@sideboard-ai/core 0.1.174 → 0.1.176

package/dist/mcp/run-stdio.js

@@ -37,14 +37,18 @@ import {
   syncBoardPins,
   updateSchedule,
   waitForDetachedJob
-} from "../chunk-YEPVWJ3R.js";
+} from "../chunk-JUA7XEXR.js";
 import {
+  applySystemCaEnv,
+  isCursorApiKeyConfigured,
   isInternalAgentStatusText,
   listModelsForAgent,
-  sideboardMcpProfile
-} from "../chunk-TPPZXZTA.js";
-import "../chunk-LZ6QMEQC.js";
-import "../chunk-S42XV45P.js";
+  materializeSystemCaBundle,
+  sideboardMcpProfile,
+  trustSystemCertificates
+} from "../chunk-W44EKPIR.js";
+import "../chunk-HVIEYTUK.js";
+import "../chunk-Y4MIXGPA.js";
 import {
   commentAbleTimeTask,
   createAbleTimeTask,
@@ -57,17 +61,17 @@ import {
   searchAbleTimeTasks,
   toAbleTimeIssueInfo,
   updateAbleTimeTask
-} from "../chunk-AQPVBVJE.js";
+} from "../chunk-BBNUL4IE.js";
 import {
   httpFetch
-} from "../chunk-6GN5WPYZ.js";
+} from "../chunk-VKQGAWHY.js";
 import "../chunk-JFOPOMK7.js";
 import "../chunk-OCQPTUR7.js";
 import {
   GLOBAL_WORKSPACE_ID,
   isCloudCoordinatorThread,
   listWorkspaces
-} from "../chunk-VCVBICMZ.js";
+} from "../chunk-FJWQCZ74.js";
 import {
   canonicalizeRepoPath,
   formatGhLandError,
@@ -2863,6 +2867,51 @@ async function getHomeBoardInputs(workspaces, opts) {
   }
 }
 
+// src/mcp/create-thread-agent.ts
+function resolveOrchCreateThreadOptions(input) {
+  const { resolveNewThreadOptions } = input;
+  const account = resolveNewThreadOptions({});
+  const requested = input.requestedAgent;
+  const parent = input.parentAgent ?? void 0;
+  const cursorReady = input.cursorReady ?? isCursorApiKeyConfigured();
+  let agent = account.agent;
+  let ignoredAgent;
+  let honorRequestedModel = false;
+  if (requested) {
+    const parentEcho = Boolean(parent) && requested === parent && requested !== account.agent;
+    const cursorAutofill = requested === "cursor" && account.agent !== "cursor";
+    if (parentEcho || cursorAutofill) {
+      ignoredAgent = requested;
+    } else {
+      agent = requested;
+      honorRequestedModel = input.requestedModel !== void 0;
+    }
+  }
+  let coercedFrom;
+  if (agent === "codex" && parent === "codex" && cursorReady) {
+    coercedFrom = requested ?? "codex";
+    agent = "cursor";
+  }
+  const opts = resolveNewThreadOptions({
+    agent,
+    model: honorRequestedModel ? input.requestedModel : void 0
+  });
+  return {
+    ...opts,
+    ...ignoredAgent ? { ignoredAgent } : {},
+    ...coercedFrom ? { coercedFrom } : {}
+  };
+}
+function orchCreateThreadAgentNote(input) {
+  if (input.coercedFrom) {
+    return `Avoid nested Codex under a Codex orchestrator \u2014 used agent=${input.agent}`;
+  }
+  if (input.ignoredAgent) {
+    return `Ignored agent=${input.ignoredAgent} \u2014 used Account default agent=${input.agent}`;
+  }
+  return void 0;
+}
+
 // src/mcp/server.ts
 var MAX_ORCH_THREADS = 5;
 var CREATE_THREAD_TIMEOUT_MS = 9e4;
@@ -2911,18 +2960,13 @@ async function createOrchChildThread(orch, args, resolveNewThreadOptions) {
       };
     }
   }
-  let agentArg = args.agent;
-  let agentCoercedFrom;
-  const resolvedProbe = resolveNewThreadOptions({ agent: agentArg }).agent;
-  if (resolvedProbe === "codex") {
-    agentCoercedFrom = agentArg ?? "codex";
-    const accountAgent = resolveNewThreadOptions({}).agent;
-    agentArg = accountAgent !== "codex" ? accountAgent : "cursor";
-  }
-  const opts = resolveNewThreadOptions({
-    agent: agentArg,
-    model: args.model
+  const opts = resolveOrchCreateThreadOptions({
+    requestedAgent: args.agent,
+    requestedModel: args.model,
+    parentAgent: parent?.agent,
+    resolveNewThreadOptions
   });
+  const agentNote = orchCreateThreadAgentNote(opts);
   try {
     const priorIds = new Set(orch.getThreads(false).map((t) => t.id));
     const thread = await withTimeout(
@@ -2958,10 +3002,9 @@ async function createOrchChildThread(orch, args, resolveNewThreadOptions) {
         link: `sideboard://thread/${thread.id}`,
         parentThreadId: thread.parentThreadId,
         ...alreadyStarted ? { alreadyStarted: true } : {},
-        ...agentCoercedFrom ? {
-          agentCoercedFrom,
-          note: `Avoid nested Codex under a Codex orchestrator \u2014 used Account default agent=${thread.agent}`
-        } : {},
+        ...opts.coercedFrom ? { agentCoercedFrom: opts.coercedFrom } : {},
+        ...opts.ignoredAgent ? { agentIgnored: opts.ignoredAgent } : {},
+        ...agentNote ? { note: agentNote } : {},
         ...parentCorrectedFrom ? { parentCorrectedFrom, parentNote } : {}
       })
     };
@@ -3321,11 +3364,13 @@ async function startMcpServer() {
     );
     server.tool(
       "create_thread",
-      `Create a worktree thread (chat) from branch, pr, or ticket. A ticket, PR, or named branch may have only one live worktree \u2014 if one already matches, returns it (alreadyStarted=true) instead of a second checkout. Creating from the default branch still opens a new isolated worktree. Pass repoPath from list_workspaces. cowboy=true uses the project folder on the default branch (no isolated worktree; land is commit+push). From an orchestration chat, omit parentThreadId (Sideboard binds the child to this chat) or pass the exact id from the turn reminder \u2014 never invent a uuid. Prefer omitting agent/model so Sideboard applies ${accountDefaultsHint}. Setup (settings.toml, .cursor/worktrees.json, or script/setup) runs in the background in parallel with the first turn (skipped for cowboy). Then use send_to_thread to chat.`,
+      `Create a worktree thread (chat) from branch, pr, or ticket. A ticket, PR, or named branch may have only one live worktree \u2014 if one already matches, returns it (alreadyStarted=true) instead of a second checkout. Creating from the default branch still opens a new isolated worktree. Pass repoPath from list_workspaces. cowboy=true uses the project folder on the default branch (no isolated worktree; land is commit+push). From an orchestration chat, omit parentThreadId (Sideboard binds the child to this chat) or pass the exact id from the turn reminder \u2014 never invent a uuid. Omit agent/model \u2014 Sideboard applies ${accountDefaultsHint}. Do not pass your own agent or agent=cursor; those are ignored. Setup (settings.toml, .cursor/worktrees.json, or script/setup) runs in the background in parallel with the first turn (skipped for cowboy). Then use send_to_thread to chat.`,
       {
         sourceType: z8.enum(["branch", "pr", "ticket"]),
         sourceRef: z8.string(),
-        agent: z8.enum(["claude", "codex", "opencode", "brightsy", "cursor"]).optional().describe(`Omit to use Account default agent (${accountDefaults.agent})`),
+        agent: z8.enum(["claude", "codex", "opencode", "brightsy", "cursor"]).optional().describe(
+          `Usually omit. Sideboard uses Account default agent (${accountDefaults.agent}). Passing your own agent or cursor is ignored.`
+        ),
         model: z8.string().nullable().optional().describe(
           `Usually omit to use Account default model (${accountDefaults.model?.trim() || "Auto"}). Pass null only to force Auto / agent-default.`
         ),
@@ -3629,11 +3674,11 @@ async function startMcpServer() {
     );
     server.tool(
       "ask_git",
-      "Commit & push, open a draft PR, resolve conflicts, or merge \u2014 same actions as the desktop git buttons. When the worktree is clean, Sideboard pushes / opens the PR itself (HTTPS via `gh` even when origin is SSH / Settings \u2192 Git is SSH). When dirty, queues the worktree agent to commit; then wait_for_turn (loop while stillRunning). Do not start a checks loop on a plain push \u2014 only if the user gave a goal (Greptile 5/5, CI green). Pass a worktree thread ref (not the orchestrator). action=merge only when the user explicitly asked to merge that PR. Do not run git or gh from the orchestration cwd. If this tool errors that the GraphQL/PR body is too long, the branch is already pushed \u2014 have the worktree agent retry `gh pr create --body-file` with a short description (GitHub limit 65,536 characters). Do not invent SSH/auth failures from that error.",
+      "Commit & push, open a draft PR, mark ready for review, resolve conflicts, or merge \u2014 same actions as the desktop git buttons. When the worktree is clean, Sideboard pushes / opens the PR itself (HTTPS via `gh` even when origin is SSH / Settings \u2192 Git is SSH). When dirty, queues the worktree agent to commit; then wait_for_turn (loop while stillRunning). Do not start a checks loop on a plain push \u2014 only if the user gave a goal (Greptile 5/5, CI green). Pass a worktree thread ref (not the orchestrator). action=ready-for-review and action=merge only when the user explicitly asked (or clicked the desktop button). Do not run git or gh from the orchestration cwd. If this tool errors that the GraphQL/PR body is too long, the branch is already pushed \u2014 have the worktree agent retry `gh pr create --body-file` with a short description (GitHub limit 65,536 characters). Do not invent SSH/auth failures from that error.",
       {
         ref: z8.string().describe("Worktree thread id/ref"),
         action: z8.enum(AGENT_GIT_ACTIONS).describe(
-          "commit-push | create-draft | create-web | resolve-conflicts | merge"
+          "commit-push | create-draft | create-web | resolve-conflicts | ready-for-review | merge"
         )
       },
       async ({ ref, action }) => {
@@ -4032,6 +4077,12 @@ async function startMcpServer() {
 
 // src/mcp/run-stdio.ts
 dropNestedElectronEnvFromProcess();
+var systemCaBundle = materializeSystemCaBundle();
+if (systemCaBundle && !process.env.NODE_EXTRA_CA_CERTS?.trim()) {
+  process.env.NODE_EXTRA_CA_CERTS = systemCaBundle;
+}
+applySystemCaEnv(process.env);
+trustSystemCertificates();
 startMcpServer().catch((err) => {
   console.error(err);
   process.exitCode = 1;

package/dist/{oauth-A7XXI2TM.js → oauth-6ZQ4Q4XN.js}

@@ -2,8 +2,8 @@ import {
   brightsyAccessTokenNeedsRefresh,
   ensureBrightsyLocalConfigFresh,
   refreshBrightsyAccessToken
-} from "./chunk-M267JPEA.js";
-import "./chunk-ELBYOGVA.js";
+} from "./chunk-AN3THU7F.js";
+import "./chunk-N7WZ6NIN.js";
 export {
   brightsyAccessTokenNeedsRefresh,
   ensureBrightsyLocalConfigFresh,

package/dist/{oauth-YJBAURIJ.js → oauth-O7UGLZOY.js}

@@ -4,8 +4,8 @@ import {
   brightsyAccessTokenNeedsRefresh,
   ensureBrightsyLocalConfigFresh,
   refreshBrightsyAccessToken
-} from "./chunk-S42XV45P.js";
-import "./chunk-6GN5WPYZ.js";
+} from "./chunk-Y4MIXGPA.js";
+import "./chunk-VKQGAWHY.js";
 export {
   brightsyAccessTokenNeedsRefresh,
   ensureBrightsyLocalConfigFresh,

package/dist/{orchestrator-DMSSC4SV.js → orchestrator-2KZD7N4X.js}

@@ -7,14 +7,14 @@ import {
   isPidAlive,
   startOrchestration,
   waitForPidExit
-} from "./chunk-YEPVWJ3R.js";
-import "./chunk-TPPZXZTA.js";
-import "./chunk-LZ6QMEQC.js";
-import "./chunk-S42XV45P.js";
-import "./chunk-6GN5WPYZ.js";
+} from "./chunk-JUA7XEXR.js";
+import "./chunk-W44EKPIR.js";
+import "./chunk-HVIEYTUK.js";
+import "./chunk-Y4MIXGPA.js";
+import "./chunk-VKQGAWHY.js";
 import "./chunk-JFOPOMK7.js";
 import "./chunk-OCQPTUR7.js";
-import "./chunk-VCVBICMZ.js";
+import "./chunk-FJWQCZ74.js";
 import "./chunk-7O53GXTA.js";
 import "./chunk-D6JWYJ4P.js";
 import "./chunk-LZQULFIT.js";

package/dist/{orchestrator-VMUZJFTZ.js → orchestrator-GDKEVLFK.js}

@@ -5,17 +5,17 @@ import {
   isPidAlive,
   startOrchestration,
   waitForPidExit
-} from "./chunk-HJPGIETB.js";
+} from "./chunk-4ELBAYFW.js";
 import "./chunk-DJU54RYW.js";
-import "./chunk-CUA4S537.js";
-import "./chunk-ZY7K4T37.js";
+import "./chunk-NIB6BTC6.js";
+import "./chunk-3ZFGZ7RT.js";
 import "./chunk-7JIYKYLL.js";
 import "./chunk-6K64FJDD.js";
-import "./chunk-XD2BAANL.js";
-import "./chunk-M267JPEA.js";
-import "./chunk-ELBYOGVA.js";
+import "./chunk-IEEAVWAP.js";
+import "./chunk-AN3THU7F.js";
+import "./chunk-N7WZ6NIN.js";
 import "./chunk-AXQ4ZWHK.js";
-import "./chunk-XXIH6XYR.js";
+import "./chunk-NQTKRAUF.js";
 import "./chunk-J7LQVLFQ.js";
 import "./chunk-4TR3HZFT.js";
 import "./chunk-AO35MGOE.js";

package/dist/{workspaces-GOGBPATJ.js → workspaces-DR4UNOQC.js}

@@ -6,7 +6,7 @@ import {
   listWorkspaces,
   removeWorkspace,
   syncWorkspacesFromThreads
-} from "./chunk-VCVBICMZ.js";
+} from "./chunk-FJWQCZ74.js";
 import "./chunk-7O53GXTA.js";
 import "./chunk-D6JWYJ4P.js";
 import "./chunk-LZQULFIT.js";

package/dist/{workspaces-UR7YEFMZ.js → workspaces-ULHYXM4Y.js}

@@ -4,7 +4,7 @@ import {
   listWorkspaces,
   removeWorkspace,
   syncWorkspacesFromThreads
-} from "./chunk-ZY7K4T37.js";
+} from "./chunk-3ZFGZ7RT.js";
 import "./chunk-7JIYKYLL.js";
 import "./chunk-6K64FJDD.js";
 import "./chunk-J7LQVLFQ.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sideboard-ai/core",
-  "version": "0.1.174",
+  "version": "0.1.176",
   "description": "Sideboard core — orchestration, agents, git worktrees, MCP server",
   "license": "Apache-2.0",
   "type": "module",