@sideboard-ai/core 0.1.174 → 0.1.176

package/dist/index.js

@@ -237,7 +237,7 @@ import {
   worktreeCleanupSettings,
   wrapReviewSkillMarkdown,
   writeWorktreeFile
-} from "./chunk-HJPGIETB.js";
+} from "./chunk-4ELBAYFW.js";
 import {
   LEGACY_PLAN_FILE_REL,
   PLAN_FILE_NAME,
@@ -285,6 +285,7 @@ import {
   installNpmGlobalPackage,
   isBrightsyConnected,
   isBrightsyNdjsonLine,
+  isCursorApiKeyConfigured,
   isCursorAutoModel,
   isInjectedOrchMcpName,
   isInternalAgentStatusText,
@@ -342,7 +343,7 @@ import {
   withEventParentId,
   withEventsParentId,
   writeInjectedMcpConfig
-} from "./chunk-CUA4S537.js";
+} from "./chunk-NIB6BTC6.js";
 import {
   CLOUD_COORDINATOR_BUSY_REPLY,
   CLOUD_COORDINATOR_STOPPED_REPLY,
@@ -385,7 +386,7 @@ import {
   stageBuffersAsAttachments,
   syncWorkspacesFromThreads,
   takenTeamSlugsForOrchestration
-} from "./chunk-ZY7K4T37.js";
+} from "./chunk-3ZFGZ7RT.js";
 import {
   FAMOUS_SOCCER_TEAMS,
   GITHUB_PR_BODY_MAX_CHARS,
@@ -501,7 +502,7 @@ import {
   listBrightsyAccounts,
   listConnectedBrightsyTeams,
   switchBrightsyAccount
-} from "./chunk-XD2BAANL.js";
+} from "./chunk-IEEAVWAP.js";
 import {
   brightsyAccessTokenNeedsRefresh,
   brightsyConfigPath,
@@ -509,7 +510,7 @@ import {
   loadBrightsyConfig,
   refreshBrightsyAccessToken,
   saveBrightsyConfig
-} from "./chunk-M267JPEA.js";
+} from "./chunk-AN3THU7F.js";
 import {
   ABLETIME_MCP_PATH,
   DEFAULT_ABLETIME_HOST,
@@ -533,22 +534,25 @@ import {
   toAbleTimeIssueInfo,
   updateAbleTimeTask,
   verifyAbleTimeConnection
-} from "./chunk-CMJ2FBBV.js";
+} from "./chunk-RE2YWFUQ.js";
 import {
   formatFetchError,
   httpFetch,
   setHttpFetchImpl
-} from "./chunk-ELBYOGVA.js";
+} from "./chunk-N7WZ6NIN.js";
 import "./chunk-AXQ4ZWHK.js";
 import {
   AGENT_RUNNER_MAX_OLD_SPACE_MB,
   applyAgentRunnerHeapEnv,
+  applySystemCaEnv,
   cursorSdkMessageToEvents,
+  materializeSystemCaBundle,
   parseCursorRunnerLine,
   preferredCursorCostCents,
+  trustSystemCertificates,
   turnCostUsdFromCursorUsage,
   withMaxOldSpaceSize
-} from "./chunk-XXIH6XYR.js";
+} from "./chunk-NQTKRAUF.js";
 import {
   FOLLOW_UP_BEHAVIORS,
   GITHUB_GIT_AUTH_MODES,
@@ -4121,6 +4125,51 @@ async function getHomeBoardInputs(workspaces, opts) {
   }
 }
 
+// src/mcp/create-thread-agent.ts
+function resolveOrchCreateThreadOptions(input) {
+  const { resolveNewThreadOptions: resolveNewThreadOptions2 } = input;
+  const account = resolveNewThreadOptions2({});
+  const requested = input.requestedAgent;
+  const parent = input.parentAgent ?? void 0;
+  const cursorReady = input.cursorReady ?? isCursorApiKeyConfigured();
+  let agent = account.agent;
+  let ignoredAgent;
+  let honorRequestedModel = false;
+  if (requested) {
+    const parentEcho = Boolean(parent) && requested === parent && requested !== account.agent;
+    const cursorAutofill = requested === "cursor" && account.agent !== "cursor";
+    if (parentEcho || cursorAutofill) {
+      ignoredAgent = requested;
+    } else {
+      agent = requested;
+      honorRequestedModel = input.requestedModel !== void 0;
+    }
+  }
+  let coercedFrom;
+  if (agent === "codex" && parent === "codex" && cursorReady) {
+    coercedFrom = requested ?? "codex";
+    agent = "cursor";
+  }
+  const opts = resolveNewThreadOptions2({
+    agent,
+    model: honorRequestedModel ? input.requestedModel : void 0
+  });
+  return {
+    ...opts,
+    ...ignoredAgent ? { ignoredAgent } : {},
+    ...coercedFrom ? { coercedFrom } : {}
+  };
+}
+function orchCreateThreadAgentNote(input) {
+  if (input.coercedFrom) {
+    return `Avoid nested Codex under a Codex orchestrator \u2014 used agent=${input.agent}`;
+  }
+  if (input.ignoredAgent) {
+    return `Ignored agent=${input.ignoredAgent} \u2014 used Account default agent=${input.agent}`;
+  }
+  return void 0;
+}
+
 // src/mcp/server.ts
 var MAX_ORCH_THREADS = 5;
 var CREATE_THREAD_TIMEOUT_MS = 9e4;
@@ -4169,18 +4218,13 @@ async function createOrchChildThread(orch, args, resolveNewThreadOptions2) {
       };
     }
   }
-  let agentArg = args.agent;
-  let agentCoercedFrom;
-  const resolvedProbe = resolveNewThreadOptions2({ agent: agentArg }).agent;
-  if (resolvedProbe === "codex") {
-    agentCoercedFrom = agentArg ?? "codex";
-    const accountAgent = resolveNewThreadOptions2({}).agent;
-    agentArg = accountAgent !== "codex" ? accountAgent : "cursor";
-  }
-  const opts = resolveNewThreadOptions2({
-    agent: agentArg,
-    model: args.model
+  const opts = resolveOrchCreateThreadOptions({
+    requestedAgent: args.agent,
+    requestedModel: args.model,
+    parentAgent: parent?.agent,
+    resolveNewThreadOptions: resolveNewThreadOptions2
   });
+  const agentNote = orchCreateThreadAgentNote(opts);
   try {
     const priorIds = new Set(orch.getThreads(false).map((t) => t.id));
     const thread = await withTimeout(
@@ -4216,10 +4260,9 @@ async function createOrchChildThread(orch, args, resolveNewThreadOptions2) {
         link: `sideboard://thread/${thread.id}`,
         parentThreadId: thread.parentThreadId,
         ...alreadyStarted ? { alreadyStarted: true } : {},
-        ...agentCoercedFrom ? {
-          agentCoercedFrom,
-          note: `Avoid nested Codex under a Codex orchestrator \u2014 used Account default agent=${thread.agent}`
-        } : {},
+        ...opts.coercedFrom ? { agentCoercedFrom: opts.coercedFrom } : {},
+        ...opts.ignoredAgent ? { agentIgnored: opts.ignoredAgent } : {},
+        ...agentNote ? { note: agentNote } : {},
         ...parentCorrectedFrom ? { parentCorrectedFrom, parentNote } : {}
       })
     };
@@ -4579,11 +4622,13 @@ async function startMcpServer() {
     );
     server.tool(
       "create_thread",
-      `Create a worktree thread (chat) from branch, pr, or ticket. A ticket, PR, or named branch may have only one live worktree \u2014 if one already matches, returns it (alreadyStarted=true) instead of a second checkout. Creating from the default branch still opens a new isolated worktree. Pass repoPath from list_workspaces. cowboy=true uses the project folder on the default branch (no isolated worktree; land is commit+push). From an orchestration chat, omit parentThreadId (Sideboard binds the child to this chat) or pass the exact id from the turn reminder \u2014 never invent a uuid. Prefer omitting agent/model so Sideboard applies ${accountDefaultsHint}. Setup (settings.toml, .cursor/worktrees.json, or script/setup) runs in the background in parallel with the first turn (skipped for cowboy). Then use send_to_thread to chat.`,
+      `Create a worktree thread (chat) from branch, pr, or ticket. A ticket, PR, or named branch may have only one live worktree \u2014 if one already matches, returns it (alreadyStarted=true) instead of a second checkout. Creating from the default branch still opens a new isolated worktree. Pass repoPath from list_workspaces. cowboy=true uses the project folder on the default branch (no isolated worktree; land is commit+push). From an orchestration chat, omit parentThreadId (Sideboard binds the child to this chat) or pass the exact id from the turn reminder \u2014 never invent a uuid. Omit agent/model \u2014 Sideboard applies ${accountDefaultsHint}. Do not pass your own agent or agent=cursor; those are ignored. Setup (settings.toml, .cursor/worktrees.json, or script/setup) runs in the background in parallel with the first turn (skipped for cowboy). Then use send_to_thread to chat.`,
       {
         sourceType: z8.enum(["branch", "pr", "ticket"]),
         sourceRef: z8.string(),
-        agent: z8.enum(["claude", "codex", "opencode", "brightsy", "cursor"]).optional().describe(`Omit to use Account default agent (${accountDefaults.agent})`),
+        agent: z8.enum(["claude", "codex", "opencode", "brightsy", "cursor"]).optional().describe(
+          `Usually omit. Sideboard uses Account default agent (${accountDefaults.agent}). Passing your own agent or cursor is ignored.`
+        ),
         model: z8.string().nullable().optional().describe(
           `Usually omit to use Account default model (${accountDefaults.model?.trim() || "Auto"}). Pass null only to force Auto / agent-default.`
         ),
@@ -4887,11 +4932,11 @@ async function startMcpServer() {
     );
     server.tool(
       "ask_git",
-      "Commit & push, open a draft PR, resolve conflicts, or merge \u2014 same actions as the desktop git buttons. When the worktree is clean, Sideboard pushes / opens the PR itself (HTTPS via `gh` even when origin is SSH / Settings \u2192 Git is SSH). When dirty, queues the worktree agent to commit; then wait_for_turn (loop while stillRunning). Do not start a checks loop on a plain push \u2014 only if the user gave a goal (Greptile 5/5, CI green). Pass a worktree thread ref (not the orchestrator). action=merge only when the user explicitly asked to merge that PR. Do not run git or gh from the orchestration cwd. If this tool errors that the GraphQL/PR body is too long, the branch is already pushed \u2014 have the worktree agent retry `gh pr create --body-file` with a short description (GitHub limit 65,536 characters). Do not invent SSH/auth failures from that error.",
+      "Commit & push, open a draft PR, mark ready for review, resolve conflicts, or merge \u2014 same actions as the desktop git buttons. When the worktree is clean, Sideboard pushes / opens the PR itself (HTTPS via `gh` even when origin is SSH / Settings \u2192 Git is SSH). When dirty, queues the worktree agent to commit; then wait_for_turn (loop while stillRunning). Do not start a checks loop on a plain push \u2014 only if the user gave a goal (Greptile 5/5, CI green). Pass a worktree thread ref (not the orchestrator). action=ready-for-review and action=merge only when the user explicitly asked (or clicked the desktop button). Do not run git or gh from the orchestration cwd. If this tool errors that the GraphQL/PR body is too long, the branch is already pushed \u2014 have the worktree agent retry `gh pr create --body-file` with a short description (GitHub limit 65,536 characters). Do not invent SSH/auth failures from that error.",
       {
         ref: z8.string().describe("Worktree thread id/ref"),
         action: z8.enum(AGENT_GIT_ACTIONS).describe(
-          "commit-push | create-draft | create-web | resolve-conflicts | merge"
+          "commit-push | create-draft | create-web | resolve-conflicts | ready-for-review | merge"
         )
       },
       async ({ ref, action }) => {
@@ -7626,6 +7671,7 @@ export {
   applyForwardOccupancy,
   applyGithubGitAuthEnv,
   applyPromptCacheTtlEnv,
+  applySystemCaEnv,
   applyThreadIntoMain,
   applyTurnUsage,
   armSchedules,
@@ -7906,6 +7952,7 @@ export {
   isCloudCoordinatorThread,
   isConductorBundledCli,
   isCowboyThread,
+  isCursorApiKeyConfigured,
   isCursorAutoModel,
   isDefaultishSourceRef,
   isDesktopHostAlive,
@@ -8004,6 +8051,7 @@ export {
   lookupSoccerTeam,
   mapAbleTimeTask,
   markPrReady,
+  materializeSystemCaBundle,
   maxConcurrentAgents,
   maybeCompactContext,
   mcpAllowTools,
@@ -8227,6 +8275,7 @@ export {
   toolDetail,
   toolFilePath,
   totalTokens,
+  trustSystemCertificates,
   turnCostUsdFromCursorUsage,
   updateAbleTimeTask,
   updateAdvancedSettings,