@sideboard-ai/core 0.1.274 → 0.1.276

package/dist/{chunk-ADWNK2JH.js → chunk-NIB2IZ6J.js}

@@ -12,13 +12,13 @@ import {
 } from "./chunk-FAGK33E2.js";
 import {
   isOrchestratorThread
-} from "./chunk-PTNGMA5C.js";
+} from "./chunk-A2G3ZBJS.js";
 import {
   codexUnattendedGitConfigArgs,
   mergeAgentGitAuthEnv,
   resolveAgentGitAuthEnv,
   resolveCodexGitWritableRoots
-} from "./chunk-USBZ7PH4.js";
+} from "./chunk-IPPY3FG5.js";
 import {
   loadBrightsyConfig
 } from "./chunk-ROPGQRPU.js";
@@ -71,7 +71,7 @@ import {
   loadAppSettings,
   resolveAgentExecutable,
   resolveClaudeExecutable
-} from "./chunk-PAH7KDL2.js";
+} from "./chunk-YNTXWFXT.js";
 import {
   isElectronLikeCommand,
   unwrapStrippedElectronLaunch
@@ -1745,7 +1745,7 @@ var claudeAdapter = {
       );
     }
     const mode = permissionMode(thread);
-    const { isOrchestratorThread: isOrchestratorThread2 } = await import("./global-workspace-34Z2IWYQ.js");
+    const { isOrchestratorThread: isOrchestratorThread2 } = await import("./global-workspace-N2YYJKA5.js");
     const isOrchestrator = isOrchestratorThread2(thread);
     const rpc = worktreeAgentRpc(isOrchestrator);
     const injectedServers = await buildInjectedMcpServers({
@@ -3893,7 +3893,7 @@ async function loginAgent(agent) {
   };
 }
 async function loginManagedAccount(accountId) {
-  const { loadAppSettings: loadAppSettings2 } = await import("./app-settings-L5HGYXWJ.js");
+  const { loadAppSettings: loadAppSettings2 } = await import("./app-settings-NI4X5HW3.js");
   const { loginEnvPrefix } = await import("./managed-accounts-2AK5RIAF.js");
   const account = loadAppSettings2().accounts.accounts.find((a) => a.id === accountId);
   if (!account) {

package/dist/{chunk-AGXZAMOF.js → chunk-NQ7JMVSU.js}

@@ -4,14 +4,14 @@ import {
   normalizeAbleTimeCredential,
   normalizeAbleTimeHost,
   rewriteAbleTimeError
-} from "./chunk-L6CYOON4.js";
+} from "./chunk-PZURG3XN.js";
 import {
   httpFetch
 } from "./chunk-N7WZ6NIN.js";
 import {
   getAbleTimeAccessToken,
   getAbleTimeHost
-} from "./chunk-PAH7KDL2.js";
+} from "./chunk-YNTXWFXT.js";
 
 // src/integrations/abletime-rest.ts
 var ABLETIME_REST_PREFIX = "/api/public/v2";

package/dist/{chunk-JLDJGGCL.js → chunk-NT7RIWRR.js}

@@ -24,13 +24,13 @@ import {
 } from "./chunk-UKSJO36E.js";
 import {
   isOrchestratorThread
-} from "./chunk-2QUILREI.js";
+} from "./chunk-QTZO4LPU.js";
 import {
   codexUnattendedGitConfigArgs,
   mergeAgentGitAuthEnv,
   resolveAgentGitAuthEnv,
   resolveCodexGitWritableRoots
-} from "./chunk-NWE3NOWQ.js";
+} from "./chunk-K7MWJLR7.js";
 import {
   enrichPathWithNpmGlobalBin,
   isConductorBundledCli,
@@ -47,7 +47,7 @@ import {
   loadAppSettings,
   resolveAgentExecutable,
   resolveClaudeExecutable
-} from "./chunk-OIENQEGG.js";
+} from "./chunk-WRIMAEF2.js";
 import {
   isElectronLikeCommand,
   unwrapStrippedElectronLaunch,
@@ -2010,7 +2010,7 @@ var claudeAdapter = {
       );
     }
     const mode = permissionMode(thread);
-    const { isOrchestratorThread: isOrchestratorThread2 } = await import("./global-workspace-FR7QTLPK.js");
+    const { isOrchestratorThread: isOrchestratorThread2 } = await import("./global-workspace-7XEXTIHL.js");
     const isOrchestrator = isOrchestratorThread2(thread);
     const rpc = worktreeAgentRpc(isOrchestrator);
     const injectedServers = await buildInjectedMcpServers({
@@ -4541,7 +4541,7 @@ async function loginAgent(agent) {
   };
 }
 async function loginManagedAccount(accountId) {
-  const { loadAppSettings: loadAppSettings2 } = await import("./app-settings-RAC4PSSP.js");
+  const { loadAppSettings: loadAppSettings2 } = await import("./app-settings-EQQZQNYD.js");
   const { loginEnvPrefix } = await import("./managed-accounts-46A4KRUE.js");
   const account = loadAppSettings2().accounts.accounts.find((a) => a.id === accountId);
   if (!account) {

package/dist/{chunk-L6CYOON4.js → chunk-PZURG3XN.js}

@@ -4,7 +4,7 @@ import {
 import {
   getAbleTimeHost,
   isAbleTimeConnected
-} from "./chunk-PAH7KDL2.js";
+} from "./chunk-YNTXWFXT.js";
 
 // src/integrations/abletime-mcp.ts
 var DEFAULT_ABLETIME_HOST = "https://track.abletime.com";
@@ -153,7 +153,7 @@ function textsFromUnknown(value) {
   return "";
 }
 async function abletimeMcpRequest(method, params, opts) {
-  const rawToken = opts?.token ?? await import("./abletime-oauth-4RXZH2KU.js").then((m) => m.ensureAbleTimeAccessToken());
+  const rawToken = opts?.token ?? await import("./abletime-oauth-4C4G2J3R.js").then((m) => m.ensureAbleTimeAccessToken());
   if (!rawToken?.trim()) {
     throw new Error("AbleTime is not connected \u2014 paste a personal access token in Account settings");
   }
@@ -224,9 +224,9 @@ async function callAbleTimeTool(name, args = {}, opts) {
   if (!opts?.token && !isAbleTimeConnected()) {
     throw new Error("AbleTime is not connected \u2014 paste a personal access token in Account settings");
   }
-  const rawToken = opts?.token ?? await import("./abletime-oauth-4RXZH2KU.js").then((m) => m.ensureAbleTimeAccessToken());
+  const rawToken = opts?.token ?? await import("./abletime-oauth-4C4G2J3R.js").then((m) => m.ensureAbleTimeAccessToken());
   if (rawToken && ableTimeUsesRest(rawToken)) {
-    const { callAbleTimeRestTool } = await import("./abletime-rest-KVBJFVFD.js");
+    const { callAbleTimeRestTool } = await import("./abletime-rest-6N63ZVQ3.js");
     return callAbleTimeRestTool(name, args, { ...opts, token: rawToken });
   }
   const requestOpts = { ...opts, pm: opts?.pm ?? abletimeToolUsesPm(name) };
@@ -242,7 +242,7 @@ async function callAbleTimeTool(name, args = {}, opts) {
       return await call();
     }
     if (rawToken && ableTimeUsesRest(rawToken) && isAbleTimeRejectedCredential(message)) {
-      const { callAbleTimeRestTool } = await import("./abletime-rest-KVBJFVFD.js");
+      const { callAbleTimeRestTool } = await import("./abletime-rest-6N63ZVQ3.js");
       return callAbleTimeRestTool(name, args, { ...opts, token: rawToken });
     }
     throw err instanceof Error ? new Error(rewriteAbleTimeError(err.message)) : err;

package/dist/{chunk-LAIBYKZS.js → chunk-QINJKNLR.js}

@@ -1,7 +1,7 @@
 import {
   DEFAULT_ABLETIME_HOST,
   normalizeAbleTimeHost
-} from "./chunk-L6CYOON4.js";
+} from "./chunk-PZURG3XN.js";
 import {
   httpFetch
 } from "./chunk-N7WZ6NIN.js";
@@ -10,7 +10,7 @@ import {
   getAbleTimeHost,
   loadAppSettings,
   saveAbleTimeConnection
-} from "./chunk-PAH7KDL2.js";
+} from "./chunk-YNTXWFXT.js";
 
 // src/integrations/abletime-oauth.ts
 import { createHash, randomBytes } from "crypto";
@@ -280,7 +280,7 @@ async function startAbleTimeOAuth(opts) {
   persistAbleTimeTokens(data, { host });
   const token = data.access_token.trim();
   try {
-    const { getAbleTimeOrientation } = await import("./abletime-JNQAHLHH.js");
+    const { getAbleTimeOrientation } = await import("./abletime-VRATUMDO.js");
     const orientation = await getAbleTimeOrientation({ token, host });
     return saveAbleTimeConnection({
       accessToken: token,

package/dist/{chunk-2QUILREI.js → chunk-QTZO4LPU.js}

@@ -8,7 +8,7 @@ import {
   resolveRepoRoot,
   takenSlugsFromThread,
   teamSlugFromName
-} from "./chunk-NWE3NOWQ.js";
+} from "./chunk-K7MWJLR7.js";
 import {
   ATTACHMENTS_DIR,
   attachmentsGitignoreBody
@@ -25,7 +25,7 @@ import {
   resolveThreadDefaults,
   resolveViewerProfile,
   resolveViewerProfileForRepo
-} from "./chunk-OIENQEGG.js";
+} from "./chunk-WRIMAEF2.js";
 import {
   createEmptyThread,
   listThreads,

package/dist/{chunk-KZ2CDZBZ.js → chunk-R7HLXD4I.js}

@@ -3,13 +3,13 @@
 import {
   abletimeRestUrl,
   textFromAbleTimeDoc
-} from "./chunk-DBFAFI5A.js";
+} from "./chunk-XKZAVGTT.js";
 import {
   assertAbleTimeCredential,
   callAbleTimeTool,
   normalizeAbleTimeHost,
   rewriteAbleTimeError
-} from "./chunk-GONPMH36.js";
+} from "./chunk-IJDQKC5A.js";
 import {
   httpFetch
 } from "./chunk-VKQGAWHY.js";
@@ -22,7 +22,7 @@ import {
   getAbleTimeHost,
   isAbleTimeConnected,
   saveAbleTimeConnection
-} from "./chunk-OIENQEGG.js";
+} from "./chunk-WRIMAEF2.js";
 
 // src/integrations/issue-attachments.ts
 import { existsSync, mkdirSync, writeFileSync } from "fs";

package/dist/{chunk-XIVM7K77.js → chunk-SQOAFR2U.js}

@@ -7,7 +7,7 @@ import {
   parseSessionQuotaResetAt,
   planModeTurnInstruction,
   resolveQuotaFallbackAgent
-} from "./chunk-ADWNK2JH.js";
+} from "./chunk-NIB2IZ6J.js";
 import {
   REVIEW_TAB_TITLE,
   applyWorktreePkgCacheEnv,
@@ -44,7 +44,7 @@ import {
   worktreeDevProcessKey,
   worktreeRunProcessKey,
   worktreeSetupProcessKey
-} from "./chunk-DVTEC4BF.js";
+} from "./chunk-MGS5T2A3.js";
 import {
   applyAgentEvent,
   clipAgentEventForPaint,
@@ -88,7 +88,7 @@ import {
   stageAbsolutePathsAsAttachments,
   stageBuffersAsAttachments,
   syncWorkspacesFromThreads
-} from "./chunk-PTNGMA5C.js";
+} from "./chunk-A2G3ZBJS.js";
 import {
   addPrStackLayer,
   agentNicknameFromWorktreePath,
@@ -140,7 +140,7 @@ import {
   worktreeIdentityTitles,
   worktreeNameFromPath,
   worktreeSlugForTicket
-} from "./chunk-USBZ7PH4.js";
+} from "./chunk-IPPY3FG5.js";
 import {
   appendMessage,
   createEmptyThread,
@@ -215,7 +215,7 @@ import {
   updateAdvancedSettings,
   usageOnLimit,
   withTurnScopedCost
-} from "./chunk-PAH7KDL2.js";
+} from "./chunk-YNTXWFXT.js";
 import {
   examplePrefixedBranch,
   sanitizeGitBranchPrefix
@@ -437,9 +437,9 @@ async function spawnAgentTurn(thread, input, onEvent) {
       `Cannot spawn ${thread.agent}: thread ${thread.id} has no worktreePath`
     );
   }
-  const { isGlobalThread: isGlobalThread2 } = await import("./global-workspace-34Z2IWYQ.js");
+  const { isGlobalThread: isGlobalThread2 } = await import("./global-workspace-N2YYJKA5.js");
   if (isGlobalThread2(thread)) {
-    const { ensureGlobalCoordinatorCwd: ensureGlobalCoordinatorCwd2 } = await import("./coordinator-prompt-4KVA6XUX.js");
+    const { ensureGlobalCoordinatorCwd: ensureGlobalCoordinatorCwd2 } = await import("./coordinator-prompt-B3GLVXPP.js");
     ensureGlobalCoordinatorCwd2(
       isOrchestratorThread(thread) ? { orchestratorThreadId: thread.id } : void 0
     );
@@ -2238,7 +2238,7 @@ async function createThread(input, _onSetupLine) {
   });
   await requireAgent(resolved.agent);
   if (input.cowboy) {
-    const { cowboyModeEnabled } = await import("./app-settings-L5HGYXWJ.js");
+    const { cowboyModeEnabled } = await import("./app-settings-NI4X5HW3.js");
     if (!cowboyModeEnabled()) {
       throw new Error(
         "Cowboy mode is off. Enable it in Settings \u2192 Advanced."
@@ -2296,7 +2296,7 @@ async function createThread(input, _onSetupLine) {
   let sourceIsFork = false;
   if (!input.cowboy && sourceType === "branch" && (!sourceRef || sourceRef === "HEAD" || sourceRef === "default")) {
     if (isAbleTimeConnected() && getIssueSource() === "abletime") {
-      const { ensureAbleTimeTask, issueAttachmentForAbleTimeTask } = await import("./abletime-JNQAHLHH.js");
+      const { ensureAbleTimeTask, issueAttachmentForAbleTimeTask } = await import("./abletime-VRATUMDO.js");
       const task = await ensureAbleTimeTask({
         title: title?.trim() || "Untitled work",
         description: input.prompt?.trim() || void 0
@@ -2406,7 +2406,7 @@ async function createThread(input, _onSetupLine) {
   return readThread(thread.id) ?? thread;
 }
 async function listLinearIssues(agent, repoPath) {
-  const { getAdapter: getAdapter2 } = await import("./agents-LAFFXBBZ.js");
+  const { getAdapter: getAdapter2 } = await import("./agents-2FOWVJCN.js");
   await requireAgent(agent, { requireLinear: true });
   const adapter = getAdapter2(agent);
   if (!adapter.listLinearIssues) {
@@ -2913,7 +2913,7 @@ async function adoptThread(input) {
     messages: input.messages ?? []
   });
   writeThread(thread);
-  const { ensureWorkspace: ensureWorkspace2 } = await import("./workspaces-2JBDUMM6.js");
+  const { ensureWorkspace: ensureWorkspace2 } = await import("./workspaces-PBB6HY2D.js");
   await ensureWorkspace2(repoPath);
   const { ensureWorktreeSideboardIgnored } = await import("./worktree-exclude-RXZPTCNH.js");
   await ensureWorktreeSideboardIgnored(input.worktreePath);
@@ -5610,7 +5610,7 @@ function formatScheduledPrompt(name, prompt) {
 ${prompt}`;
 }
 async function defaultDeps() {
-  const { getOrchestrator: getOrchestrator2, startOrchestration: startOrchestration2 } = await import("./orchestrator-QRSEOHXI.js");
+  const { getOrchestrator: getOrchestrator2, startOrchestration: startOrchestration2 } = await import("./orchestrator-QMKVXVUR.js");
   const orch = getOrchestrator2();
   return {
     findThread: (id) => findThreadByRef(id),
@@ -5928,7 +5928,7 @@ var Orchestrator = class {
           orphans: orphans.map((o) => ({ path: o.path, repoPath: o.repoPath }))
         });
       }
-      const { autoCleanupOrphansEnabled } = await import("./app-settings-L5HGYXWJ.js");
+      const { autoCleanupOrphansEnabled } = await import("./app-settings-NI4X5HW3.js");
       if (autoCleanupOrphansEnabled() && shouldRunWorktreeCleanup() && orphans.length > 0) {
         await cleanupOrphanWorktrees({ repoPaths });
       }
@@ -6317,7 +6317,7 @@ var Orchestrator = class {
     }
     await setup;
     if (skipSetup) return;
-    const { autoRunAfterSetupEnabled } = await import("./app-settings-L5HGYXWJ.js");
+    const { autoRunAfterSetupEnabled } = await import("./app-settings-NI4X5HW3.js");
     if (autoRunAfterSetupEnabled()) {
       try {
         await this.startDev(threadId);
@@ -6370,7 +6370,8 @@ var Orchestrator = class {
         throw new Error(`Thread is archived: ${thread.id}`);
       }
       const followUp = resolveSendFollowUp(current, opts?.followUp);
-      const consumed = consumeComposerAttachments(current);
+      const explicit = opts?.attachments;
+      const consumed = explicit !== void 0 ? { attachments: current.attachments, consumed: explicit } : consumeComposerAttachments(current);
       const queued = appendQueuedItem(
         current.queue,
         current.queueAttachments,
@@ -6384,7 +6385,7 @@ var Orchestrator = class {
       const inFlight = this.activeTurns.has(thread.id) || this.startingTurns.has(thread.id) || current.status === "running";
       shouldSteer = followUp === "steer" && (inFlight || current.queue.length > 0);
       const patch = queued;
-      if (consumed.consumed.length > 0) {
+      if (explicit === void 0 && consumed.consumed.length > 0) {
         patch.attachments = consumed.attachments;
       }
       if (!inFlight) patch.status = "queued";
@@ -6696,7 +6697,7 @@ var Orchestrator = class {
       }
       const isBrightsy = fresh.agent === "brightsy";
       const isOrchestration = isOrchestratorThread(fresh);
-      const { autoRenameBranchEnabled, getGithubGitAuthMode, gitBranchPrefixSetting } = await import("./app-settings-L5HGYXWJ.js");
+      const { autoRenameBranchEnabled, getGithubGitAuthMode, gitBranchPrefixSetting } = await import("./app-settings-NI4X5HW3.js");
       const gitAuthMode = getGithubGitAuthMode();
       const worktreeDirective = isBrightsy || isOrchestration ? null : formatWorktreeDirective(fresh, {
         githubSlug: await withTimeout(
@@ -8006,7 +8007,7 @@ var Orchestrator = class {
       if (Object.keys(patch).length === 0) continue;
       updateThread(t.id, patch);
     }
-    const { autoArchiveOnMergeEnabled } = await import("./app-settings-L5HGYXWJ.js");
+    const { autoArchiveOnMergeEnabled } = await import("./app-settings-NI4X5HW3.js");
     const latest = this.requireThread(thread.id);
     if (!shouldAutoArchiveOnPrMerge({
       previousPrState: prevState || null,
@@ -8297,7 +8298,7 @@ var Orchestrator = class {
     this.enforceHistoryRetention();
     if (thread.repoPath && !isGlobalRepoPath(thread.repoPath)) {
       try {
-        const { ensureWorkspace: ensureWorkspace2 } = await import("./workspaces-2JBDUMM6.js");
+        const { ensureWorkspace: ensureWorkspace2 } = await import("./workspaces-PBB6HY2D.js");
         await ensureWorkspace2(thread.repoPath);
       } catch {
       }
@@ -8324,7 +8325,7 @@ var Orchestrator = class {
           await runArchiveScript(thread.repoPath, thread.worktreePath);
         } catch {
         }
-        const { deleteBranchOnPurgeEnabled } = await import("./app-settings-L5HGYXWJ.js");
+        const { deleteBranchOnPurgeEnabled } = await import("./app-settings-NI4X5HW3.js");
         const deleteBranch = opts?.deleteBranch ?? deleteBranchOnPurgeEnabled();
         await removeWorktree(thread.repoPath, thread.worktreePath, {
           deleteBranch: deleteBranch ? thread.branchName : void 0
@@ -8351,7 +8352,7 @@ var Orchestrator = class {
           `Cowboy checkout missing: ${thread.worktreePath}. Re-add the project folder, then restore.`
         );
       }
-      const { createThreadWorktree: createThreadWorktree2 } = await import("./worktree-C7RPVHZ7.js");
+      const { createThreadWorktree: createThreadWorktree2 } = await import("./worktree-Q6UJHG25.js");
       const slug = thread.worktreePath.split("/").pop();
       const dest = thread.worktreePath;
       await withRepoGitLock(thread.repoPath, async () => {
@@ -8461,7 +8462,7 @@ async function startOrchestration(opts) {
     sourceRef: "default",
     ...createOpts
   }).catch(async () => {
-    const { resolveDefaultBranch: resolveDefaultBranch2, resolveRepoRoot: resolveRepoRoot2 } = await import("./worktree-C7RPVHZ7.js");
+    const { resolveDefaultBranch: resolveDefaultBranch2, resolveRepoRoot: resolveRepoRoot2 } = await import("./worktree-Q6UJHG25.js");
     const repo = await resolveRepoRoot2(repoPath);
     const def = await resolveDefaultBranch2(repo);
     return orch.createThread({

package/dist/{chunk-OIENQEGG.js → chunk-WRIMAEF2.js}

@@ -310,6 +310,9 @@ function normalizeVault(raw) {
   if (typeof raw.remoteHostSecret === "string" && raw.remoteHostSecret.trim()) {
     out.remoteHostSecret = raw.remoteHostSecret.trim();
   }
+  if (typeof raw.remoteAccountToken === "string" && raw.remoteAccountToken.trim()) {
+    out.remoteAccountToken = raw.remoteAccountToken.trim();
+  }
   if (typeof raw.githubPat === "string" && raw.githubPat.trim()) {
     out.githubPat = raw.githubPat.trim();
   }
@@ -695,9 +698,27 @@ function emptyPublicIntegrations() {
     hasVercelToken: false,
     hasSupabaseToken: false,
     hasPosthogToken: false,
-    hasSentryToken: false
+    hasSentryToken: false,
+    hasRemoteAccount: false
   };
 }
+var INTEGRATION_VAULT_KEYS = [
+  "linearApiKey",
+  "linearAccessToken",
+  "linearRefreshToken",
+  "linearClientSecret",
+  "slackClientSecret",
+  "slackAppToken",
+  "remoteHostSecret",
+  "remoteAccountToken",
+  "githubPat",
+  "abletimeAccessToken",
+  "abletimeRefreshToken",
+  "vercelToken",
+  "supabaseAccessToken",
+  "posthogPersonalApiKey",
+  "sentryAuthToken"
+];
 function hasLinearOAuth(integrations) {
   return Boolean(
     integrations.linearAccessToken?.trim() || integrations.linearRefreshToken?.trim()
@@ -712,29 +733,7 @@ function toPublicAppSettings(settings) {
     if (key.trim()) environment[key] = "";
   }
   const integrations = { ...settings.integrations };
-  const slackClientSecret = integrations.slackClientSecret;
-  const slackAppToken = integrations.slackAppToken;
-  const githubPat = integrations.githubPat;
-  const abletimeAccessToken = integrations.abletimeAccessToken;
-  const abletimeRefreshToken = integrations.abletimeRefreshToken;
-  const vercelToken = integrations.vercelToken;
-  const supabaseAccessToken = integrations.supabaseAccessToken;
-  const posthogPersonalApiKey = integrations.posthogPersonalApiKey;
-  const sentryAuthToken = integrations.sentryAuthToken;
-  delete integrations.linearApiKey;
-  delete integrations.linearAccessToken;
-  delete integrations.linearRefreshToken;
-  delete integrations.linearClientSecret;
-  delete integrations.slackClientSecret;
-  delete integrations.slackAppToken;
-  delete integrations.remoteHostSecret;
-  delete integrations.githubPat;
-  delete integrations.abletimeAccessToken;
-  delete integrations.abletimeRefreshToken;
-  delete integrations.vercelToken;
-  delete integrations.supabaseAccessToken;
-  delete integrations.posthogPersonalApiKey;
-  delete integrations.sentryAuthToken;
+  for (const key of INTEGRATION_VAULT_KEYS) delete integrations[key];
   return {
     ...settings,
     environment,
@@ -742,15 +741,18 @@ function toPublicAppSettings(settings) {
       ...integrations,
       hasLinearApiKey: hasLinearCredentials(settings.integrations),
       hasLinearOAuth: hasLinearOAuth(settings.integrations),
-      hasSlackClientSecret: Boolean(slackClientSecret?.trim()),
-      hasSlackAppToken: Boolean(slackAppToken?.trim()),
-      hasGithubPat: Boolean(githubPat?.trim()),
-      hasAbleTimeToken: Boolean(abletimeAccessToken?.trim() || abletimeRefreshToken?.trim()),
-      hasAbleTimeOAuth: Boolean(abletimeRefreshToken?.trim()),
-      hasVercelToken: Boolean(vercelToken?.trim()),
-      hasSupabaseToken: Boolean(supabaseAccessToken?.trim()),
-      hasPosthogToken: Boolean(posthogPersonalApiKey?.trim()),
-      hasSentryToken: Boolean(sentryAuthToken?.trim())
+      hasSlackClientSecret: Boolean(settings.integrations.slackClientSecret?.trim()),
+      hasSlackAppToken: Boolean(settings.integrations.slackAppToken?.trim()),
+      hasGithubPat: Boolean(settings.integrations.githubPat?.trim()),
+      hasAbleTimeToken: Boolean(
+        settings.integrations.abletimeAccessToken?.trim() || settings.integrations.abletimeRefreshToken?.trim()
+      ),
+      hasAbleTimeOAuth: Boolean(settings.integrations.abletimeRefreshToken?.trim()),
+      hasVercelToken: Boolean(settings.integrations.vercelToken?.trim()),
+      hasSupabaseToken: Boolean(settings.integrations.supabaseAccessToken?.trim()),
+      hasPosthogToken: Boolean(settings.integrations.posthogPersonalApiKey?.trim()),
+      hasSentryToken: Boolean(settings.integrations.sentryAuthToken?.trim()),
+      hasRemoteAccount: Boolean(settings.integrations.remoteAccountToken?.trim())
     }
   };
 }
@@ -885,6 +887,14 @@ function normalizeIntegrations(raw) {
     const secret = source.remoteHostSecret.trim();
     if (secret) out.remoteHostSecret = secret;
   }
+  if (typeof source.remoteAccountToken === "string") {
+    const token = source.remoteAccountToken.trim();
+    if (token) out.remoteAccountToken = token;
+  }
+  if (typeof source.remoteAccountEmail === "string") {
+    const email = source.remoteAccountEmail.trim().toLowerCase();
+    if (email) out.remoteAccountEmail = email;
+  }
   if (typeof source.githubGitAuthMode === "string" && GIT_AUTH_MODES.has(source.githubGitAuthMode)) {
     out.githubGitAuthMode = source.githubGitAuthMode;
   }
@@ -1241,110 +1251,31 @@ function readSettingsFile() {
   }
 }
 function diskHoldsSecrets(disk) {
-  return Boolean(
-    disk.integrations.linearApiKey || disk.integrations.linearAccessToken || disk.integrations.linearRefreshToken || disk.integrations.linearClientSecret || disk.integrations.slackClientSecret || disk.integrations.slackAppToken || disk.integrations.remoteHostSecret || disk.integrations.githubPat || disk.integrations.abletimeAccessToken || disk.integrations.abletimeRefreshToken || disk.integrations.vercelToken || disk.integrations.supabaseAccessToken || disk.integrations.posthogPersonalApiKey || disk.integrations.sentryAuthToken || Object.keys(disk.environment).length > 0
-  );
+  return INTEGRATION_VAULT_KEYS.some((key) => Boolean(disk.integrations[key])) || Object.keys(disk.environment).length > 0;
 }
 function mergeVault(disk) {
   const vault = loadSecretVault();
   const environment = { ...vault.environment ?? {}, ...disk.environment };
   const integrations = { ...disk.integrations };
-  if (vault.linearApiKey && !integrations.linearApiKey) {
-    integrations.linearApiKey = vault.linearApiKey;
-  }
-  if (vault.linearAccessToken && !integrations.linearAccessToken) {
-    integrations.linearAccessToken = vault.linearAccessToken;
-  }
-  if (vault.linearRefreshToken && !integrations.linearRefreshToken) {
-    integrations.linearRefreshToken = vault.linearRefreshToken;
-  }
-  if (vault.linearClientSecret && !integrations.linearClientSecret) {
-    integrations.linearClientSecret = vault.linearClientSecret;
-  }
-  if (vault.slackClientSecret && !integrations.slackClientSecret) {
-    integrations.slackClientSecret = vault.slackClientSecret;
-  }
-  if (vault.slackAppToken && !integrations.slackAppToken) {
-    integrations.slackAppToken = vault.slackAppToken;
-  }
-  if (vault.remoteHostSecret && !integrations.remoteHostSecret) {
-    integrations.remoteHostSecret = vault.remoteHostSecret;
-  }
-  if (vault.githubPat && !integrations.githubPat) {
-    integrations.githubPat = vault.githubPat;
-  }
-  if (vault.abletimeAccessToken && !integrations.abletimeAccessToken) {
-    integrations.abletimeAccessToken = vault.abletimeAccessToken;
-  }
-  if (vault.abletimeRefreshToken && !integrations.abletimeRefreshToken) {
-    integrations.abletimeRefreshToken = vault.abletimeRefreshToken;
-  }
-  if (vault.vercelToken && !integrations.vercelToken) {
-    integrations.vercelToken = vault.vercelToken;
-  }
-  if (vault.supabaseAccessToken && !integrations.supabaseAccessToken) {
-    integrations.supabaseAccessToken = vault.supabaseAccessToken;
-  }
-  if (vault.posthogPersonalApiKey && !integrations.posthogPersonalApiKey) {
-    integrations.posthogPersonalApiKey = vault.posthogPersonalApiKey;
-  }
-  if (vault.sentryAuthToken && !integrations.sentryAuthToken) {
-    integrations.sentryAuthToken = vault.sentryAuthToken;
+  for (const key of INTEGRATION_VAULT_KEYS) {
+    const stored = vault[key];
+    if (stored && !integrations[key]) integrations[key] = stored;
   }
   return { ...disk, environment, integrations };
 }
 function persistSplit(settings) {
   const integrations = { ...settings.integrations };
-  const linearApiKey = integrations.linearApiKey;
-  const linearAccessToken = integrations.linearAccessToken;
-  const linearRefreshToken = integrations.linearRefreshToken;
-  const linearClientSecret = integrations.linearClientSecret;
-  const slackClientSecret = integrations.slackClientSecret;
-  const slackAppToken = integrations.slackAppToken;
-  const remoteHostSecret = integrations.remoteHostSecret;
-  const githubPat = integrations.githubPat;
-  const abletimeAccessToken = integrations.abletimeAccessToken;
-  const abletimeRefreshToken = integrations.abletimeRefreshToken;
-  const vercelToken = integrations.vercelToken;
-  const supabaseAccessToken = integrations.supabaseAccessToken;
-  const posthogPersonalApiKey = integrations.posthogPersonalApiKey;
-  const sentryAuthToken = integrations.sentryAuthToken;
-  delete integrations.linearApiKey;
-  delete integrations.linearAccessToken;
-  delete integrations.linearRefreshToken;
-  delete integrations.linearClientSecret;
-  delete integrations.slackClientSecret;
-  delete integrations.slackAppToken;
-  delete integrations.remoteHostSecret;
-  delete integrations.githubPat;
-  delete integrations.abletimeAccessToken;
-  delete integrations.abletimeRefreshToken;
-  delete integrations.vercelToken;
-  delete integrations.supabaseAccessToken;
-  delete integrations.posthogPersonalApiKey;
-  delete integrations.sentryAuthToken;
+  const vault = { environment: settings.environment };
+  for (const key of INTEGRATION_VAULT_KEYS) {
+    vault[key] = integrations[key];
+    delete integrations[key];
+  }
   writePrivateFile(
     appSettingsPath(),
     `${JSON.stringify({ ...settings, environment: {}, integrations }, null, 2)}
 `
   );
-  saveSecretVault({
-    linearApiKey,
-    linearAccessToken,
-    linearRefreshToken,
-    linearClientSecret,
-    slackClientSecret,
-    slackAppToken,
-    remoteHostSecret,
-    githubPat,
-    abletimeAccessToken,
-    abletimeRefreshToken,
-    vercelToken,
-    supabaseAccessToken,
-    posthogPersonalApiKey,
-    sentryAuthToken,
-    environment: settings.environment
-  });
+  saveSecretVault(vault);
 }
 function loadAppSettings() {
   const disk = readSettingsFile();
@@ -1555,6 +1486,20 @@ function updateIntegrationsSettings(patch) {
       integrations.remoteHostSecret = patch.remoteHostSecret.trim();
     }
   }
+  if ("remoteAccountToken" in patch) {
+    if (patch.remoteAccountToken == null || patch.remoteAccountToken.trim() === "") {
+      delete integrations.remoteAccountToken;
+    } else {
+      integrations.remoteAccountToken = patch.remoteAccountToken.trim();
+    }
+  }
+  if ("remoteAccountEmail" in patch) {
+    if (patch.remoteAccountEmail == null || patch.remoteAccountEmail.trim() === "") {
+      delete integrations.remoteAccountEmail;
+    } else {
+      integrations.remoteAccountEmail = patch.remoteAccountEmail.trim().toLowerCase();
+    }
+  }
   if ("githubGitAuthMode" in patch) {
     if (patch.githubGitAuthMode == null) {
       delete integrations.githubGitAuthMode;

package/dist/{chunk-DBFAFI5A.js → chunk-XKZAVGTT.js}

@@ -6,14 +6,14 @@ import {
   normalizeAbleTimeCredential,
   normalizeAbleTimeHost,
   rewriteAbleTimeError
-} from "./chunk-GONPMH36.js";
+} from "./chunk-IJDQKC5A.js";
 import {
   httpFetch
 } from "./chunk-VKQGAWHY.js";
 import {
   getAbleTimeAccessToken,
   getAbleTimeHost
-} from "./chunk-OIENQEGG.js";
+} from "./chunk-WRIMAEF2.js";
 
 // src/integrations/abletime-rest.ts
 var ABLETIME_REST_PREFIX = "/api/public/v2";