@sideboard-ai/core 0.1.174 → 0.1.176

package/dist/index.cjs

@@ -7684,8 +7684,8 @@ function ensureGlobalCoordinatorCwd(opts) {
     "",
     "When creating threads, pass `repoPath` from `list_workspaces` (or the path you just registered).",
     orchId ? `Pass parentThreadId="${orchId}" (or omit it). Never invent another parentThreadId.` : "Pass `parentThreadId` for children (this chat's id from the turn reminder).",
-    "Omit `agent` / `model` on `create_thread` unless you have a reason to override Account defaults.",
-    "Never pass `agent=codex` when you yourself are Codex \u2014 nested Codex deadlocks on shared ~/.codex locks. Omit agent (Account default) or use cursor/claude.",
+    "Omit `agent` / `model` on `create_thread`. Sideboard applies Settings \u2192 Default agent, model & effort. Do not pass your own agent or `agent=cursor` \u2014 those are ignored.",
+    "Never pass `agent=codex` when you yourself are Codex \u2014 nested Codex can deadlock on shared ~/.codex locks. Omit agent; Sideboard applies Account defaults, and switches that nested-Codex case to Cursor only when a CURSOR_API_KEY is configured.",
     "Typical flow (Home board): list_board \u2192 create_thread (sourceType=ticket|pr|branch) \u2192 send_to_thread \u2192 wait_for_turn (loop while stillRunning) \u2192 ask_git create-draft \u2192 wait_for_turn. Merge only if the user explicitly asked (`ask_git` merge).",
     "Typical flow (branch / explicit source): list_workspaces \u2192 list_branches|list_prs|list_issues \u2192 create_thread \u2192 send_to_thread \u2192 wait_for_turn (loop while stillRunning) \u2192 ask_git create-draft.",
     "Typical flow (find work): list_workspaces \u2192 pick repo(s) matching account / project context \u2192 Sideboard list_issues / linear_* (tickets) or list_prs(queue=review) (reviews) \u2192 show the options. Never wait on Claude Linear MCP. Only create_thread + send_to_thread when they asked to start (e.g. \u201Cfind me work and start it\u201D) \u2014 then wait_for_turn (loop while stillRunning) \u2192 ask_git create-draft.",
@@ -7762,7 +7762,7 @@ var init_coordinator_prompt = __esm({
       "Workspaces:",
       "- add_workspace / remove_workspace \u2014 register or unregister a git repo",
       "Worktree threads (chats):",
-      "- create_thread \u2014 create a worktree + chat from branch | pr | ticket (appears on Home). Do not create a second worktree for a ticket, PR, or named branch that already has one \u2014 that call returns the live thread (alreadyStarted=true). Creating from the default branch still opens a new isolated worktree. Pass repoPath + parentThreadId; omit agent and model to use Sideboard Account defaults (Settings \u2192 Default agent, model & effort). If the repo has a setup script, Sideboard runs it in the background (does not block send_to_thread). If you are Codex, do not set agent=codex (nested Codex deadlocks)",
+      "- create_thread \u2014 create a worktree + chat from branch | pr | ticket (appears on Home). Do not create a second worktree for a ticket, PR, or named branch that already has one \u2014 that call returns the live thread (alreadyStarted=true). Creating from the default branch still opens a new isolated worktree. Pass repoPath + parentThreadId; omit agent and model so Sideboard applies Settings \u2192 Default agent, model & effort (never pass your own agent or agent=cursor). If the repo has a setup script, Sideboard runs it in the background (does not block send_to_thread). Nested Codex (you are Codex and the child would be Codex) can deadlock on ~/.codex locks \u2014 omit agent; Sideboard switches the child to Cursor when a CURSOR_API_KEY is set, otherwise keeps the Account default",
       "- start_board_card \u2014 same as create_thread for a ticket/PR/named branch (attaches issue text when resolvable). Then send_to_thread.",
       "- fork_worktree \u2014 fork a worktree chat into a NEW git worktree + chat (transcript attached); optional agent; leave model unset (Auto) unless you have a reason. Not for orchestration chats.",
       "- fork_chat \u2014 fork a worktree chat (same worktree tab) OR a Global orchestration chat (new orchestration tab); optional agent; leave model unset (Auto) unless you have a reason. Remote coordinators: use this to continue another orchestration chat on a different agent after session limits.",
@@ -7777,9 +7777,9 @@ var init_coordinator_prompt = __esm({
       "- get_diff \u2014 compact diff summary",
       "- get_pr_checks \u2014 snapshot of a worktree thread's PR checks (null = no PR). Use this to inspect status. If the user gave a goal, the worktree agent watches with `gh pr checks --watch` \u2014 do not poll for the human.",
       '- request_review \u2014 open a Review chat tab on a worktree thread (attaches .claude/skills/review/SKILL.md when present, else .context/review.md copied from .sideboard/review.md / stock; sends "Review changes in this workspace."); then wait_for_turn (loop while stillRunning) / get_turn_result on the returned id',
-      "- ask_git \u2014 commit & push, open a draft PR, resolve conflicts, or merge. When the worktree is clean, Sideboard pushes / opens the PR itself. When dirty, it queues the worktree agent \u2014 then wait_for_turn (loop while stillRunning). Prefer this over paraphrasing. If ask_git / get_thread lastError says the GraphQL/PR body is too long, the branch is already pushed \u2014 send_to_thread so the worktree agent runs `gh pr create --body-file` with a short description. Do not invent SSH or auth failures from that error. If the user gave a goal (Greptile 5/5, CI green), send_to_thread that goal so the worktree agent enters the watch-fix-push loop \u2014 do not tell the human to poll.",
+      "- ask_git \u2014 commit & push, open a draft PR, mark ready for review, resolve conflicts, or merge. When the worktree is clean, Sideboard pushes / opens the PR itself. When dirty, it queues the worktree agent \u2014 then wait_for_turn (loop while stillRunning). Prefer this over paraphrasing. If ask_git / get_thread lastError says the GraphQL/PR body is too long, the branch is already pushed \u2014 send_to_thread so the worktree agent runs `gh pr create --body-file` with a short description. Do not invent SSH or auth failures from that error. If the user gave a goal (Greptile 5/5, CI green), send_to_thread that goal so the worktree agent enters the watch-fix-push loop \u2014 do not tell the human to poll.",
       '- Merge (`ask_git` action=merge / send_to_thread "Merge PR.") only when the user explicitly asked to merge that PR. Do not merge because the work looks done, CI is green, or a typical flow includes it.',
-      '- Or send_to_thread with those exact phrases: "Commit and push.", "Commit, push, and open a draft PR.", "Merge the remote branch (main) into your branch and resolve conflicts. Then, commit and push your changes.", "Merge PR." (draft PRs: `gh pr create --draft -R <origin-owner/name>` using the workspace `github:` slug \u2014 never upstream). Never run git/gh from this orchestration cwd, and never merge the PR yourself.',
+      '- Or send_to_thread with those exact phrases: "Commit and push.", "Commit, push, and open a draft PR.", "Ready for review.", "Merge the remote branch (main) into your branch and resolve conflicts. Then, commit and push your changes.", "Merge PR." (draft PRs: `gh pr create --draft -R <origin-owner/name>` using the workspace `github:` slug \u2014 never upstream). Never run git/gh from this orchestration cwd, and never merge the PR yourself.',
       "Process guides:",
       "- Long child jobs (pack, test, deploy, anything that may run more than ~30s): workers always have `/long-running` (Sideboard product skill). Tell them to detach and wait; they may `stop_job` if it hangs or is doing the wrong thing; do not ask the human to poll.",
       "- Recurring multi-item / fan-out: if the child worktree has `.claude/skills/graph-engineering/SKILL.md`, tell the worker to follow it (`/graph-engineering`). Judge first; state on disk; grow the rulebook; do not patch three threads.",
@@ -8943,17 +8943,24 @@ var init_config = __esm({
 function setHttpFetchImpl(fetchImpl) {
   injected = fetchImpl;
 }
+function tlsIssuerHint(code, message) {
+  const text7 = `${code ?? ""} ${message}`;
+  return TLS_ISSUER_RE.test(text7) ? TLS_ISSUER_HINT : "";
+}
 function formatFetchError(err, url) {
   if (!(err instanceof Error)) return `${String(err)} (${url})`;
   const cause = err.cause;
   let detail = "";
+  let hint = tlsIssuerHint(void 0, err.message);
   if (cause instanceof Error) {
     const code = typeof cause.code === "string" ? cause.code : void 0;
     detail = code ? ` [${code}: ${cause.message}]` : ` [${cause.message}]`;
+    hint = tlsIssuerHint(code, `${err.message} ${cause.message}`) || hint;
   } else if (cause != null) {
     detail = ` [${String(cause)}]`;
+    hint = tlsIssuerHint(void 0, String(cause)) || hint;
   }
-  return `${err.message}${detail} (${url})`;
+  return `${err.message}${detail} (${url})${hint}`;
 }
 async function httpFetch(input, init) {
   const url = typeof input === "string" ? input : input.href;
@@ -8964,11 +8971,13 @@ async function httpFetch(input, init) {
     throw new Error(formatFetchError(err, url));
   }
 }
-var injected;
+var injected, TLS_ISSUER_RE, TLS_ISSUER_HINT;
 var init_fetch = __esm({
   "src/http/fetch.ts"() {
     "use strict";
     injected = null;
+    TLS_ISSUER_RE = /UNABLE_TO_GET_ISSUER_CERT|UNABLE_TO_VERIFY_LEAF_SIGNATURE|SELF_SIGNED_CERT_IN_CHAIN/i;
+    TLS_ISSUER_HINT = " \u2014 Node rejected the TLS certificate (corporate VPN/proxy CA). Desktop Linear can still work; reconnecting the API key will not fix this.";
   }
 });
 
@@ -10521,6 +10530,138 @@ var init_profile = __esm({
   }
 });
 
+// src/http/system-ca.ts
+function splitPemCertificates(pem) {
+  return pem.match(PEM_CERT_RE) ?? [];
+}
+function readExistingFile(path2) {
+  try {
+    return (0, import_node_fs26.existsSync)(path2) ? (0, import_node_fs26.readFileSync)(path2, "utf8") : "";
+  } catch {
+    return "";
+  }
+}
+function darwinKeychainPem(spawn2) {
+  const result = spawn2("/usr/bin/security", ["find-certificate", "-a", "-p"], {
+    encoding: "utf8",
+    maxBuffer: 32 * 1024 * 1024,
+    timeout: 15e3
+  });
+  if (result.status !== 0) return "";
+  return typeof result.stdout === "string" ? result.stdout : "";
+}
+function linuxSystemCaPem() {
+  for (const path2 of LINUX_CA_FILES) {
+    const pem = readExistingFile(path2);
+    if (splitPemCertificates(pem).length > 0) return pem;
+  }
+  return "";
+}
+function collectSystemCaPem(io = {}) {
+  const platform = io.platform ?? process.platform;
+  if (platform === "darwin") {
+    return darwinKeychainPem(io.spawn ?? import_node_child_process4.spawnSync);
+  }
+  if (platform === "linux") {
+    return linuxSystemCaPem();
+  }
+  return "";
+}
+function systemCaBundlePath(io = {}) {
+  return (0, import_node_path28.join)((io.appData ?? appDataDir)(), BUNDLE_NAME);
+}
+function bundleIsFresh(path2, now) {
+  try {
+    if (!(0, import_node_fs26.existsSync)(path2)) return false;
+    if (splitPemCertificates((0, import_node_fs26.readFileSync)(path2, "utf8")).length === 0) return false;
+    return now - (0, import_node_fs26.statSync)(path2).mtimeMs < BUNDLE_MAX_AGE_MS;
+  } catch {
+    return false;
+  }
+}
+function materializeSystemCaBundle(io = {}) {
+  const inherited = process.env.NODE_EXTRA_CA_CERTS?.trim();
+  if (inherited && splitPemCertificates(readExistingFile(inherited)).length > 0) {
+    return inherited;
+  }
+  const platform = io.platform ?? process.platform;
+  if (platform === "linux") {
+    for (const path2 of LINUX_CA_FILES) {
+      if (splitPemCertificates(readExistingFile(path2)).length > 0) return path2;
+    }
+  }
+  const dest = systemCaBundlePath(io);
+  const now = (io.now ?? Date.now)();
+  if (bundleIsFresh(dest, now)) return dest;
+  const pem = collectSystemCaPem(io);
+  if (splitPemCertificates(pem).length === 0) {
+    return (0, import_node_fs26.existsSync)(dest) && splitPemCertificates(readExistingFile(dest)).length > 0 ? dest : void 0;
+  }
+  try {
+    (0, import_node_fs26.mkdirSync)((0, import_node_path28.dirname)(dest), { recursive: true });
+    (0, import_node_fs26.writeFileSync)(dest, pem.endsWith("\n") ? pem : `${pem}
+`, { mode: 384 });
+    return dest;
+  } catch {
+    return void 0;
+  }
+}
+function applySystemCaEnv(env) {
+  if (!String(env[NODE_USE_SYSTEM_CA] ?? "").trim()) {
+    env[NODE_USE_SYSTEM_CA] = "1";
+  }
+  if (String(env[NODE_EXTRA_CA_CERTS] ?? "").trim()) return;
+  const inherited = process.env.NODE_EXTRA_CA_CERTS?.trim();
+  if (inherited) env[NODE_EXTRA_CA_CERTS] = inherited;
+}
+function extraCertsFromBundle() {
+  const path2 = process.env.NODE_EXTRA_CA_CERTS?.trim();
+  if (path2) return splitPemCertificates(readExistingFile(path2));
+  const dest = systemCaBundlePath();
+  return splitPemCertificates(readExistingFile(dest));
+}
+function trustSystemCertificates(io = {}) {
+  try {
+    const api = import_node_tls.default;
+    if (typeof api.getCACertificates !== "function" || typeof api.setDefaultCACertificates !== "function") {
+      return false;
+    }
+    const current = api.getCACertificates("default");
+    const system = api.getCACertificates("system");
+    let extra = extraCertsFromBundle();
+    if (system.length === 0 && extra.length === 0) {
+      extra = splitPemCertificates(collectSystemCaPem(io));
+    }
+    if (system.length === 0 && extra.length === 0) return false;
+    api.setDefaultCACertificates([...current, ...system, ...extra]);
+    return true;
+  } catch {
+    return false;
+  }
+}
+var import_node_child_process4, import_node_fs26, import_node_path28, import_node_tls, NODE_USE_SYSTEM_CA, NODE_EXTRA_CA_CERTS, BUNDLE_NAME, BUNDLE_MAX_AGE_MS, LINUX_CA_FILES, PEM_CERT_RE;
+var init_system_ca = __esm({
+  "src/http/system-ca.ts"() {
+    "use strict";
+    import_node_child_process4 = require("child_process");
+    import_node_fs26 = require("fs");
+    import_node_path28 = require("path");
+    import_node_tls = __toESM(require("tls"), 1);
+    init_paths();
+    NODE_USE_SYSTEM_CA = "NODE_USE_SYSTEM_CA";
+    NODE_EXTRA_CA_CERTS = "NODE_EXTRA_CA_CERTS";
+    BUNDLE_NAME = "system-ca.pem";
+    BUNDLE_MAX_AGE_MS = 24 * 60 * 60 * 1e3;
+    LINUX_CA_FILES = [
+      "/etc/ssl/certs/ca-certificates.crt",
+      "/etc/pki/tls/certs/ca-bundle.crt",
+      "/etc/ssl/ca-bundle.pem",
+      "/etc/ssl/cert.pem"
+    ];
+    PEM_CERT_RE = /-----BEGIN CERTIFICATE-----[\s\S]*?-----END CERTIFICATE-----/g;
+  }
+});
+
 // src/agents/packaged-runtime.ts
 function electronResourcesPath() {
   const resources = process.resourcesPath;
@@ -10530,43 +10671,43 @@ function electronResourcesPath() {
 function packagedCursorRuntimeDir() {
   const resources = electronResourcesPath();
   if (!resources) return null;
-  const dir = (0, import_node_path28.join)(resources, "cursor-runtime");
-  if (!(0, import_node_fs26.existsSync)((0, import_node_path28.join)(dir, "core-dist", "agents", "cursor-runner.js"))) return null;
+  const dir = (0, import_node_path29.join)(resources, "cursor-runtime");
+  if (!(0, import_node_fs27.existsSync)((0, import_node_path29.join)(dir, "core-dist", "agents", "cursor-runner.js"))) return null;
   return dir;
 }
 function packagedCursorRunnerPath() {
   const dir = packagedCursorRuntimeDir();
-  return dir ? (0, import_node_path28.join)(dir, "core-dist", "agents", "cursor-runner.js") : null;
+  return dir ? (0, import_node_path29.join)(dir, "core-dist", "agents", "cursor-runner.js") : null;
 }
 function packagedMcpDir() {
   const resources = electronResourcesPath();
   if (!resources) return null;
-  const dir = (0, import_node_path28.join)(resources, "sideboard-mcp");
-  if (!(0, import_node_fs26.existsSync)((0, import_node_path28.join)(dir, "core-dist", "mcp", "run-stdio.js"))) return null;
+  const dir = (0, import_node_path29.join)(resources, "sideboard-mcp");
+  if (!(0, import_node_fs27.existsSync)((0, import_node_path29.join)(dir, "core-dist", "mcp", "run-stdio.js"))) return null;
   return dir;
 }
 function packagedMcpStdioPath() {
   const dir = packagedMcpDir();
-  return dir ? (0, import_node_path28.join)(dir, "core-dist", "mcp", "run-stdio.js") : null;
+  return dir ? (0, import_node_path29.join)(dir, "core-dist", "mcp", "run-stdio.js") : null;
 }
 function packagedBundledNodePath() {
   const resources = electronResourcesPath();
   if (!resources) return null;
-  const bin = (0, import_node_path28.join)(resources, "node", "bin", "node");
-  if (!(0, import_node_fs26.existsSync)(bin)) return null;
+  const bin = (0, import_node_path29.join)(resources, "node", "bin", "node");
+  if (!(0, import_node_fs27.existsSync)(bin)) return null;
   return bin;
 }
 function packagedCursorRipgrepCandidate(platformPkg, binName) {
   const dir = packagedCursorRuntimeDir();
   if (!dir) return null;
-  return (0, import_node_path28.join)(dir, "node_modules", platformPkg, "bin", binName);
+  return (0, import_node_path29.join)(dir, "node_modules", platformPkg, "bin", binName);
 }
-var import_node_fs26, import_node_path28;
+var import_node_fs27, import_node_path29;
 var init_packaged_runtime = __esm({
   "src/agents/packaged-runtime.ts"() {
     "use strict";
-    import_node_fs26 = require("fs");
-    import_node_path28 = require("path");
+    import_node_fs27 = require("fs");
+    import_node_path29 = require("path");
   }
 });
 
@@ -10586,6 +10727,7 @@ function applyAgentRunnerHeapEnv(env) {
     env.NODE_OPTIONS,
     AGENT_RUNNER_MAX_OLD_SPACE_MB
   );
+  applySystemCaEnv(env);
 }
 function envWithAgentHeap(env) {
   const next = { ...env };
@@ -10600,7 +10742,7 @@ function unpackedAsarPath(filePath) {
   if (!isAsarPath(filePath)) return null;
   const unpacked = filePath.replace(/\.asar(?=[/\\])/, ".asar.unpacked");
   if (unpacked === filePath) return null;
-  return (0, import_node_fs27.existsSync)(unpacked) ? unpacked : null;
+  return (0, import_node_fs28.existsSync)(unpacked) ? unpacked : null;
 }
 function nodeReadableScriptPath(scriptPath) {
   return unpackedAsarPath(scriptPath) ?? scriptPath;
@@ -10640,37 +10782,37 @@ function pickPreferredNode(candidates) {
   return best;
 }
 function versionDirNodeBins(root, toBin) {
-  if (!(0, import_node_fs27.existsSync)(root)) return [];
+  if (!(0, import_node_fs28.existsSync)(root)) return [];
   try {
-    return (0, import_node_fs27.readdirSync)(root).map(toBin);
+    return (0, import_node_fs28.readdirSync)(root).map(toBin);
   } catch {
     return [];
   }
 }
 function defaultNodeBinCandidates(home = (0, import_node_os8.homedir)()) {
   const kegs = ["/opt/homebrew", "/usr/local"].flatMap(
-    (prefix) => PREFERRED_LTS_MAJORS.map((major) => (0, import_node_path29.join)(prefix, "opt", `node@${major}`, "bin", "node"))
+    (prefix) => PREFERRED_LTS_MAJORS.map((major) => (0, import_node_path30.join)(prefix, "opt", `node@${major}`, "bin", "node"))
   );
   return [
     ...kegs,
     "/opt/homebrew/bin/node",
     "/usr/local/bin/node",
-    (0, import_node_path29.join)(home, ".local/share/fnm/aliases/default/bin/node"),
-    (0, import_node_path29.join)(home, ".nvm/current/bin/node"),
-    (0, import_node_path29.join)(home, ".volta/bin/node"),
-    (0, import_node_path29.join)(home, ".asdf/shims/node"),
-    (0, import_node_path29.join)(home, ".local/share/mise/shims/node"),
+    (0, import_node_path30.join)(home, ".local/share/fnm/aliases/default/bin/node"),
+    (0, import_node_path30.join)(home, ".nvm/current/bin/node"),
+    (0, import_node_path30.join)(home, ".volta/bin/node"),
+    (0, import_node_path30.join)(home, ".asdf/shims/node"),
+    (0, import_node_path30.join)(home, ".local/share/mise/shims/node"),
     ...versionDirNodeBins(
-      (0, import_node_path29.join)(home, ".nvm", "versions", "node"),
-      (name) => (0, import_node_path29.join)(home, ".nvm", "versions", "node", name, "bin", "node")
+      (0, import_node_path30.join)(home, ".nvm", "versions", "node"),
+      (name) => (0, import_node_path30.join)(home, ".nvm", "versions", "node", name, "bin", "node")
     ),
     ...versionDirNodeBins(
-      (0, import_node_path29.join)(home, ".local/share/fnm", "node-versions"),
-      (name) => (0, import_node_path29.join)(home, ".local/share/fnm", "node-versions", name, "installation", "bin", "node")
+      (0, import_node_path30.join)(home, ".local/share/fnm", "node-versions"),
+      (name) => (0, import_node_path30.join)(home, ".local/share/fnm", "node-versions", name, "installation", "bin", "node")
     ),
     ...versionDirNodeBins(
-      (0, import_node_path29.join)(home, ".volta", "tools", "image", "node"),
-      (name) => (0, import_node_path29.join)(home, ".volta", "tools", "image", "node", name, "bin", "node")
+      (0, import_node_path30.join)(home, ".volta", "tools", "image", "node"),
+      (name) => (0, import_node_path30.join)(home, ".volta", "tools", "image", "node", name, "bin", "node")
     )
   ];
 }
@@ -10679,10 +10821,10 @@ function uniqueExistingNodeBins(paths) {
   const out = [];
   for (const raw of paths) {
     const p = raw.trim();
-    if (!p || !(0, import_node_fs27.existsSync)(p) || isElectronLikeCommand(p)) continue;
+    if (!p || !(0, import_node_fs28.existsSync)(p) || isElectronLikeCommand(p)) continue;
     let key = p;
     try {
-      key = (0, import_node_fs27.realpathSync)(p);
+      key = (0, import_node_fs28.realpathSync)(p);
     } catch {
       continue;
     }
@@ -10762,14 +10904,15 @@ async function resolveNodeLaunch(scriptPath) {
     env: { ELECTRON_RUN_AS_NODE: "1" }
   };
 }
-var import_node_fs27, import_node_os8, import_node_path29, AGENT_RUNNER_MAX_OLD_SPACE_MB, MAX_OLD_SPACE_FLAG, PREFERRED_LTS_MAJORS;
+var import_node_fs28, import_node_os8, import_node_path30, AGENT_RUNNER_MAX_OLD_SPACE_MB, MAX_OLD_SPACE_FLAG, PREFERRED_LTS_MAJORS;
 var init_node_launch = __esm({
   "src/agents/node-launch.ts"() {
     "use strict";
-    import_node_fs27 = require("fs");
+    import_node_fs28 = require("fs");
     import_node_os8 = require("os");
-    import_node_path29 = require("path");
+    import_node_path30 = require("path");
     init_nested_electron_env();
+    init_system_ca();
     init_run();
     init_packaged_runtime();
     AGENT_RUNNER_MAX_OLD_SPACE_MB = 8192;
@@ -10869,37 +11012,37 @@ function corePackageDir() {
   try {
     const url = import_meta.url;
     if (typeof url === "string" && url.length > 0) {
-      return (0, import_node_path30.dirname)((0, import_node_url.fileURLToPath)(url));
+      return (0, import_node_path31.dirname)((0, import_node_url.fileURLToPath)(url));
     }
   } catch {
   }
   try {
-    const req = (0, import_node_module.createRequire)((0, import_node_path30.join)(process.cwd(), "package.json"));
-    return (0, import_node_path30.dirname)(req.resolve("@sideboard-ai/core"));
+    const req = (0, import_node_module.createRequire)((0, import_node_path31.join)(process.cwd(), "package.json"));
+    return (0, import_node_path31.dirname)(req.resolve("@sideboard-ai/core"));
   } catch {
     return process.cwd();
   }
 }
 function findSideboardMcpJsEntry() {
   const override = process.env.SIDEBOARD_MCP_ENTRY?.trim() || process.env.SIDEBOARD_CLI?.trim();
-  if (override && (0, import_node_fs28.existsSync)(override)) return override;
+  if (override && (0, import_node_fs29.existsSync)(override)) return override;
   const packaged = packagedMcpStdioPath();
   if (packaged) return packaged;
   let dir = corePackageDir();
   for (let i = 0; i < 10; i++) {
     const candidates = [
-      (0, import_node_path30.join)(dir, "mcp/run-stdio.js"),
-      (0, import_node_path30.join)(dir, "mcp/run-stdio.cjs"),
-      (0, import_node_path30.join)(dir, "dist/mcp/run-stdio.js"),
-      (0, import_node_path30.join)(dir, "dist/mcp/run-stdio.cjs"),
-      (0, import_node_path30.join)(dir, "packages/core/dist/mcp/run-stdio.js"),
-      (0, import_node_path30.join)(dir, "packages/cli/dist/index.js"),
-      (0, import_node_path30.join)(dir, "cli/dist/index.js")
+      (0, import_node_path31.join)(dir, "mcp/run-stdio.js"),
+      (0, import_node_path31.join)(dir, "mcp/run-stdio.cjs"),
+      (0, import_node_path31.join)(dir, "dist/mcp/run-stdio.js"),
+      (0, import_node_path31.join)(dir, "dist/mcp/run-stdio.cjs"),
+      (0, import_node_path31.join)(dir, "packages/core/dist/mcp/run-stdio.js"),
+      (0, import_node_path31.join)(dir, "packages/cli/dist/index.js"),
+      (0, import_node_path31.join)(dir, "cli/dist/index.js")
     ];
     for (const p of candidates) {
-      if ((0, import_node_fs28.existsSync)(p) && !isAsarPath(p)) return p;
+      if ((0, import_node_fs29.existsSync)(p) && !isAsarPath(p)) return p;
     }
-    const parent = (0, import_node_path30.dirname)(dir);
+    const parent = (0, import_node_path31.dirname)(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -11046,22 +11189,22 @@ function writeMcpServersConfig(servers) {
       ...env ? { env } : {}
     };
   }
-  const dir = (0, import_node_fs28.mkdtempSync)((0, import_node_path30.join)((0, import_node_os9.tmpdir)(), "sideboard-mcp-"));
-  const cfgPath = (0, import_node_path30.join)(dir, "mcp.json");
-  (0, import_node_fs28.writeFileSync)(cfgPath, JSON.stringify({ mcpServers }, null, 2));
+  const dir = (0, import_node_fs29.mkdtempSync)((0, import_node_path31.join)((0, import_node_os9.tmpdir)(), "sideboard-mcp-"));
+  const cfgPath = (0, import_node_path31.join)(dir, "mcp.json");
+  (0, import_node_fs29.writeFileSync)(cfgPath, JSON.stringify({ mcpServers }, null, 2));
   return cfgPath;
 }
 async function writeInjectedMcpConfig(opts) {
   return writeMcpServersConfig(await buildInjectedMcpServers(opts));
 }
-var import_node_fs28, import_node_module, import_node_os9, import_node_path30, import_node_url, import_meta, SIDEBOARD_MCP_ALLOWED_TOOLS, SIDEBOARD_ARTIFACT_MCP_ALLOWED_TOOLS, SIDEBOARD_GITHUB_MCP_ALLOWED_TOOLS, SIDEBOARD_LINEAR_MCP_ALLOWED_TOOLS, SIDEBOARD_ABLETIME_MCP_ALLOWED_TOOLS, BRIGHTSY_MCP_ALLOWED_TOOLS, brightsyMcpCommandCache, BRIGHTSY_WORD;
+var import_node_fs29, import_node_module, import_node_os9, import_node_path31, import_node_url, import_meta, SIDEBOARD_MCP_ALLOWED_TOOLS, SIDEBOARD_ARTIFACT_MCP_ALLOWED_TOOLS, SIDEBOARD_GITHUB_MCP_ALLOWED_TOOLS, SIDEBOARD_LINEAR_MCP_ALLOWED_TOOLS, SIDEBOARD_ABLETIME_MCP_ALLOWED_TOOLS, BRIGHTSY_MCP_ALLOWED_TOOLS, brightsyMcpCommandCache, BRIGHTSY_WORD;
 var init_injected_mcp = __esm({
   "src/agents/injected-mcp.ts"() {
     "use strict";
-    import_node_fs28 = require("fs");
+    import_node_fs29 = require("fs");
     import_node_module = require("module");
     import_node_os9 = require("os");
-    import_node_path30 = require("path");
+    import_node_path31 = require("path");
     import_node_url = require("url");
     init_run();
     init_config();
@@ -11448,11 +11591,11 @@ function parseIssuesJson(raw) {
   }
   return [];
 }
-var import_node_fs29, BASE_ALLOWED_TOOLS, CLAUDE_PRINT_BG_WAIT_CEILING_MS, CLAUDE_CHROME_ALLOWED_TOOLS, CLAUDE_PROMPT_ARG_MAX, mcpListCache, claudeAdapter;
+var import_node_fs30, BASE_ALLOWED_TOOLS, CLAUDE_PRINT_BG_WAIT_CEILING_MS, CLAUDE_CHROME_ALLOWED_TOOLS, CLAUDE_PROMPT_ARG_MAX, mcpListCache, claudeAdapter;
 var init_claude = __esm({
   "src/agents/claude.ts"() {
     "use strict";
-    import_node_fs29 = require("fs");
+    import_node_fs30 = require("fs");
     init_run();
     init_app_settings();
     init_claude_mcp();
@@ -11492,7 +11635,7 @@ var init_claude = __esm({
       async detect() {
         const claude = resolveClaudeExecutable();
         if (claude !== "claude") {
-          if (!(0, import_node_fs29.existsSync)(claude)) {
+          if (!(0, import_node_fs30.existsSync)(claude)) {
             return {
               agent: "claude",
               installed: false,
@@ -11752,10 +11895,10 @@ var init_claude = __esm({
 
 // src/agents/user-mcp-config.ts
 function userCursorMcpConfigPath() {
-  return (0, import_node_path31.join)((0, import_node_os10.homedir)(), ".cursor", "mcp.json");
+  return (0, import_node_path32.join)((0, import_node_os10.homedir)(), ".cursor", "mcp.json");
 }
 function userClaudeMcpConfigPath() {
-  return (0, import_node_path31.join)((0, import_node_os10.homedir)(), ".claude.json");
+  return (0, import_node_path32.join)((0, import_node_os10.homedir)(), ".claude.json");
 }
 function asObject(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return {};
@@ -11782,16 +11925,16 @@ function mergeSideboardIntoMcpServersJson(existing, sideboard) {
 }
 function writeMergedMcpServersJson(configPath, sideboard) {
   let existing = {};
-  if ((0, import_node_fs30.existsSync)(configPath)) {
+  if ((0, import_node_fs31.existsSync)(configPath)) {
     try {
-      existing = JSON.parse((0, import_node_fs30.readFileSync)(configPath, "utf8"));
+      existing = JSON.parse((0, import_node_fs31.readFileSync)(configPath, "utf8"));
     } catch {
       existing = {};
     }
   }
   const next = mergeSideboardIntoMcpServersJson(existing, sideboard);
-  (0, import_node_fs30.mkdirSync)((0, import_node_path31.dirname)(configPath), { recursive: true });
-  (0, import_node_fs30.writeFileSync)(configPath, `${JSON.stringify(next, null, 2)}
+  (0, import_node_fs31.mkdirSync)((0, import_node_path32.dirname)(configPath), { recursive: true });
+  (0, import_node_fs31.writeFileSync)(configPath, `${JSON.stringify(next, null, 2)}
 `);
 }
 function launchFromResolved(server) {
@@ -11809,19 +11952,19 @@ async function registerPackagedUserMcpClients() {
   const cursor = userCursorMcpConfigPath();
   writeMergedMcpServersJson(cursor, launch);
   const claude = userClaudeMcpConfigPath();
-  if ((0, import_node_fs30.existsSync)(claude)) {
+  if ((0, import_node_fs31.existsSync)(claude)) {
     writeMergedMcpServersJson(claude, launch);
     return { cursor, claude };
   }
   return { cursor };
 }
-var import_node_fs30, import_node_os10, import_node_path31;
+var import_node_fs31, import_node_os10, import_node_path32;
 var init_user_mcp_config = __esm({
   "src/agents/user-mcp-config.ts"() {
     "use strict";
-    import_node_fs30 = require("fs");
+    import_node_fs31 = require("fs");
     import_node_os10 = require("os");
-    import_node_path31 = require("path");
+    import_node_path32 = require("path");
     init_paths();
     init_injected_mcp();
   }
@@ -11849,25 +11992,25 @@ function listMcpNamesFromCodexToml(text7) {
 }
 function readJsonObject(path2) {
   try {
-    return JSON.parse((0, import_node_fs31.readFileSync)(path2, "utf8"));
+    return JSON.parse((0, import_node_fs32.readFileSync)(path2, "utf8"));
   } catch {
     return {};
   }
 }
 function readText(path2) {
   try {
-    return (0, import_node_fs31.readFileSync)(path2, "utf8");
+    return (0, import_node_fs32.readFileSync)(path2, "utf8");
   } catch {
     return "";
   }
 }
 function userCodexConfigPaths(home = (0, import_node_os11.homedir)()) {
-  return [(0, import_node_path32.join)(home, ".codex", "config.toml"), (0, import_node_path32.join)(home, ".config", "codex", "config.toml")];
+  return [(0, import_node_path33.join)(home, ".codex", "config.toml"), (0, import_node_path33.join)(home, ".config", "codex", "config.toml")];
 }
 function userOpencodeConfigPaths(home = (0, import_node_os11.homedir)()) {
   return [
-    (0, import_node_path32.join)(home, ".config", "opencode", "opencode.json"),
-    (0, import_node_path32.join)(home, ".config", "opencode", "opencode.jsonc")
+    (0, import_node_path33.join)(home, ".config", "opencode", "opencode.json"),
+    (0, import_node_path33.join)(home, ".config", "opencode", "opencode.jsonc")
   ];
 }
 function userMcpNamesToDisable(opts) {
@@ -11889,7 +12032,7 @@ function userMcpNamesToDisable(opts) {
 function listUserCodexMcpNames(home = (0, import_node_os11.homedir)()) {
   const names = [];
   for (const path2 of userCodexConfigPaths(home)) {
-    if (!(0, import_node_fs31.existsSync)(path2)) continue;
+    if (!(0, import_node_fs32.existsSync)(path2)) continue;
     names.push(...listMcpNamesFromCodexToml(readText(path2)));
   }
   return names;
@@ -11897,7 +12040,7 @@ function listUserCodexMcpNames(home = (0, import_node_os11.homedir)()) {
 function listUserOpencodeMcpNames(home = (0, import_node_os11.homedir)()) {
   const names = [];
   for (const path2 of userOpencodeConfigPaths(home)) {
-    if (!(0, import_node_fs31.existsSync)(path2)) continue;
+    if (!(0, import_node_fs32.existsSync)(path2)) continue;
     names.push(...listMcpNamesFromJsonMap(readJsonObject(path2), "mcp"));
   }
   return names;
@@ -11910,13 +12053,13 @@ function toCodexDisableUserMcpArgs(names) {
   }
   return args;
 }
-var import_node_fs31, import_node_os11, import_node_path32, import_smol_toml2;
+var import_node_fs32, import_node_os11, import_node_path33, import_smol_toml2;
 var init_orch_mcp_isolation = __esm({
   "src/agents/orch-mcp-isolation.ts"() {
     "use strict";
-    import_node_fs31 = require("fs");
+    import_node_fs32 = require("fs");
     import_node_os11 = require("os");
-    import_node_path32 = require("path");
+    import_node_path33 = require("path");
     import_smol_toml2 = require("smol-toml");
     init_user_mcp_config();
   }
@@ -11932,7 +12075,7 @@ async function listCodexModels() {
   if (codex === "codex") {
     const which = await run("which", ["codex"], { reject: false });
     if (which.exitCode !== 0) return FALLBACK_CODEX_MODELS;
-  } else if (!(0, import_node_fs32.existsSync)(codex)) {
+  } else if (!(0, import_node_fs33.existsSync)(codex)) {
     return FALLBACK_CODEX_MODELS;
   }
   const listed = await run(codex, ["debug", "models"], { reject: false });
@@ -11967,12 +12110,12 @@ function usageFromCodex(usage) {
 }
 function codexConfigHasNetworkAccess() {
   const candidates = [
-    (0, import_node_path33.join)((0, import_node_os12.homedir)(), ".codex", "config.toml"),
-    (0, import_node_path33.join)((0, import_node_os12.homedir)(), ".config", "codex", "config.toml")
+    (0, import_node_path34.join)((0, import_node_os12.homedir)(), ".codex", "config.toml"),
+    (0, import_node_path34.join)((0, import_node_os12.homedir)(), ".config", "codex", "config.toml")
   ];
   for (const path2 of candidates) {
-    if (!(0, import_node_fs32.existsSync)(path2)) continue;
-    const text7 = (0, import_node_fs32.readFileSync)(path2, "utf8");
+    if (!(0, import_node_fs33.existsSync)(path2)) continue;
+    const text7 = (0, import_node_fs33.readFileSync)(path2, "utf8");
     if (/network_access\s*=\s*true/.test(text7)) return true;
   }
   return false;
@@ -12004,21 +12147,21 @@ function asRecord2(value) {
   return void 0;
 }
 function codexLooksAuthenticated() {
-  const authPath = (0, import_node_path33.join)((0, import_node_os12.homedir)(), ".codex", "auth.json");
-  if (!(0, import_node_fs32.existsSync)(authPath)) return false;
+  const authPath = (0, import_node_path34.join)((0, import_node_os12.homedir)(), ".codex", "auth.json");
+  if (!(0, import_node_fs33.existsSync)(authPath)) return false;
   try {
-    return (0, import_node_fs32.statSync)(authPath).size > 2;
+    return (0, import_node_fs33.statSync)(authPath).size > 2;
   } catch {
     return false;
   }
 }
-var import_node_fs32, import_node_os12, import_node_path33, CODEX_PROMPT_ARG_MAX, FALLBACK_CODEX_MODELS, cachedCodexModels, CODEX_MODEL_CACHE_MS, codexAdapter;
+var import_node_fs33, import_node_os12, import_node_path34, CODEX_PROMPT_ARG_MAX, FALLBACK_CODEX_MODELS, cachedCodexModels, CODEX_MODEL_CACHE_MS, codexAdapter;
 var init_codex = __esm({
   "src/agents/codex.ts"() {
     "use strict";
-    import_node_fs32 = require("fs");
+    import_node_fs33 = require("fs");
     import_node_os12 = require("os");
-    import_node_path33 = require("path");
+    import_node_path34 = require("path");
     init_run();
     init_app_settings();
     init_global_workspace();
@@ -12044,7 +12187,7 @@ var init_codex = __esm({
       async detect() {
         const codex = resolveAgentExecutable("codex");
         if (codex !== "codex") {
-          if (!(0, import_node_fs32.existsSync)(codex)) {
+          if (!(0, import_node_fs33.existsSync)(codex)) {
             return {
               agent: "codex",
               installed: false,
@@ -12539,21 +12682,21 @@ function platformRipgrepPackage() {
 }
 function usableRipgrepPath(candidate) {
   const raw = candidate?.trim();
-  if (!raw || !(0, import_node_path34.isAbsolute)(raw)) return null;
+  if (!raw || !(0, import_node_path35.isAbsolute)(raw)) return null;
   const readable = nodeReadableScriptPath(raw);
-  if (!(0, import_node_fs33.existsSync)(readable) || isAsarPath(readable)) return null;
+  if (!(0, import_node_fs34.existsSync)(readable) || isAsarPath(readable)) return null;
   return readable;
 }
 function walkForBundledRipgrep(startFile) {
   if (!startFile) return null;
   const pkg = platformRipgrepPackage();
   const name = rgBinaryName();
-  let dir = (0, import_node_path34.dirname)((0, import_node_path34.resolve)(startFile));
-  const root = (0, import_node_path34.parse)(dir).root;
+  let dir = (0, import_node_path35.dirname)((0, import_node_path35.resolve)(startFile));
+  const root = (0, import_node_path35.parse)(dir).root;
   while (dir !== root) {
-    const hit = usableRipgrepPath((0, import_node_path34.join)(dir, "node_modules", pkg, "bin", name));
+    const hit = usableRipgrepPath((0, import_node_path35.join)(dir, "node_modules", pkg, "bin", name));
     if (hit) return hit;
-    const next = (0, import_node_path34.dirname)(dir);
+    const next = (0, import_node_path35.dirname)(dir);
     if (next === dir) break;
     dir = next;
   }
@@ -12563,7 +12706,7 @@ function requireResolveBundledRipgrep(fromFile) {
   try {
     const req = (0, import_node_module2.createRequire)(fromFile);
     const pkgJson = req.resolve(`${platformRipgrepPackage()}/package.json`);
-    return usableRipgrepPath((0, import_node_path34.join)((0, import_node_path34.dirname)(pkgJson), "bin", rgBinaryName()));
+    return usableRipgrepPath((0, import_node_path35.join)((0, import_node_path35.dirname)(pkgJson), "bin", rgBinaryName()));
   } catch {
     return null;
   }
@@ -12585,13 +12728,13 @@ function cursorRipgrepEnv(opts) {
   const path2 = resolveCursorRipgrepPath(opts);
   return path2 ? { [RIPGREP_ENV]: path2 } : {};
 }
-var import_node_fs33, import_node_module2, import_node_path34, RIPGREP_ENV;
+var import_node_fs34, import_node_module2, import_node_path35, RIPGREP_ENV;
 var init_cursor_ripgrep = __esm({
   "src/agents/cursor-ripgrep.ts"() {
     "use strict";
-    import_node_fs33 = require("fs");
+    import_node_fs34 = require("fs");
     import_node_module2 = require("module");
-    import_node_path34 = require("path");
+    import_node_path35 = require("path");
     init_node_launch();
     init_packaged_runtime();
     RIPGREP_ENV = "CURSOR_RIPGREP_PATH";
@@ -12604,6 +12747,9 @@ function resolveCursorApiKey() {
   if (fromEnv) return fromEnv;
   return (loadAppSettings().environment.CURSOR_API_KEY || "").trim();
 }
+function isCursorApiKeyConfigured() {
+  return Boolean(resolveCursorApiKey());
+}
 function isCursorAutoModel(model) {
   const id = (model ?? "").trim().toLowerCase();
   return !id || id === "default" || id === "auto";
@@ -12637,11 +12783,11 @@ function entryDir() {
   const cjsDir = typeof __dirname !== "undefined" ? __dirname : "";
   if (cjsDir) return cjsDir;
   try {
-    return (0, import_node_path35.dirname)((0, import_node_url2.fileURLToPath)(import_meta2.url));
+    return (0, import_node_path36.dirname)((0, import_node_url2.fileURLToPath)(import_meta2.url));
   } catch {
     try {
       const req = (0, import_node_module3.createRequire)(process.cwd() + "/");
-      return (0, import_node_path35.dirname)(req.resolve("@sideboard-ai/core"));
+      return (0, import_node_path36.dirname)(req.resolve("@sideboard-ai/core"));
     } catch {
       return process.cwd();
     }
@@ -12652,27 +12798,27 @@ function cursorRunnerPath() {
   if (packaged) return packaged;
   const root = entryDir();
   const candidates = [
-    (0, import_node_path35.join)(root, "agents", "cursor-runner.js"),
-    (0, import_node_path35.join)(root, "agents", "cursor-runner.cjs"),
+    (0, import_node_path36.join)(root, "agents", "cursor-runner.js"),
+    (0, import_node_path36.join)(root, "agents", "cursor-runner.cjs"),
     // If somehow resolved from package root instead of dist/
-    (0, import_node_path35.join)(root, "dist", "agents", "cursor-runner.js"),
-    (0, import_node_path35.join)(root, "dist", "agents", "cursor-runner.cjs"),
+    (0, import_node_path36.join)(root, "dist", "agents", "cursor-runner.js"),
+    (0, import_node_path36.join)(root, "dist", "agents", "cursor-runner.cjs"),
     // Source tree (dev): packages/core/src/agents/cursor-runner.ts
-    (0, import_node_path35.join)(root, "cursor-runner.ts"),
-    (0, import_node_path35.join)(root, "src", "agents", "cursor-runner.ts")
+    (0, import_node_path36.join)(root, "cursor-runner.ts"),
+    (0, import_node_path36.join)(root, "src", "agents", "cursor-runner.ts")
   ];
   for (const candidate of candidates) {
-    if ((0, import_node_fs34.existsSync)(candidate)) return candidate;
+    if ((0, import_node_fs35.existsSync)(candidate)) return candidate;
   }
   return candidates[0];
 }
-var import_node_fs34, import_node_module3, import_node_path35, import_node_url2, import_sdk, import_meta2, FALLBACK_CURSOR_MODELS, cachedModels, MODEL_CACHE_MS, cursorAdapter;
+var import_node_fs35, import_node_module3, import_node_path36, import_node_url2, import_sdk, import_meta2, FALLBACK_CURSOR_MODELS, cachedModels, MODEL_CACHE_MS, cursorAdapter;
 var init_cursor = __esm({
   "src/agents/cursor.ts"() {
     "use strict";
-    import_node_fs34 = require("fs");
+    import_node_fs35 = require("fs");
     import_node_module3 = require("module");
-    import_node_path35 = require("path");
+    import_node_path36 = require("path");
     import_node_url2 = require("url");
     import_sdk = require("@cursor/sdk");
     init_run();
@@ -12824,7 +12970,7 @@ async function listOpencodeModels() {
   if (opencode === "opencode") {
     const which = await run("which", ["opencode"], { reject: false });
     if (which.exitCode !== 0) return FALLBACK_OPENCODE_MODELS;
-  } else if (!(0, import_node_fs35.existsSync)(opencode)) {
+  } else if (!(0, import_node_fs36.existsSync)(opencode)) {
     return FALLBACK_OPENCODE_MODELS;
   }
   const listed = await run(opencode, ["models"], { reject: false });
@@ -12854,11 +13000,11 @@ function usageFromOpencode(tokens) {
     cacheWriteTokens: tokens.cache?.write ? Number(tokens.cache.write) : void 0
   };
 }
-var import_node_fs35, FALLBACK_OPENCODE_MODELS, cachedOpencodeModels, OPENCODE_MODEL_CACHE_MS, opencodeAdapter;
+var import_node_fs36, FALLBACK_OPENCODE_MODELS, cachedOpencodeModels, OPENCODE_MODEL_CACHE_MS, opencodeAdapter;
 var init_opencode = __esm({
   "src/agents/opencode.ts"() {
     "use strict";
-    import_node_fs35 = require("fs");
+    import_node_fs36 = require("fs");
     init_run();
     init_app_settings();
     init_global_workspace();
@@ -12886,7 +13032,7 @@ var init_opencode = __esm({
       async detect() {
         const opencode = resolveAgentExecutable("opencode");
         if (opencode !== "opencode") {
-          if (!(0, import_node_fs35.existsSync)(opencode)) {
+          if (!(0, import_node_fs36.existsSync)(opencode)) {
             return {
               agent: "opencode",
               installed: false,
@@ -13627,6 +13773,7 @@ __export(agents_exports, {
   installAgent: () => installAgent,
   installNpmGlobalPackage: () => installNpmGlobalPackage,
   isConductorBundledCli: () => isConductorBundledCli,
+  isCursorApiKeyConfigured: () => isCursorApiKeyConfigured,
   isCursorAutoModel: () => isCursorAutoModel,
   isOrchestratorCapableAgent: () => isOrchestratorCapableAgent,
   isSessionQuotaLimit: () => isSessionQuotaLimit,
@@ -13695,15 +13842,15 @@ var init_agents = __esm({
 
 // src/hook/worktree-pkg-cache.ts
 function worktreePkgCacheRoot(worktreePath) {
-  return (0, import_node_path36.join)(worktreePath, WORKTREE_PKG_CACHE_REL);
+  return (0, import_node_path37.join)(worktreePath, WORKTREE_PKG_CACHE_REL);
 }
 function worktreePkgCacheEnv(worktreePath) {
   const root = worktreePkgCacheRoot(worktreePath);
-  const store = (0, import_node_path36.join)(root, "pnpm-store");
-  const pnpmCache = (0, import_node_path36.join)(root, "pnpm");
-  const npmCache = (0, import_node_path36.join)(root, "npm");
-  const nodeGyp = (0, import_node_path36.join)(root, "node-gyp");
-  const electron = (0, import_node_path36.join)(root, "electron");
+  const store = (0, import_node_path37.join)(root, "pnpm-store");
+  const pnpmCache = (0, import_node_path37.join)(root, "pnpm");
+  const npmCache = (0, import_node_path37.join)(root, "npm");
+  const nodeGyp = (0, import_node_path37.join)(root, "node-gyp");
+  const electron = (0, import_node_path37.join)(root, "electron");
   return {
     npm_config_store_dir: store,
     PNPM_STORE_DIR: store,
@@ -13725,8 +13872,8 @@ function fillGroup(env, keys, values) {
   }
 }
 function ensureWorktreePkgCacheDirs(worktreePath) {
-  if (!(0, import_node_fs36.existsSync)(worktreePath)) return;
-  (0, import_node_fs36.mkdirSync)(worktreePkgCacheRoot(worktreePath), { recursive: true });
+  if (!(0, import_node_fs37.existsSync)(worktreePath)) return;
+  (0, import_node_fs37.mkdirSync)(worktreePkgCacheRoot(worktreePath), { recursive: true });
 }
 function applyWorktreePkgCacheEnv(env, worktreePath) {
   const cwd = worktreePath.trim();
@@ -13739,12 +13886,12 @@ function applyWorktreePkgCacheEnv(env, worktreePath) {
   fillGroup(env, ["electron_config_cache"], next);
   ensureWorktreePkgCacheDirs(cwd);
 }
-var import_node_fs36, import_node_path36, WORKTREE_PKG_CACHE_REL;
+var import_node_fs37, import_node_path37, WORKTREE_PKG_CACHE_REL;
 var init_worktree_pkg_cache = __esm({
   "src/hook/worktree-pkg-cache.ts"() {
     "use strict";
-    import_node_fs36 = require("fs");
-    import_node_path36 = require("path");
+    import_node_fs37 = require("fs");
+    import_node_path37 = require("path");
     WORKTREE_PKG_CACHE_REL = ".context/.sideboard/pkg-cache";
   }
 });
@@ -14065,6 +14212,8 @@ function agentGitPrompt(action, opts) {
       const named = base ? ` (${base})` : "";
       return `Merge the remote branch${named} into your branch and resolve conflicts. Then, commit and push your changes.`;
     }
+    case "ready-for-review":
+      return "Ready for review.";
     case "merge":
       return "Merge PR.";
   }
@@ -14079,6 +14228,8 @@ function gitActionExpansion(action, base) {
       return "Commit, push, then `gh pr create --web -R <origin-owner/name>`.";
     case "resolve-conflicts":
       return `Fetch the PR base${base ? ` (\`${base}\`)` : ""}, merge it into this branch, resolve conflicts carefully, then commit and push until the PR is mergeable.`;
+    case "ready-for-review":
+      return "This phrase is the explicit ask to mark this thread's draft pull request ready for review on GitHub (`gh pr ready -R <origin-owner/name>` or `gh pr ready`). Update title/body if the purpose drifted. Do not merge.";
     case "merge":
       return "This phrase is the explicit ask to merge this thread's open pull request on GitHub. If `gh stack view` shows a stack, use `gh stack merge`; otherwise `gh pr merge` (respect repo defaults / squash vs merge). Do not force-push main/master or merge locally into the main checkout.";
   }
@@ -14121,6 +14272,7 @@ var init_agent_git_actions = __esm({
       "create-draft",
       "create-web",
       "resolve-conflicts",
+      "ready-for-review",
       "merge"
     ];
     RESOLVE_CONFLICTS_RE = /^Merge the remote branch(?: \(([^)]+)\))? into your branch and resolve conflicts\. Then, commit and push your changes\.$/;
@@ -14892,21 +15044,21 @@ function shouldRefreshReviewRequestTemplate(content) {
   return LEGACY_REVIEW_TEMPLATE_MARKERS.every((m) => trimmed.includes(m));
 }
 function readTextIfPresent(abs) {
-  if (!(0, import_node_fs37.existsSync)(abs)) return null;
+  if (!(0, import_node_fs38.existsSync)(abs)) return null;
   try {
-    const content = (0, import_node_fs37.readFileSync)(abs, "utf8");
+    const content = (0, import_node_fs38.readFileSync)(abs, "utf8");
     return content.trim() ? content : null;
   } catch {
     return null;
   }
 }
 function readLocalGuidelines(worktreePath) {
-  const localAbs = (0, import_node_path37.join)(worktreePath, REVIEW_REQUEST_PATH);
+  const localAbs = (0, import_node_path38.join)(worktreePath, REVIEW_REQUEST_PATH);
   const localContent = readTextIfPresent(localAbs);
   if (localContent && !shouldRefreshReviewRequestTemplate(localContent)) {
     return { path: REVIEW_REQUEST_PATH, content: localContent };
   }
-  const legacyAbs = (0, import_node_path37.join)(worktreePath, LEGACY_REVIEW_REQUEST_PATH);
+  const legacyAbs = (0, import_node_path38.join)(worktreePath, LEGACY_REVIEW_REQUEST_PATH);
   const legacyContent = readTextIfPresent(legacyAbs);
   if (legacyContent && !shouldRefreshReviewRequestTemplate(legacyContent)) {
     return { path: LEGACY_REVIEW_REQUEST_PATH, content: legacyContent };
@@ -14930,27 +15082,27 @@ function contextGuidelines(content, source) {
   };
 }
 function writeContextGuidelines(worktreePath, content) {
-  const abs = (0, import_node_path37.join)(worktreePath, CONTEXT_REVIEW_PATH);
-  (0, import_node_fs37.mkdirSync)((0, import_node_path37.dirname)(abs), { recursive: true });
+  const abs = (0, import_node_path38.join)(worktreePath, CONTEXT_REVIEW_PATH);
+  (0, import_node_fs38.mkdirSync)((0, import_node_path38.dirname)(abs), { recursive: true });
   const body = content.endsWith("\n") ? content : `${content}
 `;
-  (0, import_node_fs37.writeFileSync)(abs, body, "utf8");
+  (0, import_node_fs38.writeFileSync)(abs, body, "utf8");
   return body;
 }
 function readSideboardReview(worktreePath, repoPath) {
-  const fromWorktree = readTextIfPresent((0, import_node_path37.join)(worktreePath, REPO_REVIEW_PATH));
+  const fromWorktree = readTextIfPresent((0, import_node_path38.join)(worktreePath, REPO_REVIEW_PATH));
   if (fromWorktree) return fromWorktree;
   const repo = repoPath?.replace(/\/+$/, "");
   const wt = worktreePath.replace(/\/+$/, "");
   if (!repo || repo === wt) return null;
-  return readTextIfPresent((0, import_node_path37.join)(repo, REPO_REVIEW_PATH));
+  return readTextIfPresent((0, import_node_path38.join)(repo, REPO_REVIEW_PATH));
 }
 function ensureReviewGuidelinesFile(worktreePath, repoPath) {
-  const skillContent = readTextIfPresent((0, import_node_path37.join)(worktreePath, REVIEW_SKILL_PATH));
+  const skillContent = readTextIfPresent((0, import_node_path38.join)(worktreePath, REVIEW_SKILL_PATH));
   if (skillContent) {
     return { ...skillGuidelines(skillContent, "skill"), wrote: false };
   }
-  const contextContent = readTextIfPresent((0, import_node_path37.join)(worktreePath, CONTEXT_REVIEW_PATH));
+  const contextContent = readTextIfPresent((0, import_node_path38.join)(worktreePath, CONTEXT_REVIEW_PATH));
   if (contextContent && !shouldRefreshReviewRequestTemplate(contextContent)) {
     return { ...contextGuidelines(contextContent, "local"), wrote: false };
   }
@@ -14988,7 +15140,7 @@ function buildReviewRequestAttachment(content, opts) {
   };
 }
 function readExistingReviewRequestFile(worktreePath) {
-  return readTextIfPresent((0, import_node_path37.join)(worktreePath, REVIEW_SKILL_PATH)) ?? readTextIfPresent((0, import_node_path37.join)(worktreePath, CONTEXT_REVIEW_PATH)) ?? readTextIfPresent((0, import_node_path37.join)(worktreePath, REPO_REVIEW_PATH)) ?? readTextIfPresent((0, import_node_path37.join)(worktreePath, REVIEW_REQUEST_PATH)) ?? readTextIfPresent((0, import_node_path37.join)(worktreePath, LEGACY_REVIEW_REQUEST_PATH));
+  return readTextIfPresent((0, import_node_path38.join)(worktreePath, REVIEW_SKILL_PATH)) ?? readTextIfPresent((0, import_node_path38.join)(worktreePath, CONTEXT_REVIEW_PATH)) ?? readTextIfPresent((0, import_node_path38.join)(worktreePath, REPO_REVIEW_PATH)) ?? readTextIfPresent((0, import_node_path38.join)(worktreePath, REVIEW_REQUEST_PATH)) ?? readTextIfPresent((0, import_node_path38.join)(worktreePath, LEGACY_REVIEW_REQUEST_PATH));
 }
 async function requestReview(threadRef, send2) {
   const from = findThreadByRef(threadRef);
@@ -15015,13 +15167,13 @@ async function requestReview(threadRef, send2) {
   const started = await send2(tab.id, REVIEW_REQUEST_PREFILL);
   return { tab: started, from };
 }
-var import_node_crypto8, import_node_fs37, import_node_path37, REPO_REVIEW_PATH, REPO_REVIEW_NAME, CONTEXT_REVIEW_PATH, REVIEW_REQUEST_PATH, LEGACY_REVIEW_REQUEST_PATH, REVIEW_REQUEST_NAME, REVIEW_REQUEST_PREFILL, LEGACY_REVIEW_TEMPLATE_MARKERS;
+var import_node_crypto8, import_node_fs38, import_node_path38, REPO_REVIEW_PATH, REPO_REVIEW_NAME, CONTEXT_REVIEW_PATH, REVIEW_REQUEST_PATH, LEGACY_REVIEW_REQUEST_PATH, REVIEW_REQUEST_NAME, REVIEW_REQUEST_PREFILL, LEGACY_REVIEW_TEMPLATE_MARKERS;
 var init_request_review = __esm({
   "src/review/request-review.ts"() {
     "use strict";
     import_node_crypto8 = require("crypto");
-    import_node_fs37 = require("fs");
-    import_node_path37 = require("path");
+    import_node_fs38 = require("fs");
+    import_node_path38 = require("path");
     init_global_workspace();
     init_chat_tabs();
     init_thread_store();
@@ -15047,9 +15199,9 @@ function matchSimpleGlob(pattern, name) {
   return new RegExp(`^${escaped}$`).test(name);
 }
 function readWorktreeInclude(repoPath) {
-  const path2 = (0, import_node_path38.join)(repoPath, ".worktreeinclude");
-  if (!(0, import_node_fs38.existsSync)(path2)) return [];
-  return (0, import_node_fs38.readFileSync)(path2, "utf8").split("\n").map((l) => l.trim()).filter((l) => l && !l.startsWith("#"));
+  const path2 = (0, import_node_path39.join)(repoPath, ".worktreeinclude");
+  if (!(0, import_node_fs39.existsSync)(path2)) return [];
+  return (0, import_node_fs39.readFileSync)(path2, "utf8").split("\n").map((l) => l.trim()).filter((l) => l && !l.startsWith("#"));
 }
 function resolveFilesToCopy(repoPath) {
   const fromInclude = readWorktreeInclude(repoPath);
@@ -15059,10 +15211,10 @@ function resolveFilesToCopy(repoPath) {
   if (settings?.fileIncludeGlobs?.length) {
     const matched = [];
     try {
-      for (const entry of (0, import_node_fs38.readdirSync)(repoPath, { withFileTypes: true })) {
+      for (const entry of (0, import_node_fs39.readdirSync)(repoPath, { withFileTypes: true })) {
         if (!entry.isFile()) continue;
         for (const glob of settings.fileIncludeGlobs) {
-          if (matchSimpleGlob(glob, entry.name) || matchSimpleGlob((0, import_node_path38.basename)(glob), entry.name)) {
+          if (matchSimpleGlob(glob, entry.name) || matchSimpleGlob((0, import_node_path39.basename)(glob), entry.name)) {
             matched.push(entry.name);
             break;
           }
@@ -15074,7 +15226,7 @@ function resolveFilesToCopy(repoPath) {
   }
   const defaults = [];
   try {
-    for (const entry of (0, import_node_fs38.readdirSync)(repoPath, { withFileTypes: true })) {
+    for (const entry of (0, import_node_fs39.readdirSync)(repoPath, { withFileTypes: true })) {
       if (entry.isFile() && entry.name.startsWith(".env")) {
         defaults.push(entry.name);
       }
@@ -15088,11 +15240,11 @@ function copyConfiguredFiles(repoPath, worktreePath) {
   const patterns = resolveFilesToCopy(repoPath);
   const copied = [];
   for (const rel of patterns) {
-    const src = (0, import_node_path38.join)(repoPath, rel);
-    if (!(0, import_node_fs38.existsSync)(src)) continue;
-    const dest = (0, import_node_path38.join)(worktreePath, rel);
-    (0, import_node_fs38.mkdirSync)((0, import_node_path38.dirname)(dest), { recursive: true });
-    (0, import_node_fs38.copyFileSync)(src, dest);
+    const src = (0, import_node_path39.join)(repoPath, rel);
+    if (!(0, import_node_fs39.existsSync)(src)) continue;
+    const dest = (0, import_node_path39.join)(worktreePath, rel);
+    (0, import_node_fs39.mkdirSync)((0, import_node_path39.dirname)(dest), { recursive: true });
+    (0, import_node_fs39.copyFileSync)(src, dest);
     copied.push(rel);
   }
   return copied;
@@ -15127,7 +15279,7 @@ function buildWorkspaceScriptEnv(opts, baseEnv) {
   const env = stripNestedElectronEnv({
     ...baseEnv ?? process.env
   });
-  const name = opts.workspaceName ?? (0, import_node_path38.basename)(opts.worktreePath);
+  const name = opts.workspaceName ?? (0, import_node_path39.basename)(opts.worktreePath);
   const ports = opts.ports ?? [];
   const primary = ports[0];
   env.SIDEBOARD_WORKSPACE_NAME = name;
@@ -15390,13 +15542,13 @@ async function startDevServer(repoPath, worktreePath, onLine, opts) {
     done: handle.done
   };
 }
-var import_node_fs38, import_node_net, import_node_path38, import_execa4, import_node_readline3, PORT_RANGE_SIZE, cachedLoginEnv;
+var import_node_fs39, import_node_net, import_node_path39, import_execa4, import_node_readline3, PORT_RANGE_SIZE, cachedLoginEnv;
 var init_conductor = __esm({
   "src/hook/conductor.ts"() {
     "use strict";
-    import_node_fs38 = require("fs");
+    import_node_fs39 = require("fs");
     import_node_net = require("net");
-    import_node_path38 = require("path");
+    import_node_path39 = require("path");
     import_execa4 = require("execa");
     import_node_readline3 = require("readline");
     init_settings();
@@ -15424,9 +15576,9 @@ async function findOrphanWorktrees(repoPaths) {
     repoPaths?.length ? repoPaths : threads.map((t) => t.repoPath).filter(Boolean)
   );
   const homeRoot = sideboardWorkspacesDir();
-  if ((0, import_node_fs39.existsSync)(homeRoot)) {
+  if ((0, import_node_fs40.existsSync)(homeRoot)) {
     try {
-      for (const entry of (0, import_node_fs39.readdirSync)(homeRoot, { withFileTypes: true })) {
+      for (const entry of (0, import_node_fs40.readdirSync)(homeRoot, { withFileTypes: true })) {
         if (!entry.isDirectory()) continue;
         void entry;
       }
@@ -15436,7 +15588,7 @@ async function findOrphanWorktrees(repoPaths) {
   const orphans = [];
   const seen = /* @__PURE__ */ new Set();
   for (const repoPath of repos) {
-    if (!repoPath || !(0, import_node_fs39.existsSync)(repoPath)) continue;
+    if (!repoPath || !(0, import_node_fs40.existsSync)(repoPath)) continue;
     try {
       const wts = await listWorktrees(repoPath);
       for (const wt of wts) {
@@ -15447,7 +15599,7 @@ async function findOrphanWorktrees(repoPaths) {
         seen.add(path2);
         let mtimeMs = 0;
         try {
-          mtimeMs = (0, import_node_fs39.statSync)(path2).mtimeMs;
+          mtimeMs = (0, import_node_fs40.statSync)(path2).mtimeMs;
         } catch {
           mtimeMs = 0;
         }
@@ -15457,16 +15609,16 @@ async function findOrphanWorktrees(repoPaths) {
     }
     try {
       const root = worktreesRoot(repoPath);
-      if ((0, import_node_fs39.existsSync)(root)) {
-        for (const entry of (0, import_node_fs39.readdirSync)(root, { withFileTypes: true })) {
+      if ((0, import_node_fs40.existsSync)(root)) {
+        for (const entry of (0, import_node_fs40.readdirSync)(root, { withFileTypes: true })) {
           if (!entry.isDirectory()) continue;
-          const path2 = (0, import_node_path39.join)(root, entry.name).replace(/\/$/, "");
+          const path2 = (0, import_node_path40.join)(root, entry.name).replace(/\/$/, "");
           if (known.has(path2) || seen.has(path2)) continue;
-          if (!(0, import_node_fs39.existsSync)((0, import_node_path39.join)(path2, ".git"))) continue;
+          if (!(0, import_node_fs40.existsSync)((0, import_node_path40.join)(path2, ".git"))) continue;
           seen.add(path2);
           let mtimeMs = 0;
           try {
-            mtimeMs = (0, import_node_fs39.statSync)(path2).mtimeMs;
+            mtimeMs = (0, import_node_fs40.statSync)(path2).mtimeMs;
           } catch {
             mtimeMs = Date.now();
           }
@@ -15527,12 +15679,12 @@ function worktreeCleanupSettings() {
     autoCleanupOrphans: a.autoCleanupOrphans
   };
 }
-var import_node_fs39, import_node_path39;
+var import_node_fs40, import_node_path40;
 var init_orphan_cleanup = __esm({
   "src/git/orphan-cleanup.ts"() {
     "use strict";
-    import_node_fs39 = require("fs");
-    import_node_path39 = require("path");
+    import_node_fs40 = require("fs");
+    import_node_path40 = require("path");
     init_worktree();
     init_thread_store();
     init_paths();
@@ -15635,12 +15787,12 @@ async function cloneRepoIntoSideboard(opts) {
   if (!url) throw new Error("Clone URL is required");
   let name = opts.name?.trim();
   if (!name) {
-    const leaf = (0, import_node_path40.basename)(url.replace(/\/$/, "").replace(/\.git$/, ""));
+    const leaf = (0, import_node_path41.basename)(url.replace(/\/$/, "").replace(/\.git$/, ""));
     name = leaf || "repo";
   }
   name = name.replace(/[^a-zA-Z0-9._-]+/g, "-").replace(/^-+|-+$/g, "") || "repo";
-  const dest = (0, import_node_path40.join)(sideboardReposDir(), name);
-  if ((0, import_node_fs40.existsSync)(dest)) {
+  const dest = (0, import_node_path41.join)(sideboardReposDir(), name);
+  if ((0, import_node_fs41.existsSync)(dest)) {
     const repoPath2 = await resolveRepoRoot(dest);
     const workspace2 = await ensureWorkspace(repoPath2);
     return { repoPath: repoPath2, workspace: workspace2 };
@@ -15655,12 +15807,12 @@ async function cloneRepoIntoSideboard(opts) {
   const workspace = await ensureWorkspace(repoPath);
   return { repoPath, workspace };
 }
-var import_node_fs40, import_node_path40, import_execa6;
+var import_node_fs41, import_node_path41, import_execa6;
 var init_clone_repo = __esm({
   "src/git/clone-repo.ts"() {
     "use strict";
-    import_node_fs40 = require("fs");
-    import_node_path40 = require("path");
+    import_node_fs41 = require("fs");
+    import_node_path41 = require("path");
     import_execa6 = require("execa");
     init_paths();
     init_workspaces();
@@ -15778,24 +15930,24 @@ function jobTreeAlive(pid) {
   return jobAlive(pid) || processGroupAlive(pid);
 }
 function readIntFile(file) {
-  if (!(0, import_node_fs41.existsSync)(file)) return null;
-  const n = Number.parseInt((0, import_node_fs41.readFileSync)(file, "utf8").trim(), 10);
+  if (!(0, import_node_fs42.existsSync)(file)) return null;
+  const n = Number.parseInt((0, import_node_fs42.readFileSync)(file, "utf8").trim(), 10);
   return Number.isInteger(n) ? n : null;
 }
 function jobDir(root, id, legacy = false) {
-  return (0, import_node_path41.join)(root, legacy ? LEGACY_DETACHED_JOBS_DIR : DETACHED_JOBS_DIR, id);
+  return (0, import_node_path42.join)(root, legacy ? LEGACY_DETACHED_JOBS_DIR : DETACHED_JOBS_DIR, id);
 }
 function resolveJobDir(root, id) {
   const modern = jobDir(root, id, false);
-  if ((0, import_node_fs41.existsSync)(modern)) return modern;
+  if ((0, import_node_fs42.existsSync)(modern)) return modern;
   const legacy = jobDir(root, id, true);
-  if ((0, import_node_fs41.existsSync)(legacy)) return legacy;
+  if ((0, import_node_fs42.existsSync)(legacy)) return legacy;
   return modern;
 }
 function listJobIdsIn(root, rel) {
-  const dir = (0, import_node_path41.join)(root, rel);
-  if (!(0, import_node_fs41.existsSync)(dir)) return [];
-  return (0, import_node_fs41.readdirSync)(dir, { withFileTypes: true }).filter((e) => e.isDirectory() && JOB_ID_RE.test(e.name)).map((e) => e.name);
+  const dir = (0, import_node_path42.join)(root, rel);
+  if (!(0, import_node_fs42.existsSync)(dir)) return [];
+  return (0, import_node_fs42.readdirSync)(dir, { withFileTypes: true }).filter((e) => e.isDirectory() && JOB_ID_RE.test(e.name)).map((e) => e.name);
 }
 function listRunningDetachedJobs(worktreePath) {
   const root = worktreePath.trim();
@@ -15807,7 +15959,7 @@ function listRunningDetachedJobs(worktreePath) {
   const running = [];
   for (const id of ids) {
     const dir = resolveJobDir(root, id);
-    const pid = readIntFile((0, import_node_path41.join)(dir, "pid"));
+    const pid = readIntFile((0, import_node_path42.join)(dir, "pid"));
     if (jobTreeAlive(pid)) running.push(id);
   }
   return running.sort();
@@ -15860,13 +16012,13 @@ function planJobContinue(opts) {
   return { action: "none" };
 }
 function tailProgress(logFile, maxLines = 12) {
-  if (!(0, import_node_fs41.existsSync)(logFile)) return "(no log yet)";
-  const lines = (0, import_node_fs41.readFileSync)(logFile, "utf8").split("\n");
+  if (!(0, import_node_fs42.existsSync)(logFile)) return "(no log yet)";
+  const lines = (0, import_node_fs42.readFileSync)(logFile, "utf8").split("\n");
   return lines.slice(-maxLines).join("\n");
 }
 function readLogLines(file) {
-  if (!(0, import_node_fs41.existsSync)(file)) return [];
-  const lines = (0, import_node_fs41.readFileSync)(file, "utf8").split("\n");
+  if (!(0, import_node_fs42.existsSync)(file)) return [];
+  const lines = (0, import_node_fs42.readFileSync)(file, "utf8").split("\n");
   if (lines.length && lines[lines.length - 1] === "") lines.pop();
   return lines;
 }
@@ -15877,15 +16029,15 @@ function takeDelta(logFile, cursorFile) {
   return { delta: lines.slice(start).join("\n"), nextCursor: lines.length };
 }
 function snapshotJob(dir) {
-  const pid = readIntFile((0, import_node_path41.join)(dir, "pid"));
+  const pid = readIntFile((0, import_node_path42.join)(dir, "pid"));
   const running = jobTreeAlive(pid);
   return {
     pid,
     running,
-    exitCode: readIntFile((0, import_node_path41.join)(dir, "exit")),
-    log: (0, import_node_path41.join)(dir, "log"),
-    cursor: (0, import_node_path41.join)(dir, "present.cursor"),
-    progress: tailProgress((0, import_node_path41.join)(dir, "log"))
+    exitCode: readIntFile((0, import_node_path42.join)(dir, "exit")),
+    log: (0, import_node_path42.join)(dir, "log"),
+    cursor: (0, import_node_path42.join)(dir, "present.cursor"),
+    progress: tailProgress((0, import_node_path42.join)(dir, "log"))
   };
 }
 function toResult(id, snap, extra) {
@@ -15894,8 +16046,8 @@ function toResult(id, snap, extra) {
   const stillRunning = snap.running && !ok;
   const { delta, nextCursor } = takeDelta(snap.log, snap.cursor);
   try {
-    (0, import_node_fs41.mkdirSync)((0, import_node_path41.dirname)(snap.cursor), { recursive: true });
-    (0, import_node_fs41.writeFileSync)(snap.cursor, `${nextCursor}
+    (0, import_node_fs42.mkdirSync)((0, import_node_path42.dirname)(snap.cursor), { recursive: true });
+    (0, import_node_fs42.writeFileSync)(snap.cursor, `${nextCursor}
 `);
   } catch {
   }
@@ -15922,7 +16074,7 @@ async function waitForDetachedJob(cwd, id, opts) {
   const dir = resolveJobDir(root, jobId);
   const timeoutMs = mcpWaitForJobTimeoutMs(opts?.timeoutMs);
   const sleep2 = opts?.sleep ?? sleepMs;
-  if (!(0, import_node_fs41.existsSync)(dir)) {
+  if (!(0, import_node_fs42.existsSync)(dir)) {
     return {
       stillRunning: false,
       ok: false,
@@ -15968,10 +16120,10 @@ function killProcessTree(pid, signal) {
 }
 function appendJobLog(logFile, line) {
   try {
-    (0, import_node_fs41.mkdirSync)((0, import_node_path41.dirname)(logFile), { recursive: true });
+    (0, import_node_fs42.mkdirSync)((0, import_node_path42.dirname)(logFile), { recursive: true });
     const body = line.endsWith("\n") ? line : `${line}
 `;
-    (0, import_node_fs41.appendFileSync)(logFile, body);
+    (0, import_node_fs42.appendFileSync)(logFile, body);
   } catch {
   }
 }
@@ -15981,7 +16133,7 @@ async function stopDetachedJob(cwd, id, opts) {
   const dir = resolveJobDir(root, jobId);
   const sleep2 = opts?.sleep ?? sleepMs;
   const why = opts?.reason?.trim() ?? "";
-  if (!(0, import_node_fs41.existsSync)(dir)) {
+  if (!(0, import_node_fs42.existsSync)(dir)) {
     return {
       stillRunning: false,
       ok: false,
@@ -16017,10 +16169,10 @@ async function stopDetachedJob(cwd, id, opts) {
     killProcessTree(targetPid, "SIGKILL");
     await sleep2(100);
   }
-  const exitFile = (0, import_node_path41.join)(dir, "exit");
-  if (!(0, import_node_fs41.existsSync)(exitFile)) {
+  const exitFile = (0, import_node_path42.join)(dir, "exit");
+  if (!(0, import_node_fs42.existsSync)(exitFile)) {
     try {
-      (0, import_node_fs41.writeFileSync)(exitFile, "1\n");
+      (0, import_node_fs42.writeFileSync)(exitFile, "1\n");
     } catch {
     }
   }
@@ -16040,12 +16192,12 @@ async function stopDetachedJob(cwd, id, opts) {
     hint: stopped ? MCP_STOP_JOB_HINT : MCP_WAIT_JOB_STILL_RUNNING_HINT
   };
 }
-var import_node_fs41, import_node_path41, MAX_JOB_CONTINUES, MCP_WAIT_JOB_STILL_RUNNING_HINT, MCP_STOP_JOB_HINT, JOB_ID_RE;
+var import_node_fs42, import_node_path42, MAX_JOB_CONTINUES, MCP_WAIT_JOB_STILL_RUNNING_HINT, MCP_STOP_JOB_HINT, JOB_ID_RE;
 var init_wait_for_job = __esm({
   "src/mcp/wait-for-job.ts"() {
     "use strict";
-    import_node_fs41 = require("fs");
-    import_node_path41 = require("path");
+    import_node_fs42 = require("fs");
+    import_node_path42 = require("path");
     init_workspace_scratch();
     init_wait_for_turn();
     MAX_JOB_CONTINUES = 8;
@@ -17182,7 +17334,7 @@ function reuseLiveThread(input, repoPath, match) {
 }
 async function createThread(input, _onSetupLine) {
   const repoPath = await resolveRepoRoot(input.repoPath);
-  if (!(0, import_node_fs42.existsSync)(repoPath)) {
+  if (!(0, import_node_fs43.existsSync)(repoPath)) {
     throw new Error(`Repo not found: ${repoPath}`);
   }
   const reused = reuseLiveThread(input, repoPath, {
@@ -17363,11 +17515,11 @@ async function listLinearIssues(agent, repoPath) {
   }
   return adapter.listLinearIssues(repoPath);
 }
-var import_node_fs42;
+var import_node_fs43;
 var init_create = __esm({
   "src/threads/create.ts"() {
     "use strict";
-    import_node_fs42 = require("fs");
+    import_node_fs43 = require("fs");
     init_detect();
     init_worktree();
     init_home_board();
@@ -17487,20 +17639,20 @@ function writeTurnLive(threadId, progress) {
   const path2 = threadLivePath(threadId);
   const tmp = `${path2}.${process.pid}.tmp`;
   try {
-    (0, import_node_fs43.writeFileSync)(tmp, JSON.stringify(progress), "utf8");
-    (0, import_node_fs43.renameSync)(tmp, path2);
+    (0, import_node_fs44.writeFileSync)(tmp, JSON.stringify(progress), "utf8");
+    (0, import_node_fs44.renameSync)(tmp, path2);
   } catch {
     try {
-      (0, import_node_fs43.unlinkSync)(tmp);
+      (0, import_node_fs44.unlinkSync)(tmp);
     } catch {
     }
   }
 }
 function readTurnLive(threadId) {
   const path2 = threadLivePath(threadId);
-  if (!(0, import_node_fs43.existsSync)(path2)) return null;
+  if (!(0, import_node_fs44.existsSync)(path2)) return null;
   try {
-    const raw = JSON.parse((0, import_node_fs43.readFileSync)(path2, "utf8"));
+    const raw = JSON.parse((0, import_node_fs44.readFileSync)(path2, "utf8"));
     if (!raw || typeof raw.summary !== "string") return null;
     return raw;
   } catch {
@@ -17512,17 +17664,17 @@ function clearTurnLive(threadId) {
   if (buf?.timer) clearTimeout(buf.timer);
   buffers.delete(threadId);
   const path2 = threadLivePath(threadId);
-  if (!(0, import_node_fs43.existsSync)(path2)) return;
+  if (!(0, import_node_fs44.existsSync)(path2)) return;
   try {
-    (0, import_node_fs43.unlinkSync)(path2);
+    (0, import_node_fs44.unlinkSync)(path2);
   } catch {
   }
 }
-var import_node_fs43, buffers, FLUSH_MS, MAX_PARTS;
+var import_node_fs44, buffers, FLUSH_MS, MAX_PARTS;
 var init_turn_live = __esm({
   "src/store/turn-live.ts"() {
     "use strict";
-    import_node_fs43 = require("fs");
+    import_node_fs44 = require("fs");
     init_message_parts();
     init_paths();
     buffers = /* @__PURE__ */ new Map();
@@ -17742,7 +17894,7 @@ var init_quota_failover = __esm({
 // src/threads/adopt.ts
 function thisModuleFile() {
   const cjsFile = typeof __filename !== "undefined" ? __filename : "";
-  return cjsFile || process.argv[1] || (0, import_node_path42.join)(process.cwd(), "package.json");
+  return cjsFile || process.argv[1] || (0, import_node_path43.join)(process.cwd(), "package.json");
 }
 function openReadonlySqlite(file) {
   const req = (0, import_node_module4.createRequire)(thisModuleFile());
@@ -17760,21 +17912,21 @@ function mapAgentType(raw) {
   return null;
 }
 function resolveConductorCursorAgentId(workspacePath) {
-  if (!workspacePath || !(0, import_node_fs44.existsSync)(CURSOR_SDK_STORE)) return null;
+  if (!workspacePath || !(0, import_node_fs45.existsSync)(CURSOR_SDK_STORE)) return null;
   const normalized = workspacePath.replace(/\/$/, "");
   let best = null;
   let hashes;
   try {
-    hashes = (0, import_node_fs44.readdirSync)(CURSOR_SDK_STORE);
+    hashes = (0, import_node_fs45.readdirSync)(CURSOR_SDK_STORE);
   } catch {
     return null;
   }
   for (const hash of hashes) {
-    const agentsFile = (0, import_node_path42.join)(CURSOR_SDK_STORE, hash, "agents.ndjson");
-    if (!(0, import_node_fs44.existsSync)(agentsFile)) continue;
+    const agentsFile = (0, import_node_path43.join)(CURSOR_SDK_STORE, hash, "agents.ndjson");
+    if (!(0, import_node_fs45.existsSync)(agentsFile)) continue;
     let text7;
     try {
-      text7 = (0, import_node_fs44.readFileSync)(agentsFile, "utf8");
+      text7 = (0, import_node_fs45.readFileSync)(agentsFile, "utf8");
     } catch {
       continue;
     }
@@ -17798,7 +17950,7 @@ function resolveConductorCursorAgentId(workspacePath) {
   return best?.agentId ?? null;
 }
 async function adoptThread(input) {
-  if (!(0, import_node_fs44.existsSync)(input.worktreePath)) {
+  if (!(0, import_node_fs45.existsSync)(input.worktreePath)) {
     throw new Error(`Worktree not found: ${input.worktreePath}`);
   }
   const repoPath = await resolveRepoRoot(input.worktreePath);
@@ -17827,18 +17979,18 @@ function conductorDbPath() {
   return CONDUCTOR_DB;
 }
 function listConductorWorkspaces() {
-  if (!(0, import_node_fs44.existsSync)(CONDUCTOR_DB)) {
+  if (!(0, import_node_fs45.existsSync)(CONDUCTOR_DB)) {
     throw new Error(`Conductor DB not found at ${CONDUCTOR_DB}`);
   }
-  const tmp = (0, import_node_fs44.mkdtempSync)((0, import_node_path42.join)((0, import_node_os13.tmpdir)(), "sideboard-conductor-"));
-  const snapshot = (0, import_node_path42.join)(tmp, "conductor.db");
+  const tmp = (0, import_node_fs45.mkdtempSync)((0, import_node_path43.join)((0, import_node_os13.tmpdir)(), "sideboard-conductor-"));
+  const snapshot = (0, import_node_path43.join)(tmp, "conductor.db");
   try {
-    (0, import_node_fs44.copyFileSync)(CONDUCTOR_DB, snapshot);
+    (0, import_node_fs45.copyFileSync)(CONDUCTOR_DB, snapshot);
     for (const suffix of ["-wal", "-shm"]) {
       const src = `${CONDUCTOR_DB}${suffix}`;
-      if ((0, import_node_fs44.existsSync)(src)) {
+      if ((0, import_node_fs45.existsSync)(src)) {
         try {
-          (0, import_node_fs44.copyFileSync)(src, `${snapshot}${suffix}`);
+          (0, import_node_fs45.copyFileSync)(src, `${snapshot}${suffix}`);
         } catch {
         }
       }
@@ -17914,22 +18066,22 @@ function listConductorWorkspaces() {
       db.close();
     }
   } finally {
-    (0, import_node_fs44.rmSync)(tmp, { recursive: true, force: true });
+    (0, import_node_fs45.rmSync)(tmp, { recursive: true, force: true });
   }
 }
 function importConductorWorkspace(workspaceId) {
-  if (!(0, import_node_fs44.existsSync)(CONDUCTOR_DB)) {
+  if (!(0, import_node_fs45.existsSync)(CONDUCTOR_DB)) {
     throw new Error(`Conductor DB not found at ${CONDUCTOR_DB}`);
   }
-  const tmp = (0, import_node_fs44.mkdtempSync)((0, import_node_path42.join)((0, import_node_os13.tmpdir)(), "sideboard-conductor-"));
-  const snapshot = (0, import_node_path42.join)(tmp, "conductor.db");
+  const tmp = (0, import_node_fs45.mkdtempSync)((0, import_node_path43.join)((0, import_node_os13.tmpdir)(), "sideboard-conductor-"));
+  const snapshot = (0, import_node_path43.join)(tmp, "conductor.db");
   try {
-    (0, import_node_fs44.copyFileSync)(CONDUCTOR_DB, snapshot);
+    (0, import_node_fs45.copyFileSync)(CONDUCTOR_DB, snapshot);
     for (const suffix of ["-wal", "-shm"]) {
       const src = `${CONDUCTOR_DB}${suffix}`;
-      if ((0, import_node_fs44.existsSync)(src)) {
+      if ((0, import_node_fs45.existsSync)(src)) {
         try {
-          (0, import_node_fs44.copyFileSync)(src, `${snapshot}${suffix}`);
+          (0, import_node_fs45.copyFileSync)(src, `${snapshot}${suffix}`);
         } catch {
         }
       }
@@ -17947,7 +18099,7 @@ function importConductorWorkspace(workspaceId) {
       ).get(workspaceId);
       if (!row) throw new Error(`Conductor workspace not found: ${workspaceId}`);
       const worktreePath = String(row.workspacePath);
-      if (!(0, import_node_fs44.existsSync)(worktreePath)) {
+      if (!(0, import_node_fs45.existsSync)(worktreePath)) {
         throw new Error(`Conductor worktree missing on disk: ${worktreePath}`);
       }
       let sessionId = null;
@@ -17987,7 +18139,7 @@ function importConductorWorkspace(workspaceId) {
       }
       let repoPath = worktreePath;
       try {
-        repoPath = (0, import_node_child_process4.execFileSync)("git", ["rev-parse", "--show-toplevel"], {
+        repoPath = (0, import_node_child_process5.execFileSync)("git", ["rev-parse", "--show-toplevel"], {
           cwd: worktreePath,
           encoding: "utf8"
         }).trim();
@@ -18010,31 +18162,31 @@ function importConductorWorkspace(workspaceId) {
       db.close();
     }
   } finally {
-    (0, import_node_fs44.rmSync)(tmp, { recursive: true, force: true });
+    (0, import_node_fs45.rmSync)(tmp, { recursive: true, force: true });
   }
 }
 async function importConductorWorkspaceAsync(workspaceId) {
   return importConductorWorkspace(workspaceId);
 }
-var import_node_child_process4, import_node_fs44, import_node_os13, import_node_path42, import_node_module4, CONDUCTOR_APP_SUPPORT, CONDUCTOR_DB, CURSOR_SDK_STORE;
+var import_node_child_process5, import_node_fs45, import_node_os13, import_node_path43, import_node_module4, CONDUCTOR_APP_SUPPORT, CONDUCTOR_DB, CURSOR_SDK_STORE;
 var init_adopt = __esm({
   "src/threads/adopt.ts"() {
     "use strict";
-    import_node_child_process4 = require("child_process");
-    import_node_fs44 = require("fs");
+    import_node_child_process5 = require("child_process");
+    import_node_fs45 = require("fs");
     import_node_os13 = require("os");
-    import_node_path42 = require("path");
+    import_node_path43 = require("path");
     import_node_module4 = require("module");
     init_worktree();
     init_thread_store();
-    CONDUCTOR_APP_SUPPORT = (0, import_node_path42.join)(
+    CONDUCTOR_APP_SUPPORT = (0, import_node_path43.join)(
       process.env.HOME ?? "",
       "Library",
       "Application Support",
       "com.conductor.app"
     );
-    CONDUCTOR_DB = (0, import_node_path42.join)(CONDUCTOR_APP_SUPPORT, "conductor.db");
-    CURSOR_SDK_STORE = (0, import_node_path42.join)(CONDUCTOR_APP_SUPPORT, "cursor-sdk-store");
+    CONDUCTOR_DB = (0, import_node_path43.join)(CONDUCTOR_APP_SUPPORT, "conductor.db");
+    CURSOR_SDK_STORE = (0, import_node_path43.join)(CONDUCTOR_APP_SUPPORT, "cursor-sdk-store");
   }
 });
 
@@ -18101,7 +18253,7 @@ async function openStackLayer(input, _onSetupLine) {
   let createdWorktree = false;
   const trees = await listWorktrees(repoPath);
   const checkedOut = trees.find((w) => w.branch === branchName);
-  if (checkedOut?.path && (0, import_node_fs45.existsSync)(checkedOut.path)) {
+  if (checkedOut?.path && (0, import_node_fs46.existsSync)(checkedOut.path)) {
     if (input.reuseExistingWorktree !== false) {
       worktreePath = checkedOut.path;
     } else {
@@ -18243,7 +18395,7 @@ async function initStackFromThread(input, onSetupLine) {
 async function createPrStack(input, onSetupLine) {
   await requireAgent(input.agent);
   const repoPath = await resolveRepoRoot(input.repoPath);
-  if (!(0, import_node_fs45.existsSync)(repoPath)) throw new Error(`Repo not found: ${repoPath}`);
+  if (!(0, import_node_fs46.existsSync)(repoPath)) throw new Error(`Repo not found: ${repoPath}`);
   if (!input.branches.length) throw new Error("At least one branch name required");
   const status = await detectGhStack(repoPath);
   if (!status.available) throw new Error(status.reason);
@@ -18310,7 +18462,7 @@ async function createPrStack(input, onSetupLine) {
     }
   }
   const claimed = new Set(threads.map((t) => t.worktreePath));
-  if (!claimed.has(bootstrap.worktreePath) && (0, import_node_fs45.existsSync)(bootstrap.worktreePath)) {
+  if (!claimed.has(bootstrap.worktreePath) && (0, import_node_fs46.existsSync)(bootstrap.worktreePath)) {
     try {
       await removeWorktree(repoPath, bootstrap.worktreePath, {
         deleteBranch: bootstrap.branchName
@@ -18330,11 +18482,11 @@ function stackAgentDefaultsFrom(input) {
     planMode: input.planMode
   };
 }
-var import_node_fs45;
+var import_node_fs46;
 var init_stack_layers = __esm({
   "src/threads/stack-layers.ts"() {
     "use strict";
-    import_node_fs45 = require("fs");
+    import_node_fs46 = require("fs");
     init_detect();
     init_run();
     init_stack();
@@ -18347,7 +18499,7 @@ var init_stack_layers = __esm({
 
 // src/diff/diff.ts
 async function inspectGitWorktree(worktreePath) {
-  if (!worktreePath || !(0, import_node_fs46.existsSync)(worktreePath)) return "missing_worktree";
+  if (!worktreePath || !(0, import_node_fs47.existsSync)(worktreePath)) return "missing_worktree";
   const check = await git(["rev-parse", "--is-inside-work-tree"], worktreePath, {
     reject: false
   });
@@ -18355,7 +18507,7 @@ async function inspectGitWorktree(worktreePath) {
   return "ok";
 }
 async function initializeGitRepository(worktreePath) {
-  if (!worktreePath || !(0, import_node_fs46.existsSync)(worktreePath)) {
+  if (!worktreePath || !(0, import_node_fs47.existsSync)(worktreePath)) {
     throw new Error("Worktree not found");
   }
   const status = await inspectGitWorktree(worktreePath);
@@ -18489,11 +18641,11 @@ new file mode 100644
   };
 }
 async function untrackedPatch(worktreePath, path2, maxHunk) {
-  const abs = (0, import_node_path43.join)(worktreePath, path2);
+  const abs = (0, import_node_path44.join)(worktreePath, path2);
   try {
-    const st = (0, import_node_fs46.statSync)(abs);
+    const st = (0, import_node_fs47.statSync)(abs);
     if (st.isFile() && st.size > maxHunk) {
-      const buf = (0, import_node_fs46.readFileSync)(abs).subarray(0, maxHunk);
+      const buf = (0, import_node_fs47.readFileSync)(abs).subarray(0, maxHunk);
       return syntheticAddPatch(path2, buf.toString("utf8"), maxHunk);
     }
   } catch {
@@ -18982,8 +19134,8 @@ function isImageRelativePath(relativePath) {
 function readWorktreeFileForUpload(worktreePath, relativePath, opts) {
   assertSafeRelativePath(relativePath);
   const maxBytes = opts?.maxBytes ?? DEFAULT_UPLOAD_MAX_BYTES;
-  const abs = (0, import_node_path43.join)(worktreePath, relativePath);
-  const st = (0, import_node_fs46.statSync)(abs);
+  const abs = (0, import_node_path44.join)(worktreePath, relativePath);
+  const st = (0, import_node_fs47.statSync)(abs);
   if (!st.isFile()) {
     throw new Error(`Not a file: ${relativePath}`);
   }
@@ -18992,7 +19144,7 @@ function readWorktreeFileForUpload(worktreePath, relativePath, opts) {
       `File too large to upload (${st.size} bytes; max ${maxBytes})`
     );
   }
-  const buf = (0, import_node_fs46.readFileSync)(abs);
+  const buf = (0, import_node_fs47.readFileSync)(abs);
   return {
     path: relativePath,
     contentBase64: buf.toString("base64"),
@@ -19002,12 +19154,12 @@ function readWorktreeFileForUpload(worktreePath, relativePath, opts) {
 function readWorktreeFile(worktreePath, relativePath, opts) {
   assertSafeRelativePath(relativePath);
   const maxBytes = opts?.maxBytes ?? 2e5;
-  const abs = (0, import_node_path43.join)(worktreePath, relativePath);
-  const st = (0, import_node_fs46.statSync)(abs);
+  const abs = (0, import_node_path44.join)(worktreePath, relativePath);
+  const st = (0, import_node_fs47.statSync)(abs);
   if (!st.isFile()) {
     throw new Error(`Not a file: ${relativePath}`);
   }
-  const buf = (0, import_node_fs46.readFileSync)(abs);
+  const buf = (0, import_node_fs47.readFileSync)(abs);
   if (isImageRelativePath(relativePath)) {
     const maxImageBytes = Math.max(maxBytes, 15e6);
     const truncated2 = buf.length > maxImageBytes;
@@ -19050,9 +19202,9 @@ function assertSafeRelativePath(relativePath) {
 }
 function writeWorktreeFile(worktreePath, relativePath, content) {
   assertSafeRelativePath(relativePath);
-  const abs = (0, import_node_path43.join)(worktreePath, relativePath);
-  (0, import_node_fs46.mkdirSync)((0, import_node_path43.dirname)(abs), { recursive: true });
-  (0, import_node_fs46.writeFileSync)(abs, content, "utf8");
+  const abs = (0, import_node_path44.join)(worktreePath, relativePath);
+  (0, import_node_fs47.mkdirSync)((0, import_node_path44.dirname)(abs), { recursive: true });
+  (0, import_node_fs47.writeFileSync)(abs, content, "utf8");
   return { path: relativePath };
 }
 async function getDiffSummary(worktreePath, repoPath, opts) {
@@ -19069,12 +19221,12 @@ async function getDiffSummary(worktreePath, repoPath, opts) {
     truncated: full.files.length > maxFiles
   };
 }
-var import_node_fs46, import_node_path43, mergeBaseCache, MERGE_BASE_TTL_MS, SHA_RE, IMAGE_EXTENSIONS2, DEFAULT_UPLOAD_MAX_BYTES;
+var import_node_fs47, import_node_path44, mergeBaseCache, MERGE_BASE_TTL_MS, SHA_RE, IMAGE_EXTENSIONS2, DEFAULT_UPLOAD_MAX_BYTES;
 var init_diff = __esm({
   "src/diff/diff.ts"() {
     "use strict";
-    import_node_fs46 = require("fs");
-    import_node_path43 = require("path");
+    import_node_fs47 = require("fs");
+    import_node_path44 = require("path");
     init_run();
     init_worktree();
     mergeBaseCache = /* @__PURE__ */ new Map();
@@ -19350,7 +19502,7 @@ function parseFrontmatter(content) {
 }
 function readSkill(skillMd, source) {
   try {
-    const content = (0, import_node_fs47.readFileSync)(skillMd, "utf8");
+    const content = (0, import_node_fs48.readFileSync)(skillMd, "utf8");
     const { name: fmName, description } = parseFrontmatter(content);
     const dirName = skillMd.split("/").slice(-2, -1)[0] || "skill";
     const name = fmName || dirName;
@@ -19369,19 +19521,19 @@ function readSkill(skillMd, source) {
   }
 }
 function scanSkillsDir(dir, source, out) {
-  if (!(0, import_node_fs47.existsSync)(dir)) return;
+  if (!(0, import_node_fs48.existsSync)(dir)) return;
   let entries;
   try {
-    entries = (0, import_node_fs47.readdirSync)(dir);
+    entries = (0, import_node_fs48.readdirSync)(dir);
   } catch {
     return;
   }
   for (const entry of entries) {
     if (entry.startsWith(".")) continue;
-    const skillMd = (0, import_node_path44.join)(dir, entry, "SKILL.md");
-    if (!(0, import_node_fs47.existsSync)(skillMd)) continue;
+    const skillMd = (0, import_node_path45.join)(dir, entry, "SKILL.md");
+    if (!(0, import_node_fs48.existsSync)(skillMd)) continue;
     try {
-      if (!(0, import_node_fs47.statSync)(skillMd).isFile()) continue;
+      if (!(0, import_node_fs48.statSync)(skillMd).isFile()) continue;
     } catch {
       continue;
     }
@@ -19390,24 +19542,24 @@ function scanSkillsDir(dir, source, out) {
   }
 }
 function scanClaudePluginSkills(pluginsRoot, out) {
-  if (!(0, import_node_fs47.existsSync)(pluginsRoot)) return;
+  if (!(0, import_node_fs48.existsSync)(pluginsRoot)) return;
   const walk = (dir, depth, lookingForSkillsDir) => {
     if (depth > 7) return;
     let entries;
     try {
-      entries = (0, import_node_fs47.readdirSync)(dir);
+      entries = (0, import_node_fs48.readdirSync)(dir);
     } catch {
       return;
     }
     if (lookingForSkillsDir && entries.includes("SKILL.md")) {
-      const skill = readSkill((0, import_node_path44.join)(dir, "SKILL.md"), "cli");
+      const skill = readSkill((0, import_node_path45.join)(dir, "SKILL.md"), "cli");
       if (skill) out.push(skill);
     }
     for (const entry of entries) {
       if (entry === "node_modules" || entry === ".git") continue;
-      const full = (0, import_node_path44.join)(dir, entry);
+      const full = (0, import_node_path45.join)(dir, entry);
       try {
-        if (!(0, import_node_fs47.statSync)(full).isDirectory()) continue;
+        if (!(0, import_node_fs48.statSync)(full).isDirectory()) continue;
       } catch {
         continue;
       }
@@ -19425,17 +19577,17 @@ function discoverSkills(worktreePath) {
   const home = (0, import_node_os14.homedir)();
   const collected = [];
   for (const rel of [".claude/skills", ".cursor/skills", ".sideboard/skills", ".brightsy/skills", "skills"]) {
-    scanSkillsDir((0, import_node_path44.join)(worktreePath, rel), "workspace", collected);
+    scanSkillsDir((0, import_node_path45.join)(worktreePath, rel), "workspace", collected);
   }
   for (const abs of [
-    (0, import_node_path44.join)(home, ".claude/skills"),
-    (0, import_node_path44.join)(home, ".cursor/skills"),
-    (0, import_node_path44.join)(home, ".sideboard/skills"),
-    (0, import_node_path44.join)(home, ".brightsy/skills")
+    (0, import_node_path45.join)(home, ".claude/skills"),
+    (0, import_node_path45.join)(home, ".cursor/skills"),
+    (0, import_node_path45.join)(home, ".sideboard/skills"),
+    (0, import_node_path45.join)(home, ".brightsy/skills")
   ]) {
     scanSkillsDir(abs, "user", collected);
   }
-  scanClaudePluginSkills((0, import_node_path44.join)(home, ".claude/plugins"), collected);
+  scanClaudePluginSkills((0, import_node_path45.join)(home, ".claude/plugins"), collected);
   collected.push(...bundledSkills());
   const rank = {
     workspace: 0,
@@ -19461,7 +19613,7 @@ function readSkillBody(skillPath, maxChars = 12e3) {
 \u2026(truncated)` : body;
     }
   }
-  const raw = (0, import_node_fs47.readFileSync)(skillPath, "utf8");
+  const raw = (0, import_node_fs48.readFileSync)(skillPath, "utf8");
   if (raw.startsWith("---")) {
     const end = raw.indexOf("\n---", 3);
     if (end >= 0) {
@@ -19475,13 +19627,13 @@ function readSkillBody(skillPath, maxChars = 12e3) {
 
 \u2026(truncated)` : raw;
 }
-var import_node_fs47, import_node_os14, import_node_path44, BUNDLED_SKILL_PREFIX;
+var import_node_fs48, import_node_os14, import_node_path45, BUNDLED_SKILL_PREFIX;
 var init_discover = __esm({
   "src/skills/discover.ts"() {
     "use strict";
-    import_node_fs47 = require("fs");
+    import_node_fs48 = require("fs");
     import_node_os14 = require("os");
-    import_node_path44 = require("path");
+    import_node_path45 = require("path");
     init_long_running();
     BUNDLED_SKILL_PREFIX = "bundled:";
   }
@@ -19575,8 +19727,8 @@ var init_expand = __esm({
 // src/skills/detached-job-path.ts
 function detachedJobScriptIn(dir) {
   for (const name of DETACHED_JOB_FILENAMES) {
-    const script = (0, import_node_path45.join)(dir, "scripts", name);
-    if ((0, import_node_fs48.existsSync)(script)) return script;
+    const script = (0, import_node_path46.join)(dir, "scripts", name);
+    if ((0, import_node_fs49.existsSync)(script)) return script;
   }
   return null;
 }
@@ -19588,11 +19740,11 @@ function packagedDetachedJobPath() {
 function resolveDetachedJobScript() {
   const packaged = packagedDetachedJobPath();
   if (packaged) return packaged;
-  let dir = (0, import_node_path45.dirname)((0, import_node_url3.fileURLToPath)(import_meta3.url));
+  let dir = (0, import_node_path46.dirname)((0, import_node_url3.fileURLToPath)(import_meta3.url));
   for (let i = 0; i < 8; i++) {
     const candidate = detachedJobScriptIn(dir);
     if (candidate) return candidate;
-    const parent = (0, import_node_path45.dirname)(dir);
+    const parent = (0, import_node_path46.dirname)(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -19603,12 +19755,12 @@ function formatDetachedJobInvoke(scriptPath) {
   if (resolved) return `node ${JSON.stringify(resolved)}`;
   return "node scripts/detached-job.cjs";
 }
-var import_node_fs48, import_node_path45, import_node_url3, import_meta3, DETACHED_JOB_FILENAMES;
+var import_node_fs49, import_node_path46, import_node_url3, import_meta3, DETACHED_JOB_FILENAMES;
 var init_detached_job_path = __esm({
   "src/skills/detached-job-path.ts"() {
     "use strict";
-    import_node_fs48 = require("fs");
-    import_node_path45 = require("path");
+    import_node_fs49 = require("fs");
+    import_node_path46 = require("path");
     import_node_url3 = require("url");
     init_packaged_runtime();
     import_meta3 = {};
@@ -19686,7 +19838,7 @@ function formatWorktreeDirective(thread, opts) {
     );
   }
   lines.push(
-    '- Sideboard git buttons send short phrases ("Commit and push.", "Merge PR.", \u2026) with their meaning attached \u2014 act on them without asking for clarification. If the user gives a goal (Greptile 5/5, CI green, until checks pass), you get the watch-fix-push playbook with that request.'
+    '- Sideboard git buttons send short phrases ("Commit and push.", "Ready for review.", "Merge PR.", \u2026) with their meaning attached \u2014 act on them without asking for clarification. If the user gives a goal (Greptile 5/5, CI green, until checks pass), you get the watch-fix-push playbook with that request.'
   );
   lines.push("");
   lines.push(formatProcessGuideDirective({ worktreePath: thread.worktreePath }));
@@ -19788,9 +19940,9 @@ function formatPrGateDirective() {
 }
 function formatProcessGuideDirective(opts) {
   const worktree = opts?.worktreePath?.trim();
-  const hasGraphSkill = !!worktree && (0, import_node_fs49.existsSync)((0, import_node_path46.join)(worktree, ".claude/skills/graph-engineering/SKILL.md"));
-  const hasReviewSkill = !!worktree && (0, import_node_fs49.existsSync)((0, import_node_path46.join)(worktree, ".claude/skills/review/SKILL.md"));
-  const hasInstallSkill = !!worktree && (0, import_node_fs49.existsSync)((0, import_node_path46.join)(worktree, ".claude/skills/worktree-install/SKILL.md"));
+  const hasGraphSkill = !!worktree && (0, import_node_fs50.existsSync)((0, import_node_path47.join)(worktree, ".claude/skills/graph-engineering/SKILL.md"));
+  const hasReviewSkill = !!worktree && (0, import_node_fs50.existsSync)((0, import_node_path47.join)(worktree, ".claude/skills/review/SKILL.md"));
+  const hasInstallSkill = !!worktree && (0, import_node_fs50.existsSync)((0, import_node_path47.join)(worktree, ".claude/skills/worktree-install/SKILL.md"));
   return [
     "Process guides (recurring work only):",
     hasGraphSkill ? "- Migrations, ports, batch fixes, and other fan-out: follow `.claude/skills/graph-engineering/SKILL.md` (`/graph-engineering`). Judge first; state on disk; grow the rulebook; do not patch around it." : null,
@@ -19828,12 +19980,12 @@ function formatArtifactDirective() {
 function formatUiReminder() {
   return "Sideboard UI: markdown table is enough to read data; present_schema if they ask to edit/filter (even after markdown); present_files for the file manager. html fence or present_artifact, not both for the same document. type=log appends (same artifact_id, new lines only). ask_user only for a real multiple-choice (not hellos or \u201Cwhat next?\u201D) \u2014 reply in chat. Do not say artifacts/CMS UI are unavailable.";
 }
-var import_node_fs49, import_node_path46, PR_GOAL_RE, GITHUB_TICKET_REF, KEYED_TICKET_REF;
+var import_node_fs50, import_node_path47, PR_GOAL_RE, GITHUB_TICKET_REF, KEYED_TICKET_REF;
 var init_instructions = __esm({
   "src/agents/instructions.ts"() {
     "use strict";
-    import_node_fs49 = require("fs");
-    import_node_path46 = require("path");
+    import_node_fs50 = require("fs");
+    import_node_path47 = require("path");
     init_git_auth_mode();
     init_worktree_labels();
     init_detached_job_path();
@@ -20186,40 +20338,40 @@ __export(plan_file_exports, {
   writePlanFile: () => writePlanFile
 });
 function ensureAttachmentsGitignore(worktreePath) {
-  const gitignoreAbs = (0, import_node_path47.join)(worktreePath, ATTACHMENTS_DIR, ".gitignore");
-  if ((0, import_node_fs50.existsSync)(gitignoreAbs)) return;
-  (0, import_node_fs50.mkdirSync)((0, import_node_path47.dirname)(gitignoreAbs), { recursive: true });
-  (0, import_node_fs50.writeFileSync)(gitignoreAbs, attachmentsGitignoreBody(), "utf8");
+  const gitignoreAbs = (0, import_node_path48.join)(worktreePath, ATTACHMENTS_DIR, ".gitignore");
+  if ((0, import_node_fs51.existsSync)(gitignoreAbs)) return;
+  (0, import_node_fs51.mkdirSync)((0, import_node_path48.dirname)(gitignoreAbs), { recursive: true });
+  (0, import_node_fs51.writeFileSync)(gitignoreAbs, attachmentsGitignoreBody(), "utf8");
 }
 function planFileAbs(worktreePath) {
-  return (0, import_node_path47.join)(worktreePath, PLAN_FILE_REL);
+  return (0, import_node_path48.join)(worktreePath, PLAN_FILE_REL);
 }
 function readTextIfPresent2(abs) {
-  if (!(0, import_node_fs50.existsSync)(abs)) return null;
+  if (!(0, import_node_fs51.existsSync)(abs)) return null;
   try {
-    const content = (0, import_node_fs50.readFileSync)(abs, "utf8");
+    const content = (0, import_node_fs51.readFileSync)(abs, "utf8");
     return content.trim() ? content : null;
   } catch {
     return null;
   }
 }
 function readPlanFile(worktreePath) {
-  return readTextIfPresent2(planFileAbs(worktreePath)) ?? readTextIfPresent2((0, import_node_path47.join)(worktreePath, `${LEGACY_ATTACHMENTS_DIR}/plan.md`)) ?? readTextIfPresent2((0, import_node_path47.join)(worktreePath, LEGACY_PLAN_FILE_REL));
+  return readTextIfPresent2(planFileAbs(worktreePath)) ?? readTextIfPresent2((0, import_node_path48.join)(worktreePath, `${LEGACY_ATTACHMENTS_DIR}/plan.md`)) ?? readTextIfPresent2((0, import_node_path48.join)(worktreePath, LEGACY_PLAN_FILE_REL));
 }
 function writePlanFile(worktreePath, content) {
   ensureAttachmentsGitignore(worktreePath);
   const abs = planFileAbs(worktreePath);
-  (0, import_node_fs50.mkdirSync)((0, import_node_path47.dirname)(abs), { recursive: true });
+  (0, import_node_fs51.mkdirSync)((0, import_node_path48.dirname)(abs), { recursive: true });
   const body = content.trimEnd() + (content.endsWith("\n") ? "" : "\n");
-  (0, import_node_fs50.writeFileSync)(abs, body, "utf8");
+  (0, import_node_fs51.writeFileSync)(abs, body, "utf8");
   return PLAN_FILE_REL;
 }
-var import_node_fs50, import_node_path47;
+var import_node_fs51, import_node_path48;
 var init_plan_file = __esm({
   "src/plan/plan-file.ts"() {
     "use strict";
-    import_node_fs50 = require("fs");
-    import_node_path47 = require("path");
+    import_node_fs51 = require("fs");
+    import_node_path48 = require("path");
     init_workspace_scratch();
     init_plan_present();
     init_plan_present();
@@ -20267,13 +20419,13 @@ var init_sync_branch = __esm({
 
 // src/agents/cursor-store.ts
 function cursorSdkStoreDir(threadId) {
-  const root = (0, import_node_path48.join)(appDataDir(), CURSOR_SDK_STORE_DIR);
+  const root = (0, import_node_path49.join)(appDataDir(), CURSOR_SDK_STORE_DIR);
   const id = sanitizeCursorStoreSegment(threadId);
   if (!id) return root;
-  return (0, import_node_path48.join)(root, "threads", id);
+  return (0, import_node_path49.join)(root, "threads", id);
 }
 function cursorSdkRunsNdjsonPath(threadId) {
-  return (0, import_node_path48.join)(cursorSdkStoreDir(threadId), "runs.ndjson");
+  return (0, import_node_path49.join)(cursorSdkStoreDir(threadId), "runs.ndjson");
 }
 function cursorSdkRunsNdjsonSearchPaths(threadId) {
   const scoped = cursorSdkRunsNdjsonPath(threadId);
@@ -20286,11 +20438,11 @@ function cursorSdkRunsNdjsonSearchPaths(threadId) {
 function sanitizeCursorStoreSegment(threadId) {
   return (threadId ?? "").trim().replace(/[^a-zA-Z0-9._-]/g, "_");
 }
-var import_node_path48, CURSOR_SDK_STORE_DIR;
+var import_node_path49, CURSOR_SDK_STORE_DIR;
 var init_cursor_store = __esm({
   "src/agents/cursor-store.ts"() {
     "use strict";
-    import_node_path48 = require("path");
+    import_node_path49 = require("path");
     init_paths();
     CURSOR_SDK_STORE_DIR = "cursor-sdk-store";
   }
@@ -20312,9 +20464,9 @@ function recoverFinishedCursorRun(opts) {
   return best;
 }
 function scanFinishedCursorRuns(runsPath, agentId, startedAfterMs) {
-  if (!(0, import_node_fs51.existsSync)(runsPath)) return null;
+  if (!(0, import_node_fs52.existsSync)(runsPath)) return null;
   try {
-    const lines = (0, import_node_fs51.readFileSync)(runsPath, "utf8").split("\n");
+    const lines = (0, import_node_fs52.readFileSync)(runsPath, "utf8").split("\n");
     let best = null;
     for (const line of lines) {
       const trimmed = line.trim();
@@ -20340,11 +20492,11 @@ function scanFinishedCursorRuns(runsPath, agentId, startedAfterMs) {
     return null;
   }
 }
-var import_node_fs51;
+var import_node_fs52;
 var init_cursor_recover = __esm({
   "src/agents/cursor-recover.ts"() {
     "use strict";
-    import_node_fs51 = require("fs");
+    import_node_fs52 = require("fs");
     init_cursor_store();
   }
 });
@@ -20476,13 +20628,13 @@ async function startOrchestration(opts) {
   }
   return updated;
 }
-var import_node_events, import_node_fs52, LIVE_TURN_SPAWN_GRACE_MS, STALE_AGENT_PID_WAIT_MS, Orchestrator, singleton;
+var import_node_events, import_node_fs53, LIVE_TURN_SPAWN_GRACE_MS, STALE_AGENT_PID_WAIT_MS, Orchestrator, singleton;
 var init_orchestrator = __esm({
   "src/orchestrator/orchestrator.ts"() {
     "use strict";
     import_node_events = require("events");
     init_outbound_watch();
-    import_node_fs52 = require("fs");
+    import_node_fs53 = require("fs");
     init_error_detail();
     init_run();
     init_stale_lock();
@@ -20655,7 +20807,7 @@ var init_orchestrator = __esm({
             }
             continue;
           }
-          if (!(0, import_node_fs52.existsSync)(thread.worktreePath)) {
+          if (!(0, import_node_fs53.existsSync)(thread.worktreePath)) {
             setStatus(thread.id, "broken", "Worktree missing on disk");
             this.emit({ type: "status_changed", threadId: thread.id, status: "broken" });
             continue;
@@ -22330,7 +22482,7 @@ var init_orchestrator = __esm({
             "ask_git targets a worktree agent thread (not the orchestrator). Pass a child/worktree thread ref."
           );
         }
-        if (action === "merge" && !thread.prUrl) {
+        if ((action === "merge" || action === "ready-for-review") && !thread.prUrl) {
           throw new Error(
             "No pull request linked. Ask the worktree agent to open a draft PR first (ask_git create-draft)."
           );
@@ -22546,7 +22698,7 @@ var init_orchestrator = __esm({
           this.emit({ type: "status_changed", threadId: restored2.id, status: restored2.status });
           return restored2;
         }
-        if (!(0, import_node_fs52.existsSync)(thread.worktreePath)) {
+        if (!(0, import_node_fs53.existsSync)(thread.worktreePath)) {
           if (isCowboyThread(thread) || isPrimaryCheckoutThread(thread)) {
             throw new Error(
               `Cowboy checkout missing: ${thread.worktreePath}. Re-add the project folder, then restore.`
@@ -22864,6 +23016,7 @@ __export(index_exports, {
   applyForwardOccupancy: () => applyForwardOccupancy,
   applyGithubGitAuthEnv: () => applyGithubGitAuthEnv,
   applyPromptCacheTtlEnv: () => applyPromptCacheTtlEnv,
+  applySystemCaEnv: () => applySystemCaEnv,
   applyThreadIntoMain: () => applyThreadIntoMain,
   applyTurnUsage: () => applyTurnUsage,
   armSchedules: () => armSchedules,
@@ -23144,6 +23297,7 @@ __export(index_exports, {
   isCloudCoordinatorThread: () => isCloudCoordinatorThread,
   isConductorBundledCli: () => isConductorBundledCli,
   isCowboyThread: () => isCowboyThread,
+  isCursorApiKeyConfigured: () => isCursorApiKeyConfigured,
   isCursorAutoModel: () => isCursorAutoModel,
   isDefaultishSourceRef: () => isDefaultishSourceRef,
   isDesktopHostAlive: () => isDesktopHostAlive,
@@ -23242,6 +23396,7 @@ __export(index_exports, {
   lookupSoccerTeam: () => lookupSoccerTeam,
   mapAbleTimeTask: () => mapAbleTimeTask,
   markPrReady: () => markPrReady,
+  materializeSystemCaBundle: () => materializeSystemCaBundle,
   maxConcurrentAgents: () => maxConcurrentAgents,
   maybeCompactContext: () => maybeCompactContext,
   mcpAllowTools: () => mcpAllowTools,
@@ -23465,6 +23620,7 @@ __export(index_exports, {
   toolDetail: () => toolDetail,
   toolFilePath: () => toolFilePath,
   totalTokens: () => totalTokens,
+  trustSystemCertificates: () => trustSystemCertificates,
   turnCostUsdFromCursorUsage: () => turnCostUsdFromCursorUsage,
   updateAbleTimeTask: () => updateAbleTimeTask,
   updateAdvancedSettings: () => updateAdvancedSettings,
@@ -24831,6 +24987,7 @@ async function installOptionalServiceCli(id) {
 
 // src/index.ts
 init_fetch();
+init_system_ca();
 init_agents();
 init_spawn();
 init_message_parts();
@@ -25176,7 +25333,7 @@ var import_mcp = require("@modelcontextprotocol/sdk/server/mcp.js");
 var import_stdio = require("@modelcontextprotocol/sdk/server/stdio.js");
 var import_zod8 = require("zod");
 var import_node_crypto13 = require("crypto");
-var import_node_path51 = require("path");
+var import_node_path52 = require("path");
 init_orchestrator();
 init_worktree();
 init_global_workspace();
@@ -26760,27 +26917,27 @@ init_gh_errors();
 init_git_auth_mode();
 
 // src/board/load-home-board.ts
-var import_node_fs54 = require("fs");
-var import_node_path50 = require("path");
+var import_node_fs55 = require("fs");
+var import_node_path51 = require("path");
 init_worktree();
 init_paths();
 
 // src/board/board-pins.ts
 var import_node_crypto12 = require("crypto");
-var import_node_fs53 = require("fs");
-var import_node_path49 = require("path");
+var import_node_fs54 = require("fs");
+var import_node_path50 = require("path");
 init_paths();
 init_home_board();
 var FILE = "home-board-pins.json";
 var VERSION = 1;
 function pinsFile() {
-  return (0, import_node_path49.join)(appDataDir(), FILE);
+  return (0, import_node_path50.join)(appDataDir(), FILE);
 }
 function readDisk() {
   const path2 = pinsFile();
-  if (!(0, import_node_fs53.existsSync)(path2)) return [];
+  if (!(0, import_node_fs54.existsSync)(path2)) return [];
   try {
-    const raw = JSON.parse((0, import_node_fs53.readFileSync)(path2, "utf8"));
+    const raw = JSON.parse((0, import_node_fs54.readFileSync)(path2, "utf8"));
     if (raw?.version !== VERSION || !Array.isArray(raw.items)) return [];
     return raw.items.filter((item) => item?.id && item.kind && item.ref);
   } catch {
@@ -26788,8 +26945,8 @@ function readDisk() {
   }
 }
 function writeDisk(items) {
-  (0, import_node_fs53.mkdirSync)(appDataDir(), { recursive: true });
-  (0, import_node_fs53.writeFileSync)(pinsFile(), JSON.stringify({ version: VERSION, items }, null, 2), "utf8");
+  (0, import_node_fs54.mkdirSync)(appDataDir(), { recursive: true });
+  (0, import_node_fs54.writeFileSync)(pinsFile(), JSON.stringify({ version: VERSION, items }, null, 2), "utf8");
 }
 function listBoardPins() {
   return readDisk();
@@ -26841,7 +26998,7 @@ function replaceBoardPins(items) {
 }
 function clearBoardPins() {
   try {
-    (0, import_node_fs53.unlinkSync)(pinsFile());
+    (0, import_node_fs54.unlinkSync)(pinsFile());
   } catch {
   }
 }
@@ -26858,7 +27015,7 @@ function homeBoardWorkspaceKey(workspaces) {
   return workspaces.map((w) => w.path).filter(Boolean).sort().join("\n");
 }
 function cacheFile() {
-  return (0, import_node_path50.join)(appDataDir(), "home-board-cache.json");
+  return (0, import_node_path51.join)(appDataDir(), "home-board-cache.json");
 }
 function emptyInputs() {
   return {
@@ -26884,9 +27041,9 @@ function shouldCacheHomeBoardInputs(inputs) {
 }
 function readDiskCache() {
   const path2 = cacheFile();
-  if (!(0, import_node_fs54.existsSync)(path2)) return null;
+  if (!(0, import_node_fs55.existsSync)(path2)) return null;
   try {
-    const raw = JSON.parse((0, import_node_fs54.readFileSync)(path2, "utf8"));
+    const raw = JSON.parse((0, import_node_fs55.readFileSync)(path2, "utf8"));
     if (raw?.version !== CACHE_VERSION || typeof raw.fetchedAt !== "number") {
       return null;
     }
@@ -26900,14 +27057,14 @@ function readDiskCache() {
 }
 function writeDiskCache(entry) {
   try {
-    (0, import_node_fs54.mkdirSync)(appDataDir(), { recursive: true });
-    (0, import_node_fs54.writeFileSync)(cacheFile(), JSON.stringify(entry), "utf8");
+    (0, import_node_fs55.mkdirSync)(appDataDir(), { recursive: true });
+    (0, import_node_fs55.writeFileSync)(cacheFile(), JSON.stringify(entry), "utf8");
   } catch {
   }
 }
 function deleteDiskCache() {
   try {
-    (0, import_node_fs54.unlinkSync)(cacheFile());
+    (0, import_node_fs55.unlinkSync)(cacheFile());
   } catch {
   }
 }
@@ -27043,6 +27200,54 @@ async function getHomeBoardInputs(workspaces, opts) {
 
 // src/mcp/server.ts
 init_home_board();
+
+// src/mcp/create-thread-agent.ts
+init_cursor();
+function resolveOrchCreateThreadOptions(input) {
+  const { resolveNewThreadOptions: resolveNewThreadOptions2 } = input;
+  const account = resolveNewThreadOptions2({});
+  const requested = input.requestedAgent;
+  const parent = input.parentAgent ?? void 0;
+  const cursorReady = input.cursorReady ?? isCursorApiKeyConfigured();
+  let agent = account.agent;
+  let ignoredAgent;
+  let honorRequestedModel = false;
+  if (requested) {
+    const parentEcho = Boolean(parent) && requested === parent && requested !== account.agent;
+    const cursorAutofill = requested === "cursor" && account.agent !== "cursor";
+    if (parentEcho || cursorAutofill) {
+      ignoredAgent = requested;
+    } else {
+      agent = requested;
+      honorRequestedModel = input.requestedModel !== void 0;
+    }
+  }
+  let coercedFrom;
+  if (agent === "codex" && parent === "codex" && cursorReady) {
+    coercedFrom = requested ?? "codex";
+    agent = "cursor";
+  }
+  const opts = resolveNewThreadOptions2({
+    agent,
+    model: honorRequestedModel ? input.requestedModel : void 0
+  });
+  return {
+    ...opts,
+    ...ignoredAgent ? { ignoredAgent } : {},
+    ...coercedFrom ? { coercedFrom } : {}
+  };
+}
+function orchCreateThreadAgentNote(input) {
+  if (input.coercedFrom) {
+    return `Avoid nested Codex under a Codex orchestrator \u2014 used agent=${input.agent}`;
+  }
+  if (input.ignoredAgent) {
+    return `Ignored agent=${input.ignoredAgent} \u2014 used Account default agent=${input.agent}`;
+  }
+  return void 0;
+}
+
+// src/mcp/server.ts
 var MAX_ORCH_THREADS = 5;
 var CREATE_THREAD_TIMEOUT_MS = 9e4;
 function withTimeout(promise, ms, label) {
@@ -27090,18 +27295,13 @@ async function createOrchChildThread(orch, args, resolveNewThreadOptions2) {
       };
     }
   }
-  let agentArg = args.agent;
-  let agentCoercedFrom;
-  const resolvedProbe = resolveNewThreadOptions2({ agent: agentArg }).agent;
-  if (resolvedProbe === "codex") {
-    agentCoercedFrom = agentArg ?? "codex";
-    const accountAgent = resolveNewThreadOptions2({}).agent;
-    agentArg = accountAgent !== "codex" ? accountAgent : "cursor";
-  }
-  const opts = resolveNewThreadOptions2({
-    agent: agentArg,
-    model: args.model
+  const opts = resolveOrchCreateThreadOptions({
+    requestedAgent: args.agent,
+    requestedModel: args.model,
+    parentAgent: parent?.agent,
+    resolveNewThreadOptions: resolveNewThreadOptions2
   });
+  const agentNote = orchCreateThreadAgentNote(opts);
   try {
     const priorIds = new Set(orch.getThreads(false).map((t) => t.id));
     const thread = await withTimeout(
@@ -27137,10 +27337,9 @@ async function createOrchChildThread(orch, args, resolveNewThreadOptions2) {
         link: `sideboard://thread/${thread.id}`,
         parentThreadId: thread.parentThreadId,
         ...alreadyStarted ? { alreadyStarted: true } : {},
-        ...agentCoercedFrom ? {
-          agentCoercedFrom,
-          note: `Avoid nested Codex under a Codex orchestrator \u2014 used Account default agent=${thread.agent}`
-        } : {},
+        ...opts.coercedFrom ? { agentCoercedFrom: opts.coercedFrom } : {},
+        ...opts.ignoredAgent ? { agentIgnored: opts.ignoredAgent } : {},
+        ...agentNote ? { note: agentNote } : {},
         ...parentCorrectedFrom ? { parentCorrectedFrom, parentNote } : {}
       })
     };
@@ -27215,7 +27414,7 @@ async function startMcpServer() {
       async () => {
         const threads = orch.getThreads(true);
         const lines = threads.map((t) => {
-          const repo = t.repoPath === GLOBAL_WORKSPACE_ID ? "Orchestration" : (0, import_node_path51.basename)(t.repoPath) || t.repoPath;
+          const repo = t.repoPath === GLOBAL_WORKSPACE_ID ? "Orchestration" : (0, import_node_path52.basename)(t.repoPath) || t.repoPath;
           const live = orch.threadLooksLive(t) ? readTurnLive(t.id) : null;
           const parent = t.parentThreadId ? `  parent:${t.parentThreadId.slice(0, 8)}` : "";
           const preview = lastMessagePreview(t.messages, 80);
@@ -27500,11 +27699,13 @@ async function startMcpServer() {
     );
     server.tool(
       "create_thread",
-      `Create a worktree thread (chat) from branch, pr, or ticket. A ticket, PR, or named branch may have only one live worktree \u2014 if one already matches, returns it (alreadyStarted=true) instead of a second checkout. Creating from the default branch still opens a new isolated worktree. Pass repoPath from list_workspaces. cowboy=true uses the project folder on the default branch (no isolated worktree; land is commit+push). From an orchestration chat, omit parentThreadId (Sideboard binds the child to this chat) or pass the exact id from the turn reminder \u2014 never invent a uuid. Prefer omitting agent/model so Sideboard applies ${accountDefaultsHint}. Setup (settings.toml, .cursor/worktrees.json, or script/setup) runs in the background in parallel with the first turn (skipped for cowboy). Then use send_to_thread to chat.`,
+      `Create a worktree thread (chat) from branch, pr, or ticket. A ticket, PR, or named branch may have only one live worktree \u2014 if one already matches, returns it (alreadyStarted=true) instead of a second checkout. Creating from the default branch still opens a new isolated worktree. Pass repoPath from list_workspaces. cowboy=true uses the project folder on the default branch (no isolated worktree; land is commit+push). From an orchestration chat, omit parentThreadId (Sideboard binds the child to this chat) or pass the exact id from the turn reminder \u2014 never invent a uuid. Omit agent/model \u2014 Sideboard applies ${accountDefaultsHint}. Do not pass your own agent or agent=cursor; those are ignored. Setup (settings.toml, .cursor/worktrees.json, or script/setup) runs in the background in parallel with the first turn (skipped for cowboy). Then use send_to_thread to chat.`,
       {
         sourceType: import_zod8.z.enum(["branch", "pr", "ticket"]),
         sourceRef: import_zod8.z.string(),
-        agent: import_zod8.z.enum(["claude", "codex", "opencode", "brightsy", "cursor"]).optional().describe(`Omit to use Account default agent (${accountDefaults.agent})`),
+        agent: import_zod8.z.enum(["claude", "codex", "opencode", "brightsy", "cursor"]).optional().describe(
+          `Usually omit. Sideboard uses Account default agent (${accountDefaults.agent}). Passing your own agent or cursor is ignored.`
+        ),
         model: import_zod8.z.string().nullable().optional().describe(
           `Usually omit to use Account default model (${accountDefaults.model?.trim() || "Auto"}). Pass null only to force Auto / agent-default.`
         ),
@@ -27808,11 +28009,11 @@ async function startMcpServer() {
     );
     server.tool(
       "ask_git",
-      "Commit & push, open a draft PR, resolve conflicts, or merge \u2014 same actions as the desktop git buttons. When the worktree is clean, Sideboard pushes / opens the PR itself (HTTPS via `gh` even when origin is SSH / Settings \u2192 Git is SSH). When dirty, queues the worktree agent to commit; then wait_for_turn (loop while stillRunning). Do not start a checks loop on a plain push \u2014 only if the user gave a goal (Greptile 5/5, CI green). Pass a worktree thread ref (not the orchestrator). action=merge only when the user explicitly asked to merge that PR. Do not run git or gh from the orchestration cwd. If this tool errors that the GraphQL/PR body is too long, the branch is already pushed \u2014 have the worktree agent retry `gh pr create --body-file` with a short description (GitHub limit 65,536 characters). Do not invent SSH/auth failures from that error.",
+      "Commit & push, open a draft PR, mark ready for review, resolve conflicts, or merge \u2014 same actions as the desktop git buttons. When the worktree is clean, Sideboard pushes / opens the PR itself (HTTPS via `gh` even when origin is SSH / Settings \u2192 Git is SSH). When dirty, queues the worktree agent to commit; then wait_for_turn (loop while stillRunning). Do not start a checks loop on a plain push \u2014 only if the user gave a goal (Greptile 5/5, CI green). Pass a worktree thread ref (not the orchestrator). action=ready-for-review and action=merge only when the user explicitly asked (or clicked the desktop button). Do not run git or gh from the orchestration cwd. If this tool errors that the GraphQL/PR body is too long, the branch is already pushed \u2014 have the worktree agent retry `gh pr create --body-file` with a short description (GitHub limit 65,536 characters). Do not invent SSH/auth failures from that error.",
       {
         ref: import_zod8.z.string().describe("Worktree thread id/ref"),
         action: import_zod8.z.enum(AGENT_GIT_ACTIONS).describe(
-          "commit-push | create-draft | create-web | resolve-conflicts | merge"
+          "commit-push | create-draft | create-web | resolve-conflicts | ready-for-review | merge"
         )
       },
       async ({ ref, action }) => {
@@ -30175,9 +30376,9 @@ var import_node_http3 = require("http");
 var import_ws3 = require("ws");
 
 // src/slack/relay-static.ts
-var import_node_fs55 = require("fs");
+var import_node_fs56 = require("fs");
 var import_promises = require("fs/promises");
-var import_node_path52 = __toESM(require("path"), 1);
+var import_node_path53 = __toESM(require("path"), 1);
 var TYPES = {
   ".css": "text/css; charset=utf-8",
   ".html": "text/html; charset=utf-8",
@@ -30208,9 +30409,9 @@ function resolveStaticPath(root, requestUrl) {
     return null;
   }
   if (!pathname.startsWith("/") || pathname.includes("\0")) return null;
-  const rootResolved = import_node_path52.default.resolve(root);
-  const candidate = import_node_path52.default.resolve(rootResolved, `.${pathname}`);
-  if (candidate !== rootResolved && !candidate.startsWith(rootResolved + import_node_path52.default.sep)) {
+  const rootResolved = import_node_path53.default.resolve(root);
+  const candidate = import_node_path53.default.resolve(rootResolved, `.${pathname}`);
+  if (candidate !== rootResolved && !candidate.startsWith(rootResolved + import_node_path53.default.sep)) {
     return null;
   }
   return candidate;
@@ -30224,7 +30425,7 @@ async function fileSize(file) {
   }
 }
 function sendFile(req, res, file, size) {
-  const ext = import_node_path52.default.extname(file).toLowerCase();
+  const ext = import_node_path53.default.extname(file).toLowerCase();
   res.writeHead(200, {
     "Content-Type": TYPES[ext] ?? "application/octet-stream",
     "Content-Length": size,
@@ -30234,7 +30435,7 @@ function sendFile(req, res, file, size) {
     res.end();
     return true;
   }
-  (0, import_node_fs55.createReadStream)(file).pipe(res);
+  (0, import_node_fs56.createReadStream)(file).pipe(res);
   return true;
 }
 async function tryServeStatic(req, res, root) {
@@ -30243,7 +30444,7 @@ async function tryServeStatic(req, res, root) {
   if (!candidate) return false;
   const direct = await fileSize(candidate);
   if (direct != null) return sendFile(req, res, candidate, direct);
-  const asIndex = import_node_path52.default.join(candidate, "index.html");
+  const asIndex = import_node_path53.default.join(candidate, "index.html");
   const indexSize = await fileSize(asIndex);
   if (indexSize != null) return sendFile(req, res, asIndex, indexSize);
   return false;
@@ -30593,6 +30794,7 @@ init_outbound_watch();
   applyForwardOccupancy,
   applyGithubGitAuthEnv,
   applyPromptCacheTtlEnv,
+  applySystemCaEnv,
   applyThreadIntoMain,
   applyTurnUsage,
   armSchedules,
@@ -30873,6 +31075,7 @@ init_outbound_watch();
   isCloudCoordinatorThread,
   isConductorBundledCli,
   isCowboyThread,
+  isCursorApiKeyConfigured,
   isCursorAutoModel,
   isDefaultishSourceRef,
   isDesktopHostAlive,
@@ -30971,6 +31174,7 @@ init_outbound_watch();
   lookupSoccerTeam,
   mapAbleTimeTask,
   markPrReady,
+  materializeSystemCaBundle,
   maxConcurrentAgents,
   maybeCompactContext,
   mcpAllowTools,
@@ -31194,6 +31398,7 @@ init_outbound_watch();
   toolDetail,
   toolFilePath,
   totalTokens,
+  trustSystemCertificates,
   turnCostUsdFromCursorUsage,
   updateAbleTimeTask,
   updateAdvancedSettings,