@sideboard-ai/core 0.1.219 → 0.1.221

package/dist/chunk-ROPGQRPU.js

@@ -0,0 +1,178 @@
+import {
+  formatFetchError
+} from "./chunk-N7WZ6NIN.js";
+
+// src/brightsy/config.ts
+import { existsSync, readFileSync, writeFileSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+function brightsyConfigPath() {
+  const override = process.env.BRIGHTSY_CONFIG?.trim();
+  if (override) return override;
+  return join(homedir(), ".brightsy", "config.json");
+}
+function loadBrightsyConfig() {
+  const path = brightsyConfigPath();
+  if (!existsSync(path)) {
+    throw new Error("Brightsy not logged in \u2014 run `brightsy login` first");
+  }
+  const raw = JSON.parse(readFileSync(path, "utf8"));
+  if (!raw.access_token || !raw.account_id) {
+    throw new Error("Brightsy config incomplete \u2014 run `brightsy login`");
+  }
+  return raw;
+}
+function saveBrightsyConfig(cfg) {
+  writeFileSync(brightsyConfigPath(), `${JSON.stringify(cfg, null, 2)}
+`, {
+    mode: 384
+  });
+}
+
+// src/brightsy/oauth.ts
+var REFRESH_SKEW_MS = 6e4;
+var BRIGHTSY_OAUTH_CLIENT_ID = "sideboard";
+var BRIGHTSY_OAUTH_REDIRECT = "http://127.0.0.1:19850/callback";
+function defaultFetch(fetchImpl) {
+  return fetchImpl ?? globalThis.fetch.bind(globalThis);
+}
+function normalizeBrightsyEndpoint(endpoint) {
+  return (endpoint || "https://brightsy.ai").replace(/\/$/, "");
+}
+function brightsyAccessTokenNeedsRefresh(expiresAt, now = Date.now()) {
+  if (typeof expiresAt !== "number" || !Number.isFinite(expiresAt) || expiresAt <= 0) {
+    return true;
+  }
+  return now >= expiresAt - REFRESH_SKEW_MS;
+}
+function applyGrant(current, grant) {
+  return {
+    access_token: grant.access_token,
+    refresh_token: grant.refresh_token || current.refresh_token,
+    expires_at: grant.expires_at ?? current.expires_at
+  };
+}
+async function registerBrightsyOAuthClient(opts) {
+  const endpoint = normalizeBrightsyEndpoint(opts.endpoint);
+  const url = `${endpoint}/oauth/register`;
+  const clientId = (opts.clientId || BRIGHTSY_OAUTH_CLIENT_ID).trim();
+  const redirectUri = opts.redirectUri || BRIGHTSY_OAUTH_REDIRECT;
+  const fetchImpl = defaultFetch(opts.fetchImpl);
+  let res;
+  try {
+    res = await fetchImpl(url, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        client_id: clientId,
+        client_name: "Sideboard",
+        description: "Sideboard desktop Brightsy MCP client",
+        redirect_uris: [redirectUri],
+        scope: "brightsy:api",
+        grant_types: ["authorization_code", "refresh_token"],
+        response_types: ["code"],
+        token_endpoint_auth_method: "none"
+      })
+    });
+  } catch (err) {
+    throw new Error(formatFetchError(err, url));
+  }
+  if (!res.ok) return null;
+  const data = await res.json();
+  if (!data.client_id?.trim()) return null;
+  return {
+    client_id: data.client_id.trim(),
+    client_secret: data.client_secret?.trim() || void 0
+  };
+}
+async function ensureBrightsyOAuthClientId(opts) {
+  const existing = opts.clientId?.trim();
+  if (existing) return existing;
+  const registered = await registerBrightsyOAuthClient({
+    endpoint: opts.endpoint,
+    fetchImpl: opts.fetchImpl
+  });
+  return registered?.client_id || BRIGHTSY_OAUTH_CLIENT_ID;
+}
+async function refreshBrightsyAccessToken(opts) {
+  const endpoint = normalizeBrightsyEndpoint(opts.endpoint);
+  const url = `${endpoint}/oauth/token`;
+  const fetchImpl = defaultFetch(opts.fetchImpl);
+  const clientId = opts.clientId?.trim() || BRIGHTSY_OAUTH_CLIENT_ID;
+  let res;
+  try {
+    res = await fetchImpl(url, {
+      method: "POST",
+      headers: { "Content-Type": "application/x-www-form-urlencoded" },
+      body: new URLSearchParams({
+        grant_type: "refresh_token",
+        refresh_token: opts.refreshToken,
+        client_id: clientId
+      })
+    });
+  } catch (err) {
+    throw new Error(formatFetchError(err, url));
+  }
+  if (!res.ok) return null;
+  const data = await res.json();
+  if (!data.access_token) return null;
+  return {
+    access_token: data.access_token,
+    refresh_token: data.refresh_token,
+    expires_at: data.expires_in ? Date.now() + data.expires_in * 1e3 : void 0
+  };
+}
+var refreshInFlight = null;
+async function ensureBrightsyLocalConfigFreshOnce(opts) {
+  let cfg;
+  try {
+    cfg = loadBrightsyConfig();
+  } catch {
+    return null;
+  }
+  const refreshToken = cfg.refresh_token;
+  if (!refreshToken || !brightsyAccessTokenNeedsRefresh(cfg.expires_at)) {
+    return cfg;
+  }
+  const endpoint = normalizeBrightsyEndpoint(cfg.endpoint);
+  const clientId = await ensureBrightsyOAuthClientId({
+    endpoint,
+    clientId: cfg.oauth_client_id,
+    fetchImpl: opts?.fetchImpl
+  });
+  if (clientId !== cfg.oauth_client_id) {
+    cfg = { ...cfg, oauth_client_id: clientId };
+    saveBrightsyConfig(cfg);
+  }
+  const grant = await refreshBrightsyAccessToken({
+    endpoint,
+    refreshToken,
+    clientId,
+    fetchImpl: opts?.fetchImpl
+  });
+  if (!grant) return cfg;
+  const next = { ...cfg, ...applyGrant(cfg, grant), oauth_client_id: clientId };
+  saveBrightsyConfig(next);
+  return next;
+}
+async function ensureBrightsyLocalConfigFresh(opts) {
+  if (refreshInFlight) return refreshInFlight;
+  refreshInFlight = ensureBrightsyLocalConfigFreshOnce(opts).finally(() => {
+    refreshInFlight = null;
+  });
+  return refreshInFlight;
+}
+
+export {
+  brightsyConfigPath,
+  loadBrightsyConfig,
+  saveBrightsyConfig,
+  BRIGHTSY_OAUTH_CLIENT_ID,
+  BRIGHTSY_OAUTH_REDIRECT,
+  normalizeBrightsyEndpoint,
+  brightsyAccessTokenNeedsRefresh,
+  registerBrightsyOAuthClient,
+  ensureBrightsyOAuthClientId,
+  refreshBrightsyAccessToken,
+  ensureBrightsyLocalConfigFresh
+};

package/dist/{chunk-SVXIJ2IC.js → chunk-UNMMKZ4Q.js}

@@ -3,10 +3,11 @@
 import {
   brightsyAccessTokenNeedsRefresh,
   ensureBrightsyLocalConfigFresh,
+  ensureBrightsyOAuthClientId,
   loadBrightsyConfig,
   refreshBrightsyAccessToken,
   saveBrightsyConfig
-} from "./chunk-Y4MIXGPA.js";
+} from "./chunk-P2BSMNHB.js";
 import {
   run
 } from "./chunk-ABOBTSO6.js";
@@ -106,10 +107,10 @@ function applyConnectedTeamToCli(team) {
     account_id: team.id,
     account_slug: team.slug,
     endpoint: team.endpoint ?? base.endpoint ?? "https://brightsy.ai",
-    oauth_client_id: base.oauth_client_id
+    oauth_client_id: team.oauth_client_id ?? base.oauth_client_id
   });
 }
-async function refreshTeamToken(team) {
+async function refreshTeamToken(team, opts) {
   if (!team.refresh_token) return team;
   const cfg = (() => {
     try {
@@ -118,21 +119,31 @@ async function refreshTeamToken(team) {
       return null;
     }
   })();
+  const endpoint = team.endpoint || "https://brightsy.ai";
+  const clientId = await ensureBrightsyOAuthClientId({
+    endpoint,
+    clientId: team.oauth_client_id || cfg?.oauth_client_id,
+    fetchImpl: opts?.fetchImpl
+  });
   const grant = await refreshBrightsyAccessToken({
-    endpoint: team.endpoint || "https://brightsy.ai",
+    endpoint,
     refreshToken: team.refresh_token,
-    clientId: cfg?.oauth_client_id
+    clientId,
+    fetchImpl: opts?.fetchImpl
   });
-  if (!grant) return team;
+  if (!grant) return { ...team, oauth_client_id: clientId || team.oauth_client_id };
   return {
     ...team,
     access_token: grant.access_token,
     refresh_token: grant.refresh_token || team.refresh_token,
-    expires_at: grant.expires_at ?? team.expires_at
+    expires_at: grant.expires_at ?? team.expires_at,
+    oauth_client_id: clientId
   };
 }
-async function ensureConnectedBrightsyTeamTokens() {
-  await ensureBrightsyLocalConfigFresh().catch(() => null);
+async function ensureConnectedBrightsyTeamTokens(opts) {
+  await ensureBrightsyLocalConfigFresh({ fetchImpl: opts?.fetchImpl }).catch(
+    () => null
+  );
   const teams = readStore();
   if (teams.length === 0) return [];
   const next = [];
@@ -142,8 +153,8 @@ async function ensureConnectedBrightsyTeamTokens() {
       next.push(team);
       continue;
     }
-    const refreshed = await refreshTeamToken(team);
-    if (refreshed.access_token !== team.access_token || refreshed.refresh_token !== team.refresh_token || refreshed.expires_at !== team.expires_at) {
+    const refreshed = await refreshTeamToken(team, opts);
+    if (refreshed.access_token !== team.access_token || refreshed.refresh_token !== team.refresh_token || refreshed.expires_at !== team.expires_at || refreshed.oauth_client_id !== team.oauth_client_id) {
       changed = true;
     }
     next.push(refreshed);
@@ -173,7 +184,8 @@ function ensureCliTeamTracked(meta) {
       access_token: cfg.access_token,
       refresh_token: cfg.refresh_token,
       expires_at: cfg.expires_at,
-      endpoint: cfg.endpoint
+      endpoint: cfg.endpoint,
+      oauth_client_id: cfg.oauth_client_id
     };
     writeStore([...existing, team]);
   } catch {
@@ -200,7 +212,8 @@ async function connectBrightsyTeam(accountIdOrSlug) {
     access_token: minted.access_token,
     refresh_token: minted.refresh_token,
     expires_at: minted.expires_at,
-    endpoint: minted.endpoint
+    endpoint: minted.endpoint,
+    oauth_client_id: minted.oauth_client_id
   };
   writeStore([...existing, team]);
   return listConnectedBrightsyTeams();

package/dist/{chunk-K642ORWF.js → chunk-YG2X34EF.js}

@@ -12,10 +12,10 @@ import {
   brightsyMcpServerName,
   ensureCliTeamTracked,
   ensureConnectedBrightsyTeamTokens
-} from "./chunk-IILG7DPX.js";
+} from "./chunk-QILV2BRW.js";
 import {
   loadBrightsyConfig
-} from "./chunk-AN3THU7F.js";
+} from "./chunk-ROPGQRPU.js";
 import {
   httpFetch
 } from "./chunk-N7WZ6NIN.js";
@@ -693,6 +693,7 @@ function teamEnv(team) {
   return {
     BRIGHTSY_API_TOKEN: team.access_token,
     ...team.refresh_token ? { BRIGHTSY_REFRESH_TOKEN: team.refresh_token } : {},
+    ...team.oauth_client_id ? { BRIGHTSY_OAUTH_CLIENT_ID: team.oauth_client_id } : {},
     BRIGHTSY_ACCOUNT_ID: team.id,
     BRIGHTSY_API_URL: endpoint
   };

package/dist/{connected-teams-LX5DLL2I.js → connected-teams-PRHZS6B4.js}

@@ -7,8 +7,8 @@ import {
   ensureConnectedBrightsyTeamTokens,
   getConnectedBrightsyTeamsRaw,
   listConnectedBrightsyTeams
-} from "./chunk-IILG7DPX.js";
-import "./chunk-AN3THU7F.js";
+} from "./chunk-QILV2BRW.js";
+import "./chunk-ROPGQRPU.js";
 import "./chunk-N7WZ6NIN.js";
 import "./chunk-WFUDY6PC.js";
 import "./chunk-HVUVQXZ2.js";

package/dist/{connected-teams-PQETXUWV.js → connected-teams-YOIB42RB.js}

@@ -9,8 +9,8 @@ import {
   ensureConnectedBrightsyTeamTokens,
   getConnectedBrightsyTeamsRaw,
   listConnectedBrightsyTeams
-} from "./chunk-SVXIJ2IC.js";
-import "./chunk-Y4MIXGPA.js";
+} from "./chunk-UNMMKZ4Q.js";
+import "./chunk-P2BSMNHB.js";
 import "./chunk-VKQGAWHY.js";
 import "./chunk-ABOBTSO6.js";
 import "./chunk-EQNRWDLN.js";

package/dist/index.cjs

@@ -10828,10 +10828,21 @@ var init_fetch = __esm({
 // src/brightsy/oauth.ts
 var oauth_exports = {};
 __export(oauth_exports, {
+  BRIGHTSY_OAUTH_CLIENT_ID: () => BRIGHTSY_OAUTH_CLIENT_ID,
+  BRIGHTSY_OAUTH_REDIRECT: () => BRIGHTSY_OAUTH_REDIRECT,
   brightsyAccessTokenNeedsRefresh: () => brightsyAccessTokenNeedsRefresh,
   ensureBrightsyLocalConfigFresh: () => ensureBrightsyLocalConfigFresh,
-  refreshBrightsyAccessToken: () => refreshBrightsyAccessToken
+  ensureBrightsyOAuthClientId: () => ensureBrightsyOAuthClientId,
+  normalizeBrightsyEndpoint: () => normalizeBrightsyEndpoint,
+  refreshBrightsyAccessToken: () => refreshBrightsyAccessToken,
+  registerBrightsyOAuthClient: () => registerBrightsyOAuthClient
 });
+function defaultFetch(fetchImpl) {
+  return fetchImpl ?? globalThis.fetch.bind(globalThis);
+}
+function normalizeBrightsyEndpoint(endpoint) {
+  return (endpoint || "https://brightsy.ai").replace(/\/$/, "");
+}
 function brightsyAccessTokenNeedsRefresh(expiresAt, now = Date.now()) {
   if (typeof expiresAt !== "number" || !Number.isFinite(expiresAt) || expiresAt <= 0) {
     return true;
@@ -10845,10 +10856,53 @@ function applyGrant(current, grant) {
     expires_at: grant.expires_at ?? current.expires_at
   };
 }
+async function registerBrightsyOAuthClient(opts) {
+  const endpoint = normalizeBrightsyEndpoint(opts.endpoint);
+  const url = `${endpoint}/oauth/register`;
+  const clientId = (opts.clientId || BRIGHTSY_OAUTH_CLIENT_ID).trim();
+  const redirectUri = opts.redirectUri || BRIGHTSY_OAUTH_REDIRECT;
+  const fetchImpl = defaultFetch(opts.fetchImpl);
+  let res;
+  try {
+    res = await fetchImpl(url, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        client_id: clientId,
+        client_name: "Sideboard",
+        description: "Sideboard desktop Brightsy MCP client",
+        redirect_uris: [redirectUri],
+        scope: "brightsy:api",
+        grant_types: ["authorization_code", "refresh_token"],
+        response_types: ["code"],
+        token_endpoint_auth_method: "none"
+      })
+    });
+  } catch (err) {
+    throw new Error(formatFetchError(err, url));
+  }
+  if (!res.ok) return null;
+  const data = await res.json();
+  if (!data.client_id?.trim()) return null;
+  return {
+    client_id: data.client_id.trim(),
+    client_secret: data.client_secret?.trim() || void 0
+  };
+}
+async function ensureBrightsyOAuthClientId(opts) {
+  const existing = opts.clientId?.trim();
+  if (existing) return existing;
+  const registered = await registerBrightsyOAuthClient({
+    endpoint: opts.endpoint,
+    fetchImpl: opts.fetchImpl
+  });
+  return registered?.client_id || BRIGHTSY_OAUTH_CLIENT_ID;
+}
 async function refreshBrightsyAccessToken(opts) {
-  const endpoint = (opts.endpoint || "https://brightsy.ai").replace(/\/$/, "");
+  const endpoint = normalizeBrightsyEndpoint(opts.endpoint);
   const url = `${endpoint}/oauth/token`;
-  const fetchImpl = opts.fetchImpl ?? globalThis.fetch.bind(globalThis);
+  const fetchImpl = defaultFetch(opts.fetchImpl);
+  const clientId = opts.clientId?.trim() || BRIGHTSY_OAUTH_CLIENT_ID;
   let res;
   try {
     res = await fetchImpl(url, {
@@ -10857,7 +10911,7 @@ async function refreshBrightsyAccessToken(opts) {
       body: new URLSearchParams({
         grant_type: "refresh_token",
         refresh_token: opts.refreshToken,
-        client_id: opts.clientId || "brightsy-cli"
+        client_id: clientId
       })
     });
   } catch (err) {
@@ -10872,34 +10926,55 @@ async function refreshBrightsyAccessToken(opts) {
     expires_at: data.expires_in ? Date.now() + data.expires_in * 1e3 : void 0
   };
 }
-async function ensureBrightsyLocalConfigFresh(opts) {
+async function ensureBrightsyLocalConfigFreshOnce(opts) {
   let cfg;
   try {
     cfg = loadBrightsyConfig();
   } catch {
     return null;
   }
-  if (!cfg.refresh_token || !brightsyAccessTokenNeedsRefresh(cfg.expires_at)) {
+  const refreshToken = cfg.refresh_token;
+  if (!refreshToken || !brightsyAccessTokenNeedsRefresh(cfg.expires_at)) {
     return cfg;
   }
-  const grant = await refreshBrightsyAccessToken({
-    endpoint: cfg.endpoint || "https://brightsy.ai",
-    refreshToken: cfg.refresh_token,
+  const endpoint = normalizeBrightsyEndpoint(cfg.endpoint);
+  const clientId = await ensureBrightsyOAuthClientId({
+    endpoint,
     clientId: cfg.oauth_client_id,
     fetchImpl: opts?.fetchImpl
   });
+  if (clientId !== cfg.oauth_client_id) {
+    cfg = { ...cfg, oauth_client_id: clientId };
+    saveBrightsyConfig(cfg);
+  }
+  const grant = await refreshBrightsyAccessToken({
+    endpoint,
+    refreshToken,
+    clientId,
+    fetchImpl: opts?.fetchImpl
+  });
   if (!grant) return cfg;
-  const next = { ...cfg, ...applyGrant(cfg, grant) };
+  const next = { ...cfg, ...applyGrant(cfg, grant), oauth_client_id: clientId };
   saveBrightsyConfig(next);
   return next;
 }
-var REFRESH_SKEW_MS;
+async function ensureBrightsyLocalConfigFresh(opts) {
+  if (refreshInFlight) return refreshInFlight;
+  refreshInFlight = ensureBrightsyLocalConfigFreshOnce(opts).finally(() => {
+    refreshInFlight = null;
+  });
+  return refreshInFlight;
+}
+var REFRESH_SKEW_MS, BRIGHTSY_OAUTH_CLIENT_ID, BRIGHTSY_OAUTH_REDIRECT, refreshInFlight;
 var init_oauth = __esm({
   "src/brightsy/oauth.ts"() {
     "use strict";
     init_fetch();
     init_config();
     REFRESH_SKEW_MS = 6e4;
+    BRIGHTSY_OAUTH_CLIENT_ID = "sideboard";
+    BRIGHTSY_OAUTH_REDIRECT = "http://127.0.0.1:19850/callback";
+    refreshInFlight = null;
   }
 });
 
@@ -11052,10 +11127,10 @@ function applyConnectedTeamToCli(team) {
     account_id: team.id,
     account_slug: team.slug,
     endpoint: team.endpoint ?? base.endpoint ?? "https://brightsy.ai",
-    oauth_client_id: base.oauth_client_id
+    oauth_client_id: team.oauth_client_id ?? base.oauth_client_id
   });
 }
-async function refreshTeamToken(team) {
+async function refreshTeamToken(team, opts) {
   if (!team.refresh_token) return team;
   const cfg = (() => {
     try {
@@ -11064,21 +11139,31 @@ async function refreshTeamToken(team) {
       return null;
     }
   })();
+  const endpoint = team.endpoint || "https://brightsy.ai";
+  const clientId = await ensureBrightsyOAuthClientId({
+    endpoint,
+    clientId: team.oauth_client_id || cfg?.oauth_client_id,
+    fetchImpl: opts?.fetchImpl
+  });
   const grant = await refreshBrightsyAccessToken({
-    endpoint: team.endpoint || "https://brightsy.ai",
+    endpoint,
     refreshToken: team.refresh_token,
-    clientId: cfg?.oauth_client_id
+    clientId,
+    fetchImpl: opts?.fetchImpl
   });
-  if (!grant) return team;
+  if (!grant) return { ...team, oauth_client_id: clientId || team.oauth_client_id };
   return {
     ...team,
     access_token: grant.access_token,
     refresh_token: grant.refresh_token || team.refresh_token,
-    expires_at: grant.expires_at ?? team.expires_at
+    expires_at: grant.expires_at ?? team.expires_at,
+    oauth_client_id: clientId
   };
 }
-async function ensureConnectedBrightsyTeamTokens() {
-  await ensureBrightsyLocalConfigFresh().catch(() => null);
+async function ensureConnectedBrightsyTeamTokens(opts) {
+  await ensureBrightsyLocalConfigFresh({ fetchImpl: opts?.fetchImpl }).catch(
+    () => null
+  );
   const teams = readStore4();
   if (teams.length === 0) return [];
   const next = [];
@@ -11088,8 +11173,8 @@ async function ensureConnectedBrightsyTeamTokens() {
       next.push(team);
       continue;
     }
-    const refreshed = await refreshTeamToken(team);
-    if (refreshed.access_token !== team.access_token || refreshed.refresh_token !== team.refresh_token || refreshed.expires_at !== team.expires_at) {
+    const refreshed = await refreshTeamToken(team, opts);
+    if (refreshed.access_token !== team.access_token || refreshed.refresh_token !== team.refresh_token || refreshed.expires_at !== team.expires_at || refreshed.oauth_client_id !== team.oauth_client_id) {
       changed = true;
     }
     next.push(refreshed);
@@ -11119,7 +11204,8 @@ function ensureCliTeamTracked(meta) {
       access_token: cfg.access_token,
       refresh_token: cfg.refresh_token,
       expires_at: cfg.expires_at,
-      endpoint: cfg.endpoint
+      endpoint: cfg.endpoint,
+      oauth_client_id: cfg.oauth_client_id
     };
     writeStore3([...existing, team]);
   } catch {
@@ -11146,7 +11232,8 @@ async function connectBrightsyTeam(accountIdOrSlug) {
     access_token: minted.access_token,
     refresh_token: minted.refresh_token,
     expires_at: minted.expires_at,
-    endpoint: minted.endpoint
+    endpoint: minted.endpoint,
+    oauth_client_id: minted.oauth_client_id
   };
   writeStore3([...existing, team]);
   return listConnectedBrightsyTeams();
@@ -12206,6 +12293,7 @@ function teamEnv(team) {
   return {
     BRIGHTSY_API_TOKEN: team.access_token,
     ...team.refresh_token ? { BRIGHTSY_REFRESH_TOKEN: team.refresh_token } : {},
+    ...team.oauth_client_id ? { BRIGHTSY_OAUTH_CLIENT_ID: team.oauth_client_id } : {},
     BRIGHTSY_ACCOUNT_ID: team.id,
     BRIGHTSY_API_URL: endpoint
   };
@@ -18323,12 +18411,12 @@ async function ensureAbleTimeAccessToken() {
     return access;
   }
   if (refresh) {
-    if (!refreshInFlight) {
-      refreshInFlight = refreshAbleTimeAccessToken(refresh).finally(() => {
-        refreshInFlight = null;
+    if (!refreshInFlight2) {
+      refreshInFlight2 = refreshAbleTimeAccessToken(refresh).finally(() => {
+        refreshInFlight2 = null;
       });
     }
-    return refreshInFlight;
+    return refreshInFlight2;
   }
   return access || null;
 }
@@ -18451,7 +18539,7 @@ async function startAbleTimeOAuth(opts) {
     return loadAppSettings();
   }
 }
-var import_node_crypto10, import_node_http, ABLETIME_OAUTH_CALLBACK_PATH, ABLETIME_OAUTH_PORT, ABLETIME_OAUTH_LOCAL_CALLBACK, ABLETIME_OAUTH_REDIRECT, BOUNCE_QUERY_KEYS, BAKED_ABLETIME_OAUTH_CLIENT_ID, ABLETIME_OAUTH_RESOURCE, REFRESH_SKEW_MS2, refreshInFlight, ABLETIME_OAUTH_CANCELLED, AbleTimeOAuthCancelledError;
+var import_node_crypto10, import_node_http, ABLETIME_OAUTH_CALLBACK_PATH, ABLETIME_OAUTH_PORT, ABLETIME_OAUTH_LOCAL_CALLBACK, ABLETIME_OAUTH_REDIRECT, BOUNCE_QUERY_KEYS, BAKED_ABLETIME_OAUTH_CLIENT_ID, ABLETIME_OAUTH_RESOURCE, REFRESH_SKEW_MS2, refreshInFlight2, ABLETIME_OAUTH_CANCELLED, AbleTimeOAuthCancelledError;
 var init_abletime_oauth = __esm({
   "src/integrations/abletime-oauth.ts"() {
     "use strict";
@@ -18468,7 +18556,7 @@ var init_abletime_oauth = __esm({
     BAKED_ABLETIME_OAUTH_CLIENT_ID = "https://www.sideboard.cloud/oauth/abletime-client.json";
     ABLETIME_OAUTH_RESOURCE = `${DEFAULT_ABLETIME_HOST}/api/public/v2/mcp`;
     REFRESH_SKEW_MS2 = 5 * 6e4;
-    refreshInFlight = null;
+    refreshInFlight2 = null;
     ABLETIME_OAUTH_CANCELLED = "AbleTime sign-in cancelled";
     AbleTimeOAuthCancelledError = class extends Error {
       constructor(message = ABLETIME_OAUTH_CANCELLED) {
@@ -25684,6 +25772,8 @@ __export(index_exports, {
   BAKED_ABLETIME_OAUTH_CLIENT_ID: () => BAKED_ABLETIME_OAUTH_CLIENT_ID,
   BAKED_SLACK_RELAY_URL: () => BAKED_SLACK_RELAY_URL,
   BRIGHTSY_MCP_ALLOWED_TOOLS: () => BRIGHTSY_MCP_ALLOWED_TOOLS,
+  BRIGHTSY_OAUTH_CLIENT_ID: () => BRIGHTSY_OAUTH_CLIENT_ID,
+  BRIGHTSY_OAUTH_REDIRECT: () => BRIGHTSY_OAUTH_REDIRECT,
   BRIGHTSY_SUMMARIZE_CONTEXT_TOOL: () => BRIGHTSY_SUMMARIZE_CONTEXT_TOOL,
   BUNDLED_LONG_RUNNING_PATH: () => BUNDLED_LONG_RUNNING_PATH,
   BUNDLED_SKILL_PREFIX: () => BUNDLED_SKILL_PREFIX,
@@ -25952,6 +26042,7 @@ __export(index_exports, {
   ensureAbleTimeTask: () => ensureAbleTimeTask,
   ensureAgentPath: () => ensureAgentPath,
   ensureBrightsyLocalConfigFresh: () => ensureBrightsyLocalConfigFresh,
+  ensureBrightsyOAuthClientId: () => ensureBrightsyOAuthClientId,
   ensureCloudCoordinator: () => ensureCloudCoordinator,
   ensureConnectedBrightsyTeamTokens: () => ensureConnectedBrightsyTeamTokens,
   ensureGhPreferOrigin: () => ensureGhPreferOrigin,
@@ -26260,6 +26351,7 @@ __export(index_exports, {
   nonInteractiveGitProcessEnv: () => nonInteractiveGitProcessEnv,
   normalizeAbleTimeCredential: () => normalizeAbleTimeCredential,
   normalizeAbleTimeHost: () => normalizeAbleTimeHost,
+  normalizeBrightsyEndpoint: () => normalizeBrightsyEndpoint,
   normalizeCodeSelection: () => normalizeCodeSelection,
   normalizeLinearRelationType: () => normalizeLinearRelationType,
   normalizeParseResult: () => normalizeParseResult,
@@ -26328,6 +26420,7 @@ __export(index_exports, {
   recordSlackOutboundWatch: () => recordSlackOutboundWatch,
   refreshBrightsyAccessToken: () => refreshBrightsyAccessToken,
   refreshGitHubAuth: () => refreshGitHubAuth,
+  registerBrightsyOAuthClient: () => registerBrightsyOAuthClient,
   registerPackagedUserMcpClients: () => registerPackagedUserMcpClients,
   releaseCaffeinateHoldForThread: () => releaseCaffeinateHoldForThread,
   releaseDesktopHost: () => releaseDesktopHost,
@@ -26859,7 +26952,7 @@ async function fetchLinearViewer(accessToken) {
     organizationName: viewer?.organization?.name?.trim() || void 0
   };
 }
-var refreshInFlight2 = null;
+var refreshInFlight3 = null;
 async function refreshLinearAccessToken(refreshToken) {
   const { clientId, clientSecret } = linearOAuthCredentials();
   const body = new URLSearchParams({
@@ -26890,12 +26983,12 @@ async function getLinearAuthToken(settings = loadAppSettings()) {
     return access;
   }
   if (refresh) {
-    if (!refreshInFlight2) {
-      refreshInFlight2 = refreshLinearAccessToken(refresh).finally(() => {
-        refreshInFlight2 = null;
+    if (!refreshInFlight3) {
+      refreshInFlight3 = refreshLinearAccessToken(refresh).finally(() => {
+        refreshInFlight3 = null;
       });
     }
-    return refreshInFlight2.catch((err) => {
+    return refreshInFlight3.catch((err) => {
       if (apiKey) return apiKey;
       throw err;
     });
@@ -34476,6 +34569,8 @@ init_outbound_watch();
   BAKED_ABLETIME_OAUTH_CLIENT_ID,
   BAKED_SLACK_RELAY_URL,
   BRIGHTSY_MCP_ALLOWED_TOOLS,
+  BRIGHTSY_OAUTH_CLIENT_ID,
+  BRIGHTSY_OAUTH_REDIRECT,
   BRIGHTSY_SUMMARIZE_CONTEXT_TOOL,
   BUNDLED_LONG_RUNNING_PATH,
   BUNDLED_SKILL_PREFIX,
@@ -34744,6 +34839,7 @@ init_outbound_watch();
   ensureAbleTimeTask,
   ensureAgentPath,
   ensureBrightsyLocalConfigFresh,
+  ensureBrightsyOAuthClientId,
   ensureCloudCoordinator,
   ensureConnectedBrightsyTeamTokens,
   ensureGhPreferOrigin,
@@ -35052,6 +35148,7 @@ init_outbound_watch();
   nonInteractiveGitProcessEnv,
   normalizeAbleTimeCredential,
   normalizeAbleTimeHost,
+  normalizeBrightsyEndpoint,
   normalizeCodeSelection,
   normalizeLinearRelationType,
   normalizeParseResult,
@@ -35120,6 +35217,7 @@ init_outbound_watch();
   recordSlackOutboundWatch,
   refreshBrightsyAccessToken,
   refreshGitHubAuth,
+  registerBrightsyOAuthClient,
   registerPackagedUserMcpClients,
   releaseCaffeinateHoldForThread,
   releaseDesktopHost,