@aligndottech/cli 0.67.1 → 0.68.1

package/dist/lib/agent/engines/pi.d.ts

@@ -0,0 +1,44 @@
+import type * as PiCodingAgent from '@earendil-works/pi-coding-agent';
+import type { DefaultResourceLoader, ExtensionFactory } from '@earendil-works/pi-coding-agent';
+import type { GraphToolSpec } from '../graph-tools.js';
+import type { AgentEngine, BrokerVerdict, ToolAsk } from '../types.js';
+import type { ResolvedPiModel } from './pi-models.js';
+/**
+ * The loader the Align engine runs on. A repository is untrusted input: Pi would otherwise load
+ * `<cwd>/.pi/extensions`, skills, prompt templates and themes, run them with the user's full
+ * permissions, and read `<cwd>/.pi/settings.json` for more. So none of that is discovered. The
+ * settings are in-memory as well, so no project or home settings file reaches the session (the
+ * hostile-repo test shows noExtensions already covers the settings route; this is the second
+ * lock). Context files (AGENTS.md, CLAUDE.md) stay on: they are text, and the agent should
+ * follow a repo's own notes.
+ */
+/** The parts of Pi's SDK the engine uses. */
+export type PiSdk = Pick<typeof PiCodingAgent, 'DefaultResourceLoader' | 'ModelRuntime' | 'createAgentSession' | 'SessionManager' | 'SettingsManager'>;
+export declare function createAlignResourceLoader(o: {
+    sdk: PiSdk;
+    cwd: string;
+    agentDir: string;
+    systemPrompt?: string;
+    extensionFactories?: ExtensionFactory[];
+}): DefaultResourceLoader;
+type BrokerFn = (ask: ToolAsk) => Promise<BrokerVerdict>;
+/**
+ * The one inline extension: every tool call waits on the broker, and a denial blocks the call with
+ * the broker's message, which Pi hands back to the model as the tool result. Fails CLOSED: no broker
+ * yet (start() not called) or a broker that throws blocks the call, because "I could not ask" must
+ * never read as "allowed".
+ */
+export declare function createToolGate(getBroker: () => BrokerFn | undefined, cwd: string): ExtensionFactory;
+export interface PiEngineDeps {
+    sdk: PiSdk;
+    /** The module boundary tests inject, so nothing calls a provider. */
+    createAgentSession?: PiSdk['createAgentSession'];
+}
+export declare function createPiEngine(opts: {
+    cwd: string;
+    stateDir: string;
+    model: ResolvedPiModel;
+    tools: GraphToolSpec[];
+}, deps: PiEngineDeps): Promise<AgentEngine>;
+export {};
+//# sourceMappingURL=pi.d.ts.map

package/dist/lib/agent/engines/pi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi.d.ts","sourceRoot":"","sources":["../../../../src/lib/agent/engines/pi.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,KAAK,aAAa,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAE,qBAAqB,EAAE,gBAAgB,EAAkB,MAAM,iCAAiC,CAAC;AAI/G,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAgB,aAAa,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACrF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAmBtD;;;;;;;;GAQG;AACH,6CAA6C;AAC7C,MAAM,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,aAAa,EAAE,uBAAuB,GAAG,cAAc,GAAG,oBAAoB,GAAG,gBAAgB,GAAG,iBAAiB,CAAC,CAAC;AAEvJ,wBAAgB,yBAAyB,CAAC,CAAC,EAAE;IAC3C,GAAG,EAAE,KAAK,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,gBAAgB,EAAE,CAAC;CACzC,GAAG,qBAAqB,CAYxB;AA0BD,KAAK,QAAQ,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;AAEzD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,QAAQ,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAanG;AAkBD,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,KAAK,CAAC;IACX,qEAAqE;IACrE,kBAAkB,CAAC,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAC;CAClD;AAED,wBAAsB,cAAc,CAClC,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,aAAa,EAAE,CAAA;CAAE,EACvF,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,WAAW,CAAC,CA8FtB"}

package/dist/lib/agent/engines/pi.js

@@ -0,0 +1,189 @@
+import { join, resolve } from 'node:path';
+import { ASK_ONCE_GUIDANCE } from '../agent-guidance.js';
+import { failureTail } from '../failure-tail.js';
+/**
+ * Align's engine on Pi. EVERY Pi type stays in this file: Pi's minors break often, and the gate,
+ * the broker and the UI only ever see the port in ../types.ts.
+ */
+const ALIGN_AGENT_SYSTEM_PROMPT = [
+    "You are Align's coding agent. You work in the user's repository with read, bash, edit, write, grep, find and ls.",
+    'You also have tools that read the team\'s decision graph: align_ask, align_search, align_get_topic_timeline and align_get_related_decisions.',
+    'Ask the graph before you change behaviour a past decision may cover. Quote a decision by its title when it matters.',
+    ASK_ONCE_GUIDANCE,
+    'Every edit is checked against the graph before it is written. If an edit is stopped, read the reason, say what it means, and change course. Do not retry the same edit.',
+    'Follow the repository\'s own notes (AGENTS.md, CLAUDE.md). Keep answers short and plain.',
+].join('\n');
+const BUILTIN_TOOLS = ['read', 'bash', 'edit', 'write', 'grep', 'find', 'ls'];
+const READ_TOOLS = new Set(['read', 'grep', 'find', 'ls']);
+export function createAlignResourceLoader(o) {
+    return new o.sdk.DefaultResourceLoader({
+        cwd: o.cwd,
+        agentDir: o.agentDir,
+        settingsManager: o.sdk.SettingsManager.inMemory(),
+        noExtensions: true,
+        noSkills: true,
+        noPromptTemplates: true,
+        noThemes: true,
+        systemPrompt: o.systemPrompt,
+        extensionFactories: o.extensionFactories,
+    });
+}
+const str = (v) => (typeof v === 'string' ? v : undefined);
+/** Pi's tool call, in Align's vocabulary. Paths resolve against the working directory, as Pi's own tools do. */
+function toToolAsk(id, tool, input, cwd) {
+    const abs = (p) => (p === undefined ? undefined : resolve(cwd, p));
+    if (tool === 'write') {
+        const edit = { file_path: abs(str(input['path'])), content: str(input['content']) };
+        return { id, tool, kind: 'edit', edit };
+    }
+    if (tool === 'edit') {
+        const edits = Array.isArray(input['edits']) ? input['edits'] : [];
+        const edit = {
+            file_path: abs(str(input['path'])),
+            edits: edits.map((e) => ({ old_string: str(e['oldText']), new_string: str(e['newText']) })),
+        };
+        return { id, tool, kind: 'edit', edit };
+    }
+    if (tool === 'bash' || tool === 'powershell')
+        return { id, tool, kind: 'command', command: str(input['command']) ?? '' };
+    // Align's own graph tools (all named align_*) only read the local graph, so they never interrupt.
+    if (READ_TOOLS.has(tool) || tool.startsWith('align_'))
+        return { id, tool, kind: 'read' };
+    return { id, tool, kind: 'other', detail: JSON.stringify(input) };
+}
+/**
+ * The one inline extension: every tool call waits on the broker, and a denial blocks the call with
+ * the broker's message, which Pi hands back to the model as the tool result. Fails CLOSED: no broker
+ * yet (start() not called) or a broker that throws blocks the call, because "I could not ask" must
+ * never read as "allowed".
+ */
+export function createToolGate(getBroker, cwd) {
+    return (pi) => {
+        pi.on('tool_call', async (event) => {
+            try {
+                const broker = getBroker();
+                if (!broker)
+                    return { block: true, reason: 'Align has not finished starting its edit check, so this call was stopped.' };
+                const verdict = await broker(toToolAsk(event.toolCallId, event.toolName, event.input, cwd));
+                return verdict.allow ? undefined : { block: true, reason: verdict.message };
+            }
+            catch (err) {
+                return { block: true, reason: `Align's edit check failed (${err instanceof Error ? err.message : String(err)}), so this call was stopped.` };
+            }
+        });
+    };
+}
+function graphToolDefinition(spec) {
+    return {
+        name: spec.name,
+        label: spec.name,
+        description: spec.description,
+        // The MCP inputSchema is plain JSON Schema, which is what a TypeBox schema is at runtime.
+        parameters: spec.parameters,
+        async execute(_id, params) {
+            const text = await spec.run(params);
+            return { content: [{ type: 'text', text }], details: undefined };
+        },
+    };
+}
+const summaryOf = (args) => str(args?.['command']) ?? str(args?.['path']) ?? str(args?.['file_path']) ?? '';
+export async function createPiEngine(opts, deps) {
+    const { sdk } = deps;
+    const create = deps.createAgentSession ?? sdk.createAgentSession;
+    const agentDir = join(opts.stateDir, 'agent');
+    let broker;
+    let onEvent = () => { };
+    // No network at startup, and no login: the key is set in-process from what the user gave Align.
+    // Pi's login is never called, so no subscription sign-in is reachable from here.
+    const modelRuntime = await sdk.ModelRuntime.create({
+        authPath: join(agentDir, 'auth.json'),
+        modelsPath: join(agentDir, 'models.json'),
+        refreshOnCreate: false,
+    });
+    const { provider, modelId, apiKey, baseUrl } = opts.model;
+    if (provider === 'ollama') {
+        modelRuntime.registerProvider('ollama', {
+            baseUrl,
+            api: 'openai-completions',
+            apiKey: apiKey ?? 'ollama',
+            models: [{
+                    id: modelId, name: modelId, input: ['text'], reasoning: false,
+                    cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
+                    contextWindow: 32_768, maxTokens: 8_192,
+                }],
+        });
+    }
+    else if (apiKey) {
+        await modelRuntime.setRuntimeApiKey(provider, apiKey);
+    }
+    const model = modelRuntime.getModel(provider, modelId);
+    if (!model)
+        throw new Error(`Pi does not know the model ${provider}/${modelId}.`);
+    const resourceLoader = createAlignResourceLoader({
+        sdk,
+        cwd: opts.cwd,
+        agentDir,
+        systemPrompt: ALIGN_AGENT_SYSTEM_PROMPT,
+        extensionFactories: [createToolGate(() => broker, opts.cwd)],
+    });
+    await resourceLoader.reload();
+    const { session } = await create({
+        cwd: opts.cwd,
+        agentDir,
+        model,
+        modelRuntime,
+        resourceLoader,
+        settingsManager: sdk.SettingsManager.inMemory(),
+        sessionManager: sdk.SessionManager.inMemory(opts.cwd),
+        tools: [...BUILTIN_TOOLS, ...opts.tools.map((t) => t.name)],
+        customTools: opts.tools.map(graphToolDefinition),
+    });
+    let turnEnded = false;
+    const endTurn = () => { turnEnded = true; onEvent({ type: 'turn-end' }); };
+    return {
+        label: opts.model.label,
+        async start(emit, ask) {
+            onEvent = emit;
+            broker = ask;
+            session.subscribe((e) => {
+                if (e.type === 'message_update') {
+                    if (e.assistantMessageEvent.type === 'text_delta')
+                        onEvent({ type: 'text', delta: e.assistantMessageEvent.delta });
+                }
+                else if (e.type === 'tool_execution_start') {
+                    onEvent({ type: 'tool-start', id: e.toolCallId, tool: e.toolName, summary: summaryOf(e.args) });
+                }
+                else if (e.type === 'tool_execution_end') {
+                    const detail = e.isError ? failureTail(e.result) : undefined;
+                    onEvent({ type: 'tool-end', id: e.toolCallId, ok: !e.isError, ...(detail === undefined ? {} : { detail }) });
+                }
+                else if (e.type === 'agent_end' && !e.willRetry) {
+                    // A provider failure (bad key, no credit) arrives as a message that ended in error, and
+                    // without this it would read as an empty turn.
+                    const last = [...e.messages].reverse().find((m) => m['role'] === 'assistant');
+                    if (last?.['stopReason'] === 'error')
+                        onEvent({ type: 'error', message: str(last['errorMessage']) ?? 'The model call failed.' });
+                    endTurn();
+                }
+            });
+        },
+        async prompt(text) {
+            turnEnded = false;
+            try {
+                await session.prompt(text);
+            }
+            catch (err) {
+                onEvent({ type: 'error', message: err instanceof Error ? err.message : String(err) });
+                if (!turnEnded)
+                    endTurn();
+            }
+        },
+        abort() {
+            void session.abort();
+        },
+        async close() {
+            session.dispose();
+        },
+    };
+}
+//# sourceMappingURL=pi.js.map

package/dist/lib/agent/engines/pi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi.js","sourceRoot":"","sources":["../../../../src/lib/agent/engines/pi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAM1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAKjD;;;GAGG;AAEH,MAAM,yBAAyB,GAAG;IAChC,kHAAkH;IAClH,8IAA8I;IAC9I,qHAAqH;IACrH,iBAAiB;IACjB,yKAAyK;IACzK,0FAA0F;CAC3F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AAC9E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AAc3D,MAAM,UAAU,yBAAyB,CAAC,CAMzC;IACC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACrC,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,eAAe,EAAE,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,EAAE;QACjD,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,IAAI;QACd,iBAAiB,EAAE,IAAI;QACvB,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;KACzC,CAAC,CAAC;AACL,CAAC;AAGD,MAAM,GAAG,GAAG,CAAC,CAAU,EAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAExF,gHAAgH;AAChH,SAAS,SAAS,CAAC,EAAU,EAAE,IAAY,EAAE,KAAU,EAAE,GAAW;IAClE,MAAM,GAAG,GAAG,CAAC,CAAqB,EAAsB,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3G,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,GAAkB,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACnG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,OAAO,CAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,GAAkB;YAC1B,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAClC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;SAC5F,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACzH,kGAAkG;IAClG,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACzF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;AACpE,CAAC;AAID;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,SAAqC,EAAE,GAAW;IAC/E,OAAO,CAAC,EAAE,EAAE,EAAE;QACZ,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;gBAC3B,IAAI,CAAC,MAAM;oBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,2EAA2E,EAAE,CAAC;gBACzH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAY,EAAE,GAAG,CAAC,CAAC,CAAC;gBACnG,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;YAC9E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,8BAA8B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,8BAA8B,EAAE,CAAC;YAC/I,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAmB;IAC9C,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,IAAI;QAChB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,0FAA0F;QAC1F,UAAU,EAAE,IAAI,CAAC,UAAmB;QACpC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM;YACvB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAa,CAAC,CAAC;YAC3C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QACnE,CAAC;KACgB,CAAC;AACtB,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,IAAqB,EAAU,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;AAQrI,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAuF,EACvF,IAAkB;IAElB,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACrB,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,IAAI,GAAG,CAAC,kBAAkB,CAAC;IACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,MAA4B,CAAC;IACjC,IAAI,OAAO,GAA8B,GAAG,EAAE,GAAE,CAAC,CAAC;IAElD,gGAAgG;IAChG,iFAAiF;IACjF,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC;QACjD,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC;QACrC,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC;QACzC,eAAe,EAAE,KAAK;KACvB,CAAC,CAAC;IACH,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;IAC1D,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,YAAY,CAAC,gBAAgB,CAAC,QAAQ,EAAE;YACtC,OAAO;YACP,GAAG,EAAE,oBAAoB;YACzB,MAAM,EAAE,MAAM,IAAI,QAAQ;YAC1B,MAAM,EAAE,CAAC;oBACP,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK;oBAC7D,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE;oBAC1D,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK;iBACxC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,MAAM,EAAE,CAAC;QAClB,MAAM,YAAY,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,IAAI,OAAO,GAAG,CAAC,CAAC;IAElF,MAAM,cAAc,GAAG,yBAAyB,CAAC;QAC/C,GAAG;QACH,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ;QACR,YAAY,EAAE,yBAAyB;QACvC,kBAAkB,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;KAC7D,CAAC,CAAC;IACH,MAAM,cAAc,CAAC,MAAM,EAAE,CAAC;IAE9B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC;QAC/B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ;QACR,KAAK;QACL,YAAY;QACZ,cAAc;QACd,eAAe,EAAE,GAAG,CAAC,eAAe,CAAC,QAAQ,EAAE;QAC/C,cAAc,EAAE,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QACrD,KAAK,EAAE,CAAC,GAAG,aAAa,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3D,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC;KACjD,CAAC,CAAC;IAEH,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,OAAO,GAAG,GAAS,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEjF,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK;QACvB,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG;YACnB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,GAAG,GAAG,CAAC;YACb,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;gBACtB,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;oBAChC,IAAI,CAAC,CAAC,qBAAqB,CAAC,IAAI,KAAK,YAAY;wBAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,qBAAqB,CAAC,KAAK,EAAE,CAAC,CAAC;gBACrH,CAAC;qBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;oBAC7C,OAAO,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,IAAW,CAAC,EAAE,CAAC,CAAC;gBACzG,CAAC;qBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;oBAC3C,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAE,CAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBACvF,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC/G,CAAC;qBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;oBAClD,wFAAwF;oBACxF,+CAA+C;oBAC/C,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAS,CAAC,MAAM,CAAC,KAAK,WAAW,CAAoB,CAAC;oBAC1G,IAAI,IAAI,EAAE,CAAC,YAAY,CAAC,KAAK,OAAO;wBAAE,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,wBAAwB,EAAE,CAAC,CAAC;oBACjI,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI;YACf,SAAS,GAAG,KAAK,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACtF,IAAI,CAAC,SAAS;oBAAE,OAAO,EAAE,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,KAAK;YACH,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,KAAK,CAAC,KAAK;YACT,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/lib/agent/failure-tail.d.ts

@@ -0,0 +1,9 @@
+/**
+ * What a failed tool call shows the person: the last few lines of what the tool said, which for a
+ * shell command carries the exit code and stderr. Engines hand over a result in different shapes
+ * (a string, a list of text blocks, an object holding either), so this reads all of them and
+ * returns nothing when there is no text, rather than inventing a reason.
+ */
+/** The last few lines of a failed tool's result, safe to print, or undefined when it said nothing. */
+export declare function failureTail(result: unknown): string | undefined;
+//# sourceMappingURL=failure-tail.d.ts.map

package/dist/lib/agent/failure-tail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure-tail.d.ts","sourceRoot":"","sources":["../../../src/lib/agent/failure-tail.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA+BH,sGAAsG;AACtG,wBAAgB,WAAW,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAI/D"}

package/dist/lib/agent/failure-tail.js

@@ -0,0 +1,42 @@
+/**
+ * What a failed tool call shows the person: the last few lines of what the tool said, which for a
+ * shell command carries the exit code and stderr. Engines hand over a result in different shapes
+ * (a string, a list of text blocks, an object holding either), so this reads all of them and
+ * returns nothing when there is no text, rather than inventing a reason.
+ */
+const MAX_LINES = 3;
+const MAX_LINE_CHARS = 200;
+/** The text inside a tool result, whatever shape the engine used. */
+function textOf(v) {
+    if (typeof v === 'string')
+        return v;
+    if (Array.isArray(v))
+        return v.map(textOf).filter((t) => t !== '').join('\n');
+    if (v && typeof v === 'object') {
+        const o = v;
+        return textOf(typeof o['text'] === 'string' ? o['text'] : o['content']);
+    }
+    return '';
+}
+/**
+ * Tool output is untrusted text going to the person's terminal. Drop escape sequences (a stray
+ * `ESC[2J` would clear the screen) and other control characters, keeping line breaks.
+ */
+function stripTerminalControls(text) {
+    /* eslint-disable no-control-regex -- matching control characters is the job here */
+    return text
+        .replace(/\u001b\][^\u0007\u001b]*(?:\u0007|\u001b\\)?/g, '')
+        .replace(/\u001b\[[0-?]*[ -/]*[@-~]/g, '')
+        .replace(/\r\n?/g, '\n')
+        .replace(/\t/g, ' ')
+        .replace(/[\u0000-\u0009\u000b-\u001f\u007f-\u009f]/g, '');
+    /* eslint-enable no-control-regex */
+}
+/** The last few lines of a failed tool's result, safe to print, or undefined when it said nothing. */
+export function failureTail(result) {
+    const lines = stripTerminalControls(textOf(result)).split('\n').map((l) => l.trim()).filter((l) => l !== '');
+    if (lines.length === 0)
+        return undefined;
+    return lines.slice(-MAX_LINES).map((l) => (l.length > MAX_LINE_CHARS ? `${l.slice(0, MAX_LINE_CHARS - 1)}…` : l)).join('\n');
+}
+//# sourceMappingURL=failure-tail.js.map

package/dist/lib/agent/failure-tail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure-tail.js","sourceRoot":"","sources":["../../../src/lib/agent/failure-tail.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,qEAAqE;AACrE,SAAS,MAAM,CAAC,CAAU;IACxB,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9E,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,CAA4B,CAAC;QACvC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAAC,IAAY;IACzC,oFAAoF;IACpF,OAAO,IAAI;SACR,OAAO,CAAC,+CAA+C,EAAE,EAAE,CAAC;SAC5D,OAAO,CAAC,4BAA4B,EAAE,EAAE,CAAC;SACzC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC;SACvB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;IAC7D,oCAAoC;AACtC,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,WAAW,CAAC,MAAe;IACzC,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7G,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/H,CAAC"}

package/dist/lib/agent/git-runs-programs.d.ts

@@ -0,0 +1,11 @@
+export type GitConfigRunner = (args: string[]) => Promise<{
+    code: number;
+    stdout: string;
+}>;
+/**
+ * True when the repository's config names a program git would run, or when that cannot be read.
+ * Exit 1 is git's "no match", the only answer that clears it: a missing git, a timeout or a
+ * folder that is not a repository all count as "could not look", and that asks.
+ */
+export declare function gitConfigRunsPrograms(cwd: string, run?: GitConfigRunner): Promise<boolean>;
+//# sourceMappingURL=git-runs-programs.d.ts.map

package/dist/lib/agent/git-runs-programs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-runs-programs.d.ts","sourceRoot":"","sources":["../../../src/lib/agent/git-runs-programs.ts"],"names":[],"mappings":"AAWA,MAAM,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAU5F;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,eAA6B,GAAG,OAAO,CAAC,OAAO,CAAC,CAG7G"}

package/dist/lib/agent/git-runs-programs.js

@@ -0,0 +1,25 @@
+import { execFile } from 'node:child_process';
+/**
+ * Git runs a program for some read commands when the repository's own config names one:
+ * `core.fsmonitor` on status and diff, a `textconv` or external diff driver on diff, show and log,
+ * and anything pulled in through `include`. A clone does not carry `.git/config`, so a hostile
+ * repo cannot set these, but a repo that arrived with its `.git` folder can. The user's own global
+ * config is theirs to trust, so only the repository's config is read.
+ */
+const RISKY_KEYS = String.raw `^(core\.fsmonitor|diff\.external|diff\..*\.(textconv|command)|gpg\.(.*\.)?program|include\..*|includeif\..*)$`;
+const runGit = (cwd) => (args) => new Promise((resolve) => {
+    execFile('git', args, { cwd, timeout: 3000 }, (err, stdout) => {
+        const code = err ? (typeof err.code === 'number' ? err.code : 128) : 0;
+        resolve({ code, stdout: String(stdout) });
+    });
+});
+/**
+ * True when the repository's config names a program git would run, or when that cannot be read.
+ * Exit 1 is git's "no match", the only answer that clears it: a missing git, a timeout or a
+ * folder that is not a repository all count as "could not look", and that asks.
+ */
+export async function gitConfigRunsPrograms(cwd, run = runGit(cwd)) {
+    const results = await Promise.all(['--local', '--worktree'].map((scope) => run(['config', scope, '--get-regexp', RISKY_KEYS])));
+    return results.some((r) => r.code !== 1);
+}
+//# sourceMappingURL=git-runs-programs.js.map

package/dist/lib/agent/git-runs-programs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-runs-programs.js","sourceRoot":"","sources":["../../../src/lib/agent/git-runs-programs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAA,+GAA+G,CAAC;AAI7I,MAAM,MAAM,GAAG,CAAC,GAAW,EAAmB,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CACxD,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;IACtB,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;QAC5D,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,OAAQ,GAA0B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrH,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAW,EAAE,MAAuB,MAAM,CAAC,GAAG,CAAC;IACzF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAChI,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/dist/lib/agent/graph-tools.d.ts

@@ -0,0 +1,23 @@
+import type { EnvironmentConfig } from '../config.js';
+import type { createGatewayClient } from '../gateway-client.js';
+/**
+ * The decision-graph tools the Align engine hands its model, as engine-neutral specs. An engine
+ * adapter turns each spec into its own tool type, so no engine's types leak in here.
+ *
+ * Every tool goes through dispatchTool, the router `align mcp` serves, so an agent asking from
+ * inside `align` gets the answers an agent asking over MCP gets. These are the four READ tools
+ * an agent reaches for; align_capture and the other writers stay out of the agent's hands.
+ */
+export interface GraphToolSpec {
+    name: string;
+    description: string;
+    /** JSON Schema, copied from TOOL_SCHEMAS so there is one writer of what a tool takes. */
+    parameters: Record<string, unknown>;
+    run(args: Record<string, unknown>): Promise<string>;
+}
+export interface GraphToolDeps {
+    client: ReturnType<typeof createGatewayClient>;
+    env: EnvironmentConfig;
+}
+export declare function createGraphTools({ client, env }: GraphToolDeps): GraphToolSpec[];
+//# sourceMappingURL=graph-tools.d.ts.map

package/dist/lib/agent/graph-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-tools.d.ts","sourceRoot":"","sources":["../../../src/lib/agent/graph-tools.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAGhE;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,yFAAyF;IACzF,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;IAC/C,GAAG,EAAE,iBAAiB,CAAC;CACxB;AAID,wBAAgB,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,aAAa,GAAG,aAAa,EAAE,CA2BhF"}

package/dist/lib/agent/graph-tools.js

@@ -0,0 +1,33 @@
+import { dispatchTool, isFirstUsefulToolResult, serializeMcpResult, TOOL_SCHEMAS } from '../../commands/mcp.js';
+import { recordFunnelStage } from '../usage-telemetry.js';
+const GRAPH_TOOL_NAMES = ['align_ask', 'align_search', 'align_get_topic_timeline', 'align_get_related_decisions'];
+export function createGraphTools({ client, env }) {
+    // One flag per tool set, so first_useful_decision is offered once per session. The
+    // once-per-install guard is recordFunnelStage's; this only stops a chatty session re-offering.
+    let recordedFirstUseful = false;
+    // The local graph has no topic timeline (the local client cannot serve it), so the local
+    // engine is not offered a tool that would only fail.
+    const names = GRAPH_TOOL_NAMES.filter((n) => !(env.mode === 'local-embedded' && n === 'align_get_topic_timeline'));
+    return names.map((name) => {
+        const schema = TOOL_SCHEMAS.find((s) => s.name === name);
+        if (!schema)
+            throw new Error(`graph tool ${name} is not in TOOL_SCHEMAS`);
+        return {
+            name,
+            description: schema.description,
+            parameters: schema.inputSchema,
+            async run(args) {
+                const result = await dispatchTool(name, args, client, env);
+                if (!recordedFirstUseful && isFirstUsefulToolResult(name, result)) {
+                    recordedFirstUseful = true;
+                    // Not awaited: a tool response never waits on telemetry (same as createCallToolHandler).
+                    void recordFunnelStage(env, 'first_useful_decision', 'mcp');
+                }
+                // Any successful graph call is use, as in the MCP handler; recordFunnelStage keeps it to once a day.
+                void recordFunnelStage(env, 'agent_active', 'mcp');
+                return serializeMcpResult(result);
+            },
+        };
+    });
+}
+//# sourceMappingURL=graph-tools.js.map

package/dist/lib/agent/graph-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-tools.js","sourceRoot":"","sources":["../../../src/lib/agent/graph-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAGhH,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAuB1D,MAAM,gBAAgB,GAAG,CAAC,WAAW,EAAE,cAAc,EAAE,0BAA0B,EAAE,6BAA6B,CAAU,CAAC;AAE3H,MAAM,UAAU,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAiB;IAC7D,mFAAmF;IACnF,+FAA+F;IAC/F,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAChC,yFAAyF;IACzF,qDAAqD;IACrD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,KAAK,0BAA0B,CAAC,CAAC,CAAC;IACnH,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QAC1E,OAAO;YACL,IAAI;YACJ,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,UAAU,EAAE,MAAM,CAAC,WAAsC;YACzD,KAAK,CAAC,GAAG,CAAC,IAAI;gBACZ,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;gBAC3D,IAAI,CAAC,mBAAmB,IAAI,uBAAuB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;oBAClE,mBAAmB,GAAG,IAAI,CAAC;oBAC3B,yFAAyF;oBACzF,KAAK,iBAAiB,CAAC,GAAG,EAAE,uBAAuB,EAAE,KAAK,CAAC,CAAC;gBAC9D,CAAC;gBACD,qGAAqG;gBACrG,KAAK,iBAAiB,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;gBACnD,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;YACpC,CAAC;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/agent/permission-broker.d.ts

@@ -0,0 +1,27 @@
+import type { BrokerVerdict, GateOutcome, HumanAnswer, ToolAsk } from './types.js';
+/**
+ * Who has to approve a tool call, for both engines. Edits go through the edit gate and reach a
+ * person only when the gate asks; commands always reach a person unless they allowed that command
+ * for this session; reads never do. A denial carries a message written for the MODEL, because the
+ * engine hands it back as the tool result - that is how "stop" turns into the agent changing course.
+ */
+export type HumanQuestion = {
+    kind: 'gate';
+    outcome: Extract<GateOutcome, {
+        kind: 'ask';
+    }>;
+    ask: ToolAsk;
+} | {
+    kind: 'command';
+    command: string;
+    ask: ToolAsk;
+};
+export interface BrokerDeps {
+    gate: (ask: ToolAsk) => Promise<GateOutcome>;
+    askHuman: (q: HumanQuestion) => Promise<HumanAnswer>;
+    onGate: (outcome: GateOutcome, ask: ToolAsk) => void;
+    /** True when the repo's git config names a program. Absent means unknown, and git then asks. */
+    gitRunsPrograms?: () => Promise<boolean>;
+}
+export declare function createBroker(deps: BrokerDeps): (ask: ToolAsk) => Promise<BrokerVerdict>;
+//# sourceMappingURL=permission-broker.d.ts.map

package/dist/lib/agent/permission-broker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-broker.d.ts","sourceRoot":"","sources":["../../../src/lib/agent/permission-broker.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAgB,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAEjG;;;;;GAKG;AAEH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE;QAAE,IAAI,EAAE,KAAK,CAAA;KAAE,CAAC,CAAC;IAAC,GAAG,EAAE,OAAO,CAAA;CAAE,GAC9E;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,OAAO,CAAA;CAAE,CAAC;AAEvD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7C,QAAQ,EAAE,CAAC,CAAC,EAAE,aAAa,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;IACrD,gGAAgG;IAChG,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1C;AAkBD,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,aAAa,CAAC,CAmCvF"}

package/dist/lib/agent/permission-broker.js

@@ -0,0 +1,56 @@
+import { commandUsesGit, isReadOnlyCommand } from './read-only-command.js';
+/** Only an explicit yes allows. An answer this code does not know (a future key, a cancel) is a stop. */
+const allows = (a) => a === 'allow' || a === 'allow-session';
+function decisionLine(d) {
+    return [`- ${d.title}`, d.why ? ` - ${d.why}` : '', d.url ? ` (${d.url})` : ''].join('');
+}
+function stopMessage(outcome) {
+    const lead = {
+        conflict: 'Align: the person stopped this edit. It conflicts with a recorded decision:',
+        'rewrites-decided-lines': 'Align: the person stopped this edit. It changes lines written by a recorded decision:',
+        unchecked: 'Align: the person stopped this edit. Align could not read it to check it against the decisions.',
+    }[outcome.reason];
+    return [lead, ...outcome.cards.map(decisionLine), 'Do not retry this edit. Ask the person how they want to proceed.'].join('\n');
+}
+export function createBroker(deps) {
+    // "Yes for this session" remembers the EXACT command, or the tool by name. A prefix match let
+    // an allowed `git status` approve `git status; rm -rf ~` (security review).
+    const sessionAllowed = new Set();
+    return async (ask) => {
+        if (ask.kind === 'read')
+            return { allow: true };
+        if (ask.kind === 'edit') {
+            const outcome = await deps.gate(ask);
+            deps.onGate(outcome, ask);
+            if (outcome.kind === 'allow')
+                return { allow: true };
+            const answer = await deps.askHuman({ kind: 'gate', outcome, ask });
+            return allows(answer) ? { allow: true } : { allow: false, message: stopMessage(outcome) };
+        }
+        // A command that can only read passes; anything chained, redirected or unknown still asks.
+        if (ask.kind === 'command' && isReadOnlyCommand(ask.command ?? '')) {
+            // git reads can still run a program the repo's config names, so those pass only once that is ruled out.
+            if (!commandUsesGit(ask.command ?? ''))
+                return { allow: true };
+            if (deps.gitRunsPrograms && !(await deps.gitRunsPrograms()))
+                return { allow: true };
+        }
+        // A command, or a tool this code does not know (WebFetch, an MCP tool, a subagent): a person decides.
+        // An unknown tool is approved for its input, not its name: a yes to one URL is not a yes to all.
+        // The question shows the WHOLE input: approval covers all of it, so none may hide past a cut.
+        const label = ask.kind === 'command' ? (ask.command ?? '') : [ask.tool, ask.detail].filter(Boolean).join(' ');
+        const key = ask.kind === 'command' ? `command:${label}` : `other:${ask.tool}:${ask.detail ?? ''}`;
+        if (sessionAllowed.has(key))
+            return { allow: true };
+        const answer = await deps.askHuman({ kind: 'command', command: label, ask });
+        if (!allows(answer)) {
+            return { allow: false, message: ask.kind === 'command'
+                    ? `Align: the person declined to run \`${label}\`. Ask them before trying another way.`
+                    : `Align: the person declined the ${ask.tool} tool. Ask them before trying another way.` };
+        }
+        if (answer === 'allow-session')
+            sessionAllowed.add(key);
+        return { allow: true };
+    };
+}
+//# sourceMappingURL=permission-broker.js.map

package/dist/lib/agent/permission-broker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-broker.js","sourceRoot":"","sources":["../../../src/lib/agent/permission-broker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAsB3E,yGAAyG;AACzG,MAAM,MAAM,GAAG,CAAC,CAAc,EAAW,EAAE,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,eAAe,CAAC;AAEnF,SAAS,YAAY,CAAC,CAAe;IACnC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,WAAW,CAAC,OAA8C;IACjE,MAAM,IAAI,GAAG;QACX,QAAQ,EAAE,6EAA6E;QACvF,wBAAwB,EAAE,uFAAuF;QACjH,SAAS,EAAE,iGAAiG;KAC7G,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClB,OAAO,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,kEAAkE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnI,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAgB;IAC3C,8FAA8F;IAC9F,4EAA4E;IAC5E,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE;QACnB,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAChD,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC1B,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YACnE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5F,CAAC;QACD,2FAA2F;QAC3F,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,iBAAiB,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YACnE,wGAAwG;YACxG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YAC/D,IAAI,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACtF,CAAC;QACD,sGAAsG;QACtG,iGAAiG;QACjG,8FAA8F;QAC9F,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9G,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAClG,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACpB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS;oBACpD,CAAC,CAAC,uCAAuC,KAAK,yCAAyC;oBACvF,CAAC,CAAC,kCAAkC,GAAG,CAAC,IAAI,4CAA4C,EAAE,CAAC;QAC/F,CAAC;QACD,IAAI,MAAM,KAAK,eAAe;YAAE,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/agent/read-only-command.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Which shell commands the broker lets through without asking. The rule is an allowlist over a
+ * parse that fails toward asking: anything this file cannot positively read as read-only is not.
+ *
+ * A command is one or more segments joined by `;`, `&&`, `||` or `|`. EVERY segment must be a
+ * known read-only command, so an allowed `git status` cannot approve what follows it. Characters
+ * that run or write something else (substitution, redirects, background jobs, newlines, escapes)
+ * reject the whole line. A quoted `;` splits wrongly, and that only ever produces a segment that
+ * fails the allowlist, so the mistake costs a question and never a pass.
+ */
+/** True when any segment of the line runs git, which can run programs the repo's config names. */
+export declare function commandUsesGit(command: string): boolean;
+/** True only when every segment of the line is a known read-only command. */
+export declare function isReadOnlyCommand(command: string): boolean;
+//# sourceMappingURL=read-only-command.d.ts.map

package/dist/lib/agent/read-only-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-only-command.d.ts","sourceRoot":"","sources":["../../../src/lib/agent/read-only-command.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAuEH,kGAAkG;AAClG,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAGvD;AAED,6EAA6E;AAC7E,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAI1D"}