@sideboard-ai/core 0.1.293 → 0.1.295

package/dist/{chunk-3E4NOIXN.js → chunk-3D3GGL6X.js}

@@ -1,7 +1,7 @@
 import {
   DEFAULT_ABLETIME_HOST,
   normalizeAbleTimeHost
-} from "./chunk-NFPWLDCH.js";
+} from "./chunk-FAXOEKQR.js";
 import {
   httpFetch
 } from "./chunk-JAT3JFOS.js";
@@ -10,7 +10,7 @@ import {
   getAbleTimeHost,
   loadAppSettings,
   saveAbleTimeConnection
-} from "./chunk-36J3IZBS.js";
+} from "./chunk-RSATPXU4.js";
 
 // src/integrations/abletime-oauth.ts
 import { createHash, randomBytes } from "crypto";
@@ -280,7 +280,7 @@ async function startAbleTimeOAuth(opts) {
   persistAbleTimeTokens(data, { host });
   const token = data.access_token.trim();
   try {
-    const { getAbleTimeOrientation } = await import("./abletime-4WJUVE64.js");
+    const { getAbleTimeOrientation } = await import("./abletime-RYDAQ3FE.js");
     const orientation = await getAbleTimeOrientation({ token, host });
     return saveAbleTimeConnection({
       accessToken: token,

package/dist/{chunk-UO5C2L2G.js → chunk-6SGYGYH7.js}

@@ -19,7 +19,7 @@ import {
 import {
   getGithubGitAuthMode,
   getGithubPat
-} from "./chunk-MVZO7QZ2.js";
+} from "./chunk-BU6HH5VA.js";
 import {
   allocateTeamName,
   listThreads,

package/dist/{chunk-RPCKGO3J.js → chunk-ABLHTRRG.js}

@@ -21,16 +21,16 @@ import {
   looksLikeSkillBody,
   skillCommandFromBody,
   withEventParentId
-} from "./chunk-AFLNFGGB.js";
+} from "./chunk-ED4ZXQVO.js";
 import {
   isOrchestratorThread
-} from "./chunk-PO3PDNMV.js";
+} from "./chunk-E7G7RY6T.js";
 import {
   codexUnattendedGitConfigArgs,
   mergeAgentGitAuthEnv,
   resolveAgentGitAuthEnv,
   resolveCodexGitWritableRoots
-} from "./chunk-UO5C2L2G.js";
+} from "./chunk-6SGYGYH7.js";
 import {
   npmGlobalNodeModules,
   run
@@ -40,10 +40,11 @@ import {
   fromInclusiveInputUsage,
   isAbleTimeConnected,
   isLinearConnected,
+  isPosthogConnected,
   loadAppSettings,
   resolveAgentExecutable,
   resolveClaudeExecutable
-} from "./chunk-MVZO7QZ2.js";
+} from "./chunk-BU6HH5VA.js";
 import {
   isElectronLikeCommand,
   unwrapStrippedElectronLaunch,
@@ -483,6 +484,10 @@ var CLAUDE_CHROME_ALLOWED_TOOLS = [
   "mcp__claude-in-chrome__*",
   "Skill(claude-in-chrome)"
 ];
+var CLAUDE_POSTHOG_CONNECTOR_ALLOWED_TOOLS = [
+  "mcp__claude_ai_PostHog",
+  "mcp__claude_ai_PostHog__*"
+];
 
 // src/agents/orch-mcp-isolation.ts
 import { existsSync as existsSync7, readFileSync as readFileSync3 } from "fs";
@@ -976,11 +981,9 @@ var SIDEBOARD_GITHUB_MCP_ALLOWED_TOOLS = ["mcp__sideboard__github_*"];
 var SIDEBOARD_LINEAR_MCP_ALLOWED_TOOLS = ["mcp__sideboard__linear_*"];
 var SIDEBOARD_ABLETIME_MCP_ALLOWED_TOOLS = ["mcp__sideboard__abletime_*"];
 function sideboardWorktreeAllowedTools(opts) {
-  const out = [...SIDEBOARD_ARTIFACT_MCP_ALLOWED_TOOLS];
-  if (!opts?.planMode) {
-    const idx = out.indexOf("mcp__sideboard__present_plan");
-    if (idx >= 0) out.splice(idx, 1);
-  }
+  const out = SIDEBOARD_ARTIFACT_MCP_ALLOWED_TOOLS.filter(
+    (tool) => (opts?.planMode || tool !== "mcp__sideboard__present_plan") && (opts?.posthog || tool !== "mcp__sideboard__posthog_api")
+  );
   if (opts?.github !== false) out.push(...SIDEBOARD_GITHUB_MCP_ALLOWED_TOOLS);
   if (opts?.linear) out.push(...SIDEBOARD_LINEAR_MCP_ALLOWED_TOOLS);
   if (opts?.abletime) out.push(...SIDEBOARD_ABLETIME_MCP_ALLOWED_TOOLS);
@@ -2015,7 +2018,7 @@ var claudeAdapter = {
       );
     }
     const mode = permissionMode(thread);
-    const { isOrchestratorThread: isOrchestratorThread2 } = await import("./global-workspace-CTFQDG7G.js");
+    const { isOrchestratorThread: isOrchestratorThread2 } = await import("./global-workspace-PX4GUVLW.js");
     const isOrchestrator = isOrchestratorThread2(thread);
     const rpc = worktreeAgentRpc(isOrchestrator);
     const injectedServers = await buildInjectedMcpServers({
@@ -2045,9 +2048,11 @@ var claudeAdapter = {
           github: true,
           linear: isLinearConnected(),
           abletime: isAbleTimeConnected(),
-          planMode: thread.planMode
+          planMode: thread.planMode,
+          posthog: isPosthogConnected()
         }),
-        ...brightsyMcpAllowedTools(injectedBrightsyNames)
+        ...brightsyMcpAllowedTools(injectedBrightsyNames),
+        ...isPosthogConnected() ? [] : CLAUDE_POSTHOG_CONNECTOR_ALLOWED_TOOLS
       ];
     }
     if (chromeOn) {

package/dist/{chunk-NXXQFLNQ.js → chunk-B42H6GJR.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-QVN2WOKJ.js";
 import {
   resolveAgentExecutable
-} from "./chunk-36J3IZBS.js";
+} from "./chunk-RSATPXU4.js";
 
 // src/agents/install.ts
 import { existsSync } from "fs";
@@ -265,7 +265,7 @@ async function loginAgent(agent) {
   };
 }
 async function loginManagedAccount(accountId) {
-  const { loadAppSettings } = await import("./app-settings-MR2U6AXN.js");
+  const { loadAppSettings } = await import("./app-settings-3OQWRKOK.js");
   const { loginEnvPrefix } = await import("./managed-accounts-2AK5RIAF.js");
   const account = loadAppSettings().accounts.accounts.find((a) => a.id === accountId);
   if (!account) {

package/dist/{chunk-MVZO7QZ2.js → chunk-BU6HH5VA.js}

@@ -1880,6 +1880,9 @@ function disconnectLinearConnection() {
   delete integrations.linearOrganizationName;
   return saveAppSettings({ ...current, integrations });
 }
+function isPosthogConnected(settings = loadAppSettings()) {
+  return Boolean(settings.integrations.posthogPersonalApiKey?.trim());
+}
 function isAbleTimeConnected(settings = loadAppSettings()) {
   return Boolean(
     settings.integrations.abletimeAccessToken?.trim() || settings.integrations.abletimeRefreshToken?.trim()
@@ -2320,6 +2323,7 @@ export {
   isLinearConnected,
   saveLinearOAuth,
   disconnectLinearConnection,
+  isPosthogConnected,
   isAbleTimeConnected,
   getAbleTimeAccessToken,
   getAbleTimeHost,

package/dist/{chunk-PO3PDNMV.js → chunk-E7G7RY6T.js}

@@ -5,7 +5,7 @@ import {
   ensureGhPreferOrigin,
   resolveGithubRepoSlug,
   resolveRepoRoot
-} from "./chunk-UO5C2L2G.js";
+} from "./chunk-6SGYGYH7.js";
 import {
   ATTACHMENTS_DIR,
   attachmentsGitignoreBody
@@ -22,7 +22,7 @@ import {
   resolveThreadDefaults,
   resolveViewerProfile,
   resolveViewerProfileForRepo
-} from "./chunk-MVZO7QZ2.js";
+} from "./chunk-BU6HH5VA.js";
 import {
   allocateTeamName,
   createEmptyThread,
@@ -346,7 +346,7 @@ var COORDINATOR_TOOL_PLAYBOOK = [
   "- linear_* (when Linear is connected) \u2014 list_teams for team key/states; linear_list_projects for project names; get/search include the project a ticket is on; get/create/update/comment with ENG-123. Worktree agents have the same Account tools \u2014 prefer they comment, update status, and create spin-offs (parent=) on their own ticket when they were asked to do the work. When reviewing a PR or ticket, do not comment or update until the user types a next step \u2014 they should work through the feedback in chat first. Do not tell the child to ask_user after the review. Scope errors: reconnect Linear in Account settings. Prefer these over any Linear MCP the CLI may still list.",
   "- github_* \u2014 get/comment/update/create GitHub issues via Account `gh` (#123). github_list_projects and get/search include GitHub Projects. projectsError or a missing read:project scope \u2192 `gh auth refresh -s read:project`. Worktree agents have these too. Prefer over any vendor GitHub MCP. Pass parent= for spin-offs. When reviewing a PR or ticket, do not comment, submit `gh pr review`, or update the PR/ticket until the user types a next step.",
   "- abletime_* (when AbleTime is connected) \u2014 orientation first; abletime_list_projects lists projects; get/list include the project a task is on; get/comment/update/create (parent= for spin-offs); ensure_task when work has no ticket (or create_workspace from the default branch auto-creates one). Worktree agents have the same Account tools. Same review-write gate as Linear/GitHub.",
-  "- Optional connectors (Vercel, Supabase, Sentry) in Settings \u2192 Connectors inject tokens into worktree agent env when connected. Prefer official CLIs (`vercel`, `supabase`, `sentry-cli`). PostHog is the Sideboard tool `posthog_api` (GET by default; POST `/api/projects/:id/query/` or `/api/environments/:id/query/` is a read and does not need write=true; other POST and PATCH need write=true only when the user asked to change data). The PostHog key stays in the vault \u2014 do not read it from the environment. If a connector MCP needsAuth or is unauthorized, do not sign in \u2014 use the native CLI or `posthog_api`. Tell any worktree agent (Claude / Cursor / Codex / OpenCode) to write CLI output to `.context/cli/` and read a slice. If a CLI is missing, the user presses Install CLI on that row. Do not add vendor MCPs. Git (`gh`) stays Settings \u2192 Git; issue tracking stays Settings \u2192 Issues. The phone remote is Settings \u2192 Remote \u2014 do not look up Slack users.",
+  "- Optional connectors (Vercel, Supabase, Sentry) in Settings \u2192 Connectors inject tokens into worktree agent env when connected. Prefer official CLIs (`vercel`, `supabase`, `sentry-cli`). When Settings \u2192 Connectors has a PostHog personal API key, PostHog is the Sideboard tool `posthog_api` (GET by default; POST `/api/projects/:id/query/` or `/api/environments/:id/query/` is a read and does not need write=true; other POST and PATCH need write=true only when the user asked to change data). The PostHog key stays in the vault \u2014 do not read it from the environment, and do not sign in to a PostHog MCP. When no PostHog API key is set, leave the Claude PostHog connector alone. If a Vercel, Supabase, or Sentry MCP needsAuth or is unauthorized, do not sign in \u2014 use the native CLI. Tell any worktree agent (Claude / Cursor / Codex / OpenCode) to write CLI output to `.context/cli/` and read a slice. If a CLI is missing, the user presses Install CLI on that row. Do not add vendor MCPs. Git (`gh`) stays Settings \u2192 Git; issue tracking stays Settings \u2192 Issues. The phone remote is Settings \u2192 Remote \u2014 do not look up Slack users.",
   "- get_pr_stack / open_pr_stack_layers / add_stack_layer / create_pr_stack \u2014 GitHub stacked PRs (`gh stack`); one worktree per layer",
   "- list_models \u2014 only when you need a specific model (rare); otherwise omit model so Account defaults apply",
   "- list_chats / get_chat \u2014 live thread list (parent id + last message preview). get_chat on this orchestration chat lists child worktree agents (status + lastText). blockedReason is why that agent is waiting on a person. Also includes usage / lastTurnUsage.",

package/dist/{chunk-AFLNFGGB.js → chunk-ED4ZXQVO.js}

@@ -1207,6 +1207,7 @@ export {
   looksLikeHugeToolResultDump,
   clipToolResultForStore,
   looksLikeV8Oom,
+  HUGE_TOOL_RESULT_SUMMARY,
   summarizeTurnStderr,
   looksLikeInvalidAgentSession,
   looksLikeBrightsyEmptyCompletion,

package/dist/{chunk-K6IOJI3L.js → chunk-ER6BGGME.js}

@@ -1,7 +1,10 @@
 import {
+  HUGE_TOOL_RESULT_SUMMARY,
   clipToolResultForStore,
+  formatUnknownDetail,
+  looksLikeCursorStreamCutOff,
   looksLikeHugeToolResultDump
-} from "./chunk-MIVX7QKI.js";
+} from "./chunk-HO5R3ZRH.js";
 import {
   CLI_DIR
 } from "./chunk-6K64FJDD.js";
@@ -73,6 +76,68 @@ function clipAgentEventForEmit(event, cwd) {
   return event;
 }
 
+// src/agents/cursor-tool-guard.ts
+var CURSOR_TOOL_RECOVERY_HINT = "Continue with a smaller request. If you were reading a large file or API payload, pass offset and limit or write the output to .context/cli/ and read a slice. Do not retry the same call.";
+function cursorToolErrorText(err) {
+  const raw = formatUnknownDetail(err).replace(/\s+/g, " ").trim();
+  const message = looksLikeHugeToolResultDump(raw) ? HUGE_TOOL_RESULT_SUMMARY : (raw || "unknown tool error").slice(0, 500);
+  return `Error: ${message}
+${CURSOR_TOOL_RECOVERY_HINT}`;
+}
+function cursorToolErrorResult(err) {
+  return {
+    isError: true,
+    content: [{ type: "text", text: cursorToolErrorText(err) }]
+  };
+}
+function boundedCursorToolResult(result, opts) {
+  const prefix = opts?.name ?? "cursor-tool";
+  if (typeof result === "string") {
+    return spillAndClipToolResult(result, { cwd: opts?.cwd, prefix });
+  }
+  if (result == null) {
+    return cursorToolErrorText(new Error("tool returned no result"));
+  }
+  let json;
+  try {
+    json = JSON.stringify(result);
+  } catch (err) {
+    return cursorToolErrorText(err);
+  }
+  return spillAndClipToolResult(json, { cwd: opts?.cwd, prefix });
+}
+function guardCursorCustomTool(tool, opts) {
+  const execute = tool.execute.bind(tool);
+  return {
+    ...tool,
+    execute: async (args, context) => {
+      try {
+        const result = await execute(args, context);
+        return boundedCursorToolResult(result, opts);
+      } catch (err) {
+        return cursorToolErrorResult(err);
+      }
+    }
+  };
+}
+var NON_RECOVERABLE_RUN_ERROR = /invalid (?:user )?api key|not logged in|not authenticated|unauthorized|credit balance|out of credits|insufficient.?quota|usage limit|you've hit your|too many requests|rate.?limit/;
+function shouldReturnRunErrorToAgent(detail) {
+  const text = detail.trim();
+  if (!text) return false;
+  if (looksLikeHugeToolResultDump(text) || looksLikeCursorStreamCutOff(text)) return true;
+  const head = text.slice(0, 2e3).toLowerCase();
+  if (NON_RECOVERABLE_RUN_ERROR.test(head)) return false;
+  return true;
+}
+function cursorRunErrorRecoveryPrompt(detail) {
+  const summary = looksLikeHugeToolResultDump(detail) ? HUGE_TOOL_RESULT_SUMMARY : detail.replace(/\s+/g, " ").trim().slice(0, 400);
+  return [
+    "A tool call failed before its result reached you. The session is still open.",
+    `Error: ${summary || "unknown"}`,
+    CURSOR_TOOL_RECOVERY_HINT
+  ].join("\n");
+}
+
 // src/agent-rpc/cursor-tools.ts
 function sideboardCursorRpcTools(opts) {
   const exec = createPilotRpcExecutors(opts);
@@ -106,5 +171,9 @@ function sideboardCursorRpcTools(opts) {
 export {
   clipMcpToolResult,
   clipAgentEventForEmit,
+  cursorToolErrorText,
+  guardCursorCustomTool,
+  shouldReturnRunErrorToAgent,
+  cursorRunErrorRecoveryPrompt,
   sideboardCursorRpcTools
 };

package/dist/{chunk-NFPWLDCH.js → chunk-FAXOEKQR.js}

@@ -4,7 +4,7 @@ import {
 import {
   getAbleTimeHost,
   isAbleTimeConnected
-} from "./chunk-36J3IZBS.js";
+} from "./chunk-RSATPXU4.js";
 
 // src/integrations/abletime-mcp.ts
 var DEFAULT_ABLETIME_HOST = "https://track.abletime.com";
@@ -153,7 +153,7 @@ function textsFromUnknown(value) {
   return "";
 }
 async function abletimeMcpRequest(method, params, opts) {
-  const rawToken = opts?.token ?? await import("./abletime-oauth-ICMB2XV2.js").then((m) => m.ensureAbleTimeAccessToken());
+  const rawToken = opts?.token ?? await import("./abletime-oauth-KTERKARA.js").then((m) => m.ensureAbleTimeAccessToken());
   if (!rawToken?.trim()) {
     throw new Error("AbleTime is not connected \u2014 paste a personal access token in Account settings");
   }
@@ -224,9 +224,9 @@ async function callAbleTimeTool(name, args = {}, opts) {
   if (!opts?.token && !isAbleTimeConnected()) {
     throw new Error("AbleTime is not connected \u2014 paste a personal access token in Account settings");
   }
-  const rawToken = opts?.token ?? await import("./abletime-oauth-ICMB2XV2.js").then((m) => m.ensureAbleTimeAccessToken());
+  const rawToken = opts?.token ?? await import("./abletime-oauth-KTERKARA.js").then((m) => m.ensureAbleTimeAccessToken());
   if (rawToken && ableTimeUsesRest(rawToken)) {
-    const { callAbleTimeRestTool } = await import("./abletime-rest-HFMRTUDT.js");
+    const { callAbleTimeRestTool } = await import("./abletime-rest-EUB6RW7K.js");
     return callAbleTimeRestTool(name, args, { ...opts, token: rawToken });
   }
   const requestOpts = { ...opts, pm: opts?.pm ?? abletimeToolUsesPm(name) };
@@ -242,7 +242,7 @@ async function callAbleTimeTool(name, args = {}, opts) {
       return await call();
     }
     if (rawToken && ableTimeUsesRest(rawToken) && isAbleTimeRejectedCredential(message)) {
-      const { callAbleTimeRestTool } = await import("./abletime-rest-HFMRTUDT.js");
+      const { callAbleTimeRestTool } = await import("./abletime-rest-EUB6RW7K.js");
       return callAbleTimeRestTool(name, args, { ...opts, token: rawToken });
     }
     throw err instanceof Error ? new Error(rewriteAbleTimeError(err.message)) : err;

package/dist/{chunk-MIVX7QKI.js → chunk-HO5R3ZRH.js}

@@ -393,6 +393,7 @@ export {
   looksLikeHugeToolResultDump,
   clipToolResultForStore,
   looksLikeV8Oom,
+  HUGE_TOOL_RESULT_SUMMARY,
   TOOL_RESULT_STORE_MAX_CHARS,
   summarizeTurnStderr,
   looksLikeInvalidAgentSession,

package/dist/{chunk-GU6DT6NO.js → chunk-HSF2RQSQ.js}

@@ -6,7 +6,7 @@ import {
 import {
   getAbleTimeHost,
   isAbleTimeConnected
-} from "./chunk-MVZO7QZ2.js";
+} from "./chunk-BU6HH5VA.js";
 
 // src/integrations/abletime-mcp.ts
 var DEFAULT_ABLETIME_HOST = "https://track.abletime.com";
@@ -155,7 +155,7 @@ function textsFromUnknown(value) {
   return "";
 }
 async function abletimeMcpRequest(method, params, opts) {
-  const rawToken = opts?.token ?? await import("./abletime-oauth-FW24YHYX.js").then((m) => m.ensureAbleTimeAccessToken());
+  const rawToken = opts?.token ?? await import("./abletime-oauth-ZURGXSY6.js").then((m) => m.ensureAbleTimeAccessToken());
   if (!rawToken?.trim()) {
     throw new Error("AbleTime is not connected \u2014 paste a personal access token in Account settings");
   }
@@ -226,9 +226,9 @@ async function callAbleTimeTool(name, args = {}, opts) {
   if (!opts?.token && !isAbleTimeConnected()) {
     throw new Error("AbleTime is not connected \u2014 paste a personal access token in Account settings");
   }
-  const rawToken = opts?.token ?? await import("./abletime-oauth-FW24YHYX.js").then((m) => m.ensureAbleTimeAccessToken());
+  const rawToken = opts?.token ?? await import("./abletime-oauth-ZURGXSY6.js").then((m) => m.ensureAbleTimeAccessToken());
   if (rawToken && ableTimeUsesRest(rawToken)) {
-    const { callAbleTimeRestTool } = await import("./abletime-rest-OGWC7BC6.js");
+    const { callAbleTimeRestTool } = await import("./abletime-rest-4TVIWLZK.js");
     return callAbleTimeRestTool(name, args, { ...opts, token: rawToken });
   }
   const requestOpts = { ...opts, pm: opts?.pm ?? abletimeToolUsesPm(name) };
@@ -244,7 +244,7 @@ async function callAbleTimeTool(name, args = {}, opts) {
       return await call();
     }
     if (rawToken && ableTimeUsesRest(rawToken) && isAbleTimeRejectedCredential(message)) {
-      const { callAbleTimeRestTool } = await import("./abletime-rest-OGWC7BC6.js");
+      const { callAbleTimeRestTool } = await import("./abletime-rest-4TVIWLZK.js");
       return callAbleTimeRestTool(name, args, { ...opts, token: rawToken });
     }
     throw err instanceof Error ? new Error(rewriteAbleTimeError(err.message)) : err;

package/dist/{chunk-WRDKJRWF.js → chunk-HWIIRVYE.js}

@@ -5,17 +5,17 @@ import {
   compactSummaryPart,
   isInternalAgentStatusText,
   lastAssistantMessageText
-} from "./chunk-AFLNFGGB.js";
+} from "./chunk-ED4ZXQVO.js";
 import {
   isCloudCoordinatorThread,
   isGlobalThread,
   isOrchestratorThread,
   isSlackCoordinatorThread
-} from "./chunk-PO3PDNMV.js";
+} from "./chunk-E7G7RY6T.js";
 import {
   mergeAgentGitAuthEnv,
   resolveAgentGitAuthEnv
-} from "./chunk-UO5C2L2G.js";
+} from "./chunk-6SGYGYH7.js";
 import {
   ATTACHMENTS_DIR,
   DETACHED_JOBS_DIR,
@@ -32,7 +32,7 @@ import {
 import {
   assertOrchestratorCapableAgent,
   contextTokens
-} from "./chunk-MVZO7QZ2.js";
+} from "./chunk-BU6HH5VA.js";
 import {
   stripNestedElectronEnv
 } from "./chunk-WWUABK6B.js";
@@ -1674,7 +1674,7 @@ var PORT_RANGE_SIZE = 10;
 var RECLAIM_RETRY_DELAY_MS = 40;
 var RECLAIM_TRIES = 8;
 async function killReclaimable(ports, worktreePath, signal) {
-  const { killListenersOnPorts: killListenersOnPorts2, killStaleWorktreeListeners: killStaleWorktreeListeners2 } = await import("./conductor-P7XPGYF4.js");
+  const { killListenersOnPorts: killListenersOnPorts2, killStaleWorktreeListeners: killStaleWorktreeListeners2 } = await import("./conductor-GURU5XD7.js");
   if (worktreePath) killStaleWorktreeListeners2(ports, worktreePath, signal);
   else killListenersOnPorts2(ports);
 }

package/dist/{chunk-7UUILVMV.js → chunk-IOY2LF3Y.js}

@@ -1,7 +1,7 @@
 import {
   extractJsonErrorMessage,
   formatUnknownDetail
-} from "./chunk-MIVX7QKI.js";
+} from "./chunk-HO5R3ZRH.js";
 import {
   npmGlobalNodeModules,
   run

package/dist/{chunk-OH4EN323.js → chunk-ISEYRGMP.js}

@@ -2,11 +2,11 @@ import {
   OPTIONAL_SERVICES,
   isOptionalServiceId,
   optionalServiceSpec
-} from "./chunk-AF2DMY3K.js";
+} from "./chunk-QDDTVIWE.js";
 import {
   installNpmGlobalPackage,
   whichOnPath
-} from "./chunk-NXXQFLNQ.js";
+} from "./chunk-B42H6GJR.js";
 import {
   enrichPathWithNpmGlobalBin
 } from "./chunk-QVN2WOKJ.js";

package/dist/{chunk-4YXXLWDI.js → chunk-KCP6IVRI.js}

@@ -2,17 +2,17 @@ import {
   compactSummaryPart,
   isInternalAgentStatusText,
   lastAssistantMessageText
-} from "./chunk-YSLCWCMJ.js";
+} from "./chunk-Q3DPZ4DE.js";
 import {
   isCloudCoordinatorThread,
   isGlobalThread,
   isOrchestratorThread,
   isSlackCoordinatorThread
-} from "./chunk-ZRQWV3MS.js";
+} from "./chunk-YEIPPZ5W.js";
 import {
   mergeAgentGitAuthEnv,
   resolveAgentGitAuthEnv
-} from "./chunk-2VGLZIU6.js";
+} from "./chunk-ZEP6JIRF.js";
 import {
   allocateTeamName,
   createEmptyThread,
@@ -29,7 +29,7 @@ import {
 } from "./chunk-2P4XKWV2.js";
 import {
   clipToolResultForStore
-} from "./chunk-MIVX7QKI.js";
+} from "./chunk-HO5R3ZRH.js";
 import {
   ATTACHMENTS_DIR,
   DETACHED_JOBS_DIR,
@@ -43,7 +43,7 @@ import {
 import {
   assertOrchestratorCapableAgent,
   contextTokens
-} from "./chunk-36J3IZBS.js";
+} from "./chunk-RSATPXU4.js";
 import {
   stripNestedElectronEnv
 } from "./chunk-4TR3HZFT.js";
@@ -1776,7 +1776,7 @@ var PORT_RANGE_SIZE = 10;
 var RECLAIM_RETRY_DELAY_MS = 40;
 var RECLAIM_TRIES = 8;
 async function killReclaimable(ports, worktreePath, signal) {
-  const { killListenersOnPorts: killListenersOnPorts2, killStaleWorktreeListeners: killStaleWorktreeListeners2 } = await import("./conductor-MAYZSFL6.js");
+  const { killListenersOnPorts: killListenersOnPorts2, killStaleWorktreeListeners: killStaleWorktreeListeners2 } = await import("./conductor-HT2UANDY.js");
   if (worktreePath) killStaleWorktreeListeners2(ports, worktreePath, signal);
   else killListenersOnPorts2(ports);
 }

package/dist/{chunk-MYJYINTS.js → chunk-LZVWKJXY.js}

@@ -1,13 +1,13 @@
 import {
   abletimeRestUrl,
   textFromAbleTimeDoc
-} from "./chunk-B3BPLPKQ.js";
+} from "./chunk-R3R3ZDFC.js";
 import {
   assertAbleTimeCredential,
   callAbleTimeTool,
   normalizeAbleTimeHost,
   rewriteAbleTimeError
-} from "./chunk-NFPWLDCH.js";
+} from "./chunk-FAXOEKQR.js";
 import {
   httpFetch
 } from "./chunk-JAT3JFOS.js";
@@ -20,7 +20,7 @@ import {
   getAbleTimeHost,
   isAbleTimeConnected,
   saveAbleTimeConnection
-} from "./chunk-36J3IZBS.js";
+} from "./chunk-RSATPXU4.js";
 
 // src/integrations/issue-attachments.ts
 import { existsSync, mkdirSync, writeFileSync } from "fs";

package/dist/{chunk-Y67TBJD5.js → chunk-MOP5L5QZ.js}

@@ -3,13 +3,13 @@
 import {
   abletimeRestUrl,
   textFromAbleTimeDoc
-} from "./chunk-AHH5USEA.js";
+} from "./chunk-SSETL5EX.js";
 import {
   assertAbleTimeCredential,
   callAbleTimeTool,
   normalizeAbleTimeHost,
   rewriteAbleTimeError
-} from "./chunk-GU6DT6NO.js";
+} from "./chunk-HSF2RQSQ.js";
 import {
   httpFetch
 } from "./chunk-2GPQZZLY.js";
@@ -22,7 +22,7 @@ import {
   getAbleTimeHost,
   isAbleTimeConnected,
   saveAbleTimeConnection
-} from "./chunk-MVZO7QZ2.js";
+} from "./chunk-BU6HH5VA.js";
 
 // src/integrations/issue-attachments.ts
 import { existsSync, mkdirSync, writeFileSync } from "fs";

package/dist/{chunk-YSLCWCMJ.js → chunk-Q3DPZ4DE.js}

@@ -1,6 +1,6 @@
 import {
   clipToolResultForStore
-} from "./chunk-MIVX7QKI.js";
+} from "./chunk-HO5R3ZRH.js";
 
 // src/agents/message-parts.ts
 function asRecord(input) {

package/dist/{chunk-AF2DMY3K.js → chunk-QDDTVIWE.js}

@@ -4,7 +4,7 @@ import {
 import {
   loadAppSettings,
   saveAppSettings
-} from "./chunk-36J3IZBS.js";
+} from "./chunk-RSATPXU4.js";
 
 // src/integrations/optional-services.ts
 var OPTIONAL_SERVICE_IDS = ["vercel", "supabase", "posthog", "sentry"];
@@ -235,6 +235,12 @@ function connectorDirectiveLine(spec, cli) {
   }
   return `- ${spec.label}: call \`posthog_api\`. Path must start with \`/api/\`. GET is the default. POST \`/api/projects/:id/query/\` or \`/api/environments/:id/query/\` is a read and does not need \`write=true\`. Other POST and PATCH require \`write=true\` only when the user asked to change data. Do not read the API key from the environment. Do not add a ${spec.label} MCP.`;
 }
+function connectorAuthCaution(posthog, cliConnected) {
+  const signIn = posthog ? "If a connector MCP is listed but needsAuth or returns unauthorized, do not sign in to that MCP." : "If a Vercel, Supabase, or Sentry MCP is listed but needsAuth or returns unauthorized, do not sign in to that MCP.";
+  const token = cliConnected ? " CLI tokens are already in this process." : "";
+  const key = posthog ? " Do not read a PostHog key from the environment." : "";
+  return `${signIn}${token}${key}`;
+}
 function connectorReminderBit(spec, cli) {
   if (!spec.cli) return `${spec.label}: \`posthog_api\``;
   const presence = cliPresencePhrase(spec, cli);
@@ -244,10 +250,11 @@ function formatOptionalServicesDirective(integrations, cli) {
   const connected = connectedOptionalServices(integrations);
   if (connected.length === 0) return null;
   const cliConnected = connected.some((spec) => spec.cli);
+  const posthog = connected.some((spec) => spec.id === "posthog");
   const lines = [
     cliConnected ? "Optional connectors (connected \u2014 CLI tokens are already in this process env):" : "Optional connectors (connected):",
     ...connected.map((spec) => connectorDirectiveLine(spec, cli)),
-    cliConnected ? "If a connector MCP is listed but needsAuth or returns unauthorized, do not sign in to that MCP. CLI tokens are already in this process. Do not read a PostHog key from the environment." : "If a connector MCP is listed but needsAuth or returns unauthorized, do not sign in to that MCP. Do not read a PostHog key from the environment.",
+    connectorAuthCaution(posthog, cliConnected),
     "Do not add a vendor MCP. When a binary is missing, ask the user to press Install CLI in Settings \u2192 Connectors.",
     "When you shell a connector CLI, write bulky output to `.context/cli/` and read a slice."
   ];
@@ -258,13 +265,15 @@ function formatOptionalServicesReminder(integrations, cli) {
   if (connected.length === 0) return null;
   const bits = connected.map((spec) => connectorReminderBit(spec, cli)).join(". ");
   const tokenBit = connected.some((spec) => spec.cli) ? "CLI tokens are already in this process. " : "";
-  return `Settings \u2192 Connectors: ${tokenBit}${bits}. If a connector MCP needsAuth or is unauthorized, ignore it and use the CLI or \`posthog_api\`. Do not add vendor MCPs. Do not read a PostHog key from the environment. Shell dumps from those CLIs go in \`.context/cli/\` \u2014 read a slice.`;
+  const posthog = connected.some((spec) => spec.id === "posthog");
+  const auth = posthog ? "If a connector MCP needsAuth or is unauthorized, ignore it and use the CLI or `posthog_api`. Do not read a PostHog key from the environment." : "If a Vercel, Supabase, or Sentry MCP needsAuth or is unauthorized, ignore it and use the CLI.";
+  return `Settings \u2192 Connectors: ${tokenBit}${bits}. ${auth} Do not add vendor MCPs. Shell dumps from those CLIs go in \`.context/cli/\` \u2014 read a slice.`;
 }
 async function connectedCliPresence(integrations) {
   const ids = connectedOptionalServices(integrations).filter((spec) => spec.cli).map((spec) => spec.id);
   if (ids.length === 0) return void 0;
   try {
-    const { optionalCliPresence } = await import("./optional-cli-6SW4OOX3.js");
+    const { optionalCliPresence } = await import("./optional-cli-PZXDOVJJ.js");
     return await optionalCliPresence(ids);
   } catch {
     return void 0;

package/dist/{chunk-B3BPLPKQ.js → chunk-R3R3ZDFC.js}

@@ -4,14 +4,14 @@ import {
   normalizeAbleTimeCredential,
   normalizeAbleTimeHost,
   rewriteAbleTimeError
-} from "./chunk-NFPWLDCH.js";
+} from "./chunk-FAXOEKQR.js";
 import {
   httpFetch
 } from "./chunk-JAT3JFOS.js";
 import {
   getAbleTimeAccessToken,
   getAbleTimeHost
-} from "./chunk-36J3IZBS.js";
+} from "./chunk-RSATPXU4.js";
 
 // src/integrations/abletime-rest.ts
 var ABLETIME_REST_PREFIX = "/api/public/v2";

package/dist/{chunk-36J3IZBS.js → chunk-RSATPXU4.js}

@@ -1906,6 +1906,9 @@ function disconnectLinearConnection() {
   delete integrations.linearOrganizationName;
   return saveAppSettings({ ...current, integrations });
 }
+function isPosthogConnected(settings = loadAppSettings()) {
+  return Boolean(settings.integrations.posthogPersonalApiKey?.trim());
+}
 function isAbleTimeConnected(settings = loadAppSettings()) {
   return Boolean(
     settings.integrations.abletimeAccessToken?.trim() || settings.integrations.abletimeRefreshToken?.trim()
@@ -2375,6 +2378,7 @@ export {
   isLinearConnected,
   saveLinearOAuth,
   disconnectLinearConnection,
+  isPosthogConnected,
   isAbleTimeConnected,
   getAbleTimeAccessToken,
   getAbleTimeHost,