@sideboard-ai/core 0.1.173 → 0.1.175

package/dist/mcp/run-stdio.js

@@ -37,14 +37,17 @@ import {
   syncBoardPins,
   updateSchedule,
   waitForDetachedJob
-} from "../chunk-SKKEJZEX.js";
+} from "../chunk-RCICB4OM.js";
 import {
+  applySystemCaEnv,
   isInternalAgentStatusText,
   listModelsForAgent,
-  sideboardMcpProfile
-} from "../chunk-6X6KMUI2.js";
-import "../chunk-LZ6QMEQC.js";
-import "../chunk-S42XV45P.js";
+  materializeSystemCaBundle,
+  sideboardMcpProfile,
+  trustSystemCertificates
+} from "../chunk-ZXHV3NHY.js";
+import "../chunk-HVIEYTUK.js";
+import "../chunk-Y4MIXGPA.js";
 import {
   commentAbleTimeTask,
   createAbleTimeTask,
@@ -57,17 +60,17 @@ import {
   searchAbleTimeTasks,
   toAbleTimeIssueInfo,
   updateAbleTimeTask
-} from "../chunk-AQPVBVJE.js";
+} from "../chunk-BBNUL4IE.js";
 import {
   httpFetch
-} from "../chunk-6GN5WPYZ.js";
+} from "../chunk-VKQGAWHY.js";
 import "../chunk-JFOPOMK7.js";
 import "../chunk-OCQPTUR7.js";
 import {
   GLOBAL_WORKSPACE_ID,
   isCloudCoordinatorThread,
   listWorkspaces
-} from "../chunk-234EKD2F.js";
+} from "../chunk-TNOLCU5B.js";
 import {
   canonicalizeRepoPath,
   formatGhLandError,
@@ -78,7 +81,7 @@ import {
   resolveListPrsOptions,
   resolveRepoRoot,
   warmGithubAgentAuth
-} from "../chunk-PXNOT6NV.js";
+} from "../chunk-7O53GXTA.js";
 import "../chunk-D6JWYJ4P.js";
 import "../chunk-LZQULFIT.js";
 import "../chunk-SYFVUF2C.js";
@@ -2863,6 +2866,50 @@ async function getHomeBoardInputs(workspaces, opts) {
   }
 }
 
+// src/mcp/create-thread-agent.ts
+function resolveOrchCreateThreadOptions(input) {
+  const { resolveNewThreadOptions } = input;
+  const account = resolveNewThreadOptions({});
+  const requested = input.requestedAgent;
+  const parent = input.parentAgent ?? void 0;
+  let agent = account.agent;
+  let ignoredAgent;
+  let honorRequestedModel = false;
+  if (requested) {
+    const parentEcho = Boolean(parent) && requested === parent && requested !== account.agent;
+    const cursorAutofill = requested === "cursor" && account.agent !== "cursor";
+    if (parentEcho || cursorAutofill) {
+      ignoredAgent = requested;
+    } else {
+      agent = requested;
+      honorRequestedModel = input.requestedModel !== void 0;
+    }
+  }
+  let coercedFrom;
+  if (agent === "codex" && parent === "codex") {
+    coercedFrom = requested ?? "codex";
+    agent = "cursor";
+  }
+  const opts = resolveNewThreadOptions({
+    agent,
+    model: honorRequestedModel ? input.requestedModel : void 0
+  });
+  return {
+    ...opts,
+    ...ignoredAgent ? { ignoredAgent } : {},
+    ...coercedFrom ? { coercedFrom } : {}
+  };
+}
+function orchCreateThreadAgentNote(input) {
+  if (input.coercedFrom) {
+    return `Avoid nested Codex under a Codex orchestrator \u2014 used Account default agent=${input.agent}`;
+  }
+  if (input.ignoredAgent) {
+    return `Ignored agent=${input.ignoredAgent} \u2014 used Account default agent=${input.agent}`;
+  }
+  return void 0;
+}
+
 // src/mcp/server.ts
 var MAX_ORCH_THREADS = 5;
 var CREATE_THREAD_TIMEOUT_MS = 9e4;
@@ -2911,18 +2958,13 @@ async function createOrchChildThread(orch, args, resolveNewThreadOptions) {
       };
     }
   }
-  let agentArg = args.agent;
-  let agentCoercedFrom;
-  const resolvedProbe = resolveNewThreadOptions({ agent: agentArg }).agent;
-  if (resolvedProbe === "codex") {
-    agentCoercedFrom = agentArg ?? "codex";
-    const accountAgent = resolveNewThreadOptions({}).agent;
-    agentArg = accountAgent !== "codex" ? accountAgent : "cursor";
-  }
-  const opts = resolveNewThreadOptions({
-    agent: agentArg,
-    model: args.model
+  const opts = resolveOrchCreateThreadOptions({
+    requestedAgent: args.agent,
+    requestedModel: args.model,
+    parentAgent: parent?.agent,
+    resolveNewThreadOptions
   });
+  const agentNote = orchCreateThreadAgentNote(opts);
   try {
     const priorIds = new Set(orch.getThreads(false).map((t) => t.id));
     const thread = await withTimeout(
@@ -2958,10 +3000,9 @@ async function createOrchChildThread(orch, args, resolveNewThreadOptions) {
         link: `sideboard://thread/${thread.id}`,
         parentThreadId: thread.parentThreadId,
         ...alreadyStarted ? { alreadyStarted: true } : {},
-        ...agentCoercedFrom ? {
-          agentCoercedFrom,
-          note: `Avoid nested Codex under a Codex orchestrator \u2014 used Account default agent=${thread.agent}`
-        } : {},
+        ...opts.coercedFrom ? { agentCoercedFrom: opts.coercedFrom } : {},
+        ...opts.ignoredAgent ? { agentIgnored: opts.ignoredAgent } : {},
+        ...agentNote ? { note: agentNote } : {},
         ...parentCorrectedFrom ? { parentCorrectedFrom, parentNote } : {}
       })
     };
@@ -3321,11 +3362,13 @@ async function startMcpServer() {
     );
     server.tool(
       "create_thread",
-      `Create a worktree thread (chat) from branch, pr, or ticket. A ticket, PR, or named branch may have only one live worktree \u2014 if one already matches, returns it (alreadyStarted=true) instead of a second checkout. Creating from the default branch still opens a new isolated worktree. Pass repoPath from list_workspaces. cowboy=true uses the project folder on the default branch (no isolated worktree; land is commit+push). From an orchestration chat, omit parentThreadId (Sideboard binds the child to this chat) or pass the exact id from the turn reminder \u2014 never invent a uuid. Prefer omitting agent/model so Sideboard applies ${accountDefaultsHint}. Setup (settings.toml, .cursor/worktrees.json, or script/setup) runs in the background in parallel with the first turn (skipped for cowboy). Then use send_to_thread to chat.`,
+      `Create a worktree thread (chat) from branch, pr, or ticket. A ticket, PR, or named branch may have only one live worktree \u2014 if one already matches, returns it (alreadyStarted=true) instead of a second checkout. Creating from the default branch still opens a new isolated worktree. Pass repoPath from list_workspaces. cowboy=true uses the project folder on the default branch (no isolated worktree; land is commit+push). From an orchestration chat, omit parentThreadId (Sideboard binds the child to this chat) or pass the exact id from the turn reminder \u2014 never invent a uuid. Omit agent/model \u2014 Sideboard applies ${accountDefaultsHint}. Do not pass your own agent or agent=cursor; those are ignored. Setup (settings.toml, .cursor/worktrees.json, or script/setup) runs in the background in parallel with the first turn (skipped for cowboy). Then use send_to_thread to chat.`,
       {
         sourceType: z8.enum(["branch", "pr", "ticket"]),
         sourceRef: z8.string(),
-        agent: z8.enum(["claude", "codex", "opencode", "brightsy", "cursor"]).optional().describe(`Omit to use Account default agent (${accountDefaults.agent})`),
+        agent: z8.enum(["claude", "codex", "opencode", "brightsy", "cursor"]).optional().describe(
+          `Usually omit. Sideboard uses Account default agent (${accountDefaults.agent}). Passing your own agent or cursor is ignored.`
+        ),
         model: z8.string().nullable().optional().describe(
           `Usually omit to use Account default model (${accountDefaults.model?.trim() || "Auto"}). Pass null only to force Auto / agent-default.`
         ),
@@ -4032,6 +4075,12 @@ async function startMcpServer() {
 
 // src/mcp/run-stdio.ts
 dropNestedElectronEnvFromProcess();
+var systemCaBundle = materializeSystemCaBundle();
+if (systemCaBundle && !process.env.NODE_EXTRA_CA_CERTS?.trim()) {
+  process.env.NODE_EXTRA_CA_CERTS = systemCaBundle;
+}
+applySystemCaEnv(process.env);
+trustSystemCertificates();
 startMcpServer().catch((err) => {
   console.error(err);
   process.exitCode = 1;

package/dist/{oauth-A7XXI2TM.js → oauth-6ZQ4Q4XN.js}

@@ -2,8 +2,8 @@ import {
   brightsyAccessTokenNeedsRefresh,
   ensureBrightsyLocalConfigFresh,
   refreshBrightsyAccessToken
-} from "./chunk-M267JPEA.js";
-import "./chunk-ELBYOGVA.js";
+} from "./chunk-AN3THU7F.js";
+import "./chunk-N7WZ6NIN.js";
 export {
   brightsyAccessTokenNeedsRefresh,
   ensureBrightsyLocalConfigFresh,

package/dist/{oauth-YJBAURIJ.js → oauth-O7UGLZOY.js}

@@ -4,8 +4,8 @@ import {
   brightsyAccessTokenNeedsRefresh,
   ensureBrightsyLocalConfigFresh,
   refreshBrightsyAccessToken
-} from "./chunk-S42XV45P.js";
-import "./chunk-6GN5WPYZ.js";
+} from "./chunk-Y4MIXGPA.js";
+import "./chunk-VKQGAWHY.js";
 export {
   brightsyAccessTokenNeedsRefresh,
   ensureBrightsyLocalConfigFresh,

package/dist/{orchestrator-PEOUSLAY.js → orchestrator-PDEU75EE.js}

@@ -5,17 +5,17 @@ import {
   isPidAlive,
   startOrchestration,
   waitForPidExit
-} from "./chunk-WE34LOLO.js";
+} from "./chunk-JIWRBNSO.js";
 import "./chunk-DJU54RYW.js";
-import "./chunk-3F7AXVIL.js";
-import "./chunk-2RM6BZQ2.js";
-import "./chunk-QYZYDO3F.js";
+import "./chunk-QTJ2ERA6.js";
+import "./chunk-NA7P3SZL.js";
+import "./chunk-7JIYKYLL.js";
 import "./chunk-6K64FJDD.js";
-import "./chunk-XD2BAANL.js";
-import "./chunk-M267JPEA.js";
-import "./chunk-ELBYOGVA.js";
+import "./chunk-IEEAVWAP.js";
+import "./chunk-AN3THU7F.js";
+import "./chunk-N7WZ6NIN.js";
 import "./chunk-AXQ4ZWHK.js";
-import "./chunk-XXIH6XYR.js";
+import "./chunk-NQTKRAUF.js";
 import "./chunk-J7LQVLFQ.js";
 import "./chunk-4TR3HZFT.js";
 import "./chunk-AO35MGOE.js";

package/dist/{orchestrator-QBB2RELD.js → orchestrator-QSNGJ2ER.js}

@@ -7,15 +7,15 @@ import {
   isPidAlive,
   startOrchestration,
   waitForPidExit
-} from "./chunk-SKKEJZEX.js";
-import "./chunk-6X6KMUI2.js";
-import "./chunk-LZ6QMEQC.js";
-import "./chunk-S42XV45P.js";
-import "./chunk-6GN5WPYZ.js";
+} from "./chunk-RCICB4OM.js";
+import "./chunk-ZXHV3NHY.js";
+import "./chunk-HVIEYTUK.js";
+import "./chunk-Y4MIXGPA.js";
+import "./chunk-VKQGAWHY.js";
 import "./chunk-JFOPOMK7.js";
 import "./chunk-OCQPTUR7.js";
-import "./chunk-234EKD2F.js";
-import "./chunk-PXNOT6NV.js";
+import "./chunk-TNOLCU5B.js";
+import "./chunk-7O53GXTA.js";
 import "./chunk-D6JWYJ4P.js";
 import "./chunk-LZQULFIT.js";
 import "./chunk-SYFVUF2C.js";

package/dist/{workspaces-L73MCDFA.js → workspaces-P66DGCZE.js}

@@ -6,8 +6,8 @@ import {
   listWorkspaces,
   removeWorkspace,
   syncWorkspacesFromThreads
-} from "./chunk-234EKD2F.js";
-import "./chunk-PXNOT6NV.js";
+} from "./chunk-TNOLCU5B.js";
+import "./chunk-7O53GXTA.js";
 import "./chunk-D6JWYJ4P.js";
 import "./chunk-LZQULFIT.js";
 import "./chunk-SYFVUF2C.js";

package/dist/{workspaces-UYSD2STS.js → workspaces-TEBTNS2M.js}

@@ -4,8 +4,8 @@ import {
   listWorkspaces,
   removeWorkspace,
   syncWorkspacesFromThreads
-} from "./chunk-2RM6BZQ2.js";
-import "./chunk-QYZYDO3F.js";
+} from "./chunk-NA7P3SZL.js";
+import "./chunk-7JIYKYLL.js";
 import "./chunk-6K64FJDD.js";
 import "./chunk-J7LQVLFQ.js";
 import "./chunk-4TR3HZFT.js";

package/dist/{worktree-SQD3DBYC.js → worktree-LC4VRWDM.js}

@@ -59,7 +59,7 @@ import {
   worktreeDisplayLabelForGroup,
   worktreeNameFromPath,
   worktreeSlugForTicket
-} from "./chunk-PXNOT6NV.js";
+} from "./chunk-7O53GXTA.js";
 import "./chunk-D6JWYJ4P.js";
 import "./chunk-LZQULFIT.js";
 import "./chunk-SYFVUF2C.js";

package/dist/{worktree-WVEDT3FM.js → worktree-UTDBQXSS.js}

@@ -57,7 +57,7 @@ import {
   worktreeDisplayLabelForGroup,
   worktreeNameFromPath,
   worktreeSlugForTicket
-} from "./chunk-QYZYDO3F.js";
+} from "./chunk-7JIYKYLL.js";
 import "./chunk-6K64FJDD.js";
 import "./chunk-J7LQVLFQ.js";
 import "./chunk-4TR3HZFT.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sideboard-ai/core",
-  "version": "0.1.173",
+  "version": "0.1.175",
   "description": "Sideboard core — orchestration, agents, git worktrees, MCP server",
   "license": "Apache-2.0",
   "type": "module",