npm - @sideboard-ai/core - Versions diffs - 0.1.203 → 0.1.204 - Mend

@sideboard-ai/core 0.1.203 → 0.1.204

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (42) hide show

package/dist/{abletime-JFGZBDHH.js → abletime-S3UHQZVW.js} RENAMED Viewed

@@ -17,9 +17,9 @@ import {
   toAbleTimeIssueInfo,
   updateAbleTimeTask,
   verifyAbleTimeConnection
-} from "./chunk-FZ6IBUKY.js";
-import "./chunk-6VEIKW5C.js";
-import "./chunk-PJHFNFXA.js";
+} from "./chunk-FO2NTJ7L.js";
+import "./chunk-3K257PCS.js";
+import "./chunk-SGUVAK66.js";
 import "./chunk-VKQGAWHY.js";
 import "./chunk-X743YN5Y.js";
 import "./chunk-NSTQ6QKD.js";

package/dist/{abletime-SISJEPJ3.js → abletime-TONBQP4O.js} RENAMED Viewed

@@ -15,9 +15,9 @@ import {
   toAbleTimeIssueInfo,
   updateAbleTimeTask,
   verifyAbleTimeConnection
-} from "./chunk-FZYYEMET.js";
-import "./chunk-3PYH2RLA.js";
-import "./chunk-BFEBFGCS.js";
+} from "./chunk-QAVWH2RQ.js";
+import "./chunk-CYLDJWRK.js";
+import "./chunk-W6VM36YO.js";
 import "./chunk-N7WZ6NIN.js";
 import "./chunk-QFBBUFD4.js";
 import "./chunk-4TR3HZFT.js";

package/dist/{abletime-oauth-7TD5Z2QV.js → abletime-oauth-AVCEO2DY.js} RENAMED Viewed

@@ -3,7 +3,7 @@
 import {
   DEFAULT_ABLETIME_HOST,
   normalizeAbleTimeHost
-} from "./chunk-PJHFNFXA.js";
+} from "./chunk-SGUVAK66.js";
 import {
   httpFetch
 } from "./chunk-VKQGAWHY.js";
@@ -21,8 +21,51 @@ import "./chunk-FJZWM2ON.js";
 // src/integrations/abletime-oauth.ts
 import { createHash, randomBytes } from "crypto";
 import { createServer } from "http";
+var ABLETIME_OAUTH_CALLBACK_PATH = "/oauth/abletime/callback";
 var ABLETIME_OAUTH_PORT = 19849;
-var ABLETIME_OAUTH_REDIRECT = `http://127.0.0.1:${ABLETIME_OAUTH_PORT}/callback`;
+var ABLETIME_OAUTH_LOCAL_CALLBACK = `http://127.0.0.1:${ABLETIME_OAUTH_PORT}/callback`;
+var ABLETIME_OAUTH_REDIRECT = `https://www.sideboard.cloud${ABLETIME_OAUTH_CALLBACK_PATH}`;
+function ableTimeOAuthRedirectUri() {
+  return process.env.SIDEBOARD_ABLETIME_OAUTH_REDIRECT?.trim() || ABLETIME_OAUTH_REDIRECT;
+}
+var BOUNCE_QUERY_KEYS = ["code", "state", "error", "error_description"];
+function parseAbleTimeOAuthCallbackUrl(reqUrl) {
+  let url;
+  try {
+    url = new URL(reqUrl, ABLETIME_OAUTH_REDIRECT);
+  } catch {
+    return null;
+  }
+  if (url.pathname !== ABLETIME_OAUTH_CALLBACK_PATH) return null;
+  return url;
+}
+function ableTimeOAuthLocalBounceUrl(reqUrl) {
+  const url = parseAbleTimeOAuthCallbackUrl(reqUrl);
+  if (!url) return null;
+  const dest = new URL(ABLETIME_OAUTH_LOCAL_CALLBACK);
+  for (const key of BOUNCE_QUERY_KEYS) {
+    const value = url.searchParams.get(key);
+    if (value) dest.searchParams.set(key, value);
+  }
+  return dest.toString();
+}
+function escapeHtml(value) {
+  return value.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+function ableTimeOAuthBouncePage(localUrl) {
+  const safe = escapeHtml(localUrl);
+  return `<!doctype html><html><head><meta charset="utf-8">
+<meta http-equiv="refresh" content="0;url=${safe}">
+<title>Returning to Sideboard</title>
+<script>location.replace(${JSON.stringify(localUrl)})</script>
+<style>body{font-family:ui-sans-serif,system-ui,sans-serif;padding:48px 24px;max-width:36rem;margin:0 auto;color:#1a1a1a}
+h1{font-size:1.25rem}p{line-height:1.5;color:#444}a{color:#0f7ed4}</style>
+</head><body>
+<h1>Returning to Sideboard</h1>
+<p>AbleTime authorized. Opening the app\u2026</p>
+<p><a href="${safe}">Open Sideboard</a> if it does not appear.</p>
+</body></html>`;
+}
 var BAKED_ABLETIME_OAUTH_CLIENT_ID = "https://www.sideboard.cloud/oauth/abletime-client.json";
 var ABLETIME_OAUTH_RESOURCE = `${DEFAULT_ABLETIME_HOST}/api/public/v2/mcp`;
 var REFRESH_SKEW_MS = 5 * 6e4;
@@ -45,7 +88,7 @@ function ableTimeOAuthAuthorizeUrl(clientId, state, codeChallenge, host) {
   const params = new URLSearchParams({
     response_type: "code",
     client_id: clientId,
-    redirect_uri: ABLETIME_OAUTH_REDIRECT,
+    redirect_uri: ableTimeOAuthRedirectUri(),
     code_challenge: codeChallenge,
     code_challenge_method: "S256",
     state,
@@ -225,7 +268,7 @@ async function startAbleTimeOAuth(opts) {
   const body = new URLSearchParams({
     grant_type: "authorization_code",
     code,
-    redirect_uri: ABLETIME_OAUTH_REDIRECT,
+    redirect_uri: ableTimeOAuthRedirectUri(),
     client_id: clientId,
     code_verifier: pkce.verifier,
     resource: ableTimeOAuthResource(host)
@@ -234,7 +277,7 @@ async function startAbleTimeOAuth(opts) {
   persistAbleTimeTokens(data, { host });
   const token = data.access_token.trim();
   try {
-    const { getAbleTimeOrientation } = await import("./abletime-JFGZBDHH.js");
+    const { getAbleTimeOrientation } = await import("./abletime-S3UHQZVW.js");
     const orientation = await getAbleTimeOrientation({ token, host });
     return saveAbleTimeConnection({
       accessToken: token,
@@ -248,18 +291,24 @@ async function startAbleTimeOAuth(opts) {
   }
 }
 export {
+  ABLETIME_OAUTH_CALLBACK_PATH,
   ABLETIME_OAUTH_CANCELLED,
+  ABLETIME_OAUTH_LOCAL_CALLBACK,
   ABLETIME_OAUTH_PORT,
   ABLETIME_OAUTH_REDIRECT,
   ABLETIME_OAUTH_RESOURCE,
   AbleTimeOAuthCancelledError,
   BAKED_ABLETIME_OAUTH_CLIENT_ID,
   ableTimeOAuthAuthorizeUrl,
+  ableTimeOAuthBouncePage,
   ableTimeOAuthClientId,
+  ableTimeOAuthLocalBounceUrl,
+  ableTimeOAuthRedirectUri,
   ableTimeOAuthResource,
   createAbleTimePkce,
   ensureAbleTimeAccessToken,
   hasBakedAbleTimeOAuth,
   isAbleTimeOAuthCancelled,
+  parseAbleTimeOAuthCallbackUrl,
   startAbleTimeOAuth
 };

package/dist/{abletime-oauth-OSQYFB3E.js → abletime-oauth-SD4SZY5U.js} RENAMED Viewed

@@ -1,20 +1,26 @@
 import {
+  ABLETIME_OAUTH_CALLBACK_PATH,
   ABLETIME_OAUTH_CANCELLED,
+  ABLETIME_OAUTH_LOCAL_CALLBACK,
   ABLETIME_OAUTH_PORT,
   ABLETIME_OAUTH_REDIRECT,
   ABLETIME_OAUTH_RESOURCE,
   AbleTimeOAuthCancelledError,
   BAKED_ABLETIME_OAUTH_CLIENT_ID,
   ableTimeOAuthAuthorizeUrl,
+  ableTimeOAuthBouncePage,
   ableTimeOAuthClientId,
+  ableTimeOAuthLocalBounceUrl,
+  ableTimeOAuthRedirectUri,
   ableTimeOAuthResource,
   createAbleTimePkce,
   ensureAbleTimeAccessToken,
   hasBakedAbleTimeOAuth,
   isAbleTimeOAuthCancelled,
+  parseAbleTimeOAuthCallbackUrl,
   startAbleTimeOAuth
-} from "./chunk-MHPINQKY.js";
-import "./chunk-BFEBFGCS.js";
+} from "./chunk-6Q7DFVDQ.js";
+import "./chunk-W6VM36YO.js";
 import "./chunk-N7WZ6NIN.js";
 import "./chunk-QFBBUFD4.js";
 import "./chunk-4TR3HZFT.js";
@@ -23,18 +29,24 @@ import "./chunk-JT7R45JB.js";
 import "./chunk-77WWLBCI.js";
 import "./chunk-WFUDY6PC.js";
 export {
+  ABLETIME_OAUTH_CALLBACK_PATH,
   ABLETIME_OAUTH_CANCELLED,
+  ABLETIME_OAUTH_LOCAL_CALLBACK,
   ABLETIME_OAUTH_PORT,
   ABLETIME_OAUTH_REDIRECT,
   ABLETIME_OAUTH_RESOURCE,
   AbleTimeOAuthCancelledError,
   BAKED_ABLETIME_OAUTH_CLIENT_ID,
   ableTimeOAuthAuthorizeUrl,
+  ableTimeOAuthBouncePage,
   ableTimeOAuthClientId,
+  ableTimeOAuthLocalBounceUrl,
+  ableTimeOAuthRedirectUri,
   ableTimeOAuthResource,
   createAbleTimePkce,
   ensureAbleTimeAccessToken,
   hasBakedAbleTimeOAuth,
   isAbleTimeOAuthCancelled,
+  parseAbleTimeOAuthCallbackUrl,
   startAbleTimeOAuth
 };

package/dist/{abletime-rest-QPJTDLKX.js → abletime-rest-6ODSXV7G.js} RENAMED Viewed

@@ -7,8 +7,8 @@ import {
   callAbleTimeRestTool,
   looksLikeAbleTimeUlid,
   textFromAbleTimeDoc
-} from "./chunk-6VEIKW5C.js";
-import "./chunk-PJHFNFXA.js";
+} from "./chunk-3K257PCS.js";
+import "./chunk-SGUVAK66.js";
 import "./chunk-VKQGAWHY.js";
 import "./chunk-X743YN5Y.js";
 import "./chunk-NSTQ6QKD.js";

package/dist/{abletime-rest-ZJGWYALM.js → abletime-rest-J2OBB4VA.js} RENAMED Viewed

@@ -5,8 +5,8 @@ import {
   callAbleTimeRestTool,
   looksLikeAbleTimeUlid,
   textFromAbleTimeDoc
-} from "./chunk-3PYH2RLA.js";
-import "./chunk-BFEBFGCS.js";
+} from "./chunk-CYLDJWRK.js";
+import "./chunk-W6VM36YO.js";
 import "./chunk-N7WZ6NIN.js";
 import "./chunk-QFBBUFD4.js";
 import "./chunk-4TR3HZFT.js";

package/dist/agents/cursor-runner.js CHANGED Viewed

@@ -13,7 +13,7 @@ import {
   fetchCursorTurnCostUsd,
   formatUnknownDetail,
   looksLikeCursorHttp2StreamClose
-} from "../chunk-CQ5R3VPP.js";
+} from "../chunk-KZ7PI7FE.js";
 import {
   dropNestedElectronEnvFromProcess
 } from "../chunk-4TR3HZFT.js";

package/dist/{agents-ZMWL43SP.js → agents-67K4BQFJ.js} RENAMED Viewed

@@ -50,12 +50,12 @@ import {
   resolveQuotaFallbackAgent,
   turnCostUsdFromCursorUsage,
   whichOnPath
-} from "./chunk-X2TFUFIS.js";
-import "./chunk-LCU6GBZP.js";
+} from "./chunk-WF33LOP4.js";
+import "./chunk-5SMS6QTO.js";
 import "./chunk-3OHR73VK.js";
 import "./chunk-Y4MIXGPA.js";
 import "./chunk-VKQGAWHY.js";
-import "./chunk-QSEF2YVQ.js";
+import "./chunk-QUW5D62C.js";
 import "./chunk-D6JWYJ4P.js";
 import "./chunk-INNLWYXW.js";
 import "./chunk-SYFVUF2C.js";

package/dist/{agents-3755WYQM.js → agents-BVOJNHV6.js} RENAMED Viewed

@@ -44,9 +44,9 @@ import {
   resolveLoginCommand,
   resolveQuotaFallbackAgent,
   whichOnPath
-} from "./chunk-5IXJTUST.js";
-import "./chunk-TNDUTGDV.js";
-import "./chunk-CMGRV36E.js";
+} from "./chunk-YOSTWSNC.js";
+import "./chunk-VIPA75ZA.js";
+import "./chunk-WVATAIF4.js";
 import "./chunk-6K64FJDD.js";
 import "./chunk-QQKDGPUI.js";
 import "./chunk-SALM35KD.js";
@@ -57,7 +57,7 @@ import {
   parseCursorRunnerLine,
   preferredCursorCostCents,
   turnCostUsdFromCursorUsage
-} from "./chunk-CQ5R3VPP.js";
+} from "./chunk-KZ7PI7FE.js";
 import {
   ORCHESTRATOR_AGENT_KINDS,
   assertOrchestratorCapableAgent,

package/dist/{chunk-6VEIKW5C.js → chunk-3K257PCS.js} RENAMED Viewed

@@ -6,7 +6,7 @@ import {
   normalizeAbleTimeCredential,
   normalizeAbleTimeHost,
   rewriteAbleTimeError
-} from "./chunk-PJHFNFXA.js";
+} from "./chunk-SGUVAK66.js";
 import {
   httpFetch
 } from "./chunk-VKQGAWHY.js";
@@ -247,8 +247,11 @@ function firstStringArg(args, keys) {
 }
 async function callAbleTimeRestTool(name, args = {}, opts) {
   const token = normalizeAbleTimeCredential(opts?.token ?? getAbleTimeAccessToken() ?? "");
-  if (ableTimeCredentialKind(token) !== "org") {
-    throw new Error("AbleTime REST transport is for organization API keys (atk_\u2026)");
+  if (!token) {
+    throw new Error("AbleTime is not connected \u2014 paste an API key or connect via browser");
+  }
+  if (ableTimeCredentialKind(token) === "pat") {
+    throw new Error("AbleTime REST transport is for organization keys and OAuth tokens, not apt_\u2026");
   }
   const requestOpts = { ...opts, token };
   switch (name) {

package/dist/{chunk-LCU6GBZP.js → chunk-5SMS6QTO.js} RENAMED Viewed

@@ -7,7 +7,7 @@ import {
   resolveRepoRoot,
   takenSlugsFromThread,
   teamSlugFromName
-} from "./chunk-QSEF2YVQ.js";
+} from "./chunk-QUW5D62C.js";
 import {
   ATTACHMENTS_DIR,
   attachmentsGitignoreBody

package/dist/{chunk-MHPINQKY.js → chunk-6Q7DFVDQ.js} RENAMED Viewed

@@ -1,7 +1,7 @@
 import {
   DEFAULT_ABLETIME_HOST,
   normalizeAbleTimeHost
-} from "./chunk-BFEBFGCS.js";
+} from "./chunk-W6VM36YO.js";
 import {
   httpFetch
 } from "./chunk-N7WZ6NIN.js";
@@ -15,8 +15,51 @@ import {
 // src/integrations/abletime-oauth.ts
 import { createHash, randomBytes } from "crypto";
 import { createServer } from "http";
+var ABLETIME_OAUTH_CALLBACK_PATH = "/oauth/abletime/callback";
 var ABLETIME_OAUTH_PORT = 19849;
-var ABLETIME_OAUTH_REDIRECT = `http://127.0.0.1:${ABLETIME_OAUTH_PORT}/callback`;
+var ABLETIME_OAUTH_LOCAL_CALLBACK = `http://127.0.0.1:${ABLETIME_OAUTH_PORT}/callback`;
+var ABLETIME_OAUTH_REDIRECT = `https://www.sideboard.cloud${ABLETIME_OAUTH_CALLBACK_PATH}`;
+function ableTimeOAuthRedirectUri() {
+  return process.env.SIDEBOARD_ABLETIME_OAUTH_REDIRECT?.trim() || ABLETIME_OAUTH_REDIRECT;
+}
+var BOUNCE_QUERY_KEYS = ["code", "state", "error", "error_description"];
+function parseAbleTimeOAuthCallbackUrl(reqUrl) {
+  let url;
+  try {
+    url = new URL(reqUrl, ABLETIME_OAUTH_REDIRECT);
+  } catch {
+    return null;
+  }
+  if (url.pathname !== ABLETIME_OAUTH_CALLBACK_PATH) return null;
+  return url;
+}
+function ableTimeOAuthLocalBounceUrl(reqUrl) {
+  const url = parseAbleTimeOAuthCallbackUrl(reqUrl);
+  if (!url) return null;
+  const dest = new URL(ABLETIME_OAUTH_LOCAL_CALLBACK);
+  for (const key of BOUNCE_QUERY_KEYS) {
+    const value = url.searchParams.get(key);
+    if (value) dest.searchParams.set(key, value);
+  }
+  return dest.toString();
+}
+function escapeHtml(value) {
+  return value.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+function ableTimeOAuthBouncePage(localUrl) {
+  const safe = escapeHtml(localUrl);
+  return `<!doctype html><html><head><meta charset="utf-8">
+<meta http-equiv="refresh" content="0;url=${safe}">
+<title>Returning to Sideboard</title>
+<script>location.replace(${JSON.stringify(localUrl)})</script>
+<style>body{font-family:ui-sans-serif,system-ui,sans-serif;padding:48px 24px;max-width:36rem;margin:0 auto;color:#1a1a1a}
+h1{font-size:1.25rem}p{line-height:1.5;color:#444}a{color:#0f7ed4}</style>
+</head><body>
+<h1>Returning to Sideboard</h1>
+<p>AbleTime authorized. Opening the app\u2026</p>
+<p><a href="${safe}">Open Sideboard</a> if it does not appear.</p>
+</body></html>`;
+}
 var BAKED_ABLETIME_OAUTH_CLIENT_ID = "https://www.sideboard.cloud/oauth/abletime-client.json";
 var ABLETIME_OAUTH_RESOURCE = `${DEFAULT_ABLETIME_HOST}/api/public/v2/mcp`;
 var REFRESH_SKEW_MS = 5 * 6e4;
@@ -39,7 +82,7 @@ function ableTimeOAuthAuthorizeUrl(clientId, state, codeChallenge, host) {
   const params = new URLSearchParams({
     response_type: "code",
     client_id: clientId,
-    redirect_uri: ABLETIME_OAUTH_REDIRECT,
+    redirect_uri: ableTimeOAuthRedirectUri(),
     code_challenge: codeChallenge,
     code_challenge_method: "S256",
     state,
@@ -219,7 +262,7 @@ async function startAbleTimeOAuth(opts) {
   const body = new URLSearchParams({
     grant_type: "authorization_code",
     code,
-    redirect_uri: ABLETIME_OAUTH_REDIRECT,
+    redirect_uri: ableTimeOAuthRedirectUri(),
     client_id: clientId,
     code_verifier: pkce.verifier,
     resource: ableTimeOAuthResource(host)
@@ -228,7 +271,7 @@ async function startAbleTimeOAuth(opts) {
   persistAbleTimeTokens(data, { host });
   const token = data.access_token.trim();
   try {
-    const { getAbleTimeOrientation } = await import("./abletime-SISJEPJ3.js");
+    const { getAbleTimeOrientation } = await import("./abletime-TONBQP4O.js");
     const orientation = await getAbleTimeOrientation({ token, host });
     return saveAbleTimeConnection({
       accessToken: token,
@@ -243,8 +286,14 @@ async function startAbleTimeOAuth(opts) {
 }
 export {
+  ABLETIME_OAUTH_CALLBACK_PATH,
   ABLETIME_OAUTH_PORT,
+  ABLETIME_OAUTH_LOCAL_CALLBACK,
   ABLETIME_OAUTH_REDIRECT,
+  ableTimeOAuthRedirectUri,
+  parseAbleTimeOAuthCallbackUrl,
+  ableTimeOAuthLocalBounceUrl,
+  ableTimeOAuthBouncePage,
   BAKED_ABLETIME_OAUTH_CLIENT_ID,
   ABLETIME_OAUTH_RESOURCE,
   hasBakedAbleTimeOAuth,

package/dist/{chunk-3PYH2RLA.js → chunk-CYLDJWRK.js} RENAMED Viewed

@@ -4,7 +4,7 @@ import {
   normalizeAbleTimeCredential,
   normalizeAbleTimeHost,
   rewriteAbleTimeError
-} from "./chunk-BFEBFGCS.js";
+} from "./chunk-W6VM36YO.js";
 import {
   httpFetch
 } from "./chunk-N7WZ6NIN.js";
@@ -245,8 +245,11 @@ function firstStringArg(args, keys) {
 }
 async function callAbleTimeRestTool(name, args = {}, opts) {
   const token = normalizeAbleTimeCredential(opts?.token ?? getAbleTimeAccessToken() ?? "");
-  if (ableTimeCredentialKind(token) !== "org") {
-    throw new Error("AbleTime REST transport is for organization API keys (atk_\u2026)");
+  if (!token) {
+    throw new Error("AbleTime is not connected \u2014 paste an API key or connect via browser");
+  }
+  if (ableTimeCredentialKind(token) === "pat") {
+    throw new Error("AbleTime REST transport is for organization keys and OAuth tokens, not apt_\u2026");
   }
   const requestOpts = { ...opts, token };
   switch (name) {

package/dist/{chunk-FZ6IBUKY.js → chunk-FO2NTJ7L.js} RENAMED Viewed

@@ -2,13 +2,13 @@
 import {
   textFromAbleTimeDoc
-} from "./chunk-6VEIKW5C.js";
+} from "./chunk-3K257PCS.js";
 import {
   assertAbleTimeCredential,
   callAbleTimeTool,
   normalizeAbleTimeHost,
   rewriteAbleTimeError
-} from "./chunk-PJHFNFXA.js";
+} from "./chunk-SGUVAK66.js";
 import {
   isAbleTimeConnected,
   saveAbleTimeConnection
@@ -180,7 +180,7 @@ function isOpenTask(task) {
 async function getAbleTimeOrientation(opts) {
   const raw = await callAbleTimeTool("orientation", {}, opts);
   const record = asRecord(raw);
-  const viewerRec = firstRecord(record, ["viewer", "user", "actor", "me", "person"]) ?? record;
+  const viewerRec = firstRecord(record, ["viewer", "principal", "user", "actor", "me", "person"]) ?? record;
   const viewer = {
     id: firstString(viewerRec, ["id", "user_id"]) || void 0,
     name: firstString(viewerRec, ["name", "display_name", "full_name"]) || firstString(record, ["name"]) || void 0