borgmcp 1.0.6 → 1.0.8

package/dist/setup.js

@@ -1,252 +1,42 @@
 #!/usr/bin/env node
-/**
- * Borg MCP Setup Wizard
- *
- * Interactive setup flow:
- * 1. Configure Claude Code MCP settings
- * 2. Google OAuth authentication
- * 3. Subscription setup (web dashboard or Stripe)
- */
-import prompts from 'prompts';
-import chalk from 'chalk';
-import open from 'open';
-import which from 'which';
-import { authenticateWithGoogle } from './auth.js';
-import { checkSubscriptionStatus, createSubscription } from './remote-client.js';
-import { retrySubscriptionCheck } from './subscription-retry.js';
-import { addMcpServer, addSessionStartHook, addUserPromptSubmitHook, addCodexMcpServer, addCodexSessionStartHook, addCodexUserPromptSubmitHook, isMcpServerConfigured, isCodexMcpServerConfigured, } from './config-utils.js';
-import { isAuthenticated } from './config.js';
-import { handleVersionFlag } from './version.js';
-import { initDebugFromArgv } from './debug.js';
-/**
- * Main setup wizard
- */
-async function main() {
-    // `--debug` / BORG_DEBUG observability. Wired here as well as in the
-    // top-level dispatcher because `borg-setup` is its own bin (dist/setup.js)
-    // and can be invoked directly, not only via `borg setup`. Idempotent.
-    initDebugFromArgv(process.argv);
-    handleVersionFlag();
-    console.log(chalk.blue.bold('\n◼ Borg MCP Setup Wizard ◼'));
-    // gh#557: `--no-browser` (alias `--device`) forces the device-code OAuth
-    // flow for SSH / headless / container terminals. Scanned from argv so it
-    // works both as `borg setup --no-browser` and `borg-setup --no-browser`.
-    // (SSH/headless are auto-detected too; the flag is the explicit override.)
-    const noBrowser = process.argv.includes('--no-browser') || process.argv.includes('--device');
-    // Step 0: Check which agent CLIs exist
-    let claudeCliPath = null;
-    let codexCliPath = null;
-    try {
-        claudeCliPath = which.sync('claude');
-    }
-    catch (error) {
-        // Optional: Borg can also run with Codex.
-    }
-    try {
-        codexCliPath = which.sync('codex');
-    }
-    catch (error) {
-        // Optional: Borg can also run with Claude Code.
-    }
-    if (claudeCliPath)
-        console.log(chalk.gray(`Found Claude CLI: ${claudeCliPath}`));
-    if (codexCliPath)
-        console.log(chalk.gray(`Found Codex CLI: ${codexCliPath}`));
-    if (claudeCliPath || codexCliPath)
-        console.log('');
-    if (!claudeCliPath && !codexCliPath) {
-        console.error(chalk.red('◼ No supported agent CLI found\n'));
-        console.error(chalk.yellow('Please install Claude Code or Codex first:'));
-        console.error(chalk.gray('  Claude Code: https://claude.ai/download'));
-        console.error(chalk.gray('  Codex: https://developers.openai.com/codex\n'));
-        process.exit(1);
-    }
-    // Step 1: Configure every detected agent CLI. Idempotent; re-running
-    // setup is the normal path for OAuth refresh and CLI self-healing.
-    console.log(chalk.blue('◼ Agent CLI Integration'));
-    if (claudeCliPath) {
-        try {
-            if (!isMcpServerConfigured())
-                addMcpServer();
-            addSessionStartHook();
-            addUserPromptSubmitHook();
-            console.log(chalk.green('◼ borg configured for Claude Code'));
-        }
-        catch (error) {
-            console.error(chalk.red(`\n◼ Failed to configure Claude Code: ${error.message}\n`));
-            process.exit(1);
-        }
-    }
-    if (codexCliPath) {
-        try {
-            if (!isCodexMcpServerConfigured())
-                addCodexMcpServer();
-            addCodexSessionStartHook();
-            addCodexUserPromptSubmitHook();
-            console.log(chalk.green('◼ borg configured for Codex'));
-        }
-        catch (error) {
-            console.error(chalk.red(`\n◼ Failed to configure Codex: ${error.message}\n`));
-            process.exit(1);
-        }
-    }
-    console.log('');
-    // Step 2: Authentication
-    console.log(chalk.blue('◼ Google Authentication'));
-    const authed = await isAuthenticated();
-    if (!authed) {
-        try {
-            await authenticateWithGoogle(noBrowser ? { noBrowser: true } : undefined);
-        }
-        catch (error) {
-            console.error(chalk.red(`\n◼ Authentication failed: ${error.message}\n`));
-            // gh#557 NOTE-2: device-flow errors (access_denied / expired_token) and
-            // any other auth failure exit here — give the remote user a recovery
-            // path instead of a bare exit.
-            console.error(chalk.yellow('Re-run `borg setup` to try again.\n'));
-            process.exit(1);
-        }
-    }
-    else {
-        console.log(chalk.green('◼ Already authenticated\n'));
-    }
-    // Step 3: Subscription
-    console.log(chalk.blue('◼ Subscription Check'));
-    let status;
-    try {
-        status = await checkSubscriptionStatus();
-    }
-    catch (error) {
-        console.error(chalk.red(`\n◼ Failed to check subscription: ${error.message}\n`));
-        process.exit(1);
-    }
-    // gh#521: a user who just subscribed via web hits propagation lag — retry a
-    // few times (non-alarmingly) before declaring no subscription, instead of
-    // flashing a scary "not found" immediately after payment.
-    status = await retrySubscriptionCheck(status, {
-        check: checkSubscriptionStatus,
-        sleep: (ms) => new Promise((resolve) => setTimeout(resolve, ms)),
-        onRetry: (attempt, total) => console.log(chalk.gray(`◼ Checking subscription... (attempt ${attempt}/${total})`)),
-    });
-    if (!status.hasAccess) {
-        // gh#687: a fresh user has no subscription BY DESIGN — the Free tier is the
-        // permanent entry point (no trial). Lead with that as a WIN, not a
-        // "not found" failure, and present upgrading as an OFFER (Continue on Free
-        // is the default). The gh#521 just-subscribed propagation-lag retry already
-        // ran above; the "I already subscribed — re-check" choice covers the tail.
-        console.log(chalk.green("◼ You're on the Free tier — permanent, no card needed: 1 cube + 3 drones + 100 req/hr."));
-        console.log(chalk.gray('◼ Start using borgmcp right now. Upgrade any time for unlimited cubes + drones ($1/cube/month).\n'));
-        const { subscribeMethod } = await prompts({
-            type: 'select',
-            name: 'subscribeMethod',
-            message: "You're ready on the Free tier. Want to do more?",
-            choices: [
-                {
-                    title: '◼ Continue on the Free tier (recommended)',
-                    value: 'skip',
-                    description: 'Start now — 1 cube, 3 drones, 100 req/hr. No payment required.'
-                },
-                {
-                    title: '◼ Upgrade to Cube tier — $1/cube/month',
-                    value: 'web',
-                    description: 'Unlimited cubes + drones + 1000 req/hr. Opens the subscribe page in your browser.'
-                },
-                {
-                    title: '◼ Quick Stripe checkout',
-                    value: 'stripe',
-                    description: 'Fast upgrade checkout in the browser'
-                },
-                {
-                    title: '◼ I already subscribed — re-check',
-                    value: 'recheck',
-                    description: 'Re-check now — a just-completed subscription can take a moment to activate'
-                }
-            ]
-        });
-        switch (subscribeMethod) {
-            case 'web':
-                console.log(chalk.blue('\n◼ Opening: https://borgmcp.ai/subscribe'));
-                try {
-                    await open('https://borgmcp.ai/subscribe');
-                    console.log(chalk.gray('◼ Waiting for subscription (checking every 5s for 2 min)...\n'));
-                    await pollForSubscription();
-                }
-                catch (error) {
-                    console.error(chalk.yellow(`\n◼ ${error.message}`));
-                }
-                break;
-            case 'stripe':
-                try {
-                    const checkoutUrl = await createSubscription();
-                    console.log(chalk.blue(`\n◼ Opening Stripe: ${checkoutUrl}`));
-                    await open(checkoutUrl);
-                    console.log(chalk.gray('◼ Waiting for subscription...\n'));
-                    await pollForSubscription();
-                }
-                catch (error) {
-                    console.error(chalk.red(`\n◼ Failed to create checkout: ${error.message}\n`));
-                }
-                break;
-            case 'recheck':
-                try {
-                    const recheckStatus = await checkSubscriptionStatus();
-                    if (recheckStatus.hasAccess) {
-                        console.log(chalk.green('\n◼ Subscription found!\n'));
-                    }
-                    else {
-                        console.log(chalk.yellow('\n◼ No subscription found\n'));
-                    }
-                }
-                catch (error) {
-                    console.error(chalk.red(`\n◼ Failed to recheck: ${error.message}\n`));
-                }
-                break;
-            case 'skip':
-                console.log(chalk.green("\n◼ You're all set on the Free tier: 1 cube, 3 drones, 100 req/hr.\n"));
-                break;
-        }
-    }
-    else {
-        console.log(chalk.green('◼ Active subscription found'));
-        if (status.expiresAt) {
-            const expiresAt = new Date(status.expiresAt);
-            console.log(chalk.gray(`  Expires: ${expiresAt.toLocaleDateString()}\n`));
-        }
-        else {
-            console.log('');
-        }
-    }
-    // Success message
-    console.log(chalk.green.bold('Setup complete!\n'));
-    console.log(chalk.yellow('🔄 Restart Claude Code/Codex (or open a new session) for the changes to take effect.\n'));
-    console.log(chalk.gray('◼ Next steps:'));
-    console.log(chalk.gray('1. Run "borg" to start Claude Code or Codex with your cube'));
-    console.log(chalk.gray('2. Manage cubes and subscription at https://borgmcp.ai/dashboard\n'));
-}
-/**
- * Poll for subscription activation
- * Checks every 5 seconds for 2 minutes (24 attempts)
- */
-async function pollForSubscription() {
-    const maxAttempts = 24;
-    for (let i = 0; i < maxAttempts; i++) {
-        await new Promise(resolve => setTimeout(resolve, 5000));
-        try {
-            const status = await checkSubscriptionStatus();
-            if (status.hasAccess) {
-                console.log(chalk.green('◼ Subscription activated!\n'));
-                return;
-            }
-        }
-        catch (error) {
-            // Continue polling even on errors
-        }
-    }
-    throw new Error('Timeout - Run setup again after subscribing');
-}
-// Run wizard
-main().catch((error) => {
-    console.error(chalk.red(`\n◼ Setup failed: ${error.message}\n`));
-    process.exit(1);
-});
-//# sourceMappingURL=setup.js.map
+import h from"prompts";import e from"chalk";import g from"open";import u from"which";import{authenticateWithGoogle as b}from"./auth.js";import{checkSubscriptionStatus as c,createSubscription as m}from"./remote-client.js";import{retrySubscriptionCheck as d}from"./subscription-retry.js";import{addMcpServer as f,addSessionStartHook as y,addUserPromptSubmitHook as w,addCodexMcpServer as C,addCodexSessionStartHook as k,addCodexUserPromptSubmitHook as S,isMcpServerConfigured as x,isCodexMcpServerConfigured as F}from"./config-utils.js";import{isAuthenticated as v}from"./config.js";import{handleVersionFlag as $}from"./version.js";import{initDebugFromArgv as A}from"./debug.js";async function P(){A(process.argv),$(),console.log(e.blue.bold(`
+\u25FC Borg MCP Setup Wizard \u25FC`));const i=process.argv.includes("--no-browser")||process.argv.includes("--device");let n=null,t=null;try{n=u.sync("claude")}catch{}try{t=u.sync("codex")}catch{}if(n&&console.log(e.gray(`Found Claude CLI: ${n}`)),t&&console.log(e.gray(`Found Codex CLI: ${t}`)),(n||t)&&console.log(""),!n&&!t&&(console.error(e.red(`\u25FC No supported agent CLI found
+`)),console.error(e.yellow("Please install Claude Code or Codex first:")),console.error(e.gray("  Claude Code: https://claude.ai/download")),console.error(e.gray(`  Codex: https://developers.openai.com/codex
+`)),process.exit(1)),console.log(e.blue("\u25FC Agent CLI Integration")),n)try{x()||f(),y(),w(),console.log(e.green("\u25FC borg configured for Claude Code"))}catch(o){console.error(e.red(`
+\u25FC Failed to configure Claude Code: ${o.message}
+`)),process.exit(1)}if(t)try{F()||C(),k(),S(),console.log(e.green("\u25FC borg configured for Codex"))}catch(o){console.error(e.red(`
+\u25FC Failed to configure Codex: ${o.message}
+`)),process.exit(1)}if(console.log(""),console.log(e.blue("\u25FC Google Authentication")),await v())console.log(e.green(`\u25FC Already authenticated
+`));else try{await b(i?{noBrowser:!0}:void 0)}catch(o){console.error(e.red(`
+\u25FC Authentication failed: ${o.message}
+`)),console.error(e.yellow("Re-run `borg setup` to try again.\n")),process.exit(1)}console.log(e.blue("\u25FC Subscription Check"));let s;try{s=await c()}catch(o){console.error(e.yellow(`
+\u25FC Subscription check failed: ${o.message}`)),console.error(e.gray(`\u25FC Retrying before falling back to the Free tier...
+`)),s={hasAccess:!1}}if(s=await d(s,{check:c,sleep:o=>new Promise(r=>setTimeout(r,o)),onRetry:(o,r)=>console.log(e.gray(`\u25FC Checking subscription... (attempt ${o}/${r})`))}),s.hasAccess)if(console.log(e.green("\u25FC Active subscription found")),s.expiresAt){const o=new Date(s.expiresAt);console.log(e.gray(`  Expires: ${o.toLocaleDateString()}
+`))}else console.log("");else{console.log(e.green("\u25FC You're on the Free tier \u2014 permanent, no card needed: 1 cube + 3 agent sessions + 100 req/hr.")),console.log(e.gray(`\u25FC Start using borgmcp right now. Upgrade any time: $1/month per cube, each cube adds 8 pooled agent sessions + 1000 req/hr.
+`));const{subscribeMethod:o}=await h({type:"select",name:"subscribeMethod",message:"You're ready on the Free tier. Want to do more?",choices:[{title:"\u25FC Continue on the Free tier (recommended)",value:"skip",description:"Start now \u2014 1 cube, 3 agent sessions, 100 req/hr. No payment required."},{title:"\u25FC Upgrade to Cube tier \u2014 $1/month per cube",value:"web",description:"Each cube adds 8 pooled agent sessions + 1000 req/hr. Opens the subscribe page in your browser."},{title:"\u25FC Quick Stripe checkout",value:"stripe",description:"Fast upgrade checkout in the browser"},{title:"\u25FC I already subscribed \u2014 re-check",value:"recheck",description:"Re-check now \u2014 a just-completed subscription can take a moment to activate"}]});switch(o===void 0&&console.log(e.yellow(`
+\u25FC No subscription option selected \u2014 continuing on the Free tier.
+`)),o){case"web":console.log(e.blue(`
+\u25FC Opening: https://borgmcp.ai/subscribe`));try{await g("https://borgmcp.ai/subscribe"),console.log(e.gray(`\u25FC Waiting for subscription (checking every 5s for 2 min)...
+`)),await p()}catch(r){console.error(e.yellow(`
+\u25FC ${r.message}`)),console.log(e.green(`\u25FC Continuing on the Free tier. Upgrade any time from https://borgmcp.ai/subscribe.
+`))}break;case"stripe":try{const r=await m();console.log(e.blue(`
+\u25FC Opening Stripe: ${r}`)),await g(r),console.log(e.gray(`\u25FC Waiting for subscription...
+`)),await p()}catch(r){console.error(e.red(`
+\u25FC Failed to create checkout: ${r.message}
+`)),console.log(e.green(`\u25FC Continuing on the Free tier. Upgrade any time from https://borgmcp.ai/subscribe.
+`))}break;case"recheck":try{let r;try{r=await c()}catch{r={hasAccess:!1}}r=await d(r,{check:c,sleep:a=>new Promise(l=>setTimeout(l,a)),onRetry:(a,l)=>console.log(e.gray(`\u25FC Re-checking subscription... (attempt ${a}/${l})`))}),r.hasAccess?console.log(e.green(`
+\u25FC Subscription found!
+`)):console.log(e.yellow(`
+\u25FC No subscription found \u2014 continuing on the Free tier.
+`))}catch(r){console.error(e.red(`
+\u25FC Failed to recheck: ${r.message}
+`)),console.log(e.green(`\u25FC Continuing on the Free tier.
+`))}break;case"skip":console.log(e.green(`
+\u25FC You're all set on the Free tier: 1 cube, 3 agent sessions, 100 req/hr.
+`));break}}console.log(e.green.bold(`Setup complete!
+`)),console.log(e.yellow(`\u{1F504} Restart Claude Code/Codex (or open a new session) for the changes to take effect.
+`)),console.log(e.gray("\u25FC Next steps:")),console.log(e.gray('1. Run "borg" to start Claude Code or Codex with your cube')),console.log(e.gray(`2. Manage cubes and subscription at https://borgmcp.ai/dashboard
+`))}async function p(){for(let n=0;n<24;n++){await new Promise(t=>setTimeout(t,5e3));try{if((await c()).hasAccess){console.log(e.green(`\u25FC Subscription activated!
+`));return}}catch{}}throw new Error("Timeout - Run setup again after subscribing")}P().catch(i=>{console.error(e.red(`
+\u25FC Setup failed: ${i.message}
+`)),process.exit(1)});

package/dist/shell-escape.js

@@ -1,22 +1 @@
-// POSIX-safe shell-escaping for paste-intended emission.
-//
-// Sprint 18 (gh-tracked via dispatch 10:41:47Z): when the CLI emits a
-// `cd <path>` line for the user to copy-paste into their shell, the path is
-// a filesystem-controlled string with no character constraints (unlike
-// DB-CHECK-constrained role/cube names). Paths can legally contain spaces,
-// `$VAR`, backticks, `$(cmd)`, embedded single-quotes, and other shell
-// metacharacters that would execute on paste under naive emission.
-//
-// drone-11 SR-LANE (cube entry 2026-05-19T10:44:35Z) escalation: double-
-// quoting handles spaces but `$VAR` / backtick / `$(cmd)` still expand
-// inside double-quotes. Single-quotes with internal-quote escape (`'\''`
-// = close-quote / escaped-quote / re-open-quote) defang every shell
-// metachar including embedded `'`. POSIX-defined, copy-paste-runnable
-// across bash / zsh / dash / sh.
-//
-// Behavior: returns the input wrapped in single-quotes with any internal
-// `'` rewritten as `'\''`. Empty string returns `''`.
-export function shellEscape(s) {
-    return `'${s.replace(/'/g, `'\\''`)}'`;
-}
-//# sourceMappingURL=shell-escape.js.map
+function r(e){return`'${e.replace(/'/g,"'\\''")}'`}export{r as shellEscape};

package/dist/spawn.js

@@ -1,29 +1,10 @@
-/**
- * `borg spawn` — deprecation stub.
- *
- * Replaced by `borg assimilate [role] --worktree <name>` (see
- * `assimilate-cmd.ts`). The new command folds worktree creation,
- * OAuth bootstrap, cube creation, template application, and drone
- * assimilation into one shell call. This file remains so existing
- * scripts and tab-completion entries fail loudly with an actionable
- * migration message rather than silently mis-routing.
- *
- * `validateName` continues to be re-exported from here for callers
- * that still depend on the symbol (it lives in `name-validator.ts`
- * now — single source of truth).
- */
-export { validateName } from './name-validator.js';
-export async function runSpawn() {
-    const msg = 'borg spawn is removed. Use:\n' +
-        '  borg assimilate [role] --worktree <name>\n' +
-        '\n' +
-        'Example: if you previously ran `borg spawn drone-2`, the equivalent is\n' +
-        '  borg assimilate --worktree drone-2\n' +
-        '(role is optional; defaults per first-drone rules)\n' +
-        '\n' +
-        'If you want a specific role:\n' +
-        '  borg assimilate builder --worktree drone-2\n';
-    process.stderr.write(msg);
-    return 2;
-}
-//# sourceMappingURL=spawn.js.map
+import{validateName as s}from"./name-validator.js";async function r(){return process.stderr.write(`borg spawn is removed. Use:
+  borg assimilate [role] --worktree <name>
+
+Example: if you previously ran \`borg spawn drone-2\`, the equivalent is
+  borg assimilate --worktree drone-2
+(role is optional; defaults per first-drone rules)
+
+If you want a specific role:
+  borg assimilate builder --worktree drone-2
+`),2}export{r as runSpawn,s as validateName};

package/dist/stale-version-check.js

@@ -1,102 +1 @@
-/**
- * Sprint 7 (b) — stale-binary defensive hardening (gh#148 close-out).
- *
- * drone-3's v0.8.0 case (cube log 2026-05-18T10:35Z) ran for months
- * without warning that v0.8.10 had shipped the gh#71 carve-out for
- * own-drone heartbeat-pings. The silent-stale-binary failure mode
- * costs cube collective time to diagnose because the gap between
- * "installed version" and "latest published" is invisible to the
- * operator.
- *
- * This module surfaces that gap at borg launch time via a stderr
- * warning. Network check against npmjs.org registry is async +
- * timeout-gated so a slow registry doesn't block the operator. Fails
- * silently on any error (network failure, registry change,
- * prerelease version, etc.) — defense-in-depth, never a blocker.
- */
-const NPM_REGISTRY_LATEST_URL = 'https://registry.npmjs.org/borgmcp/latest';
-const FETCH_TIMEOUT_MS = 2000;
-const MINOR_VERSIONS_BEHIND_THRESHOLD = 1;
-/**
- * Pure compare: given an installed version string and a latest version
- * string, decide whether to warn. Both strings are expected in semver
- * `MAJOR.MINOR.PATCH` form (no prerelease, no build metadata).
- *
- * Returns `{stale: true, message}` when installed is at least
- * MINOR_VERSIONS_BEHIND_THRESHOLD minor versions behind latest on the
- * same major. Defaults conservatively — unparseable input, prerelease
- * tags, or anything weird returns `stale: false` so we never
- * false-positive on edge cases.
- */
-export function compareVersionsForStaleness(installed, latest) {
-    const installedParts = parseSemver(installed);
-    const latestParts = parseSemver(latest);
-    if (!installedParts || !latestParts) {
-        return { stale: false, message: null };
-    }
-    // Don't warn across major-version transitions — those are
-    // explicit migrations the operator is aware of (or should be); the
-    // warning shape isn't the right surface for them.
-    if (installedParts.major !== latestParts.major) {
-        return { stale: false, message: null };
-    }
-    const minorDelta = latestParts.minor - installedParts.minor;
-    if (minorDelta < MINOR_VERSIONS_BEHIND_THRESHOLD) {
-        return { stale: false, message: null };
-    }
-    // Lead-with-warning shape per drone-7 UX-FOLLOWUP 2026-05-18T13:49:54Z:
-    // both versions explicit (no "N versions behind" count ambiguity that
-    // flattens severity perception), single actionable command, no
-    // backticks (terminal renders them as literal characters). Fits the
-    // Coordinator-discipline 80-char preview rule. drone-1 ratified the
-    // (X) network-check approach + this copy shape at 13:49:59Z.
-    // minorDelta is informational; intentionally not surfaced.
-    void minorDelta;
-    const message = `⚠ borgmcp ${installed} is behind latest ${latest} — npm install -g borgmcp@latest`;
-    return { stale: true, message };
-}
-function parseSemver(s) {
-    // Strict MAJOR.MINOR.PATCH; rejects prerelease tags, build metadata,
-    // empty / 'unknown' / malformed strings. Conservative on purpose:
-    // ambiguous version strings should not trigger a warning.
-    if (typeof s !== 'string' || s.length === 0)
-        return null;
-    const match = /^(\d+)\.(\d+)\.(\d+)$/.exec(s);
-    if (!match)
-        return null;
-    return {
-        major: parseInt(match[1], 10),
-        minor: parseInt(match[2], 10),
-        patch: parseInt(match[3], 10),
-    };
-}
-/**
- * Fetch the latest published borgmcp version from the npm registry.
- * Returns the version string on success, `null` on any failure
- * (timeout, network error, registry change, malformed response).
- * Never throws — caller treats null as "skip the warning."
- */
-export async function fetchLatestBorgmcpVersion() {
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
-    try {
-        const response = await fetch(NPM_REGISTRY_LATEST_URL, {
-            signal: controller.signal,
-            headers: { Accept: 'application/json' },
-        });
-        if (!response.ok)
-            return null;
-        const body = (await response.json());
-        if (typeof body.version !== 'string' || body.version.length === 0)
-            return null;
-        return body.version;
-    }
-    catch {
-        // AbortError, network error, parse error — all treated as "skip silently."
-        return null;
-    }
-    finally {
-        clearTimeout(timeout);
-    }
-}
-//# sourceMappingURL=stale-version-check.js.map
+const a="https://registry.npmjs.org/borgmcp/latest",i=2e3,c=1;function u(t,e){const r=o(t),n=o(e);if(!r||!n)return{stale:!1,message:null};if(r.major!==n.major)return{stale:!1,message:null};const s=n.minor-r.minor;return s<1?{stale:!1,message:null}:{stale:!0,message:`\u26A0 borgmcp ${t} is behind latest ${e} \u2014 npm install -g borgmcp@latest`}}function o(t){if(typeof t!="string"||t.length===0)return null;const e=/^(\d+)\.(\d+)\.(\d+)$/.exec(t);return e?{major:parseInt(e[1],10),minor:parseInt(e[2],10),patch:parseInt(e[3],10)}:null}async function m(){const t=new AbortController,e=setTimeout(()=>t.abort(),2e3);try{const r=await fetch(a,{signal:t.signal,headers:{Accept:"application/json"}});if(!r.ok)return null;const n=await r.json();return typeof n.version!="string"||n.version.length===0?null:n.version}catch{return null}finally{clearTimeout(e)}}export{u as compareVersionsForStaleness,m as fetchLatestBorgmcpVersion};