borgmcp 1.1.15 → 2.0.2

package/dist/assimilate-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assimilate-guard.js","sourceRoot":"","sources":["../src/assimilate-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AASH,6EAA6E;AAC7E,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAAuC,EACvC,iBAAyB;IAEzB,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IAC5C,IAAI,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,iBAAiB,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAA2D,EAC3D,iBAAyB;IAEzB,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACpC,OAAO,CACL,wFAAwF;YACxF,8EAA8E;YAC9E,IAAI,iBAAiB,qEAAqE;YAC1F,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IACD,OAAO,CACL,wCAAwC,QAAQ,CAAC,cAAc,gBAAgB;QAC/E,2DAA2D,iBAAiB,cAAc;QAC1F,eAAe,iBAAiB,qDAAqD;QACrF,6CAA6C,CAC9C,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAGtC;IACC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,OAAO,CACL,wFAAwF;QACxF,sCAAsC,MAAM,IAAI;QAChD,+EAA+E;QAC/E,qDAAqD,CACtD,CAAC;AACJ,CAAC"}

package/dist/assimilate-welcome.d.ts

@@ -1,2 +1,2 @@
-export declare function renderAssimilationWelcome(roleName: string, cubeName: string, useColor: boolean): string;
+export declare function renderAssimilationWelcome(droneLabel: string, roleName: string, cubeName: string, useColor: boolean, localApiUrl?: string): string;
 //# sourceMappingURL=assimilate-welcome.d.ts.map

package/dist/assimilate-welcome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assimilate-welcome.d.ts","sourceRoot":"","sources":["../src/assimilate-welcome.ts"],"names":[],"mappings":"AAgBA,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,OAAO,EACjB,WAAW,CAAC,EAAE,MAAM,GACnB,MAAM,CAgBR"}

package/dist/assimilate-welcome.js

@@ -1,2 +1,32 @@
-const t="\x1B[32m",r="\x1B[0m";function c(e,o,n){return[`${n?`${t}\u2713${r}`:"\u2713"} Joined as \`${e}\` in cube \`${o}\`.`,"","Next: ask your agent to run the `borg_regen` tool to see your cube.","Add a teammate: run `borg assimilate <role>` in another terminal.","You're set up \u2014 your team can now see you in the cube.",""].join(`
-`)}export{c as renderAssimilationWelcome};
+// Pedagogical hint rendered to stdout immediately after assimilation
+// completes, before Claude Code launches. The cube-agnostic shape points
+// the user at borg_whoami / borg_roster rather than embedding role-specific
+// text — so
+// cubes using non-default templates (writers-room, ops, etc.) render identically
+// to software-dev cubes. The concrete drone, role seat, and cube names come from
+// the completed server attach response.
+//
+// Color: ANSI green on the ✓ glyph only; gated on the caller's useColor
+// boolean (computed from process.stdout.isTTY && !NO_COLOR && !CI in the
+// assimilate-cmd call site). Body text carries no ANSI by design — color
+// is hierarchy-cueing, not decoration.
+const GREEN = '\x1b[32m';
+const RESET = '\x1b[0m';
+export function renderAssimilationWelcome(droneLabel, roleName, cubeName, useColor, localApiUrl) {
+    const check = useColor ? `${GREEN}✓${RESET}` : '✓';
+    const teammateLines = localApiUrl === undefined
+        ? [`Add a teammate: run \`borg assimilate <role>\` in another terminal.`]
+        : [
+            `Add a teammate from the intended worktree:`,
+            `run \`borg assimilate --host ${localApiUrl} <role>\` in another terminal.`,
+        ];
+    return [
+        `${check} Attached \`${droneLabel}\` to \`${roleName}\` in cube \`${cubeName}\`.`,
+        ``,
+        `In the launched agent, run \`borg_whoami\` and \`borg_roster\` to verify the seat`,
+        `and begin coordinating.`,
+        ...teammateLines,
+        ``,
+    ].join('\n');
+}
+//# sourceMappingURL=assimilate-welcome.js.map

package/dist/assimilate-welcome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assimilate-welcome.js","sourceRoot":"","sources":["../src/assimilate-welcome.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,yEAAyE;AACzE,4EAA4E;AAC5E,YAAY;AACZ,iFAAiF;AACjF,iFAAiF;AACjF,wCAAwC;AACxC,EAAE;AACF,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,uCAAuC;AAEvC,MAAM,KAAK,GAAG,UAAU,CAAC;AACzB,MAAM,KAAK,GAAG,SAAS,CAAC;AAExB,MAAM,UAAU,yBAAyB,CACvC,UAAkB,EAClB,QAAgB,EAChB,QAAgB,EAChB,QAAiB,EACjB,WAAoB;IAEpB,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IACnD,MAAM,aAAa,GAAG,WAAW,KAAK,SAAS;QAC7C,CAAC,CAAC,CAAC,qEAAqE,CAAC;QACzE,CAAC,CAAC;YACE,4CAA4C;YAC5C,gCAAgC,WAAW,gCAAgC;SAC5E,CAAC;IACN,OAAO;QACL,GAAG,KAAK,eAAe,UAAU,WAAW,QAAQ,gBAAgB,QAAQ,KAAK;QACjF,EAAE;QACF,mFAAmF;QACnF,yBAAyB;QACzB,GAAG,aAAa;QAChB,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/auth-env.d.ts

@@ -1,60 +1,17 @@
 /**
- * gh#557 — environment / capability detection for remote-terminal auth.
+ * Local environment / capability primitives.
  *
- * The default OAuth path (auth.ts) opens a browser and listens on a
- * localhost-loopback callback server. Both assumptions break on a remote
- * terminal: there's no browser to open, and the loopback URL Google would
- * redirect to is unreachable from the user's actual browser on another
- * machine. These pure helpers decide when to fall back to the RFC 8628
- * device-grant flow (no browser) and when the OS keychain is unavailable
- * (so a keychain-less token store must be used instead).
- *
- * Kept free of side effects (env + platform are injected) so the decision
- * logic is unit-testable without a real display / SSH session / keychain.
+ * Pure helpers kept free of side effects (env is injected) so the decision logic
+ * is unit-testable. (The OS-keychain availability probe was removed with the
+ * Queen rescope — credentials now rest in the 0600 file store, so there is no
+ * keychain to probe.)
  */
-export interface BrowserEnvProbe {
-    /** A snapshot of the relevant environment variables (defaults to process.env). */
-    env: NodeJS.ProcessEnv;
-    /** The platform string (defaults to process.platform). */
-    platform: NodeJS.Platform;
-}
 /**
  * A BORG_* toggle is "on" only when present and not one of the falsy
  * spellings. Mirrors how the rest of the client reads boolean env vars:
  * an unset var and the explicit "0"/"false"/"" spellings are all off.
- * Exported for the gh#673 launch-gate (BORG_SESSION) so every BORG_*
- * boolean reads through one convention.
+ * Used by the gh#673 launch-gate (BORG_SESSION) so every BORG_* boolean
+ * reads through one convention.
  */
 export declare function envToggleOn(value: string | undefined): boolean;
-/**
- * Decide whether the current environment lacks a usable local browser, so
- * the loopback OAuth flow can't work and the device-grant flow should be
- * used instead.
- *
- * Decision order (first match wins):
- *  1. BORG_FORCE_BROWSER on  → false  (escape hatch: operator has an
- *     SSH-forwarded / X-forwarded browser and wants the loopback flow)
- *  2. BORG_NO_BROWSER on     → true   (explicit opt-in to device flow)
- *  3. SSH session            → true   (remote terminal — even on a Mac the
- *     browser that opens is on the *server*, unreachable to the user)
- *  4. container marker        → true  (headless by construction)
- *  5. Linux without any display (no DISPLAY, no WAYLAND_DISPLAY) → true
- *  6. otherwise              → false  (desktop macOS/Windows, or Linux with
- *     a display — the loopback flow works)
- *
- * The `--no-browser` / `--device` CLI flag is surfaced by the caller as
- * BORG_NO_BROWSER (or by passing an env with it set) so there's a single
- * decision funnel.
- */
-export declare function isNoBrowserEnv(probe?: Partial<BrowserEnvProbe>): boolean;
-/**
- * Returns true when the OS keychain can be written to and read from. The
- * round-trip is injectable so callers/tests can supply a deterministic
- * probe; in production the default probe touches the real keychain.
- *
- * Any thrown error from the probe (no Secret Service, locked keychain,
- * permission denial) is treated as "unavailable" — the caller then selects
- * the encrypted-file fallback store.
- */
-export declare function isKeyringAvailable(roundTrip?: () => Promise<void>): Promise<boolean>;
 //# sourceMappingURL=auth-env.d.ts.map

package/dist/auth-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-env.d.ts","sourceRoot":"","sources":["../src/auth-env.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAI9D"}

package/dist/auth-env.js

@@ -1 +1,22 @@
-import{AsyncEntry as o}from"@napi-rs/keyring";function n(t){if(t===void 0)return!1;const r=t.trim().toLowerCase();return r!==""&&r!=="0"&&r!=="false"&&r!=="no"}function i(t){const r=t?.env??process.env,e=t?.platform??process.platform;return n(r.BORG_FORCE_BROWSER)?!1:!!(n(r.BORG_NO_BROWSER)||r.SSH_TTY||r.SSH_CONNECTION||r.SSH_CLIENT||r.container||e==="linux"&&!r.DISPLAY&&!r.WAYLAND_DISPLAY)}async function s(){const t="borg-mcp",r="__borg_keyring_probe__",e=new o(t,r);await e.setPassword("probe"),await e.getPassword();try{await e.deletePassword()}catch{}}async function u(t=s){try{return await t(),!0}catch{return!1}}export{n as envToggleOn,u as isKeyringAvailable,i as isNoBrowserEnv};
+/**
+ * Local environment / capability primitives.
+ *
+ * Pure helpers kept free of side effects (env is injected) so the decision logic
+ * is unit-testable. (The OS-keychain availability probe was removed with the
+ * Queen rescope — credentials now rest in the 0600 file store, so there is no
+ * keychain to probe.)
+ */
+/**
+ * A BORG_* toggle is "on" only when present and not one of the falsy
+ * spellings. Mirrors how the rest of the client reads boolean env vars:
+ * an unset var and the explicit "0"/"false"/"" spellings are all off.
+ * Used by the gh#673 launch-gate (BORG_SESSION) so every BORG_* boolean
+ * reads through one convention.
+ */
+export function envToggleOn(value) {
+    if (value === undefined)
+        return false;
+    const v = value.trim().toLowerCase();
+    return v !== '' && v !== '0' && v !== 'false' && v !== 'no';
+}
+//# sourceMappingURL=auth-env.js.map

package/dist/auth-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-env.js","sourceRoot":"","sources":["../src/auth-env.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,KAAyB;IACnD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,IAAI,CAAC;AAC9D,CAAC"}

package/dist/backends/launch-all-pastelist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-all-pastelist.d.ts","sourceRoot":"","sources":["../../src/backends/launch-all-pastelist.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAG3D,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,cAAc,EAAE,EAC5B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,aAAa,GAClB,IAAI,CAMN"}

package/dist/backends/launch-all-pastelist.js

@@ -1,4 +1,11 @@
-import{buildLaunchCommand as a}from"../launch-all-command.js";function i(o,r,n){n.stdout(`# borg launch-all: open each worktree in a terminal window and run:
-
-`);for(const t of o)n.stdout(a(t.worktreeDir,r)+`
-`)}export{i as runPastelistBackend};
+// gh#556 Part 2 — pastelist backend (never-fail floor, spec §4.3).
+// Prints copy-pasteable `cd <dir> && borg assimilate --here` lines.
+import { buildLaunchCommand } from '../launch-all-command.js';
+export function runPastelistBackend(candidates, borgPath, deps) {
+    deps.stdout('# borg launch-all: open each worktree in a terminal window and run:\n\n');
+    for (const c of candidates) {
+        // No keep-open-on-fail: the operator owns their own shell in pastelist mode.
+        deps.stdout(buildLaunchCommand(c.worktreeDir, borgPath) + '\n');
+    }
+}
+//# sourceMappingURL=launch-all-pastelist.js.map

package/dist/backends/launch-all-pastelist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-all-pastelist.js","sourceRoot":"","sources":["../../src/backends/launch-all-pastelist.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,oEAAoE;AAIpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,MAAM,UAAU,mBAAmB,CACjC,UAA4B,EAC5B,QAAgB,EAChB,IAAmB;IAEnB,IAAI,CAAC,MAAM,CAAC,yEAAyE,CAAC,CAAC;IACvF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,6EAA6E;QAC7E,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;IAClE,CAAC;AACH,CAAC"}

package/dist/backends/launch-all-tmux.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-all-tmux.d.ts","sourceRoot":"","sources":["../../src/backends/launch-all-tmux.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAI3D,MAAM,WAAW,QAAQ;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,wFAAwF;IACxF,UAAU,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IACzC,6EAA6E;IAC7E,aAAa,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,aAAa,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACtC;AAED,wBAAsB,cAAc,CAClC,UAAU,EAAE,cAAc,EAAE,EAC5B,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,IAAI,CAAC,CAgDf"}

package/dist/backends/launch-all-tmux.js

@@ -1 +1,49 @@
-import{buildLaunchCommand as d}from"../launch-all-command.js";import{writeLockMarker as x}from"../launch-all-locks.js";async function y(o,s,t){const{sessionName:e,borgPath:u,attachMode:c,launchedAtISO:w,launchDelayMs:a,sleep:m}=s,l=t.runSyncExitCode("tmux",["has-session","-t",e])===0;for(let r=0;r<o.length;r++){const n=o[r];r>0&&a>0&&await m(a);let i;r===0&&!l?i=t.runSync("tmux",["new-session","-d","-P","-F","#{window_id}","-s",e,"-c",n.worktreeDir]).trim():i=t.runSync("tmux",["new-window","-P","-F","#{window_id}","-t",e,"-c",n.worktreeDir]).trim(),t.runSync("tmux",["rename-window","-t",i,n.droneLabel]);const h=d(n.worktreeDir,u,{keepOpenOnFail:!0});t.runSync("tmux",["send-keys","-t",i,h,"Enter"]),x(t,n.cubeId,n.droneLabel,n.worktreeDir,w)}c==="switch"?t.attachInteractive("tmux",["switch-client","-t",e]):c==="attach"&&t.attachInteractive("tmux",["attach-session","-t",e])}export{y as runTmuxBackend};
+// gh#556 Part 2 — tmux backend (primary, spec §4.1).
+// One detached `borg-<cube>` session, one window per drone, each running
+// `borg assimilate --here`. Idempotent: reuses an existing session (adds windows).
+import { buildLaunchCommand } from '../launch-all-command.js';
+import { writeLockMarker } from '../launch-all-locks.js';
+export async function runTmuxBackend(candidates, opts, deps) {
+    const { sessionName, borgPath, attachMode, launchedAtISO, launchDelayMs, sleep } = opts;
+    const sessionExists = deps.runSyncExitCode('tmux', ['has-session', '-t', sessionName]) === 0;
+    for (let i = 0; i < candidates.length; i++) {
+        const c = candidates[i];
+        // Rate-limit stagger: wait BEFORE each launch after the first, so a fleet's
+        // agents don't all bootstrap (assimilate + regen + roster) simultaneously and
+        // trip the per-user/IP limiter. Window creation is ~instant otherwise, so
+        // without this N agents start within ~100ms. 0 → no delay (first never waits).
+        if (i > 0 && launchDelayMs > 0) {
+            await sleep(launchDelayMs);
+        }
+        // CR f98b2d70: target windows by their CAPTURED id (`-P -F '#{window_id}'` prints
+        // e.g. `@3`), NOT a computed 0-based index. Index-targeting hard-failed under the
+        // common `set -g base-index 1` config (new-session creates window 1, not 0) and was
+        // fragile to index gaps on the reuse path. Capturing the real id is base-index-proof
+        // and gap-proof. new-session AND new-window both print the new window's id with -P -F.
+        let windowId;
+        if (i === 0 && !sessionExists) {
+            windowId = deps
+                .runSync('tmux', ['new-session', '-d', '-P', '-F', '#{window_id}', '-s', sessionName, '-c', c.worktreeDir])
+                .trim();
+        }
+        else {
+            windowId = deps
+                .runSync('tmux', ['new-window', '-P', '-F', '#{window_id}', '-t', sessionName, '-c', c.worktreeDir])
+                .trim();
+        }
+        // tmux-level window name (status bar). The agent's own OSC-0 may update it later.
+        deps.runSync('tmux', ['rename-window', '-t', windowId, c.droneLabel]);
+        const cmd = buildLaunchCommand(c.worktreeDir, borgPath, { keepOpenOnFail: true });
+        deps.runSync('tmux', ['send-keys', '-t', windowId, cmd, 'Enter']);
+        // Lock marker written immediately after dispatch (best-effort liveness signal).
+        writeLockMarker(deps, c.cubeId, c.droneLabel, c.worktreeDir, launchedAtISO);
+    }
+    if (attachMode === 'switch') {
+        deps.attachInteractive('tmux', ['switch-client', '-t', sessionName]);
+    }
+    else if (attachMode === 'attach') {
+        deps.attachInteractive('tmux', ['attach-session', '-t', sessionName]);
+    }
+    // 'none' → caller prints the cheat-sheet instead.
+}
+//# sourceMappingURL=launch-all-tmux.js.map

package/dist/backends/launch-all-tmux.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-all-tmux.js","sourceRoot":"","sources":["../../src/backends/launch-all-tmux.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,yEAAyE;AACzE,mFAAmF;AAInF,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAezD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAA4B,EAC5B,IAAc,EACd,IAAmB;IAEnB,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAExF,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC;IAE7F,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAExB,4EAA4E;QAC5E,8EAA8E;QAC9E,0EAA0E;QAC1E,+EAA+E;QAC/E,IAAI,CAAC,GAAG,CAAC,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;QAC7B,CAAC;QAED,kFAAkF;QAClF,kFAAkF;QAClF,oFAAoF;QACpF,qFAAqF;QACrF,uFAAuF;QACvF,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9B,QAAQ,GAAG,IAAI;iBACZ,OAAO,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;iBAC1G,IAAI,EAAE,CAAC;QACZ,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,IAAI;iBACZ,OAAO,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;iBACnG,IAAI,EAAE,CAAC;QACZ,CAAC;QAED,kFAAkF;QAClF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QAEtE,MAAM,GAAG,GAAG,kBAAkB,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QAElE,gFAAgF;QAChF,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IACvE,CAAC;SAAM,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,gBAAgB,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,kDAAkD;AACpD,CAAC"}

package/dist/backends/launch-all-windows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-all-windows.d.ts","sourceRoot":"","sources":["../../src/backends/launch-all-windows.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAI3D,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,aAAa,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACtC;AAuED,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,cAAc,EAAE,EAC5B,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,IAAI,CAAC,CAgBf"}

package/dist/backends/launch-all-windows.js

@@ -1,12 +1,86 @@
-import{buildLaunchCommand as m}from"../launch-all-command.js";import{writeLockMarker as u}from"../launch-all-locks.js";function s(t){return t.replace(/\\/g,"\\\\").replace(/"/g,'\\"')}class f extends Error{}async function w(t,e,r){const i=r.pathExists("/Applications/iTerm.app"),o=r.pathExists("/Applications/Terminal.app");if(!i&&!o)throw new f(`borg launch-all: --mode windows requires a compatible terminal app.
-Not found: iTerm.app, Terminal.app
-Install iTerm2 (https://iterm2.com) or use --mode tmux (brew install tmux).
-`);for(let a=0;a<t.length;a++){const n=t[a];a>0&&e.launchDelayMs>0&&await e.sleep(e.launchDelayMs);const l=m(n.worktreeDir,e.borgPath),c=i?`tell application "iTerm"
-  tell current window to create tab with default profile command "${s(l)}"
-end tell`:`tell application "Terminal"
-  do script "${s(l)}"
-  activate
-end tell`;r.runSync("osascript",["-e",c]),u(r,n.cubeId,n.droneLabel,n.worktreeDir,e.launchedAtISO)}}async function h(t,e,r){const i=r.getEnv("BORG_TERMINAL")||r.getEnv("TERMINAL"),o=["gnome-terminal","konsole","kitty","wezterm","xterm"];let a=i;if(!a){for(const n of o)if(r.runSyncExitCode("which",[n])===0){a=n;break}}if(!a)throw new f(`borg launch-all: --mode windows requires a terminal emulator.
-Not found. Set $BORG_TERMINAL=<path> or use --mode tmux.
-`);for(let n=0;n<t.length;n++){const l=t[n];n>0&&e.launchDelayMs>0&&await e.sleep(e.launchDelayMs);const c=m(l.worktreeDir,e.borgPath,{keepOpenOnFail:!0});r.runSync(a,["-e","sh","-c",c]),u(r,l.cubeId,l.droneLabel,l.worktreeDir,e.launchedAtISO)}}const p=/[\x00-\x1f\x7f]/;async function k(t,e,r){const i=t.filter(o=>p.test(o.worktreeDir)?(r.stderr(`skipping ${o.droneLabel} (${JSON.stringify(o.worktreeDir)}): worktree path contains a control character \u2014 unsafe for --mode windows; use --mode tmux instead.
-`),!1):!0);e.platform==="darwin"?await w(i,e,r):await h(i,e,r)}export{k as runWindowsBackend};
+// gh#556 Part 2 — windows backend (explicit `--mode windows` only, spec §4.2).
+// Opens each worktree as a new terminal window/tab. macOS: iTerm/Terminal via
+// osascript. Linux: $BORG_TERMINAL / $TERMINAL / probed emulator. No shared
+// session, so no post-launch attach. Hard-fails if no compatible terminal found.
+import { buildLaunchCommand } from '../launch-all-command.js';
+import { writeLockMarker } from '../launch-all-locks.js';
+/** AppleScript string-literal escaping (backslash + double-quote). */
+function appleScriptEscape(s) {
+    return s.replace(/\\/g, '\\\\').replace(/"/g, '\\"');
+}
+class NoTerminalError extends Error {
+}
+/** macOS: open each candidate in iTerm or Terminal via osascript. */
+async function launchMacOS(candidates, opts, deps) {
+    const hasITerm = deps.pathExists('/Applications/iTerm.app');
+    const hasTerminal = deps.pathExists('/Applications/Terminal.app');
+    if (!hasITerm && !hasTerminal) {
+        throw new NoTerminalError('borg launch-all: --mode windows requires a compatible terminal app.\n' +
+            'Not found: iTerm.app, Terminal.app\n' +
+            'Install iTerm2 (https://iterm2.com) or use --mode tmux (brew install tmux).\n');
+    }
+    for (let i = 0; i < candidates.length; i++) {
+        const c = candidates[i];
+        if (i > 0 && opts.launchDelayMs > 0)
+            await opts.sleep(opts.launchDelayMs); // rate-limit stagger
+        const cmd = buildLaunchCommand(c.worktreeDir, opts.borgPath);
+        const script = hasITerm
+            ? `tell application "iTerm"\n  tell current window to create tab with default profile command "${appleScriptEscape(cmd)}"\nend tell`
+            : `tell application "Terminal"\n  do script "${appleScriptEscape(cmd)}"\n  activate\nend tell`;
+        deps.runSync('osascript', ['-e', script]);
+        writeLockMarker(deps, c.cubeId, c.droneLabel, c.worktreeDir, opts.launchedAtISO);
+    }
+}
+/** Linux: open each candidate in the first available terminal emulator. */
+async function launchLinux(candidates, opts, deps) {
+    const explicit = deps.getEnv('BORG_TERMINAL') || deps.getEnv('TERMINAL');
+    const probe = ['gnome-terminal', 'konsole', 'kitty', 'wezterm', 'xterm'];
+    let term = explicit;
+    if (!term) {
+        for (const name of probe) {
+            if (deps.runSyncExitCode('which', [name]) === 0) {
+                term = name;
+                break;
+            }
+        }
+    }
+    if (!term) {
+        throw new NoTerminalError('borg launch-all: --mode windows requires a terminal emulator.\n' +
+            'Not found. Set $BORG_TERMINAL=<path> or use --mode tmux.\n');
+    }
+    for (let i = 0; i < candidates.length; i++) {
+        const c = candidates[i];
+        if (i > 0 && opts.launchDelayMs > 0)
+            await opts.sleep(opts.launchDelayMs); // rate-limit stagger
+        const cmd = buildLaunchCommand(c.worktreeDir, opts.borgPath, { keepOpenOnFail: true });
+        // `<term> -e sh -c '<cmd>'` opens a new window running the command.
+        deps.runSync(term, ['-e', 'sh', '-c', cmd]);
+        writeLockMarker(deps, c.cubeId, c.droneLabel, c.worktreeDir, opts.launchedAtISO);
+    }
+}
+/**
+ * Control char (incl. newline) in a worktree path. SR f94bb3fe + Coordinator
+ * c6370c41 fold-in: a newline in the path breaks the macOS osascript AppleScript
+ * string literal (parse error). Reject such paths up front (the user's own path;
+ * pathological) — fail-loud + skip, never silently mangle. Applies to both
+ * platforms defensively (the tmux primary handles control chars fine via
+ * shellEscape + array-args, so this guard is windows-backend-specific).
+ */
+const CONTROL_CHAR_RE = /[\x00-\x1f\x7f]/;
+export async function runWindowsBackend(candidates, opts, deps) {
+    const safe = candidates.filter((c) => {
+        if (CONTROL_CHAR_RE.test(c.worktreeDir)) {
+            deps.stderr(`skipping ${c.droneLabel} (${JSON.stringify(c.worktreeDir)}): worktree path contains a control ` +
+                `character — unsafe for --mode windows; use --mode tmux instead.\n`);
+            return false;
+        }
+        return true;
+    });
+    if (opts.platform === 'darwin') {
+        await launchMacOS(safe, opts, deps);
+    }
+    else {
+        await launchLinux(safe, opts, deps);
+    }
+}
+//# sourceMappingURL=launch-all-windows.js.map

package/dist/backends/launch-all-windows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-all-windows.js","sourceRoot":"","sources":["../../src/backends/launch-all-windows.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,8EAA8E;AAC9E,4EAA4E;AAC5E,iFAAiF;AAIjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAYzD,sEAAsE;AACtE,SAAS,iBAAiB,CAAC,CAAS;IAClC,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,eAAgB,SAAQ,KAAK;CAAG;AAEtC,qEAAqE;AACrE,KAAK,UAAU,WAAW,CAAC,UAA4B,EAAE,IAAiB,EAAE,IAAmB;IAC7F,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAAC;IAClE,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QAC9B,MAAM,IAAI,eAAe,CACvB,uEAAuE;YACrE,sCAAsC;YACtC,+EAA+E,CAClF,CAAC;IACJ,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,qBAAqB;QAChG,MAAM,GAAG,GAAG,kBAAkB,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,QAAQ;YACrB,CAAC,CAAC,+FAA+F,iBAAiB,CAAC,GAAG,CAAC,aAAa;YACpI,CAAC,CAAC,6CAA6C,iBAAiB,CAAC,GAAG,CAAC,yBAAyB,CAAC;QACjG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1C,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,KAAK,UAAU,WAAW,CAAC,UAA4B,EAAE,IAAiB,EAAE,IAAmB;IAC7F,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,CAAC,gBAAgB,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACzE,IAAI,IAAI,GAAuB,QAAQ,CAAC;IACxC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChD,IAAI,GAAG,IAAI,CAAC;gBACZ,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,eAAe,CACvB,iEAAiE;YAC/D,4DAA4D,CAC/D,CAAC;IACJ,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,qBAAqB;QAChG,MAAM,GAAG,GAAG,kBAAkB,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,oEAAoE;QACpE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5C,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAA4B,EAC5B,IAAiB,EACjB,IAAmB;IAEnB,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACnC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,MAAM,CACT,YAAY,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,sCAAsC;gBAC9F,mEAAmE,CACtE,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,MAAM,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;AACH,CAAC"}

package/dist/bare-launch-menu.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bare-launch-menu.d.ts","sourceRoot":"","sources":["../src/bare-launch-menu.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,GAAG,EAAE,OAAO,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,CAAC;AAE3B,MAAM,WAAW,gBAAgB;IAC/B,wEAAwE;IACxE,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,wDAAwD;IACxD,UAAU,EAAE,OAAO,CAAC;IACpB,uEAAuE;IACvE,kBAAkB,EAAE,OAAO,EAAE,CAAC;IAC9B,8EAA8E;IAC9E,mBAAmB,EAAE,OAAO,CAAC;CAC9B;AAID;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;CACtB,GAAG,OAAO,CAEV;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,WAAW,EAAE,OAAO,GAAG,SAAS,CAAC;IACjC,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,mBAAmB,EAAE,OAAO,CAAC;CAC9B,GAAG,MAAM,GAAG,IAAI,CAIhB;AAED,wBAAgB,yCAAyC,CAAC,IAAI,EAAE;IAC9D,WAAW,EAAE,OAAO,GAAG,SAAS,CAAC;IACjC,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;CACxB,GAAG,OAAO,CAEV;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,GAAG,gBAAgB,EAAE,CAuBnF;AAED,8EAA8E;AAC9E,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,gBAAgB,EAAE,EAC3B,QAAQ,EAAE,MAAM,GACf;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAKxD;AAED,mFAAmF;AACnF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAGpE;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,EAC5C,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CAAO,GACpE,OAAO,CAAC,gBAAgB,CAAC,CAa3B"}

package/dist/bare-launch-menu.js

@@ -1,6 +1,83 @@
-const c={claude:"Claude",codex:"Codex",opencode:"OpenCode"};function f(n){return n.extraArgs.length===0&&n.stdinIsTTY&&n.stdoutIsTTY}function p(n){return!n.explicitCli||!n.stdinIsTTY||!n.stdoutIsTTY||!n.hasActiveCube||!n.hasLaunchAllTargets?null:`borg --cli ${n.explicitCli} launches ${c[n.explicitCli]} directly; use bare borg for the launch menu or borg launch-all --cli ${n.explicitCli} for all drone worktrees.
-`}function x(n){return!!(n.explicitCli&&n.stdinIsTTY&&n.stdoutIsTTY&&n.hasActiveCube)}function h(n){const e=[{key:"1",label:`Launch (default \xB7 ${c[n.defaultCli]})`,action:{kind:"launch",cli:n.defaultCli}}];for(const t of n.otherInstalledClis)e.push({key:String(e.length+1),label:`Launch with ${c[t]} (one-shot)`,action:{kind:"launch",cli:t}});return n.hasLaunchAllTargets&&e.push({key:String(e.length+1),label:"Launch all (this cube's drone worktrees)",action:{kind:"launch-all"}}),e}function s(n,e){const t=e.trim();if(t==="")return{ok:!0,action:n[0].action};const i=n.find(o=>o.key===t);return i?{ok:!0,action:i.action}:{ok:!1}}function d(n){return`borg \u2014 how do you want to launch?
-${n.map(t=>`  ${t.key}) ${t.label}`).join(`
-`)}
-[1]: `}async function T(n,e,t={}){const i=h(n);if(i.length===1)return i[0].action;const o=t.maxAttempts??3,u=d(i);for(let l=0;l<o;l++){const r=await e(l===0?u:`Invalid choice.
-${u}`),a=s(i,r);if(a.ok)return a.action;t.warn?.(`invalid launch-menu selection: ${JSON.stringify(r.trim())}`)}return i[0].action}export{h as buildLaunchMenuOptions,p as explicitCliLaunchHint,d as renderLaunchMenu,s as resolveLaunchMenuChoice,T as runBareLaunchMenu,x as shouldResolveExplicitCliLaunchHintTargets,f as shouldShowLaunchMenu};
+const PRETTY = { claude: 'Claude', codex: 'Codex', opencode: 'OpenCode' };
+/**
+ * Gate: the menu fires ONLY for bare `borg` (no args) in a TTY. Any explicit
+ * subcommand/flag, or a non-TTY (piped/scripted/CI) invocation, falls straight
+ * through to the existing default launch — no menu, no behavior change.
+ */
+export function shouldShowLaunchMenu(args) {
+    return args.extraArgs.length === 0 && args.stdinIsTTY && args.stdoutIsTTY;
+}
+export function explicitCliLaunchHint(args) {
+    if (!args.explicitCli || !args.stdinIsTTY || !args.stdoutIsTTY)
+        return null;
+    if (!args.hasActiveCube || !args.hasLaunchAllTargets)
+        return null;
+    return `borg --cli ${args.explicitCli} launches ${PRETTY[args.explicitCli]} directly; use bare borg for the launch menu or borg launch-all --cli ${args.explicitCli} for all drone worktrees.\n`;
+}
+export function shouldResolveExplicitCliLaunchHintTargets(args) {
+    return Boolean(args.explicitCli && args.stdinIsTTY && args.stdoutIsTTY && args.hasActiveCube);
+}
+/**
+ * The context-filtered option set. Option 1 is always present; options 2/3 are
+ * included only when applicable. Keys are sequential with no gaps, so a hidden
+ * middle option never produces a "1) … 3) …" gap menu.
+ */
+export function buildLaunchMenuOptions(inputs) {
+    const options = [
+        {
+            key: '1',
+            label: `Launch (default · ${PRETTY[inputs.defaultCli]})`,
+            action: { kind: 'launch', cli: inputs.defaultCli },
+        },
+    ];
+    for (const cli of inputs.otherInstalledClis) {
+        options.push({
+            key: String(options.length + 1),
+            label: `Launch with ${PRETTY[cli]} (one-shot)`,
+            action: { kind: 'launch', cli },
+        });
+    }
+    if (inputs.hasLaunchAllTargets) {
+        options.push({
+            key: String(options.length + 1),
+            label: "Launch all (this cube's drone worktrees)",
+            action: { kind: 'launch-all' },
+        });
+    }
+    return options;
+}
+/** Map a raw prompt answer to an action. Empty/Enter → option 1 (default). */
+export function resolveLaunchMenuChoice(options, rawInput) {
+    const trimmed = rawInput.trim();
+    if (trimmed === '')
+        return { ok: true, action: options[0].action };
+    const match = options.find((o) => o.key === trimmed);
+    return match ? { ok: true, action: match.action } : { ok: false };
+}
+/** The rendered menu text (prompt suffix `[1]:` defaults to option 1 on Enter). */
+export function renderLaunchMenu(options) {
+    const lines = options.map((o) => `  ${o.key}) ${o.label}`);
+    return `borg — how do you want to launch?\n${lines.join('\n')}\n[1]: `;
+}
+/**
+ * Orchestrate the menu with an injected readline-style prompt. Collapses to a
+ * direct default launch (no render, no prompt) when only option 1 applies.
+ * Re-prompts on invalid input up to `maxAttempts`, then falls back to the safe
+ * default (option 1) so a fat-fingered session still launches.
+ */
+export async function runBareLaunchMenu(inputs, prompt, opts = {}) {
+    const options = buildLaunchMenuOptions(inputs);
+    if (options.length === 1)
+        return options[0].action; // collapse — never a 1-item menu
+    const maxAttempts = opts.maxAttempts ?? 3;
+    const menu = renderLaunchMenu(options);
+    for (let attempt = 0; attempt < maxAttempts; attempt++) {
+        const raw = await prompt(attempt === 0 ? menu : `Invalid choice.\n${menu}`);
+        const res = resolveLaunchMenuChoice(options, raw);
+        if (res.ok)
+            return res.action;
+        opts.warn?.(`invalid launch-menu selection: ${JSON.stringify(raw.trim())}`);
+    }
+    return options[0].action; // exhausted → safe default
+}
+//# sourceMappingURL=bare-launch-menu.js.map

package/dist/bare-launch-menu.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bare-launch-menu.js","sourceRoot":"","sources":["../src/bare-launch-menu.ts"],"names":[],"mappings":"AAyCA,MAAM,MAAM,GAA4B,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAEnG;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAIpC;IACC,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,WAAW,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAMrC;IACC,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC5E,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,mBAAmB;QAAE,OAAO,IAAI,CAAC;IAClE,OAAO,cAAc,IAAI,CAAC,WAAW,aAAa,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,yEAAyE,IAAI,CAAC,WAAW,6BAA6B,CAAC;AACnM,CAAC;AAED,MAAM,UAAU,yCAAyC,CAAC,IAKzD;IACC,OAAO,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC;AAChG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAwB;IAC7D,MAAM,OAAO,GAAuB;QAClC;YACE,GAAG,EAAE,GAAG;YACR,KAAK,EAAE,qBAAqB,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG;YACxD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE;SACnD;KACF,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC;YACX,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YAC/B,KAAK,EAAE,eAAe,MAAM,CAAC,GAAG,CAAC,aAAa;YAC9C,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE;SAChC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC;YACX,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YAC/B,KAAK,EAAE,0CAA0C;YACjD,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,uBAAuB,CACrC,OAA2B,EAC3B,QAAgB;IAEhB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AACpE,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,gBAAgB,CAAC,OAA2B;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3D,OAAO,sCAAsC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;AACzE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAwB,EACxB,MAA4C,EAC5C,OAAmE,EAAE;IAErE,MAAM,OAAO,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,iCAAiC;IAErF,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACvC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,uBAAuB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClD,IAAI,GAAG,CAAC,EAAE;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,IAAI,EAAE,CAAC,kCAAkC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,2BAA2B;AACvD,CAAC"}

package/dist/claude-launch-args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-launch-args.d.ts","sourceRoot":"","sources":["../src/claude-launch-args.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,4EAA4E;AAC5E,eAAO,MAAM,sBAAsB,iBAAiB,CAAC;AAErD;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,eAAe,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAE1F"}

package/dist/claude-launch-args.js

@@ -1 +1,34 @@
-const r="mcp__borg__*";function e(o,_){return[...o,_,"--allowedTools",r]}export{r as BORG_MCP_ALLOWED_TOOLS,e as buildClaudeLaunchArgs};
+/**
+ * gh#702 — borg-launched Claude Code drones auto-allow the borg MCP
+ * coordination tools so a drone never prompts on borg_regen / borg_log /
+ * borg_ack / etc. mid-loop.
+ *
+ * SCOPED, by deliberate design (Option A, per-launch — avoids the gh#844
+ * settings-mutation/consent class):
+ *   - ONLY `mcp__borg__*` is auto-allowed. Bash, file edits (Read/Write/Edit),
+ *     web (WebFetch/WebSearch), and everything else STILL prompt. This is an
+ *     allowlist ADD, NOT `--dangerously-skip-permissions` and NOT a blanket
+ *     allow.
+ *   - Applied ONLY by the borg launcher (a per-invocation CLI flag) — there is
+ *     NO persistent user-settings write, so no consent gate is involved.
+ *   - claude only. Codex parity is a separate follow-up (different permission
+ *     model) — intentionally not handled here.
+ */
+/** The allowlist pattern matching every tool from the `borg` MCP server. */
+export const BORG_MCP_ALLOWED_TOOLS = 'mcp__borg__*';
+/**
+ * Build the argv for a borg-launched `claude` process: the user's passthrough
+ * args.
+ *
+ * ORDER IS LOAD-BEARING (CR blocker 0e5c697e): `--allowedTools` is a VARIADIC
+ * option (`<tools...>`, a space-separated list), so it greedily consumes every
+ * following non-flag argv element. If the kickoff prompt came AFTER it, claude
+ * would absorb the prompt as a 2nd "allowed tool" and launch with NO kickoff.
+ * So the kickoff positional goes FIRST and the variadic flag goes LAST, where
+ * it can only consume its own single value:
+ *   [...passthrough, kickoff, '--allowedTools', 'mcp__borg__*']
+ */
+export function buildClaudeLaunchArgs(passthroughArgs, kickoff) {
+    return [...passthroughArgs, kickoff, '--allowedTools', BORG_MCP_ALLOWED_TOOLS];
+}
+//# sourceMappingURL=claude-launch-args.js.map

package/dist/claude-launch-args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-launch-args.js","sourceRoot":"","sources":["../src/claude-launch-args.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,sBAAsB,GAAG,cAAc,CAAC;AAErD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,eAAyB,EAAE,OAAe;IAC9E,OAAO,CAAC,GAAG,eAAe,EAAE,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,CAAC,CAAC;AACjF,CAAC"}

package/dist/claude.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude.d.ts","sourceRoot":"","sources":["../src/claude.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;GAeG"}