@sideboard-ai/core 0.1.130 → 0.1.132

package/dist/agents/cursor-runner.js

@@ -12,7 +12,7 @@ import {
   ensureCursorRipgrepPath,
   fetchCursorTurnCostUsd,
   formatUnknownDetail
-} from "../chunk-IUJOI7KK.js";
+} from "../chunk-FSCQXMGI.js";
 import {
   dropNestedElectronEnvFromProcess
 } from "../chunk-4TR3HZFT.js";

package/dist/{agents-X2I3RNCY.js → agents-CI6NGKRO.js}

@@ -28,8 +28,9 @@ import {
   resolveCursorModelId,
   resolveLoginCommand,
   resolveQuotaFallbackAgent
-} from "./chunk-NV73AO7Q.js";
-import "./chunk-EKIDHL2T.js";
+} from "./chunk-MGYCQAZ6.js";
+import "./chunk-SIPDL62B.js";
+import "./chunk-AQESMTCZ.js";
 import {
   ORCHESTRATOR_AGENT_KINDS,
   assertOrchestratorCapableAgent,
@@ -42,7 +43,7 @@ import {
   parseCursorRunnerLine,
   preferredCursorCostCents,
   turnCostUsdFromCursorUsage
-} from "./chunk-IUJOI7KK.js";
+} from "./chunk-FSCQXMGI.js";
 import "./chunk-UDQI3N47.js";
 import "./chunk-FKOIHGKV.js";
 import "./chunk-HUYEU4GS.js";

package/dist/{agents-7BUQY2WX.js → agents-LGJLZMM3.js}

@@ -34,8 +34,9 @@ import {
   resolveLoginCommand,
   resolveQuotaFallbackAgent,
   turnCostUsdFromCursorUsage
-} from "./chunk-ZMUOPTKZ.js";
-import "./chunk-YMRT2DU6.js";
+} from "./chunk-PK4PQUPU.js";
+import "./chunk-LLX3OMHU.js";
+import "./chunk-R7FGPBKL.js";
 import {
   ORCHESTRATOR_AGENT_KINDS,
   assertOrchestratorCapableAgent,

package/dist/chunk-AQESMTCZ.js

@@ -0,0 +1,129 @@
+// src/http/fetch.ts
+var injected = null;
+function setHttpFetchImpl(fetchImpl) {
+  injected = fetchImpl;
+}
+function formatFetchError(err, url) {
+  if (!(err instanceof Error)) return `${String(err)} (${url})`;
+  const cause = err.cause;
+  let detail = "";
+  if (cause instanceof Error) {
+    const code = typeof cause.code === "string" ? cause.code : void 0;
+    detail = code ? ` [${code}: ${cause.message}]` : ` [${cause.message}]`;
+  } else if (cause != null) {
+    detail = ` [${String(cause)}]`;
+  }
+  return `${err.message}${detail} (${url})`;
+}
+async function httpFetch(input, init) {
+  const url = typeof input === "string" ? input : input.href;
+  const fn = injected ?? globalThis.fetch.bind(globalThis);
+  try {
+    return await fn(url, init);
+  } catch (err) {
+    throw new Error(formatFetchError(err, url));
+  }
+}
+
+// src/brightsy/config.ts
+import { existsSync, readFileSync, writeFileSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+function brightsyConfigPath() {
+  const override = process.env.BRIGHTSY_CONFIG?.trim();
+  if (override) return override;
+  return join(homedir(), ".brightsy", "config.json");
+}
+function loadBrightsyConfig() {
+  const path = brightsyConfigPath();
+  if (!existsSync(path)) {
+    throw new Error("Brightsy not logged in \u2014 run `brightsy login` first");
+  }
+  const raw = JSON.parse(readFileSync(path, "utf8"));
+  if (!raw.access_token || !raw.account_id) {
+    throw new Error("Brightsy config incomplete \u2014 run `brightsy login`");
+  }
+  return raw;
+}
+function saveBrightsyConfig(cfg) {
+  writeFileSync(brightsyConfigPath(), `${JSON.stringify(cfg, null, 2)}
+`, {
+    mode: 384
+  });
+}
+
+// src/brightsy/oauth.ts
+var REFRESH_SKEW_MS = 6e4;
+function brightsyAccessTokenNeedsRefresh(expiresAt, now = Date.now()) {
+  if (typeof expiresAt !== "number" || !Number.isFinite(expiresAt) || expiresAt <= 0) {
+    return true;
+  }
+  return now >= expiresAt - REFRESH_SKEW_MS;
+}
+function applyGrant(current, grant) {
+  return {
+    access_token: grant.access_token,
+    refresh_token: grant.refresh_token || current.refresh_token,
+    expires_at: grant.expires_at ?? current.expires_at
+  };
+}
+async function refreshBrightsyAccessToken(opts) {
+  const endpoint = (opts.endpoint || "https://brightsy.ai").replace(/\/$/, "");
+  const url = `${endpoint}/oauth/token`;
+  const fetchImpl = opts.fetchImpl ?? globalThis.fetch.bind(globalThis);
+  let res;
+  try {
+    res = await fetchImpl(url, {
+      method: "POST",
+      headers: { "Content-Type": "application/x-www-form-urlencoded" },
+      body: new URLSearchParams({
+        grant_type: "refresh_token",
+        refresh_token: opts.refreshToken,
+        client_id: opts.clientId || "brightsy-cli"
+      })
+    });
+  } catch (err) {
+    throw new Error(formatFetchError(err, url));
+  }
+  if (!res.ok) return null;
+  const data = await res.json();
+  if (!data.access_token) return null;
+  return {
+    access_token: data.access_token,
+    refresh_token: data.refresh_token,
+    expires_at: data.expires_in ? Date.now() + data.expires_in * 1e3 : void 0
+  };
+}
+async function ensureBrightsyLocalConfigFresh(opts) {
+  let cfg;
+  try {
+    cfg = loadBrightsyConfig();
+  } catch {
+    return null;
+  }
+  if (!cfg.refresh_token || !brightsyAccessTokenNeedsRefresh(cfg.expires_at)) {
+    return cfg;
+  }
+  const grant = await refreshBrightsyAccessToken({
+    endpoint: cfg.endpoint || "https://brightsy.ai",
+    refreshToken: cfg.refresh_token,
+    clientId: cfg.oauth_client_id,
+    fetchImpl: opts?.fetchImpl
+  });
+  if (!grant) return cfg;
+  const next = { ...cfg, ...applyGrant(cfg, grant) };
+  saveBrightsyConfig(next);
+  return next;
+}
+
+export {
+  brightsyConfigPath,
+  loadBrightsyConfig,
+  saveBrightsyConfig,
+  setHttpFetchImpl,
+  formatFetchError,
+  httpFetch,
+  brightsyAccessTokenNeedsRefresh,
+  refreshBrightsyAccessToken,
+  ensureBrightsyLocalConfigFresh
+};

package/dist/{chunk-IUJOI7KK.js → chunk-FSCQXMGI.js}

@@ -211,11 +211,40 @@ function humanizeAgentFailDetail(detail) {
 }
 function turnFailChatText(opts) {
   const chat = opts.assistantText.trim();
-  if (chat) return chat;
-  if (opts.exitCode === 0) return "";
+  if (opts.exitCode === 0) return chat;
   const detail = opts.detail.trim();
-  if (detail) return humanizeAgentFailDetail(detail);
-  return formatTurnExitError(opts.exitCode ?? 1, "");
+  const fail = detail ? humanizeAgentFailDetail(detail) : formatTurnExitError(opts.exitCode ?? 1, "");
+  if (!chat) return fail;
+  const failCore = fail.replace(/^exit\s*\d+:\s*/i, "").trim();
+  if (looksLikeAgentFailureMessage(chat) || failCore && chat.includes(failCore) || chat.includes(fail)) {
+    return chat;
+  }
+  return `${chat}
+
+${fail}`;
+}
+function shouldFeedErrorBackToAgent(opts) {
+  const detail = opts.detail.trim();
+  const chat = (opts.assistantText ?? "").trim();
+  if (looksLikeAgentFailureMessage(detail) || looksLikeAgentFailureMessage(chat)) {
+    return false;
+  }
+  if (looksLikeInvalidAgentSession(detail) || looksLikeV8Oom(detail) || looksLikeRetryableRunnerCrash(detail)) {
+    return true;
+  }
+  if (/without details|segfault|sig(?:segv|abrt|ill)|fatal error/i.test(detail)) {
+    return true;
+  }
+  return !chat && (opts.partsCount ?? 0) === 0;
+}
+function formatAgentErrorContinuePrompt(detail) {
+  const fail = humanizeAgentFailDetail(detail.trim()) || "the agent process exited without details";
+  return [
+    "The previous agent process ended before it finished. Error:",
+    fail,
+    "",
+    "Continue from where you left off. Use the error to recover \u2014 do not restart the whole task unless the error requires it. If you cannot continue, say why."
+  ].join("\n");
 }
 function formatTurnExitError(exitCode, stderrSummary) {
   const code = exitCode ?? 1;
@@ -860,6 +889,8 @@ export {
   looksLikeAgentFailureMessage,
   fallbackTurnFailDetail,
   turnFailChatText,
+  shouldFeedErrorBackToAgent,
+  formatAgentErrorContinuePrompt,
   formatTurnExitError,
   packagedCursorRunnerPath,
   packagedMcpStdioPath,

package/dist/{chunk-YMRT2DU6.js → chunk-LLX3OMHU.js}

@@ -1,5 +1,12 @@
 #!/usr/bin/env node
 
+import {
+  brightsyAccessTokenNeedsRefresh,
+  ensureBrightsyLocalConfigFresh,
+  loadBrightsyConfig,
+  refreshBrightsyAccessToken,
+  saveBrightsyConfig
+} from "./chunk-R7FGPBKL.js";
 import {
   run
 } from "./chunk-KPIYENTF.js";
@@ -8,33 +15,8 @@ import {
 } from "./chunk-BD2ICC4D.js";
 
 // src/brightsy/connected-teams.ts
-import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
-import { join as join2 } from "path";
-
-// src/brightsy/config.ts
-import { existsSync, readFileSync, writeFileSync } from "fs";
-import { homedir } from "os";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
 import { join } from "path";
-function brightsyConfigPath() {
-  return join(homedir(), ".brightsy", "config.json");
-}
-function loadBrightsyConfig() {
-  const path = brightsyConfigPath();
-  if (!existsSync(path)) {
-    throw new Error("Brightsy not logged in \u2014 run `brightsy login` first");
-  }
-  const raw = JSON.parse(readFileSync(path, "utf8"));
-  if (!raw.access_token || !raw.account_id) {
-    throw new Error("Brightsy config incomplete \u2014 run `brightsy login`");
-  }
-  return raw;
-}
-function saveBrightsyConfig(cfg) {
-  writeFileSync(brightsyConfigPath(), `${JSON.stringify(cfg, null, 2)}
-`, {
-    mode: 384
-  });
-}
 
 // src/brightsy/accounts.ts
 async function runBrightsyTeamsJson(args) {
@@ -78,13 +60,13 @@ async function performBrightsyAccountSwitch(accountIdOrSlug) {
 
 // src/brightsy/connected-teams.ts
 function storePath() {
-  return join2(appDataDir(), "brightsy-teams.json");
+  return join(appDataDir(), "brightsy-teams.json");
 }
 function readStore() {
   const path = storePath();
-  if (!existsSync2(path)) return [];
+  if (!existsSync(path)) return [];
   try {
-    const parsed = JSON.parse(readFileSync2(path, "utf8"));
+    const parsed = JSON.parse(readFileSync(path, "utf8"));
     return Array.isArray(parsed.teams) ? parsed.teams : [];
   } catch {
     return [];
@@ -93,7 +75,7 @@ function readStore() {
 function writeStore(teams) {
   mkdirSync(appDataDir(), { recursive: true });
   const path = storePath();
-  writeFileSync2(path, `${JSON.stringify({ teams }, null, 2)}
+  writeFileSync(path, `${JSON.stringify({ teams }, null, 2)}
 `, {
     mode: 384
   });
@@ -129,7 +111,6 @@ function applyConnectedTeamToCli(team) {
 }
 async function refreshTeamToken(team) {
   if (!team.refresh_token) return team;
-  const endpoint = (team.endpoint || "https://brightsy.ai").replace(/\/$/, "");
   const cfg = (() => {
     try {
       return loadBrightsyConfig();
@@ -137,39 +118,34 @@ async function refreshTeamToken(team) {
       return null;
     }
   })();
-  const clientId = cfg?.oauth_client_id || "brightsy-cli";
-  const res = await fetch(`${endpoint}/oauth/token`, {
-    method: "POST",
-    headers: { "Content-Type": "application/x-www-form-urlencoded" },
-    body: new URLSearchParams({
-      grant_type: "refresh_token",
-      refresh_token: team.refresh_token,
-      client_id: clientId
-    })
+  const grant = await refreshBrightsyAccessToken({
+    endpoint: team.endpoint || "https://brightsy.ai",
+    refreshToken: team.refresh_token,
+    clientId: cfg?.oauth_client_id
   });
-  if (!res.ok) return team;
-  const data = await res.json();
-  if (!data.access_token) return team;
+  if (!grant) return team;
   return {
     ...team,
-    access_token: data.access_token,
-    refresh_token: data.refresh_token || team.refresh_token,
-    expires_at: data.expires_in ? Date.now() + data.expires_in * 1e3 : team.expires_at
+    access_token: grant.access_token,
+    refresh_token: grant.refresh_token || team.refresh_token,
+    expires_at: grant.expires_at ?? team.expires_at
   };
 }
 async function ensureConnectedBrightsyTeamTokens() {
+  await ensureBrightsyLocalConfigFresh().catch(() => null);
   const teams = readStore();
   if (teams.length === 0) return [];
   const next = [];
   let changed = false;
   for (const team of teams) {
-    const expired = typeof team.expires_at === "number" && Date.now() >= team.expires_at - 6e4;
-    if (!expired) {
+    if (!team.refresh_token || !brightsyAccessTokenNeedsRefresh(team.expires_at)) {
       next.push(team);
       continue;
     }
     const refreshed = await refreshTeamToken(team);
-    if (refreshed.access_token !== team.access_token) changed = true;
+    if (refreshed.access_token !== team.access_token || refreshed.refresh_token !== team.refresh_token || refreshed.expires_at !== team.expires_at) {
+      changed = true;
+    }
     next.push(refreshed);
   }
   if (changed) writeStore(next);
@@ -257,7 +233,6 @@ function brightsyMcpServerName(slug) {
 }
 
 export {
-  loadBrightsyConfig,
   listConnectedBrightsyTeams,
   getConnectedBrightsyTeamsRaw,
   applyConnectedTeamToCli,

package/dist/{chunk-NV73AO7Q.js → chunk-MGYCQAZ6.js}

@@ -2,9 +2,11 @@ import {
   applyConnectedTeamToCli,
   brightsyMcpServerName,
   ensureCliTeamTracked,
-  ensureConnectedBrightsyTeamTokens,
+  ensureConnectedBrightsyTeamTokens
+} from "./chunk-SIPDL62B.js";
+import {
   loadBrightsyConfig
-} from "./chunk-EKIDHL2T.js";
+} from "./chunk-AQESMTCZ.js";
 import {
   isOrchestratorThread
 } from "./chunk-HULESWLI.js";
@@ -20,7 +22,7 @@ import {
   packagedMcpStdioPath,
   parseCursorRunnerLine,
   resolveNodeLaunch
-} from "./chunk-IUJOI7KK.js";
+} from "./chunk-FSCQXMGI.js";
 import {
   codexUnattendedGitConfigArgs,
   mergeAgentGitAuthEnv,
@@ -1174,6 +1176,7 @@ function teamEnv(team) {
   const endpoint = (team.endpoint || "https://brightsy.ai").replace(/\/$/, "");
   return {
     BRIGHTSY_API_TOKEN: team.access_token,
+    ...team.refresh_token ? { BRIGHTSY_REFRESH_TOKEN: team.refresh_token } : {},
     BRIGHTSY_ACCOUNT_ID: team.id,
     BRIGHTSY_API_URL: endpoint
   };
@@ -1439,11 +1442,17 @@ var CLAUDE_CHROME_ALLOWED_TOOLS = [
   "Skill(claude-in-chrome)"
 ];
 var CLAUDE_PROMPT_ARG_MAX = 2e5;
+var mcpListCache = null;
 async function loadMcpServers() {
+  if (mcpListCache && Date.now() - mcpListCache.at < 3e4) {
+    return mcpListCache.servers;
+  }
   const claude = resolveClaudeExecutable();
   const mcpText = await run(claude, ["mcp", "list"], { reject: false });
-  return parseMcpList(`${mcpText.stdout}
+  const servers = parseMcpList(`${mcpText.stdout}
 ${mcpText.stderr}`);
+  mcpListCache = { at: Date.now(), servers };
+  return servers;
 }
 function usageFromClaude(usage) {
   if (!usage) return null;
@@ -2704,10 +2713,13 @@ var opencodeAdapter = {
         const part = obj.part;
         const id = part?.tool_use_id ?? part?.id ?? obj.tool_use_id ?? obj.id;
         if (!id) return null;
+        const flagged = obj.isError === true || obj.is_error === true;
+        const errText = formatUnknownDetail(obj.error);
         return {
           type: "tool_result",
           id,
-          content: part?.output ?? part?.content ?? obj.output ?? obj.content
+          content: part?.output ?? part?.content ?? obj.output ?? obj.content ?? (errText || void 0),
+          isError: flagged || Boolean(errText)
         };
       }
       if (obj.type === "step_finish" || obj.type === "step-finish") {

package/dist/{chunk-ZMUOPTKZ.js → chunk-PK4PQUPU.js}

@@ -4,9 +4,11 @@ import {
   applyConnectedTeamToCli,
   brightsyMcpServerName,
   ensureCliTeamTracked,
-  ensureConnectedBrightsyTeamTokens,
+  ensureConnectedBrightsyTeamTokens
+} from "./chunk-LLX3OMHU.js";
+import {
   loadBrightsyConfig
-} from "./chunk-YMRT2DU6.js";
+} from "./chunk-R7FGPBKL.js";
 import {
   isOrchestratorThread
 } from "./chunk-MNL4FSKY.js";
@@ -353,11 +355,40 @@ function humanizeAgentFailDetail(detail) {
 }
 function turnFailChatText(opts) {
   const chat = opts.assistantText.trim();
-  if (chat) return chat;
-  if (opts.exitCode === 0) return "";
+  if (opts.exitCode === 0) return chat;
   const detail = opts.detail.trim();
-  if (detail) return humanizeAgentFailDetail(detail);
-  return formatTurnExitError(opts.exitCode ?? 1, "");
+  const fail = detail ? humanizeAgentFailDetail(detail) : formatTurnExitError(opts.exitCode ?? 1, "");
+  if (!chat) return fail;
+  const failCore = fail.replace(/^exit\s*\d+:\s*/i, "").trim();
+  if (looksLikeAgentFailureMessage(chat) || failCore && chat.includes(failCore) || chat.includes(fail)) {
+    return chat;
+  }
+  return `${chat}
+
+${fail}`;
+}
+function shouldFeedErrorBackToAgent(opts) {
+  const detail = opts.detail.trim();
+  const chat = (opts.assistantText ?? "").trim();
+  if (looksLikeAgentFailureMessage(detail) || looksLikeAgentFailureMessage(chat)) {
+    return false;
+  }
+  if (looksLikeInvalidAgentSession(detail) || looksLikeV8Oom(detail) || looksLikeRetryableRunnerCrash(detail)) {
+    return true;
+  }
+  if (/without details|segfault|sig(?:segv|abrt|ill)|fatal error/i.test(detail)) {
+    return true;
+  }
+  return !chat && (opts.partsCount ?? 0) === 0;
+}
+function formatAgentErrorContinuePrompt(detail) {
+  const fail = humanizeAgentFailDetail(detail.trim()) || "the agent process exited without details";
+  return [
+    "The previous agent process ended before it finished. Error:",
+    fail,
+    "",
+    "Continue from where you left off. Use the error to recover \u2014 do not restart the whole task unless the error requires it. If you cannot continue, say why."
+  ].join("\n");
 }
 function formatTurnExitError(exitCode, stderrSummary) {
   const code = exitCode ?? 1;
@@ -1495,6 +1526,7 @@ function teamEnv(team) {
   const endpoint = (team.endpoint || "https://brightsy.ai").replace(/\/$/, "");
   return {
     BRIGHTSY_API_TOKEN: team.access_token,
+    ...team.refresh_token ? { BRIGHTSY_REFRESH_TOKEN: team.refresh_token } : {},
     BRIGHTSY_ACCOUNT_ID: team.id,
     BRIGHTSY_API_URL: endpoint
   };
@@ -1757,11 +1789,17 @@ var CLAUDE_CHROME_ALLOWED_TOOLS = [
   "Skill(claude-in-chrome)"
 ];
 var CLAUDE_PROMPT_ARG_MAX = 2e5;
+var mcpListCache = null;
 async function loadMcpServers() {
+  if (mcpListCache && Date.now() - mcpListCache.at < 3e4) {
+    return mcpListCache.servers;
+  }
   const claude = resolveClaudeExecutable();
   const mcpText = await run(claude, ["mcp", "list"], { reject: false });
-  return parseMcpList(`${mcpText.stdout}
+  const servers = parseMcpList(`${mcpText.stdout}
 ${mcpText.stderr}`);
+  mcpListCache = { at: Date.now(), servers };
+  return servers;
 }
 function usageFromClaude(usage) {
   if (!usage) return null;
@@ -3295,10 +3333,13 @@ var opencodeAdapter = {
         const part = obj.part;
         const id = part?.tool_use_id ?? part?.id ?? obj.tool_use_id ?? obj.id;
         if (!id) return null;
+        const flagged = obj.isError === true || obj.is_error === true;
+        const errText = formatUnknownDetail(obj.error);
         return {
           type: "tool_result",
           id,
-          content: part?.output ?? part?.content ?? obj.output ?? obj.content
+          content: part?.output ?? part?.content ?? obj.output ?? obj.content ?? (errText || void 0),
+          isError: flagged || Boolean(errText)
         };
       }
       if (obj.type === "step_finish" || obj.type === "step-finish") {
@@ -3822,6 +3863,8 @@ export {
   looksLikeAgentFailureMessage,
   fallbackTurnFailDetail,
   turnFailChatText,
+  shouldFeedErrorBackToAgent,
+  formatAgentErrorContinuePrompt,
   formatTurnExitError,
   sumUsageList,
   applyTurnUsage,

package/dist/chunk-R7FGPBKL.js

@@ -0,0 +1,126 @@
+#!/usr/bin/env node
+
+
+// src/http/fetch.ts
+var injected = null;
+function formatFetchError(err, url) {
+  if (!(err instanceof Error)) return `${String(err)} (${url})`;
+  const cause = err.cause;
+  let detail = "";
+  if (cause instanceof Error) {
+    const code = typeof cause.code === "string" ? cause.code : void 0;
+    detail = code ? ` [${code}: ${cause.message}]` : ` [${cause.message}]`;
+  } else if (cause != null) {
+    detail = ` [${String(cause)}]`;
+  }
+  return `${err.message}${detail} (${url})`;
+}
+async function httpFetch(input, init) {
+  const url = typeof input === "string" ? input : input.href;
+  const fn = injected ?? globalThis.fetch.bind(globalThis);
+  try {
+    return await fn(url, init);
+  } catch (err) {
+    throw new Error(formatFetchError(err, url));
+  }
+}
+
+// src/brightsy/config.ts
+import { existsSync, readFileSync, writeFileSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+function brightsyConfigPath() {
+  const override = process.env.BRIGHTSY_CONFIG?.trim();
+  if (override) return override;
+  return join(homedir(), ".brightsy", "config.json");
+}
+function loadBrightsyConfig() {
+  const path = brightsyConfigPath();
+  if (!existsSync(path)) {
+    throw new Error("Brightsy not logged in \u2014 run `brightsy login` first");
+  }
+  const raw = JSON.parse(readFileSync(path, "utf8"));
+  if (!raw.access_token || !raw.account_id) {
+    throw new Error("Brightsy config incomplete \u2014 run `brightsy login`");
+  }
+  return raw;
+}
+function saveBrightsyConfig(cfg) {
+  writeFileSync(brightsyConfigPath(), `${JSON.stringify(cfg, null, 2)}
+`, {
+    mode: 384
+  });
+}
+
+// src/brightsy/oauth.ts
+var REFRESH_SKEW_MS = 6e4;
+function brightsyAccessTokenNeedsRefresh(expiresAt, now = Date.now()) {
+  if (typeof expiresAt !== "number" || !Number.isFinite(expiresAt) || expiresAt <= 0) {
+    return true;
+  }
+  return now >= expiresAt - REFRESH_SKEW_MS;
+}
+function applyGrant(current, grant) {
+  return {
+    access_token: grant.access_token,
+    refresh_token: grant.refresh_token || current.refresh_token,
+    expires_at: grant.expires_at ?? current.expires_at
+  };
+}
+async function refreshBrightsyAccessToken(opts) {
+  const endpoint = (opts.endpoint || "https://brightsy.ai").replace(/\/$/, "");
+  const url = `${endpoint}/oauth/token`;
+  const fetchImpl = opts.fetchImpl ?? globalThis.fetch.bind(globalThis);
+  let res;
+  try {
+    res = await fetchImpl(url, {
+      method: "POST",
+      headers: { "Content-Type": "application/x-www-form-urlencoded" },
+      body: new URLSearchParams({
+        grant_type: "refresh_token",
+        refresh_token: opts.refreshToken,
+        client_id: opts.clientId || "brightsy-cli"
+      })
+    });
+  } catch (err) {
+    throw new Error(formatFetchError(err, url));
+  }
+  if (!res.ok) return null;
+  const data = await res.json();
+  if (!data.access_token) return null;
+  return {
+    access_token: data.access_token,
+    refresh_token: data.refresh_token,
+    expires_at: data.expires_in ? Date.now() + data.expires_in * 1e3 : void 0
+  };
+}
+async function ensureBrightsyLocalConfigFresh(opts) {
+  let cfg;
+  try {
+    cfg = loadBrightsyConfig();
+  } catch {
+    return null;
+  }
+  if (!cfg.refresh_token || !brightsyAccessTokenNeedsRefresh(cfg.expires_at)) {
+    return cfg;
+  }
+  const grant = await refreshBrightsyAccessToken({
+    endpoint: cfg.endpoint || "https://brightsy.ai",
+    refreshToken: cfg.refresh_token,
+    clientId: cfg.oauth_client_id,
+    fetchImpl: opts?.fetchImpl
+  });
+  if (!grant) return cfg;
+  const next = { ...cfg, ...applyGrant(cfg, grant) };
+  saveBrightsyConfig(next);
+  return next;
+}
+
+export {
+  loadBrightsyConfig,
+  saveBrightsyConfig,
+  httpFetch,
+  brightsyAccessTokenNeedsRefresh,
+  refreshBrightsyAccessToken,
+  ensureBrightsyLocalConfigFresh
+};