@sideboard-ai/core 0.1.155 → 0.1.156

package/dist/{chunk-QZEZXYVV.js → chunk-XLU7DXHH.js}

@@ -1,6 +1,6 @@
 import {
   isOrchestratorThread
-} from "./chunk-2F63IMCL.js";
+} from "./chunk-MSFPM5VK.js";
 import {
   codexUnattendedGitConfigArgs,
   mergeAgentGitAuthEnv,
@@ -1385,7 +1385,7 @@ function toCodexMcpConfigArgs(servers) {
   }
   return args;
 }
-function toOpencodeMcpConfigContent(servers) {
+function toOpencodeMcpConfigContent(servers, opts) {
   const mcp = {};
   for (const s of servers) {
     const env = mcpSpawnEnv(s.env);
@@ -1396,6 +1396,11 @@ function toOpencodeMcpConfigContent(servers) {
       ...env ? { environment: env } : {}
     };
   }
+  for (const name of opts?.disableNames ?? []) {
+    const key = name.trim();
+    if (!key || mcp[key]?.enabled === true) continue;
+    mcp[key] = { ...mcp[key], enabled: false };
+  }
   return JSON.stringify({ mcp });
 }
 function writeMcpServersConfig(servers) {
@@ -1614,13 +1619,50 @@ function claudeString(obj, key) {
   const v = obj[key];
   return typeof v === "string" && v.trim() ? v.trim() : void 0;
 }
+function mcpStatusThinkingFromClaudeInit(obj) {
+  const raw = obj.mcp_servers ?? obj.mcpServers;
+  const servers = [];
+  if (Array.isArray(raw)) {
+    for (const item of raw) {
+      if (!item || typeof item !== "object" || Array.isArray(item)) continue;
+      const rec = item;
+      const name = typeof rec.name === "string" && rec.name.trim() || typeof rec.server === "string" && rec.server.trim() || "";
+      const status = typeof rec.status === "string" && rec.status.trim() || typeof rec.state === "string" && rec.state.trim() || "";
+      if (name) servers.push({ name, status: status || "unknown" });
+    }
+  } else if (raw && typeof raw === "object") {
+    for (const [name, value] of Object.entries(raw)) {
+      if (!name.trim()) continue;
+      if (typeof value === "string" && value.trim()) {
+        servers.push({ name, status: value.trim() });
+        continue;
+      }
+      if (value && typeof value === "object" && !Array.isArray(value)) {
+        const rec = value;
+        const status = typeof rec.status === "string" && rec.status.trim() || typeof rec.state === "string" && rec.state.trim() || "unknown";
+        servers.push({ name, status });
+      }
+    }
+  }
+  const notable = servers.filter((s) => !isCleanMcpConnect(s.status));
+  if (notable.length === 0) return null;
+  return `MCP: ${notable.map((s) => `${s.name} ${s.status}`).join(", ")}`;
+}
+function isCleanMcpConnect(status) {
+  return /^(connected|ok|ready|success)$/i.test(status.trim());
+}
 function eventsFromClaudeSystem(obj) {
   const subtype = claudeString(obj, "subtype") ?? "";
   const parentId = claudeParentToolUseId(obj);
   if (subtype === "init") {
     if (parentId) return null;
     const sid = claudeString(obj, "session_id");
-    return sid ? { type: "session_id", data: sid } : null;
+    const mcpNote = mcpStatusThinkingFromClaudeInit(obj);
+    const events = [];
+    if (sid) events.push({ type: "session_id", data: sid });
+    if (mcpNote) events.push({ type: "thinking", data: mcpNote, replace: true });
+    if (events.length === 0) return null;
+    return events.length === 1 ? events[0] : events;
   }
   if (subtype === "task_started") {
     const id = claudeString(obj, "tool_use_id") ?? claudeString(obj, "task_id");
@@ -1777,7 +1819,7 @@ var claudeAdapter = {
       );
     }
     const mode = permissionMode(thread);
-    const { isOrchestratorThread: isOrchestratorThread2 } = await import("./global-workspace-2BRRKSDN.js");
+    const { isOrchestratorThread: isOrchestratorThread2 } = await import("./global-workspace-5WZVSWNT.js");
     const isOrchestrator = isOrchestratorThread2(thread);
     const injectedServers = await buildInjectedMcpServers({
       includeSideboard: true,
@@ -1820,6 +1862,9 @@ var claudeAdapter = {
     const mcpConfigPath = writeMcpServersConfig(injectedServers);
     if (mcpConfigPath) {
       args.push("--mcp-config", mcpConfigPath);
+      if (isOrchestrator) {
+        args.push("--strict-mcp-config");
+      }
     }
     if (chromeOn) {
       args.push("--chrome");
@@ -1849,7 +1894,10 @@ var claudeAdapter = {
       // abandoned at Claude Code’s 10-minute default.
       env: {
         CLAUDE_CODE_FORWARD_SUBAGENT_TEXT: "1",
-        CLAUDE_CODE_PRINT_BG_WAIT_CEILING_MS: process.env.CLAUDE_CODE_PRINT_BG_WAIT_CEILING_MS ?? String(CLAUDE_PRINT_BG_WAIT_CEILING_MS)
+        CLAUDE_CODE_PRINT_BG_WAIT_CEILING_MS: process.env.CLAUDE_CODE_PRINT_BG_WAIT_CEILING_MS ?? String(CLAUDE_PRINT_BG_WAIT_CEILING_MS),
+        // `--strict-mcp-config` still fetches claude.ai connectors on some CLI
+        // builds (anthropics/claude-code#60252). Coordinators do not need them.
+        ...isOrchestrator ? { ENABLE_CLAUDEAI_MCP_SERVERS: "false" } : {}
       }
     };
   },
@@ -1997,9 +2045,170 @@ function parseIssuesJson(raw) {
 }
 
 // src/agents/codex.ts
-import { existsSync as existsSync4, readFileSync, statSync } from "fs";
+import { existsSync as existsSync6, readFileSync as readFileSync3, statSync } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join4 } from "path";
+
+// src/agents/orch-mcp-isolation.ts
+import { existsSync as existsSync5, readFileSync as readFileSync2 } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join3 } from "path";
+import { parse as parseToml } from "smol-toml";
+
+// src/agents/user-mcp-config.ts
+import { existsSync as existsSync4, mkdirSync, readFileSync, writeFileSync as writeFileSync2 } from "fs";
 import { homedir } from "os";
-import { join as join2 } from "path";
+import { dirname as dirname2, join as join2 } from "path";
+function userCursorMcpConfigPath() {
+  return join2(homedir(), ".cursor", "mcp.json");
+}
+function userClaudeMcpConfigPath() {
+  return join2(homedir(), ".claude.json");
+}
+function asObject(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+  return { ...value };
+}
+function stripElectronSpawnEnv(env) {
+  if (!env) return void 0;
+  const next = { ...env };
+  delete next.ELECTRON_RUN_AS_NODE;
+  delete next.ELECTRON_RUN_AS_NODE;
+  return Object.keys(next).length > 0 ? next : void 0;
+}
+function mergeSideboardIntoMcpServersJson(existing, sideboard) {
+  const root = asObject(existing);
+  const servers = asObject(root.mcpServers);
+  const env = stripElectronSpawnEnv(sideboard.env);
+  servers.sideboard = {
+    type: "stdio",
+    command: sideboard.command,
+    ...sideboard.args && sideboard.args.length > 0 ? { args: sideboard.args } : {},
+    ...env ? { env } : {}
+  };
+  return { ...root, mcpServers: servers };
+}
+function writeMergedMcpServersJson(configPath, sideboard) {
+  let existing = {};
+  if (existsSync4(configPath)) {
+    try {
+      existing = JSON.parse(readFileSync(configPath, "utf8"));
+    } catch {
+      existing = {};
+    }
+  }
+  const next = mergeSideboardIntoMcpServersJson(existing, sideboard);
+  mkdirSync(dirname2(configPath), { recursive: true });
+  writeFileSync2(configPath, `${JSON.stringify(next, null, 2)}
+`);
+}
+function launchFromResolved(server) {
+  return {
+    command: server.command,
+    args: server.args,
+    env: {
+      ...server.env ?? {},
+      SIDEBOARD_APP_DATA: appDataDir()
+    }
+  };
+}
+async function registerPackagedUserMcpClients() {
+  const launch = launchFromResolved(await resolveSideboardMcpServer());
+  const cursor = userCursorMcpConfigPath();
+  writeMergedMcpServersJson(cursor, launch);
+  const claude = userClaudeMcpConfigPath();
+  if (existsSync4(claude)) {
+    writeMergedMcpServersJson(claude, launch);
+    return { cursor, claude };
+  }
+  return { cursor };
+}
+
+// src/agents/orch-mcp-isolation.ts
+function isInjectedOrchMcpName(name) {
+  const n = name.trim().toLowerCase();
+  return n === "sideboard" || n === "brightsy" || n.startsWith("brightsy_");
+}
+function asObject2(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+  return value;
+}
+function listMcpNamesFromJsonMap(raw, key) {
+  return Object.keys(asObject2(asObject2(raw)[key])).filter((n) => n.trim());
+}
+function listMcpNamesFromCodexToml(text) {
+  try {
+    const parsed = parseToml(text);
+    return Object.keys(asObject2(parsed.mcp_servers)).filter((n) => n.trim());
+  } catch {
+    return [];
+  }
+}
+function readJsonObject(path) {
+  try {
+    return JSON.parse(readFileSync2(path, "utf8"));
+  } catch {
+    return {};
+  }
+}
+function readText(path) {
+  try {
+    return readFileSync2(path, "utf8");
+  } catch {
+    return "";
+  }
+}
+function userCodexConfigPaths(home = homedir2()) {
+  return [join3(home, ".codex", "config.toml"), join3(home, ".config", "codex", "config.toml")];
+}
+function userOpencodeConfigPaths(home = homedir2()) {
+  return [
+    join3(home, ".config", "opencode", "opencode.json"),
+    join3(home, ".config", "opencode", "opencode.jsonc")
+  ];
+}
+function userMcpNamesToDisable(opts) {
+  const keep = new Set(
+    [...opts.injectedNames ?? []].map((n) => n.trim().toLowerCase()).filter(Boolean)
+  );
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const raw of opts.names) {
+    const name = raw.trim();
+    if (!name) continue;
+    const key = name.toLowerCase();
+    if (seen.has(key) || keep.has(key) || isInjectedOrchMcpName(name)) continue;
+    seen.add(key);
+    out.push(name);
+  }
+  return out;
+}
+function listUserCodexMcpNames(home = homedir2()) {
+  const names = [];
+  for (const path of userCodexConfigPaths(home)) {
+    if (!existsSync5(path)) continue;
+    names.push(...listMcpNamesFromCodexToml(readText(path)));
+  }
+  return names;
+}
+function listUserOpencodeMcpNames(home = homedir2()) {
+  const names = [];
+  for (const path of userOpencodeConfigPaths(home)) {
+    if (!existsSync5(path)) continue;
+    names.push(...listMcpNamesFromJsonMap(readJsonObject(path), "mcp"));
+  }
+  return names;
+}
+function toCodexDisableUserMcpArgs(names) {
+  const args = [];
+  for (const name of names) {
+    if (!/^[A-Za-z0-9_-]+$/.test(name)) continue;
+    args.push("-c", `mcp_servers.${name}.enabled=false`);
+  }
+  return args;
+}
+
+// src/agents/codex.ts
 var CODEX_PROMPT_ARG_MAX = 2e5;
 var FALLBACK_CODEX_MODELS = [
   { id: "gpt-5.6-sol", displayName: "GPT-5.6 Sol" },
@@ -2019,7 +2228,7 @@ async function listCodexModels() {
   if (codex === "codex") {
     const which = await run("which", ["codex"], { reject: false });
     if (which.exitCode !== 0) return FALLBACK_CODEX_MODELS;
-  } else if (!existsSync4(codex)) {
+  } else if (!existsSync6(codex)) {
     return FALLBACK_CODEX_MODELS;
   }
   const listed = await run(codex, ["debug", "models"], { reject: false });
@@ -2054,12 +2263,12 @@ function usageFromCodex(usage) {
 }
 function codexConfigHasNetworkAccess() {
   const candidates = [
-    join2(homedir(), ".codex", "config.toml"),
-    join2(homedir(), ".config", "codex", "config.toml")
+    join4(homedir3(), ".codex", "config.toml"),
+    join4(homedir3(), ".config", "codex", "config.toml")
   ];
   for (const path of candidates) {
-    if (!existsSync4(path)) continue;
-    const text = readFileSync(path, "utf8");
+    if (!existsSync6(path)) continue;
+    const text = readFileSync3(path, "utf8");
     if (/network_access\s*=\s*true/.test(text)) return true;
   }
   return false;
@@ -2091,8 +2300,8 @@ function asRecord2(value) {
   return void 0;
 }
 function codexLooksAuthenticated() {
-  const authPath = join2(homedir(), ".codex", "auth.json");
-  if (!existsSync4(authPath)) return false;
+  const authPath = join4(homedir3(), ".codex", "auth.json");
+  if (!existsSync6(authPath)) return false;
   try {
     return statSync(authPath).size > 2;
   } catch {
@@ -2104,7 +2313,7 @@ var codexAdapter = {
   async detect() {
     const codex = resolveAgentExecutable("codex");
     if (codex !== "codex") {
-      if (!existsSync4(codex)) {
+      if (!existsSync6(codex)) {
         return {
           agent: "codex",
           installed: false,
@@ -2164,7 +2373,15 @@ var codexAdapter = {
       }),
       orchestratorThreadId: isOrchestrator ? thread.id : null
     });
-    const mcpOverrides = toCodexMcpConfigArgs(injected);
+    const mcpOverrides = [
+      ...toCodexMcpConfigArgs(injected),
+      ...isOrchestrator ? toCodexDisableUserMcpArgs(
+        userMcpNamesToDisable({
+          injectedNames: injected.map((s) => s.name),
+          names: listUserCodexMcpNames()
+        })
+      ) : []
+    ];
     const execOpts = [
       // Global orchestration cwd is not a git repo; without this Codex ≥0.147
       // refuses to start ("Not inside a trusted directory").
@@ -2364,9 +2581,9 @@ var codexAdapter = {
 };
 
 // src/agents/cursor.ts
-import { existsSync as existsSync5 } from "fs";
+import { existsSync as existsSync7 } from "fs";
 import { createRequire as createRequire2 } from "module";
-import { dirname as dirname2, join as join3 } from "path";
+import { dirname as dirname3, join as join5 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { Cursor } from "@cursor/sdk";
 var FALLBACK_CURSOR_MODELS = [
@@ -2414,11 +2631,11 @@ function entryDir() {
   const cjsDir = typeof __dirname !== "undefined" ? __dirname : "";
   if (cjsDir) return cjsDir;
   try {
-    return dirname2(fileURLToPath2(import.meta.url));
+    return dirname3(fileURLToPath2(import.meta.url));
   } catch {
     try {
       const req = createRequire2(process.cwd() + "/");
-      return dirname2(req.resolve("@sideboard-ai/core"));
+      return dirname3(req.resolve("@sideboard-ai/core"));
     } catch {
       return process.cwd();
     }
@@ -2429,17 +2646,17 @@ function cursorRunnerPath() {
   if (packaged) return packaged;
   const root = entryDir();
   const candidates = [
-    join3(root, "agents", "cursor-runner.js"),
-    join3(root, "agents", "cursor-runner.cjs"),
+    join5(root, "agents", "cursor-runner.js"),
+    join5(root, "agents", "cursor-runner.cjs"),
     // If somehow resolved from package root instead of dist/
-    join3(root, "dist", "agents", "cursor-runner.js"),
-    join3(root, "dist", "agents", "cursor-runner.cjs"),
+    join5(root, "dist", "agents", "cursor-runner.js"),
+    join5(root, "dist", "agents", "cursor-runner.cjs"),
     // Source tree (dev): packages/core/src/agents/cursor-runner.ts
-    join3(root, "cursor-runner.ts"),
-    join3(root, "src", "agents", "cursor-runner.ts")
+    join5(root, "cursor-runner.ts"),
+    join5(root, "src", "agents", "cursor-runner.ts")
   ];
   for (const candidate of candidates) {
-    if (existsSync5(candidate)) return candidate;
+    if (existsSync7(candidate)) return candidate;
   }
   return candidates[0];
 }
@@ -2488,6 +2705,7 @@ var cursorAdapter = {
       fast: thread.fast,
       planMode: thread.planMode,
       apiKey,
+      ...isOrchestrator ? { isolateAmbientMcp: true } : {},
       ...Object.keys(mcpServers).length > 0 ? { mcpServers } : {}
     };
     const runner = cursorRunnerPath();
@@ -2526,7 +2744,7 @@ var cursorAdapter = {
 };
 
 // src/agents/opencode.ts
-import { existsSync as existsSync6 } from "fs";
+import { existsSync as existsSync8 } from "fs";
 var FALLBACK_OPENCODE_MODELS = [
   { id: "opencode/big-pickle", displayName: "opencode \xB7 big-pickle" },
   {
@@ -2585,7 +2803,7 @@ async function listOpencodeModels() {
   if (opencode === "opencode") {
     const which = await run("which", ["opencode"], { reject: false });
     if (which.exitCode !== 0) return FALLBACK_OPENCODE_MODELS;
-  } else if (!existsSync6(opencode)) {
+  } else if (!existsSync8(opencode)) {
     return FALLBACK_OPENCODE_MODELS;
   }
   const listed = await run(opencode, ["models"], { reject: false });
@@ -2620,7 +2838,7 @@ var opencodeAdapter = {
   async detect() {
     const opencode = resolveAgentExecutable("opencode");
     if (opencode !== "opencode") {
-      if (!existsSync6(opencode)) {
+      if (!existsSync8(opencode)) {
         return {
           agent: "opencode",
           installed: false,
@@ -2682,7 +2900,11 @@ var opencodeAdapter = {
       }),
       orchestratorThreadId: isOrchestrator ? thread.id : null
     });
-    const mcpContent = injected.length > 0 ? toOpencodeMcpConfigContent(injected) : null;
+    const disableNames = isOrchestrator ? userMcpNamesToDisable({
+      injectedNames: injected.map((s) => s.name),
+      names: listUserOpencodeMcpNames()
+    }) : [];
+    const mcpContent = injected.length > 0 || disableNames.length > 0 ? toOpencodeMcpConfigContent(injected, { disableNames }) : null;
     return {
       file: resolveAgentExecutable("opencode"),
       args,
@@ -3374,11 +3596,17 @@ export {
   threadRequestsBrightsyMcp,
   shouldInjectBrightsyMcp,
   brightsyMcpAllowedTools,
-  resolveSideboardMcpServer,
   writeInjectedMcpConfig,
   PLAN_MODE_INSTRUCTION,
   permissionMode,
+  mcpStatusThinkingFromClaudeInit,
   claudeAdapter,
+  userCursorMcpConfigPath,
+  userClaudeMcpConfigPath,
+  mergeSideboardIntoMcpServersJson,
+  registerPackagedUserMcpClients,
+  isInjectedOrchMcpName,
+  userMcpNamesToDisable,
   listCodexModels,
   codexAdapter,
   isCursorAutoModel,

package/dist/{coordinator-prompt-7FHKCWXB.js → coordinator-prompt-D2FHU5IZ.js}

@@ -7,7 +7,7 @@ import {
   enrichWorkspacesWithGithub,
   ensureGlobalCoordinatorCwd,
   formatWorkspaceInventory
-} from "./chunk-2F63IMCL.js";
+} from "./chunk-MSFPM5VK.js";
 import "./chunk-LQMFCS54.js";
 import "./chunk-JRH62XC4.js";
 import "./chunk-3BWVOUQG.js";

package/dist/{coordinator-prompt-KX2FVVYT.js → coordinator-prompt-UZDNIVP7.js}

@@ -9,7 +9,7 @@ import {
   enrichWorkspacesWithGithub,
   ensureGlobalCoordinatorCwd,
   formatWorkspaceInventory
-} from "./chunk-RNC3GR6L.js";
+} from "./chunk-TI6UMRWK.js";
 import "./chunk-CJQLPPEJ.js";
 import "./chunk-NVXVEGGM.js";
 import "./chunk-LZQULFIT.js";

package/dist/{global-workspace-2BRRKSDN.js → global-workspace-5WZVSWNT.js}

@@ -15,7 +15,7 @@ import {
   orchestratorSessionPoisonedByBuiltins,
   slackCoordinatorSourceRef,
   takenTeamSlugsForOrchestration
-} from "./chunk-2F63IMCL.js";
+} from "./chunk-MSFPM5VK.js";
 import "./chunk-LQMFCS54.js";
 import "./chunk-JRH62XC4.js";
 import "./chunk-3BWVOUQG.js";

package/dist/{global-workspace-4LHCZ2DC.js → global-workspace-MR75BDBY.js}

@@ -17,7 +17,7 @@ import {
   orchestratorSessionPoisonedByBuiltins,
   slackCoordinatorSourceRef,
   takenTeamSlugsForOrchestration
-} from "./chunk-RNC3GR6L.js";
+} from "./chunk-TI6UMRWK.js";
 import "./chunk-CJQLPPEJ.js";
 import "./chunk-NVXVEGGM.js";
 import "./chunk-LZQULFIT.js";