@sideboard-ai/core 0.1.149 → 0.1.151

package/dist/{chunk-YP3CSOZ6.js → chunk-GE7M3QTE.js}

@@ -1,25 +1,35 @@
 import {
   isWorkspaceScratchPath
-} from "./chunk-FKOIHGKV.js";
+} from "./chunk-JRH62XC4.js";
 import {
   getGithubGitAuthMode,
   getGithubPat
-} from "./chunk-I77RYPOH.js";
+} from "./chunk-4XNSGDXE.js";
 import {
   listThreads
 } from "./chunk-TUGKX5BD.js";
 import {
   worktreesRoot
 } from "./chunk-QZQEXME2.js";
+import {
+  ensureWorktreeSideboardIgnored
+} from "./chunk-QQKDGPUI.js";
 import {
   gh,
   git,
+  githubAgentAuthDir,
+  githubAgentAuthReady,
+  githubCredentialHelperGitConfig,
+  githubGhConfigEnv,
+  materializeGithubAgentAuth,
   resolveGhAuthToken
-} from "./chunk-DVM4ID64.js";
+} from "./chunk-UFHNSFAS.js";
 
 // src/git/worktree.ts
-import { existsSync as existsSync2, readdirSync, realpathSync } from "fs";
-import { join as join2 } from "path";
+import { randomBytes } from "crypto";
+import { existsSync, readdirSync, realpathSync, unlinkSync, writeFileSync } from "fs";
+import { tmpdir } from "os";
+import { join } from "path";
 
 // src/git/team-meta.ts
 var SOCCER_TEAM_META = {
@@ -833,9 +843,23 @@ function worktreeDisplayLabelForGroup(threads) {
 }
 
 // src/git/gh-errors.ts
+var GITHUB_PR_BODY_MAX_CHARS = 65536;
+var GITHUB_PR_BODY_SAFE_CHARS = 6e4;
 function isGhRateLimitError(text) {
   return /API rate limit (already )?exceeded/i.test(text) || /rate limit exceeded/i.test(text);
 }
+function isGhPrBodyTooLongError(text) {
+  return /body is too long|body.{0,20}too long|maximum is 65536|exceeds the maximum allowed size|request (entity |is )?too large|payload too large|413 Request Entity Too Large/i.test(
+    text
+  );
+}
+function clampGithubPrBody(body, max = GITHUB_PR_BODY_SAFE_CHARS) {
+  const t = body.replace(/\s+$/u, "");
+  if (t.length <= max) return t;
+  const note = "\n\n_(truncated to fit GitHub\u2019s PR body limit)_";
+  const keep = Math.max(0, max - note.length);
+  return `${t.slice(0, keep).replace(/\s+$/u, "")}${note}`;
+}
 function formatRateLimitResetHint(resetEpochSec, nowMs = Date.now()) {
   const ms = resetEpochSec * 1e3 - nowMs;
   if (ms <= 0) return "soon";
@@ -846,18 +870,32 @@ function formatRateLimitResetHint(resetEpochSec, nowMs = Date.now()) {
   const hours = Math.ceil(mins / 60);
   return `in about ${hours} hour${hours === 1 ? "" : "s"}`;
 }
+function omitGhBodyArg(text) {
+  return text.replace(
+    /--body(?:-file)?(\s+|=)(?:'[^']*'|"[^"]*"|\S+)/g,
+    "--body <omitted>"
+  );
+}
+function capGhErrorText(text, max = 400) {
+  const t = text.trim();
+  if (t.length <= max) return t;
+  return `${t.slice(0, max - 1).trimEnd()}\u2026`;
+}
 function extractGhErrorDetail(text) {
-  const trimmed = text.trim();
+  const trimmed = omitGhBodyArg(text.trim());
   if (!trimmed) return "";
+  if (isGhPrBodyTooLongError(text) || isGhPrBodyTooLongError(trimmed)) {
+    return "GraphQL: body is too long (GitHub PR body / request size limit).";
+  }
   const graphql = trimmed.match(/\bGraphQL:\s*(.+)$/im);
-  if (graphql?.[1]) return `GraphQL: ${graphql[1].trim()}`;
+  if (graphql?.[1]) return capGhErrorText(`GraphQL: ${graphql[1].trim()}`);
   const http = trimmed.match(/\bHTTP\s+\d{3}:\s*(.+)$/im);
-  if (http?.[1]) return `HTTP: ${http[1].trim()}`;
+  if (http?.[1]) return capGhErrorText(`HTTP: ${http[1].trim()}`);
   const lines = trimmed.split(/\r?\n/).map((l) => l.trim()).filter(Boolean);
   if (lines.length > 1 && /^Command failed with exit code/i.test(lines[0])) {
-    return lines.slice(1).join(" ").trim() || lines[0];
+    return capGhErrorText(lines.slice(1).join(" ").trim() || lines[0]);
   }
-  return trimmed;
+  return capGhErrorText(trimmed);
 }
 function formatGhLandError(raw, opts) {
   const trimmed = raw.trim();
@@ -875,6 +913,10 @@ function formatGhLandError(raw, opts) {
     const hint = opts?.targetedRepo ? ` Branch was pushed to origin \u2014 confirm it exists on GitHub and differs from the base branch.${target}${head}.` : " Often `gh` targeted upstream instead of origin. Branch was pushed \u2014 retry in the latest Sideboard, or run: gh pr create -R <owner/name> --base main --head <branch>.";
     return `Could not create the pull request.${hint}`;
   }
+  if (isGhPrBodyTooLongError(raw) || isGhPrBodyTooLongError(detail)) {
+    const pushNote = opts?.pushed === false ? "" : " Your branch was already pushed.";
+    return `GitHub rejected the pull request: the GraphQL body is too long (PR description / request size, limit ${GITHUB_PR_BODY_MAX_CHARS} characters).${pushNote} Retry with a short title and body via \`gh pr create --body-file\` (or send_to_thread so the worktree agent writes a brief description). Do not paste a changelog or diff into --body.`;
+  }
   if (isGhRateLimitError(raw) || isGhRateLimitError(detail)) {
     const when = opts?.resetAt ? ` Try again ${formatRateLimitResetHint(opts.resetAt, opts.nowMs)}.` : " Wait a few minutes and try again.";
     const pushNote = opts?.pushed === false ? "" : " Your branch was already pushed.";
@@ -906,88 +948,29 @@ function formatIpcInvokeError(err) {
 
 // src/git/git-auth-mode.ts
 import { isAbsolute } from "path";
-
-// src/git/github-agent-auth.ts
-import { chmodSync, existsSync, mkdirSync, writeFileSync } from "fs";
-import { homedir } from "os";
-import { dirname, join } from "path";
-function githubAgentAuthDir() {
-  const override = process.env.SIDEBOARD_GIT_AUTH_DIR?.trim();
-  if (override) return override;
-  return join(homedir(), ".sideboard-git-auth");
-}
-function githubCredentialStorePath() {
-  return join(githubAgentAuthDir(), "git-credentials");
-}
-function githubGhConfigDir() {
-  return join(githubAgentAuthDir(), "gh");
-}
-function writePrivateFile(file, body) {
-  mkdirSync(dirname(file), { recursive: true, mode: 448 });
-  try {
-    chmodSync(dirname(file), 448);
-  } catch {
-  }
-  writeFileSync(file, body, { encoding: "utf8", mode: 384 });
-  try {
-    chmodSync(file, 384);
-  } catch {
-  }
-}
-function gitCredentialStoreContents(token) {
-  return `https://x-access-token:${encodeURIComponent(token)}@github.com
-`;
-}
-function ghHostsYml(token, user = "x-access-token") {
-  const u = user.replace(/[^A-Za-z0-9._-]/g, "") || "x-access-token";
-  return [
-    "github.com:",
-    "    git_protocol: https",
-    `    user: ${u}`,
-    `    oauth_token: ${token}`,
-    "    users:",
-    `        ${u}:`,
-    `            oauth_token: ${token}`,
-    ""
-  ].join("\n");
-}
-function materializeGithubAgentAuth(token, user) {
-  const trimmed = token.trim();
-  if (!trimmed) return;
-  const root = githubAgentAuthDir();
-  mkdirSync(root, { recursive: true, mode: 448 });
-  try {
-    chmodSync(root, 448);
-  } catch {
-  }
-  writePrivateFile(githubCredentialStorePath(), gitCredentialStoreContents(trimmed));
-  const ghDir = githubGhConfigDir();
-  mkdirSync(ghDir, { recursive: true, mode: 448 });
-  writePrivateFile(join(ghDir, "hosts.yml"), ghHostsYml(trimmed, user));
-  writePrivateFile(join(ghDir, "config.yml"), "git_protocol: https\nprompt: disabled\n");
-}
-function githubAgentAuthReady() {
-  return existsSync(githubCredentialStorePath()) && existsSync(join(githubGhConfigDir(), "hosts.yml"));
-}
-function githubCredentialHelperGitConfig() {
-  const file = githubCredentialStorePath();
-  return [
-    { key: "credential.helper", value: "" },
-    { key: "credential.helper", value: `store --file=${file}` }
-  ];
-}
-function githubGhConfigEnv() {
-  return {
-    GH_CONFIG_DIR: githubGhConfigDir(),
-    GH_PROMPT_DISABLED: "1"
-  };
-}
-
-// src/git/git-auth-mode.ts
 var HTTPS_REWRITE = [
   { key: "url.https://github.com/.insteadOf", value: "git@github.com:" },
   { key: "url.https://github.com/.insteadOf", value: "ssh://git@github.com/" }
 ];
+function githubHttpsInsteadOfEntries(remoteUrl) {
+  const entries = [...HTTPS_REWRITE];
+  const url = remoteUrl?.trim() ?? "";
+  const scpAlias = url.match(/^(git@github\.com-[^:]+):/i);
+  if (scpAlias?.[1]) {
+    entries.push({
+      key: "url.https://github.com/.insteadOf",
+      value: `${scpAlias[1]}:`
+    });
+  }
+  const sshAlias = url.match(/^ssh:\/\/git@(github\.com-[^/]+)\//i);
+  if (sshAlias?.[1]) {
+    entries.push({
+      key: "url.https://github.com/.insteadOf",
+      value: `ssh://git@${sshAlias[1]}/`
+    });
+  }
+  return entries;
+}
 var TOKEN_TTL_MS = 12 * 60 * 60 * 1e3;
 var tokenMemo = null;
 var GITHUB_CHILD_TOKEN_KEYS = [
@@ -1017,16 +1000,19 @@ function appendIndexedGitConfig(existing, entries) {
   out.GIT_CONFIG_COUNT = String(count + entries.length);
   return out;
 }
-function githubAgentGitEnv(existing) {
+function githubAgentGitEnv(existing, opts) {
   const helpers = githubAgentAuthReady() ? githubCredentialHelperGitConfig() : [{ key: "credential.helper", value: "" }];
-  return appendIndexedGitConfig(existing, [...HTTPS_REWRITE, ...helpers]);
+  return appendIndexedGitConfig(existing, [
+    ...githubHttpsInsteadOfEntries(opts?.remoteUrl),
+    ...helpers
+  ]);
 }
 function applyGithubGitAuthEnv(existing, opts) {
   const out = { ...nonInteractiveGitProcessEnv() };
   const token = opts.token?.trim() || existing?.GH_TOKEN?.trim() || "" || "";
   if (token) materializeGithubAgentAuth(token);
   Object.assign(out, githubGhConfigEnv());
-  if (opts.mode === "ssh") return out;
+  if (opts.mode === "ssh" && !token) return out;
   Object.assign(out, githubAgentGitEnv(existing));
   return out;
 }
@@ -1142,8 +1128,9 @@ function formatGitAuthModeDirective(mode) {
     case "ssh":
       return [
         "Git authentication (Settings \u2192 Git mode: SSH):",
-        "- Keep SSH remotes (`git@github.com:\u2026`). Do not rewrite them to HTTPS.",
-        "- SSH is batch-mode: it will not prompt for a Keychain password. If push fails with `Permission denied (publickey)`, tell the user to unlock ssh-agent or switch Settings \u2192 Git to Auto / gh CLI \u2014 do not rewrite remotes yourself.",
+        "- Stored remotes stay SSH (`git@github.com:\u2026`). Do not `git remote set-url` or rewrite them to HTTPS.",
+        "- This process may push over HTTPS via `gh` (process-only `insteadOf`) so ask_git / unattended turns work when ssh-agent is missing \u2014 that does not change the stored remote.",
+        "- SSH is batch-mode: it will not prompt for a Keychain password. If both SSH and HTTPS fail, tell the user to unlock ssh-agent or run `gh auth login` (or switch Settings \u2192 Git to Auto).",
         "- `gh` already authenticates for PRs/API (no token in the environment). Do not set GitHub token environment variables or run `gh auth login` from this turn.",
         "- Push with `git push -u origin HEAD`. Create/update PRs with `gh` as below."
       ].join("\n");
@@ -2265,6 +2252,16 @@ function originFetchBranch(sourceRef) {
   if (ref.startsWith("origin/")) return ref.slice("origin/".length) || null;
   return ref;
 }
+async function originRemoteUrl(cwd) {
+  const result = await git(["remote", "get-url", "origin"], cwd, { reject: false });
+  return result.exitCode === 0 ? result.stdout.trim() : "";
+}
+function githubHttpsRetryEnv(remoteUrl) {
+  return {
+    GIT_TERMINAL_PROMPT: "0",
+    ...githubAgentGitEnv(void 0, { remoteUrl })
+  };
+}
 async function fetchOriginWithAuth(repoPath, args, timeoutMs) {
   const first = await git(args, repoPath, { reject: false, timeoutMs });
   if (first.exitCode === 0) return true;
@@ -2274,15 +2271,14 @@ async function fetchOriginWithAuth(repoPath, args, timeoutMs) {
   } catch {
     return false;
   }
-  if (mode === "ssh") return false;
   const token = await resolveGithubAgentToken(mode, repoPath);
   if (!token) return false;
+  const remoteUrl = await originRemoteUrl(repoPath);
   const tryHttps = async (header) => git(args, repoPath, {
     reject: false,
     timeoutMs,
-    env: { GIT_TERMINAL_PROMPT: "0" },
+    env: githubHttpsRetryEnv(remoteUrl),
     config: {
-      "url.https://github.com/.insteadOf": "git@github.com:",
       "http.extraHeader": header
     }
   });
@@ -2364,8 +2360,8 @@ async function refreshOriginAndMaybeFastForwardMain(repoPath, sourceRef) {
 }
 async function createThreadWorktree(opts) {
   let branchName = `thread/${opts.slug}`;
-  const worktreePath = join2(worktreesRoot(opts.repoPath), opts.slug);
-  if (existsSync2(worktreePath)) {
+  const worktreePath = join(worktreesRoot(opts.repoPath), opts.slug);
+  if (existsSync(worktreePath)) {
     throw new Error(`Worktree already exists at ${worktreePath}`);
   }
   await ensureGhPreferOrigin(opts.repoPath);
@@ -2400,13 +2396,14 @@ ${add.stdout}`;
   });
   branchName = added;
   await ensureGhPreferOrigin(worktreePath);
+  await ensureWorktreeSideboardIgnored(worktreePath);
   return { branchName, worktreePath };
 }
 async function createExistingBranchWorktree(opts) {
   const branchName = opts.branchName.trim();
   if (!branchName) throw new Error("branch name required");
-  const worktreePath = join2(worktreesRoot(opts.repoPath), opts.slug);
-  if (existsSync2(worktreePath)) {
+  const worktreePath = join(worktreesRoot(opts.repoPath), opts.slug);
+  if (existsSync(worktreePath)) {
     throw new Error(`Worktree already exists at ${worktreePath}`);
   }
   await ensureGhPreferOrigin(opts.repoPath);
@@ -2444,6 +2441,7 @@ async function createExistingBranchWorktree(opts) {
     await git(["checkout", "-B", branchName], worktreePath, { reject: false });
   }
   await ensureGhPreferOrigin(worktreePath);
+  await ensureWorktreeSideboardIgnored(worktreePath);
   return { branchName, worktreePath };
 }
 async function removeWorktree(repoPath, worktreePath, opts) {
@@ -2532,7 +2530,9 @@ async function currentBranch(worktreePath) {
 async function commitAll(worktreePath, message) {
   const dirty = await isDirty(worktreePath);
   if (!dirty) return false;
+  await ensureWorktreeSideboardIgnored(worktreePath);
   await git(["add", "-A"], worktreePath);
+  await git(["reset", "-q", "--", ".sideboard"], worktreePath, { reject: false });
   await git(["commit", "-m", message], worktreePath);
   return true;
 }
@@ -2546,14 +2546,14 @@ async function pushBranch(worktreePath, branchName) {
   const token = await resolveGithubAgentToken(getGithubGitAuthMode(), worktreePath);
   if (!slug || !token) {
     throw new Error(
-      sshErr || `git push origin ${branchName} failed` + (!token ? " (no SSH agent and gh auth token unavailable \u2014 run: gh auth login)" : "")
+      sshErr || `git push origin ${branchName} failed` + (!token ? " (SSH remote and gh auth token unavailable \u2014 unlock ssh-agent or run: gh auth login)" : "")
     );
   }
+  const remoteUrl = await originRemoteUrl(worktreePath);
   const tryHttps = async (header) => git(["push", "-u", "origin", branchName], worktreePath, {
     reject: false,
-    env: { GIT_TERMINAL_PROMPT: "0" },
+    env: githubHttpsRetryEnv(remoteUrl),
     config: {
-      "url.https://github.com/.insteadOf": "git@github.com:",
       "http.extraHeader": header
     }
   });
@@ -2683,6 +2683,32 @@ async function createOrUpdatePr(worktreePath, opts) {
   const repoArgs = ghRepoSelectArgs(slug);
   const headRef = ghHeadRef(slug, opts.head);
   const branchOnly = opts.head.trim().replace(/^refs\/heads\//, "");
+  const bodyText = clampGithubPrBody(opts.body ?? opts.title);
+  const bodyFile = join(
+    tmpdir(),
+    `sideboard-pr-body-${process.pid}-${randomBytes(6).toString("hex")}.md`
+  );
+  writeFileSync(bodyFile, bodyText.endsWith("\n") ? bodyText : `${bodyText}
+`, "utf8");
+  const bodyArgs = ["--body-file", bodyFile];
+  try {
+    return await createOrUpdatePrWithBodyFile(worktreePath, {
+      ...opts,
+      slug,
+      repoArgs,
+      headRef,
+      branchOnly,
+      bodyArgs
+    });
+  } finally {
+    try {
+      unlinkSync(bodyFile);
+    } catch {
+    }
+  }
+}
+async function createOrUpdatePrWithBodyFile(worktreePath, opts) {
+  const { slug, repoArgs, headRef, branchOnly, bodyArgs } = opts;
   const existing = await gh(
     [...repoArgs, "pr", "view", branchOnly, "--json", "url", "--jq", ".url"],
     worktreePath,
@@ -2698,8 +2724,7 @@ async function createOrUpdatePr(worktreePath, opts) {
         branchOnly,
         "--title",
         opts.title,
-        "--body",
-        opts.body ?? opts.title
+        ...bodyArgs
       ],
       worktreePath,
       { reject: false }
@@ -2714,8 +2739,7 @@ async function createOrUpdatePr(worktreePath, opts) {
       "--web",
       "--title",
       opts.title,
-      "--body",
-      opts.body ?? opts.title,
+      ...bodyArgs,
       "--base",
       opts.base,
       "--head",
@@ -2736,8 +2760,7 @@ async function createOrUpdatePr(worktreePath, opts) {
     "create",
     "--title",
     opts.title,
-    "--body",
-    opts.body ?? opts.title,
+    ...bodyArgs,
     "--base",
     opts.base,
     "--head",
@@ -2761,8 +2784,8 @@ function sameRepoPath(a, b) {
   return normalizeWorktreePath(a) === normalizeWorktreePath(b);
 }
 function listLocalThreadBranchSlugs(repoPath) {
-  const refsDir = join2(repoPath, ".git", "refs", "heads", "thread");
-  if (!existsSync2(refsDir)) return [];
+  const refsDir = join(repoPath, ".git", "refs", "heads", "thread");
+  if (!existsSync(refsDir)) return [];
   try {
     return readdirSync(refsDir).filter((name) => !name.startsWith(".")).map((name) => normalizeTakenSlug(name));
   } catch {
@@ -2772,7 +2795,7 @@ function listLocalThreadBranchSlugs(repoPath) {
 function collectTakenTeamSlugs(repoPath) {
   const taken = /* @__PURE__ */ new Set();
   const root = worktreesRoot(repoPath);
-  if (existsSync2(root)) {
+  if (existsSync(root)) {
     for (const entry of readdirSync(root, { withFileTypes: true })) {
       if (entry.isDirectory() && entry.name !== ".DS_Store") {
         taken.add(normalizeTakenSlug(entry.name));
@@ -2794,8 +2817,8 @@ function allocateTeamSlug(repoPath) {
   const taken = collectTakenTeamSlugs(repoPath);
   for (let attempt = 0; attempt < 32; attempt++) {
     const team = allocateTeamName(taken);
-    const path = join2(worktreesRoot(repoPath), team.slug);
-    if (!existsSync2(path)) return team;
+    const path = join(worktreesRoot(repoPath), team.slug);
+    if (!existsSync(path)) return team;
     taken.add(team.slug);
   }
   throw new Error("No available soccer team worktree directories left");
@@ -2814,13 +2837,18 @@ export {
   threadDisplayLabel,
   worktreeDisplayLabel,
   worktreeDisplayLabelForGroup,
+  GITHUB_PR_BODY_MAX_CHARS,
+  GITHUB_PR_BODY_SAFE_CHARS,
   isGhRateLimitError,
+  isGhPrBodyTooLongError,
+  clampGithubPrBody,
   formatRateLimitResetHint,
   extractGhErrorDetail,
   formatGhLandError,
   isPrNotMergeableError,
   formatMergePrError,
   formatIpcInvokeError,
+  githubHttpsInsteadOfEntries,
   nonInteractiveGitProcessEnv,
   appendIndexedGitConfig,
   githubAgentGitEnv,

package/dist/{chunk-LAFA56WD.js → chunk-HEII7W3Q.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-4TR3HZFT.js";
 import {
   run
-} from "./chunk-DVM4ID64.js";
+} from "./chunk-UFHNSFAS.js";
 
 // src/agents/error-detail.ts
 function formatUnknownDetail(err) {

package/dist/{chunk-3QRGCKYL.js → chunk-HWZWBJWL.js}

@@ -1,10 +1,10 @@
 import {
   isGlobalRepoPath
-} from "./chunk-R4JP32P5.js";
+} from "./chunk-ADCEGG4A.js";
 import {
   ensureGhPreferOrigin,
   resolveRepoRoot
-} from "./chunk-YP3CSOZ6.js";
+} from "./chunk-GE7M3QTE.js";
 import {
   appDataDir
 } from "./chunk-QZQEXME2.js";

package/dist/{chunk-FKOIHGKV.js → chunk-JRH62XC4.js}

@@ -1,6 +1,8 @@
 // src/paths/workspace-scratch.ts
 var ATTACHMENTS_DIR = ".context/attachments";
+var DETACHED_JOBS_DIR = ".context/.sideboard/detached-jobs";
 var LEGACY_ATTACHMENTS_DIR = ".sideboard/attachments";
+var LEGACY_DETACHED_JOBS_DIR = ".sideboard/detached-jobs";
 var ATTACHMENTS_GITIGNORE = `# Sideboard / workspace attachments (local only)
 *
 !.gitignore
@@ -10,12 +12,14 @@ function attachmentsGitignoreBody() {
 }
 function isWorkspaceScratchPath(relativePath) {
   const p = relativePath.replace(/\\/g, "/").replace(/^\.\//, "").replace(/\/$/, "");
-  return p === ATTACHMENTS_DIR || p.startsWith(`${ATTACHMENTS_DIR}/`) || p === LEGACY_ATTACHMENTS_DIR || p.startsWith(`${LEGACY_ATTACHMENTS_DIR}/`) || p === ".context" || p.startsWith(".context/");
+  return p === ATTACHMENTS_DIR || p.startsWith(`${ATTACHMENTS_DIR}/`) || p === LEGACY_ATTACHMENTS_DIR || p.startsWith(`${LEGACY_ATTACHMENTS_DIR}/`) || p === ".sideboard" || p.startsWith(".sideboard/") || p === ".context" || p.startsWith(".context/");
 }
 
 export {
   ATTACHMENTS_DIR,
+  DETACHED_JOBS_DIR,
   LEGACY_ATTACHMENTS_DIR,
+  LEGACY_DETACHED_JOBS_DIR,
   attachmentsGitignoreBody,
   isWorkspaceScratchPath
 };

package/dist/{chunk-Q5DHVMXB.js → chunk-LZAOX76N.js}

@@ -5,26 +5,26 @@ import {
   brightsyMcpServerName,
   ensureCliTeamTracked,
   ensureConnectedBrightsyTeamTokens
-} from "./chunk-ED4UPEJX.js";
+} from "./chunk-G7SIQFBQ.js";
 import {
   loadBrightsyConfig
 } from "./chunk-S42XV45P.js";
 import {
   isOrchestratorThread
-} from "./chunk-N3VNOFXQ.js";
+} from "./chunk-Y2FNDKHF.js";
 import {
   codexUnattendedGitConfigArgs,
   mergeAgentGitAuthEnv,
   resolveAgentGitAuthEnv,
   resolveCodexGitWritableRoots
-} from "./chunk-JTPDWTWJ.js";
+} from "./chunk-3JBMACYX.js";
 import {
   enrichPathWithNpmGlobalBin,
   isConductorBundledCli,
   resolveCommandBinarySync,
   run,
   withExportedPath
-} from "./chunk-KPIYENTF.js";
+} from "./chunk-FNQNJOHY.js";
 import {
   claudeChromeEnabled,
   isElectronLikeCommand,
@@ -33,7 +33,7 @@ import {
   resolveClaudeExecutable,
   unwrapStrippedElectronLaunch,
   wrapElectronAsNodeLaunch
-} from "./chunk-BGQBELGJ.js";
+} from "./chunk-CZD4NRDZ.js";
 import {
   appDataDir
 } from "./chunk-BD2ICC4D.js";
@@ -879,6 +879,13 @@ function isSubagentToolName(name) {
   if (/^(task|agent|spawn_agent)$/i.test(n)) return true;
   return /connectedAgentRequest/i.test(n);
 }
+function isInternalAgentStatusText(text) {
+  const t = text.trim();
+  if (!t) return false;
+  if (/waiting for gate to pass/i.test(t)) return true;
+  if (/^agent is running\b/i.test(t) && t.length < 160) return true;
+  return false;
+}
 function isPollWrapperToolName(name) {
   const n = (name ?? "").replace(/[_-]/g, "");
   return /^(taskoutput|taskstop|sleep)$/i.test(n);
@@ -886,7 +893,10 @@ function isPollWrapperToolName(name) {
 function lastTextPart(parts, type) {
   for (let i = parts.length - 1; i >= 0; i--) {
     const p = parts[i];
-    if (p.type === type && p.text.trim()) return p.text.trim();
+    if (p.type !== type) continue;
+    const text = p.text.trim();
+    if (!text || isInternalAgentStatusText(text)) continue;
+    return text;
   }
   return "";
 }
@@ -2088,7 +2098,7 @@ var claudeAdapter = {
       );
     }
     const mode = permissionMode(thread);
-    const { isOrchestratorThread: isOrchestratorThread2 } = await import("./global-workspace-2SIPM4PW.js");
+    const { isOrchestratorThread: isOrchestratorThread2 } = await import("./global-workspace-T7RL3XEC.js");
     const isOrchestrator = isOrchestratorThread2(thread);
     const injectedServers = await buildInjectedMcpServers({
       includeSideboard: true,
@@ -3925,6 +3935,7 @@ export {
   listBrightsyChatTargets,
   brightsyAdapter,
   toolDescription,
+  isInternalAgentStatusText,
   isPollWrapperToolName,
   liveActivitySummary,
   applyAgentEvent,

package/dist/{chunk-B3SJXYIJ.js → chunk-NVXVEGGM.js}

@@ -13,7 +13,7 @@ function attachmentsGitignoreBody() {
 }
 function isWorkspaceScratchPath(relativePath) {
   const p = relativePath.replace(/\\/g, "/").replace(/^\.\//, "").replace(/\/$/, "");
-  return p === ATTACHMENTS_DIR || p.startsWith(`${ATTACHMENTS_DIR}/`) || p === LEGACY_ATTACHMENTS_DIR || p.startsWith(`${LEGACY_ATTACHMENTS_DIR}/`) || p === ".context" || p.startsWith(".context/");
+  return p === ATTACHMENTS_DIR || p.startsWith(`${ATTACHMENTS_DIR}/`) || p === LEGACY_ATTACHMENTS_DIR || p.startsWith(`${LEGACY_ATTACHMENTS_DIR}/`) || p === ".sideboard" || p.startsWith(".sideboard/") || p === ".context" || p.startsWith(".context/");
 }
 
 export {

package/dist/{chunk-ZVYLEF72.js → chunk-OXOU2FRS.js}

@@ -2,10 +2,10 @@
 
 import {
   resolveGithubRepoSlug
-} from "./chunk-JTPDWTWJ.js";
+} from "./chunk-3JBMACYX.js";
 import {
   resolveThreadDefaults
-} from "./chunk-BGQBELGJ.js";
+} from "./chunk-CZD4NRDZ.js";
 import {
   globalAgentCwd,
   sideboardReposDir
@@ -47,8 +47,8 @@ var COORDINATOR_TOOL_PLAYBOOK = [
   "Discover:",
   "- list_workspaces \u2014 registered repos (path + github slug when known)",
   "- list_board \u2014 Home Kanban of worktrees (New / Draft / Review / Merged; one card per checkout). Path to merge: no PR \u2192 draft PR \u2192 open PR \u2192 merged. Archive removes the card to Settings \u2192 History. Queued/running are activity on the card, not columns. Orchestration chats are not on the board. Filters: query, repoPath, kind, column, limit.",
-  "- list_branches / list_prs / list_issues \u2014 pass repoPath from list_workspaces (issues: Linear, AbleTime MCP, or GitHub Issues)",
-  "- linear_list_teams / linear_get_issue / linear_create_issue / linear_update_issue / linear_comment \u2014 Linear Account connection; call linear_list_teams for team key and workflow states; pass ENG-123 or uuid. linear_get_issue returns comments, relations, parent/children, and the rest of the issue metadata. If mutations fail with a scope error, Disconnect and Connect Linear in Account settings.",
+  "- list_branches / list_prs / list_issues \u2014 pass repoPath from list_workspaces (issues: Linear, AbleTime MCP, or GitHub Issues). list_issues accepts query and assignee (me / unassigned / all / user id) so Linear is not limited to tickets assigned to you.",
+  "- linear_list_teams / linear_search_issues / linear_get_issue / linear_create_issue / linear_update_issue / linear_comment \u2014 Linear Account connection; call linear_list_teams for team key and workflow states; pass ENG-123 or uuid. linear_search_issues finds unassigned and other people's open issues (assignee=unassigned|all|me|user). linear_get_issue returns comments, relations, parent/children, and the rest of the issue metadata. If mutations fail with a scope error, Disconnect and Connect Linear in Account settings.",
   "- abletime_orientation / abletime_list_projects / abletime_list_tasks / abletime_search_tasks / abletime_get_task / abletime_create_task / abletime_ensure_task \u2014 AbleTime Account personal access token (hosted MCP). Call orientation first. If work has no task yet, abletime_ensure_task creates one to track against (or create_thread from the default branch does that automatically when AbleTime is the preferred issue source).",
   "- list_teams / slack_list_channels / slack_list_users / slack_search / slack_read / slack_post / slack_replies \u2014 Slack workspaces from Settings \u2192 Remote; pass team_id from list_teams",
   "- Optional connectors (Vercel, Supabase, PostHog, Sentry) in Settings \u2192 Connectors inject tokens into worktree agent env when connected. Prefer official CLIs (`vercel`, `supabase`, `sentry-cli`) with those env vars. PostHog has no first-class CLI \u2014 use the HTTP API (`POSTHOG_PERSONAL_API_KEY`). If a CLI is missing, the user can Install CLI on that row (not auto-installed on Connect). Do not add vendor MCPs or ask the user to paste tokens again. Git (`gh`) stays Settings \u2192 Git; issue tracking stays Settings \u2192 Issues; Slack stays Settings \u2192 Remote (Sideboard MCP).",
@@ -67,7 +67,7 @@ var COORDINATOR_TOOL_PLAYBOOK = [
   "- fork_worktree \u2014 fork a worktree chat into a NEW git worktree + chat (transcript attached); optional agent; leave model unset (Auto) unless you have a reason. Not for orchestration chats.",
   "- fork_chat \u2014 fork a worktree chat (same worktree tab) OR a Global orchestration chat (new orchestration tab); optional agent; leave model unset (Auto) unless you have a reason. Remote coordinators: use this to continue another orchestration chat on a different agent after session limits.",
   "- send_to_thread \u2014 queue a prompt (start/continue a chat turn). force_stop: true only to replace a wrong in-flight request \u2014 never to check in, resume after a halt notice, or because wait_for_turn returned stillRunning (that kills the child mid-thought)",
-  "- wait_for_turn / get_turn_result \u2014 wait for and read the agent reply (includes last-turn usage / costUsd when the child agent reported it). wait_for_turn returns within ~45s even if the child is still working (MCP clients kill longer tool calls). If stillRunning is true, progress is a live snapshot of tools/thinking \u2014 call wait_for_turn again. status=queued with no lastActivityAt means the child has not started yet (concurrency cap) \u2014 keep waiting; do not force_stop or send a check-in. Do not send \u201Care you stuck?\u201D or assume a hang while lastActivityAt is recent. On status error, lastError (and text) is the failure \u2014 switch agent, tell the user, or retry; do not treat empty text as success. On status stopped or broken (or incomplete=true), the child was interrupted or died \u2014 resume with send_to_thread or tell the user; never treat stopped as a finished turn. Sideboard also injects a notice into this chat when a child stops unexpectedly.",
+  "- wait_for_turn / get_turn_result \u2014 wait for and read the agent reply (includes last-turn usage / costUsd when the child agent reported it). wait_for_turn returns within ~45s even if the child is still working (MCP clients kill longer tool calls). stillRunning is the source of truth \u2014 if it is false, the child is not working; do not tell the user it is running or \u201Cwaiting for a gate,\u201D even if status still says running/queued. If stillRunning is true, progress is a live snapshot of tools/thinking \u2014 call wait_for_turn again. status=queued with no lastActivityAt means the child has not started yet (concurrency cap) \u2014 keep waiting; do not force_stop or send a check-in. Do not send \u201Care you stuck?\u201D or assume a hang while lastActivityAt is recent. If stillRunning stays true across many waits with the same lastActivityAt, the child is stuck \u2014 tell the user; do not invent a gate. On status error, lastError (and text) is the failure \u2014 switch agent, tell the user, or retry; do not treat empty text as success. On status stopped or broken (or incomplete=true), the child was interrupted or died \u2014 resume with send_to_thread or tell the user; never treat stopped as a finished turn. Sideboard also injects a notice into this chat when a child stops unexpectedly.",
   "- stop_thread \u2014 force-stop: kill in-flight turn AND clear queued prompts (do not leave stale queue after an interrupt)",
   "- archive_thread / restore_thread \u2014 archive (tears down worktree when last tab) or restore",
   "Setup / run:",
@@ -76,7 +76,7 @@ var COORDINATOR_TOOL_PLAYBOOK = [
   "Inspect / review / PRs:",
   "- get_diff \u2014 compact diff summary",
   '- request_review \u2014 open a Review chat tab on a worktree thread (attaches .claude/skills/review/SKILL.md when present, else seeds that skill / local guidelines; sends "Review changes in this workspace."); then wait_for_turn (loop while stillRunning) / get_turn_result on the returned id',
-  "- ask_git \u2014 commit & push, open a draft PR, resolve conflicts, or merge. When the worktree is clean, Sideboard pushes / opens the PR itself. When dirty, it queues the worktree agent \u2014 then wait_for_turn (loop while stillRunning). Prefer this over paraphrasing.",
+  "- ask_git \u2014 commit & push, open a draft PR, resolve conflicts, or merge. When the worktree is clean, Sideboard pushes / opens the PR itself. When dirty, it queues the worktree agent \u2014 then wait_for_turn (loop while stillRunning). Prefer this over paraphrasing. If ask_git / get_thread lastError says the GraphQL/PR body is too long, the branch is already pushed \u2014 send_to_thread so the worktree agent runs `gh pr create --body-file` with a short description. Do not invent SSH or auth failures from that error.",
   '- Merge (`ask_git` action=merge / send_to_thread "Merge PR.") only when the user explicitly asked to merge that PR. Do not merge because the work looks done, CI is green, or a typical flow includes it.',
   '- Or send_to_thread with those exact phrases: "Commit and push.", "Commit, push, and open a draft PR.", "Merge the remote branch (main) into your branch and resolve conflicts. Then, commit and push your changes.", "Merge PR." (draft PRs: `gh pr create --draft -R <origin-owner/name>` using the workspace `github:` slug \u2014 never upstream). Never run git/gh from this orchestration cwd, and never merge the PR yourself.',
   "Process guides:",