borgmcp-server 0.1.1 → 0.1.4

package/dist/migrations.js

@@ -1,4 +1,10 @@
 import { createHash } from "node:crypto";
+export class MigrationCompatibilityError extends Error {
+    constructor() {
+        super("Database migrations do not exactly match this server version.");
+        this.name = "MigrationCompatibilityError";
+    }
+}
 export const STORE_MIGRATIONS = Object.freeze([
     {
         version: 1,
@@ -295,6 +301,46 @@ export const STORE_MIGRATIONS = Object.freeze([
         ON seat_attach_bindings (drone_id, client_id, cube_id);
     `,
     },
+    {
+        version: 7,
+        name: "role_management_foundation",
+        sql: `
+      ALTER TABLE roles ADD COLUMN is_mandatory INTEGER NOT NULL DEFAULT 0
+        CHECK (is_mandatory IN (0, 1));
+      ALTER TABLE roles ADD COLUMN can_broadcast INTEGER NOT NULL DEFAULT 0
+        CHECK (can_broadcast IN (0, 1));
+      ALTER TABLE roles ADD COLUMN receives_all_direct INTEGER NOT NULL DEFAULT 0
+        CHECK (receives_all_direct IN (0, 1));
+
+      CREATE UNIQUE INDEX roles_one_default_per_cube_idx
+        ON roles (cube_id) WHERE is_default = 1;
+    `,
+    },
+    {
+        version: 8,
+        name: "cube_scoped_invitations",
+        sql: `
+      ALTER TABLE enrollment_invitations ADD COLUMN cube_id TEXT;
+      ALTER TABLE enrollment_invitations ADD COLUMN access TEXT
+        CHECK (access IS NULL OR access IN ('read', 'write', 'manage'));
+
+      CREATE TRIGGER enrollment_invitations_scope_insert
+      BEFORE INSERT ON enrollment_invitations
+      WHEN (NEW.cube_id IS NULL) <> (NEW.access IS NULL)
+        OR (NEW.cube_id IS NOT NULL AND NEW.purpose <> 'client')
+      BEGIN
+        SELECT RAISE(ABORT, 'invalid invitation cube scope');
+      END;
+
+      CREATE TRIGGER enrollment_invitations_scope_update
+      BEFORE UPDATE OF cube_id, access, purpose ON enrollment_invitations
+      WHEN (NEW.cube_id IS NULL) <> (NEW.access IS NULL)
+        OR (NEW.cube_id IS NOT NULL AND NEW.purpose <> 'client')
+      BEGIN
+        SELECT RAISE(ABORT, 'invalid invitation cube scope');
+      END;
+    `,
+    },
 ]);
 export function applyMigrations(database, migrations = STORE_MIGRATIONS) {
     validateMigrationOrder(migrations);
@@ -339,6 +385,31 @@ export function applyMigrations(database, migrations = STORE_MIGRATIONS) {
         }
     }
 }
+export function assertMigrationsCurrent(database, migrations = STORE_MIGRATIONS) {
+    validateMigrationOrder(migrations);
+    let rows;
+    try {
+        rows = database.prepare("SELECT version, name, checksum FROM schema_migrations ORDER BY version").all();
+    }
+    catch {
+        throw new MigrationCompatibilityError();
+    }
+    if (rows.length !== migrations.length)
+        throw new MigrationCompatibilityError();
+    for (let index = 0; index < migrations.length; index += 1) {
+        let applied;
+        try {
+            applied = appliedMigrationRow(rows[index]);
+        }
+        catch {
+            throw new MigrationCompatibilityError();
+        }
+        const expected = migrations[index];
+        if (applied.version !== expected.version || applied.name !== expected.name ||
+            applied.checksum !== checksum(expected))
+            throw new MigrationCompatibilityError();
+    }
+}
 function validateMigrationOrder(migrations) {
     migrations.forEach((migration, index) => {
         if (migration.version !== index + 1 || migration.name.length === 0 || migration.sql.length === 0) {

package/dist/migrations.js.map

@@ -1 +1 @@
-{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../src/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AASzC,MAAM,CAAC,MAAM,gBAAgB,GAAyB,MAAM,CAAC,MAAM,CAAC;IAClE;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,sBAAsB;QAC5B,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAwFJ;KACF;IACD;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,sBAAsB;QAC5B,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAgCJ;KACF;IACD;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,uBAAuB;QAC7B,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAgDJ;KACF;IACD;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,yBAAyB;QAC/B,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;KAqBJ;KACF;IACD;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,oCAAoC;QAC1C,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAqDJ;KACF;IACD;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,wBAAwB;QAC9B,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;;;KAuBJ;KACF;CACF,CAAC,CAAC;AAQH,MAAM,UAAU,eAAe,CAC7B,QAAsB,EACtB,UAAU,GAAyB,gBAAgB;IAEnD,sBAAsB,CAAC,UAAU,CAAC,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC;;;;;;;GAOb,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAC9B,wEAAwE,CACzE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACjC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChF,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC;QACpF,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,OAAO,wCAAwC,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAC7B,yFAAyF,CAC1F,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;YAAE,SAAS;QACrD,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CACR,SAAS,CAAC,OAAO,EACjB,SAAS,CAAC,IAAI,EACd,QAAQ,CAAC,SAAS,CAAC,EACnB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CACzB,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,0DAA0D;YAC5D,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAgC;IAC9D,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QACtC,IAAI,SAAS,CAAC,OAAO,KAAK,KAAK,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjG,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,SAAoB;IACpC,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,GAAG,EAAE,CAAC;SACnE,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,GAA4B;IACvD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ;QAC/B,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,SAAS,CAAW;QACjC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC;QACjB,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC;KAC1B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../src/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AASzC,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD;QACE,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAyB,MAAM,CAAC,MAAM,CAAC;IAClE;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,sBAAsB;QAC5B,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAwFJ;KACF;IACD;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,sBAAsB;QAC5B,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAgCJ;KACF;IACD;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,uBAAuB;QAC7B,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAgDJ;KACF;IACD;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,yBAAyB;QAC/B,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;KAqBJ;KACF;IACD;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,oCAAoC;QAC1C,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAqDJ;KACF;IACD;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,wBAAwB;QAC9B,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;;;KAuBJ;KACF;IACD;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,4BAA4B;QAClC,GAAG,EAAE;;;;;;;;;;KAUJ;KACF;IACD;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,yBAAyB;QAC/B,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;KAoBJ;KACF;CACF,CAAC,CAAC;AAQH,MAAM,UAAU,eAAe,CAC7B,QAAsB,EACtB,UAAU,GAAyB,gBAAgB;IAEnD,sBAAsB,CAAC,UAAU,CAAC,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC;;;;;;;GAOb,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAC9B,wEAAwE,CACzE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACjC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChF,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC;QACpF,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,OAAO,wCAAwC,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAC7B,yFAAyF,CAC1F,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;YAAE,SAAS;QACrD,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CACR,SAAS,CAAC,OAAO,EACjB,SAAS,CAAC,IAAI,EACd,QAAQ,CAAC,SAAS,CAAC,EACnB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CACzB,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,0DAA0D;YAC5D,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,QAAsB,EACtB,UAAU,GAAyB,gBAAgB;IAEnD,sBAAsB,CAAC,UAAU,CAAC,CAAC;IACnC,IAAI,IAA+B,CAAC;IACpC,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,OAAO,CACrB,wEAAwE,CACzE,CAAC,GAAG,EAAE,CAAC;IACV,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,2BAA2B,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;QAAE,MAAM,IAAI,2BAA2B,EAAE,CAAC;IAC/E,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1D,IAAI,OAA4B,CAAC;QACjC,IAAI,CAAC;YACH,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAE,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,2BAA2B,EAAE,CAAC;QAC1C,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAE,CAAC;QACpC,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;YACtE,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,2BAA2B,EAAE,CAAC;IACvF,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAgC;IAC9D,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QACtC,IAAI,SAAS,CAAC,OAAO,KAAK,KAAK,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjG,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,SAAoB;IACpC,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,GAAG,EAAE,CAAC;SACnE,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,GAA4B;IACvD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ;QAC/B,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,SAAS,CAAW;QACjC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC;QACjB,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC;KAC1B,CAAC;AACJ,CAAC"}

package/dist/operator-error.d.ts

@@ -1,3 +1,4 @@
-export type OperatorErrorCode = "START_LAN_DUPLICATE" | "START_HOST_DUPLICATE" | "START_PORT_DUPLICATE" | "START_HOST_MISSING" | "START_PORT_MISSING" | "START_PORT_INVALID" | "START_OPTION_UNKNOWN" | "BIND_PORT_INVALID" | "BIND_HOST_INVALID" | "BIND_WILDCARD" | "BIND_PUBLIC" | "BIND_LAN_CONSENT" | "SERVER_FILES_MISSING" | "DATA_PATH_SYMLINK" | "LAN_CA_KEY_ONLINE" | "RUNTIME_ACTIVE" | "RUNTIME_LOCK_UNSAFE" | "RUNTIME_LOCK_INVALID" | "RUNTIME_LOCK_STALE" | "ACTIVITY_LIMIT_INVALID" | "DATABASE_LIMIT_INVALID" | "DISK_RESERVE_INVALID" | "CLIENT_NOT_FOUND" | "GRANT_NOT_FOUND" | "RECOVERY_INVALID";
+export type OperatorErrorCode = "START_LAN_DUPLICATE" | "START_HOST_DUPLICATE" | "START_PORT_DUPLICATE" | "START_HOST_MISSING" | "START_PORT_MISSING" | "START_PORT_INVALID" | "START_LOG_LEVEL_DUPLICATE" | "START_LOG_LEVEL_MISSING" | "START_LOG_LEVEL_INVALID" | "START_OPTION_UNKNOWN" | "BIND_PORT_INVALID" | "BIND_HOST_INVALID" | "BIND_WILDCARD" | "BIND_PUBLIC" | "BIND_LAN_CONSENT" | "SERVER_FILES_MISSING" | "DATA_PATH_SYMLINK" | "INSTALLATION_EXISTS" | "LAN_CA_KEY_ONLINE" | "RUNTIME_ACTIVE" | "RUNTIME_LOCK_UNSAFE" | "RUNTIME_LOCK_INVALID" | "RUNTIME_LOCK_STALE" | "ACTIVITY_LIMIT_INVALID" | "DATABASE_LIMIT_INVALID" | "DISK_RESERVE_INVALID" | "CLIENT_NOT_FOUND" | "GRANT_NOT_FOUND" | "RECOVERY_INVALID" | "INVITATION_BUSY" | "INVITATION_CONTENTION" | "INVITATION_SCHEMA_MISMATCH" | "INVITATION_CUBE_NOT_FOUND" | "INVITATION_CUBE_SELECTOR_INVALID" | "INVITATION_CUBE_AMBIGUOUS";
 export declare const operatorErrors: Readonly<Record<OperatorErrorCode, Error>>;
 export declare function operatorPublicMessage(error: unknown): string | null;
+export declare function invitationCubeAmbiguousError(candidateIds: readonly string[]): Error;

package/dist/operator-error.js

@@ -5,6 +5,9 @@ const publicMessages = Object.freeze({
     START_HOST_MISSING: "Provide an IP address after --host.",
     START_PORT_MISSING: "Provide a port number after --port.",
     START_PORT_INVALID: "Provide --port as an integer from 0 to 65535.",
+    START_LOG_LEVEL_DUPLICATE: "Provide --log-level only once.",
+    START_LOG_LEVEL_MISSING: "Provide debug after --log-level.",
+    START_LOG_LEVEL_INVALID: "Use --log-level debug or omit the option.",
     START_OPTION_UNKNOWN: "Use only documented start options; run borg-mcp-server help.",
     BIND_PORT_INVALID: "Configure the listen port as an integer from 0 to 65535.",
     BIND_HOST_INVALID: "Configure --host as an explicit IP address.",
@@ -13,8 +16,9 @@ const publicMessages = Object.freeze({
     BIND_LAN_CONSENT: "Add --lan to consent to this private-LAN start.",
     SERVER_FILES_MISSING: "Configure BORG_SERVER_DATA_DIR or the required TLS file variables.",
     DATA_PATH_SYMLINK: "Choose a BORG_SERVER_DATA_DIR path that contains no symbolic links.",
+    INSTALLATION_EXISTS: "An installation already exists in BORG_SERVER_DATA_DIR. To destroy and recreate it, stop the server and run borg-mcp-server setup --reinitialize.",
     LAN_CA_KEY_ONLINE: "Move ca.key out of the runtime data directory before private-LAN startup.",
-    RUNTIME_ACTIVE: "Stop the server before running offline client administration.",
+    RUNTIME_ACTIVE: "Stop the server before running setup or offline administration.",
     RUNTIME_LOCK_UNSAFE: "Ensure runtime.lock is a private regular file before retrying.",
     RUNTIME_LOCK_INVALID: "Confirm the server is stopped, then remove the invalid runtime.lock.",
     RUNTIME_LOCK_STALE: "Confirm the recorded server process is stopped, then remove runtime.lock.",
@@ -24,26 +28,34 @@ const publicMessages = Object.freeze({
     CLIENT_NOT_FOUND: "Provide an existing active client ID.",
     GRANT_NOT_FOUND: "Provide an existing client cube grant.",
     RECOVERY_INVALID: "Provide the active recovery credential through the private prompt.",
+    INVITATION_BUSY: "Confirm no invitation or offline administration command is running, then remove invitation-mint.lock.",
+    INVITATION_CONTENTION: "Retry invitation minting after the current server database write completes.",
+    INVITATION_SCHEMA_MISMATCH: "Invitation minting is unavailable while a server with an incompatible schema is running. Stop the server and rerun this command, or use the CLI version that matches the running server.",
+    INVITATION_CUBE_NOT_FOUND: "Provide an existing cube name or full cube ID.",
+    INVITATION_CUBE_SELECTOR_INVALID: "Provide a full canonical cube UUID or an exact case-sensitive cube name.",
+    INVITATION_CUBE_AMBIGUOUS: "Cube name is ambiguous. Rerun with the full cube ID.",
 });
 const operatorErrorCodes = new WeakMap();
+const operatorErrorMessages = new WeakMap();
 const operatorErrorCapability = Object.freeze({});
 class OperatorError extends Error {
     #operatorCode;
-    constructor(capability, code) {
-        super(Object.hasOwn(publicMessages, code) ? publicMessages[code] : "Operator error rejected.");
+    constructor(capability, code, publicMessage) {
+        super(publicMessage ?? (Object.hasOwn(publicMessages, code) ? publicMessages[code] : "Operator error rejected."));
         if (capability !== operatorErrorCapability || !Object.hasOwn(publicMessages, code)) {
             throw new Error("Operator error construction is unavailable.");
         }
         this.name = "OperatorError";
         this.#operatorCode = code;
         operatorErrorCodes.set(this, code);
+        operatorErrorMessages.set(this, this.message);
         Object.freeze(this);
     }
     get code() {
         return this.#operatorCode;
     }
     get publicMessage() {
-        return publicMessages[this.#operatorCode];
+        return operatorErrorMessages.get(this) ?? publicMessages[this.#operatorCode];
     }
 }
 export const operatorErrors = Object.freeze(Object.fromEntries(Object.keys(publicMessages).map((code) => [
@@ -58,6 +70,12 @@ export function operatorPublicMessage(error) {
         return null;
     if (Object.getPrototypeOf(error) !== OperatorError.prototype || !Object.isFrozen(error))
         return null;
-    return publicMessages[code];
+    return operatorErrorMessages.get(error) ?? publicMessages[code];
+}
+export function invitationCubeAmbiguousError(candidateIds) {
+    if (candidateIds.length < 2 || candidateIds.some((id) => !/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/u.test(id))) {
+        throw new Error("Ambiguous cube candidates must contain canonical cube IDs.");
+    }
+    return new OperatorError(operatorErrorCapability, "INVITATION_CUBE_AMBIGUOUS", `Cube name is ambiguous. Rerun with the full cube ID. Candidate cube IDs: ${candidateIds.join(", ")}`);
 }
 //# sourceMappingURL=operator-error.js.map

package/dist/operator-error.js.map

@@ -1 +1 @@
-{"version":3,"file":"operator-error.js","sourceRoot":"","sources":["../src/operator-error.ts"],"names":[],"mappings":"AA2BA,MAAM,cAAc,GAAgD,MAAM,CAAC,MAAM,CAAC;IAChF,mBAAmB,EAAE,0BAA0B;IAC/C,oBAAoB,EAAE,2BAA2B;IACjD,oBAAoB,EAAE,2BAA2B;IACjD,kBAAkB,EAAE,qCAAqC;IACzD,kBAAkB,EAAE,qCAAqC;IACzD,kBAAkB,EAAE,+CAA+C;IACnE,oBAAoB,EAAE,8DAA8D;IACpF,iBAAiB,EAAE,0DAA0D;IAC7E,iBAAiB,EAAE,6CAA6C;IAChE,aAAa,EAAE,8EAA8E;IAC7F,WAAW,EAAE,6EAA6E;IAC1F,gBAAgB,EAAE,iDAAiD;IACnE,oBAAoB,EAAE,oEAAoE;IAC1F,iBAAiB,EAAE,qEAAqE;IACxF,iBAAiB,EAAE,2EAA2E;IAC9F,cAAc,EAAE,+DAA+D;IAC/E,mBAAmB,EAAE,gEAAgE;IACrF,oBAAoB,EAAE,sEAAsE;IAC5F,kBAAkB,EAAE,2EAA2E;IAC/F,sBAAsB,EAAE,sEAAsE;IAC9F,sBAAsB,EAAE,2DAA2D;IACnF,oBAAoB,EAAE,4DAA4D;IAClF,gBAAgB,EAAE,uCAAuC;IACzD,eAAe,EAAE,wCAAwC;IACzD,gBAAgB,EAAE,oEAAoE;CACvF,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,IAAI,OAAO,EAA6B,CAAC;AACpE,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAElD,MAAM,aAAc,SAAQ,KAAK;IACtB,aAAa,CAAoB;IAE1C,YAAY,UAAkB,EAAE,IAAuB;QACrD,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;QAC/F,IAAI,UAAU,KAAK,uBAAuB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,IAAI,aAAa;QACf,OAAO,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5C,CAAC;CACF;AAED,MAAM,CAAC,MAAM,cAAc,GAA+C,MAAM,CAAC,MAAM,CACrF,MAAM,CAAC,WAAW,CACf,MAAM,CAAC,IAAI,CAAC,cAAc,CAAyB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACjE,IAAI;IACJ,IAAI,aAAa,CAAC,uBAAuB,EAAE,IAAI,CAAC;CACjD,CAAC,CAC4C,CACjD,CAAC;AAEF,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,aAAa,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrG,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"operator-error.js","sourceRoot":"","sources":["../src/operator-error.ts"],"names":[],"mappings":"AAqCA,MAAM,cAAc,GAAgD,MAAM,CAAC,MAAM,CAAC;IAChF,mBAAmB,EAAE,0BAA0B;IAC/C,oBAAoB,EAAE,2BAA2B;IACjD,oBAAoB,EAAE,2BAA2B;IACjD,kBAAkB,EAAE,qCAAqC;IACzD,kBAAkB,EAAE,qCAAqC;IACzD,kBAAkB,EAAE,+CAA+C;IACnE,yBAAyB,EAAE,gCAAgC;IAC3D,uBAAuB,EAAE,kCAAkC;IAC3D,uBAAuB,EAAE,2CAA2C;IACpE,oBAAoB,EAAE,8DAA8D;IACpF,iBAAiB,EAAE,0DAA0D;IAC7E,iBAAiB,EAAE,6CAA6C;IAChE,aAAa,EAAE,8EAA8E;IAC7F,WAAW,EAAE,6EAA6E;IAC1F,gBAAgB,EAAE,iDAAiD;IACnE,oBAAoB,EAAE,oEAAoE;IAC1F,iBAAiB,EAAE,qEAAqE;IACxF,mBAAmB,EAAE,mJAAmJ;IACxK,iBAAiB,EAAE,2EAA2E;IAC9F,cAAc,EAAE,iEAAiE;IACjF,mBAAmB,EAAE,gEAAgE;IACrF,oBAAoB,EAAE,sEAAsE;IAC5F,kBAAkB,EAAE,2EAA2E;IAC/F,sBAAsB,EAAE,sEAAsE;IAC9F,sBAAsB,EAAE,2DAA2D;IACnF,oBAAoB,EAAE,4DAA4D;IAClF,gBAAgB,EAAE,uCAAuC;IACzD,eAAe,EAAE,wCAAwC;IACzD,gBAAgB,EAAE,oEAAoE;IACtF,eAAe,EAAE,uGAAuG;IACxH,qBAAqB,EAAE,6EAA6E;IACpG,0BAA0B,EAAE,0LAA0L;IACtN,yBAAyB,EAAE,gDAAgD;IAC3E,gCAAgC,EAAE,0EAA0E;IAC5G,yBAAyB,EAAE,sDAAsD;CAClF,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,IAAI,OAAO,EAA6B,CAAC;AACpE,MAAM,qBAAqB,GAAG,IAAI,OAAO,EAAkB,CAAC;AAC5D,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAElD,MAAM,aAAc,SAAQ,KAAK;IACtB,aAAa,CAAoB;IAE1C,YAAY,UAAkB,EAAE,IAAuB,EAAE,aAAsB;QAC7E,KAAK,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAClH,IAAI,UAAU,KAAK,uBAAuB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnC,qBAAqB,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,IAAI,aAAa;QACf,OAAO,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC/E,CAAC;CACF;AAED,MAAM,CAAC,MAAM,cAAc,GAA+C,MAAM,CAAC,MAAM,CACrF,MAAM,CAAC,WAAW,CACf,MAAM,CAAC,IAAI,CAAC,cAAc,CAAyB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACjE,IAAI;IACJ,IAAI,aAAa,CAAC,uBAAuB,EAAE,IAAI,CAAC;CACjD,CAAC,CAC4C,CACjD,CAAC;AAEF,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,aAAa,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrG,OAAO,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,YAA+B;IAC1E,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CACtD,CAAC,4EAA4E,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,IAAI,aAAa,CACtB,uBAAuB,EACvB,2BAA2B,EAC3B,4EAA4E,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtG,CAAC;AACJ,CAAC"}

package/dist/role-section.d.ts

@@ -0,0 +1,14 @@
+export type RoleSectionPatchOp = {
+    readonly action: "replace";
+    readonly heading: string;
+    readonly body: string;
+} | {
+    readonly action: "insert";
+    readonly heading: string;
+    readonly body: string;
+    readonly after?: string | null;
+} | {
+    readonly action: "delete";
+    readonly heading: string;
+};
+export declare function patchRoleSectionText(text: string, operation: RoleSectionPatchOp): string;

package/dist/role-section.js

@@ -0,0 +1,87 @@
+export function patchRoleSectionText(text, operation) {
+    validateHeading(operation.heading);
+    const sections = parseSections(text);
+    const target = normalizedHeading(operation.heading);
+    const index = sections.findIndex((section) => section.heading !== null && normalizedHeading(section.heading) === target);
+    if (operation.action === "replace") {
+        if (index === -1)
+            throw new Error("Role section not found.");
+        sections[index] = renderedSection(operation.heading, operation.body);
+        return serializeSections(sections);
+    }
+    if (operation.action === "delete") {
+        if (index === -1)
+            throw new Error("Role section not found.");
+        sections.splice(index, 1);
+        return serializeSections(sections);
+    }
+    if (index !== -1)
+        throw new Error("Role section already exists.");
+    const section = renderedSection(operation.heading, operation.body);
+    if (operation.after == null) {
+        ensureTrailingNewline(sections, sections.length - 1);
+        sections.push(section);
+        return serializeSections(sections);
+    }
+    validateHeading(operation.after);
+    const after = normalizedHeading(operation.after);
+    const afterIndex = sections.findIndex((candidate) => candidate.heading !== null && normalizedHeading(candidate.heading) === after);
+    if (afterIndex === -1)
+        throw new Error("Role section insertion point does not exist.");
+    ensureTrailingNewline(sections, afterIndex);
+    sections.splice(afterIndex + 1, 0, section);
+    return serializeSections(sections);
+}
+function parseSections(text) {
+    const sections = [];
+    const lines = text.split("\n");
+    let heading = null;
+    let body = "";
+    for (let index = 0; index < lines.length; index += 1) {
+        const line = lines[index];
+        const sourceLine = index < lines.length - 1 ? `${line}\n` : line;
+        if (isLabelLine(line)) {
+            sections.push({ heading, body });
+            heading = line.slice(0, -1).trim();
+            body = sourceLine;
+        }
+        else {
+            body += sourceLine;
+        }
+    }
+    sections.push({ heading, body });
+    return sections;
+}
+function isLabelLine(line) {
+    if (/^\s/u.test(line) || !line.endsWith(":"))
+        return false;
+    const label = line.slice(0, -1);
+    return label.length > 0 && label.length <= 60 && !label.includes(":") &&
+        !/^[*\-#>`]/u.test(label);
+}
+function renderedSection(heading, body) {
+    const normalizedBody = body === "" || body.endsWith("\n") ? body : `${body}\n`;
+    return {
+        heading: heading.trim(),
+        body: `${heading.trim()}:\n${normalizedBody}`,
+    };
+}
+function ensureTrailingNewline(sections, index) {
+    const section = sections[index];
+    if (section !== undefined && section.body !== "" && !section.body.endsWith("\n")) {
+        sections[index] = { ...section, body: `${section.body}\n` };
+    }
+}
+function serializeSections(sections) {
+    return sections.map((section) => section.body).join("");
+}
+function normalizedHeading(heading) {
+    return heading.trim().toLowerCase();
+}
+function validateHeading(heading) {
+    if (typeof heading !== "string" || /[\r\n]/u.test(heading) ||
+        !isLabelLine(`${heading.trim()}:`)) {
+        throw new TypeError("Role section heading is invalid.");
+    }
+}
+//# sourceMappingURL=role-section.js.map

package/dist/role-section.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-section.js","sourceRoot":"","sources":["../src/role-section.ts"],"names":[],"mappings":"AAeA,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,SAA6B;IAC9E,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAC3C,OAAO,CAAC,OAAO,KAAK,IAAI,IAAI,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,MAAM,CAC1E,CAAC;IAEF,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACnC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7D,QAAQ,CAAC,KAAK,CAAC,GAAG,eAAe,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACrE,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7D,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC1B,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAElE,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IACnE,IAAI,SAAS,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;QAC5B,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IACD,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CAClD,SAAS,CAAC,OAAO,KAAK,IAAI,IAAI,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,KAAK,CAC7E,CAAC;IACF,IAAI,UAAU,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACvF,qBAAqB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC5C,QAAQ,CAAC,MAAM,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5C,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACjE,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACjC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,GAAG,UAAU,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,IAAI,IAAI,UAAU,CAAC;QACrB,CAAC;IACH,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACjC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,IAAY;IACpD,MAAM,cAAc,GAAG,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC;IAC/E,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;QACvB,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,cAAc,EAAE;KAC9C,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAuB,EAAE,KAAa;IACnE,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjF,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgC;IACzD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACxC,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;QACtD,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC"}

package/dist/service.d.ts

@@ -1,17 +1,21 @@
 import { type BootstrapResult } from "./bootstrap.js";
+import { type CubeInvitationResult } from "./credentials.js";
 import { type HttpsServerOptions, type RunningServer } from "./https-server.js";
 import { openStore, type StorageLimits } from "./store.js";
 import type { CubeAccess } from "./store.js";
 export interface ServerService {
     readonly start: (args: readonly string[]) => Promise<void>;
-    readonly setup?: () => Promise<BootstrapResult>;
+    readonly setup?: (options: SetupOptions) => Promise<BootstrapResult>;
     readonly rotateClient?: (clientId: string) => Promise<string>;
     readonly revokeClient?: (clientId: string) => Promise<void>;
     readonly grantClient?: (clientId: string, cubeId: string, access: CubeAccess) => Promise<void>;
     readonly ungrantClient?: (clientId: string, cubeId: string) => Promise<void>;
-    readonly createClientInvitation?: (recoveryCredential: string) => Promise<string>;
+    readonly createClientInvitation?: (recoveryCredential: string, cubeSelector?: string, access?: CubeAccess) => Promise<string | CubeInvitationResult>;
     readonly replaceOwnerInvitation?: (recoveryCredential: string) => Promise<string>;
 }
+export interface SetupOptions {
+    readonly reinitialize: boolean;
+}
 export interface ServerEnvironment {
     readonly BORG_SERVER_TLS_KEY_FILE?: string;
     readonly BORG_SERVER_TLS_CERT_FILE?: string;
@@ -29,6 +33,7 @@ interface ServiceDependencies {
     readonly startServer: (options: HttpsServerOptions) => Promise<RunningServer>;
     readonly onStarted: (origin: string) => void;
     readonly waitForShutdown: (server: RunningServer, signal?: AbortSignal) => Promise<void>;
+    readonly debugOutput?: (line: string) => void;
     readonly installShutdownHandlers?: () => {
         readonly signal: AbortSignal;
         readonly dispose: () => void;
@@ -48,12 +53,14 @@ export declare function assertLanCaKeyOffline(runtimeDataDirectory: string): Pro
 export declare function selectServerEnvironment(environment: NodeJS.ProcessEnv): ServerEnvironment;
 export declare function resolveStorageLimits(environment: ServerEnvironment): StorageLimits;
 export declare const nodeServerService: ServerService;
+export declare function setupNodeServerInstallation(setupDataDirectory: string, bindHost: string, options: SetupOptions): Promise<BootstrapResult>;
 export declare function createOfflineCredentialService(offlineDataDirectory: string): Pick<Required<ServerService>, "rotateClient" | "revokeClient" | "grantClient" | "ungrantClient" | "createClientInvitation" | "replaceOwnerInvitation">;
 interface RuntimeLock {
     readonly release: () => Promise<void>;
 }
 export declare function isFatalTeardownError(error: unknown): boolean;
-export declare function acquireRuntimeLock(runtimeDataDirectory: string): Promise<RuntimeLock>;
+export declare function acquireRuntimeLock(runtimeDataDirectory: string, purpose?: "server" | "exclusive-admin"): Promise<RuntimeLock>;
+export declare function acquireInvitationMintLock(runtimeDataDirectory: string): Promise<RuntimeLock>;
 export declare function installProcessShutdownHandlers(): {
     readonly signal: AbortSignal;
     readonly dispose: () => void;