
-            }
-            if (!row.ratifiedAt) {
-                console.error(chalk.red(`\n  ${id} has not been ratified, so it stays a claim on this machine.`));
-                console.error(chalk.dim(`  A human stands behind it first: align ratify ${id}\n`));
-                process.exit(1);
-                return;
-            }
-            const client = createGatewayClient(target);
-            const spinner = ora(`Pushing to ${envName}...`).start();
-            let cloudId;
-            try {
-                const { snapshots } = await client.ingestBatch([{
-                        source_url: pushSourceUrl(row),
-                        platform: row.platform,
-                        title: row.title,
-                        raw_text: row.summary,
-                        // The cloud client renames this to decided_at on the wire (ALI-829).
-                        ...(row.decidedAt ? { created_at: row.decidedAt } : {}),
-                    }]);
-                const first = snapshots[0];
-                if (!first)
-                    throw new Error('The gateway accepted the push but returned no decision id.');
-                cloudId = first.id;
-            }
-            catch (err) {
-                spinner.fail(chalk.red(err.message));
-                process.exit(1);
-                return;
-            }
-            spinner.stop();
-            // ALI-831: the pusher, not the ratifier - a different person can run `align push`
-            // than the one who ratified the row (a hand-off, a shared CI identity), and the
-            // audit row must say who actually sent it.
-            const pushedBy = await resolveLocalIdentity();
-            db.insertAudit({ decisionId: id, action: 'pushed', actor: pushedBy, detail: `${envName}:${cloudId}` });
-            console.log(chalk.green(`\n  Pushed to ${envName} as ${cloudId}.`));
-            // Carry the human act across. Best-effort: the push is the deliverable, and a
-            // failure here (a service token, an older gateway) leaves the cloud row a claim
-            // the same person can ratify by hand.
-            try {
-                await client.ratifyDecision(cloudId);
-                console.log(chalk.dim(`  Ratified there too, as you.\n`));
-            }
-            catch (err) {
-                console.log(chalk.yellow(`  It arrived as an unratified claim: ${err.message}`));
-                console.log(chalk.dim(`  To stand behind it there: align ratify ${cloudId} --env ${envName}\n`));
-            }
-        }
-        finally {
-            db.close();
-        }
-    });
-}
-//# sourceMappingURL=push.js.map

package/dist/commands/push.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"push.js","sourceRoot":"","sources":["../../src/commands/push.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,iBAAiB,EAAgB,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD;;;sBAGsB;AACtB,MAAM,UAAU,aAAa,CAAC,GAA6C;IACzE,OAAO,GAAG,CAAC,SAAS,IAAI,0BAA0B,GAAG,CAAC,EAAE,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,OAAO;SACJ,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,wFAAwF,CAAC;SACrG,MAAM,CAAC,aAAa,EAAE,qDAAqD,CAAC;SAC5E,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,IAAuB,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACnC,8EAA8E;QAC9E,4EAA4E;QAC5E,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACrC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,mHAAmH,CAAC,CAAC,CAAC;YAC9I,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAC,CAAC;YAClG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAC1D,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,gGAAgG,CAAC,CAAC,CAAC;YAC3H,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QAED,MAAM,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YACnC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,EAAE,uEAAuE,CAAC,CAAC,CAAC;gBACvH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChB,OAAO;YACT,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,8DAA8D,CAAC,CAAC,CAAC;gBAClG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,kDAAkD,EAAE,IAAI,CAAC,CAAC,CAAC;gBACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChB,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,cAAc,OAAO,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;YACxD,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;wBAC9C,UAAU,EAAE,aAAa,CAAC,GAAG,CAAC;wBAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ;wBACtB,KAAK,EAAE,GAAG,CAAC,KAAK;wBAChB,QAAQ,EAAE,GAAG,CAAC,OAAO;wBACrB,qEAAqE;wBACrE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACxD,CAAC,CAAC,CAAC;gBACJ,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;gBAC3B,IAAI,CAAC,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;gBAC1F,OAAO,GAAG,KAAK,CAAC,EAAE,CAAC;YACrB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC,CAAC;gBAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChB,OAAO;YACT,CAAC;YACD,OAAO,CAAC,IAAI,EAAE,CAAC;YACf,kFAAkF;YAClF,gFAAgF;YAChF,2CAA2C;YAC3C,MAAM,QAAQ,GAAG,MAAM,oBAAoB,EAAE,CAAC;YAC9C,EAAE,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,IAAI,OAAO,EAAE,EAAE,CAAC,CAAC;YACvG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,OAAO,OAAO,OAAO,GAAG,CAAC,CAAC,CAAC;YAEpE,8EAA8E;YAC9E,gFAAgF;YAChF,sCAAsC;YACtC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;gBACrC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC;YAC5D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,wCAAyC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC5F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,4CAA4C,OAAO,UAAU,OAAO,IAAI,CAAC,CAAC,CAAC;YACnG,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}