@aligndottech/cli 0.49.0 → 0.51.0

package/dist/lib/lead-prompt.js

@@ -0,0 +1,175 @@
+import { visible } from './share/visible.js';
+import pkg from '../../package.json' with { type: 'json' };
+/** The consent text version. The privacy page uses the same string: change both together. */
+export const LEAD_CONSENT_VERSION = '2026-10-cli-share-1';
+export const PRIVACY_URL = 'https://align.tech/privacy';
+export const LEAD_CONSENT_LINE = `We will store it to email you about team plans. One confirmation email, unsubscribe any time. Details: ${PRIVACY_URL}.`;
+export const LEAD_QUESTION_LINE = 'Want an email when your team can join Align, or to set up a call?';
+export const LEAD_INPUT_PROMPT = 'Work email (press Enter to skip):';
+const CAP_MS = 5000;
+const MAX_RESPONSE_BYTES = 4096;
+const sameUrl = (a, b) => a.trim().replace(/\/+$/, '').toLowerCase() === b.trim().replace(/\/+$/, '').toLowerCase();
+const isSet = (v) => v !== undefined && v !== '';
+/** Null means ask. Anything else is the one reason it must not. Pure, so the decision table is testable as one. */
+export function leadPromptDecision(i) {
+    // A self-hosted or preview gateway is not Align's list: no prompt, no send, no flag, no network.
+    if (i.hostedGatewayUrl === '' || !sameUrl(i.gatewayUrl, i.hostedGatewayUrl))
+        return 'not-hosted';
+    if (i.hasTeamDestination)
+        return 'has-team-destination';
+    if (isSet(i.env['ALIGN_WRAPPED']))
+        return 'wrapped';
+    if (i.inCi)
+        return 'ci';
+    if (isSet(i.env['ALIGN_NO_LEAD_PROMPT']))
+        return 'suppressed';
+    if (!i.tty)
+        return 'not-a-terminal';
+    if (i.hasLogin)
+        return 'has-login';
+    if (i.state.shownAt !== undefined && i.state.version === LEAD_CONSENT_VERSION)
+        return 'already-asked';
+    return null;
+}
+// Zero-width, bidi, line and paragraph separators and exotic spaces, plus punctuation that never belongs in an address.
+const FORBIDDEN = /[\s\u00a0\u1680\u180e\u2000-\u200f\u2028-\u202f\u205f-\u206f\u3000\ufeff,;:<>()[\]"\\]/u;
+const hasControl = (s) => [...s].some((c) => { const n = c.codePointAt(0); return n < 0x20 || (n >= 0x7f && n <= 0x9f); });
+/** The address to send, or null. Trims, lowercases the domain, and refuses anything the server would also refuse. */
+export function normaliseEmail(raw) {
+    const s = raw.trim();
+    if (s.length === 0 || s.length > 254 || FORBIDDEN.test(s) || hasControl(s))
+        return null;
+    const parts = s.split('@');
+    if (parts.length !== 2)
+        return null;
+    const [local, domain] = parts;
+    if (local.length === 0 || local.length > 64)
+        return null;
+    if (!domain.includes('.') || domain.startsWith('.') || domain.endsWith('.') || domain.includes('..'))
+        return null;
+    return `${local}@${domain.toLowerCase()}`;
+}
+export function leadBody(email) {
+    const p = process.platform;
+    return {
+        email,
+        source: 'cli-share',
+        consent_version: LEAD_CONSENT_VERSION,
+        cli_version: pkg.version.slice(0, 32),
+        ...(p === 'darwin' || p === 'linux' || p === 'win32' ? { os: p } : {}),
+    };
+}
+/** One attempt. No retry, no redirect, a hard time cap and a size cap on what is read back. Never throws. */
+export async function postLead(email, baseUrl, capMs = CAP_MS) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), capMs);
+    try {
+        const res = await fetch(`${baseUrl.trim().replace(/\/+$/, '')}/leads/team-interest`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify(leadBody(email)),
+            redirect: 'error',
+            signal: controller.signal,
+        });
+        // Read at most a few KB: the answer is tiny, and a server that streams forever must not hold the terminal.
+        const reader = res.body?.getReader();
+        let seen = 0;
+        while (reader) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            seen += value.byteLength;
+            if (seen > MAX_RESPONSE_BYTES) {
+                await reader.cancel();
+                break;
+            }
+        }
+        if (res.status === 202)
+            return { kind: 'accepted' };
+        if (res.status === 422)
+            return { kind: 'invalid' };
+        if (res.status === 429)
+            return { kind: 'rate-limited' };
+        // The server does not offer the route (an older gateway): permanent for this install, so not a retry.
+        if (res.status === 404 || res.status === 405)
+            return { kind: 'unavailable' };
+        return { kind: 'failed' };
+    }
+    catch {
+        return { kind: 'failed' };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+const DECLINES = /^(n|no|never|no thanks|no thank you)$/i;
+/** Runs the whole prompt. Returns what happened, for tests. Never throws: a broken store costs the prompt, never the command. */
+export async function maybeAskLead(d) {
+    try {
+        if (leadPromptDecision({ env: d.env, tty: d.tty, hasLogin: d.hasLogin, inCi: d.inCi, gatewayUrl: d.gatewayUrl, hostedGatewayUrl: d.hostedGatewayUrl, hasTeamDestination: d.hasTeamDestination, state: d.store.getLeadState() }) !== null)
+            return 'skipped-by-gate';
+        const shown = `${LEAD_QUESTION_LINE}\n${LEAD_CONSENT_LINE}`;
+        // Marked as soon as the person can see it, so Ctrl-C or end of input still counts as asked.
+        let line = await d.ask(shown, LEAD_INPUT_PROMPT, () => d.store.markLeadPromptShown(LEAD_CONSENT_VERSION));
+        if (line === null)
+            return 'no-terminal';
+        let email = normaliseEmail(line);
+        if (line.trim() !== '' && DECLINES.test(line.trim())) {
+            d.store.setLeadOutcome('declined');
+            return 'declined';
+        }
+        if (line.trim() !== '' && email === null) {
+            d.out('That does not look like an email address. Try once more, or press Enter to skip.');
+            line = (await d.ask('', LEAD_INPUT_PROMPT, () => undefined)) ?? '';
+            email = normaliseEmail(line);
+        }
+        if (email === null)
+            return 'skipped'; // Enter, Ctrl-C, end of input, or a second bad address: asked, and not again
+        const sent = await d.post(email);
+        if (sent.kind === 'accepted') {
+            d.store.setLeadOutcome('submitted');
+            d.out(`We sent a confirmation email to ${visible(email)}. Check your inbox.`);
+            return 'submitted';
+        }
+        if (sent.kind === 'invalid') {
+            d.out('The server did not accept that address, so nothing was saved.');
+            return 'skipped';
+        }
+        if (sent.kind === 'unavailable') {
+            // Permanent: keep the asked mark, or every share on this server would ask again and fail the same way.
+            d.out('Email sign-up is not available from this server yet. Nothing was sent.');
+            return 'skipped';
+        }
+        // A timeout or a 5xx may mean the server already took the address; a later share asking again is absorbed by
+        // the server's one-confirmation-per-24-hours rule, so the person gets no second email inside a day.
+        // Nothing reached the server's list: forget that we asked, so a later share can offer it again.
+        d.store.clearLeadPromptShown();
+        d.out(sent.kind === 'rate-limited' ? 'Too many requests just now. Nothing was sent. Try again later.' : 'Could not reach the server. Nothing was sent.');
+        return 'not-sent';
+    }
+    catch {
+        return 'skipped-by-gate';
+    }
+}
+/**
+ * What `align share` hands the run as its lead prompt. Two rules live here so a test can hold them:
+ * a saved team destination switches the prompt off, and the address is posted to Align's hosted gateway
+ * as Align spells it, never to whatever the run resolved (a self-host, or an environment override that merely
+ * matches after normalising).
+ */
+export function leadPromptFor(w) {
+    return () => maybeAskLead({
+        store: w.store,
+        env: w.env,
+        hasLogin: false,
+        gatewayUrl: w.cloudGatewayUrl,
+        hostedGatewayUrl: w.hostedGatewayUrl,
+        hasTeamDestination: w.store.listTeamDestinationNames().length > 0,
+        inCi: w.inCi,
+        tty: w.tty,
+        ask: w.ask,
+        post: (email) => postLead(email, w.hostedGatewayUrl),
+        out: w.out,
+    });
+}
+//# sourceMappingURL=lead-prompt.js.map

package/dist/lib/lead-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lead-prompt.js","sourceRoot":"","sources":["../../src/lib/lead-prompt.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,GAAG,MAAM,oBAAoB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAE3D,6FAA6F;AAC7F,MAAM,CAAC,MAAM,oBAAoB,GAAG,qBAAqB,CAAC;AAC1D,MAAM,CAAC,MAAM,WAAW,GAAG,4BAA4B,CAAC;AAExD,MAAM,CAAC,MAAM,iBAAiB,GAAG,0GAA0G,WAAW,GAAG,CAAC;AAC1J,MAAM,CAAC,MAAM,kBAAkB,GAAG,mEAAmE,CAAC;AACtG,MAAM,CAAC,MAAM,iBAAiB,GAAG,mCAAmC,CAAC;AAErE,MAAM,MAAM,GAAG,IAAI,CAAC;AACpB,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAmBhC,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,CAAS,EAAW,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAE7I,MAAM,KAAK,GAAG,CAAC,CAAqB,EAAW,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC;AAE9E,mHAAmH;AACnH,MAAM,UAAU,kBAAkB,CAAC,CAAgB;IACjD,iGAAiG;IACjG,IAAI,CAAC,CAAC,gBAAgB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,gBAAgB,CAAC;QAAE,OAAO,YAAY,CAAC;IACjG,IAAI,CAAC,CAAC,kBAAkB;QAAE,OAAO,sBAAsB,CAAC;IACxD,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,IAAI,CAAC,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QAAE,OAAO,YAAY,CAAC;IAC9D,IAAI,CAAC,CAAC,CAAC,GAAG;QAAE,OAAO,gBAAgB,CAAC;IACpC,IAAI,CAAC,CAAC,QAAQ;QAAE,OAAO,WAAW,CAAC;IACnC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,oBAAoB;QAAE,OAAO,eAAe,CAAC;IACtG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wHAAwH;AACxH,MAAM,SAAS,GAAG,yFAAyF,CAAC;AAC5G,MAAM,UAAU,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE7I,qHAAqH;AACrH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACxF,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,KAAyB,CAAC;IAClD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClH,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;AAC5C,CAAC;AAMD,MAAM,UAAU,QAAQ,CAAC,KAAa;IACpC,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC3B,OAAO;QACL,KAAK;QACL,MAAM,EAAE,WAAW;QACnB,eAAe,EAAE,oBAAoB;QACrC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACrC,GAAG,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC;AACJ,CAAC;AAED,6GAA6G;AAC7G,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAa,EAAE,OAAe,EAAE,QAAgB,MAAM;IACnF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,sBAAsB,EAAE;YACnF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACrC,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,2GAA2G;QAC3G,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QACrC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,OAAO,MAAM,EAAE,CAAC;YACd,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;YACzB,IAAI,IAAI,GAAG,kBAAkB,EAAE,CAAC;gBAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBAAC,MAAM;YAAC,CAAC;QAClE,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QACpD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACnD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QACxD,sGAAsG;QACtG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;QAC7E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AA0BD,MAAM,QAAQ,GAAG,wCAAwC,CAAC;AAE1D,iIAAiI;AACjI,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,CAAW;IAC5C,IAAI,CAAC;QACH,IAAI,kBAAkB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC,KAAK,IAAI;YAAE,OAAO,iBAAiB,CAAC;QACnQ,MAAM,KAAK,GAAG,GAAG,kBAAkB,KAAK,iBAAiB,EAAE,CAAC;QAC5D,4FAA4F;QAC5F,IAAI,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAC1G,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,aAAa,CAAC;QACxC,IAAI,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YAAC,OAAO,UAAU,CAAC;QAAC,CAAC;QAChH,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACzC,CAAC,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;YAC1F,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;YACnE,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC,CAAC,6EAA6E;QACnH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC7B,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;YACpC,CAAC,CAAC,GAAG,CAAC,mCAAmC,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAC9E,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,CAAC,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;YACvE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAChC,uGAAuG;YACvG,CAAC,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;YAChF,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,6GAA6G;QAC7G,oGAAoG;QACpG,gGAAgG;QAChG,CAAC,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC;QAC/B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,gEAAgE,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC;QACzJ,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,CAAC;IAC3B,CAAC;AACH,CAAC;AAcD;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,CAAmB;IAC/C,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC;QACxB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,QAAQ,EAAE,KAAK;QACf,UAAU,EAAE,CAAC,CAAC,eAAe;QAC7B,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;QACpC,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,EAAE,CAAC,MAAM,GAAG,CAAC;QACjE,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,gBAAgB,CAAC;QACpD,GAAG,EAAE,CAAC,CAAC,GAAG;KACX,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/local-candidate-classify.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Type a set of candidate edges with whichever local detector ALIGN_DETECTOR selects.
+ *
+ * v0 (ALIGN_DETECTOR=v0): the pairwise classifier, one call per candidate, stopping after a
+ * provider stop (ALI-692) - moved here verbatim from `checkAlignment` and `linkPass` so both
+ * callers share it.
+ * v1 (the default): one call over the whole set (local-set-classifier.ts). A candidate v1 judged as having no
+ * relationship comes back typed `relates` at its similarity, exactly what a judged, unrelated
+ * pair reads as to every caller today; a whole-call failure is reported on every candidate.
+ *
+ * `order` keeps v0's two orientations: `check` asks how the candidate relates to the proposed
+ * change (subject is A), capture asks how the new decision relates to the existing one (existing
+ * is A). v1 always puts the new/proposed side as the NEW DECISION.
+ */
+import { type DetectorVersion } from '../detector/detector-version.js';
+import { type ClassificationOutcome, classifyRelationship } from './local-relationship-classifier.js';
+import { classifyCandidateSet, type SetCandidate, type SetSubject } from './local-set-classifier.js';
+export interface CandidateClassification {
+    version: DetectorVersion;
+    outcomes: ClassificationOutcome[];
+}
+export declare function classifyCandidates(subject: SetSubject, candidates: readonly SetCandidate[], order: 'subject-first' | 'candidate-first', deps?: {
+    pair?: typeof classifyRelationship;
+    set?: typeof classifyCandidateSet;
+}): Promise<CandidateClassification>;
+//# sourceMappingURL=local-candidate-classify.d.ts.map

package/dist/lib/local-candidate-classify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-candidate-classify.d.ts","sourceRoot":"","sources":["../../src/lib/local-candidate-classify.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,KAAK,eAAe,EAA0B,MAAM,iCAAiC,CAAC;AAC/F,OAAO,EAAE,KAAK,qBAAqB,EAAE,oBAAoB,EAAyB,MAAM,oCAAoC,CAAC;AAC7H,OAAO,EAAE,oBAAoB,EAAE,KAAK,YAAY,EAAE,KAAK,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAErG,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,eAAe,CAAC;IACzB,QAAQ,EAAE,qBAAqB,EAAE,CAAC;CACnC;AAED,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,UAAU,EACnB,UAAU,EAAE,SAAS,YAAY,EAAE,EACnC,KAAK,EAAE,eAAe,GAAG,iBAAiB,EAC1C,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,OAAO,oBAAoB,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,oBAAoB,CAAA;CAAO,GACnF,OAAO,CAAC,uBAAuB,CAAC,CA+BlC"}

package/dist/lib/local-candidate-classify.js

@@ -0,0 +1,53 @@
+import { createConfigStore } from './config.js';
+/**
+ * Type a set of candidate edges with whichever local detector ALIGN_DETECTOR selects.
+ *
+ * v0 (ALIGN_DETECTOR=v0): the pairwise classifier, one call per candidate, stopping after a
+ * provider stop (ALI-692) - moved here verbatim from `checkAlignment` and `linkPass` so both
+ * callers share it.
+ * v1 (the default): one call over the whole set (local-set-classifier.ts). A candidate v1 judged as having no
+ * relationship comes back typed `relates` at its similarity, exactly what a judged, unrelated
+ * pair reads as to every caller today; a whole-call failure is reported on every candidate.
+ *
+ * `order` keeps v0's two orientations: `check` asks how the candidate relates to the proposed
+ * change (subject is A), capture asks how the new decision relates to the existing one (existing
+ * is A). v1 always puts the new/proposed side as the NEW DECISION.
+ */
+import { resolveDetectorVersion } from '../detector/detector-version.js';
+import { classifyRelationship } from './local-relationship-classifier.js';
+import { classifyCandidateSet } from './local-set-classifier.js';
+export async function classifyCandidates(subject, candidates, order, deps = {}) {
+    const version = resolveDetectorVersion(process.env, createConfigStore().getDetector());
+    if (version === 'v1') {
+        if (!candidates.length)
+            return { version, outcomes: [] };
+        const result = await (deps.set ?? classifyCandidateSet)(subject, candidates);
+        if (!result.ok) {
+            const failed = { ok: false, reason: result.reason, ...(result.failure ? { failure: result.failure } : {}) };
+            return { version, outcomes: candidates.map(() => failed) };
+        }
+        return {
+            version,
+            outcomes: result.verdicts.map((v) => ({
+                ok: true,
+                relationship: { type: (v.relation ?? 'relates'), confidence: v.confidence, ...(v.reason ? { reason: v.reason } : {}) },
+            })),
+        };
+    }
+    const pair = deps.pair ?? classifyRelationship;
+    const outcomes = [];
+    let chainStopped = false;
+    for (const c of candidates) {
+        // ALI-692: a recorded chain stop is a property of the PROVIDER, not of this candidate, so
+        // asking again per candidate repeats one doomed call N times.
+        const lite = { title: c.title, summary: c.summary };
+        const outcome = chainStopped
+            ? { ok: false, reason: 'classifier_error' }
+            : await (order === 'subject-first' ? pair({ title: subject.title, summary: subject.summary }, lite) : pair(lite, { title: subject.title, summary: subject.summary }));
+        if (!outcome.ok && outcome.failure?.kind === 'provider_stopped')
+            chainStopped = true;
+        outcomes.push(outcome);
+    }
+    return { version, outcomes };
+}
+//# sourceMappingURL=local-candidate-classify.js.map

package/dist/lib/local-candidate-classify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-candidate-classify.js","sourceRoot":"","sources":["../../src/lib/local-candidate-classify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAwB,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAC/F,OAAO,EAA8B,oBAAoB,EAAyB,MAAM,oCAAoC,CAAC;AAC7H,OAAO,EAAE,oBAAoB,EAAsC,MAAM,2BAA2B,CAAC;AAOrG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAmB,EACnB,UAAmC,EACnC,KAA0C,EAC1C,OAAkF,EAAE;IAEpF,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,CAAC,GAAG,EAAE,iBAAiB,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACvF,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,UAAU,CAAC,MAAM;YAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC7E,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,MAAM,GAA0B,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACnI,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7D,CAAC;QACD,OAAO;YACL,OAAO;YACP,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpC,EAAE,EAAE,IAAI;gBACR,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,SAAS,CAAqB,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;aAC3I,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,oBAAoB,CAAC;IAC/C,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,0FAA0F;QAC1F,8DAA8D;QAC9D,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACpD,MAAM,OAAO,GAA0B,YAAY;YACjD,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE;YAC3C,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxK,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE,IAAI,KAAK,kBAAkB;YAAE,YAAY,GAAG,IAAI,CAAC;QACrF,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC"}

package/dist/lib/local-db-epoch.d.ts

@@ -0,0 +1,4 @@
+import type { DatabaseSync } from 'node:sqlite';
+export declare function rowSetEpoch(db: DatabaseSync): number;
+export declare function bumpRowSetEpoch(db: DatabaseSync): void;
+//# sourceMappingURL=local-db-epoch.d.ts.map

package/dist/lib/local-db-epoch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-db-epoch.d.ts","sourceRoot":"","sources":["../../src/lib/local-db-epoch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAehD,wBAAgB,WAAW,CAAC,EAAE,EAAE,YAAY,GAAG,MAAM,CAEpD;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CAEtD"}

package/dist/lib/local-db-epoch.js

@@ -0,0 +1,19 @@
+/**
+ * A per-connection counter that goes up whenever a decision is deleted or re-id'd, or an
+ * embedding is deleted or replaced. A holder of a COPY of the graph's embeddings (the ingest
+ * matrix) remembers the value it built at and rebuilds when it moves, so staleness is
+ * impossible by construction: it does not depend on the holder knowing which code paths
+ * delete rows. Kept beside the connection and not in the schema, so it costs no migration.
+ *
+ * Every writer of those changes calls bumpRowSetEpoch: deleteDecisionWithDependents,
+ * absorbLoser, the open-time duplicate collapse, dropAll and setEmbedding over an existing
+ * row. local-db-row-set-epoch.test.ts has one test per path.
+ */
+const epochs = new WeakMap();
+export function rowSetEpoch(db) {
+    return epochs.get(db) ?? 0;
+}
+export function bumpRowSetEpoch(db) {
+    epochs.set(db, rowSetEpoch(db) + 1);
+}
+//# sourceMappingURL=local-db-epoch.js.map

package/dist/lib/local-db-epoch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-db-epoch.js","sourceRoot":"","sources":["../../src/lib/local-db-epoch.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AACH,MAAM,MAAM,GAAG,IAAI,OAAO,EAAwB,CAAC;AAEnD,MAAM,UAAU,WAAW,CAAC,EAAgB;IAC1C,OAAO,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAAgB;IAC9C,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AACtC,CAAC"}

package/dist/lib/local-db-migrate.d.ts

@@ -0,0 +1,85 @@
+import type { DatabaseSync } from 'node:sqlite';
+export declare const SCHEMA = "\nCREATE TABLE IF NOT EXISTS decisions (\n  id TEXT PRIMARY KEY,\n  title TEXT NOT NULL,\n  summary TEXT NOT NULL,\n  source_url TEXT,\n  platform TEXT NOT NULL DEFAULT 'cli',\n  created_at TEXT NOT NULL DEFAULT (datetime('now')),\n  repo TEXT,\n  decided_at TEXT,\n  decider_kind TEXT,\n  confirmed_by TEXT,\n  confirmed_at TEXT,\n  ratified_by TEXT,\n  ratified_at TEXT\n);\n\nCREATE TABLE IF NOT EXISTS decision_audit (\n  id TEXT PRIMARY KEY,\n  decision_id TEXT NOT NULL,\n  action TEXT NOT NULL,\n  actor TEXT,\n  detail TEXT,\n  created_at TEXT NOT NULL DEFAULT (datetime('now'))\n);\n\nCREATE TABLE IF NOT EXISTS decision_embeddings (\n  decision_id TEXT PRIMARY KEY REFERENCES decisions(id) ON DELETE CASCADE,\n  embedding BLOB NOT NULL,\n  model TEXT\n);\n\nCREATE TABLE IF NOT EXISTS decision_links (\n  id TEXT PRIMARY KEY,\n  source_id TEXT NOT NULL REFERENCES decisions(id) ON DELETE CASCADE,\n  target_id TEXT NOT NULL REFERENCES decisions(id) ON DELETE CASCADE,\n  relation TEXT NOT NULL,\n  confidence REAL NOT NULL DEFAULT 1.0,\n  created_at TEXT NOT NULL DEFAULT (datetime('now'))\n);\n\nCREATE TABLE IF NOT EXISTS decision_refs (\n  decision_id TEXT NOT NULL REFERENCES decisions(id) ON DELETE CASCADE,\n  ref TEXT NOT NULL,\n  platform TEXT NOT NULL,\n  PRIMARY KEY (decision_id, ref)\n);\n";
+/**
+ * Schema version this build expects. Bump when adding a step to `migrate`.
+ *
+ * Exported so a test can assert the migration WROTE the version it claims, without hardcoding
+ * the number - a test pinning a literal 1 had to be edited by this change rather than passing
+ * or failing on its own merits. A parity test also derives the highest `version <` branch in
+ * `migrate` from the source and compares it here, because forgetting the bump leaves the new
+ * branch running destructively on every open with nothing to stop it.
+ */
+export declare const SCHEMA_VERSION = 11;
+/** The title connector-core 0.5.0 gave every Slack thread whose root was deleted. The 0.6.0
+ *  fetcher titles such a thread from its first human message, or drops it; either way this
+ *  row is a duplicate-to-be under the (source_url, title) key, or noise. */
+export declare const SLACK_TOMBSTONE_TITLE = "This message was deleted.";
+/**
+ * One-time data migrations, tracked in SQLite's built-in `user_version`.
+ *
+ * 1. ALI-503: relabel the cosine-similarity links that were written as `conflicts_with`.
+ *    Every such row at version 0 is provably an artefact, because `insertLink` had exactly
+ *    one caller and it hardcoded that relation for any pair over 0.65 cosine. No classifier
+ *    verdict was ever persisted, so there is no earned row to damage.
+ *
+ * 2. A decision's `source_url` identifies it, and nothing enforced that: `insertDecision` minted
+ *    a fresh UUID per call, so re-importing the same commit added a second copy. The documented
+ *    first run does exactly that - `setup --local` seeds from git, then its own outro tells you
+ *    to run `align connect git` - so a graph goes from 2 decisions to 4 by following the tips.
+ *    Collapse the existing duplicates, then make them unrepresentable with a unique index.
+ *
+ * 3. ALI-798: add the `repo` column (missing on any graph that predates it) and backfill it
+ *    for every existing row from `source_url`, via the same `repoFromSourceUrl` the importer
+ *    now stamps new rows with - one reader of the URL shape, used for both. A row whose
+ *    source is not code (Jira, Slack, a bare capture) stays NULL, which is "unattributed",
+ *    not "wrong": `--repo` scoping always includes unattributed rows alongside the named
+ *    repo (see local-gateway-client.ts), so nothing existing becomes invisible.
+ *
+ * 4. ALI-829: add `decided_at` - when the decision was MADE, from the source's own
+ *    timestamp, as distinct from `created_at`, the minute this CLI imported it. Every one
+ *    of the 684 rows in the 2026-09-02 measurement carried the ingest minute and nothing
+ *    else, so "what changed since March" was unanswerable offline. No backfill, unlike
+ *    `repo`: a repo is derivable from a stored source_url, and a decision date is not
+ *    derivable from anything already in the row. A re-import fills it in; inventing one
+ *    from created_at would write the exact wrong fact this column exists to correct.
+ *
+ *    Same bump, second step: drop the Slack rows titled by a deleted root. The 0.6.0
+ *    fetcher titles a thread from its first human message, and the dedup key is
+ *    (source_url, title), so each of those rows would otherwise be re-inserted BESIDE its
+ *    tombstone twin on the next import (35 of 39 on the 2026-09-02 graph). The next import
+ *    recreates the real ones with real titles; the ones that were only bot output on a
+ *    deleted root do not come back, which is the point. Foreign keys are off in this
+ *    database (see step 2), so the dependent rows are deleted explicitly - including any
+ *    link a human adjudicated on such a row. That is a real loss, accepted: the row's
+ *    identity is changing under it, and the re-import classifies the retitled thread
+ *    afresh. Scoped to platform = 'slack': a git commit or a captured note that happens to
+ *    carry the same words is not a tombstone and is left alone.
+ *
+ * 5. ALI-831: add the decider/ratified columns (`decider_kind`, `confirmed_by`,
+ *    `confirmed_at`, `ratified_by`, `ratified_at`) so an agent-made decision can enter as a
+ *    CLAIM a human later stands behind, and the `decision_audit` table the human act is
+ *    recorded in. No backfill, on purpose: a row captured before the column reads as
+ *    'unknown', and stamping 'human' on it from its platform would be the retroactive
+ *    guess align-stack's migration 113 refuses. The columns are added here rather than only
+ *    in SCHEMA because CREATE TABLE IF NOT EXISTS never alters an existing table.
+ *
+ * 6. ALI-787: tag each embedding with the model that produced it (see LEGACY_EMBEDDING_MODEL).
+ *
+ * 7. L2: per-source sync state, `source_key` identity with a backed-up twin merge,
+ *    `detail_pending`, `enriched_at` (NULL on every existing row) and `local_judgements`.
+ *    See local-db-v7.ts.
+ *
+ * The version guard is load-bearing rather than tidiness. The same UPDATE run on every open
+ * is indistinguishable from this one today, and starts silently eating genuine conflicts the
+ * moment anything writes one.
+ */
+/**
+ * Remove a decision and everything hanging off it. Foreign keys are off in this database
+ * (see migrate, step 2), so the dependents are named explicitly rather than cascaded. One
+ * writer for the v4 tombstone sweep and the ingest-time twin removal (ALI-829).
+ */
+export declare function deleteDecisionWithDependents(db: DatabaseSync, id: string): void;
+/** The one downgrade guard: migrate() and every other writer of this file (the sync state, purge) call it. */
+export declare function assertSchemaSupported(version: number, db?: DatabaseSync): void;
+export declare function migrate(db: DatabaseSync): void;
+//# sourceMappingURL=local-db-migrate.d.ts.map

package/dist/lib/local-db-migrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-db-migrate.d.ts","sourceRoot":"","sources":["../../src/lib/local-db-migrate.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAShD,eAAO,MAAM,MAAM,oyCA+ClB,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc,KAAK,CAAC;AAEjC;;4EAE4E;AAC5E,eAAO,MAAM,qBAAqB,8BAA8B,CAAC;AAoBjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AACH;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAO/E;AAED,8GAA8G;AAC9G,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,YAAY,GAAG,IAAI,CAS9E;AAsBD,wBAAgB,OAAO,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CAmT9C"}