@sideboard-ai/core 0.1.202 → 0.1.203

package/dist/chunk-PJHFNFXA.js

@@ -0,0 +1,243 @@
+#!/usr/bin/env node
+
+import {
+  httpFetch
+} from "./chunk-VKQGAWHY.js";
+import {
+  getAbleTimeHost,
+  isAbleTimeConnected
+} from "./chunk-X743YN5Y.js";
+
+// src/integrations/abletime-mcp.ts
+var DEFAULT_ABLETIME_HOST = "https://track.abletime.com";
+var ABLETIME_MCP_PATH = "/api/public/v2/mcp";
+var ABLETIME_MCP_PM_PATH = "/api/public/v2/mcp/pm";
+var MCP_PROTOCOL_VERSION = "2025-03-26";
+var ABLETIME_PM_TOOL_NAMES = [
+  "set_task_assignee",
+  "set_task_priority",
+  "set_task_stage",
+  "set_task_dependency",
+  "set_task_blocked",
+  "set_task_locked",
+  "set_task_schedule",
+  "clear_task_schedule",
+  "archive_task",
+  "delete_task"
+];
+function abletimeToolUsesPm(name) {
+  return ABLETIME_PM_TOOL_NAMES.includes(name);
+}
+function normalizeAbleTimeHost(raw) {
+  const trimmed = raw?.trim() || DEFAULT_ABLETIME_HOST;
+  const withScheme = /^https?:\/\//i.test(trimmed) ? trimmed : `https://${trimmed}`;
+  return withScheme.replace(/\/+$/, "");
+}
+function abletimeMcpUrl(host, opts) {
+  const path = opts?.pm ? ABLETIME_MCP_PM_PATH : ABLETIME_MCP_PATH;
+  return `${normalizeAbleTimeHost(host)}${path}`;
+}
+var ABLETIME_PAT_PREFIX = "apt_";
+var ABLETIME_ORG_KEY_PREFIX = "atk_";
+var ORG_KEY_HINT = "AbleTime MCP needs a personal access token (apt_\u2026) from Edit Profile \u2192 API Access, not an organization API key (atk_\u2026) from Settings \u2192 Integrations \u2192 API Keys.";
+var REJECTED_CREDENTIAL_HINT = "AbleTime rejected this credential (unknown, revoked, or expired). Use a personal access token (apt_\u2026) from Edit Profile \u2192 API Access \u2014 organization API keys (atk_\u2026) cannot call MCP. Tokens are shown once; rotating replaces the previous one.";
+var REWRITE_APPLIED = /— Enable Agent access \(MCP\)|— AbleTime MCP needs a personal access token|— AbleTime plan does not include API access|— AbleTime rejected this credential/;
+function normalizeAbleTimeCredential(raw) {
+  return raw.trim().replace(/^bearer\s+/i, "").trim();
+}
+function ableTimeCredentialKind(raw) {
+  const token = normalizeAbleTimeCredential(raw).toLowerCase();
+  if (token.startsWith(ABLETIME_PAT_PREFIX)) return "pat";
+  if (token.startsWith(ABLETIME_ORG_KEY_PREFIX)) return "org";
+  return "unknown";
+}
+function assertAbleTimeMcpCredential(raw) {
+  const token = normalizeAbleTimeCredential(raw);
+  if (!token) {
+    throw new Error("AbleTime personal access token is required");
+  }
+  if (ableTimeCredentialKind(token) === "org") {
+    throw new Error(ORG_KEY_HINT);
+  }
+  return token;
+}
+function assertAbleTimeCredential(raw) {
+  const token = normalizeAbleTimeCredential(raw);
+  if (!token) {
+    throw new Error("AbleTime API key or personal access token is required");
+  }
+  return token;
+}
+function rewriteAbleTimeError(message) {
+  if (REWRITE_APPLIED.test(message)) return message;
+  if (/INTEGRATION_AGENT_ACCESS_DISABLED/i.test(message)) {
+    return `${message} \u2014 Enable Agent access (MCP) in AbleTime Settings \u2192 Integrations \u2192 API Keys.`;
+  }
+  if (/INTEGRATION_PAT_REQUIRED/i.test(message)) {
+    return `${message} \u2014 ${ORG_KEY_HINT}`;
+  }
+  if (/INTEGRATION_PLAN_REQUIRED/i.test(message)) {
+    return `${message} \u2014 AbleTime plan does not include API access.`;
+  }
+  if (/INTEGRATION_KEY_INVALID|INTEGRATION_KEY_MISSING|401|unauthorized|invalid token/i.test(message)) {
+    return `${message} \u2014 ${REJECTED_CREDENTIAL_HINT}`;
+  }
+  return message;
+}
+function asRecord(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function parseSseJson(body) {
+  const blocks = body.split(/\n\n+/);
+  let last;
+  for (const block of blocks) {
+    const data = block.split("\n").filter((line) => line.startsWith("data:")).map((line) => line.slice(5).trim()).filter((line) => line && line !== "[DONE]").join("\n");
+    if (!data) continue;
+    try {
+      last = JSON.parse(data);
+    } catch {
+    }
+  }
+  if (last !== void 0) return last;
+  try {
+    return JSON.parse(body);
+  } catch {
+    throw new Error(`AbleTime MCP returned a non-JSON response: ${body.slice(0, 200)}`);
+  }
+}
+function unwrapToolResult(result) {
+  const record = asRecord(result);
+  if (!record) return result;
+  const content = record.content;
+  if (Array.isArray(content)) {
+    const texts = content.map((part) => {
+      const item = asRecord(part);
+      if (!item) return "";
+      return typeof item.text === "string" ? item.text : "";
+    }).filter(Boolean);
+    if (texts.length === 1) {
+      const text = texts[0];
+      try {
+        return JSON.parse(text);
+      } catch {
+        return text;
+      }
+    }
+    if (texts.length > 1) return texts.join("\n");
+  }
+  if (record.structuredContent != null) return record.structuredContent;
+  if (record.isError === true) {
+    const message = typeof record.message === "string" ? record.message : textsFromUnknown(result) || "AbleTime tool failed";
+    throw new Error(message);
+  }
+  return result;
+}
+function textsFromUnknown(value) {
+  const record = asRecord(value);
+  if (!record) return "";
+  if (typeof record.message === "string") return record.message;
+  if (typeof record.error === "string") return record.error;
+  return "";
+}
+async function abletimeMcpRequest(method, params, opts) {
+  const rawToken = opts?.token ?? await import("./abletime-oauth-7TD5Z2QV.js").then((m) => m.ensureAbleTimeAccessToken());
+  if (!rawToken?.trim()) {
+    throw new Error("AbleTime is not connected \u2014 paste a personal access token in Account settings");
+  }
+  const token = assertAbleTimeMcpCredential(rawToken);
+  const url = abletimeMcpUrl(
+    opts?.host ?? (opts?.token ? DEFAULT_ABLETIME_HOST : getAbleTimeHost()),
+    { pm: opts?.pm }
+  );
+  const res = await httpFetch(url, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Accept: "application/json, text/event-stream",
+      Authorization: `Bearer ${token}`,
+      "MCP-Protocol-Version": MCP_PROTOCOL_VERSION
+    },
+    body: JSON.stringify({
+      jsonrpc: "2.0",
+      id: 1,
+      method,
+      ...params === void 0 ? {} : { params }
+    })
+  });
+  const body = await res.text().catch(() => "");
+  if (!res.ok) {
+    throw new Error(
+      rewriteAbleTimeError(
+        `AbleTime MCP error ${res.status}${body ? `: ${body.slice(0, 240)}` : ""}`
+      )
+    );
+  }
+  const contentType = res.headers.get("content-type") ?? "";
+  const parsed = contentType.includes("text/event-stream") ? parseSseJson(body) : (() => {
+    try {
+      return JSON.parse(body);
+    } catch {
+      return parseSseJson(body);
+    }
+  })();
+  const rpc = asRecord(parsed);
+  if (rpc?.error) {
+    const detail = typeof rpc.error.message === "string" && rpc.error.message.trim() ? rpc.error.message : `AbleTime MCP error ${rpc.error.code ?? ""}`.trim();
+    throw new Error(rewriteAbleTimeError(detail));
+  }
+  if (rpc && "result" in rpc) return rpc.result;
+  return parsed;
+}
+async function initializeIfNeeded(opts) {
+  try {
+    await abletimeMcpRequest(
+      "initialize",
+      {
+        protocolVersion: MCP_PROTOCOL_VERSION,
+        capabilities: {},
+        clientInfo: { name: "sideboard", version: "1.0.0" }
+      },
+      opts
+    );
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    if (/already initialized|not (required|supported)|method not found|-32601/i.test(message)) {
+      return;
+    }
+    throw err;
+  }
+}
+async function callAbleTimeTool(name, args = {}, opts) {
+  if (!opts?.token && !isAbleTimeConnected()) {
+    throw new Error("AbleTime is not connected \u2014 paste a personal access token in Account settings");
+  }
+  const rawToken = opts?.token ?? await import("./abletime-oauth-7TD5Z2QV.js").then((m) => m.ensureAbleTimeAccessToken());
+  if (rawToken && ableTimeCredentialKind(rawToken) === "org") {
+    const { callAbleTimeRestTool } = await import("./abletime-rest-QPJTDLKX.js");
+    return callAbleTimeRestTool(name, args, { ...opts, token: rawToken });
+  }
+  const requestOpts = { ...opts, pm: opts?.pm ?? abletimeToolUsesPm(name) };
+  const call = () => abletimeMcpRequest("tools/call", { name, arguments: args }, requestOpts).then((result) => {
+    return unwrapToolResult(result);
+  });
+  try {
+    return await call();
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    if (/initialize|session|not initialized|-32000/i.test(message)) {
+      await initializeIfNeeded(requestOpts);
+      return await call();
+    }
+    throw err instanceof Error ? new Error(rewriteAbleTimeError(err.message)) : err;
+  }
+}
+
+export {
+  DEFAULT_ABLETIME_HOST,
+  normalizeAbleTimeHost,
+  normalizeAbleTimeCredential,
+  ableTimeCredentialKind,
+  assertAbleTimeCredential,
+  rewriteAbleTimeError,
+  callAbleTimeTool
+};

package/dist/{chunk-CXFW5LIH.js → chunk-QFBBUFD4.js}

@@ -328,6 +328,9 @@ function normalizeVault(raw) {
   if (typeof raw.abletimeAccessToken === "string" && raw.abletimeAccessToken.trim()) {
     out.abletimeAccessToken = raw.abletimeAccessToken.trim();
   }
+  if (typeof raw.abletimeRefreshToken === "string" && raw.abletimeRefreshToken.trim()) {
+    out.abletimeRefreshToken = raw.abletimeRefreshToken.trim();
+  }
   if (typeof raw.vercelToken === "string" && raw.vercelToken.trim()) {
     out.vercelToken = raw.vercelToken.trim();
   }
@@ -409,6 +412,7 @@ function emptyPublicIntegrations() {
     hasSlackAppToken: false,
     hasGithubPat: false,
     hasAbleTimeToken: false,
+    hasAbleTimeOAuth: false,
     hasVercelToken: false,
     hasSupabaseToken: false,
     hasPosthogToken: false,
@@ -433,6 +437,7 @@ function toPublicAppSettings(settings) {
   const slackAppToken = integrations.slackAppToken;
   const githubPat = integrations.githubPat;
   const abletimeAccessToken = integrations.abletimeAccessToken;
+  const abletimeRefreshToken = integrations.abletimeRefreshToken;
   const vercelToken = integrations.vercelToken;
   const supabaseAccessToken = integrations.supabaseAccessToken;
   const posthogPersonalApiKey = integrations.posthogPersonalApiKey;
@@ -445,6 +450,7 @@ function toPublicAppSettings(settings) {
   delete integrations.slackAppToken;
   delete integrations.githubPat;
   delete integrations.abletimeAccessToken;
+  delete integrations.abletimeRefreshToken;
   delete integrations.vercelToken;
   delete integrations.supabaseAccessToken;
   delete integrations.posthogPersonalApiKey;
@@ -459,7 +465,8 @@ function toPublicAppSettings(settings) {
       hasSlackClientSecret: Boolean(slackClientSecret?.trim()),
       hasSlackAppToken: Boolean(slackAppToken?.trim()),
       hasGithubPat: Boolean(githubPat?.trim()),
-      hasAbleTimeToken: Boolean(abletimeAccessToken?.trim()),
+      hasAbleTimeToken: Boolean(abletimeAccessToken?.trim() || abletimeRefreshToken?.trim()),
+      hasAbleTimeOAuth: Boolean(abletimeRefreshToken?.trim()),
       hasVercelToken: Boolean(vercelToken?.trim()),
       hasSupabaseToken: Boolean(supabaseAccessToken?.trim()),
       hasPosthogToken: Boolean(posthogPersonalApiKey?.trim()),
@@ -605,6 +612,16 @@ function normalizeIntegrations(raw) {
     const token = source.abletimeAccessToken.trim();
     if (token) out.abletimeAccessToken = token;
   }
+  if (typeof source.abletimeRefreshToken === "string") {
+    const token = source.abletimeRefreshToken.trim();
+    if (token) out.abletimeRefreshToken = token;
+  }
+  if (typeof source.abletimeTokenExpiresAt === "number" && Number.isFinite(source.abletimeTokenExpiresAt)) {
+    out.abletimeTokenExpiresAt = source.abletimeTokenExpiresAt;
+  } else if (typeof source.abletimeTokenExpiresAt === "string") {
+    const n = Number(source.abletimeTokenExpiresAt);
+    if (Number.isFinite(n)) out.abletimeTokenExpiresAt = n;
+  }
   if (typeof source.abletimeHost === "string") {
     const host = source.abletimeHost.trim();
     if (host) out.abletimeHost = host;
@@ -893,7 +910,7 @@ function readSettingsFile() {
 }
 function diskHoldsSecrets(disk) {
   return Boolean(
-    disk.integrations.linearApiKey || disk.integrations.linearAccessToken || disk.integrations.linearRefreshToken || disk.integrations.linearClientSecret || disk.integrations.slackClientSecret || disk.integrations.slackAppToken || disk.integrations.githubPat || disk.integrations.abletimeAccessToken || disk.integrations.vercelToken || disk.integrations.supabaseAccessToken || disk.integrations.posthogPersonalApiKey || disk.integrations.sentryAuthToken || Object.keys(disk.environment).length > 0
+    disk.integrations.linearApiKey || disk.integrations.linearAccessToken || disk.integrations.linearRefreshToken || disk.integrations.linearClientSecret || disk.integrations.slackClientSecret || disk.integrations.slackAppToken || disk.integrations.githubPat || disk.integrations.abletimeAccessToken || disk.integrations.abletimeRefreshToken || disk.integrations.vercelToken || disk.integrations.supabaseAccessToken || disk.integrations.posthogPersonalApiKey || disk.integrations.sentryAuthToken || Object.keys(disk.environment).length > 0
   );
 }
 function mergeVault(disk) {
@@ -924,6 +941,9 @@ function mergeVault(disk) {
   if (vault.abletimeAccessToken && !integrations.abletimeAccessToken) {
     integrations.abletimeAccessToken = vault.abletimeAccessToken;
   }
+  if (vault.abletimeRefreshToken && !integrations.abletimeRefreshToken) {
+    integrations.abletimeRefreshToken = vault.abletimeRefreshToken;
+  }
   if (vault.vercelToken && !integrations.vercelToken) {
     integrations.vercelToken = vault.vercelToken;
   }
@@ -948,6 +968,7 @@ function persistSplit(settings) {
   const slackAppToken = integrations.slackAppToken;
   const githubPat = integrations.githubPat;
   const abletimeAccessToken = integrations.abletimeAccessToken;
+  const abletimeRefreshToken = integrations.abletimeRefreshToken;
   const vercelToken = integrations.vercelToken;
   const supabaseAccessToken = integrations.supabaseAccessToken;
   const posthogPersonalApiKey = integrations.posthogPersonalApiKey;
@@ -960,6 +981,7 @@ function persistSplit(settings) {
   delete integrations.slackAppToken;
   delete integrations.githubPat;
   delete integrations.abletimeAccessToken;
+  delete integrations.abletimeRefreshToken;
   delete integrations.vercelToken;
   delete integrations.supabaseAccessToken;
   delete integrations.posthogPersonalApiKey;
@@ -978,6 +1000,7 @@ function persistSplit(settings) {
     slackAppToken,
     githubPat,
     abletimeAccessToken,
+    abletimeRefreshToken,
     vercelToken,
     supabaseAccessToken,
     posthogPersonalApiKey,
@@ -1164,6 +1187,8 @@ function updateIntegrationsSettings(patch) {
   if ("abletimeAccessToken" in patch) {
     if (patch.abletimeAccessToken == null || patch.abletimeAccessToken.trim() === "") {
       delete integrations.abletimeAccessToken;
+      delete integrations.abletimeRefreshToken;
+      delete integrations.abletimeTokenExpiresAt;
       delete integrations.abletimeViewerName;
     } else {
       integrations.abletimeAccessToken = patch.abletimeAccessToken.trim();
@@ -1516,7 +1541,9 @@ function disconnectLinearConnection() {
   return saveAppSettings({ ...current, integrations });
 }
 function isAbleTimeConnected(settings = loadAppSettings()) {
-  return Boolean(settings.integrations.abletimeAccessToken?.trim());
+  return Boolean(
+    settings.integrations.abletimeAccessToken?.trim() || settings.integrations.abletimeRefreshToken?.trim()
+  );
 }
 function getAbleTimeAccessToken(settings = loadAppSettings()) {
   const token = settings.integrations.abletimeAccessToken?.trim();
@@ -1529,6 +1556,12 @@ function saveAbleTimeConnection(input) {
   const current = loadAppSettings();
   const integrations = { ...current.integrations };
   integrations.abletimeAccessToken = input.accessToken.trim();
+  if (input.refreshToken?.trim()) {
+    integrations.abletimeRefreshToken = input.refreshToken.trim();
+  }
+  if (typeof input.expiresIn === "number" && Number.isFinite(input.expiresIn)) {
+    integrations.abletimeTokenExpiresAt = Date.now() + Math.max(0, input.expiresIn) * 1e3;
+  }
   if (input.host?.trim()) {
     integrations.abletimeHost = input.host.trim();
   }
@@ -1541,6 +1574,8 @@ function disconnectAbleTimeConnection() {
   const current = loadAppSettings();
   const integrations = { ...current.integrations };
   delete integrations.abletimeAccessToken;
+  delete integrations.abletimeRefreshToken;
+  delete integrations.abletimeTokenExpiresAt;
   delete integrations.abletimeViewerName;
   return saveAppSettings({ ...current, integrations });
 }

package/dist/{chunk-RPX6VDW7.js → chunk-QSEF2YVQ.js}

@@ -22,7 +22,7 @@ import {
 import {
   getGithubGitAuthMode,
   getGithubPat
-} from "./chunk-ISV5IFH3.js";
+} from "./chunk-X743YN5Y.js";
 import {
   worktreesRoot
 } from "./chunk-EQNRWDLN.js";

package/dist/{chunk-LJHC62LZ.js → chunk-TNDUTGDV.js}

@@ -5,7 +5,7 @@ import {
   resolveRepoRoot,
   takenSlugsFromThread,
   teamSlugFromName
-} from "./chunk-STPZQR5B.js";
+} from "./chunk-CMGRV36E.js";
 import {
   ATTACHMENTS_DIR,
   attachmentsGitignoreBody
@@ -22,7 +22,7 @@ import {
   resolveThreadDefaults,
   resolveViewerProfile,
   resolveViewerProfileForRepo
-} from "./chunk-CXFW5LIH.js";
+} from "./chunk-QFBBUFD4.js";
 import {
   createEmptyThread,
   listThreads,