borgmcp-server 0.1.1

package/dist/operator-error.js

@@ -0,0 +1,63 @@
+const publicMessages = Object.freeze({
+    START_LAN_DUPLICATE: "Provide --lan only once.",
+    START_HOST_DUPLICATE: "Provide --host only once.",
+    START_PORT_DUPLICATE: "Provide --port only once.",
+    START_HOST_MISSING: "Provide an IP address after --host.",
+    START_PORT_MISSING: "Provide a port number after --port.",
+    START_PORT_INVALID: "Provide --port as an integer from 0 to 65535.",
+    START_OPTION_UNKNOWN: "Use only documented start options; run borg-mcp-server help.",
+    BIND_PORT_INVALID: "Configure the listen port as an integer from 0 to 65535.",
+    BIND_HOST_INVALID: "Configure --host as an explicit IP address.",
+    BIND_WILDCARD: "Choose a specific loopback or private-LAN IP; wildcard binds are prohibited.",
+    BIND_PUBLIC: "Choose a loopback or private-LAN IP; public-routable binds are unsupported.",
+    BIND_LAN_CONSENT: "Add --lan to consent to this private-LAN start.",
+    SERVER_FILES_MISSING: "Configure BORG_SERVER_DATA_DIR or the required TLS file variables.",
+    DATA_PATH_SYMLINK: "Choose a BORG_SERVER_DATA_DIR path that contains no symbolic links.",
+    LAN_CA_KEY_ONLINE: "Move ca.key out of the runtime data directory before private-LAN startup.",
+    RUNTIME_ACTIVE: "Stop the server before running offline client administration.",
+    RUNTIME_LOCK_UNSAFE: "Ensure runtime.lock is a private regular file before retrying.",
+    RUNTIME_LOCK_INVALID: "Confirm the server is stopped, then remove the invalid runtime.lock.",
+    RUNTIME_LOCK_STALE: "Confirm the recorded server process is stopped, then remove runtime.lock.",
+    ACTIVITY_LIMIT_INVALID: "Set BORG_SERVER_MAX_ACTIVITY_ENTRIES_PER_CUBE to a positive integer.",
+    DATABASE_LIMIT_INVALID: "Set BORG_SERVER_MAX_DATABASE_BYTES to a positive integer.",
+    DISK_RESERVE_INVALID: "Set BORG_SERVER_MIN_FREE_DISK_BYTES to a positive integer.",
+    CLIENT_NOT_FOUND: "Provide an existing active client ID.",
+    GRANT_NOT_FOUND: "Provide an existing client cube grant.",
+    RECOVERY_INVALID: "Provide the active recovery credential through the private prompt.",
+});
+const operatorErrorCodes = new WeakMap();
+const operatorErrorCapability = Object.freeze({});
+class OperatorError extends Error {
+    #operatorCode;
+    constructor(capability, code) {
+        super(Object.hasOwn(publicMessages, code) ? publicMessages[code] : "Operator error rejected.");
+        if (capability !== operatorErrorCapability || !Object.hasOwn(publicMessages, code)) {
+            throw new Error("Operator error construction is unavailable.");
+        }
+        this.name = "OperatorError";
+        this.#operatorCode = code;
+        operatorErrorCodes.set(this, code);
+        Object.freeze(this);
+    }
+    get code() {
+        return this.#operatorCode;
+    }
+    get publicMessage() {
+        return publicMessages[this.#operatorCode];
+    }
+}
+export const operatorErrors = Object.freeze(Object.fromEntries(Object.keys(publicMessages).map((code) => [
+    code,
+    new OperatorError(operatorErrorCapability, code),
+])));
+export function operatorPublicMessage(error) {
+    if (typeof error !== "object" || error === null)
+        return null;
+    const code = operatorErrorCodes.get(error);
+    if (code === undefined)
+        return null;
+    if (Object.getPrototypeOf(error) !== OperatorError.prototype || !Object.isFrozen(error))
+        return null;
+    return publicMessages[code];
+}
+//# sourceMappingURL=operator-error.js.map

package/dist/operator-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator-error.js","sourceRoot":"","sources":["../src/operator-error.ts"],"names":[],"mappings":"AA2BA,MAAM,cAAc,GAAgD,MAAM,CAAC,MAAM,CAAC;IAChF,mBAAmB,EAAE,0BAA0B;IAC/C,oBAAoB,EAAE,2BAA2B;IACjD,oBAAoB,EAAE,2BAA2B;IACjD,kBAAkB,EAAE,qCAAqC;IACzD,kBAAkB,EAAE,qCAAqC;IACzD,kBAAkB,EAAE,+CAA+C;IACnE,oBAAoB,EAAE,8DAA8D;IACpF,iBAAiB,EAAE,0DAA0D;IAC7E,iBAAiB,EAAE,6CAA6C;IAChE,aAAa,EAAE,8EAA8E;IAC7F,WAAW,EAAE,6EAA6E;IAC1F,gBAAgB,EAAE,iDAAiD;IACnE,oBAAoB,EAAE,oEAAoE;IAC1F,iBAAiB,EAAE,qEAAqE;IACxF,iBAAiB,EAAE,2EAA2E;IAC9F,cAAc,EAAE,+DAA+D;IAC/E,mBAAmB,EAAE,gEAAgE;IACrF,oBAAoB,EAAE,sEAAsE;IAC5F,kBAAkB,EAAE,2EAA2E;IAC/F,sBAAsB,EAAE,sEAAsE;IAC9F,sBAAsB,EAAE,2DAA2D;IACnF,oBAAoB,EAAE,4DAA4D;IAClF,gBAAgB,EAAE,uCAAuC;IACzD,eAAe,EAAE,wCAAwC;IACzD,gBAAgB,EAAE,oEAAoE;CACvF,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,IAAI,OAAO,EAA6B,CAAC;AACpE,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAElD,MAAM,aAAc,SAAQ,KAAK;IACtB,aAAa,CAAoB;IAE1C,YAAY,UAAkB,EAAE,IAAuB;QACrD,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;QAC/F,IAAI,UAAU,KAAK,uBAAuB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,IAAI,aAAa;QACf,OAAO,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5C,CAAC;CACF;AAED,MAAM,CAAC,MAAM,cAAc,GAA+C,MAAM,CAAC,MAAM,CACrF,MAAM,CAAC,WAAW,CACf,MAAM,CAAC,IAAI,CAAC,cAAc,CAAyB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACjE,IAAI;IACJ,IAAI,aAAa,CAAC,uBAAuB,EAAE,IAAI,CAAC;CACjD,CAAC,CAC4C,CACjD,CAAC;AAEF,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,aAAa,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrG,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC"}

package/dist/principal.d.ts

@@ -0,0 +1,32 @@
+declare const principalBrand: unique symbol;
+interface ServerDerivedPrincipal {
+    readonly [principalBrand]: true;
+}
+export interface OperatorPrincipal extends ServerDerivedPrincipal {
+    readonly kind: "operator";
+    readonly id: string;
+}
+export interface ClientPrincipal extends ServerDerivedPrincipal {
+    readonly kind: "client";
+    readonly id: string;
+}
+export interface DroneSessionPrincipal extends ServerDerivedPrincipal {
+    readonly kind: "drone-session";
+    readonly id: string;
+    readonly clientId: string;
+    readonly cubeId: string;
+    readonly droneId: string;
+}
+export interface DroneSessionPrincipalInput {
+    readonly id: string;
+    readonly clientId: string;
+    readonly cubeId: string;
+    readonly droneId: string;
+}
+export type Principal = OperatorPrincipal | ClientPrincipal | DroneSessionPrincipal;
+export declare function operatorPrincipal(id: string): OperatorPrincipal;
+export declare function clientPrincipal(id: string): ClientPrincipal;
+export declare function droneSessionPrincipal(input: DroneSessionPrincipalInput): DroneSessionPrincipal;
+export declare function assertServerDerivedPrincipal(value: unknown): asserts value is Principal;
+export declare function assertCanonicalUuid(value: string, label: string): void;
+export {};

package/dist/principal.js

@@ -0,0 +1,64 @@
+const canonicalUuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/u;
+const principalBrand = Symbol("server-derived-principal");
+const derivedPrincipals = new WeakSet();
+export function operatorPrincipal(id) {
+    assertCanonicalUuid(id, "Principal id");
+    return branded({ kind: "operator", id });
+}
+export function clientPrincipal(id) {
+    assertCanonicalUuid(id, "Principal id");
+    return branded({ kind: "client", id });
+}
+export function droneSessionPrincipal(input) {
+    assertCanonicalUuid(input.id, "Principal id");
+    assertCanonicalUuid(input.clientId, "Client id");
+    assertCanonicalUuid(input.cubeId, "Cube id");
+    assertCanonicalUuid(input.droneId, "Drone id");
+    return branded({ kind: "drone-session", ...input });
+}
+export function assertServerDerivedPrincipal(value) {
+    if (typeof value !== "object" || value === null || !derivedPrincipals.has(value)) {
+        throw new Error("Principal must be created by the server authentication boundary.");
+    }
+    const descriptors = Object.getOwnPropertyDescriptors(value);
+    const kind = frozenDataValue(descriptors, "kind");
+    const expectedKeys = kind === "drone-session"
+        ? ["kind", "id", "clientId", "cubeId", "droneId"]
+        : kind === "operator" || kind === "client" ? ["kind", "id"] : [];
+    const ownNames = Object.getOwnPropertyNames(value);
+    const brand = Object.getOwnPropertyDescriptor(value, principalBrand);
+    if (Object.getPrototypeOf(value) !== Object.prototype || !Object.isFrozen(value) ||
+        !Object.hasOwn(value, principalBrand) || brand?.value !== true || brand.get !== undefined ||
+        brand.set !== undefined || brand.enumerable || brand.configurable || brand.writable ||
+        Object.getOwnPropertySymbols(value).length !== 1 || ownNames.length !== expectedKeys.length ||
+        expectedKeys.some((key) => !Object.hasOwn(value, key)) ||
+        ownNames.some((key) => !expectedKeys.includes(key)) ||
+        expectedKeys.some((key) => frozenDataValue(descriptors, key) === undefined)) {
+        throw new Error("Principal must be created by the server authentication boundary.");
+    }
+    for (const key of expectedKeys.filter((key) => key !== "kind")) {
+        if (!canonicalUuid.test(frozenDataValue(descriptors, key))) {
+            throw new Error("Principal must be created by the server authentication boundary.");
+        }
+    }
+}
+export function assertCanonicalUuid(value, label) {
+    if (!canonicalUuid.test(value)) {
+        throw new Error(`${label} must be a canonical UUID.`);
+    }
+}
+function branded(value) {
+    Object.defineProperty(value, principalBrand, { value: true });
+    const principal = Object.freeze(value);
+    derivedPrincipals.add(principal);
+    return principal;
+}
+function frozenDataValue(descriptors, key) {
+    const descriptor = descriptors[key];
+    return descriptor !== undefined && typeof descriptor.value === "string" &&
+        descriptor.get === undefined && descriptor.set === undefined && descriptor.enumerable === true &&
+        descriptor.configurable === false && descriptor.writable === false
+        ? descriptor.value
+        : undefined;
+}
+//# sourceMappingURL=principal.js.map

package/dist/principal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal.js","sourceRoot":"","sources":["../src/principal.ts"],"names":[],"mappings":"AAAA,MAAM,aAAa,GAAG,4EAA4E,CAAC;AACnG,MAAM,cAAc,GAAkB,MAAM,CAAC,0BAA0B,CAAC,CAAC;AACzE,MAAM,iBAAiB,GAAG,IAAI,OAAO,EAAU,CAAC;AAiChD,MAAM,UAAU,iBAAiB,CAAC,EAAU;IAC1C,mBAAmB,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;IACxC,OAAO,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAAU;IACxC,mBAAmB,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;IACxC,OAAO,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAiC;IAEjC,mBAAmB,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;IAC9C,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACjD,mBAAmB,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC7C,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,eAAe,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,IAAI,KAAK,eAAe;QAC3C,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC;QACjD,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC5E,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,IAAI,KAAK,EAAE,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QACzF,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,QAAQ;QACnF,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM;QAC3F,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACtD,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnD,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,WAAW,EAAE,GAAG,CAAC,KAAK,SAAS,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,GAAG,CAAE,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,KAAa;IAC9D,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAmB,KAAQ;IACzC,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,cAAc,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAA+B,CAAC;IACrE,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACjC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CACtB,WAAkC,EAClC,GAAW;IAEX,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,UAAU,KAAK,SAAS,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ;QACrE,UAAU,CAAC,GAAG,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,KAAK,SAAS,IAAI,UAAU,CAAC,UAAU,KAAK,IAAI;QAC9F,UAAU,CAAC,YAAY,KAAK,KAAK,IAAI,UAAU,CAAC,QAAQ,KAAK,KAAK;QAClE,CAAC,CAAC,UAAU,CAAC,KAAK;QAClB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}

package/dist/protocol-draft.d.ts

@@ -0,0 +1,2 @@
+import type { ProtocolInfoDocument, ServiceLimits } from "./https-server.js";
+export declare function createPart2ProtocolInfo(limits: ServiceLimits): ProtocolInfoDocument;

package/dist/protocol-draft.js

@@ -0,0 +1,31 @@
+export function createPart2ProtocolInfo(limits) {
+    return {
+        protocol_version: "1",
+        package: {
+            name: "borgmcp-shared",
+            version: "0.3.0",
+        },
+        capabilities: [
+            "coordination.core",
+            "auth.bearer",
+            "auth.revocation",
+            "auth.retry-safe-enrollment",
+            "scope.cube-isolation",
+            "transport.tls",
+            "authority.no-cloud-fallback",
+            "log.cursor",
+            "stream.sse",
+            "stream.replay",
+            "acks",
+            "claims",
+            "decisions",
+        ],
+        limits: {
+            max_request_bytes: limits.maxRequestBodyBytes,
+            max_log_message_bytes: 10_240,
+            max_read_page_size: 500,
+            max_replay_page_size: 200,
+        },
+    };
+}
+//# sourceMappingURL=protocol-draft.js.map

package/dist/protocol-draft.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-draft.js","sourceRoot":"","sources":["../src/protocol-draft.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,uBAAuB,CAAC,MAAqB;IAC3D,OAAO;QACL,gBAAgB,EAAE,GAAG;QACrB,OAAO,EAAE;YACP,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,OAAO;SACjB;QACD,YAAY,EAAE;YACZ,mBAAmB;YACnB,aAAa;YACb,iBAAiB;YACjB,4BAA4B;YAC5B,sBAAsB;YACtB,eAAe;YACf,6BAA6B;YAC7B,YAAY;YACZ,YAAY;YACZ,eAAe;YACf,MAAM;YACN,QAAQ;YACR,WAAW;SACZ;QACD,MAAM,EAAE;YACN,iBAAiB,EAAE,MAAM,CAAC,mBAAmB;YAC7C,qBAAqB,EAAE,MAAM;YAC7B,kBAAkB,EAAE,GAAG;YACvB,oBAAoB,EAAE,GAAG;SAC1B;KACF,CAAC;AACJ,CAAC"}

package/dist/service.d.ts

@@ -0,0 +1,61 @@
+import { type BootstrapResult } from "./bootstrap.js";
+import { type HttpsServerOptions, type RunningServer } from "./https-server.js";
+import { openStore, type StorageLimits } from "./store.js";
+import type { CubeAccess } from "./store.js";
+export interface ServerService {
+    readonly start: (args: readonly string[]) => Promise<void>;
+    readonly setup?: () => Promise<BootstrapResult>;
+    readonly rotateClient?: (clientId: string) => Promise<string>;
+    readonly revokeClient?: (clientId: string) => Promise<void>;
+    readonly grantClient?: (clientId: string, cubeId: string, access: CubeAccess) => Promise<void>;
+    readonly ungrantClient?: (clientId: string, cubeId: string) => Promise<void>;
+    readonly createClientInvitation?: (recoveryCredential: string) => Promise<string>;
+    readonly replaceOwnerInvitation?: (recoveryCredential: string) => Promise<string>;
+}
+export interface ServerEnvironment {
+    readonly BORG_SERVER_TLS_KEY_FILE?: string;
+    readonly BORG_SERVER_TLS_CERT_FILE?: string;
+    readonly BORG_SERVER_TLS_CA_FILE?: string;
+    readonly BORG_SERVER_DATA_DIR?: string;
+    readonly BORG_SERVER_BIND_HOST?: string;
+    readonly BORG_SERVER_MAX_ACTIVITY_ENTRIES_PER_CUBE?: string;
+    readonly BORG_SERVER_MAX_DATABASE_BYTES?: string;
+    readonly BORG_SERVER_MIN_FREE_DISK_BYTES?: string;
+}
+interface ServiceDependencies {
+    readonly environment: ServerEnvironment;
+    readonly readFile: (path: string) => Promise<Buffer>;
+    readonly readPrivateKey: (path: string) => Promise<Buffer>;
+    readonly startServer: (options: HttpsServerOptions) => Promise<RunningServer>;
+    readonly onStarted: (origin: string) => void;
+    readonly waitForShutdown: (server: RunningServer, signal?: AbortSignal) => Promise<void>;
+    readonly installShutdownHandlers?: () => {
+        readonly signal: AbortSignal;
+        readonly dispose: () => void;
+    };
+    readonly openStore?: typeof openStore;
+    readonly onStartupPhase?: (phase: "pre-lock" | "post-lock" | "pre-listen") => Promise<void>;
+}
+export interface NodeServerTestHooks {
+    readonly onStartupPhase?: (phase: "pre-lock" | "post-lock" | "pre-listen") => Promise<void>;
+    readonly onSignalObserved?: () => void;
+    readonly onListening?: (origin: string) => void;
+    readonly wrapRunningServer?: (running: RunningServer) => RunningServer;
+}
+export declare function installNodeServerTestHooks(hooks: NodeServerTestHooks): () => void;
+export declare function createNodeServerService(dependencies: ServiceDependencies): ServerService;
+export declare function assertLanCaKeyOffline(runtimeDataDirectory: string): Promise<void>;
+export declare function selectServerEnvironment(environment: NodeJS.ProcessEnv): ServerEnvironment;
+export declare function resolveStorageLimits(environment: ServerEnvironment): StorageLimits;
+export declare const nodeServerService: ServerService;
+export declare function createOfflineCredentialService(offlineDataDirectory: string): Pick<Required<ServerService>, "rotateClient" | "revokeClient" | "grantClient" | "ungrantClient" | "createClientInvitation" | "replaceOwnerInvitation">;
+interface RuntimeLock {
+    readonly release: () => Promise<void>;
+}
+export declare function isFatalTeardownError(error: unknown): boolean;
+export declare function acquireRuntimeLock(runtimeDataDirectory: string): Promise<RuntimeLock>;
+export declare function installProcessShutdownHandlers(): {
+    readonly signal: AbortSignal;
+    readonly dispose: () => void;
+};
+export {};