borgmcp 2.8.0 → 2.10.0

package/src/setup.ts

@@ -73,11 +73,12 @@ async function main() {
   // configuration. Decline/non-interactive/failure paths therefore leave no
   // partial setup state behind.
   console.log(chalk.blue('◼ Local Server'));
-  const serverInstall = await offerFirstRunServerInstall();
+  const serverInstall = await offerFirstRunServerInstall(undefined, undefined, { initializeServer: true });
   if (serverInstall.kind !== 'present' && serverInstall.kind !== 'installed') {
     process.exit(serverInstall.kind === 'declined' ? 0 : 1);
   }
   console.log('');
+  console.log('◼ Local server initialized');
 
   // Step 1: Configure every detected agent CLI
   console.log(chalk.blue('◼ Agent CLI Integration'));
@@ -185,7 +186,9 @@ async function main() {
   // Success message
   console.log(chalk.green.bold('\nSetup complete!\n'));
   console.log(chalk.yellow('🔄 Restart Claude Code / Codex / OpenCode (or open a new session) for the changes to take effect.\n'));
-  console.log(chalk.gray(setupNextStepsText()));
+  if (!serverInstall.suppressClientNextSteps) {
+    console.log(chalk.gray(setupNextStepsText()));
+  }
 }
 
 // Run wizard

package/src/token-store.ts

@@ -20,6 +20,9 @@ export type TokenBackendName = 'file';
 export interface TokenBackend {
   readonly name: TokenBackendName;
   get(account: string): Promise<string | null>;
+  readonly entries?: () => Promise<Record<string, string>>;
+  /** Replace the complete account map in one backend transaction when available. */
+  readonly replaceAccounts?: (accounts: Record<string, string>) => Promise<void>;
   set(account: string, value: string): Promise<void>;
   delete(account: string): Promise<void>;
 }
@@ -87,6 +90,8 @@ export function makeFileBackend(
     atomicWrite0600(filePath, JSON.stringify({ version: 1, accounts }, null, 2) + '\n', options);
   return {
     name: 'file',
+    entries: load,
+    replaceAccounts: save,
     async get(account) {
       const accounts = await load();
       return Object.prototype.hasOwnProperty.call(accounts, account) ? accounts[account] : null;

package/src/tool-manifest.ts

@@ -30,7 +30,7 @@ export const TOOL_MANIFEST: ToolManifestEntry[] = [
             'Optional `since` (entry-id UUID or ISO-8601 timestamp) trims the recent-log section ' +
             'to entries strictly after the anchor — pass your last-seen entry id to skip ' +
             'already-processed history on each refresh. If you know the current session model, pass ' +
-            'optional `model` to self-report it as advisory metadata; unrecognized model strings are accepted.',
+            'optional `model` to self-report its printable identifier as advisory metadata; model names are not allowlisted.',
           inputSchema: {
             type: 'object',
             properties: {
@@ -47,9 +47,11 @@ export const TOOL_MANIFEST: ToolManifestEntry[] = [
               },
               model: {
                 type: 'string',
-                maxLength: 256,
+                minLength: 1,
+                maxLength: 160,
+                pattern: '^[A-Za-z0-9][A-Za-z0-9._/@:+-]*$',
                 description:
-                  'Optional advisory self-report of the model running this agent session. Use the model identifier you know from session context; the server does not infer or validate it against an allowlist.',
+                  'Optional advisory self-report of the model running this agent session. Use a printable model identifier of 1-160 ASCII characters; model names are not allowlisted.',
               },
             },
             required: [],

package/src/unknown-subcommand.ts

@@ -17,6 +17,7 @@ export const KNOWN_SUBCOMMANDS = [
   'update',
   'assimilate',
   'reset-local-seat',
+  'recover-enrollment',
   'spawn',
   'sync',
   'cleanup',

package/src/update-cmd.ts

@@ -1128,7 +1128,13 @@ async function defaultPublishedVersions(
   }
 }
 
-async function defaultConfirm(message: string): Promise<'yes' | 'no' | 'eof' | 'interrupted'> {
+export function parseConfirmationAnswer(answer: string, defaultYes = false): 'yes' | 'no' {
+  const normalized = answer.trim().toLowerCase();
+  if (normalized === '') return defaultYes ? 'yes' : 'no';
+  return normalized === 'y' || normalized === 'yes' ? 'yes' : 'no';
+}
+
+async function defaultConfirm(message: string, defaultYes = false): Promise<'yes' | 'no' | 'eof' | 'interrupted'> {
   const rl = createInterface({ input: process.stdin, output: process.stdout });
   let interrupted = false;
   rl.once('SIGINT', () => {
@@ -1136,8 +1142,7 @@ async function defaultConfirm(message: string): Promise<'yes' | 'no' | 'eof' | '
     rl.close();
   });
   try {
-    const answer = (await rl.question(message)).trim().toLowerCase();
-    return answer === 'y' || answer === 'yes' ? 'yes' : 'no';
+    return parseConfirmationAnswer(await rl.question(message), defaultYes);
   } catch (error) {
     if (interrupted) return 'interrupted';
     if ((error as NodeJS.ErrnoException).code === 'ERR_USE_AFTER_CLOSE') return 'eof';