@aligndottech/cli 0.49.0 → 0.51.0

package/dist/lib/share/salt.js

@@ -0,0 +1,44 @@
+/**
+ * L9: the install's PRIVATE share salt, for the opaque `client_key` and local-only source URLs.
+ *
+ * A separate random value, kept in the CLI's own state directory (mode 0600, the same lstat-checked directory
+ * as the pending shares), never sent anywhere and NOT the telemetry install id: that id is a stable identifier
+ * the usage ping carries, and a salt equal to it would let anyone who sees both link a team-graph key to an
+ * install. Created on first use. If it is ever lost, decisions already shared keep working: their key is stored
+ * in the ledger at the first share, and only a decision never shared would get a new one.
+ */
+import { randomBytes } from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { alignStateDir } from '../backfill-state.js';
+export function shareSalt() {
+    const base = alignStateDir();
+    if (base === null)
+        throw new Error('Cannot create a private state directory for the share salt, so nothing was prepared.');
+    const file = path.join(base, 'share-salt');
+    let present = false;
+    try {
+        const have = fs.readFileSync(file, 'utf8').trim();
+        present = true;
+        if (/^[0-9a-f]{64}$/.test(have))
+            return have;
+    }
+    catch { /* not created yet */ }
+    const salt = randomBytes(32).toString('hex');
+    if (present) {
+        // A damaged file is replaced, atomically, rather than trusted: a salt that is not 64 hex characters is not ours.
+        const tmp = `${file}.${process.pid}.tmp`;
+        fs.writeFileSync(tmp, salt, { mode: 0o600 });
+        fs.renameSync(tmp, file);
+        return salt;
+    }
+    // wx: two first runs cannot overwrite each other; the loser reads the winner's value.
+    try {
+        fs.writeFileSync(file, salt, { mode: 0o600, flag: 'wx' });
+        return salt;
+    }
+    catch {
+        return fs.readFileSync(file, 'utf8').trim();
+    }
+}
+//# sourceMappingURL=salt.js.map

package/dist/lib/share/salt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"salt.js","sourceRoot":"","sources":["../../../src/lib/share/salt.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,MAAM,UAAU,SAAS;IACvB,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,IAAI,IAAI,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAC;IAC3H,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC3C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,OAAO,EAAE,CAAC;QACZ,iHAAiH;QACjH,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;QACzC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7C,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,sFAAsF;IACtF,IAAI,CAAC;QAAC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;AACxI,CAAC"}

package/dist/lib/share/secret-patterns.json

@@ -0,0 +1,100 @@
+{
+    "case_insensitive": [
+        [
+            "([a-zA-Z][a-zA-Z0-9+.\\-]{0,31}://)[^/\\s:@]+:[^/\\s:@]+@",
+            "\\1<URL_CREDENTIALS>@"
+        ],
+        [
+            "(?<![\\w@.:/])[A-Za-z][\\w.\\-]{1,30}:(?![/\\s])(?!v?\\d[\\d.]*(?:-[a-z0-9][a-z0-9.\\-]*)?(?![^\\s:@/]))(?=[^\\s:@/]*[A-Za-z])(?=[^\\s:@/]*\\d)[^\\s:@/]{8,}",
+            "<CREDENTIALS>"
+        ],
+        [
+            "AKIA[0-9A-Z]{16}",
+            "<AWS_ACCESS_KEY>"
+        ],
+        [
+            "ghp_[a-zA-Z0-9]{36}",
+            "<GITHUB_TOKEN>"
+        ],
+        [
+            "github_pat_[a-zA-Z0-9]{22}_[a-zA-Z0-9]{59}",
+            "<GITHUB_TOKEN>"
+        ],
+        [
+            "sk-[a-zA-Z0-9]{48}",
+            "<OPENAI_KEY>"
+        ],
+        [
+            "sk-ant-[a-zA-Z0-9\\-]{95,}",
+            "<ANTHROPIC_KEY>"
+        ],
+        [
+            "(?<![A-Za-z0-9])eyJ(?:[A-Za-z0-9_\\-]|\\r?\\n){10,}(?:\\s*(?:\\.|%2E)\\s*(?:[A-Za-z0-9_\\-]|\\r?\\n){10,}){2}",
+            "<JWT>"
+        ],
+        [
+            "(?<![A-Za-z0-9])sk-(?=[A-Za-z0-9_\\-]*\\d)[A-Za-z0-9_\\-]{20,}",
+            "<OPENAI_KEY>"
+        ],
+        [
+            "(?<![A-Za-z0-9])[sr]k_(?:live|test)_[A-Za-z0-9]{16,}",
+            "<STRIPE_KEY>"
+        ],
+        [
+            "(?<![A-Za-z0-9])AIza[0-9A-Za-z_\\-]{35}",
+            "<GOOGLE_API_KEY>"
+        ],
+        [
+            "((?:aws[_\\-\\s]*secret(?:[_\\-\\s]*access)?(?:[_\\-\\s]*key)?|secret[_\\-\\s]*access[_\\-\\s]*key)[\\\"'\\s:=]+)[A-Za-z0-9/+]{40}(?![A-Za-z0-9/+])",
+            "\\1<AWS_SECRET_KEY>"
+        ],
+        [
+            "xox[baprs]-[0-9]{10,13}-[0-9]{10,13}-[a-zA-Z0-9]{24,}",
+            "<SLACK_TOKEN>"
+        ],
+        [
+            "(?<![A-Za-z0-9])xox[a-z](?:\\.xox[a-z])?-[A-Za-z0-9\\-]{20,}",
+            "<SLACK_TOKEN>"
+        ],
+        [
+            "(?<![A-Za-z0-9])lin_api_[A-Za-z0-9]{32,}",
+            "<LINEAR_KEY>"
+        ],
+        [
+            "(?<![A-Za-z0-9])gh[ousr]_[A-Za-z0-9]{36}",
+            "<GITHUB_TOKEN>"
+        ],
+        [
+            "(?<![A-Za-z0-9])glpat-[A-Za-z0-9_\\-]{20,}",
+            "<GITLAB_TOKEN>"
+        ],
+        [
+            "api[_-]?key[\"\\s:=]+[\"\\']?([a-zA-Z0-9_\\-]{20,})[\"\\']?",
+            "<API_KEY>"
+        ],
+        [
+            "bearer\\s+[a-zA-Z0-9\\-._~+/]{20,}=*",
+            "<BEARER_TOKEN>"
+        ],
+        [
+            "-----BEGIN ((?:[A-Z0-9]{1,20} ){0,4})PRIVATE KEY(?: BLOCK)?-----(?:[A-Za-z0-9+/=\\s:,.]{0,16384}-----END \\1PRIVATE KEY(?: BLOCK)?-----)?",
+            "<PRIVATE_KEY>"
+        ],
+        [
+            "([?&](?:token|access_token|id_token|refresh_token|api_key|apikey|secret|client_secret|password|passwd|pwd|passcode|sig|signature|x-amz-signature|x-amz-credential)=)(?=[^&\\s\\\"'<>#]{0,100}\\d)[^&\\s\\\"'<>#]{8,}",
+            "\\1<URL_SECRET_PARAM>"
+        ],
+        [
+            "((?<![A-Za-z0-9])(?<!page_)(?<!page-)(?:password|passwd|secret|token)[\\\"']?[ \\t]*[:=][ \\t]*[\\\"']?)(?!\\$|\\{\\{|%\\(|v?\\d+\\.\\d|[a-z_]+=\\d|[A-Za-z_][\\w.]*\\()(?![^\\s\\\"'<>,;&]{0,64}\\d{4}-\\d\\d-\\d\\d)(?=[^\\s\\\"'<>,;&]{0,100}[A-Za-z])(?=[^\\s\\\"'<>,;&]{0,100}(?:[!@#$%^*]|\\d[^\\s\\\"'<>,;&]{0,100}\\d))[^\\s\\\"'<>,;&]{8,}",
+            "\\1<SECRET_VALUE>"
+        ]
+    ],
+    "case_sensitive": [
+        [
+            "(\\b[A-Z0-9_]*(?:PASSWORD|PASSWD|SECRET|TOKEN)[A-Z0-9_]*\\s*=\\s*[\\\"']?)(?!(?<!')(?:\\$\\([^)\\\"'<>\\n]*\\)|\\$\\{[A-Z_][A-Z0-9_]*\\}|\\$[A-Z_][A-Z0-9_]*)(?![^\\s\\\"'<>]))(?=[^\\s\\\"']*[A-Za-z])[^\\s\\\"'<>]{6,}",
+            "\\1<SECRET_VALUE>"
+        ]
+    ],
+    "aws_bare_secret": "(?<![A-Za-z0-9/+])(?=[A-Za-z0-9/+]*[A-Z])(?=[A-Za-z0-9/+]*[a-z])(?=[A-Za-z0-9/+]*\\d)[A-Za-z0-9/+]{40}(?![A-Za-z0-9/+])",
+    "aws_context_chars": 100
+}

package/dist/lib/share/secret-scan.d.ts

@@ -0,0 +1,24 @@
+export interface SecretFinding {
+    /** Which field of the share held it: `title`, `summary`, `source_url`, `note`. */
+    field: string;
+    /** The placeholder the redactor would write, for example `<GITHUB_TOKEN>`. Never the match. */
+    placeholder: string;
+}
+/** Placeholder names found in `text`, each once, in pattern order. */
+export declare function secretsIn(text: string): string[];
+/** Scan every named field; one finding per (field, placeholder). */
+export declare function scanForSecrets(fields: Array<{
+    field: string;
+    text: string | null | undefined;
+}>): SecretFinding[];
+export declare function scanSourceUrl(url: string): SecretFinding[];
+export declare function scanHiddenText(fields: Array<{
+    field: string;
+    text: string | null | undefined;
+}>): SecretFinding[];
+export interface Redaction {
+    text: string;
+    count: number;
+}
+export declare function redactSecrets(text: string): Redaction;
+//# sourceMappingURL=secret-scan.d.ts.map

package/dist/lib/share/secret-scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-scan.d.ts","sourceRoot":"","sources":["../../../src/lib/share/secret-scan.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,aAAa;IAC5B,kFAAkF;IAClF,KAAK,EAAE,MAAM,CAAC;IACd,+FAA+F;IAC/F,WAAW,EAAE,MAAM,CAAC;CACrB;AAoBD,sEAAsE;AACtE,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAUhD;AAED,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAA;CAAE,CAAC,GAAG,aAAa,EAAE,CAOjH;AASD,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,EAAE,CAM1D;AASD,wBAAgB,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAA;CAAE,CAAC,GAAG,aAAa,EAAE,CAEjH;AAED,MAAM,WAAW,SAAS;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAuB1D,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAqBrD"}

package/dist/lib/share/secret-scan.js

@@ -0,0 +1,116 @@
+/**
+ * L9: the client-side secret scan for `align share`. Refuse and SHOW which kind of secret was found,
+ * never the secret itself: the match is not printed, logged or returned, only its placeholder name.
+ *
+ * `secret-patterns.json` is vendored byte for byte from align-stack `config/secret-patterns.json`
+ * (last changed in align-stack commit 292e07017). It is the same list brain redacts with and the
+ * gateway refuses on at POST /ingest/batch, so a share that passes here is not refused there for a
+ * credential shape. `share-secret-patterns.test.ts` pins the file's sha256 and one positive and one
+ * near-miss per newer shape; a pattern added server-side but not copied here only means the SERVER
+ * refuses a share this scan let through, so re-vendor the file and update that pin together.
+ */
+import patterns from './secret-patterns.json' with { type: 'json' };
+const placeholderOf = (replacement) => /<[A-Z0-9_]+>/.exec(replacement)?.[0] ?? '<SECRET>';
+/**
+ * One local change to the vendored list, made at compile time so the file stays byte for byte the server's: the
+ * env-style name pattern's unbounded `[A-Z0-9_]*` halves are capped at 64 characters each. Unbounded, a long run of
+ * capitals with the word repeated in it (an env dump, `XTOKENX` x 28,571) backtracks once per repeat: 3.3 s on
+ * 200 KB. A variable name longer than 64 characters on either side of the word is the only thing it now misses.
+ */
+const bounded = (p) => p.split('[A-Z0-9_]*').join('[A-Z0-9_]{0,64}');
+const COMPILED = [
+    ...patterns.case_insensitive.map(([p, r]) => ({ re: new RegExp(bounded(p), 'i'), placeholder: placeholderOf(r) })),
+    ...patterns.case_sensitive.map(([p, r]) => ({ re: new RegExp(bounded(p)), placeholder: placeholderOf(r) })),
+];
+const AWS_BARE = new RegExp(patterns.aws_bare_secret, 'g');
+const AWS_CONTEXT = patterns.aws_context_chars;
+/** Placeholder names found in `text`, each once, in pattern order. */
+export function secretsIn(text) {
+    const found = [];
+    for (const c of COMPILED)
+        if (c.re.test(text) && !found.includes(c.placeholder))
+            found.push(c.placeholder);
+    // The bare AWS secret shape is only a secret near the word "aws", exactly as the server decides.
+    AWS_BARE.lastIndex = 0;
+    for (let m = AWS_BARE.exec(text); m; m = AWS_BARE.exec(text)) {
+        const near = text.slice(Math.max(0, m.index - AWS_CONTEXT), m.index + m[0].length + AWS_CONTEXT).toLowerCase();
+        if (near.includes('aws') && !found.includes('<AWS_SECRET_KEY>'))
+            found.push('<AWS_SECRET_KEY>');
+    }
+    return found;
+}
+/** Scan every named field; one finding per (field, placeholder). */
+export function scanForSecrets(fields) {
+    const out = [];
+    for (const f of fields) {
+        if (!f.text)
+            continue;
+        for (const placeholder of secretsIn(f.text))
+            out.push({ field: f.field, placeholder });
+    }
+    return out;
+}
+/**
+ * Query parameters that carry a secret in the URL itself (a Zoom `pwd`, a signed link's signature, a token).
+ * The decision's URL is sent and shown, so one of these is refused like a token in the text, never stripped:
+ * stripping would change which item the URL names. The VALUE is never reported, only the parameter name.
+ */
+const SECRET_PARAMS = /^(?:token|access[_-]?token|id[_-]?token|refresh[_-]?token|api[_-]?key|apikey|secret|client[_-]?secret|password|passwd|pwd|passcode|sig|signature|x-amz-signature|x-amz-credential|auth|authorization)$/i;
+export function scanSourceUrl(url) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return [];
+    }
+    const names = new Set();
+    for (const [k, v] of parsed.searchParams)
+        if (v !== '' && SECRET_PARAMS.test(k))
+            names.add(k.toLowerCase());
+    return [...names].map((n) => ({ field: `source_url (parameter ${n})`, placeholder: '<URL_SECRET_PARAM>' }));
+}
+/**
+ * Tag characters (U+E0000-E007F) render as nothing but a model reads them as text, so they can hide an
+ * instruction inside a title or note. The secret scan cannot see them and a person cannot either, so a share
+ * containing one is refused (naming the field) rather than sent.
+ */
+const HIDDEN = /[\u{E0000}-\u{E007F}]/u;
+export function scanHiddenText(fields) {
+    return fields.filter((f) => f.text && HIDDEN.test(f.text)).map((f) => ({ field: f.field, placeholder: '<HIDDEN_TEXT>' }));
+}
+const REWRITES = [
+    ...patterns.case_insensitive.map(([p, r]) => ({ re: new RegExp(bounded(p), 'gi'), replacement: r })),
+    ...patterns.case_sensitive.map(([p, r]) => ({ re: new RegExp(bounded(p), 'g'), replacement: r })),
+];
+/**
+ * A content digest (`sha256:9f86d0...`) has the `label:value` shape the generic credentials pattern claims. Brain
+ * redacts it too, but there the original is kept elsewhere; here the redacted text IS the only copy, so a digest in a
+ * commit message or a decision would be lost for nothing. Kept as written, and not counted.
+ */
+const DIGEST = /^(?:sha(?:1|224|256|384|512)|md5|blake2[bs]?):[0-9a-f]+$/i;
+export function redactSecrets(text) {
+    let count = 0;
+    let out = text;
+    for (const w of REWRITES) {
+        out = out.replace(w.re, (...args) => {
+            if (w.replacement === '<CREDENTIALS>' && DIGEST.test(args[0]))
+                return args[0];
+            count += 1;
+            // replace() passes the match, then each capture group, then the offset (the first number).
+            const groups = args.slice(1, args.findIndex((a, i) => i > 0 && typeof a === 'number'));
+            return w.replacement.replace(/\\(\d)/g, (_m, d) => String(groups[Number(d) - 1] ?? ''));
+        });
+    }
+    // The bare AWS secret shape, only near the word "aws" (secretsIn's rule, judged on the text as it stands now).
+    const source = out;
+    out = source.replace(AWS_BARE, (m, offset) => {
+        const near = source.slice(Math.max(0, offset - AWS_CONTEXT), offset + m.length + AWS_CONTEXT).toLowerCase();
+        if (!near.includes('aws'))
+            return m;
+        count += 1;
+        return '<AWS_SECRET_KEY>';
+    });
+    return { text: out, count };
+}
+//# sourceMappingURL=secret-scan.js.map

package/dist/lib/share/secret-scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-scan.js","sourceRoot":"","sources":["../../../src/lib/share/secret-scan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,QAAQ,MAAM,wBAAwB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AASpE,MAAM,aAAa,GAAG,CAAC,WAAmB,EAAU,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC;AAE3G;;;;;GAKG;AACH,MAAM,OAAO,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;AAGrF,MAAM,QAAQ,GAAe;IAC3B,GAAG,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,CAAW,CAAC,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE,aAAa,CAAC,CAAW,CAAC,EAAE,CAAC,CAAC;IACtI,GAAG,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,CAAW,CAAC,CAAC,EAAE,WAAW,EAAE,aAAa,CAAC,CAAW,CAAC,EAAE,CAAC,CAAC;CAChI,CAAC;AACF,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;AAC3D,MAAM,WAAW,GAAG,QAAQ,CAAC,iBAAiB,CAAC;AAE/C,sEAAsE;AACtE,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAC3G,iGAAiG;IACjG,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC;IACvB,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/G,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,MAAiE;IAC9F,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,CAAC,IAAI;YAAE,SAAS;QACtB,KAAK,MAAM,WAAW,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,aAAa,GAAG,yMAAyM,CAAC;AAEhO,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IACnD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,YAAY;QAAE,IAAI,CAAC,KAAK,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5G,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,yBAAyB,CAAC,GAAG,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC;AAC9G,CAAC;AAED;;;;GAIG;AACH,MAAM,MAAM,GAAG,wBAAwB,CAAC;AAExC,MAAM,UAAU,cAAc,CAAC,MAAiE;IAC9F,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;AAC5H,CAAC;AAaD,MAAM,QAAQ,GAAc;IAC1B,GAAG,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,CAAW,CAAC,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,CAAW,EAAE,CAAC,CAAC;IACxH,GAAG,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,CAAW,CAAC,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE,CAAW,EAAE,CAAC,CAAC;CACtH,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,GAAG,2DAA2D,CAAC;AAE3E,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;YAC7C,IAAI,CAAC,CAAC,WAAW,KAAK,eAAe,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAW,CAAC;gBAAE,OAAO,IAAI,CAAC,CAAC,CAAW,CAAC;YAClG,KAAK,IAAI,CAAC,CAAC;YACX,2FAA2F;YAC3F,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC;YACvF,OAAO,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAClG,CAAC,CAAC,CAAC;IACL,CAAC;IACD,+GAA+G;IAC/G,MAAM,MAAM,GAAG,GAAG,CAAC;IACnB,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAS,EAAE,MAAc,EAAE,EAAE;QAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5G,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QACpC,KAAK,IAAI,CAAC,CAAC;QACX,OAAO,kBAAkB,CAAC;IAC5B,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC"}

package/dist/lib/share/target.d.ts

@@ -0,0 +1,38 @@
+import type { createConfigStore, EnvName } from '../config.js';
+export declare class ShareTargetError extends Error {
+    constructor(message: string);
+}
+type ConfigStore = ReturnType<typeof createConfigStore>;
+/**
+ * Who is asking. A team destination the person has NOT made their share destination must be named by a person at a terminal:
+ * answering no at the join prompt has to be a boundary an agent cannot step over with `--to <name>`.
+ */
+export interface ShareCaller {
+    wrapped: boolean;
+    tty: boolean;
+}
+export declare function resolveShareEnv(opts: {
+    to?: string;
+    env?: string;
+}, config: ConfigStore, caller?: ShareCaller): EnvName;
+export type AppUrlChoice = {
+    ok: true;
+    appUrl: string;
+} | {
+    ok: false;
+    message: string;
+};
+/**
+ * The web app an approval link opens on. A team destination uses the address saved at join time:
+ * the approval page receives the share's key in the link's fragment, so a gateway that later names
+ * a different app must stop the share, not redirect it. A builtin takes the gateway's own
+ * `app_url` when it gives one and the old guess only when it does not; an `app_url` it gives that
+ * is unusable is an error, never a reason to guess.
+ */
+export declare function resolveApprovalAppUrl(i: {
+    stored: string | null;
+    cfgAppUrl: string | null;
+    guessed: string;
+}): AppUrlChoice;
+export {};
+//# sourceMappingURL=target.d.ts.map

package/dist/lib/share/target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"target.d.ts","sourceRoot":"","sources":["../../../src/lib/share/target.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAG/D,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAED,KAAK,WAAW,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAOxD;;;GAGG;AACH,MAAM,WAAW,WAAW;IAAG,OAAO,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,OAAO,CAAA;CAAE;AAE/D,wBAAgB,eAAe,CAAC,IAAI,EAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAE,WAA2C,GAAG,OAAO,CAMtJ;AA0BD,MAAM,MAAM,YAAY,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAMzF;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,EAAE;IAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,YAAY,CAY3H"}

package/dist/lib/share/target.js

@@ -0,0 +1,80 @@
+/**
+ * Where a share goes, decided in one place for `align share` and the MCP `align_share` tool.
+ *
+ * Precedence: `--to` > the saved share destination > the existing environment logic. Once a team
+ * destination is the share destination, an ambient `--env prod` (or an exported ALIGN_ENV) must
+ * not quietly send the share to a different server: moving it takes an explicit `--to`.
+ */
+import { assertTransport, TransportError } from '../destination-trust.js';
+import { acceptEnvName, resolveEnv } from '../resolve-env.js';
+export class ShareTargetError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ShareTargetError';
+    }
+}
+const shareable = (name) => {
+    if (name === 'local')
+        throw new ShareTargetError('The local graph is where shares come from, not where they go. Use --to prod, --to preview or a team destination. Nothing was sent.');
+    return name;
+};
+export function resolveShareEnv(opts, config, caller = { wrapped: false, tty: true }) {
+    const named = resolveNamed(opts, config);
+    if (named !== null && config.hasTeamDestination(named) && named !== config.getShareDestination() && (caller.wrapped || !caller.tty)) {
+        throw new ShareTargetError(`${named} is not your share destination, so sharing to it needs you at a terminal of your own, not an agent or a script. Nothing was sent.`);
+    }
+    return named ?? defaultTarget(config);
+}
+function defaultTarget(config) {
+    const dest = config.getShareDestination();
+    return dest !== null ? dest : resolveEnv(undefined, { config });
+}
+function resolveNamed(opts, config) {
+    const dest = config.getShareDestination();
+    if (opts.to !== undefined) {
+        const to = acceptEnvName(opts.to, config);
+        if (opts.env !== undefined && acceptEnvName(opts.env, config) !== to) {
+            throw new ShareTargetError(`--to ${to} and --env ${opts.env.slice(0, 40)} name different destinations, and a share goes to one destination. Nothing was sent.`);
+        }
+        return shareable(to);
+    }
+    if (opts.env !== undefined) {
+        const env = shareable(acceptEnvName(opts.env, config));
+        if (dest !== null && env !== dest) {
+            throw new ShareTargetError(`Your share destination is ${dest}. To share to ${env} instead, pass --to ${env}. Nothing was sent.`);
+        }
+        return env;
+    }
+    return null;
+}
+const origin = (raw) => {
+    try {
+        return assertTransport(raw);
+    }
+    catch (e) {
+        if (e instanceof TransportError)
+            return null;
+        throw e;
+    }
+};
+/**
+ * The web app an approval link opens on. A team destination uses the address saved at join time:
+ * the approval page receives the share's key in the link's fragment, so a gateway that later names
+ * a different app must stop the share, not redirect it. A builtin takes the gateway's own
+ * `app_url` when it gives one and the old guess only when it does not; an `app_url` it gives that
+ * is unusable is an error, never a reason to guess.
+ */
+export function resolveApprovalAppUrl(i) {
+    const cfg = i.cfgAppUrl === null ? null : origin(i.cfgAppUrl);
+    if (i.cfgAppUrl !== null && cfg === null) {
+        return { ok: false, message: 'The gateway reports a web app address that is not acceptable (it must be https, or http for localhost, with no path). Nothing was sent.' };
+    }
+    if (i.stored !== null) {
+        if (cfg !== null && cfg !== i.stored.replace(/\/+$/, '')) {
+            return { ok: false, message: `The web app this destination was joined with is ${i.stored}, but its gateway now says ${cfg}. The approval link carries the share's key, so nothing was sent. Run align join again if the team moved.` };
+        }
+        return { ok: true, appUrl: i.stored.replace(/\/+$/, '') };
+    }
+    return { ok: true, appUrl: cfg ?? i.guessed };
+}
+//# sourceMappingURL=target.js.map

package/dist/lib/share/target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"target.js","sourceRoot":"","sources":["../../../src/lib/share/target.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE1E,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE9D,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAID,MAAM,SAAS,GAAG,CAAC,IAAa,EAAW,EAAE;IAC3C,IAAI,IAAI,KAAK,OAAO;QAAE,MAAM,IAAI,gBAAgB,CAAC,oIAAoI,CAAC,CAAC;IACvL,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAQF,MAAM,UAAU,eAAe,CAAC,IAAmC,EAAE,MAAmB,EAAE,SAAsB,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE;IAC3I,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,MAAM,CAAC,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACpI,MAAM,IAAI,gBAAgB,CAAC,GAAG,KAAK,mIAAmI,CAAC,CAAC;IAC1K,CAAC;IACD,OAAO,KAAK,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,aAAa,CAAC,MAAmB;IACxC,MAAM,IAAI,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;IAC1C,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAE,IAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,YAAY,CAAC,IAAmC,EAAE,MAAmB;IAC5E,MAAM,IAAI,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;IAC1C,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YACrE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,EAAE,cAAc,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,sFAAsF,CAAC,CAAC;QAClK,CAAC;QACD,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QACvD,IAAI,IAAI,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAClC,MAAM,IAAI,gBAAgB,CAAC,6BAA6B,IAAI,iBAAiB,GAAG,uBAAuB,GAAG,qBAAqB,CAAC,CAAC;QACnI,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAID,MAAM,MAAM,GAAG,CAAC,GAAW,EAAiB,EAAE;IAC5C,IAAI,CAAC;QAAC,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,IAAI,CAAC,YAAY,cAAc;YAAE,OAAO,IAAI,CAAC;QAAC,MAAM,CAAC,CAAC;IAAC,CAAC;AAC3G,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,CAAuE;IAC3G,MAAM,GAAG,GAAG,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,yIAAyI,EAAE,CAAC;IAC3K,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACtB,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;YACzD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,mDAAmD,CAAC,CAAC,MAAM,8BAA8B,GAAG,2GAA2G,EAAE,CAAC;QACzO,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;AAChD,CAAC"}

package/dist/lib/share/tty.d.ts

@@ -0,0 +1,12 @@
+export type TtyPaths = readonly [input: string, output: string];
+export declare const TTY_PATHS: TtyPaths;
+export declare function ttyConfirm(shown: string, question: string, paths?: TtyPaths): Promise<boolean | null>;
+/**
+ * Ask for one line of text on the controlling terminal, with the same proof of a terminal as ttyConfirm.
+ * `onShown` runs after `shown` is on the terminal and before the person can answer, so a caller can record
+ * "asked" even when the answer never comes (Ctrl-C ends the readline, which reads as an empty answer here).
+ * Returns the typed line, '' for Enter, Ctrl-C or end of input, or null when there is no interactive terminal
+ * (nothing is written then, and `onShown` does not run).
+ */
+export declare function ttyAsk(shown: string, question: string, onShown?: () => void, paths?: TtyPaths): Promise<string | null>;
+//# sourceMappingURL=tty.d.ts.map

package/dist/lib/share/tty.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tty.d.ts","sourceRoot":"","sources":["../../../src/lib/share/tty.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAChE,eAAO,MAAM,SAAS,EAAE,QAA0F,CAAC;AAEnH,wBAAsB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,GAAE,QAAoB,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CA4BtH;AAED;;;;;;GAMG;AACH,wBAAsB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,IAAI,EAAE,KAAK,GAAE,QAAoB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA2BvI"}

package/dist/lib/share/tty.js

@@ -0,0 +1,102 @@
+/**
+ * L9: ask a person a yes/no question on their CONTROLLING terminal, and prove it is one.
+ *
+ * Why not stdin: an agent's shell tool, a hook and a pipe all own stdin, so a "yes" read there proves
+ * nothing. `/dev/tty` (`CONIN$`/`CONOUT$` on Windows) is the terminal the process was started from; a
+ * process with no controlling terminal (a daemon, a `setsid` child, most agent shells) cannot open it.
+ * The handle must also pass `tty.isatty`: on Windows an open of CONIN$ can succeed against something
+ * that is not an interactive console, and "cannot prove it" means refuse, never block.
+ *
+ * The text a person must read is written to the SAME terminal just before the question, so it is the
+ * thing they see even when stdout is a pipe or a file. Returns true/false for y/n (default No, and end
+ * of input is No), or null when there is no interactive terminal. Honest limit, stated in SECURITY.md:
+ * a caller that allocates its own pseudo-terminal can type the answer; no local CLI can stop that.
+ */
+import fs from 'node:fs';
+import readline from 'node:readline';
+import tty from 'node:tty';
+export const TTY_PATHS = process.platform === 'win32' ? ['CONIN$', 'CONOUT$'] : ['/dev/tty', '/dev/tty'];
+export async function ttyConfirm(shown, question, paths = TTY_PATHS) {
+    let inFd = -1;
+    let outFd = -1;
+    try {
+        inFd = fs.openSync(paths[0], 'r');
+        outFd = fs.openSync(paths[1], 'w');
+        if (!tty.isatty(inFd) || !tty.isatty(outFd))
+            throw new Error('not an interactive terminal');
+    }
+    catch {
+        for (const fd of [inFd, outFd])
+            if (fd >= 0) {
+                try {
+                    fs.closeSync(fd);
+                }
+                catch { /* already closed */ }
+            }
+        return null;
+    }
+    // The tty streams own their descriptors from here: destroying them closes the fds, so no
+    // fs.closeSync of ours can race a readline that is still reading (the EBADF the review found).
+    const input = new tty.ReadStream(inFd);
+    const output = new tty.WriteStream(outFd);
+    const rl = readline.createInterface({ input, output, terminal: true });
+    try {
+        output.write(`${shown}\n\n`);
+        const answer = await new Promise((resolve) => {
+            rl.once('close', () => resolve(''));
+            rl.question(`${question} [y/N] `, resolve);
+        });
+        return /^y(es)?$/i.test(answer.trim());
+    }
+    finally {
+        rl.close();
+        input.destroy();
+        output.destroy();
+    }
+}
+/**
+ * Ask for one line of text on the controlling terminal, with the same proof of a terminal as ttyConfirm.
+ * `onShown` runs after `shown` is on the terminal and before the person can answer, so a caller can record
+ * "asked" even when the answer never comes (Ctrl-C ends the readline, which reads as an empty answer here).
+ * Returns the typed line, '' for Enter, Ctrl-C or end of input, or null when there is no interactive terminal
+ * (nothing is written then, and `onShown` does not run).
+ */
+export async function ttyAsk(shown, question, onShown, paths = TTY_PATHS) {
+    let inFd = -1;
+    let outFd = -1;
+    try {
+        inFd = fs.openSync(paths[0], 'r');
+        outFd = fs.openSync(paths[1], 'w');
+        if (!tty.isatty(inFd) || !tty.isatty(outFd))
+            throw new Error('not an interactive terminal');
+    }
+    catch {
+        for (const fd of [inFd, outFd])
+            if (fd >= 0) {
+                try {
+                    fs.closeSync(fd);
+                }
+                catch { /* already closed */ }
+            }
+        return null;
+    }
+    const input = new tty.ReadStream(inFd);
+    const output = new tty.WriteStream(outFd);
+    const rl = readline.createInterface({ input, output, terminal: true });
+    try {
+        if (shown !== '')
+            output.write(`${shown}\n`);
+        onShown?.();
+        return await new Promise((resolve) => {
+            rl.once('close', () => resolve(''));
+            rl.once('SIGINT', () => rl.close());
+            rl.question(`${question} `, resolve);
+        });
+    }
+    finally {
+        rl.close();
+        input.destroy();
+        output.destroy();
+    }
+}
+//# sourceMappingURL=tty.js.map

package/dist/lib/share/tty.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tty.js","sourceRoot":"","sources":["../../../src/lib/share/tty.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,QAAQ,MAAM,eAAe,CAAC;AACrC,OAAO,GAAG,MAAM,UAAU,CAAC;AAG3B,MAAM,CAAC,MAAM,SAAS,GAAa,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AAEnH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAa,EAAE,QAAgB,EAAE,QAAkB,SAAS;IAC3F,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;IACf,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAClC,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC9F,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;YAAC,CAAC;QACzG,OAAO,IAAI,CAAC;IACd,CAAC;IACD,yFAAyF;IACzF,+FAA+F;IAC/F,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;YACnD,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YACpC,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,SAAS,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QACH,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,CAAC,OAAO,EAAE,CAAC;QAChB,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,KAAa,EAAE,QAAgB,EAAE,OAAoB,EAAE,QAAkB,SAAS;IAC7G,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;IACf,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAClC,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC9F,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;YAAC,CAAC;QACzG,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,IAAI,KAAK,KAAK,EAAE;YAAE,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;QAC7C,OAAO,EAAE,EAAE,CAAC;QACZ,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;YAC3C,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YACpC,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;YACpC,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAAG,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,CAAC,OAAO,EAAE,CAAC;QAChB,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/lib/share/visible.d.ts

@@ -0,0 +1,4 @@
+export declare function visible(text: string, opts?: {
+    keepNewline?: boolean;
+}): string;
+//# sourceMappingURL=visible.d.ts.map

package/dist/lib/share/visible.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"visible.d.ts","sourceRoot":"","sources":["../../../src/lib/share/visible.ts"],"names":[],"mappings":"AAoBA,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,MAAM,CAOlF"}

package/dist/lib/share/visible.js

@@ -0,0 +1,30 @@
+/**
+ * L9: make every untrusted string safe to print on a terminal a person is about to answer.
+ *
+ * A decision's title, text, URL and notes come from sources other people write (a PR title, a Slack
+ * thread). Raw, they can carry ESC sequences that rewrite or clear the screen, a bare CR that overwrites
+ * the line above, or bidi overrides that reorder what is read, so the preview would show something other
+ * than what is sent. Each such character is replaced by a visible escape (`\x1b`, `‮`), never
+ * dropped: dropping would also hide that it was there.
+ *
+ * Covered, by Unicode category: controls (ESC, CR, tab, NUL, DEL, C1), every format character (bidi
+ * overrides and isolates, zero-width, soft hyphen, U+061C, the tag characters U+E0000-E007F), line and
+ * paragraph separators, default-ignorable code points (U+034F, U+180E, U+3164, U+FFF9-FFFB) and lone surrogates.
+ * `\n` is kept only when the caller asks (the indented body), because it cannot overwrite earlier text.
+ */
+// Unicode categories rather than hand-listed ranges (a hand-written list is guessing at published data):
+// Cc controls (ESC, CR, NUL, C1), Cf format (bidi marks and overrides, zero-width, soft hyphen, ALM, tag
+// characters U+E0000-E007F), Zl/Zp line and paragraph separators, Default_Ignorable_Code_Point (Hangul
+// fillers, U+034F, U+180E, interlinear annotation marks) and Cs, a lone surrogate (needs the u flag).
+const UNSAFE = /[\p{Cc}\p{Cf}\p{Zl}\p{Zp}\p{Default_Ignorable_Code_Point}]|\p{Cs}/gu;
+export function visible(text, opts = {}) {
+    return text.replace(UNSAFE, (c) => {
+        if (c === '\n' && opts.keepNewline)
+            return c;
+        const code = c.codePointAt(0);
+        if (code <= 0xff)
+            return `\\x${code.toString(16).padStart(2, '0')}`;
+        return code <= 0xffff ? `\\u${code.toString(16).padStart(4, '0')}` : `\\u{${code.toString(16)}}`;
+    });
+}
+//# sourceMappingURL=visible.js.map

package/dist/lib/share/visible.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"visible.js","sourceRoot":"","sources":["../../../src/lib/share/visible.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,yGAAyG;AACzG,yGAAyG;AACzG,uGAAuG;AACvG,sGAAsG;AACtG,MAAM,MAAM,GAAG,qEAAqE,CAAC;AAErF,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,OAAkC,EAAE;IACxE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;QAChC,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;QAC/B,IAAI,IAAI,IAAI,IAAI;YAAE,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QACpE,OAAO,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC;IACnG,CAAC,CAAC,CAAC;AACL,CAAC"}