@aligndottech/cli 0.50.0 → 0.52.0

package/dist/lib/local-set-classifier.js

@@ -0,0 +1,81 @@
+/**
+ * The v1 local relationship classifier (ALIGN_DETECTOR=v1): ONE model call per check over every
+ * candidate, using the shared detector prompt (src/detector), parsed with the shared contract, and
+ * with `incompatible` resolved to `supersedes` or `conflicts_with` by the deterministic resolver,
+ * never by the model's own label.
+ *
+ * Authorship: the local graph stores no author per decision, so every side is passed with
+ * author null. The resolver reads null as UNKNOWN, and two unknown authors are never the same
+ * author, so the same-author supersession rule cannot fire locally; only a replacement claim
+ * that agrees with the clock can earn `supersedes`. Standing is also null on both sides, which
+ * the resolver treats as equal.
+ *
+ * A candidate the model omits, or whose entry fails the contract, gets `relation: null`: it was
+ * judged and has no typed relationship. A whole-call failure is reported once, for the set.
+ */
+import { DETERMINISTIC_TEMPERATURE } from '@aligndottech/connector-core';
+import { parseRelationshipItem } from '../detector/relationship-contract.js';
+import { buildV1SystemPrompt, buildV1UserPrompt, v1MaxTokens } from '../detector/relationship-prompt.js';
+import { NEW_DECISION_REF, resolveSimilarItem } from '../detector/similar-item.js';
+import { callChatDetailed } from './local-llm.js';
+import { failureReason } from './local-relationship-classifier.js';
+/** The `similar` array from the model's answer, or null when there is none to read. */
+function similarEntries(text) {
+    const start = text.indexOf('{');
+    const end = text.lastIndexOf('}');
+    if (start < 0 || end <= start)
+        return null;
+    let obj;
+    try {
+        obj = JSON.parse(text.slice(start, end + 1));
+    }
+    catch {
+        return null;
+    }
+    if (typeof obj !== 'object' || obj === null)
+        return null;
+    const record = obj;
+    const rel = record['relationships'];
+    const similar = typeof rel === 'object' && rel !== null ? rel['similar'] : record['similar'];
+    return Array.isArray(similar) ? similar : null;
+}
+/** 1-based ordinal as printed in the prompt, as a number or a digit string; anything else is null. */
+function ordinal(value, count) {
+    const n = typeof value === 'number' ? value : typeof value === 'string' && /^\d+$/.test(value.trim()) ? Number(value) : NaN;
+    return Number.isInteger(n) && n >= 1 && n <= count ? n : null;
+}
+export async function classifyCandidateSet(subject, candidates, call = callChatDetailed) {
+    if (!candidates.length)
+        return { ok: true, verdicts: [] };
+    const maxTokens = v1MaxTokens(candidates.length);
+    const result = await call(buildV1SystemPrompt(), (windowTokens) => buildV1UserPrompt(subject, candidates, windowTokens, maxTokens), { temperature: DETERMINISTIC_TEMPERATURE, maxTokens });
+    if (!result.ok)
+        return { ok: false, reason: failureReason(result.failure), failure: result.failure };
+    const entries = similarEntries(result.text);
+    if (entries === null)
+        return { ok: false, reason: 'classifier_unparseable' };
+    const verdicts = candidates.map((c) => ({ relation: null, confidence: c.similarity }));
+    const seen = new Set();
+    const newSide = { id: NEW_DECISION_REF, decidedAt: subject.decidedAt, author: null };
+    for (const entry of entries) {
+        if (typeof entry !== 'object' || entry === null)
+            continue;
+        const ref = ordinal(entry['decision_ref'], candidates.length);
+        if (ref === null || seen.has(ref))
+            continue;
+        seen.add(ref);
+        // The shared schema asks for "reasons": [...]; the contract parser reads one "reason" string.
+        const raw = entry;
+        const reasons = Array.isArray(raw['reasons']) ? raw['reasons'].filter((r) => typeof r === 'string') : [];
+        const item = parseRelationshipItem(JSON.stringify(raw['reason'] === undefined && reasons.length ? { ...raw, reason: reasons.join('; ') } : raw), 'v1Candidate');
+        if (item === null)
+            continue;
+        const c = candidates[ref - 1];
+        const resolved = resolveSimilarItem(item, newSide, { id: c.id, decidedAt: c.decidedAt, author: null, status: c.status ?? null });
+        if (resolved === null)
+            continue;
+        verdicts[ref - 1] = { relation: resolved.type, confidence: resolved.confidence, ...(resolved.reason ? { reason: resolved.reason } : {}) };
+    }
+    return { ok: true, verdicts };
+}
+//# sourceMappingURL=local-set-classifier.js.map

package/dist/lib/local-set-classifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-set-classifier.js","sourceRoot":"","sources":["../../src/lib/local-set-classifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AACzG,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAmB,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAgC,aAAa,EAAE,MAAM,oCAAoC,CAAC;AAiCjG,uFAAuF;AACvF,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,KAAK;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,MAAM,GAAG,GAA8B,CAAC;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAE,GAA+B,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1H,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,sGAAsG;AACtG,SAAS,OAAO,CAAC,KAAc,EAAE,KAAa;IAC5C,MAAM,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5H,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAmB,EAAE,UAAmC,EAAE,OAAa,gBAAgB;IAChI,IAAI,CAAC,UAAU,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC1D,MAAM,SAAS,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,mBAAmB,EAAE,EACrB,CAAC,YAAoB,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC,EACzF,EAAE,WAAW,EAAE,yBAAyB,EAAE,SAAS,EAAE,CACtD,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACrG,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAE7E,MAAM,QAAQ,GAAiB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACrG,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAAG,EAAE,EAAE,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACrF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC1D,MAAM,GAAG,GAAG,OAAO,CAAE,KAAiC,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAC3F,IAAI,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,8FAA8F;QAC9F,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtH,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC;QAChK,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QAC5B,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,GAAG,CAAC,CAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;QACjI,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS;QAChC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC5I,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC"}

package/dist/lib/local-snapshot-loader.d.ts

@@ -0,0 +1,29 @@
+export interface SnapshotDecision {
+    id: string;
+    title: string;
+    summary: string;
+    source_url: string | null;
+    platform: string;
+    decided_at: string | null;
+    repo?: string | null;
+}
+export interface SnapshotLink {
+    source_id: string;
+    target_id: string;
+    relation: string;
+    confidence: number;
+}
+export interface Snapshot {
+    snapshot: string;
+    decisions: SnapshotDecision[];
+    links?: SnapshotLink[];
+}
+export declare function loadSnapshot(s: Snapshot, dbPath: string, opts: {
+    links: boolean;
+    realDbPath?: string;
+    alsoRefuse?: readonly string[];
+}): {
+    decisions: number;
+    links: number;
+};
+//# sourceMappingURL=local-snapshot-loader.d.ts.map

package/dist/lib/local-snapshot-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-snapshot-loader.d.ts","sourceRoot":"","sources":["../../src/lib/local-snapshot-loader.ts"],"names":[],"mappings":"AAoBA,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAAG,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE;AAE5G,MAAM,WAAW,QAAQ;IAAG,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,YAAY,EAAE,CAAA;CAAE;AAuCrG,wBAAgB,YAAY,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CA4B7K"}

package/dist/lib/local-snapshot-loader.js

@@ -0,0 +1,108 @@
+/**
+ * Load a frozen JSON snapshot into a THROWAWAY local graph (shared detector plan, Phase B).
+ *
+ * No user command reaches this: it is driven by scripts/load-local-snapshot.ts, so a benchmark
+ * can build a local graph from the same decisions the hosted arm reads. It keeps each decision's
+ * id, decided_at and platform exactly (ingestBatch re-extracts and cannot), and imports the
+ * snapshot's links only when asked, stamped detector_version 'snapshot' so `align local relink`
+ * (which reads v0 rows only) never re-types them and a count by version separates them.
+ *
+ * It never writes the user's real graph: it refuses a path that already exists (a dangling
+ * symlink included), and any path that lands on the default or the configured local.db, through
+ * symlinks; it validates the whole snapshot before creating any file.
+ */
+import { lstatSync, readlinkSync, realpathSync } from 'node:fs';
+import { basename, dirname, resolve } from 'node:path';
+import { DatabaseSync } from 'node:sqlite';
+import { RELATIONSHIP_CONTRACT } from '../detector/relationship-contract.js';
+import { createLocalDb } from './local-db.js';
+import { getLocalDbPath } from './local-mode.js';
+function validate(s, withLinks) {
+    if (!s.decisions.length)
+        throw new Error('The snapshot holds no decisions; refusing to write an empty graph.');
+    const ids = new Set();
+    for (const d of s.decisions) {
+        if (ids.has(d.id))
+            throw new Error(`The snapshot has a duplicate id "${d.id}".`);
+        ids.add(d.id);
+    }
+    if (!withLinks)
+        return;
+    const types = RELATIONSHIP_CONTRACT.types;
+    for (const l of s.links ?? []) {
+        for (const id of [l.source_id, l.target_id])
+            if (!ids.has(id))
+                throw new Error(`A snapshot link names "${id}", which the snapshot does not hold.`);
+        if (!types.includes(l.relation))
+            throw new Error(`A snapshot link has relation "${l.relation}", which is not in the contract vocabulary.`);
+    }
+}
+/**
+ * Where a path really lands, without requiring it to exist (review F9): the parent directory's
+ * realpath plus the name, following a symlink at the name even when it dangles, so a link to a
+ * real graph that has not been created yet still resolves to that graph's location.
+ */
+function landsAt(p, hops = 0) {
+    const abs = resolve(p);
+    let parent;
+    try {
+        parent = realpathSync(dirname(abs));
+    }
+    catch {
+        parent = dirname(abs);
+    }
+    const here = resolve(parent, basename(abs));
+    if (hops < 40) {
+        try {
+            if (lstatSync(here).isSymbolicLink())
+                return landsAt(resolve(parent, readlinkSync(here)), hops + 1);
+        }
+        catch { /* nothing there: here is where it lands */ }
+    }
+    return here;
+}
+function occupied(p) {
+    try {
+        lstatSync(p);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export function loadSnapshot(s, dbPath, opts) {
+    const target = landsAt(dbPath);
+    for (const real of [opts.realDbPath ?? getLocalDbPath(), ...(opts.alsoRefuse ?? [])]) {
+        if (target === landsAt(real))
+            throw new Error(`${dbPath} is the real local graph; load a snapshot into a throwaway path instead.`);
+    }
+    // lstat, not exists: a dangling symlink is occupied too.
+    if (occupied(dbPath) || occupied(target))
+        throw new Error(`${dbPath} already exists; the loader only writes a new, throwaway graph.`);
+    validate(s, opts.links);
+    createLocalDb(dbPath).close(); // creates and migrates the schema
+    const db = new DatabaseSync(dbPath);
+    try {
+        db.exec('BEGIN IMMEDIATE');
+        const insertDecision = db.prepare('INSERT INTO decisions (id, title, summary, source_url, platform, decided_at, repo) VALUES (?, ?, ?, ?, ?, ?, ?)');
+        for (const d of s.decisions)
+            insertDecision.run(d.id, d.title, d.summary, d.source_url, d.platform, d.decided_at, d.repo ?? null);
+        let links = 0;
+        if (opts.links) {
+            const insertLink = db.prepare(`INSERT OR IGNORE INTO decision_links (id, source_id, target_id, relation, confidence, detector_version) VALUES (?, ?, ?, ?, ?, 'snapshot')`);
+            for (const [i, l] of (s.links ?? []).entries())
+                links += Number(insertLink.run(`snapshot:${i}`, l.source_id, l.target_id, l.relation, l.confidence).changes);
+        }
+        db.exec('COMMIT');
+        return { decisions: s.decisions.length, links };
+    }
+    catch (err) {
+        if (db.isTransaction)
+            db.exec('ROLLBACK');
+        throw err;
+    }
+    finally {
+        db.close();
+    }
+}
+//# sourceMappingURL=local-snapshot-loader.js.map

package/dist/lib/local-snapshot-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-snapshot-loader.js","sourceRoot":"","sources":["../../src/lib/local-snapshot-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAgBjD,SAAS,QAAQ,CAAC,CAAW,EAAE,SAAkB;IAC/C,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IAC/G,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;QAC5B,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACjF,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,MAAM,KAAK,GAAsB,qBAAqB,CAAC,KAAK,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QAC9B,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,EAAE,sCAAsC,CAAC,CAAC;QACnJ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,QAAQ,6CAA6C,CAAC,CAAC;IAC7I,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,OAAO,CAAC,CAAS,EAAE,IAAI,GAAG,CAAC;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QAAC,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,IAAI,IAAI,GAAG,EAAE,EAAE,CAAC;QACd,IAAI,CAAC;YACH,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;QACtG,CAAC;QAAC,MAAM,CAAC,CAAC,2CAA2C,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,IAAI,CAAC;QAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAW,EAAE,MAAc,EAAE,IAA6E;IACrI,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,cAAc,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACrF,IAAI,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,0EAA0E,CAAC,CAAC;IACrI,CAAC;IACD,yDAAyD;IACzD,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,iEAAiE,CAAC,CAAC;IACtI,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAExB,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,kCAAkC;IACjE,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC3B,MAAM,cAAc,GAAG,EAAE,CAAC,OAAO,CAAC,iHAAiH,CAAC,CAAC;QACrJ,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS;YAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;QAClI,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,GAAG,EAAE,CAAC,OAAO,CAAC,4IAA4I,CAAC,CAAC;YAC5K,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;gBAAE,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC;QAC/J,CAAC;QACD,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClB,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,EAAE,CAAC,aAAa;YAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC"}

package/dist/lib/login-flow.d.ts

@@ -1,5 +1,20 @@
+import { type VerifiedIdentity } from './join-flow.js';
 import type { createConfigStore, EnvironmentConfig, EnvName } from './config.js';
 type ConfigStore = ReturnType<typeof createConfigStore>;
+/**
+ * The address /auth/cli-init hands back is opened in a browser, so it is checked first: http(s) only, and for a team destination its
+ * origin must be the saved gateway's or web app's (a joined gateway is whatever was joined, so its word is not enough). A string
+ * starting with '!' is the reason it was refused.
+ */
+export declare function checkLoginUrl(raw: unknown, env: EnvironmentConfig): string;
+/**
+ * `align login --env <team> --token X`: the no-browser renewal. A person at a terminal only, never inside an agent, and the token is
+ * kept only once the destination's gateway says whose it is; the tenant saved is THAT one, never the previous token's.
+ */
+export declare function saveTeamToken(env: EnvironmentConfig, envName: EnvName, token: string, config: ConfigStore, ctx: {
+    wrapped: boolean;
+    tty: boolean;
+}): Promise<VerifiedIdentity | string>;
 export declare function loginInteractive(env: EnvironmentConfig, envName: EnvName, config: ConfigStore): Promise<boolean>;
 export {};
 //# sourceMappingURL=login-flow.d.ts.map

package/dist/lib/login-flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login-flow.d.ts","sourceRoot":"","sources":["../../src/lib/login-flow.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEjF,KAAK,WAAW,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAMxD,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,iBAAiB,EACtB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,OAAO,CAAC,CAoElB"}
+{"version":3,"file":"login-flow.d.ts","sourceRoot":"","sources":["../../src/lib/login-flow.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,gBAAgB,EAAe,MAAM,gBAAgB,CAAC;AAKpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEjF,KAAK,WAAW,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAMxD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,iBAAiB,GAAG,MAAM,CAY1E;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,iBAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,OAAO,CAAA;CAAE,GACpH,OAAO,CAAC,gBAAgB,GAAG,MAAM,CAAC,CAQpC;AAED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,iBAAiB,EACtB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,OAAO,CAAC,CA+FlB"}

package/dist/lib/login-flow.js

@@ -1,32 +1,92 @@
 import * as p from '@clack/prompts';
 import chalk from 'chalk';
+import { assertTransport } from './destination-trust.js';
+import { verifyToken } from './join-flow.js';
 import { tryOpenUrl } from './open-url.js';
+import { visible } from './share/visible.js';
 import { createGatewayClient, GatewayError } from './gateway-client.js';
 import { CLI_CALLBACK_PORTS, waitForCallback } from './cli-oauth.js';
 // Browser-based CLI login. Starts a local callback server, opens the branded
 // login page, exchanges the returned token, verifies it, and persists the
 // token + tenant id. Returns true on success. Shared by `align login` and the
 // inline login on the cloud `align setup` path.
+/**
+ * The address /auth/cli-init hands back is opened in a browser, so it is checked first: http(s) only, and for a team destination its
+ * origin must be the saved gateway's or web app's (a joined gateway is whatever was joined, so its word is not enough). A string
+ * starting with '!' is the reason it was refused.
+ */
+export function checkLoginUrl(raw, env) {
+    if (typeof raw !== 'string' || raw === '')
+        return '!the gateway sent no login address';
+    let u;
+    try {
+        u = new URL(raw);
+    }
+    catch {
+        return '!the gateway sent something that is not a web address';
+    }
+    if (u.protocol !== 'https:' && u.protocol !== 'http:')
+        return `!it is not a web address (${visible(u.protocol)})`;
+    if (env.kind === 'team') {
+        let origin;
+        try {
+            origin = assertTransport(u.origin);
+        }
+        catch (e) {
+            return `!${visible(e.message)}`;
+        }
+        const own = [env.gatewayUrl, env.appUrl].filter((x) => typeof x === 'string').map((x) => x.replace(/\/+$/, ''));
+        if (!own.includes(origin))
+            return `!${visible(u.host)} is not this destination's gateway or web app`;
+    }
+    return raw;
+}
+/**
+ * `align login --env <team> --token X`: the no-browser renewal. A person at a terminal only, never inside an agent, and the token is
+ * kept only once the destination's gateway says whose it is; the tenant saved is THAT one, never the previous token's.
+ */
+export async function saveTeamToken(env, envName, token, config, ctx) {
+    if (ctx.wrapped)
+        return 'A token for a team destination has to be saved by you, in your own terminal, not from inside an agent. Nothing was saved.';
+    if (!ctx.tty)
+        return 'Saving a token for a team destination needs a terminal. Nothing was saved.';
+    const who = await verifyToken(env.gatewayUrl, token);
+    if (typeof who === 'string')
+        return `${new URL(env.gatewayUrl).host} ${who}`;
+    config.setAuthToken(envName, token);
+    config.setTenantId(envName, who.tenantId);
+    return who;
+}
 export async function loginInteractive(env, envName, config) {
     const spinner = p.spinner();
     spinner.start('Opening browser for login...');
     let loginUrl = '';
+    const stop = new AbortController();
+    let refused = '';
     const callbackPromise = waitForCallback({
         ports: CLI_CALLBACK_PORTS,
         timeoutMs: 120_000,
+        signal: stop.signal,
         onBound: async (port, nonce) => {
             try {
                 const res = await fetch(`${env.gatewayUrl}/auth/cli-init?port=${port}&nonce=${nonce}`);
                 if (!res.ok)
                     throw new Error(`Gateway returned ${res.status}`);
                 const body = await res.json();
-                loginUrl = body.url;
+                const checked = checkLoginUrl(body.url, env);
+                if (typeof checked !== 'string' || checked.startsWith('!')) {
+                    refused = typeof checked === 'string' ? checked.slice(1) : 'the gateway sent no login address';
+                    spinner.stop(`Not opening that address: ${refused}`);
+                    stop.abort();
+                    return;
+                }
+                loginUrl = checked;
                 const opened = await tryOpenUrl(loginUrl);
                 // The message follows the boolean: claiming "Browser opened" over a detected
                 // failure is the same lie the paste path told in 0.28.0.
                 spinner.stop(opened
-                    ? `Browser opened. If nothing happened, visit:\n  ${chalk.bold(loginUrl)}`
-                    : `Could not open a browser here. Log in at:\n  ${chalk.bold(loginUrl)}`);
+                    ? `Browser opened. If nothing happened, visit:\n  ${chalk.bold(visible(loginUrl))}`
+                    : `Could not open a browser here. Log in at:\n  ${chalk.bold(visible(loginUrl))}`);
                 p.log.info('Waiting for you to log in (2 min timeout)...');
             }
             catch (e) {
@@ -39,7 +99,7 @@ export async function loginInteractive(env, envName, config) {
         result = await callbackPromise;
     }
     catch (e) {
-        p.log.error(`Login failed: ${e.message}`);
+        p.log.error(refused ? `Login stopped: ${refused}. Nothing was saved.` : `Login failed: ${e.message}`);
         return false;
     }
     const token = result.data['token'];
@@ -47,6 +107,22 @@ export async function loginInteractive(env, envName, config) {
         p.log.error('No token received. Try again or use: align login --token <token>');
         return false;
     }
+    // A team destination is renewed the way it was joined: the token is only kept once the gateway has answered who it belongs to,
+    // in the shape an Align gateway uses. "Unreachable" is not "verified" here, unlike the builtins below (join review F10).
+    if (env.kind === 'team') {
+        const spin = p.spinner();
+        spin.start('Verifying token...');
+        const who = await verifyToken(env.gatewayUrl, token);
+        if (typeof who === 'string') {
+            spin.stop('Login failed: the new token could not be verified.');
+            p.log.error(`${new URL(env.gatewayUrl).host} ${who}`);
+            return false;
+        }
+        config.setAuthToken(envName, token);
+        config.setTenantId(envName, who.tenantId);
+        spin.stop(`Logged in as ${visible(who.email)} (${visible(who.tenantName)}) [${envName}]`);
+        return true;
+    }
     const verifySpinner = p.spinner();
     verifySpinner.start('Verifying token...');
     try {

package/dist/lib/login-flow.js.map

@@ -1 +1 @@
-{"version":3,"file":"login-flow.js","sourceRoot":"","sources":["../../src/lib/login-flow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAKrE,6EAA6E;AAC7E,0EAA0E;AAC1E,8EAA8E;AAC9E,gDAAgD;AAChD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAsB,EACtB,OAAgB,EAChB,MAAmB;IAEnB,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IAC5B,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAE9C,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,MAAM,eAAe,GAAG,eAAe,CAAC;QACtC,KAAK,EAAE,kBAAkB;QACzB,SAAS,EAAE,OAAO;QAClB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;YAC7B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,UAAU,uBAAuB,IAAI,UAAU,KAAK,EAAE,CAAC,CAAC;gBACvF,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC/D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAqB,CAAC;gBACjD,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC;gBACpB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC1C,6EAA6E;gBAC7E,yDAAyD;gBACzD,OAAO,CAAC,IAAI,CACV,MAAM;oBACJ,CAAC,CAAC,kDAAkD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAC1E,CAAC,CAAC,gDAAgD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAC3E,CAAC;gBACF,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;YAC7D,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,2BAA4B,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,IAAI,MAAuD,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,eAAe,CAAC;IACjC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAkB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAuB,CAAC;IACzD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;QAChF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IAClC,aAAa,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACpC,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;YAAE,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,aAAa,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC,MAAM,CAAC,IAAI,MAAM,OAAO,GAAG,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,iFAAiF;QACjF,8EAA8E;QAC9E,iFAAiF;QACjF,mDAAmD;QACnD,MAAM,MAAM,GAAG,GAAG,YAAY,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACrC,aAAa,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;YACrE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;YACrE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,aAAa,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QACzE,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"login-flow.js","sourceRoot":"","sources":["../../src/lib/login-flow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAyB,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAKrE,6EAA6E;AAC7E,0EAA0E;AAC1E,8EAA8E;AAC9E,gDAAgD;AAChD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY,EAAE,GAAsB;IAChE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,oCAAoC,CAAC;IACvF,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QAAC,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,uDAAuD,CAAC;IAAC,CAAC;IACnG,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,6BAA6B,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;IAClH,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACxB,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YAAC,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,OAAO,IAAI,OAAO,CAAE,CAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QAAC,CAAC;QACrG,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7H,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,+CAA+C,CAAC;IACvG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAsB,EAAE,OAAgB,EAAE,KAAa,EAAE,MAAmB,EAAE,GAAuC;IAErH,IAAI,GAAG,CAAC,OAAO;QAAE,OAAO,2HAA2H,CAAC;IACpJ,IAAI,CAAC,GAAG,CAAC,GAAG;QAAE,OAAO,4EAA4E,CAAC;IAClG,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACrD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;IAC7E,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAsB,EACtB,OAAgB,EAChB,MAAmB;IAEnB,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IAC5B,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAE9C,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,MAAM,eAAe,GAAG,eAAe,CAAC;QACtC,KAAK,EAAE,kBAAkB;QACzB,SAAS,EAAE,OAAO;QAClB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;YAC7B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,UAAU,uBAAuB,IAAI,UAAU,KAAK,EAAE,CAAC,CAAC;gBACvF,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC/D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAsB,CAAC;gBAClD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC7C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC3D,OAAO,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mCAAmC,CAAC;oBAC/F,OAAO,CAAC,IAAI,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;oBACrD,IAAI,CAAC,KAAK,EAAE,CAAC;oBACb,OAAO;gBACT,CAAC;gBACD,QAAQ,GAAG,OAAO,CAAC;gBACnB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC1C,6EAA6E;gBAC7E,yDAAyD;gBACzD,OAAO,CAAC,IAAI,CACV,MAAM;oBACJ,CAAC,CAAC,kDAAkD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE;oBACnF,CAAC,CAAC,gDAAgD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CACpF,CAAC;gBACF,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;YAC7D,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,2BAA4B,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,IAAI,MAAuD,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,eAAe,CAAC;IACjC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,OAAO,sBAAsB,CAAC,CAAC,CAAC,iBAAkB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QACjH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAuB,CAAC;IACzD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;QAChF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,+HAA+H;IAC/H,yHAAyH;IACzH,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACrD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;YAChE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;YACtD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,gBAAgB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC;QAC1F,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IAClC,aAAa,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACpC,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;YAAE,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,aAAa,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC,MAAM,CAAC,IAAI,MAAM,OAAO,GAAG,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,iFAAiF;QACjF,8EAA8E;QAC9E,iFAAiF;QACjF,mDAAmD;QACnD,MAAM,MAAM,GAAG,GAAG,YAAY,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACrC,aAAa,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;YACrE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;YACrE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,aAAa,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QACzE,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/lib/mcp/share-status-tool.d.ts

@@ -0,0 +1,13 @@
+import type { EnvironmentConfig } from '../config.js';
+import { type ShareToolContext, type ShareToolResult } from './share-tool.js';
+export declare const SHARE_STATUS_TOOL_SCHEMA: {
+    readonly name: "align_share_status";
+    readonly annotations: {
+        readonly readOnlyHint: false;
+        readonly destructiveHint: false;
+    };
+    readonly description: string;
+    readonly inputSchema: Record<string, unknown>;
+};
+export declare function runShareStatusTool(args: Record<string, unknown> | undefined, env: EnvironmentConfig, ctx?: ShareToolContext): Promise<ShareToolResult>;
+//# sourceMappingURL=share-status-tool.d.ts.map

package/dist/lib/mcp/share-status-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"share-status-tool.d.ts","sourceRoot":"","sources":["../../../src/lib/mcp/share-status-tool.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAQtD,OAAO,EAA6D,KAAK,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAC;AASzI,eAAO,MAAM,wBAAwB;;;;;;;;CAU3B,CAAC;AAIX,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,GAAE,gBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC,CA+DhK"}

package/dist/lib/mcp/share-status-tool.js

@@ -0,0 +1,116 @@
+/**
+ * ALI-1540: the MCP tool `align_share_status` - the second half of an approved share.
+ *
+ * `align_share` stages a request and hands the person a link. This tool reads where that request stands and, ONLY
+ * when the gateway says the person approved it, sends the exact bytes that were approved (the completion call).
+ * Everything else it does is read-only: waiting, declined, expired and cancelled change nothing on the team graph.
+ *
+ * It completes at most once: the pending file is taken by an atomic rename, so a second call finds nothing to
+ * complete. Before it completes it rebuilds the share from the local graph and refuses (and cancels the request)
+ * if what would be shared changed since the person was shown it, the same rule `--confirm` applies to a code.
+ *
+ * Input: one string, the request id. No token or key can be passed.
+ */
+import { createHash } from 'node:crypto';
+import { defaultJudge } from '../curation/judge.js';
+import { defaultGatewayUrlFor } from '../config.js';
+import { completeRequest, CompletionError } from '../share/approval.js';
+import { buildPlaintext } from '../share/envelope.js';
+import { getPromotion } from '../share/ledger.js';
+import { claimRequest, combinedHash, deleteRequest, loadRequest, sweepPending } from '../share/pending.js';
+import { REQUEST_ID_RE } from '../share/requests-client.js';
+import { prepare, renderResults, send, ShareError } from '../share/run.js';
+import { visible } from '../share/visible.js';
+import { hasLogin, NO_LOGIN, resolveShareTarget, SHARE_STATUS_TOOL } from './share-tool.js';
+import { jsonSchemaOf, strictInput } from './tool-rules.js';
+const SPEC = {
+    tool: SHARE_STATUS_TOOL,
+    required: ['request_id'],
+    properties: { request_id: { type: 'string', description: 'The request_id align_share returned', maxLength: 64 } },
+};
+export const SHARE_STATUS_TOOL_SCHEMA = {
+    name: SHARE_STATUS_TOOL,
+    // It writes: once the user has approved, it completes the share, which creates or updates decisions on the team graph. It deletes nothing there.
+    annotations: { readOnlyHint: false, destructiveHint: false },
+    description: 'Check a share the user was asked to approve in their browser (from align_share), and finish it once they have. ' +
+        'It reports waiting, declined, expired or cancelled, and changes nothing in those cases. When the user HAS approved, the first call sends exactly what they approved and returns the result; a second call sends nothing. ' +
+        'A completed share stays with the team as its record, even if the user later leaves. It does not approve anything: approving is the user\'s act, in their browser, and you must not attempt it. Call it after the user says they approved, or to see whether they have. ' +
+        'It never takes a token or key.',
+    inputSchema: jsonSchemaOf(SPEC),
+};
+const minutes = (iso, now = Date.now()) => Math.max(0, Math.round((Date.parse(iso) - now) / 60000));
+export async function runShareStatusTool(args, env, ctx = {}) {
+    const input = strictInput(SPEC, args);
+    const id = input['request_id'];
+    const t = resolveShareTarget(env, ctx, SHARE_STATUS_TOOL);
+    sweepPending();
+    if (!hasLogin(t.cloudEnv))
+        return { text: NO_LOGIN(), shared: false };
+    if (!REQUEST_ID_RE.test(id))
+        return { text: 'That is not a share request id. Use the request_id align_share returned.', shared: false };
+    const rec = loadRequest(id);
+    if (rec === null)
+        return { text: 'No share is waiting under that id on this machine. It may already be finished, cancelled or expired. Call align_share again to start a new one.', shared: false, state: 'unknown' };
+    try {
+        const { state } = await t.client.getShareRequest(id);
+        const ended = (text, st) => { deleteRequest(id); return { text, shared: false, state: st }; };
+        switch (state) {
+            case 'pending': return { text: `Still waiting for the user to approve it in their browser. Code ${visible(rec.userCode)}; it expires in about ${minutes(rec.expiresAt)} minutes. Nothing has been sent. Ask the user to open the link align_share gave them.`, shared: false, state, request_id: id };
+            case 'declined': return ended('The user declined it in their browser. Nothing was sent.', state);
+            case 'expired': return ended('The request expired before it was approved. Nothing was sent. Call align_share again to start a new one.', state);
+            case 'cancelled': return ended('The request was cancelled. Nothing was sent.', state);
+            case 'failed': return ended('The gateway marked the request as failed. Nothing was sent. Call align_share again to start a new one.', state);
+            case 'completed': {
+                // Completed by this process (the answer was lost) or by another. If this machine has no ledger row for what it staged,
+                // say so: a later retract cannot find an unrecorded share, and "already completed" alone would read as fully done.
+                const unrecorded = rec.localIds.filter((l) => getPromotion(env.localDbPath, l, rec.envName, rec.tenantId) === null);
+                return ended(unrecorded.length === 0
+                    ? 'That share was already completed, and this machine has the record of it.'
+                    : 'The gateway says that share was completed (by this machine, whose answer was lost, or by another process). This machine has NO record of the result, so it is not in the local ledger and `align share --retract` cannot find it. Check the team graph. Sharing the same decision again is safe (it will not make a second copy) and records it here.', state);
+            }
+            case 'completing': return { text: 'The gateway is finishing that share now. Check again in a moment.', shared: false, state, request_id: id };
+            case 'approved': break;
+        }
+        // Approved: take the request (atomically), so two calls cannot both complete it.
+        const claim = claimRequest(id);
+        if (claim === null)
+            return { text: 'That share is already being completed or has been. Nothing more was sent by this call.', shared: false, state: 'completing', request_id: id };
+        try {
+            const shareCtx = { dbPath: env.localDbPath, envName: t.envName, client: t.client, judge: await (ctx.judge ?? defaultJudge)(), salt: t.salt, gatewayUrl: t.cloudEnv.gatewayUrl, defaultGatewayUrl: defaultGatewayUrlFor(t.envName) };
+            const prep = await prepare(shareCtx, claim.request.localIds);
+            // Rebuild what would be sent NOW and require it to be byte-for-byte what was approved, with the hash and the decisions this record names.
+            // A pending file edited to point at other decisions (or a stale copy) can never record one decision's share under another's id.
+            const rebuilt = prep.payloads.length === 0 ? null : buildPlaintext({ kind: 'share', tenantId: prep.tenantId, gatewayUrl: prep.gatewayUrl, payloads: prep.payloads });
+            const unchanged = rebuilt !== null
+                && rebuilt.equals(Buffer.from(claim.request.bytesB64, 'base64'))
+                && createHash('sha256').update(rebuilt).digest('hex') === claim.request.sha256
+                && prep.payloads.map((p) => p.localId).join('\n') === claim.request.localIds.join('\n');
+            if (prep.secrets.length || !unchanged || combinedHash(prep.payloads, prep) !== claim.request.hash || claim.request.envName !== t.envName) {
+                // What the user approved is no longer what this machine would send: do not send it.
+                await t.client.cancelShareRequest(id).catch(() => undefined);
+                claim.finish();
+                return { text: 'What would be shared, or where it would go, changed since the user was shown it, so nothing was sent and the request was cancelled. Call align_share to start again.', shared: false, state: 'changed' };
+            }
+            const response = await completeRequest(t.client, id, claim.request.bytesB64);
+            const rows = await send(shareCtx, prep, { post: async (_b, phase) => (phase === 'share' ? response : null) });
+            claim.finish();
+            const waiting = rows.some((r) => r.judgementFailures.some((f) => f.error === 'needs_confirmation'));
+            const more = waiting ? `\n\nSome of the user's judgements wait for the team's existing text to be confirmed. Tell the user to run align share ${visible(claim.request.localIds[0] ?? '<id>')} in their own terminal: they approve that second step in the browser too.` : '';
+            return { text: `Approved by the user, and sent:\n${renderResults(rows)}${more}`, shared: !rows.every((r) => r.outcome.kind === 'refused' || r.outcome.kind === 'unknown'), state: 'completed' };
+        }
+        catch (e) {
+            // No verdict from the gateway means the same bytes may be sent again; any other failure is final for this request.
+            if (e instanceof CompletionError && e.retryable)
+                claim.release();
+            else
+                claim.finish();
+            throw e;
+        }
+    }
+    catch (e) {
+        if (e instanceof ShareError)
+            throw new Error(e.message);
+        throw new Error(visible(e.message));
+    }
+}
+//# sourceMappingURL=share-status-tool.js.map

package/dist/lib/mcp/share-status-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"share-status-tool.js","sourceRoot":"","sources":["../../../src/lib/mcp/share-status-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC3G,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,kBAAkB,EAAE,iBAAiB,EAA+C,MAAM,iBAAiB,CAAC;AACzI,OAAO,EAAE,YAAY,EAAE,WAAW,EAAmB,MAAM,iBAAiB,CAAC;AAE7E,MAAM,IAAI,GAAe;IACvB,IAAI,EAAE,iBAAiB;IACvB,QAAQ,EAAE,CAAC,YAAY,CAAC;IACxB,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qCAAqC,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE;CAClH,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,IAAI,EAAE,iBAAiB;IACvB,iJAAiJ;IACjJ,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE;IAC5D,WAAW,EACT,iHAAiH;QACjH,2NAA2N;QAC3N,yQAAyQ;QACzQ,gCAAgC;IAClC,WAAW,EAAE,YAAY,CAAC,IAAI,CAAC;CACvB,CAAC;AAEX,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAU,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;AAEpH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAyC,EAAE,GAAsB,EAAE,MAAwB,EAAE;IACpI,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,KAAK,CAAC,YAAY,CAAW,CAAC;IACzC,MAAM,CAAC,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAC1D,YAAY,EAAE,CAAC;IACf,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACtE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,0EAA0E,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACxI,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,iJAAiJ,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACtN,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAU,EAAmB,EAAE,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/H,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,mEAAmE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,yBAAyB,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,uFAAuF,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YACtS,KAAK,UAAU,CAAC,CAAC,OAAO,KAAK,CAAC,0DAA0D,EAAE,KAAK,CAAC,CAAC;YACjG,KAAK,SAAS,CAAC,CAAC,OAAO,KAAK,CAAC,0GAA0G,EAAE,KAAK,CAAC,CAAC;YAChJ,KAAK,WAAW,CAAC,CAAC,OAAO,KAAK,CAAC,8CAA8C,EAAE,KAAK,CAAC,CAAC;YACtF,KAAK,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,wGAAwG,EAAE,KAAK,CAAC,CAAC;YAC7I,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,uHAAuH;gBACvH,mHAAmH;gBACnH,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,WAAY,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;gBACrH,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;oBAClC,CAAC,CAAC,0EAA0E;oBAC5E,CAAC,CAAC,uVAAuV,EAAE,KAAK,CAAC,CAAC;YACtW,CAAC;YACD,KAAK,YAAY,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,mEAAmE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAC9I,KAAK,UAAU,CAAC,CAAC,MAAM;QACzB,CAAC;QACD,iFAAiF;QACjF,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,wFAAwF,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAClL,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,WAAY,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YACrO,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC7D,0IAA0I;YAC1I,gIAAgI;YAChI,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YACrK,MAAM,SAAS,GAAG,OAAO,KAAK,IAAI;mBAC7B,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;mBAC7D,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM;mBAC3E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1F,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,SAAS,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;gBACzI,oFAAoF;gBACpF,MAAM,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC7D,KAAK,CAAC,MAAM,EAAE,CAAC;gBACf,OAAO,EAAE,IAAI,EAAE,sKAAsK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YAC3N,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC7E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9G,KAAK,CAAC,MAAM,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,oBAAoB,CAAC,CAAC,CAAC;YACpG,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,yHAAyH,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,2EAA2E,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7Q,OAAO,EAAE,IAAI,EAAE,oCAAoC,aAAa,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAClM,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,mHAAmH;YACnH,IAAI,CAAC,YAAY,eAAe,IAAI,CAAC,CAAC,SAAS;gBAAE,KAAK,CAAC,OAAO,EAAE,CAAC;;gBAAM,KAAK,CAAC,MAAM,EAAE,CAAC;YACtF,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IACjD,CAAC;AACH,CAAC"}

package/dist/lib/mcp/share-tool.d.ts

@@ -1,20 +1,8 @@
-/**
- * L9: the MCP tool `align_share` - step ONE of a two-step share, and never step two.
- *
- * What it does: builds the exact preview of what would leave this machine, runs the secret scan,
- * stores the payload under a short-lived single-use code and returns the preview plus the command
- * a PERSON runs: `align share --confirm <code>`. What it cannot do: send. Nothing in this module
- * calls `shareBatch`; the only network call is `whoami` (a read) to name the destination. There is
- * no elicitation path here either: an answer shown by the client is only as trustworthy as the
- * client, so completion is reserved for the CLI at a controlling terminal (Decision 17, stage 1).
- *
- * The input schema is closed and has one property, the decision id: a token or key cannot be
- * passed, and the destination is the user's own logged-in environment, never an argument.
- */
 import type { EnvironmentConfig } from '../config.js';
 import type { Judge } from '../curation/judgements-db.js';
 import { type ShareClient } from '../share/run.js';
 export declare const SHARE_TOOL = "align_share";
+export declare const SHARE_STATUS_TOOL = "align_share_status";
 export declare const SHARE_TOOL_SCHEMA: {
     readonly name: "align_share";
     readonly annotations: {
@@ -29,12 +17,15 @@ export interface ShareToolContext {
         name?: unknown;
     };
     judge?: () => Promise<Judge>;
-    /** Test seam: the destination and the (read-only) client. Production resolves the user's default cloud env. */
+    /** Test seam: the destination and the client. Production resolves the user's default cloud env. */
     share?: {
         cloudEnv: EnvironmentConfig;
         envName: string;
         client: ShareClient;
         salt?: string;
+        appUrl?: string;
+        label?: string;
+        teamAppUrl?: string;
     };
 }
 export interface ShareToolResult {
@@ -42,5 +33,18 @@ export interface ShareToolResult {
     code?: string;
     [k: string]: unknown;
 }
+export interface ShareTarget {
+    cloudEnv: EnvironmentConfig;
+    envName: string;
+    client: ShareClient;
+    salt: string;
+    appUrl: string;
+    label: string; /** Set for a team destination: the web app saved at join time. */
+    teamAppUrl?: string;
+}
+/** The local graph this server reads, and the cloud environment a share goes to. Shared with align_share_status. */
+export declare function resolveShareTarget(env: EnvironmentConfig, ctx: ShareToolContext, tool: string): ShareTarget;
+export declare const NO_LOGIN: () => string;
+export declare const hasLogin: (e: EnvironmentConfig) => boolean;
 export declare function runShareTool(args: Record<string, unknown> | undefined, env: EnvironmentConfig, ctx?: ShareToolContext): Promise<ShareToolResult>;
 //# sourceMappingURL=share-tool.d.ts.map