borgmcp 1.0.6 → 1.0.7

package/dist/assimilate-cmd.js

@@ -1,511 +1,39 @@
-import { dirname, basename, join } from 'node:path';
-import { randomUUID } from 'node:crypto';
-import { roleSlug, matchRoleByName, pickDefaultRole } from './role-resolver.js';
-import { deriveCubeName, parseGitRemote, sanitizeRemoteUrl } from './cube-name.js';
-import { validateName } from './name-validator.js';
-import { renderAssimilationWelcome } from './assimilate-welcome.js';
-import { shellEscape } from './shell-escape.js';
-import { withCodexCwdArg } from './codex-remote.js';
-import { buildAgentKickoffPrompt, recordCodexWakeTarget, socketPathFromRemoteArgs, } from './codex-launch.js';
-import { perWorktreeBranchName, adoptWorktree } from './worktree-lifecycle.js';
-export async function runAssimilate(args, deps) {
-    // ----- Input validation (before any subprocess work) -----
-    if (args.role !== undefined) {
-        const v = validateName(args.role);
-        if (!v.ok) {
-            deps.stderr(v.error + '\n');
-            return 1;
-        }
-    }
-    if (args.flags.worktree !== undefined) {
-        const v = validateName(args.flags.worktree);
-        if (!v.ok) {
-            deps.stderr(v.error + '\n');
-            return 1;
-        }
-    }
-    // ----- Step 1: Auth check -----
-    let auth = await deps.getCachedAuth();
-    if (!auth) {
-        if (!deps.isTTY() && !args.flags.yes) {
-            deps.stderr('borg setup required and stdin is non-interactive. Run `borg setup` first in an interactive terminal, then `borg assimilate`.\n');
-            return 1;
-        }
-        auth = await deps.runSetup();
-    }
-    // ----- Step 2: Cube-name derivation -----
-    const projectRoot = deps.findProjectRoot(deps.cwd());
-    let cubeName;
-    if (args.flags.cubeName) {
-        cubeName = args.flags.cubeName;
-    }
-    else {
-        const remoteResult = deps.runSync('git', ['remote', 'get-url', 'origin'], projectRoot);
-        const remoteUrl = remoteResult.status === 0 ? remoteResult.stdout : null;
-        cubeName = deriveCubeName(projectRoot, remoteUrl);
-        // UX-F4 (drone-7 Phase E review): emit a stderr nudge when the
-        // remote was readable but didn't parse, so the user has a signal
-        // that auto-derivation diverged from their git remote.
-        if (remoteUrl) {
-            const sanitized = sanitizeRemoteUrl(remoteUrl);
-            const parsedRepo = sanitized ? parseGitRemote(sanitized) : null;
-            if (sanitized && !parsedRepo && cubeName) {
-                deps.stderr(`couldn't parse git remote '${sanitized}' — using directory name '${cubeName}' as cube name\n`);
-            }
-        }
-    }
-    // gh#293: detect cross-account cube reference (owner-email:cube-name format).
-    let crossAccountRef = null;
-    if (cubeName && cubeName.includes('@') && cubeName.includes(':')) {
-        const colonIdx = cubeName.lastIndexOf(':');
-        crossAccountRef = {
-            ownerEmail: cubeName.substring(0, colonIdx),
-            cubeName: cubeName.substring(colonIdx + 1),
-        };
-        cubeName = crossAccountRef.cubeName;
-    }
-    // ----- Sprint 19 (gh#184): Reorder for strict-rollback semantics. -----
-    // The previous flow created a sibling worktree (FS state) BEFORE
-    // role resolution + API assimilate. Any early-return between
-    // worktree-spawn and API success orphaned the worktree (gh#184
-    // canonical case: unknown role arg). The new flow defers all FS
-    // state until AFTER the API assimilate succeeds — early-return at
-    // role resolution / listCubes / createCube / template-prompt /
-    // template-invalid-choice is now structurally clean (no orphan
-    // class possible). Worktree rollback narrows to the single
-    // setActiveCube failure path post-worktree-creation.
-    // Sprint 18: capture pre-chdir cwd for the post-exit shell-cd hint
-    // (no chdir has happened yet; this is a stable starting point).
-    const originalCwd = deps.cwd();
-    // ----- Step 3: Cube existence check (with auto-refresh on auth failure) -----
-    let allCubes;
-    try {
-        allCubes = await deps.listCubes(auth.apiUrl, auth.token);
-    }
-    catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        if (msg.includes('Authentication required') || msg.includes('Authentication expired')) {
-            deps.stderr('Re-authenticating...\n');
-            auth = await deps.runSetup();
-            allCubes = await deps.listCubes(auth.apiUrl, auth.token);
-        }
-        else {
-            throw err;
-        }
-    }
-    const existingCube = allCubes.find((c) => c.name === cubeName);
-    // gh#312: cross-account typo guard. If the user typed owner@example.com:cube-name
-    // and the cube isn't found, error out — don't silently create a new cube.
-    if (!existingCube && crossAccountRef) {
-        deps.stderr(`No cube named '${crossAccountRef.cubeName}' accessible to you owned by '${crossAccountRef.ownerEmail}'. Did you accept their invite? See borgmcp.ai/dashboard.\n`);
-        return 1;
-    }
-    // ----- Step 4: Fetch detail OR create cube -----
-    let cubeDetail;
-    let isFirstDrone;
-    if (existingCube) {
-        cubeDetail = await deps.getCube(auth.apiUrl, auth.token, existingCube.id);
-        isFirstDrone = false;
-    }
-    else {
-        // ----- Step 4a: First-drone bootstrap (template selection) -----
-        let chosenTemplate;
-        if (args.flags.template) {
-            chosenTemplate = args.flags.template;
-        }
-        else if (args.flags.noTemplate) {
-            chosenTemplate = undefined;
-        }
-        else if (!deps.isTTY()) {
-            if (!args.flags.yes) {
-                deps.stderr('cube creation needs a template choice but stdin is non-interactive.\n' +
-                    'Pass --template <name>, --no-template, or --yes (defaults to starter).\n');
-                return 1;
-            }
-            chosenTemplate = 'starter';
-        }
-        else if (args.flags.yes) {
-            chosenTemplate = 'starter';
-        }
-        else {
-            const templates = await deps.listTemplates(auth.apiUrl, auth.token);
-            const lines = ['First drone joining a new cube. Apply a template?'];
-            templates.forEach((t, i) => {
-                const tag = i === 0 ? ' (default)' : '';
-                lines.push(`  ${i + 1}) ${t.name}${tag} — ${t.description}`);
-            });
-            lines.push(`  ${templates.length + 1}) skip — no template`);
-            const answer = (await deps.prompt(lines.join('\n') + '\n[1]: ')).trim();
-            const choice = answer === '' ? 1 : parseInt(answer, 10);
-            if (Number.isNaN(choice) || choice < 1 || choice > templates.length + 1) {
-                deps.stderr(`invalid choice "${answer}"\n`);
-                return 1;
-            }
-            chosenTemplate = choice <= templates.length ? templates[choice - 1].name : undefined;
-        }
-        cubeDetail = await deps.createCube(auth.apiUrl, auth.token, chosenTemplate ? { name: cubeName ?? undefined, template: chosenTemplate } : { name: cubeName ?? undefined });
-        isFirstDrone = true;
-    }
-    // ----- Step 5: Role resolution -----
-    let resolvedRole;
-    if (args.role !== undefined) {
-        resolvedRole = matchRoleByName(cubeDetail.roles, args.role);
-        if (!resolvedRole) {
-            // Sprint 19 (gh#184) + drone-7 metaphor argument: include a
-            // fuzzy-match "did you mean ...?" suggestion to serve Queen's
-            // "more user-friendly" intent without violating the
-            // Borg-collective metaphor (collective defines roles; drones
-            // slot in). Levenshtein distance ≤2 on the cube's role names.
-            const available = cubeDetail.roles.map((r) => r.name).join(', ');
-            const suggestion = suggestRoleName(args.role, cubeDetail.roles.map((r) => r.name));
-            const suggestionLine = suggestion ? ` Did you mean "${suggestion}"?` : '';
-            deps.stderr(`no role matching "${args.role}" in cube "${cubeDetail.name}". Available: ${available}.${suggestionLine}\n` +
-                `(Use --template <name> on first-drone setup or run \`borg:create-role\` from inside Claude.)\n`);
-            return 1;
-        }
-    }
-    else {
-        resolvedRole = pickDefaultRole(cubeDetail.roles, { isFirstDrone });
-        if (!resolvedRole) {
-            deps.stderr(`cube "${cubeDetail.name}" has no default or human-seat role; cannot infer a role. ` +
-                `Either pass a role argument explicitly (e.g. \`borg assimilate builder\`) or ` +
-                `run \`borg:create-role\` from inside Claude to set up roles.\n`);
-            return 1;
-        }
-    }
-    // ----- Step 6: API assimilate (no FS state yet — clean exit on failure) -----
-    let result;
-    try {
-        result = await deps.assimilate(auth.apiUrl, auth.token, {
-            cube_id: cubeDetail.id,
-            role_id: resolvedRole.id,
-            hostname: deps.getHostname(),
-        });
-    }
-    catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        deps.stderr(`assimilate failed: ${message}\n`);
-        return 1;
-    }
-    // The server may assimilate a member into a DIFFERENT role than the client's
-    // auto-picked default (gh#700 fallback: when the member's invite doesn't
-    // grant the default role, the server picks one of their GRANTED roles).
-    // Resolve the role the SERVER ACTUALLY assigned (result.role_id) and use it
-    // for all human-facing display + naming below — not the client's pre-pick.
-    // The drone label / session token are already server-truth; this aligns the
-    // displayed role name + worktree slug with what was actually assigned.
-    const assignedRole = cubeDetail.roles.find((r) => r.id === result.role_id) ?? resolvedRole;
-    if (assignedRole.id !== resolvedRole.id) {
-        deps.stderr(`Note: your invite didn't grant the "${resolvedRole.name}" role — ` +
-            `assimilated as "${assignedRole.name}" instead.\n`);
-    }
-    // ----- Step 7: Worktree decision (FS state ONLY after API success) -----
-    const existing = await deps.getActiveCube();
-    const wantSibling = args.flags.worktree !== undefined || existing !== null;
-    let spawnedWorktreePath = null;
-    if (wantSibling) {
-        if (existing && args.flags.here) {
-            deps.stderr(`this directory already hosts an active drone; remove --here or run from a fresh worktree\n`);
-            return 1;
-        }
-        // BUG-4 / gh#150 fix (v0.9.5): `git worktree add --detach <path>`
-        // fails with "fatal: not a valid object name: 'HEAD'" when the
-        // repo has no commits yet (unborn HEAD). Detect explicitly via
-        // `git rev-parse --verify HEAD` so we surface an actionable
-        // prerequisite error rather than git's cryptic internal message.
-        const headProbe = deps.runSync('git', ['rev-parse', '--verify', 'HEAD'], projectRoot);
-        if (headProbe.status !== 0) {
-            deps.stderr(`sibling worktree spawn requires HEAD pointing at a commit.\n` +
-                `  Fix: create at least one commit (\`git commit --allow-empty -m "initial"\`)\n` +
-                `  OR:  pass --here to skip the sibling spawn and use the current directory\n`);
-            return 1;
-        }
-        // gh#238: fetch origin so the new worktree starts on the latest
-        // remote HEAD, not the (possibly stale) local HEAD.
-        deps.runSync('git', ['fetch', 'origin'], projectRoot);
-        // Resolve the default branch on origin (main or master).
-        let startRef = 'origin/main';
-        const mainProbe = deps.runSync('git', ['rev-parse', '--verify', 'origin/main'], projectRoot);
-        if (mainProbe.status !== 0) {
-            const masterProbe = deps.runSync('git', ['rev-parse', '--verify', 'origin/master'], projectRoot);
-            if (masterProbe.status === 0) {
-                startRef = 'origin/master';
-            }
-        }
-        // Warn if local HEAD diverges from the remote default branch.
-        const localHead = headProbe.stdout.trim();
-        const remoteHead = deps.runSync('git', ['rev-parse', startRef], projectRoot).stdout.trim();
-        if (localHead !== remoteHead) {
-            deps.stderr(`note: local HEAD (${localHead.slice(0, 7)}) differs from ${startRef} (${remoteHead.slice(0, 7)}); ` +
-                `new worktree will start on ${startRef}\n`);
-        }
-        const parent = dirname(projectRoot);
-        const repoBase = basename(projectRoot);
-        const suffix = args.flags.worktree ?? roleSlug(assignedRole.name);
-        let candidate = join(parent, `${repoBase}-${suffix}`);
-        let n = 2;
-        while (deps.pathExists(candidate) || worktreeRegistered(deps, projectRoot, candidate)) {
-            candidate = join(parent, `${repoBase}-${suffix}-${n}`);
-            n++;
-        }
-        // gh#33 (Q1/Q4): spawn on a named per-worktree branch (wt-<suffix>),
-        // NOT detached HEAD. The named branch is current with startRef and is
-        // where the drone's feature branches get cut from. Uniform for every
-        // role incl. coordinator — main is never a working branch (Q4).
-        const wtBranch = perWorktreeBranchName(basename(candidate), repoBase);
-        const wt = deps.runSync('git', ['worktree', 'add', '-b', wtBranch, candidate, startRef], projectRoot);
-        if (wt.status !== 0) {
-            deps.stderr(`git worktree add failed: ${safeStderr(wt.stderr)}\n`);
-            return 1;
-        }
-        deps.stderr(`spawned sibling worktree at ${candidate} on branch ${wtBranch} (${startRef}); ` +
-            `original dir is registered as active (edit ~/.config/borgmcp/cubes.json if stale).\n`);
-        deps.chdir(candidate);
-        deps.stderr(renderWorktreeSteeringNote(candidate, wtBranch, projectRoot));
-        spawnedWorktreePath = deps.cwd();
-    }
-    // ----- Step 8: setActiveCube (narrow rollback — worktree exists if spawned) -----
-    try {
-        await deps.setActiveCube({
-            cubeId: result.cube_id,
-            droneId: result.drone_id,
-            name: cubeDetail.name,
-            sessionToken: result.session_token,
-            droneLabel: result.drone_label,
-            apiUrl: auth.apiUrl,
-        });
-    }
-    catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        deps.stderr(`setActiveCube failed: ${message}\n`);
-        if (spawnedWorktreePath) {
-            const rm = deps.runSync('git', ['worktree', 'remove', '--force', spawnedWorktreePath], projectRoot);
-            if (rm.status === 0) {
-                deps.stderr(`rolled back spawned worktree at ${spawnedWorktreePath}\n`);
-            }
-            else {
-                deps.stderr(`manual cleanup needed: \`git worktree remove --force ${spawnedWorktreePath}\` ` +
-                    `(rollback attempt failed: ${safeStderr(rm.stderr).trim() || 'unknown'})\n`);
-            }
-        }
-        return 1;
-    }
-    // ----- Step 8: Launch selected agent CLI -----
-    // Mirrors the kickoff invocation from claude.ts (no-args path): the agent
-    // picks up the newly-persisted ActiveCube via the MCP stdio server on
-    // startup. The kickoff prompt re-enters /loop borg:regen so the new
-    // drone bootstraps into the cube cleanly. The monitor clause (CR-PE-F1)
-    // arms the inbox tail so the new drone wakes on peer log entries in
-    // real time — without this, drones miss real-time wake events during
-    // the bootstrap window and only self-heal at the /loop heartbeat.
-    deps.setTerminalTitle(result.drone_label, cubeDetail.name);
-    // Pedagogical hint to stdout before Claude takes over the terminal.
-    // Ink does not enter alt-screen-buffer (verified empirically via PTY
-    // probe 2026-05-19), so lines printed here remain visible in the
-    // user's terminal scrollback above Claude's interactive UI. Color is
-    // gated on TTY + NO_COLOR/CI env-var conventions; the welcome shape
-    // itself is cube-agnostic so non-default templates render identically.
-    const useColor = deps.isTTY() && !process.env.NO_COLOR && !process.env.CI;
-    deps.stdout(renderAssimilationWelcome(assignedRole.name, cubeDetail.name, useColor));
-    const cli = await deps.resolveCli(args.flags.cli);
-    const agentCwd = deps.cwd(); // post-chdir if step 3 spawned a worktree
-    // gh#33 (Q2/Q4/Q6): in-place wt- adoption. A freshly-spawned worktree is
-    // already at origin/main on a fresh wt- branch, so only the in-place /
-    // --here path (running in an existing checkout) needs handling. ADOPT
-    // the per-worktree branch — switch the checkout onto wt-<suffix> at
-    // origin/main when clean + merged. This both moves the drone off main
-    // (Q4: main is never a working branch) AND brings the branch current,
-    // which a bare ff-sync would not do (it would leave a main checkout on
-    // main — the gap two-of-four-CR 27af1001 + QA c7a0c615 caught). Dirty ->
-    // skip + surface; unmerged HEAD -> block + surface; NEVER discards.
-    // Using adoptWorktree (HEAD-merged check + explicit `switch -C wtBranch
-    // ref`) also closes one-of-four-CR's compute-name-vs-current-branch NIT.
-    // Best-effort: a skip/block surfaces but never blocks the launch.
-    if (!spawnedWorktreePath) {
-        deps.runSync('git', ['fetch', 'origin', '--prune'], agentCwd);
-        const wtBranch = perWorktreeBranchName(basename(agentCwd), basename(projectRoot));
-        const adopt = adoptWorktree(deps.runSync, agentCwd, wtBranch, 'origin/main');
-        if (adopt.action === 'adopted') {
-            deps.stderr(`worktree: adopted branch ${wtBranch} at origin/main\n`);
-            deps.stderr(renderInPlaceWorktreeNote(agentCwd, wtBranch));
-        }
-        else if (adopt.message) {
-            deps.stderr(`worktree sync: ${adopt.message}\n`);
-        }
-    }
-    // BUG-5 / v0.9.3: probe MCP readiness before launching claude so
-    // the launched session sees tools at startup. Non-blocking: probe
-    // failure surfaces a stderr warning but the launch proceeds (the
-    // kickoff text's ToolSearch recovery clause is the second line of
-    // defense).
-    const mcpReady = await deps.probeMcpReady();
-    if (!mcpReady) {
-        deps.stderr(`warning: borg-mcp readiness probe did not complete within the timeout; ` +
-            `launching ${cli} anyway — the kickoff prompt's ToolSearch fallback ` +
-            `will recover if the MCP server takes longer to start.\n`);
-    }
-    const inboxPath = deps.getInboxPath(result.cube_id, result.drone_id);
-    const codexWakeNonce = cli === 'codex' ? `borg-wake-${randomUUID()}` : null;
-    const monitorClause = cli === 'claude'
-        ? `If you haven't yet, arm a persistent Monitor running the command ` +
-            `\`borg-inbox-monitor ${inboxPath}\` ` +
-            `so each event's task-notification title summarizes the new cube log entry ` +
-            `(drone label, role, and first ~80 chars of the message body) — letting you ` +
-            `triage events without reading the full body. `
-        : '';
-    let codexWakePathClause;
-    let remoteArgs = [];
-    let launchArgs;
-    let launchEnv;
-    let codexSocketPath = null;
-    let codexServerCleanup = null;
-    if (cli === 'codex') {
-        const remote = await deps.prepareCodexRemoteLaunch();
-        if (remote.warning) {
-            deps.stderr(`warning: ${remote.warning}\n`);
-            codexWakePathClause =
-                `⚠ Codex wake-path capability check failed: remote-control is unavailable for this session. Run borg:regen manually whenever you return, and expect only fallback wakeups until relaunch.`;
-        }
-        else {
-            codexWakePathClause =
-                `Codex wake-path capability check passed: remote-control socket established for this session.`;
-        }
-        remoteArgs = remote.args;
-        launchEnv = Object.keys(remote.env).length > 0 ? remote.env : undefined;
-        codexSocketPath = socketPathFromRemoteArgs(remote.args);
-        codexServerCleanup = remote.server?.cleanup ?? null;
-    }
-    const kickoff = buildAgentKickoffPrompt({
-        cli,
-        codexWakeNonce,
-        monitorClause,
-        codexWakePathClause,
-    });
-    launchArgs = [kickoff];
-    if (cli === 'codex') {
-        launchArgs = [...remoteArgs, ...withCodexCwdArg(launchArgs, agentCwd)];
-    }
-    const exitPromise = deps.exec(cli, launchArgs, agentCwd, launchEnv);
-    if (cli === 'codex' && codexSocketPath && codexWakeNonce) {
-        void recordCodexWakeTarget({
-            deps,
-            cubeId: result.cube_id,
-            droneId: result.drone_id,
-            socketPath: codexSocketPath,
-            cwd: agentCwd,
-            previewNeedle: codexWakeNonce,
-            launchedAtSeconds: Math.floor(Date.now() / 1000),
-        });
-    }
-    const exitCode = await exitPromise;
-    // gh#528: kill the borg-owned Codex app-server when the assimilate-launched
-    // session exits, so it isn't left orphaned (live → not pruned by pid liveness).
-    if (codexServerCleanup) {
-        try {
-            codexServerCleanup();
-        }
-        catch {
-            // best-effort
-        }
-    }
-    // Sprint 18: when a sibling worktree was spawned, the user's shell
-    // returns to their original cwd after Claude exits (process.chdir
-    // doesn't propagate to the parent). Emit a stderr hint so they know
-    // how to get back into the worktree. shellEscape defangs any shell
-    // metachars in the path against paste-injection (drone-11 SR-LANE).
-    // Skip the hint when no worktree was spawned (--here / no-worktree
-    // flow) or when originalCwd already matches the worktree path
-    // (defensive against the no-op edge case drone-9 UX-LANE flagged).
-    if (spawnedWorktreePath && originalCwd !== spawnedWorktreePath) {
-        deps.stderr(`\nAgent exited. You were working in ${spawnedWorktreePath}; your shell is back in ${originalCwd}.\n` +
-            `To return:\n` +
-            `  cd ${shellEscape(spawnedWorktreePath)}\n`);
-    }
-    return exitCode;
-}
-function renderWorktreeSteeringNote(worktreePath, wtBranch, primaryPath) {
-    return (`\nWORKTREE STEERING: You are in worktree ${worktreePath} on branch ${wtBranch}. ` +
-        `Do ALL work HERE — cut your feature branch (fix/.../feat/...) off ${wtBranch} in THIS worktree, ` +
-        `use relative paths / your cwd. NEVER \`git -C ${primaryPath}\` or operate on the primary checkout ${primaryPath}: ` +
-        `the same branch can't be checked out in two worktrees, so work created in the primary won't reach your wt-branch ` +
-        `without manual surgery (cherry-pick/merge).\n`);
-}
-function renderInPlaceWorktreeNote(worktreePath, wtBranch) {
-    return (`\nWORKTREE STEERING: This checkout is now on branch ${wtBranch}. ` +
-        `Do ALL work HERE in ${worktreePath} — cut your feature branch (fix/.../feat/...) off ${wtBranch}, ` +
-        `use relative paths / your cwd.\n`);
-}
-/**
- * Sprint 4 / gh#147 (drone-8 SR-PE-FINDING-1): strip ASCII control
- * characters before interpolating subprocess stderr into operator-
- * facing messages. Defense-in-depth against a local attacker editing
- * `.git/config` to embed ANSI escapes (e.g. `\x1b[2J` cursor moves,
- * `\x1b]0;...\x07` title injection) — git command stderr then carries
- * them, and unfiltered orchestrator output corrupts the terminal.
- *
- * Strips `[\x00-\x1F\x7F]` (NUL, all C0 controls, DEL). ASCII
- * whitespace inside C0 (tab, newline, CR) gets stripped too — the
- * orchestrator only ever interpolates short status fragments where
- * preserving multi-line layout isn't load-bearing; over-strip
- * trade-off accepted for shape simplicity.
- */
-export function safeStderr(msg) {
-    return msg.replace(/[\x00-\x1F\x7F]/g, '');
-}
-function worktreeRegistered(deps, projectRoot, candidate) {
-    const res = deps.runSync('git', ['worktree', 'list', '--porcelain'], projectRoot);
-    if (res.status !== 0)
-        return false;
-    return res.stdout.split('\n').some((line) => line === `worktree ${candidate}`);
-}
-/**
- * Sprint 19 (gh#184): suggest the closest cube-role name for a misspelled
- * CLI role argument. Levenshtein distance ≤2 against the cube's role
- * names; case-insensitive. Returns null when no close match exists.
- *
- * Serves Queen's "more user-friendly" intent without violating the
- * Borg-collective metaphor (collective defines roles; drones slot in).
- * The original strict-failure semantic is preserved; the suggestion
- * is an additive nudge in the error message, not a fallback path.
- */
-export function suggestRoleName(input, candidates) {
-    if (candidates.length === 0)
-        return null;
-    const inputLower = input.toLowerCase();
-    let best = null;
-    for (const candidate of candidates) {
-        const distance = levenshtein(inputLower, candidate.toLowerCase());
-        if (distance <= 2 && (best === null || distance < best.distance)) {
-            best = { name: candidate, distance };
-        }
-    }
-    return best ? best.name : null;
-}
-/**
- * Minimal Levenshtein distance implementation. Used only by
- * `suggestRoleName` for the fuzzy-match nudge; intentionally
- * unexported and not a general-purpose helper.
- */
-function levenshtein(a, b) {
-    if (a === b)
-        return 0;
-    if (a.length === 0)
-        return b.length;
-    if (b.length === 0)
-        return a.length;
-    const prev = new Array(b.length + 1);
-    const curr = new Array(b.length + 1);
-    for (let j = 0; j <= b.length; j++)
-        prev[j] = j;
-    for (let i = 1; i <= a.length; i++) {
-        curr[0] = i;
-        for (let j = 1; j <= b.length; j++) {
-            const cost = a[i - 1] === b[j - 1] ? 0 : 1;
-            curr[j] = Math.min(curr[j - 1] + 1, prev[j] + 1, prev[j - 1] + cost);
-        }
-        for (let j = 0; j <= b.length; j++)
-            prev[j] = curr[j];
-    }
-    return prev[b.length];
-}
-//# sourceMappingURL=assimilate-cmd.js.map
+import{dirname as K,basename as C,join as W}from"node:path";import{randomUUID as V}from"node:crypto";import{roleSlug as J,matchRoleByName as Q,pickDefaultRole as X}from"./role-resolver.js";import{deriveCubeName as Z,parseGitRemote as ee,sanitizeRemoteUrl as te}from"./cube-name.js";import{validateName as H}from"./name-validator.js";import{renderAssimilationWelcome as re}from"./assimilate-welcome.js";import{shellEscape as ne}from"./shell-escape.js";import{withCodexCwdArg as oe}from"./codex-remote.js";import{buildAgentKickoffPrompt as ie,recordCodexWakeTarget as ae,socketPathFromRemoteArgs as se}from"./codex-launch.js";import{perWorktreeBranchName as O,adoptWorktree as le}from"./worktree-lifecycle.js";async function Ee(r,e){if(r.role!==void 0){const t=H(r.role);if(!t.ok)return e.stderr(t.error+`
+`),1}if(r.flags.worktree!==void 0){const t=H(r.flags.worktree);if(!t.ok)return e.stderr(t.error+`
+`),1}let o=await e.getCachedAuth();if(!o){if(!e.isTTY()&&!r.flags.yes)return e.stderr("borg setup required and stdin is non-interactive. Run `borg setup` first in an interactive terminal, then `borg assimilate`.\n"),1;o=await e.runSetup()}const a=e.findProjectRoot(e.cwd());let i;if(r.flags.cubeName)i=r.flags.cubeName;else{const t=e.runSync("git",["remote","get-url","origin"],a),n=t.status===0?t.stdout:null;if(i=Z(a,n),n){const l=te(n),u=l?ee(l):null;l&&!u&&i&&e.stderr(`couldn't parse git remote '${l}' \u2014 using directory name '${i}' as cube name
+`)}}let s=null;if(i&&i.includes("@")&&i.includes(":")){const t=i.lastIndexOf(":");s={ownerEmail:i.substring(0,t),cubeName:i.substring(t+1)},i=s.cubeName}const p=e.cwd();let R;try{R=await e.listCubes(o.apiUrl,o.token)}catch(t){const n=t instanceof Error?t.message:String(t);if(n.includes("Authentication required")||n.includes("Authentication expired"))e.stderr(`Re-authenticating...
+`),o=await e.runSetup(),R=await e.listCubes(o.apiUrl,o.token);else throw t}const S=R.find(t=>t.name===i);if(!S&&s)return e.stderr(`No cube named '${s.cubeName}' accessible to you owned by '${s.ownerEmail}'. Did you accept their invite? See borgmcp.ai/dashboard.
+`),1;let c,E;if(S)c=await e.getCube(o.apiUrl,o.token,S.id),E=!1;else{let t;if(r.flags.template)t=r.flags.template;else if(r.flags.noTemplate)t=void 0;else if(e.isTTY())if(r.flags.yes)t="starter";else{const n=await e.listTemplates(o.apiUrl,o.token),l=["First drone joining a new cube. Apply a template?"];n.forEach((y,k)=>{const x=k===0?" (default)":"";l.push(`  ${k+1}) ${y.name}${x} \u2014 ${y.description}`)}),l.push(`  ${n.length+1}) skip \u2014 no template`);const u=(await e.prompt(l.join(`
+`)+`
+[1]: `)).trim(),h=u===""?1:parseInt(u,10);if(Number.isNaN(h)||h<1||h>n.length+1)return e.stderr(`invalid choice "${u}"
+`),1;t=h<=n.length?n[h-1].name:void 0}else{if(!r.flags.yes)return e.stderr(`cube creation needs a template choice but stdin is non-interactive.
+Pass --template <name>, --no-template, or --yes (defaults to starter).
+`),1;t="starter"}c=await e.createCube(o.apiUrl,o.token,t?{name:i??void 0,template:t}:{name:i??void 0}),E=!0}let d;if(r.role!==void 0){if(d=Q(c.roles,r.role),!d){const t=c.roles.map(u=>u.name).join(", "),n=fe(r.role,c.roles.map(u=>u.name)),l=n?` Did you mean "${n}"?`:"";return e.stderr(`no role matching "${r.role}" in cube "${c.name}". Available: ${t}.${l}
+(Use --template <name> on first-drone setup or run \`borg:create-role\` from inside Claude.)
+`),1}}else if(d=X(c.roles,{isFirstDrone:E}),!d)return e.stderr(`cube "${c.name}" has no default or human-seat role; cannot infer a role. Either pass a role argument explicitly (e.g. \`borg assimilate builder\`) or run \`borg:create-role\` from inside Claude to set up roles.
+`),1;let m;try{m=await e.assimilate(o.apiUrl,o.token,{cube_id:c.id,role_id:d.id,hostname:e.getHostname()})}catch(t){const n=t instanceof Error?t.message:String(t);return e.stderr(`assimilate failed: ${n}
+`),1}const $=c.roles.find(t=>t.id===m.role_id)??d;$.id!==d.id&&e.stderr(`Note: your invite didn't grant the "${d.name}" role \u2014 assimilated as "${$.name}" instead.
+`);const U=await e.getActiveCube(),M=r.flags.worktree!==void 0||U!==null;let f=null;if(M){if(U&&r.flags.here)return e.stderr(`this directory already hosts an active drone; remove --here or run from a fresh worktree
+`),1;const t=e.runSync("git",["rev-parse","--verify","HEAD"],a);if(t.status!==0)return e.stderr(`sibling worktree spawn requires HEAD pointing at a commit.
+  Fix: create at least one commit (\`git commit --allow-empty -m "initial"\`)
+  OR:  pass --here to skip the sibling spawn and use the current directory
+`),1;e.runSync("git",["fetch","origin"],a);let n="origin/main";e.runSync("git",["rev-parse","--verify","origin/main"],a).status!==0&&e.runSync("git",["rev-parse","--verify","origin/master"],a).status===0&&(n="origin/master");const u=t.stdout.trim(),h=e.runSync("git",["rev-parse",n],a).stdout.trim();u!==h&&e.stderr(`note: local HEAD (${u.slice(0,7)}) differs from ${n} (${h.slice(0,7)}); new worktree will start on ${n}
+`);const y=K(a),k=C(a),x=r.flags.worktree??J($.name);let w=W(y,`${k}-${x}`),j=2;for(;e.pathExists(w)||me(e,a,w);)w=W(y,`${k}-${x}-${j}`),j++;const I=O(C(w),k),L=e.runSync("git",["worktree","add","-b",I,w,n],a);if(L.status!==0)return e.stderr(`git worktree add failed: ${F(L.stderr)}
+`),1;e.stderr(`spawned sibling worktree at ${w} on branch ${I} (${n}); original dir is registered as active (edit ~/.config/borgmcp/cubes.json if stale).
+`),e.chdir(w),e.stderr(ce(w,I,a)),f=e.cwd()}try{await e.setActiveCube({cubeId:m.cube_id,droneId:m.drone_id,name:c.name,sessionToken:m.session_token,droneLabel:m.drone_label,apiUrl:o.apiUrl})}catch(t){const n=t instanceof Error?t.message:String(t);if(e.stderr(`setActiveCube failed: ${n}
+`),f){const l=e.runSync("git",["worktree","remove","--force",f],a);l.status===0?e.stderr(`rolled back spawned worktree at ${f}
+`):e.stderr(`manual cleanup needed: \`git worktree remove --force ${f}\` (rollback attempt failed: ${F(l.stderr).trim()||"unknown"})
+`)}return 1}e.setTerminalTitle(m.drone_label,c.name);const Y=e.isTTY()&&!process.env.NO_COLOR&&!process.env.CI;e.stdout(re($.name,c.name,Y));const g=await e.resolveCli(r.flags.cli),b=e.cwd();if(!f){e.runSync("git",["fetch","origin","--prune"],b);const t=O(C(b),C(a)),n=le(e.runSync,b,t,"origin/main");n.action==="adopted"?(e.stderr(`worktree: adopted branch ${t} at origin/main
+`),e.stderr(ue(b,t))):n.message&&e.stderr(`worktree sync: ${n.message}
+`)}await e.probeMcpReady()||e.stderr(`warning: borg-mcp readiness probe did not complete within the timeout; launching ${g} anyway \u2014 the kickoff prompt's ToolSearch fallback will recover if the MCP server takes longer to start.
+`);const q=e.getInboxPath(m.cube_id,m.drone_id),A=g==="codex"?`borg-wake-${V()}`:null,z=g==="claude"?`If you haven't yet, arm a persistent Monitor running the command \`borg-inbox-monitor ${q}\` so each event's task-notification title summarizes the new cube log entry (drone label, role, and first ~80 chars of the message body) \u2014 letting you triage events without reading the full body. `:"";let N,_=[],v,D,T=null,P=null;if(g==="codex"){const t=await e.prepareCodexRemoteLaunch();t.warning?(e.stderr(`warning: ${t.warning}
+`),N="\u26A0 Codex wake-path capability check failed: remote-control is unavailable for this session. Run borg:regen manually whenever you return, and expect only fallback wakeups until relaunch."):N="Codex wake-path capability check passed: remote-control socket established for this session.",_=t.args,D=Object.keys(t.env).length>0?t.env:void 0,T=se(t.args),P=t.server?.cleanup??null}v=[ie({cli:g,codexWakeNonce:A,monitorClause:z,codexWakePathClause:N})],g==="codex"&&(v=[..._,...oe(v,b)]);const B=e.exec(g,v,b,D);g==="codex"&&T&&A&&ae({deps:e,cubeId:m.cube_id,droneId:m.drone_id,socketPath:T,cwd:b,previewNeedle:A,launchedAtSeconds:Math.floor(Date.now()/1e3)});const G=await B;if(P)try{P()}catch{}return f&&p!==f&&e.stderr(`
+Agent exited. You were working in ${f}; your shell is back in ${p}.
+To return:
+  cd ${ne(f)}
+`),G}function ce(r,e,o){return`
+WORKTREE STEERING: You are in worktree ${r} on branch ${e}. Do ALL work HERE \u2014 cut your feature branch (fix/.../feat/...) off ${e} in THIS worktree, use relative paths / your cwd. NEVER \`git -C ${o}\` or operate on the primary checkout ${o}: the same branch can't be checked out in two worktrees, so work created in the primary won't reach your wt-branch without manual surgery (cherry-pick/merge).
+`}function ue(r,e){return`
+WORKTREE STEERING: This checkout is now on branch ${e}. Do ALL work HERE in ${r} \u2014 cut your feature branch (fix/.../feat/...) off ${e}, use relative paths / your cwd.
+`}function F(r){return r.replace(/[\x00-\x1F\x7F]/g,"")}function me(r,e,o){const a=r.runSync("git",["worktree","list","--porcelain"],e);return a.status!==0?!1:a.stdout.split(`
+`).some(i=>i===`worktree ${o}`)}function fe(r,e){if(e.length===0)return null;const o=r.toLowerCase();let a=null;for(const i of e){const s=de(o,i.toLowerCase());s<=2&&(a===null||s<a.distance)&&(a={name:i,distance:s})}return a?a.name:null}function de(r,e){if(r===e)return 0;if(r.length===0)return e.length;if(e.length===0)return r.length;const o=new Array(e.length+1),a=new Array(e.length+1);for(let i=0;i<=e.length;i++)o[i]=i;for(let i=1;i<=r.length;i++){a[0]=i;for(let s=1;s<=e.length;s++){const p=r[i-1]===e[s-1]?0:1;a[s]=Math.min(a[s-1]+1,o[s]+1,o[s-1]+p)}for(let s=0;s<=e.length;s++)o[s]=a[s]}return o[e.length]}export{Ee as runAssimilate,F as safeStderr,fe as suggestRoleName};