@sideboard-ai/core 0.1.294 → 0.1.296

package/dist/mcp/run-stdio.cjs

@@ -776,30 +776,6 @@ var init_system_ca = __esm({
   }
 });
 
-// src/paths/workspace-scratch.ts
-function attachmentsGitignoreBody() {
-  return ATTACHMENTS_GITIGNORE;
-}
-function isWorkspaceScratchPath(relativePath) {
-  const p = relativePath.replace(/\\/g, "/").replace(/^\.\//, "").replace(/\/$/, "");
-  return p === ATTACHMENTS_DIR || p.startsWith(`${ATTACHMENTS_DIR}/`) || p === CLI_DIR || p.startsWith(`${CLI_DIR}/`) || p === LEGACY_ATTACHMENTS_DIR || p.startsWith(`${LEGACY_ATTACHMENTS_DIR}/`) || p === ".sideboard" || p.startsWith(".sideboard/") || p === ".context" || p.startsWith(".context/");
-}
-var ATTACHMENTS_DIR, CLI_DIR, DETACHED_JOBS_DIR, LEGACY_ATTACHMENTS_DIR, LEGACY_DETACHED_JOBS_DIR, ATTACHMENTS_GITIGNORE;
-var init_workspace_scratch = __esm({
-  "src/paths/workspace-scratch.ts"() {
-    "use strict";
-    ATTACHMENTS_DIR = ".context/attachments";
-    CLI_DIR = ".context/cli";
-    DETACHED_JOBS_DIR = ".context/.sideboard/detached-jobs";
-    LEGACY_ATTACHMENTS_DIR = ".sideboard/attachments";
-    LEGACY_DETACHED_JOBS_DIR = ".sideboard/detached-jobs";
-    ATTACHMENTS_GITIGNORE = `# Sideboard / workspace attachments (local only)
-*
-!.gitignore
-`;
-  }
-});
-
 // src/agents/cursor-stream-cutoff.ts
 function looksLikeCursorStreamCutOff(text7) {
   return CURSOR_STREAM_CUTOFF.test(text7.trim());
@@ -1200,6 +1176,30 @@ var init_error_detail = __esm({
   }
 });
 
+// src/paths/workspace-scratch.ts
+function attachmentsGitignoreBody() {
+  return ATTACHMENTS_GITIGNORE;
+}
+function isWorkspaceScratchPath(relativePath) {
+  const p = relativePath.replace(/\\/g, "/").replace(/^\.\//, "").replace(/\/$/, "");
+  return p === ATTACHMENTS_DIR || p.startsWith(`${ATTACHMENTS_DIR}/`) || p === CLI_DIR || p.startsWith(`${CLI_DIR}/`) || p === LEGACY_ATTACHMENTS_DIR || p.startsWith(`${LEGACY_ATTACHMENTS_DIR}/`) || p === ".sideboard" || p.startsWith(".sideboard/") || p === ".context" || p.startsWith(".context/");
+}
+var ATTACHMENTS_DIR, CLI_DIR, DETACHED_JOBS_DIR, LEGACY_ATTACHMENTS_DIR, LEGACY_DETACHED_JOBS_DIR, ATTACHMENTS_GITIGNORE;
+var init_workspace_scratch = __esm({
+  "src/paths/workspace-scratch.ts"() {
+    "use strict";
+    ATTACHMENTS_DIR = ".context/attachments";
+    CLI_DIR = ".context/cli";
+    DETACHED_JOBS_DIR = ".context/.sideboard/detached-jobs";
+    LEGACY_ATTACHMENTS_DIR = ".sideboard/attachments";
+    LEGACY_DETACHED_JOBS_DIR = ".sideboard/detached-jobs";
+    ATTACHMENTS_GITIGNORE = `# Sideboard / workspace attachments (local only)
+*
+!.gitignore
+`;
+  }
+});
+
 // src/agents/message-parts.ts
 function asRecord(input) {
   if (input && typeof input === "object" && !Array.isArray(input)) {
@@ -3460,9 +3460,18 @@ function branchDisplayLabel(branchName, worktreePath) {
   }
   return branchName.trim();
 }
+function taskPurposeTitle(title) {
+  const trimmed = title?.trim() ?? "";
+  if (!trimmed || teamSlugFromName(trimmed)) return null;
+  return trimmed;
+}
 function threadDisplayLabel(thread) {
   if (thread.userSetTitle && thread.title?.trim()) return thread.title.trim();
   if (thread.prTitle?.trim()) return thread.prTitle.trim();
+  if (isPlaceholderBranch(thread.branchName, thread.worktreePath)) {
+    const purpose = taskPurposeTitle(thread.title);
+    if (purpose) return purpose;
+  }
   return branchDisplayLabel(thread.branchName, thread.worktreePath);
 }
 function worktreeDisplayLabel(thread) {
@@ -3480,16 +3489,16 @@ function agentNicknameFromWorktreePath(worktreePath) {
 }
 function worktreeIdentityTitles(thread, parentTitle) {
   const out = [];
-  const push = (value) => {
+  const push2 = (value) => {
     const trimmed = value?.trim();
     if (trimmed) out.push(trimmed);
   };
-  push(parentTitle);
-  push(thread.prTitle);
+  push2(parentTitle);
+  push2(thread.prTitle);
   const branch = thread.branchName?.trim() ?? "";
   const path = thread.worktreePath?.trim() ?? "";
   if (branch && path && branch !== "HEAD" && !isPlaceholderBranch(branch, path)) {
-    push(branch);
+    push2(branch);
   }
   return out;
 }
@@ -3758,14 +3767,14 @@ function legacyRoleLabels(roles, legacyRole) {
   const raw = Array.isArray(roles) ? roles : [];
   const out = [];
   const seen = /* @__PURE__ */ new Set();
-  const push = (value) => {
+  const push2 = (value) => {
     const role = normalizeLegacyRole(typeof value === "string" ? value : "");
     if (!role || seen.has(role) || out.length >= 16) return;
     seen.add(role);
     out.push(legacyRoleLabel(role));
   };
-  for (const item of raw) push(item);
-  if (out.length === 0) push(legacyRole);
+  for (const item of raw) push2(item);
+  if (out.length === 0) push2(legacyRole);
   return out;
 }
 function normalizeProfileNotes(value) {
@@ -7991,20 +8000,20 @@ function isDefaultishSourceRef(ref) {
 }
 function resolvePrSelectors(thread) {
   const out = [];
-  const push = (value) => {
+  const push2 = (value) => {
     const v = value?.trim();
     if (!v || out.includes(v)) return;
     out.push(v);
   };
-  push(thread.prUrl);
+  push2(thread.prUrl);
   if (thread.sourceType === "pr" && thread.sourceRef?.trim()) {
-    push(thread.sourceRef.replace(/^#/, "").trim());
+    push2(thread.sourceRef.replace(/^#/, "").trim());
   }
-  push(thread.branchName);
+  push2(thread.branchName);
   if (thread.sourceType === "branch") {
     const source = normalizeGitBranchName(thread.sourceRef ?? "");
     if (source && !isDefaultishSourceRef(source) && source !== thread.branchName?.trim()) {
-      push(source);
+      push2(source);
     }
   }
   return out;
@@ -8014,13 +8023,13 @@ function resolvePrSelector(thread) {
 }
 function connectedPrSelectors(thread, currentHeadPrUrl) {
   const out = [];
-  const push = (value) => {
+  const push2 = (value) => {
     const v = value?.trim();
     if (!v || out.includes(v)) return;
     out.push(v);
   };
-  push(currentHeadPrUrl);
-  for (const selector of resolvePrSelectors(thread)) push(selector);
+  push2(currentHeadPrUrl);
+  for (const selector of resolvePrSelectors(thread)) push2(selector);
   return out;
 }
 async function getPrForHeadBranch(repoPath, branch) {
@@ -14966,6 +14975,7 @@ async function spawnAgentTurn(thread, input, onEvent) {
   }
   applyManagedAccountEnv(env, thread.agent, resolveAccountForThread(thread, accounts));
   sanitizeAgentHostEnv(env, cmd.cwd);
+  env[SIDEBOARD_THREAD_ID_ENV] = thread.id;
   ensureAgentPath(env);
   applyPromptCacheTtlEnv(thread.agent, env);
   applyAgentRunnerHeapEnv(env);
@@ -15103,6 +15113,7 @@ var init_spawn = __esm({
     init_message_parts();
     init_stdout_replay();
     init_agent_host_env();
+    init_profile();
     init_worktree_pkg_cache();
     init_node_launch();
     init_path();
@@ -18189,6 +18200,37 @@ var init_desktop_host = __esm({
   }
 });
 
+// src/agents/tool-permission.ts
+function setToolPermissionPublisher(next) {
+  publisher = next;
+}
+function denied(message) {
+  return { behavior: "deny", message, decisionClassification: "user_reject" };
+}
+function clearPrompt(threadId, id) {
+  publisher?.clear(threadId, id);
+}
+function denyPendingToolPermissions(threadId) {
+  const q = queues.get(threadId);
+  if (!q?.length) return;
+  const pending = q.splice(0, q.length);
+  queues.delete(threadId);
+  const answer = denied("The turn ended before this was allowed.");
+  for (const item of pending) item.resolve(answer);
+  const last = pending[pending.length - 1];
+  if (last) clearPrompt(threadId, last.id);
+}
+var import_node_crypto10, import_node_path52, queues, publisher;
+var init_tool_permission = __esm({
+  "src/agents/tool-permission.ts"() {
+    "use strict";
+    import_node_crypto10 = require("crypto");
+    import_node_path52 = require("path");
+    queues = /* @__PURE__ */ new Map();
+    publisher = null;
+  }
+});
+
 // src/plan/plan-present.ts
 function asRecord5(v) {
   return v != null && typeof v === "object" && !Array.isArray(v) ? v : null;
@@ -18416,6 +18458,7 @@ function writeAgentBlock(threadId, block) {
   updateThread(threadId, { agentBlock: block });
 }
 function settleAgentBlock(threadId, parts, failed) {
+  denyPendingToolPermissions(threadId);
   const thread = readThread(threadId);
   if (!thread || thread.status === "archived") return;
   const next = agentBlockAfterTurn({
@@ -18467,6 +18510,7 @@ var MAX_AGENT_BLOCK_REASON;
 var init_agent_block = __esm({
   "src/orchestrator/agent-block.ts"() {
     "use strict";
+    init_tool_permission();
     init_ask_user();
     init_plan_present();
     init_thread_store();
@@ -18560,7 +18604,7 @@ function isUnclaimedSteerRequest(req) {
 }
 function nextSteerRequest(existing) {
   if (existing?.requestId && !existing.claimedAt) return existing;
-  return { requestId: (0, import_node_crypto10.randomUUID)(), requestedAt: (/* @__PURE__ */ new Date()).toISOString() };
+  return { requestId: (0, import_node_crypto11.randomUUID)(), requestedAt: (/* @__PURE__ */ new Date()).toISOString() };
 }
 function claimSteerRequest(threadId) {
   const pending = readThread(threadId)?.steerRequest;
@@ -18569,11 +18613,11 @@ function claimSteerRequest(threadId) {
     steerRequest: { ...pending, claimedAt: (/* @__PURE__ */ new Date()).toISOString() }
   });
 }
-var import_node_crypto10;
+var import_node_crypto11;
 var init_steer_request = __esm({
   "src/orchestrator/steer-request.ts"() {
     "use strict";
-    import_node_crypto10 = require("crypto");
+    import_node_crypto11 = require("crypto");
     init_thread_store();
   }
 });
@@ -18612,7 +18656,6 @@ var init_title = __esm({
 // src/threads/agent-purpose-title.ts
 function agentPurposeStamp(input) {
   if (input.autoContinue) return null;
-  if (input.thread.sourceType === "orchestration") return null;
   if (input.thread.title.trim() === REVIEW_TAB_TITLE) return null;
   const identities = worktreeIdentityTitles(input.thread);
   const titled = input.thread.title?.trim() || "";
@@ -19343,8 +19386,8 @@ function resolveAbleTimeOAuthHost(requested, saved) {
   return fromSaved || void 0;
 }
 function createAbleTimePkce() {
-  const verifier = (0, import_node_crypto11.randomBytes)(32).toString("base64url");
-  const challenge = (0, import_node_crypto11.createHash)("sha256").update(verifier).digest("base64url");
+  const verifier = (0, import_node_crypto12.randomBytes)(32).toString("base64url");
+  const challenge = (0, import_node_crypto12.createHash)("sha256").update(verifier).digest("base64url");
   return { verifier, challenge };
 }
 function ableTimeOAuthAuthorizeUrl(clientId, state, codeChallenge, host) {
@@ -19449,7 +19492,7 @@ async function startAbleTimeOAuth(opts) {
     opts?.host,
     loadAppSettings().integrations.abletimeHost
   );
-  const state = (0, import_node_crypto11.randomBytes)(16).toString("hex");
+  const state = (0, import_node_crypto12.randomBytes)(16).toString("hex");
   const pkce = createAbleTimePkce();
   const authorizeUrl = ableTimeOAuthAuthorizeUrl(clientId, state, pkce.challenge, host);
   const timeoutMs = opts?.timeoutMs ?? 5 * 6e4;
@@ -19549,11 +19592,11 @@ async function startAbleTimeOAuth(opts) {
     return loadAppSettings();
   }
 }
-var import_node_crypto11, import_node_http, ABLETIME_OAUTH_CALLBACK_PATH, ABLETIME_OAUTH_PORT, ABLETIME_OAUTH_LOCAL_CALLBACK, ABLETIME_OAUTH_REDIRECT, BOUNCE_QUERY_KEYS, BAKED_ABLETIME_OAUTH_CLIENT_ID, ABLETIME_OAUTH_RESOURCE, REFRESH_SKEW_MS2, refreshInFlight2, ABLETIME_OAUTH_CANCELLED, AbleTimeOAuthCancelledError;
+var import_node_crypto12, import_node_http, ABLETIME_OAUTH_CALLBACK_PATH, ABLETIME_OAUTH_PORT, ABLETIME_OAUTH_LOCAL_CALLBACK, ABLETIME_OAUTH_REDIRECT, BOUNCE_QUERY_KEYS, BAKED_ABLETIME_OAUTH_CLIENT_ID, ABLETIME_OAUTH_RESOURCE, REFRESH_SKEW_MS2, refreshInFlight2, ABLETIME_OAUTH_CANCELLED, AbleTimeOAuthCancelledError;
 var init_abletime_oauth = __esm({
   "src/integrations/abletime-oauth.ts"() {
     "use strict";
-    import_node_crypto11 = require("crypto");
+    import_node_crypto12 = require("crypto");
     import_node_http = require("http");
     init_fetch();
     init_app_settings();
@@ -20250,9 +20293,9 @@ function issueAttachmentWorktreePath(repoPath) {
   return raw || process.cwd();
 }
 function ensureIssueAttachmentsDir(worktreePath) {
-  const dir = (0, import_node_path52.join)(worktreePath, ATTACHMENTS_DIR);
+  const dir = (0, import_node_path53.join)(worktreePath, ATTACHMENTS_DIR);
   (0, import_node_fs52.mkdirSync)(dir, { recursive: true });
-  const gi = (0, import_node_path52.join)(dir, ".gitignore");
+  const gi = (0, import_node_path53.join)(dir, ".gitignore");
   if (!(0, import_node_fs52.existsSync)(gi)) {
     (0, import_node_fs52.writeFileSync)(gi, attachmentsGitignoreBody(), "utf8");
   }
@@ -20284,7 +20327,7 @@ function looksLikeFileUrl(url) {
 function filenameFromUrl(url, fallback = "attachment") {
   try {
     const parsed = new URL(url);
-    const last = decodeURIComponent((0, import_node_path52.basename)(parsed.pathname)).replace(/[/\\]/g, "_");
+    const last = decodeURIComponent((0, import_node_path53.basename)(parsed.pathname)).replace(/[/\\]/g, "_");
     if (last && last !== "/" && last !== ".") return last;
   } catch {
   }
@@ -20306,21 +20349,21 @@ function filenameFromContentDisposition(header) {
 }
 function uniqueAttachmentFileName(dir, originalName) {
   const safe = originalName.replace(/[/\\]/g, "_").replace(/^\.+/, "") || "file";
-  if (!(0, import_node_fs52.existsSync)((0, import_node_path52.join)(dir, safe))) return safe;
-  const ext = (0, import_node_path52.extname)(safe);
+  if (!(0, import_node_fs52.existsSync)((0, import_node_path53.join)(dir, safe))) return safe;
+  const ext = (0, import_node_path53.extname)(safe);
   const stem = ext ? safe.slice(0, -ext.length) : safe;
   for (let i = 1; i < 1e4; i++) {
     const candidate = `${stem}-${i}${ext}`;
-    if (!(0, import_node_fs52.existsSync)((0, import_node_path52.join)(dir, candidate))) return candidate;
+    if (!(0, import_node_fs52.existsSync)((0, import_node_path53.join)(dir, candidate))) return candidate;
   }
-  return `${stem}-${(0, import_node_crypto12.randomUUID)()}${ext}`;
+  return `${stem}-${(0, import_node_crypto13.randomUUID)()}${ext}`;
 }
 function extractHttpUrls(markdown) {
   const text7 = markdown ?? "";
   if (!text7.trim()) return [];
   const found = [];
   const seen = /* @__PURE__ */ new Set();
-  const push = (raw) => {
+  const push2 = (raw) => {
     const url = raw.replace(/[).,;]+$/, "");
     if (!looksLikeHttpUrl(url) || seen.has(url)) return;
     seen.add(url);
@@ -20330,8 +20373,8 @@ function extractHttpUrls(markdown) {
     re.lastIndex = 0;
     let match;
     while (match = re.exec(text7)) {
-      if (match[1]) push(match[1]);
-      else if (re === BARE_URL_RE) push(match[0]);
+      if (match[1]) push2(match[1]);
+      else if (re === BARE_URL_RE) push2(match[0]);
     }
   }
   return found;
@@ -20359,7 +20402,7 @@ function mergeIssueAttachments(items) {
   return out;
 }
 function extensionForContentType(contentType, name) {
-  if ((0, import_node_path52.extname)(name)) return name;
+  if ((0, import_node_path53.extname)(name)) return name;
   const mime = (contentType ?? "").split(";")[0]?.trim().toLowerCase() ?? "";
   const ext = EXT_BY_MIME[mime];
   return ext ? `${name}${ext}` : name;
@@ -20411,7 +20454,7 @@ async function downloadAuthenticatedFile(opts) {
   const dir = ensureIssueAttachmentsDir(opts.worktreePath);
   const hinted = opts.name?.trim() || filenameFromContentDisposition(res.headers.get("content-disposition")) || filenameFromUrl(url);
   const name = uniqueAttachmentFileName(dir, extensionForContentType(contentType, hinted));
-  (0, import_node_fs52.writeFileSync)((0, import_node_path52.join)(dir, name), buf);
+  (0, import_node_fs52.writeFileSync)((0, import_node_path53.join)(dir, name), buf);
   return {
     name,
     path: `${ATTACHMENTS_DIR}/${name}`,
@@ -20419,13 +20462,13 @@ async function downloadAuthenticatedFile(opts) {
     ...contentType ? { contentType } : {}
   };
 }
-var import_node_fs52, import_node_path52, import_node_crypto12, ISSUE_ATTACHMENT_MAX_BYTES, MARKDOWN_IMAGE_RE, MARKDOWN_LINK_RE, HTML_SRC_RE, BARE_URL_RE, EXT_BY_MIME;
+var import_node_fs52, import_node_path53, import_node_crypto13, ISSUE_ATTACHMENT_MAX_BYTES, MARKDOWN_IMAGE_RE, MARKDOWN_LINK_RE, HTML_SRC_RE, BARE_URL_RE, EXT_BY_MIME;
 var init_issue_attachments = __esm({
   "src/integrations/issue-attachments.ts"() {
     "use strict";
     import_node_fs52 = require("fs");
-    import_node_path52 = require("path");
-    import_node_crypto12 = require("crypto");
+    import_node_path53 = require("path");
+    import_node_crypto13 = require("crypto");
     init_fetch();
     init_workspace_scratch();
     ISSUE_ATTACHMENT_MAX_BYTES = 25 * 1024 * 1024;
@@ -21409,7 +21452,7 @@ function createLineCoalescer(onChunk, opts) {
     buffer = [];
     onChunk(chunk);
   };
-  const push = (line) => {
+  const push2 = (line) => {
     buffer.push(line);
     if (buffer.length >= maxLines) {
       flush2();
@@ -21417,7 +21460,7 @@ function createLineCoalescer(onChunk, opts) {
     }
     if (!timer) timer = setTimeout(flush2, delayMs);
   };
-  return { push, flush: flush2 };
+  return { push: push2, flush: flush2 };
 }
 var init_line_coalescer = __esm({
   "src/util/line-coalescer.ts"() {
@@ -21752,7 +21795,7 @@ function buildQuotaHandoffAttachment(from, limitText, fallbackAgent) {
     ...instructions
   ].join("\n");
   return {
-    id: (0, import_node_crypto13.randomUUID)(),
+    id: (0, import_node_crypto14.randomUUID)(),
     name: orch ? "Orchestration quota handoff.md" : "Quota handoff.md",
     kind: "transcript",
     content: body
@@ -21784,11 +21827,11 @@ function createQuotaFailoverChat(from, fallbackAgent, limitText, opts) {
   }
   return updateThread(tab.id, patch);
 }
-var import_node_crypto13, QUOTA_CONTINUE_PROMPT, QUOTA_CONTINUE_ACCOUNT_PROMPT, QUOTA_RESUME_PROMPT;
+var import_node_crypto14, QUOTA_CONTINUE_PROMPT, QUOTA_CONTINUE_ACCOUNT_PROMPT, QUOTA_RESUME_PROMPT;
 var init_quota_failover = __esm({
   "src/orchestrator/quota-failover.ts"() {
     "use strict";
-    import_node_crypto13 = require("crypto");
+    import_node_crypto14 = require("crypto");
     init_session_quota();
     init_app_settings();
     init_managed_accounts();
@@ -21810,7 +21853,7 @@ var init_quota_failover = __esm({
 // src/threads/adopt.ts
 function thisModuleFile2() {
   const cjsFile = typeof __filename !== "undefined" ? __filename : "";
-  return cjsFile || process.argv[1] || (0, import_node_path53.join)(process.cwd(), "package.json");
+  return cjsFile || process.argv[1] || (0, import_node_path54.join)(process.cwd(), "package.json");
 }
 function openReadonlySqlite(file) {
   const req = (0, import_node_module6.createRequire)(thisModuleFile2());
@@ -21838,7 +21881,7 @@ function resolveConductorCursorAgentId(workspacePath) {
     return null;
   }
   for (const hash of hashes) {
-    const agentsFile = (0, import_node_path53.join)(CURSOR_SDK_STORE, hash, "agents.ndjson");
+    const agentsFile = (0, import_node_path54.join)(CURSOR_SDK_STORE, hash, "agents.ndjson");
     if (!(0, import_node_fs55.existsSync)(agentsFile)) continue;
     let text7;
     try {
@@ -21895,8 +21938,8 @@ function listConductorWorkspaces() {
   if (!(0, import_node_fs55.existsSync)(CONDUCTOR_DB)) {
     throw new Error(`Conductor DB not found at ${CONDUCTOR_DB}`);
   }
-  const tmp = (0, import_node_fs55.mkdtempSync)((0, import_node_path53.join)((0, import_node_os16.tmpdir)(), "sideboard-conductor-"));
-  const snapshot = (0, import_node_path53.join)(tmp, "conductor.db");
+  const tmp = (0, import_node_fs55.mkdtempSync)((0, import_node_path54.join)((0, import_node_os16.tmpdir)(), "sideboard-conductor-"));
+  const snapshot = (0, import_node_path54.join)(tmp, "conductor.db");
   try {
     (0, import_node_fs55.copyFileSync)(CONDUCTOR_DB, snapshot);
     for (const suffix of ["-wal", "-shm"]) {
@@ -21986,8 +22029,8 @@ function importConductorWorkspace(workspaceId) {
   if (!(0, import_node_fs55.existsSync)(CONDUCTOR_DB)) {
     throw new Error(`Conductor DB not found at ${CONDUCTOR_DB}`);
   }
-  const tmp = (0, import_node_fs55.mkdtempSync)((0, import_node_path53.join)((0, import_node_os16.tmpdir)(), "sideboard-conductor-"));
-  const snapshot = (0, import_node_path53.join)(tmp, "conductor.db");
+  const tmp = (0, import_node_fs55.mkdtempSync)((0, import_node_path54.join)((0, import_node_os16.tmpdir)(), "sideboard-conductor-"));
+  const snapshot = (0, import_node_path54.join)(tmp, "conductor.db");
   try {
     (0, import_node_fs55.copyFileSync)(CONDUCTOR_DB, snapshot);
     for (const suffix of ["-wal", "-shm"]) {
@@ -22081,25 +22124,25 @@ function importConductorWorkspace(workspaceId) {
 async function importConductorWorkspaceAsync(workspaceId) {
   return importConductorWorkspace(workspaceId);
 }
-var import_node_child_process5, import_node_fs55, import_node_os16, import_node_path53, import_node_module6, CONDUCTOR_APP_SUPPORT, CONDUCTOR_DB, CURSOR_SDK_STORE;
+var import_node_child_process5, import_node_fs55, import_node_os16, import_node_path54, import_node_module6, CONDUCTOR_APP_SUPPORT, CONDUCTOR_DB, CURSOR_SDK_STORE;
 var init_adopt = __esm({
   "src/threads/adopt.ts"() {
     "use strict";
     import_node_child_process5 = require("child_process");
     import_node_fs55 = require("fs");
     import_node_os16 = require("os");
-    import_node_path53 = require("path");
+    import_node_path54 = require("path");
     import_node_module6 = require("module");
     init_worktree();
     init_thread_store();
-    CONDUCTOR_APP_SUPPORT = (0, import_node_path53.join)(
+    CONDUCTOR_APP_SUPPORT = (0, import_node_path54.join)(
       process.env.HOME ?? "",
       "Library",
       "Application Support",
       "com.conductor.app"
     );
-    CONDUCTOR_DB = (0, import_node_path53.join)(CONDUCTOR_APP_SUPPORT, "conductor.db");
-    CURSOR_SDK_STORE = (0, import_node_path53.join)(CONDUCTOR_APP_SUPPORT, "cursor-sdk-store");
+    CONDUCTOR_DB = (0, import_node_path54.join)(CONDUCTOR_APP_SUPPORT, "conductor.db");
+    CURSOR_SDK_STORE = (0, import_node_path54.join)(CONDUCTOR_APP_SUPPORT, "cursor-sdk-store");
   }
 });
 
@@ -22544,7 +22587,7 @@ new file mode 100644
   };
 }
 async function untrackedPatch(worktreePath, path, maxHunk) {
-  const abs = (0, import_node_path54.join)(worktreePath, path);
+  const abs = (0, import_node_path55.join)(worktreePath, path);
   try {
     const st = (0, import_node_fs57.statSync)(abs);
     if (st.isFile() && st.size > maxHunk) {
@@ -23015,7 +23058,7 @@ async function getDiff(worktreePath, repoPath, opts) {
 }
 function statWorktreePath(worktreePath, relativePath) {
   assertSafeRelativePath(relativePath);
-  const abs = (0, import_node_path54.join)(worktreePath, relativePath);
+  const abs = (0, import_node_path55.join)(worktreePath, relativePath);
   if (!(0, import_node_fs57.existsSync)(abs)) return "missing";
   const st = (0, import_node_fs57.statSync)(abs);
   if (st.isDirectory()) return "dir";
@@ -23046,7 +23089,7 @@ function isImageRelativePath(relativePath) {
 function readWorktreeFileForUpload(worktreePath, relativePath, opts) {
   assertSafeRelativePath(relativePath);
   const maxBytes = opts?.maxBytes ?? DEFAULT_UPLOAD_MAX_BYTES;
-  const abs = (0, import_node_path54.join)(worktreePath, relativePath);
+  const abs = (0, import_node_path55.join)(worktreePath, relativePath);
   const st = (0, import_node_fs57.statSync)(abs);
   if (!st.isFile()) {
     throw new Error(`Not a file: ${relativePath}`);
@@ -23066,7 +23109,7 @@ function readWorktreeFileForUpload(worktreePath, relativePath, opts) {
 function readWorktreeFile(worktreePath, relativePath, opts) {
   assertSafeRelativePath(relativePath);
   const maxBytes = opts?.maxBytes ?? 2e5;
-  const abs = (0, import_node_path54.join)(worktreePath, relativePath);
+  const abs = (0, import_node_path55.join)(worktreePath, relativePath);
   const st = (0, import_node_fs57.statSync)(abs);
   if (!st.isFile()) {
     throw new Error(`Not a file: ${relativePath}`);
@@ -23114,8 +23157,8 @@ function assertSafeRelativePath(relativePath) {
 }
 function writeWorktreeFile(worktreePath, relativePath, content) {
   assertSafeRelativePath(relativePath);
-  const abs = (0, import_node_path54.join)(worktreePath, relativePath);
-  (0, import_node_fs57.mkdirSync)((0, import_node_path54.dirname)(abs), { recursive: true });
+  const abs = (0, import_node_path55.join)(worktreePath, relativePath);
+  (0, import_node_fs57.mkdirSync)((0, import_node_path55.dirname)(abs), { recursive: true });
   (0, import_node_fs57.writeFileSync)(abs, content, "utf8");
   return { path: relativePath };
 }
@@ -23156,12 +23199,12 @@ async function getDiffSummary(worktreePath, repoPath, opts) {
     truncated: full.files.length > maxFiles
   };
 }
-var import_node_fs57, import_node_path54, mergeBaseCache, MERGE_BASE_TTL_MS, SHA_RE, IMAGE_EXTENSIONS2, DEFAULT_UPLOAD_MAX_BYTES;
+var import_node_fs57, import_node_path55, mergeBaseCache, MERGE_BASE_TTL_MS, SHA_RE, IMAGE_EXTENSIONS2, DEFAULT_UPLOAD_MAX_BYTES;
 var init_diff = __esm({
   "src/diff/diff.ts"() {
     "use strict";
     import_node_fs57 = require("fs");
-    import_node_path54 = require("path");
+    import_node_path55 = require("path");
     init_run();
     init_worktree();
     mergeBaseCache = /* @__PURE__ */ new Map();
@@ -23383,7 +23426,7 @@ function readWorktreeFileTail(worktreePath, relativePath, maxBytes = WORKTREE_TA
   if (!relativePath || relativePath.includes("..") || relativePath.startsWith("/")) {
     throw new Error("Invalid path");
   }
-  const abs = (0, import_node_path55.join)(worktreePath, relativePath);
+  const abs = (0, import_node_path56.join)(worktreePath, relativePath);
   const fd = (0, import_node_fs58.openSync)(abs, "r");
   try {
     const st = (0, import_node_fs58.fstatSync)(fd);
@@ -23413,12 +23456,12 @@ function readWorktreeFileTail(worktreePath, relativePath, maxBytes = WORKTREE_TA
     (0, import_node_fs58.closeSync)(fd);
   }
 }
-var import_node_fs58, import_node_path55, WORKTREE_TAIL_BYTES;
+var import_node_fs58, import_node_path56, WORKTREE_TAIL_BYTES;
 var init_read_worktree_tail = __esm({
   "src/diff/read-worktree-tail.ts"() {
     "use strict";
     import_node_fs58 = require("fs");
-    import_node_path55 = require("path");
+    import_node_path56 = require("path");
     WORKTREE_TAIL_BYTES = 2e5;
   }
 });
@@ -23595,7 +23638,7 @@ function scanSkillsDir(dir, source, out) {
   }
   for (const entry of entries) {
     if (entry.startsWith(".")) continue;
-    const skillMd = (0, import_node_path56.join)(dir, entry, "SKILL.md");
+    const skillMd = (0, import_node_path57.join)(dir, entry, "SKILL.md");
     if (!(0, import_node_fs59.existsSync)(skillMd)) continue;
     try {
       if (!(0, import_node_fs59.statSync)(skillMd).isFile()) continue;
@@ -23617,12 +23660,12 @@ function scanClaudePluginSkills(pluginsRoot, out) {
       return;
     }
     if (lookingForSkillsDir && entries.includes("SKILL.md")) {
-      const skill = readSkill((0, import_node_path56.join)(dir, "SKILL.md"), "cli");
+      const skill = readSkill((0, import_node_path57.join)(dir, "SKILL.md"), "cli");
       if (skill) out.push(skill);
     }
     for (const entry of entries) {
       if (entry === "node_modules" || entry === ".git") continue;
-      const full = (0, import_node_path56.join)(dir, entry);
+      const full = (0, import_node_path57.join)(dir, entry);
       try {
         if (!(0, import_node_fs59.statSync)(full).isDirectory()) continue;
       } catch {
@@ -23642,17 +23685,17 @@ function discoverSkills(worktreePath) {
   const home = (0, import_node_os17.homedir)();
   const collected = [];
   for (const rel of [".claude/skills", ".cursor/skills", ".sideboard/skills", ".brightsy/skills", "skills"]) {
-    scanSkillsDir((0, import_node_path56.join)(worktreePath, rel), "workspace", collected);
+    scanSkillsDir((0, import_node_path57.join)(worktreePath, rel), "workspace", collected);
   }
   for (const abs of [
-    (0, import_node_path56.join)(home, ".claude/skills"),
-    (0, import_node_path56.join)(home, ".cursor/skills"),
-    (0, import_node_path56.join)(home, ".sideboard/skills"),
-    (0, import_node_path56.join)(home, ".brightsy/skills")
+    (0, import_node_path57.join)(home, ".claude/skills"),
+    (0, import_node_path57.join)(home, ".cursor/skills"),
+    (0, import_node_path57.join)(home, ".sideboard/skills"),
+    (0, import_node_path57.join)(home, ".brightsy/skills")
   ]) {
     scanSkillsDir(abs, "user", collected);
   }
-  scanClaudePluginSkills((0, import_node_path56.join)(home, ".claude/plugins"), collected);
+  scanClaudePluginSkills((0, import_node_path57.join)(home, ".claude/plugins"), collected);
   collected.push(...bundledSkills());
   const rank = {
     workspace: 0,
@@ -23692,13 +23735,13 @@ function readSkillBody(skillPath, maxChars = 12e3) {
 
 \u2026(truncated)` : raw;
 }
-var import_node_fs59, import_node_os17, import_node_path56, BUNDLED_SKILL_PREFIX;
+var import_node_fs59, import_node_os17, import_node_path57, BUNDLED_SKILL_PREFIX;
 var init_discover = __esm({
   "src/skills/discover.ts"() {
     "use strict";
     import_node_fs59 = require("fs");
     import_node_os17 = require("os");
-    import_node_path56 = require("path");
+    import_node_path57 = require("path");
     init_long_running();
     BUNDLED_SKILL_PREFIX = "bundled:";
   }
@@ -23853,7 +23896,7 @@ function compiledModuleDir() {
   try {
     const url = import_meta5.url;
     if (typeof url === "string" && url.length > 0) {
-      return (0, import_node_path57.dirname)((0, import_node_url5.fileURLToPath)(url));
+      return (0, import_node_path58.dirname)((0, import_node_url5.fileURLToPath)(url));
     }
   } catch {
   }
@@ -23861,7 +23904,7 @@ function compiledModuleDir() {
 }
 function detachedJobScriptIn(dir) {
   for (const name of DETACHED_JOB_FILENAMES) {
-    const script = (0, import_node_path57.join)(dir, "scripts", name);
+    const script = (0, import_node_path58.join)(dir, "scripts", name);
     if ((0, import_node_fs60.existsSync)(script)) return script;
   }
   return null;
@@ -23879,7 +23922,7 @@ function resolveDetachedJobScript() {
   for (let i = 0; i < 8; i++) {
     const candidate = detachedJobScriptIn(dir);
     if (candidate) return candidate;
-    const parent = (0, import_node_path57.dirname)(dir);
+    const parent = (0, import_node_path58.dirname)(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -23890,12 +23933,12 @@ function formatDetachedJobInvoke(scriptPath) {
   if (resolved) return `node ${JSON.stringify(resolved)}`;
   return "node scripts/detached-job.cjs";
 }
-var import_node_fs60, import_node_path57, import_node_url5, import_meta5, DETACHED_JOB_FILENAMES;
+var import_node_fs60, import_node_path58, import_node_url5, import_meta5, DETACHED_JOB_FILENAMES;
 var init_detached_job_path = __esm({
   "src/skills/detached-job-path.ts"() {
     "use strict";
     import_node_fs60 = require("fs");
-    import_node_path57 = require("path");
+    import_node_path58 = require("path");
     import_node_url5 = require("url");
     init_packaged_runtime();
     import_meta5 = {};
@@ -24092,9 +24135,9 @@ function formatPrGateDirective() {
 }
 function formatProcessGuideDirective(opts) {
   const worktree = opts?.worktreePath?.trim();
-  const hasGraphSkill = !!worktree && (0, import_node_fs61.existsSync)((0, import_node_path58.join)(worktree, ".claude/skills/graph-engineering/SKILL.md"));
-  const hasReviewSkill = !!worktree && (0, import_node_fs61.existsSync)((0, import_node_path58.join)(worktree, ".claude/skills/review/SKILL.md"));
-  const hasInstallSkill = !!worktree && (0, import_node_fs61.existsSync)((0, import_node_path58.join)(worktree, ".claude/skills/worktree-install/SKILL.md"));
+  const hasGraphSkill = !!worktree && (0, import_node_fs61.existsSync)((0, import_node_path59.join)(worktree, ".claude/skills/graph-engineering/SKILL.md"));
+  const hasReviewSkill = !!worktree && (0, import_node_fs61.existsSync)((0, import_node_path59.join)(worktree, ".claude/skills/review/SKILL.md"));
+  const hasInstallSkill = !!worktree && (0, import_node_fs61.existsSync)((0, import_node_path59.join)(worktree, ".claude/skills/worktree-install/SKILL.md"));
   return [
     "Process guides (recurring work only):",
     hasGraphSkill ? "- Migrations, ports, batch fixes, and other fan-out: follow `.claude/skills/graph-engineering/SKILL.md` (`/graph-engineering`). Judge first; state on disk; grow the rulebook; do not patch around it." : null,
@@ -24134,12 +24177,12 @@ function formatArtifactDirective() {
 function formatUiReminder() {
   return "Sideboard UI: markdown table is enough to read data; present_schema if they ask to edit/filter (even after markdown); present_files for the file manager. html fence or present_artifact, not both for the same document. type=log appends (same artifact_id, new lines only). Chat links: `[name](sideboard://artifact/<id-or-title>)` opens that pane; `[name](sideboard://file/path#L12-L40)` opens a file. ask_user only for a real multiple-choice (not hellos, \u201Cwhat next?\u201D, or after a review) \u2014 reply in chat. ask_user wakes the parent orchestrator; notify_orchestrator if blocked without a picker. Do not say artifacts/CMS UI are unavailable. Dev / preview: run_dev_script (same as the Dev button; pass name \u2014 several scripts can run at once) returns {url, port, preview} (SIDEBOARD_PORT \u2014 never guess :3000). preview=url \u2192 open url; preview=window \u2192 Electron window is the app, url is renderer/HMR only. list_run_scripts active[].url if already running; get_run_log for that script\u2019s Run-tab terminal; stop_dev_script to stop one.";
 }
-var import_node_fs61, import_node_path58, PR_GOAL_RE, GITHUB_TICKET_REF, KEYED_TICKET_REF;
+var import_node_fs61, import_node_path59, PR_GOAL_RE, GITHUB_TICKET_REF, KEYED_TICKET_REF;
 var init_instructions = __esm({
   "src/agents/instructions.ts"() {
     "use strict";
     import_node_fs61 = require("fs");
-    import_node_path58 = require("path");
+    import_node_path59 = require("path");
     init_git_auth_mode();
     init_branch_prefix();
     init_worktree_labels();
@@ -24878,13 +24921,13 @@ __export(plan_file_exports, {
   writePlanFile: () => writePlanFile
 });
 function ensureAttachmentsGitignore(worktreePath) {
-  const gitignoreAbs = (0, import_node_path59.join)(worktreePath, ATTACHMENTS_DIR, ".gitignore");
+  const gitignoreAbs = (0, import_node_path60.join)(worktreePath, ATTACHMENTS_DIR, ".gitignore");
   if ((0, import_node_fs62.existsSync)(gitignoreAbs)) return;
-  (0, import_node_fs62.mkdirSync)((0, import_node_path59.dirname)(gitignoreAbs), { recursive: true });
+  (0, import_node_fs62.mkdirSync)((0, import_node_path60.dirname)(gitignoreAbs), { recursive: true });
   (0, import_node_fs62.writeFileSync)(gitignoreAbs, attachmentsGitignoreBody(), "utf8");
 }
 function planFileAbs(worktreePath) {
-  return (0, import_node_path59.join)(worktreePath, PLAN_FILE_REL);
+  return (0, import_node_path60.join)(worktreePath, PLAN_FILE_REL);
 }
 function readTextIfPresent2(abs) {
   if (!(0, import_node_fs62.existsSync)(abs)) return null;
@@ -24896,22 +24939,22 @@ function readTextIfPresent2(abs) {
   }
 }
 function readPlanFile(worktreePath) {
-  return readTextIfPresent2(planFileAbs(worktreePath)) ?? readTextIfPresent2((0, import_node_path59.join)(worktreePath, `${LEGACY_ATTACHMENTS_DIR}/plan.md`)) ?? readTextIfPresent2((0, import_node_path59.join)(worktreePath, LEGACY_PLAN_FILE_REL));
+  return readTextIfPresent2(planFileAbs(worktreePath)) ?? readTextIfPresent2((0, import_node_path60.join)(worktreePath, `${LEGACY_ATTACHMENTS_DIR}/plan.md`)) ?? readTextIfPresent2((0, import_node_path60.join)(worktreePath, LEGACY_PLAN_FILE_REL));
 }
 function writePlanFile(worktreePath, content) {
   ensureAttachmentsGitignore(worktreePath);
   const abs = planFileAbs(worktreePath);
-  (0, import_node_fs62.mkdirSync)((0, import_node_path59.dirname)(abs), { recursive: true });
+  (0, import_node_fs62.mkdirSync)((0, import_node_path60.dirname)(abs), { recursive: true });
   const body = content.trimEnd() + (content.endsWith("\n") ? "" : "\n");
   (0, import_node_fs62.writeFileSync)(abs, body, "utf8");
   return PLAN_FILE_REL;
 }
-var import_node_fs62, import_node_path59;
+var import_node_fs62, import_node_path60;
 var init_plan_file = __esm({
   "src/plan/plan-file.ts"() {
     "use strict";
     import_node_fs62 = require("fs");
-    import_node_path59 = require("path");
+    import_node_path60 = require("path");
     init_workspace_scratch();
     init_plan_present();
     init_plan_present();
@@ -24960,7 +25003,7 @@ function setCaffeinateHoldHooks(next) {
   hooks = next;
 }
 function caffeinateHoldPath() {
-  return (0, import_node_path60.join)(appDataDir(), "caffeinate-hold.json");
+  return (0, import_node_path61.join)(appDataDir(), "caffeinate-hold.json");
 }
 function processAlive(pid) {
   if (hooks.processAlive) return hooks.processAlive(pid);
@@ -25103,13 +25146,13 @@ function releaseCaffeinateHoldForThread(threadId) {
   }
   return setCaffeinateHold(false, { threadId: id });
 }
-var import_node_child_process6, import_node_fs63, import_node_path60, hooks;
+var import_node_child_process6, import_node_fs63, import_node_path61, hooks;
 var init_caffeinate_hold = __esm({
   "src/store/caffeinate-hold.ts"() {
     "use strict";
     import_node_child_process6 = require("child_process");
     import_node_fs63 = require("fs");
-    import_node_path60 = require("path");
+    import_node_path61 = require("path");
     init_paths();
     init_private_file();
     hooks = {};
@@ -25118,7 +25161,7 @@ var init_caffeinate_hold = __esm({
 
 // src/store/schedules.ts
 function schedulesPath() {
-  return (0, import_node_path61.join)(appDataDir(), "schedules.json");
+  return (0, import_node_path62.join)(appDataDir(), "schedules.json");
 }
 function parseDurationMs(every) {
   const m = every.trim().match(DURATION_RE);
@@ -25245,7 +25288,7 @@ function buildTask(input, now) {
   const ts = nowIso2(now);
   const agent = input.agent ? coerceOrchestratorAgent(input.agent) : null;
   return {
-    id: (0, import_node_crypto14.randomUUID)(),
+    id: (0, import_node_crypto15.randomUUID)(),
     name: input.name?.trim() || defaultScheduleName(prompt),
     prompt,
     enabled: input.enabled !== false,
@@ -25345,13 +25388,13 @@ function recordScheduleRun(id, result) {
   writeAll2(rows);
   return next;
 }
-var import_node_crypto14, import_node_fs64, import_node_path61, import_croner, DURATION_RE, UNIT_MS;
+var import_node_crypto15, import_node_fs64, import_node_path62, import_croner, DURATION_RE, UNIT_MS;
 var init_schedules = __esm({
   "src/store/schedules.ts"() {
     "use strict";
-    import_node_crypto14 = require("crypto");
+    import_node_crypto15 = require("crypto");
     import_node_fs64 = require("fs");
-    import_node_path61 = require("path");
+    import_node_path62 = require("path");
     import_croner = require("croner");
     init_orchestrator_capable();
     init_paths();
@@ -25655,7 +25698,7 @@ async function startOrchestration(opts) {
   }
   return updated;
 }
-var import_node_events, import_node_crypto15, import_node_fs66, LIVE_TURN_SPAWN_GRACE_MS, RUN_SCRIPT_DESKTOP_ADOPT_MS, STALE_AGENT_PID_WAIT_MS, LIGHT_RECONCILE_THROTTLE_MS, Orchestrator, singleton;
+var import_node_events, import_node_crypto16, import_node_fs66, LIVE_TURN_SPAWN_GRACE_MS, RUN_SCRIPT_DESKTOP_ADOPT_MS, STALE_AGENT_PID_WAIT_MS, LIGHT_RECONCILE_THROTTLE_MS, Orchestrator, singleton;
 var init_orchestrator = __esm({
   "src/orchestrator/orchestrator.ts"() {
     "use strict";
@@ -25663,7 +25706,7 @@ var init_orchestrator = __esm({
     init_injected_notices();
     init_task_state();
     init_wait_for_turn();
-    import_node_crypto15 = require("crypto");
+    import_node_crypto16 = require("crypto");
     import_node_fs66 = require("fs");
     init_error_detail();
     init_run();
@@ -27312,7 +27355,7 @@ ${formatEnvReminder(projectNameForRepoPath(thread.repoPath || thread.worktreePat
         const request = sameIntent ? pending : {
           op,
           scriptName: scriptName ?? null,
-          requestId: (0, import_node_crypto15.randomUUID)(),
+          requestId: (0, import_node_crypto16.randomUUID)(),
           requestedAt: (/* @__PURE__ */ new Date()).toISOString()
         };
         if (!sameIntent) {
@@ -28440,6 +28483,10 @@ var import_stdio = require("@modelcontextprotocol/sdk/server/stdio.js");
 // src/mcp/wrap-mcp-tools.ts
 var import_mcp = require("@modelcontextprotocol/sdk/server/mcp.js");
 
+// src/agents/cursor-tool-guard.ts
+init_error_detail();
+init_cursor_stream_cutoff();
+
 // src/agents/tool-result-clip.ts
 var import_node_fs7 = require("fs");
 var import_node_path8 = require("path");
@@ -28488,11 +28535,30 @@ function clipMcpToolResult(result, cwd) {
   };
 }
 
+// src/agents/cursor-tool-guard.ts
+var CURSOR_TOOL_RECOVERY_HINT = "Continue with a smaller request. If you were reading a large file or API payload, pass offset and limit or write the output to .context/cli/ and read a slice. Do not retry the same call.";
+function cursorToolErrorText(err) {
+  const raw = formatUnknownDetail(err).replace(/\s+/g, " ").trim();
+  const message = looksLikeHugeToolResultDump(raw) ? HUGE_TOOL_RESULT_SUMMARY : (raw || "unknown tool error").slice(0, 500);
+  return `Error: ${message}
+${CURSOR_TOOL_RECOVERY_HINT}`;
+}
+
 // src/mcp/wrap-mcp-tools.ts
 function wrapToolCallback(fn, cwd) {
   return async (...args) => {
-    const result = await fn(...args);
-    return clipMcpToolResult(result, cwd());
+    try {
+      const result = await fn(...args);
+      return clipMcpToolResult(
+        result,
+        cwd()
+      );
+    } catch (err) {
+      return {
+        isError: true,
+        content: [{ type: "text", text: cursorToolErrorText(err) }]
+      };
+    }
   };
 }
 function wrapRegistrar(orig, cwd) {
@@ -28523,8 +28589,8 @@ function createClippedMcpServer() {
 
 // src/mcp/server.ts
 var import_zod10 = require("zod");
-var import_node_crypto19 = require("crypto");
-var import_node_path65 = require("path");
+var import_node_crypto20 = require("crypto");
+var import_node_path66 = require("path");
 init_orchestrator();
 init_task_state();
 init_worktree();
@@ -29035,7 +29101,7 @@ init_fetch();
 init_issue_attachments();
 
 // src/integrations/linear-oauth.ts
-var import_node_crypto16 = require("crypto");
+var import_node_crypto17 = require("crypto");
 var import_node_http2 = require("http");
 init_app_settings();
 init_fetch();
@@ -31898,13 +31964,53 @@ function registerScheduleTools(server) {
 }
 
 // src/agent-rpc/handlers.ts
-var import_node_crypto17 = require("crypto");
-var import_node_path62 = require("path");
+var import_node_crypto18 = require("crypto");
+var import_node_path63 = require("path");
 init_wait_for_job();
 init_wait_for_turn();
+
+// src/agent-rpc/permission-handler.ts
+init_agent_block();
+init_thread_store();
+init_tool_permission();
+
+// src/remote/phone-permission.ts
+init_thread_store();
+init_tool_permission();
+var push = null;
+function notifyPhonePermission(chatId, prompt) {
+  const id = chatId.trim();
+  if (!id) return;
+  push?.(id, prompt);
+}
+
+// src/agent-rpc/permission-handler.ts
+setToolPermissionPublisher({
+  show(item) {
+    const thread = readThread(item.threadId);
+    if (!thread || thread.status === "archived") return false;
+    writeAgentBlock(item.threadId, {
+      source: "permission",
+      reason: clampBlockReason(item.prompt.title),
+      at: (/* @__PURE__ */ new Date()).toISOString(),
+      permission: item.prompt
+    });
+    notifyPhonePermission(item.threadId, item.prompt);
+    return true;
+  },
+  clear(threadId, id) {
+    const thread = readThread(threadId);
+    if (thread?.agentBlock?.source === "permission" && thread.agentBlock.permission?.id === id) {
+      updateThread(threadId, { agentBlock: null });
+      notifyPhonePermission(threadId, null);
+    }
+  }
+});
+
+// src/agent-rpc/handlers.ts
 init_protocol();
 function presentArtifactResult(input) {
-  const id = input.artifact_id?.trim() || `artifact_${Date.now().toString(36)}_${(0, import_node_crypto17.randomUUID)().slice(0, 8)}`;
+  const id = input.artifact_id?.trim() || `artifact_${Date.now().toString(36)}_${(0, import_node_crypto18.randomUUID)().slice(0, 8)}`;
   return {
     ok: true,
     artifact_id: id,
@@ -31924,20 +32030,20 @@ init_git_auth_mode();
 
 // src/board/load-home-board.ts
 var import_node_fs68 = require("fs");
-var import_node_path64 = require("path");
+var import_node_path65 = require("path");
 init_worktree();
 init_paths();
 
 // src/board/board-pins.ts
-var import_node_crypto18 = require("crypto");
+var import_node_crypto19 = require("crypto");
 var import_node_fs67 = require("fs");
-var import_node_path63 = require("path");
+var import_node_path64 = require("path");
 init_paths();
 init_home_board();
 var FILE = "home-board-pins.json";
 var VERSION = 1;
 function pinsFile() {
-  return (0, import_node_path63.join)(appDataDir(), FILE);
+  return (0, import_node_path64.join)(appDataDir(), FILE);
 }
 function readDisk() {
   const path = pinsFile();
@@ -31973,7 +32079,7 @@ function homeBoardWorkspaceKey(workspaces) {
   return workspaces.map((w) => w.path).filter(Boolean).sort().join("\n");
 }
 function cacheFile() {
-  return (0, import_node_path64.join)(appDataDir(), "home-board-cache.json");
+  return (0, import_node_path65.join)(appDataDir(), "home-board-cache.json");
 }
 function emptyInputs() {
   return {
@@ -32271,7 +32377,7 @@ async function startMcpServer() {
       async () => {
         const threads = orch.getThreads(true);
         const lines = threads.map((t) => {
-          const repo = t.repoPath === GLOBAL_WORKSPACE_ID ? "Orchestration" : (0, import_node_path65.basename)(t.repoPath) || t.repoPath;
+          const repo = t.repoPath === GLOBAL_WORKSPACE_ID ? "Orchestration" : (0, import_node_path66.basename)(t.repoPath) || t.repoPath;
           const live = orch.threadLooksLive(t) ? readTurnLive(t.id) : null;
           const parent = t.parentThreadId ? `  parent:${t.parentThreadId.slice(0, 8)}` : "";
           const preview = lastMessagePreview(t.messages, 80);
@@ -32854,7 +32960,7 @@ async function startMcpServer() {
           const ident = issue?.identifier ?? ref.trim();
           const attachments = issue ? [
             {
-              id: (0, import_node_crypto19.randomUUID)(),
+              id: (0, import_node_crypto20.randomUUID)(),
               name: issue.identifier,
               kind: "issue",
               content: [