borgmcp 1.0.6 → 1.0.8

package/dist/stream-owner.js

@@ -1,202 +1,2 @@
-import { randomUUID } from 'node:crypto';
-import { promises as fs } from 'node:fs';
-import { homedir } from 'node:os';
-import path from 'node:path';
-const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-const STREAM_LOCKS_DIR = path.join(homedir(), '.config', 'borgmcp', 'stream-locks');
-const OWNER_FILE = 'owner.json';
-const SCHEMA_VERSION = 1;
-export const STREAM_OWNER_STALE_MS = 70_000;
-const processNonce = randomUUID();
-const processStartedAt = new Date().toISOString();
-export function streamLockPath(cubeId, droneId, locksDir = STREAM_LOCKS_DIR) {
-    assertUuid('cubeId', cubeId);
-    assertUuid('droneId', droneId);
-    return path.join(locksDir, cubeId, `${droneId}.lock`);
-}
-export async function acquireStreamLease(cubeId, droneId, staleMs = STREAM_OWNER_STALE_MS, deps = {}) {
-    const lockPath = streamLockPath(cubeId, droneId, deps.locksDir);
-    await fs.mkdir(path.dirname(lockPath), { recursive: true, mode: 0o700 });
-    const lease = await tryCreateLease(lockPath, deps);
-    if (lease)
-        return lease;
-    const snapshot = await readOwnershipSnapshot(cubeId, droneId, deps);
-    if (snapshot.state !== 'owned-by-other-process') {
-        return null;
-    }
-    const stale = (snapshot.ageMs ?? 0) > staleMs;
-    const pidDead = typeof snapshot.pid === 'number' &&
-        deps.isPidAlive !== undefined &&
-        !deps.isPidAlive(snapshot.pid);
-    if (!stale && !pidDead) {
-        return null;
-    }
-    if (!(await moveStaleLockAside(lockPath, snapshot, staleMs, deps))) {
-        return null;
-    }
-    return tryCreateLease(lockPath, deps);
-}
-export async function readOwnershipSnapshot(cubeId, droneId, deps = {}) {
-    const lockPath = streamLockPath(cubeId, droneId, deps.locksDir);
-    let raw;
-    try {
-        raw = await fs.readFile(path.join(lockPath, OWNER_FILE), 'utf8');
-    }
-    catch (err) {
-        if (err?.code === 'ENOENT')
-            return { state: 'unowned', lockPath };
-        throw err;
-    }
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch {
-        return { state: 'owned-by-other-process', lockPath, ageMs: Number.POSITIVE_INFINITY };
-    }
-    if (!isRecord(parsed)) {
-        return { state: 'owned-by-other-process', lockPath, ageMs: Number.POSITIVE_INFINITY };
-    }
-    const now = (deps.now ?? (() => new Date()))();
-    const heartbeatMs = Date.parse(parsed.heartbeatAt);
-    const ageMs = Number.isFinite(heartbeatMs) ? now.getTime() - heartbeatMs : Number.POSITIVE_INFINITY;
-    const ownPid = deps.pid ?? process.pid;
-    const ownNonce = deps.processNonce ?? processNonce;
-    const state = parsed.pid === ownPid && parsed.processNonce === ownNonce
-        ? 'owner'
-        : 'owned-by-other-process';
-    return {
-        state,
-        pid: parsed.pid,
-        processNonce: parsed.processNonce,
-        cwd: parsed.cwd,
-        startedAt: parsed.startedAt,
-        heartbeatAt: parsed.heartbeatAt,
-        ageMs,
-        lockPath,
-    };
-}
-async function tryCreateLease(lockPath, deps) {
-    try {
-        await fs.mkdir(lockPath, { mode: 0o700 });
-    }
-    catch (err) {
-        if (err?.code === 'EEXIST')
-            return null;
-        throw err;
-    }
-    const record = makeRecord(deps);
-    await writeRecord(lockPath, record);
-    return makeLease(lockPath, record, deps);
-}
-async function moveStaleLockAside(lockPath, snapshot, staleMs, deps) {
-    const takeoverPath = `${lockPath}.takeover-${deps.processNonce ?? processNonce}-${Date.now()}`;
-    try {
-        await fs.rename(lockPath, takeoverPath);
-    }
-    catch (err) {
-        if (err?.code === 'ENOENT')
-            return false;
-        throw err;
-    }
-    await deps.beforeTakeoverVerify?.(takeoverPath);
-    const verified = await readOwnershipRecord(takeoverPath);
-    if (!isStillReclaimable(snapshot, verified, staleMs, deps)) {
-        try {
-            await fs.rename(takeoverPath, lockPath);
-        }
-        catch (err) {
-            if (err?.code !== 'EEXIST')
-                throw err;
-            await fs.rm(takeoverPath, { recursive: true, force: true });
-        }
-        return false;
-    }
-    await fs.rm(takeoverPath, { recursive: true, force: true });
-    return true;
-}
-function isStillReclaimable(snapshot, current, staleMs, deps) {
-    if (!current) {
-        return snapshot.ageMs === Number.POSITIVE_INFINITY;
-    }
-    if (snapshot.pid !== current.pid ||
-        snapshot.processNonce !== current.processNonce ||
-        snapshot.heartbeatAt !== current.heartbeatAt) {
-        return false;
-    }
-    const now = (deps.now ?? (() => new Date()))();
-    const heartbeatMs = Date.parse(current.heartbeatAt);
-    const ageMs = Number.isFinite(heartbeatMs)
-        ? now.getTime() - heartbeatMs
-        : Number.POSITIVE_INFINITY;
-    const stale = ageMs > staleMs;
-    const pidDead = deps.isPidAlive !== undefined && !deps.isPidAlive(current.pid);
-    return stale || pidDead;
-}
-function makeLease(lockPath, record, deps) {
-    return {
-        lockPath,
-        record,
-        async refresh() {
-            const current = await readOwnershipRecord(lockPath);
-            if (!current || current.pid !== record.pid || current.processNonce !== record.processNonce) {
-                return false;
-            }
-            const next = { ...record, heartbeatAt: (deps.now ?? (() => new Date()))().toISOString() };
-            await writeRecord(lockPath, next);
-            this.record = next;
-            return true;
-        },
-        async release() {
-            const current = await readOwnershipRecord(lockPath);
-            if (current?.pid === record.pid && current.processNonce === record.processNonce) {
-                await fs.rm(lockPath, { recursive: true, force: true });
-            }
-        },
-    };
-}
-async function readOwnershipRecord(lockPath) {
-    try {
-        const raw = await fs.readFile(path.join(lockPath, OWNER_FILE), 'utf8');
-        const parsed = JSON.parse(raw);
-        return isRecord(parsed) ? parsed : null;
-    }
-    catch {
-        return null;
-    }
-}
-async function writeRecord(lockPath, record) {
-    const ownerPath = path.join(lockPath, OWNER_FILE);
-    const tmpPath = path.join(lockPath, `${OWNER_FILE}.${record.processNonce}.tmp`);
-    await fs.writeFile(tmpPath, JSON.stringify(record, null, 2) + '\n', {
-        mode: 0o600,
-    });
-    await fs.rename(tmpPath, ownerPath);
-}
-function makeRecord(deps) {
-    const now = deps.now ?? (() => new Date());
-    return {
-        schemaVersion: SCHEMA_VERSION,
-        pid: deps.pid ?? process.pid,
-        processNonce: deps.processNonce ?? processNonce,
-        cwd: deps.cwd ?? process.cwd(),
-        startedAt: deps.processStartedAt ?? processStartedAt,
-        heartbeatAt: now().toISOString(),
-    };
-}
-function isRecord(value) {
-    return (value !== null &&
-        typeof value === 'object' &&
-        value.schemaVersion === SCHEMA_VERSION &&
-        typeof value.pid === 'number' &&
-        Number.isInteger(value.pid) &&
-        typeof value.processNonce === 'string' &&
-        typeof value.cwd === 'string' &&
-        typeof value.startedAt === 'string' &&
-        typeof value.heartbeatAt === 'string');
-}
-function assertUuid(label, value) {
-    if (!UUID_RE.test(value))
-        throw new Error(`Invalid ${label}: ${value}`);
-}
-//# sourceMappingURL=stream-owner.js.map
+import{randomUUID as E}from"node:crypto";import{promises as a}from"node:fs";import{homedir as g}from"node:os";import c from"node:path";const T=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i,O=c.join(g(),".config","borgmcp","stream-locks"),w="owner.json",N=1,D=7e4,p=E(),_=new Date().toISOString();function I(e,t,n=O){return y("cubeId",e),y("droneId",t),c.join(n,e,`${t}.lock`)}async function x(e,t,n=D,r={}){const o=I(e,t,r.locksDir);await a.mkdir(c.dirname(o),{recursive:!0,mode:448});const s=await h(o,r);if(s)return s;const i=await M(e,t,r);if(i.state!=="owned-by-other-process")return null;const u=(i.ageMs??0)>n,f=typeof i.pid=="number"&&r.isPidAlive!==void 0&&!r.isPidAlive(i.pid);return!u&&!f||!await R(o,i,n,r)?null:h(o,r)}async function M(e,t,n={}){const r=I(e,t,n.locksDir);let o;try{o=await a.readFile(c.join(r,w),"utf8")}catch(m){if(m?.code==="ENOENT")return{state:"unowned",lockPath:r};throw m}let s;try{s=JSON.parse(o)}catch{return{state:"owned-by-other-process",lockPath:r,ageMs:Number.POSITIVE_INFINITY}}if(!b(s))return{state:"owned-by-other-process",lockPath:r,ageMs:Number.POSITIVE_INFINITY};const i=(n.now??(()=>new Date))(),u=Date.parse(s.heartbeatAt),f=Number.isFinite(u)?i.getTime()-u:Number.POSITIVE_INFINITY,l=n.pid??process.pid,A=n.processNonce??p;return{state:s.pid===l&&s.processNonce===A?"owner":"owned-by-other-process",pid:s.pid,processNonce:s.processNonce,cwd:s.cwd,startedAt:s.startedAt,heartbeatAt:s.heartbeatAt,ageMs:f,lockPath:r}}async function h(e,t){try{await a.mkdir(e,{mode:448})}catch(r){if(r?.code==="EEXIST")return null;throw r}const n=$(t);return await S(e,n),V(e,n,t)}async function R(e,t,n,r){const o=`${e}.takeover-${r.processNonce??p}-${Date.now()}`;try{await a.rename(e,o)}catch(i){if(i?.code==="ENOENT")return!1;throw i}await r.beforeTakeoverVerify?.(o);const s=await d(o);if(!F(t,s,n,r)){try{await a.rename(o,e)}catch(i){if(i?.code!=="EEXIST")throw i;await a.rm(o,{recursive:!0,force:!0})}return!1}return await a.rm(o,{recursive:!0,force:!0}),!0}function F(e,t,n,r){if(!t)return e.ageMs===Number.POSITIVE_INFINITY;if(e.pid!==t.pid||e.processNonce!==t.processNonce||e.heartbeatAt!==t.heartbeatAt)return!1;const o=(r.now??(()=>new Date))(),s=Date.parse(t.heartbeatAt),u=(Number.isFinite(s)?o.getTime()-s:Number.POSITIVE_INFINITY)>n,f=r.isPidAlive!==void 0&&!r.isPidAlive(t.pid);return u||f}function V(e,t,n){return{lockPath:e,record:t,async refresh(){const r=await d(e);if(!r||r.pid!==t.pid||r.processNonce!==t.processNonce)return!1;const o={...t,heartbeatAt:(n.now??(()=>new Date))().toISOString()};return await S(e,o),this.record=o,!0},async release(){const r=await d(e);r?.pid===t.pid&&r.processNonce===t.processNonce&&await a.rm(e,{recursive:!0,force:!0})}}}async function d(e){try{const t=await a.readFile(c.join(e,w),"utf8"),n=JSON.parse(t);return b(n)?n:null}catch{return null}}async function S(e,t){const n=c.join(e,w),r=c.join(e,`${w}.${t.processNonce}.tmp`);await a.writeFile(r,JSON.stringify(t,null,2)+`
+`,{mode:384}),await a.rename(r,n)}function $(e){const t=e.now??(()=>new Date);return{schemaVersion:N,pid:e.pid??process.pid,processNonce:e.processNonce??p,cwd:e.cwd??process.cwd(),startedAt:e.processStartedAt??_,heartbeatAt:t().toISOString()}}function b(e){return e!==null&&typeof e=="object"&&e.schemaVersion===N&&typeof e.pid=="number"&&Number.isInteger(e.pid)&&typeof e.processNonce=="string"&&typeof e.cwd=="string"&&typeof e.startedAt=="string"&&typeof e.heartbeatAt=="string"}function y(e,t){if(!T.test(t))throw new Error(`Invalid ${e}: ${t}`)}export{D as STREAM_OWNER_STALE_MS,x as acquireStreamLease,M as readOwnershipSnapshot,I as streamLockPath};

package/dist/stream-status.js

@@ -1,211 +1,3 @@
-/**
- * Renderer + inbox-Monitor liveness probe for `borg:stream-status`.
- *
- * Split out from `index.ts` so the 5-state precedence logic and the
- * `pgrep`-based liveness check can be unit-tested without spinning up
- * the MCP server. drone-4's 18:30:51 UX contract is the spec for the
- * rendered output shape; this module is the implementation surface.
- *
- * Top-line states (drone-4 contract):
- *   1. Stream not started.
- *   2. Stream connected, awaiting first content event.
- *   3. Stream connected, last content <X> ago.
- *   4. Stream disconnected (reconnect attempt N).
- *   5. Stream connected (no inbox-Monitor — wake path broken).
- *
- * Precedence when both `disconnected` and `no inbox-Monitor` apply:
- *   prefer (4) — wire-disconnect is the upstream cause and resolves
- *   automatically when the wire comes back up; State 5 only matters
- *   when the wire is healthy but the file-watch isn't.
- */
-import { spawnSync } from 'node:child_process';
-/**
- * Best-effort check: is a process tailing this inbox file?
- *
- * Returns:
- *   - true: at least one process matches `tail.*<inboxPath>` in pgrep
- *   - false: pgrep ran cleanly and found no match
- *   - null: cannot determine (pgrep unavailable, spawn error, no inbox path)
- *
- * The null case is informative — it means we don't know, so the
- * renderer must NOT fire State 5 (which would be misleading). State 5
- * only fires when we positively know the wake path is broken.
- *
- * Why `pgrep` and not a more elegant check: Claude Code Monitors are
- * tail-based subprocesses spawned by the harness, completely opaque to
- * the MCP server. The MCP server has no IPC channel into the harness's
- * task table. The cheapest reliable signal we can get from inside the
- * MCP server is "is there a tail subprocess open against this path?"
- * — which is what `pgrep -f` answers.
- *
- * macOS + Linux ship `pgrep`. Windows doesn't (borgmcp targets Mac /
- * Linux per package.json `os` field; the null branch handles other
- * platforms gracefully).
- */
-export function checkInboxMonitorHealthy(inboxPath) {
-    if (!inboxPath)
-        return null;
-    try {
-        // `-f` matches against the full command line so we catch the
-        // `tail -n 0 -F <inboxPath>` form. `-l` lists matches; we only
-        // need the exit code (0 = match, 1 = no match) and a sanity check
-        // on stdout (some pgrep variants exit 0 with empty stdout under
-        // permission errors — treat empty stdout as "no match" for safety).
-        const res = spawnSync('pgrep', ['-f', inboxPath], {
-            encoding: 'utf-8',
-            timeout: 2_000,
-        });
-        if (res.error)
-            return null;
-        if (res.status === 0 && res.stdout.trim().length > 0)
-            return true;
-        if (res.status === 1)
-            return false;
-        // pgrep exits 2 for syntax error, 3 for fatal — treat as unknown.
-        return null;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Render the `borg:stream-status` markdown body per drone-4's 18:30:51
- * contract. Pure function — no I/O, no clock reads. Caller assembles
- * the inputs.
- */
-export function renderStreamStatus(inputs) {
-    const { status, inboxMonitorHealthy, inboxPath, droneLabel, cubeName, humanAgo } = inputs;
-    const isNotStarted = status.reconnectAttempts === 0 &&
-        status.lastWireActivityAt === null &&
-        !status.connected;
-    const ownedByOther = status.ownership?.state === 'owned-by-other-process';
-    // Top-line verdict — 5 states + override per drone-4 contract.
-    // Precedence: disconnected > no-inbox-Monitor (wire-down upstream
-    // cause; State 5 only applies when wire is healthy).
-    let summary;
-    if (ownedByOther) {
-        summary = '**Stream owned by another Borg MCP process.**';
-    }
-    else if (isNotStarted) {
-        summary = '**Stream not started.**';
-    }
-    else if (!status.connected) {
-        summary = `**Stream disconnected (reconnect attempt ${status.reconnectAttempts}).**`;
-    }
-    else if (inboxMonitorHealthy === false) {
-        summary = '**Stream connected (no inbox-Monitor — wake path broken).**';
-    }
-    else if (status.lastContentEventAt === null) {
-        // State 2: wire works, no content yet. Collapses two underlying
-        // conditions per drone-4 contract — fresh connect pre-first-content
-        // and quiet cube post-reconnect. The body's heartbeat field
-        // distinguishes them (populated vs `_(none)_`).
-        summary = '**Stream connected, awaiting first content event.**';
-    }
-    else {
-        summary = `**Stream connected, last content ${humanAgo(new Date(status.lastContentEventAt))}.**`;
-    }
-    const lines = [];
-    lines.push(summary);
-    lines.push('');
-    lines.push('# Log-stream status');
-    lines.push('');
-    if (ownedByOther) {
-        lines.push('- **state**: _(stream owner is another local process)_');
-    }
-    else if (isNotStarted) {
-        lines.push('- **state**: _(stream not started)_');
-    }
-    else {
-        lines.push(`- **connected**: ${status.connected}`);
-    }
-    // Body shape per drone-4 contract: three timestamp lines (content,
-    // heartbeat, wire) — looks redundant in the common case where they
-    // coincide, but the asymmetric "content quiet, heartbeats alive" case
-    // is exactly the diagnostic scenario this surface exists to support.
-    lines.push(`- **last content event**: ${status.lastContentEventAt
-        ? `${status.lastContentEventAt} (${humanAgo(new Date(status.lastContentEventAt))})`
-        : '_(none yet)_'}`);
-    lines.push(`- **last heartbeat at**: ${status.lastHeartbeatAt
-        ? `${status.lastHeartbeatAt} (${humanAgo(new Date(status.lastHeartbeatAt))})`
-        : '_(none)_'}`);
-    lines.push(`- **last wire activity**: ${status.lastWireActivityAt
-        ? `${status.lastWireActivityAt} (${humanAgo(new Date(status.lastWireActivityAt))})`
-        : '_(none)_'}`);
-    lines.push(`- **last persisted event id**: ${status.lastPersistedEventId ?? '_(none)_'}`);
-    lines.push(`- **reconnect attempts**: ${status.reconnectAttempts}`);
-    if (ownedByOther) {
-        const owner = status.ownership;
-        lines.push(`- **stream owner pid**: ${owner.pid ?? '_(unknown)_'}`);
-        lines.push(`- **stream owner cwd**: ${owner.cwd ?? '_(unknown)_'}`);
-        lines.push(`- **stream owner heartbeat age**: ${typeof owner.ageMs === 'number' && Number.isFinite(owner.ageMs)
-            ? `${Math.max(0, Math.round(owner.ageMs / 1000))}s`
-            : '_(unknown)_'}`);
-    }
-    // State-5 body line + self-arm instruction. Only fires when we
-    // POSITIVELY detected wake-path breakage AND the wire is up — the
-    // disconnected case takes precedence above and would never reach
-    // here. When `inboxMonitorHealthy === null` (couldn't determine) we
-    // stay silent; surfacing an uncertain failure mode is worse UX than
-    // omitting it.
-    if (status.connected && inboxMonitorHealthy === false) {
-        lines.push(`- **inbox-monitor**: _(no watcher detected — wake path broken)_`);
-        if (inboxPath && droneLabel && cubeName) {
-            lines.push('');
-            lines.push('## Real-time wake-up (do this now)');
-            lines.push('No process is tailing this drone\'s inbox file — this session won\'t wake on real-time cube activity, only on its fallback timer, and will miss live coordination from other drones. Arm an inbox Monitor:');
-            lines.push('');
-            lines.push(`> Monitor command: \`tail -n 0 -F ${inboxPath}\` — persistent, 1h timeout, description "borg inbox for ${droneLabel} on cube ${cubeName}".`);
-        }
-    }
-    return lines.join('\n');
-}
-/**
- * Gate predicate for the regen wake-path warning (gh#51 — extracted
- * from the inline ternary in `client/src/index.ts` for direct unit-test
- * coverage of the (connected × healthy) cross-product).
- *
- * Returns true ONLY when the wire is up AND we positively detected a
- * dead inbox Monitor (`=== false` strict). The `null` branch
- * (couldn't determine) stays silent — surfacing an uncertain failure
- * mode is worse UX than omitting it (mirrors the State-5 precedence
- * rule in `renderStreamStatus`). When disconnected, the wire-down case
- * is the upstream cause and takes precedence; no point warning about
- * the wake path when the wake-path's input has no events to deliver.
- */
-export function shouldShowWakePathWarning(streamStatus, inboxMonitorHealthy) {
-    return streamStatus.connected && inboxMonitorHealthy === false;
-}
-/**
- * Wake-path-broken prefix for `borg:regen` output (gh#43).
- *
- * Pure function — caller decides whether to call (gates on
- * `shouldShowWakePathWarning`). Returns an empty string when called
- * with insufficient context to render the Monitor command (e.g., no
- * inbox path on a no-active-cube path), so callers can always prepend
- * the result unconditionally.
- *
- * Mirrors the State-5 self-arm instruction shape in
- * `renderStreamStatus` so a drone sees the same Monitor command via
- * both `borg:stream-status` and `borg:regen`. The differentiator: regen
- * runs on every /loop iteration, so the prefix gives passive
- * self-healing (worst-case latency = the /loop fallback heartbeat),
- * whereas stream-status only surfaces the warning when actively
- * called.
- */
-export function formatWakePathPrefix(inputs) {
-    const { inboxPath, droneLabel, cubeName } = inputs;
-    if (!inboxPath || !droneLabel || !cubeName)
-        return '';
-    return [
-        `## ⚠ Wake path broken — arm Monitor NOW`,
-        ``,
-        `No process is tailing this drone's inbox file. SSE delivery is healthy (entries reach disk), but Claude Code has no event source to wake on. Until you arm a Monitor, this session only wakes on the /loop fallback heartbeat and will miss live coordination from other drones:`,
-        ``,
-        `> Monitor command: \`tail -n 0 -F ${inboxPath}\` — persistent, 1h timeout, description "borg inbox for ${droneLabel} on cube ${cubeName}".`,
-        ``,
-        `---`,
-        ``,
-    ].join('\n');
-}
-//# sourceMappingURL=stream-status.js.map
+import{spawnSync as p}from"node:child_process";function m(n){if(!n)return null;try{const t=p("pgrep",["-f",n],{encoding:"utf-8",timeout:2e3});return t.error?null:t.status===0&&t.stdout.trim().length>0?!0:t.status===1?!1:null}catch{return null}}function f(n){const{status:t,inboxMonitorHealthy:s,inboxPath:r,droneLabel:l,cubeName:u,humanAgo:i}=n,h=t.reconnectAttempts===0&&t.lastWireActivityAt===null&&!t.connected,c=t.ownership?.state==="owned-by-other-process";let o;c?o="**Stream owned by another Borg MCP process.**":h?o="**Stream not started.**":t.connected?s===!1?o="**Stream connected (no inbox-Monitor \u2014 wake path broken).**":t.lastContentEventAt===null?o="**Stream connected, awaiting first content event.**":o=`**Stream connected, last content ${i(new Date(t.lastContentEventAt))}.**`:o=`**Stream disconnected (reconnect attempt ${t.reconnectAttempts}).**`;const e=[];if(e.push(o),e.push(""),e.push("# Log-stream status"),e.push(""),c?e.push("- **state**: _(stream owner is another local process)_"):h?e.push("- **state**: _(stream not started)_"):e.push(`- **connected**: ${t.connected}`),e.push(`- **last content event**: ${t.lastContentEventAt?`${t.lastContentEventAt} (${i(new Date(t.lastContentEventAt))})`:"_(none yet)_"}`),e.push(`- **last heartbeat at**: ${t.lastHeartbeatAt?`${t.lastHeartbeatAt} (${i(new Date(t.lastHeartbeatAt))})`:"_(none)_"}`),e.push(`- **last wire activity**: ${t.lastWireActivityAt?`${t.lastWireActivityAt} (${i(new Date(t.lastWireActivityAt))})`:"_(none)_"}`),e.push(`- **last persisted event id**: ${t.lastPersistedEventId??"_(none)_"}`),e.push(`- **reconnect attempts**: ${t.reconnectAttempts}`),c){const a=t.ownership;e.push(`- **stream owner pid**: ${a.pid??"_(unknown)_"}`),e.push(`- **stream owner cwd**: ${a.cwd??"_(unknown)_"}`),e.push(`- **stream owner heartbeat age**: ${typeof a.ageMs=="number"&&Number.isFinite(a.ageMs)?`${Math.max(0,Math.round(a.ageMs/1e3))}s`:"_(unknown)_"}`)}return t.connected&&s===!1&&(e.push("- **inbox-monitor**: _(no watcher detected \u2014 wake path broken)_"),r&&l&&u&&(e.push(""),e.push("## Real-time wake-up (do this now)"),e.push("No process is tailing this drone's inbox file \u2014 this session won't wake on real-time cube activity, only on its fallback timer, and will miss live coordination from other drones. Arm an inbox Monitor:"),e.push(""),e.push(`> Monitor command: \`tail -n 0 -F ${r}\` \u2014 persistent, 1h timeout, description "borg inbox for ${l} on cube ${u}".`))),e.join(`
+`)}function b(n,t){return n.connected&&t===!1}function w(n){const{inboxPath:t,droneLabel:s,cubeName:r}=n;return!t||!s||!r?"":["## \u26A0 Wake path broken \u2014 arm Monitor NOW","","No process is tailing this drone's inbox file. SSE delivery is healthy (entries reach disk), but Claude Code has no event source to wake on. Until you arm a Monitor, this session only wakes on the /loop fallback heartbeat and will miss live coordination from other drones:","",`> Monitor command: \`tail -n 0 -F ${t}\` \u2014 persistent, 1h timeout, description "borg inbox for ${s} on cube ${r}".`,"","---",""].join(`
+`)}export{m as checkInboxMonitorHealthy,w as formatWakePathPrefix,f as renderStreamStatus,b as shouldShowWakePathWarning};

package/dist/subscription-retry.js

@@ -1,23 +1 @@
-/**
- * Given the initial check result, retry up to `attempts` total times with
- * `backoffMs` backoff, stopping early as soon as access is granted. A transient
- * error on a retry is swallowed (keep the prior status and keep trying). Returns
- * the latest status.
- */
-export async function retrySubscriptionCheck(initial, deps) {
-    const attempts = deps.attempts ?? 3;
-    const backoffMs = deps.backoffMs ?? 2000;
-    let status = initial;
-    for (let attempt = 2; attempt <= attempts && !status.hasAccess; attempt++) {
-        deps.onRetry?.(attempt, attempts);
-        await deps.sleep(backoffMs);
-        try {
-            status = await deps.check();
-        }
-        catch {
-            // Transient error on a retry — keep the prior status and continue retrying.
-        }
-    }
-    return status;
-}
-//# sourceMappingURL=subscription-retry.js.map
+async function r(s,t){const e=t.attempts??3,o=t.backoffMs??2e3;let c=s;for(let a=2;a<=e&&!c.hasAccess;a++){t.onRetry?.(a,e),await t.sleep(o);try{c=await t.check()}catch{}}return c}export{r as retrySubscriptionCheck};

package/dist/sync-roles-render.js

@@ -1,118 +1,3 @@
-/**
- * gh#473 PR2 — non-clobbering sync output rendering.
- *
- * The dry-run output is UX-LOAD-BEARING: it must CLEARLY communicate each
- * conflict (which role/section or taxonomy class, cube-current vs
- * template-new, and how to accept) so the operator SEES what would be
- * clobbered. Pure string logic (mirrors `roster-render.ts` /
- * `list-roles-render.ts`) so it is unit-testable without the MCP runtime.
- *
- * The shape mirrors the worker's `NonClobberSyncResult`.
- */
-/** Truncate long fragment bodies for at-a-glance diffs. */
-function trunc(s, n = 200) {
-    if (s == null)
-        return '(absent)';
-    const flat = s.replace(/\n/g, '⏎');
-    return flat.length > n ? flat.slice(0, n) + '…' : flat;
-}
-/**
- * Render a `NonClobberSyncResult` as an operator-facing markdown report.
- *
- * Conflicts are the headline: each is surfaced with both sides + its
- * stable accept key, and the report states explicitly that conflicts are
- * KEPT (the cube's version) unless accepted. ADDs are reported as safe
- * auto-applies. Custom roles are reported untouched.
- */
-export function renderSyncRolesResult(result, templateName) {
-    // Defensive guard against client/worker deploy skew (gh#9 class). A
-    // pre-#473 worker returns the legacy sync-roles shape
-    // ({ updated, added, unchanged, skipped, dryRun }) with no `roles[]`, so
-    // `result.roles.flatMap(...)` below would throw `undefined.flatMap`.
-    // Detect the legacy shape and render an actionable message instead of
-    // crashing — the skew window (0.9.47+ client + pre-#473 worker) becomes a
-    // clean "redeploy the worker" prompt, not an exception.
-    const maybeLegacy = result;
-    if (maybeLegacy.roles === undefined && 'updated' in maybeLegacy) {
-        return [
-            `## borg:sync-roles — unavailable (server out of date)`,
-            ``,
-            `The borg server returned the legacy sync-roles response shape — it is running a version older than #473, which the non-clobbering sync view does not support.`,
-            ``,
-            `**Action:** a server (worker) deploy is pending. Retry \`borg:sync-roles\` once it lands.`,
-        ].join('\n');
-    }
-    const mode = result.dryRun
-        ? '**DRY RUN** (review conflicts below; re-run with `apply: true` + a `decisions` map to commit)'
-        : '**APPLIED**';
-    const lines = [`## borg:sync-roles — ${mode}`, `Template: ${templateName}`, ''];
-    // Gather all fragments across roles + taxonomy for tallying.
-    const allFragments = [
-        ...result.roles.flatMap((r) => r.fragments),
-        ...result.taxonomy,
-    ];
-    const conflicts = allFragments.filter((f) => f.kind === 'conflict');
-    const adds = allFragments.filter((f) => f.kind === 'add');
-    const newRoles = result.roles.filter((r) => r.status === 'new');
-    const customRoles = result.roles.filter((r) => r.status === 'custom-skipped');
-    // ── Conflicts (the headline — what would be clobbered) ──
-    if (conflicts.length > 0) {
-        lines.push(`### ⚠ ${conflicts.length} CONFLICT(s) — these fragments differ between your cube and the template`);
-        if (result.dryRun) {
-            lines.push('These differ between your cube and the template — may be because you evolved them, or because the template changed them. ' +
-                'Surfaced for review, never silently overwritten. Each defaults to **KEEP (reject)** — your version survives. ' +
-                'To take the template version of a specific fragment, pass its key in `decisions` as `"<key>": "accept"`.');
-        }
-        else {
-            lines.push('Unless explicitly accepted, each conflict was KEPT (your version preserved).');
-        }
-        lines.push('');
-        for (const f of conflicts) {
-            const applied = result.applied.acceptedConflicts.includes(f.key);
-            const status = result.dryRun
-                ? '(would KEEP your version)'
-                : applied
-                    ? '✓ accepted — template version applied'
-                    : '↩ kept your version';
-            lines.push(`- **${f.label}** \`${f.key}\` ${status}`);
-            lines.push(`  - cube (current): "${trunc(f.cubeValue)}"`);
-            lines.push(`  - template (new): "${trunc(f.templateValue)}"`);
-        }
-        lines.push('');
-    }
-    // ── Unmatched decision keys (typo'd / stale — intended accept dropped) ──
-    const unmatched = result.unmatchedDecisions ?? [];
-    if (unmatched.length > 0) {
-        lines.push(`### ⚠ ${unmatched.length} decision key(s) matched no conflict and were ignored`);
-        lines.push('These keys in your `decisions` map did not correspond to any classified conflict this run ' +
-            '(typo or stale key) — their intended accept had NO effect. Check the exact keys against the conflicts above:');
-        for (const k of unmatched) {
-            lines.push(`- \`${k}\``);
-        }
-        lines.push('');
-    }
-    // ── Additions (safe auto-apply, zero clobber risk) ──
-    if (newRoles.length > 0 || adds.length > 0) {
-        lines.push(`### Additions (safe — auto-applied, zero clobber risk)`);
-        for (const r of newRoles) {
-            const note = result.dryRun ? '(new role — would be created)' : '✓ created';
-            lines.push(`- new role **${r.name}** ${note}`);
-        }
-        for (const f of adds) {
-            const note = result.dryRun ? '(would be added)' : '✓ added';
-            lines.push(`- **${f.label}** \`${f.key}\` ${note}`);
-        }
-        lines.push('');
-    }
-    // ── Custom roles (never touched) ──
-    if (customRoles.length > 0) {
-        lines.push(`### Custom roles (untouched): ${customRoles.map((r) => r.name).join(', ')}`);
-        lines.push('');
-    }
-    // ── Clean no-op ──
-    if (conflicts.length === 0 && adds.length === 0 && newRoles.length === 0) {
-        lines.push('✓ Cube roles + taxonomy are **up to date** with the template (no changes).');
-    }
-    return lines.join('\n').trimEnd();
-}
-//# sourceMappingURL=sync-roles-render.js.map
+function p(t,r=200){if(t==null)return"(absent)";const o=t.replace(/\n/g,"\u23CE");return o.length>r?o.slice(0,r)+"\u2026":o}function y(t,r){const o=t;if(o.roles===void 0&&"updated"in o)return["## borg:sync-roles \u2014 unavailable (server out of date)","","The borg server returned the legacy sync-roles response shape \u2014 it is running a version older than #473, which the non-clobbering sync view does not support.","","**Action:** a server (worker) deploy is pending. Retry `borg:sync-roles` once it lands."].join(`
+`);const n=[`## borg:sync-roles \u2014 ${t.dryRun?"**DRY RUN** (review conflicts below; re-run with `apply: true` + a `decisions` map to commit)":"**APPLIED**"}`,`Template: ${r}`,""],d=[...t.roles.flatMap(e=>e.fragments),...t.taxonomy],c=d.filter(e=>e.kind==="conflict"),a=d.filter(e=>e.kind==="add"),i=t.roles.filter(e=>e.status==="new"),u=t.roles.filter(e=>e.status==="custom-skipped");if(c.length>0){n.push(`### \u26A0 ${c.length} CONFLICT(s) \u2014 these fragments differ between your cube and the template`),t.dryRun?n.push('These differ between your cube and the template \u2014 may be because you evolved them, or because the template changed them. Surfaced for review, never silently overwritten. Each defaults to **KEEP (reject)** \u2014 your version survives. To take the template version of a specific fragment, pass its key in `decisions` as `"<key>": "accept"`.'):n.push("Unless explicitly accepted, each conflict was KEPT (your version preserved)."),n.push("");for(const e of c){const s=t.applied.acceptedConflicts.includes(e.key),h=t.dryRun?"(would KEEP your version)":s?"\u2713 accepted \u2014 template version applied":"\u21A9 kept your version";n.push(`- **${e.label}** \`${e.key}\` ${h}`),n.push(`  - cube (current): "${p(e.cubeValue)}"`),n.push(`  - template (new): "${p(e.templateValue)}"`)}n.push("")}const l=t.unmatchedDecisions??[];if(l.length>0){n.push(`### \u26A0 ${l.length} decision key(s) matched no conflict and were ignored`),n.push("These keys in your `decisions` map did not correspond to any classified conflict this run (typo or stale key) \u2014 their intended accept had NO effect. Check the exact keys against the conflicts above:");for(const e of l)n.push(`- \`${e}\``);n.push("")}if(i.length>0||a.length>0){n.push("### Additions (safe \u2014 auto-applied, zero clobber risk)");for(const e of i){const s=t.dryRun?"(new role \u2014 would be created)":"\u2713 created";n.push(`- new role **${e.name}** ${s}`)}for(const e of a){const s=t.dryRun?"(would be added)":"\u2713 added";n.push(`- **${e.label}** \`${e.key}\` ${s}`)}n.push("")}return u.length>0&&(n.push(`### Custom roles (untouched): ${u.map(e=>e.name).join(", ")}`),n.push("")),c.length===0&&a.length===0&&i.length===0&&n.push("\u2713 Cube roles + taxonomy are **up to date** with the template (no changes)."),n.join(`
+`).trimEnd()}export{y as renderSyncRolesResult};