@sideboard-ai/core 0.1.286 → 0.1.288

package/dist/{chunk-YNTXWFXT.js → chunk-36J3IZBS.js}

@@ -2237,22 +2237,21 @@ function applyAppEnvironment(target = process.env, settings = loadAppSettings())
   applyOptionalServiceTokens(target, settings.integrations);
   return target;
 }
-function fillEnvGap(target, key, value) {
+function assignEnv(target, key, value) {
   const v = value?.trim();
   if (!key || !v) return;
-  if (target[key] == null || target[key] === "") target[key] = v;
+  target[key] = v;
+}
+function scrubPosthogAgentEnv(target) {
+  delete target.POSTHOG_PERSONAL_API_KEY;
+  delete target.POSTHOG_HOST;
 }
 function applyOptionalServiceTokens(target, integrations) {
-  fillEnvGap(target, "VERCEL_TOKEN", integrations.vercelToken);
-  fillEnvGap(target, "SUPABASE_ACCESS_TOKEN", integrations.supabaseAccessToken);
-  fillEnvGap(target, "POSTHOG_PERSONAL_API_KEY", integrations.posthogPersonalApiKey);
-  fillEnvGap(
-    target,
-    "POSTHOG_HOST",
-    integrations.posthogPersonalApiKey ? integrations.posthogHost || "https://us.posthog.com" : void 0
-  );
-  fillEnvGap(target, "SENTRY_AUTH_TOKEN", integrations.sentryAuthToken);
-  fillEnvGap(
+  assignEnv(target, "VERCEL_TOKEN", integrations.vercelToken);
+  assignEnv(target, "SUPABASE_ACCESS_TOKEN", integrations.supabaseAccessToken);
+  scrubPosthogAgentEnv(target);
+  assignEnv(target, "SENTRY_AUTH_TOKEN", integrations.sentryAuthToken);
+  assignEnv(
     target,
     "SENTRY_URL",
     integrations.sentryAuthToken ? integrations.sentryHost || "https://sentry.io" : void 0
@@ -2267,6 +2266,7 @@ function childEnvWithAppSettings(extra) {
       if (v != null) env[k] = v;
     }
   }
+  scrubPosthogAgentEnv(env);
   return env;
 }
 function harnessEnvKey(harness) {

package/dist/{chunk-IJMUYHPT.js → chunk-3E4NOIXN.js}

@@ -1,7 +1,7 @@
 import {
   DEFAULT_ABLETIME_HOST,
   normalizeAbleTimeHost
-} from "./chunk-DEJALWKM.js";
+} from "./chunk-NFPWLDCH.js";
 import {
   httpFetch
 } from "./chunk-JAT3JFOS.js";
@@ -10,7 +10,7 @@ import {
   getAbleTimeHost,
   loadAppSettings,
   saveAbleTimeConnection
-} from "./chunk-YNTXWFXT.js";
+} from "./chunk-36J3IZBS.js";
 
 // src/integrations/abletime-oauth.ts
 import { createHash, randomBytes } from "crypto";
@@ -280,7 +280,7 @@ async function startAbleTimeOAuth(opts) {
   persistAbleTimeTokens(data, { host });
   const token = data.access_token.trim();
   try {
-    const { getAbleTimeOrientation } = await import("./abletime-I4RODUKT.js");
+    const { getAbleTimeOrientation } = await import("./abletime-4WJUVE64.js");
     const orientation = await getAbleTimeOrientation({ token, host });
     return saveAbleTimeConnection({
       accessToken: token,

package/dist/{chunk-5MGLNVNK.js → chunk-3W5SL5EW.js}

@@ -19,7 +19,7 @@ import {
 import {
   getGithubGitAuthMode,
   getGithubPat
-} from "./chunk-WRIMAEF2.js";
+} from "./chunk-MVZO7QZ2.js";
 import {
   allocateTeamName,
   listThreads,

package/dist/{chunk-CBIUGGPI.js → chunk-442O6OXM.js}

@@ -3,6 +3,10 @@
 import {
   titleFromPrompt
 } from "./chunk-LX5R5JOR.js";
+import {
+  formatOptionalServicesDirectiveForTurn,
+  formatOptionalServicesReminderForTurn
+} from "./chunk-4BXRRHDC.js";
 import {
   extractPresentedPlan,
   isPresentPlanToolName,
@@ -23,7 +27,7 @@ import {
   parseSessionQuotaResetAt,
   planModeTurnInstruction,
   resolveQuotaFallbackAgent
-} from "./chunk-3H5U4QLD.js";
+} from "./chunk-2N77CLRQ.js";
 import {
   REVIEW_TAB_TITLE,
   applyWorktreePkgCacheEnv,
@@ -62,7 +66,7 @@ import {
   worktreeDevProcessKey,
   worktreeRunProcessKey,
   worktreeSetupProcessKey
-} from "./chunk-ETZPTOK7.js";
+} from "./chunk-4NM72HJZ.js";
 import {
   applyAgentEvent,
   clipAgentEventForPaint,
@@ -89,7 +93,7 @@ import {
   summarizeTurnStderr,
   toolDescription,
   turnFailChatText
-} from "./chunk-5QOLFOAX.js";
+} from "./chunk-AFLNFGGB.js";
 import {
   SLACK_REPLY_FORMATTING,
   addWorkspace,
@@ -114,7 +118,7 @@ import {
   stageAbsolutePathsAsAttachments,
   stageBuffersAsAttachments,
   syncWorkspacesFromThreads
-} from "./chunk-ULSY2BJF.js";
+} from "./chunk-IA4MPG7F.js";
 import {
   addPrStackLayer,
   allocateTeamSlug,
@@ -156,7 +160,7 @@ import {
   resolveRepoRoot,
   switchWorktreeBranch,
   withRepoGitLock
-} from "./chunk-5MGLNVNK.js";
+} from "./chunk-3W5SL5EW.js";
 import {
   clearStaleIndexLocks,
   enrichPathWithNpmGlobalBin,
@@ -197,7 +201,7 @@ import {
   usageOnLimit,
   withTurnScopedCost,
   writeViewerContext
-} from "./chunk-WRIMAEF2.js";
+} from "./chunk-MVZO7QZ2.js";
 import {
   writePrivateFile
 } from "./chunk-NSTQ6QKD.js";
@@ -499,9 +503,9 @@ async function spawnAgentTurn(thread, input, onEvent) {
       `Cannot spawn ${thread.agent}: thread ${thread.id} has no worktreePath`
     );
   }
-  const { isGlobalThread: isGlobalThread2 } = await import("./global-workspace-NXMYLS34.js");
+  const { isGlobalThread: isGlobalThread2 } = await import("./global-workspace-GDHZSFP6.js");
   if (isGlobalThread2(thread)) {
-    const { ensureGlobalCoordinatorCwd: ensureGlobalCoordinatorCwd2 } = await import("./coordinator-prompt-5DE3XBNT.js");
+    const { ensureGlobalCoordinatorCwd: ensureGlobalCoordinatorCwd2 } = await import("./coordinator-prompt-UV6THLMD.js");
     ensureGlobalCoordinatorCwd2(
       isOrchestratorThread(thread) ? { orchestratorThreadId: thread.id } : void 0
     );
@@ -2449,7 +2453,7 @@ async function createThread(input, _onSetupLine) {
   });
   await requireAgent(resolved.agent);
   if (input.cowboy) {
-    const { cowboyModeEnabled } = await import("./app-settings-EQQZQNYD.js");
+    const { cowboyModeEnabled } = await import("./app-settings-EHMXHNG5.js");
     if (!cowboyModeEnabled()) {
       throw new Error(
         "Cowboy mode is off. Enable it in Settings \u2192 Advanced."
@@ -2508,7 +2512,7 @@ async function createThread(input, _onSetupLine) {
   let sourceIsFork = false;
   if (!input.cowboy && sourceType === "branch" && (!sourceRef || sourceRef === "HEAD" || sourceRef === "default")) {
     if (isAbleTimeConnected() && getIssueSource() === "abletime") {
-      const { ensureAbleTimeTask, issueAttachmentForAbleTimeTask } = await import("./abletime-4CH2IOX5.js");
+      const { ensureAbleTimeTask, issueAttachmentForAbleTimeTask } = await import("./abletime-VFKYNSJT.js");
       const task = await ensureAbleTimeTask({
         title: title?.trim() || "Untitled work",
         description: input.prompt?.trim() || void 0
@@ -3115,7 +3119,7 @@ async function adoptThread(input) {
     messages: input.messages ?? []
   });
   writeThread(thread);
-  const { addWorkspace: addWorkspace2 } = await import("./workspaces-5C5ESWPU.js");
+  const { addWorkspace: addWorkspace2 } = await import("./workspaces-Q2R2XGO3.js");
   await addWorkspace2(repoPath);
   const { ensureWorktreeSideboardIgnored } = await import("./worktree-exclude-5N2KTYIT.js");
   await ensureWorktreeSideboardIgnored(input.worktreePath);
@@ -5274,112 +5278,6 @@ function formatUiReminder() {
   return "Sideboard UI: markdown table is enough to read data; present_schema if they ask to edit/filter (even after markdown); present_files for the file manager. html fence or present_artifact, not both for the same document. type=log appends (same artifact_id, new lines only). ask_user only for a real multiple-choice (not hellos, \u201Cwhat next?\u201D, or after a review) \u2014 reply in chat. ask_user wakes the parent orchestrator; notify_orchestrator if blocked without a picker. Do not say artifacts/CMS UI are unavailable. Dev / preview: run_dev_script (same as the Dev button; pass name \u2014 several scripts can run at once) returns {url, port, preview} (SIDEBOARD_PORT \u2014 never guess :3000). preview=url \u2192 open url; preview=window \u2192 Electron window is the app, url is renderer/HMR only. list_run_scripts active[].url if already running; get_run_log for that script\u2019s Run-tab terminal; stop_dev_script to stop one.";
 }
 
-// src/integrations/optional-services.ts
-var OPTIONAL_SERVICES = [
-  {
-    id: "vercel",
-    label: "Vercel",
-    hint: "Deploys and project settings. Agents use the `vercel` CLI (`VERCEL_TOKEN`).",
-    tokenPlaceholder: "token from vercel.com/account/tokens",
-    tokenDocs: "https://vercel.com/account/tokens",
-    envKey: "VERCEL_TOKEN",
-    cli: "vercel",
-    npmPackage: "vercel"
-  },
-  {
-    id: "supabase",
-    label: "Supabase",
-    hint: "Database and project management. Agents use the `supabase` CLI (`SUPABASE_ACCESS_TOKEN`).",
-    tokenPlaceholder: "sbp_\u2026",
-    tokenDocs: "https://supabase.com/dashboard/account/tokens",
-    envKey: "SUPABASE_ACCESS_TOKEN",
-    cli: "supabase",
-    npmPackage: "supabase"
-  },
-  {
-    id: "posthog",
-    label: "PostHog",
-    hint: "Product analytics. No first-class CLI \u2014 agents use the HTTP API (`POSTHOG_PERSONAL_API_KEY`).",
-    tokenPlaceholder: "phx_\u2026",
-    tokenDocs: "https://app.posthog.com/settings/user-api-keys",
-    envKey: "POSTHOG_PERSONAL_API_KEY",
-    hostEnvKey: "POSTHOG_HOST",
-    defaultHost: "https://us.posthog.com",
-    hostPlaceholder: "https://us.posthog.com"
-  },
-  {
-    id: "sentry",
-    label: "Sentry",
-    hint: "Error tracking. Agents use `sentry-cli` (`SENTRY_AUTH_TOKEN`).",
-    tokenPlaceholder: "sntrys_\u2026 or auth token",
-    tokenDocs: "https://sentry.io/settings/account/api/auth-tokens/",
-    envKey: "SENTRY_AUTH_TOKEN",
-    cli: "sentry-cli",
-    npmPackage: "@sentry/cli",
-    hostEnvKey: "SENTRY_URL",
-    defaultHost: "https://sentry.io",
-    hostPlaceholder: "https://sentry.io"
-  }
-];
-function optionalServiceConnected(id, integrations) {
-  if (id === "vercel") return Boolean(integrations.vercelToken?.trim());
-  if (id === "supabase") return Boolean(integrations.supabaseAccessToken?.trim());
-  if (id === "posthog") return Boolean(integrations.posthogPersonalApiKey?.trim());
-  return Boolean(integrations.sentryAuthToken?.trim());
-}
-function connectedOptionalServices(integrations) {
-  return OPTIONAL_SERVICES.filter((spec) => optionalServiceConnected(spec.id, integrations));
-}
-function formatOptionalServicesDirective(integrations) {
-  const connected = connectedOptionalServices(integrations);
-  if (connected.length === 0) return null;
-  const lines = [
-    "Optional connectors (connected \u2014 tokens are already in this process env):"
-  ];
-  for (const spec of connected) {
-    if (spec.cli) {
-      const extras = spec.hostEnvKey ? ` / \`${spec.hostEnvKey}\`` : "";
-      lines.push(
-        `- ${spec.label}: use the \`${spec.cli}\` CLI (\`${spec.envKey}\`${extras}). Do not add a ${spec.label} MCP.`
-      );
-    } else {
-      const extras = spec.hostEnvKey ? ` / \`${spec.hostEnvKey}\`` : "";
-      lines.push(
-        `- ${spec.label}: no first-class CLI \u2014 call the HTTP API with \`${spec.envKey}\`${extras}. Do not add a ${spec.label} MCP.`
-      );
-    }
-  }
-  lines.push(
-    "If a connector MCP is listed but needsAuth or returns unauthorized, do not sign in to that MCP. Check the native CLI (or the HTTP API when there is no CLI) \u2014 the token is already in this process."
-  );
-  lines.push(
-    "If a CLI is missing, say so or use the HTTP API with the same token. The user can Install CLI from Settings \u2192 Connectors. Do not ask the user to install a vendor MCP."
-  );
-  lines.push(
-    "Safe CLI / HTTP (every connector \u2014 `vercel logs`, Supabase inspect, `sentry-cli`, PostHog API):"
-  );
-  lines.push(
-    '- Never put raw `--json` / `--expand` / huge dumps in the tool result. That crashes any worktree agent mid-turn (Claude / Cursor / Codex / OpenCode). Cursor chat fills with `file://\u2026/cursor-runtime/\u2026/@cursor/sdk/dist/esm/index.js` then minified `importas e from"@bufbuild/protobuf"`.'
-  );
-  lines.push(
-    "- Write output to `.context/cli/` (worktree scratch; not `.context/attachments/`). Then read a slice. Tight window first (`--limit`, recent `--since` / last N events); raise only if empty."
-  );
-  lines.push(
-    "- Filter (`jq`) to the fields you need (timestamp, path, status, message) \u2014 not the full request object."
-  );
-  lines.push(
-    "- One query at a time. After you have the error line, stop fetching. Piping to `head` does not help \u2014 the CLI still buffers until you kill it."
-  );
-  lines.push(
-    "- If a call is still running at ~40s with no useful output, stop waiting on the raw shell; detach (`/long-running`) or `stop_job` if it is hanging / doing the wrong thing."
-  );
-  return lines.join("\n");
-}
-function formatOptionalServicesReminder(integrations) {
-  if (connectedOptionalServices(integrations).length === 0) return null;
-  return "Settings \u2192 Connectors: official CLIs / PostHog HTTP with injected env. If a connector MCP needsAuth or is unauthorized, check the native CLI or HTTP API instead of signing in. Write output to `.context/cli/` (not `.context/attachments/`) and read a slice \u2014 never dump raw --json/--expand into the tool result (any agent). stop_job if a fetch hangs. Do not add vendor MCPs.";
-}
-
 // src/mcp/viewer-context-tools.ts
 import { z as z3 } from "zod";
 
@@ -6095,7 +5993,7 @@ function formatScheduledPrompt(name, prompt) {
 ${prompt}`;
 }
 async function defaultDeps() {
-  const { getOrchestrator: getOrchestrator2, startOrchestration: startOrchestration2 } = await import("./orchestrator-YEZV35G7.js");
+  const { getOrchestrator: getOrchestrator2, startOrchestration: startOrchestration2 } = await import("./orchestrator-5ZBHR6BJ.js");
   const orch = getOrchestrator2();
   return {
     findThread: (id) => findThreadByRef(id),
@@ -6413,7 +6311,7 @@ var Orchestrator = class {
           orphans: orphans.map((o) => ({ path: o.path, repoPath: o.repoPath }))
         });
       }
-      const { autoCleanupOrphansEnabled } = await import("./app-settings-EQQZQNYD.js");
+      const { autoCleanupOrphansEnabled } = await import("./app-settings-EHMXHNG5.js");
       if (autoCleanupOrphansEnabled() && shouldRunWorktreeCleanup() && orphans.length > 0) {
         await cleanupOrphanWorktrees({ repoPaths });
       }
@@ -6807,7 +6705,7 @@ var Orchestrator = class {
     }
     await setup;
     if (skipSetup) return;
-    const { autoRunAfterSetupEnabled } = await import("./app-settings-EQQZQNYD.js");
+    const { autoRunAfterSetupEnabled } = await import("./app-settings-EHMXHNG5.js");
     if (autoRunAfterSetupEnabled()) {
       try {
         await this.startDev(threadId);
@@ -7146,7 +7044,7 @@ var Orchestrator = class {
       const artifactReminder = thread.agent !== "brightsy" ? formatUiReminder() : null;
       const longRunningReminder = thread.agent !== "brightsy" && !isOrchestratorThread(thread) ? formatLongRunningReminder({ activeRuns: worktreeActiveRuns }) : null;
       const worktreeReminder = thread.agent !== "brightsy" && !isOrchestratorThread(thread) ? formatWorktreeReminder() : null;
-      const optionalServicesReminder = thread.agent !== "brightsy" && !isOrchestratorThread(thread) ? formatOptionalServicesReminder(loadAppSettings().integrations) : null;
+      const optionalServicesReminder = thread.agent !== "brightsy" && !isOrchestratorThread(thread) ? await formatOptionalServicesReminderForTurn(loadAppSettings().integrations) : null;
       const issueTicket = issueTicketFromThread(thread, resolveEffectiveIssueSource());
       const issueToolsReminder = thread.agent !== "brightsy" && !isOrchestratorThread(thread) ? formatIssueToolsReminder({
         linear: isLinearConnected(),
@@ -7198,7 +7096,7 @@ ${formatEnvReminder(projectNameForRepoPath(thread.repoPath || thread.worktreePat
       }
       const isBrightsy = fresh.agent === "brightsy";
       const isOrchestration = isOrchestratorThread(fresh);
-      const { autoRenameBranchEnabled, getGithubGitAuthMode, gitBranchPrefixSetting } = await import("./app-settings-EQQZQNYD.js");
+      const { autoRenameBranchEnabled, getGithubGitAuthMode, gitBranchPrefixSetting } = await import("./app-settings-EHMXHNG5.js");
       const gitAuthMode = getGithubGitAuthMode();
       const worktreeDirective = isBrightsy || isOrchestration ? null : formatWorktreeDirective(fresh, {
         githubSlug: await withTimeout(
@@ -7217,7 +7115,7 @@ ${formatEnvReminder(projectNameForRepoPath(thread.repoPath || thread.worktreePat
       });
       const artifactDirective = isBrightsy ? null : formatArtifactDirective();
       const longRunningDirective = isBrightsy || isOrchestration ? null : formatLongRunningDirective();
-      const optionalServicesDirective = isBrightsy || isOrchestration ? null : formatOptionalServicesDirective(loadAppSettings().integrations);
+      const optionalServicesDirective = isBrightsy || isOrchestration ? null : await formatOptionalServicesDirectiveForTurn(loadAppSettings().integrations);
       const freshIssueTicket = issueTicketFromThread(fresh, resolveEffectiveIssueSource());
       const issueToolsDirective = isBrightsy || isOrchestration ? null : formatIssueToolsDirective({
         linear: isLinearConnected(),
@@ -7394,7 +7292,7 @@ ${formatEnvReminder(projectNameForRepoPath(thread.repoPath || thread.worktreePat
           }
         } catch {
         }
-        const retryNote = isolateCodexPluginRetry ? "Codex plugin/MCP failed \u2014 continuing without that vendor plugin (Settings \u2192 Connectors + HTTP API)" : looksLikeInvalidAgentSession(detail) ? "Agent session missing \u2014 starting a fresh session" : looksLikeV8Oom(detail) ? "Agent ran out of memory \u2014 starting a fresh session" : "Agent runner crashed \u2014 restarting Node once";
+        const retryNote = isolateCodexPluginRetry ? "Codex plugin/MCP failed \u2014 continuing without that vendor plugin (PostHog: Settings \u2192 Connectors and posthog_api)" : looksLikeInvalidAgentSession(detail) ? "Agent session missing \u2014 starting a fresh session" : looksLikeV8Oom(detail) ? "Agent ran out of memory \u2014 starting a fresh session" : "Agent runner crashed \u2014 restarting Node once";
         pushTurnStderr(stderrTail, retryNote);
         this.emit({
           type: "turn_output",
@@ -8514,7 +8412,7 @@ ${formatEnvReminder(projectNameForRepoPath(thread.repoPath || thread.worktreePat
       if (Object.keys(patch).length === 0) continue;
       updateThread(t.id, patch);
     }
-    const { autoArchiveOnMergeEnabled } = await import("./app-settings-EQQZQNYD.js");
+    const { autoArchiveOnMergeEnabled } = await import("./app-settings-EHMXHNG5.js");
     const latest = this.requireThread(thread.id);
     if (!shouldAutoArchiveOnPrMerge({
       previousPrState: prevState || null,
@@ -8831,7 +8729,7 @@ ${formatEnvReminder(projectNameForRepoPath(thread.repoPath || thread.worktreePat
           await runArchiveScript(thread.repoPath, thread.worktreePath);
         } catch {
         }
-        const { deleteBranchOnPurgeEnabled } = await import("./app-settings-EQQZQNYD.js");
+        const { deleteBranchOnPurgeEnabled } = await import("./app-settings-EHMXHNG5.js");
         const deleteBranch = opts?.deleteBranch ?? deleteBranchOnPurgeEnabled();
         await removeWorktree(thread.repoPath, thread.worktreePath, {
           deleteBranch: deleteBranch ? thread.branchName : void 0
@@ -8967,7 +8865,7 @@ async function startOrchestration(opts) {
     sourceRef: "default",
     ...createOpts
   }).catch(async () => {
-    const { resolveDefaultBranch: resolveDefaultBranch2, resolveRepoRoot: resolveRepoRoot2 } = await import("./worktree-NKLNVNXX.js");
+    const { resolveDefaultBranch: resolveDefaultBranch2, resolveRepoRoot: resolveRepoRoot2 } = await import("./worktree-2GOK4VYT.js");
     const repo = await resolveRepoRoot2(repoPath);
     const def = await resolveDefaultBranch2(repo);
     return orch.createThread({

package/dist/chunk-4BXRRHDC.js

@@ -0,0 +1,139 @@
+#!/usr/bin/env node
+
+
+// src/integrations/optional-services.ts
+var OPTIONAL_SERVICE_IDS = ["vercel", "supabase", "posthog", "sentry"];
+var OPTIONAL_SERVICES = [
+  {
+    id: "vercel",
+    label: "Vercel",
+    hint: "Deploys and project settings. Agents use the `vercel` CLI (`VERCEL_TOKEN`).",
+    tokenPlaceholder: "token from vercel.com/account/tokens",
+    tokenDocs: "https://vercel.com/account/tokens",
+    envKey: "VERCEL_TOKEN",
+    cli: "vercel",
+    npmPackage: "vercel"
+  },
+  {
+    id: "supabase",
+    label: "Supabase",
+    hint: "Database and project management. Agents use the `supabase` CLI (`SUPABASE_ACCESS_TOKEN`).",
+    tokenPlaceholder: "sbp_\u2026",
+    tokenDocs: "https://supabase.com/dashboard/account/tokens",
+    envKey: "SUPABASE_ACCESS_TOKEN",
+    cli: "supabase",
+    npmPackage: "supabase"
+  },
+  {
+    id: "posthog",
+    label: "PostHog",
+    hint: "Product analytics. Agents call `posthog_api` on the Sideboard MCP server.",
+    tokenPlaceholder: "phx_\u2026",
+    tokenDocs: "https://app.posthog.com/settings/user-api-keys",
+    envKey: "POSTHOG_PERSONAL_API_KEY",
+    hostEnvKey: "POSTHOG_HOST",
+    defaultHost: "https://us.posthog.com",
+    hostPlaceholder: "https://us.posthog.com"
+  },
+  {
+    id: "sentry",
+    label: "Sentry",
+    hint: "Error tracking. Agents use `sentry-cli` (`SENTRY_AUTH_TOKEN`).",
+    tokenPlaceholder: "sntrys_\u2026 or auth token",
+    tokenDocs: "https://sentry.io/settings/account/api/auth-tokens/",
+    envKey: "SENTRY_AUTH_TOKEN",
+    cli: "sentry-cli",
+    npmPackage: "@sentry/cli",
+    hostEnvKey: "SENTRY_URL",
+    defaultHost: "https://sentry.io",
+    hostPlaceholder: "https://sentry.io"
+  }
+];
+function optionalServiceSpec(id) {
+  const spec = OPTIONAL_SERVICES.find((s) => s.id === id);
+  if (!spec) throw new Error(`Unknown optional service: ${id}`);
+  return spec;
+}
+function isOptionalServiceId(value) {
+  return typeof value === "string" && OPTIONAL_SERVICE_IDS.includes(value);
+}
+function normalizeServiceOrigin(raw, fallback) {
+  const trimmed = raw?.trim() || fallback;
+  try {
+    const url = new URL(trimmed.includes("://") ? trimmed : `https://${trimmed}`);
+    if (url.protocol !== "http:" && url.protocol !== "https:") return fallback;
+    return `${url.protocol}//${url.host}`;
+  } catch {
+    return fallback;
+  }
+}
+function optionalServiceConnected(id, integrations) {
+  if (id === "vercel") return Boolean(integrations.vercelToken?.trim());
+  if (id === "supabase") return Boolean(integrations.supabaseAccessToken?.trim());
+  if (id === "posthog") return Boolean(integrations.posthogPersonalApiKey?.trim());
+  return Boolean(integrations.sentryAuthToken?.trim());
+}
+function connectedOptionalServices(integrations) {
+  return OPTIONAL_SERVICES.filter((spec) => optionalServiceConnected(spec.id, integrations));
+}
+function cliPresencePhrase(spec, cli) {
+  if (!spec.cli || !cli || !(spec.id in cli)) return "";
+  return cli[spec.id] ? " (installed)" : " (not installed \u2014 ask the user to press Install CLI in Settings \u2192 Connectors)";
+}
+function connectorDirectiveLine(spec, cli) {
+  const extras = spec.hostEnvKey ? ` / \`${spec.hostEnvKey}\`` : "";
+  if (spec.cli) {
+    return `- ${spec.label}: use \`${spec.cli}\` (\`${spec.envKey}\`${extras})${cliPresencePhrase(spec, cli)}. Do not add a ${spec.label} MCP.`;
+  }
+  return `- ${spec.label}: call \`posthog_api\`. Path must start with \`/api/\`. GET is the default. POST \`/api/projects/:id/query/\` or \`/api/environments/:id/query/\` is a read and does not need \`write=true\`. Other POST and PATCH require \`write=true\` only when the user asked to change data. Do not read the API key from the environment. Do not add a ${spec.label} MCP.`;
+}
+function connectorReminderBit(spec, cli) {
+  if (!spec.cli) return `${spec.label}: \`posthog_api\``;
+  const presence = cliPresencePhrase(spec, cli);
+  return `${spec.label}: \`${spec.cli}\`${presence}`;
+}
+function formatOptionalServicesDirective(integrations, cli) {
+  const connected = connectedOptionalServices(integrations);
+  if (connected.length === 0) return null;
+  const cliConnected = connected.some((spec) => spec.cli);
+  const lines = [
+    cliConnected ? "Optional connectors (connected \u2014 CLI tokens are already in this process env):" : "Optional connectors (connected):",
+    ...connected.map((spec) => connectorDirectiveLine(spec, cli)),
+    cliConnected ? "If a connector MCP is listed but needsAuth or returns unauthorized, do not sign in to that MCP. CLI tokens are already in this process. Do not read a PostHog key from the environment." : "If a connector MCP is listed but needsAuth or returns unauthorized, do not sign in to that MCP. Do not read a PostHog key from the environment.",
+    "Do not add a vendor MCP. When a binary is missing, ask the user to press Install CLI in Settings \u2192 Connectors.",
+    "When you shell a connector CLI, write bulky output to `.context/cli/` and read a slice."
+  ];
+  return lines.join("\n");
+}
+function formatOptionalServicesReminder(integrations, cli) {
+  const connected = connectedOptionalServices(integrations);
+  if (connected.length === 0) return null;
+  const bits = connected.map((spec) => connectorReminderBit(spec, cli)).join(". ");
+  const tokenBit = connected.some((spec) => spec.cli) ? "CLI tokens are already in this process. " : "";
+  return `Settings \u2192 Connectors: ${tokenBit}${bits}. If a connector MCP needsAuth or is unauthorized, ignore it and use the CLI or \`posthog_api\`. Do not add vendor MCPs. Do not read a PostHog key from the environment. Shell dumps from those CLIs go in \`.context/cli/\` \u2014 read a slice.`;
+}
+async function connectedCliPresence(integrations) {
+  const ids = connectedOptionalServices(integrations).filter((spec) => spec.cli).map((spec) => spec.id);
+  if (ids.length === 0) return void 0;
+  try {
+    const { optionalCliPresence } = await import("./optional-cli-FRUZSZ3U.js");
+    return await optionalCliPresence(ids);
+  } catch {
+    return void 0;
+  }
+}
+async function formatOptionalServicesDirectiveForTurn(integrations) {
+  return formatOptionalServicesDirective(integrations, await connectedCliPresence(integrations));
+}
+async function formatOptionalServicesReminderForTurn(integrations) {
+  return formatOptionalServicesReminder(integrations, await connectedCliPresence(integrations));
+}
+
+export {
+  OPTIONAL_SERVICES,
+  optionalServiceSpec,
+  isOptionalServiceId,
+  normalizeServiceOrigin,
+  formatOptionalServicesDirectiveForTurn,
+  formatOptionalServicesReminderForTurn
+};

package/dist/{chunk-ETZPTOK7.js → chunk-4NM72HJZ.js}

@@ -5,17 +5,17 @@ import {
   compactSummaryPart,
   isInternalAgentStatusText,
   lastAssistantMessageText
-} from "./chunk-5QOLFOAX.js";
+} from "./chunk-AFLNFGGB.js";
 import {
   isCloudCoordinatorThread,
   isGlobalThread,
   isOrchestratorThread,
   isSlackCoordinatorThread
-} from "./chunk-ULSY2BJF.js";
+} from "./chunk-IA4MPG7F.js";
 import {
   mergeAgentGitAuthEnv,
   resolveAgentGitAuthEnv
-} from "./chunk-5MGLNVNK.js";
+} from "./chunk-3W5SL5EW.js";
 import {
   ATTACHMENTS_DIR,
   DETACHED_JOBS_DIR,
@@ -32,7 +32,7 @@ import {
 import {
   assertOrchestratorCapableAgent,
   contextTokens
-} from "./chunk-WRIMAEF2.js";
+} from "./chunk-MVZO7QZ2.js";
 import {
   stripNestedElectronEnv
 } from "./chunk-WWUABK6B.js";
@@ -1674,7 +1674,7 @@ var PORT_RANGE_SIZE = 10;
 var RECLAIM_RETRY_DELAY_MS = 40;
 var RECLAIM_TRIES = 8;
 async function killReclaimable(ports, worktreePath, signal) {
-  const { killListenersOnPorts: killListenersOnPorts2, killStaleWorktreeListeners: killStaleWorktreeListeners2 } = await import("./conductor-RBJYEF7L.js");
+  const { killListenersOnPorts: killListenersOnPorts2, killStaleWorktreeListeners: killStaleWorktreeListeners2 } = await import("./conductor-MCU63Z5U.js");
   if (worktreePath) killStaleWorktreeListeners2(ports, worktreePath, signal);
   else killListenersOnPorts2(ports);
 }