borgmcp 1.0.5 → 1.0.7

package/dist/remote-client.js

@@ -1,695 +1 @@
-/**
- * Remote HTTP client for api.borgmcp.ai
- *
- * Handles:
- * - HTTP requests to remote MCP server
- * - Automatic token injection
- * - Network failure handling with retry + exponential backoff
- * - Offline queue for pending operations
- */
-import { getIdToken, getRefreshToken, clearTokens } from './config.js';
-import { refreshIdToken, RefreshTokenInvalidError } from './auth.js';
-import { consolePrefix } from './console-prefix.js';
-import { debugLog } from './debug.js';
-export const API_URL = process.env.BORG_API_URL || 'https://api.borgmcp.ai';
-const MAX_RETRIES = 3;
-const INITIAL_BACKOFF_MS = 1000; // 1 second
-const MAX_BACKOFF_MS = 30000; // 30 seconds
-// gh#330: honor the server's Retry-After on 429 instead of failing the
-// (often required) coordination signal outright. Bounded so a CLI call
-// never blocks unboundedly; capped per attempt so a large window-reset
-// retryAfter can't wedge the call.
-const RATE_LIMIT_MAX_RETRIES = 3;
-const RATE_LIMIT_MAX_WAIT_MS = 60_000; // cap a single Retry-After honor
-/**
- * Parse a `Retry-After` header (delta-seconds form, which the worker
- * emits — mcp-server.ts:382/583) into milliseconds. Returns null when
- * absent or not a non-negative integer count of seconds. (The HTTP-date
- * form is not emitted by the worker, so it is intentionally unhandled.)
- */
-export function parseRetryAfterMs(headerValue) {
-    if (headerValue == null)
-        return null;
-    const trimmed = headerValue.trim();
-    if (!/^\d+$/.test(trimmed))
-        return null;
-    return parseInt(trimmed, 10) * 1000;
-}
-/**
- * How long to wait before the next 429 retry. Honors the server's
- * Retry-After when present (capped at `capMs` so a full-window reset
- * can't wedge a CLI call); falls back to an escalating 1s·(attempt+1)
- * when absent. Adds jitter (injected for tests) so co-located sibling
- * drones sharing one per-IP bucket don't retry in lockstep.
- */
-export function rateLimitWaitMs(retryAfterMs, attempt, capMs = RATE_LIMIT_MAX_WAIT_MS, jitter = () => Math.random() * 500) {
-    const base = retryAfterMs != null ? retryAfterMs : 1000 * (attempt + 1);
-    return Math.min(base, capMs) + jitter();
-}
-/**
- * Given an ALREADY-OBTAINED response, while it is a 429 and retries
- * remain, wait per `rateLimitWaitMs` (honoring the CURRENT response's
- * Retry-After) and THEN re-run `doRequest`. Takes `initialResponse`
- * (not a first request) because the caller has already made the request
- * and read its status — re-fetching first would ignore the first 429's
- * Retry-After and double-fire an immediate extra request (CR blocker
- * d3a564f5). Returns the last Response (200-class on success, or a final
- * 429 if retries exhaust — the caller surfaces that). `sleep` is
- * injected for deterministic tests; no fetch-global mocking required.
- */
-export async function retryOn429(initialResponse, doRequest, opts) {
-    const maxRetries = opts.maxRetries ?? RATE_LIMIT_MAX_RETRIES;
-    let response = initialResponse;
-    let attempt = 0;
-    while (response.status === 429 && attempt < maxRetries) {
-        // Honor THIS 429's Retry-After BEFORE issuing the next request.
-        const waitMs = rateLimitWaitMs(parseRetryAfterMs(response.headers.get('Retry-After')), attempt, opts.capMs, opts.jitter);
-        opts.log?.(`rate limited (429); retrying in ${Math.round(waitMs)}ms (attempt ${attempt + 1}/${maxRetries})`);
-        await opts.sleep(waitMs);
-        attempt++;
-        response = await doRequest();
-    }
-    return response;
-}
-/**
- * Exponential backoff delay
- */
-function calculateBackoff(retryCount) {
-    const delay = Math.min(INITIAL_BACKOFF_MS * Math.pow(2, retryCount), MAX_BACKOFF_MS);
-    // Add jitter to avoid thundering herd
-    return delay + Math.random() * 1000;
-}
-/**
- * Sleep for specified milliseconds
- */
-function sleep(ms) {
-    return new Promise(resolve => setTimeout(resolve, ms));
-}
-/**
- * Get valid auth token (refreshes if expired).
- *
- * Exported so the SSE log-stream consumer (`client/src/log-stream.ts`)
- * can attach the same Bearer header that `authedFetch` uses for REST,
- * without duplicating the refresh-token plumbing.
- */
-export async function getValidToken() {
-    let token = await getIdToken();
-    if (!token) {
-        // Token expired, try to refresh
-        const refreshToken = await getRefreshToken();
-        if (refreshToken) {
-            try {
-                await refreshIdToken(refreshToken);
-                token = await getIdToken();
-            }
-            catch (error) {
-                // gh#34: only `clearTokens()` on the canonical revocation
-                // signal (`RefreshTokenInvalidError`). Transient failures
-                // (network/DNS/timeout/Google 5xx/parse fail) leave the
-                // keychain intact so the next call can retry — a single
-                // transient blip no longer destroys a durable session.
-                if (error instanceof RefreshTokenInvalidError) {
-                    await clearTokens();
-                }
-                // Fall through — token stays null; the throw below surfaces
-                // the right user-facing message based on whether tokens
-                // were cleared (Authentication required) or preserved
-                // (Authentication failed — retry below).
-            }
-        }
-        if (!token) {
-            throw new Error('Authentication required. Run: borg assimilate');
-        }
-    }
-    return token;
-}
-/**
- * Force-refresh the ID token using the stored refresh token, regardless
- * of local expiry timestamp.
- *
- * Returns the new token on success, or null if no refresh token is stored
- * or the refresh failed (in which case stored tokens are cleared so the
- * next getValidToken() throws "Authentication required").
- *
- * Used by the 401-retry path: when the worker rejects a token the client
- * thinks is fresh (clock skew, JWKS rotation, transient validation
- * glitch), force a refresh and retry once before bothering the user.
- */
-async function forceRefreshToken() {
-    const refreshToken = await getRefreshToken();
-    if (!refreshToken) {
-        return null;
-    }
-    try {
-        await refreshIdToken(refreshToken);
-        return await getIdToken();
-    }
-    catch (error) {
-        // gh#34: only `clearTokens()` on the canonical revocation
-        // signal (`RefreshTokenInvalidError`). Transient failures
-        // preserve the keychain so subsequent calls (and the next
-        // session's wake) can retry. The pre-gh#34 shape called
-        // `clearTokens()` unconditionally — a single network blip
-        // would destroy the durable session in a way no auto-retry
-        // could recover from.
-        if (error instanceof RefreshTokenInvalidError) {
-            await clearTokens();
-        }
-        return null;
-    }
-}
-/**
- * Call remote MCP tool with retry logic
- */
-export async function callRemoteTool(toolName, args) {
-    let lastError = null;
-    let authRetryUsed = false;
-    for (let attempt = 0; attempt <= MAX_RETRIES; attempt++) {
-        try {
-            const token = await getValidToken();
-            const argsWithAuth = { ...args, auth_token: token };
-            const response = await fetch(`${API_URL}/mcp`, {
-                method: 'POST',
-                headers: { 'Content-Type': 'application/json' },
-                body: JSON.stringify({
-                    jsonrpc: '2.0',
-                    id: `client-${Date.now()}`,
-                    method: 'tools/call',
-                    params: { name: toolName, arguments: argsWithAuth },
-                }),
-            });
-            // 401 = worker rejected the token (clock skew, JWKS rotation, expired).
-            // Force a refresh and retry once before giving up.
-            if (response.status === 401 && !authRetryUsed) {
-                authRetryUsed = true;
-                const refreshed = await forceRefreshToken();
-                if (refreshed) {
-                    continue;
-                }
-                throw new Error('Authentication required. Run: borg assimilate');
-            }
-            if (!response.ok) {
-                throw new Error(`HTTP ${response.status}: ${await response.text()}`);
-            }
-            const data = (await response.json());
-            if (data.error) {
-                // Server-reported auth failure inside a 200 envelope — same recovery
-                // path as HTTP 401.
-                const errMsg = (data.error.message || '').toLowerCase();
-                if ((errMsg.includes('auth') || errMsg.includes('token')) && !authRetryUsed) {
-                    authRetryUsed = true;
-                    const refreshed = await forceRefreshToken();
-                    if (refreshed) {
-                        continue;
-                    }
-                    throw new Error('Authentication required. Run: borg assimilate');
-                }
-                throw new Error(data.error.message || 'Remote tool call failed');
-            }
-            return { success: true, data: data.result };
-        }
-        catch (error) {
-            lastError = error;
-            // Stop the retry loop on terminal auth failures (refresh already tried
-            // above; no point in burning more attempts).
-            if (error.message?.includes('Authentication required')) {
-                throw error;
-            }
-            if (attempt >= MAX_RETRIES) {
-                break;
-            }
-            const backoff = calculateBackoff(attempt);
-            console.error(`${consolePrefix()}Retry ${attempt + 1}/${MAX_RETRIES} after ${Math.round(backoff)}ms...`);
-            await sleep(backoff);
-        }
-    }
-    throw new Error(`Failed after ${MAX_RETRIES} retries: ${lastError?.message}`);
-}
-/**
- * Authenticated fetch helper.
- *
- * Adds the Bearer token + optional drone-session header, parses errors
- * consistently, and surfaces a helpful "run: borg assimilate" message on 401.
- *
- * Accepts an optional `apiUrl` override so already-assimilated callers can
- * route to the worker that issued their drone session token, regardless of
- * what BORG_API_URL was set to when this process started.
- */
-async function authedFetch(path, init = {}) {
-    let token = await getValidToken();
-    const { droneSession, apiUrl, headers, ...rest } = init;
-    const baseUrl = apiUrl ?? API_URL;
-    const method = (rest.method ?? 'GET').toUpperCase();
-    const buildRequest = async (tok) => {
-        const finalHeaders = {
-            'Authorization': `Bearer ${tok}`,
-            ...headers,
-        };
-        if (droneSession) {
-            finalHeaders['X-Drone-Session'] = droneSession;
-        }
-        // --debug / BORG_DEBUG: trace every HTTP attempt (initial + 401/429
-        // retries). Logs method/path/status ONLY — never the Authorization
-        // header or any token material (debugLog no-ops when debug is off).
-        debugLog(`→ ${method} ${path}`);
-        const res = await fetch(`${baseUrl}${path}`, {
-            ...rest,
-            headers: finalHeaders,
-        });
-        debugLog(`← ${res.status} ${method} ${path}`);
-        return res;
-    };
-    let response = await buildRequest(token);
-    // 401 on a token getValidToken just handed us means the local expiry
-    // tracker disagrees with the server. Causes seen in practice: worker
-    // JWKS cache miss after Google key rotation, clock skew, transient
-    // validation glitch. Force a refresh and retry once before forcing
-    // the user back through `borg assimilate`.
-    if (response.status === 401) {
-        const refreshed = await forceRefreshToken();
-        if (refreshed) {
-            token = refreshed;
-            response = await buildRequest(token);
-        }
-    }
-    if (response.status === 401) {
-        throw new Error('Authentication required. Run: borg assimilate');
-    }
-    // gh#330: honor the server's Retry-After on 429 instead of failing the
-    // (often required) coordination signal — borg:log / read-log / regen /
-    // roster / ack all route through here. Bounded + capped + jittered.
-    if (response.status === 429) {
-        response = await retryOn429(response, () => buildRequest(token), {
-            sleep,
-            log: (msg) => console.error(`${consolePrefix()}${msg}`),
-        });
-    }
-    if (!response.ok) {
-        // Read the body ONCE (the stream can only be consumed once) and reuse
-        // it for both the debug trace and the thrown error. The server error
-        // body is token-free (it never echoes the Authorization header), so it
-        // is safe to surface under --debug.
-        const body = await response.text();
-        debugLog(`✗ ${response.status} ${method} ${path}: ${body}`);
-        // Enrich the 429 message with the server's retry guidance so a
-        // still-exhausted limit surfaces an actionable wait, not a bare code.
-        if (response.status === 429) {
-            const retryAfter = response.headers.get('Retry-After');
-            const hint = retryAfter ? ` (retry after ${retryAfter}s)` : '';
-            throw new Error(`HTTP 429: rate limited${hint}: ${body}`);
-        }
-        throw new Error(`HTTP ${response.status}: ${body}`);
-    }
-    return response;
-}
-/**
- * Connect this client as a Drone to a Cube.
- *
- * Returns the cube definition, the drone's assigned role (with full
- * detailed_description), the drone record, and an opaque session token
- * the caller is expected to persist via cubes.ts.
- */
-export async function assimilate(cubeNameOrSelector, apiUrl, hostname, agentKind) {
-    // String first arg → legacy cube_name-only path (backwards compat).
-    // Object first arg → orchestrator path with optional cube_id /
-    // role_id / role_name; assimilate-cmd uses this shape.
-    const body = { hostname: hostname ?? null };
-    if (agentKind === 'claude' || agentKind === 'codex')
-        body.agent_kind = agentKind;
-    if (typeof cubeNameOrSelector === 'string') {
-        body.cube_name = cubeNameOrSelector;
-    }
-    else {
-        if (cubeNameOrSelector.cube_id)
-            body.cube_id = cubeNameOrSelector.cube_id;
-        if (cubeNameOrSelector.cube_name)
-            body.cube_name = cubeNameOrSelector.cube_name;
-        if (cubeNameOrSelector.role_id)
-            body.role_id = cubeNameOrSelector.role_id;
-        if (cubeNameOrSelector.role_name)
-            body.role_name = cubeNameOrSelector.role_name;
-    }
-    const response = await authedFetch('/api/assimilate', {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify(body),
-        apiUrl,
-    });
-    return await response.json();
-}
-/**
- * Get the active cube's directive + role registry.
- */
-export async function getCubeInfo(sessionToken, apiUrl) {
-    const response = await authedFetch('/api/drone/cube', {
-        method: 'GET',
-        droneSession: sessionToken,
-        apiUrl,
-    });
-    return await response.json();
-}
-/**
- * Get this drone's assigned role (with detailed_description).
- */
-export async function getRoleInfo(sessionToken, apiUrl) {
-    const response = await authedFetch('/api/drone/role', {
-        method: 'GET',
-        droneSession: sessionToken,
-        apiUrl,
-    });
-    return await response.json();
-}
-export async function whoami(sessionToken, apiUrl) {
-    const response = await authedFetch('/api/drone/whoami', {
-        method: 'GET',
-        droneSession: sessionToken,
-        apiUrl,
-    });
-    return await response.json();
-}
-/**
- * List all currently-connected drones in this cube.
- *
- * Optional `since` is the T2.1 sender-side liveness probe — pass either
- * an activity_log entry id (UUID; server resolves to its `created_at`)
- * OR an ISO-8601 timestamp. When provided, the response includes:
- *   - per-drone `seen_since: boolean` — true iff that drone's
- *     `last_seen` is strictly after the resolved timestamp
- *   - top-level `since: ISO-string | null` — the resolved timestamp
- *     (echoed back so the renderer can label the column accurately
- *     even when the caller passed an entry-id)
- */
-export async function getRoster(sessionToken, apiUrl, since) {
-    const qs = since ? `?since=${encodeURIComponent(since)}` : '';
-    const response = await authedFetch(`/api/drone/roster${qs}`, {
-        method: 'GET',
-        droneSession: sessionToken,
-        apiUrl,
-    });
-    return await response.json();
-}
-/**
- * Read recent log entries for the cube.
- */
-export async function readLog(sessionToken, apiUrl, opts = {}) {
-    const params = new URLSearchParams();
-    if (opts.since)
-        params.set('since', opts.since);
-    if (opts.limit !== undefined)
-        params.set('limit', String(opts.limit));
-    if (opts.unreadOnly)
-        params.set('unread_only', 'true');
-    const qs = params.toString();
-    const response = await authedFetch(`/api/drone/log${qs ? `?${qs}` : ''}`, {
-        method: 'GET',
-        droneSession: sessionToken,
-        apiUrl,
-    });
-    return await response.json();
-}
-/**
- * Sprint 25 log substrate refactor: explicit ack on a log entry.
- *
- * Replaces in-band `ACK: <dispatch-id>` log entries with a DB-backed
- * flag on activity_log_acks. Idempotent — the server INSERT uses ON
- * CONFLICT DO NOTHING. 204 No Content on success.
- */
-export async function ackLogEntry(sessionToken, apiUrl, entryId) {
-    await authedFetch(`/api/drone/log/${entryId}/ack`, {
-        method: 'POST',
-        body: JSON.stringify({ kind: 'ack' }),
-        droneSession: sessionToken,
-        apiUrl,
-    });
-}
-/**
- * Regen: one-shot composite of everything a drone needs to be oriented.
- *
- * Returns the active cube's directive, the drone's own role with full
- * detailed_description, the public role registry (no detailed_description
- * leakage for OTHER roles), the drone roster, and recent log entries.
- * Use on session start and before each new task to stay in sync.
- *
- * gh#29 Sprint C / Q3a: optional `since` cursor (entry-id UUID or
- * ISO-8601 timestamp) trims the embedded recentLog to entries strictly
- * after the anchor — closes the regen-overflow class when drones track
- * their last-seen entry across iterations.
- */
-export async function regen(sessionToken, apiUrl, opts = {}) {
-    const params = new URLSearchParams();
-    if (opts.since)
-        params.set('since', opts.since);
-    const qs = params.toString();
-    const response = await authedFetch(`/api/drone/regen${qs ? `?${qs}` : ''}`, {
-        method: 'GET',
-        droneSession: sessionToken,
-        apiUrl,
-    });
-    return await response.json();
-}
-export async function roleRationale(sessionToken, apiUrl, role, section) {
-    const params = new URLSearchParams({ role, section });
-    const response = await authedFetch(`/api/drone/role-rationale?${params.toString()}`, {
-        method: 'GET',
-        droneSession: sessionToken,
-        apiUrl,
-    });
-    return await response.json();
-}
-/**
- * Append a message to the cube's shared activity log.
- */
-export async function appendLog(sessionToken, apiUrl, message, opts = {}) {
-    const body = {
-        message,
-        ...(opts.visibility ? { visibility: opts.visibility } : {}),
-        ...(opts.recipientDroneIds ? { recipientDroneIds: opts.recipientDroneIds } : {}),
-        ...(opts.class ? { class: opts.class } : {}),
-        ...(opts.to ? { to: opts.to } : {}),
-    };
-    const response = await authedFetch('/api/drone/log', {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        droneSession: sessionToken,
-        apiUrl,
-        body: JSON.stringify(body),
-    });
-    return await response.json();
-}
-/**
- * List all cubes owned by the authenticated user. Owner-scoped via the
- * Bearer token alone; no drone session needed.
- */
-export async function listCubes() {
-    const response = await authedFetch('/api/cubes', { method: 'GET' });
-    return await response.json();
-}
-/**
- * List bundled cube templates. Used by the `borg assimilate` orchestrator
- * to surface the interactive template prompt on first-drone bootstrap.
- */
-export async function listTemplates() {
-    const response = await authedFetch('/api/templates', { method: 'GET' });
-    return await response.json();
-}
-/**
- * Create a new cube. Server-side seeds a default "Drone" role atomically
- * so the cube is assimilatable immediately, OR applies the named template
- * atomically when `opts.template` is set (single-withUserId transaction —
- * skips the auto-Drone insert to avoid is_default partial-index conflict).
- *
- * Returns `{ cube, roles }` — the roles array lets the assimilate
- * orchestrator pick a default role without a follow-up `getCube` call.
- * Existing callers that read `body.cube` keep working (forward-compat).
- */
-export async function createCube(name, cubeDirective, opts) {
-    const body = { cube_directive: cubeDirective };
-    if (name)
-        body.name = name;
-    if (opts?.template)
-        body.template = opts.template;
-    if (opts && Object.prototype.hasOwnProperty.call(opts, 'message_taxonomy')) {
-        body.message_taxonomy = opts.message_taxonomy ?? null;
-    }
-    const response = await authedFetch('/api/cubes', {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify(body),
-    });
-    // BUG-2 fix (v0.9.2, drone-1 dispatch 2026-05-18T10:48Z): server
-    // returns `{ cube, roles }` (Phase B wire shape). Unwrap at this
-    // boundary so callers receive a flat shape `{ id, name, ...cube,
-    // roles, drones }` consistent with the orchestrator's CubeDetail
-    // expectation. The `body.cube ?` ternary preserves backwards-compat
-    // for any future endpoint that might return a non-wrapped shape.
-    const responseBody = await response.json();
-    return responseBody.cube
-        ? { ...responseBody.cube, roles: responseBody.roles ?? [], drones: responseBody.drones ?? [] }
-        : responseBody;
-}
-/**
- * Update a cube's name and/or cube_directive. Both fields are optional;
- * pass only what changes.
- */
-export async function updateCube(cubeId, updates) {
-    const response = await authedFetch(`/api/cubes/${cubeId}`, {
-        method: 'PATCH',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify(updates),
-    });
-    return await response.json();
-}
-/**
- * gh#473 PR1 — granular per-class taxonomy patch. Add / replace-by-name
- * / remove a single class within the cube's message_taxonomy, leaving
- * other classes unchanged. The worker re-validates the FULL resulting
- * array (cross-class invariants) before persist. Owner-scoped via the
- * Bearer token.
- */
-export async function patchTaxonomyClass(cubeId, op) {
-    const response = await authedFetch(`/api/cubes/${cubeId}/taxonomy-patch`, {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify(op),
-    });
-    return await response.json();
-}
-/**
- * Delete a cube. Cascade-deletes all roles, drones, and log entries.
- * Owner-scoped via the Bearer token; the worker enforces ownership.
- */
-export async function deleteCube(cubeId) {
-    await authedFetch(`/api/cubes/${cubeId}`, { method: 'DELETE' });
-}
-/**
- * Create a role inside a cube. is_default=true demotes the previous
- * default role; the cube always has exactly one default.
- */
-export async function createRole(cubeId, data) {
-    const response = await authedFetch(`/api/cubes/${cubeId}/roles`, {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify(data),
-    });
-    return await response.json();
-}
-/**
- * Update a role. All fields optional; pass only what changes.
- */
-export async function updateRole(roleId, updates) {
-    const response = await authedFetch(`/api/roles/${roleId}`, {
-        method: 'PATCH',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify(updates),
-    });
-    return await response.json();
-}
-/**
- * gh#473 PR1 — granular role-text section patch. Replace / insert /
- * delete a single named section of a role's detailed_description,
- * leaving the rest of the field byte-identical. Owner-scoped via the
- * Bearer token. Sections are delimited by plain-label lines (e.g.
- * `Workflow:`), NOT markdown headings.
- */
-export async function patchRoleSection(roleId, op) {
-    const response = await authedFetch(`/api/roles/${roleId}/section-patch`, {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify(op),
-    });
-    return await response.json();
-}
-/**
- * Delete a role. Worker refuses if any drone is still assigned to it
- * (reassign or evict those drones first).
- */
-export async function deleteRole(roleId) {
-    await authedFetch(`/api/roles/${roleId}`, { method: 'DELETE' });
-}
-/**
- * Reassign a drone to a different role within the same cube.
- * Queen-class seat cardinality is enforced server-side — attempting
- * to assign to a queen-class role when another drone already holds
- * the seat returns an error. The class-hierarchy guard also rejects
- * direct promotion from non-human-seat roles.
- */
-export async function reassignDrone(droneId, roleId) {
-    const response = await authedFetch(`/api/drones/${droneId}`, {
-        method: 'PATCH',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify({ role_id: roleId }),
-    });
-    return await response.json();
-}
-/**
- * Fetch a cube's full detail: directive, roles (with detailed
- * descriptions, owner-only), and drones. Owner-scoped via the Bearer
- * token; no drone session needed.
- */
-export async function getCube(cubeId) {
-    const response = await authedFetch(`/api/cubes/${cubeId}`, { method: 'GET' });
-    // BUG-2 fix (v0.9.2): same unwrap pattern as createCube — server
-    // returns `{ cube, roles, drones }`; callers get flat shape.
-    const responseBody = await response.json();
-    return responseBody.cube
-        ? { ...responseBody.cube, roles: responseBody.roles ?? [], drones: responseBody.drones ?? [] }
-        : responseBody;
-}
-/**
- * gh#473 PR2 — apply a named template to an existing cube via the
- * NON-CLOBBERING server route. New roles are inserted; existing
- * template-named roles get ADD fragments auto-applied (template
- * sections/classes the cube lacks) but their EVOLVED (conflicting)
- * fragments are surfaced server-side and KEPT, never overwritten. Returns
- * `{ created, updated }` counts. To selectively take template versions of
- * conflicting fragments, use `syncRoles` with a `decisions` map instead.
- */
-export async function applyTemplate(cubeId, templateName) {
-    const response = await authedFetch(`/api/cubes/${cubeId}/apply-template`, {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify({ template_name: templateName }),
-    });
-    return await response.json();
-}
-/**
- * Check subscription status
- */
-export async function checkSubscriptionStatus() {
-    const response = await authedFetch('/api/subscription/status', { method: 'GET' });
-    return await response.json();
-}
-/**
- * gh#473 PR2 — NON-CLOBBERING sync of a cube's roles + message_taxonomy
- * against the current built-in template. Dry-run by default classifies
- * each fragment (role-text SECTION / short_description / flags / taxonomy
- * CLASS) as ADD / UNCHANGED / CONFLICT. Pass apply=true to commit:
- * ADD fragments auto-apply (zero clobber risk); CONFLICT fragments apply
- * ONLY when their stable key appears in `decisions` as 'accept'.
- * Unspecified conflicts DEFAULT TO REJECT — the cube's evolved text is
- * never silently overwritten. Custom roles (names not in template) are
- * never touched. Returns a NonClobberSyncResult.
- */
-export async function syncRoles(cubeId, templateName = 'software-dev', apply = false, decisions) {
-    const response = await authedFetch(`/api/cubes/${cubeId}/sync-roles`, {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify({ template_name: templateName, apply, ...(decisions ? { decisions } : {}) }),
-    });
-    return await response.json();
-}
-/**
- * Create subscription (returns checkout URL)
- */
-export async function createSubscription() {
-    const response = await authedFetch('/api/subscribe', {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-    });
-    const data = (await response.json());
-    if (!data.checkout_url) {
-        throw new Error('No checkout URL in response');
-    }
-    return data.checkout_url;
-}
-//# sourceMappingURL=remote-client.js.map
+import{getIdToken as y,getRefreshToken as b,clearTokens as g}from"./config.js";import{refreshIdToken as $,RefreshTokenInvalidError as x}from"./auth.js";import{consolePrefix as S}from"./console-prefix.js";import{debugLog as m}from"./debug.js";const _=process.env.BORG_API_URL||"https://api.borgmcp.ai",w=3,E=1e3,k=3e4,C=3,A=6e4;function P(e){if(e==null)return null;const n=e.trim();return/^\d+$/.test(n)?parseInt(n,10)*1e3:null}function I(e,n,t=A,o=()=>Math.random()*500){const s=e??1e3*(n+1);return Math.min(s,t)+o()}async function O(e,n,t){const o=t.maxRetries??C;let s=e,a=0;for(;s.status===429&&a<o;){const c=I(P(s.headers.get("Retry-After")),a,t.capMs,t.jitter);t.log?.(`rate limited (429); retrying in ${Math.round(c)}ms (attempt ${a+1}/${o})`),await t.sleep(c),a++,s=await n()}return s}function M(e){return Math.min(E*Math.pow(2,e),k)+Math.random()*1e3}function j(e){return new Promise(n=>setTimeout(n,e))}async function R(){let e=await y();if(!e){const n=await b();if(n)try{await $(n),e=await y()}catch(t){t instanceof x&&await g()}if(!e)throw new Error("Authentication required. Run: borg assimilate")}return e}async function T(){const e=await b();if(!e)return null;try{return await $(e),await y()}catch(n){return n instanceof x&&await g(),null}}async function q(e,n){let t=null,o=!1;for(let s=0;s<=w;s++)try{const a=await R(),c={...n,auth_token:a},d=await fetch(`${_}/mcp`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:`client-${Date.now()}`,method:"tools/call",params:{name:e,arguments:c}})});if(d.status===401&&!o){if(o=!0,await T())continue;throw new Error("Authentication required. Run: borg assimilate")}if(!d.ok)throw new Error(`HTTP ${d.status}: ${await d.text()}`);const u=await d.json();if(u.error){const l=(u.error.message||"").toLowerCase();if((l.includes("auth")||l.includes("token"))&&!o){if(o=!0,await T())continue;throw new Error("Authentication required. Run: borg assimilate")}throw new Error(u.error.message||"Remote tool call failed")}return{success:!0,data:u.result}}catch(a){if(t=a,a.message?.includes("Authentication required"))throw a;if(s>=w)break;const c=M(s);console.error(`${S()}Retry ${s+1}/${w} after ${Math.round(c)}ms...`),await j(c)}throw new Error(`Failed after ${w} retries: ${t?.message}`)}async function r(e,n={}){let t=await R();const{droneSession:o,apiUrl:s,headers:a,...c}=n,d=s??_,u=(c.method??"GET").toUpperCase(),l=async p=>{const f={Authorization:`Bearer ${p}`,...a};o&&(f["X-Drone-Session"]=o),m(`\u2192 ${u} ${e}`);const h=await fetch(`${d}${e}`,{...c,headers:f});return m(`\u2190 ${h.status} ${u} ${e}`),h};let i=await l(t);if(i.status===401){const p=await T();p&&(t=p,i=await l(t))}if(i.status===401)throw new Error("Authentication required. Run: borg assimilate");if(i.status===429&&(i=await O(i,()=>l(t),{sleep:j,log:p=>console.error(`${S()}${p}`)})),!i.ok){const p=await i.text();if(m(`\u2717 ${i.status} ${u} ${e}: ${p}`),i.status===429){const f=i.headers.get("Retry-After"),h=f?` (retry after ${f}s)`:"";throw new Error(`HTTP 429: rate limited${h}: ${p}`)}throw new Error(`HTTP ${i.status}: ${p}`)}return i}async function D(e,n,t,o){const s={hostname:t??null};return(o==="claude"||o==="codex")&&(s.agent_kind=o),typeof e=="string"?s.cube_name=e:(e.cube_id&&(s.cube_id=e.cube_id),e.cube_name&&(s.cube_name=e.cube_name),e.role_id&&(s.role_id=e.role_id),e.role_name&&(s.role_name=e.role_name)),await(await r("/api/assimilate",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(s),apiUrl:n})).json()}async function v(e,n){return await(await r("/api/drone/cube",{method:"GET",droneSession:e,apiUrl:n})).json()}async function B(e,n){return await(await r("/api/drone/role",{method:"GET",droneSession:e,apiUrl:n})).json()}async function H(e,n){return await(await r("/api/drone/whoami",{method:"GET",droneSession:e,apiUrl:n})).json()}async function F(e,n,t){const o=t?`?since=${encodeURIComponent(t)}`:"";return await(await r(`/api/drone/roster${o}`,{method:"GET",droneSession:e,apiUrl:n})).json()}async function N(e,n,t={}){const o=new URLSearchParams;t.since&&o.set("since",t.since),t.limit!==void 0&&o.set("limit",String(t.limit)),t.unreadOnly&&o.set("unread_only","true");const s=o.toString();return await(await r(`/api/drone/log${s?`?${s}`:""}`,{method:"GET",droneSession:e,apiUrl:n})).json()}async function X(e,n,t){await r(`/api/drone/log/${t}/ack`,{method:"POST",body:JSON.stringify({kind:"ack"}),droneSession:e,apiUrl:n})}async function W(e,n,t={}){const o=new URLSearchParams;t.since&&o.set("since",t.since);const s=o.toString();return await(await r(`/api/drone/regen${s?`?${s}`:""}`,{method:"GET",droneSession:e,apiUrl:n})).json()}async function z(e,n,t,o){const s=new URLSearchParams({role:t,section:o});return await(await r(`/api/drone/role-rationale?${s.toString()}`,{method:"GET",droneSession:e,apiUrl:n})).json()}async function K(e,n,t,o={}){const s={message:t,...o.visibility?{visibility:o.visibility}:{},...o.recipientDroneIds?{recipientDroneIds:o.recipientDroneIds}:{},...o.class?{class:o.class}:{},...o.to?{to:o.to}:{}};return await(await r("/api/drone/log",{method:"POST",headers:{"Content-Type":"application/json"},droneSession:e,apiUrl:n,body:JSON.stringify(s)})).json()}async function Q(){return await(await r("/api/cubes",{method:"GET"})).json()}async function V(){return await(await r("/api/templates",{method:"GET"})).json()}async function Y(e,n,t){const o={cube_directive:n};e&&(o.name=e),t?.template&&(o.template=t.template),t&&Object.prototype.hasOwnProperty.call(t,"message_taxonomy")&&(o.message_taxonomy=t.message_taxonomy??null);const a=await(await r("/api/cubes",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(o)})).json();return a.cube?{...a.cube,roles:a.roles??[],drones:a.drones??[]}:a}async function Z(e,n){return await(await r(`/api/cubes/${e}`,{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify(n)})).json()}async function ee(e,n){return await(await r(`/api/cubes/${e}/taxonomy-patch`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(n)})).json()}async function te(e){await r(`/api/cubes/${e}`,{method:"DELETE"})}async function ne(e,n){return await(await r(`/api/cubes/${e}/roles`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(n)})).json()}async function oe(e,n){return await(await r(`/api/roles/${e}`,{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify(n)})).json()}async function se(e,n){return await(await r(`/api/roles/${e}/section-patch`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(n)})).json()}async function re(e){await r(`/api/roles/${e}`,{method:"DELETE"})}async function ae(e,n){return await(await r(`/api/drones/${e}`,{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({role_id:n})})).json()}async function ie(e){const t=await(await r(`/api/cubes/${e}`,{method:"GET"})).json();return t.cube?{...t.cube,roles:t.roles??[],drones:t.drones??[]}:t}async function ce(e,n){return await(await r(`/api/cubes/${e}/apply-template`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({template_name:n})})).json()}async function pe(){return await(await r("/api/subscription/status",{method:"GET"})).json()}async function ue(e,n="software-dev",t=!1,o){return await(await r(`/api/cubes/${e}/sync-roles`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({template_name:n,apply:t,...o?{decisions:o}:{}})})).json()}async function de(){const n=await(await r("/api/subscribe",{method:"POST",headers:{"Content-Type":"application/json"}})).json();if(!n.checkout_url)throw new Error("No checkout URL in response");return n.checkout_url}export{_ as API_URL,X as ackLogEntry,K as appendLog,ce as applyTemplate,D as assimilate,q as callRemoteTool,pe as checkSubscriptionStatus,Y as createCube,ne as createRole,de as createSubscription,te as deleteCube,re as deleteRole,ie as getCube,v as getCubeInfo,B as getRoleInfo,F as getRoster,R as getValidToken,Q as listCubes,V as listTemplates,P as parseRetryAfterMs,se as patchRoleSection,ee as patchTaxonomyClass,I as rateLimitWaitMs,N as readLog,ae as reassignDrone,W as regen,O as retryOn429,z as roleRationale,ue as syncRoles,Z as updateCube,oe as updateRole,H as whoami};