@sideboard-ai/core 0.1.149 → 0.1.150

package/dist/{chunk-TZWO7J4W.js → chunk-DXCNW2JF.js}

@@ -12,6 +12,7 @@ import {
   formatTurnExitError,
   getAdapter,
   isBrightsyNdjsonLine,
+  isInternalAgentStatusText,
   isPollWrapperToolName,
   isSessionQuotaLimit,
   liveActivitySummary,
@@ -32,21 +33,13 @@ import {
   summarizeTurnStderr,
   toolDescription,
   turnFailChatText
-} from "./chunk-Q5DHVMXB.js";
+} from "./chunk-YGGBJY5A.js";
 import {
   addWorkspace,
   ensureWorkspace,
   removeWorkspace,
   syncWorkspacesFromThreads
-} from "./chunk-Q62SDB53.js";
-import {
-  extractPresentedPlan,
-  readPlanFile,
-  writePlanFile
-} from "./chunk-N5PM7HGQ.js";
-import {
-  releaseCaffeinateHoldForThread
-} from "./chunk-KLBOWJ74.js";
+} from "./chunk-QGJHIJHV.js";
 import {
   assertOrchestratorCapableAgent,
   attachmentsFromWorktreePaths,
@@ -63,14 +56,22 @@ import {
   persistPendingFileAttachments,
   stageAbsolutePathsAsAttachments,
   stageBuffersAsAttachments
-} from "./chunk-N3VNOFXQ.js";
+} from "./chunk-VO4SPEBS.js";
+import {
+  extractPresentedPlan,
+  readPlanFile,
+  writePlanFile
+} from "./chunk-W6N6GQME.js";
+import {
+  releaseCaffeinateHoldForThread
+} from "./chunk-KLBOWJ74.js";
 import {
   SLACK_REPLY_FORMATTING,
   coordinatorSystemPrompt,
   coordinatorTurnReminder,
   enrichWorkspacesWithGithub,
   ensureGlobalCoordinatorCwd
-} from "./chunk-ZVYLEF72.js";
+} from "./chunk-DMRIZR6M.js";
 import {
   addPrStackLayer,
   allocateTeamName,
@@ -118,11 +119,11 @@ import {
   withRepoGitLock,
   worktreeDisplayLabelForGroup,
   worktreeNameFromPath
-} from "./chunk-JTPDWTWJ.js";
+} from "./chunk-Z2PVJKMN.js";
 import {
   ATTACHMENTS_DIR,
   LEGACY_ATTACHMENTS_DIR
-} from "./chunk-B3SJXYIJ.js";
+} from "./chunk-Y7YBWWIG.js";
 import {
   appendMessage,
   createEmptyThread,
@@ -135,6 +136,9 @@ import {
   withThreadLock,
   writeThread
 } from "./chunk-EUXOHTUK.js";
+import {
+  ensureWorktreeSideboardIgnored
+} from "./chunk-VSFGPWCQ.js";
 import {
   clearStaleIndexLocks,
   enrichPathWithNpmGlobalBin,
@@ -142,7 +146,7 @@ import {
   git,
   resolveGitDirsForLockRecovery,
   run
-} from "./chunk-KPIYENTF.js";
+} from "./chunk-FNQNJOHY.js";
 import {
   childEnvWithAppSettings,
   getIssueSource,
@@ -158,7 +162,7 @@ import {
   stripNestedElectronEnv,
   updateAdvancedSettings,
   writeSecureJson
-} from "./chunk-BGQBELGJ.js";
+} from "./chunk-CZD4NRDZ.js";
 import {
   writePrivateFile
 } from "./chunk-NSTQ6QKD.js";
@@ -391,7 +395,7 @@ async function continueSourceThread(threadId, prompt) {
       await continueOnReply(threadId, prompt);
       return;
     }
-    const { getOrchestrator: getOrchestrator2 } = await import("./orchestrator-6TXQWBXN.js");
+    const { getOrchestrator: getOrchestrator2 } = await import("./orchestrator-GZE4X3XV.js");
     await getOrchestrator2().send(threadId, prompt);
   } catch {
   }
@@ -732,9 +736,9 @@ async function spawnAgentTurn(thread, input, onEvent) {
       `Cannot spawn ${thread.agent}: thread ${thread.id} has no worktreePath`
     );
   }
-  const { isGlobalThread: isGlobalThread2 } = await import("./global-workspace-2SIPM4PW.js");
+  const { isGlobalThread: isGlobalThread2 } = await import("./global-workspace-4QHDAD2D.js");
   if (isGlobalThread2(thread)) {
-    const { ensureGlobalCoordinatorCwd: ensureGlobalCoordinatorCwd2 } = await import("./coordinator-prompt-5GXGBGEZ.js");
+    const { ensureGlobalCoordinatorCwd: ensureGlobalCoordinatorCwd2 } = await import("./coordinator-prompt-UCQJTFA7.js");
     ensureGlobalCoordinatorCwd2(
       isOrchestratorThread(thread) ? { orchestratorThreadId: thread.id } : void 0
     );
@@ -1966,6 +1970,7 @@ async function runConventionSetup(repoPath, worktreePath, onLine, opts) {
   };
 }
 async function runWorkspaceSetup(repoPath, worktreePath, onLine, opts) {
+  await ensureWorktreeSideboardIgnored(worktreePath);
   const reviewSkill = ensureReviewSkillFile(worktreePath);
   if (reviewSkill.wrote) {
     onLine?.(
@@ -2874,7 +2879,7 @@ async function createThread(input, _onSetupLine) {
   });
   await requireAgent(resolved.agent);
   if (input.cowboy) {
-    const { cowboyModeEnabled } = await import("./app-settings-ZCN632OJ.js");
+    const { cowboyModeEnabled } = await import("./app-settings-J3JBCUOT.js");
     if (!cowboyModeEnabled()) {
       throw new Error(
         "Cowboy mode is off. Enable it in Settings \u2192 Advanced."
@@ -2932,7 +2937,7 @@ async function createThread(input, _onSetupLine) {
   let sourceIsFork = false;
   if (!input.cowboy && sourceType === "branch" && (!sourceRef || sourceRef === "HEAD" || sourceRef === "default")) {
     if (isAbleTimeConnected() && getIssueSource() === "abletime") {
-      const { ensureAbleTimeTask, issueAttachmentForAbleTimeTask } = await import("./abletime-DI55AJX3.js");
+      const { ensureAbleTimeTask, issueAttachmentForAbleTimeTask } = await import("./abletime-CLC5UJC2.js");
       const task = await ensureAbleTimeTask({
         title: title?.trim() || "Untitled work",
         description: input.prompt?.trim() || void 0
@@ -3005,7 +3010,7 @@ async function createThread(input, _onSetupLine) {
   return readThread(thread.id) ?? thread;
 }
 async function listLinearIssues(agent, repoPath) {
-  const { getAdapter: getAdapter2 } = await import("./agents-V4MTDWXS.js");
+  const { getAdapter: getAdapter2 } = await import("./agents-YWBQXOA2.js");
   await requireAgent(agent, { requireLinear: true });
   const adapter = getAdapter2(agent);
   if (!adapter.listLinearIssues) {
@@ -3397,7 +3402,7 @@ async function adoptThread(input) {
     throw new Error(`Worktree not found: ${input.worktreePath}`);
   }
   const repoPath = await resolveRepoRoot(input.worktreePath);
-  const { stdout: branch } = await import("./run-USF6FRKV.js").then(
+  const { stdout: branch } = await import("./run-EBWL2Q4N.js").then(
     ({ git: git2 }) => git2(["rev-parse", "--abbrev-ref", "HEAD"], input.worktreePath)
   );
   const thread = createEmptyThread({
@@ -3412,8 +3417,10 @@ async function adoptThread(input) {
     messages: input.messages ?? []
   });
   writeThread(thread);
-  const { ensureWorkspace: ensureWorkspace2 } = await import("./workspaces-UUJNOO4T.js");
+  const { ensureWorkspace: ensureWorkspace2 } = await import("./workspaces-7S7QKCUE.js");
   await ensureWorkspace2(repoPath);
+  const { ensureWorktreeSideboardIgnored: ensureWorktreeSideboardIgnored2 } = await import("./worktree-exclude-6MQWGWV5.js");
+  await ensureWorktreeSideboardIgnored2(input.worktreePath);
   return thread;
 }
 function listConductorWorkspaces() {
@@ -4709,7 +4716,7 @@ async function confirmLand(thread, opts) {
   if (preview.dirty) {
     committed = await commitAll(thread.worktreePath, meta.commitMessage);
   }
-  const { git: git2 } = await import("./run-USF6FRKV.js");
+  const { git: git2 } = await import("./run-EBWL2Q4N.js");
   const { stdout: headOut } = await git2(
     ["rev-parse", "--abbrev-ref", "HEAD"],
     thread.worktreePath,
@@ -5162,11 +5169,11 @@ function formatWorktreeDirective(thread, opts) {
     );
   } else if (opts?.githubSlug) {
     lines.push(
-      `- Prefer a draft PR first: \`gh pr create --draft -R ${opts.githubSlug}\` (or update via \`gh pr edit -R ${opts.githubSlug}\`) once the change set is coherent. Always pass \`-R ${opts.githubSlug}\` (this worktree's origin). Bare \`gh pr create\` may target upstream instead of origin on dual-remote checkouts. Mark ready for review only when asked. Title/body must reflect the change purpose, not the worktree name.`
+      `- Prefer a draft PR first: \`gh pr create --draft -R ${opts.githubSlug}\` (or update via \`gh pr edit -R ${opts.githubSlug}\`) once the change set is coherent. Always pass \`-R ${opts.githubSlug}\` (this worktree's origin). Bare \`gh pr create\` may target upstream instead of origin on dual-remote checkouts. Mark ready for review only when asked. Title/body must reflect the change purpose, not the worktree name. If GitHub rejects the GraphQL body as too long, retry with a short \`--body-file\` (limit 65,536 characters) \u2014 do not paste a changelog or diff into \`--body\`.`
     );
   } else {
     lines.push(
-      "- Prefer a draft PR first: `gh pr create --draft -R <origin-owner/name>` (or update via `gh pr edit -R \u2026`) once the change set is coherent. Resolve `<origin-owner/name>` with `git remote get-url origin` in this worktree \u2014 never from `upstream`. Mark ready for review only when asked. Title/body must reflect the change purpose, not the worktree name."
+      "- Prefer a draft PR first: `gh pr create --draft -R <origin-owner/name>` (or update via `gh pr edit -R \u2026`) once the change set is coherent. Resolve `<origin-owner/name>` with `git remote get-url origin` in this worktree \u2014 never from `upstream`. Mark ready for review only when asked. Title/body must reflect the change purpose, not the worktree name. If GitHub rejects the GraphQL body as too long, retry with a short `--body-file` (limit 65,536 characters) \u2014 do not paste a changelog or diff into `--body`."
     );
   }
   lines.push("");
@@ -5611,7 +5618,7 @@ function formatScheduledPrompt(name, prompt) {
 ${prompt}`;
 }
 async function defaultDeps() {
-  const { getOrchestrator: getOrchestrator2, startOrchestration: startOrchestration2 } = await import("./orchestrator-6TXQWBXN.js");
+  const { getOrchestrator: getOrchestrator2, startOrchestration: startOrchestration2 } = await import("./orchestrator-GZE4X3XV.js");
   const orch = getOrchestrator2();
   return {
     findThread: (id) => findThreadByRef(id),
@@ -5715,6 +5722,7 @@ function armSchedules() {
 }
 
 // src/orchestrator/orchestrator.ts
+var LIVE_TURN_SPAWN_GRACE_MS = 15e3;
 function isPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
   try {
@@ -5793,6 +5801,39 @@ var Orchestrator = class {
     if (typeof pid === "number" && pid > 0 && isPidAlive(pid)) return false;
     return true;
   }
+  /**
+   * Whether a child is actually turning — not leftover disk `running` after
+   * the process died. Coordinators were telling users “Agent is running.
+   * Waiting for gate to pass” from stale stillRunning.
+   */
+  threadLooksLive(thread) {
+    if (thread.status === "queued") {
+      if (this.draining.has(thread.id) || this.startingTurns.has(thread.id)) return true;
+      return thread.queue.length > 0;
+    }
+    if (thread.status !== "running") return false;
+    if (this.activeTurns.has(thread.id) || this.startingTurns.has(thread.id)) return true;
+    const pid = thread.agentPid;
+    if (typeof pid === "number" && pid > 0 && isPidAlive(pid)) return true;
+    const updated = Date.parse(thread.updatedAt ?? "");
+    if (Number.isFinite(updated) && Date.now() - updated < LIVE_TURN_SPAWN_GRACE_MS) return true;
+    return false;
+  }
+  /** Desktop-only: persist idle/stopped when MCP would otherwise keep reporting live. */
+  healStaleReportedActivity(thread) {
+    if (!thisProcessShouldDrainAgentQueues()) return thread;
+    if (this.threadLooksLive(thread)) return thread;
+    if (thread.status === "running") {
+      this.healStaleRunningTurns();
+      return readThread(thread.id) ?? thread;
+    }
+    if (thread.status === "queued" && thread.queue.length === 0 && !this.activeTurns.has(thread.id) && !this.startingTurns.has(thread.id) && !this.draining.has(thread.id)) {
+      setStatus(thread.id, "idle");
+      this.emit({ type: "status_changed", threadId: thread.id, status: "idle" });
+      return readThread(thread.id) ?? thread;
+    }
+    return thread;
+  }
   async reconcile(repoPath, opts) {
     const reclaimStaleTurns = opts?.reclaimStaleTurns === true;
     const drainQueues = opts?.drainQueues !== false;
@@ -5836,7 +5877,7 @@ var Orchestrator = class {
           orphans: orphans.map((o) => ({ path: o.path, repoPath: o.repoPath }))
         });
       }
-      const { autoCleanupOrphansEnabled } = await import("./app-settings-ZCN632OJ.js");
+      const { autoCleanupOrphansEnabled } = await import("./app-settings-J3JBCUOT.js");
       if (autoCleanupOrphansEnabled() && shouldRunWorktreeCleanup() && orphans.length > 0) {
         await cleanupOrphanWorktrees({ repoPaths });
       }
@@ -6076,7 +6117,7 @@ var Orchestrator = class {
     }
     await setup;
     if (skipSetup) return;
-    const { autoRunAfterSetupEnabled } = await import("./app-settings-ZCN632OJ.js");
+    const { autoRunAfterSetupEnabled } = await import("./app-settings-J3JBCUOT.js");
     if (autoRunAfterSetupEnabled()) {
       try {
         await this.startDev(threadId);
@@ -6127,12 +6168,14 @@ var Orchestrator = class {
     this.emit({ type: "status_changed", threadId: thread.id, status: thread.status });
     return thread;
   }
-  async send(threadRef, prompt) {
+  async send(threadRef, prompt, opts) {
     const thread = this.requireThread(threadRef);
     if (thread.status === "archived") {
       throw new Error(`Thread is archived: ${thread.id}`);
     }
-    return withThreadLock(thread.id, async () => {
+    const followUp = opts?.followUp === "steer" ? "steer" : "queue";
+    let shouldSteer = false;
+    const sent = await withThreadLock(thread.id, async () => {
       const current = this.requireThread(thread.id);
       if (current.status === "archived") {
         throw new Error(`Thread is archived: ${thread.id}`);
@@ -6141,6 +6184,7 @@ var Orchestrator = class {
       this.crashContinued.delete(thread.id);
       this.haltDrain.delete(thread.id);
       const inFlight = this.activeTurns.has(thread.id) || this.startingTurns.has(thread.id) || current.status === "running";
+      shouldSteer = followUp === "steer" && (inFlight || current.queue.length > 0);
       const patch = { queue };
       if (!inFlight) patch.status = "queued";
       const pid = current.agentPid;
@@ -6152,16 +6196,20 @@ var Orchestrator = class {
       if (!inFlight) {
         this.emit({ type: "status_changed", threadId: thread.id, status: "queued" });
       }
-      if (thisProcessShouldDrainAgentQueues()) {
+      if (thisProcessShouldDrainAgentQueues() && !shouldSteer) {
         void this.drainQueue(thread.id);
       }
       return this.requireThread(thread.id);
     });
+    if (shouldSteer && sent.queue.length > 0) {
+      return this.sendQueuedMessageNow(sent.id, sent.queue.length - 1);
+    }
+    return sent;
   }
-  async fanOut(threadRefs, prompt) {
+  async fanOut(threadRefs, prompt, opts) {
     const results = [];
     for (const ref of threadRefs) {
-      results.push(await this.send(ref, prompt));
+      results.push(await this.send(ref, prompt, opts));
     }
     return results;
   }
@@ -6377,7 +6425,7 @@ var Orchestrator = class {
     }
     const isBrightsy = fresh.agent === "brightsy";
     const isOrchestration = isOrchestratorThread(fresh);
-    const { autoRenameBranchEnabled, getGithubGitAuthMode } = await import("./app-settings-ZCN632OJ.js");
+    const { autoRenameBranchEnabled, getGithubGitAuthMode } = await import("./app-settings-J3JBCUOT.js");
     const gitAuthMode = getGithubGitAuthMode();
     const worktreeDirective = isBrightsy || isOrchestration ? null : formatWorktreeDirective(fresh, {
       githubSlug: await resolveGithubRepoSlug(fresh.worktreePath).catch(
@@ -6965,8 +7013,8 @@ var Orchestrator = class {
     return created;
   }
   async waitForTurn(threadRef, timeoutMs = 6e5, opts) {
-    const thread = this.requireThread(threadRef);
-    if (!["running", "queued"].includes(thread.status)) {
+    const thread = this.healStaleReportedActivity(this.requireThread(threadRef));
+    if (!this.threadLooksLive(thread)) {
       return thread;
     }
     const start = Date.now();
@@ -7003,12 +7051,13 @@ var Orchestrator = class {
         }
       });
       timer = setInterval(() => {
-        const current = readThread(thread.id);
-        if (!current) {
+        const raw = readThread(thread.id);
+        if (!raw) {
           finish(() => reject(new Error(`Thread not found: ${thread.id}`)));
           return;
         }
-        if (!["running", "queued"].includes(current.status)) {
+        const current = this.healStaleReportedActivity(raw);
+        if (!this.threadLooksLive(current)) {
           finish(() => resolve(current));
           return;
         }
@@ -7031,20 +7080,22 @@ var Orchestrator = class {
     };
   }
   getTurnResult(threadRef) {
-    const thread = this.requireThread(threadRef);
+    const thread = this.healStaleReportedActivity(this.requireThread(threadRef));
     const lastAgent = [...thread.messages].reverse().find((m) => m.role === "agent");
     const lastError = thread.lastError ?? null;
-    const text = (lastAgent?.text ?? "").trim() || (thread.status === "error" || thread.status === "stopped" || thread.status === "broken" ? lastError ?? "" : "");
-    const stillRunning = thread.status === "running" || thread.status === "queued";
+    const rawText = (lastAgent?.text ?? "").trim();
+    const text = (rawText && !isInternalAgentStatusText(rawText) ? rawText : "") || (thread.status === "error" || thread.status === "stopped" || thread.status === "broken" ? lastError ?? "" : "");
+    const stillRunning = this.threadLooksLive(thread);
     const live = stillRunning ? readTurnLive(thread.id) : null;
-    const queuedHint = thread.status === "queued" && !live?.summary ? "Queued \u2014 waiting for a concurrency slot" : null;
+    const liveSummary = live?.summary && !isInternalAgentStatusText(live.summary) ? live.summary : null;
+    const queuedHint = stillRunning && thread.status === "queued" && !liveSummary ? "Queued \u2014 waiting for a concurrency slot" : null;
     return {
       text,
       status: thread.status,
       sessionId: thread.sessionId,
       lastError,
       stillRunning,
-      progress: live?.summary ?? queuedHint,
+      progress: liveSummary ?? queuedHint,
       lastActivityAt: live?.updatedAt ?? null,
       usage: lastAgent?.usage ?? null
     };
@@ -7237,7 +7288,7 @@ var Orchestrator = class {
         updateThread(thread.id, { title: meta.title });
       }
     }
-    const { autoArchiveOnMergeEnabled } = await import("./app-settings-ZCN632OJ.js");
+    const { autoArchiveOnMergeEnabled } = await import("./app-settings-J3JBCUOT.js");
     const latest = this.requireThread(thread.id);
     if (!shouldAutoArchiveOnPrMerge({
       previousPrState: prevState || null,
@@ -7392,7 +7443,14 @@ var Orchestrator = class {
       );
     }
     if ((action === "commit-push" || action === "create-draft" || action === "create-web") && thread.worktreePath?.trim() && !await isDirty(thread.worktreePath)) {
-      await this.pushAndMaybeOpenPr(thread, action);
+      try {
+        await this.pushAndMaybeOpenPr(thread, action);
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        updateThread(thread.id, { lastError: message });
+        this.emit({ type: "error", threadId: thread.id, message });
+        throw err;
+      }
       return this.requireThread(threadRef);
     }
     let prBase;
@@ -7547,7 +7605,7 @@ var Orchestrator = class {
     this.emit({ type: "status_changed", threadId: archived.id, status: "archived" });
     if (thread.repoPath && !isGlobalRepoPath(thread.repoPath)) {
       try {
-        const { ensureWorkspace: ensureWorkspace2 } = await import("./workspaces-UUJNOO4T.js");
+        const { ensureWorkspace: ensureWorkspace2 } = await import("./workspaces-7S7QKCUE.js");
         await ensureWorkspace2(thread.repoPath);
       } catch {
       }
@@ -7574,7 +7632,7 @@ var Orchestrator = class {
           await runArchiveScript(thread.repoPath, thread.worktreePath);
         } catch {
         }
-        const { deleteBranchOnPurgeEnabled } = await import("./app-settings-ZCN632OJ.js");
+        const { deleteBranchOnPurgeEnabled } = await import("./app-settings-J3JBCUOT.js");
         const deleteBranch = opts?.deleteBranch ?? deleteBranchOnPurgeEnabled();
         await removeWorktree(thread.repoPath, thread.worktreePath, {
           deleteBranch: deleteBranch ? thread.branchName : void 0
@@ -7601,12 +7659,14 @@ var Orchestrator = class {
           `Cowboy checkout missing: ${thread.worktreePath}. Re-add the project folder, then restore.`
         );
       }
-      const { createThreadWorktree: createThreadWorktree2 } = await import("./worktree-UCWWTVLS.js");
+      const { createThreadWorktree: createThreadWorktree2 } = await import("./worktree-JIZ3QMZX.js");
       const slug = thread.worktreePath.split("/").pop();
       const dest = thread.worktreePath;
       await withRepoGitLock(thread.repoPath, async () => {
         await git(["worktree", "add", dest, thread.branchName], thread.repoPath);
       });
+      const { ensureWorktreeSideboardIgnored: ensureWorktreeSideboardIgnored2 } = await import("./worktree-exclude-6MQWGWV5.js");
+      await ensureWorktreeSideboardIgnored2(dest);
       void createThreadWorktree2;
       void slug;
     }
@@ -7709,7 +7769,7 @@ async function startOrchestration(opts) {
     sourceRef: "default",
     ...createOpts
   }).catch(async () => {
-    const { resolveDefaultBranch: resolveDefaultBranch2, resolveRepoRoot: resolveRepoRoot2 } = await import("./worktree-UCWWTVLS.js");
+    const { resolveDefaultBranch: resolveDefaultBranch2, resolveRepoRoot: resolveRepoRoot2 } = await import("./worktree-JIZ3QMZX.js");
     const repo = await resolveRepoRoot2(repoPath);
     const def = await resolveDefaultBranch2(repo);
     return orch.createThread({
@@ -7761,6 +7821,7 @@ export {
   updateSchedule,
   deleteSchedule,
   fireSchedule,
+  LIVE_TURN_SPAWN_GRACE_MS,
   isPidAlive,
   waitForPidExit,
   Orchestrator,

package/dist/{chunk-KPIYENTF.js → chunk-FNQNJOHY.js}

@@ -99,17 +99,93 @@ function withExportedPath(command, pathValue) {
   return `export PATH=${posixShellSingleQuote(pathValue)} && ${trimmed}`;
 }
 
+// src/git/github-agent-auth.ts
+import { chmodSync, existsSync as existsSync2, mkdirSync, writeFileSync } from "fs";
+import { homedir as homedir2 } from "os";
+import { dirname, join as join2 } from "path";
+function githubAgentAuthDir() {
+  const override = process.env.SIDEBOARD_GIT_AUTH_DIR?.trim();
+  if (override) return override;
+  return join2(homedir2(), ".sideboard-git-auth");
+}
+function githubCredentialStorePath() {
+  return join2(githubAgentAuthDir(), "git-credentials");
+}
+function githubGhConfigDir() {
+  return join2(githubAgentAuthDir(), "gh");
+}
+function writePrivateFile(file, body) {
+  mkdirSync(dirname(file), { recursive: true, mode: 448 });
+  try {
+    chmodSync(dirname(file), 448);
+  } catch {
+  }
+  writeFileSync(file, body, { encoding: "utf8", mode: 384 });
+  try {
+    chmodSync(file, 384);
+  } catch {
+  }
+}
+function gitCredentialStoreContents(token) {
+  return `https://x-access-token:${encodeURIComponent(token)}@github.com
+`;
+}
+function ghHostsYml(token, user = "x-access-token") {
+  const u = user.replace(/[^A-Za-z0-9._-]/g, "") || "x-access-token";
+  return [
+    "github.com:",
+    "    git_protocol: https",
+    `    user: ${u}`,
+    `    oauth_token: ${token}`,
+    "    users:",
+    `        ${u}:`,
+    `            oauth_token: ${token}`,
+    ""
+  ].join("\n");
+}
+function materializeGithubAgentAuth(token, user) {
+  const trimmed = token.trim();
+  if (!trimmed) return;
+  const root = githubAgentAuthDir();
+  mkdirSync(root, { recursive: true, mode: 448 });
+  try {
+    chmodSync(root, 448);
+  } catch {
+  }
+  writePrivateFile(githubCredentialStorePath(), gitCredentialStoreContents(trimmed));
+  const ghDir = githubGhConfigDir();
+  mkdirSync(ghDir, { recursive: true, mode: 448 });
+  writePrivateFile(join2(ghDir, "hosts.yml"), ghHostsYml(trimmed, user));
+  writePrivateFile(join2(ghDir, "config.yml"), "git_protocol: https\nprompt: disabled\n");
+}
+function githubAgentAuthReady() {
+  return existsSync2(githubCredentialStorePath()) && existsSync2(join2(githubGhConfigDir(), "hosts.yml"));
+}
+function githubCredentialHelperGitConfig() {
+  const file = githubCredentialStorePath();
+  return [
+    { key: "credential.helper", value: "" },
+    { key: "credential.helper", value: `store --file=${file}` }
+  ];
+}
+function githubGhConfigEnv() {
+  return {
+    GH_CONFIG_DIR: githubGhConfigDir(),
+    GH_PROMPT_DISABLED: "1"
+  };
+}
+
 // src/git/stale-lock.ts
-import { existsSync as existsSync2, statSync, unlinkSync } from "fs";
-import { join as join2 } from "path";
+import { existsSync as existsSync3, statSync, unlinkSync } from "fs";
+import { join as join3 } from "path";
 var STALE_INDEX_LOCK_MS = 2e4;
 function isIndexLockError(text) {
   return /Unable to create ['"][^'"]*index\.lock['"]: File exists/i.test(text);
 }
 function clearStaleIndexLock(gitDir, maxAgeMs = STALE_INDEX_LOCK_MS, now = Date.now()) {
-  const lockPath = join2(gitDir, "index.lock");
+  const lockPath = join3(gitDir, "index.lock");
   try {
-    if (!existsSync2(lockPath)) return null;
+    if (!existsSync3(lockPath)) return null;
     if (now - statSync(lockPath).mtimeMs < maxAgeMs) return null;
     unlinkSync(lockPath);
     return lockPath;
@@ -211,7 +287,10 @@ async function gh(args, cwd, opts) {
     timeoutMs: opts?.timeoutMs,
     env: {
       GH_PROMPT_DISABLED: "1",
-      GIT_TERMINAL_PROMPT: "0"
+      GIT_TERMINAL_PROMPT: "0",
+      // Isolated hosts.yml uses git_protocol: https so `gh pr create` does not
+      // shell out over SSH when Settings → Git is SSH (ask_git in Electron).
+      ...githubAgentAuthReady() ? githubGhConfigEnv() : {}
     }
   });
 }
@@ -230,6 +309,11 @@ export {
   posixShellSingleQuote,
   resolveCommandBinarySync,
   withExportedPath,
+  githubAgentAuthDir,
+  materializeGithubAgentAuth,
+  githubAgentAuthReady,
+  githubCredentialHelperGitConfig,
+  githubGhConfigEnv,
   clearStaleIndexLocks,
   run,
   resolveGitDirsForLockRecovery,

package/dist/{chunk-ED4UPEJX.js → chunk-G7SIQFBQ.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-S42XV45P.js";
 import {
   run
-} from "./chunk-KPIYENTF.js";
+} from "./chunk-FNQNJOHY.js";
 import {
   appDataDir
 } from "./chunk-BD2ICC4D.js";

package/dist/{chunk-3QRGCKYL.js → chunk-HAS5EPBS.js}

@@ -1,10 +1,10 @@
 import {
   isGlobalRepoPath
-} from "./chunk-R4JP32P5.js";
+} from "./chunk-AF6O55PJ.js";
 import {
   ensureGhPreferOrigin,
   resolveRepoRoot
-} from "./chunk-YP3CSOZ6.js";
+} from "./chunk-ZGFYFVJF.js";
 import {
   appDataDir
 } from "./chunk-QZQEXME2.js";

package/dist/{chunk-LAFA56WD.js → chunk-HEII7W3Q.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-4TR3HZFT.js";
 import {
   run
-} from "./chunk-DVM4ID64.js";
+} from "./chunk-UFHNSFAS.js";
 
 // src/agents/error-detail.ts
 function formatUnknownDetail(err) {

package/dist/{chunk-EGDRPA4B.js → chunk-NOTANBYC.js}

@@ -1,9 +1,9 @@
 import {
   resolveGithubRepoSlug
-} from "./chunk-YP3CSOZ6.js";
+} from "./chunk-ZGFYFVJF.js";
 import {
   resolveThreadDefaults
-} from "./chunk-I77RYPOH.js";
+} from "./chunk-4XNSGDXE.js";
 import {
   globalAgentCwd,
   sideboardReposDir
@@ -45,8 +45,8 @@ var COORDINATOR_TOOL_PLAYBOOK = [
   "Discover:",
   "- list_workspaces \u2014 registered repos (path + github slug when known)",
   "- list_board \u2014 Home Kanban of worktrees (New / Draft / Review / Merged; one card per checkout). Path to merge: no PR \u2192 draft PR \u2192 open PR \u2192 merged. Archive removes the card to Settings \u2192 History. Queued/running are activity on the card, not columns. Orchestration chats are not on the board. Filters: query, repoPath, kind, column, limit.",
-  "- list_branches / list_prs / list_issues \u2014 pass repoPath from list_workspaces (issues: Linear, AbleTime MCP, or GitHub Issues)",
-  "- linear_list_teams / linear_get_issue / linear_create_issue / linear_update_issue / linear_comment \u2014 Linear Account connection; call linear_list_teams for team key and workflow states; pass ENG-123 or uuid. linear_get_issue returns comments, relations, parent/children, and the rest of the issue metadata. If mutations fail with a scope error, Disconnect and Connect Linear in Account settings.",
+  "- list_branches / list_prs / list_issues \u2014 pass repoPath from list_workspaces (issues: Linear, AbleTime MCP, or GitHub Issues). list_issues accepts query and assignee (me / unassigned / all / user id) so Linear is not limited to tickets assigned to you.",
+  "- linear_list_teams / linear_search_issues / linear_get_issue / linear_create_issue / linear_update_issue / linear_comment \u2014 Linear Account connection; call linear_list_teams for team key and workflow states; pass ENG-123 or uuid. linear_search_issues finds unassigned and other people's open issues (assignee=unassigned|all|me|user). linear_get_issue returns comments, relations, parent/children, and the rest of the issue metadata. If mutations fail with a scope error, Disconnect and Connect Linear in Account settings.",
   "- abletime_orientation / abletime_list_projects / abletime_list_tasks / abletime_search_tasks / abletime_get_task / abletime_create_task / abletime_ensure_task \u2014 AbleTime Account personal access token (hosted MCP). Call orientation first. If work has no task yet, abletime_ensure_task creates one to track against (or create_thread from the default branch does that automatically when AbleTime is the preferred issue source).",
   "- list_teams / slack_list_channels / slack_list_users / slack_search / slack_read / slack_post / slack_replies \u2014 Slack workspaces from Settings \u2192 Remote; pass team_id from list_teams",
   "- Optional connectors (Vercel, Supabase, PostHog, Sentry) in Settings \u2192 Connectors inject tokens into worktree agent env when connected. Prefer official CLIs (`vercel`, `supabase`, `sentry-cli`) with those env vars. PostHog has no first-class CLI \u2014 use the HTTP API (`POSTHOG_PERSONAL_API_KEY`). If a CLI is missing, the user can Install CLI on that row (not auto-installed on Connect). Do not add vendor MCPs or ask the user to paste tokens again. Git (`gh`) stays Settings \u2192 Git; issue tracking stays Settings \u2192 Issues; Slack stays Settings \u2192 Remote (Sideboard MCP).",
@@ -65,7 +65,7 @@ var COORDINATOR_TOOL_PLAYBOOK = [
   "- fork_worktree \u2014 fork a worktree chat into a NEW git worktree + chat (transcript attached); optional agent; leave model unset (Auto) unless you have a reason. Not for orchestration chats.",
   "- fork_chat \u2014 fork a worktree chat (same worktree tab) OR a Global orchestration chat (new orchestration tab); optional agent; leave model unset (Auto) unless you have a reason. Remote coordinators: use this to continue another orchestration chat on a different agent after session limits.",
   "- send_to_thread \u2014 queue a prompt (start/continue a chat turn). force_stop: true only to replace a wrong in-flight request \u2014 never to check in, resume after a halt notice, or because wait_for_turn returned stillRunning (that kills the child mid-thought)",
-  "- wait_for_turn / get_turn_result \u2014 wait for and read the agent reply (includes last-turn usage / costUsd when the child agent reported it). wait_for_turn returns within ~45s even if the child is still working (MCP clients kill longer tool calls). If stillRunning is true, progress is a live snapshot of tools/thinking \u2014 call wait_for_turn again. status=queued with no lastActivityAt means the child has not started yet (concurrency cap) \u2014 keep waiting; do not force_stop or send a check-in. Do not send \u201Care you stuck?\u201D or assume a hang while lastActivityAt is recent. On status error, lastError (and text) is the failure \u2014 switch agent, tell the user, or retry; do not treat empty text as success. On status stopped or broken (or incomplete=true), the child was interrupted or died \u2014 resume with send_to_thread or tell the user; never treat stopped as a finished turn. Sideboard also injects a notice into this chat when a child stops unexpectedly.",
+  "- wait_for_turn / get_turn_result \u2014 wait for and read the agent reply (includes last-turn usage / costUsd when the child agent reported it). wait_for_turn returns within ~45s even if the child is still working (MCP clients kill longer tool calls). stillRunning is the source of truth \u2014 if it is false, the child is not working; do not tell the user it is running or \u201Cwaiting for a gate,\u201D even if status still says running/queued. If stillRunning is true, progress is a live snapshot of tools/thinking \u2014 call wait_for_turn again. status=queued with no lastActivityAt means the child has not started yet (concurrency cap) \u2014 keep waiting; do not force_stop or send a check-in. Do not send \u201Care you stuck?\u201D or assume a hang while lastActivityAt is recent. If stillRunning stays true across many waits with the same lastActivityAt, the child is stuck \u2014 tell the user; do not invent a gate. On status error, lastError (and text) is the failure \u2014 switch agent, tell the user, or retry; do not treat empty text as success. On status stopped or broken (or incomplete=true), the child was interrupted or died \u2014 resume with send_to_thread or tell the user; never treat stopped as a finished turn. Sideboard also injects a notice into this chat when a child stops unexpectedly.",
   "- stop_thread \u2014 force-stop: kill in-flight turn AND clear queued prompts (do not leave stale queue after an interrupt)",
   "- archive_thread / restore_thread \u2014 archive (tears down worktree when last tab) or restore",
   "Setup / run:",
@@ -74,7 +74,7 @@ var COORDINATOR_TOOL_PLAYBOOK = [
   "Inspect / review / PRs:",
   "- get_diff \u2014 compact diff summary",
   '- request_review \u2014 open a Review chat tab on a worktree thread (attaches .claude/skills/review/SKILL.md when present, else seeds that skill / local guidelines; sends "Review changes in this workspace."); then wait_for_turn (loop while stillRunning) / get_turn_result on the returned id',
-  "- ask_git \u2014 commit & push, open a draft PR, resolve conflicts, or merge. When the worktree is clean, Sideboard pushes / opens the PR itself. When dirty, it queues the worktree agent \u2014 then wait_for_turn (loop while stillRunning). Prefer this over paraphrasing.",
+  "- ask_git \u2014 commit & push, open a draft PR, resolve conflicts, or merge. When the worktree is clean, Sideboard pushes / opens the PR itself. When dirty, it queues the worktree agent \u2014 then wait_for_turn (loop while stillRunning). Prefer this over paraphrasing. If ask_git / get_thread lastError says the GraphQL/PR body is too long, the branch is already pushed \u2014 send_to_thread so the worktree agent runs `gh pr create --body-file` with a short description. Do not invent SSH or auth failures from that error.",
   '- Merge (`ask_git` action=merge / send_to_thread "Merge PR.") only when the user explicitly asked to merge that PR. Do not merge because the work looks done, CI is green, or a typical flow includes it.',
   '- Or send_to_thread with those exact phrases: "Commit and push.", "Commit, push, and open a draft PR.", "Merge the remote branch (main) into your branch and resolve conflicts. Then, commit and push your changes.", "Merge PR." (draft PRs: `gh pr create --draft -R <origin-owner/name>` using the workspace `github:` slug \u2014 never upstream). Never run git/gh from this orchestration cwd, and never merge the PR yourself.',
   "Process guides:",