@aligndottech/cli 0.50.0 → 0.52.0

package/dist/lib/resolve-env.d.ts

@@ -1,6 +1,19 @@
-import { type EnvName } from './config.js';
+import { createConfigStore, type EnvName } from './config.js';
+/**
+ * A name that is neither a builtin nor a saved team destination. Resolution used to fall back to
+ * the stored default for any such name, so `--env prodd` quietly ran against prod and
+ * `--env acme` against whatever the default was. A name the user typed on purpose now either
+ * means what they said or stops (join plan S6).
+ */
+export declare class UnknownEnvError extends Error {
+    constructor(value: string, destinations: string[]);
+}
+type ConfigStore = ReturnType<typeof createConfigStore>;
+/** A builtin or a saved team destination, or UnknownEnvError. The one place a typed name is accepted. */
+export declare function acceptEnvName(name: string, config: Pick<ConfigStore, 'hasTeamDestination' | 'listTeamDestinationNames'>): EnvName;
 export declare function resolveEnv(flagValue?: string, opts?: {
     preferLocalEmbedded?: boolean;
+    config?: ConfigStore;
 }): EnvName;
 /**
  * Env resolution for `align connect <tool>` (ALI-675).
@@ -17,4 +30,5 @@ export declare function resolveEnv(flagValue?: string, opts?: {
  * an explicit --env always wins, and a logged-in user is never hijacked.
  */
 export declare function resolveImportEnv(flagValue?: string): EnvName;
+export {};
 //# sourceMappingURL=resolve-env.d.ts.map

package/dist/lib/resolve-env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-env.d.ts","sourceRoot":"","sources":["../../src/lib/resolve-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,OAAO,EAAE,MAAM,aAAa,CAAC;AAI9D,wBAAgB,UAAU,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAwBpG;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAE5D"}
+{"version":3,"file":"resolve-env.d.ts","sourceRoot":"","sources":["../../src/lib/resolve-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,iBAAiB,EAAE,KAAK,OAAO,EAAE,MAAM,aAAa,CAAC;AAI/E;;;;;GAKG;AACH,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE;CAMlD;AAED,KAAK,WAAW,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAExD,yGAAyG;AACzG,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,oBAAoB,GAAG,0BAA0B,CAAC,GAAG,OAAO,CAIjI;AAED,wBAAgB,UAAU,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAO,GAAG,OAAO,CAoB1H;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAE5D"}

package/dist/lib/resolve-env.js

@@ -1,14 +1,34 @@
 import { createConfigStore } from './config.js';
 const VALID_ENVS = ['local', 'preview', 'prod'];
-export function resolveEnv(flagValue, opts = {}) {
-    if (flagValue && VALID_ENVS.includes(flagValue)) {
-        return flagValue;
+/**
+ * A name that is neither a builtin nor a saved team destination. Resolution used to fall back to
+ * the stored default for any such name, so `--env prodd` quietly ran against prod and
+ * `--env acme` against whatever the default was. A name the user typed on purpose now either
+ * means what they said or stops (join plan S6).
+ */
+export class UnknownEnvError extends Error {
+    constructor(value, destinations) {
+        const shown = value.replace(/[^\x20-\x7e]/g, '?').slice(0, 40);
+        const valid = [...VALID_ENVS, ...destinations].join(', ');
+        super(`Unknown environment "${shown}". Valid environments: ${valid}.`);
+        this.name = 'UnknownEnvError';
     }
+}
+/** A builtin or a saved team destination, or UnknownEnvError. The one place a typed name is accepted. */
+export function acceptEnvName(name, config) {
+    if (VALID_ENVS.includes(name))
+        return name;
+    if (config.hasTeamDestination(name))
+        return name;
+    throw new UnknownEnvError(name, config.listTeamDestinationNames());
+}
+export function resolveEnv(flagValue, opts = {}) {
+    const config = opts.config ?? createConfigStore();
+    if (flagValue)
+        return acceptEnvName(flagValue, config);
     const fromEnvVar = process.env['ALIGN_ENV'];
-    if (fromEnvVar && VALID_ENVS.includes(fromEnvVar)) {
-        return fromEnvVar;
-    }
-    const config = createConfigStore();
+    if (fromEnvVar)
+        return acceptEnvName(fromEnvVar, config);
     const defaultEnv = config.getDefaultEnv();
     // A user who ran `align setup --local` has local-embedded configured but the
     // default env stays a cloud env (deliberate, so cloud-only commands are not

package/dist/lib/resolve-env.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-env.js","sourceRoot":"","sources":["../../src/lib/resolve-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAgB,MAAM,aAAa,CAAC;AAE9D,MAAM,UAAU,GAAc,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAE3D,MAAM,UAAU,UAAU,CAAC,SAAkB,EAAE,OAA0C,EAAE;IACzF,IAAI,SAAS,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAoB,CAAC,EAAE,CAAC;QAC3D,OAAO,SAAoB,CAAC;IAC9B,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,UAAU,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAqB,CAAC,EAAE,CAAC;QAC7D,OAAO,UAAqB,CAAC;IAC/B,CAAC;IACD,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;IACnC,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;IAC1C,6EAA6E;IAC7E,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,iFAAiF;IACjF,8DAA8D;IAC9D,IAAI,IAAI,CAAC,mBAAmB,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACjF,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAkB;IACjD,OAAO,UAAU,CAAC,SAAS,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"resolve-env.js","sourceRoot":"","sources":["../../src/lib/resolve-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,iBAAiB,EAAgB,MAAM,aAAa,CAAC;AAE/E,MAAM,UAAU,GAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,KAAa,EAAE,YAAsB;QAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,CAAC,GAAG,UAAU,EAAE,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,KAAK,CAAC,wBAAwB,KAAK,0BAA0B,KAAK,GAAG,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAID,yGAAyG;AACzG,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,MAA4E;IACtH,IAAK,UAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAe,CAAC;IACpE,IAAI,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAe,CAAC;IAC5D,MAAM,IAAI,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,wBAAwB,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,SAAkB,EAAE,OAAgE,EAAE;IAC/G,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,iBAAiB,EAAE,CAAC;IAClD,IAAI,SAAS;QAAE,OAAO,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,UAAU;QAAE,OAAO,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;IAC1C,6EAA6E;IAC7E,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,iFAAiF;IACjF,8DAA8D;IAC9D,IAAI,IAAI,CAAC,mBAAmB,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACjF,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAkB;IACjD,OAAO,UAAU,CAAC,SAAS,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,CAAC"}

package/dist/lib/scope-defaults.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scope-defaults.d.ts","sourceRoot":"","sources":["../../src/lib/scope-defaults.ts"],"names":[],"mappings":"AAYA,oHAAoH;AACpH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAyBzD"}
+{"version":3,"file":"scope-defaults.d.ts","sourceRoot":"","sources":["../../src/lib/scope-defaults.ts"],"names":[],"mappings":"AAaA,oHAAoH;AACpH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CA0BzD"}

package/dist/lib/scope-defaults.js

@@ -5,6 +5,7 @@
  */
 import fs from 'node:fs';
 import { DatabaseSync } from 'node:sqlite';
+import { tightenGraphFiles } from './private-files.js';
 const MAX_SUGGESTED = 10;
 const TICKET = /(?:^|\/)([A-Z][A-Z0-9_]+)-\d+$/;
 const codeUnit = (a, b) => (a < b ? -1 : a > b ? 1 : 0);
@@ -14,6 +15,7 @@ export function citedProjectKeys(dbPath) {
     if (!fs.existsSync(dbPath))
         return [];
     let rows;
+    tightenGraphFiles(dbPath); // owner-only on every open (private-files.ts)
     const db = new DatabaseSync(dbPath, { readOnly: true });
     try {
         db.exec('PRAGMA busy_timeout = 30000');

package/dist/lib/scope-defaults.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope-defaults.js","sourceRoot":"","sources":["../../src/lib/scope-defaults.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,MAAM,GAAG,gCAAgC,CAAC;AAChD,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEhF,oHAAoH;AACpH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,4GAA4G;IAC5G,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,IAAI,IAAiD,CAAC;IACtD,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,EAAE,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACvC,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,kFAAkF,CAAC,CAAC,GAAG,EAAiB,CAAC;IAC7H,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,mCAAmC;IAChD,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAChC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;SAC1B,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;SACnE,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC;SACvB,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC"}
+{"version":3,"file":"scope-defaults.js","sourceRoot":"","sources":["../../src/lib/scope-defaults.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,MAAM,GAAG,gCAAgC,CAAC;AAChD,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEhF,oHAAoH;AACpH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,4GAA4G;IAC5G,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,IAAI,IAAiD,CAAC;IACtD,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,8CAA8C;IACzE,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,EAAE,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACvC,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,kFAAkF,CAAC,CAAC,GAAG,EAAiB,CAAC;IAC7H,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,mCAAmC;IAChD,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAChC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;SAC1B,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;SACnE,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC;SACvB,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC"}

package/dist/lib/scope-real.d.ts

@@ -9,9 +9,22 @@ import { type ActiveScope } from './scope-values.js';
 export declare function gitlabPlaceOf(identity: string | null): string | undefined;
 export declare function configScopeStore(config?: {
     getEnvironment(env: import("./config.js").EnvName): import("./config.js").EnvironmentConfig;
+    saveTeamDestination(name: string, d: {
+        gatewayUrl: string;
+        appUrl: string;
+        authToken: string;
+        tenantId: string | null;
+        orgNameClaimed?: string;
+    }, now?: Date): void;
+    clearTeamToken(name: string): void;
+    getShareDestination(): string | null;
+    setShareDestination(name: string): void;
+    clearShareDestination(): void;
     setAuthToken(env: import("./config.js").EnvName, token: string): void;
     setTenantId(env: import("./config.js").EnvName, tenantId: string): void;
     setNgrokUrl(url: string): void;
+    hasTeamDestination(name: string): boolean;
+    listTeamDestinationNames(): string[];
     setDefaultEnv(env: import("./config.js").EnvName): void;
     getDefaultEnv(): import("./config.js").EnvName;
     getConnectorToken(env: import("./config.js").EnvName, connectorKey: string): string | null;
@@ -39,6 +52,8 @@ export declare function configScopeStore(config?: {
     setAgent(agent: string): void;
     isLaunchOff(): boolean;
     setLaunchOff(off: boolean): void;
+    getDetector(): string | undefined;
+    setDetector(detector: string): void;
     clearAgent(): void;
     isBackgroundSyncOff(): boolean;
     setBackgroundSyncOff(off: boolean): void;
@@ -62,6 +77,10 @@ export declare function configScopeStore(config?: {
     } | undefined;
     getTelemetryNoticeShownAt(): string | undefined;
     markTelemetryNoticeShown(): void;
+    getLeadState(): import("./config.js").LeadState;
+    markLeadPromptShown(version: string, now?: Date): void;
+    setLeadOutcome(outcome: import("./config.js").LeadPromptOutcome, now?: Date): void;
+    clearLeadPromptShown(): void;
     getProviderKey(provider: import("./config.js").GuidedProviderKey): string | null;
     setProviderKey(provider: import("./config.js").GuidedProviderKey, key: string): void;
     clearProviderKey(provider: import("./config.js").GuidedProviderKey): void;
@@ -78,9 +97,22 @@ export declare function configScopeStore(config?: {
 /** The stored choice IN FORCE for a source (a waiting agent choice is not), or null when nothing was chosen. For callers outside the scope code. */
 export declare function activeStoredScope(source: string, config?: {
     getEnvironment(env: import("./config.js").EnvName): import("./config.js").EnvironmentConfig;
+    saveTeamDestination(name: string, d: {
+        gatewayUrl: string;
+        appUrl: string;
+        authToken: string;
+        tenantId: string | null;
+        orgNameClaimed?: string;
+    }, now?: Date): void;
+    clearTeamToken(name: string): void;
+    getShareDestination(): string | null;
+    setShareDestination(name: string): void;
+    clearShareDestination(): void;
     setAuthToken(env: import("./config.js").EnvName, token: string): void;
     setTenantId(env: import("./config.js").EnvName, tenantId: string): void;
     setNgrokUrl(url: string): void;
+    hasTeamDestination(name: string): boolean;
+    listTeamDestinationNames(): string[];
     setDefaultEnv(env: import("./config.js").EnvName): void;
     getDefaultEnv(): import("./config.js").EnvName;
     getConnectorToken(env: import("./config.js").EnvName, connectorKey: string): string | null;
@@ -108,6 +140,8 @@ export declare function activeStoredScope(source: string, config?: {
     setAgent(agent: string): void;
     isLaunchOff(): boolean;
     setLaunchOff(off: boolean): void;
+    getDetector(): string | undefined;
+    setDetector(detector: string): void;
     clearAgent(): void;
     isBackgroundSyncOff(): boolean;
     setBackgroundSyncOff(off: boolean): void;
@@ -131,6 +165,10 @@ export declare function activeStoredScope(source: string, config?: {
     } | undefined;
     getTelemetryNoticeShownAt(): string | undefined;
     markTelemetryNoticeShown(): void;
+    getLeadState(): import("./config.js").LeadState;
+    markLeadPromptShown(version: string, now?: Date): void;
+    setLeadOutcome(outcome: import("./config.js").LeadPromptOutcome, now?: Date): void;
+    clearLeadPromptShown(): void;
     getProviderKey(provider: import("./config.js").GuidedProviderKey): string | null;
     setProviderKey(provider: import("./config.js").GuidedProviderKey, key: string): void;
     clearProviderKey(provider: import("./config.js").GuidedProviderKey): void;
@@ -147,9 +185,22 @@ export declare function activeStoredScope(source: string, config?: {
 /** What the sync status needs to know about the scope in force, from the stored choice. An unchosen source answers undefined (the most recently started row is used). */
 export declare function scopeStatusHooks(config?: {
     getEnvironment(env: import("./config.js").EnvName): import("./config.js").EnvironmentConfig;
+    saveTeamDestination(name: string, d: {
+        gatewayUrl: string;
+        appUrl: string;
+        authToken: string;
+        tenantId: string | null;
+        orgNameClaimed?: string;
+    }, now?: Date): void;
+    clearTeamToken(name: string): void;
+    getShareDestination(): string | null;
+    setShareDestination(name: string): void;
+    clearShareDestination(): void;
     setAuthToken(env: import("./config.js").EnvName, token: string): void;
     setTenantId(env: import("./config.js").EnvName, tenantId: string): void;
     setNgrokUrl(url: string): void;
+    hasTeamDestination(name: string): boolean;
+    listTeamDestinationNames(): string[];
     setDefaultEnv(env: import("./config.js").EnvName): void;
     getDefaultEnv(): import("./config.js").EnvName;
     getConnectorToken(env: import("./config.js").EnvName, connectorKey: string): string | null;
@@ -177,6 +228,8 @@ export declare function scopeStatusHooks(config?: {
     setAgent(agent: string): void;
     isLaunchOff(): boolean;
     setLaunchOff(off: boolean): void;
+    getDetector(): string | undefined;
+    setDetector(detector: string): void;
     clearAgent(): void;
     isBackgroundSyncOff(): boolean;
     setBackgroundSyncOff(off: boolean): void;
@@ -200,6 +253,10 @@ export declare function scopeStatusHooks(config?: {
     } | undefined;
     getTelemetryNoticeShownAt(): string | undefined;
     markTelemetryNoticeShown(): void;
+    getLeadState(): import("./config.js").LeadState;
+    markLeadPromptShown(version: string, now?: Date): void;
+    setLeadOutcome(outcome: import("./config.js").LeadPromptOutcome, now?: Date): void;
+    clearLeadPromptShown(): void;
     getProviderKey(provider: import("./config.js").GuidedProviderKey): string | null;
     setProviderKey(provider: import("./config.js").GuidedProviderKey, key: string): void;
     clearProviderKey(provider: import("./config.js").GuidedProviderKey): void;

package/dist/lib/scope-real.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scope-real.d.ts","sourceRoot":"","sources":["../../src/lib/scope-real.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,OAAO,EAA2B,KAAK,SAAS,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AACtF,OAAO,EAAE,KAAK,WAAW,EAAmD,MAAM,mBAAmB,CAAC;AAEtG,wHAAwH;AACxH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAEzE;AAED,wBAAgB,gBAAgB,CAAC,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAsB,GAAG,UAAU,CAUzE;AAED,oJAAoJ;AACpJ,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAsB,GAAG,WAAW,GAAG,IAAI,CAGlG;AAED,yKAAyK;AACzK,wBAAgB,gBAAgB,CAAC,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAsB,GAAG;IAAE,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAAC,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAAC,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;CAAE,CAgB7M;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,CAAC,GAAE;IAAE,MAAM,CAAC,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAA;CAAO,GAAG,SAAS,CAW9H"}
+{"version":3,"file":"scope-real.d.ts","sourceRoot":"","sources":["../../src/lib/scope-real.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,OAAO,EAA2B,KAAK,SAAS,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AACtF,OAAO,EAAE,KAAK,WAAW,EAAmD,MAAM,mBAAmB,CAAC;AAEtG,wHAAwH;AACxH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAEzE;AAED,wBAAgB,gBAAgB,CAAC,MAAM;;;;;;;sBAiDytP,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAjDpsP,GAAG,UAAU,CAUzE;AAED,oJAAoJ;AACpJ,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM;;;;;;;sBAoCwsP,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CApCnrP,GAAG,WAAW,GAAG,IAAI,CAGlG;AAED,yKAAyK;AACzK,wBAAgB,gBAAgB,CAAC,MAAM;;;;;;;sBA8BytP,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA9BpsP,GAAG;IAAE,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAAC,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAAC,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;CAAE,CAgB7M;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,CAAC,GAAE;IAAE,MAAM,CAAC,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAA;CAAO,GAAG,SAAS,CAW9H"}

package/dist/lib/setup-route.d.ts

@@ -11,10 +11,10 @@ export type SetupRoute = {
     teamLoginUntouched?: 'prod' | 'preview';
 } | {
     kind: 'team';
-    env: 'prod' | 'preview';
+    env: EnvName;
 };
 export declare class InvalidEnvError extends Error {
-    constructor(value: string);
+    constructor(value: string, destinations?: string[]);
 }
 export declare function routeSetup(opts: {
     env?: string;
@@ -22,5 +22,7 @@ export declare function routeSetup(opts: {
 }, config: {
     getEnvironment(env: EnvName): EnvironmentConfig;
     getDefaultEnv(): EnvName;
+    hasTeamDestination(name: string): boolean;
+    listTeamDestinationNames(): string[];
 }, processEnv: Record<string, string | undefined>): SetupRoute;
 //# sourceMappingURL=setup-route.d.ts.map

package/dist/lib/setup-route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup-route.d.ts","sourceRoot":"","sources":["../../src/lib/setup-route.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE9D;;;;;GAKG;AACH,eAAO,MAAM,UAAU,EAAE,SAAS,OAAO,EAAiC,CAAC;AAE3E,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAE9C,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,KAAK,EAAE,MAAM;CAI1B;AAID,wBAAgB,UAAU,CACxB,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,EACvC,MAAM,EAAE;IAAE,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,iBAAiB,CAAC;IAAC,aAAa,IAAI,OAAO,CAAA;CAAE,EACrF,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAC7C,UAAU,CAkBZ"}
+{"version":3,"file":"setup-route.d.ts","sourceRoot":"","sources":["../../src/lib/setup-route.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE9D;;;;;GAKG;AACH,eAAO,MAAM,UAAU,EAAE,SAAS,OAAO,EAAiC,CAAC;AAE3E,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,OAAO,CAAA;CAAE,CAAC;AAEnC,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,KAAK,EAAE,MAAM,EAAE,YAAY,GAAE,MAAM,EAAO;CAIvD;AAID,wBAAgB,UAAU,CACxB,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,EACvC,MAAM,EAAE;IACN,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,iBAAiB,CAAC;IAChD,aAAa,IAAI,OAAO,CAAC;IACzB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1C,wBAAwB,IAAI,MAAM,EAAE,CAAC;CACtC,EACD,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAC7C,UAAU,CAuBZ"}

package/dist/lib/setup-route.js

@@ -6,15 +6,21 @@
  */
 export const VALID_ENVS = ['local', 'preview', 'prod'];
 export class InvalidEnvError extends Error {
-    constructor(value) {
-        super(`Unknown environment "${value}". Valid environments: ${VALID_ENVS.join(', ')}.`);
+    constructor(value, destinations = []) {
+        super(`Unknown environment "${value}". Valid environments: ${[...VALID_ENVS, ...destinations].join(', ')}.`);
         this.name = 'InvalidEnvError';
     }
 }
 const isTeamEnv = (v) => v === 'prod' || v === 'preview';
 export function routeSetup(opts, config, processEnv) {
-    if (opts.env !== undefined && !VALID_ENVS.includes(opts.env))
-        throw new InvalidEnvError(opts.env);
+    // A saved team destination (`align join`) is a team env too: setup runs against it. Anything else that is
+    // not a builtin is an error, from --env and from ALIGN_ENV alike, as in resolveEnv (join plan S6).
+    const known = (v) => VALID_ENVS.includes(v) || config.hasTeamDestination(v);
+    if (opts.env !== undefined && !known(opts.env))
+        throw new InvalidEnvError(opts.env, config.listTeamDestinationNames());
+    const ambient = processEnv['ALIGN_ENV'];
+    if (opts.env === undefined && !opts.local && ambient && !known(ambient))
+        throw new InvalidEnvError(ambient, config.listTeamDestinationNames());
     // The team env this machine is logged in to: the default env first, then prod, then preview.
     const defaultEnv = config.getDefaultEnv();
     const order = [defaultEnv, 'prod', 'preview'].filter(isTeamEnv);
@@ -22,12 +28,12 @@ export function routeSetup(opts, config, processEnv) {
     if (opts.local || opts.env === 'local') {
         return loggedInEnv ? { kind: 'local', teamLoginUntouched: loggedInEnv } : { kind: 'local' };
     }
-    if (isTeamEnv(opts.env))
+    if (opts.env !== undefined)
         return { kind: 'team', env: opts.env };
     const fromEnvVar = processEnv['ALIGN_ENV'];
     if (fromEnvVar === 'local')
         return loggedInEnv ? { kind: 'local', teamLoginUntouched: loggedInEnv } : { kind: 'local' };
-    if (isTeamEnv(fromEnvVar))
+    if (fromEnvVar && fromEnvVar !== 'local')
         return { kind: 'team', env: fromEnvVar };
     if (loggedInEnv)
         return { kind: 'team', env: loggedInEnv };

package/dist/lib/setup-route.js.map

@@ -1 +1 @@
-{"version":3,"file":"setup-route.js","sourceRoot":"","sources":["../../src/lib/setup-route.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAuB,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAM3E,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,KAAa;QACvB,KAAK,CAAC,wBAAwB,KAAK,0BAA0B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvF,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,SAAS,GAAG,CAAC,CAAqB,EAA2B,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,SAAS,CAAC;AAEtG,MAAM,UAAU,UAAU,CACxB,IAAuC,EACvC,MAAqF,EACrF,UAA8C;IAE9C,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAc,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE7G,6FAA6F;IAC7F,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAEnF,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;QACvC,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC9F,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;IAEhE,MAAM,UAAU,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,UAAU,KAAK,OAAO;QAAE,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACxH,IAAI,SAAS,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;IACpE,IAAI,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;IAC3D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"setup-route.js","sourceRoot":"","sources":["../../src/lib/setup-route.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAuB,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAM3E,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,KAAa,EAAE,eAAyB,EAAE;QACpD,KAAK,CAAC,wBAAwB,KAAK,0BAA0B,CAAC,GAAG,UAAU,EAAE,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7G,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,SAAS,GAAG,CAAC,CAAqB,EAA2B,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,SAAS,CAAC;AAEtG,MAAM,UAAU,UAAU,CACxB,IAAuC,EACvC,MAKC,EACD,UAA8C;IAE9C,0GAA0G;IAC1G,mGAAmG;IACnG,MAAM,KAAK,GAAG,CAAC,CAAS,EAAW,EAAE,CAAE,UAAgC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IACpH,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,wBAAwB,EAAE,CAAC,CAAC;IACvH,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACxC,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,wBAAwB,EAAE,CAAC,CAAC;IAE/I,6FAA6F;IAC7F,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAEnF,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;QACvC,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC9F,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAc,EAAE,CAAC;IAE9E,MAAM,UAAU,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,UAAU,KAAK,OAAO;QAAE,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACxH,IAAI,UAAU,IAAI,UAAU,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAqB,EAAE,CAAC;IAC9F,IAAI,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;IAC3D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC"}

package/dist/lib/share/approval.d.ts

@@ -0,0 +1,71 @@
+import type { RequestKind } from './envelope.js';
+import type { ShareRequestsApi, StagedRequest } from './requests-client.js';
+import { ShareError } from './run.js';
+import type { BatchResponse } from './wire.js';
+/** Sleep that ends early when `signal` aborts (Ctrl-C), so a cancel is not delayed by a poll interval. */
+export declare function abortableSleep(ms: number, signal?: AbortSignal): Promise<void>;
+export interface StageInput {
+    kind: RequestKind;
+    plaintext: Buffer;
+    tenantId: string;
+    userId: string;
+    itemCount: number;
+    judgementCount: number;
+    label: string;
+    agent?: string;
+}
+/** `id` is the gateway's row id (every route and the link use it); `envelopeId` is the CLI's own, bound in the AAD. */
+export interface Staged extends StagedRequest {
+    envelopeId: string;
+    keyB64Url: string;
+    sha256: string;
+    /** The exact plaintext, base64: what `complete` sends and what the gateway re-hashes. */
+    bytesB64: string;
+}
+/** A machine label the person will read on the page as "a machine calling itself ...": printable, one line, at most 120 characters. */
+export declare function cleanLabel(raw: string): string;
+export declare function stageRequest(client: Pick<ShareRequestsApi, 'stageShareRequest'>, input: StageInput, makeId?: () => string, signal?: AbortSignal): Promise<Staged>;
+/** The link the person opens. The key is in the fragment, never the path or query. */
+export declare function approveUrl(appUrl: string, requestId: string, keyB64Url: string): string;
+export type Decision = 'approved' | 'declined' | 'expired' | 'cancelled' | 'failed' | 'aborted';
+export interface PollDeps {
+    client: Pick<ShareRequestsApi, 'getShareRequest'>;
+    now: () => number;
+    /** Resolves after `ms`, or as soon as `signal` aborts. */
+    sleep: (ms: number, signal?: AbortSignal) => Promise<void>;
+    signal?: AbortSignal;
+    /** The longest this run will wait however far off `expires_at` says: the config's pending_ttl_s + complete_ttl_s. */
+    maxWaitMs?: number;
+}
+export declare const POLL_START_MS = 2000;
+export declare const POLL_MAX_MS = 5000;
+export declare const POLL_GROWTH = 1.3;
+/** Consecutive failed status reads before giving up. One blip is not a decision. */
+export declare const POLL_MAX_FAILURES = 3;
+/** Used when the gateway's config gives no lifetimes: pending (15 min) plus the window to complete after approval (10 min). */
+export declare const DEFAULT_MAX_WAIT_MS: number;
+/**
+ * Poll until the person decides. The expiry is the gateway's own `expires_at`; at that moment the answer is read
+ * ONE more time before calling it expired, because this machine's clock may run ahead of the gateway's and an
+ * approval can land in the last second. The deadline is clamped to `maxWaitMs` from now, so a far-future `expires_at`
+ * (a broken or hostile gateway) cannot keep this polling forever. `signal` reaches every status read, so Ctrl-C ends a
+ * read that is hanging, not only the sleep between reads.
+ */
+export declare function pollUntilDecided(id: string, expiresAt: string, deps: PollDeps): Promise<Decision>;
+/**
+ * A completion that failed. `retryable` is true when no verdict came back (5xx, a dropped connection) or the gateway says it
+ * is already completing: the same bytes may be sent again. `sent` says what may be claimed: 'no' (the gateway refused, nothing
+ * was written) or 'maybe' (it may have finished; only the team graph knows).
+ */
+export declare class CompletionError extends ShareError {
+    readonly retryable: boolean;
+    readonly sent: 'no' | 'maybe';
+    constructor(message: string, retryable: boolean, sent?: 'no' | 'maybe');
+}
+/**
+ * Send the approved bytes. The gateway re-hashes them against what the person approved, so a payload that
+ * differs by one character is refused there. An error here is explained by status; a 5xx or a dropped
+ * connection is an UNKNOWN outcome, not a failure, because the gateway may have finished before the answer got lost.
+ */
+export declare function completeRequest(client: Pick<ShareRequestsApi, 'completeShareRequest'>, id: string, bytesB64: string): Promise<BatchResponse>;
+//# sourceMappingURL=approval.d.ts.map

package/dist/lib/share/approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.d.ts","sourceRoot":"","sources":["../../../src/lib/share/approval.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE5E,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/C,0GAA0G;AAC1G,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAO9E;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,uHAAuH;AACvH,MAAM,WAAW,MAAO,SAAQ,aAAa;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,yFAAyF;IACzF,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,uIAAuI;AACvI,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,GAAE,MAAM,MAAmB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAUnL;AAED,sFAAsF;AACtF,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAEvF;AAED,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEhG,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;IAClD,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,0DAA0D;IAC1D,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,qHAAqH;IACrH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,aAAa,OAAO,CAAC;AAClC,eAAO,MAAM,WAAW,OAAO,CAAC;AAChC,eAAO,MAAM,WAAW,MAAM,CAAC;AAC/B,oFAAoF;AACpF,eAAO,MAAM,iBAAiB,IAAI,CAAC;AACnC,+HAA+H;AAC/H,eAAO,MAAM,mBAAmB,QAAqB,CAAC;AAEtD;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CA6BvG;AAED;;;;GAIG;AACH,qBAAa,eAAgB,SAAQ,UAAU;IAChB,QAAQ,CAAC,SAAS,EAAE,OAAO;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO;gBAA3E,OAAO,EAAE,MAAM,EAAW,SAAS,EAAE,OAAO,EAAW,IAAI,GAAE,IAAI,GAAG,OAAoC;CACrH;AAID;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAYlJ"}

package/dist/lib/share/approval.js

@@ -0,0 +1,139 @@
+/**
+ * ALI-1540: the client side of an approval, as functions over an injected client, a clock and a sleep.
+ *
+ * stage   - make the request id, seal, send the ciphertext, check the answer is about THIS request.
+ * poll    - ask the gateway what the person did, backing off, stopping at the expiry, stopping on Ctrl-C.
+ * link    - build the approve URL. The key goes in the fragment ONLY, which a browser never sends.
+ * complete - after (and only after) the gateway says approved, send the exact approved bytes.
+ *
+ * Nothing here can approve: the approve route refuses the CLI's token. A person does that in a browser.
+ */
+import { randomUUID } from 'node:crypto';
+import { seal } from './envelope.js';
+import { visible } from './visible.js';
+import { ShareError } from './run.js';
+/** Sleep that ends early when `signal` aborts (Ctrl-C), so a cancel is not delayed by a poll interval. */
+export function abortableSleep(ms, signal) {
+    return new Promise((resolve) => {
+        if (signal?.aborted) {
+            resolve();
+            return;
+        }
+        const done = () => { clearTimeout(timer); signal?.removeEventListener('abort', done); resolve(); };
+        const timer = setTimeout(done, ms);
+        signal?.addEventListener('abort', done, { once: true });
+    });
+}
+/** A machine label the person will read on the page as "a machine calling itself ...": printable, one line, at most 120 characters. */
+export function cleanLabel(raw) {
+    return visible(raw).replace(/\s+/g, ' ').trim().slice(0, 120);
+}
+export async function stageRequest(client, input, makeId = randomUUID, signal) {
+    const envelopeId = makeId();
+    const sealed = seal(input.plaintext, { envelopeId, tenantId: input.tenantId, userId: input.userId, kind: input.kind });
+    const label = cleanLabel(input.label);
+    const res = await client.stageShareRequest({
+        envelope_id: envelopeId, kind: input.kind, envelope: sealed.envelopeB64, payload_sha256: sealed.sha256,
+        item_count: input.itemCount, judgement_count: input.judgementCount,
+        ...(label ? { requester_label: label } : {}), ...(input.agent ? { agent: input.agent } : {}),
+    }, signal);
+    return { ...res, envelopeId, keyB64Url: sealed.keyB64Url, sha256: sealed.sha256, bytesB64: input.plaintext.toString('base64') };
+}
+/** The link the person opens. The key is in the fragment, never the path or query. */
+export function approveUrl(appUrl, requestId, keyB64Url) {
+    return `${appUrl.replace(/\/+$/, '')}/share/approve/${requestId}#k=${keyB64Url}`;
+}
+export const POLL_START_MS = 2000;
+export const POLL_MAX_MS = 5000;
+export const POLL_GROWTH = 1.3;
+/** Consecutive failed status reads before giving up. One blip is not a decision. */
+export const POLL_MAX_FAILURES = 3;
+/** Used when the gateway's config gives no lifetimes: pending (15 min) plus the window to complete after approval (10 min). */
+export const DEFAULT_MAX_WAIT_MS = (900 + 600) * 1000;
+/**
+ * Poll until the person decides. The expiry is the gateway's own `expires_at`; at that moment the answer is read
+ * ONE more time before calling it expired, because this machine's clock may run ahead of the gateway's and an
+ * approval can land in the last second. The deadline is clamped to `maxWaitMs` from now, so a far-future `expires_at`
+ * (a broken or hostile gateway) cannot keep this polling forever. `signal` reaches every status read, so Ctrl-C ends a
+ * read that is hanging, not only the sleep between reads.
+ */
+export async function pollUntilDecided(id, expiresAt, deps) {
+    const stated = Date.parse(expiresAt);
+    if (Number.isNaN(stated))
+        throw new ShareError('The gateway gave this request no usable expiry, so it was not waited on.');
+    const deadline = Math.min(stated, deps.now() + (deps.maxWaitMs ?? DEFAULT_MAX_WAIT_MS));
+    let delay = POLL_START_MS;
+    let failures = 0;
+    for (;;) {
+        if (deps.signal?.aborted)
+            return 'aborted';
+        const last = deps.now() >= deadline;
+        try {
+            const { state } = await deps.client.getShareRequest(id, deps.signal);
+            failures = 0;
+            switch (state) {
+                case 'approved': return 'approved';
+                case 'declined':
+                case 'expired':
+                case 'cancelled':
+                case 'failed': return state;
+                case 'pending': break;
+                // completing and completed mean something other than this process acted on the request: not ours to wait on.
+                default: throw new ShareError(`The request is already ${visible(state)} on the gateway, and this run did not cause that. This run stopped waiting on it.`);
+            }
+        }
+        catch (e) {
+            if (e instanceof ShareError)
+                throw e;
+            if (deps.signal?.aborted)
+                return 'aborted';
+            failures += 1;
+            if (failures >= POLL_MAX_FAILURES)
+                throw new ShareError(`Could not read the request's status ${POLL_MAX_FAILURES} times in a row (${visible(e.message)}). The request stays open on the gateway until it expires.`);
+        }
+        if (last)
+            return 'expired';
+        await deps.sleep(delay, deps.signal);
+        delay = Math.min(Math.round(delay * POLL_GROWTH), POLL_MAX_MS);
+    }
+}
+/**
+ * A completion that failed. `retryable` is true when no verdict came back (5xx, a dropped connection) or the gateway says it
+ * is already completing: the same bytes may be sent again. `sent` says what may be claimed: 'no' (the gateway refused, nothing
+ * was written) or 'maybe' (it may have finished; only the team graph knows).
+ */
+export class CompletionError extends ShareError {
+    retryable;
+    sent;
+    constructor(message, retryable, sent = retryable ? 'maybe' : 'no') {
+        super(message);
+        this.retryable = retryable;
+        this.sent = sent;
+        this.name = 'CompletionError';
+    }
+}
+const MAYBE_SENT = 'It may have been sent, so check your team graph. This machine has no record of the result yet, so `align share --retract` will not find it until you share the same decision again. That is safe: it will not make a second copy.';
+/**
+ * Send the approved bytes. The gateway re-hashes them against what the person approved, so a payload that
+ * differs by one character is refused there. An error here is explained by status; a 5xx or a dropped
+ * connection is an UNKNOWN outcome, not a failure, because the gateway may have finished before the answer got lost.
+ */
+export async function completeRequest(client, id, bytesB64) {
+    try {
+        return await client.completeShareRequest(id, bytesB64);
+    }
+    catch (e) {
+        const status = e.statusCode ?? 0;
+        const msg = visible(e.message);
+        if (status === 409 && /already_(completing|completed)/.test(msg))
+            throw new CompletionError(`The gateway says this request is already being completed, or was (${msg}). ${MAYBE_SENT}`, true);
+        if (status === 410)
+            throw new CompletionError('The approval was too old to use (it lasts 10 minutes). Nothing was sent. Run the share again.', false);
+        if (status === 422)
+            throw new CompletionError(`The gateway refused what was approved: ${msg}. Nothing was sent.`, false);
+        if (status >= 400 && status < 500)
+            throw new CompletionError(`The gateway would not complete it: ${msg}. Nothing was sent.`, false);
+        throw new CompletionError(`The gateway did not say whether the share finished (${msg}). ${MAYBE_SENT}`, true);
+    }
+}
+//# sourceMappingURL=approval.js.map

package/dist/lib/share/approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.js","sourceRoot":"","sources":["../../../src/lib/share/approval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAGrC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAGtC,0GAA0G;AAC1G,MAAM,UAAU,cAAc,CAAC,EAAU,EAAE,MAAoB;IAC7D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YAAC,OAAO,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,GAAS,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACzG,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC;AAsBD,uIAAuI;AACvI,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAmD,EAAE,KAAiB,EAAE,SAAuB,UAAU,EAAE,MAAoB;IAChK,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACvH,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC;QACzC,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM;QACtG,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,eAAe,EAAE,KAAK,CAAC,cAAc;QAClE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7F,EAAE,MAAM,CAAC,CAAC;IACX,OAAO,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AAClI,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,SAAiB,EAAE,SAAiB;IAC7E,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,kBAAkB,SAAS,MAAM,SAAS,EAAE,CAAC;AACnF,CAAC;AAcD,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC;AAClC,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC;AAChC,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC;AAC/B,oFAAoF;AACpF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AACnC,+HAA+H;AAC/H,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC;AAEtD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAU,EAAE,SAAiB,EAAE,IAAc;IAClF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,0EAA0E,CAAC,CAAC;IAC3H,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,mBAAmB,CAAC,CAAC,CAAC;IACxF,IAAI,KAAK,GAAG,aAAa,CAAC;IAC1B,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,SAAS,CAAC;QACR,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,SAAS,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACrE,QAAQ,GAAG,CAAC,CAAC;YACb,QAAQ,KAAK,EAAE,CAAC;gBACd,KAAK,UAAU,CAAC,CAAC,OAAO,UAAU,CAAC;gBACnC,KAAK,UAAU,CAAC;gBAAC,KAAK,SAAS,CAAC;gBAAC,KAAK,WAAW,CAAC;gBAAC,KAAK,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC;gBAC/E,KAAK,SAAS,CAAC,CAAC,MAAM;gBACtB,6GAA6G;gBAC7G,OAAO,CAAC,CAAC,MAAM,IAAI,UAAU,CAAC,0BAA0B,OAAO,CAAC,KAAK,CAAC,mFAAmF,CAAC,CAAC;YAC7J,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,UAAU;gBAAE,MAAM,CAAC,CAAC;YACrC,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;gBAAE,OAAO,SAAS,CAAC;YAC3C,QAAQ,IAAI,CAAC,CAAC;YACd,IAAI,QAAQ,IAAI,iBAAiB;gBAAE,MAAM,IAAI,UAAU,CAAC,uCAAuC,iBAAiB,oBAAoB,OAAO,CAAE,CAAW,CAAC,OAAO,CAAC,4DAA4D,CAAC,CAAC;QACjO,CAAC;QACD,IAAI,IAAI;YAAE,OAAO,SAAS,CAAC;QAC3B,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,eAAgB,SAAQ,UAAU;IACP;IAA6B;IAAnE,YAAY,OAAe,EAAW,SAAkB,EAAW,OAAuB,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;QAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAAjG,cAAS,GAAT,SAAS,CAAS;QAAW,SAAI,GAAJ,IAAI,CAA6C;QAAoB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAAC,CAAC;CACzK;AAED,MAAM,UAAU,GAAG,mOAAmO,CAAC;AAEvP;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAsD,EAAE,EAAU,EAAE,QAAgB;IACxH,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,oBAAoB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,MAAM,GAAI,CAA6B,CAAC,UAAU,IAAI,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,OAAO,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,GAAG,IAAI,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,qEAAqE,GAAG,MAAM,UAAU,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9L,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,eAAe,CAAC,+FAA+F,EAAE,KAAK,CAAC,CAAC;QACtJ,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,eAAe,CAAC,0CAA0C,GAAG,qBAAqB,EAAE,KAAK,CAAC,CAAC;QACzH,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;YAAE,MAAM,IAAI,eAAe,CAAC,sCAAsC,GAAG,qBAAqB,EAAE,KAAK,CAAC,CAAC;QACpI,MAAM,IAAI,eAAe,CAAC,uDAAuD,GAAG,MAAM,UAAU,EAAE,EAAE,IAAI,CAAC,CAAC;IAChH,CAAC;AACH,CAAC"}

package/dist/lib/share/approve-link.d.ts

@@ -0,0 +1,31 @@
+/**
+ * The gate between an approval link and anything that acts on it: a browser launch, a QR code, a clipboard write.
+ *
+ * The link is built from three parts the CLI does not fully control: the app URL (from config or an env var),
+ * the request id (the gateway's answer) and the key (random, ours). Before any of it reaches a child process or the
+ * terminal as anything but text, the WHOLE string must match one exact shape:
+ *
+ *   <scheme>://<host[:port]>/share/approve/<uuid>#k=<43 base64url characters>
+ *
+ * with the origin equal to the configured app's origin, https (http only for a localhost dev app), no userinfo, no
+ * query, no extra path, no whitespace or control characters, and a length cap. A string that passes contains none of
+ * the characters a shell, a PowerShell string or an argv parser treats specially. Callers must still pass it as an
+ * argument vector and never build a shell string from it; this is the second belt, not the first.
+ *
+ * WHAT THIS IS NOT. It is a SHAPE check, not a destination control. The link is built from the configured app URL and
+ * then compared with that same app URL, so the host check only catches a link that was altered after it was built. Where
+ * the link points is whatever the configuration (gateway URL, ALIGN_GATEWAY_URL) says. Only the host is
+ * case-insensitive; the scheme, the path and `#k=` must be exactly as written.
+ */
+export type LinkCheck = {
+    ok: true;
+    url: string;
+} | {
+    ok: false;
+    reason: string;
+};
+export declare const MAX_LINK_LENGTH = 220;
+export declare function checkApproveLink(url: string, appUrl: string): LinkCheck;
+/** The same gate as checkApproveLink, for the one settings link: exact shape, the configured app's origin, https or a localhost http app. */
+export declare function checkSettingsLink(url: string, appUrl: string): LinkCheck;
+//# sourceMappingURL=approve-link.d.ts.map

package/dist/lib/share/approve-link.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve-link.d.ts","sourceRoot":"","sources":["../../../src/lib/share/approve-link.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,SAAS,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElF,eAAO,MAAM,eAAe,MAAM,CAAC;AAUnC,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,CAWvE;AAKD,6IAA6I;AAC7I,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,CAUxE"}