borgmcp 5.4.0 → 5.5.0

package/src/local-server-cursor.ts

@@ -90,11 +90,17 @@ async function readState(): Promise<CursorFile> {
   }
 }
 
-async function writeState(state: CursorFile): Promise<void> {
+async function writeState(state: CursorFile, continuationGuard?: () => Promise<void>): Promise<void> {
   await mkdir(dirname(CURSOR_FILE), { recursive: true });
   const temporary = `${CURSOR_FILE}.${process.pid}.${Date.now()}.tmp`;
   await writeFile(temporary, JSON.stringify(state, null, 2) + '\n', { mode: 0o600 });
-  await rename(temporary, CURSOR_FILE);
+  try {
+    if (continuationGuard) await continuationGuard();
+    await rename(temporary, CURSOR_FILE);
+  } catch (error) {
+    await unlink(temporary).catch(() => undefined);
+    throw error;
+  }
 }
 
 async function withLock<T>(operation: () => Promise<T>): Promise<T> {
@@ -143,10 +149,12 @@ export async function getLocalServerCursor(
 export async function advanceLocalServerCursor(
   binding: LocalServerCursorBinding,
   cursor: LocalServerCursor,
+  continuationGuard?: () => Promise<void>,
 ): Promise<void> {
   if (!validCursor(cursor)) throw new Error('invalid local Borg server cursor');
   const key = cursorKey(binding);
   await withLock(async () => {
+    if (continuationGuard) await continuationGuard();
     const state = await readState();
     const prior = state.cursors[key];
     if (
@@ -157,7 +165,7 @@ export async function advanceLocalServerCursor(
       return;
     }
     state.cursors[key] = cursor;
-    await writeState(state);
+    await writeState(state, continuationGuard);
   });
 }
 

package/src/remote-client.ts

@@ -348,6 +348,7 @@ async function localServerRequest<T>(
   payload?: Record<string, unknown>,
   options: {
     retryMode?: AuthedFetchRetryMode;
+    continuationGuard?: () => Promise<void>;
     decodePayload?: (value: unknown) => T;
   } = {},
 ): Promise<T | null> {
@@ -366,6 +367,7 @@ async function localServerRequest<T>(
           body: JSON.stringify(createProtocolEnvelope(randomUUID(), payload)),
         }),
       retryMode: options.retryMode,
+      continuationGuard: options.continuationGuard,
     }), true, options.decodePayload);
 }
 
@@ -509,7 +511,7 @@ async function localOwnerConnection(connection?: RemoteConnection): Promise<Remo
   };
 }
 
-async function localCubeComposition(active: ActiveCube): Promise<{
+async function localCubeComposition(active: ActiveCube, continuationGuard?: () => Promise<void>): Promise<{
   cube: any;
   roles: any[];
   drones: any[];
@@ -518,9 +520,9 @@ async function localCubeComposition(active: ActiveCube): Promise<{
 }> {
   const base = `/api/cubes/${active.cubeId}`;
   const [cubePayload, rolePayload, dronePayload] = await Promise.all([
-    localServerRequest<{ cube: any }>(active, base, 'GET'),
-    localServerRequest<{ roles: any[] }>(active, `${base}/roles`, 'GET'),
-    localServerRequest<{ drones: any[] }>(active, `${base}/drones`, 'GET'),
+    localServerRequest<{ cube: any }>(active, base, 'GET', undefined, { continuationGuard }),
+    localServerRequest<{ roles: any[] }>(active, `${base}/roles`, 'GET', undefined, { continuationGuard }),
+    localServerRequest<{ drones: any[] }>(active, `${base}/drones`, 'GET', undefined, { continuationGuard }),
   ]);
   if (!cubePayload || !rolePayload || !dronePayload) {
     throw new Error('Local Borg server returned an incomplete cube response');
@@ -576,6 +578,7 @@ async function localReadLogPage(
     cursor?: LocalServerCursor | null;
     limit?: number;
     retryMode?: AuthedFetchRetryMode;
+    continuationGuard?: () => Promise<void>;
   } = {},
 ): Promise<any> {
   const payload = await localServerRequest(
@@ -586,7 +589,7 @@ async function localReadLogPage(
       cursor: opts.cursor ?? null,
       ...(opts.limit === undefined ? {} : { limit: opts.limit }),
     },
-    { retryMode: opts.retryMode, decodePayload: decodeReadLogResult },
+    { retryMode: opts.retryMode, continuationGuard: opts.continuationGuard, decodePayload: decodeReadLogResult },
   );
   if (!payload) throw new Error('Local Borg server returned an empty log response');
   return payload;
@@ -691,6 +694,7 @@ export async function hasPendingWakeEntry(
 async function resolveLocalLogCursor(
   active: ActiveCube,
   since: string,
+  continuationGuard?: () => Promise<void>,
 ): Promise<LocalServerCursor | null> {
   const isUuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i
     .test(since);
@@ -702,7 +706,7 @@ async function resolveLocalLogCursor(
   let scanCursor: LocalServerCursor | null = null;
   let timestampCursor: LocalServerCursor | null = null;
   for (;;) {
-    const page = await localReadLogPage(active, { cursor: scanCursor, limit: 500 });
+    const page = await localReadLogPage(active, { cursor: scanCursor, limit: 500, continuationGuard });
     for (const entry of page.entries as any[]) {
       if (isUuid && entry.id === since) {
         return { id: entry.id, created_at: entry.created_at };
@@ -749,6 +753,7 @@ async function authedFetch(
     serverTrustIdentity?: string;
     localSessionCredentialRef?: string;
     retryMode?: AuthedFetchRetryMode;
+    continuationGuard?: () => Promise<void>;
   } = {}
 ): Promise<Response> {
   const {
@@ -758,6 +763,7 @@ async function authedFetch(
     serverTrustIdentity: suppliedTrustIdentity,
     localSessionCredentialRef,
     retryMode,
+    continuationGuard,
     headers,
     ...rest
   } = init;
@@ -805,6 +811,9 @@ async function authedFetch(
   const method = ((rest.method as string | undefined) ?? 'GET').toUpperCase();
 
   const buildRequest = async (tok: string): Promise<Response> => {
+    // Rechecked for every HTTP attempt, including transport and 429 retries.
+    // Keep this callback out of RequestInit and preserve unguarded callers.
+    if (continuationGuard) await continuationGuard();
     const finalHeaders: Record<string, string> = {
       'Authorization': `Bearer ${tok}`,
       ...(headers as Record<string, string> | undefined),
@@ -1094,6 +1103,8 @@ export async function readLog(
     limit?: number;
     unreadOnly?: boolean;
     serverTrustIdentity?: string;
+    /** Refuse continuation before any cursor access/advance or HTTP attempt. */
+    continuationGuard?: () => Promise<void>;
   } = {}
 ): Promise<{
   entries: any[];
@@ -1111,17 +1122,21 @@ export async function readLog(
     opts.serverTrustIdentity,
   );
   let cursor: LocalServerCursor | null = null;
+  if (opts.continuationGuard) await opts.continuationGuard();
   if (opts.unreadOnly) cursor = await getLocalServerCursor(localCursorBinding(local));
-  if (opts.since !== undefined) cursor = await resolveLocalLogCursor(local, opts.since);
+  if (opts.since !== undefined) cursor = await resolveLocalLogCursor(local, opts.since, opts.continuationGuard);
   let page = await localReadLogPage(local, {
     cursor,
     limit: opts.limit,
+    continuationGuard: opts.continuationGuard,
     // Keep the cursor payload stable across a lost response; do not re-read or
     // advance local state until one response has been decoded successfully.
     ...(opts.unreadOnly && opts.since === undefined ? { retryMode: 'unread-cursor' as const } : {}),
   });
   if (opts.unreadOnly && page.cursor) {
-    await advanceLocalServerCursor(localCursorBinding(local), page.cursor);
+    if (opts.continuationGuard) await opts.continuationGuard();
+    await advanceLocalServerCursor(localCursorBinding(local), page.cursor,
+      ...(opts.continuationGuard ? [opts.continuationGuard] as const : [] as const));
   }
   const entries = [...page.entries];
   const backlog = entries.length + (typeof page.behind_by === 'number' ? page.behind_by : 0);
@@ -1135,14 +1150,17 @@ export async function readLog(
         cursor: page.cursor,
         limit: Math.min(500, DIGEST_FETCH_CAP - entries.length),
         retryMode: 'unread-cursor',
+        continuationGuard: opts.continuationGuard,
       });
       if (page.cursor) {
-        await advanceLocalServerCursor(localCursorBinding(local), page.cursor);
+        if (opts.continuationGuard) await opts.continuationGuard();
+        await advanceLocalServerCursor(localCursorBinding(local), page.cursor,
+          ...(opts.continuationGuard ? [opts.continuationGuard] as const : [] as const));
       }
       entries.push(...page.entries);
     }
   }
-  const composed = await localCubeComposition(local);
+  const composed = await localCubeComposition(local, opts.continuationGuard);
   return {
     entries,
     drones: composed.drones,
@@ -1527,10 +1545,22 @@ export async function appendLog(
     class?: string;
     documents?: string[];
     serverTrustIdentity?: string;
+    /**
+     * Caller-owned idempotency key. A caller that may retry the SAME logical
+     * post across calls (or processes) supplies it so the server deduplicates;
+     * omitted, every call is a distinct post.
+     */
+    postId?: string;
+    /**
+     * false: exactly one transport attempt. For a caller that owns retries and
+     * must know a typed refusal answered its only attempt (default: one
+     * automatic same-post_id retry after a connection reset).
+     */
+    transportRetry?: boolean;
   },
 ): Promise<ReturnType<typeof decodeAppendLogResult>> {
   const to = normalizeLogAudience(opts?.to);
-  const postId = randomUUID();
+  const postId = opts.postId ?? randomUUID();
   const local = await localAuthorityContext(
     sessionToken,
     apiUrl,
@@ -1548,7 +1578,10 @@ export async function appendLog(
     `/api/cubes/${local.cubeId}/logs`,
     'POST',
     { ...request },
-    { retryMode: 'append-log', decodePayload: decodeAppendLogResult },
+    {
+      ...(opts.transportRetry === false ? {} : { retryMode: 'append-log' as const }),
+      decodePayload: decodeAppendLogResult,
+    },
   );
   if (!payload) throw new Error('Local Borg server returned an empty log response');
   return payload;

package/src/representative-cmd.ts

@@ -0,0 +1,363 @@
+/**
+ * `borg representative <prepare|status|mcp>` — operator entry for the human
+ * representative ("Hermes") connection.
+ *
+ * prepare  binds ONE dedicated non-human-seat drone in this repository's cube
+ *          to ONE explicitly named Coordinator drone. It creates/resumes the
+ *          seat through the launch-free assimilate seam: no agent CLI starts
+ *          and no existing drone's identity is touched.
+ * status   shows the saved binding and re-checks it against the live cube.
+ * mcp      serves the restricted stdio MCP facade for a generic MCP host.
+ *
+ * No command accepts a credential: the seat bearer stays in the private seat
+ * store and is hydrated in-process only.
+ */
+
+import { realpathSync } from 'node:fs';
+import { isAbsolute, resolve } from 'node:path';
+import type { Readable, Writable } from 'node:stream';
+import type { ActiveCube } from './cubes.js';
+import { normalizeServerEndpoint } from './server-endpoint.js';
+import { validateName } from './name-validator.js';
+import {
+  RepresentativeError,
+  assertRepresentativeRole,
+  representativeStatus,
+  resolveCoordinator,
+  type RepresentativeBackend,
+  type RepresentativeContext,
+} from './representative-core.js';
+import {
+  RepresentativeStoreError,
+  representativeRecoveryCommand,
+  type RepresentativeBinding,
+  type RepresentativeStore,
+} from './representative-store.js';
+
+import { shellEscape } from './shell-escape.js';
+
+export const DEFAULT_REPRESENTATIVE_ROLE = 'hermes-representative';
+
+export type RepresentativeCommand =
+  | { action: 'prepare'; coordinator: string; role: string; rebind: boolean; worktreeName?: string; host?: string }
+  | { action: 'status'; worktree?: string }
+  | { action: 'mcp'; worktree?: string };
+
+export type ParsedRepresentativeArgs =
+  | { ok: true; command: RepresentativeCommand }
+  | { ok: false; error: string };
+
+export interface RepresentativeCmdDeps {
+  cwd(): string;
+  findProjectRoot(dir: string): string;
+  /** Hydrates the saved seat bound to exactly this worktree, or null. */
+  hydrateSeat(worktree: string): Promise<ActiveCube | null>;
+  /** Launch-free seat creation/resume; never starts an agent CLI. */
+  prepareSeat(input: { role: string; coordinator?: string; worktreeName?: string; host?: string; resume?: boolean }): Promise<{ code: number; worktree?: string }>;
+  backendFor(active: ActiveCube): RepresentativeBackend | Promise<RepresentativeBackend>;
+  store: RepresentativeStore;
+  stdout(text: string): void;
+  stderr(text: string): void;
+}
+
+export function parseRepresentativeArgs(args: readonly string[]): ParsedRepresentativeArgs {
+  const [action, ...rest] = args;
+  if (action !== 'prepare' && action !== 'status' && action !== 'mcp') {
+    return { ok: false, error: 'expected one of: prepare, status, mcp' };
+  }
+  const values: Record<string, string> = {};
+  let rebind = false;
+  const valueFlags = action === 'prepare' ? ['--coordinator', '--role', '--worktree', '--host'] : ['--worktree'];
+  for (let i = 0; i < rest.length; i += 1) {
+    const arg = rest[i];
+    if (action === 'prepare' && arg === '--rebind') {
+      rebind = true;
+    } else if (valueFlags.includes(arg)) {
+      const next = rest[i + 1];
+      if (typeof next !== 'string' || next.length === 0 || next.startsWith('-')) {
+        return { ok: false, error: `${arg} requires a value` };
+      }
+      values[arg] = next;
+      i += 1;
+    } else {
+      return {
+        ok: false,
+        error: `unknown argument: ${arg}. Supported: ${[...valueFlags, ...(action === 'prepare' ? ['--rebind'] : [])].join(', ')}`,
+      };
+    }
+  }
+  if (action !== 'prepare') {
+    const worktree = values['--worktree'];
+    if (worktree !== undefined && !isAbsolute(worktree)) {
+      return { ok: false, error: '--worktree must be an absolute path to the representative worktree' };
+    }
+    return { ok: true, command: { action, ...(worktree ? { worktree } : {}) } };
+  }
+  const coordinator = values['--coordinator'];
+  if (!coordinator) {
+    return {
+      ok: false,
+      error: '--coordinator <drone-label> is required: name the exact Coordinator drone (see `borg drones`). It is never chosen for you.',
+    };
+  }
+  const role = values['--role'] ?? DEFAULT_REPRESENTATIVE_ROLE;
+  if (!validateName(role).ok) return { ok: false, error: '--role must be a valid role name' };
+  if (values['--worktree'] !== undefined && !validateName(values['--worktree']).ok) {
+    return { ok: false, error: '--worktree for prepare is a new worktree NAME (as in `borg assimilate --worktree`), not a path' };
+  }
+  return {
+    ok: true,
+    command: {
+      action,
+      coordinator,
+      role,
+      rebind,
+      ...(values['--worktree'] ? { worktreeName: values['--worktree'] } : {}),
+      ...(values['--host'] ? { host: values['--host'] } : {}),
+    },
+  };
+}
+
+function canonicalWorktree(path: string, deps: Pick<RepresentativeCmdDeps, 'findProjectRoot'>): string {
+  let real = resolve(path);
+  try {
+    real = realpathSync(real);
+  } catch {
+    /* a missing path simply finds no binding below */
+  }
+  return deps.findProjectRoot(real);
+}
+
+function describeError(error: unknown): string {
+  if (error instanceof RepresentativeError || error instanceof RepresentativeStoreError) {
+    return `${error.code}: ${error.message}`;
+  }
+  return error instanceof Error ? error.message : String(error);
+}
+
+function sameSeat(binding: RepresentativeBinding, active: ActiveCube): boolean {
+  return active.cubeId === binding.cubeId &&
+    active.droneId === binding.representativeDroneId &&
+    active.apiUrl === binding.origin &&
+    active.serverTrustIdentity === binding.trustIdentity;
+}
+
+/** Load the saved binding and prove the worktree's hydrated seat is still that exact seat. Fails closed. */
+export async function resolveRepresentativeContext(
+  worktree: string,
+  deps: Pick<RepresentativeCmdDeps, 'hydrateSeat' | 'backendFor' | 'store'>,
+): Promise<RepresentativeContext> {
+  const binding = await deps.store.getBinding(worktree);
+  if (!binding) {
+    throw new RepresentativeError(
+      'NOT_PREPARED',
+      `No representative connection is prepared for ${worktree}. Run \`borg representative prepare --coordinator <drone-label>\` there first.`,
+    );
+  }
+  const active = await deps.hydrateSeat(worktree);
+  if (!active) {
+    throw new RepresentativeError(
+      'SEAT_UNAVAILABLE',
+      `The saved representative connection is missing, reset or rejected. Run \`${representativeRecoveryCommand(binding)}\`.`,
+    );
+  }
+  if (!sameSeat(binding, active)) {
+    throw new RepresentativeError(
+      'BINDING_MISMATCH',
+      `This worktree's saved connection is not the bound server/cube/drone. Run \`${representativeRecoveryCommand(binding)}\` to confirm a rebind; nothing is sent until then.`,
+    );
+  }
+  return { binding, backend: await deps.backendFor(active), store: deps.store };
+}
+
+export function hermesConfigSnippet(worktree: string): string {
+  return (
+    `mcp_servers:\n` +
+    `  borg-representative:\n` +
+    `    command: borg\n` +
+    `    args: ["representative", "mcp", "--worktree", ${JSON.stringify(worktree)}]\n`
+  );
+}
+
+export async function runRepresentativePrepare(
+  command: Extract<RepresentativeCommand, { action: 'prepare' }>,
+  deps: RepresentativeCmdDeps,
+): Promise<number> {
+  try {
+    // Same canonical key as status/mcp, so a symlinked cwd cannot bind under a path they never look up.
+    let worktree = canonicalWorktree(deps.cwd(), deps);
+    const existing = command.worktreeName === undefined ? await deps.hydrateSeat(worktree) : null;
+    if (existing && command.host && normalizeServerEndpoint(command.host) !== normalizeServerEndpoint(existing.apiUrl)) {
+      throw new RepresentativeError('BINDING_MISMATCH', 'The explicit --host does not match this worktree\'s saved connection. Use a worktree connected to the requested server; nothing was rebound.');
+    }
+    const prepared = await deps.prepareSeat({
+      role: command.role,
+      coordinator: command.coordinator,
+      ...(existing ? { resume: true } : {}),
+      ...(command.worktreeName ? { worktreeName: command.worktreeName } : {}),
+      ...(command.host ? { host: command.host } : {}),
+    });
+    if (prepared.code !== 0) {
+      deps.stderr('borg representative: the representative connection could not be prepared; nothing was bound.\n');
+      return prepared.code || 1;
+    }
+    if (prepared.worktree) worktree = canonicalWorktree(prepared.worktree, deps);
+    const active = await deps.hydrateSeat(worktree);
+    if (!active || !active.serverTrustIdentity) {
+      throw new RepresentativeError('SEAT_UNAVAILABLE', `No usable saved connection was found for ${worktree}.`);
+    }
+    const backend = await deps.backendFor(active);
+    const me = await backend.whoami();
+    if (me.cube_id !== active.cubeId || me.drone_id !== active.droneId) {
+      throw new RepresentativeError('BINDING_MISMATCH', 'The server does not recognise this worktree\'s saved connection.');
+    }
+    const roster = await backend.roster();
+    const self = roster.drones.find((drone) => drone.id === me.drone_id);
+    const selfRole = roster.roles.find((role) => role.id === self?.role_id);
+    if (!self || !selfRole) throw new RepresentativeError('SEAT_UNAVAILABLE', 'The representative drone is not active in the cube.');
+    assertRepresentativeRole(selfRole, self);
+    if (selfRole.name.toLowerCase() !== command.role.toLowerCase()) {
+      throw new RepresentativeError(
+        'REPRESENTATIVE_ROLE_MISMATCH',
+        `This worktree's drone ${self.label} holds role ${JSON.stringify(selfRole.name)}, not ${JSON.stringify(command.role)}. ` +
+          'The representative needs its own dedicated drone. Use the preparation syntax in `borg representative --help` with an explicit Coordinator and the intended role or new worktree name.',
+      );
+    }
+    const coordinator = resolveCoordinator(roster, { label: command.coordinator, selfDroneId: me.drone_id });
+    const binding: RepresentativeBinding = {
+      worktree,
+      origin: active.apiUrl,
+      trustIdentity: active.serverTrustIdentity,
+      cubeId: me.cube_id,
+      cubeName: me.cube_name,
+      representativeDroneId: me.drone_id,
+      representativeLabel: me.drone_label,
+      representativeRoleName: selfRole.name,
+      coordinatorDroneId: coordinator.drone.id,
+      coordinatorLabel: coordinator.drone.label,
+      coordinatorRoleName: coordinator.role.name,
+      ...(active.repositoryOrigin ? { repositoryOrigin: active.repositoryOrigin } : {}),
+      boundAt: new Date().toISOString(),
+    };
+    const outcome = await deps.store.saveBinding(binding, { rebind: command.rebind });
+    deps.stdout(
+      `◼ Human representative connection ${outcome === 'unchanged' ? 'resumed' : outcome}.\n` +
+      `  cube:            ${binding.cubeName} (${binding.cubeId})\n` +
+      `  representative:  ${binding.representativeLabel} — role ${binding.representativeRoleName} (not a human seat)\n` +
+      `  coordinator:     ${binding.coordinatorLabel} — role ${binding.coordinatorRoleName} (human seat)\n` +
+      `  worktree:        ${worktree}\n\n` +
+      `No agent CLI was launched. Serve it to a generic MCP host with:\n` +
+      `  borg representative mcp --worktree ${worktree}\n\n` +
+      `Example host configuration (no secrets belong here):\n${hermesConfigSnippet(worktree)}`,
+    );
+    return 0;
+  } catch (error) {
+    deps.stderr(`◼ borg representative prepare: ${describeError(error)}\n`);
+    return 1;
+  }
+}
+
+export async function runRepresentativeStatus(
+  command: Extract<RepresentativeCommand, { action: 'status' }>,
+  deps: RepresentativeCmdDeps,
+): Promise<number> {
+  try {
+    const worktree = canonicalWorktree(command.worktree ?? deps.cwd(), deps);
+    const ctx = await resolveRepresentativeContext(worktree, deps);
+    const status = await representativeStatus(ctx);
+    const { representativeOwnership } = await import('./representative-owner.js');
+    const ownership = await representativeOwnership(ctx.binding);
+    deps.stdout(`${JSON.stringify({ ...status, ownership }, null, 2)}\n`);
+    return status.connected ? 0 : 1;
+  } catch (error) {
+    deps.stderr(`◼ borg representative status: ${describeError(error)}\n`);
+    return 1;
+  }
+}
+
+/**
+ * Serve the stdio facade. The binding selection is captured at startup; a later
+ * operator rebind is NOT picked up by a running process — calls fail closed
+ * until the host restarts it.
+ */
+export async function runRepresentativeMcp(
+  command: Extract<RepresentativeCommand, { action: 'mcp' }>,
+  deps: RepresentativeCmdDeps,
+  io: { version: string; pinSeat?: (active: ActiveCube) => void; stdin?: Readable; stdout?: Writable; heartbeatIntervalMs?: number },
+): Promise<number> {
+  let worktree: string;
+  let pinned: RepresentativeBinding;
+  try {
+    worktree = canonicalWorktree(command.worktree ?? deps.cwd(), deps);
+    pinned = (await resolveRepresentativeContext(worktree, deps)).binding;
+    const active = await deps.hydrateSeat(worktree);
+    if (active) io.pinSeat?.(active);
+  } catch (error) {
+    // stdout is reserved for JSON-RPC frames; refuse to start on stderr only.
+    deps.stderr(`◼ borg representative mcp: ${describeError(error)}\n`);
+    return 1;
+  }
+  const { serveRepresentativeMcp } = await import('./representative-mcp.js');
+  const served = await serveRepresentativeMcp({
+    version: io.version,
+    heartbeatIntervalMs: io.heartbeatIntervalMs,
+    ...(io.stdin ? { stdin: io.stdin } : {}),
+    ...(io.stdout ? { stdout: io.stdout } : {}),
+    context: async () => {
+      const ctx = await resolveRepresentativeContext(worktree, deps);
+      if (
+        ctx.binding.cubeId !== pinned.cubeId ||
+        ctx.binding.coordinatorDroneId !== pinned.coordinatorDroneId ||
+        ctx.binding.representativeDroneId !== pinned.representativeDroneId
+      ) {
+        throw new RepresentativeError(
+          'BINDING_MISMATCH',
+          'The operator changed this connection\'s cube or Coordinator while it was running. Restart the MCP server to use the new binding.',
+        );
+      }
+      return ctx;
+    },
+  });
+  const stdin = io.stdin ?? process.stdin;
+  stdin.once('end', () => { void served.close(); });
+  await served.closed;
+  return 0;
+}
+
+export async function buildDefaultRepresentativeDeps(): Promise<RepresentativeCmdDeps> {
+  const [{ findProjectRoot, getActiveCubeForWorktree }, { createSeatBackend }, { createRepresentativeStore }] =
+    await Promise.all([
+      import('./cubes.js'),
+      import('./representative-core.js'),
+      import('./representative-store.js'),
+    ]);
+  return {
+    cwd: () => process.cwd(),
+    findProjectRoot,
+    hydrateSeat: (worktree) => getActiveCubeForWorktree(worktree),
+    prepareSeat: async ({ role, coordinator, worktreeName, host, resume }) => {
+      const [{ prepareConnection }, { buildDefaultAssimilateDeps }] = await Promise.all([
+        import('./assimilate-cmd.js'),
+        import('./assimilate-deps.js'),
+      ]);
+      let worktree: string | undefined;
+      const code = await prepareConnection(
+        { role, flags: { ...(resume ? { here: true } : {}), ...(worktreeName ? { worktree: worktreeName } : {}), ...(host ? { server: host } : {}) } },
+        buildDefaultAssimilateDeps(),
+        {
+          validateRole: assertRepresentativeRole,
+          onPrepared: (prepared) => { worktree = prepared.worktree; },
+          authoritySelectionCommand: 'borg representative prepare --host <host>' +
+            (coordinator ? ` --coordinator ${shellEscape(coordinator)}` : '') +
+            ` --role ${shellEscape(role)}` +
+            (worktreeName ? ` --worktree ${shellEscape(worktreeName)}` : ''),
+        },
+      );
+      return { code, ...(worktree ? { worktree } : {}) };
+    },
+    backendFor: createSeatBackend,
+    store: createRepresentativeStore(),
+    stdout: (text) => { process.stdout.write(text); },
+    stderr: (text) => { process.stderr.write(text); },
+  };
+}