@sideboard-ai/core 0.1.287 → 0.1.289

package/dist/chunk-AF2DMY3K.js

@@ -0,0 +1,295 @@
+import {
+  httpFetch
+} from "./chunk-JAT3JFOS.js";
+import {
+  loadAppSettings,
+  saveAppSettings
+} from "./chunk-36J3IZBS.js";
+
+// src/integrations/optional-services.ts
+var OPTIONAL_SERVICE_IDS = ["vercel", "supabase", "posthog", "sentry"];
+var OPTIONAL_SERVICES = [
+  {
+    id: "vercel",
+    label: "Vercel",
+    hint: "Deploys and project settings. Agents use the `vercel` CLI (`VERCEL_TOKEN`).",
+    tokenPlaceholder: "token from vercel.com/account/tokens",
+    tokenDocs: "https://vercel.com/account/tokens",
+    envKey: "VERCEL_TOKEN",
+    cli: "vercel",
+    npmPackage: "vercel"
+  },
+  {
+    id: "supabase",
+    label: "Supabase",
+    hint: "Database and project management. Agents use the `supabase` CLI (`SUPABASE_ACCESS_TOKEN`).",
+    tokenPlaceholder: "sbp_\u2026",
+    tokenDocs: "https://supabase.com/dashboard/account/tokens",
+    envKey: "SUPABASE_ACCESS_TOKEN",
+    cli: "supabase",
+    npmPackage: "supabase"
+  },
+  {
+    id: "posthog",
+    label: "PostHog",
+    hint: "Product analytics. Agents call `posthog_api` on the Sideboard MCP server.",
+    tokenPlaceholder: "phx_\u2026",
+    tokenDocs: "https://app.posthog.com/settings/user-api-keys",
+    envKey: "POSTHOG_PERSONAL_API_KEY",
+    hostEnvKey: "POSTHOG_HOST",
+    defaultHost: "https://us.posthog.com",
+    hostPlaceholder: "https://us.posthog.com"
+  },
+  {
+    id: "sentry",
+    label: "Sentry",
+    hint: "Error tracking. Agents use `sentry-cli` (`SENTRY_AUTH_TOKEN`).",
+    tokenPlaceholder: "sntrys_\u2026 or auth token",
+    tokenDocs: "https://sentry.io/settings/account/api/auth-tokens/",
+    envKey: "SENTRY_AUTH_TOKEN",
+    cli: "sentry-cli",
+    npmPackage: "@sentry/cli",
+    hostEnvKey: "SENTRY_URL",
+    defaultHost: "https://sentry.io",
+    hostPlaceholder: "https://sentry.io"
+  }
+];
+function optionalServiceSpec(id) {
+  const spec = OPTIONAL_SERVICES.find((s) => s.id === id);
+  if (!spec) throw new Error(`Unknown optional service: ${id}`);
+  return spec;
+}
+function isOptionalServiceId(value) {
+  return typeof value === "string" && OPTIONAL_SERVICE_IDS.includes(value);
+}
+function normalizeServiceOrigin(raw, fallback) {
+  const trimmed = raw?.trim() || fallback;
+  try {
+    const url = new URL(trimmed.includes("://") ? trimmed : `https://${trimmed}`);
+    if (url.protocol !== "http:" && url.protocol !== "https:") return fallback;
+    return `${url.protocol}//${url.host}`;
+  } catch {
+    return fallback;
+  }
+}
+function asRecord(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function asString(value) {
+  return typeof value === "string" ? value.trim() : "";
+}
+function firstString(record, keys) {
+  if (!record) return "";
+  for (const key of keys) {
+    const value = asString(record[key]);
+    if (value) return value;
+  }
+  return "";
+}
+async function readJson(res) {
+  const text = await res.text();
+  if (!text.trim()) return null;
+  try {
+    return JSON.parse(text);
+  } catch {
+    return text;
+  }
+}
+async function authorizedGet(url, token) {
+  const res = await httpFetch(url, {
+    method: "GET",
+    headers: {
+      Authorization: `Bearer ${token}`,
+      Accept: "application/json"
+    }
+  });
+  const body = await readJson(res);
+  if (!res.ok) {
+    const record = asRecord(body);
+    const message = firstString(record, ["message", "error", "error_description", "detail"]) || (typeof body === "string" ? body.trim().slice(0, 160) : "");
+    throw new Error(
+      message ? `${res.status}: ${message}` : `Request failed (${res.status})`
+    );
+  }
+  return body;
+}
+async function verifyOptionalService(input) {
+  const token = input.token.trim();
+  if (!token) throw new Error("A token is required");
+  const spec = optionalServiceSpec(input.id);
+  try {
+    if (input.id === "vercel") {
+      const body2 = asRecord(await authorizedGet("https://api.vercel.com/v2/user", token));
+      const user = asRecord(body2?.user) ?? body2;
+      const name2 = firstString(user, ["username", "name", "email"]) || "Vercel user";
+      return { viewerName: name2 };
+    }
+    if (input.id === "supabase") {
+      const body2 = await authorizedGet("https://api.supabase.com/v1/organizations", token);
+      const list2 = Array.isArray(body2) ? body2 : [];
+      const first2 = asRecord(list2[0]);
+      const name2 = firstString(first2, ["name", "slug"]) || "Supabase";
+      return { viewerName: list2.length > 1 ? `${name2} +${list2.length - 1}` : name2 };
+    }
+    if (input.id === "posthog") {
+      const host2 = normalizeServiceOrigin(input.host, spec.defaultHost ?? "https://us.posthog.com");
+      const body2 = asRecord(await authorizedGet(`${host2}/api/users/@me/`, token));
+      const name2 = firstString(body2, ["email", "distinct_id"]) || [firstString(body2, ["first_name"]), firstString(body2, ["last_name"])].filter(Boolean).join(" ") || "PostHog user";
+      return { viewerName: name2, host: host2 };
+    }
+    const host = normalizeServiceOrigin(input.host, spec.defaultHost ?? "https://sentry.io");
+    const body = await authorizedGet(`${host}/api/0/organizations/`, token);
+    const list = Array.isArray(body) ? body : [];
+    const first = asRecord(list[0]);
+    const name = firstString(first, ["slug", "name"]) || "Sentry";
+    return { viewerName: list.length > 1 ? `${name} +${list.length - 1}` : name, host };
+  } catch (err) {
+    const detail = err instanceof Error ? err.message : String(err);
+    throw new Error(
+      `${spec.label} rejected this token. ${detail} Create a token at ${spec.tokenDocs}`
+    );
+  }
+}
+function applyConnection(integrations, id, input) {
+  if (id === "vercel") {
+    integrations.vercelToken = input.token;
+    if (input.viewerName) integrations.vercelViewerName = input.viewerName.slice(0, 120);
+    return;
+  }
+  if (id === "supabase") {
+    integrations.supabaseAccessToken = input.token;
+    if (input.viewerName) integrations.supabaseViewerName = input.viewerName.slice(0, 120);
+    return;
+  }
+  if (id === "posthog") {
+    integrations.posthogPersonalApiKey = input.token;
+    if (input.host) integrations.posthogHost = input.host;
+    if (input.viewerName) integrations.posthogViewerName = input.viewerName.slice(0, 120);
+    return;
+  }
+  integrations.sentryAuthToken = input.token;
+  if (input.host) integrations.sentryHost = input.host;
+  if (input.viewerName) integrations.sentryViewerName = input.viewerName.slice(0, 120);
+}
+function clearConnection(integrations, id) {
+  if (id === "vercel") {
+    delete integrations.vercelToken;
+    delete integrations.vercelViewerName;
+    return;
+  }
+  if (id === "supabase") {
+    delete integrations.supabaseAccessToken;
+    delete integrations.supabaseViewerName;
+    return;
+  }
+  if (id === "posthog") {
+    delete integrations.posthogPersonalApiKey;
+    delete integrations.posthogViewerName;
+    delete integrations.posthogHost;
+    return;
+  }
+  delete integrations.sentryAuthToken;
+  delete integrations.sentryViewerName;
+  delete integrations.sentryHost;
+}
+async function connectOptionalService(input) {
+  if (!isOptionalServiceId(input.id)) {
+    throw new Error("Unknown optional service");
+  }
+  const verified = await verifyOptionalService(input);
+  const current = loadAppSettings();
+  const integrations = { ...current.integrations };
+  applyConnection(integrations, input.id, {
+    token: input.token.trim(),
+    host: verified.host,
+    viewerName: verified.viewerName
+  });
+  return saveAppSettings({ ...current, integrations });
+}
+function disconnectOptionalService(id) {
+  if (!isOptionalServiceId(id)) {
+    throw new Error("Unknown optional service");
+  }
+  const current = loadAppSettings();
+  const integrations = { ...current.integrations };
+  clearConnection(integrations, id);
+  return saveAppSettings({ ...current, integrations });
+}
+function optionalServiceConnected(id, integrations) {
+  if (id === "vercel") return Boolean(integrations.vercelToken?.trim());
+  if (id === "supabase") return Boolean(integrations.supabaseAccessToken?.trim());
+  if (id === "posthog") return Boolean(integrations.posthogPersonalApiKey?.trim());
+  return Boolean(integrations.sentryAuthToken?.trim());
+}
+function connectedOptionalServices(integrations) {
+  return OPTIONAL_SERVICES.filter((spec) => optionalServiceConnected(spec.id, integrations));
+}
+function cliPresencePhrase(spec, cli) {
+  if (!spec.cli || !cli || !(spec.id in cli)) return "";
+  return cli[spec.id] ? " (installed)" : " (not installed \u2014 ask the user to press Install CLI in Settings \u2192 Connectors)";
+}
+function connectorDirectiveLine(spec, cli) {
+  const extras = spec.hostEnvKey ? ` / \`${spec.hostEnvKey}\`` : "";
+  if (spec.cli) {
+    return `- ${spec.label}: use \`${spec.cli}\` (\`${spec.envKey}\`${extras})${cliPresencePhrase(spec, cli)}. Do not add a ${spec.label} MCP.`;
+  }
+  return `- ${spec.label}: call \`posthog_api\`. Path must start with \`/api/\`. GET is the default. POST \`/api/projects/:id/query/\` or \`/api/environments/:id/query/\` is a read and does not need \`write=true\`. Other POST and PATCH require \`write=true\` only when the user asked to change data. Do not read the API key from the environment. Do not add a ${spec.label} MCP.`;
+}
+function connectorReminderBit(spec, cli) {
+  if (!spec.cli) return `${spec.label}: \`posthog_api\``;
+  const presence = cliPresencePhrase(spec, cli);
+  return `${spec.label}: \`${spec.cli}\`${presence}`;
+}
+function formatOptionalServicesDirective(integrations, cli) {
+  const connected = connectedOptionalServices(integrations);
+  if (connected.length === 0) return null;
+  const cliConnected = connected.some((spec) => spec.cli);
+  const lines = [
+    cliConnected ? "Optional connectors (connected \u2014 CLI tokens are already in this process env):" : "Optional connectors (connected):",
+    ...connected.map((spec) => connectorDirectiveLine(spec, cli)),
+    cliConnected ? "If a connector MCP is listed but needsAuth or returns unauthorized, do not sign in to that MCP. CLI tokens are already in this process. Do not read a PostHog key from the environment." : "If a connector MCP is listed but needsAuth or returns unauthorized, do not sign in to that MCP. Do not read a PostHog key from the environment.",
+    "Do not add a vendor MCP. When a binary is missing, ask the user to press Install CLI in Settings \u2192 Connectors.",
+    "When you shell a connector CLI, write bulky output to `.context/cli/` and read a slice."
+  ];
+  return lines.join("\n");
+}
+function formatOptionalServicesReminder(integrations, cli) {
+  const connected = connectedOptionalServices(integrations);
+  if (connected.length === 0) return null;
+  const bits = connected.map((spec) => connectorReminderBit(spec, cli)).join(". ");
+  const tokenBit = connected.some((spec) => spec.cli) ? "CLI tokens are already in this process. " : "";
+  return `Settings \u2192 Connectors: ${tokenBit}${bits}. If a connector MCP needsAuth or is unauthorized, ignore it and use the CLI or \`posthog_api\`. Do not add vendor MCPs. Do not read a PostHog key from the environment. Shell dumps from those CLIs go in \`.context/cli/\` \u2014 read a slice.`;
+}
+async function connectedCliPresence(integrations) {
+  const ids = connectedOptionalServices(integrations).filter((spec) => spec.cli).map((spec) => spec.id);
+  if (ids.length === 0) return void 0;
+  try {
+    const { optionalCliPresence } = await import("./optional-cli-6SW4OOX3.js");
+    return await optionalCliPresence(ids);
+  } catch {
+    return void 0;
+  }
+}
+async function formatOptionalServicesDirectiveForTurn(integrations) {
+  return formatOptionalServicesDirective(integrations, await connectedCliPresence(integrations));
+}
+async function formatOptionalServicesReminderForTurn(integrations) {
+  return formatOptionalServicesReminder(integrations, await connectedCliPresence(integrations));
+}
+
+export {
+  OPTIONAL_SERVICE_IDS,
+  OPTIONAL_SERVICES,
+  optionalServiceSpec,
+  isOptionalServiceId,
+  normalizeServiceOrigin,
+  verifyOptionalService,
+  connectOptionalService,
+  disconnectOptionalService,
+  optionalServiceConnected,
+  connectedOptionalServices,
+  formatOptionalServicesDirective,
+  formatOptionalServicesReminder,
+  formatOptionalServicesDirectiveForTurn,
+  formatOptionalServicesReminderForTurn
+};

package/dist/{chunk-5QOLFOAX.js → chunk-AFLNFGGB.js}

@@ -272,7 +272,7 @@ function humanizeAgentFailDetail(detail) {
     return "Cursor local file search failed (ripgrep / resource_exhausted). Wait a minute and retry; if it keeps happening, check Cursor usage.";
   }
   if (looksLikeCodexMcpError(raw)) {
-    return `${raw} \u2014 skip that vendor MCP and continue (PostHog: Settings \u2192 Connectors + HTTP API).`;
+    return `${raw} \u2014 skip that vendor MCP and continue (PostHog: Settings \u2192 Connectors and posthog_api).`;
   }
   if (/invalid user api key|invalid api key|not logged in|not authenticated|unauthorized|authentication|please run.*login|codex login|claude auth|cursor api/.test(
     lower

package/dist/{chunk-5T4YWFLD.js → chunk-AHH5USEA.js}

@@ -6,14 +6,14 @@ import {
   normalizeAbleTimeCredential,
   normalizeAbleTimeHost,
   rewriteAbleTimeError
-} from "./chunk-VQEARG5H.js";
+} from "./chunk-GU6DT6NO.js";
 import {
   httpFetch
 } from "./chunk-2GPQZZLY.js";
 import {
   getAbleTimeAccessToken,
   getAbleTimeHost
-} from "./chunk-WRIMAEF2.js";
+} from "./chunk-MVZO7QZ2.js";
 
 // src/integrations/abletime-rest.ts
 var ABLETIME_REST_PREFIX = "/api/public/v2";

package/dist/{chunk-6CVVNAIU.js → chunk-B3BPLPKQ.js}

@@ -4,14 +4,14 @@ import {
   normalizeAbleTimeCredential,
   normalizeAbleTimeHost,
   rewriteAbleTimeError
-} from "./chunk-DEJALWKM.js";
+} from "./chunk-NFPWLDCH.js";
 import {
   httpFetch
 } from "./chunk-JAT3JFOS.js";
 import {
   getAbleTimeAccessToken,
   getAbleTimeHost
-} from "./chunk-YNTXWFXT.js";
+} from "./chunk-36J3IZBS.js";
 
 // src/integrations/abletime-rest.ts
 var ABLETIME_REST_PREFIX = "/api/public/v2";