@sideboard-ai/core 0.1.202 → 0.1.204

package/dist/chunk-W6VM36YO.js

@@ -0,0 +1,272 @@
+import {
+  httpFetch
+} from "./chunk-N7WZ6NIN.js";
+import {
+  getAbleTimeHost,
+  isAbleTimeConnected
+} from "./chunk-QFBBUFD4.js";
+
+// src/integrations/abletime-mcp.ts
+var DEFAULT_ABLETIME_HOST = "https://track.abletime.com";
+var ABLETIME_MCP_PATH = "/api/public/v2/mcp";
+var ABLETIME_MCP_PM_PATH = "/api/public/v2/mcp/pm";
+var MCP_PROTOCOL_VERSION = "2025-03-26";
+var ABLETIME_PM_TOOL_NAMES = [
+  "set_task_assignee",
+  "set_task_priority",
+  "set_task_stage",
+  "set_task_dependency",
+  "set_task_blocked",
+  "set_task_locked",
+  "set_task_schedule",
+  "clear_task_schedule",
+  "archive_task",
+  "delete_task"
+];
+function abletimeToolUsesPm(name) {
+  return ABLETIME_PM_TOOL_NAMES.includes(name);
+}
+function normalizeAbleTimeHost(raw) {
+  const trimmed = raw?.trim() || DEFAULT_ABLETIME_HOST;
+  const withScheme = /^https?:\/\//i.test(trimmed) ? trimmed : `https://${trimmed}`;
+  return withScheme.replace(/\/+$/, "");
+}
+function abletimeMcpUrl(host, opts) {
+  const path = opts?.pm ? ABLETIME_MCP_PM_PATH : ABLETIME_MCP_PATH;
+  return `${normalizeAbleTimeHost(host)}${path}`;
+}
+var ABLETIME_PAT_PREFIX = "apt_";
+var ABLETIME_ORG_KEY_PREFIX = "atk_";
+var ABLETIME_OAUTH_TOKEN_PREFIX = "acn_";
+var ORG_KEY_HINT = "AbleTime MCP needs a personal access token (apt_\u2026) from Edit Profile \u2192 API Access, not an organization API key (atk_\u2026) from Settings \u2192 Integrations \u2192 API Keys.";
+var REJECTED_CREDENTIAL_HINT = "AbleTime rejected this credential (unknown, revoked, or expired). Reconnect via browser, or paste a personal access token (apt_\u2026) from Edit Profile \u2192 API Access. Organization API keys (atk_\u2026) use REST, not MCP.";
+var REWRITE_APPLIED = /— Enable Agent access \(MCP\)|— AbleTime MCP needs a personal access token|— AbleTime plan does not include API access|— AbleTime rejected this credential/;
+function normalizeAbleTimeCredential(raw) {
+  return raw.trim().replace(/^bearer\s+/i, "").trim();
+}
+function ableTimeCredentialKind(raw) {
+  const token = normalizeAbleTimeCredential(raw);
+  const lower = token.toLowerCase();
+  if (lower.startsWith(ABLETIME_PAT_PREFIX)) return "pat";
+  if (lower.startsWith(ABLETIME_ORG_KEY_PREFIX)) return "org";
+  if (lower.startsWith(ABLETIME_OAUTH_TOKEN_PREFIX) || token.startsWith("eyJ")) return "oauth";
+  return "unknown";
+}
+function ableTimeUsesRest(raw) {
+  const token = normalizeAbleTimeCredential(raw);
+  const kind = ableTimeCredentialKind(token);
+  if (kind === "org") return true;
+  if (kind === "oauth") return token.startsWith("eyJ");
+  return kind === "unknown";
+}
+function isAbleTimeRejectedCredential(message) {
+  return /INTEGRATION_KEY_INVALID|INTEGRATION_KEY_MISSING|INTEGRATION_PAT_REQUIRED|\b401\b/i.test(
+    message
+  );
+}
+function assertAbleTimeMcpCredential(raw) {
+  const token = normalizeAbleTimeCredential(raw);
+  if (!token) {
+    throw new Error("AbleTime personal access token is required");
+  }
+  if (ableTimeCredentialKind(token) === "org") {
+    throw new Error(ORG_KEY_HINT);
+  }
+  return token;
+}
+function assertAbleTimeCredential(raw) {
+  const token = normalizeAbleTimeCredential(raw);
+  if (!token) {
+    throw new Error("AbleTime API key or personal access token is required");
+  }
+  return token;
+}
+function rewriteAbleTimeError(message) {
+  if (REWRITE_APPLIED.test(message)) return message;
+  if (/INTEGRATION_AGENT_ACCESS_DISABLED/i.test(message)) {
+    return `${message} \u2014 Enable Agent access (MCP) in AbleTime Settings \u2192 Integrations \u2192 API Keys.`;
+  }
+  if (/INTEGRATION_PAT_REQUIRED/i.test(message)) {
+    return `${message} \u2014 ${ORG_KEY_HINT}`;
+  }
+  if (/INTEGRATION_PLAN_REQUIRED/i.test(message)) {
+    return `${message} \u2014 AbleTime plan does not include API access.`;
+  }
+  if (/INTEGRATION_KEY_INVALID|INTEGRATION_KEY_MISSING|401|unauthorized|invalid token/i.test(message)) {
+    return `${message} \u2014 ${REJECTED_CREDENTIAL_HINT}`;
+  }
+  return message;
+}
+function asRecord(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function parseSseJson(body) {
+  const blocks = body.split(/\n\n+/);
+  let last;
+  for (const block of blocks) {
+    const data = block.split("\n").filter((line) => line.startsWith("data:")).map((line) => line.slice(5).trim()).filter((line) => line && line !== "[DONE]").join("\n");
+    if (!data) continue;
+    try {
+      last = JSON.parse(data);
+    } catch {
+    }
+  }
+  if (last !== void 0) return last;
+  try {
+    return JSON.parse(body);
+  } catch {
+    throw new Error(`AbleTime MCP returned a non-JSON response: ${body.slice(0, 200)}`);
+  }
+}
+function unwrapToolResult(result) {
+  const record = asRecord(result);
+  if (!record) return result;
+  const content = record.content;
+  if (Array.isArray(content)) {
+    const texts = content.map((part) => {
+      const item = asRecord(part);
+      if (!item) return "";
+      return typeof item.text === "string" ? item.text : "";
+    }).filter(Boolean);
+    if (texts.length === 1) {
+      const text = texts[0];
+      try {
+        return JSON.parse(text);
+      } catch {
+        return text;
+      }
+    }
+    if (texts.length > 1) return texts.join("\n");
+  }
+  if (record.structuredContent != null) return record.structuredContent;
+  if (record.isError === true) {
+    const message = typeof record.message === "string" ? record.message : textsFromUnknown(result) || "AbleTime tool failed";
+    throw new Error(message);
+  }
+  return result;
+}
+function textsFromUnknown(value) {
+  const record = asRecord(value);
+  if (!record) return "";
+  if (typeof record.message === "string") return record.message;
+  if (typeof record.error === "string") return record.error;
+  return "";
+}
+async function abletimeMcpRequest(method, params, opts) {
+  const rawToken = opts?.token ?? await import("./abletime-oauth-SD4SZY5U.js").then((m) => m.ensureAbleTimeAccessToken());
+  if (!rawToken?.trim()) {
+    throw new Error("AbleTime is not connected \u2014 paste a personal access token in Account settings");
+  }
+  const token = assertAbleTimeMcpCredential(rawToken);
+  const url = abletimeMcpUrl(
+    opts?.host ?? (opts?.token ? DEFAULT_ABLETIME_HOST : getAbleTimeHost()),
+    { pm: opts?.pm }
+  );
+  const res = await httpFetch(url, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Accept: "application/json, text/event-stream",
+      Authorization: `Bearer ${token}`,
+      "MCP-Protocol-Version": MCP_PROTOCOL_VERSION
+    },
+    body: JSON.stringify({
+      jsonrpc: "2.0",
+      id: 1,
+      method,
+      ...params === void 0 ? {} : { params }
+    })
+  });
+  const body = await res.text().catch(() => "");
+  if (!res.ok) {
+    throw new Error(
+      rewriteAbleTimeError(
+        `AbleTime MCP error ${res.status}${body ? `: ${body.slice(0, 240)}` : ""}`
+      )
+    );
+  }
+  const contentType = res.headers.get("content-type") ?? "";
+  const parsed = contentType.includes("text/event-stream") ? parseSseJson(body) : (() => {
+    try {
+      return JSON.parse(body);
+    } catch {
+      return parseSseJson(body);
+    }
+  })();
+  const rpc = asRecord(parsed);
+  if (rpc?.error) {
+    const detail = typeof rpc.error.message === "string" && rpc.error.message.trim() ? rpc.error.message : `AbleTime MCP error ${rpc.error.code ?? ""}`.trim();
+    throw new Error(rewriteAbleTimeError(detail));
+  }
+  if (rpc && "result" in rpc) return rpc.result;
+  return parsed;
+}
+async function initializeIfNeeded(opts) {
+  try {
+    await abletimeMcpRequest(
+      "initialize",
+      {
+        protocolVersion: MCP_PROTOCOL_VERSION,
+        capabilities: {},
+        clientInfo: { name: "sideboard", version: "1.0.0" }
+      },
+      opts
+    );
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    if (/already initialized|not (required|supported)|method not found|-32601/i.test(message)) {
+      return;
+    }
+    throw err;
+  }
+}
+async function callAbleTimeTool(name, args = {}, opts) {
+  if (!opts?.token && !isAbleTimeConnected()) {
+    throw new Error("AbleTime is not connected \u2014 paste a personal access token in Account settings");
+  }
+  const rawToken = opts?.token ?? await import("./abletime-oauth-SD4SZY5U.js").then((m) => m.ensureAbleTimeAccessToken());
+  if (rawToken && ableTimeUsesRest(rawToken)) {
+    const { callAbleTimeRestTool } = await import("./abletime-rest-J2OBB4VA.js");
+    return callAbleTimeRestTool(name, args, { ...opts, token: rawToken });
+  }
+  const requestOpts = { ...opts, pm: opts?.pm ?? abletimeToolUsesPm(name) };
+  const call = () => abletimeMcpRequest("tools/call", { name, arguments: args }, requestOpts).then((result) => {
+    return unwrapToolResult(result);
+  });
+  try {
+    return await call();
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    if (/initialize|session|not initialized|-32000/i.test(message)) {
+      await initializeIfNeeded(requestOpts);
+      return await call();
+    }
+    if (rawToken && ableTimeUsesRest(rawToken) && isAbleTimeRejectedCredential(message)) {
+      const { callAbleTimeRestTool } = await import("./abletime-rest-J2OBB4VA.js");
+      return callAbleTimeRestTool(name, args, { ...opts, token: rawToken });
+    }
+    throw err instanceof Error ? new Error(rewriteAbleTimeError(err.message)) : err;
+  }
+}
+
+export {
+  DEFAULT_ABLETIME_HOST,
+  ABLETIME_MCP_PATH,
+  ABLETIME_MCP_PM_PATH,
+  ABLETIME_PM_TOOL_NAMES,
+  abletimeToolUsesPm,
+  normalizeAbleTimeHost,
+  abletimeMcpUrl,
+  ABLETIME_PAT_PREFIX,
+  ABLETIME_ORG_KEY_PREFIX,
+  ABLETIME_OAUTH_TOKEN_PREFIX,
+  normalizeAbleTimeCredential,
+  ableTimeCredentialKind,
+  ableTimeUsesRest,
+  isAbleTimeRejectedCredential,
+  assertAbleTimeMcpCredential,
+  assertAbleTimeCredential,
+  rewriteAbleTimeError,
+  abletimeMcpRequest,
+  callAbleTimeTool
+};

package/dist/{chunk-NIVF5NDN.js → chunk-WF33LOP4.js}

@@ -2,7 +2,7 @@
 
 import {
   isOrchestratorThread
-} from "./chunk-54RSAMBH.js";
+} from "./chunk-5SMS6QTO.js";
 import {
   applyConnectedTeamToCli,
   brightsyMcpServerName,
@@ -20,7 +20,7 @@ import {
   mergeAgentGitAuthEnv,
   resolveAgentGitAuthEnv,
   resolveCodexGitWritableRoots
-} from "./chunk-RPX6VDW7.js";
+} from "./chunk-QUW5D62C.js";
 import {
   enrichPathWithNpmGlobalBin,
   isConductorBundledCli,
@@ -38,7 +38,7 @@ import {
   resolveClaudeExecutable,
   unwrapStrippedElectronLaunch,
   wrapElectronAsNodeLaunch
-} from "./chunk-ISV5IFH3.js";
+} from "./chunk-X743YN5Y.js";
 import {
   appDataDir
 } from "./chunk-EQNRWDLN.js";
@@ -410,6 +410,9 @@ function humanizeAgentFailDetail(detail) {
   if (/\[resource_exhausted\]|resource_exhausted|findfileswithripgrep/.test(lower)) {
     return "Cursor local file search failed (ripgrep / resource_exhausted). Wait a minute and retry; if it keeps happening, check Cursor usage.";
   }
+  if (looksLikeCodexMcpError(raw)) {
+    return `${raw} \u2014 skip that vendor MCP and continue (PostHog: Settings \u2192 Connectors + HTTP API).`;
+  }
   if (/invalid user api key|invalid api key|not logged in|not authenticated|unauthorized|authentication|please run.*login|codex login|claude auth|cursor api/.test(
     lower
   )) {
@@ -467,9 +470,24 @@ function turnFailChatText(opts) {
 
 ${fail}`;
 }
+function looksLikeCodexMcpError(text) {
+  const t = text.trim().toLowerCase();
+  if (!t) return false;
+  if (/authrequired|authorization required/.test(t) && /mcp|posthog|rmcp|connector|plugin/.test(t)) {
+    return true;
+  }
+  if (/\bposthog\b/.test(t) && /mcp|oauth|auth|unauthorized|401|plugin|app/.test(t)) {
+    return true;
+  }
+  if (/\brmcp\b/.test(t) && /fatal|quit|transport|error|died|kill|auth/.test(t)) {
+    return true;
+  }
+  return /mcp[_ -]?(server|tool|error|transport|client)/.test(t) && /fail|error|timeout|disconnect|auth|unauthorized/.test(t);
+}
 function shouldFeedErrorBackToAgent(opts) {
   const detail = opts.detail.trim();
   const chat = (opts.assistantText ?? "").trim();
+  if (looksLikeCodexMcpError(detail)) return true;
   if (looksLikeAgentFailureMessage(detail) || looksLikeAgentFailureMessage(chat)) {
     return false;
   }
@@ -2423,7 +2441,7 @@ var claudeAdapter = {
       );
     }
     const mode = permissionMode(thread);
-    const { isOrchestratorThread: isOrchestratorThread2 } = await import("./global-workspace-NLLAPQJI.js");
+    const { isOrchestratorThread: isOrchestratorThread2 } = await import("./global-workspace-2I2T7FL5.js");
     const isOrchestrator = isOrchestratorThread2(thread);
     const injectedServers = await buildInjectedMcpServers({
       includeSideboard: true,
@@ -2755,7 +2773,18 @@ function toCodexDisableUserMcpArgs(names) {
   return args;
 }
 function toCodexUnattendedAppsArgs() {
-  return ["-c", "features.apps=false", "-c", "apps._default.enabled=false"];
+  return [
+    "-c",
+    "features.apps=false",
+    "-c",
+    "apps._default.enabled=false",
+    "-c",
+    "apps.posthog.enabled=false",
+    "-c",
+    "features.plugins=false",
+    "-c",
+    "mcp_servers.posthog.enabled=false"
+  ];
 }
 
 // src/agents/codex.ts
@@ -4422,11 +4451,14 @@ function staleOk(now) {
   if (now - lastGood.at > CLAUDE_USAGE_STALE_OK_MS) return null;
   return lastGood.value;
 }
+function reuseLast() {
+  return lastGood?.value ?? null;
+}
 async function getClaudePlanUsage(opts = {}) {
   const now = opts.now ?? Date.now();
+  if (now < errorUntil) return reuseLast() ?? staleOk(now);
   if (!opts.force) {
     if (cache && now - cache.at < CLAUDE_USAGE_TTL_MS) return cache.value;
-    if (now < errorUntil) return staleOk(now);
   }
   if (inflight) return inflight;
   inflight = (async () => {
@@ -4457,6 +4489,12 @@ async function getClaudePlanUsage(opts = {}) {
         cache = { at: now, value: null };
         return null;
       }
+      if (res.status === 429) {
+        errorUntil = now + CLAUDE_USAGE_ERROR_TTL_MS;
+        const last = reuseLast();
+        if (last) cache = { at: now, value: last };
+        return last;
+      }
       if (!res.ok) {
         errorUntil = now + CLAUDE_USAGE_ERROR_TTL_MS;
         return staleOk(now);

package/dist/{chunk-STPZQR5B.js → chunk-WVATAIF4.js}

@@ -7,7 +7,7 @@ import {
 import {
   getGithubGitAuthMode,
   getGithubPat
-} from "./chunk-CXFW5LIH.js";
+} from "./chunk-QFBBUFD4.js";
 import {
   listThreads
 } from "./chunk-DFUES6QU.js";
@@ -2154,26 +2154,21 @@ function resolvePrSelectors(thread) {
 function resolvePrSelector(thread) {
   return resolvePrSelectors(thread)[0] ?? null;
 }
+function connectedPrSelectors(thread, currentHeadPrUrl) {
+  const out = [];
+  const push = (value) => {
+    const v = value?.trim();
+    if (!v || out.includes(v)) return;
+    out.push(v);
+  };
+  push(currentHeadPrUrl);
+  for (const selector of resolvePrSelectors(thread)) push(selector);
+  return out;
+}
 async function getPrForHeadBranch(repoPath, branch) {
   const head = normalizeGitBranchName(branch);
   if (!head || isDefaultishSourceRef(head)) return null;
   const slug = await resolveGithubRepoSlug(repoPath);
-  const viewArgs = [
-    "pr",
-    "view",
-    head,
-    "--json",
-    "number,title,headRefName,url,isCrossRepository,author"
-  ];
-  if (slug) viewArgs.push("--repo", slug);
-  const viewed = await gh(viewArgs, repoPath, { reject: false });
-  if (viewed.exitCode === 0 && viewed.stdout.trim()) {
-    try {
-      return JSON.parse(viewed.stdout);
-    } catch {
-      return null;
-    }
-  }
   const listHead = slug ? ghHeadRef(slug, head) : head;
   const listArgs = [
     "pr",
@@ -2189,10 +2184,28 @@ async function getPrForHeadBranch(repoPath, branch) {
   ];
   if (slug) listArgs.push("--repo", slug);
   const listed = await gh(listArgs, repoPath, { reject: false });
-  if (listed.exitCode !== 0 || !listed.stdout.trim()) return null;
+  if (listed.exitCode === 0 && listed.stdout.trim()) {
+    try {
+      const rows = JSON.parse(listed.stdout);
+      if (rows[0]) return rows[0];
+    } catch {
+    }
+  }
+  const viewArgs = [
+    "pr",
+    "view",
+    head,
+    "--json",
+    "number,title,headRefName,url,isCrossRepository,author,state"
+  ];
+  if (slug) viewArgs.push("--repo", slug);
+  const viewed = await gh(viewArgs, repoPath, { reject: false });
+  if (viewed.exitCode !== 0 || !viewed.stdout.trim()) return null;
   try {
-    const rows = JSON.parse(listed.stdout);
-    return rows[0] ?? null;
+    const info = JSON.parse(viewed.stdout);
+    const state = (info.state ?? "OPEN").trim().toUpperCase();
+    if (state !== "OPEN") return null;
+    return info;
   } catch {
     return null;
   }
@@ -3313,6 +3326,7 @@ export {
   isDefaultishSourceRef,
   resolvePrSelectors,
   resolvePrSelector,
+  connectedPrSelectors,
   getPrForHeadBranch,
   detectLocalMergeConflicts,
   getPrChecks,

package/dist/{chunk-ISV5IFH3.js → chunk-X743YN5Y.js}

@@ -356,6 +356,9 @@ function normalizeVault(raw) {
   if (typeof raw.abletimeAccessToken === "string" && raw.abletimeAccessToken.trim()) {
     out.abletimeAccessToken = raw.abletimeAccessToken.trim();
   }
+  if (typeof raw.abletimeRefreshToken === "string" && raw.abletimeRefreshToken.trim()) {
+    out.abletimeRefreshToken = raw.abletimeRefreshToken.trim();
+  }
   if (typeof raw.vercelToken === "string" && raw.vercelToken.trim()) {
     out.vercelToken = raw.vercelToken.trim();
   }
@@ -437,6 +440,7 @@ function emptyPublicIntegrations() {
     hasSlackAppToken: false,
     hasGithubPat: false,
     hasAbleTimeToken: false,
+    hasAbleTimeOAuth: false,
     hasVercelToken: false,
     hasSupabaseToken: false,
     hasPosthogToken: false,
@@ -461,6 +465,7 @@ function toPublicAppSettings(settings) {
   const slackAppToken = integrations.slackAppToken;
   const githubPat = integrations.githubPat;
   const abletimeAccessToken = integrations.abletimeAccessToken;
+  const abletimeRefreshToken = integrations.abletimeRefreshToken;
   const vercelToken = integrations.vercelToken;
   const supabaseAccessToken = integrations.supabaseAccessToken;
   const posthogPersonalApiKey = integrations.posthogPersonalApiKey;
@@ -473,6 +478,7 @@ function toPublicAppSettings(settings) {
   delete integrations.slackAppToken;
   delete integrations.githubPat;
   delete integrations.abletimeAccessToken;
+  delete integrations.abletimeRefreshToken;
   delete integrations.vercelToken;
   delete integrations.supabaseAccessToken;
   delete integrations.posthogPersonalApiKey;
@@ -487,7 +493,8 @@ function toPublicAppSettings(settings) {
       hasSlackClientSecret: Boolean(slackClientSecret?.trim()),
       hasSlackAppToken: Boolean(slackAppToken?.trim()),
       hasGithubPat: Boolean(githubPat?.trim()),
-      hasAbleTimeToken: Boolean(abletimeAccessToken?.trim()),
+      hasAbleTimeToken: Boolean(abletimeAccessToken?.trim() || abletimeRefreshToken?.trim()),
+      hasAbleTimeOAuth: Boolean(abletimeRefreshToken?.trim()),
       hasVercelToken: Boolean(vercelToken?.trim()),
       hasSupabaseToken: Boolean(supabaseAccessToken?.trim()),
       hasPosthogToken: Boolean(posthogPersonalApiKey?.trim()),
@@ -633,6 +640,16 @@ function normalizeIntegrations(raw) {
     const token = source.abletimeAccessToken.trim();
     if (token) out.abletimeAccessToken = token;
   }
+  if (typeof source.abletimeRefreshToken === "string") {
+    const token = source.abletimeRefreshToken.trim();
+    if (token) out.abletimeRefreshToken = token;
+  }
+  if (typeof source.abletimeTokenExpiresAt === "number" && Number.isFinite(source.abletimeTokenExpiresAt)) {
+    out.abletimeTokenExpiresAt = source.abletimeTokenExpiresAt;
+  } else if (typeof source.abletimeTokenExpiresAt === "string") {
+    const n = Number(source.abletimeTokenExpiresAt);
+    if (Number.isFinite(n)) out.abletimeTokenExpiresAt = n;
+  }
   if (typeof source.abletimeHost === "string") {
     const host = source.abletimeHost.trim();
     if (host) out.abletimeHost = host;
@@ -921,7 +938,7 @@ function readSettingsFile() {
 }
 function diskHoldsSecrets(disk) {
   return Boolean(
-    disk.integrations.linearApiKey || disk.integrations.linearAccessToken || disk.integrations.linearRefreshToken || disk.integrations.linearClientSecret || disk.integrations.slackClientSecret || disk.integrations.slackAppToken || disk.integrations.githubPat || disk.integrations.abletimeAccessToken || disk.integrations.vercelToken || disk.integrations.supabaseAccessToken || disk.integrations.posthogPersonalApiKey || disk.integrations.sentryAuthToken || Object.keys(disk.environment).length > 0
+    disk.integrations.linearApiKey || disk.integrations.linearAccessToken || disk.integrations.linearRefreshToken || disk.integrations.linearClientSecret || disk.integrations.slackClientSecret || disk.integrations.slackAppToken || disk.integrations.githubPat || disk.integrations.abletimeAccessToken || disk.integrations.abletimeRefreshToken || disk.integrations.vercelToken || disk.integrations.supabaseAccessToken || disk.integrations.posthogPersonalApiKey || disk.integrations.sentryAuthToken || Object.keys(disk.environment).length > 0
   );
 }
 function mergeVault(disk) {
@@ -952,6 +969,9 @@ function mergeVault(disk) {
   if (vault.abletimeAccessToken && !integrations.abletimeAccessToken) {
     integrations.abletimeAccessToken = vault.abletimeAccessToken;
   }
+  if (vault.abletimeRefreshToken && !integrations.abletimeRefreshToken) {
+    integrations.abletimeRefreshToken = vault.abletimeRefreshToken;
+  }
   if (vault.vercelToken && !integrations.vercelToken) {
     integrations.vercelToken = vault.vercelToken;
   }
@@ -976,6 +996,7 @@ function persistSplit(settings) {
   const slackAppToken = integrations.slackAppToken;
   const githubPat = integrations.githubPat;
   const abletimeAccessToken = integrations.abletimeAccessToken;
+  const abletimeRefreshToken = integrations.abletimeRefreshToken;
   const vercelToken = integrations.vercelToken;
   const supabaseAccessToken = integrations.supabaseAccessToken;
   const posthogPersonalApiKey = integrations.posthogPersonalApiKey;
@@ -988,6 +1009,7 @@ function persistSplit(settings) {
   delete integrations.slackAppToken;
   delete integrations.githubPat;
   delete integrations.abletimeAccessToken;
+  delete integrations.abletimeRefreshToken;
   delete integrations.vercelToken;
   delete integrations.supabaseAccessToken;
   delete integrations.posthogPersonalApiKey;
@@ -1006,6 +1028,7 @@ function persistSplit(settings) {
     slackAppToken,
     githubPat,
     abletimeAccessToken,
+    abletimeRefreshToken,
     vercelToken,
     supabaseAccessToken,
     posthogPersonalApiKey,
@@ -1192,6 +1215,8 @@ function updateIntegrationsSettings(patch) {
   if ("abletimeAccessToken" in patch) {
     if (patch.abletimeAccessToken == null || patch.abletimeAccessToken.trim() === "") {
       delete integrations.abletimeAccessToken;
+      delete integrations.abletimeRefreshToken;
+      delete integrations.abletimeTokenExpiresAt;
       delete integrations.abletimeViewerName;
     } else {
       integrations.abletimeAccessToken = patch.abletimeAccessToken.trim();
@@ -1544,7 +1569,9 @@ function disconnectLinearConnection() {
   return saveAppSettings({ ...current, integrations });
 }
 function isAbleTimeConnected(settings = loadAppSettings()) {
-  return Boolean(settings.integrations.abletimeAccessToken?.trim());
+  return Boolean(
+    settings.integrations.abletimeAccessToken?.trim() || settings.integrations.abletimeRefreshToken?.trim()
+  );
 }
 function getAbleTimeAccessToken(settings = loadAppSettings()) {
   const token = settings.integrations.abletimeAccessToken?.trim();
@@ -1557,6 +1584,12 @@ function saveAbleTimeConnection(input) {
   const current = loadAppSettings();
   const integrations = { ...current.integrations };
   integrations.abletimeAccessToken = input.accessToken.trim();
+  if (input.refreshToken?.trim()) {
+    integrations.abletimeRefreshToken = input.refreshToken.trim();
+  }
+  if (typeof input.expiresIn === "number" && Number.isFinite(input.expiresIn)) {
+    integrations.abletimeTokenExpiresAt = Date.now() + Math.max(0, input.expiresIn) * 1e3;
+  }
   if (input.host?.trim()) {
     integrations.abletimeHost = input.host.trim();
   }
@@ -1569,6 +1602,8 @@ function disconnectAbleTimeConnection() {
   const current = loadAppSettings();
   const integrations = { ...current.integrations };
   delete integrations.abletimeAccessToken;
+  delete integrations.abletimeRefreshToken;
+  delete integrations.abletimeTokenExpiresAt;
   delete integrations.abletimeViewerName;
   return saveAppSettings({ ...current, integrations });
 }