@sideboard-ai/core 0.1.174 → 0.1.175

package/dist/index.cjs

@@ -7684,8 +7684,8 @@ function ensureGlobalCoordinatorCwd(opts) {
     "",
     "When creating threads, pass `repoPath` from `list_workspaces` (or the path you just registered).",
     orchId ? `Pass parentThreadId="${orchId}" (or omit it). Never invent another parentThreadId.` : "Pass `parentThreadId` for children (this chat's id from the turn reminder).",
-    "Omit `agent` / `model` on `create_thread` unless you have a reason to override Account defaults.",
-    "Never pass `agent=codex` when you yourself are Codex \u2014 nested Codex deadlocks on shared ~/.codex locks. Omit agent (Account default) or use cursor/claude.",
+    "Omit `agent` / `model` on `create_thread`. Sideboard applies Settings \u2192 Default agent, model & effort. Do not pass your own agent or `agent=cursor` \u2014 those are ignored.",
+    "Never pass `agent=codex` when you yourself are Codex \u2014 nested Codex deadlocks on shared ~/.codex locks. Omit agent; Sideboard applies Account defaults (and coerces only that nested-Codex case).",
     "Typical flow (Home board): list_board \u2192 create_thread (sourceType=ticket|pr|branch) \u2192 send_to_thread \u2192 wait_for_turn (loop while stillRunning) \u2192 ask_git create-draft \u2192 wait_for_turn. Merge only if the user explicitly asked (`ask_git` merge).",
     "Typical flow (branch / explicit source): list_workspaces \u2192 list_branches|list_prs|list_issues \u2192 create_thread \u2192 send_to_thread \u2192 wait_for_turn (loop while stillRunning) \u2192 ask_git create-draft.",
     "Typical flow (find work): list_workspaces \u2192 pick repo(s) matching account / project context \u2192 Sideboard list_issues / linear_* (tickets) or list_prs(queue=review) (reviews) \u2192 show the options. Never wait on Claude Linear MCP. Only create_thread + send_to_thread when they asked to start (e.g. \u201Cfind me work and start it\u201D) \u2014 then wait_for_turn (loop while stillRunning) \u2192 ask_git create-draft.",
@@ -7762,7 +7762,7 @@ var init_coordinator_prompt = __esm({
       "Workspaces:",
       "- add_workspace / remove_workspace \u2014 register or unregister a git repo",
       "Worktree threads (chats):",
-      "- create_thread \u2014 create a worktree + chat from branch | pr | ticket (appears on Home). Do not create a second worktree for a ticket, PR, or named branch that already has one \u2014 that call returns the live thread (alreadyStarted=true). Creating from the default branch still opens a new isolated worktree. Pass repoPath + parentThreadId; omit agent and model to use Sideboard Account defaults (Settings \u2192 Default agent, model & effort). If the repo has a setup script, Sideboard runs it in the background (does not block send_to_thread). If you are Codex, do not set agent=codex (nested Codex deadlocks)",
+      "- create_thread \u2014 create a worktree + chat from branch | pr | ticket (appears on Home). Do not create a second worktree for a ticket, PR, or named branch that already has one \u2014 that call returns the live thread (alreadyStarted=true). Creating from the default branch still opens a new isolated worktree. Pass repoPath + parentThreadId; omit agent and model so Sideboard applies Settings \u2192 Default agent, model & effort (never pass your own agent or agent=cursor). If the repo has a setup script, Sideboard runs it in the background (does not block send_to_thread). Nested Codex (you are Codex and the child is Codex) deadlocks \u2014 omit agent; Sideboard coerces that case",
       "- start_board_card \u2014 same as create_thread for a ticket/PR/named branch (attaches issue text when resolvable). Then send_to_thread.",
       "- fork_worktree \u2014 fork a worktree chat into a NEW git worktree + chat (transcript attached); optional agent; leave model unset (Auto) unless you have a reason. Not for orchestration chats.",
       "- fork_chat \u2014 fork a worktree chat (same worktree tab) OR a Global orchestration chat (new orchestration tab); optional agent; leave model unset (Auto) unless you have a reason. Remote coordinators: use this to continue another orchestration chat on a different agent after session limits.",
@@ -8943,17 +8943,24 @@ var init_config = __esm({
 function setHttpFetchImpl(fetchImpl) {
   injected = fetchImpl;
 }
+function tlsIssuerHint(code, message) {
+  const text7 = `${code ?? ""} ${message}`;
+  return TLS_ISSUER_RE.test(text7) ? TLS_ISSUER_HINT : "";
+}
 function formatFetchError(err, url) {
   if (!(err instanceof Error)) return `${String(err)} (${url})`;
   const cause = err.cause;
   let detail = "";
+  let hint = tlsIssuerHint(void 0, err.message);
   if (cause instanceof Error) {
     const code = typeof cause.code === "string" ? cause.code : void 0;
     detail = code ? ` [${code}: ${cause.message}]` : ` [${cause.message}]`;
+    hint = tlsIssuerHint(code, `${err.message} ${cause.message}`) || hint;
   } else if (cause != null) {
     detail = ` [${String(cause)}]`;
+    hint = tlsIssuerHint(void 0, String(cause)) || hint;
   }
-  return `${err.message}${detail} (${url})`;
+  return `${err.message}${detail} (${url})${hint}`;
 }
 async function httpFetch(input, init) {
   const url = typeof input === "string" ? input : input.href;
@@ -8964,11 +8971,13 @@ async function httpFetch(input, init) {
     throw new Error(formatFetchError(err, url));
   }
 }
-var injected;
+var injected, TLS_ISSUER_RE, TLS_ISSUER_HINT;
 var init_fetch = __esm({
   "src/http/fetch.ts"() {
     "use strict";
     injected = null;
+    TLS_ISSUER_RE = /UNABLE_TO_GET_ISSUER_CERT|UNABLE_TO_VERIFY_LEAF_SIGNATURE|SELF_SIGNED_CERT_IN_CHAIN/i;
+    TLS_ISSUER_HINT = " \u2014 Node rejected the TLS certificate (corporate VPN/proxy CA). Desktop Linear can still work; reconnecting the API key will not fix this.";
   }
 });
 
@@ -10521,6 +10530,138 @@ var init_profile = __esm({
   }
 });
 
+// src/http/system-ca.ts
+function splitPemCertificates(pem) {
+  return pem.match(PEM_CERT_RE) ?? [];
+}
+function readExistingFile(path2) {
+  try {
+    return (0, import_node_fs26.existsSync)(path2) ? (0, import_node_fs26.readFileSync)(path2, "utf8") : "";
+  } catch {
+    return "";
+  }
+}
+function darwinKeychainPem(spawn2) {
+  const result = spawn2("/usr/bin/security", ["find-certificate", "-a", "-p"], {
+    encoding: "utf8",
+    maxBuffer: 32 * 1024 * 1024,
+    timeout: 15e3
+  });
+  if (result.status !== 0) return "";
+  return typeof result.stdout === "string" ? result.stdout : "";
+}
+function linuxSystemCaPem() {
+  for (const path2 of LINUX_CA_FILES) {
+    const pem = readExistingFile(path2);
+    if (splitPemCertificates(pem).length > 0) return pem;
+  }
+  return "";
+}
+function collectSystemCaPem(io = {}) {
+  const platform = io.platform ?? process.platform;
+  if (platform === "darwin") {
+    return darwinKeychainPem(io.spawn ?? import_node_child_process4.spawnSync);
+  }
+  if (platform === "linux") {
+    return linuxSystemCaPem();
+  }
+  return "";
+}
+function systemCaBundlePath(io = {}) {
+  return (0, import_node_path28.join)((io.appData ?? appDataDir)(), BUNDLE_NAME);
+}
+function bundleIsFresh(path2, now) {
+  try {
+    if (!(0, import_node_fs26.existsSync)(path2)) return false;
+    if (splitPemCertificates((0, import_node_fs26.readFileSync)(path2, "utf8")).length === 0) return false;
+    return now - (0, import_node_fs26.statSync)(path2).mtimeMs < BUNDLE_MAX_AGE_MS;
+  } catch {
+    return false;
+  }
+}
+function materializeSystemCaBundle(io = {}) {
+  const inherited = process.env.NODE_EXTRA_CA_CERTS?.trim();
+  if (inherited && splitPemCertificates(readExistingFile(inherited)).length > 0) {
+    return inherited;
+  }
+  const platform = io.platform ?? process.platform;
+  if (platform === "linux") {
+    for (const path2 of LINUX_CA_FILES) {
+      if (splitPemCertificates(readExistingFile(path2)).length > 0) return path2;
+    }
+  }
+  const dest = systemCaBundlePath(io);
+  const now = (io.now ?? Date.now)();
+  if (bundleIsFresh(dest, now)) return dest;
+  const pem = collectSystemCaPem(io);
+  if (splitPemCertificates(pem).length === 0) {
+    return (0, import_node_fs26.existsSync)(dest) && splitPemCertificates(readExistingFile(dest)).length > 0 ? dest : void 0;
+  }
+  try {
+    (0, import_node_fs26.mkdirSync)((0, import_node_path28.dirname)(dest), { recursive: true });
+    (0, import_node_fs26.writeFileSync)(dest, pem.endsWith("\n") ? pem : `${pem}
+`, { mode: 384 });
+    return dest;
+  } catch {
+    return void 0;
+  }
+}
+function applySystemCaEnv(env) {
+  if (!String(env[NODE_USE_SYSTEM_CA] ?? "").trim()) {
+    env[NODE_USE_SYSTEM_CA] = "1";
+  }
+  if (String(env[NODE_EXTRA_CA_CERTS] ?? "").trim()) return;
+  const inherited = process.env.NODE_EXTRA_CA_CERTS?.trim();
+  if (inherited) env[NODE_EXTRA_CA_CERTS] = inherited;
+}
+function extraCertsFromBundle() {
+  const path2 = process.env.NODE_EXTRA_CA_CERTS?.trim();
+  if (path2) return splitPemCertificates(readExistingFile(path2));
+  const dest = systemCaBundlePath();
+  return splitPemCertificates(readExistingFile(dest));
+}
+function trustSystemCertificates(io = {}) {
+  try {
+    const api = import_node_tls.default;
+    if (typeof api.getCACertificates !== "function" || typeof api.setDefaultCACertificates !== "function") {
+      return false;
+    }
+    const current = api.getCACertificates("default");
+    const system = api.getCACertificates("system");
+    let extra = extraCertsFromBundle();
+    if (system.length === 0 && extra.length === 0) {
+      extra = splitPemCertificates(collectSystemCaPem(io));
+    }
+    if (system.length === 0 && extra.length === 0) return false;
+    api.setDefaultCACertificates([...current, ...system, ...extra]);
+    return true;
+  } catch {
+    return false;
+  }
+}
+var import_node_child_process4, import_node_fs26, import_node_path28, import_node_tls, NODE_USE_SYSTEM_CA, NODE_EXTRA_CA_CERTS, BUNDLE_NAME, BUNDLE_MAX_AGE_MS, LINUX_CA_FILES, PEM_CERT_RE;
+var init_system_ca = __esm({
+  "src/http/system-ca.ts"() {
+    "use strict";
+    import_node_child_process4 = require("child_process");
+    import_node_fs26 = require("fs");
+    import_node_path28 = require("path");
+    import_node_tls = __toESM(require("tls"), 1);
+    init_paths();
+    NODE_USE_SYSTEM_CA = "NODE_USE_SYSTEM_CA";
+    NODE_EXTRA_CA_CERTS = "NODE_EXTRA_CA_CERTS";
+    BUNDLE_NAME = "system-ca.pem";
+    BUNDLE_MAX_AGE_MS = 24 * 60 * 60 * 1e3;
+    LINUX_CA_FILES = [
+      "/etc/ssl/certs/ca-certificates.crt",
+      "/etc/pki/tls/certs/ca-bundle.crt",
+      "/etc/ssl/ca-bundle.pem",
+      "/etc/ssl/cert.pem"
+    ];
+    PEM_CERT_RE = /-----BEGIN CERTIFICATE-----[\s\S]*?-----END CERTIFICATE-----/g;
+  }
+});
+
 // src/agents/packaged-runtime.ts
 function electronResourcesPath() {
   const resources = process.resourcesPath;
@@ -10530,43 +10671,43 @@ function electronResourcesPath() {
 function packagedCursorRuntimeDir() {
   const resources = electronResourcesPath();
   if (!resources) return null;
-  const dir = (0, import_node_path28.join)(resources, "cursor-runtime");
-  if (!(0, import_node_fs26.existsSync)((0, import_node_path28.join)(dir, "core-dist", "agents", "cursor-runner.js"))) return null;
+  const dir = (0, import_node_path29.join)(resources, "cursor-runtime");
+  if (!(0, import_node_fs27.existsSync)((0, import_node_path29.join)(dir, "core-dist", "agents", "cursor-runner.js"))) return null;
   return dir;
 }
 function packagedCursorRunnerPath() {
   const dir = packagedCursorRuntimeDir();
-  return dir ? (0, import_node_path28.join)(dir, "core-dist", "agents", "cursor-runner.js") : null;
+  return dir ? (0, import_node_path29.join)(dir, "core-dist", "agents", "cursor-runner.js") : null;
 }
 function packagedMcpDir() {
   const resources = electronResourcesPath();
   if (!resources) return null;
-  const dir = (0, import_node_path28.join)(resources, "sideboard-mcp");
-  if (!(0, import_node_fs26.existsSync)((0, import_node_path28.join)(dir, "core-dist", "mcp", "run-stdio.js"))) return null;
+  const dir = (0, import_node_path29.join)(resources, "sideboard-mcp");
+  if (!(0, import_node_fs27.existsSync)((0, import_node_path29.join)(dir, "core-dist", "mcp", "run-stdio.js"))) return null;
   return dir;
 }
 function packagedMcpStdioPath() {
   const dir = packagedMcpDir();
-  return dir ? (0, import_node_path28.join)(dir, "core-dist", "mcp", "run-stdio.js") : null;
+  return dir ? (0, import_node_path29.join)(dir, "core-dist", "mcp", "run-stdio.js") : null;
 }
 function packagedBundledNodePath() {
   const resources = electronResourcesPath();
   if (!resources) return null;
-  const bin = (0, import_node_path28.join)(resources, "node", "bin", "node");
-  if (!(0, import_node_fs26.existsSync)(bin)) return null;
+  const bin = (0, import_node_path29.join)(resources, "node", "bin", "node");
+  if (!(0, import_node_fs27.existsSync)(bin)) return null;
   return bin;
 }
 function packagedCursorRipgrepCandidate(platformPkg, binName) {
   const dir = packagedCursorRuntimeDir();
   if (!dir) return null;
-  return (0, import_node_path28.join)(dir, "node_modules", platformPkg, "bin", binName);
+  return (0, import_node_path29.join)(dir, "node_modules", platformPkg, "bin", binName);
 }
-var import_node_fs26, import_node_path28;
+var import_node_fs27, import_node_path29;
 var init_packaged_runtime = __esm({
   "src/agents/packaged-runtime.ts"() {
     "use strict";
-    import_node_fs26 = require("fs");
-    import_node_path28 = require("path");
+    import_node_fs27 = require("fs");
+    import_node_path29 = require("path");
   }
 });
 
@@ -10586,6 +10727,7 @@ function applyAgentRunnerHeapEnv(env) {
     env.NODE_OPTIONS,
     AGENT_RUNNER_MAX_OLD_SPACE_MB
   );
+  applySystemCaEnv(env);
 }
 function envWithAgentHeap(env) {
   const next = { ...env };
@@ -10600,7 +10742,7 @@ function unpackedAsarPath(filePath) {
   if (!isAsarPath(filePath)) return null;
   const unpacked = filePath.replace(/\.asar(?=[/\\])/, ".asar.unpacked");
   if (unpacked === filePath) return null;
-  return (0, import_node_fs27.existsSync)(unpacked) ? unpacked : null;
+  return (0, import_node_fs28.existsSync)(unpacked) ? unpacked : null;
 }
 function nodeReadableScriptPath(scriptPath) {
   return unpackedAsarPath(scriptPath) ?? scriptPath;
@@ -10640,37 +10782,37 @@ function pickPreferredNode(candidates) {
   return best;
 }
 function versionDirNodeBins(root, toBin) {
-  if (!(0, import_node_fs27.existsSync)(root)) return [];
+  if (!(0, import_node_fs28.existsSync)(root)) return [];
   try {
-    return (0, import_node_fs27.readdirSync)(root).map(toBin);
+    return (0, import_node_fs28.readdirSync)(root).map(toBin);
   } catch {
     return [];
   }
 }
 function defaultNodeBinCandidates(home = (0, import_node_os8.homedir)()) {
   const kegs = ["/opt/homebrew", "/usr/local"].flatMap(
-    (prefix) => PREFERRED_LTS_MAJORS.map((major) => (0, import_node_path29.join)(prefix, "opt", `node@${major}`, "bin", "node"))
+    (prefix) => PREFERRED_LTS_MAJORS.map((major) => (0, import_node_path30.join)(prefix, "opt", `node@${major}`, "bin", "node"))
   );
   return [
     ...kegs,
     "/opt/homebrew/bin/node",
     "/usr/local/bin/node",
-    (0, import_node_path29.join)(home, ".local/share/fnm/aliases/default/bin/node"),
-    (0, import_node_path29.join)(home, ".nvm/current/bin/node"),
-    (0, import_node_path29.join)(home, ".volta/bin/node"),
-    (0, import_node_path29.join)(home, ".asdf/shims/node"),
-    (0, import_node_path29.join)(home, ".local/share/mise/shims/node"),
+    (0, import_node_path30.join)(home, ".local/share/fnm/aliases/default/bin/node"),
+    (0, import_node_path30.join)(home, ".nvm/current/bin/node"),
+    (0, import_node_path30.join)(home, ".volta/bin/node"),
+    (0, import_node_path30.join)(home, ".asdf/shims/node"),
+    (0, import_node_path30.join)(home, ".local/share/mise/shims/node"),
     ...versionDirNodeBins(
-      (0, import_node_path29.join)(home, ".nvm", "versions", "node"),
-      (name) => (0, import_node_path29.join)(home, ".nvm", "versions", "node", name, "bin", "node")
+      (0, import_node_path30.join)(home, ".nvm", "versions", "node"),
+      (name) => (0, import_node_path30.join)(home, ".nvm", "versions", "node", name, "bin", "node")
     ),
     ...versionDirNodeBins(
-      (0, import_node_path29.join)(home, ".local/share/fnm", "node-versions"),
-      (name) => (0, import_node_path29.join)(home, ".local/share/fnm", "node-versions", name, "installation", "bin", "node")
+      (0, import_node_path30.join)(home, ".local/share/fnm", "node-versions"),
+      (name) => (0, import_node_path30.join)(home, ".local/share/fnm", "node-versions", name, "installation", "bin", "node")
     ),
     ...versionDirNodeBins(
-      (0, import_node_path29.join)(home, ".volta", "tools", "image", "node"),
-      (name) => (0, import_node_path29.join)(home, ".volta", "tools", "image", "node", name, "bin", "node")
+      (0, import_node_path30.join)(home, ".volta", "tools", "image", "node"),
+      (name) => (0, import_node_path30.join)(home, ".volta", "tools", "image", "node", name, "bin", "node")
     )
   ];
 }
@@ -10679,10 +10821,10 @@ function uniqueExistingNodeBins(paths) {
   const out = [];
   for (const raw of paths) {
     const p = raw.trim();
-    if (!p || !(0, import_node_fs27.existsSync)(p) || isElectronLikeCommand(p)) continue;
+    if (!p || !(0, import_node_fs28.existsSync)(p) || isElectronLikeCommand(p)) continue;
     let key = p;
     try {
-      key = (0, import_node_fs27.realpathSync)(p);
+      key = (0, import_node_fs28.realpathSync)(p);
     } catch {
       continue;
     }
@@ -10762,14 +10904,15 @@ async function resolveNodeLaunch(scriptPath) {
     env: { ELECTRON_RUN_AS_NODE: "1" }
   };
 }
-var import_node_fs27, import_node_os8, import_node_path29, AGENT_RUNNER_MAX_OLD_SPACE_MB, MAX_OLD_SPACE_FLAG, PREFERRED_LTS_MAJORS;
+var import_node_fs28, import_node_os8, import_node_path30, AGENT_RUNNER_MAX_OLD_SPACE_MB, MAX_OLD_SPACE_FLAG, PREFERRED_LTS_MAJORS;
 var init_node_launch = __esm({
   "src/agents/node-launch.ts"() {
     "use strict";
-    import_node_fs27 = require("fs");
+    import_node_fs28 = require("fs");
     import_node_os8 = require("os");
-    import_node_path29 = require("path");
+    import_node_path30 = require("path");
     init_nested_electron_env();
+    init_system_ca();
     init_run();
     init_packaged_runtime();
     AGENT_RUNNER_MAX_OLD_SPACE_MB = 8192;
@@ -10869,37 +11012,37 @@ function corePackageDir() {
   try {
     const url = import_meta.url;
     if (typeof url === "string" && url.length > 0) {
-      return (0, import_node_path30.dirname)((0, import_node_url.fileURLToPath)(url));
+      return (0, import_node_path31.dirname)((0, import_node_url.fileURLToPath)(url));
     }
   } catch {
   }
   try {
-    const req = (0, import_node_module.createRequire)((0, import_node_path30.join)(process.cwd(), "package.json"));
-    return (0, import_node_path30.dirname)(req.resolve("@sideboard-ai/core"));
+    const req = (0, import_node_module.createRequire)((0, import_node_path31.join)(process.cwd(), "package.json"));
+    return (0, import_node_path31.dirname)(req.resolve("@sideboard-ai/core"));
   } catch {
     return process.cwd();
   }
 }
 function findSideboardMcpJsEntry() {
   const override = process.env.SIDEBOARD_MCP_ENTRY?.trim() || process.env.SIDEBOARD_CLI?.trim();
-  if (override && (0, import_node_fs28.existsSync)(override)) return override;
+  if (override && (0, import_node_fs29.existsSync)(override)) return override;
   const packaged = packagedMcpStdioPath();
   if (packaged) return packaged;
   let dir = corePackageDir();
   for (let i = 0; i < 10; i++) {
     const candidates = [
-      (0, import_node_path30.join)(dir, "mcp/run-stdio.js"),
-      (0, import_node_path30.join)(dir, "mcp/run-stdio.cjs"),
-      (0, import_node_path30.join)(dir, "dist/mcp/run-stdio.js"),
-      (0, import_node_path30.join)(dir, "dist/mcp/run-stdio.cjs"),
-      (0, import_node_path30.join)(dir, "packages/core/dist/mcp/run-stdio.js"),
-      (0, import_node_path30.join)(dir, "packages/cli/dist/index.js"),
-      (0, import_node_path30.join)(dir, "cli/dist/index.js")
+      (0, import_node_path31.join)(dir, "mcp/run-stdio.js"),
+      (0, import_node_path31.join)(dir, "mcp/run-stdio.cjs"),
+      (0, import_node_path31.join)(dir, "dist/mcp/run-stdio.js"),
+      (0, import_node_path31.join)(dir, "dist/mcp/run-stdio.cjs"),
+      (0, import_node_path31.join)(dir, "packages/core/dist/mcp/run-stdio.js"),
+      (0, import_node_path31.join)(dir, "packages/cli/dist/index.js"),
+      (0, import_node_path31.join)(dir, "cli/dist/index.js")
     ];
     for (const p of candidates) {
-      if ((0, import_node_fs28.existsSync)(p) && !isAsarPath(p)) return p;
+      if ((0, import_node_fs29.existsSync)(p) && !isAsarPath(p)) return p;
     }
-    const parent = (0, import_node_path30.dirname)(dir);
+    const parent = (0, import_node_path31.dirname)(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -11046,22 +11189,22 @@ function writeMcpServersConfig(servers) {
       ...env ? { env } : {}
     };
   }
-  const dir = (0, import_node_fs28.mkdtempSync)((0, import_node_path30.join)((0, import_node_os9.tmpdir)(), "sideboard-mcp-"));
-  const cfgPath = (0, import_node_path30.join)(dir, "mcp.json");
-  (0, import_node_fs28.writeFileSync)(cfgPath, JSON.stringify({ mcpServers }, null, 2));
+  const dir = (0, import_node_fs29.mkdtempSync)((0, import_node_path31.join)((0, import_node_os9.tmpdir)(), "sideboard-mcp-"));
+  const cfgPath = (0, import_node_path31.join)(dir, "mcp.json");
+  (0, import_node_fs29.writeFileSync)(cfgPath, JSON.stringify({ mcpServers }, null, 2));
   return cfgPath;
 }
 async function writeInjectedMcpConfig(opts) {
   return writeMcpServersConfig(await buildInjectedMcpServers(opts));
 }
-var import_node_fs28, import_node_module, import_node_os9, import_node_path30, import_node_url, import_meta, SIDEBOARD_MCP_ALLOWED_TOOLS, SIDEBOARD_ARTIFACT_MCP_ALLOWED_TOOLS, SIDEBOARD_GITHUB_MCP_ALLOWED_TOOLS, SIDEBOARD_LINEAR_MCP_ALLOWED_TOOLS, SIDEBOARD_ABLETIME_MCP_ALLOWED_TOOLS, BRIGHTSY_MCP_ALLOWED_TOOLS, brightsyMcpCommandCache, BRIGHTSY_WORD;
+var import_node_fs29, import_node_module, import_node_os9, import_node_path31, import_node_url, import_meta, SIDEBOARD_MCP_ALLOWED_TOOLS, SIDEBOARD_ARTIFACT_MCP_ALLOWED_TOOLS, SIDEBOARD_GITHUB_MCP_ALLOWED_TOOLS, SIDEBOARD_LINEAR_MCP_ALLOWED_TOOLS, SIDEBOARD_ABLETIME_MCP_ALLOWED_TOOLS, BRIGHTSY_MCP_ALLOWED_TOOLS, brightsyMcpCommandCache, BRIGHTSY_WORD;
 var init_injected_mcp = __esm({
   "src/agents/injected-mcp.ts"() {
     "use strict";
-    import_node_fs28 = require("fs");
+    import_node_fs29 = require("fs");
     import_node_module = require("module");
     import_node_os9 = require("os");
-    import_node_path30 = require("path");
+    import_node_path31 = require("path");
     import_node_url = require("url");
     init_run();
     init_config();
@@ -11448,11 +11591,11 @@ function parseIssuesJson(raw) {
   }
   return [];
 }
-var import_node_fs29, BASE_ALLOWED_TOOLS, CLAUDE_PRINT_BG_WAIT_CEILING_MS, CLAUDE_CHROME_ALLOWED_TOOLS, CLAUDE_PROMPT_ARG_MAX, mcpListCache, claudeAdapter;
+var import_node_fs30, BASE_ALLOWED_TOOLS, CLAUDE_PRINT_BG_WAIT_CEILING_MS, CLAUDE_CHROME_ALLOWED_TOOLS, CLAUDE_PROMPT_ARG_MAX, mcpListCache, claudeAdapter;
 var init_claude = __esm({
   "src/agents/claude.ts"() {
     "use strict";
-    import_node_fs29 = require("fs");
+    import_node_fs30 = require("fs");
     init_run();
     init_app_settings();
     init_claude_mcp();
@@ -11492,7 +11635,7 @@ var init_claude = __esm({
       async detect() {
         const claude = resolveClaudeExecutable();
         if (claude !== "claude") {
-          if (!(0, import_node_fs29.existsSync)(claude)) {
+          if (!(0, import_node_fs30.existsSync)(claude)) {
             return {
               agent: "claude",
               installed: false,
@@ -11752,10 +11895,10 @@ var init_claude = __esm({
 
 // src/agents/user-mcp-config.ts
 function userCursorMcpConfigPath() {
-  return (0, import_node_path31.join)((0, import_node_os10.homedir)(), ".cursor", "mcp.json");
+  return (0, import_node_path32.join)((0, import_node_os10.homedir)(), ".cursor", "mcp.json");
 }
 function userClaudeMcpConfigPath() {
-  return (0, import_node_path31.join)((0, import_node_os10.homedir)(), ".claude.json");
+  return (0, import_node_path32.join)((0, import_node_os10.homedir)(), ".claude.json");
 }
 function asObject(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return {};
@@ -11782,16 +11925,16 @@ function mergeSideboardIntoMcpServersJson(existing, sideboard) {
 }
 function writeMergedMcpServersJson(configPath, sideboard) {
   let existing = {};
-  if ((0, import_node_fs30.existsSync)(configPath)) {
+  if ((0, import_node_fs31.existsSync)(configPath)) {
     try {
-      existing = JSON.parse((0, import_node_fs30.readFileSync)(configPath, "utf8"));
+      existing = JSON.parse((0, import_node_fs31.readFileSync)(configPath, "utf8"));
     } catch {
       existing = {};
     }
   }
   const next = mergeSideboardIntoMcpServersJson(existing, sideboard);
-  (0, import_node_fs30.mkdirSync)((0, import_node_path31.dirname)(configPath), { recursive: true });
-  (0, import_node_fs30.writeFileSync)(configPath, `${JSON.stringify(next, null, 2)}
+  (0, import_node_fs31.mkdirSync)((0, import_node_path32.dirname)(configPath), { recursive: true });
+  (0, import_node_fs31.writeFileSync)(configPath, `${JSON.stringify(next, null, 2)}
 `);
 }
 function launchFromResolved(server) {
@@ -11809,19 +11952,19 @@ async function registerPackagedUserMcpClients() {
   const cursor = userCursorMcpConfigPath();
   writeMergedMcpServersJson(cursor, launch);
   const claude = userClaudeMcpConfigPath();
-  if ((0, import_node_fs30.existsSync)(claude)) {
+  if ((0, import_node_fs31.existsSync)(claude)) {
     writeMergedMcpServersJson(claude, launch);
     return { cursor, claude };
   }
   return { cursor };
 }
-var import_node_fs30, import_node_os10, import_node_path31;
+var import_node_fs31, import_node_os10, import_node_path32;
 var init_user_mcp_config = __esm({
   "src/agents/user-mcp-config.ts"() {
     "use strict";
-    import_node_fs30 = require("fs");
+    import_node_fs31 = require("fs");
     import_node_os10 = require("os");
-    import_node_path31 = require("path");
+    import_node_path32 = require("path");
     init_paths();
     init_injected_mcp();
   }
@@ -11849,25 +11992,25 @@ function listMcpNamesFromCodexToml(text7) {
 }
 function readJsonObject(path2) {
   try {
-    return JSON.parse((0, import_node_fs31.readFileSync)(path2, "utf8"));
+    return JSON.parse((0, import_node_fs32.readFileSync)(path2, "utf8"));
   } catch {
     return {};
   }
 }
 function readText(path2) {
   try {
-    return (0, import_node_fs31.readFileSync)(path2, "utf8");
+    return (0, import_node_fs32.readFileSync)(path2, "utf8");
   } catch {
     return "";
   }
 }
 function userCodexConfigPaths(home = (0, import_node_os11.homedir)()) {
-  return [(0, import_node_path32.join)(home, ".codex", "config.toml"), (0, import_node_path32.join)(home, ".config", "codex", "config.toml")];
+  return [(0, import_node_path33.join)(home, ".codex", "config.toml"), (0, import_node_path33.join)(home, ".config", "codex", "config.toml")];
 }
 function userOpencodeConfigPaths(home = (0, import_node_os11.homedir)()) {
   return [
-    (0, import_node_path32.join)(home, ".config", "opencode", "opencode.json"),
-    (0, import_node_path32.join)(home, ".config", "opencode", "opencode.jsonc")
+    (0, import_node_path33.join)(home, ".config", "opencode", "opencode.json"),
+    (0, import_node_path33.join)(home, ".config", "opencode", "opencode.jsonc")
   ];
 }
 function userMcpNamesToDisable(opts) {
@@ -11889,7 +12032,7 @@ function userMcpNamesToDisable(opts) {
 function listUserCodexMcpNames(home = (0, import_node_os11.homedir)()) {
   const names = [];
   for (const path2 of userCodexConfigPaths(home)) {
-    if (!(0, import_node_fs31.existsSync)(path2)) continue;
+    if (!(0, import_node_fs32.existsSync)(path2)) continue;
     names.push(...listMcpNamesFromCodexToml(readText(path2)));
   }
   return names;
@@ -11897,7 +12040,7 @@ function listUserCodexMcpNames(home = (0, import_node_os11.homedir)()) {
 function listUserOpencodeMcpNames(home = (0, import_node_os11.homedir)()) {
   const names = [];
   for (const path2 of userOpencodeConfigPaths(home)) {
-    if (!(0, import_node_fs31.existsSync)(path2)) continue;
+    if (!(0, import_node_fs32.existsSync)(path2)) continue;
     names.push(...listMcpNamesFromJsonMap(readJsonObject(path2), "mcp"));
   }
   return names;
@@ -11910,13 +12053,13 @@ function toCodexDisableUserMcpArgs(names) {
   }
   return args;
 }
-var import_node_fs31, import_node_os11, import_node_path32, import_smol_toml2;
+var import_node_fs32, import_node_os11, import_node_path33, import_smol_toml2;
 var init_orch_mcp_isolation = __esm({
   "src/agents/orch-mcp-isolation.ts"() {
     "use strict";
-    import_node_fs31 = require("fs");
+    import_node_fs32 = require("fs");
     import_node_os11 = require("os");
-    import_node_path32 = require("path");
+    import_node_path33 = require("path");
     import_smol_toml2 = require("smol-toml");
     init_user_mcp_config();
   }
@@ -11932,7 +12075,7 @@ async function listCodexModels() {
   if (codex === "codex") {
     const which = await run("which", ["codex"], { reject: false });
     if (which.exitCode !== 0) return FALLBACK_CODEX_MODELS;
-  } else if (!(0, import_node_fs32.existsSync)(codex)) {
+  } else if (!(0, import_node_fs33.existsSync)(codex)) {
     return FALLBACK_CODEX_MODELS;
   }
   const listed = await run(codex, ["debug", "models"], { reject: false });
@@ -11967,12 +12110,12 @@ function usageFromCodex(usage) {
 }
 function codexConfigHasNetworkAccess() {
   const candidates = [
-    (0, import_node_path33.join)((0, import_node_os12.homedir)(), ".codex", "config.toml"),
-    (0, import_node_path33.join)((0, import_node_os12.homedir)(), ".config", "codex", "config.toml")
+    (0, import_node_path34.join)((0, import_node_os12.homedir)(), ".codex", "config.toml"),
+    (0, import_node_path34.join)((0, import_node_os12.homedir)(), ".config", "codex", "config.toml")
   ];
   for (const path2 of candidates) {
-    if (!(0, import_node_fs32.existsSync)(path2)) continue;
-    const text7 = (0, import_node_fs32.readFileSync)(path2, "utf8");
+    if (!(0, import_node_fs33.existsSync)(path2)) continue;
+    const text7 = (0, import_node_fs33.readFileSync)(path2, "utf8");
     if (/network_access\s*=\s*true/.test(text7)) return true;
   }
   return false;
@@ -12004,21 +12147,21 @@ function asRecord2(value) {
   return void 0;
 }
 function codexLooksAuthenticated() {
-  const authPath = (0, import_node_path33.join)((0, import_node_os12.homedir)(), ".codex", "auth.json");
-  if (!(0, import_node_fs32.existsSync)(authPath)) return false;
+  const authPath = (0, import_node_path34.join)((0, import_node_os12.homedir)(), ".codex", "auth.json");
+  if (!(0, import_node_fs33.existsSync)(authPath)) return false;
   try {
-    return (0, import_node_fs32.statSync)(authPath).size > 2;
+    return (0, import_node_fs33.statSync)(authPath).size > 2;
   } catch {
     return false;
   }
 }
-var import_node_fs32, import_node_os12, import_node_path33, CODEX_PROMPT_ARG_MAX, FALLBACK_CODEX_MODELS, cachedCodexModels, CODEX_MODEL_CACHE_MS, codexAdapter;
+var import_node_fs33, import_node_os12, import_node_path34, CODEX_PROMPT_ARG_MAX, FALLBACK_CODEX_MODELS, cachedCodexModels, CODEX_MODEL_CACHE_MS, codexAdapter;
 var init_codex = __esm({
   "src/agents/codex.ts"() {
     "use strict";
-    import_node_fs32 = require("fs");
+    import_node_fs33 = require("fs");
     import_node_os12 = require("os");
-    import_node_path33 = require("path");
+    import_node_path34 = require("path");
     init_run();
     init_app_settings();
     init_global_workspace();
@@ -12044,7 +12187,7 @@ var init_codex = __esm({
       async detect() {
         const codex = resolveAgentExecutable("codex");
         if (codex !== "codex") {
-          if (!(0, import_node_fs32.existsSync)(codex)) {
+          if (!(0, import_node_fs33.existsSync)(codex)) {
             return {
               agent: "codex",
               installed: false,
@@ -12539,21 +12682,21 @@ function platformRipgrepPackage() {
 }
 function usableRipgrepPath(candidate) {
   const raw = candidate?.trim();
-  if (!raw || !(0, import_node_path34.isAbsolute)(raw)) return null;
+  if (!raw || !(0, import_node_path35.isAbsolute)(raw)) return null;
   const readable = nodeReadableScriptPath(raw);
-  if (!(0, import_node_fs33.existsSync)(readable) || isAsarPath(readable)) return null;
+  if (!(0, import_node_fs34.existsSync)(readable) || isAsarPath(readable)) return null;
   return readable;
 }
 function walkForBundledRipgrep(startFile) {
   if (!startFile) return null;
   const pkg = platformRipgrepPackage();
   const name = rgBinaryName();
-  let dir = (0, import_node_path34.dirname)((0, import_node_path34.resolve)(startFile));
-  const root = (0, import_node_path34.parse)(dir).root;
+  let dir = (0, import_node_path35.dirname)((0, import_node_path35.resolve)(startFile));
+  const root = (0, import_node_path35.parse)(dir).root;
   while (dir !== root) {
-    const hit = usableRipgrepPath((0, import_node_path34.join)(dir, "node_modules", pkg, "bin", name));
+    const hit = usableRipgrepPath((0, import_node_path35.join)(dir, "node_modules", pkg, "bin", name));
     if (hit) return hit;
-    const next = (0, import_node_path34.dirname)(dir);
+    const next = (0, import_node_path35.dirname)(dir);
     if (next === dir) break;
     dir = next;
   }
@@ -12563,7 +12706,7 @@ function requireResolveBundledRipgrep(fromFile) {
   try {
     const req = (0, import_node_module2.createRequire)(fromFile);
     const pkgJson = req.resolve(`${platformRipgrepPackage()}/package.json`);
-    return usableRipgrepPath((0, import_node_path34.join)((0, import_node_path34.dirname)(pkgJson), "bin", rgBinaryName()));
+    return usableRipgrepPath((0, import_node_path35.join)((0, import_node_path35.dirname)(pkgJson), "bin", rgBinaryName()));
   } catch {
     return null;
   }
@@ -12585,13 +12728,13 @@ function cursorRipgrepEnv(opts) {
   const path2 = resolveCursorRipgrepPath(opts);
   return path2 ? { [RIPGREP_ENV]: path2 } : {};
 }
-var import_node_fs33, import_node_module2, import_node_path34, RIPGREP_ENV;
+var import_node_fs34, import_node_module2, import_node_path35, RIPGREP_ENV;
 var init_cursor_ripgrep = __esm({
   "src/agents/cursor-ripgrep.ts"() {
     "use strict";
-    import_node_fs33 = require("fs");
+    import_node_fs34 = require("fs");
     import_node_module2 = require("module");
-    import_node_path34 = require("path");
+    import_node_path35 = require("path");
     init_node_launch();
     init_packaged_runtime();
     RIPGREP_ENV = "CURSOR_RIPGREP_PATH";
@@ -12637,11 +12780,11 @@ function entryDir() {
   const cjsDir = typeof __dirname !== "undefined" ? __dirname : "";
   if (cjsDir) return cjsDir;
   try {
-    return (0, import_node_path35.dirname)((0, import_node_url2.fileURLToPath)(import_meta2.url));
+    return (0, import_node_path36.dirname)((0, import_node_url2.fileURLToPath)(import_meta2.url));
   } catch {
     try {
       const req = (0, import_node_module3.createRequire)(process.cwd() + "/");
-      return (0, import_node_path35.dirname)(req.resolve("@sideboard-ai/core"));
+      return (0, import_node_path36.dirname)(req.resolve("@sideboard-ai/core"));
     } catch {
       return process.cwd();
     }
@@ -12652,27 +12795,27 @@ function cursorRunnerPath() {
   if (packaged) return packaged;
   const root = entryDir();
   const candidates = [
-    (0, import_node_path35.join)(root, "agents", "cursor-runner.js"),
-    (0, import_node_path35.join)(root, "agents", "cursor-runner.cjs"),
+    (0, import_node_path36.join)(root, "agents", "cursor-runner.js"),
+    (0, import_node_path36.join)(root, "agents", "cursor-runner.cjs"),
     // If somehow resolved from package root instead of dist/
-    (0, import_node_path35.join)(root, "dist", "agents", "cursor-runner.js"),
-    (0, import_node_path35.join)(root, "dist", "agents", "cursor-runner.cjs"),
+    (0, import_node_path36.join)(root, "dist", "agents", "cursor-runner.js"),
+    (0, import_node_path36.join)(root, "dist", "agents", "cursor-runner.cjs"),
     // Source tree (dev): packages/core/src/agents/cursor-runner.ts
-    (0, import_node_path35.join)(root, "cursor-runner.ts"),
-    (0, import_node_path35.join)(root, "src", "agents", "cursor-runner.ts")
+    (0, import_node_path36.join)(root, "cursor-runner.ts"),
+    (0, import_node_path36.join)(root, "src", "agents", "cursor-runner.ts")
   ];
   for (const candidate of candidates) {
-    if ((0, import_node_fs34.existsSync)(candidate)) return candidate;
+    if ((0, import_node_fs35.existsSync)(candidate)) return candidate;
   }
   return candidates[0];
 }
-var import_node_fs34, import_node_module3, import_node_path35, import_node_url2, import_sdk, import_meta2, FALLBACK_CURSOR_MODELS, cachedModels, MODEL_CACHE_MS, cursorAdapter;
+var import_node_fs35, import_node_module3, import_node_path36, import_node_url2, import_sdk, import_meta2, FALLBACK_CURSOR_MODELS, cachedModels, MODEL_CACHE_MS, cursorAdapter;
 var init_cursor = __esm({
   "src/agents/cursor.ts"() {
     "use strict";
-    import_node_fs34 = require("fs");
+    import_node_fs35 = require("fs");
     import_node_module3 = require("module");
-    import_node_path35 = require("path");
+    import_node_path36 = require("path");
     import_node_url2 = require("url");
     import_sdk = require("@cursor/sdk");
     init_run();
@@ -12824,7 +12967,7 @@ async function listOpencodeModels() {
   if (opencode === "opencode") {
     const which = await run("which", ["opencode"], { reject: false });
     if (which.exitCode !== 0) return FALLBACK_OPENCODE_MODELS;
-  } else if (!(0, import_node_fs35.existsSync)(opencode)) {
+  } else if (!(0, import_node_fs36.existsSync)(opencode)) {
     return FALLBACK_OPENCODE_MODELS;
   }
   const listed = await run(opencode, ["models"], { reject: false });
@@ -12854,11 +12997,11 @@ function usageFromOpencode(tokens) {
     cacheWriteTokens: tokens.cache?.write ? Number(tokens.cache.write) : void 0
   };
 }
-var import_node_fs35, FALLBACK_OPENCODE_MODELS, cachedOpencodeModels, OPENCODE_MODEL_CACHE_MS, opencodeAdapter;
+var import_node_fs36, FALLBACK_OPENCODE_MODELS, cachedOpencodeModels, OPENCODE_MODEL_CACHE_MS, opencodeAdapter;
 var init_opencode = __esm({
   "src/agents/opencode.ts"() {
     "use strict";
-    import_node_fs35 = require("fs");
+    import_node_fs36 = require("fs");
     init_run();
     init_app_settings();
     init_global_workspace();
@@ -12886,7 +13029,7 @@ var init_opencode = __esm({
       async detect() {
         const opencode = resolveAgentExecutable("opencode");
         if (opencode !== "opencode") {
-          if (!(0, import_node_fs35.existsSync)(opencode)) {
+          if (!(0, import_node_fs36.existsSync)(opencode)) {
             return {
               agent: "opencode",
               installed: false,
@@ -13695,15 +13838,15 @@ var init_agents = __esm({
 
 // src/hook/worktree-pkg-cache.ts
 function worktreePkgCacheRoot(worktreePath) {
-  return (0, import_node_path36.join)(worktreePath, WORKTREE_PKG_CACHE_REL);
+  return (0, import_node_path37.join)(worktreePath, WORKTREE_PKG_CACHE_REL);
 }
 function worktreePkgCacheEnv(worktreePath) {
   const root = worktreePkgCacheRoot(worktreePath);
-  const store = (0, import_node_path36.join)(root, "pnpm-store");
-  const pnpmCache = (0, import_node_path36.join)(root, "pnpm");
-  const npmCache = (0, import_node_path36.join)(root, "npm");
-  const nodeGyp = (0, import_node_path36.join)(root, "node-gyp");
-  const electron = (0, import_node_path36.join)(root, "electron");
+  const store = (0, import_node_path37.join)(root, "pnpm-store");
+  const pnpmCache = (0, import_node_path37.join)(root, "pnpm");
+  const npmCache = (0, import_node_path37.join)(root, "npm");
+  const nodeGyp = (0, import_node_path37.join)(root, "node-gyp");
+  const electron = (0, import_node_path37.join)(root, "electron");
   return {
     npm_config_store_dir: store,
     PNPM_STORE_DIR: store,
@@ -13725,8 +13868,8 @@ function fillGroup(env, keys, values) {
   }
 }
 function ensureWorktreePkgCacheDirs(worktreePath) {
-  if (!(0, import_node_fs36.existsSync)(worktreePath)) return;
-  (0, import_node_fs36.mkdirSync)(worktreePkgCacheRoot(worktreePath), { recursive: true });
+  if (!(0, import_node_fs37.existsSync)(worktreePath)) return;
+  (0, import_node_fs37.mkdirSync)(worktreePkgCacheRoot(worktreePath), { recursive: true });
 }
 function applyWorktreePkgCacheEnv(env, worktreePath) {
   const cwd = worktreePath.trim();
@@ -13739,12 +13882,12 @@ function applyWorktreePkgCacheEnv(env, worktreePath) {
   fillGroup(env, ["electron_config_cache"], next);
   ensureWorktreePkgCacheDirs(cwd);
 }
-var import_node_fs36, import_node_path36, WORKTREE_PKG_CACHE_REL;
+var import_node_fs37, import_node_path37, WORKTREE_PKG_CACHE_REL;
 var init_worktree_pkg_cache = __esm({
   "src/hook/worktree-pkg-cache.ts"() {
     "use strict";
-    import_node_fs36 = require("fs");
-    import_node_path36 = require("path");
+    import_node_fs37 = require("fs");
+    import_node_path37 = require("path");
     WORKTREE_PKG_CACHE_REL = ".context/.sideboard/pkg-cache";
   }
 });
@@ -14892,21 +15035,21 @@ function shouldRefreshReviewRequestTemplate(content) {
   return LEGACY_REVIEW_TEMPLATE_MARKERS.every((m) => trimmed.includes(m));
 }
 function readTextIfPresent(abs) {
-  if (!(0, import_node_fs37.existsSync)(abs)) return null;
+  if (!(0, import_node_fs38.existsSync)(abs)) return null;
   try {
-    const content = (0, import_node_fs37.readFileSync)(abs, "utf8");
+    const content = (0, import_node_fs38.readFileSync)(abs, "utf8");
     return content.trim() ? content : null;
   } catch {
     return null;
   }
 }
 function readLocalGuidelines(worktreePath) {
-  const localAbs = (0, import_node_path37.join)(worktreePath, REVIEW_REQUEST_PATH);
+  const localAbs = (0, import_node_path38.join)(worktreePath, REVIEW_REQUEST_PATH);
   const localContent = readTextIfPresent(localAbs);
   if (localContent && !shouldRefreshReviewRequestTemplate(localContent)) {
     return { path: REVIEW_REQUEST_PATH, content: localContent };
   }
-  const legacyAbs = (0, import_node_path37.join)(worktreePath, LEGACY_REVIEW_REQUEST_PATH);
+  const legacyAbs = (0, import_node_path38.join)(worktreePath, LEGACY_REVIEW_REQUEST_PATH);
   const legacyContent = readTextIfPresent(legacyAbs);
   if (legacyContent && !shouldRefreshReviewRequestTemplate(legacyContent)) {
     return { path: LEGACY_REVIEW_REQUEST_PATH, content: legacyContent };
@@ -14930,27 +15073,27 @@ function contextGuidelines(content, source) {
   };
 }
 function writeContextGuidelines(worktreePath, content) {
-  const abs = (0, import_node_path37.join)(worktreePath, CONTEXT_REVIEW_PATH);
-  (0, import_node_fs37.mkdirSync)((0, import_node_path37.dirname)(abs), { recursive: true });
+  const abs = (0, import_node_path38.join)(worktreePath, CONTEXT_REVIEW_PATH);
+  (0, import_node_fs38.mkdirSync)((0, import_node_path38.dirname)(abs), { recursive: true });
   const body = content.endsWith("\n") ? content : `${content}
 `;
-  (0, import_node_fs37.writeFileSync)(abs, body, "utf8");
+  (0, import_node_fs38.writeFileSync)(abs, body, "utf8");
   return body;
 }
 function readSideboardReview(worktreePath, repoPath) {
-  const fromWorktree = readTextIfPresent((0, import_node_path37.join)(worktreePath, REPO_REVIEW_PATH));
+  const fromWorktree = readTextIfPresent((0, import_node_path38.join)(worktreePath, REPO_REVIEW_PATH));
   if (fromWorktree) return fromWorktree;
   const repo = repoPath?.replace(/\/+$/, "");
   const wt = worktreePath.replace(/\/+$/, "");
   if (!repo || repo === wt) return null;
-  return readTextIfPresent((0, import_node_path37.join)(repo, REPO_REVIEW_PATH));
+  return readTextIfPresent((0, import_node_path38.join)(repo, REPO_REVIEW_PATH));
 }
 function ensureReviewGuidelinesFile(worktreePath, repoPath) {
-  const skillContent = readTextIfPresent((0, import_node_path37.join)(worktreePath, REVIEW_SKILL_PATH));
+  const skillContent = readTextIfPresent((0, import_node_path38.join)(worktreePath, REVIEW_SKILL_PATH));
   if (skillContent) {
     return { ...skillGuidelines(skillContent, "skill"), wrote: false };
   }
-  const contextContent = readTextIfPresent((0, import_node_path37.join)(worktreePath, CONTEXT_REVIEW_PATH));
+  const contextContent = readTextIfPresent((0, import_node_path38.join)(worktreePath, CONTEXT_REVIEW_PATH));
   if (contextContent && !shouldRefreshReviewRequestTemplate(contextContent)) {
     return { ...contextGuidelines(contextContent, "local"), wrote: false };
   }
@@ -14988,7 +15131,7 @@ function buildReviewRequestAttachment(content, opts) {
   };
 }
 function readExistingReviewRequestFile(worktreePath) {
-  return readTextIfPresent((0, import_node_path37.join)(worktreePath, REVIEW_SKILL_PATH)) ?? readTextIfPresent((0, import_node_path37.join)(worktreePath, CONTEXT_REVIEW_PATH)) ?? readTextIfPresent((0, import_node_path37.join)(worktreePath, REPO_REVIEW_PATH)) ?? readTextIfPresent((0, import_node_path37.join)(worktreePath, REVIEW_REQUEST_PATH)) ?? readTextIfPresent((0, import_node_path37.join)(worktreePath, LEGACY_REVIEW_REQUEST_PATH));
+  return readTextIfPresent((0, import_node_path38.join)(worktreePath, REVIEW_SKILL_PATH)) ?? readTextIfPresent((0, import_node_path38.join)(worktreePath, CONTEXT_REVIEW_PATH)) ?? readTextIfPresent((0, import_node_path38.join)(worktreePath, REPO_REVIEW_PATH)) ?? readTextIfPresent((0, import_node_path38.join)(worktreePath, REVIEW_REQUEST_PATH)) ?? readTextIfPresent((0, import_node_path38.join)(worktreePath, LEGACY_REVIEW_REQUEST_PATH));
 }
 async function requestReview(threadRef, send2) {
   const from = findThreadByRef(threadRef);
@@ -15015,13 +15158,13 @@ async function requestReview(threadRef, send2) {
   const started = await send2(tab.id, REVIEW_REQUEST_PREFILL);
   return { tab: started, from };
 }
-var import_node_crypto8, import_node_fs37, import_node_path37, REPO_REVIEW_PATH, REPO_REVIEW_NAME, CONTEXT_REVIEW_PATH, REVIEW_REQUEST_PATH, LEGACY_REVIEW_REQUEST_PATH, REVIEW_REQUEST_NAME, REVIEW_REQUEST_PREFILL, LEGACY_REVIEW_TEMPLATE_MARKERS;
+var import_node_crypto8, import_node_fs38, import_node_path38, REPO_REVIEW_PATH, REPO_REVIEW_NAME, CONTEXT_REVIEW_PATH, REVIEW_REQUEST_PATH, LEGACY_REVIEW_REQUEST_PATH, REVIEW_REQUEST_NAME, REVIEW_REQUEST_PREFILL, LEGACY_REVIEW_TEMPLATE_MARKERS;
 var init_request_review = __esm({
   "src/review/request-review.ts"() {
     "use strict";
     import_node_crypto8 = require("crypto");
-    import_node_fs37 = require("fs");
-    import_node_path37 = require("path");
+    import_node_fs38 = require("fs");
+    import_node_path38 = require("path");
     init_global_workspace();
     init_chat_tabs();
     init_thread_store();
@@ -15047,9 +15190,9 @@ function matchSimpleGlob(pattern, name) {
   return new RegExp(`^${escaped}$`).test(name);
 }
 function readWorktreeInclude(repoPath) {
-  const path2 = (0, import_node_path38.join)(repoPath, ".worktreeinclude");
-  if (!(0, import_node_fs38.existsSync)(path2)) return [];
-  return (0, import_node_fs38.readFileSync)(path2, "utf8").split("\n").map((l) => l.trim()).filter((l) => l && !l.startsWith("#"));
+  const path2 = (0, import_node_path39.join)(repoPath, ".worktreeinclude");
+  if (!(0, import_node_fs39.existsSync)(path2)) return [];
+  return (0, import_node_fs39.readFileSync)(path2, "utf8").split("\n").map((l) => l.trim()).filter((l) => l && !l.startsWith("#"));
 }
 function resolveFilesToCopy(repoPath) {
   const fromInclude = readWorktreeInclude(repoPath);
@@ -15059,10 +15202,10 @@ function resolveFilesToCopy(repoPath) {
   if (settings?.fileIncludeGlobs?.length) {
     const matched = [];
     try {
-      for (const entry of (0, import_node_fs38.readdirSync)(repoPath, { withFileTypes: true })) {
+      for (const entry of (0, import_node_fs39.readdirSync)(repoPath, { withFileTypes: true })) {
         if (!entry.isFile()) continue;
         for (const glob of settings.fileIncludeGlobs) {
-          if (matchSimpleGlob(glob, entry.name) || matchSimpleGlob((0, import_node_path38.basename)(glob), entry.name)) {
+          if (matchSimpleGlob(glob, entry.name) || matchSimpleGlob((0, import_node_path39.basename)(glob), entry.name)) {
             matched.push(entry.name);
             break;
           }
@@ -15074,7 +15217,7 @@ function resolveFilesToCopy(repoPath) {
   }
   const defaults = [];
   try {
-    for (const entry of (0, import_node_fs38.readdirSync)(repoPath, { withFileTypes: true })) {
+    for (const entry of (0, import_node_fs39.readdirSync)(repoPath, { withFileTypes: true })) {
       if (entry.isFile() && entry.name.startsWith(".env")) {
         defaults.push(entry.name);
       }
@@ -15088,11 +15231,11 @@ function copyConfiguredFiles(repoPath, worktreePath) {
   const patterns = resolveFilesToCopy(repoPath);
   const copied = [];
   for (const rel of patterns) {
-    const src = (0, import_node_path38.join)(repoPath, rel);
-    if (!(0, import_node_fs38.existsSync)(src)) continue;
-    const dest = (0, import_node_path38.join)(worktreePath, rel);
-    (0, import_node_fs38.mkdirSync)((0, import_node_path38.dirname)(dest), { recursive: true });
-    (0, import_node_fs38.copyFileSync)(src, dest);
+    const src = (0, import_node_path39.join)(repoPath, rel);
+    if (!(0, import_node_fs39.existsSync)(src)) continue;
+    const dest = (0, import_node_path39.join)(worktreePath, rel);
+    (0, import_node_fs39.mkdirSync)((0, import_node_path39.dirname)(dest), { recursive: true });
+    (0, import_node_fs39.copyFileSync)(src, dest);
     copied.push(rel);
   }
   return copied;
@@ -15127,7 +15270,7 @@ function buildWorkspaceScriptEnv(opts, baseEnv) {
   const env = stripNestedElectronEnv({
     ...baseEnv ?? process.env
   });
-  const name = opts.workspaceName ?? (0, import_node_path38.basename)(opts.worktreePath);
+  const name = opts.workspaceName ?? (0, import_node_path39.basename)(opts.worktreePath);
   const ports = opts.ports ?? [];
   const primary = ports[0];
   env.SIDEBOARD_WORKSPACE_NAME = name;
@@ -15390,13 +15533,13 @@ async function startDevServer(repoPath, worktreePath, onLine, opts) {
     done: handle.done
   };
 }
-var import_node_fs38, import_node_net, import_node_path38, import_execa4, import_node_readline3, PORT_RANGE_SIZE, cachedLoginEnv;
+var import_node_fs39, import_node_net, import_node_path39, import_execa4, import_node_readline3, PORT_RANGE_SIZE, cachedLoginEnv;
 var init_conductor = __esm({
   "src/hook/conductor.ts"() {
     "use strict";
-    import_node_fs38 = require("fs");
+    import_node_fs39 = require("fs");
     import_node_net = require("net");
-    import_node_path38 = require("path");
+    import_node_path39 = require("path");
     import_execa4 = require("execa");
     import_node_readline3 = require("readline");
     init_settings();
@@ -15424,9 +15567,9 @@ async function findOrphanWorktrees(repoPaths) {
     repoPaths?.length ? repoPaths : threads.map((t) => t.repoPath).filter(Boolean)
   );
   const homeRoot = sideboardWorkspacesDir();
-  if ((0, import_node_fs39.existsSync)(homeRoot)) {
+  if ((0, import_node_fs40.existsSync)(homeRoot)) {
     try {
-      for (const entry of (0, import_node_fs39.readdirSync)(homeRoot, { withFileTypes: true })) {
+      for (const entry of (0, import_node_fs40.readdirSync)(homeRoot, { withFileTypes: true })) {
         if (!entry.isDirectory()) continue;
         void entry;
       }
@@ -15436,7 +15579,7 @@ async function findOrphanWorktrees(repoPaths) {
   const orphans = [];
   const seen = /* @__PURE__ */ new Set();
   for (const repoPath of repos) {
-    if (!repoPath || !(0, import_node_fs39.existsSync)(repoPath)) continue;
+    if (!repoPath || !(0, import_node_fs40.existsSync)(repoPath)) continue;
     try {
       const wts = await listWorktrees(repoPath);
       for (const wt of wts) {
@@ -15447,7 +15590,7 @@ async function findOrphanWorktrees(repoPaths) {
         seen.add(path2);
         let mtimeMs = 0;
         try {
-          mtimeMs = (0, import_node_fs39.statSync)(path2).mtimeMs;
+          mtimeMs = (0, import_node_fs40.statSync)(path2).mtimeMs;
         } catch {
           mtimeMs = 0;
         }
@@ -15457,16 +15600,16 @@ async function findOrphanWorktrees(repoPaths) {
     }
     try {
       const root = worktreesRoot(repoPath);
-      if ((0, import_node_fs39.existsSync)(root)) {
-        for (const entry of (0, import_node_fs39.readdirSync)(root, { withFileTypes: true })) {
+      if ((0, import_node_fs40.existsSync)(root)) {
+        for (const entry of (0, import_node_fs40.readdirSync)(root, { withFileTypes: true })) {
           if (!entry.isDirectory()) continue;
-          const path2 = (0, import_node_path39.join)(root, entry.name).replace(/\/$/, "");
+          const path2 = (0, import_node_path40.join)(root, entry.name).replace(/\/$/, "");
           if (known.has(path2) || seen.has(path2)) continue;
-          if (!(0, import_node_fs39.existsSync)((0, import_node_path39.join)(path2, ".git"))) continue;
+          if (!(0, import_node_fs40.existsSync)((0, import_node_path40.join)(path2, ".git"))) continue;
           seen.add(path2);
           let mtimeMs = 0;
           try {
-            mtimeMs = (0, import_node_fs39.statSync)(path2).mtimeMs;
+            mtimeMs = (0, import_node_fs40.statSync)(path2).mtimeMs;
           } catch {
             mtimeMs = Date.now();
           }
@@ -15527,12 +15670,12 @@ function worktreeCleanupSettings() {
     autoCleanupOrphans: a.autoCleanupOrphans
   };
 }
-var import_node_fs39, import_node_path39;
+var import_node_fs40, import_node_path40;
 var init_orphan_cleanup = __esm({
   "src/git/orphan-cleanup.ts"() {
     "use strict";
-    import_node_fs39 = require("fs");
-    import_node_path39 = require("path");
+    import_node_fs40 = require("fs");
+    import_node_path40 = require("path");
     init_worktree();
     init_thread_store();
     init_paths();
@@ -15635,12 +15778,12 @@ async function cloneRepoIntoSideboard(opts) {
   if (!url) throw new Error("Clone URL is required");
   let name = opts.name?.trim();
   if (!name) {
-    const leaf = (0, import_node_path40.basename)(url.replace(/\/$/, "").replace(/\.git$/, ""));
+    const leaf = (0, import_node_path41.basename)(url.replace(/\/$/, "").replace(/\.git$/, ""));
     name = leaf || "repo";
   }
   name = name.replace(/[^a-zA-Z0-9._-]+/g, "-").replace(/^-+|-+$/g, "") || "repo";
-  const dest = (0, import_node_path40.join)(sideboardReposDir(), name);
-  if ((0, import_node_fs40.existsSync)(dest)) {
+  const dest = (0, import_node_path41.join)(sideboardReposDir(), name);
+  if ((0, import_node_fs41.existsSync)(dest)) {
     const repoPath2 = await resolveRepoRoot(dest);
     const workspace2 = await ensureWorkspace(repoPath2);
     return { repoPath: repoPath2, workspace: workspace2 };
@@ -15655,12 +15798,12 @@ async function cloneRepoIntoSideboard(opts) {
   const workspace = await ensureWorkspace(repoPath);
   return { repoPath, workspace };
 }
-var import_node_fs40, import_node_path40, import_execa6;
+var import_node_fs41, import_node_path41, import_execa6;
 var init_clone_repo = __esm({
   "src/git/clone-repo.ts"() {
     "use strict";
-    import_node_fs40 = require("fs");
-    import_node_path40 = require("path");
+    import_node_fs41 = require("fs");
+    import_node_path41 = require("path");
     import_execa6 = require("execa");
     init_paths();
     init_workspaces();
@@ -15778,24 +15921,24 @@ function jobTreeAlive(pid) {
   return jobAlive(pid) || processGroupAlive(pid);
 }
 function readIntFile(file) {
-  if (!(0, import_node_fs41.existsSync)(file)) return null;
-  const n = Number.parseInt((0, import_node_fs41.readFileSync)(file, "utf8").trim(), 10);
+  if (!(0, import_node_fs42.existsSync)(file)) return null;
+  const n = Number.parseInt((0, import_node_fs42.readFileSync)(file, "utf8").trim(), 10);
   return Number.isInteger(n) ? n : null;
 }
 function jobDir(root, id, legacy = false) {
-  return (0, import_node_path41.join)(root, legacy ? LEGACY_DETACHED_JOBS_DIR : DETACHED_JOBS_DIR, id);
+  return (0, import_node_path42.join)(root, legacy ? LEGACY_DETACHED_JOBS_DIR : DETACHED_JOBS_DIR, id);
 }
 function resolveJobDir(root, id) {
   const modern = jobDir(root, id, false);
-  if ((0, import_node_fs41.existsSync)(modern)) return modern;
+  if ((0, import_node_fs42.existsSync)(modern)) return modern;
   const legacy = jobDir(root, id, true);
-  if ((0, import_node_fs41.existsSync)(legacy)) return legacy;
+  if ((0, import_node_fs42.existsSync)(legacy)) return legacy;
   return modern;
 }
 function listJobIdsIn(root, rel) {
-  const dir = (0, import_node_path41.join)(root, rel);
-  if (!(0, import_node_fs41.existsSync)(dir)) return [];
-  return (0, import_node_fs41.readdirSync)(dir, { withFileTypes: true }).filter((e) => e.isDirectory() && JOB_ID_RE.test(e.name)).map((e) => e.name);
+  const dir = (0, import_node_path42.join)(root, rel);
+  if (!(0, import_node_fs42.existsSync)(dir)) return [];
+  return (0, import_node_fs42.readdirSync)(dir, { withFileTypes: true }).filter((e) => e.isDirectory() && JOB_ID_RE.test(e.name)).map((e) => e.name);
 }
 function listRunningDetachedJobs(worktreePath) {
   const root = worktreePath.trim();
@@ -15807,7 +15950,7 @@ function listRunningDetachedJobs(worktreePath) {
   const running = [];
   for (const id of ids) {
     const dir = resolveJobDir(root, id);
-    const pid = readIntFile((0, import_node_path41.join)(dir, "pid"));
+    const pid = readIntFile((0, import_node_path42.join)(dir, "pid"));
     if (jobTreeAlive(pid)) running.push(id);
   }
   return running.sort();
@@ -15860,13 +16003,13 @@ function planJobContinue(opts) {
   return { action: "none" };
 }
 function tailProgress(logFile, maxLines = 12) {
-  if (!(0, import_node_fs41.existsSync)(logFile)) return "(no log yet)";
-  const lines = (0, import_node_fs41.readFileSync)(logFile, "utf8").split("\n");
+  if (!(0, import_node_fs42.existsSync)(logFile)) return "(no log yet)";
+  const lines = (0, import_node_fs42.readFileSync)(logFile, "utf8").split("\n");
   return lines.slice(-maxLines).join("\n");
 }
 function readLogLines(file) {
-  if (!(0, import_node_fs41.existsSync)(file)) return [];
-  const lines = (0, import_node_fs41.readFileSync)(file, "utf8").split("\n");
+  if (!(0, import_node_fs42.existsSync)(file)) return [];
+  const lines = (0, import_node_fs42.readFileSync)(file, "utf8").split("\n");
   if (lines.length && lines[lines.length - 1] === "") lines.pop();
   return lines;
 }
@@ -15877,15 +16020,15 @@ function takeDelta(logFile, cursorFile) {
   return { delta: lines.slice(start).join("\n"), nextCursor: lines.length };
 }
 function snapshotJob(dir) {
-  const pid = readIntFile((0, import_node_path41.join)(dir, "pid"));
+  const pid = readIntFile((0, import_node_path42.join)(dir, "pid"));
   const running = jobTreeAlive(pid);
   return {
     pid,
     running,
-    exitCode: readIntFile((0, import_node_path41.join)(dir, "exit")),
-    log: (0, import_node_path41.join)(dir, "log"),
-    cursor: (0, import_node_path41.join)(dir, "present.cursor"),
-    progress: tailProgress((0, import_node_path41.join)(dir, "log"))
+    exitCode: readIntFile((0, import_node_path42.join)(dir, "exit")),
+    log: (0, import_node_path42.join)(dir, "log"),
+    cursor: (0, import_node_path42.join)(dir, "present.cursor"),
+    progress: tailProgress((0, import_node_path42.join)(dir, "log"))
   };
 }
 function toResult(id, snap, extra) {
@@ -15894,8 +16037,8 @@ function toResult(id, snap, extra) {
   const stillRunning = snap.running && !ok;
   const { delta, nextCursor } = takeDelta(snap.log, snap.cursor);
   try {
-    (0, import_node_fs41.mkdirSync)((0, import_node_path41.dirname)(snap.cursor), { recursive: true });
-    (0, import_node_fs41.writeFileSync)(snap.cursor, `${nextCursor}
+    (0, import_node_fs42.mkdirSync)((0, import_node_path42.dirname)(snap.cursor), { recursive: true });
+    (0, import_node_fs42.writeFileSync)(snap.cursor, `${nextCursor}
 `);
   } catch {
   }
@@ -15922,7 +16065,7 @@ async function waitForDetachedJob(cwd, id, opts) {
   const dir = resolveJobDir(root, jobId);
   const timeoutMs = mcpWaitForJobTimeoutMs(opts?.timeoutMs);
   const sleep2 = opts?.sleep ?? sleepMs;
-  if (!(0, import_node_fs41.existsSync)(dir)) {
+  if (!(0, import_node_fs42.existsSync)(dir)) {
     return {
       stillRunning: false,
       ok: false,
@@ -15968,10 +16111,10 @@ function killProcessTree(pid, signal) {
 }
 function appendJobLog(logFile, line) {
   try {
-    (0, import_node_fs41.mkdirSync)((0, import_node_path41.dirname)(logFile), { recursive: true });
+    (0, import_node_fs42.mkdirSync)((0, import_node_path42.dirname)(logFile), { recursive: true });
     const body = line.endsWith("\n") ? line : `${line}
 `;
-    (0, import_node_fs41.appendFileSync)(logFile, body);
+    (0, import_node_fs42.appendFileSync)(logFile, body);
   } catch {
   }
 }
@@ -15981,7 +16124,7 @@ async function stopDetachedJob(cwd, id, opts) {
   const dir = resolveJobDir(root, jobId);
   const sleep2 = opts?.sleep ?? sleepMs;
   const why = opts?.reason?.trim() ?? "";
-  if (!(0, import_node_fs41.existsSync)(dir)) {
+  if (!(0, import_node_fs42.existsSync)(dir)) {
     return {
       stillRunning: false,
       ok: false,
@@ -16017,10 +16160,10 @@ async function stopDetachedJob(cwd, id, opts) {
     killProcessTree(targetPid, "SIGKILL");
     await sleep2(100);
   }
-  const exitFile = (0, import_node_path41.join)(dir, "exit");
-  if (!(0, import_node_fs41.existsSync)(exitFile)) {
+  const exitFile = (0, import_node_path42.join)(dir, "exit");
+  if (!(0, import_node_fs42.existsSync)(exitFile)) {
     try {
-      (0, import_node_fs41.writeFileSync)(exitFile, "1\n");
+      (0, import_node_fs42.writeFileSync)(exitFile, "1\n");
     } catch {
     }
   }
@@ -16040,12 +16183,12 @@ async function stopDetachedJob(cwd, id, opts) {
     hint: stopped ? MCP_STOP_JOB_HINT : MCP_WAIT_JOB_STILL_RUNNING_HINT
   };
 }
-var import_node_fs41, import_node_path41, MAX_JOB_CONTINUES, MCP_WAIT_JOB_STILL_RUNNING_HINT, MCP_STOP_JOB_HINT, JOB_ID_RE;
+var import_node_fs42, import_node_path42, MAX_JOB_CONTINUES, MCP_WAIT_JOB_STILL_RUNNING_HINT, MCP_STOP_JOB_HINT, JOB_ID_RE;
 var init_wait_for_job = __esm({
   "src/mcp/wait-for-job.ts"() {
     "use strict";
-    import_node_fs41 = require("fs");
-    import_node_path41 = require("path");
+    import_node_fs42 = require("fs");
+    import_node_path42 = require("path");
     init_workspace_scratch();
     init_wait_for_turn();
     MAX_JOB_CONTINUES = 8;
@@ -17182,7 +17325,7 @@ function reuseLiveThread(input, repoPath, match) {
 }
 async function createThread(input, _onSetupLine) {
   const repoPath = await resolveRepoRoot(input.repoPath);
-  if (!(0, import_node_fs42.existsSync)(repoPath)) {
+  if (!(0, import_node_fs43.existsSync)(repoPath)) {
     throw new Error(`Repo not found: ${repoPath}`);
   }
   const reused = reuseLiveThread(input, repoPath, {
@@ -17363,11 +17506,11 @@ async function listLinearIssues(agent, repoPath) {
   }
   return adapter.listLinearIssues(repoPath);
 }
-var import_node_fs42;
+var import_node_fs43;
 var init_create = __esm({
   "src/threads/create.ts"() {
     "use strict";
-    import_node_fs42 = require("fs");
+    import_node_fs43 = require("fs");
     init_detect();
     init_worktree();
     init_home_board();
@@ -17487,20 +17630,20 @@ function writeTurnLive(threadId, progress) {
   const path2 = threadLivePath(threadId);
   const tmp = `${path2}.${process.pid}.tmp`;
   try {
-    (0, import_node_fs43.writeFileSync)(tmp, JSON.stringify(progress), "utf8");
-    (0, import_node_fs43.renameSync)(tmp, path2);
+    (0, import_node_fs44.writeFileSync)(tmp, JSON.stringify(progress), "utf8");
+    (0, import_node_fs44.renameSync)(tmp, path2);
   } catch {
     try {
-      (0, import_node_fs43.unlinkSync)(tmp);
+      (0, import_node_fs44.unlinkSync)(tmp);
     } catch {
     }
   }
 }
 function readTurnLive(threadId) {
   const path2 = threadLivePath(threadId);
-  if (!(0, import_node_fs43.existsSync)(path2)) return null;
+  if (!(0, import_node_fs44.existsSync)(path2)) return null;
   try {
-    const raw = JSON.parse((0, import_node_fs43.readFileSync)(path2, "utf8"));
+    const raw = JSON.parse((0, import_node_fs44.readFileSync)(path2, "utf8"));
     if (!raw || typeof raw.summary !== "string") return null;
     return raw;
   } catch {
@@ -17512,17 +17655,17 @@ function clearTurnLive(threadId) {
   if (buf?.timer) clearTimeout(buf.timer);
   buffers.delete(threadId);
   const path2 = threadLivePath(threadId);
-  if (!(0, import_node_fs43.existsSync)(path2)) return;
+  if (!(0, import_node_fs44.existsSync)(path2)) return;
   try {
-    (0, import_node_fs43.unlinkSync)(path2);
+    (0, import_node_fs44.unlinkSync)(path2);
   } catch {
   }
 }
-var import_node_fs43, buffers, FLUSH_MS, MAX_PARTS;
+var import_node_fs44, buffers, FLUSH_MS, MAX_PARTS;
 var init_turn_live = __esm({
   "src/store/turn-live.ts"() {
     "use strict";
-    import_node_fs43 = require("fs");
+    import_node_fs44 = require("fs");
     init_message_parts();
     init_paths();
     buffers = /* @__PURE__ */ new Map();
@@ -17742,7 +17885,7 @@ var init_quota_failover = __esm({
 // src/threads/adopt.ts
 function thisModuleFile() {
   const cjsFile = typeof __filename !== "undefined" ? __filename : "";
-  return cjsFile || process.argv[1] || (0, import_node_path42.join)(process.cwd(), "package.json");
+  return cjsFile || process.argv[1] || (0, import_node_path43.join)(process.cwd(), "package.json");
 }
 function openReadonlySqlite(file) {
   const req = (0, import_node_module4.createRequire)(thisModuleFile());
@@ -17760,21 +17903,21 @@ function mapAgentType(raw) {
   return null;
 }
 function resolveConductorCursorAgentId(workspacePath) {
-  if (!workspacePath || !(0, import_node_fs44.existsSync)(CURSOR_SDK_STORE)) return null;
+  if (!workspacePath || !(0, import_node_fs45.existsSync)(CURSOR_SDK_STORE)) return null;
   const normalized = workspacePath.replace(/\/$/, "");
   let best = null;
   let hashes;
   try {
-    hashes = (0, import_node_fs44.readdirSync)(CURSOR_SDK_STORE);
+    hashes = (0, import_node_fs45.readdirSync)(CURSOR_SDK_STORE);
   } catch {
     return null;
   }
   for (const hash of hashes) {
-    const agentsFile = (0, import_node_path42.join)(CURSOR_SDK_STORE, hash, "agents.ndjson");
-    if (!(0, import_node_fs44.existsSync)(agentsFile)) continue;
+    const agentsFile = (0, import_node_path43.join)(CURSOR_SDK_STORE, hash, "agents.ndjson");
+    if (!(0, import_node_fs45.existsSync)(agentsFile)) continue;
     let text7;
     try {
-      text7 = (0, import_node_fs44.readFileSync)(agentsFile, "utf8");
+      text7 = (0, import_node_fs45.readFileSync)(agentsFile, "utf8");
     } catch {
       continue;
     }
@@ -17798,7 +17941,7 @@ function resolveConductorCursorAgentId(workspacePath) {
   return best?.agentId ?? null;
 }
 async function adoptThread(input) {
-  if (!(0, import_node_fs44.existsSync)(input.worktreePath)) {
+  if (!(0, import_node_fs45.existsSync)(input.worktreePath)) {
     throw new Error(`Worktree not found: ${input.worktreePath}`);
   }
   const repoPath = await resolveRepoRoot(input.worktreePath);
@@ -17827,18 +17970,18 @@ function conductorDbPath() {
   return CONDUCTOR_DB;
 }
 function listConductorWorkspaces() {
-  if (!(0, import_node_fs44.existsSync)(CONDUCTOR_DB)) {
+  if (!(0, import_node_fs45.existsSync)(CONDUCTOR_DB)) {
     throw new Error(`Conductor DB not found at ${CONDUCTOR_DB}`);
   }
-  const tmp = (0, import_node_fs44.mkdtempSync)((0, import_node_path42.join)((0, import_node_os13.tmpdir)(), "sideboard-conductor-"));
-  const snapshot = (0, import_node_path42.join)(tmp, "conductor.db");
+  const tmp = (0, import_node_fs45.mkdtempSync)((0, import_node_path43.join)((0, import_node_os13.tmpdir)(), "sideboard-conductor-"));
+  const snapshot = (0, import_node_path43.join)(tmp, "conductor.db");
   try {
-    (0, import_node_fs44.copyFileSync)(CONDUCTOR_DB, snapshot);
+    (0, import_node_fs45.copyFileSync)(CONDUCTOR_DB, snapshot);
     for (const suffix of ["-wal", "-shm"]) {
       const src = `${CONDUCTOR_DB}${suffix}`;
-      if ((0, import_node_fs44.existsSync)(src)) {
+      if ((0, import_node_fs45.existsSync)(src)) {
         try {
-          (0, import_node_fs44.copyFileSync)(src, `${snapshot}${suffix}`);
+          (0, import_node_fs45.copyFileSync)(src, `${snapshot}${suffix}`);
         } catch {
         }
       }
@@ -17914,22 +18057,22 @@ function listConductorWorkspaces() {
       db.close();
     }
   } finally {
-    (0, import_node_fs44.rmSync)(tmp, { recursive: true, force: true });
+    (0, import_node_fs45.rmSync)(tmp, { recursive: true, force: true });
   }
 }
 function importConductorWorkspace(workspaceId) {
-  if (!(0, import_node_fs44.existsSync)(CONDUCTOR_DB)) {
+  if (!(0, import_node_fs45.existsSync)(CONDUCTOR_DB)) {
     throw new Error(`Conductor DB not found at ${CONDUCTOR_DB}`);
   }
-  const tmp = (0, import_node_fs44.mkdtempSync)((0, import_node_path42.join)((0, import_node_os13.tmpdir)(), "sideboard-conductor-"));
-  const snapshot = (0, import_node_path42.join)(tmp, "conductor.db");
+  const tmp = (0, import_node_fs45.mkdtempSync)((0, import_node_path43.join)((0, import_node_os13.tmpdir)(), "sideboard-conductor-"));
+  const snapshot = (0, import_node_path43.join)(tmp, "conductor.db");
   try {
-    (0, import_node_fs44.copyFileSync)(CONDUCTOR_DB, snapshot);
+    (0, import_node_fs45.copyFileSync)(CONDUCTOR_DB, snapshot);
     for (const suffix of ["-wal", "-shm"]) {
       const src = `${CONDUCTOR_DB}${suffix}`;
-      if ((0, import_node_fs44.existsSync)(src)) {
+      if ((0, import_node_fs45.existsSync)(src)) {
         try {
-          (0, import_node_fs44.copyFileSync)(src, `${snapshot}${suffix}`);
+          (0, import_node_fs45.copyFileSync)(src, `${snapshot}${suffix}`);
         } catch {
         }
       }
@@ -17947,7 +18090,7 @@ function importConductorWorkspace(workspaceId) {
       ).get(workspaceId);
       if (!row) throw new Error(`Conductor workspace not found: ${workspaceId}`);
       const worktreePath = String(row.workspacePath);
-      if (!(0, import_node_fs44.existsSync)(worktreePath)) {
+      if (!(0, import_node_fs45.existsSync)(worktreePath)) {
         throw new Error(`Conductor worktree missing on disk: ${worktreePath}`);
       }
       let sessionId = null;
@@ -17987,7 +18130,7 @@ function importConductorWorkspace(workspaceId) {
       }
       let repoPath = worktreePath;
       try {
-        repoPath = (0, import_node_child_process4.execFileSync)("git", ["rev-parse", "--show-toplevel"], {
+        repoPath = (0, import_node_child_process5.execFileSync)("git", ["rev-parse", "--show-toplevel"], {
           cwd: worktreePath,
           encoding: "utf8"
         }).trim();
@@ -18010,31 +18153,31 @@ function importConductorWorkspace(workspaceId) {
       db.close();
     }
   } finally {
-    (0, import_node_fs44.rmSync)(tmp, { recursive: true, force: true });
+    (0, import_node_fs45.rmSync)(tmp, { recursive: true, force: true });
   }
 }
 async function importConductorWorkspaceAsync(workspaceId) {
   return importConductorWorkspace(workspaceId);
 }
-var import_node_child_process4, import_node_fs44, import_node_os13, import_node_path42, import_node_module4, CONDUCTOR_APP_SUPPORT, CONDUCTOR_DB, CURSOR_SDK_STORE;
+var import_node_child_process5, import_node_fs45, import_node_os13, import_node_path43, import_node_module4, CONDUCTOR_APP_SUPPORT, CONDUCTOR_DB, CURSOR_SDK_STORE;
 var init_adopt = __esm({
   "src/threads/adopt.ts"() {
     "use strict";
-    import_node_child_process4 = require("child_process");
-    import_node_fs44 = require("fs");
+    import_node_child_process5 = require("child_process");
+    import_node_fs45 = require("fs");
     import_node_os13 = require("os");
-    import_node_path42 = require("path");
+    import_node_path43 = require("path");
     import_node_module4 = require("module");
     init_worktree();
     init_thread_store();
-    CONDUCTOR_APP_SUPPORT = (0, import_node_path42.join)(
+    CONDUCTOR_APP_SUPPORT = (0, import_node_path43.join)(
       process.env.HOME ?? "",
       "Library",
       "Application Support",
       "com.conductor.app"
     );
-    CONDUCTOR_DB = (0, import_node_path42.join)(CONDUCTOR_APP_SUPPORT, "conductor.db");
-    CURSOR_SDK_STORE = (0, import_node_path42.join)(CONDUCTOR_APP_SUPPORT, "cursor-sdk-store");
+    CONDUCTOR_DB = (0, import_node_path43.join)(CONDUCTOR_APP_SUPPORT, "conductor.db");
+    CURSOR_SDK_STORE = (0, import_node_path43.join)(CONDUCTOR_APP_SUPPORT, "cursor-sdk-store");
   }
 });
 
@@ -18101,7 +18244,7 @@ async function openStackLayer(input, _onSetupLine) {
   let createdWorktree = false;
   const trees = await listWorktrees(repoPath);
   const checkedOut = trees.find((w) => w.branch === branchName);
-  if (checkedOut?.path && (0, import_node_fs45.existsSync)(checkedOut.path)) {
+  if (checkedOut?.path && (0, import_node_fs46.existsSync)(checkedOut.path)) {
     if (input.reuseExistingWorktree !== false) {
       worktreePath = checkedOut.path;
     } else {
@@ -18243,7 +18386,7 @@ async function initStackFromThread(input, onSetupLine) {
 async function createPrStack(input, onSetupLine) {
   await requireAgent(input.agent);
   const repoPath = await resolveRepoRoot(input.repoPath);
-  if (!(0, import_node_fs45.existsSync)(repoPath)) throw new Error(`Repo not found: ${repoPath}`);
+  if (!(0, import_node_fs46.existsSync)(repoPath)) throw new Error(`Repo not found: ${repoPath}`);
   if (!input.branches.length) throw new Error("At least one branch name required");
   const status = await detectGhStack(repoPath);
   if (!status.available) throw new Error(status.reason);
@@ -18310,7 +18453,7 @@ async function createPrStack(input, onSetupLine) {
     }
   }
   const claimed = new Set(threads.map((t) => t.worktreePath));
-  if (!claimed.has(bootstrap.worktreePath) && (0, import_node_fs45.existsSync)(bootstrap.worktreePath)) {
+  if (!claimed.has(bootstrap.worktreePath) && (0, import_node_fs46.existsSync)(bootstrap.worktreePath)) {
     try {
       await removeWorktree(repoPath, bootstrap.worktreePath, {
         deleteBranch: bootstrap.branchName
@@ -18330,11 +18473,11 @@ function stackAgentDefaultsFrom(input) {
     planMode: input.planMode
   };
 }
-var import_node_fs45;
+var import_node_fs46;
 var init_stack_layers = __esm({
   "src/threads/stack-layers.ts"() {
     "use strict";
-    import_node_fs45 = require("fs");
+    import_node_fs46 = require("fs");
     init_detect();
     init_run();
     init_stack();
@@ -18347,7 +18490,7 @@ var init_stack_layers = __esm({
 
 // src/diff/diff.ts
 async function inspectGitWorktree(worktreePath) {
-  if (!worktreePath || !(0, import_node_fs46.existsSync)(worktreePath)) return "missing_worktree";
+  if (!worktreePath || !(0, import_node_fs47.existsSync)(worktreePath)) return "missing_worktree";
   const check = await git(["rev-parse", "--is-inside-work-tree"], worktreePath, {
     reject: false
   });
@@ -18355,7 +18498,7 @@ async function inspectGitWorktree(worktreePath) {
   return "ok";
 }
 async function initializeGitRepository(worktreePath) {
-  if (!worktreePath || !(0, import_node_fs46.existsSync)(worktreePath)) {
+  if (!worktreePath || !(0, import_node_fs47.existsSync)(worktreePath)) {
     throw new Error("Worktree not found");
   }
   const status = await inspectGitWorktree(worktreePath);
@@ -18489,11 +18632,11 @@ new file mode 100644
   };
 }
 async function untrackedPatch(worktreePath, path2, maxHunk) {
-  const abs = (0, import_node_path43.join)(worktreePath, path2);
+  const abs = (0, import_node_path44.join)(worktreePath, path2);
   try {
-    const st = (0, import_node_fs46.statSync)(abs);
+    const st = (0, import_node_fs47.statSync)(abs);
     if (st.isFile() && st.size > maxHunk) {
-      const buf = (0, import_node_fs46.readFileSync)(abs).subarray(0, maxHunk);
+      const buf = (0, import_node_fs47.readFileSync)(abs).subarray(0, maxHunk);
       return syntheticAddPatch(path2, buf.toString("utf8"), maxHunk);
     }
   } catch {
@@ -18982,8 +19125,8 @@ function isImageRelativePath(relativePath) {
 function readWorktreeFileForUpload(worktreePath, relativePath, opts) {
   assertSafeRelativePath(relativePath);
   const maxBytes = opts?.maxBytes ?? DEFAULT_UPLOAD_MAX_BYTES;
-  const abs = (0, import_node_path43.join)(worktreePath, relativePath);
-  const st = (0, import_node_fs46.statSync)(abs);
+  const abs = (0, import_node_path44.join)(worktreePath, relativePath);
+  const st = (0, import_node_fs47.statSync)(abs);
   if (!st.isFile()) {
     throw new Error(`Not a file: ${relativePath}`);
   }
@@ -18992,7 +19135,7 @@ function readWorktreeFileForUpload(worktreePath, relativePath, opts) {
       `File too large to upload (${st.size} bytes; max ${maxBytes})`
     );
   }
-  const buf = (0, import_node_fs46.readFileSync)(abs);
+  const buf = (0, import_node_fs47.readFileSync)(abs);
   return {
     path: relativePath,
     contentBase64: buf.toString("base64"),
@@ -19002,12 +19145,12 @@ function readWorktreeFileForUpload(worktreePath, relativePath, opts) {
 function readWorktreeFile(worktreePath, relativePath, opts) {
   assertSafeRelativePath(relativePath);
   const maxBytes = opts?.maxBytes ?? 2e5;
-  const abs = (0, import_node_path43.join)(worktreePath, relativePath);
-  const st = (0, import_node_fs46.statSync)(abs);
+  const abs = (0, import_node_path44.join)(worktreePath, relativePath);
+  const st = (0, import_node_fs47.statSync)(abs);
   if (!st.isFile()) {
     throw new Error(`Not a file: ${relativePath}`);
   }
-  const buf = (0, import_node_fs46.readFileSync)(abs);
+  const buf = (0, import_node_fs47.readFileSync)(abs);
   if (isImageRelativePath(relativePath)) {
     const maxImageBytes = Math.max(maxBytes, 15e6);
     const truncated2 = buf.length > maxImageBytes;
@@ -19050,9 +19193,9 @@ function assertSafeRelativePath(relativePath) {
 }
 function writeWorktreeFile(worktreePath, relativePath, content) {
   assertSafeRelativePath(relativePath);
-  const abs = (0, import_node_path43.join)(worktreePath, relativePath);
-  (0, import_node_fs46.mkdirSync)((0, import_node_path43.dirname)(abs), { recursive: true });
-  (0, import_node_fs46.writeFileSync)(abs, content, "utf8");
+  const abs = (0, import_node_path44.join)(worktreePath, relativePath);
+  (0, import_node_fs47.mkdirSync)((0, import_node_path44.dirname)(abs), { recursive: true });
+  (0, import_node_fs47.writeFileSync)(abs, content, "utf8");
   return { path: relativePath };
 }
 async function getDiffSummary(worktreePath, repoPath, opts) {
@@ -19069,12 +19212,12 @@ async function getDiffSummary(worktreePath, repoPath, opts) {
     truncated: full.files.length > maxFiles
   };
 }
-var import_node_fs46, import_node_path43, mergeBaseCache, MERGE_BASE_TTL_MS, SHA_RE, IMAGE_EXTENSIONS2, DEFAULT_UPLOAD_MAX_BYTES;
+var import_node_fs47, import_node_path44, mergeBaseCache, MERGE_BASE_TTL_MS, SHA_RE, IMAGE_EXTENSIONS2, DEFAULT_UPLOAD_MAX_BYTES;
 var init_diff = __esm({
   "src/diff/diff.ts"() {
     "use strict";
-    import_node_fs46 = require("fs");
-    import_node_path43 = require("path");
+    import_node_fs47 = require("fs");
+    import_node_path44 = require("path");
     init_run();
     init_worktree();
     mergeBaseCache = /* @__PURE__ */ new Map();
@@ -19350,7 +19493,7 @@ function parseFrontmatter(content) {
 }
 function readSkill(skillMd, source) {
   try {
-    const content = (0, import_node_fs47.readFileSync)(skillMd, "utf8");
+    const content = (0, import_node_fs48.readFileSync)(skillMd, "utf8");
     const { name: fmName, description } = parseFrontmatter(content);
     const dirName = skillMd.split("/").slice(-2, -1)[0] || "skill";
     const name = fmName || dirName;
@@ -19369,19 +19512,19 @@ function readSkill(skillMd, source) {
   }
 }
 function scanSkillsDir(dir, source, out) {
-  if (!(0, import_node_fs47.existsSync)(dir)) return;
+  if (!(0, import_node_fs48.existsSync)(dir)) return;
   let entries;
   try {
-    entries = (0, import_node_fs47.readdirSync)(dir);
+    entries = (0, import_node_fs48.readdirSync)(dir);
   } catch {
     return;
   }
   for (const entry of entries) {
     if (entry.startsWith(".")) continue;
-    const skillMd = (0, import_node_path44.join)(dir, entry, "SKILL.md");
-    if (!(0, import_node_fs47.existsSync)(skillMd)) continue;
+    const skillMd = (0, import_node_path45.join)(dir, entry, "SKILL.md");
+    if (!(0, import_node_fs48.existsSync)(skillMd)) continue;
     try {
-      if (!(0, import_node_fs47.statSync)(skillMd).isFile()) continue;
+      if (!(0, import_node_fs48.statSync)(skillMd).isFile()) continue;
     } catch {
       continue;
     }
@@ -19390,24 +19533,24 @@ function scanSkillsDir(dir, source, out) {
   }
 }
 function scanClaudePluginSkills(pluginsRoot, out) {
-  if (!(0, import_node_fs47.existsSync)(pluginsRoot)) return;
+  if (!(0, import_node_fs48.existsSync)(pluginsRoot)) return;
   const walk = (dir, depth, lookingForSkillsDir) => {
     if (depth > 7) return;
     let entries;
     try {
-      entries = (0, import_node_fs47.readdirSync)(dir);
+      entries = (0, import_node_fs48.readdirSync)(dir);
     } catch {
       return;
     }
     if (lookingForSkillsDir && entries.includes("SKILL.md")) {
-      const skill = readSkill((0, import_node_path44.join)(dir, "SKILL.md"), "cli");
+      const skill = readSkill((0, import_node_path45.join)(dir, "SKILL.md"), "cli");
       if (skill) out.push(skill);
     }
     for (const entry of entries) {
       if (entry === "node_modules" || entry === ".git") continue;
-      const full = (0, import_node_path44.join)(dir, entry);
+      const full = (0, import_node_path45.join)(dir, entry);
       try {
-        if (!(0, import_node_fs47.statSync)(full).isDirectory()) continue;
+        if (!(0, import_node_fs48.statSync)(full).isDirectory()) continue;
       } catch {
         continue;
       }
@@ -19425,17 +19568,17 @@ function discoverSkills(worktreePath) {
   const home = (0, import_node_os14.homedir)();
   const collected = [];
   for (const rel of [".claude/skills", ".cursor/skills", ".sideboard/skills", ".brightsy/skills", "skills"]) {
-    scanSkillsDir((0, import_node_path44.join)(worktreePath, rel), "workspace", collected);
+    scanSkillsDir((0, import_node_path45.join)(worktreePath, rel), "workspace", collected);
   }
   for (const abs of [
-    (0, import_node_path44.join)(home, ".claude/skills"),
-    (0, import_node_path44.join)(home, ".cursor/skills"),
-    (0, import_node_path44.join)(home, ".sideboard/skills"),
-    (0, import_node_path44.join)(home, ".brightsy/skills")
+    (0, import_node_path45.join)(home, ".claude/skills"),
+    (0, import_node_path45.join)(home, ".cursor/skills"),
+    (0, import_node_path45.join)(home, ".sideboard/skills"),
+    (0, import_node_path45.join)(home, ".brightsy/skills")
   ]) {
     scanSkillsDir(abs, "user", collected);
   }
-  scanClaudePluginSkills((0, import_node_path44.join)(home, ".claude/plugins"), collected);
+  scanClaudePluginSkills((0, import_node_path45.join)(home, ".claude/plugins"), collected);
   collected.push(...bundledSkills());
   const rank = {
     workspace: 0,
@@ -19461,7 +19604,7 @@ function readSkillBody(skillPath, maxChars = 12e3) {
 \u2026(truncated)` : body;
     }
   }
-  const raw = (0, import_node_fs47.readFileSync)(skillPath, "utf8");
+  const raw = (0, import_node_fs48.readFileSync)(skillPath, "utf8");
   if (raw.startsWith("---")) {
     const end = raw.indexOf("\n---", 3);
     if (end >= 0) {
@@ -19475,13 +19618,13 @@ function readSkillBody(skillPath, maxChars = 12e3) {
 
 \u2026(truncated)` : raw;
 }
-var import_node_fs47, import_node_os14, import_node_path44, BUNDLED_SKILL_PREFIX;
+var import_node_fs48, import_node_os14, import_node_path45, BUNDLED_SKILL_PREFIX;
 var init_discover = __esm({
   "src/skills/discover.ts"() {
     "use strict";
-    import_node_fs47 = require("fs");
+    import_node_fs48 = require("fs");
     import_node_os14 = require("os");
-    import_node_path44 = require("path");
+    import_node_path45 = require("path");
     init_long_running();
     BUNDLED_SKILL_PREFIX = "bundled:";
   }
@@ -19575,8 +19718,8 @@ var init_expand = __esm({
 // src/skills/detached-job-path.ts
 function detachedJobScriptIn(dir) {
   for (const name of DETACHED_JOB_FILENAMES) {
-    const script = (0, import_node_path45.join)(dir, "scripts", name);
-    if ((0, import_node_fs48.existsSync)(script)) return script;
+    const script = (0, import_node_path46.join)(dir, "scripts", name);
+    if ((0, import_node_fs49.existsSync)(script)) return script;
   }
   return null;
 }
@@ -19588,11 +19731,11 @@ function packagedDetachedJobPath() {
 function resolveDetachedJobScript() {
   const packaged = packagedDetachedJobPath();
   if (packaged) return packaged;
-  let dir = (0, import_node_path45.dirname)((0, import_node_url3.fileURLToPath)(import_meta3.url));
+  let dir = (0, import_node_path46.dirname)((0, import_node_url3.fileURLToPath)(import_meta3.url));
   for (let i = 0; i < 8; i++) {
     const candidate = detachedJobScriptIn(dir);
     if (candidate) return candidate;
-    const parent = (0, import_node_path45.dirname)(dir);
+    const parent = (0, import_node_path46.dirname)(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -19603,12 +19746,12 @@ function formatDetachedJobInvoke(scriptPath) {
   if (resolved) return `node ${JSON.stringify(resolved)}`;
   return "node scripts/detached-job.cjs";
 }
-var import_node_fs48, import_node_path45, import_node_url3, import_meta3, DETACHED_JOB_FILENAMES;
+var import_node_fs49, import_node_path46, import_node_url3, import_meta3, DETACHED_JOB_FILENAMES;
 var init_detached_job_path = __esm({
   "src/skills/detached-job-path.ts"() {
     "use strict";
-    import_node_fs48 = require("fs");
-    import_node_path45 = require("path");
+    import_node_fs49 = require("fs");
+    import_node_path46 = require("path");
     import_node_url3 = require("url");
     init_packaged_runtime();
     import_meta3 = {};
@@ -19788,9 +19931,9 @@ function formatPrGateDirective() {
 }
 function formatProcessGuideDirective(opts) {
   const worktree = opts?.worktreePath?.trim();
-  const hasGraphSkill = !!worktree && (0, import_node_fs49.existsSync)((0, import_node_path46.join)(worktree, ".claude/skills/graph-engineering/SKILL.md"));
-  const hasReviewSkill = !!worktree && (0, import_node_fs49.existsSync)((0, import_node_path46.join)(worktree, ".claude/skills/review/SKILL.md"));
-  const hasInstallSkill = !!worktree && (0, import_node_fs49.existsSync)((0, import_node_path46.join)(worktree, ".claude/skills/worktree-install/SKILL.md"));
+  const hasGraphSkill = !!worktree && (0, import_node_fs50.existsSync)((0, import_node_path47.join)(worktree, ".claude/skills/graph-engineering/SKILL.md"));
+  const hasReviewSkill = !!worktree && (0, import_node_fs50.existsSync)((0, import_node_path47.join)(worktree, ".claude/skills/review/SKILL.md"));
+  const hasInstallSkill = !!worktree && (0, import_node_fs50.existsSync)((0, import_node_path47.join)(worktree, ".claude/skills/worktree-install/SKILL.md"));
   return [
     "Process guides (recurring work only):",
     hasGraphSkill ? "- Migrations, ports, batch fixes, and other fan-out: follow `.claude/skills/graph-engineering/SKILL.md` (`/graph-engineering`). Judge first; state on disk; grow the rulebook; do not patch around it." : null,
@@ -19828,12 +19971,12 @@ function formatArtifactDirective() {
 function formatUiReminder() {
   return "Sideboard UI: markdown table is enough to read data; present_schema if they ask to edit/filter (even after markdown); present_files for the file manager. html fence or present_artifact, not both for the same document. type=log appends (same artifact_id, new lines only). ask_user only for a real multiple-choice (not hellos or \u201Cwhat next?\u201D) \u2014 reply in chat. Do not say artifacts/CMS UI are unavailable.";
 }
-var import_node_fs49, import_node_path46, PR_GOAL_RE, GITHUB_TICKET_REF, KEYED_TICKET_REF;
+var import_node_fs50, import_node_path47, PR_GOAL_RE, GITHUB_TICKET_REF, KEYED_TICKET_REF;
 var init_instructions = __esm({
   "src/agents/instructions.ts"() {
     "use strict";
-    import_node_fs49 = require("fs");
-    import_node_path46 = require("path");
+    import_node_fs50 = require("fs");
+    import_node_path47 = require("path");
     init_git_auth_mode();
     init_worktree_labels();
     init_detached_job_path();
@@ -20186,40 +20329,40 @@ __export(plan_file_exports, {
   writePlanFile: () => writePlanFile
 });
 function ensureAttachmentsGitignore(worktreePath) {
-  const gitignoreAbs = (0, import_node_path47.join)(worktreePath, ATTACHMENTS_DIR, ".gitignore");
-  if ((0, import_node_fs50.existsSync)(gitignoreAbs)) return;
-  (0, import_node_fs50.mkdirSync)((0, import_node_path47.dirname)(gitignoreAbs), { recursive: true });
-  (0, import_node_fs50.writeFileSync)(gitignoreAbs, attachmentsGitignoreBody(), "utf8");
+  const gitignoreAbs = (0, import_node_path48.join)(worktreePath, ATTACHMENTS_DIR, ".gitignore");
+  if ((0, import_node_fs51.existsSync)(gitignoreAbs)) return;
+  (0, import_node_fs51.mkdirSync)((0, import_node_path48.dirname)(gitignoreAbs), { recursive: true });
+  (0, import_node_fs51.writeFileSync)(gitignoreAbs, attachmentsGitignoreBody(), "utf8");
 }
 function planFileAbs(worktreePath) {
-  return (0, import_node_path47.join)(worktreePath, PLAN_FILE_REL);
+  return (0, import_node_path48.join)(worktreePath, PLAN_FILE_REL);
 }
 function readTextIfPresent2(abs) {
-  if (!(0, import_node_fs50.existsSync)(abs)) return null;
+  if (!(0, import_node_fs51.existsSync)(abs)) return null;
   try {
-    const content = (0, import_node_fs50.readFileSync)(abs, "utf8");
+    const content = (0, import_node_fs51.readFileSync)(abs, "utf8");
     return content.trim() ? content : null;
   } catch {
     return null;
   }
 }
 function readPlanFile(worktreePath) {
-  return readTextIfPresent2(planFileAbs(worktreePath)) ?? readTextIfPresent2((0, import_node_path47.join)(worktreePath, `${LEGACY_ATTACHMENTS_DIR}/plan.md`)) ?? readTextIfPresent2((0, import_node_path47.join)(worktreePath, LEGACY_PLAN_FILE_REL));
+  return readTextIfPresent2(planFileAbs(worktreePath)) ?? readTextIfPresent2((0, import_node_path48.join)(worktreePath, `${LEGACY_ATTACHMENTS_DIR}/plan.md`)) ?? readTextIfPresent2((0, import_node_path48.join)(worktreePath, LEGACY_PLAN_FILE_REL));
 }
 function writePlanFile(worktreePath, content) {
   ensureAttachmentsGitignore(worktreePath);
   const abs = planFileAbs(worktreePath);
-  (0, import_node_fs50.mkdirSync)((0, import_node_path47.dirname)(abs), { recursive: true });
+  (0, import_node_fs51.mkdirSync)((0, import_node_path48.dirname)(abs), { recursive: true });
   const body = content.trimEnd() + (content.endsWith("\n") ? "" : "\n");
-  (0, import_node_fs50.writeFileSync)(abs, body, "utf8");
+  (0, import_node_fs51.writeFileSync)(abs, body, "utf8");
   return PLAN_FILE_REL;
 }
-var import_node_fs50, import_node_path47;
+var import_node_fs51, import_node_path48;
 var init_plan_file = __esm({
   "src/plan/plan-file.ts"() {
     "use strict";
-    import_node_fs50 = require("fs");
-    import_node_path47 = require("path");
+    import_node_fs51 = require("fs");
+    import_node_path48 = require("path");
     init_workspace_scratch();
     init_plan_present();
     init_plan_present();
@@ -20267,13 +20410,13 @@ var init_sync_branch = __esm({
 
 // src/agents/cursor-store.ts
 function cursorSdkStoreDir(threadId) {
-  const root = (0, import_node_path48.join)(appDataDir(), CURSOR_SDK_STORE_DIR);
+  const root = (0, import_node_path49.join)(appDataDir(), CURSOR_SDK_STORE_DIR);
   const id = sanitizeCursorStoreSegment(threadId);
   if (!id) return root;
-  return (0, import_node_path48.join)(root, "threads", id);
+  return (0, import_node_path49.join)(root, "threads", id);
 }
 function cursorSdkRunsNdjsonPath(threadId) {
-  return (0, import_node_path48.join)(cursorSdkStoreDir(threadId), "runs.ndjson");
+  return (0, import_node_path49.join)(cursorSdkStoreDir(threadId), "runs.ndjson");
 }
 function cursorSdkRunsNdjsonSearchPaths(threadId) {
   const scoped = cursorSdkRunsNdjsonPath(threadId);
@@ -20286,11 +20429,11 @@ function cursorSdkRunsNdjsonSearchPaths(threadId) {
 function sanitizeCursorStoreSegment(threadId) {
   return (threadId ?? "").trim().replace(/[^a-zA-Z0-9._-]/g, "_");
 }
-var import_node_path48, CURSOR_SDK_STORE_DIR;
+var import_node_path49, CURSOR_SDK_STORE_DIR;
 var init_cursor_store = __esm({
   "src/agents/cursor-store.ts"() {
     "use strict";
-    import_node_path48 = require("path");
+    import_node_path49 = require("path");
     init_paths();
     CURSOR_SDK_STORE_DIR = "cursor-sdk-store";
   }
@@ -20312,9 +20455,9 @@ function recoverFinishedCursorRun(opts) {
   return best;
 }
 function scanFinishedCursorRuns(runsPath, agentId, startedAfterMs) {
-  if (!(0, import_node_fs51.existsSync)(runsPath)) return null;
+  if (!(0, import_node_fs52.existsSync)(runsPath)) return null;
   try {
-    const lines = (0, import_node_fs51.readFileSync)(runsPath, "utf8").split("\n");
+    const lines = (0, import_node_fs52.readFileSync)(runsPath, "utf8").split("\n");
     let best = null;
     for (const line of lines) {
       const trimmed = line.trim();
@@ -20340,11 +20483,11 @@ function scanFinishedCursorRuns(runsPath, agentId, startedAfterMs) {
     return null;
   }
 }
-var import_node_fs51;
+var import_node_fs52;
 var init_cursor_recover = __esm({
   "src/agents/cursor-recover.ts"() {
     "use strict";
-    import_node_fs51 = require("fs");
+    import_node_fs52 = require("fs");
     init_cursor_store();
   }
 });
@@ -20476,13 +20619,13 @@ async function startOrchestration(opts) {
   }
   return updated;
 }
-var import_node_events, import_node_fs52, LIVE_TURN_SPAWN_GRACE_MS, STALE_AGENT_PID_WAIT_MS, Orchestrator, singleton;
+var import_node_events, import_node_fs53, LIVE_TURN_SPAWN_GRACE_MS, STALE_AGENT_PID_WAIT_MS, Orchestrator, singleton;
 var init_orchestrator = __esm({
   "src/orchestrator/orchestrator.ts"() {
     "use strict";
     import_node_events = require("events");
     init_outbound_watch();
-    import_node_fs52 = require("fs");
+    import_node_fs53 = require("fs");
     init_error_detail();
     init_run();
     init_stale_lock();
@@ -20655,7 +20798,7 @@ var init_orchestrator = __esm({
             }
             continue;
           }
-          if (!(0, import_node_fs52.existsSync)(thread.worktreePath)) {
+          if (!(0, import_node_fs53.existsSync)(thread.worktreePath)) {
             setStatus(thread.id, "broken", "Worktree missing on disk");
             this.emit({ type: "status_changed", threadId: thread.id, status: "broken" });
             continue;
@@ -22546,7 +22689,7 @@ var init_orchestrator = __esm({
           this.emit({ type: "status_changed", threadId: restored2.id, status: restored2.status });
           return restored2;
         }
-        if (!(0, import_node_fs52.existsSync)(thread.worktreePath)) {
+        if (!(0, import_node_fs53.existsSync)(thread.worktreePath)) {
           if (isCowboyThread(thread) || isPrimaryCheckoutThread(thread)) {
             throw new Error(
               `Cowboy checkout missing: ${thread.worktreePath}. Re-add the project folder, then restore.`
@@ -22864,6 +23007,7 @@ __export(index_exports, {
   applyForwardOccupancy: () => applyForwardOccupancy,
   applyGithubGitAuthEnv: () => applyGithubGitAuthEnv,
   applyPromptCacheTtlEnv: () => applyPromptCacheTtlEnv,
+  applySystemCaEnv: () => applySystemCaEnv,
   applyThreadIntoMain: () => applyThreadIntoMain,
   applyTurnUsage: () => applyTurnUsage,
   armSchedules: () => armSchedules,
@@ -23242,6 +23386,7 @@ __export(index_exports, {
   lookupSoccerTeam: () => lookupSoccerTeam,
   mapAbleTimeTask: () => mapAbleTimeTask,
   markPrReady: () => markPrReady,
+  materializeSystemCaBundle: () => materializeSystemCaBundle,
   maxConcurrentAgents: () => maxConcurrentAgents,
   maybeCompactContext: () => maybeCompactContext,
   mcpAllowTools: () => mcpAllowTools,
@@ -23465,6 +23610,7 @@ __export(index_exports, {
   toolDetail: () => toolDetail,
   toolFilePath: () => toolFilePath,
   totalTokens: () => totalTokens,
+  trustSystemCertificates: () => trustSystemCertificates,
   turnCostUsdFromCursorUsage: () => turnCostUsdFromCursorUsage,
   updateAbleTimeTask: () => updateAbleTimeTask,
   updateAdvancedSettings: () => updateAdvancedSettings,
@@ -24831,6 +24977,7 @@ async function installOptionalServiceCli(id) {
 
 // src/index.ts
 init_fetch();
+init_system_ca();
 init_agents();
 init_spawn();
 init_message_parts();
@@ -25176,7 +25323,7 @@ var import_mcp = require("@modelcontextprotocol/sdk/server/mcp.js");
 var import_stdio = require("@modelcontextprotocol/sdk/server/stdio.js");
 var import_zod8 = require("zod");
 var import_node_crypto13 = require("crypto");
-var import_node_path51 = require("path");
+var import_node_path52 = require("path");
 init_orchestrator();
 init_worktree();
 init_global_workspace();
@@ -26760,27 +26907,27 @@ init_gh_errors();
 init_git_auth_mode();
 
 // src/board/load-home-board.ts
-var import_node_fs54 = require("fs");
-var import_node_path50 = require("path");
+var import_node_fs55 = require("fs");
+var import_node_path51 = require("path");
 init_worktree();
 init_paths();
 
 // src/board/board-pins.ts
 var import_node_crypto12 = require("crypto");
-var import_node_fs53 = require("fs");
-var import_node_path49 = require("path");
+var import_node_fs54 = require("fs");
+var import_node_path50 = require("path");
 init_paths();
 init_home_board();
 var FILE = "home-board-pins.json";
 var VERSION = 1;
 function pinsFile() {
-  return (0, import_node_path49.join)(appDataDir(), FILE);
+  return (0, import_node_path50.join)(appDataDir(), FILE);
 }
 function readDisk() {
   const path2 = pinsFile();
-  if (!(0, import_node_fs53.existsSync)(path2)) return [];
+  if (!(0, import_node_fs54.existsSync)(path2)) return [];
   try {
-    const raw = JSON.parse((0, import_node_fs53.readFileSync)(path2, "utf8"));
+    const raw = JSON.parse((0, import_node_fs54.readFileSync)(path2, "utf8"));
     if (raw?.version !== VERSION || !Array.isArray(raw.items)) return [];
     return raw.items.filter((item) => item?.id && item.kind && item.ref);
   } catch {
@@ -26788,8 +26935,8 @@ function readDisk() {
   }
 }
 function writeDisk(items) {
-  (0, import_node_fs53.mkdirSync)(appDataDir(), { recursive: true });
-  (0, import_node_fs53.writeFileSync)(pinsFile(), JSON.stringify({ version: VERSION, items }, null, 2), "utf8");
+  (0, import_node_fs54.mkdirSync)(appDataDir(), { recursive: true });
+  (0, import_node_fs54.writeFileSync)(pinsFile(), JSON.stringify({ version: VERSION, items }, null, 2), "utf8");
 }
 function listBoardPins() {
   return readDisk();
@@ -26841,7 +26988,7 @@ function replaceBoardPins(items) {
 }
 function clearBoardPins() {
   try {
-    (0, import_node_fs53.unlinkSync)(pinsFile());
+    (0, import_node_fs54.unlinkSync)(pinsFile());
   } catch {
   }
 }
@@ -26858,7 +27005,7 @@ function homeBoardWorkspaceKey(workspaces) {
   return workspaces.map((w) => w.path).filter(Boolean).sort().join("\n");
 }
 function cacheFile() {
-  return (0, import_node_path50.join)(appDataDir(), "home-board-cache.json");
+  return (0, import_node_path51.join)(appDataDir(), "home-board-cache.json");
 }
 function emptyInputs() {
   return {
@@ -26884,9 +27031,9 @@ function shouldCacheHomeBoardInputs(inputs) {
 }
 function readDiskCache() {
   const path2 = cacheFile();
-  if (!(0, import_node_fs54.existsSync)(path2)) return null;
+  if (!(0, import_node_fs55.existsSync)(path2)) return null;
   try {
-    const raw = JSON.parse((0, import_node_fs54.readFileSync)(path2, "utf8"));
+    const raw = JSON.parse((0, import_node_fs55.readFileSync)(path2, "utf8"));
     if (raw?.version !== CACHE_VERSION || typeof raw.fetchedAt !== "number") {
       return null;
     }
@@ -26900,14 +27047,14 @@ function readDiskCache() {
 }
 function writeDiskCache(entry) {
   try {
-    (0, import_node_fs54.mkdirSync)(appDataDir(), { recursive: true });
-    (0, import_node_fs54.writeFileSync)(cacheFile(), JSON.stringify(entry), "utf8");
+    (0, import_node_fs55.mkdirSync)(appDataDir(), { recursive: true });
+    (0, import_node_fs55.writeFileSync)(cacheFile(), JSON.stringify(entry), "utf8");
   } catch {
   }
 }
 function deleteDiskCache() {
   try {
-    (0, import_node_fs54.unlinkSync)(cacheFile());
+    (0, import_node_fs55.unlinkSync)(cacheFile());
   } catch {
   }
 }
@@ -27043,6 +27190,52 @@ async function getHomeBoardInputs(workspaces, opts) {
 
 // src/mcp/server.ts
 init_home_board();
+
+// src/mcp/create-thread-agent.ts
+function resolveOrchCreateThreadOptions(input) {
+  const { resolveNewThreadOptions: resolveNewThreadOptions2 } = input;
+  const account = resolveNewThreadOptions2({});
+  const requested = input.requestedAgent;
+  const parent = input.parentAgent ?? void 0;
+  let agent = account.agent;
+  let ignoredAgent;
+  let honorRequestedModel = false;
+  if (requested) {
+    const parentEcho = Boolean(parent) && requested === parent && requested !== account.agent;
+    const cursorAutofill = requested === "cursor" && account.agent !== "cursor";
+    if (parentEcho || cursorAutofill) {
+      ignoredAgent = requested;
+    } else {
+      agent = requested;
+      honorRequestedModel = input.requestedModel !== void 0;
+    }
+  }
+  let coercedFrom;
+  if (agent === "codex" && parent === "codex") {
+    coercedFrom = requested ?? "codex";
+    agent = "cursor";
+  }
+  const opts = resolveNewThreadOptions2({
+    agent,
+    model: honorRequestedModel ? input.requestedModel : void 0
+  });
+  return {
+    ...opts,
+    ...ignoredAgent ? { ignoredAgent } : {},
+    ...coercedFrom ? { coercedFrom } : {}
+  };
+}
+function orchCreateThreadAgentNote(input) {
+  if (input.coercedFrom) {
+    return `Avoid nested Codex under a Codex orchestrator \u2014 used Account default agent=${input.agent}`;
+  }
+  if (input.ignoredAgent) {
+    return `Ignored agent=${input.ignoredAgent} \u2014 used Account default agent=${input.agent}`;
+  }
+  return void 0;
+}
+
+// src/mcp/server.ts
 var MAX_ORCH_THREADS = 5;
 var CREATE_THREAD_TIMEOUT_MS = 9e4;
 function withTimeout(promise, ms, label) {
@@ -27090,18 +27283,13 @@ async function createOrchChildThread(orch, args, resolveNewThreadOptions2) {
       };
     }
   }
-  let agentArg = args.agent;
-  let agentCoercedFrom;
-  const resolvedProbe = resolveNewThreadOptions2({ agent: agentArg }).agent;
-  if (resolvedProbe === "codex") {
-    agentCoercedFrom = agentArg ?? "codex";
-    const accountAgent = resolveNewThreadOptions2({}).agent;
-    agentArg = accountAgent !== "codex" ? accountAgent : "cursor";
-  }
-  const opts = resolveNewThreadOptions2({
-    agent: agentArg,
-    model: args.model
+  const opts = resolveOrchCreateThreadOptions({
+    requestedAgent: args.agent,
+    requestedModel: args.model,
+    parentAgent: parent?.agent,
+    resolveNewThreadOptions: resolveNewThreadOptions2
   });
+  const agentNote = orchCreateThreadAgentNote(opts);
   try {
     const priorIds = new Set(orch.getThreads(false).map((t) => t.id));
     const thread = await withTimeout(
@@ -27137,10 +27325,9 @@ async function createOrchChildThread(orch, args, resolveNewThreadOptions2) {
         link: `sideboard://thread/${thread.id}`,
         parentThreadId: thread.parentThreadId,
         ...alreadyStarted ? { alreadyStarted: true } : {},
-        ...agentCoercedFrom ? {
-          agentCoercedFrom,
-          note: `Avoid nested Codex under a Codex orchestrator \u2014 used Account default agent=${thread.agent}`
-        } : {},
+        ...opts.coercedFrom ? { agentCoercedFrom: opts.coercedFrom } : {},
+        ...opts.ignoredAgent ? { agentIgnored: opts.ignoredAgent } : {},
+        ...agentNote ? { note: agentNote } : {},
         ...parentCorrectedFrom ? { parentCorrectedFrom, parentNote } : {}
       })
     };
@@ -27215,7 +27402,7 @@ async function startMcpServer() {
       async () => {
         const threads = orch.getThreads(true);
         const lines = threads.map((t) => {
-          const repo = t.repoPath === GLOBAL_WORKSPACE_ID ? "Orchestration" : (0, import_node_path51.basename)(t.repoPath) || t.repoPath;
+          const repo = t.repoPath === GLOBAL_WORKSPACE_ID ? "Orchestration" : (0, import_node_path52.basename)(t.repoPath) || t.repoPath;
           const live = orch.threadLooksLive(t) ? readTurnLive(t.id) : null;
           const parent = t.parentThreadId ? `  parent:${t.parentThreadId.slice(0, 8)}` : "";
           const preview = lastMessagePreview(t.messages, 80);
@@ -27500,11 +27687,13 @@ async function startMcpServer() {
     );
     server.tool(
       "create_thread",
-      `Create a worktree thread (chat) from branch, pr, or ticket. A ticket, PR, or named branch may have only one live worktree \u2014 if one already matches, returns it (alreadyStarted=true) instead of a second checkout. Creating from the default branch still opens a new isolated worktree. Pass repoPath from list_workspaces. cowboy=true uses the project folder on the default branch (no isolated worktree; land is commit+push). From an orchestration chat, omit parentThreadId (Sideboard binds the child to this chat) or pass the exact id from the turn reminder \u2014 never invent a uuid. Prefer omitting agent/model so Sideboard applies ${accountDefaultsHint}. Setup (settings.toml, .cursor/worktrees.json, or script/setup) runs in the background in parallel with the first turn (skipped for cowboy). Then use send_to_thread to chat.`,
+      `Create a worktree thread (chat) from branch, pr, or ticket. A ticket, PR, or named branch may have only one live worktree \u2014 if one already matches, returns it (alreadyStarted=true) instead of a second checkout. Creating from the default branch still opens a new isolated worktree. Pass repoPath from list_workspaces. cowboy=true uses the project folder on the default branch (no isolated worktree; land is commit+push). From an orchestration chat, omit parentThreadId (Sideboard binds the child to this chat) or pass the exact id from the turn reminder \u2014 never invent a uuid. Omit agent/model \u2014 Sideboard applies ${accountDefaultsHint}. Do not pass your own agent or agent=cursor; those are ignored. Setup (settings.toml, .cursor/worktrees.json, or script/setup) runs in the background in parallel with the first turn (skipped for cowboy). Then use send_to_thread to chat.`,
       {
         sourceType: import_zod8.z.enum(["branch", "pr", "ticket"]),
         sourceRef: import_zod8.z.string(),
-        agent: import_zod8.z.enum(["claude", "codex", "opencode", "brightsy", "cursor"]).optional().describe(`Omit to use Account default agent (${accountDefaults.agent})`),
+        agent: import_zod8.z.enum(["claude", "codex", "opencode", "brightsy", "cursor"]).optional().describe(
+          `Usually omit. Sideboard uses Account default agent (${accountDefaults.agent}). Passing your own agent or cursor is ignored.`
+        ),
         model: import_zod8.z.string().nullable().optional().describe(
           `Usually omit to use Account default model (${accountDefaults.model?.trim() || "Auto"}). Pass null only to force Auto / agent-default.`
         ),
@@ -30175,9 +30364,9 @@ var import_node_http3 = require("http");
 var import_ws3 = require("ws");
 
 // src/slack/relay-static.ts
-var import_node_fs55 = require("fs");
+var import_node_fs56 = require("fs");
 var import_promises = require("fs/promises");
-var import_node_path52 = __toESM(require("path"), 1);
+var import_node_path53 = __toESM(require("path"), 1);
 var TYPES = {
   ".css": "text/css; charset=utf-8",
   ".html": "text/html; charset=utf-8",
@@ -30208,9 +30397,9 @@ function resolveStaticPath(root, requestUrl) {
     return null;
   }
   if (!pathname.startsWith("/") || pathname.includes("\0")) return null;
-  const rootResolved = import_node_path52.default.resolve(root);
-  const candidate = import_node_path52.default.resolve(rootResolved, `.${pathname}`);
-  if (candidate !== rootResolved && !candidate.startsWith(rootResolved + import_node_path52.default.sep)) {
+  const rootResolved = import_node_path53.default.resolve(root);
+  const candidate = import_node_path53.default.resolve(rootResolved, `.${pathname}`);
+  if (candidate !== rootResolved && !candidate.startsWith(rootResolved + import_node_path53.default.sep)) {
     return null;
   }
   return candidate;
@@ -30224,7 +30413,7 @@ async function fileSize(file) {
   }
 }
 function sendFile(req, res, file, size) {
-  const ext = import_node_path52.default.extname(file).toLowerCase();
+  const ext = import_node_path53.default.extname(file).toLowerCase();
   res.writeHead(200, {
     "Content-Type": TYPES[ext] ?? "application/octet-stream",
     "Content-Length": size,
@@ -30234,7 +30423,7 @@ function sendFile(req, res, file, size) {
     res.end();
     return true;
   }
-  (0, import_node_fs55.createReadStream)(file).pipe(res);
+  (0, import_node_fs56.createReadStream)(file).pipe(res);
   return true;
 }
 async function tryServeStatic(req, res, root) {
@@ -30243,7 +30432,7 @@ async function tryServeStatic(req, res, root) {
   if (!candidate) return false;
   const direct = await fileSize(candidate);
   if (direct != null) return sendFile(req, res, candidate, direct);
-  const asIndex = import_node_path52.default.join(candidate, "index.html");
+  const asIndex = import_node_path53.default.join(candidate, "index.html");
   const indexSize = await fileSize(asIndex);
   if (indexSize != null) return sendFile(req, res, asIndex, indexSize);
   return false;
@@ -30593,6 +30782,7 @@ init_outbound_watch();
   applyForwardOccupancy,
   applyGithubGitAuthEnv,
   applyPromptCacheTtlEnv,
+  applySystemCaEnv,
   applyThreadIntoMain,
   applyTurnUsage,
   armSchedules,
@@ -30971,6 +31161,7 @@ init_outbound_watch();
   lookupSoccerTeam,
   mapAbleTimeTask,
   markPrReady,
+  materializeSystemCaBundle,
   maxConcurrentAgents,
   maybeCompactContext,
   mcpAllowTools,
@@ -31194,6 +31385,7 @@ init_outbound_watch();
   toolDetail,
   toolFilePath,
   totalTokens,
+  trustSystemCertificates,
   turnCostUsdFromCursorUsage,
   updateAbleTimeTask,
   updateAdvancedSettings,