borgmcp 1.0.5 → 1.0.7

package/dist/shell-escape.js

@@ -1,22 +1 @@
-// POSIX-safe shell-escaping for paste-intended emission.
-//
-// Sprint 18 (gh-tracked via dispatch 10:41:47Z): when the CLI emits a
-// `cd <path>` line for the user to copy-paste into their shell, the path is
-// a filesystem-controlled string with no character constraints (unlike
-// DB-CHECK-constrained role/cube names). Paths can legally contain spaces,
-// `$VAR`, backticks, `$(cmd)`, embedded single-quotes, and other shell
-// metacharacters that would execute on paste under naive emission.
-//
-// drone-11 SR-LANE (cube entry 2026-05-19T10:44:35Z) escalation: double-
-// quoting handles spaces but `$VAR` / backtick / `$(cmd)` still expand
-// inside double-quotes. Single-quotes with internal-quote escape (`'\''`
-// = close-quote / escaped-quote / re-open-quote) defang every shell
-// metachar including embedded `'`. POSIX-defined, copy-paste-runnable
-// across bash / zsh / dash / sh.
-//
-// Behavior: returns the input wrapped in single-quotes with any internal
-// `'` rewritten as `'\''`. Empty string returns `''`.
-export function shellEscape(s) {
-    return `'${s.replace(/'/g, `'\\''`)}'`;
-}
-//# sourceMappingURL=shell-escape.js.map
+function r(e){return`'${e.replace(/'/g,"'\\''")}'`}export{r as shellEscape};

package/dist/spawn.js

@@ -1,29 +1,10 @@
-/**
- * `borg spawn` — deprecation stub.
- *
- * Replaced by `borg assimilate [role] --worktree <name>` (see
- * `assimilate-cmd.ts`). The new command folds worktree creation,
- * OAuth bootstrap, cube creation, template application, and drone
- * assimilation into one shell call. This file remains so existing
- * scripts and tab-completion entries fail loudly with an actionable
- * migration message rather than silently mis-routing.
- *
- * `validateName` continues to be re-exported from here for callers
- * that still depend on the symbol (it lives in `name-validator.ts`
- * now — single source of truth).
- */
-export { validateName } from './name-validator.js';
-export async function runSpawn() {
-    const msg = 'borg spawn is removed. Use:\n' +
-        '  borg assimilate [role] --worktree <name>\n' +
-        '\n' +
-        'Example: if you previously ran `borg spawn drone-2`, the equivalent is\n' +
-        '  borg assimilate --worktree drone-2\n' +
-        '(role is optional; defaults per first-drone rules)\n' +
-        '\n' +
-        'If you want a specific role:\n' +
-        '  borg assimilate builder --worktree drone-2\n';
-    process.stderr.write(msg);
-    return 2;
-}
-//# sourceMappingURL=spawn.js.map
+import{validateName as s}from"./name-validator.js";async function r(){return process.stderr.write(`borg spawn is removed. Use:
+  borg assimilate [role] --worktree <name>
+
+Example: if you previously ran \`borg spawn drone-2\`, the equivalent is
+  borg assimilate --worktree drone-2
+(role is optional; defaults per first-drone rules)
+
+If you want a specific role:
+  borg assimilate builder --worktree drone-2
+`),2}export{r as runSpawn,s as validateName};

package/dist/stale-version-check.js

@@ -1,102 +1 @@
-/**
- * Sprint 7 (b) — stale-binary defensive hardening (gh#148 close-out).
- *
- * drone-3's v0.8.0 case (cube log 2026-05-18T10:35Z) ran for months
- * without warning that v0.8.10 had shipped the gh#71 carve-out for
- * own-drone heartbeat-pings. The silent-stale-binary failure mode
- * costs cube collective time to diagnose because the gap between
- * "installed version" and "latest published" is invisible to the
- * operator.
- *
- * This module surfaces that gap at borg launch time via a stderr
- * warning. Network check against npmjs.org registry is async +
- * timeout-gated so a slow registry doesn't block the operator. Fails
- * silently on any error (network failure, registry change,
- * prerelease version, etc.) — defense-in-depth, never a blocker.
- */
-const NPM_REGISTRY_LATEST_URL = 'https://registry.npmjs.org/borgmcp/latest';
-const FETCH_TIMEOUT_MS = 2000;
-const MINOR_VERSIONS_BEHIND_THRESHOLD = 1;
-/**
- * Pure compare: given an installed version string and a latest version
- * string, decide whether to warn. Both strings are expected in semver
- * `MAJOR.MINOR.PATCH` form (no prerelease, no build metadata).
- *
- * Returns `{stale: true, message}` when installed is at least
- * MINOR_VERSIONS_BEHIND_THRESHOLD minor versions behind latest on the
- * same major. Defaults conservatively — unparseable input, prerelease
- * tags, or anything weird returns `stale: false` so we never
- * false-positive on edge cases.
- */
-export function compareVersionsForStaleness(installed, latest) {
-    const installedParts = parseSemver(installed);
-    const latestParts = parseSemver(latest);
-    if (!installedParts || !latestParts) {
-        return { stale: false, message: null };
-    }
-    // Don't warn across major-version transitions — those are
-    // explicit migrations the operator is aware of (or should be); the
-    // warning shape isn't the right surface for them.
-    if (installedParts.major !== latestParts.major) {
-        return { stale: false, message: null };
-    }
-    const minorDelta = latestParts.minor - installedParts.minor;
-    if (minorDelta < MINOR_VERSIONS_BEHIND_THRESHOLD) {
-        return { stale: false, message: null };
-    }
-    // Lead-with-warning shape per drone-7 UX-FOLLOWUP 2026-05-18T13:49:54Z:
-    // both versions explicit (no "N versions behind" count ambiguity that
-    // flattens severity perception), single actionable command, no
-    // backticks (terminal renders them as literal characters). Fits the
-    // Coordinator-discipline 80-char preview rule. drone-1 ratified the
-    // (X) network-check approach + this copy shape at 13:49:59Z.
-    // minorDelta is informational; intentionally not surfaced.
-    void minorDelta;
-    const message = `⚠ borgmcp ${installed} is behind latest ${latest} — npm install -g borgmcp@latest`;
-    return { stale: true, message };
-}
-function parseSemver(s) {
-    // Strict MAJOR.MINOR.PATCH; rejects prerelease tags, build metadata,
-    // empty / 'unknown' / malformed strings. Conservative on purpose:
-    // ambiguous version strings should not trigger a warning.
-    if (typeof s !== 'string' || s.length === 0)
-        return null;
-    const match = /^(\d+)\.(\d+)\.(\d+)$/.exec(s);
-    if (!match)
-        return null;
-    return {
-        major: parseInt(match[1], 10),
-        minor: parseInt(match[2], 10),
-        patch: parseInt(match[3], 10),
-    };
-}
-/**
- * Fetch the latest published borgmcp version from the npm registry.
- * Returns the version string on success, `null` on any failure
- * (timeout, network error, registry change, malformed response).
- * Never throws — caller treats null as "skip the warning."
- */
-export async function fetchLatestBorgmcpVersion() {
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
-    try {
-        const response = await fetch(NPM_REGISTRY_LATEST_URL, {
-            signal: controller.signal,
-            headers: { Accept: 'application/json' },
-        });
-        if (!response.ok)
-            return null;
-        const body = (await response.json());
-        if (typeof body.version !== 'string' || body.version.length === 0)
-            return null;
-        return body.version;
-    }
-    catch {
-        // AbortError, network error, parse error — all treated as "skip silently."
-        return null;
-    }
-    finally {
-        clearTimeout(timeout);
-    }
-}
-//# sourceMappingURL=stale-version-check.js.map
+const a="https://registry.npmjs.org/borgmcp/latest",i=2e3,c=1;function u(t,e){const r=o(t),n=o(e);if(!r||!n)return{stale:!1,message:null};if(r.major!==n.major)return{stale:!1,message:null};const s=n.minor-r.minor;return s<1?{stale:!1,message:null}:{stale:!0,message:`\u26A0 borgmcp ${t} is behind latest ${e} \u2014 npm install -g borgmcp@latest`}}function o(t){if(typeof t!="string"||t.length===0)return null;const e=/^(\d+)\.(\d+)\.(\d+)$/.exec(t);return e?{major:parseInt(e[1],10),minor:parseInt(e[2],10),patch:parseInt(e[3],10)}:null}async function m(){const t=new AbortController,e=setTimeout(()=>t.abort(),2e3);try{const r=await fetch(a,{signal:t.signal,headers:{Accept:"application/json"}});if(!r.ok)return null;const n=await r.json();return typeof n.version!="string"||n.version.length===0?null:n.version}catch{return null}finally{clearTimeout(e)}}export{u as compareVersionsForStaleness,m as fetchLatestBorgmcpVersion};

package/dist/stream-owner.js

@@ -1,202 +1,2 @@
-import { randomUUID } from 'node:crypto';
-import { promises as fs } from 'node:fs';
-import { homedir } from 'node:os';
-import path from 'node:path';
-const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-const STREAM_LOCKS_DIR = path.join(homedir(), '.config', 'borgmcp', 'stream-locks');
-const OWNER_FILE = 'owner.json';
-const SCHEMA_VERSION = 1;
-export const STREAM_OWNER_STALE_MS = 70_000;
-const processNonce = randomUUID();
-const processStartedAt = new Date().toISOString();
-export function streamLockPath(cubeId, droneId, locksDir = STREAM_LOCKS_DIR) {
-    assertUuid('cubeId', cubeId);
-    assertUuid('droneId', droneId);
-    return path.join(locksDir, cubeId, `${droneId}.lock`);
-}
-export async function acquireStreamLease(cubeId, droneId, staleMs = STREAM_OWNER_STALE_MS, deps = {}) {
-    const lockPath = streamLockPath(cubeId, droneId, deps.locksDir);
-    await fs.mkdir(path.dirname(lockPath), { recursive: true, mode: 0o700 });
-    const lease = await tryCreateLease(lockPath, deps);
-    if (lease)
-        return lease;
-    const snapshot = await readOwnershipSnapshot(cubeId, droneId, deps);
-    if (snapshot.state !== 'owned-by-other-process') {
-        return null;
-    }
-    const stale = (snapshot.ageMs ?? 0) > staleMs;
-    const pidDead = typeof snapshot.pid === 'number' &&
-        deps.isPidAlive !== undefined &&
-        !deps.isPidAlive(snapshot.pid);
-    if (!stale && !pidDead) {
-        return null;
-    }
-    if (!(await moveStaleLockAside(lockPath, snapshot, staleMs, deps))) {
-        return null;
-    }
-    return tryCreateLease(lockPath, deps);
-}
-export async function readOwnershipSnapshot(cubeId, droneId, deps = {}) {
-    const lockPath = streamLockPath(cubeId, droneId, deps.locksDir);
-    let raw;
-    try {
-        raw = await fs.readFile(path.join(lockPath, OWNER_FILE), 'utf8');
-    }
-    catch (err) {
-        if (err?.code === 'ENOENT')
-            return { state: 'unowned', lockPath };
-        throw err;
-    }
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch {
-        return { state: 'owned-by-other-process', lockPath, ageMs: Number.POSITIVE_INFINITY };
-    }
-    if (!isRecord(parsed)) {
-        return { state: 'owned-by-other-process', lockPath, ageMs: Number.POSITIVE_INFINITY };
-    }
-    const now = (deps.now ?? (() => new Date()))();
-    const heartbeatMs = Date.parse(parsed.heartbeatAt);
-    const ageMs = Number.isFinite(heartbeatMs) ? now.getTime() - heartbeatMs : Number.POSITIVE_INFINITY;
-    const ownPid = deps.pid ?? process.pid;
-    const ownNonce = deps.processNonce ?? processNonce;
-    const state = parsed.pid === ownPid && parsed.processNonce === ownNonce
-        ? 'owner'
-        : 'owned-by-other-process';
-    return {
-        state,
-        pid: parsed.pid,
-        processNonce: parsed.processNonce,
-        cwd: parsed.cwd,
-        startedAt: parsed.startedAt,
-        heartbeatAt: parsed.heartbeatAt,
-        ageMs,
-        lockPath,
-    };
-}
-async function tryCreateLease(lockPath, deps) {
-    try {
-        await fs.mkdir(lockPath, { mode: 0o700 });
-    }
-    catch (err) {
-        if (err?.code === 'EEXIST')
-            return null;
-        throw err;
-    }
-    const record = makeRecord(deps);
-    await writeRecord(lockPath, record);
-    return makeLease(lockPath, record, deps);
-}
-async function moveStaleLockAside(lockPath, snapshot, staleMs, deps) {
-    const takeoverPath = `${lockPath}.takeover-${deps.processNonce ?? processNonce}-${Date.now()}`;
-    try {
-        await fs.rename(lockPath, takeoverPath);
-    }
-    catch (err) {
-        if (err?.code === 'ENOENT')
-            return false;
-        throw err;
-    }
-    await deps.beforeTakeoverVerify?.(takeoverPath);
-    const verified = await readOwnershipRecord(takeoverPath);
-    if (!isStillReclaimable(snapshot, verified, staleMs, deps)) {
-        try {
-            await fs.rename(takeoverPath, lockPath);
-        }
-        catch (err) {
-            if (err?.code !== 'EEXIST')
-                throw err;
-            await fs.rm(takeoverPath, { recursive: true, force: true });
-        }
-        return false;
-    }
-    await fs.rm(takeoverPath, { recursive: true, force: true });
-    return true;
-}
-function isStillReclaimable(snapshot, current, staleMs, deps) {
-    if (!current) {
-        return snapshot.ageMs === Number.POSITIVE_INFINITY;
-    }
-    if (snapshot.pid !== current.pid ||
-        snapshot.processNonce !== current.processNonce ||
-        snapshot.heartbeatAt !== current.heartbeatAt) {
-        return false;
-    }
-    const now = (deps.now ?? (() => new Date()))();
-    const heartbeatMs = Date.parse(current.heartbeatAt);
-    const ageMs = Number.isFinite(heartbeatMs)
-        ? now.getTime() - heartbeatMs
-        : Number.POSITIVE_INFINITY;
-    const stale = ageMs > staleMs;
-    const pidDead = deps.isPidAlive !== undefined && !deps.isPidAlive(current.pid);
-    return stale || pidDead;
-}
-function makeLease(lockPath, record, deps) {
-    return {
-        lockPath,
-        record,
-        async refresh() {
-            const current = await readOwnershipRecord(lockPath);
-            if (!current || current.pid !== record.pid || current.processNonce !== record.processNonce) {
-                return false;
-            }
-            const next = { ...record, heartbeatAt: (deps.now ?? (() => new Date()))().toISOString() };
-            await writeRecord(lockPath, next);
-            this.record = next;
-            return true;
-        },
-        async release() {
-            const current = await readOwnershipRecord(lockPath);
-            if (current?.pid === record.pid && current.processNonce === record.processNonce) {
-                await fs.rm(lockPath, { recursive: true, force: true });
-            }
-        },
-    };
-}
-async function readOwnershipRecord(lockPath) {
-    try {
-        const raw = await fs.readFile(path.join(lockPath, OWNER_FILE), 'utf8');
-        const parsed = JSON.parse(raw);
-        return isRecord(parsed) ? parsed : null;
-    }
-    catch {
-        return null;
-    }
-}
-async function writeRecord(lockPath, record) {
-    const ownerPath = path.join(lockPath, OWNER_FILE);
-    const tmpPath = path.join(lockPath, `${OWNER_FILE}.${record.processNonce}.tmp`);
-    await fs.writeFile(tmpPath, JSON.stringify(record, null, 2) + '\n', {
-        mode: 0o600,
-    });
-    await fs.rename(tmpPath, ownerPath);
-}
-function makeRecord(deps) {
-    const now = deps.now ?? (() => new Date());
-    return {
-        schemaVersion: SCHEMA_VERSION,
-        pid: deps.pid ?? process.pid,
-        processNonce: deps.processNonce ?? processNonce,
-        cwd: deps.cwd ?? process.cwd(),
-        startedAt: deps.processStartedAt ?? processStartedAt,
-        heartbeatAt: now().toISOString(),
-    };
-}
-function isRecord(value) {
-    return (value !== null &&
-        typeof value === 'object' &&
-        value.schemaVersion === SCHEMA_VERSION &&
-        typeof value.pid === 'number' &&
-        Number.isInteger(value.pid) &&
-        typeof value.processNonce === 'string' &&
-        typeof value.cwd === 'string' &&
-        typeof value.startedAt === 'string' &&
-        typeof value.heartbeatAt === 'string');
-}
-function assertUuid(label, value) {
-    if (!UUID_RE.test(value))
-        throw new Error(`Invalid ${label}: ${value}`);
-}
-//# sourceMappingURL=stream-owner.js.map
+import{randomUUID as E}from"node:crypto";import{promises as a}from"node:fs";import{homedir as g}from"node:os";import c from"node:path";const T=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i,O=c.join(g(),".config","borgmcp","stream-locks"),w="owner.json",N=1,D=7e4,p=E(),_=new Date().toISOString();function I(e,t,n=O){return y("cubeId",e),y("droneId",t),c.join(n,e,`${t}.lock`)}async function x(e,t,n=D,r={}){const o=I(e,t,r.locksDir);await a.mkdir(c.dirname(o),{recursive:!0,mode:448});const s=await h(o,r);if(s)return s;const i=await M(e,t,r);if(i.state!=="owned-by-other-process")return null;const u=(i.ageMs??0)>n,f=typeof i.pid=="number"&&r.isPidAlive!==void 0&&!r.isPidAlive(i.pid);return!u&&!f||!await R(o,i,n,r)?null:h(o,r)}async function M(e,t,n={}){const r=I(e,t,n.locksDir);let o;try{o=await a.readFile(c.join(r,w),"utf8")}catch(m){if(m?.code==="ENOENT")return{state:"unowned",lockPath:r};throw m}let s;try{s=JSON.parse(o)}catch{return{state:"owned-by-other-process",lockPath:r,ageMs:Number.POSITIVE_INFINITY}}if(!b(s))return{state:"owned-by-other-process",lockPath:r,ageMs:Number.POSITIVE_INFINITY};const i=(n.now??(()=>new Date))(),u=Date.parse(s.heartbeatAt),f=Number.isFinite(u)?i.getTime()-u:Number.POSITIVE_INFINITY,l=n.pid??process.pid,A=n.processNonce??p;return{state:s.pid===l&&s.processNonce===A?"owner":"owned-by-other-process",pid:s.pid,processNonce:s.processNonce,cwd:s.cwd,startedAt:s.startedAt,heartbeatAt:s.heartbeatAt,ageMs:f,lockPath:r}}async function h(e,t){try{await a.mkdir(e,{mode:448})}catch(r){if(r?.code==="EEXIST")return null;throw r}const n=$(t);return await S(e,n),V(e,n,t)}async function R(e,t,n,r){const o=`${e}.takeover-${r.processNonce??p}-${Date.now()}`;try{await a.rename(e,o)}catch(i){if(i?.code==="ENOENT")return!1;throw i}await r.beforeTakeoverVerify?.(o);const s=await d(o);if(!F(t,s,n,r)){try{await a.rename(o,e)}catch(i){if(i?.code!=="EEXIST")throw i;await a.rm(o,{recursive:!0,force:!0})}return!1}return await a.rm(o,{recursive:!0,force:!0}),!0}function F(e,t,n,r){if(!t)return e.ageMs===Number.POSITIVE_INFINITY;if(e.pid!==t.pid||e.processNonce!==t.processNonce||e.heartbeatAt!==t.heartbeatAt)return!1;const o=(r.now??(()=>new Date))(),s=Date.parse(t.heartbeatAt),u=(Number.isFinite(s)?o.getTime()-s:Number.POSITIVE_INFINITY)>n,f=r.isPidAlive!==void 0&&!r.isPidAlive(t.pid);return u||f}function V(e,t,n){return{lockPath:e,record:t,async refresh(){const r=await d(e);if(!r||r.pid!==t.pid||r.processNonce!==t.processNonce)return!1;const o={...t,heartbeatAt:(n.now??(()=>new Date))().toISOString()};return await S(e,o),this.record=o,!0},async release(){const r=await d(e);r?.pid===t.pid&&r.processNonce===t.processNonce&&await a.rm(e,{recursive:!0,force:!0})}}}async function d(e){try{const t=await a.readFile(c.join(e,w),"utf8"),n=JSON.parse(t);return b(n)?n:null}catch{return null}}async function S(e,t){const n=c.join(e,w),r=c.join(e,`${w}.${t.processNonce}.tmp`);await a.writeFile(r,JSON.stringify(t,null,2)+`
+`,{mode:384}),await a.rename(r,n)}function $(e){const t=e.now??(()=>new Date);return{schemaVersion:N,pid:e.pid??process.pid,processNonce:e.processNonce??p,cwd:e.cwd??process.cwd(),startedAt:e.processStartedAt??_,heartbeatAt:t().toISOString()}}function b(e){return e!==null&&typeof e=="object"&&e.schemaVersion===N&&typeof e.pid=="number"&&Number.isInteger(e.pid)&&typeof e.processNonce=="string"&&typeof e.cwd=="string"&&typeof e.startedAt=="string"&&typeof e.heartbeatAt=="string"}function y(e,t){if(!T.test(t))throw new Error(`Invalid ${e}: ${t}`)}export{D as STREAM_OWNER_STALE_MS,x as acquireStreamLease,M as readOwnershipSnapshot,I as streamLockPath};

package/dist/stream-status.js

@@ -1,211 +1,3 @@
-/**
- * Renderer + inbox-Monitor liveness probe for `borg:stream-status`.
- *
- * Split out from `index.ts` so the 5-state precedence logic and the
- * `pgrep`-based liveness check can be unit-tested without spinning up
- * the MCP server. drone-4's 18:30:51 UX contract is the spec for the
- * rendered output shape; this module is the implementation surface.
- *
- * Top-line states (drone-4 contract):
- *   1. Stream not started.
- *   2. Stream connected, awaiting first content event.
- *   3. Stream connected, last content <X> ago.
- *   4. Stream disconnected (reconnect attempt N).
- *   5. Stream connected (no inbox-Monitor — wake path broken).
- *
- * Precedence when both `disconnected` and `no inbox-Monitor` apply:
- *   prefer (4) — wire-disconnect is the upstream cause and resolves
- *   automatically when the wire comes back up; State 5 only matters
- *   when the wire is healthy but the file-watch isn't.
- */
-import { spawnSync } from 'node:child_process';
-/**
- * Best-effort check: is a process tailing this inbox file?
- *
- * Returns:
- *   - true: at least one process matches `tail.*<inboxPath>` in pgrep
- *   - false: pgrep ran cleanly and found no match
- *   - null: cannot determine (pgrep unavailable, spawn error, no inbox path)
- *
- * The null case is informative — it means we don't know, so the
- * renderer must NOT fire State 5 (which would be misleading). State 5
- * only fires when we positively know the wake path is broken.
- *
- * Why `pgrep` and not a more elegant check: Claude Code Monitors are
- * tail-based subprocesses spawned by the harness, completely opaque to
- * the MCP server. The MCP server has no IPC channel into the harness's
- * task table. The cheapest reliable signal we can get from inside the
- * MCP server is "is there a tail subprocess open against this path?"
- * — which is what `pgrep -f` answers.
- *
- * macOS + Linux ship `pgrep`. Windows doesn't (borgmcp targets Mac /
- * Linux per package.json `os` field; the null branch handles other
- * platforms gracefully).
- */
-export function checkInboxMonitorHealthy(inboxPath) {
-    if (!inboxPath)
-        return null;
-    try {
-        // `-f` matches against the full command line so we catch the
-        // `tail -n 0 -F <inboxPath>` form. `-l` lists matches; we only
-        // need the exit code (0 = match, 1 = no match) and a sanity check
-        // on stdout (some pgrep variants exit 0 with empty stdout under
-        // permission errors — treat empty stdout as "no match" for safety).
-        const res = spawnSync('pgrep', ['-f', inboxPath], {
-            encoding: 'utf-8',
-            timeout: 2_000,
-        });
-        if (res.error)
-            return null;
-        if (res.status === 0 && res.stdout.trim().length > 0)
-            return true;
-        if (res.status === 1)
-            return false;
-        // pgrep exits 2 for syntax error, 3 for fatal — treat as unknown.
-        return null;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Render the `borg:stream-status` markdown body per drone-4's 18:30:51
- * contract. Pure function — no I/O, no clock reads. Caller assembles
- * the inputs.
- */
-export function renderStreamStatus(inputs) {
-    const { status, inboxMonitorHealthy, inboxPath, droneLabel, cubeName, humanAgo } = inputs;
-    const isNotStarted = status.reconnectAttempts === 0 &&
-        status.lastWireActivityAt === null &&
-        !status.connected;
-    const ownedByOther = status.ownership?.state === 'owned-by-other-process';
-    // Top-line verdict — 5 states + override per drone-4 contract.
-    // Precedence: disconnected > no-inbox-Monitor (wire-down upstream
-    // cause; State 5 only applies when wire is healthy).
-    let summary;
-    if (ownedByOther) {
-        summary = '**Stream owned by another Borg MCP process.**';
-    }
-    else if (isNotStarted) {
-        summary = '**Stream not started.**';
-    }
-    else if (!status.connected) {
-        summary = `**Stream disconnected (reconnect attempt ${status.reconnectAttempts}).**`;
-    }
-    else if (inboxMonitorHealthy === false) {
-        summary = '**Stream connected (no inbox-Monitor — wake path broken).**';
-    }
-    else if (status.lastContentEventAt === null) {
-        // State 2: wire works, no content yet. Collapses two underlying
-        // conditions per drone-4 contract — fresh connect pre-first-content
-        // and quiet cube post-reconnect. The body's heartbeat field
-        // distinguishes them (populated vs `_(none)_`).
-        summary = '**Stream connected, awaiting first content event.**';
-    }
-    else {
-        summary = `**Stream connected, last content ${humanAgo(new Date(status.lastContentEventAt))}.**`;
-    }
-    const lines = [];
-    lines.push(summary);
-    lines.push('');
-    lines.push('# Log-stream status');
-    lines.push('');
-    if (ownedByOther) {
-        lines.push('- **state**: _(stream owner is another local process)_');
-    }
-    else if (isNotStarted) {
-        lines.push('- **state**: _(stream not started)_');
-    }
-    else {
-        lines.push(`- **connected**: ${status.connected}`);
-    }
-    // Body shape per drone-4 contract: three timestamp lines (content,
-    // heartbeat, wire) — looks redundant in the common case where they
-    // coincide, but the asymmetric "content quiet, heartbeats alive" case
-    // is exactly the diagnostic scenario this surface exists to support.
-    lines.push(`- **last content event**: ${status.lastContentEventAt
-        ? `${status.lastContentEventAt} (${humanAgo(new Date(status.lastContentEventAt))})`
-        : '_(none yet)_'}`);
-    lines.push(`- **last heartbeat at**: ${status.lastHeartbeatAt
-        ? `${status.lastHeartbeatAt} (${humanAgo(new Date(status.lastHeartbeatAt))})`
-        : '_(none)_'}`);
-    lines.push(`- **last wire activity**: ${status.lastWireActivityAt
-        ? `${status.lastWireActivityAt} (${humanAgo(new Date(status.lastWireActivityAt))})`
-        : '_(none)_'}`);
-    lines.push(`- **last persisted event id**: ${status.lastPersistedEventId ?? '_(none)_'}`);
-    lines.push(`- **reconnect attempts**: ${status.reconnectAttempts}`);
-    if (ownedByOther) {
-        const owner = status.ownership;
-        lines.push(`- **stream owner pid**: ${owner.pid ?? '_(unknown)_'}`);
-        lines.push(`- **stream owner cwd**: ${owner.cwd ?? '_(unknown)_'}`);
-        lines.push(`- **stream owner heartbeat age**: ${typeof owner.ageMs === 'number' && Number.isFinite(owner.ageMs)
-            ? `${Math.max(0, Math.round(owner.ageMs / 1000))}s`
-            : '_(unknown)_'}`);
-    }
-    // State-5 body line + self-arm instruction. Only fires when we
-    // POSITIVELY detected wake-path breakage AND the wire is up — the
-    // disconnected case takes precedence above and would never reach
-    // here. When `inboxMonitorHealthy === null` (couldn't determine) we
-    // stay silent; surfacing an uncertain failure mode is worse UX than
-    // omitting it.
-    if (status.connected && inboxMonitorHealthy === false) {
-        lines.push(`- **inbox-monitor**: _(no watcher detected — wake path broken)_`);
-        if (inboxPath && droneLabel && cubeName) {
-            lines.push('');
-            lines.push('## Real-time wake-up (do this now)');
-            lines.push('No process is tailing this drone\'s inbox file — this session won\'t wake on real-time cube activity, only on its fallback timer, and will miss live coordination from other drones. Arm an inbox Monitor:');
-            lines.push('');
-            lines.push(`> Monitor command: \`tail -n 0 -F ${inboxPath}\` — persistent, 1h timeout, description "borg inbox for ${droneLabel} on cube ${cubeName}".`);
-        }
-    }
-    return lines.join('\n');
-}
-/**
- * Gate predicate for the regen wake-path warning (gh#51 — extracted
- * from the inline ternary in `client/src/index.ts` for direct unit-test
- * coverage of the (connected × healthy) cross-product).
- *
- * Returns true ONLY when the wire is up AND we positively detected a
- * dead inbox Monitor (`=== false` strict). The `null` branch
- * (couldn't determine) stays silent — surfacing an uncertain failure
- * mode is worse UX than omitting it (mirrors the State-5 precedence
- * rule in `renderStreamStatus`). When disconnected, the wire-down case
- * is the upstream cause and takes precedence; no point warning about
- * the wake path when the wake-path's input has no events to deliver.
- */
-export function shouldShowWakePathWarning(streamStatus, inboxMonitorHealthy) {
-    return streamStatus.connected && inboxMonitorHealthy === false;
-}
-/**
- * Wake-path-broken prefix for `borg:regen` output (gh#43).
- *
- * Pure function — caller decides whether to call (gates on
- * `shouldShowWakePathWarning`). Returns an empty string when called
- * with insufficient context to render the Monitor command (e.g., no
- * inbox path on a no-active-cube path), so callers can always prepend
- * the result unconditionally.
- *
- * Mirrors the State-5 self-arm instruction shape in
- * `renderStreamStatus` so a drone sees the same Monitor command via
- * both `borg:stream-status` and `borg:regen`. The differentiator: regen
- * runs on every /loop iteration, so the prefix gives passive
- * self-healing (worst-case latency = the /loop fallback heartbeat),
- * whereas stream-status only surfaces the warning when actively
- * called.
- */
-export function formatWakePathPrefix(inputs) {
-    const { inboxPath, droneLabel, cubeName } = inputs;
-    if (!inboxPath || !droneLabel || !cubeName)
-        return '';
-    return [
-        `## ⚠ Wake path broken — arm Monitor NOW`,
-        ``,
-        `No process is tailing this drone's inbox file. SSE delivery is healthy (entries reach disk), but Claude Code has no event source to wake on. Until you arm a Monitor, this session only wakes on the /loop fallback heartbeat and will miss live coordination from other drones:`,
-        ``,
-        `> Monitor command: \`tail -n 0 -F ${inboxPath}\` — persistent, 1h timeout, description "borg inbox for ${droneLabel} on cube ${cubeName}".`,
-        ``,
-        `---`,
-        ``,
-    ].join('\n');
-}
-//# sourceMappingURL=stream-status.js.map
+import{spawnSync as p}from"node:child_process";function m(n){if(!n)return null;try{const t=p("pgrep",["-f",n],{encoding:"utf-8",timeout:2e3});return t.error?null:t.status===0&&t.stdout.trim().length>0?!0:t.status===1?!1:null}catch{return null}}function f(n){const{status:t,inboxMonitorHealthy:s,inboxPath:r,droneLabel:l,cubeName:u,humanAgo:i}=n,h=t.reconnectAttempts===0&&t.lastWireActivityAt===null&&!t.connected,c=t.ownership?.state==="owned-by-other-process";let o;c?o="**Stream owned by another Borg MCP process.**":h?o="**Stream not started.**":t.connected?s===!1?o="**Stream connected (no inbox-Monitor \u2014 wake path broken).**":t.lastContentEventAt===null?o="**Stream connected, awaiting first content event.**":o=`**Stream connected, last content ${i(new Date(t.lastContentEventAt))}.**`:o=`**Stream disconnected (reconnect attempt ${t.reconnectAttempts}).**`;const e=[];if(e.push(o),e.push(""),e.push("# Log-stream status"),e.push(""),c?e.push("- **state**: _(stream owner is another local process)_"):h?e.push("- **state**: _(stream not started)_"):e.push(`- **connected**: ${t.connected}`),e.push(`- **last content event**: ${t.lastContentEventAt?`${t.lastContentEventAt} (${i(new Date(t.lastContentEventAt))})`:"_(none yet)_"}`),e.push(`- **last heartbeat at**: ${t.lastHeartbeatAt?`${t.lastHeartbeatAt} (${i(new Date(t.lastHeartbeatAt))})`:"_(none)_"}`),e.push(`- **last wire activity**: ${t.lastWireActivityAt?`${t.lastWireActivityAt} (${i(new Date(t.lastWireActivityAt))})`:"_(none)_"}`),e.push(`- **last persisted event id**: ${t.lastPersistedEventId??"_(none)_"}`),e.push(`- **reconnect attempts**: ${t.reconnectAttempts}`),c){const a=t.ownership;e.push(`- **stream owner pid**: ${a.pid??"_(unknown)_"}`),e.push(`- **stream owner cwd**: ${a.cwd??"_(unknown)_"}`),e.push(`- **stream owner heartbeat age**: ${typeof a.ageMs=="number"&&Number.isFinite(a.ageMs)?`${Math.max(0,Math.round(a.ageMs/1e3))}s`:"_(unknown)_"}`)}return t.connected&&s===!1&&(e.push("- **inbox-monitor**: _(no watcher detected \u2014 wake path broken)_"),r&&l&&u&&(e.push(""),e.push("## Real-time wake-up (do this now)"),e.push("No process is tailing this drone's inbox file \u2014 this session won't wake on real-time cube activity, only on its fallback timer, and will miss live coordination from other drones. Arm an inbox Monitor:"),e.push(""),e.push(`> Monitor command: \`tail -n 0 -F ${r}\` \u2014 persistent, 1h timeout, description "borg inbox for ${l} on cube ${u}".`))),e.join(`
+`)}function b(n,t){return n.connected&&t===!1}function w(n){const{inboxPath:t,droneLabel:s,cubeName:r}=n;return!t||!s||!r?"":["## \u26A0 Wake path broken \u2014 arm Monitor NOW","","No process is tailing this drone's inbox file. SSE delivery is healthy (entries reach disk), but Claude Code has no event source to wake on. Until you arm a Monitor, this session only wakes on the /loop fallback heartbeat and will miss live coordination from other drones:","",`> Monitor command: \`tail -n 0 -F ${t}\` \u2014 persistent, 1h timeout, description "borg inbox for ${s} on cube ${r}".`,"","---",""].join(`
+`)}export{m as checkInboxMonitorHealthy,w as formatWakePathPrefix,f as renderStreamStatus,b as shouldShowWakePathWarning};

package/dist/subscription-retry.js

@@ -1,23 +1 @@
-/**
- * Given the initial check result, retry up to `attempts` total times with
- * `backoffMs` backoff, stopping early as soon as access is granted. A transient
- * error on a retry is swallowed (keep the prior status and keep trying). Returns
- * the latest status.
- */
-export async function retrySubscriptionCheck(initial, deps) {
-    const attempts = deps.attempts ?? 3;
-    const backoffMs = deps.backoffMs ?? 2000;
-    let status = initial;
-    for (let attempt = 2; attempt <= attempts && !status.hasAccess; attempt++) {
-        deps.onRetry?.(attempt, attempts);
-        await deps.sleep(backoffMs);
-        try {
-            status = await deps.check();
-        }
-        catch {
-            // Transient error on a retry — keep the prior status and continue retrying.
-        }
-    }
-    return status;
-}
-//# sourceMappingURL=subscription-retry.js.map
+async function r(s,t){const e=t.attempts??3,o=t.backoffMs??2e3;let c=s;for(let a=2;a<=e&&!c.hasAccess;a++){t.onRetry?.(a,e),await t.sleep(o);try{c=await t.check()}catch{}}return c}export{r as retrySubscriptionCheck};