@sideboard-ai/core 0.1.286 → 0.1.288

package/dist/{chunk-PCNH74SF.js → chunk-6NVQNTJO.js}

@@ -9,16 +9,16 @@ import {
   looksLikeSkillBody,
   skillCommandFromBody,
   withEventParentId
-} from "./chunk-XSDCLM3F.js";
+} from "./chunk-YSLCWCMJ.js";
 import {
   isOrchestratorThread
-} from "./chunk-MGJ7R7UX.js";
+} from "./chunk-DBOFDEQ7.js";
 import {
   codexUnattendedGitConfigArgs,
   mergeAgentGitAuthEnv,
   resolveAgentGitAuthEnv,
   resolveCodexGitWritableRoots
-} from "./chunk-K5XSTHHP.js";
+} from "./chunk-HNB2HTCV.js";
 import {
   loadBrightsyConfig
 } from "./chunk-33KDPEK4.js";
@@ -38,19 +38,15 @@ import {
   packagedMcpStdioPath,
   parseCursorRunnerLine,
   resolveNodeLaunch
-} from "./chunk-VOIWX5HA.js";
+} from "./chunk-7UUILVMV.js";
 import {
   extractJsonErrorMessage,
   formatUnknownDetail,
   looksLikeAgentFailureMessage,
   looksLikeBrightsyEmptyCompletion
-} from "./chunk-U6QDXT4K.js";
+} from "./chunk-MIVX7QKI.js";
 import {
-  enrichPathWithNpmGlobalBin,
-  isConductorBundledCli,
-  resolveCommandBinarySync,
-  run,
-  withExportedPath
+  run
 } from "./chunk-QVN2WOKJ.js";
 import {
   AGENT_RPC_CLAUDE_SDK_SERVER,
@@ -71,7 +67,7 @@ import {
   loadAppSettings,
   resolveAgentExecutable,
   resolveClaudeExecutable
-} from "./chunk-YNTXWFXT.js";
+} from "./chunk-36J3IZBS.js";
 import {
   isElectronLikeCommand,
   unwrapStrippedElectronLaunch
@@ -716,7 +712,8 @@ var SIDEBOARD_ARTIFACT_MCP_ALLOWED_TOOLS = [
   "mcp__sideboard__create_schedule",
   "mcp__sideboard__update_schedule",
   "mcp__sideboard__delete_schedule",
-  "mcp__sideboard__run_schedule"
+  "mcp__sideboard__run_schedule",
+  "mcp__sideboard__posthog_api"
 ];
 var SIDEBOARD_GITHUB_MCP_ALLOWED_TOOLS = ["mcp__sideboard__github_*"];
 var SIDEBOARD_LINEAR_MCP_ALLOWED_TOOLS = ["mcp__sideboard__linear_*"];
@@ -1755,7 +1752,7 @@ var claudeAdapter = {
       );
     }
     const mode = permissionMode(thread);
-    const { isOrchestratorThread: isOrchestratorThread2 } = await import("./global-workspace-IPIEC6FM.js");
+    const { isOrchestratorThread: isOrchestratorThread2 } = await import("./global-workspace-AXTSYVAE.js");
     const isOrchestrator = isOrchestratorThread2(thread);
     const rpc = worktreeAgentRpc(isOrchestrator);
     const injectedServers = await buildInjectedMcpServers({
@@ -3647,283 +3644,6 @@ async function getClaudePlanUsage(opts = {}) {
   return inflight;
 }
 
-// src/agents/install.ts
-import { existsSync as existsSync11 } from "fs";
-var SETUP = {
-  claude: {
-    agent: "claude",
-    kind: "cli",
-    summary: "Install the Claude Code CLI, then complete login in a terminal.",
-    docsUrl: "https://code.claude.com/docs/en/install",
-    installCommand: "npm install -g @anthropic-ai/claude-code",
-    loginCommand: "claude auth login",
-    npmPackage: "@anthropic-ai/claude-code",
-    updateArgs: ["update"]
-  },
-  codex: {
-    agent: "codex",
-    kind: "cli",
-    summary: "Install the Codex CLI, then run login in a terminal.",
-    docsUrl: "https://github.com/openai/codex",
-    installCommand: "npm install -g @openai/codex",
-    loginCommand: "codex login",
-    npmPackage: "@openai/codex",
-    updateArgs: ["update"]
-  },
-  opencode: {
-    agent: "opencode",
-    kind: "cli",
-    summary: "Install OpenCode (curl installer or npm), then authenticate providers.",
-    docsUrl: "https://opencode.ai/docs",
-    // Prefer the official installer; npm package name is opencode-ai.
-    installCommand: "curl -fsSL https://opencode.ai/install | bash",
-    loginCommand: "opencode auth login",
-    npmPackage: "opencode-ai@latest",
-    updateArgs: ["upgrade"]
-  },
-  cursor: {
-    agent: "cursor",
-    kind: "cli",
-    summary: "Install (or update) @cursor/sdk with npm \u2014 Sideboard does not pin it in the app. Then add a CURSOR_API_KEY.",
-    docsUrl: "https://www.npmjs.com/package/@cursor/sdk",
-    installCommand: "npm install -g @cursor/sdk",
-    loginCommand: null,
-    npmPackage: "@cursor/sdk"
-  },
-  brightsy: {
-    agent: "brightsy",
-    kind: "cli",
-    summary: "Install (or update) the Brightsy CLI with npm, then run `brightsy login`.",
-    docsUrl: "https://www.npmjs.com/package/@brightsy/cli",
-    installCommand: "npm install -g @brightsy/cli",
-    loginCommand: "brightsy login",
-    npmPackage: "@brightsy/cli"
-  }
-};
-var CLI_BIN = {
-  claude: "claude",
-  codex: "codex",
-  opencode: "opencode",
-  brightsy: "brightsy"
-};
-function getAgentSetupInfo(agent) {
-  return SETUP[agent];
-}
-function listAgentSetupInfo() {
-  return Object.values(SETUP);
-}
-var CLI_LOGIN_AGENTS = /* @__PURE__ */ new Set([
-  "claude",
-  "codex",
-  "opencode",
-  "brightsy"
-]);
-function resolveLoginCommand(agent) {
-  const info = getAgentSetupInfo(agent);
-  if (!info.loginCommand) return null;
-  if (!CLI_LOGIN_AGENTS.has(agent)) return info.loginCommand;
-  const exe = resolveAgentExecutable(agent);
-  return info.loginCommand.replace(/^\S+/, exe);
-}
-async function prepareTerminalCommand(command) {
-  enrichPathWithNpmGlobalBin();
-  const trimmed = command.trim();
-  if (!trimmed) return trimmed;
-  if (/^(export\s+PATH=|PATH=)/.test(trimmed)) return trimmed;
-  const match = /^(\S+)(\s[\s\S]*)?$/.exec(trimmed);
-  const bin = match?.[1];
-  let whichPath = null;
-  if (bin && !bin.includes("/") && !bin.includes("\\")) {
-    const which = await run("which", [bin], { reject: false, timeoutMs: 3e3 });
-    whichPath = which.exitCode === 0 ? which.stdout.trim() : null;
-  }
-  const resolved = resolveCommandBinarySync(trimmed, whichPath);
-  return withExportedPath(resolved, process.env.PATH ?? "");
-}
-async function openInSystemTerminal(command) {
-  const trimmed = (await prepareTerminalCommand(command)).trim();
-  if (!trimmed) throw new Error("Command is empty");
-  if (process.platform === "darwin") {
-    const escaped = trimmed.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
-    const script = `tell application "Terminal" to do script "${escaped}"`;
-    const result = await run("osascript", ["-e", script], { reject: false });
-    if (result.exitCode !== 0) {
-      throw new Error(result.stderr.trim() || result.stdout.trim() || "Failed to open Terminal");
-    }
-    await run("osascript", ["-e", 'tell application "Terminal" to activate'], {
-      reject: false
-    });
-    return;
-  }
-  if (process.platform === "win32") {
-    const result = await run(
-      "cmd.exe",
-      ["/c", "start", "cmd.exe", "/k", trimmed],
-      { reject: false }
-    );
-    if (result.exitCode !== 0) {
-      throw new Error(result.stderr.trim() || result.stdout.trim() || "Failed to open cmd");
-    }
-    return;
-  }
-  const candidates = [
-    { file: "gnome-terminal", args: ["--", "bash", "-lc", `${trimmed}; exec bash`] },
-    { file: "x-terminal-emulator", args: ["-e", "bash", "-lc", `${trimmed}; exec bash`] },
-    { file: "konsole", args: ["-e", "bash", "-lc", `${trimmed}; exec bash`] },
-    { file: "xterm", args: ["-e", "bash", "-lc", `${trimmed}; exec bash`] }
-  ];
-  for (const c of candidates) {
-    const which = await run("which", [c.file], { reject: false });
-    if (which.exitCode !== 0 || !which.stdout.trim()) continue;
-    const result = await run(c.file, c.args, { reject: false });
-    if (result.exitCode === 0) return;
-  }
-  throw new Error(
-    `No terminal found to run: ${trimmed}. Install gnome-terminal (or similar), or run the command manually.`
-  );
-}
-async function whichOnPath(bin) {
-  const which = await run("which", [bin], { reject: false, timeoutMs: 3e3 });
-  if (which.exitCode !== 0) return null;
-  return which.stdout.trim().split(/\r?\n/).find(Boolean) ?? null;
-}
-async function installNpmGlobalPackage(opts) {
-  enrichPathWithNpmGlobalBin();
-  const result = await run("npm", ["install", "-g", opts.npmPackage], { reject: false });
-  const ok = result.exitCode === 0;
-  if (!ok) {
-    try {
-      await openInSystemTerminal(opts.installCommand);
-      return {
-        ok: false,
-        openedTerminal: true,
-        command: opts.installCommand,
-        exitCode: result.exitCode,
-        stdout: result.stdout,
-        stderr: result.stderr,
-        message: `npm install failed (exit ${result.exitCode}). Opened Terminal with: ${opts.installCommand}`
-      };
-    } catch {
-      return {
-        ok: false,
-        command: opts.installCommand,
-        exitCode: result.exitCode,
-        stdout: result.stdout,
-        stderr: result.stderr,
-        message: result.stderr.trim() || result.stdout.trim() || `npm install failed (exit ${result.exitCode})`
-      };
-    }
-  }
-  enrichPathWithNpmGlobalBin();
-  const binPath = opts.cliBin ? await whichOnPath(opts.cliBin) : null;
-  return {
-    ok: true,
-    command: opts.installCommand,
-    exitCode: 0,
-    stdout: result.stdout,
-    stderr: result.stderr,
-    // Library-only packages (`@cursor/sdk`) have no CLI to look for.
-    message: !opts.cliBin ? `Installed ${opts.npmPackage}` : binPath ? `Installed ${opts.npmPackage} \u2192 ${binPath}` : `Installed ${opts.npmPackage} (CLI not yet on PATH)`
-  };
-}
-async function resolveExistingCli(agent) {
-  if (agent === "cursor") return null;
-  const exe = resolveAgentExecutable(agent);
-  if ((exe.includes("/") || exe.includes("\\")) && existsSync11(exe)) return exe;
-  enrichPathWithNpmGlobalBin();
-  return whichOnPath(CLI_BIN[agent]);
-}
-async function runVendorUpdate(existing, updateArgs) {
-  const result = await run(existing, updateArgs, {
-    reject: false,
-    timeoutMs: 12e4
-  });
-  const command = `${existing} ${updateArgs.join(" ")}`;
-  const ok = result.exitCode === 0;
-  const detail = result.stdout.trim() || result.stderr.trim() || `exit ${result.exitCode}`;
-  return {
-    ok,
-    command,
-    exitCode: result.exitCode,
-    stdout: result.stdout,
-    stderr: result.stderr,
-    message: ok ? isConductorBundledCli(existing) ? `Updated Conductor\u2019s CLI at ${existing}. ${detail}` : `Updated ${command}. ${detail}` : `Update failed (${command}): ${detail}`
-  };
-}
-function isCurlInstaller(command) {
-  return /curl\s| \|\s*bash/.test(command);
-}
-async function installAgent(agent) {
-  const info = getAgentSetupInfo(agent);
-  if (info.kind === "bundled-sdk" || info.kind === "api-key") {
-    return {
-      ok: true,
-      message: info.summary
-    };
-  }
-  if (!info.installCommand) {
-    return { ok: false, message: `No install command for ${agent}` };
-  }
-  const existing = await resolveExistingCli(agent);
-  if (existing && info.updateArgs?.length) {
-    return runVendorUpdate(existing, info.updateArgs);
-  }
-  if (info.npmPackage && !isCurlInstaller(info.installCommand)) {
-    const cliBin = agent === "cursor" ? null : CLI_BIN[agent];
-    return installNpmGlobalPackage({
-      npmPackage: info.npmPackage,
-      installCommand: info.installCommand,
-      cliBin
-    });
-  }
-  await openInSystemTerminal(info.installCommand);
-  return {
-    ok: true,
-    openedTerminal: true,
-    command: info.installCommand,
-    message: `Opened Terminal to run: ${info.installCommand}`
-  };
-}
-async function loginAgent(agent) {
-  const info = getAgentSetupInfo(agent);
-  const loginCommand = resolveLoginCommand(agent);
-  if (!loginCommand) {
-    return {
-      ok: true,
-      message: info.kind === "bundled-sdk" || info.kind === "api-key" ? info.summary : `No login command for ${agent}`
-    };
-  }
-  const prepared = await prepareTerminalCommand(loginCommand);
-  await openInSystemTerminal(prepared);
-  return {
-    ok: true,
-    openedTerminal: true,
-    command: prepared,
-    message: `Opened Terminal to run: ${prepared}`
-  };
-}
-async function loginManagedAccount(accountId) {
-  const { loadAppSettings: loadAppSettings2 } = await import("./app-settings-NI4X5HW3.js");
-  const { loginEnvPrefix } = await import("./managed-accounts-2AK5RIAF.js");
-  const account = loadAppSettings2().accounts.accounts.find((a) => a.id === accountId);
-  if (!account) {
-    return { ok: false, message: `Account not found: ${accountId}` };
-  }
-  const loginCommand = resolveLoginCommand(account.kind);
-  if (!loginCommand) {
-    return { ok: false, message: `No login command for ${account.kind}` };
-  }
-  const prepared = await prepareTerminalCommand(loginCommand);
-  const prefixed = `${loginEnvPrefix(account)} && ${prepared}`;
-  await openInSystemTerminal(prefixed);
-  return {
-    ok: true,
-    openedTerminal: true,
-    command: prefixed,
-    message: `Opened Terminal to run: ${prefixed}`
-  };
-}
-
 // src/agents/index.ts
 var adapters = {
   claude: claudeAdapter,
@@ -4018,16 +3738,6 @@ export {
   formatClaudeUsageOverLimitConfirm,
   formatClaudeUsageOverLimitWait,
   getClaudePlanUsage,
-  getAgentSetupInfo,
-  listAgentSetupInfo,
-  resolveLoginCommand,
-  prepareTerminalCommand,
-  openInSystemTerminal,
-  whichOnPath,
-  installNpmGlobalPackage,
-  installAgent,
-  loginAgent,
-  loginManagedAccount,
   getAdapter,
   allAdapters
 };

package/dist/{chunk-VOIWX5HA.js → chunk-7UUILVMV.js}

@@ -1,7 +1,7 @@
 import {
   extractJsonErrorMessage,
   formatUnknownDetail
-} from "./chunk-U6QDXT4K.js";
+} from "./chunk-MIVX7QKI.js";
 import {
   npmGlobalNodeModules,
   run

package/dist/chunk-AF2DMY3K.js

@@ -0,0 +1,295 @@
+import {
+  httpFetch
+} from "./chunk-JAT3JFOS.js";
+import {
+  loadAppSettings,
+  saveAppSettings
+} from "./chunk-36J3IZBS.js";
+
+// src/integrations/optional-services.ts
+var OPTIONAL_SERVICE_IDS = ["vercel", "supabase", "posthog", "sentry"];
+var OPTIONAL_SERVICES = [
+  {
+    id: "vercel",
+    label: "Vercel",
+    hint: "Deploys and project settings. Agents use the `vercel` CLI (`VERCEL_TOKEN`).",
+    tokenPlaceholder: "token from vercel.com/account/tokens",
+    tokenDocs: "https://vercel.com/account/tokens",
+    envKey: "VERCEL_TOKEN",
+    cli: "vercel",
+    npmPackage: "vercel"
+  },
+  {
+    id: "supabase",
+    label: "Supabase",
+    hint: "Database and project management. Agents use the `supabase` CLI (`SUPABASE_ACCESS_TOKEN`).",
+    tokenPlaceholder: "sbp_\u2026",
+    tokenDocs: "https://supabase.com/dashboard/account/tokens",
+    envKey: "SUPABASE_ACCESS_TOKEN",
+    cli: "supabase",
+    npmPackage: "supabase"
+  },
+  {
+    id: "posthog",
+    label: "PostHog",
+    hint: "Product analytics. Agents call `posthog_api` on the Sideboard MCP server.",
+    tokenPlaceholder: "phx_\u2026",
+    tokenDocs: "https://app.posthog.com/settings/user-api-keys",
+    envKey: "POSTHOG_PERSONAL_API_KEY",
+    hostEnvKey: "POSTHOG_HOST",
+    defaultHost: "https://us.posthog.com",
+    hostPlaceholder: "https://us.posthog.com"
+  },
+  {
+    id: "sentry",
+    label: "Sentry",
+    hint: "Error tracking. Agents use `sentry-cli` (`SENTRY_AUTH_TOKEN`).",
+    tokenPlaceholder: "sntrys_\u2026 or auth token",
+    tokenDocs: "https://sentry.io/settings/account/api/auth-tokens/",
+    envKey: "SENTRY_AUTH_TOKEN",
+    cli: "sentry-cli",
+    npmPackage: "@sentry/cli",
+    hostEnvKey: "SENTRY_URL",
+    defaultHost: "https://sentry.io",
+    hostPlaceholder: "https://sentry.io"
+  }
+];
+function optionalServiceSpec(id) {
+  const spec = OPTIONAL_SERVICES.find((s) => s.id === id);
+  if (!spec) throw new Error(`Unknown optional service: ${id}`);
+  return spec;
+}
+function isOptionalServiceId(value) {
+  return typeof value === "string" && OPTIONAL_SERVICE_IDS.includes(value);
+}
+function normalizeServiceOrigin(raw, fallback) {
+  const trimmed = raw?.trim() || fallback;
+  try {
+    const url = new URL(trimmed.includes("://") ? trimmed : `https://${trimmed}`);
+    if (url.protocol !== "http:" && url.protocol !== "https:") return fallback;
+    return `${url.protocol}//${url.host}`;
+  } catch {
+    return fallback;
+  }
+}
+function asRecord(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function asString(value) {
+  return typeof value === "string" ? value.trim() : "";
+}
+function firstString(record, keys) {
+  if (!record) return "";
+  for (const key of keys) {
+    const value = asString(record[key]);
+    if (value) return value;
+  }
+  return "";
+}
+async function readJson(res) {
+  const text = await res.text();
+  if (!text.trim()) return null;
+  try {
+    return JSON.parse(text);
+  } catch {
+    return text;
+  }
+}
+async function authorizedGet(url, token) {
+  const res = await httpFetch(url, {
+    method: "GET",
+    headers: {
+      Authorization: `Bearer ${token}`,
+      Accept: "application/json"
+    }
+  });
+  const body = await readJson(res);
+  if (!res.ok) {
+    const record = asRecord(body);
+    const message = firstString(record, ["message", "error", "error_description", "detail"]) || (typeof body === "string" ? body.trim().slice(0, 160) : "");
+    throw new Error(
+      message ? `${res.status}: ${message}` : `Request failed (${res.status})`
+    );
+  }
+  return body;
+}
+async function verifyOptionalService(input) {
+  const token = input.token.trim();
+  if (!token) throw new Error("A token is required");
+  const spec = optionalServiceSpec(input.id);
+  try {
+    if (input.id === "vercel") {
+      const body2 = asRecord(await authorizedGet("https://api.vercel.com/v2/user", token));
+      const user = asRecord(body2?.user) ?? body2;
+      const name2 = firstString(user, ["username", "name", "email"]) || "Vercel user";
+      return { viewerName: name2 };
+    }
+    if (input.id === "supabase") {
+      const body2 = await authorizedGet("https://api.supabase.com/v1/organizations", token);
+      const list2 = Array.isArray(body2) ? body2 : [];
+      const first2 = asRecord(list2[0]);
+      const name2 = firstString(first2, ["name", "slug"]) || "Supabase";
+      return { viewerName: list2.length > 1 ? `${name2} +${list2.length - 1}` : name2 };
+    }
+    if (input.id === "posthog") {
+      const host2 = normalizeServiceOrigin(input.host, spec.defaultHost ?? "https://us.posthog.com");
+      const body2 = asRecord(await authorizedGet(`${host2}/api/users/@me/`, token));
+      const name2 = firstString(body2, ["email", "distinct_id"]) || [firstString(body2, ["first_name"]), firstString(body2, ["last_name"])].filter(Boolean).join(" ") || "PostHog user";
+      return { viewerName: name2, host: host2 };
+    }
+    const host = normalizeServiceOrigin(input.host, spec.defaultHost ?? "https://sentry.io");
+    const body = await authorizedGet(`${host}/api/0/organizations/`, token);
+    const list = Array.isArray(body) ? body : [];
+    const first = asRecord(list[0]);
+    const name = firstString(first, ["slug", "name"]) || "Sentry";
+    return { viewerName: list.length > 1 ? `${name} +${list.length - 1}` : name, host };
+  } catch (err) {
+    const detail = err instanceof Error ? err.message : String(err);
+    throw new Error(
+      `${spec.label} rejected this token. ${detail} Create a token at ${spec.tokenDocs}`
+    );
+  }
+}
+function applyConnection(integrations, id, input) {
+  if (id === "vercel") {
+    integrations.vercelToken = input.token;
+    if (input.viewerName) integrations.vercelViewerName = input.viewerName.slice(0, 120);
+    return;
+  }
+  if (id === "supabase") {
+    integrations.supabaseAccessToken = input.token;
+    if (input.viewerName) integrations.supabaseViewerName = input.viewerName.slice(0, 120);
+    return;
+  }
+  if (id === "posthog") {
+    integrations.posthogPersonalApiKey = input.token;
+    if (input.host) integrations.posthogHost = input.host;
+    if (input.viewerName) integrations.posthogViewerName = input.viewerName.slice(0, 120);
+    return;
+  }
+  integrations.sentryAuthToken = input.token;
+  if (input.host) integrations.sentryHost = input.host;
+  if (input.viewerName) integrations.sentryViewerName = input.viewerName.slice(0, 120);
+}
+function clearConnection(integrations, id) {
+  if (id === "vercel") {
+    delete integrations.vercelToken;
+    delete integrations.vercelViewerName;
+    return;
+  }
+  if (id === "supabase") {
+    delete integrations.supabaseAccessToken;
+    delete integrations.supabaseViewerName;
+    return;
+  }
+  if (id === "posthog") {
+    delete integrations.posthogPersonalApiKey;
+    delete integrations.posthogViewerName;
+    delete integrations.posthogHost;
+    return;
+  }
+  delete integrations.sentryAuthToken;
+  delete integrations.sentryViewerName;
+  delete integrations.sentryHost;
+}
+async function connectOptionalService(input) {
+  if (!isOptionalServiceId(input.id)) {
+    throw new Error("Unknown optional service");
+  }
+  const verified = await verifyOptionalService(input);
+  const current = loadAppSettings();
+  const integrations = { ...current.integrations };
+  applyConnection(integrations, input.id, {
+    token: input.token.trim(),
+    host: verified.host,
+    viewerName: verified.viewerName
+  });
+  return saveAppSettings({ ...current, integrations });
+}
+function disconnectOptionalService(id) {
+  if (!isOptionalServiceId(id)) {
+    throw new Error("Unknown optional service");
+  }
+  const current = loadAppSettings();
+  const integrations = { ...current.integrations };
+  clearConnection(integrations, id);
+  return saveAppSettings({ ...current, integrations });
+}
+function optionalServiceConnected(id, integrations) {
+  if (id === "vercel") return Boolean(integrations.vercelToken?.trim());
+  if (id === "supabase") return Boolean(integrations.supabaseAccessToken?.trim());
+  if (id === "posthog") return Boolean(integrations.posthogPersonalApiKey?.trim());
+  return Boolean(integrations.sentryAuthToken?.trim());
+}
+function connectedOptionalServices(integrations) {
+  return OPTIONAL_SERVICES.filter((spec) => optionalServiceConnected(spec.id, integrations));
+}
+function cliPresencePhrase(spec, cli) {
+  if (!spec.cli || !cli || !(spec.id in cli)) return "";
+  return cli[spec.id] ? " (installed)" : " (not installed \u2014 ask the user to press Install CLI in Settings \u2192 Connectors)";
+}
+function connectorDirectiveLine(spec, cli) {
+  const extras = spec.hostEnvKey ? ` / \`${spec.hostEnvKey}\`` : "";
+  if (spec.cli) {
+    return `- ${spec.label}: use \`${spec.cli}\` (\`${spec.envKey}\`${extras})${cliPresencePhrase(spec, cli)}. Do not add a ${spec.label} MCP.`;
+  }
+  return `- ${spec.label}: call \`posthog_api\`. Path must start with \`/api/\`. GET is the default. POST \`/api/projects/:id/query/\` or \`/api/environments/:id/query/\` is a read and does not need \`write=true\`. Other POST and PATCH require \`write=true\` only when the user asked to change data. Do not read the API key from the environment. Do not add a ${spec.label} MCP.`;
+}
+function connectorReminderBit(spec, cli) {
+  if (!spec.cli) return `${spec.label}: \`posthog_api\``;
+  const presence = cliPresencePhrase(spec, cli);
+  return `${spec.label}: \`${spec.cli}\`${presence}`;
+}
+function formatOptionalServicesDirective(integrations, cli) {
+  const connected = connectedOptionalServices(integrations);
+  if (connected.length === 0) return null;
+  const cliConnected = connected.some((spec) => spec.cli);
+  const lines = [
+    cliConnected ? "Optional connectors (connected \u2014 CLI tokens are already in this process env):" : "Optional connectors (connected):",
+    ...connected.map((spec) => connectorDirectiveLine(spec, cli)),
+    cliConnected ? "If a connector MCP is listed but needsAuth or returns unauthorized, do not sign in to that MCP. CLI tokens are already in this process. Do not read a PostHog key from the environment." : "If a connector MCP is listed but needsAuth or returns unauthorized, do not sign in to that MCP. Do not read a PostHog key from the environment.",
+    "Do not add a vendor MCP. When a binary is missing, ask the user to press Install CLI in Settings \u2192 Connectors.",
+    "When you shell a connector CLI, write bulky output to `.context/cli/` and read a slice."
+  ];
+  return lines.join("\n");
+}
+function formatOptionalServicesReminder(integrations, cli) {
+  const connected = connectedOptionalServices(integrations);
+  if (connected.length === 0) return null;
+  const bits = connected.map((spec) => connectorReminderBit(spec, cli)).join(". ");
+  const tokenBit = connected.some((spec) => spec.cli) ? "CLI tokens are already in this process. " : "";
+  return `Settings \u2192 Connectors: ${tokenBit}${bits}. If a connector MCP needsAuth or is unauthorized, ignore it and use the CLI or \`posthog_api\`. Do not add vendor MCPs. Do not read a PostHog key from the environment. Shell dumps from those CLIs go in \`.context/cli/\` \u2014 read a slice.`;
+}
+async function connectedCliPresence(integrations) {
+  const ids = connectedOptionalServices(integrations).filter((spec) => spec.cli).map((spec) => spec.id);
+  if (ids.length === 0) return void 0;
+  try {
+    const { optionalCliPresence } = await import("./optional-cli-6SW4OOX3.js");
+    return await optionalCliPresence(ids);
+  } catch {
+    return void 0;
+  }
+}
+async function formatOptionalServicesDirectiveForTurn(integrations) {
+  return formatOptionalServicesDirective(integrations, await connectedCliPresence(integrations));
+}
+async function formatOptionalServicesReminderForTurn(integrations) {
+  return formatOptionalServicesReminder(integrations, await connectedCliPresence(integrations));
+}
+
+export {
+  OPTIONAL_SERVICE_IDS,
+  OPTIONAL_SERVICES,
+  optionalServiceSpec,
+  isOptionalServiceId,
+  normalizeServiceOrigin,
+  verifyOptionalService,
+  connectOptionalService,
+  disconnectOptionalService,
+  optionalServiceConnected,
+  connectedOptionalServices,
+  formatOptionalServicesDirective,
+  formatOptionalServicesReminder,
+  formatOptionalServicesDirectiveForTurn,
+  formatOptionalServicesReminderForTurn
+};

package/dist/{chunk-5QOLFOAX.js → chunk-AFLNFGGB.js}

@@ -272,7 +272,7 @@ function humanizeAgentFailDetail(detail) {
     return "Cursor local file search failed (ripgrep / resource_exhausted). Wait a minute and retry; if it keeps happening, check Cursor usage.";
   }
   if (looksLikeCodexMcpError(raw)) {
-    return `${raw} \u2014 skip that vendor MCP and continue (PostHog: Settings \u2192 Connectors + HTTP API).`;
+    return `${raw} \u2014 skip that vendor MCP and continue (PostHog: Settings \u2192 Connectors and posthog_api).`;
   }
   if (/invalid user api key|invalid api key|not logged in|not authenticated|unauthorized|authentication|please run.*login|codex login|claude auth|cursor api/.test(
     lower