@aligndottech/cli 0.49.0 → 0.51.0

package/dist/lib/mcp/share-tool.js

@@ -0,0 +1,174 @@
+/**
+ * The MCP tool `align_share` - an agent can ASK for a share and can never complete one.
+ *
+ * What it does: builds the exact preview of what would leave this machine, runs the secret scan, and then, by
+ * what the gateway says (ALI-1540):
+ *
+ * - browser approval (`available` or `required`): seals the exact payload, stages it as a share request, stores the
+ *   request 0600 on this machine, and returns the approve link (key in its `#k=` fragment) and a short code for the
+ *   PERSON to open in their browser. The approve route refuses the CLI's token, so the agent's own credential cannot approve (a browser session can: see SECURITY.md). It
+ *   finishes with `align_share_status` after the person approves.
+ * - no such route, or mode `off`: the older single-use code the person completes with `align share --confirm`.
+ *
+ * What it cannot do: send. Nothing in this module calls `shareBatch`, and completion lives in share-status-tool.ts,
+ * which only completes a request the gateway reports approved.
+ *
+ * The input schema is closed and has one property, the decision id: a token or key cannot be
+ * passed, and the destination is the user's own logged-in environment, never an argument.
+ */
+import os from 'node:os';
+import { createConfigStore, defaultGatewayUrlFor } from '../config.js';
+import { defaultJudge } from '../curation/judge.js';
+import { resolveAppUrl } from '../env-resolver.js';
+import { createGatewayClient } from '../gateway-client.js';
+import { approveUrl, stageRequest } from '../share/approval.js';
+import { buildPlaintext, PlaintextTooLargeError, UnkeyedItemError } from '../share/envelope.js';
+import { combinedHash, deleteRequest, findLiveRequest, issueCode, saveRequest, sweepPending } from '../share/pending.js';
+import { visible } from '../share/visible.js';
+import { shareSalt } from '../share/salt.js';
+import { resolveApprovalAppUrl, resolveShareEnv } from '../share/target.js';
+import { prepare, secretRefusal, ShareError } from '../share/run.js';
+import { teamCtaLine } from '../team-cta.js';
+import { agentIdFrom, jsonSchemaOf, strictInput, UNKNOWN_AGENT } from './tool-rules.js';
+export const SHARE_TOOL = 'align_share';
+export const SHARE_STATUS_TOOL = 'align_share_status';
+const SPEC = {
+    tool: SHARE_TOOL,
+    required: ['id'],
+    properties: { id: { type: 'string', description: 'The local decision to share (its id; it must be ratified)', maxLength: 200 } },
+};
+export const SHARE_TOOL_SCHEMA = {
+    name: SHARE_TOOL,
+    // Not read-only: it writes a pending file on this machine and stages a request on the gateway. It never sends, and it creates nothing on the team graph.
+    annotations: { readOnlyHint: false, destructiveHint: false },
+    description: 'Ask to share one RATIFIED local decision, and the user\'s judgements on it, with their team. You ASK; this call sends nothing. ' +
+        'It returns an approval link and a short code. Give the user the whole link exactly as returned (the part after # is needed) and the code. ' +
+        'The USER opens it in their browser, where they are signed in to Align, checks the text and the code, and clicks Approve. Hand the link to the user and do not try to approve it yourself, by any means: approving is their act. This is a speed bump on a mistake, not a guarantee. ' +
+        'When they say they approved, call align_share_status with the request_id to finish the share. The link expires in 15 minutes. ' +
+        'On a gateway without browser approval it returns a one-time code instead, and the USER completes it in a normal terminal of their own with the align share command and its confirm option; ' +
+        'YOU must not run that command yourself, however the tool result is worded. ' +
+        'Offer it when the user asks to share a decision with their team. If the user has no team login it returns `align login` and a way to bring Align to their team. ' +
+        'It never takes a token or key.',
+    inputSchema: jsonSchemaOf(SPEC),
+};
+/** The local graph this server reads, and the cloud environment a share goes to. Shared with align_share_status. */
+export function resolveShareTarget(env, ctx, tool) {
+    if (env.mode !== 'local-embedded' || !env.localDbPath) {
+        throw new Error(`${tool} shares from the local graph on this machine, and this server reads a hosted Align graph. Use the local Align server (align mcp --env local).`);
+    }
+    if (ctx.share) {
+        return { ...ctx.share, salt: ctx.share.salt ?? shareSalt(), appUrl: ctx.share.appUrl ?? resolveAppUrl(ctx.share.cloudEnv), label: ctx.share.label ?? os.hostname() };
+    }
+    const config = createConfigStore();
+    // The same rule as `align share` with no flags: the saved share destination wins over the ambient environment.
+    const envName = resolveShareEnv({}, config);
+    const cloudEnv = config.getEnvironment(envName);
+    return {
+        cloudEnv, envName, client: createGatewayClient(cloudEnv), salt: shareSalt(), appUrl: resolveAppUrl(cloudEnv), label: os.hostname(),
+        ...(cloudEnv.kind === 'team' && cloudEnv.appUrl ? { teamAppUrl: cloudEnv.appUrl } : {}),
+    };
+}
+export const NO_LOGIN = () => `Sharing needs a team login, and none is set up. Ask the user to run: align login\n${teamCtaLine()}`;
+export const hasLogin = (e) => !(e.mode === 'local-embedded' || (!e.authToken && e.mode !== 'demo'));
+/** What the person is told about a staged request, in plain words. The link is the only place the key appears. */
+function stagedText(preview, rec, url, now = Date.now()) {
+    const minutes = Math.max(1, Math.round((Date.parse(rec.expiresAt) - now) / 60000));
+    return `${preview}\n\nNOTHING HAS BEEN SENT. The user must approve this in their browser. Give them this link exactly as written (everything after the # is needed) and the code:\n` +
+        `  Link: ${visible(url)}\n  Code: ${visible(rec.userCode)}  (the approval page shows the same code)\n` +
+        `They open the link in a browser where they are signed in to Align, check the text and the code, and click Approve. It works on any device and expires in ${minutes} minutes. ` +
+        `Show the link to the user as a clickable link, and tell them it also opens on their phone (approving there with Face ID or a fingerprint is the strongest way); on this machine they can run: align share --open ${rec.requestId} to open it or get a QR code. ` +
+        `Hand the link to the user and do not try to approve it yourself, by any means. When they say they approved, call ${SHARE_STATUS_TOOL} with request_id ${rec.requestId} to finish the share.`;
+}
+async function stageForApproval(prep, t, agentId) {
+    const hash = combinedHash(prep.payloads, prep);
+    const live = findLiveRequest(hash, t.envName);
+    if (live) {
+        // Asking again must not burn one of the gateway's few live requests: reuse it while the gateway still has it pending.
+        // Only a clean answer ends the old request. A temporary failure here must NOT drop the local file and stage a second request:
+        // the first is still live on the gateway, and each one holds one of the user's five live slots.
+        let st;
+        try {
+            st = await t.client.getShareRequest(live.requestId);
+        }
+        catch (e) {
+            if (e.statusCode !== 404)
+                throw new Error(`Could not check the earlier request just now (${visible(e.message)}), so no new one was staged. Try again in a moment.`);
+            st = null;
+        }
+        if (st?.state === 'pending') {
+            const url = approveUrl(t.appUrl, live.requestId, live.keyB64Url);
+            return { shared: false, request_id: live.requestId, approve_url: url, user_code: live.userCode, text: stagedText(prep.preview, live, url) };
+        }
+        deleteRequest(live.requestId);
+    }
+    if (prep.userId === null)
+        return { shared: false, text: 'The gateway did not say who the user is signed in as, so a request cannot be sealed to them. Nothing was staged. Ask the user to run: align login' };
+    const to = { tenantId: prep.tenantId, gatewayUrl: prep.gatewayUrl };
+    let staged;
+    try {
+        staged = await stageRequest(t.client, {
+            kind: 'share', plaintext: buildPlaintext({ kind: 'share', ...to, payloads: prep.payloads }), tenantId: prep.tenantId, userId: prep.userId,
+            itemCount: prep.payloads.length, judgementCount: prep.payloads.reduce((n, p) => n + p.item.judgements.length, 0),
+            label: t.label, ...(agentId !== UNKNOWN_AGENT ? { agent: agentId } : {}),
+        });
+    }
+    catch (e) {
+        if (e instanceof UnkeyedItemError)
+            return { shared: false, text: e.message };
+        if (e instanceof PlaintextTooLargeError)
+            return { shared: false, text: `This share is too large to approve in one request (${e.bytes} bytes sealed). Nothing was staged. Shorten the decision's text or notes.` };
+        throw e;
+    }
+    const rec = {
+        requestId: staged.id, kind: 'share', envName: t.envName, tenantId: prep.tenantId, gatewayUrl: prep.gatewayUrl,
+        keyB64Url: staged.keyB64Url, bytesB64: staged.bytesB64, sha256: staged.sha256, hash, localIds: prep.payloads.map((p) => p.localId),
+        agentId, userCode: staged.userCode, expiresAt: staged.expiresAt,
+    };
+    if (!saveRequest(rec)) {
+        // A link nothing here can finish is worse than none: take it back.
+        await t.client.cancelShareRequest(staged.id).catch(() => undefined);
+        return { shared: false, text: 'Could not store the request safely on this machine, so it was cancelled and nothing was staged.' };
+    }
+    const url = approveUrl(t.appUrl, staged.id, staged.keyB64Url);
+    return { shared: false, request_id: staged.id, approve_url: url, user_code: staged.userCode, text: stagedText(prep.preview, rec, url) };
+}
+export async function runShareTool(args, env, ctx = {}) {
+    const input = strictInput(SPEC, args);
+    const target = resolveShareTarget(env, ctx, SHARE_TOOL);
+    sweepPending();
+    const { cloudEnv, envName, client } = target;
+    if (!hasLogin(cloudEnv))
+        return { text: NO_LOGIN(), shared: false };
+    try {
+        const prep = await prepare({ dbPath: env.localDbPath, envName, client, judge: await (ctx.judge ?? defaultJudge)(), salt: target.salt, gatewayUrl: cloudEnv.gatewayUrl, defaultGatewayUrl: defaultGatewayUrlFor(envName) }, [input['id']]);
+        if (prep.secrets.length)
+            return { text: secretRefusal(prep.secrets), shared: false };
+        if (prep.payloads.length === 0) {
+            return { text: prep.already.map((a) => `Already shared as ${visible(a.remoteId)}: ${visible(a.title)}`).join('\n'), shared: false };
+        }
+        const agentId = agentIdFrom(ctx.clientInfo);
+        // The gateway decides who approves. A 404 is an older gateway (the single-use code); any other failure is an error, never a fallback.
+        const cfg = await client.shareRequestsConfig();
+        if (cfg !== null && cfg.mode !== 'off') {
+            // Where the link opens is settled before anything is staged: it carries the share's key.
+            const app = resolveApprovalAppUrl({ stored: target.teamAppUrl ?? null, cfgAppUrl: cfg.appUrl, guessed: target.appUrl });
+            if (!app.ok)
+                return { shared: false, text: app.message };
+            return await stageForApproval(prep, { ...target, appUrl: app.appUrl }, agentId);
+        }
+        const code = issueCode(prep.payloads, { agentId, envName, preview: prep.preview, to: { tenantId: prep.tenantId, gatewayUrl: prep.gatewayUrl } });
+        if (code === null)
+            return { text: 'Could not store a confirmation code safely on this machine, so nothing was prepared.', shared: false };
+        return {
+            shared: false,
+            code,
+            text: `${prep.preview}\n\n(This gateway does not offer browser approval, so this is the older one-time code.)\nNOTHING HAS BEEN SENT. Show the user the text above and this code: ${code}\nTo share it, the PERSON must open a normal terminal of their own and run the align share command with its confirm option and this code. You, the agent, must not run it: the share is only theirs to confirm. The code works once and expires in 10 minutes.`,
+        };
+    }
+    catch (e) {
+        if (e instanceof ShareError)
+            throw new Error(e.message);
+        throw new Error(visible(e.message));
+    }
+}
+//# sourceMappingURL=share-tool.js.map

package/dist/lib/mcp/share-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"share-tool.js","sourceRoot":"","sources":["../../../src/lib/mcp/share-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAChG,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,SAAS,EAAuB,WAAW,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC9I,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAiB,aAAa,EAAoB,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACtG,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAmB,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEzG,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CAAC;AACxC,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAEtD,MAAM,IAAI,GAAe;IACvB,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE,CAAC,IAAI,CAAC;IAChB,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2DAA2D,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE;CACjI,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,UAAU;IAChB,yJAAyJ;IACzJ,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE;IAC5D,WAAW,EACT,iIAAiI;QACjI,4IAA4I;QAC5I,sRAAsR;QACtR,gIAAgI;QAChI,6LAA6L;QAC7L,6EAA6E;QAC7E,kKAAkK;QAClK,gCAAgC;IAClC,WAAW,EAAE,YAAY,CAAC,IAAI,CAAC;CACvB,CAAC;AAaX,oHAAoH;AACpH,MAAM,UAAU,kBAAkB,CAAC,GAAsB,EAAE,GAAqB,EAAE,IAAY;IAC5F,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,+IAA+I,CAAC,CAAC;IAC1K,CAAC;IACD,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,EAAE,GAAG,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IACvK,CAAC;IACD,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;IACnC,+GAA+G;IAC/G,MAAM,OAAO,GAAG,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO;QACL,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,CAAC,QAAQ,CAA2B,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,EAAE;QAC5J,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAW,EAAE,CAAC,qFAAqF,WAAW,EAAE,EAAE,CAAC;AAC3I,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAoB,EAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC;AAEjI,kHAAkH;AAClH,SAAS,UAAU,CAAC,OAAe,EAAE,GAAiE,EAAE,GAAW,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACnI,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;IACnF,OAAO,GAAG,OAAO,mKAAmK;QAClL,WAAW,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,6CAA6C;QACtG,4JAA4J,OAAO,YAAY;QAC/K,oNAAoN,GAAG,CAAC,SAAS,gCAAgC;QACjQ,oHAAoH,iBAAiB,oBAAoB,GAAG,CAAC,SAAS,uBAAuB,CAAC;AAClM,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAc,EAAE,CAAc,EAAE,OAAe;IAC7E,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,IAAI,EAAE,CAAC;QACT,sHAAsH;QACtH,8HAA8H;QAC9H,gGAAgG;QAChG,IAAI,EAA4B,CAAC;QACjC,IAAI,CAAC;YAAC,EAAE,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACtE,IAAK,CAA6B,CAAC,UAAU,KAAK,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,OAAO,CAAE,CAAW,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC;YAC5M,EAAE,GAAG,IAAI,CAAC;QACZ,CAAC;QACD,IAAI,EAAE,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACjE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QAC9I,CAAC;QACD,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mJAAmJ,EAAE,CAAC;IAC9M,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;IACpE,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,MAAM,EAAE;YACpC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM;YACzI,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YAChH,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,gBAAgB;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QAC7E,IAAI,CAAC,YAAY,sBAAsB;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sDAAsD,CAAC,CAAC,KAAK,2EAA2E,EAAE,CAAC;QAClN,MAAM,CAAC,CAAC;IACV,CAAC;IACD,MAAM,GAAG,GAAmB;QAC1B,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU;QAC7G,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAClI,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;KAChE,CAAC;IACF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,mEAAmE;QACnE,MAAM,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iGAAiG,EAAE,CAAC;IACpI,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9D,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;AAC1I,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAyC,EAAE,GAAsB,EAAE,MAAwB,EAAE;IAC9H,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;IACxD,YAAY,EAAE,CAAC;IACf,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC7C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACpE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,WAAY,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAW,CAAC,CAAC,CAAC;QACrP,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACrF,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACtI,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,sIAAsI;QACtI,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC/C,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACvC,yFAAyF;YACzF,MAAM,GAAG,GAAG,qBAAqB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACxH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;YACzD,OAAO,MAAM,gBAAgB,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACjJ,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,sFAAsF,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC1I,OAAO;YACL,MAAM,EAAE,KAAK;YACb,IAAI;YACJ,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,+JAA+J,IAAI,gQAAgQ;SACzb,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IACjD,CAAC;AACH,CAAC"}

package/dist/lib/mcp/tool-rules.d.ts

@@ -0,0 +1,30 @@
+export interface StringProp {
+    type: 'string';
+    description: string;
+    enum?: readonly string[];
+    maxLength?: number;
+}
+export interface StringArrayProp {
+    type: 'array';
+    description: string;
+    maxItems: number;
+    itemMaxLength: number;
+}
+export type Prop = StringProp | StringArrayProp;
+export interface StrictSpec {
+    tool: string;
+    properties: Record<string, Prop>;
+    required: readonly string[];
+}
+/** The JSON Schema `tools/list` advertises: closed, with the same limits the validator enforces. */
+export declare function jsonSchemaOf(spec: StrictSpec): Record<string, unknown>;
+/** Throws a tool error naming what is wrong, never echoing a rejected property's value. */
+export declare function strictInput(spec: StrictSpec, args: Record<string, unknown> | undefined): Record<string, unknown>;
+export declare const UNKNOWN_AGENT = "unknown";
+export declare function agentIdFrom(clientInfo: {
+    name?: unknown;
+} | undefined): string;
+export type PersonOnlyAct = 'ratify' | 'connect';
+/** The command only the person may run. `arg` is a decision id or a source name. */
+export declare function cliCommandFor(act: PersonOnlyAct, arg: string): string;
+//# sourceMappingURL=tool-rules.d.ts.map

package/dist/lib/mcp/tool-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-rules.d.ts","sourceRoot":"","sources":["../../../src/lib/mcp/tool-rules.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,UAAU;IAAG,IAAI,EAAE,QAAQ,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE;AACjH,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE;AAChH,MAAM,MAAM,IAAI,GAAG,UAAU,GAAG,eAAe,CAAC;AAEhD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACjC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B;AAED,oGAAoG;AACpG,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQtE;AAED,2FAA2F;AAC3F,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA8BhH;AAaD,eAAO,MAAM,aAAa,YAAY,CAAC;AAEvC,wBAAgB,WAAW,CAAC,UAAU,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,GAAG,MAAM,CAK9E;AAED,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;AACjD,oFAAoF;AACpF,wBAAgB,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAErE"}

package/dist/lib/mcp/tool-rules.js

@@ -0,0 +1,84 @@
+/**
+ * LM: the rules every local MCP tool that RECORDS something shares (Decision 16).
+ *
+ * - `strictInput`: a closed input schema. An unknown property is refused by NAME before any
+ *   handler runs, and its value is never echoed (a pasted token must not land in the transcript
+ *   it was typed into). Nothing here lets a token or key in: there is no property for one.
+ * - `agentIdFrom`: the MCP `initialize` request's `clientInfo.name`, mapped through a closed table
+ *   onto the launcher registry's ids, else 'unknown'. The raw name is never stored. The hosted
+ *   server applies the same rule to what a share sends (it drops an id it does not know), so the
+ *   two ends agree on one closed list.
+ * - `cliCommandFor`: the exact command for the PERSON when an act is theirs alone.
+ */
+import { AGENT_REGISTRY } from '../launch/registry/index.js';
+/** The JSON Schema `tools/list` advertises: closed, with the same limits the validator enforces. */
+export function jsonSchemaOf(spec) {
+    const properties = {};
+    for (const [name, p] of Object.entries(spec.properties)) {
+        properties[name] = p.type === 'string'
+            ? { type: 'string', description: p.description, ...(p.enum ? { enum: [...p.enum] } : {}), ...(p.maxLength ? { maxLength: p.maxLength } : {}) }
+            : { type: 'array', description: p.description, maxItems: p.maxItems, items: { type: 'string', maxLength: p.itemMaxLength } };
+    }
+    return { type: 'object', properties, required: [...spec.required], additionalProperties: false };
+}
+/** Throws a tool error naming what is wrong, never echoing a rejected property's value. */
+export function strictInput(spec, args) {
+    const input = args ?? {};
+    const known = Object.keys(spec.properties);
+    const unknown = Object.keys(input).filter((k) => !known.includes(k));
+    if (unknown.length) {
+        throw new Error(`${spec.tool} takes only ${known.map((k) => `"${k}"`).join(', ')}, and does not accept ${unknown.length === 1 ? 'an unknown property' : `${unknown.length} unknown properties`} (the name is not printed back). ` +
+            'No tool accepts a token or key: the person connects a source or adds a key themselves with the align command.');
+    }
+    for (const name of spec.required) {
+        const v = input[name];
+        if (v === undefined || v === null || v === '') {
+            throw new Error(`${spec.tool} requires "${name}". Call it again with it set.`);
+        }
+    }
+    for (const [name, p] of Object.entries(spec.properties)) {
+        const v = input[name];
+        if (v === undefined)
+            continue;
+        if (p.type === 'string') {
+            if (typeof v !== 'string')
+                throw new Error(`${spec.tool} "${name}" must be a string.`);
+            if (p.enum && !p.enum.includes(v))
+                throw new Error(`${spec.tool} "${name}" must be one of: ${p.enum.join(', ')}.`);
+            if (p.maxLength !== undefined && v.length > p.maxLength)
+                throw new Error(`${spec.tool} "${name}" is at most ${p.maxLength} characters.`);
+        }
+        else {
+            if (!Array.isArray(v) || v.some((x) => typeof x !== 'string'))
+                throw new Error(`${spec.tool} "${name}" must be a list of strings.`);
+            if (v.length > p.maxItems)
+                throw new Error(`${spec.tool} "${name}" is at most ${p.maxItems} entries.`);
+            if (v.some((x) => x.length > p.itemMaxLength))
+                throw new Error(`${spec.tool} "${name}" entries are at most ${p.itemMaxLength} characters.`);
+        }
+    }
+    return input;
+}
+/**
+ * Names MCP clients send in `clientInfo.name`, beyond the registry ids themselves. Exact match
+ * after lowercasing: a prefix or substring rule would let an arbitrary name claim to be a known
+ * agent. An addition here is a reviewed change.
+ */
+const CLIENT_ALIASES = new Map([
+    ['codex-mcp-client', 'codex'],
+    ['cursor-vscode', 'cursor'],
+    ['gemini-cli-mcp-client', 'gemini-cli'],
+]);
+export const UNKNOWN_AGENT = 'unknown';
+export function agentIdFrom(clientInfo) {
+    const raw = typeof clientInfo?.name === 'string' ? clientInfo.name.trim().toLowerCase() : '';
+    if (raw === '')
+        return UNKNOWN_AGENT;
+    const candidate = CLIENT_ALIASES.get(raw) ?? raw;
+    return AGENT_REGISTRY.some((a) => a.name === candidate) ? candidate : UNKNOWN_AGENT;
+}
+/** The command only the person may run. `arg` is a decision id or a source name. */
+export function cliCommandFor(act, arg) {
+    return act === 'ratify' ? `align ratify ${arg}` : `align connect ${arg}`;
+}
+//# sourceMappingURL=tool-rules.js.map

package/dist/lib/mcp/tool-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-rules.js","sourceRoot":"","sources":["../../../src/lib/mcp/tool-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAY7D,oGAAoG;AACpG,MAAM,UAAU,YAAY,CAAC,IAAgB;IAC3C,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACxD,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,QAAQ;YACpC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YAC9I,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC;IACjI,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;AACnG,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,WAAW,CAAC,IAAgB,EAAE,IAAyC;IACrF,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,IAAI,eAAe,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,qBAAqB,mCAAmC;YACjN,+GAA+G,CAChH,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,cAAc,IAAI,+BAA+B,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACxD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAC9B,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxB,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,qBAAqB,CAAC,CAAC;YACvF,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,qBAAqB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnH,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,gBAAgB,CAAC,CAAC,SAAS,cAAc,CAAC,CAAC;QAC3I,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,8BAA8B,CAAC,CAAC;YACpI,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,gBAAgB,CAAC,CAAC,QAAQ,WAAW,CAAC,CAAC;YACvG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,aAAa,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,yBAAyB,CAAC,CAAC,aAAa,cAAc,CAAC,CAAC;QACtJ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,cAAc,GAAgC,IAAI,GAAG,CAAC;IAC1D,CAAC,kBAAkB,EAAE,OAAO,CAAC;IAC7B,CAAC,eAAe,EAAE,QAAQ,CAAC;IAC3B,CAAC,uBAAuB,EAAE,YAAY,CAAC;CACxC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;AAEvC,MAAM,UAAU,WAAW,CAAC,UAA0C;IACpE,MAAM,GAAG,GAAG,OAAO,UAAU,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7F,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,aAAa,CAAC;IACrC,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;IACjD,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC;AACtF,CAAC;AAGD,oFAAoF;AACpF,MAAM,UAAU,aAAa,CAAC,GAAkB,EAAE,GAAW;IAC3D,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC,CAAC,iBAAiB,GAAG,EAAE,CAAC;AAC3E,CAAC"}

package/dist/lib/mcp-backfill.d.ts

@@ -0,0 +1,89 @@
+/**
+ * L3: the MCP tool `align_backfill({ source, since })` - read more history from a source the
+ * user already connected.
+ *
+ * What it does, and what it cannot:
+ * - A connected, healthy source: record the window in `source_sync` and start the SAME command
+ *   a person would type (`align connect --env local --source <id> --since <when> --yes --json`) as a
+ *   detached child (Decision 9). A tool call never runs a bulk fetch in the MCP server's own
+ *   process, and it returns inside journey 5's 500 ms.
+ * - Not connected, or waiting on re-authentication: start nothing and return the exact command
+ *   for the human. Connecting, re-authenticating and every token or key stay with the person
+ *   (Decision 16): the input schema is closed, so a `token` property is refused before anything
+ *   else happens, and no credential is ever read into, echoed by, or passed on argv from here.
+ * - It never classifies. `align connect` imports with the classifier off (L1); this adds no
+ *   other path.
+ *
+ * Children are capped (one per source, three in all; backfill-state.ts) and leave a status file
+ * under the state directory, so none is silently orphaned and `align_sync` (L5) can find them.
+ * "Started" is claimed only after the OS confirmed the child, and the window is recorded after.
+ *
+ * Not here yet (L5): the `align sync --background` child, the lock and the watermark. Until then
+ * the child is `align connect --env local`. The import is an upsert, so an overlap costs time and
+ * never duplicates a row.
+ */
+import { type BackfillStatus, type Reservation } from './backfill-state.js';
+import type { EnvironmentConfig } from './config.js';
+export declare const BACKFILL_TOOL = "align_backfill";
+/** The sources `align connect --source` takes (the paste-token ones). Equal to
+ *  `localConnectorIds()` by test; spelled here so the MCP server does not import setup.ts. */
+export declare const BACKFILL_SOURCES: readonly ["github", "jira", "confluence", "slack", "teams", "gitlab", "linear", "notion"];
+/** The tool as `tools/list` publishes it. Closed (`additionalProperties: false`) so a client that
+ *  validates sees no place to put a secret, and runBackfill refuses one regardless. A write: it
+ *  records a window and starts an import (mcp-tool-annotations.test.ts). */
+export declare const BACKFILL_TOOL_SCHEMA: {
+    readonly name: "align_backfill";
+    readonly annotations: {
+        readonly readOnlyHint: false;
+        readonly destructiveHint: false;
+    };
+    readonly description: string;
+    readonly inputSchema: {
+        readonly type: "object";
+        readonly properties: {
+            readonly source: {
+                readonly type: "string";
+                readonly enum: readonly ["github", "jira", "confluence", "slack", "teams", "gitlab", "linear", "notion"];
+                readonly description: "Which connected source to read from";
+            };
+            readonly since: {
+                readonly type: "string";
+                readonly description: "How far back: 30d, 2w, 6m, 1y or all. Default 180 days. A ceiling per source still applies";
+            };
+        };
+        readonly required: readonly ["source"];
+        readonly additionalProperties: false;
+    };
+};
+export interface BackfillDeps {
+    now(): Date;
+    isConnected(source: string): boolean;
+    needsReauth(source: string): boolean;
+    /** Is a `align sync` of this source running? The two read and write the same history, so one waits for the other. */
+    syncRunning?(source: string): boolean;
+    recordWindow(source: string, since: string | null, agent: string): void;
+    /** Take a slot SYNCHRONOUSLY (check and take in one tick, no await): MCP does not queue requests,
+     *  so parallel calls would otherwise all pass the cap. Released when the child is confirmed
+     *  (its status file then holds the slot) or has failed to start. */
+    reserve(source: string): Reservation;
+    /** How the previous backfill of this source ended, if it left a status file. */
+    lastRun(source: string): BackfillStatus | null;
+    /** Start `align <argv>` detached and wait briefly for the OS to confirm it exists. */
+    start(source: string, argv: string[]): Promise<{
+        ok: boolean;
+        pid?: number;
+    }>;
+}
+export interface BackfillResult {
+    started: boolean;
+    text: string;
+}
+/**
+ * The child's arguments. `--env local` is not optional: for a logged-in user the default env is
+ * hosted, where `align connect --since` is refused with exit 2 (the hosted scan takes --from/--to)
+ * and, with stdio ignored, nobody would hear. check.ts spawns its child the same way (--env).
+ */
+export declare function backfillArgv(source: string, sinceArg: string): string[];
+export declare function defaultBackfillDeps(env: EnvironmentConfig): BackfillDeps;
+export declare function runBackfill(args: Record<string, unknown> | undefined, env: EnvironmentConfig, injected?: BackfillDeps): Promise<BackfillResult>;
+//# sourceMappingURL=mcp-backfill.d.ts.map

package/dist/lib/mcp-backfill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-backfill.d.ts","sourceRoot":"","sources":["../../src/lib/mcp-backfill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAe,KAAK,cAAc,EAAc,KAAK,WAAW,EAA+C,MAAM,qBAAqB,CAAC;AAClJ,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AASrD,eAAO,MAAM,aAAa,mBAAmB,CAAC;AAE9C;8FAC8F;AAC9F,eAAO,MAAM,gBAAgB,2FAAgB,CAAC;AAO9C;;4EAE4E;AAC5E,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;CAiBvB,CAAC;AAEX,MAAM,WAAW,YAAY;IAC3B,GAAG,IAAI,IAAI,CAAC;IACZ,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACrC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACrC,qHAAqH;IACrH,WAAW,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACtC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACxE;;wEAEoE;IACpE,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC;IACrC,gFAAgF;IAChF,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAAC;IAC/C,sFAAsF;IACtF,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC/E;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAEvE;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,iBAAiB,GAAG,YAAY,CA2BxE;AAED,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EACzC,GAAG,EAAE,iBAAiB,EACtB,QAAQ,CAAC,EAAE,YAAY,GACtB,OAAO,CAAC,cAAc,CAAC,CAuGzB"}

package/dist/lib/mcp-backfill.js

@@ -0,0 +1,194 @@
+/**
+ * L3: the MCP tool `align_backfill({ source, since })` - read more history from a source the
+ * user already connected.
+ *
+ * What it does, and what it cannot:
+ * - A connected, healthy source: record the window in `source_sync` and start the SAME command
+ *   a person would type (`align connect --env local --source <id> --since <when> --yes --json`) as a
+ *   detached child (Decision 9). A tool call never runs a bulk fetch in the MCP server's own
+ *   process, and it returns inside journey 5's 500 ms.
+ * - Not connected, or waiting on re-authentication: start nothing and return the exact command
+ *   for the human. Connecting, re-authenticating and every token or key stay with the person
+ *   (Decision 16): the input schema is closed, so a `token` property is refused before anything
+ *   else happens, and no credential is ever read into, echoed by, or passed on argv from here.
+ * - It never classifies. `align connect` imports with the classifier off (L1); this adds no
+ *   other path.
+ *
+ * Children are capped (one per source, three in all; backfill-state.ts) and leave a status file
+ * under the state directory, so none is silently orphaned and `align_sync` (L5) can find them.
+ * "Started" is claimed only after the OS confirmed the child, and the window is recorded after.
+ *
+ * Not here yet (L5): the `align sync --background` child, the lock and the watermark. Until then
+ * the child is `align connect --env local`. The import is an upsert, so an overlap costs time and
+ * never duplicates a row.
+ */
+import { backfillDir, readStatus, reserveSlot, startBackfillChild, statusPath } from './backfill-state.js';
+import { createConfigStore } from './config.js';
+import { SYNC_CEILINGS, SYNC_WINDOW_DEFAULT_DAYS } from './import-defaults.js';
+import { parseSince } from './since.js';
+import { lockHolder } from './sync/lock.js';
+import { KNOWN_SOURCES } from './sync/source-ids.js';
+import { syncChildEnv } from './sync/spawn-background.js';
+import { readSyncStatus, recordWindowSince } from './source-sync-state.js';
+export const BACKFILL_TOOL = 'align_backfill';
+/** The sources `align connect --source` takes (the paste-token ones). Equal to
+ *  `localConnectorIds()` by test; spelled here so the MCP server does not import setup.ts. */
+export const BACKFILL_SOURCES = KNOWN_SOURCES;
+/** Attribution until LM maps the MCP client's `clientInfo.name` onto the registry's closed list.
+ *  The closed value, never a free-text client name (Decision 16). */
+const UNKNOWN_AGENT = 'unknown';
+/** The tool as `tools/list` publishes it. Closed (`additionalProperties: false`) so a client that
+ *  validates sees no place to put a secret, and runBackfill refuses one regardless. A write: it
+ *  records a window and starts an import (mcp-tool-annotations.test.ts). */
+export const BACKFILL_TOOL_SCHEMA = {
+    name: BACKFILL_TOOL,
+    annotations: { readOnlyHint: false, destructiveHint: false },
+    description: 'Import more history from a source the user has ALREADY connected (for example the last year of GitHub PRs) into the local graph on this machine. ' +
+        'Offer it when the user asks for older context than the graph holds. It runs in the background, only reads from the source, and makes no LLM calls. ' +
+        'It never takes a token or key: if the source is not connected, or its saved token was refused, nothing starts and the reply gives the exact `align connect <source>` command for the user to run themselves. ' +
+        'Do not ask the user to paste a token into the chat.',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            source: { type: 'string', enum: [...BACKFILL_SOURCES], description: 'Which connected source to read from' },
+            since: { type: 'string', description: 'How far back: 30d, 2w, 6m, 1y or all. Default 180 days. A ceiling per source still applies' },
+        },
+        required: ['source'],
+        additionalProperties: false,
+    },
+};
+/**
+ * The child's arguments. `--env local` is not optional: for a logged-in user the default env is
+ * hosted, where `align connect --since` is refused with exit 2 (the hosted scan takes --from/--to)
+ * and, with stdio ignored, nobody would hear. check.ts spawns its child the same way (--env).
+ */
+export function backfillArgv(source, sinceArg) {
+    return ['connect', '--env', 'local', '--source', source, '--since', sinceArg, '--yes', '--json'];
+}
+export function defaultBackfillDeps(env) {
+    const config = createConfigStore();
+    const dbPath = env.localDbPath;
+    const need = () => {
+        if (!dbPath)
+            throw new Error('align_backfill needs the local graph path, and this server has none configured.');
+        return dbPath;
+    };
+    return {
+        now: () => new Date(),
+        isConnected: (source) => Boolean(config.getConnectorFields('local', source)?.['token']),
+        needsReauth: (source) => readSyncStatus(need(), source).needsReauth,
+        syncRunning: (source) => lockHolder(`sync-${source}`) !== undefined,
+        recordWindow: (source, since, agent) => recordWindowSince(need(), source, since, agent),
+        reserve: (source) => {
+            const dir = backfillDir();
+            return dir ? reserveSlot(dir, source) : { ok: false, reason: 'state', running: [] };
+        },
+        lastRun: (source) => {
+            const dir = backfillDir();
+            return dir ? readStatus(statusPath(dir, source)) : null;
+        },
+        start: async (source, argv) => {
+            const dir = backfillDir();
+            if (!dir)
+                return { ok: false };
+            return startBackfillChild(source, argv, statusPath(dir, source), undefined, 'mcp', syncChildEnv(process.env));
+        },
+    };
+}
+export async function runBackfill(args, env, injected) {
+    const input = args ?? {};
+    const unknownKeys = Object.keys(input).filter((k) => k !== 'source' && k !== 'since');
+    if (unknownKeys.length) {
+        // Names the keys, never their values: a rejected token must not be echoed back into the
+        // transcript it was typed into.
+        const names = unknownKeys.slice(0, 3).map((k) => JSON.stringify(k.slice(0, 16))).join(', ');
+        throw new Error(`${BACKFILL_TOOL} takes only "source" and "since", and does not accept ${names}. ` +
+            'It never accepts a token or key: the person connects a source themselves with `align connect <source>`.');
+    }
+    const source = input['source'];
+    if (typeof source !== 'string' || !BACKFILL_SOURCES.includes(source)) {
+        throw new Error(
+        // The value is never echoed: a token pasted into the wrong field fits any slice.
+        `${BACKFILL_TOOL} requires "source", one of: ${BACKFILL_SOURCES.join(', ')}. Call it again with one of those.`);
+    }
+    if (env.mode !== 'local-embedded') {
+        throw new Error(`${BACKFILL_TOOL} fills the local graph on this machine, and this server reads a hosted Align graph. ` +
+            'Use the local Align server (align mcp --env local), or run the hosted scan with align connect --all.');
+    }
+    const rawSince = input['since'];
+    if (rawSince !== undefined && typeof rawSince !== 'string')
+        throw new Error(`${BACKFILL_TOOL}: "since" must be a string such as 6m or 1y.`);
+    // Built only now, after every check that needs no config: a refused call opens nothing.
+    const deps = injected ?? defaultBackfillDeps(env);
+    const now = deps.now();
+    const window = parseSince(rawSince, now); // throws SinceError naming the accepted forms
+    const sinceArg = rawSince === undefined ? `${SYNC_WINDOW_DEFAULT_DAYS}d` : rawSince.trim().toLowerCase();
+    // How the previous run of this source ended, said first: a dead token ended "done" would hide it.
+    const prev = deps.lastRun(source);
+    const say = (r) => prev?.state === 'failed' && prev.last_line ? { ...r, text: `Last run failed: ${prev.last_line}. ${r.text}` } : r;
+    const proceed = async () => {
+        if (!deps.isConnected(source)) {
+            return {
+                started: false,
+                text: `${source} is not connected, so nothing was started. Connecting needs a token only the person can supply. Ask them to run: align connect ${source}`,
+            };
+        }
+        if (source === 'teams') {
+            // Decision 21: a Graph token lasts about an hour, so a background child would hold a dead one.
+            return {
+                started: false,
+                text: `Teams tokens last about an hour, so a refresh is manual and nothing was started. Ask the person to run: align connect teams --since ${sinceArg}`,
+            };
+        }
+        if (deps.needsReauth(source)) {
+            return {
+                started: false,
+                text: `${source} needs the person to re-authenticate (the provider refused its saved token), so nothing was started. Ask them to run: align connect ${source}`,
+            };
+        }
+        if (deps.syncRunning?.(source)) {
+            return { started: false, text: `A sync of ${source} is running and reads the same history, so nothing new was started. Ask again when it has finished.` };
+        }
+        // Taken in this same synchronous stretch (nothing above awaits): five parallel calls cannot all pass.
+        const slot = deps.reserve(source);
+        if (!slot.ok) {
+            if (slot.reason === 'state') {
+                return { started: false, text: `The state directory for backfills could not be used safely, so nothing was started. The person can run it themselves: align connect ${source} --since ${sinceArg}` };
+            }
+            const names = [...new Set(slot.running.map((r) => r.source))].join(', ');
+            return {
+                started: false,
+                text: slot.reason === 'source'
+                    ? `A backfill for ${source} is already running${slot.running[0]?.pid ? ` (started ${slot.running[0].started_at.slice(0, 16).replace('T', ' ')} UTC)` : ''}, so nothing new was started. It only reads and makes no LLM calls; ask again when it has finished.`
+                    : `${slot.running.length} backfills are already running (${names}), which is the most at once, so nothing new was started. Ask again when one has finished.`,
+            };
+        }
+        let started;
+        try {
+            started = await deps.start(source, backfillArgv(source, sinceArg));
+        }
+        finally {
+            slot.release();
+        }
+        if (!started.ok) {
+            return {
+                started: false,
+                text: `The background process for ${source} could not start, so nothing was started. The person can run it themselves: align connect ${source} --since ${sinceArg}`,
+            };
+        }
+        // Only now: the window is recorded for a child that exists.
+        deps.recordWindow(source, window.since ?? null, UNKNOWN_AGENT);
+        const reach = window.since === undefined
+            ? `as far back as the ceiling allows (${SYNC_CEILINGS[source]} items)`
+            : `back to ${window.since.slice(0, 10)}`;
+        const scope = source === 'github'
+            ? " Inside a repo it reads everyone's PRs and issues in that repo, as far as their access allows; elsewhere only the person's own."
+            : '';
+        return {
+            started: true,
+            text: `Backfill started for ${source} ${reach}. It runs in the background on this machine, only reads, and makes no LLM calls.${scope} New items appear in align_ask as they land.`,
+        };
+    };
+    return say(await proceed());
+}
+//# sourceMappingURL=mcp-backfill.js.map

package/dist/lib/mcp-backfill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-backfill.js","sourceRoot":"","sources":["../../src/lib/mcp-backfill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,WAAW,EAAuB,UAAU,EAAoB,WAAW,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAElJ,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3E,MAAM,CAAC,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAE9C;8FAC8F;AAC9F,MAAM,CAAC,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAG9C;qEACqE;AACrE,MAAM,aAAa,GAAG,SAAS,CAAC;AAEhC;;4EAE4E;AAC5E,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE;IAC5D,WAAW,EACT,mJAAmJ;QACnJ,qJAAqJ;QACrJ,+MAA+M;QAC/M,qDAAqD;IACvD,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,gBAAgB,CAAC,EAAE,WAAW,EAAE,qCAAqC,EAAE;YAC3G,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4FAA4F,EAAE;SACrI;QACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;QACpB,oBAAoB,EAAE,KAAK;KAC5B;CACO,CAAC;AAwBX;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,QAAgB;IAC3D,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AACnG,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAsB;IACxD,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC;IAC/B,MAAM,IAAI,GAAG,GAAW,EAAE;QACxB,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;QAChH,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,OAAO;QACL,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QACrB,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QACvF,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,WAAW;QACnE,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,MAAM,EAAE,CAAC,KAAK,SAAS;QACnE,YAAY,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC;QACvF,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE;YAClB,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;YAC1B,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACtF,CAAC;QACD,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE;YAClB,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;YAC1B,OAAO,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,CAAC;QACD,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YAC5B,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;YAC/B,OAAO,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAChH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAyC,EACzC,GAAsB,EACtB,QAAuB;IAEvB,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC;IACzB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,OAAO,CAAC,CAAC;IACtF,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;QACvB,wFAAwF;QACxF,gCAAgC;QAChC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5F,MAAM,IAAI,KAAK,CACb,GAAG,aAAa,yDAAyD,KAAK,IAAI;YAClF,yGAAyG,CAC1G,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAE,gBAAsC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,KAAK;QACb,iFAAiF;QACjF,GAAG,aAAa,+BAA+B,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,oCAAoC,CAC/G,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,GAAG,aAAa,sFAAsF;YACtG,sGAAsG,CACvG,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,aAAa,8CAA8C,CAAC,CAAC;IAC5I,wFAAwF;IACxF,MAAM,IAAI,GAAG,QAAQ,IAAI,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,8CAA8C;IACxF,MAAM,QAAQ,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,wBAAwB,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAEzG,kGAAkG;IAClG,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,CAAC,CAAiB,EAAkB,EAAE,CAChD,IAAI,EAAE,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,oBAAoB,IAAI,CAAC,SAAS,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACnH,MAAM,OAAO,GAAG,KAAK,IAA6B,EAAE;QAClD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,GAAG,MAAM,kIAAkI,MAAM,EAAE;aAC1J,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,+FAA+F;YAC/F,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,uIAAuI,QAAQ,EAAE;aACxJ,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,GAAG,MAAM,uIAAuI,MAAM,EAAE;aAC/J,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,MAAM,qGAAqG,EAAE,CAAC;QAC5J,CAAC;QAED,sGAAsG;QACtG,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,uIAAuI,MAAM,YAAY,QAAQ,EAAE,EAAE,CAAC;YACvM,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,IAAI,CAAC,MAAM,KAAK,QAAQ;oBAC5B,CAAC,CAAC,kBAAkB,MAAM,sBAAsB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,qGAAqG;oBAC9P,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,mCAAmC,KAAK,4FAA4F;aAC/J,CAAC;QACJ,CAAC;QACD,IAAI,OAAsC,CAAC;QAC3C,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QACrE,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,8BAA8B,MAAM,6FAA6F,MAAM,YAAY,QAAQ,EAAE;aACpK,CAAC;QACJ,CAAC;QACD,4DAA4D;QAC5D,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI,EAAE,aAAa,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK,SAAS;YACtC,CAAC,CAAC,sCAAsC,aAAa,CAAC,MAAwB,CAAC,SAAS;YACxF,CAAC,CAAC,WAAW,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,KAAK,QAAQ;YAC/B,CAAC,CAAC,iIAAiI;YACnI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,wBAAwB,MAAM,IAAI,KAAK,mFAAmF,KAAK,8CAA8C;SACpL,CAAC;IACJ,CAAC,CAAC;IACF,OAAO,GAAG,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC;AAC9B,CAAC"}