borgmcp 1.0.13 → 1.0.15

package/dist/claude.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
-import{spawn as b}from"child_process";import{randomUUID as y}from"node:crypto";import{basename as S}from"node:path";import{createInterface as A}from"node:readline/promises";import s from"chalk";import{findProjectRoot as P,getActiveCube as T,inboxPathForDrone as I,setCodexWakeTarget as E}from"./cubes.js";import{handleVersionFlag as D,getPackageVersion as g}from"./version.js";import{isHelpFlag as O,setupHelpText as R,topLevelHelpText as F}from"./cli-help.js";import{runSpawn as H}from"./spawn.js";import{parseSyncArgs as M,runSync as N}from"./sync.js";import{parseAssimilateArgs as B}from"./parse-assimilate-args.js";import{runAssimilate as L}from"./assimilate-cmd.js";import{buildDefaultAssimilateDeps as _}from"./assimilate-deps.js";import{setTerminalTitle as W}from"./terminal-title.js";import{initConsolePrefix as G,consolePrefix as r}from"./console-prefix.js";import{initDebugFromArgv as U}from"./debug.js";import{fetchLatestBorgmcpVersion as V,compareVersionsForStaleness as j}from"./stale-version-check.js";import{defaultCliChoiceDeps as K,detectCliAvailability as Y,parseCliFlag as q,resolveCliChoice as z}from"./cli-platform.js";import{prepareCodexRemoteLaunch as X,withCodexCwdArg as J,defaultCodexRemoteDeps as Q}from"./codex-remote.js";import{findLoadedCodexThread as Z}from"./codex-app-server.js";import{buildAgentKickoffPrompt as ee,recordCodexWakeTarget as re,socketPathFromRemoteArgs as C}from"./codex-launch.js";import{codexBorgSessionConfigArgs as oe}from"./launch-gate.js";import{addCodexMcpServer as se,addCodexSessionStartHook as te,addCodexUserPromptSubmitHook as ie,addMcpServer as ae,addProjectSessionStartHook as ne,addUserPromptSubmitHook as ce,isCodexMcpServerConfigured as le,isMcpServerConfigured as de,removeSessionStartHook as pe}from"./config-utils.js";async function me(){U(process.argv),D(),await G();const n=(async()=>{if(!process.stderr.isTTY)return;const e=g(),a=await V();if(!a)return;const p=j(e,a);p.stale&&p.message&&process.stderr.write(`${r()}${p.message}
-`)})();if((process.argv[2]==="--help"||process.argv[2]==="-h")&&(process.stdout.write(F(g())),process.exit(0)),process.argv[2]==="setup"){O(process.argv[3])&&(process.stdout.write(R(g())),process.exit(0)),await import("./setup.js");return}if(process.argv[2]==="assimilate"){const e=B(process.argv.slice(3));e.ok||(process.stderr.write(s.red(`${r()}\u25FC borg assimilate: ${e.error}
+import{spawn as S}from"child_process";import{randomUUID as y}from"node:crypto";import{basename as A}from"node:path";import{createInterface as P}from"node:readline/promises";import s from"chalk";import{findProjectRoot as T,getActiveCube as I,inboxPathForDrone as E,setCodexWakeTarget as R}from"./cubes.js";import{handleVersionFlag as D,getPackageVersion as g}from"./version.js";import{isHelpFlag as O,setupHelpText as F,topLevelHelpText as N}from"./cli-help.js";import{runSpawn as H}from"./spawn.js";import{parseSyncArgs as M,runSync as B}from"./sync.js";import{parseAssimilateArgs as G}from"./parse-assimilate-args.js";import{runAssimilate as L}from"./assimilate-cmd.js";import{buildDefaultAssimilateDeps as _}from"./assimilate-deps.js";import{setTerminalTitle as W}from"./terminal-title.js";import{initConsolePrefix as U,consolePrefix as r}from"./console-prefix.js";import{initDebugFromArgv as V}from"./debug.js";import{fetchLatestBorgmcpVersion as j,compareVersionsForStaleness as K}from"./stale-version-check.js";import{defaultCliChoiceDeps as Y,detectCliAvailability as v,installedCliNames as q,parseCliFlag as z,resolveCliChoice as X}from"./cli-platform.js";import{getRefreshToken as J,getIdToken as Q}from"./config.js";import{composeGetStarted as Z,shouldShowGetStarted as ee}from"./get-started.js";import{prepareCodexRemoteLaunch as re,withCodexCwdArg as oe,defaultCodexRemoteDeps as se}from"./codex-remote.js";import{findLoadedCodexThread as te}from"./codex-app-server.js";import{buildAgentKickoffPrompt as ie,recordCodexWakeTarget as ae,socketPathFromRemoteArgs as k}from"./codex-launch.js";import{codexBorgSessionConfigArgs as ne}from"./launch-gate.js";import{addCodexMcpServer as ce,addCodexSessionStartHook as le,addCodexUserPromptSubmitHook as de,addMcpServer as pe,addProjectSessionStartHook as me,addUserPromptSubmitHook as fe,isCodexMcpServerConfigured as ue,isMcpServerConfigured as ge,removeSessionStartHook as he}from"./config-utils.js";async function we(){V(process.argv),D(),await U();const n=(async()=>{if(!process.stderr.isTTY)return;const e=g(),a=await j();if(!a)return;const p=K(e,a);p.stale&&p.message&&process.stderr.write(`${r()}${p.message}
+`)})();if((process.argv[2]==="--help"||process.argv[2]==="-h")&&(process.stdout.write(N(g())),process.exit(0)),process.argv[2]==="setup"){O(process.argv[3])&&(process.stdout.write(F(g())),process.exit(0)),await import("./setup.js");return}if(process.argv[2]==="assimilate"){const e=G(process.argv.slice(3));e.ok||(process.stderr.write(s.red(`${r()}\u25FC borg assimilate: ${e.error}
 `)),process.exit(1));const a=_(),p=await L({role:e.role,flags:e.flags},a);process.exit(p)}if(process.argv[2]==="spawn"){const e=await H();process.exit(e)}if(process.argv[2]==="sync"){const e=M(process.argv.slice(3));e.ok||(process.stderr.write(s.red(`${r()}\u25FC borg sync: ${e.error}
-`)),process.exit(1));const a=await N({},e.options);process.exit(a)}const t=q(process.argv.slice(2));t.error&&(process.stderr.write(s.red(`${r()}\u25FC ${t.error}
-`)),process.exit(1));const k=async e=>{const a=A({input:process.stdin,output:process.stdout});try{return await a.question(e)}finally{a.close()}},o=await z(t.cli,K(k,()=>process.stdin.isTTY===!0));fe();const c=t.rest,i=await T();W(i?{label:i.droneLabel,cubeName:i.name}:null,S(process.cwd()));const $=i&&o==="claude"?`If you haven't yet, arm a persistent Monitor running the command \`borg-inbox-monitor ${I(i.cubeId,i.droneId)}\` so each event's task-notification title summarizes the new cube log entry (drone label, role, and first ~80 chars of the message body) \u2014 letting you triage events without reading the full body. `:"";await Promise.race([n,new Promise(e=>setTimeout(e,2e3))]);const h=o==="codex"?`borg-wake-${y()}`:null;let m,w=[],f={...process.env,BORG_SESSION:"1"},l=null,d=null;if(o==="codex"&&!c.includes("--remote")){console.error(`${r()}${s.gray("\u25FC Starting Codex remote-wake app-server\u2026")}`);const e=await X(Q());e.warning?(console.error(`${r()}${s.yellow(`warning: ${e.warning}`)}`),m="\u26A0 Codex wake-path capability check failed: remote-control is unavailable for this session. Run borg:regen manually whenever you return, and expect only fallback wakeups until relaunch."):m="Codex wake-path capability check passed: remote-control socket established for this session.",w=e.args,f={...process.env,...e.env,BORG_SESSION:"1"},l=C(e.args),d=e.server?.cleanup??null}else o==="codex"&&c.includes("--remote")&&(m="Codex wake-path capability check: using caller-provided --remote socket; if no wake arrives, run borg:regen manually when returning to the session.",l=C(c),l&&(f={...process.env,BORG_CODEX_REMOTE_WAKE:"1",BORG_SESSION:"1"}));const x=ee({cli:o,codexWakeNonce:h,monitorClause:$,codexWakePathClause:m});let u=[...c,x];o==="codex"&&(u=[...oe(),...w,...J(u,process.cwd())]),console.error(`${r()}${s.blue(`\u25FC Launching ${o==="claude"?"Claude Code":"Codex"}\u2026`)}`);const v=b(o,u,{stdio:"inherit",shell:!1,env:f});o==="codex"&&i&&l&&re({deps:{setCodexWakeTarget:E,findLoadedCodexThread:Z},cubeId:i.cubeId,droneId:i.droneId,socketPath:l,passthroughArgs:c,previewNeedle:h??x.slice(0,120),cwd:process.cwd(),launchedAtSeconds:Math.floor(Date.now()/1e3)}),v.on("error",e=>{if(d)try{d()}catch{}e.code==="ENOENT"?(console.error(`${r()}${s.red(`
+`)),process.exit(1));const a=await B({},e.options);process.exit(a)}if(ee(await J()!==null,await Q()!==null)){const e=q(v()).length>0;process.stdout.write(Z(e)),process.exit(0)}const t=z(process.argv.slice(2));t.error&&(process.stderr.write(s.red(`${r()}\u25FC ${t.error}
+`)),process.exit(1));const $=async e=>{const a=P({input:process.stdin,output:process.stdout});try{return await a.question(e)}finally{a.close()}},o=await X(t.cli,Y($,()=>process.stdin.isTTY===!0));xe();const c=t.rest,i=await I();W(i?{label:i.droneLabel,cubeName:i.name}:null,A(process.cwd()));const b=i&&o==="claude"?`If you haven't yet, arm a persistent Monitor running the command \`borg-inbox-monitor ${E(i.cubeId,i.droneId)}\` so each event's task-notification title summarizes the new cube log entry (drone label, role, and first ~80 chars of the message body) \u2014 letting you triage events without reading the full body. `:"";await Promise.race([n,new Promise(e=>setTimeout(e,2e3))]);const h=o==="codex"?`borg-wake-${y()}`:null;let m,w=[],f={...process.env,BORG_SESSION:"1"},l=null,d=null;if(o==="codex"&&!c.includes("--remote")){console.error(`${r()}${s.gray("\u25FC Starting Codex remote-wake app-server\u2026")}`);const e=await re(se());e.warning?(console.error(`${r()}${s.yellow(`warning: ${e.warning}`)}`),m="\u26A0 Codex wake-path capability check failed: remote-control is unavailable for this session. Run borg:regen manually whenever you return, and expect only fallback wakeups until relaunch."):m="Codex wake-path capability check passed: remote-control socket established for this session.",w=e.args,f={...process.env,...e.env,BORG_SESSION:"1"},l=k(e.args),d=e.server?.cleanup??null}else o==="codex"&&c.includes("--remote")&&(m="Codex wake-path capability check: using caller-provided --remote socket; if no wake arrives, run borg:regen manually when returning to the session.",l=k(c),l&&(f={...process.env,BORG_CODEX_REMOTE_WAKE:"1",BORG_SESSION:"1"}));const x=ie({cli:o,codexWakeNonce:h,monitorClause:b,codexWakePathClause:m});let u=[...c,x];o==="codex"&&(u=[...ne(),...w,...oe(u,process.cwd())]),console.error(`${r()}${s.blue(`\u25FC Launching ${o==="claude"?"Claude Code":"Codex"}\u2026`)}`);const C=S(o,u,{stdio:"inherit",shell:!1,env:f});o==="codex"&&i&&l&&ae({deps:{setCodexWakeTarget:R,findLoadedCodexThread:te},cubeId:i.cubeId,droneId:i.droneId,socketPath:l,passthroughArgs:c,previewNeedle:h??x.slice(0,120),cwd:process.cwd(),launchedAtSeconds:Math.floor(Date.now()/1e3)}),C.on("error",e=>{if(d)try{d()}catch{}e.code==="ENOENT"?(console.error(`${r()}${s.red(`
 \u25FC Failed to launch ${o}`)}`),console.error(`${r()}${s.gray(`Make sure ${o} is installed.
 `)}`)):console.error(`${r()}${s.red(`
 \u25FC Failed to launch ${o}: ${e.message}
-`)}`),process.exit(1)}),v.on("exit",e=>{if(d)try{d()}catch{}process.exit(e??0)})}function fe(){const n=Y();if(n.claude)try{de()||ae(),ne(P(process.cwd())),pe(),ce()}catch(t){console.error(`${r()}${s.yellow(`warning: Claude Code integration check failed: ${t?.message??t}`)}`)}if(n.codex)try{le()||se(),te(),ie()}catch(t){console.error(`${r()}${s.yellow(`warning: Codex integration check failed: ${t?.message??t}`)}`)}}me().catch(n=>{console.error(`${r()}${s.red(`
+`)}`),process.exit(1)}),C.on("exit",e=>{if(d)try{d()}catch{}process.exit(e??0)})}function xe(){const n=v();if(n.claude)try{ge()||pe(),me(T(process.cwd())),he(),fe()}catch(t){console.error(`${r()}${s.yellow(`warning: Claude Code integration check failed: ${t?.message??t}`)}`)}if(n.codex)try{ue()||ce(),le(),de()}catch(t){console.error(`${r()}${s.yellow(`warning: Codex integration check failed: ${t?.message??t}`)}`)}}we().catch(n=>{console.error(`${r()}${s.red(`
 \u25FC Error: ${n.message}
 `)}`),process.exit(1)});

package/dist/codex-app-wake.d.ts

@@ -3,6 +3,7 @@ import { CodexAppServerClient } from './codex-app-server.js';
 import { checkCodexBridgeHealthy } from './codex-remote.js';
 export declare const CODEX_WAKE_PROMPT = "New Borg cube-log activity arrived.";
 export declare function formatCodexWakePrompt(inboxLine: string): string;
+export declare const CODEX_CATCHUP_PROMPT = "Borg cube activity arrived while you were busy. Run `borg:read-log unread_only=true` and DRAIN \u2014 repeat until the returned page is under the limit and behind_by is 0 \u2014 so no entries are skipped.";
 export declare function isCodexRemoteWakeEnabled(env?: NodeJS.ProcessEnv): boolean;
 export declare function resolveSessionAgentKind(env?: NodeJS.ProcessEnv): 'claude' | 'codex';
 export interface CodexWakeTarget {
@@ -35,6 +36,8 @@ export interface CodexWakeDeps {
     getActiveCube?: typeof getActiveCube;
     getCodexWakeTarget?: typeof getCodexWakeTarget;
     createClient?: (socketPath: string) => Pick<CodexAppServerClient, 'connect' | 'readThread' | 'startTurn' | 'close'>;
+    sleep?: (ms: number) => Promise<void>;
+    now?: () => number;
 }
 export declare function wakeCodexViaAppServer(reason?: string, env?: NodeJS.ProcessEnv, deps?: CodexWakeDeps): void;
 export declare function resetCodexWakeForTests(): void;

package/dist/codex-app-wake.js

@@ -1,2 +1,2 @@
-import{getActiveCube as f,getCodexWakeTarget as u}from"./cubes.js";import{CodexAppServerClient as h}from"./codex-app-server.js";import{checkCodexBridgeHealthy as g}from"./codex-remote.js";import{recordEventReceipt as p}from"./health-beat.js";const v="New Borg cube-log activity arrived.";function T(e){return`New Borg cube-log activity arrived:
-${e}`}function l(e=process.env){return e.BORG_CODEX_REMOTE_WAKE==="1"}function I(e=process.env){return l(e)?"codex":"claude"}function x(e=process.env){return l(e)?{enabled:!0}:{enabled:!1}}async function K(e,t={}){try{const r=await(t.getCodexWakeTarget??u)(e.cubeId,e.droneId);return r?(t.checkBridge??g)(r.socketPath):!1}catch{return null}}let c=!1;const i=[],o=new Set,s=[],k=100;function _(e=v,t=process.env,n={}){x(t).enabled&&(i.push({reason:e,deps:n}),!c&&(c=!0,C().finally(()=>{c=!1})))}async function C(){for(;i.length>0;){const e=i.shift();await w(e.reason,e.deps)}}async function w(e,t){try{const n=await(t.getActiveCube??f)();if(!n)return;const r=await(t.getCodexWakeTarget??u)(n.cubeId,n.droneId);if(!r)return;const d=`${r.threadId}\0${e}`;if(o.has(d))return;const a=t.createClient?t.createClient(r.socketPath):new h(r.socketPath);await a.connect();try{if((await a.readThread(r.threadId))?.status?.type==="active")return;await a.startTurn(r.threadId,e),p(),W(d)}finally{a.close()}}catch{}}function P(){c=!1,i.length=0,o.clear(),s.length=0}function W(e){if(!o.has(e))for(o.add(e),s.push(e);s.length>k;){const t=s.shift();t&&o.delete(t)}}export{v as CODEX_WAKE_PROMPT,T as formatCodexWakePrompt,l as isCodexRemoteWakeEnabled,K as probeCodexBridgeArmed,P as resetCodexWakeForTests,x as resolveCodexWakeTarget,I as resolveSessionAgentKind,_ as wakeCodexViaAppServer};
+import{getActiveCube as h,getCodexWakeTarget as f}from"./cubes.js";import{CodexAppServerClient as g}from"./codex-app-server.js";import{checkCodexBridgeHealthy as p}from"./codex-remote.js";import{recordEventReceipt as C}from"./health-beat.js";const v="New Borg cube-log activity arrived.";function B(e){return`New Borg cube-log activity arrived:
+${e}`}const k="Borg cube activity arrived while you were busy. Run `borg:read-log unread_only=true` and DRAIN \u2014 repeat until the returned page is under the limit and behind_by is 0 \u2014 so no entries are skipped.",y=5e3,x=15*6e4;function w(e=process.env){return e.BORG_CODEX_REMOTE_WAKE==="1"}function S(e=process.env){return w(e)?"codex":"claude"}function _(e=process.env){return w(e)?{enabled:!0}:{enabled:!1}}async function U(e,t={}){try{const r=await(t.getCodexWakeTarget??f)(e.cubeId,e.droneId);return r?(t.checkBridge??p)(r.socketPath):!1}catch{return null}}let s=!1;const d=[],c=new Set,u=[],b=100;let l=!1;function T(e){return new Promise(t=>setTimeout(t,e))}function M(e=v,t=process.env,a={}){_(t).enabled&&(d.push({reason:e,deps:a}),!s&&(s=!0,P().finally(()=>{s=!1})))}async function P(){for(;d.length>0;){const e=d.shift();await m(e.reason,e.deps)}}async function m(e,t){try{const a=await(t.getActiveCube??h)();if(!a)return;const r=await(t.getCodexWakeTarget??f)(a.cubeId,a.droneId);if(!r)return;const o=`${r.threadId}\0${e}`;if(c.has(o))return;const n=t.createClient?t.createClient(r.socketPath):new g(r.socketPath);await n.connect();try{if((await n.readThread(r.threadId))?.status?.type==="active"){I(t);return}await n.startTurn(r.threadId,e),C(),E(o)}finally{n.close()}}catch{}}function I(e){l||(l=!0,A(e).finally(()=>{l=!1}))}async function A(e){const t=e.sleep??T,a=e.now??Date.now,r=a()+x;for(;a()<r;){await t(y);try{const o=await(e.getActiveCube??h)();if(!o)continue;const n=await(e.getCodexWakeTarget??f)(o.cubeId,o.droneId);if(!n)continue;const i=e.createClient?e.createClient(n.socketPath):new g(n.socketPath);await i.connect();try{if((await i.readThread(n.threadId))?.status?.type==="active")continue;await i.startTurn(n.threadId,k),C();return}finally{i.close()}}catch{}}}function H(){s=!1,d.length=0,c.clear(),u.length=0,l=!1}function E(e){if(!c.has(e))for(c.add(e),u.push(e);u.length>b;){const t=u.shift();t&&c.delete(t)}}export{k as CODEX_CATCHUP_PROMPT,v as CODEX_WAKE_PROMPT,B as formatCodexWakePrompt,w as isCodexRemoteWakeEnabled,U as probeCodexBridgeArmed,H as resetCodexWakeForTests,_ as resolveCodexWakeTarget,S as resolveSessionAgentKind,M as wakeCodexViaAppServer};

package/dist/get-started.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Fresh-vs-configured rule. "Configured" = the user has completed `borg setup`,
+ * signalled by the PRESENCE of a stored credential. Inputs are existence
+ * booleans only — the caller null-checks the token accessors and never decodes,
+ * logs, or prints the token value (SR gh#817 constraint).
+ *
+ * Refresh-token presence is the durable signal: it survives id_token expiry, so
+ * a configured user whose id_token has lapsed is NOT mistaken for fresh (which
+ * would wrongly suppress their normal launch). The id_token presence is the
+ * fallback for the rare case where Google returned no refresh_token and the
+ * id_token is still valid.
+ */
+export declare function shouldShowGetStarted(hasRefreshToken: boolean, hasIdToken: boolean): boolean;
+/**
+ * The user-visible get-started text. Carries ZERO auth material (no tokens, no
+ * PII) — it is pure onboarding guidance. When no agent CLI is detected, lead
+ * with the install-an-agent-CLI step (mirrors the B1 banner intent).
+ */
+export declare function composeGetStarted(hasAgentCli: boolean): string;
+//# sourceMappingURL=get-started.d.ts.map

package/dist/get-started.js

@@ -0,0 +1,2 @@
+function n(o,e){return!o&&!e}function r(o){const e=["","Welcome to Borg MCP \u2014 multi-agent coordination for your AI coding agent.","","You're not set up yet. To get started:",""];let t=1;return o||(e.push(`  ${t}. Install an agent CLI first:`,"       Claude Code: https://claude.ai/download","       Codex:       https://developers.openai.com/codex"),t++),e.push(`  ${t}. borg setup${" ".repeat(Math.max(1,8))}\u2014 sign in with Google`),t++,e.push(`  ${t}. cd into your project, then: borg assimilate \u2014 join/create a cube`,"","Then `borg` launches your agent in that cube. Run `borg --help` for more.",""),e.join(`
+`)}export{r as composeGetStarted,n as shouldShowGetStarted};

package/dist/inbox-monitor.d.ts

@@ -49,6 +49,36 @@ export declare class RecentLineDeduper {
 export declare function formatEventLine(inboxLine: string): string | null;
 export declare function formatFreshEventLine(inboxLine: string, deduper: RecentLineDeduper): string | null;
 export declare function seedDeduperFromInboxTail(inboxPath: string, deduper: RecentLineDeduper, maxLines?: number): void;
+export interface InboxLockDeps {
+    /**
+     * ATOMICALLY create the pidfile WITH `content` iff it does not exist. True =
+     * claimed, false = already exists. Atomic-with-content (no create-then-write
+     * gap) so a concurrent reader never sees an empty pidfile (gh#795 TOCTOU
+     * window 2).
+     */
+    claim(path: string, content: string): boolean;
+    /** File contents, or null if absent/unreadable. */
+    read(path: string): string | null;
+    /**
+     * COMPARE-AND-DELETE: remove the file ONLY if its current content still
+     * equals `expected`. A no-op if the content changed (a successor reclaimed)
+     * or the file is gone — so we never delete another live holder's pidfile
+     * (gh#795 TOCTOU windows 1 + 3).
+     */
+    removeIfContent(path: string, expected: string): void;
+    /** kill(pid,0) liveness: true if the process exists (alive), false if gone (ESRCH). */
+    isAlive(pid: number): boolean;
+}
+export declare function pidfilePathFor(inboxPath: string): string;
+/**
+ * Try to become the SOLE monitor for this inbox. Returns true if we claimed the
+ * pidfile (caller proceeds to tail + must release it on exit); false if a LIVE
+ * holder already owns it (caller yields/exits without tailing). Never signals a
+ * live PID, and never deletes a pidfile that changed under us (compare-and-
+ * delete) — only reaps a still-present provably-dead (ESRCH) / unparseable
+ * pidfile, then re-claims.
+ */
+export declare function acquireInboxLock(pidfilePath: string, ownPid: number, deps: InboxLockDeps, maxAttempts?: number): boolean;
 /**
  * Is this module being invoked as the bin entry point?
  *

package/dist/inbox-monitor.js

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-import{spawn as u}from"node:child_process";import{readFileSync as p,realpathSync as a}from"node:fs";import{createInterface as f}from"node:readline";import{fileURLToPath as m}from"node:url";const d=/^(\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\S*)\s+(\S+)\s+\(([^)]+)\):\s*(.*)$/,h=1024;class b{cap;seen=new Set;order=[];constructor(e=h){if(this.cap=e,!Number.isInteger(e)||e<1)throw new Error("cap must be a positive integer")}remember(e){if(this.seen.has(e))return!1;for(this.seen.add(e),this.order.push(e);this.order.length>this.cap;){const r=this.order.shift();r&&this.seen.delete(r)}return!0}}function l(t){const e=d.exec(t);if(!e)return null;const[,,r,s,n]=e,o=n.trim();return`${r} (${s}): ${o}`}function x(t,e){const r=l(t);return r===null?null:e.remember(t)?r:null}function E(t,e,r=512){if(!Number.isInteger(r)||r<1)throw new Error("maxLines must be a positive integer");let s;try{s=p(t,"utf-8")}catch(o){if(o?.code==="ENOENT")return;throw o}const n=s.split(/\r?\n/);n.at(-1)===""&&n.pop();for(const o of n.slice(-r))l(o)!==null&&e.remember(o)}function g(){const t=process.argv[2];t||(console.error("borg-inbox-monitor: usage: borg-inbox-monitor <inbox-path>"),process.exit(2));const e=new b;E(t,e);const r=u("tail",["-F","-n","0",t],{stdio:["ignore","pipe","inherit"]});r.stdout||(console.error("borg-inbox-monitor: tail subprocess has no stdout"),process.exit(1));const s=f({input:r.stdout,crlfDelay:1/0});let n=!1;s.on("line",i=>{const c=x(i,e);c!==null&&console.log(c)}),r.on("error",i=>{console.error(`borg-inbox-monitor: tail failed: ${i.message}`),process.exit(1)}),r.on("exit",(i,c)=>{n&&process.exit(0),c&&process.exit(0),process.exit(i??0)});const o=i=>{n||(n=!0,s.close(),!r.killed&&!r.kill(i)&&process.exit(0),setTimeout(()=>process.exit(0),1e3).unref())};process.once("SIGTERM",()=>o("SIGTERM")),process.once("SIGINT",()=>o("SIGINT"))}function I(t,e){try{return a(t)===m(e)}catch{return!1}}I(process.argv[1],import.meta.url)&&g();export{h as RECENT_EMITTED_LINE_CAP,b as RecentLineDeduper,l as formatEventLine,x as formatFreshEventLine,I as isEntryInvocation,E as seedDeduperFromInboxTail};
+import{spawn as d}from"node:child_process";import{randomBytes as h}from"node:crypto";import{linkSync as x,readFileSync as a,realpathSync as b,unlinkSync as p,writeFileSync as y}from"node:fs";import{createInterface as I}from"node:readline";import{fileURLToPath as E}from"node:url";const g=/^(\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\S*)\s+(\S+)\s+\(([^)]+)\):\s*(.*)$/,S=1024;class w{cap;seen=new Set;order=[];constructor(r=S){if(this.cap=r,!Number.isInteger(r)||r<1)throw new Error("cap must be a positive integer")}remember(r){if(this.seen.has(r))return!1;for(this.seen.add(r),this.order.push(r);this.order.length>this.cap;){const t=this.order.shift();t&&this.seen.delete(t)}return!0}}function m(e){const r=g.exec(e);if(!r)return null;const[,,t,n,i]=r,o=i.trim();return`${t} (${n}): ${o}`}function v(e,r){const t=m(e);return t===null?null:r.remember(e)?t:null}function N(e,r,t=512){if(!Number.isInteger(t)||t<1)throw new Error("maxLines must be a positive integer");let n;try{n=a(e,"utf-8")}catch(o){if(o?.code==="ENOENT")return;throw o}const i=n.split(/\r?\n/);i.at(-1)===""&&i.pop();for(const o of i.slice(-t))m(o)!==null&&r.remember(o)}function T(e){return`${e}.monitor.pid`}function $(e,r,t,n=3){const i=String(r);for(let o=0;o<n;o++){if(t.claim(e,i))return!0;const s=t.read(e);if(s===null)continue;const u=s.trim();if(u===""){t.removeIfContent(e,s);continue}const l=Number.parseInt(u,10);if(!Number.isNaN(l)&&t.isAlive(l))return!1;t.removeIfContent(e,s)}return!1}function k(){return{claim:(e,r)=>{const t=`${e}.tmp.${process.pid}.${h(6).toString("hex")}`;try{y(t,r,{mode:384});try{return x(t,e),!0}catch(n){if(n?.code==="EEXIST")return!1;throw n}}finally{try{p(t)}catch{}}},read:e=>{try{return a(e,"utf8")}catch{return null}},removeIfContent:(e,r)=>{try{a(e,"utf8")===r&&p(e)}catch{}},isAlive:e=>{try{return process.kill(e,0),!0}catch(r){return r?.code==="EPERM"}}}}function R(){const e=process.argv[2];e||(console.error("borg-inbox-monitor: usage: borg-inbox-monitor <inbox-path>"),process.exit(2));const r=T(e),t=k();$(r,process.pid,t)||process.exit(0);const n=()=>t.removeIfContent(r,String(process.pid)),i=new w;N(e,i);const o=d("tail",["-F","-n","0",e],{stdio:["ignore","pipe","inherit"]});o.stdout||(console.error("borg-inbox-monitor: tail subprocess has no stdout"),n(),process.exit(1));const s=I({input:o.stdout,crlfDelay:1/0});let u=!1;s.on("line",c=>{const f=v(c,i);f!==null&&console.log(f)}),o.on("error",c=>{console.error(`borg-inbox-monitor: tail failed: ${c.message}`),n(),process.exit(1)}),o.on("exit",(c,f)=>{n(),u&&process.exit(0),f&&process.exit(0),process.exit(c??0)});const l=c=>{u||(u=!0,n(),s.close(),!o.killed&&!o.kill(c)&&process.exit(0),setTimeout(()=>process.exit(0),1e3).unref())};process.once("SIGTERM",()=>l("SIGTERM")),process.once("SIGINT",()=>l("SIGINT"))}function D(e,r){try{return b(e)===E(r)}catch{return!1}}D(process.argv[1],import.meta.url)&&R();export{S as RECENT_EMITTED_LINE_CAP,w as RecentLineDeduper,$ as acquireInboxLock,m as formatEventLine,v as formatFreshEventLine,D as isEntryInvocation,T as pidfilePathFor,N as seedDeduperFromInboxTail};

package/dist/token-store.js

@@ -1 +1 @@
-import p from"path";import d from"crypto";import{AsyncEntry as h}from"@napi-rs/keyring";import{decryptString as k,encryptString as g}from"./token-crypto.js";const S="borg-mcp",E=t=>new h(S,t);function K(t=E){return{name:"keychain",async get(e){return await t(e).getPassword()??null},async set(e,o){await t(e).setPassword(o)},async delete(e){try{await t(e).deletePassword()}catch(o){const a=String(o?.message??"");if(/no entry|not found|no matching/i.test(a))return;throw o}}}}const O=25,_=2e3,F=1e4;function x(t){return new Promise(e=>setTimeout(e,t))}function v(){return`${process.pid}.${d.randomBytes(6).toString("hex")}`}function T(t){const{filePath:e,key:o,fs:a}=t,m=t.sleep??x,s=t.now??Date.now,y=t.uniqueSuffix??v,c=`${e}.lock`;async function l(){let r;try{r=await a.readFile(e)}catch{return{}}try{const n=k(r.trim(),o),i=JSON.parse(n);return i&&typeof i=="object"?i:{}}catch{return{}}}async function u(r){await a.mkdir(p.dirname(e),448);const n=`${e}.${y()}.tmp`;await a.writeFile(n,g(JSON.stringify(r),o),384);try{await a.rename(n,e)}catch(i){try{await a.removeFile(n)}catch{}throw i}}async function f(r){const n=s()+_;let i=!1;for(;!i&&(i=await a.createExclusive(c,`${process.pid}@${s()}`),!i);){const w=await a.fileAgeMs(c);if(w!==null&&w>F){await a.removeFile(c);continue}if(s()>=n){await a.removeFile(c),i=await a.createExclusive(c,`${process.pid}@${s()}`);break}await m(O)}try{return await r()}finally{i&&await a.removeFile(c)}}return{name:"encrypted-file",async get(r){const n=await l();return Object.prototype.hasOwnProperty.call(n,r)?n[r]:null},set(r,n){return f(async()=>{const i=await l();i[r]=n,await u(i)})},delete(r){return f(async()=>{const n=await l();Object.prototype.hasOwnProperty.call(n,r)&&(delete n[r],await u(n))})}}}async function b(t){return t.forced==="keychain"?t.makeKeychain():t.forced==="file"?t.makeFile():await t.keyringAvailable()?t.makeKeychain():t.makeFile()}async function L(t){const e=t.env.BORG_TOKEN?.trim();if(e)return e;const o=t.env.BORG_TOKEN_FILE?.trim();return o?(await t.readFile(o)).trim():null}export{T as makeEncryptedFileBackend,K as makeKeychainBackend,L as readCallerManagedIdToken,b as selectTokenBackend};
+import w from"path";import d from"crypto";import{AsyncEntry as h}from"@napi-rs/keyring";import{decryptString as k,encryptString as g}from"./token-crypto.js";const S="borg-mcp",E=t=>new h(S,t);function K(t=E){return{name:"keychain",async get(e){return await t(e).getPassword()??null},async set(e,o){await t(e).setPassword(o)},async delete(e){try{await t(e).deletePassword()}catch(o){const a=String(o?.message??"");if(/no entry|not found|no matching/i.test(a))return;throw o}}}}const O=25,_=2e3,F=1e4;function x(t){return new Promise(e=>setTimeout(e,t))}function v(){return`${process.pid}.${d.randomBytes(6).toString("hex")}`}function T(t){const{filePath:e,key:o,fs:a}=t,y=t.sleep??x,s=t.now??Date.now,p=t.uniqueSuffix??v,c=`${e}.lock`;async function l(){let r;try{r=await a.readFile(e)}catch{return{}}try{const n=k(r.trim(),o),i=JSON.parse(n);return i&&typeof i=="object"?i:{}}catch{return{}}}async function u(r){await a.mkdir(w.dirname(e),448);const n=`${e}.${p()}.tmp`;await a.writeFile(n,g(JSON.stringify(r),o),384);try{await a.rename(n,e)}catch(i){try{await a.removeFile(n)}catch{}throw i}}async function f(r){await a.mkdir(w.dirname(c),448);const n=s()+_;let i=!1;for(;!i&&(i=await a.createExclusive(c,`${process.pid}@${s()}`),!i);){const m=await a.fileAgeMs(c);if(m!==null&&m>F){await a.removeFile(c);continue}if(s()>=n){await a.removeFile(c),i=await a.createExclusive(c,`${process.pid}@${s()}`);break}await y(O)}try{return await r()}finally{i&&await a.removeFile(c)}}return{name:"encrypted-file",async get(r){const n=await l();return Object.prototype.hasOwnProperty.call(n,r)?n[r]:null},set(r,n){return f(async()=>{const i=await l();i[r]=n,await u(i)})},delete(r){return f(async()=>{const n=await l();Object.prototype.hasOwnProperty.call(n,r)&&(delete n[r],await u(n))})}}}async function b(t){return t.forced==="keychain"?t.makeKeychain():t.forced==="file"?t.makeFile():await t.keyringAvailable()?t.makeKeychain():t.makeFile()}async function L(t){const e=t.env.BORG_TOKEN?.trim();if(e)return e;const o=t.env.BORG_TOKEN_FILE?.trim();return o?(await t.readFile(o)).trim():null}export{T as makeEncryptedFileBackend,K as makeKeychainBackend,L as readCallerManagedIdToken,b as selectTokenBackend};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "borgmcp",
-  "version": "1.0.13",
+  "version": "1.0.15",
   "description": "Coordinate AI coding agents in shared cubes. Works with Claude Code and Codex. Create projects, assign roles, and share a live activity log.",
   "type": "module",
   "main": "dist/index.js",