borgmcp 2.7.3 → 2.8.0

package/README.md

@@ -2,66 +2,37 @@
 
 Multi-agent coordination for AI coding agents.
 
-Borg MCP lets Claude Code, Codex, and OpenCode sessions join the same project coordination space, take on named roles, and coordinate through one shared activity log. Borg MCP is an MCP server, so install Claude Code, Codex, or OpenCode first. That shared space is a **cube**. Each running agent session is a **drone**. You are the **Queen**: the human who owns the cube and decides what should happen. Drones operate under **roles** such as Builder, Code Reviewer, Coordinator, Product Design, or Security Auditor.
+Borg MCP lets Claude Code, Codex, and OpenCode sessions coordinate in the same
+project. A shared coordination space is a **cube**, and each connected agent
+session is a **drone**. Roles are yours to define, with names such as builder,
+reviewer, coordinator, or designer.
 
 ## What you get
 
-- Shared cube context: cube directive, role playbooks, roster, and recent log entries.
-- Role-based coordination: assign drones to roles and keep their instructions in one place.
-- Live activity log: post status, dispatches, review gates, and findings without copy-paste handoffs.
-- Wake-path support: inbox monitoring and stream diagnostics help keep agent sessions responsive.
-- Claude Code, Codex, and OpenCode launcher support: start one or more agent sessions from the same repo.
-- Self-hosted authority: attach to a trusted `borgmcp-server` endpoint you run
-  on localhost or your LAN. No account or subscription — local-only.
+- Shared project context, role instructions, a roster, and an activity log.
+- Direct and broadcast messages between agent sessions.
+- Live wake-up support so agents can react to new activity.
+- Launchers for Claude Code, Codex, and OpenCode, including sibling worktrees.
+- A self-hosted server for localhost or LAN use, with no account or subscription.
 
 ## Install
 
-Install the current exact local-only client release from npm:
+Install the client from npm:
 
 ```bash
-npm install -g borgmcp@2.7.3
+npm install -g borgmcp
 ```
 
-Verify the install:
+You also need at least one supported agent CLI: Claude Code, Codex, or OpenCode.
+
+Verify the installation:
 
 ```bash
 borg --version
 borg --help
 ```
 
-## Update
-
-Use the whole-product update command for an existing npm-global installation:
-
-```bash
-borg update
-```
-
-Before changing either package, Borg reads the exact published `borgmcp` and
-`borgmcp-server` manifests and requires the same exact `borgmcp-shared` pin. It
-then verifies that the running client and any installed server controller belong
-to one stable npm executable, global prefix, and global root. Registry lookup and
-installation are bound to `https://registry.npmjs.org/`. An alternate configured
-registry, changed npm context, or unsupported or ambiguous package-manager
-provenance fails without changing either package; use that package manager's
-manual update flow instead.
-
-After confirmation, Borg installs the client first and continues under the
-verified new client. If a local server was already installed, it installs the
-matching server controller, delegates runtime verification and activation to
-the server updater, and verifies the final installed, prepared, running, and
-protocol identities. A server that was stopped remains stopped and is reported
-as `prepared; still stopped`. If no local server was installed, that phase is
-explicitly skipped. Use `borg update --yes` for a non-interactive invocation.
-
-Partial completion is reported with `borg update --yes` as the idempotent retry.
-During interactive setup or a first `borg assimilate` with no selected server,
-Borg offers to install the exact compatible `borgmcp-server` release. It never
-installs an absent server from a non-interactive invocation. Borg does not start
-a stopped server or restart agent processes. Restart active agent sessions
-yourself after the client changes.
-
-## First-time setup
+## Quick Start
 
 Run the setup wizard:
 
@@ -69,251 +40,146 @@ Run the setup wizard:
 borg setup
 ```
 
-The wizard offers to install the exact compatible `borgmcp-server` release when
-none is present, then configures Borg MCP with the supported agent CLIs installed
-on your machine. The client and server remain separate local-only packages. No
-account, sign-in, or subscription is required.
+If the local server is not installed, the wizard offers to install a compatible
+version. It also configures the supported agent CLIs found on your machine.
 
-`borg ...` commands are terminal commands. `borg_...` commands are MCP tools
-you ask your agent to run inside Claude Code, Codex, or OpenCode.
-
-If multiple CLIs are installed, use `--cli` when launching or assimilating if you want to choose explicitly:
+Prepare and start the server in one terminal:
 
 ```bash
-borg assimilate --cli claude
-borg assimilate --cli codex
-borg assimilate --cli opencode
+borg server setup
+borg server start
 ```
 
-## Join a cube
+`borg server start` stays in the foreground. Leave that terminal open while you
+use Borg; press Ctrl-C when you want to stop the server.
 
-From inside your project repo:
+In a second terminal, open your project's Git repository and join its cube:
 
 ```bash
+cd ~/code/my-app
 borg assimilate
 ```
 
-You will be prompted for the self-hosted server to connect to. Borg first resolves an existing repository association. Without one, an exact-name accessible cube requires explicit interactive confirmation before Borg associates it with this repository; otherwise Borg shows the repository context, lets you edit the proposed cube name, offers the templates shipped by its pinned shared release with the recommended template first, and asks for creation confirmation. It then registers the current session as a drone and launches the selected agent CLI with cube context.
-Cube names allow letters, digits, spaces, dots, underscores, and hyphens, start with a letter or digit, and are at most 120 UTF-8 bytes. Use `--cube-name <name>` to supply one directly. Pass `--yes` to accept the repository name and recommended template non-interactively only when creating a new cube; it never adopts an existing cube by name.
+Borg creates or reuses a repository-specific cube, registers the new drone, and
+launches your agent CLI with the cube's context.
 
-To initialize the repository cube without creating a drone or launching an agent:
+To run another agent at the same time, open a third terminal and change to the
+same Git repository:
 
 ```bash
-borg server cube init
+cd ~/code/my-app
+borg assimilate builder
 ```
 
-Both commands use the same idempotent repository association. Once associated, reruns show authoritative cube details without prompting; creation flags are ignored with an explicit notice.
-
-`borg assimilate --yes` and other non-interactive runs require an explicit
-`--host <server>`. Without a selected local server, assimilation fails closed
-with an actionable `No local server selected` error. The host names a
-self-hosted `borgmcp-server` on localhost or your LAN.
-
-To connect directly to a local server non-interactively:
+Two sessions of the same agent CLI work. To choose a CLI explicitly, use one of:
 
 ```bash
-borg assimilate --host 127.0.0.1:7091
+borg assimilate --cli claude
+borg assimilate --cli codex
+borg assimilate --cli opencode
 ```
 
-Self-hosted onboarding is an operator-terminal journey. Install the server, set
-it up once, and keep it running:
+`borg ...` commands run in your terminal. `borg_...` commands are MCP tools that
+you or the agent use inside an agent session.
 
-```bash
-npm install -g borgmcp-server
-borg server setup
-borg server start
-```
+## Cubes And Roles
 
-`borg server start` and `borg-mcp-server start` are foreground commands. They
-must never imply that a daemon, LaunchAgent, or systemd service was installed.
-Managed persistence is a separate explicit handoff. See the lifecycle commands
-and recovery flow in [`docs/LOCAL_SERVER.md`](docs/LOCAL_SERVER.md).
+On first use in a repository, Borg shows the proposed cube name and template
+before creating anything. If it finds one accessible cube with the same name,
+it asks before linking that cube to the repository. It never links an existing
+cube by name during a non-interactive run.
 
-`borg update` is the normal client-and-server update journey. `borg server
-update` remains the server-runtime-only escape hatch and may report a separate
-controller install action rather than changing the global controller itself.
-
-Open a second operator terminal in the project checkout and run:
+To create a repository cube without launching an agent:
 
 ```bash
-borg assimilate
+borg server cube init
 ```
 
-Setup provisions the first same-machine owner credential in the owner-only
-`~/.borg/credentials` file. Bare assimilation uses that credential without an
-invitation prompt, creates or joins the repository cube with the recommended template, attaches a drone to a
-role seat, and launches the selected agent. For another client or device, run
-`borg server invite`, then use `borg assimilate --host <server> --enroll` on the
-intended recipient and enter the invitation at its hidden prompt.
-In the launched agent, run `borg_whoami` and `borg_roster` to verify the seat and
-begin coordinating.
-
-An ordinary enrolled client cannot create a cube. The server operator must grant
-it access before it reruns `borg assimilate --host 127.0.0.1:7091`. Enrollment
-credentials and retry state remain in the local seat store on this machine (a
-0600-permission file store). See the
-complete setup, recovery, second-seat, and security flow in
-[`docs/LOCAL_SERVER.md`](docs/LOCAL_SERVER.md).
-The exact saved-seat states, re-attach behavior, recovery copy, and multi-seat
-selection rules are in
-[`docs/SEAT_LIFECYCLE.md`](docs/SEAT_LIFECYCLE.md).
-
-To start another drone in a sibling worktree:
-
-```bash
-borg assimilate builder --worktree drone-2
-```
+To supply creation defaults non-interactively, pass `--host`, `--cube-name`, and
+`--yes`. The `--yes` flag accepts defaults for a new cube; it does not approve
+linking an existing cube.
 
-To join under a specific role:
+To launch a drone in a named sibling worktree:
 
 ```bash
-borg assimilate code-reviewer --cli codex
+borg assimilate builder --worktree drone-2
 ```
 
-### Agent CLI approval policy
-
-Borg removes repeated approval prompts for its coordination tool set. This set
-includes `borg_tool`, the deferred-tool dispatcher: approving it also approves
-any Borg operation invoked through that dispatcher. Direct shell, file, and web
-actions remain outside Borg's allowlist.
-
-- Claude Code launches receive `--allowedTools mcp__borg__*`.
-- Codex launches query Codex's native effective-config resolver at the launch
-  directory, including system/managed, user, selected profile, project, and
-  command-line layers. If coordination tools are restrictive, an interactive
-  launch asks before applying exact, launch-only `approval_mode="auto"`
-  overrides. The consent prompt explicitly discloses the dispatcher's
-  transitive scope. Declining or launching non-interactively changes nothing
-  and prints the exact TOML needed for a global repair.
-- OpenCode launches do not use its broad `--auto` switch. Borg queries
-  `opencode debug config` for its resolved JSONC/managed/global/custom/project/
-  inline configuration and, with interactive consent, supplies
-  exact launch-only `allow` rules through `OPENCODE_PERMISSION`. Other OpenCode
-  permission rules remain in force.
-
-`borg setup` performs the same inspection and prints exact global repair
-snippets. Borg never silently rewrites approval policy.
-
-## Core MCP tools
-
-After assimilation, the agent session has `borg_` tools available:
-
-- `borg_regen` - Refresh cube context, role instructions, roster, and recent log.
-- `borg_log` - Append to the shared activity log. Can broadcast or direct messages to drones/roles.
-- `borg_read-log` - Read recent log entries, optionally since an entry id or timestamp.
-- `borg_ack` - Acknowledge a routed log entry without adding noise to the activity log.
-- `borg_roster` - List drones and liveness markers in the cube.
-- `borg_stream-status` - Diagnose the SSE/inbox wake path.
-- `borg_cube`, `borg_role`, `borg_whoami` - Inspect current cube, role, and identity.
-- `borg_create-cube`, `borg_update-cube`, `borg_delete-cube` - Manage cubes.
-- `borg_create-role`, `borg_update-role`, `borg_reassign-drone` - Manage roles and drone assignments.
-- `borg_apply-template`, `borg_sync-roles`, `borg_patch-taxonomy-class` - Bootstrap and maintain role/message-taxonomy templates.
-
-## Typical two-agent flow
+See [`docs/LOCAL_SERVER.md`](docs/LOCAL_SERVER.md) for remote enrollment,
+invitations, server recovery, and security details. See
+[`docs/SEAT_LIFECYCLE.md`](docs/SEAT_LIFECYCLE.md) for saved-seat and re-attach
+behavior.
 
-1. Run setup from the installed package.
+## Agent Permissions
 
-   ```bash
-   borg setup
-   ```
+Borg can remove repeated approval prompts for its own coordination tools. It
+does not approve shell commands, file operations, or web access.
 
-2. Open a repo and assimilate the first drone.
+Claude Code receives Borg's MCP tool allowlist at launch. For Codex and OpenCode,
+Borg checks the effective configuration and asks before applying launch-only
+permission changes. Declining leaves the agent's configuration unchanged.
+`borg setup` can show the corresponding persistent configuration snippets.
 
-   ```bash
-   cd ~/code/my-app
-   borg assimilate --cli claude
-   ```
+## Core MCP Tools
 
-3. Open a second terminal in the same repo and assimilate another drone.
+After assimilation, the agent session can use these tools:
 
-   ```bash
-   cd ~/code/my-app
-   borg assimilate code-reviewer
-   ```
+- `borg_regen` refreshes cube context, role instructions, and roster state.
+- `borg_log` posts to the shared activity log; `borg_read-log` reads it.
+- `borg_ack` acknowledges a routed entry without posting another log message.
+- `borg_roster` lists drones and liveness markers.
+- `borg_stream-status` diagnoses the wake-up path.
+- `borg_cube`, `borg_role`, and `borg_whoami` inspect the current identity.
+- `borg_create-cube` creates a cube; `borg_update-cube` updates its directive or
+  message taxonomy.
+- `borg_delete-cube` deletes a cube after explicit confirmation of its exact
+  cube ID.
+- `borg_create-role`, `borg_update-role`, and `borg_reassign-drone` manage roles
+  and assignments.
+- `borg_apply-template`, `borg_sync-roles`, and `borg_patch-taxonomy-class`
+  maintain role and message-taxonomy templates.
 
-   Two sessions of the same agent CLI work fine. Add `--cli codex` or
-   `--cli claude` only when you want to choose explicitly.
+The available tools are also discoverable from the agent's MCP tool list.
 
-4. In the agent session, verify the connection and coordinate through the log.
-
-   ```text
-   borg_whoami
-   borg_roster
-   borg_log "STARTING: review feat/login"
-   ```
-
-## Troubleshooting
-
-### Authentication expired
+## Update
 
-Run setup again:
+For npm-global installations, update the client and an installed local server
+together:
 
 ```bash
-borg setup
+borg update
 ```
 
-### Both Claude Code and Codex are installed
-
-Choose one:
+Borg checks that compatible client and server versions are available, asks for
+confirmation, and reports any manual recovery step. Use `borg update --yes` for
+a non-interactive update. A server that was stopped remains stopped, and active
+agent sessions must be restarted after the client changes.
 
-```bash
-borg --cli claude
-borg --cli codex
-borg assimilate --cli claude
-borg assimilate --cli codex
-```
+## Troubleshooting
 
 ### Not connected to a cube
 
-Run assimilation from your project repo:
+Run assimilation from the project repository:
 
 ```bash
 borg assimilate
 ```
 
-Then ask the agent for `borg_whoami` and `borg_roster` to verify the connection.
-
-### Wake path warning
-
-If `borg_regen` or `borg_stream-status` reports a broken wake path, follow the
-CLI-specific recovery it prints:
-
-- Claude Code: arm the inbox monitor command. The monitor wakes the agent
-  session when another drone posts to the cube. The printed command includes
-  its required worktree-local `--state-root`; keep that value intact so the
-  config inbox can remain read-only and monitor runtime files do not dirty Git.
-  If it reports a stale legacy `.monitor.pid` or `.monitor.heartbeat`, confirm
-  the old Monitor has stopped, remove those legacy files, and arm the printed
-  command again; the new Monitor deliberately never deletes them automatically.
-- Codex: check the remote-control socket status, relaunch with `borg --cli codex`
-  or `borg assimilate --cli codex` if needed, and run `borg_regen` manually when
-  returning to the session if no wake arrived.
+Then use `borg_whoami` and `borg_roster` inside the agent session.
 
-## Development
+### Wake-up warning
 
-From the standalone repository root:
-
-```bash
-npm ci --ignore-scripts
-npm run check
-npm test
-npm run build
-npm run onboarding:smoke
-```
-
-To install and exercise the reviewed checkout globally:
-
-```bash
-npm install -g .
-```
+If `borg_regen` or `borg_stream-status` reports a wake-up problem, follow the
+recovery command it prints. For Codex or OpenCode, relaunch through `borg` if the
+agent's local control connection is no longer available.
 
 ## License
 
-Licensed under Apache-2.0. See [LICENSE](./LICENSE) and [NOTICE](./NOTICE).
+Licensed under Apache-2.0. See [LICENSE](LICENSE) and [NOTICE](NOTICE).
 
 ## Links
 
-- Client repository: <https://github.com/Byte-Ventures/borg-mcp-client>
-- Shared contracts: <https://github.com/Byte-Ventures/borg-mcp-shared>
-- Self-hosted server: <https://github.com/Byte-Ventures/borg-mcp-server>
-- Issues: <https://github.com/Byte-Ventures/borg-mcp-client/issues>
+- [Client repository](https://github.com/Byte-Ventures/borg-mcp-client)
+- [Shared contracts](https://github.com/Byte-Ventures/borg-mcp-shared)
+- [Self-hosted server](https://github.com/Byte-Ventures/borg-mcp-server)
+- [Issue tracker](https://github.com/Byte-Ventures/borg-mcp-client/issues)

package/dist/drone-lifecycle.d.ts

@@ -11,20 +11,28 @@
  *    a WAKE HINT — the agent confirms via an authed call returning this code.
  */
 export declare const DRONE_EVICTED_CODE = "DRONE_EVICTED";
+export declare const CUBE_DELETED_CODE = "CUBE_DELETED";
 export declare class DroneEvictedError extends Error {
     constructor(message?: string);
 }
+export declare class CubeDeletedError extends Error {
+    readonly cubeName?: string | undefined;
+    constructor(cubeName?: string | undefined);
+}
 /**
  * Marker the agent's /loop + role playbook branch on. Single-sourced so the
  * SSE wake sentinel (log-stream) and the tool-result funnel (index) agree.
  */
 export declare const EVICTED_RESULT_MARKER = "[CUBE-EVICTED]";
+export declare const CUBE_DELETED_RESULT_MARKER = "[CUBE-DELETED]";
 /**
  * The recognizable tool RESULT the agent sees when an authed call returns the
  * AUTHORITATIVE 410 DRONE_EVICTED. Spells out the sanctioned graceful-shutdown
  * sequence so the agent acts on it deterministically.
  */
 export declare function formatEvictedToolResult(cubeName?: string): string;
+export declare function formatCubeDeletedToolResult(cubeName?: string): string;
+export declare function formatCubeDeletedErrorToolResult(error: CubeDeletedError, activeCubeName?: string): string;
 /**
  * Extract the structured error code from a worker error body. The worker error
  * funnel (sanitizeError → createHttpError) emits `{ code, message }`; some

package/dist/drone-lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"drone-lifecycle.d.ts","sourceRoot":"","sources":["../src/drone-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAElD,qBAAa,iBAAkB,SAAQ,KAAK;gBAExC,OAAO,SAAyC;CAKnD;AAED;;;GAGG;AACH,eAAO,MAAM,qBAAqB,mBAAmB,CAAC;AAEtD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAQjE;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS7D"}
+{"version":3,"file":"drone-lifecycle.d.ts","sourceRoot":"","sources":["../src/drone-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,iBAAiB,iBAAiB,CAAC;AAEhD,qBAAa,iBAAkB,SAAQ,KAAK;gBAExC,OAAO,SAAyC;CAKnD;AAED,qBAAa,gBAAiB,SAAQ,KAAK;aACb,QAAQ,CAAC,EAAE,MAAM;gBAAjB,QAAQ,CAAC,EAAE,MAAM,YAAA;CAI9C;AAED;;;GAGG;AACH,eAAO,MAAM,qBAAqB,mBAAmB,CAAC;AACtD,eAAO,MAAM,0BAA0B,mBAAmB,CAAC;AAE3D;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAQjE;AAED,wBAAgB,2BAA2B,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAOrE;AAED,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,gBAAgB,EACvB,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,CAER;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS7D"}

package/dist/drone-lifecycle.js

@@ -11,17 +11,27 @@
  *    a WAKE HINT — the agent confirms via an authed call returning this code.
  */
 export const DRONE_EVICTED_CODE = 'DRONE_EVICTED';
+export const CUBE_DELETED_CODE = 'CUBE_DELETED';
 export class DroneEvictedError extends Error {
     constructor(message = 'This seat was removed from the cube.') {
         super(message);
         this.name = 'DroneEvictedError';
     }
 }
+export class CubeDeletedError extends Error {
+    cubeName;
+    constructor(cubeName) {
+        super('This cube was deleted.');
+        this.cubeName = cubeName;
+        this.name = 'CubeDeletedError';
+    }
+}
 /**
  * Marker the agent's /loop + role playbook branch on. Single-sourced so the
  * SSE wake sentinel (log-stream) and the tool-result funnel (index) agree.
  */
 export const EVICTED_RESULT_MARKER = '[CUBE-EVICTED]';
+export const CUBE_DELETED_RESULT_MARKER = '[CUBE-DELETED]';
 /**
  * The recognizable tool RESULT the agent sees when an authed call returns the
  * AUTHORITATIVE 410 DRONE_EVICTED. Spells out the sanctioned graceful-shutdown
@@ -34,6 +44,15 @@ export function formatEvictedToolResult(cubeName) {
         'Your worktree and project files are unchanged. Finish any local file safety checks, then end this agent session.\n\n' +
         'To rejoin later, start a new session and use a new invitation from the server operator. Do not re-assimilate from this evicted session.');
 }
+export function formatCubeDeletedToolResult(cubeName) {
+    const cube = cubeName ?? 'the selected cube';
+    return (`${CUBE_DELETED_RESULT_MARKER} Cube ${cube} was deleted.\n\n` +
+        'Borg has stopped listening for activity for this cube. Do not retry this request or restart the loop.\n\n' +
+        'Your worktree and project files are unchanged. Finish any local file safety checks, then end this agent session.');
+}
+export function formatCubeDeletedErrorToolResult(error, activeCubeName) {
+    return formatCubeDeletedToolResult(error.cubeName ?? activeCubeName);
+}
 /**
  * Extract the structured error code from a worker error body. The worker error
  * funnel (sanitizeError → createHttpError) emits `{ code, message }`; some

package/dist/drone-lifecycle.js.map

@@ -1 +1 @@
-{"version":3,"file":"drone-lifecycle.js","sourceRoot":"","sources":["../src/drone-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAElD,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YACE,OAAO,GAAG,sCAAsC;QAEhD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AAEtD;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAiB;IACvD,MAAM,IAAI,GAAG,QAAQ,IAAI,mBAAmB,CAAC;IAC7C,OAAO,CACL,GAAG,qBAAqB,oCAAoC,IAAI,OAAO;QACvE,2GAA2G;QAC3G,sHAAsH;QACtH,yIAAyI,CAC1I,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAQ,CAAC;QACvC,IAAI,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QACzD,IAAI,OAAO,MAAM,EAAE,KAAK,EAAE,IAAI,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,WAAW;IACb,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"drone-lifecycle.js","sourceRoot":"","sources":["../src/drone-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAClD,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAEhD,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YACE,OAAO,GAAG,sCAAsC;QAEhD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACb;IAA5B,YAA4B,QAAiB;QAC3C,KAAK,CAAC,wBAAwB,CAAC,CAAC;QADN,aAAQ,GAAR,QAAQ,CAAS;QAE3C,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AACtD,MAAM,CAAC,MAAM,0BAA0B,GAAG,gBAAgB,CAAC;AAE3D;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAiB;IACvD,MAAM,IAAI,GAAG,QAAQ,IAAI,mBAAmB,CAAC;IAC7C,OAAO,CACL,GAAG,qBAAqB,oCAAoC,IAAI,OAAO;QACvE,2GAA2G;QAC3G,sHAAsH;QACtH,yIAAyI,CAC1I,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,QAAiB;IAC3D,MAAM,IAAI,GAAG,QAAQ,IAAI,mBAAmB,CAAC;IAC7C,OAAO,CACL,GAAG,0BAA0B,SAAS,IAAI,mBAAmB;QAC7D,2GAA2G;QAC3G,kHAAkH,CACnH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,KAAuB,EACvB,cAAuB;IAEvB,OAAO,2BAA2B,CAAC,KAAK,CAAC,QAAQ,IAAI,cAAc,CAAC,CAAC;AACvE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAQ,CAAC;QACvC,IAAI,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QACzD,IAAI,OAAO,MAAM,EAAE,KAAK,EAAE,IAAI,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,WAAW;IACb,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;GASG;AAaH,OAAO,EAcL,UAAU,EAQV,oBAAoB,EAIpB,aAAa,EAGb,KAAK,oBAAoB,EAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAML,KAAK,QAAQ,EAEd,MAAM,0BAA0B,CAAC;AAgHlC,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAE,oBAAoB,EAC/B,IAAI,GAAE;IACJ,aAAa,CAAC,EAAE,OAAO,aAAa,CAAC;IACrC,oBAAoB,CAAC,EAAE,OAAO,oBAAoB,CAAC;IACnD,UAAU,CAAC,EAAE,OAAO,UAAU,CAAC;CAC3B,GACL,OAAO,CAAC;IAAE,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAAC,CAiBvF;AAeD;;GAEG;AACH,wBAAsB,IAAI,kBAwlCzB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;GASG;AAcH,OAAO,EAcL,UAAU,EAQV,oBAAoB,EAIpB,aAAa,EAGb,KAAK,oBAAoB,EAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAML,KAAK,QAAQ,EAEd,MAAM,0BAA0B,CAAC;AAkHlC,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAE,oBAAoB,EAC/B,IAAI,GAAE;IACJ,aAAa,CAAC,EAAE,OAAO,aAAa,CAAC;IACrC,oBAAoB,CAAC,EAAE,OAAO,oBAAoB,CAAC;IACnD,UAAU,CAAC,EAAE,OAAO,UAAU,CAAC;CAC3B,GACL,OAAO,CAAC;IAAE,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAAC,CAiBvF;AAeD;;GAEG;AACH,wBAAsB,IAAI,kBAmmCzB"}

package/dist/index.js

@@ -13,6 +13,7 @@ import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { CallToolRequestSchema, ListToolsRequestSchema, ListPromptsRequestSchema, GetPromptRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
 import { assertRoleMatches } from './role-match.js';
+import { CubeDeletionConfirmationError } from './server-errors.js';
 import { getCubeInfo, getRoleInfo, getRoleInfoByName, getRoster, readLog, appendLog, ackLogEntry, recordDecision, removeDecision, listDecisions, regen, listCubes, createCube, updateCube, deleteCube, createRole, updateRole, patchRoleSection, patchTaxonomyClass, deleteRole, getCube, getCubeForManagement, resolveLocalManageAuthority, listRoles, syncRoles, applyTemplate, whoami, roleRationale, } from './remote-client.js';
 import { getTemplate, listTemplateNames, resolveCubeDirectiveForCreate, resolveCubeDirectiveForApply, resolveMessageTaxonomyForCreate, } from 'borgmcp-shared/templates';
 import { activeCubeWithFreshRegenIdentity, getActiveCube, getActiveCubeForWorktree, refreshActiveCubeMetadata, findProjectRoot, inboxPathForDrone, pinMcpSeatIdentity, } from './cubes.js';
@@ -31,7 +32,7 @@ import { renderStreamStatus, formatWakePathPrefix, shouldShowWakePathWarning, }
 import { inspectWakePath } from './wake-path-health.js';
 import { RUNTIME_METADATA_ADVISORY, renderRoster, renderRuntimeMetadataLines, } from './roster-render.js';
 import { resolveWorkingRepo } from './working-repo.js';
-import { DroneEvictedError, formatEvictedToolResult, } from './drone-lifecycle.js';
+import { CubeDeletedError, DroneEvictedError, formatCubeDeletedErrorToolResult, formatEvictedToolResult, } from './drone-lifecycle.js';
 import { classifyInSessionAssimilate, reattachOnlyRefusal, reattachFailureMessage, } from './assimilate-guard.js';
 import { gateAllowsActivation, borgSessionToolNotice } from './launch-gate.js';
 import { renderSyncRolesResult } from './sync-roles-render.js';
@@ -856,7 +857,11 @@ export async function main() {
                     const cubeId = args?.cube_id;
                     if (!cubeId)
                         throw new Error('cube_id is required');
-                    await deleteCube(cubeId);
+                    const confirmCubeId = args?.confirm_cube_id;
+                    if (confirmCubeId !== cubeId) {
+                        throw new CubeDeletionConfirmationError(cubeId, confirmCubeId);
+                    }
+                    await deleteCube(cubeId, confirmCubeId);
                     return { content: [{ type: 'text', text: `Deleted cube ${cubeId} (and all its roles, drones, log entries).` }] };
                 }
                 case 'borg_create-role': {
@@ -1080,6 +1085,13 @@ export async function main() {
                     isError: true,
                 };
             }
+            if (error instanceof CubeDeletedError) {
+                const active = await getActiveCube();
+                return {
+                    content: [{ type: 'text', text: formatCubeDeletedErrorToolResult(error, active?.name) }],
+                    isError: true,
+                };
+            }
             const localManageResult = formatLocalManageToolResult(error);
             if (localManageResult)
                 return localManageResult;