borgmcp 1.1.15 → 2.0.1

package/dist/local-log-routing.js

@@ -0,0 +1,67 @@
+import { roleSlug } from './role-resolver.js';
+/**
+ * Resolve the public `borg_log to:` addressing forms against the local
+ * server's authoritative cube roster. This intentionally mirrors the hosted
+ * route resolver: exact drone id/label first, then displayed short UUID, then
+ * role name/slug expansion. Every failure is closed before the log POST so a
+ * miss can never degrade into a broadcast.
+ */
+export function resolveLocalLogRecipients(recipients, drones, roles) {
+    const ids = new Set();
+    for (const recipient of recipients) {
+        if (recipient === '@human-seat') {
+            const roleIds = new Set(roles.filter((role) => role.is_human_seat === true).map((role) => role.id));
+            const matches = drones.filter((drone) => drone.role_id !== null && drone.role_id !== undefined && roleIds.has(drone.role_id));
+            if (roleIds.size === 0 || matches.length === 0) {
+                throw new Error('Direct-message role recipient has no active drones: @human-seat. ' +
+                    'Use borg_roster to find active recipients, or omit to broadcast if your role can broadcast.');
+            }
+            for (const drone of matches)
+                ids.add(drone.id);
+            continue;
+        }
+        const droneMatches = drones.filter((drone) => drone.id === recipient || drone.label === recipient);
+        const uniqueDroneIds = [...new Set(droneMatches.map((drone) => drone.id))];
+        if (uniqueDroneIds.length > 1) {
+            throw new Error(`Ambiguous direct-message recipient: ${recipient} matches multiple drones`);
+        }
+        if (uniqueDroneIds.length === 1) {
+            ids.add(uniqueDroneIds[0]);
+            continue;
+        }
+        const shortUuid = recipient.replace(/`/g, '').replace(/^id:/i, '').toLowerCase();
+        if (/^[0-9a-f]{8,}$/.test(shortUuid)) {
+            const prefixMatches = drones.filter((drone) => drone.id.toLowerCase().startsWith(shortUuid));
+            const uniquePrefixIds = [...new Set(prefixMatches.map((drone) => drone.id))];
+            if (uniquePrefixIds.length > 1) {
+                const listed = prefixMatches
+                    .map((drone) => `${drone.id} (${drone.label ?? 'unlabeled'})`)
+                    .join(', ');
+                throw new Error(`Ambiguous short-uuid recipient: ${recipient} matches multiple drones — ${listed}. ` +
+                    'Address by the full drone id.');
+            }
+            if (uniquePrefixIds.length === 1) {
+                ids.add(uniquePrefixIds[0]);
+                continue;
+            }
+        }
+        const roleMatches = roles.filter((role) => roleSlug(role.name) === roleSlug(recipient));
+        const uniqueRoleIds = [...new Set(roleMatches.map((role) => role.id))];
+        if (uniqueRoleIds.length > 1) {
+            throw new Error(`Ambiguous direct-message recipient: ${recipient} matches multiple roles`);
+        }
+        if (uniqueRoleIds.length === 0) {
+            throw new Error(`Unknown direct-message recipient: ${recipient}. ` +
+                'Use an exact drone label, drone id, role name, or role slug.');
+        }
+        const roleDrones = drones.filter((drone) => drone.role_id === uniqueRoleIds[0]);
+        if (roleDrones.length === 0) {
+            throw new Error(`Direct-message role recipient has no active drones: ${recipient}. ` +
+                'Use borg_roster to find active recipients, or omit to broadcast if your role can broadcast.');
+        }
+        for (const drone of roleDrones)
+            ids.add(drone.id);
+    }
+    return [...ids];
+}
+//# sourceMappingURL=local-log-routing.js.map

package/dist/local-log-routing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-log-routing.js","sourceRoot":"","sources":["../src/local-log-routing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAc9C;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,UAA6B,EAC7B,MAAoC,EACpC,KAAkC;IAElC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAE9B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAC3E,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CACtC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CACpF,CAAC;YACF,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/C,MAAM,IAAI,KAAK,CACb,mEAAmE;oBACnE,6FAA6F,CAC9F,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,OAAO;gBAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC/C,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAChC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,CAC/D,CAAC;QACF,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,uCAAuC,SAAS,0BAA0B,CAC3E,CAAC;QACJ,CAAC;QACD,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAE,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACjF,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAC5C,KAAK,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAC7C,CAAC;YACF,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7E,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,MAAM,MAAM,GAAG,aAAa;qBACzB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,KAAK,IAAI,WAAW,GAAG,CAAC;qBAC7D,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,MAAM,IAAI,KAAK,CACb,mCAAmC,SAAS,8BAA8B,MAAM,IAAI;oBACpF,+BAA+B,CAChC,CAAC;YACJ,CAAC;YACD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAE,CAAC,CAAC;gBAC7B,SAAS;YACX,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QACxF,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACvE,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,uCAAuC,SAAS,yBAAyB,CAC1E,CAAC;QACJ,CAAC;QACD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,qCAAqC,SAAS,IAAI;gBAClD,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,uDAAuD,SAAS,IAAI;gBACpE,6FAA6F,CAC9F,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,UAAU;YAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC"}

package/dist/local-manage-tool-result.d.ts

@@ -0,0 +1,8 @@
+export declare function formatLocalManageToolResult(error: unknown): {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: true;
+} | null;
+//# sourceMappingURL=local-manage-tool-result.d.ts.map

package/dist/local-manage-tool-result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-manage-tool-result.d.ts","sourceRoot":"","sources":["../src/local-manage-tool-result.ts"],"names":[],"mappings":"AAEA,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO;;;;;;SAOzD"}

package/dist/local-manage-tool-result.js

@@ -0,0 +1,10 @@
+import { LocalManageRequiredError } from './server-errors.js';
+export function formatLocalManageToolResult(error) {
+    if (!(error instanceof LocalManageRequiredError))
+        return null;
+    return {
+        content: [{ type: 'text', text: error.message }],
+        isError: true,
+    };
+}
+//# sourceMappingURL=local-manage-tool-result.js.map

package/dist/local-manage-tool-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-manage-tool-result.js","sourceRoot":"","sources":["../src/local-manage-tool-result.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACxD,IAAI,CAAC,CAAC,KAAK,YAAY,wBAAwB,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9D,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QACzD,OAAO,EAAE,IAAa;KACvB,CAAC;AACJ,CAAC"}

package/dist/local-server-cursor.d.ts

@@ -0,0 +1,34 @@
+export interface LocalServerCursor {
+    id: string;
+    created_at: string;
+}
+export interface LocalServerCursorBinding {
+    origin: string;
+    trustIdentity: string;
+    cubeId: string;
+    droneId: string;
+    /**
+     * client#41: cursor-purpose namespace. Absent (the default) is the UNREAD
+     * WATERMARK — the point `read-log unread_only` reads from and advances only
+     * on an explicit successful drain. `'stream'` is the SSE DELIVERY/RESUME
+     * cursor the live tail advances as it delivers events. Keeping these under
+     * separate keys stops SSE delivery from consuming the unread watermark (a
+     * wake-triggering entry would otherwise disappear from `unread_only` before
+     * the agent drained it — a silent missed wake).
+     */
+    purpose?: 'stream';
+}
+export declare function getLocalServerCursor(binding: LocalServerCursorBinding): Promise<LocalServerCursor | null>;
+export declare function advanceLocalServerCursor(binding: LocalServerCursorBinding, cursor: LocalServerCursor): Promise<void>;
+/**
+ * client#42: reset (delete) a persisted cursor for `binding`. Used by the SSE
+ * recovery path when the server returns 410 CURSOR_EXPIRED for the stream's
+ * resume cursor — the pointed-at entry has been pruned server-side, so the
+ * stale cursor can never be resumed and must be cleared, letting the next
+ * stream connect re-establish from a fresh valid point (the current tail)
+ * instead of looping forever on the dead cursor. No-op when no cursor is
+ * stored for the binding.
+ */
+export declare function clearLocalServerCursor(binding: LocalServerCursorBinding): Promise<void>;
+export declare function encodeLocalServerCursor(cursor: LocalServerCursor): string;
+//# sourceMappingURL=local-server-cursor.d.ts.map

package/dist/local-server-cursor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-server-cursor.d.ts","sourceRoot":"","sources":["../src/local-server-cursor.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,QAAQ,CAAC;CACpB;AAyGD,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAInC;AAED,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,wBAAwB,EACjC,MAAM,EAAE,iBAAiB,GACxB,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAGzE"}

package/dist/local-server-cursor.js

@@ -0,0 +1,151 @@
+import { createHash } from 'node:crypto';
+import { mkdir, open, readFile, rename, stat, unlink, writeFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+const CURSOR_FILE = join(homedir(), '.config', 'borgmcp', 'local-server-cursors.json');
+const CURSOR_LOCK = `${CURSOR_FILE}.lock`;
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function cursorKey(binding) {
+    if (new URL(binding.origin).origin !== binding.origin ||
+        !UUID_RE.test(binding.cubeId) ||
+        !UUID_RE.test(binding.droneId)) {
+        throw new Error('invalid local Borg server cursor binding');
+    }
+    const hash = createHash('sha256')
+        .update(binding.origin)
+        .update('\0')
+        .update(binding.trustIdentity)
+        .update('\0')
+        .update(binding.cubeId)
+        .update('\0')
+        .update(binding.droneId);
+    // The purpose component is appended ONLY when present, so the unread-watermark
+    // key (purpose absent) stays byte-identical to the pre-client#41 key — already
+    // persisted watermarks are not orphaned by the upgrade. The 'stream' delivery
+    // cursor gets a distinct key.
+    if (binding.purpose) {
+        hash.update('\0').update(binding.purpose);
+    }
+    return hash.digest('hex');
+}
+function validCursor(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return false;
+    const cursor = value;
+    return UUID_RE.test(String(cursor.id ?? '')) &&
+        typeof cursor.created_at === 'string' &&
+        Number.isFinite(Date.parse(cursor.created_at)) &&
+        new Date(cursor.created_at).toISOString() === cursor.created_at;
+}
+async function readState() {
+    try {
+        const parsed = JSON.parse(await readFile(CURSOR_FILE, 'utf8'));
+        if (parsed.version !== 1 ||
+            typeof parsed.cursors !== 'object' ||
+            parsed.cursors === null ||
+            Array.isArray(parsed.cursors) ||
+            Object.values(parsed.cursors).some((cursor) => !validCursor(cursor))) {
+            throw new Error('invalid');
+        }
+        return parsed;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            return { version: 1, cursors: {} };
+        }
+        throw new Error('local Borg server cursor state is corrupt');
+    }
+}
+async function writeState(state) {
+    await mkdir(dirname(CURSOR_FILE), { recursive: true });
+    const temporary = `${CURSOR_FILE}.${process.pid}.${Date.now()}.tmp`;
+    await writeFile(temporary, JSON.stringify(state, null, 2) + '\n', { mode: 0o600 });
+    await rename(temporary, CURSOR_FILE);
+}
+async function withLock(operation) {
+    await mkdir(dirname(CURSOR_LOCK), { recursive: true });
+    for (let attempt = 0; attempt < 200; attempt += 1) {
+        let handle;
+        try {
+            handle = await open(CURSOR_LOCK, 'wx', 0o600);
+        }
+        catch (error) {
+            if (error.code !== 'EEXIST')
+                throw error;
+            try {
+                const metadata = await stat(CURSOR_LOCK);
+                if (Date.now() - metadata.mtimeMs > 30_000) {
+                    await unlink(CURSOR_LOCK);
+                    continue;
+                }
+            }
+            catch (inspectionError) {
+                if (inspectionError.code === 'ENOENT')
+                    continue;
+                throw inspectionError;
+            }
+            await new Promise((resolvePromise) => setTimeout(resolvePromise, 10));
+            continue;
+        }
+        try {
+            return await operation();
+        }
+        finally {
+            await handle.close();
+            try {
+                await unlink(CURSOR_LOCK);
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    throw error;
+            }
+        }
+    }
+    throw new Error('local Borg server cursor state is busy');
+}
+export async function getLocalServerCursor(binding) {
+    const key = cursorKey(binding);
+    const state = await readState();
+    return state.cursors[key] ?? null;
+}
+export async function advanceLocalServerCursor(binding, cursor) {
+    if (!validCursor(cursor))
+        throw new Error('invalid local Borg server cursor');
+    const key = cursorKey(binding);
+    await withLock(async () => {
+        const state = await readState();
+        const prior = state.cursors[key];
+        if (prior &&
+            (prior.created_at > cursor.created_at ||
+                (prior.created_at === cursor.created_at && prior.id >= cursor.id))) {
+            return;
+        }
+        state.cursors[key] = cursor;
+        await writeState(state);
+    });
+}
+/**
+ * client#42: reset (delete) a persisted cursor for `binding`. Used by the SSE
+ * recovery path when the server returns 410 CURSOR_EXPIRED for the stream's
+ * resume cursor — the pointed-at entry has been pruned server-side, so the
+ * stale cursor can never be resumed and must be cleared, letting the next
+ * stream connect re-establish from a fresh valid point (the current tail)
+ * instead of looping forever on the dead cursor. No-op when no cursor is
+ * stored for the binding.
+ */
+export async function clearLocalServerCursor(binding) {
+    const key = cursorKey(binding);
+    await withLock(async () => {
+        const state = await readState();
+        if (!(key in state.cursors))
+            return;
+        delete state.cursors[key];
+        await writeState(state);
+    });
+}
+export function encodeLocalServerCursor(cursor) {
+    if (!validCursor(cursor))
+        throw new Error('invalid local Borg server cursor');
+    return Buffer.from(JSON.stringify(cursor), 'utf8').toString('base64url');
+}
+//# sourceMappingURL=local-server-cursor.js.map

package/dist/local-server-cursor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-server-cursor.js","sourceRoot":"","sources":["../src/local-server-cursor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,2BAA2B,CAAC,CAAC;AACvF,MAAM,WAAW,GAAG,GAAG,WAAW,OAAO,CAAC;AAC1C,MAAM,OAAO,GAAG,iEAAiE,CAAC;AA6BlF,SAAS,SAAS,CAAC,OAAiC;IAClD,IACE,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QACjD,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAC7B,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAC9B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC;SAC9B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SACtB,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC;SAC7B,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SACtB,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3B,+EAA+E;IAC/E,+EAA+E;IAC/E,8EAA8E;IAC9E,8BAA8B;IAC9B,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,UAAU,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAwB,CAAC;QACtF,IACE,MAAM,CAAC,OAAO,KAAK,CAAC;YACpB,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAClC,MAAM,CAAC,OAAO,KAAK,IAAI;YACvB,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EACpE,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,MAAoB,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACrC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,KAAiB;IACzC,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,GAAG,WAAW,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;IACpE,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,MAAM,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,QAAQ,CAAI,SAA2B;IACpD,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,GAAG,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAClD,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC;gBACzC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,OAAO,GAAG,MAAM,EAAE,CAAC;oBAC3C,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;oBAC1B,SAAS;gBACX,CAAC;YACH,CAAC;YAAC,OAAO,eAAe,EAAE,CAAC;gBACzB,IAAK,eAAyC,CAAC,IAAI,KAAK,QAAQ;oBAAE,SAAS;gBAC3E,MAAM,eAAe,CAAC;YACxB,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;YACtE,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,EAAE,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;YACtE,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAiC;IAEjC,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAiC,EACjC,MAAyB;IAEzB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC9E,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,QAAQ,CAAC,KAAK,IAAI,EAAE;QACxB,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IACE,KAAK;YACL,CAAC,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU;gBACnC,CAAC,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,IAAI,KAAK,CAAC,EAAE,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,EACpE,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;QAC5B,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAiC;IAEjC,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,QAAQ,CAAC,KAAK,IAAI,EAAE;QACxB,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC;YAAE,OAAO;QACpC,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAyB;IAC/D,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC9E,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC3E,CAAC"}

package/dist/log-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-audit.d.ts","sourceRoot":"","sources":["../src/log-audit.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;GAuBG"}

package/dist/log-audit.js

@@ -1,4 +1,195 @@
 #!/usr/bin/env node
-import{existsSync as l,readFileSync as g}from"node:fs";import{getActiveCube as m}from"./cubes.js";import{handleVersionFlag as h}from"./version.js";import{gateAllowsActivation as d}from"./launch-gate.js";const u=new Set(["Edit","Write","MultiEdit","NotebookEdit","Bash","apply_patch","exec_command","functions.exec_command","functions.apply_patch"]),f="mcp__borg__borg_log",y=3,_=400;function A(t){if((t?.type??t?.role)!=="user")return!1;const o=t?.message?.content??t?.content;return typeof o=="string"?o.trim().length>0:Array.isArray(o)?o.some(e=>e?.type==="text"):!1}function b(t){const n=t?.type??t?.role;return n==="assistant"||n==="response_item"}function w(t,n){const o=t?.payload,e=o?.type==="function_call"||o?.type==="custom_tool_call"?o.name:null;if(typeof e=="string"){if(e===f){n.loggedRecently=!0;return}u.has(e)&&(n.material+=1)}const r=t?.message?.content??t?.content??[];if(Array.isArray(r))for(let s=r.length-1;s>=0;s--){const i=r[s];if(i?.type==="tool_use"){if(i.name===f){n.loggedRecently=!0;return}u.has(i.name)&&(n.material+=1)}}}async function S(){if(process.stdin.isTTY)return"";const t=[];for await(const n of process.stdin)t.push(n);return Buffer.concat(t).toString("utf-8")}async function O(){if(h(),!d("borg-log-audit UserPromptSubmit hook"))return;const t=await S();let n={};if(t.trim())try{n=JSON.parse(t)}catch{return}if(!n.transcript_path||!l(n.transcript_path))return;if(n.cwd&&l(n.cwd))try{process.chdir(n.cwd)}catch{}if(!await m())return;const e=g(n.transcript_path,"utf-8").split(`
-`).filter(Boolean);if(e.length===0)return;let r=e.length-1;const s=p(e[r]);s&&A(s)&&r--;const i={material:0,loggedRecently:!1};let c=0;for(;r>=0&&c<_;r--,c++){const a=p(e[r]);if(a&&b(a)){if(w(a,i),i.material>=y){process.stdout.write(`Heads up: ${i.material}+ state-changing tool calls since the last \`borg_log\` post. If that work was a substantive unit (a change that ships, a blocker hit, a finding worth sharing), post to the cube log per your role's conventions before continuing.
-`);return}if(i.loggedRecently)return}}}function p(t){try{return JSON.parse(t)}catch{return null}}O().catch(()=>{});
+/**
+ * borg-log-audit
+ *
+ * Domain-agnostic nudge: scans the Claude Code transcript and emits a
+ * one-line warning to stdout if the drone has accumulated MATERIAL_THRESHOLD
+ * or more state-changing tool calls (Edit / Write / Bash / etc.) since the
+ * last borg_log post. Wired in as a UserPromptSubmit hook so the warning
+ * becomes additional context for the next turn.
+ *
+ * Two refinements vs the v1 1-tool threshold (per drone-6's review):
+ *   1. Counts material tools across all assistant turns until either the
+ *      threshold is hit OR a borg_log call is found (cooldown). One
+ *      diagnostic Bash no longer triggers; substantive work always does.
+ *   2. Any borg_log in the scanback suppresses the nudge — so the drone
+ *      gets a turn of breathing room after each post.
+ *
+ * Stays generic — knows nothing about git, branches, or any project's
+ * conventions. Only the Anthropic tool name `mcp__borg__borg_log` and a
+ * small set of canonical mutating tool names. If no cube is active in
+ * this project, silently exits.
+ *
+ * Hook input arrives as JSON on stdin (Claude Code's standard hook
+ * contract). The relevant field is `transcript_path`.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { getActiveCube } from './cubes.js';
+import { handleVersionFlag } from './version.js';
+import { gateAllowsActivation } from './launch-gate.js';
+const MATERIAL_TOOLS = new Set([
+    'Edit',
+    'Write',
+    'MultiEdit',
+    'NotebookEdit',
+    'Bash',
+    'apply_patch',
+    'exec_command',
+    'functions.exec_command',
+    'functions.apply_patch',
+]);
+const LOG_TOOL = 'mcp__borg__borg_log';
+// Number of state-changing tool calls since the last borg_log that the
+// drone is allowed before the audit nudges. 1 false-positives on
+// diagnostic Bash (git status, ls, etc.); 3 has been comfortable in
+// dogfooding — any substantive work crosses it within a turn or two.
+const MATERIAL_THRESHOLD = 3;
+// Cap on how many transcript entries we scan backwards before giving up.
+// Sessions with thousands of turns still resolve in milliseconds at this
+// bound, and anything truly old is no longer "the last span the drone
+// failed to log."
+const MAX_SCAN = 400;
+function isUserPrompt(entry) {
+    const type = entry?.type ?? entry?.role;
+    if (type !== 'user')
+        return false;
+    const content = entry?.message?.content ?? entry?.content;
+    if (typeof content === 'string')
+        return content.trim().length > 0;
+    if (!Array.isArray(content))
+        return false;
+    // A "real" user prompt has at least one text block. A tool_result-only
+    // user message is a continuation of an assistant span, not a prompt.
+    return content.some((b) => b?.type === 'text');
+}
+function isAssistant(entry) {
+    const type = entry?.type ?? entry?.role;
+    return type === 'assistant' || type === 'response_item';
+}
+function scanAssistant(entry, state) {
+    const payload = entry?.payload;
+    const payloadToolName = payload?.type === 'function_call' || payload?.type === 'custom_tool_call'
+        ? payload.name
+        : null;
+    if (typeof payloadToolName === 'string') {
+        if (payloadToolName === LOG_TOOL) {
+            state.loggedRecently = true;
+            return;
+        }
+        if (MATERIAL_TOOLS.has(payloadToolName))
+            state.material += 1;
+    }
+    const content = entry?.message?.content ?? entry?.content ?? [];
+    if (!Array.isArray(content))
+        return;
+    // Walk the blocks newest-first WITHIN the entry. The caller already
+    // visits entries newest-first. Counting forward within an entry would
+    // either miss post-log material work (if log is in the same entry as
+    // later material blocks) or inflate the count with pre-log work that
+    // the log already covered. Reversing here keeps "material since the
+    // last log" honest at block granularity.
+    for (let i = content.length - 1; i >= 0; i--) {
+        const block = content[i];
+        if (block?.type !== 'tool_use')
+            continue;
+        if (block.name === LOG_TOOL) {
+            state.loggedRecently = true;
+            return;
+        }
+        if (MATERIAL_TOOLS.has(block.name))
+            state.material += 1;
+    }
+}
+async function readStdin() {
+    if (process.stdin.isTTY)
+        return '';
+    const chunks = [];
+    for await (const chunk of process.stdin)
+        chunks.push(chunk);
+    return Buffer.concat(chunks).toString('utf-8');
+}
+async function main() {
+    handleVersionFlag();
+    // gh#673 P1 (WI-4): the log-audit nudge only activates in
+    // borg-launched sessions — vanilla `claude` gets no borg hook output.
+    // Exit-0 no-op (a UserPromptSubmit hook must never block the prompt).
+    // ACTIVATION-only, never a security gate.
+    if (!gateAllowsActivation('borg-log-audit UserPromptSubmit hook')) {
+        return;
+    }
+    const raw = await readStdin();
+    let input = {};
+    if (raw.trim()) {
+        try {
+            input = JSON.parse(raw);
+        }
+        catch {
+            // No usable input — silent exit.
+            return;
+        }
+    }
+    if (!input.transcript_path || !existsSync(input.transcript_path))
+        return;
+    if (input.cwd && existsSync(input.cwd)) {
+        try {
+            process.chdir(input.cwd);
+        }
+        catch {
+            // Best-effort only; fall back to the hook process cwd.
+        }
+    }
+    // Only nudge if there's an active cube in this project. Otherwise the
+    // hook is fully inert.
+    const active = await getActiveCube();
+    if (!active)
+        return;
+    const lines = readFileSync(input.transcript_path, 'utf-8').split('\n').filter(Boolean);
+    if (lines.length === 0)
+        return;
+    // Walk the transcript backwards from the end. The trailing entry MAY
+    // be the user prompt that triggered this hook; skip it if so. From
+    // there, accumulate material tool calls until either we hit a borg_log
+    // (cooldown — suppress) or we cross MATERIAL_THRESHOLD (nudge). The
+    // scan stops after MAX_SCAN entries to bound work on huge sessions.
+    let i = lines.length - 1;
+    const tail = safeParse(lines[i]);
+    if (tail && isUserPrompt(tail))
+        i--;
+    const state = { material: 0, loggedRecently: false };
+    let scanned = 0;
+    for (; i >= 0 && scanned < MAX_SCAN; i--, scanned++) {
+        const entry = safeParse(lines[i]);
+        if (!entry)
+            continue;
+        if (isAssistant(entry)) {
+            scanAssistant(entry, state);
+            // Threshold has primacy over cooldown: when both could fire on the
+            // same entry (e.g. an entry containing [log, Bash, Bash, Bash]
+            // where the reversed scan first counts 3 material blocks before
+            // hitting the log), we want the nudge — the post-log material
+            // work hasn't been logged yet.
+            if (state.material >= MATERIAL_THRESHOLD) {
+                process.stdout.write(`Heads up: ${state.material}+ state-changing tool calls since the last \`borg_log\` post. ` +
+                    'If that work was a substantive unit (a change that ships, a blocker hit, a finding ' +
+                    "worth sharing), post to the cube log per your role's conventions before continuing.\n");
+                return;
+            }
+            if (state.loggedRecently)
+                return; // cooldown
+        }
+    }
+    // Reached MAX_SCAN or start of transcript without finding either a
+    // log call or enough material work. Silent.
+}
+function safeParse(line) {
+    try {
+        return JSON.parse(line);
+    }
+    catch {
+        return null;
+    }
+}
+main().catch(() => {
+    // Never fail a hook — silent on error.
+});
+//# sourceMappingURL=log-audit.js.map

package/dist/log-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-audit.js","sourceRoot":"","sources":["../src/log-audit.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,MAAM;IACN,OAAO;IACP,WAAW;IACX,cAAc;IACd,MAAM;IACN,aAAa;IACb,cAAc;IACd,wBAAwB;IACxB,uBAAuB;CACxB,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AAEvC,uEAAuE;AACvE,iEAAiE;AACjE,oEAAoE;AACpE,qEAAqE;AACrE,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAE7B,yEAAyE;AACzE,yEAAyE;AACzE,sEAAsE;AACtE,kBAAkB;AAClB,MAAM,QAAQ,GAAG,GAAG,CAAC;AAOrB,SAAS,YAAY,CAAC,KAAU;IAC9B,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,IAAI,CAAC;IACxC,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAClC,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,EAAE,OAAO,IAAI,KAAK,EAAE,OAAO,CAAC;IAC1D,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,uEAAuE;IACvE,qEAAqE;IACrE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,WAAW,CAAC,KAAU;IAC7B,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,IAAI,CAAC;IACxC,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,eAAe,CAAC;AAC1D,CAAC;AAOD,SAAS,aAAa,CAAC,KAAU,EAAE,KAAoD;IACrF,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,CAAC;IAC/B,MAAM,eAAe,GACnB,OAAO,EAAE,IAAI,KAAK,eAAe,IAAI,OAAO,EAAE,IAAI,KAAK,kBAAkB;QACvE,CAAC,CAAC,OAAO,CAAC,IAAI;QACd,CAAC,CAAC,IAAI,CAAC;IACX,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;QACxC,IAAI,eAAe,KAAK,QAAQ,EAAE,CAAC;YACjC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,IAAI,cAAc,CAAC,GAAG,CAAC,eAAe,CAAC;YAAE,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,EAAE,OAAO,IAAI,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;IAChE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO;IACpC,oEAAoE;IACpE,sEAAsE;IACtE,qEAAqE;IACrE,qEAAqE;IACrE,oEAAoE;IACpE,yCAAyC;IACzC,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,KAAK,EAAE,IAAI,KAAK,UAAU;YAAE,SAAS;QACzC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IACtE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,iBAAiB,EAAE,CAAC;IACpB,0DAA0D;IAC1D,sEAAsE;IACtE,sEAAsE;IACtE,0CAA0C;IAC1C,IAAI,CAAC,oBAAoB,CAAC,sCAAsC,CAAC,EAAE,CAAC;QAClE,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;IAC9B,IAAI,KAAK,GAAc,EAAE,CAAC;IAC1B,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QACf,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,iCAAiC;YACjC,OAAO;QACT,CAAC;IACH,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,eAAe,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,eAAe,CAAC;QAAE,OAAO;IACzE,IAAI,KAAK,CAAC,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,uBAAuB;IACvB,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;IACrC,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAE/B,qEAAqE;IACrE,mEAAmE;IACnE,uEAAuE;IACvE,oEAAoE;IACpE,oEAAoE;IACpE,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC;QAAE,CAAC,EAAE,CAAC;IAEpC,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IACrD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;YACvB,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5B,mEAAmE;YACnE,+DAA+D;YAC/D,gEAAgE;YAChE,8DAA8D;YAC9D,+BAA+B;YAC/B,IAAI,KAAK,CAAC,QAAQ,IAAI,kBAAkB,EAAE,CAAC;gBACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,aAAa,KAAK,CAAC,QAAQ,gEAAgE;oBAC3F,qFAAqF;oBACrF,uFAAuF,CACxF,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,KAAK,CAAC,cAAc;gBAAE,OAAO,CAAC,WAAW;QAC/C,CAAC;IACH,CAAC;IACD,mEAAmE;IACnE,4CAA4C;AAC9C,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;IAChB,uCAAuC;AACzC,CAAC,CAAC,CAAC"}

package/dist/log-stream.d.ts

@@ -1,7 +1,7 @@
 /**
  * Real-time drone wakeup via Server-Sent Events.
  *
- * Replaces the long-poll + inbox-file-shim path in `client/src/inbox.ts`
+ * Replaces the former long-poll + inbox-file-shim wire path
  * for the wire layer; the local inbox file is preserved as the
  * Claude-side wake primitive (Monitor on tail -F) because Claude Code
  * does not currently wake idle agent loops on MCP-protocol
@@ -9,7 +9,7 @@
  *   docs/superpowers/specs/2026-05-11-server-push-log-subscription.md
  *
  * Lifetimes:
- *   - One persistent fetch-streaming connection to /api/drone/stream
+ *   - One persistent fetch-streaming connection to the cube-scoped stream
  *     per active cube.
  *   - On every received `event: log`, a single line is appended to the
  *     per-drone inbox file (same format the old poller wrote).
@@ -23,8 +23,29 @@
  * MCP tool can probe without perturbing the stream (no second
  * connection, no second auth — just an in-process state snapshot).
  */
+import { type BroadcastHwm } from 'borgmcp-shared/log-stream-hwm';
 import { getActiveCube } from './cubes.js';
+import { loadBorgServerTrust } from './server-trust.js';
+import { getLocalServerCursor, type LocalServerCursor } from './local-server-cursor.js';
 import { acquireStreamLease, type StreamOwnershipSnapshot } from './stream-owner.js';
+export declare const LOCAL_SERVER_SSE_FRAME_LIMIT_BYTES: number;
+/**
+ * client#42: the server's structured code for an expired stream resume cursor
+ * (server 410 CURSOR_EXPIRED — the pointed-at entry was pruned). Recoverable,
+ * NOT terminal: distinct from DRONE_EVICTED.
+ */
+export declare const CURSOR_EXPIRED_CODE = "CURSOR_EXPIRED";
+/**
+ * client#42: recoverable stream error thrown when the server rejects the resume
+ * cursor as expired. The resume cursor is reset BEFORE this is thrown, so the
+ * reconnect loop's next connect re-establishes from a fresh valid point instead
+ * of looping forever on the dead cursor. Deliberately NOT a DroneEvictedError —
+ * the reconnect loop treats only DroneEvictedError as terminal, so this falls
+ * through to the ordinary backoff-reconnect (which now recovers).
+ */
+export declare class StreamCursorExpiredError extends Error {
+    constructor(message?: string);
+}
 export declare function setModuleInjectOpenCode(fn: (text: string) => Promise<boolean>): void;
 export declare const INBOX_TAIL_LINES_CAP = 512;
 export declare const INBOX_TAIL_TRIM_THRESHOLD_LINES: number;
@@ -39,10 +60,6 @@ export interface StreamStatus {
     runLoopRestartCount: number;
     ownership?: StreamOwnershipSnapshot;
 }
-export interface BroadcastHwm {
-    id: string;
-    created_at: string;
-}
 /**
  * Snapshot of the current stream status. Safe to call at any time
  * (returns a copy, does not interact with the running connection).
@@ -94,12 +111,14 @@ export declare function startLogStream(opts?: {
 export interface StreamDeps {
     /** Override the global fetch (tests inject a controlled Response). */
     fetchImpl?: typeof fetch;
+    /** Override persisted trust loading to verify pre-network confinement. */
+    loadTrust?: typeof loadBorgServerTrust;
+    /** Override stream cursor loading to verify pre-storage confinement. */
+    getCursor?: typeof getLocalServerCursor;
     /** Override the inbox-line append (tests assert against the calls). */
     appendLine?: (cubeId: string, droneId: string, line: string) => Promise<void>;
     /** Override durable inbox-entry dedup (tests avoid real filesystem). */
     hasInboxEntryId?: (cubeId: string, droneId: string, entryId: string, renderedLine: string) => Promise<boolean>;
-    /** Override the auth-token fetch (tests skip the OS keychain). */
-    getToken?: () => Promise<string>;
     /** Optional Codex app-server wake sink; tests inject a spy. */
     wakeCodex?: (reason: string) => void;
     /** Override the heartbeat watchdog timeout. */
@@ -112,14 +131,6 @@ export interface StreamDeps {
     ownerDeps?: import('./stream-owner.js').StreamOwnerDeps;
     /** Override owner stale threshold in focused duplicate-process tests. */
     ownerStaleMs?: number;
-    /**
-     * gh#541 WU-2: invoked after a delivered inbound entry is freshly written to
-     * the inbox file (the wake-path RECEIPT — the event that should wake the
-     * agent). Default records the receipt watermark + emits a best-effort health
-     * beat (child-process HTTP via the real global fetch — its own wire, NOT the
-     * SSE stream's fetchImpl — below the agent classifier). Tests inject a spy.
-     */
-    onInboxReceipt?: (active: ActiveCube, token: string) => void;
     /**
      * Optional opencode entry injector for autonomous drone processing.
      * When provided AND the injection succeeds, the inbox file write is skipped
@@ -140,6 +151,7 @@ export interface StreamDeps {
 export interface RunLoopTestDeps {
     getActiveCube?: typeof getActiveCube;
     acquireStreamLease?: typeof acquireStreamLease;
+    streamOnce?: typeof streamOnce;
     sleep?: (ms: number) => Promise<void>;
     maxIterations?: number;
 }
@@ -159,6 +171,7 @@ export interface ActiveCube {
     droneId: string;
     sessionToken: string;
     apiUrl: string;
+    serverTrustIdentity?: string;
 }
 export declare function streamOnce(active: ActiveCube, lastEventId: string | null, onEventId: (id: string) => void, deps?: StreamDeps): Promise<void>;
 export declare function streamOnceIfOwner(active: ActiveCube, lastEventId: string | null, onEventId: (id: string) => void, deps?: StreamDeps): Promise<'streamed' | 'skipped'>;
@@ -166,6 +179,7 @@ export type ParsedEvent = {
     type: 'log';
     id: string;
     data: any;
+    cursor?: LocalServerCursor;
 } | {
     type: 'heartbeat';
     ts: string | null;
@@ -187,7 +201,7 @@ export type ParsedEvent = {
  *
  * Exported so tests can pump a synthetic ReadableStream through it.
  */
-export declare function parseSSE(body: ReadableStream<Uint8Array>): AsyncGenerator<ParsedEvent>;
+export declare function parseSSE(body: ReadableStream<Uint8Array>, maxFrameBytes?: number): AsyncGenerator<ParsedEvent>;
 export interface EnrichedEntry {
     id?: string;
     entry_id?: string;
@@ -196,7 +210,6 @@ export interface EnrichedEntry {
     role_name?: string | null;
     message?: string;
 }
-export declare function compareBroadcastHwm(a: BroadcastHwm, b: BroadcastHwm): number;
 /**
  * Format one inbox-file line. Preserves the long-poll inbox.ts prefix
  * shape (`<iso-ts> <drone-label> (<role-name>): ...`) so existing