@sideboard-ai/core 0.1.219 → 0.1.220

package/dist/{agents-IFVGY77W.js → agents-6UOWJLXX.js}

@@ -44,13 +44,13 @@ import {
   resolveLoginCommand,
   resolveQuotaFallbackAgent,
   whichOnPath
-} from "./chunk-K642ORWF.js";
+} from "./chunk-YG2X34EF.js";
 import "./chunk-N2VST3NL.js";
 import "./chunk-KTZESHYH.js";
 import "./chunk-6K64FJDD.js";
 import "./chunk-PO4M4JAJ.js";
-import "./chunk-IILG7DPX.js";
-import "./chunk-AN3THU7F.js";
+import "./chunk-QILV2BRW.js";
+import "./chunk-ROPGQRPU.js";
 import "./chunk-N7WZ6NIN.js";
 import {
   cursorSdkMessageToEvents,

package/dist/{agents-IK3U4Z2O.js → agents-DYSZ2JFY.js}

@@ -50,10 +50,10 @@ import {
   resolveQuotaFallbackAgent,
   turnCostUsdFromCursorUsage,
   whichOnPath
-} from "./chunk-IAP5NXQ4.js";
+} from "./chunk-3Y4FIARC.js";
 import "./chunk-P2EAAM3H.js";
-import "./chunk-SVXIJ2IC.js";
-import "./chunk-Y4MIXGPA.js";
+import "./chunk-UNMMKZ4Q.js";
+import "./chunk-P2BSMNHB.js";
 import "./chunk-VKQGAWHY.js";
 import "./chunk-NFWPDEN4.js";
 import "./chunk-D6JWYJ4P.js";

package/dist/{chunk-IAP5NXQ4.js → chunk-3Y4FIARC.js}

@@ -8,10 +8,10 @@ import {
   brightsyMcpServerName,
   ensureCliTeamTracked,
   ensureConnectedBrightsyTeamTokens
-} from "./chunk-SVXIJ2IC.js";
+} from "./chunk-UNMMKZ4Q.js";
 import {
   loadBrightsyConfig
-} from "./chunk-Y4MIXGPA.js";
+} from "./chunk-P2BSMNHB.js";
 import {
   httpFetch
 } from "./chunk-VKQGAWHY.js";
@@ -1313,6 +1313,7 @@ function teamEnv(team) {
   return {
     BRIGHTSY_API_TOKEN: team.access_token,
     ...team.refresh_token ? { BRIGHTSY_REFRESH_TOKEN: team.refresh_token } : {},
+    ...team.oauth_client_id ? { BRIGHTSY_OAUTH_CLIENT_ID: team.oauth_client_id } : {},
     BRIGHTSY_ACCOUNT_ID: team.id,
     BRIGHTSY_API_URL: endpoint
   };

package/dist/{chunk-XGE6YUO6.js → chunk-ALDVGAIO.js}

@@ -42,7 +42,7 @@ import {
   summarizeTurnStderr,
   toolDescription,
   turnFailChatText
-} from "./chunk-IAP5NXQ4.js";
+} from "./chunk-3Y4FIARC.js";
 import {
   SLACK_REPLY_FORMATTING,
   addWorkspace,
@@ -418,7 +418,7 @@ async function continueSourceThread(threadId, prompt) {
       await continueOnReply(threadId, prompt);
       return;
     }
-    const { getOrchestrator: getOrchestrator2 } = await import("./orchestrator-5VVR7LOU.js");
+    const { getOrchestrator: getOrchestrator2 } = await import("./orchestrator-P4KNHFHG.js");
     await getOrchestrator2().send(threadId, prompt);
   } catch {
   }
@@ -6957,7 +6957,7 @@ function formatScheduledPrompt(name, prompt) {
 ${prompt}`;
 }
 async function defaultDeps() {
-  const { getOrchestrator: getOrchestrator2, startOrchestration: startOrchestration2 } = await import("./orchestrator-5VVR7LOU.js");
+  const { getOrchestrator: getOrchestrator2, startOrchestration: startOrchestration2 } = await import("./orchestrator-P4KNHFHG.js");
   const orch = getOrchestrator2();
   return {
     findThread: (id) => findThreadByRef(id),

package/dist/{chunk-EIICOB7P.js → chunk-B73KKJQB.js}

@@ -24,7 +24,7 @@ import {
   resolveQuotaFallbackAgent,
   stripBrightsyNdjsonNoise,
   toolDescription
-} from "./chunk-K642ORWF.js";
+} from "./chunk-YG2X34EF.js";
 import {
   SLACK_REPLY_FORMATTING,
   addWorkspace,
@@ -482,7 +482,7 @@ async function continueSourceThread(threadId, prompt) {
       await continueOnReply(threadId, prompt);
       return;
     }
-    const { getOrchestrator: getOrchestrator2 } = await import("./orchestrator-LFC3V3AX.js");
+    const { getOrchestrator: getOrchestrator2 } = await import("./orchestrator-Y5IDLJ7D.js");
     await getOrchestrator2().send(threadId, prompt);
   } catch {
   }
@@ -4178,7 +4178,7 @@ async function createThread(input, _onSetupLine) {
   return readThread(thread.id) ?? thread;
 }
 async function listLinearIssues(agent, repoPath) {
-  const { getAdapter: getAdapter2 } = await import("./agents-IFVGY77W.js");
+  const { getAdapter: getAdapter2 } = await import("./agents-6UOWJLXX.js");
   await requireAgent(agent, { requireLinear: true });
   const adapter = getAdapter2(agent);
   if (!adapter.listLinearIssues) {
@@ -7332,7 +7332,7 @@ function formatScheduledPrompt(name, prompt) {
 ${prompt}`;
 }
 async function defaultDeps() {
-  const { getOrchestrator: getOrchestrator2, startOrchestration: startOrchestration2 } = await import("./orchestrator-LFC3V3AX.js");
+  const { getOrchestrator: getOrchestrator2, startOrchestration: startOrchestration2 } = await import("./orchestrator-Y5IDLJ7D.js");
   const orch = getOrchestrator2();
   return {
     findThread: (id) => findThreadByRef(id),

package/dist/chunk-P2BSMNHB.js

@@ -0,0 +1,179 @@
+#!/usr/bin/env node
+
+import {
+  formatFetchError
+} from "./chunk-VKQGAWHY.js";
+
+// src/brightsy/config.ts
+import { existsSync, readFileSync, writeFileSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+function brightsyConfigPath() {
+  const override = process.env.BRIGHTSY_CONFIG?.trim();
+  if (override) return override;
+  return join(homedir(), ".brightsy", "config.json");
+}
+function loadBrightsyConfig() {
+  const path = brightsyConfigPath();
+  if (!existsSync(path)) {
+    throw new Error("Brightsy not logged in \u2014 run `brightsy login` first");
+  }
+  const raw = JSON.parse(readFileSync(path, "utf8"));
+  if (!raw.access_token || !raw.account_id) {
+    throw new Error("Brightsy config incomplete \u2014 run `brightsy login`");
+  }
+  return raw;
+}
+function saveBrightsyConfig(cfg) {
+  writeFileSync(brightsyConfigPath(), `${JSON.stringify(cfg, null, 2)}
+`, {
+    mode: 384
+  });
+}
+
+// src/brightsy/oauth.ts
+var REFRESH_SKEW_MS = 6e4;
+var BRIGHTSY_OAUTH_CLIENT_ID = "sideboard";
+var BRIGHTSY_OAUTH_REDIRECT = "http://127.0.0.1:19850/callback";
+function defaultFetch(fetchImpl) {
+  return fetchImpl ?? globalThis.fetch.bind(globalThis);
+}
+function normalizeBrightsyEndpoint(endpoint) {
+  return (endpoint || "https://brightsy.ai").replace(/\/$/, "");
+}
+function brightsyAccessTokenNeedsRefresh(expiresAt, now = Date.now()) {
+  if (typeof expiresAt !== "number" || !Number.isFinite(expiresAt) || expiresAt <= 0) {
+    return true;
+  }
+  return now >= expiresAt - REFRESH_SKEW_MS;
+}
+function applyGrant(current, grant) {
+  return {
+    access_token: grant.access_token,
+    refresh_token: grant.refresh_token || current.refresh_token,
+    expires_at: grant.expires_at ?? current.expires_at
+  };
+}
+async function registerBrightsyOAuthClient(opts) {
+  const endpoint = normalizeBrightsyEndpoint(opts.endpoint);
+  const url = `${endpoint}/oauth/register`;
+  const clientId = (opts.clientId || BRIGHTSY_OAUTH_CLIENT_ID).trim();
+  const redirectUri = opts.redirectUri || BRIGHTSY_OAUTH_REDIRECT;
+  const fetchImpl = defaultFetch(opts.fetchImpl);
+  let res;
+  try {
+    res = await fetchImpl(url, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        client_id: clientId,
+        client_name: "Sideboard",
+        description: "Sideboard desktop Brightsy MCP client",
+        redirect_uris: [redirectUri],
+        scope: "brightsy:api",
+        grant_types: ["authorization_code", "refresh_token"],
+        response_types: ["code"],
+        token_endpoint_auth_method: "none"
+      })
+    });
+  } catch (err) {
+    throw new Error(formatFetchError(err, url));
+  }
+  if (!res.ok) return null;
+  const data = await res.json();
+  if (!data.client_id?.trim()) return null;
+  return {
+    client_id: data.client_id.trim(),
+    client_secret: data.client_secret?.trim() || void 0
+  };
+}
+async function ensureBrightsyOAuthClientId(opts) {
+  const existing = opts.clientId?.trim();
+  if (existing) return existing;
+  const registered = await registerBrightsyOAuthClient({
+    endpoint: opts.endpoint,
+    fetchImpl: opts.fetchImpl
+  });
+  return registered?.client_id || BRIGHTSY_OAUTH_CLIENT_ID;
+}
+async function refreshBrightsyAccessToken(opts) {
+  const endpoint = normalizeBrightsyEndpoint(opts.endpoint);
+  const url = `${endpoint}/oauth/token`;
+  const fetchImpl = defaultFetch(opts.fetchImpl);
+  const clientId = opts.clientId?.trim() || BRIGHTSY_OAUTH_CLIENT_ID;
+  let res;
+  try {
+    res = await fetchImpl(url, {
+      method: "POST",
+      headers: { "Content-Type": "application/x-www-form-urlencoded" },
+      body: new URLSearchParams({
+        grant_type: "refresh_token",
+        refresh_token: opts.refreshToken,
+        client_id: clientId
+      })
+    });
+  } catch (err) {
+    throw new Error(formatFetchError(err, url));
+  }
+  if (!res.ok) return null;
+  const data = await res.json();
+  if (!data.access_token) return null;
+  return {
+    access_token: data.access_token,
+    refresh_token: data.refresh_token,
+    expires_at: data.expires_in ? Date.now() + data.expires_in * 1e3 : void 0
+  };
+}
+var refreshInFlight = null;
+async function ensureBrightsyLocalConfigFreshOnce(opts) {
+  let cfg;
+  try {
+    cfg = loadBrightsyConfig();
+  } catch {
+    return null;
+  }
+  const refreshToken = cfg.refresh_token;
+  if (!refreshToken || !brightsyAccessTokenNeedsRefresh(cfg.expires_at)) {
+    return cfg;
+  }
+  const endpoint = normalizeBrightsyEndpoint(cfg.endpoint);
+  const clientId = await ensureBrightsyOAuthClientId({
+    endpoint,
+    clientId: cfg.oauth_client_id,
+    fetchImpl: opts?.fetchImpl
+  });
+  if (clientId !== cfg.oauth_client_id) {
+    cfg = { ...cfg, oauth_client_id: clientId };
+    saveBrightsyConfig(cfg);
+  }
+  const grant = await refreshBrightsyAccessToken({
+    endpoint,
+    refreshToken,
+    clientId,
+    fetchImpl: opts?.fetchImpl
+  });
+  if (!grant) return cfg;
+  const next = { ...cfg, ...applyGrant(cfg, grant), oauth_client_id: clientId };
+  saveBrightsyConfig(next);
+  return next;
+}
+async function ensureBrightsyLocalConfigFresh(opts) {
+  if (refreshInFlight) return refreshInFlight;
+  refreshInFlight = ensureBrightsyLocalConfigFreshOnce(opts).finally(() => {
+    refreshInFlight = null;
+  });
+  return refreshInFlight;
+}
+
+export {
+  loadBrightsyConfig,
+  saveBrightsyConfig,
+  BRIGHTSY_OAUTH_CLIENT_ID,
+  BRIGHTSY_OAUTH_REDIRECT,
+  normalizeBrightsyEndpoint,
+  brightsyAccessTokenNeedsRefresh,
+  registerBrightsyOAuthClient,
+  ensureBrightsyOAuthClientId,
+  refreshBrightsyAccessToken,
+  ensureBrightsyLocalConfigFresh
+};

package/dist/{chunk-IILG7DPX.js → chunk-QILV2BRW.js}

@@ -1,10 +1,11 @@
 import {
   brightsyAccessTokenNeedsRefresh,
   ensureBrightsyLocalConfigFresh,
+  ensureBrightsyOAuthClientId,
   loadBrightsyConfig,
   refreshBrightsyAccessToken,
   saveBrightsyConfig
-} from "./chunk-AN3THU7F.js";
+} from "./chunk-ROPGQRPU.js";
 import {
   appDataDir
 } from "./chunk-WFUDY6PC.js";
@@ -18,7 +19,7 @@ import { join } from "path";
 
 // src/brightsy/accounts.ts
 async function loadConnectedTeams() {
-  const { listConnectedBrightsyTeams: listConnectedBrightsyTeams2 } = await import("./connected-teams-LX5DLL2I.js");
+  const { listConnectedBrightsyTeams: listConnectedBrightsyTeams2 } = await import("./connected-teams-PRHZS6B4.js");
   return listConnectedBrightsyTeams2();
 }
 async function runBrightsyTeamsJson(args) {
@@ -46,15 +47,15 @@ async function listBrightsyAccounts() {
 }
 async function getBrightsySession() {
   try {
-    const { ensureBrightsyLocalConfigFresh: ensureBrightsyLocalConfigFresh2 } = await import("./oauth-6ZQ4Q4XN.js");
-    const { ensureConnectedBrightsyTeamTokens: ensureConnectedBrightsyTeamTokens2 } = await import("./connected-teams-LX5DLL2I.js");
+    const { ensureBrightsyLocalConfigFresh: ensureBrightsyLocalConfigFresh2 } = await import("./oauth-S3M7B475.js");
+    const { ensureConnectedBrightsyTeamTokens: ensureConnectedBrightsyTeamTokens2 } = await import("./connected-teams-PRHZS6B4.js");
     await ensureBrightsyLocalConfigFresh2();
     await ensureConnectedBrightsyTeamTokens2();
     loadBrightsyConfig();
     const data = await runBrightsyTeamsJson([]);
     const accounts = Array.isArray(data.teams) ? data.teams : [];
     const active = data.active ?? accounts.find((a) => a.active) ?? null;
-    const { ensureCliTeamTracked: ensureCliTeamTracked2 } = await import("./connected-teams-LX5DLL2I.js");
+    const { ensureCliTeamTracked: ensureCliTeamTracked2 } = await import("./connected-teams-PRHZS6B4.js");
     const connectedTeams = ensureCliTeamTracked2(
       active ? { id: active.id, slug: active.slug, name: active.name } : void 0
     );
@@ -94,7 +95,7 @@ async function performBrightsyAccountSwitch(accountIdOrSlug) {
   return { cfg, target: data.active };
 }
 async function switchBrightsyAccount(accountIdOrSlug) {
-  const { connectBrightsyTeam: connectBrightsyTeam2 } = await import("./connected-teams-LX5DLL2I.js");
+  const { connectBrightsyTeam: connectBrightsyTeam2 } = await import("./connected-teams-PRHZS6B4.js");
   await connectBrightsyTeam2(accountIdOrSlug);
   return getBrightsySession();
 }
@@ -147,10 +148,10 @@ function applyConnectedTeamToCli(team) {
     account_id: team.id,
     account_slug: team.slug,
     endpoint: team.endpoint ?? base.endpoint ?? "https://brightsy.ai",
-    oauth_client_id: base.oauth_client_id
+    oauth_client_id: team.oauth_client_id ?? base.oauth_client_id
   });
 }
-async function refreshTeamToken(team) {
+async function refreshTeamToken(team, opts) {
   if (!team.refresh_token) return team;
   const cfg = (() => {
     try {
@@ -159,21 +160,31 @@ async function refreshTeamToken(team) {
       return null;
     }
   })();
+  const endpoint = team.endpoint || "https://brightsy.ai";
+  const clientId = await ensureBrightsyOAuthClientId({
+    endpoint,
+    clientId: team.oauth_client_id || cfg?.oauth_client_id,
+    fetchImpl: opts?.fetchImpl
+  });
   const grant = await refreshBrightsyAccessToken({
-    endpoint: team.endpoint || "https://brightsy.ai",
+    endpoint,
     refreshToken: team.refresh_token,
-    clientId: cfg?.oauth_client_id
+    clientId,
+    fetchImpl: opts?.fetchImpl
   });
-  if (!grant) return team;
+  if (!grant) return { ...team, oauth_client_id: clientId || team.oauth_client_id };
   return {
     ...team,
     access_token: grant.access_token,
     refresh_token: grant.refresh_token || team.refresh_token,
-    expires_at: grant.expires_at ?? team.expires_at
+    expires_at: grant.expires_at ?? team.expires_at,
+    oauth_client_id: clientId
   };
 }
-async function ensureConnectedBrightsyTeamTokens() {
-  await ensureBrightsyLocalConfigFresh().catch(() => null);
+async function ensureConnectedBrightsyTeamTokens(opts) {
+  await ensureBrightsyLocalConfigFresh({ fetchImpl: opts?.fetchImpl }).catch(
+    () => null
+  );
   const teams = readStore();
   if (teams.length === 0) return [];
   const next = [];
@@ -183,8 +194,8 @@ async function ensureConnectedBrightsyTeamTokens() {
       next.push(team);
       continue;
     }
-    const refreshed = await refreshTeamToken(team);
-    if (refreshed.access_token !== team.access_token || refreshed.refresh_token !== team.refresh_token || refreshed.expires_at !== team.expires_at) {
+    const refreshed = await refreshTeamToken(team, opts);
+    if (refreshed.access_token !== team.access_token || refreshed.refresh_token !== team.refresh_token || refreshed.expires_at !== team.expires_at || refreshed.oauth_client_id !== team.oauth_client_id) {
       changed = true;
     }
     next.push(refreshed);
@@ -214,7 +225,8 @@ function ensureCliTeamTracked(meta) {
       access_token: cfg.access_token,
       refresh_token: cfg.refresh_token,
       expires_at: cfg.expires_at,
-      endpoint: cfg.endpoint
+      endpoint: cfg.endpoint,
+      oauth_client_id: cfg.oauth_client_id
     };
     writeStore([...existing, team]);
   } catch {
@@ -241,7 +253,8 @@ async function connectBrightsyTeam(accountIdOrSlug) {
     access_token: minted.access_token,
     refresh_token: minted.refresh_token,
     expires_at: minted.expires_at,
-    endpoint: minted.endpoint
+    endpoint: minted.endpoint,
+    oauth_client_id: minted.oauth_client_id
   };
   writeStore([...existing, team]);
   return listConnectedBrightsyTeams();

package/dist/chunk-ROPGQRPU.js

@@ -0,0 +1,178 @@
+import {
+  formatFetchError
+} from "./chunk-N7WZ6NIN.js";
+
+// src/brightsy/config.ts
+import { existsSync, readFileSync, writeFileSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+function brightsyConfigPath() {
+  const override = process.env.BRIGHTSY_CONFIG?.trim();
+  if (override) return override;
+  return join(homedir(), ".brightsy", "config.json");
+}
+function loadBrightsyConfig() {
+  const path = brightsyConfigPath();
+  if (!existsSync(path)) {
+    throw new Error("Brightsy not logged in \u2014 run `brightsy login` first");
+  }
+  const raw = JSON.parse(readFileSync(path, "utf8"));
+  if (!raw.access_token || !raw.account_id) {
+    throw new Error("Brightsy config incomplete \u2014 run `brightsy login`");
+  }
+  return raw;
+}
+function saveBrightsyConfig(cfg) {
+  writeFileSync(brightsyConfigPath(), `${JSON.stringify(cfg, null, 2)}
+`, {
+    mode: 384
+  });
+}
+
+// src/brightsy/oauth.ts
+var REFRESH_SKEW_MS = 6e4;
+var BRIGHTSY_OAUTH_CLIENT_ID = "sideboard";
+var BRIGHTSY_OAUTH_REDIRECT = "http://127.0.0.1:19850/callback";
+function defaultFetch(fetchImpl) {
+  return fetchImpl ?? globalThis.fetch.bind(globalThis);
+}
+function normalizeBrightsyEndpoint(endpoint) {
+  return (endpoint || "https://brightsy.ai").replace(/\/$/, "");
+}
+function brightsyAccessTokenNeedsRefresh(expiresAt, now = Date.now()) {
+  if (typeof expiresAt !== "number" || !Number.isFinite(expiresAt) || expiresAt <= 0) {
+    return true;
+  }
+  return now >= expiresAt - REFRESH_SKEW_MS;
+}
+function applyGrant(current, grant) {
+  return {
+    access_token: grant.access_token,
+    refresh_token: grant.refresh_token || current.refresh_token,
+    expires_at: grant.expires_at ?? current.expires_at
+  };
+}
+async function registerBrightsyOAuthClient(opts) {
+  const endpoint = normalizeBrightsyEndpoint(opts.endpoint);
+  const url = `${endpoint}/oauth/register`;
+  const clientId = (opts.clientId || BRIGHTSY_OAUTH_CLIENT_ID).trim();
+  const redirectUri = opts.redirectUri || BRIGHTSY_OAUTH_REDIRECT;
+  const fetchImpl = defaultFetch(opts.fetchImpl);
+  let res;
+  try {
+    res = await fetchImpl(url, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        client_id: clientId,
+        client_name: "Sideboard",
+        description: "Sideboard desktop Brightsy MCP client",
+        redirect_uris: [redirectUri],
+        scope: "brightsy:api",
+        grant_types: ["authorization_code", "refresh_token"],
+        response_types: ["code"],
+        token_endpoint_auth_method: "none"
+      })
+    });
+  } catch (err) {
+    throw new Error(formatFetchError(err, url));
+  }
+  if (!res.ok) return null;
+  const data = await res.json();
+  if (!data.client_id?.trim()) return null;
+  return {
+    client_id: data.client_id.trim(),
+    client_secret: data.client_secret?.trim() || void 0
+  };
+}
+async function ensureBrightsyOAuthClientId(opts) {
+  const existing = opts.clientId?.trim();
+  if (existing) return existing;
+  const registered = await registerBrightsyOAuthClient({
+    endpoint: opts.endpoint,
+    fetchImpl: opts.fetchImpl
+  });
+  return registered?.client_id || BRIGHTSY_OAUTH_CLIENT_ID;
+}
+async function refreshBrightsyAccessToken(opts) {
+  const endpoint = normalizeBrightsyEndpoint(opts.endpoint);
+  const url = `${endpoint}/oauth/token`;
+  const fetchImpl = defaultFetch(opts.fetchImpl);
+  const clientId = opts.clientId?.trim() || BRIGHTSY_OAUTH_CLIENT_ID;
+  let res;
+  try {
+    res = await fetchImpl(url, {
+      method: "POST",
+      headers: { "Content-Type": "application/x-www-form-urlencoded" },
+      body: new URLSearchParams({
+        grant_type: "refresh_token",
+        refresh_token: opts.refreshToken,
+        client_id: clientId
+      })
+    });
+  } catch (err) {
+    throw new Error(formatFetchError(err, url));
+  }
+  if (!res.ok) return null;
+  const data = await res.json();
+  if (!data.access_token) return null;
+  return {
+    access_token: data.access_token,
+    refresh_token: data.refresh_token,
+    expires_at: data.expires_in ? Date.now() + data.expires_in * 1e3 : void 0
+  };
+}
+var refreshInFlight = null;
+async function ensureBrightsyLocalConfigFreshOnce(opts) {
+  let cfg;
+  try {
+    cfg = loadBrightsyConfig();
+  } catch {
+    return null;
+  }
+  const refreshToken = cfg.refresh_token;
+  if (!refreshToken || !brightsyAccessTokenNeedsRefresh(cfg.expires_at)) {
+    return cfg;
+  }
+  const endpoint = normalizeBrightsyEndpoint(cfg.endpoint);
+  const clientId = await ensureBrightsyOAuthClientId({
+    endpoint,
+    clientId: cfg.oauth_client_id,
+    fetchImpl: opts?.fetchImpl
+  });
+  if (clientId !== cfg.oauth_client_id) {
+    cfg = { ...cfg, oauth_client_id: clientId };
+    saveBrightsyConfig(cfg);
+  }
+  const grant = await refreshBrightsyAccessToken({
+    endpoint,
+    refreshToken,
+    clientId,
+    fetchImpl: opts?.fetchImpl
+  });
+  if (!grant) return cfg;
+  const next = { ...cfg, ...applyGrant(cfg, grant), oauth_client_id: clientId };
+  saveBrightsyConfig(next);
+  return next;
+}
+async function ensureBrightsyLocalConfigFresh(opts) {
+  if (refreshInFlight) return refreshInFlight;
+  refreshInFlight = ensureBrightsyLocalConfigFreshOnce(opts).finally(() => {
+    refreshInFlight = null;
+  });
+  return refreshInFlight;
+}
+
+export {
+  brightsyConfigPath,
+  loadBrightsyConfig,
+  saveBrightsyConfig,
+  BRIGHTSY_OAUTH_CLIENT_ID,
+  BRIGHTSY_OAUTH_REDIRECT,
+  normalizeBrightsyEndpoint,
+  brightsyAccessTokenNeedsRefresh,
+  registerBrightsyOAuthClient,
+  ensureBrightsyOAuthClientId,
+  refreshBrightsyAccessToken,
+  ensureBrightsyLocalConfigFresh
+};