@aligndottech/cli 0.53.0 → 0.54.0

package/dist/lib/model-step.js

@@ -0,0 +1,74 @@
+import * as p from '@clack/prompts';
+import chalk from 'chalk';
+import { createConfigStore } from './config.js';
+import { freeGroqKey, promptForProviderKey } from './ask-key-offer.js';
+import { guardedPrompt } from './prompt-guard.js';
+import { PROVIDER_LABEL } from './llm-providers.js';
+import { hasConfiguredProvider, probeOllama, RECOMMENDED_OLLAMA_PULL, unusedExportedKeys } from './local-llm.js';
+export function modelStepOptions(exported) {
+    return [
+        ...exported.map((k) => ({ value: `env:${k.id}`, label: `Use ${PROVIDER_LABEL[k.id]}`, hint: `found ${k.envVar} in your shell` })),
+        { value: 'key', label: 'Paste an API key I already have', hint: 'Anthropic, OpenAI, Gemini, DeepSeek and more' },
+        { value: 'groq', label: 'Get a free Groq key', hint: 'no card needed' },
+        { value: 'ollama', label: 'Run a local model with Ollama', hint: 'free, nothing leaves this machine' },
+        { value: 'skip', label: 'Skip for now', hint: 'checks will not run until one is set up' },
+    ];
+}
+export function noModelLines() {
+    return [
+        'Conflict checks need an AI model, and none is set up, so they will not run yet (a check says "could not check").',
+        `Free and local:  ollama pull ${RECOMMENDED_OLLAMA_PULL}`,
+        'Or a key:        export ANTHROPIC_API_KEY (or OPENAI_API_KEY, GEMINI_API_KEY, DEEPSEEK_API_KEY ...), then run: align ai',
+    ];
+}
+function realDeps() {
+    const config = createConfigStore();
+    return {
+        hasProvider: hasConfiguredProvider,
+        ollamaModel: probeOllama,
+        unusedExported: () => unusedExportedKeys().filter((k) => k.id !== 'custom' && k.id !== 'ollama'),
+        select: async (options) => {
+            const choice = await guardedPrompt('AI model', () => p.select({ message: 'Which AI model should check your changes against the graph?', options }));
+            return choice === null || p.isCancel(choice) ? null : choice;
+        },
+        pasteKey: () => promptForProviderKey(config),
+        freeGroq: () => freeGroqKey(config),
+        setPreference: (pref) => config.setLlmPreference(pref),
+        log: { info: (m) => p.log.info(m), warn: (m) => p.log.warn(m), success: (m) => p.log.success(m) },
+    };
+}
+export async function runModelStep(opts, deps = realDeps()) {
+    if (deps.hasProvider())
+        return 'ready';
+    try {
+        if ((await deps.ollamaModel()) !== null)
+            return 'ready';
+    }
+    catch {
+        // A probe that fails is the same as no Ollama.
+    }
+    const warn = () => {
+        deps.log.warn(noModelLines().join('\n'));
+        return 'skipped';
+    };
+    if (!opts.interactive)
+        return warn();
+    const choice = await deps.select(modelStepOptions(deps.unusedExported()));
+    if (choice === null || choice === 'skip')
+        return warn();
+    if (choice.startsWith('env:')) {
+        const provider = choice.slice(4);
+        deps.setPreference({ provider });
+        deps.log.success(`Checks will use ${PROVIDER_LABEL[provider]} with the key in your shell.`);
+        return 'configured';
+    }
+    if (choice === 'ollama') {
+        deps.log.info(`Run this in another terminal; checks pick it up on their own:\n  ${chalk.bold(`ollama pull ${RECOMMENDED_OLLAMA_PULL}`)}`);
+        return warn();
+    }
+    const saved = choice === 'groq' ? await deps.freeGroq() : (await deps.pasteKey()) !== null;
+    if (saved)
+        return 'configured';
+    return warn();
+}
+//# sourceMappingURL=model-step.js.map

package/dist/lib/model-step.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-step.js","sourceRoot":"","sources":["../../src/lib/model-step.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAsB,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAwBjH,MAAM,UAAU,gBAAgB,CAAC,QAAsD;IACrF,OAAO;QACL,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,MAAM,gBAAgB,EAAE,CAAC,CAAC;QACjI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,EAAE,IAAI,EAAE,8CAA8C,EAAE;QAChH,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,gBAAgB,EAAE;QACvE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,+BAA+B,EAAE,IAAI,EAAE,mCAAmC,EAAE;QACtG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,yCAAyC,EAAE;KAC1F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO;QACL,kHAAkH;QAClH,gCAAgC,uBAAuB,EAAE;QACzD,yHAAyH;KAC1H,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ;IACf,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;IACnC,OAAO;QACL,WAAW,EAAE,qBAAqB;QAClC,WAAW,EAAE,WAAW;QACxB,cAAc,EAAE,GAAG,EAAE,CAAC,kBAAkB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC;QAChG,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACxB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAS,EAAE,OAAO,EAAE,6DAA6D,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YAC5J,OAAO,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/D,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC;QAC5C,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC;QACnC,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC;QACtD,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;KAClG,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAA8B,EAAE,OAAsB,QAAQ,EAAE;IACjG,IAAI,IAAI,CAAC,WAAW,EAAE;QAAE,OAAO,OAAO,CAAC;IACvC,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,IAAI;YAAE,OAAO,OAAO,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;IACD,MAAM,IAAI,GAAG,GAAoB,EAAE;QACjC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,EAAE,CAAC;IAErC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;IAC1E,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,EAAE,CAAC;IACxD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAkB,CAAC;QAClD,IAAI,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,mBAAmB,cAAc,CAAC,QAAQ,CAAC,8BAA8B,CAAC,CAAC;QAC5F,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,oEAAoE,KAAK,CAAC,IAAI,CAAC,eAAe,uBAAuB,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1I,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,IAAI,CAAC;IAC3F,IAAI,KAAK;QAAE,OAAO,YAAY,CAAC;IAC/B,OAAO,IAAI,EAAE,CAAC;AAChB,CAAC"}

package/dist/lib/trusted-align-bin.d.ts

@@ -0,0 +1,25 @@
+import { type McpFormat } from './mcp-setup.js';
+/**
+ * The absolute path of the `align` executable, resolved by align itself (ALI-1515).
+ *
+ * The MCP command handed to an agent used to be a bare `align`, which the AGENT then finds through its own PATH. A
+ * PATH can carry relative or empty entries (`.`, `node_modules/.bin`), so a repo could plant an `align` and have the
+ * agent spawn it. This resolves the path once, here, from the PATH entries that cannot be planted:
+ *
+ *   - ABSOLUTE entries only (a relative or empty entry is read against whatever directory the agent runs in);
+ *   - never an entry inside the directory align was started in, because that directory is the repo (`npx` adds the
+ *     repo's own `node_modules/.bin` to PATH as an absolute entry). Same guard as migrateLocalDb, and the same
+ *     exception: when cwd is an ancestor of home (`/`), it is not a repo.
+ *
+ * The result is the path AS FOUND, not its realpath: an npm global `align` is a symlink, and an upgrade retargets the
+ * link, so the link path keeps working where the resolved target would go stale.
+ */
+export declare function resolveTrustedAlignBin(opts?: {
+    pathEnv?: string;
+    cwd?: string;
+    home?: string;
+    platform?: typeof process.platform;
+}): string | null;
+/** Entry for the `align` server handed to an agent per session (ALI-1515): absolute trusted path when one resolves, bare `align` otherwise. */
+export declare function launchAlignEntry(format: McpFormat): Record<string, unknown>;
+//# sourceMappingURL=trusted-align-bin.d.ts.map

package/dist/lib/trusted-align-bin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted-align-bin.d.ts","sourceRoot":"","sources":["../../src/lib/trusted-align-bin.ts"],"names":[],"mappings":"AAGA,OAAO,EAAoB,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAElE;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,OAAO,CAAC,QAAQ,CAAA;CAAO,GAC/F,MAAM,GAAG,IAAI,CAsBf;AAED,+IAA+I;AAC/I,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAI3E"}

package/dist/lib/trusted-align-bin.js

@@ -0,0 +1,58 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { alignServerEntry } from './mcp-setup.js';
+/**
+ * The absolute path of the `align` executable, resolved by align itself (ALI-1515).
+ *
+ * The MCP command handed to an agent used to be a bare `align`, which the AGENT then finds through its own PATH. A
+ * PATH can carry relative or empty entries (`.`, `node_modules/.bin`), so a repo could plant an `align` and have the
+ * agent spawn it. This resolves the path once, here, from the PATH entries that cannot be planted:
+ *
+ *   - ABSOLUTE entries only (a relative or empty entry is read against whatever directory the agent runs in);
+ *   - never an entry inside the directory align was started in, because that directory is the repo (`npx` adds the
+ *     repo's own `node_modules/.bin` to PATH as an absolute entry). Same guard as migrateLocalDb, and the same
+ *     exception: when cwd is an ancestor of home (`/`), it is not a repo.
+ *
+ * The result is the path AS FOUND, not its realpath: an npm global `align` is a symlink, and an upgrade retargets the
+ * link, so the link path keeps working where the resolved target would go stale.
+ */
+export function resolveTrustedAlignBin(opts = {}) {
+    const platform = opts.platform ?? process.platform;
+    const pathEnv = opts.pathEnv ?? process.env['PATH'] ?? '';
+    const real = (p) => { try {
+        return fs.realpathSync(p);
+    }
+    catch {
+        return path.resolve(p);
+    } };
+    const cwd = real(opts.cwd ?? process.cwd());
+    const home = real(opts.home ?? os.homedir());
+    const inside = (child, parent) => {
+        const rel = path.relative(parent, child);
+        return rel === '' || (!rel.startsWith('..') && !path.isAbsolute(rel));
+    };
+    const names = platform === 'win32' ? ['align.exe', 'align.cmd'] : ['align'];
+    for (const entry of pathEnv.split(path.delimiter)) {
+        if (!path.isAbsolute(entry))
+            continue;
+        if (inside(real(entry), cwd) && !inside(home, cwd))
+            continue;
+        for (const name of names) {
+            const candidate = path.join(entry, name);
+            try {
+                if (fs.statSync(candidate).isFile())
+                    return candidate;
+            }
+            catch { /* not here */ }
+        }
+    }
+    return null;
+}
+/** Entry for the `align` server handed to an agent per session (ALI-1515): absolute trusted path when one resolves, bare `align` otherwise. */
+export function launchAlignEntry(format) {
+    // ALIGN_NO_TRUSTED_BIN=1 keeps the bare name (an escape hatch, and how the suite stays machine-independent).
+    const trustedBin = process.env['ALIGN_NO_TRUSTED_BIN'] === '1' ? null : resolveTrustedAlignBin();
+    return alignServerEntry(format, 'local', { trustedBin });
+}
+//# sourceMappingURL=trusted-align-bin.js.map

package/dist/lib/trusted-align-bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted-align-bin.js","sourceRoot":"","sources":["../../src/lib/trusted-align-bin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAkB,MAAM,gBAAgB,CAAC;AAElE;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAA8F,EAAE;IAEhG,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC,CAAC,CAAC,CAAC;IAC7G,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,MAAc,EAAW,EAAE;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACzC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC5E,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,SAAS;QACtC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC;YAAE,SAAS;QAC7D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACzC,IAAI,CAAC;gBACH,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;oBAAE,OAAO,SAAS,CAAC;YACxD,CAAC;YAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+IAA+I;AAC/I,MAAM,UAAU,gBAAgB,CAAC,MAAiB;IAChD,6GAA6G;IAC7G,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,EAAE,CAAC;IACjG,OAAO,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;AAC3D,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aligndottech/cli",
-  "version": "0.53.0",
+  "version": "0.54.0",
   "mcpName": "io.github.aligndottech/cli",
   "type": "module",
   "description": "Align CLI - capture decisions, check alignment, and manage connectors",