npm - @sideboard-ai/core - Versions diffs - 0.1.202 → 0.1.204 - Mend

@sideboard-ai/core 0.1.202 → 0.1.204

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (46) hide show

package/dist/{abletime-KGPD3UUJ.js → abletime-S3UHQZVW.js} +4 -2
package/dist/{abletime-345SE3B4.js → abletime-TONBQP4O.js} +4 -2
package/dist/abletime-oauth-AVCEO2DY.js +314 -0
package/dist/abletime-oauth-SD4SZY5U.js +52 -0
package/dist/abletime-rest-6ODSXV7G.js +25 -0
package/dist/abletime-rest-J2OBB4VA.js +24 -0
package/dist/agents/cursor-runner.js +1 -1
package/dist/{agents-573ZDIX6.js → agents-67K4BQFJ.js} +4 -4
package/dist/{agents-OXX3ONVY.js → agents-BVOJNHV6.js} +5 -5
package/dist/{app-settings-V6IHESEQ.js → app-settings-LGHMNHSP.js} +1 -1
package/dist/{app-settings-AXCURTZJ.js → app-settings-YEPF46IJ.js} +1 -1
package/dist/chunk-3K257PCS.js +393 -0
package/dist/{chunk-54RSAMBH.js → chunk-5SMS6QTO.js} +2 -2
package/dist/chunk-6Q7DFVDQ.js +309 -0
package/dist/chunk-CYLDJWRK.js +391 -0
package/dist/{chunk-PGQGP4FD.js → chunk-FO2NTJ7L.js} +37 -219
package/dist/{chunk-7NKY2OX7.js → chunk-FO45DMJ5.js} +125 -109
package/dist/{chunk-CQ5R3VPP.js → chunk-KZ7PI7FE.js} +18 -0
package/dist/{chunk-7AHAABKN.js → chunk-QAVWH2RQ.js} +37 -229
package/dist/{chunk-CXFW5LIH.js → chunk-QFBBUFD4.js} +38 -3
package/dist/{chunk-RPX6VDW7.js → chunk-QUW5D62C.js} +34 -20
package/dist/chunk-SGUVAK66.js +262 -0
package/dist/{chunk-27GGXX27.js → chunk-ULZLWQBS.js} +128 -112
package/dist/{chunk-LJHC62LZ.js → chunk-VIPA75ZA.js} +2 -2
package/dist/chunk-W6VM36YO.js +272 -0
package/dist/{chunk-NIVF5NDN.js → chunk-WF33LOP4.js} +44 -6
package/dist/{chunk-STPZQR5B.js → chunk-WVATAIF4.js} +34 -20
package/dist/{chunk-ISV5IFH3.js → chunk-X743YN5Y.js} +38 -3
package/dist/{chunk-A2TAKYSG.js → chunk-YOSTWSNC.js} +27 -7
package/dist/{coordinator-prompt-BH4EHFOO.js → coordinator-prompt-NPT555BO.js} +3 -3
package/dist/{coordinator-prompt-TY5FHAXC.js → coordinator-prompt-WEPXXLLX.js} +3 -3
package/dist/{global-workspace-NLLAPQJI.js → global-workspace-2I2T7FL5.js} +3 -3
package/dist/{global-workspace-5AZEEQRU.js → global-workspace-NSILADOM.js} +3 -3
package/dist/index.cjs +1137 -213
package/dist/index.d.cts +87 -13
package/dist/index.d.ts +87 -13
package/dist/index.js +94 -19
package/dist/mcp/run-stdio.cjs +1023 -180
package/dist/mcp/run-stdio.js +22 -20
package/dist/{orchestrator-JNSQDRZI.js → orchestrator-CMAVNELS.js} +6 -6
package/dist/{orchestrator-NCYKEI3E.js → orchestrator-I7GFXLHF.js} +6 -6
package/dist/{workspaces-RP76JH3J.js → workspaces-BOC6M7BW.js} +3 -3
package/dist/{workspaces-PEWYWVHZ.js → workspaces-RFGZBUAR.js} +3 -3
package/dist/{worktree-72TZWUSH.js → worktree-G3ZLM4DC.js} +4 -2
package/dist/{worktree-ZQEUKSNE.js → worktree-WSUQMMK4.js} +4 -2
package/package.json +1 -1

package/dist/chunk-6Q7DFVDQ.js ADDED Viewed

@@ -0,0 +1,309 @@
+import {
+  DEFAULT_ABLETIME_HOST,
+  normalizeAbleTimeHost
+} from "./chunk-W6VM36YO.js";
+import {
+  httpFetch
+} from "./chunk-N7WZ6NIN.js";
+import {
+  disconnectAbleTimeConnection,
+  getAbleTimeHost,
+  loadAppSettings,
+  saveAbleTimeConnection
+} from "./chunk-QFBBUFD4.js";
+// src/integrations/abletime-oauth.ts
+import { createHash, randomBytes } from "crypto";
+import { createServer } from "http";
+var ABLETIME_OAUTH_CALLBACK_PATH = "/oauth/abletime/callback";
+var ABLETIME_OAUTH_PORT = 19849;
+var ABLETIME_OAUTH_LOCAL_CALLBACK = `http://127.0.0.1:${ABLETIME_OAUTH_PORT}/callback`;
+var ABLETIME_OAUTH_REDIRECT = `https://www.sideboard.cloud${ABLETIME_OAUTH_CALLBACK_PATH}`;
+function ableTimeOAuthRedirectUri() {
+  return process.env.SIDEBOARD_ABLETIME_OAUTH_REDIRECT?.trim() || ABLETIME_OAUTH_REDIRECT;
+}
+var BOUNCE_QUERY_KEYS = ["code", "state", "error", "error_description"];
+function parseAbleTimeOAuthCallbackUrl(reqUrl) {
+  let url;
+  try {
+    url = new URL(reqUrl, ABLETIME_OAUTH_REDIRECT);
+  } catch {
+    return null;
+  }
+  if (url.pathname !== ABLETIME_OAUTH_CALLBACK_PATH) return null;
+  return url;
+}
+function ableTimeOAuthLocalBounceUrl(reqUrl) {
+  const url = parseAbleTimeOAuthCallbackUrl(reqUrl);
+  if (!url) return null;
+  const dest = new URL(ABLETIME_OAUTH_LOCAL_CALLBACK);
+  for (const key of BOUNCE_QUERY_KEYS) {
+    const value = url.searchParams.get(key);
+    if (value) dest.searchParams.set(key, value);
+  }
+  return dest.toString();
+}
+function escapeHtml(value) {
+  return value.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+function ableTimeOAuthBouncePage(localUrl) {
+  const safe = escapeHtml(localUrl);
+  return `<!doctype html><html><head><meta charset="utf-8">
+<meta http-equiv="refresh" content="0;url=${safe}">
+<title>Returning to Sideboard</title>
+<script>location.replace(${JSON.stringify(localUrl)})</script>
+<style>body{font-family:ui-sans-serif,system-ui,sans-serif;padding:48px 24px;max-width:36rem;margin:0 auto;color:#1a1a1a}
+h1{font-size:1.25rem}p{line-height:1.5;color:#444}a{color:#0f7ed4}</style>
+</head><body>
+<h1>Returning to Sideboard</h1>
+<p>AbleTime authorized. Opening the app\u2026</p>
+<p><a href="${safe}">Open Sideboard</a> if it does not appear.</p>
+</body></html>`;
+}
+var BAKED_ABLETIME_OAUTH_CLIENT_ID = "https://www.sideboard.cloud/oauth/abletime-client.json";
+var ABLETIME_OAUTH_RESOURCE = `${DEFAULT_ABLETIME_HOST}/api/public/v2/mcp`;
+var REFRESH_SKEW_MS = 5 * 6e4;
+function hasBakedAbleTimeOAuth() {
+  return Boolean(BAKED_ABLETIME_OAUTH_CLIENT_ID.trim());
+}
+function ableTimeOAuthClientId() {
+  return process.env.SIDEBOARD_ABLETIME_OAUTH_CLIENT_ID?.trim() || BAKED_ABLETIME_OAUTH_CLIENT_ID.trim();
+}
+function ableTimeOAuthResource(host) {
+  return `${normalizeAbleTimeHost(host)}/api/public/v2/mcp`;
+}
+function createAbleTimePkce() {
+  const verifier = randomBytes(32).toString("base64url");
+  const challenge = createHash("sha256").update(verifier).digest("base64url");
+  return { verifier, challenge };
+}
+function ableTimeOAuthAuthorizeUrl(clientId, state, codeChallenge, host) {
+  const base = normalizeAbleTimeHost(host);
+  const params = new URLSearchParams({
+    response_type: "code",
+    client_id: clientId,
+    redirect_uri: ableTimeOAuthRedirectUri(),
+    code_challenge: codeChallenge,
+    code_challenge_method: "S256",
+    state,
+    resource: ableTimeOAuthResource(host)
+  });
+  return `${base}/oauth/authorize?${params.toString()}`;
+}
+function htmlPage(title, body) {
+  return `<!doctype html><html><head><meta charset="utf-8"><title>${title}</title>
+<style>body{font-family:ui-sans-serif,system-ui,sans-serif;padding:48px 24px;max-width:36rem;margin:0 auto;color:#1a1a1a}
+h1{font-size:1.25rem}p{line-height:1.5;color:#444}</style></head><body>${body}</body></html>`;
+}
+async function exchangeAbleTimeToken(body, host) {
+  const url = `${normalizeAbleTimeHost(host)}/api/oauth/token`;
+  const res = await httpFetch(url, {
+    method: "POST",
+    headers: {
+      Accept: "application/json",
+      "Content-Type": "application/x-www-form-urlencoded"
+    },
+    body
+  });
+  const data = await res.json().catch(() => ({}));
+  if (!res.ok || data.error || !data.access_token?.trim()) {
+    const detail = data.error_description || data.error || `HTTP ${res.status}`;
+    throw new Error(`AbleTime OAuth token exchange failed: ${detail}`);
+  }
+  return data;
+}
+function persistAbleTimeTokens(data, input) {
+  return saveAbleTimeConnection({
+    accessToken: data.access_token.trim(),
+    refreshToken: data.refresh_token?.trim(),
+    expiresIn: data.expires_in,
+    host: input?.host,
+    viewerName: input?.viewerName
+  });
+}
+var refreshInFlight = null;
+async function refreshAbleTimeAccessToken(refreshToken) {
+  const host = getAbleTimeHost();
+  const body = new URLSearchParams({
+    grant_type: "refresh_token",
+    refresh_token: refreshToken,
+    client_id: ableTimeOAuthClientId(),
+    resource: ableTimeOAuthResource(host)
+  });
+  try {
+    const data = await exchangeAbleTimeToken(body, host);
+    persistAbleTimeTokens(data, { host });
+    return data.access_token.trim();
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    if (/invalid_grant|invalid_token|unauthorized/i.test(message)) {
+      disconnectAbleTimeConnection();
+      throw new Error("AbleTime sign-in expired \u2014 connect again in Account settings");
+    }
+    throw err;
+  }
+}
+async function ensureAbleTimeAccessToken() {
+  const settings = loadAppSettings();
+  const access = settings.integrations.abletimeAccessToken?.trim() || "";
+  const refresh = settings.integrations.abletimeRefreshToken?.trim() || "";
+  const expiresAt = settings.integrations.abletimeTokenExpiresAt ?? 0;
+  if (access && (!refresh || Date.now() < expiresAt - REFRESH_SKEW_MS)) {
+    return access;
+  }
+  if (refresh) {
+    if (!refreshInFlight) {
+      refreshInFlight = refreshAbleTimeAccessToken(refresh).finally(() => {
+        refreshInFlight = null;
+      });
+    }
+    return refreshInFlight;
+  }
+  return access || null;
+}
+var ABLETIME_OAUTH_CANCELLED = "AbleTime sign-in cancelled";
+var AbleTimeOAuthCancelledError = class extends Error {
+  constructor(message = ABLETIME_OAUTH_CANCELLED) {
+    super(message);
+    this.name = "AbleTimeOAuthCancelledError";
+  }
+};
+function isAbleTimeOAuthCancelled(err) {
+  if (err instanceof AbleTimeOAuthCancelledError) return true;
+  const message = err instanceof Error ? err.message : String(err);
+  return message.includes(ABLETIME_OAUTH_CANCELLED);
+}
+async function startAbleTimeOAuth(opts) {
+  if (opts?.signal?.aborted) {
+    throw new AbleTimeOAuthCancelledError();
+  }
+  const clientId = ableTimeOAuthClientId();
+  if (!clientId) {
+    throw new Error(
+      `AbleTime browser sign-in needs a Client ID Metadata Document URL. Host ${BAKED_ABLETIME_OAUTH_CLIENT_ID} (see site/oauth/abletime-client.json), or set SIDEBOARD_ABLETIME_OAUTH_CLIENT_ID.`
+    );
+  }
+  const host = opts?.host?.trim() || void 0;
+  const state = randomBytes(16).toString("hex");
+  const pkce = createAbleTimePkce();
+  const authorizeUrl = ableTimeOAuthAuthorizeUrl(clientId, state, pkce.challenge, host);
+  const timeoutMs = opts?.timeoutMs ?? 5 * 6e4;
+  const code = await new Promise((resolve, reject) => {
+    let settled = false;
+    const finish = (err, value) => {
+      if (settled) return;
+      settled = true;
+      cleanup();
+      if (err) reject(err);
+      else resolve(value);
+    };
+    const server = createServer((req, res) => {
+      try {
+        const url = new URL(req.url || "/", `http://127.0.0.1:${ABLETIME_OAUTH_PORT}`);
+        if (url.pathname !== "/callback") {
+          res.writeHead(404);
+          res.end("Not found");
+          return;
+        }
+        const err = url.searchParams.get("error");
+        const gotState = url.searchParams.get("state");
+        const gotCode = url.searchParams.get("code");
+        if (err) {
+          res.writeHead(400, { "Content-Type": "text/html" });
+          res.end(htmlPage("AbleTime", `<h1>Authorization cancelled</h1><p>${err}</p>`));
+          finish(new AbleTimeOAuthCancelledError(`AbleTime OAuth: ${err}`));
+          return;
+        }
+        if (gotState !== state || !gotCode) {
+          res.writeHead(400, { "Content-Type": "text/html" });
+          res.end(htmlPage("AbleTime", "<h1>Invalid callback</h1><p>State or code missing.</p>"));
+          finish(new Error("AbleTime OAuth callback was invalid"));
+          return;
+        }
+        res.writeHead(200, { "Content-Type": "text/html" });
+        res.end(
+          htmlPage(
+            "AbleTime connected",
+            "<h1>AbleTime connected</h1><p>You can close this tab and return to Sideboard.</p>"
+          )
+        );
+        finish(void 0, gotCode);
+      } catch (e) {
+        finish(e instanceof Error ? e : new Error(String(e)));
+      }
+    });
+    const timer = setTimeout(() => {
+      finish(new Error("AbleTime sign-in timed out \u2014 try again"));
+    }, timeoutMs);
+    const onAbort = () => finish(new AbleTimeOAuthCancelledError());
+    const cleanup = () => {
+      clearTimeout(timer);
+      opts?.signal?.removeEventListener("abort", onAbort);
+      server.close();
+    };
+    opts?.signal?.addEventListener("abort", onAbort, { once: true });
+    if (opts?.signal?.aborted) {
+      onAbort();
+      return;
+    }
+    server.on("error", (e) => {
+      finish(
+        e instanceof Error && e.code === "EADDRINUSE" ? new Error(
+          `Port ${ABLETIME_OAUTH_PORT} is in use. Close whatever is bound there, or paste an AbleTime token instead.`
+        ) : e instanceof Error ? e : new Error(String(e))
+      );
+    });
+    server.listen(ABLETIME_OAUTH_PORT, "127.0.0.1", () => {
+      void Promise.resolve(opts?.openUrl?.(authorizeUrl)).catch((e) => {
+        finish(e instanceof Error ? e : new Error(String(e)));
+      });
+    });
+  });
+  const body = new URLSearchParams({
+    grant_type: "authorization_code",
+    code,
+    redirect_uri: ableTimeOAuthRedirectUri(),
+    client_id: clientId,
+    code_verifier: pkce.verifier,
+    resource: ableTimeOAuthResource(host)
+  });
+  const data = await exchangeAbleTimeToken(body, host);
+  persistAbleTimeTokens(data, { host });
+  const token = data.access_token.trim();
+  try {
+    const { getAbleTimeOrientation } = await import("./abletime-TONBQP4O.js");
+    const orientation = await getAbleTimeOrientation({ token, host });
+    return saveAbleTimeConnection({
+      accessToken: token,
+      refreshToken: data.refresh_token?.trim(),
+      expiresIn: data.expires_in,
+      host,
+      viewerName: orientation.viewer.name
+    });
+  } catch {
+    return loadAppSettings();
+  }
+}
+export {
+  ABLETIME_OAUTH_CALLBACK_PATH,
+  ABLETIME_OAUTH_PORT,
+  ABLETIME_OAUTH_LOCAL_CALLBACK,
+  ABLETIME_OAUTH_REDIRECT,
+  ableTimeOAuthRedirectUri,
+  parseAbleTimeOAuthCallbackUrl,
+  ableTimeOAuthLocalBounceUrl,
+  ableTimeOAuthBouncePage,
+  BAKED_ABLETIME_OAUTH_CLIENT_ID,
+  ABLETIME_OAUTH_RESOURCE,
+  hasBakedAbleTimeOAuth,
+  ableTimeOAuthClientId,
+  ableTimeOAuthResource,
+  createAbleTimePkce,
+  ableTimeOAuthAuthorizeUrl,
+  ensureAbleTimeAccessToken,
+  ABLETIME_OAUTH_CANCELLED,
+  AbleTimeOAuthCancelledError,
+  isAbleTimeOAuthCancelled,
+  startAbleTimeOAuth
+};

package/dist/chunk-CYLDJWRK.js ADDED Viewed

@@ -0,0 +1,391 @@
+import {
+  DEFAULT_ABLETIME_HOST,
+  ableTimeCredentialKind,
+  normalizeAbleTimeCredential,
+  normalizeAbleTimeHost,
+  rewriteAbleTimeError
+} from "./chunk-W6VM36YO.js";
+import {
+  httpFetch
+} from "./chunk-N7WZ6NIN.js";
+import {
+  getAbleTimeAccessToken,
+  getAbleTimeHost
+} from "./chunk-QFBBUFD4.js";
+// src/integrations/abletime-rest.ts
+var ABLETIME_REST_PREFIX = "/api/public/v2";
+var ULID_RE = /^[0-9A-HJKMNP-TV-Z]{26}$/i;
+function asRecord(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function asString(value) {
+  return typeof value === "string" ? value.trim() : "";
+}
+function asList(value) {
+  if (Array.isArray(value)) return value;
+  const record = asRecord(value);
+  if (!record) return [];
+  for (const key of ["data", "tasks", "projects", "users", "items", "results"]) {
+    if (Array.isArray(record[key])) return record[key];
+  }
+  return [];
+}
+function ableTimeDocFromText(text) {
+  const trimmed = text.trim();
+  if (!trimmed) return { type: "doc", content: [] };
+  return {
+    type: "doc",
+    content: [{ type: "paragraph", content: [{ type: "text", text: trimmed }] }]
+  };
+}
+function textFromAbleTimeDoc(value) {
+  if (typeof value === "string") return value.trim();
+  const record = asRecord(value);
+  if (!record) return "";
+  if (typeof record.text === "string" && record.text.trim()) return record.text.trim();
+  const chunks = [];
+  const walk = (node) => {
+    const rec = asRecord(node);
+    if (!rec) return;
+    if (typeof rec.text === "string" && rec.text) chunks.push(rec.text);
+    if (Array.isArray(rec.content)) rec.content.forEach(walk);
+  };
+  walk(record);
+  return chunks.join("").trim();
+}
+function abletimeRestUrl(path, host, query) {
+  const base = `${normalizeAbleTimeHost(host)}${ABLETIME_REST_PREFIX}`;
+  const suffix = path.startsWith("/") ? path : `/${path}`;
+  const url = new URL(`${base}${suffix}`);
+  for (const [key, value] of Object.entries(query ?? {})) {
+    if (value) url.searchParams.set(key, value);
+  }
+  return url.href;
+}
+function looksLikeAbleTimeUlid(id) {
+  return ULID_RE.test(id.trim());
+}
+async function abletimeRestRequest(path, opts = {}) {
+  const raw = opts.token ?? getAbleTimeAccessToken();
+  const token = normalizeAbleTimeCredential(raw ?? "");
+  if (!token) {
+    throw new Error("AbleTime is not connected \u2014 paste an API key or personal access token in Account settings");
+  }
+  const host = opts.host ?? (opts.token ? DEFAULT_ABLETIME_HOST : getAbleTimeHost());
+  const url = abletimeRestUrl(path, host, opts.query);
+  const method = (opts.method ?? "GET").toUpperCase();
+  const res = await httpFetch(url, {
+    method,
+    headers: {
+      Accept: "application/json",
+      Authorization: `Bearer ${token}`,
+      ...opts.body !== void 0 ? { "Content-Type": "application/json" } : {}
+    },
+    ...opts.body !== void 0 ? { body: JSON.stringify(opts.body) } : {}
+  });
+  const text = await res.text().catch(() => "");
+  if (!res.ok) {
+    throw new Error(
+      rewriteAbleTimeError(
+        `AbleTime API error ${res.status}${text ? `: ${text.slice(0, 240)}` : ""}`
+      )
+    );
+  }
+  if (!text.trim()) return null;
+  try {
+    return JSON.parse(text);
+  } catch {
+    throw new Error(`AbleTime API returned a non-JSON response: ${text.slice(0, 200)}`);
+  }
+}
+async function restPages(path, opts, maxPages = 20) {
+  const items = [];
+  let cursor;
+  for (let i = 0; i < maxPages; i += 1) {
+    const raw = await abletimeRestRequest(path, {
+      ...opts,
+      query: { ...opts.query, ...cursor ? { cursor } : {} }
+    });
+    items.push(...asList(raw));
+    const page = asRecord(asRecord(raw)?.page);
+    const next = page ? asString(page.nextCursor) : "";
+    if (!next) break;
+    cursor = next;
+  }
+  return items;
+}
+function userDisplayName(raw) {
+  const rec = asRecord(raw);
+  if (!rec) return null;
+  const id = asString(rec.userId) || asString(rec.id);
+  const name = [asString(rec.firstName), asString(rec.lastName)].filter(Boolean).join(" ") || asString(rec.username) || asString(rec.email) || asString(rec.name);
+  if (!name) return null;
+  return { id: id || void 0, name };
+}
+function restTaskToRaw(raw, users) {
+  const rec = asRecord(raw);
+  if (!rec) return null;
+  const id = asString(rec.timeflowTaskId) || asString(rec.taskId) || asString(rec.id);
+  const identifier = asString(rec.taskRef) || asString(rec.reference) || id;
+  const title = asString(rec.title);
+  if (!id && !identifier && !title) return null;
+  const assigned = asString(rec.assignedUserId);
+  const assignee = assigned ? users.get(assigned) : void 0;
+  const comments = asList(rec.comments).map((item) => {
+    const comment = asRecord(item) ?? {};
+    const user = userDisplayName(comment);
+    return {
+      id: asString(comment.commentId) || asString(comment.id),
+      body: textFromAbleTimeDoc(comment.content) || asString(comment.contentSanitized) || asString(comment.body),
+      createdAt: asString(comment.createdAt) || asString(comment.lastUpdate),
+      user: user?.name || asString(comment.username)
+    };
+  });
+  return {
+    id,
+    taskId: id,
+    timeflowTaskId: id,
+    reference: identifier,
+    taskRef: identifier,
+    title: title || identifier,
+    state: asString(rec.taskState) || asString(rec.state),
+    description: textFromAbleTimeDoc(rec.description) || asString(rec.descriptionSanitized),
+    projectId: asString(rec.projectId),
+    categoryId: asString(rec.projectCategoryId) || asString(rec.categoryId),
+    tags: rec.tags,
+    comments,
+    createdAt: asString(rec.dateCreated) || asString(rec.createdAt),
+    updatedAt: asString(rec.lastUpdate) || asString(rec.updatedAt),
+    ...assignee ? { assignee } : {}
+  };
+}
+function restProjectToRaw(raw) {
+  const rec = asRecord(raw);
+  if (!rec) return null;
+  const id = asString(rec.projectId) || asString(rec.id);
+  const name = asString(rec.projectName) || asString(rec.name);
+  if (!id && !name) return null;
+  const categories = asList(rec.categories).map((item) => {
+    const cat = asRecord(item) ?? {};
+    return {
+      id: asString(cat.projectCategoryId) || asString(cat.categoryId) || asString(cat.id),
+      name: asString(cat.categoryName) || asString(cat.name)
+    };
+  });
+  return { id, name, projectId: id, projectName: name, categories };
+}
+async function listUsers(opts) {
+  const users = /* @__PURE__ */ new Map();
+  for (const item of await restPages("/users", opts).catch(() => [])) {
+    const user = userDisplayName(item);
+    const rec = asRecord(item);
+    const id = user?.id || (rec ? asString(rec.userId) : "");
+    if (user && id) users.set(id, user);
+  }
+  return users;
+}
+async function listProjectsRaw(opts) {
+  const items = await restPages("/projects", { ...opts, query: { expand: "categories" } });
+  return items.map(restProjectToRaw).filter((item) => Boolean(item));
+}
+async function listTasksRaw(opts) {
+  const [users, items] = await Promise.all([
+    listUsers(opts),
+    restPages("/tasks", {
+      ...opts,
+      query: {
+        ...opts.projectId ? { projectId: opts.projectId } : {}
+      }
+    })
+  ]);
+  let tasks = items.map((item) => restTaskToRaw(item, users)).filter((item) => Boolean(item));
+  const needle = opts.query?.trim().toLowerCase();
+  if (needle) {
+    tasks = tasks.filter((task) => {
+      const hay = [task.title, task.reference, task.taskRef, task.id].map((value) => String(value ?? "").toLowerCase()).join(" ");
+      const tags = Array.isArray(task.tags) ? task.tags.join(" ").toLowerCase() : "";
+      return hay.includes(needle) || tags.includes(needle);
+    });
+  }
+  return tasks;
+}
+async function resolveTaskId(id, opts) {
+  const wanted = id.trim();
+  if (!wanted) throw new Error("AbleTime task id is required");
+  if (looksLikeAbleTimeUlid(wanted)) return wanted;
+  const tasks = await listTasksRaw(opts);
+  const match = tasks.find((task) => {
+    const ref = String(task.reference ?? task.taskRef ?? "").toLowerCase();
+    const taskId = String(task.id ?? "").toLowerCase();
+    return ref === wanted.toLowerCase() || taskId === wanted.toLowerCase();
+  });
+  if (!match?.id) throw new Error(`AbleTime task not found: ${id}`);
+  return String(match.id);
+}
+async function getTaskRaw(id, opts) {
+  const taskId = await resolveTaskId(id, opts);
+  const [users, raw] = await Promise.all([
+    listUsers(opts),
+    abletimeRestRequest(`/tasks/${encodeURIComponent(taskId)}`, {
+      ...opts,
+      query: { expand: "comments" }
+    })
+  ]);
+  const task = restTaskToRaw(raw, users);
+  if (!task) throw new Error(`AbleTime task not found: ${id}`);
+  return task;
+}
+function firstStringArg(args, keys) {
+  for (const key of keys) {
+    const value = asString(args[key]);
+    if (value) return value;
+  }
+  return "";
+}
+async function callAbleTimeRestTool(name, args = {}, opts) {
+  const token = normalizeAbleTimeCredential(opts?.token ?? getAbleTimeAccessToken() ?? "");
+  if (!token) {
+    throw new Error("AbleTime is not connected \u2014 paste an API key or connect via browser");
+  }
+  if (ableTimeCredentialKind(token) === "pat") {
+    throw new Error("AbleTime REST transport is for organization keys and OAuth tokens, not apt_\u2026");
+  }
+  const requestOpts = { ...opts, token };
+  switch (name) {
+    case "orientation": {
+      const [users, projects, tasks] = await Promise.all([
+        listUsers(requestOpts),
+        listProjectsRaw(requestOpts),
+        listTasksRaw(requestOpts)
+      ]);
+      const viewer = [...users.values()].find((user) => user.name) ?? [...users.values()][0] ?? { name: "AbleTime" };
+      return { viewer, projects, tasks };
+    }
+    case "list_projects":
+      return { data: await listProjectsRaw(requestOpts) };
+    case "list_users":
+      return { data: [...(await listUsers(requestOpts)).values()] };
+    case "list_tasks":
+      return {
+        data: await listTasksRaw({
+          ...requestOpts,
+          projectId: firstStringArg(args, ["project_id", "projectId", "project"])
+        })
+      };
+    case "search_tasks":
+      return {
+        data: await listTasksRaw({
+          ...requestOpts,
+          query: firstStringArg(args, ["query", "q"])
+        })
+      };
+    case "get_task":
+      return await getTaskRaw(firstStringArg(args, ["id", "task_id", "task"]), requestOpts);
+    case "create_task": {
+      const title = firstStringArg(args, ["title"]);
+      if (!title) throw new Error("AbleTime task title is required");
+      const projectId = firstStringArg(args, ["project_id", "projectId", "project"]);
+      if (!projectId) throw new Error("AbleTime project is required");
+      const projects = await listProjectsRaw(requestOpts);
+      const project = projects.find(
+        (item) => String(item.id).toLowerCase() === projectId.toLowerCase() || String(item.name).toLowerCase() === projectId.toLowerCase()
+      ) ?? projects[0];
+      if (!project) throw new Error("AbleTime has no projects to create a task in");
+      const categories = asList(project.categories);
+      const wantedCategory = firstStringArg(args, ["category_id", "categoryId", "category"]);
+      const category = categories.map((item) => asRecord(item)).find((item) => {
+        if (!item || !wantedCategory) return false;
+        return asString(item.id).toLowerCase() === wantedCategory.toLowerCase() || asString(item.name).toLowerCase() === wantedCategory.toLowerCase();
+      }) ?? asRecord(categories[0]);
+      const created = await abletimeRestRequest("/tasks", {
+        ...requestOpts,
+        method: "POST",
+        body: {
+          projectId: project.id,
+          projectCategoryId: category ? asString(category.id) : void 0,
+          title
+        }
+      });
+      const state = firstStringArg(args, ["state"]);
+      const createdId = asString(asRecord(created)?.timeflowTaskId);
+      const description = asString(args.description);
+      if (createdId && description) {
+        await abletimeRestRequest(`/tasks/${encodeURIComponent(createdId)}`, {
+          ...requestOpts,
+          method: "PATCH",
+          body: { description: ableTimeDocFromText(description) }
+        }).catch(() => void 0);
+      }
+      if (createdId && state && state !== "todo") {
+        await abletimeRestRequest(`/tasks/${encodeURIComponent(createdId)}/state`, {
+          ...requestOpts,
+          method: "POST",
+          body: { taskState: state }
+        }).catch(() => void 0);
+      }
+      return createdId ? await getTaskRaw(createdId, requestOpts) : restTaskToRaw(created, await listUsers(requestOpts));
+    }
+    case "update_task": {
+      const id = await resolveTaskId(firstStringArg(args, ["id", "task_id", "task"]), requestOpts);
+      const patch = {};
+      const title = firstStringArg(args, ["title"]);
+      if (title) patch.title = title;
+      if (args.description !== void 0) {
+        patch.description = args.description == null || args.description === "" ? null : ableTimeDocFromText(String(args.description));
+      }
+      if (args.tags !== void 0 || args.labels !== void 0) {
+        patch.tags = args.tags ?? args.labels ?? args.tag_names;
+      }
+      if (Object.keys(patch).length > 0) {
+        await abletimeRestRequest(`/tasks/${encodeURIComponent(id)}`, {
+          ...requestOpts,
+          method: "PATCH",
+          body: patch
+        });
+      }
+      return await getTaskRaw(id, requestOpts);
+    }
+    case "set_task_state": {
+      const id = await resolveTaskId(firstStringArg(args, ["id", "task_id", "task"]), requestOpts);
+      const state = firstStringArg(args, ["state", "taskState"]);
+      if (!state) throw new Error("AbleTime task state is required");
+      await abletimeRestRequest(`/tasks/${encodeURIComponent(id)}/state`, {
+        ...requestOpts,
+        method: "POST",
+        body: { taskState: state }
+      });
+      return await getTaskRaw(id, requestOpts);
+    }
+    case "create_comment": {
+      const id = await resolveTaskId(firstStringArg(args, ["id", "task_id", "task"]), requestOpts);
+      const body = firstStringArg(args, ["body", "comment", "text"]);
+      if (!body) throw new Error("AbleTime comment body is required");
+      const created = await abletimeRestRequest(`/tasks/${encodeURIComponent(id)}/comments`, {
+        ...requestOpts,
+        method: "POST",
+        body: { content: ableTimeDocFromText(body) }
+      });
+      const rec = asRecord(created) ?? {};
+      return {
+        id: asString(rec.commentId) || void 0,
+        body: textFromAbleTimeDoc(rec.content) || body
+      };
+    }
+    case "set_task_dependency":
+      throw new Error(
+        "AbleTime organization API keys cannot set task dependencies on REST yet \u2014 use a personal access token (apt_\u2026) for MCP project-management tools."
+      );
+    default:
+      throw new Error(`AbleTime organization API keys do not support ${name} on REST`);
+  }
+}
+export {
+  ABLETIME_REST_PREFIX,
+  ableTimeDocFromText,
+  textFromAbleTimeDoc,
+  abletimeRestUrl,
+  looksLikeAbleTimeUlid,
+  callAbleTimeRestTool
+};