borgmcp-server 0.1.1

package/LICENSE

@@ -0,0 +1,105 @@
+# Functional Source License, Version 1.1, ALv2 Future License
+
+## Abbreviation
+
+FSL-1.1-ALv2
+
+## Notice
+
+Copyright 2026 Byte Ventures
+
+## Terms and Conditions
+
+### Licensor ("We")
+
+The party offering the Software under these Terms and Conditions.
+
+### The Software
+
+The "Software" is each version of the software that we make available under
+these Terms and Conditions, as indicated by our inclusion of these Terms and
+Conditions with the Software.
+
+### License Grant
+
+Subject to your compliance with this License Grant and the Patents,
+Redistribution and Trademark clauses below, we hereby grant you the right to
+use, copy, modify, create derivative works, publicly perform, publicly display
+and redistribute the Software for any Permitted Purpose identified below.
+
+### Permitted Purpose
+
+A Permitted Purpose is any purpose other than a Competing Use. A Competing Use
+means making the Software available to others in a commercial product or
+service that:
+
+1. substitutes for the Software;
+
+2. substitutes for any other product or service we offer using the Software
+   that exists as of the date we make the Software available; or
+
+3. offers the same or substantially similar functionality as the Software.
+
+Permitted Purposes specifically include using the Software:
+
+1. for your internal use and access;
+
+2. for non-commercial education;
+
+3. for non-commercial research; and
+
+4. in connection with professional services that you provide to a licensee
+   using the Software in accordance with these Terms and Conditions.
+
+### Patents
+
+To the extent your use for a Permitted Purpose would necessarily infringe our
+patents, the license grant above includes a license under our patents. If you
+make a claim against any party that the Software infringes or contributes to
+the infringement of any patent, then your patent license to the Software ends
+immediately.
+
+### Redistribution
+
+The Terms and Conditions apply to all copies, modifications and derivatives of
+the Software.
+
+If you redistribute any copies, modifications or derivatives of the Software,
+you must include a copy of or a link to these Terms and Conditions and not
+remove any copyright notices provided in or with the Software.
+
+### Disclaimer
+
+THE SOFTWARE IS PROVIDED "AS IS" AND WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING WITHOUT LIMITATION WARRANTIES OF FITNESS FOR A PARTICULAR
+PURPOSE, MERCHANTABILITY, TITLE OR NON-INFRINGEMENT.
+
+IN NO EVENT WILL WE HAVE ANY LIABILITY TO YOU ARISING OUT OF OR RELATED TO THE
+SOFTWARE, INCLUDING INDIRECT, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES,
+EVEN IF WE HAVE BEEN INFORMED OF THEIR POSSIBILITY IN ADVANCE.
+
+### Trademarks
+
+Except for displaying the License Details and identifying us as the origin of
+the Software, you have no right under these Terms and Conditions to use our
+trademarks, trade names, service marks or product names.
+
+## Grant of Future License
+
+We hereby irrevocably grant you an additional license to use the Software under
+the Apache License, Version 2.0 that is effective on the second anniversary of
+the date we make the Software available. On or after that date, you may use the
+Software under the Apache License, Version 2.0, in which case the following
+will apply:
+
+Licensed under the Apache License, Version 2.0 (the "License"); you may not use
+this file except in compliance with the License.
+
+You may obtain a copy of the License at
+
+http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software distributed
+under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
+CONDITIONS OF ANY KIND, either express or implied. See the License for the
+specific language governing permissions and limitations under the License.

package/NOTICE

@@ -0,0 +1,8 @@
+borgmcp-server
+Copyright 2026 Byte Ventures
+
+This product is licensed under the Functional Source License, Version 1.1,
+ALv2 Future License (FSL-1.1-ALv2). See LICENSE for the controlling terms.
+
+This product includes third-party software. See THIRD_PARTY_NOTICES.md and the
+CycloneDX SBOM distributed with each release workflow artifact.

package/README.md

@@ -0,0 +1,119 @@
+# borgmcp-server
+
+`borgmcp-server` is the self-hosted coordination authority for Borg MCP. It
+stores cube state locally and serves the Borg protocol over authenticated
+HTTPS.
+
+## Release status
+
+The current source is the unpublished `0.1.1-preview` recovery release candidate.
+Purpose-bound owner enrollment, idempotent multi-cube creation, and stable
+prior-seat reattachment have completed coordinated client/server security
+review and process dogfood against the audited exact `borgmcp-shared@0.3.0`
+registry release.
+
+Setup prepares local identity and storage and prints one-time recovery and
+owner-enrollment secrets; it creates no cube. The package remains unreleased
+until the exact release commit and tagged artifact complete the documented
+review, authorization, and protected-publication gates.
+
+## Requirements
+
+- Node.js 22.12 or later
+- npm 10 or later
+- A private local data directory with sufficient disk space
+
+## Install after publication
+
+The global package command becomes available only after the pending npm release
+completes. Until then, source and preview reviewers should follow the release
+status above and the [release runbook](docs/releasing.md), not expect this
+registry install to succeed.
+
+```sh
+npm install --global borgmcp-server
+```
+
+## Set up a local server
+
+The default data directory is `~/.borg/server`. Setup creates the local
+database, credential-digest key, local certificate authority, server
+certificate, one recovery credential, and one enrollment invitation. It creates
+no cube. Run it in a private terminal because both secrets are printed only
+once.
+
+```sh
+borg-mcp-server setup
+borg-mcp-server start
+```
+
+The server listens on `https://127.0.0.1:7091` by default. Use
+`BORG_SERVER_DATA_DIR` to select another data directory.
+
+## Network configuration
+
+Loopback is the safe default. Binding to a private LAN address requires both an
+explicit address and `--lan` consent:
+
+```sh
+borg-mcp-server start --host 192.168.1.20 --port 7091 --lan
+```
+
+Before LAN startup, move `ca.key` out of the runtime data directory. Keep the
+CA private key offline; the running service does not need it. Public, wildcard,
+unspecified, multicast, and otherwise unsafe bind addresses are rejected.
+
+TLS files may instead be supplied explicitly with
+`BORG_SERVER_TLS_KEY_FILE`, `BORG_SERVER_TLS_CERT_FILE`, and
+`BORG_SERVER_TLS_CA_FILE`. Run `borg-mcp-server help` for the complete command
+summary.
+
+## Offline credential administration
+
+Stop the server before all offline client administration:
+
+```sh
+borg-mcp-server client-rotate <client-id>
+borg-mcp-server client-revoke <client-id>
+borg-mcp-server client-invite
+borg-mcp-server owner-invite
+borg-mcp-server client-grant <client-id> <cube-id> <read|write|manage>
+borg-mcp-server client-ungrant <client-id> <cube-id>
+```
+
+Invitation commands read the recovery credential from a private hidden terminal
+prompt, never argv or environment. Rotation and invitation commands print their
+replacement secret once. Treat setup, enrollment, invitation, and rotation
+output as secrets; do not paste it into issues, logs, or chat.
+
+## Capacity controls
+
+The server accepts positive integer values for these optional environment
+variables:
+
+- `BORG_SERVER_MAX_ACTIVITY_ENTRIES_PER_CUBE`
+- `BORG_SERVER_MAX_DATABASE_BYTES`
+- `BORG_SERVER_MIN_FREE_DISK_BYTES`
+
+Invalid values fail closed before the server starts.
+Cube creation is additionally bounded to 100 cubes per creating client and
+1,000 cubes per server. Exact idempotent retries do not consume quota twice.
+
+## Library entry point
+
+The package exports `runCli`, `CliIo`, and `ServerService` for controlled
+embedding. Most installations should use the `borg-mcp-server` executable.
+
+## Security and support
+
+Read [SECURITY.md](SECURITY.md) before exposing the service beyond loopback.
+Use GitHub Issues for reproducible non-sensitive defects. Report
+vulnerabilities privately as described in the security policy.
+
+## License
+
+This server is licensed under the Functional Source License, Version 1.1,
+ALv2 Future License (`FSL-1.1-ALv2`). Each released version becomes available
+under Apache License 2.0 on the second anniversary of the date that version was
+made available. See [LICENSE](LICENSE) for the controlling terms and
+[THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md) for dependency disclosures.

package/SECURITY.md

@@ -0,0 +1,38 @@
+# Security policy
+
+## Supported versions
+
+Security fixes are provided for the latest release of `borgmcp-server`. Upgrade
+to the newest published version before reporting a problem that may already be
+resolved.
+
+## Reporting a vulnerability
+
+Use GitHub's private vulnerability reporting for this repository:
+
+https://github.com/Byte-Ventures/borg-mcp-server/security/advisories/new
+
+Do not open a public issue for a suspected vulnerability. Include the affected
+version, impact, prerequisites, and minimal reproduction steps. Remove all real
+credentials, invitation tokens, private keys, database contents, and private
+deployment details from the report.
+
+We will acknowledge the report through the private advisory and coordinate
+validation, remediation, and disclosure there. Please do not disclose the
+issue publicly until a release or other mitigation is available and disclosure
+has been coordinated.
+
+## Deployment guidance
+
+- Keep the default loopback binding unless private-LAN access is necessary.
+- Treat `--lan` as explicit consent to network exposure, not as a firewall or
+  access-control substitute.
+- Keep the local CA private key offline whenever the server is running on a
+  private LAN.
+- Restrict the data directory and all generated credentials to the service
+  account.
+- Capture one-time setup and rotation credentials only in a private terminal.
+- Stop the server before offline credential rotation or revocation.
+- Back up sensitive state using encrypted storage and test restoration in a
+  separate environment.
+- Review dependency and release provenance before upgrading.

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,35 @@
+# Third-party notices
+
+`borgmcp-server` installs the following production dependency tree from the
+public npm registry. Copyright remains with the respective authors. The
+license identifiers below are taken from the exact locked package metadata;
+refer to each installed package for its complete license text.
+
+| Package | Version | License |
+| --- | --- | --- |
+| `@noble/hashes` | 1.4.0 | MIT |
+| `@peculiar/asn1-cms` | 2.8.0 | MIT |
+| `@peculiar/asn1-csr` | 2.8.0 | MIT |
+| `@peculiar/asn1-ecc` | 2.8.0 | MIT |
+| `@peculiar/asn1-pfx` | 2.8.0 | MIT |
+| `@peculiar/asn1-pkcs8` | 2.8.0 | MIT |
+| `@peculiar/asn1-pkcs9` | 2.8.0 | MIT |
+| `@peculiar/asn1-rsa` | 2.8.0 | MIT |
+| `@peculiar/asn1-schema` | 2.8.0 | MIT |
+| `@peculiar/asn1-x509` | 2.8.0 | MIT |
+| `@peculiar/asn1-x509-attr` | 2.8.0 | MIT |
+| `@peculiar/utils` | 2.0.3 | MIT |
+| `@peculiar/x509` | 1.14.3 | MIT |
+| `asn1js` | 3.0.10 | BSD-3-Clause |
+| `bytestreamjs` | 2.0.1 | BSD-3-Clause |
+| `pkijs` | 3.4.0 | BSD-3-Clause |
+| `pvtsutils` | 1.3.6 | MIT |
+| `pvutils` | 1.1.5 | MIT |
+| `reflect-metadata` | 0.2.2 | Apache-2.0 |
+| `selfsigned` | 5.5.0 | MIT |
+| `tslib` | 1.14.1, 2.8.1 | 0BSD |
+| `tsyringe` | 4.10.0 | MIT |
+
+The release workflow generates a CycloneDX SBOM from `npm-shrinkwrap.json` for
+the exact artifact under review. Development-only packages are recorded in the
+source shrinkwrap and generated SBOM but are not installed for package users.

package/dist/bootstrap.d.ts

@@ -0,0 +1,18 @@
+export interface BootstrapResult {
+    readonly serverId: string;
+    readonly caFingerprint: string;
+    readonly recoveryCredential: string;
+    readonly initialInvitation: string;
+    readonly paths: {
+        readonly database: string;
+        readonly digestKey: string;
+        readonly caKey: string;
+        readonly caCertificate: string;
+        readonly serverKey: string;
+        readonly serverCertificate: string;
+        readonly config: string;
+    };
+}
+export declare function bootstrapServer(dataDirectory: string, bindHost?: string, clock?: () => Date): Promise<BootstrapResult>;
+export declare function loadDigestKey(path: string): Promise<Buffer>;
+export declare function loadTlsPrivateKey(path: string): Promise<Buffer>;

package/dist/bootstrap.js

@@ -0,0 +1,104 @@
+import { createHash, randomBytes, randomUUID, X509Certificate } from "node:crypto";
+import { lstat, readFile, stat, writeFile } from "node:fs/promises";
+import { join, resolve } from "node:path";
+import { generate } from "selfsigned";
+import { CredentialAuthority, CredentialDigester } from "./credentials.js";
+import { openStore } from "./store.js";
+export async function bootstrapServer(dataDirectory, bindHost = "127.0.0.1", clock = () => new Date()) {
+    const directory = resolve(dataDirectory);
+    const paths = {
+        database: join(directory, "borg.db"),
+        digestKey: join(directory, "credential-digest.key"),
+        caKey: join(directory, "ca.key"),
+        caCertificate: join(directory, "ca.crt"),
+        serverKey: join(directory, "server.key"),
+        serverCertificate: join(directory, "server.crt"),
+        config: join(directory, "server.json"),
+    };
+    const ca = await generate([{ name: "commonName", value: "Borg Local CA" }], {
+        algorithm: "sha256",
+        keyType: "ec",
+        extensions: [
+            { name: "basicConstraints", cA: true, pathLenConstraint: 0, critical: true },
+            { name: "keyUsage", keyCertSign: true, cRLSign: true, critical: true },
+        ],
+    });
+    const server = await generate([{ name: "commonName", value: "Borg Local Server" }], {
+        algorithm: "sha256",
+        keyType: "ec",
+        ca: { key: ca.private, cert: ca.cert },
+        extensions: [
+            { name: "basicConstraints", cA: false, critical: true },
+            { name: "keyUsage", digitalSignature: true, keyAgreement: true, critical: true },
+            { name: "extKeyUsage", serverAuth: true },
+            { name: "subjectAltName", altNames: [{ type: 7, ip: bindHost }] },
+        ],
+    });
+    const serverId = randomUUID();
+    const caCertificate = new X509Certificate(ca.cert);
+    const caFingerprint = createHash("sha256")
+        .update(caCertificate.publicKey.export({ type: "spki", format: "der" }))
+        .digest("hex");
+    const digestKey = randomBytes(32);
+    const runtime = await openStore({ path: paths.database, clock });
+    try {
+        await Promise.all([
+            writePrivate(paths.digestKey, digestKey),
+            writePrivate(paths.caKey, ca.private),
+            writePrivate(paths.caCertificate, ca.cert),
+            writePrivate(paths.serverKey, server.private),
+            writePrivate(paths.serverCertificate, server.cert),
+            writePrivate(paths.config, JSON.stringify({
+                server_id: serverId,
+                ca_spki_sha256: caFingerprint,
+                bind_host: bindHost,
+            }, null, 2)),
+        ]);
+        const digester = new CredentialDigester(digestKey);
+        digestKey.fill(0);
+        try {
+            const authority = new CredentialAuthority(runtime.credentials, digester, clock);
+            const recoveryCredential = authority.createRecoveryCredential();
+            const initialInvitation = authority.createBootstrapInvitation(15 * 60_000);
+            return {
+                serverId,
+                caFingerprint,
+                recoveryCredential,
+                initialInvitation,
+                paths,
+            };
+        }
+        finally {
+            digester.destroy();
+        }
+    }
+    finally {
+        digestKey.fill(0);
+        runtime.close();
+    }
+}
+async function writePrivate(path, value) {
+    await writeFile(path, value, { flag: "wx", mode: 0o600 });
+    if (((await stat(path)).mode & 0o777) !== 0o600) {
+        throw new Error("Bootstrap file permissions are not private.");
+    }
+}
+export async function loadDigestKey(path) {
+    const key = await loadPrivateFile(path, "Credential digest key");
+    if (key.length !== 32) {
+        key.fill(0);
+        throw new Error("Credential digest key is invalid or not private.");
+    }
+    return key;
+}
+export async function loadTlsPrivateKey(path) {
+    return loadPrivateFile(path, "TLS private key");
+}
+async function loadPrivateFile(path, label) {
+    const metadata = await lstat(path);
+    if (!metadata.isFile() || (metadata.mode & 0o077) !== 0) {
+        throw new Error(`${label} is invalid or not private.`);
+    }
+    return readFile(path);
+}
+//# sourceMappingURL=bootstrap.js.map

package/dist/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../src/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAkBvC,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,aAAqB,EACrB,QAAQ,GAAG,WAAW,EACtB,KAAK,GAAe,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;IAEpC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG;QACZ,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC;QACpC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,uBAAuB,CAAC;QACnD,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC;QAChC,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC;QACxC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC;QACxC,iBAAiB,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC;QAChD,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC;KACvC,CAAC;IACF,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,EAAE;QAC1E,SAAS,EAAE,QAAQ;QACnB,OAAO,EAAE,IAAI;QACb,UAAU,EAAE;YACV,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC5E,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;SACvE;KACF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,EAAE;QAClF,SAAS,EAAE,QAAQ;QACnB,OAAO,EAAE,IAAI;QACb,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;QACtC,UAAU,EAAE;YACV,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;YACvD,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;YAChF,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE;YACzC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;SAClE;KACF,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;IAC9B,MAAM,aAAa,GAAG,IAAI,eAAe,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC;SACvC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;SACvE,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC;YACxC,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC;YACrC,YAAY,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC;YAC1C,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC;YAC7C,YAAY,CAAC,KAAK,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC;YAClD,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;gBACxC,SAAS,EAAE,QAAQ;gBACnB,cAAc,EAAE,aAAa;gBAC7B,SAAS,EAAE,QAAQ;aACpB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;SACb,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACnD,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YAChF,MAAM,kBAAkB,GAAG,SAAS,CAAC,wBAAwB,EAAE,CAAC;YAChE,MAAM,iBAAiB,GAAG,SAAS,CAAC,yBAAyB,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;YAC3E,OAAO;gBACL,QAAQ;gBACR,aAAa;gBACb,kBAAkB;gBAClB,iBAAiB;gBACjB,KAAK;aACN,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,KAAsB;IAC9D,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAC9C,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;IACjE,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAClD,OAAO,eAAe,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,KAAa;IACxD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,7 @@
+import type { ServerService } from "./service.js";
+export interface CliIo {
+    readonly stdout: (message: string) => void;
+    readonly stderr: (message: string) => void;
+    readonly readSecret?: (prompt: string) => Promise<string>;
+}
+export declare function runCli(args: readonly string[], service: ServerService, io: CliIo): Promise<number>;

package/dist/cli.js

@@ -0,0 +1,96 @@
+const usage = `Usage: borg-mcp-server <command> [options]
+
+Commands:
+  setup    Prepare an offline server installation
+  start    Start the server process
+  client-rotate <client-id>  Rotate one client credential offline
+  client-revoke <client-id>  Revoke one client and its credentials offline
+  client-grant <client-id> <cube-id> <read|write|manage>  Set one offline cube grant
+  client-ungrant <client-id> <cube-id>  Remove one offline cube grant
+  client-invite  Create one ordinary client invitation using a private recovery prompt
+  owner-invite   Replace the unclaimed owner invitation using a private recovery prompt
+  help     Show this help
+
+Start options:
+  --host <ip>      Explicit bind address (default: 127.0.0.1)
+  --port <number>  Listen port (default: 7091)
+  --lan            Consent to this start on a private LAN address
+
+TLS files:
+  BORG_SERVER_DATA_DIR (default: ~/.borg/server), or explicit
+  BORG_SERVER_TLS_KEY_FILE, BORG_SERVER_TLS_CERT_FILE, and BORG_SERVER_TLS_CA_FILE
+
+Stop the server before running offline client administration commands.`;
+export async function runCli(args, service, io) {
+    const [command, ...extraArgs] = args;
+    switch (command) {
+        case "setup":
+            if (extraArgs.length !== 0)
+                return invalidArguments(io);
+            if (service.setup === undefined) {
+                io.stderr("Server setup is unavailable.");
+                return 1;
+            }
+            const result = await service.setup();
+            io.stdout(`Server setup complete.\nRecovery credential (shown once): ${result.recoveryCredential}\nInitial enrollment invitation (shown once): ${result.initialInvitation}`);
+            return 0;
+        case "start":
+            await service.start(extraArgs);
+            return 0;
+        case "client-rotate":
+            if (extraArgs.length !== 1 || service.rotateClient === undefined)
+                return invalidArguments(io);
+            io.stdout(`Client credential rotated (shown once): ${await service.rotateClient(extraArgs[0])}`);
+            return 0;
+        case "client-revoke":
+            if (extraArgs.length !== 1 || service.revokeClient === undefined)
+                return invalidArguments(io);
+            await service.revokeClient(extraArgs[0]);
+            io.stdout("Client revoked.");
+            return 0;
+        case "client-grant": {
+            if (extraArgs.length !== 3 || service.grantClient === undefined)
+                return invalidArguments(io);
+            const access = extraArgs[2];
+            if (access !== "read" && access !== "write" && access !== "manage")
+                return invalidArguments(io);
+            await service.grantClient(extraArgs[0], extraArgs[1], access);
+            io.stdout("Client cube grant updated.");
+            return 0;
+        }
+        case "client-ungrant":
+            if (extraArgs.length !== 2 || service.ungrantClient === undefined)
+                return invalidArguments(io);
+            await service.ungrantClient(extraArgs[0], extraArgs[1]);
+            io.stdout("Client cube grant removed.");
+            return 0;
+        case "client-invite":
+        case "owner-invite": {
+            if (extraArgs.length !== 0 || io.readSecret === undefined)
+                return invalidArguments(io);
+            const operation = command === "client-invite"
+                ? service.createClientInvitation
+                : service.replaceOwnerInvitation;
+            if (operation === undefined)
+                return invalidArguments(io);
+            const recovery = await io.readSecret("Recovery credential: ");
+            const invitation = await operation(recovery);
+            io.stdout(`Enrollment invitation (shown once): ${invitation}`);
+            return 0;
+        }
+        case "help":
+        case "--help":
+        case "-h":
+        case undefined:
+            io.stdout(usage);
+            return 0;
+        default:
+            io.stderr("Unknown command.");
+            return 1;
+    }
+}
+function invalidArguments(io) {
+    io.stderr("Invalid command arguments.");
+    return 1;
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAQA,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;;uEAsByD,CAAC;AAExE,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,IAAuB,EACvB,OAAsB,EACtB,EAAS;IAET,MAAM,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC;IAErC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,OAAO;YACV,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,gBAAgB,CAAC,EAAE,CAAC,CAAC;YACxD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAChC,EAAE,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC;gBAC1C,OAAO,CAAC,CAAC;YACX,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YACrC,EAAE,CAAC,MAAM,CAAC,6DAA6D,MAAM,CAAC,kBAAkB,iDAAiD,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC;YAC7K,OAAO,CAAC,CAAC;QACX,KAAK,OAAO;YACV,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/B,OAAO,CAAC,CAAC;QACX,KAAK,eAAe;YAClB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;gBAAE,OAAO,gBAAgB,CAAC,EAAE,CAAC,CAAC;YAC9F,EAAE,CAAC,MAAM,CAAC,2CAA2C,MAAM,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,CAAC;YAClG,OAAO,CAAC,CAAC;QACX,KAAK,eAAe;YAClB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;gBAAE,OAAO,gBAAgB,CAAC,EAAE,CAAC,CAAC;YAC9F,MAAM,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC;YAC1C,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAC7B,OAAO,CAAC,CAAC;QACX,KAAK,cAAc,EAAE,CAAC;YACpB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;gBAAE,OAAO,gBAAgB,CAAC,EAAE,CAAC,CAAC;YAC7F,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,QAAQ;gBAAE,OAAO,gBAAgB,CAAC,EAAE,CAAC,CAAC;YAChG,MAAM,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAE,EAAE,SAAS,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,CAAC;YAChE,EAAE,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;YACxC,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,gBAAgB;YACnB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS;gBAAE,OAAO,gBAAgB,CAAC,EAAE,CAAC,CAAC;YAC/F,MAAM,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAE,EAAE,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC;YAC1D,EAAE,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;YACxC,OAAO,CAAC,CAAC;QACX,KAAK,eAAe,CAAC;QACrB,KAAK,cAAc,EAAE,CAAC;YACpB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS;gBAAE,OAAO,gBAAgB,CAAC,EAAE,CAAC,CAAC;YACvF,MAAM,SAAS,GAAG,OAAO,KAAK,eAAe;gBAC3C,CAAC,CAAC,OAAO,CAAC,sBAAsB;gBAChC,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;YACnC,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO,gBAAgB,CAAC,EAAE,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC;YAC9D,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC7C,EAAE,CAAC,MAAM,CAAC,uCAAuC,UAAU,EAAE,CAAC,CAAC;YAC/D,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI,CAAC;QACV,KAAK,SAAS;YACZ,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACjB,OAAO,CAAC,CAAC;QACX;YACE,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC9B,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,EAAS;IACjC,EAAE,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;IACxC,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/coordination-api.d.ts

@@ -0,0 +1,25 @@
+import type { Principal } from "./principal.js";
+import type { CredentialAuthority } from "./credentials.js";
+import { type StoreRuntime } from "./store.js";
+export interface CoordinationRequest {
+    readonly method: string;
+    readonly path: string;
+    readonly principal: Principal;
+    readonly body?: unknown;
+    readonly cursor?: string;
+    readonly signal: AbortSignal;
+}
+export interface CoordinationResponse {
+    readonly status: number;
+    readonly body?: unknown;
+    readonly stream?: AsyncIterable<string>;
+}
+export declare class CoordinationApi {
+    #private;
+    constructor(runtime: StoreRuntime, authority: CredentialAuthority);
+    armReplayTransition(): {
+        readonly reached: Promise<void>;
+        readonly release: () => void;
+    };
+    handle(request: CoordinationRequest): Promise<CoordinationResponse>;
+}