@sideboard-ai/core 0.1.300 → 0.1.301

package/dist/{chunk-EB3F5AWV.js → chunk-FUXOZHHF.js}

@@ -24,13 +24,13 @@ import {
 } from "./chunk-5XQ43YZU.js";
 import {
   isOrchestratorThread
-} from "./chunk-UMALFEDS.js";
+} from "./chunk-LZ744H2I.js";
 import {
   codexUnattendedGitConfigArgs,
   mergeAgentGitAuthEnv,
   resolveAgentGitAuthEnv,
   resolveCodexGitWritableRoots
-} from "./chunk-3IXGI2FP.js";
+} from "./chunk-3XDU7RIE.js";
 import {
   npmGlobalNodeModules,
   run
@@ -50,6 +50,13 @@ import {
   unwrapStrippedElectronLaunch,
   wrapElectronAsNodeLaunch
 } from "./chunk-WWUABK6B.js";
+import {
+  BASE_ALLOWED_TOOLS,
+  CLAUDE_CHROME_ALLOWED_TOOLS,
+  CLAUDE_POSTHOG_CONNECTOR_ALLOWED_TOOLS,
+  CLAUDE_PRINT_BG_WAIT_CEILING_MS,
+  mcpAllowToolsFromNames
+} from "./chunk-FBZODCO4.js";
 import {
   appDataDir
 } from "./chunk-H5XL4KUS.js";
@@ -441,54 +448,6 @@ var brightsyAdapter = {
 // src/agents/claude.ts
 import { existsSync as existsSync10 } from "fs";
 
-// src/agents/claude-mcp.ts
-function sanitizeMcpServerName(name) {
-  return name.replace(/[^A-Za-z0-9_-]/g, "_");
-}
-function mcpAllowTools(servers) {
-  const out = [];
-  for (const s of servers) {
-    if (!s.connected) continue;
-    const id = sanitizeMcpServerName(s.name);
-    if (!id) continue;
-    out.push(`mcp__${id}`);
-    out.push(`mcp__${id}__*`);
-  }
-  return out;
-}
-function mcpAllowToolsFromNames(names) {
-  return mcpAllowTools(
-    [...names].map((name) => name.trim()).filter(Boolean).map((name) => ({ name, connected: true, needsAuth: false }))
-  );
-}
-var BASE_ALLOWED_TOOLS = [
-  "Edit",
-  "Write",
-  "Bash",
-  "Read",
-  "Glob",
-  "Grep",
-  "WebFetch",
-  "WebSearch",
-  "Task",
-  "Agent",
-  "TaskOutput",
-  "TaskStop",
-  "EnterWorktree",
-  "ExitWorktree",
-  "Skill"
-];
-var CLAUDE_PRINT_BG_WAIT_CEILING_MS = 72e5;
-var CLAUDE_CHROME_ALLOWED_TOOLS = [
-  "mcp__claude-in-chrome",
-  "mcp__claude-in-chrome__*",
-  "Skill(claude-in-chrome)"
-];
-var CLAUDE_POSTHOG_CONNECTOR_ALLOWED_TOOLS = [
-  "mcp__claude_ai_PostHog",
-  "mcp__claude_ai_PostHog__*"
-];
-
 // src/agents/orch-mcp-isolation.ts
 import { existsSync as existsSync7, readFileSync as readFileSync3 } from "fs";
 import { homedir as homedir3 } from "os";
@@ -2020,7 +1979,7 @@ var claudeAdapter = {
       );
     }
     const mode = permissionMode(thread);
-    const { isOrchestratorThread: isOrchestratorThread2 } = await import("./global-workspace-MHE6FCUZ.js");
+    const { isOrchestratorThread: isOrchestratorThread2 } = await import("./global-workspace-T5C7EMVV.js");
     const isOrchestrator = isOrchestratorThread2(thread);
     const rpc = worktreeAgentRpc(isOrchestrator);
     const injectedServers = await buildInjectedMcpServers({
@@ -2040,12 +1999,13 @@ var claudeAdapter = {
       allowedTools = [
         ...BASE_ALLOWED_TOOLS,
         ...SIDEBOARD_MCP_ALLOWED_TOOLS,
-        ...brightsyMcpAllowedTools(injectedBrightsyNames)
+        ...brightsyMcpAllowedTools(injectedBrightsyNames),
+        ...mcpAllowToolsFromNames(thread.approvedMcpServers ?? [])
       ];
     } else {
       allowedTools = [
         ...BASE_ALLOWED_TOOLS,
-        ...mcpAllowToolsFromNames(Object.keys(userMcpEntries)),
+        ...mcpAllowToolsFromNames([...Object.keys(userMcpEntries), ...thread.approvedMcpServers ?? []]),
         ...sideboardWorktreeAllowedTools({
           github: true,
           linear: isLinearConnected(),
@@ -2085,7 +2045,8 @@ var claudeAdapter = {
       "--verbose",
       "--include-partial-messages",
       "--permission-mode",
-      mode.claude
+      mode.claude,
+      ...mode.claude === "bypassPermissions" ? ["--dangerously-skip-permissions"] : []
     ];
     if (systemPrompt) {
       args.push("--append-system-prompt", systemPrompt);

package/dist/{chunk-GNX6YNNU.js → chunk-JTW4CZEQ.js}

@@ -14,7 +14,7 @@ import {
   parseSessionQuotaResetAt,
   planModeTurnInstruction,
   resolveQuotaFallbackAgent
-} from "./chunk-EB7B4D2Z.js";
+} from "./chunk-2KJE53ZJ.js";
 import {
   REVIEW_TAB_TITLE,
   applyWorktreePkgCacheEnv,
@@ -53,7 +53,7 @@ import {
   worktreeDevProcessKey,
   worktreeRunProcessKey,
   worktreeSetupProcessKey
-} from "./chunk-MMIDAD6J.js";
+} from "./chunk-OJKSDRZU.js";
 import {
   applyAgentEvent,
   clipAgentEventForPaint,
@@ -100,7 +100,7 @@ import {
   stageAbsolutePathsAsAttachments,
   stageBuffersAsAttachments,
   syncWorkspacesFromThreads
-} from "./chunk-QB4UQA5L.js";
+} from "./chunk-7SEWZXPT.js";
 import {
   addPrStackLayer,
   allocateTeamSlug,
@@ -144,7 +144,7 @@ import {
   resolveRepoRoot,
   switchWorktreeBranch,
   withRepoGitLock
-} from "./chunk-G52HLBQR.js";
+} from "./chunk-KIWICTLW.js";
 import {
   agentNicknameFromWorktreePath,
   appendMessage,
@@ -168,7 +168,11 @@ import {
   worktreeNameFromPath,
   worktreeSlugForTicket,
   writeThread
-} from "./chunk-K5EACGG2.js";
+} from "./chunk-WV33I2GC.js";
+import {
+  mcpServerIdForPermission,
+  mcpServerPermissionUpdate
+} from "./chunk-FO3NKZVJ.js";
 import {
   createAgentStreamCoalescer
 } from "./chunk-AXQ4ZWHK.js";
@@ -453,9 +457,9 @@ async function spawnAgentTurn(thread, input, onEvent) {
       `Cannot spawn ${thread.agent}: thread ${thread.id} has no worktreePath`
     );
   }
-  const { isGlobalThread: isGlobalThread2 } = await import("./global-workspace-I32EWKX3.js");
+  const { isGlobalThread: isGlobalThread2 } = await import("./global-workspace-V6SOEETA.js");
   if (isGlobalThread2(thread)) {
-    const { ensureGlobalCoordinatorCwd: ensureGlobalCoordinatorCwd2 } = await import("./coordinator-prompt-HKLVS26O.js");
+    const { ensureGlobalCoordinatorCwd: ensureGlobalCoordinatorCwd2 } = await import("./coordinator-prompt-VOWUJRVJ.js");
     ensureGlobalCoordinatorCwd2(
       isOrchestratorThread(thread) ? { orchestratorThreadId: thread.id } : void 0
     );
@@ -1507,6 +1511,7 @@ function denied(message) {
   return { behavior: "deny", message, decisionClassification: "user_reject" };
 }
 function sessionGrants(item) {
+  if (item.mcpServerId) return [mcpServerPermissionUpdate(item.mcpServerId)];
   if (Array.isArray(item.suggestions) && item.suggestions.length > 0) {
     return item.suggestions;
   }
@@ -1565,12 +1570,16 @@ function askToolPermission(ask) {
   const toolName = clean(ask.toolName);
   if (!threadId || !toolName) return Promise.resolve(denied("Missing chat or tool."));
   const described = describeToolPermission({ ...ask, threadId, toolName });
+  const mcpServerId = mcpServerIdForPermission(toolName, ask.mcpServer) ?? void 0;
   const prompt = {
     id: randomUUID(),
     title: described.title,
     detail: described.detail,
     path: described.path || void 0,
-    allowSession: !ask.suppressAlwaysAllow,
+    // Claude hides "always allow" when the saved rule would be broader than
+    // this call. For MCP that broader rule is what we want: the whole server.
+    allowSession: mcpServerId ? true : !ask.suppressAlwaysAllow,
+    ...mcpServerId ? { sessionLabel: "Allow this MCP" } : {},
     defaultToNo: Boolean(ask.defaultToNo)
   };
   return new Promise((resolve) => {
@@ -1579,6 +1588,7 @@ function askToolPermission(ask) {
       threadId,
       prompt,
       suggestions: ask.suggestions,
+      mcpServerId,
       resolve
     };
     const q = queues.get(threadId) ?? [];
@@ -2949,7 +2959,7 @@ async function createThread(input, _onSetupLine) {
   return readThread(thread.id) ?? thread;
 }
 async function listLinearIssues(agent, repoPath) {
-  const { getAdapter: getAdapter2 } = await import("./agents-IVKPCK56.js");
+  const { getAdapter: getAdapter2 } = await import("./agents-V2SRC2LH.js");
   await requireAgent(agent, { requireLinear: true });
   const adapter = getAdapter2(agent);
   if (!adapter.listLinearIssues) {
@@ -3725,7 +3735,7 @@ async function adoptThread(input) {
     messages: input.messages ?? []
   });
   writeThread(thread);
-  const { addWorkspace: addWorkspace2 } = await import("./workspaces-ATMIKXLK.js");
+  const { addWorkspace: addWorkspace2 } = await import("./workspaces-EWVIEJ4O.js");
   await addWorkspace2(repoPath);
   const { ensureWorktreeSideboardIgnored } = await import("./worktree-exclude-RXZPTCNH.js");
   await ensureWorktreeSideboardIgnored(input.worktreePath);
@@ -6654,7 +6664,7 @@ function formatScheduledPrompt(name, prompt) {
 ${prompt}`;
 }
 async function defaultDeps() {
-  const { getOrchestrator: getOrchestrator2, startOrchestration: startOrchestration2 } = await import("./orchestrator-FVVDOQVD.js");
+  const { getOrchestrator: getOrchestrator2, startOrchestration: startOrchestration2 } = await import("./orchestrator-JEF7JC3S.js");
   const orch = getOrchestrator2();
   return {
     findThread: (id) => findThreadByRef(id),
@@ -9529,7 +9539,7 @@ async function startOrchestration(opts) {
     sourceRef: "default",
     ...createOpts
   }).catch(async () => {
-    const { resolveDefaultBranch: resolveDefaultBranch2, resolveRepoRoot: resolveRepoRoot2 } = await import("./worktree-RMYXBTJG.js");
+    const { resolveDefaultBranch: resolveDefaultBranch2, resolveRepoRoot: resolveRepoRoot2 } = await import("./worktree-2Q6J2VWZ.js");
     const repo = await resolveRepoRoot2(repoPath);
     const def = await resolveDefaultBranch2(repo);
     return orch.createThread({
@@ -9539,7 +9549,7 @@ async function startOrchestration(opts) {
       repoPath: repo
     });
   });
-  const { updateThread: upd } = await import("./thread-store-WXLXKDVN.js");
+  const { updateThread: upd } = await import("./thread-store-POAYB2ID.js");
   const updated = upd(thread.id, {
     sourceType: "orchestration",
     sourceRef: goal

package/dist/{chunk-G52HLBQR.js → chunk-KIWICTLW.js}

@@ -4,7 +4,7 @@ import {
   normalizeTakenSlug,
   normalizeWorktreePath,
   takenSlugsFromThread
-} from "./chunk-K5EACGG2.js";
+} from "./chunk-WV33I2GC.js";
 import {
   ensureWorktreeSideboardIgnored
 } from "./chunk-2P4XKWV2.js";

package/dist/{chunk-UMALFEDS.js → chunk-LZ744H2I.js}

@@ -5,7 +5,7 @@ import {
   ensureGhPreferOrigin,
   resolveGithubRepoSlug,
   resolveRepoRoot
-} from "./chunk-3IXGI2FP.js";
+} from "./chunk-3XDU7RIE.js";
 import {
   ATTACHMENTS_DIR,
   attachmentsGitignoreBody
@@ -31,7 +31,7 @@ import {
   teamSlugFromName,
   updateThread,
   writeThread
-} from "./chunk-HTL4FBTP.js";
+} from "./chunk-FBZODCO4.js";
 import {
   appDataDir,
   globalAgentCwd,

package/dist/{chunk-MMIDAD6J.js → chunk-OJKSDRZU.js}

@@ -8,11 +8,11 @@ import {
   isGlobalThread,
   isOrchestratorThread,
   isSlackCoordinatorThread
-} from "./chunk-QB4UQA5L.js";
+} from "./chunk-7SEWZXPT.js";
 import {
   mergeAgentGitAuthEnv,
   resolveAgentGitAuthEnv
-} from "./chunk-G52HLBQR.js";
+} from "./chunk-KIWICTLW.js";
 import {
   allocateTeamName,
   createEmptyThread,
@@ -23,7 +23,7 @@ import {
   updateThread,
   worktreeNameFromPath,
   writeThread
-} from "./chunk-K5EACGG2.js";
+} from "./chunk-WV33I2GC.js";
 import {
   ensureWorktreeSideboardIgnored
 } from "./chunk-2P4XKWV2.js";
@@ -1776,7 +1776,7 @@ var PORT_RANGE_SIZE = 10;
 var RECLAIM_RETRY_DELAY_MS = 40;
 var RECLAIM_TRIES = 8;
 async function killReclaimable(ports, worktreePath, signal) {
-  const { killListenersOnPorts: killListenersOnPorts2, killStaleWorktreeListeners: killStaleWorktreeListeners2 } = await import("./conductor-UQDDDW35.js");
+  const { killListenersOnPorts: killListenersOnPorts2, killStaleWorktreeListeners: killStaleWorktreeListeners2 } = await import("./conductor-57KZLWTB.js");
   if (worktreePath) killStaleWorktreeListeners2(ports, worktreePath, signal);
   else killListenersOnPorts2(ports);
 }

package/dist/{chunk-K5EACGG2.js → chunk-WV33I2GC.js}

@@ -1,3 +1,6 @@
+import {
+  sanitizeMcpServerName
+} from "./chunk-FO3NKZVJ.js";
 import {
   cursorSdkStoreDir
 } from "./chunk-UWQ6UCIB.js";
@@ -962,6 +965,15 @@ function resolveThreadEffort(raw) {
   if (raw.fast) return "low";
   return "high";
 }
+function normalizeApprovedMcpServers(raw) {
+  if (!Array.isArray(raw)) return void 0;
+  const ids = [
+    ...new Set(
+      raw.map((value) => typeof value === "string" ? sanitizeMcpServerName(value.trim()) : "").filter(Boolean)
+    )
+  ];
+  return ids.length > 0 ? ids : void 0;
+}
 function normalizeRunScriptRequest(raw) {
   if (!raw || typeof raw !== "object") return void 0;
   const req = raw;
@@ -987,6 +999,7 @@ function normalizeThread(raw) {
     planMode: Boolean(raw.planMode),
     isolateCodexPlugins: raw.isolateCodexPlugins === true ? true : void 0,
     autonomy: raw.autonomy ?? "default",
+    approvedMcpServers: normalizeApprovedMcpServers(raw.approvedMcpServers),
     lastError: raw.lastError ?? null,
     agentPid: raw.agentPid ?? null,
     attachments: Array.isArray(raw.attachments) ? raw.attachments : [],

package/dist/{conductor-UQDDDW35.js → conductor-57KZLWTB.js}

@@ -31,12 +31,13 @@ import {
   tryReservePort,
   tryReservePorts,
   worktreeRunPortsPath
-} from "./chunk-MMIDAD6J.js";
+} from "./chunk-OJKSDRZU.js";
 import "./chunk-F36QRDM4.js";
-import "./chunk-QB4UQA5L.js";
-import "./chunk-G52HLBQR.js";
-import "./chunk-K5EACGG2.js";
+import "./chunk-7SEWZXPT.js";
+import "./chunk-KIWICTLW.js";
+import "./chunk-WV33I2GC.js";
 import "./chunk-2P4XKWV2.js";
+import "./chunk-FO3NKZVJ.js";
 import "./chunk-HO5R3ZRH.js";
 import "./chunk-6K64FJDD.js";
 import "./chunk-UWQ6UCIB.js";

package/dist/{conductor-JLHXMMKR.js → conductor-57UKACQA.js}

@@ -33,10 +33,10 @@ import {
   tryReservePort,
   tryReservePorts,
   worktreeRunPortsPath
-} from "./chunk-F3JYJ4UB.js";
+} from "./chunk-EP4IIKP4.js";
 import "./chunk-5XQ43YZU.js";
-import "./chunk-UMALFEDS.js";
-import "./chunk-3IXGI2FP.js";
+import "./chunk-LZ744H2I.js";
+import "./chunk-3XDU7RIE.js";
 import "./chunk-N2WW62LF.js";
 import "./chunk-DD67JWTN.js";
 import "./chunk-2UG25RMK.js";
@@ -47,7 +47,7 @@ import {
 } from "./chunk-WWUABK6B.js";
 import "./chunk-FJZWM2ON.js";
 import "./chunk-UN5Q7POQ.js";
-import "./chunk-HTL4FBTP.js";
+import "./chunk-FBZODCO4.js";
 import "./chunk-4RZRHTSZ.js";
 import "./chunk-KGZBYWZ3.js";
 import {

package/dist/{coordinator-prompt-SSUYZSJO.js → coordinator-prompt-2TBRFJZ5.js}

@@ -9,8 +9,8 @@ import {
   enrichWorkspacesWithGithub,
   ensureGlobalCoordinatorCwd,
   formatWorkspaceInventory
-} from "./chunk-UMALFEDS.js";
-import "./chunk-3IXGI2FP.js";
+} from "./chunk-LZ744H2I.js";
+import "./chunk-3XDU7RIE.js";
 import "./chunk-N2WW62LF.js";
 import "./chunk-DD67JWTN.js";
 import "./chunk-2UG25RMK.js";
@@ -19,7 +19,7 @@ import "./chunk-NSTQ6QKD.js";
 import "./chunk-WWUABK6B.js";
 import "./chunk-FJZWM2ON.js";
 import "./chunk-UN5Q7POQ.js";
-import "./chunk-HTL4FBTP.js";
+import "./chunk-FBZODCO4.js";
 import "./chunk-4RZRHTSZ.js";
 import "./chunk-KGZBYWZ3.js";
 import "./chunk-H5XL4KUS.js";

package/dist/{coordinator-prompt-HKLVS26O.js → coordinator-prompt-VOWUJRVJ.js}

@@ -7,10 +7,11 @@ import {
   enrichWorkspacesWithGithub,
   ensureGlobalCoordinatorCwd,
   formatWorkspaceInventory
-} from "./chunk-QB4UQA5L.js";
-import "./chunk-G52HLBQR.js";
-import "./chunk-K5EACGG2.js";
+} from "./chunk-7SEWZXPT.js";
+import "./chunk-KIWICTLW.js";
+import "./chunk-WV33I2GC.js";
 import "./chunk-2P4XKWV2.js";
+import "./chunk-FO3NKZVJ.js";
 import "./chunk-6K64FJDD.js";
 import "./chunk-UWQ6UCIB.js";
 import "./chunk-QVN2WOKJ.js";

package/dist/{global-workspace-MHE6FCUZ.js → global-workspace-T5C7EMVV.js}

@@ -20,8 +20,8 @@ import {
   remoteCoordinatorSourceRef,
   slackCoordinatorSourceRef,
   takenTeamSlugsForOrchestration
-} from "./chunk-UMALFEDS.js";
-import "./chunk-3IXGI2FP.js";
+} from "./chunk-LZ744H2I.js";
+import "./chunk-3XDU7RIE.js";
 import "./chunk-N2WW62LF.js";
 import "./chunk-DD67JWTN.js";
 import "./chunk-2UG25RMK.js";
@@ -30,7 +30,7 @@ import "./chunk-NSTQ6QKD.js";
 import "./chunk-WWUABK6B.js";
 import "./chunk-FJZWM2ON.js";
 import "./chunk-UN5Q7POQ.js";
-import "./chunk-HTL4FBTP.js";
+import "./chunk-FBZODCO4.js";
 import "./chunk-4RZRHTSZ.js";
 import "./chunk-KGZBYWZ3.js";
 import {

package/dist/{global-workspace-I32EWKX3.js → global-workspace-V6SOEETA.js}

@@ -18,10 +18,11 @@ import {
   remoteCoordinatorSourceRef,
   slackCoordinatorSourceRef,
   takenTeamSlugsForOrchestration
-} from "./chunk-QB4UQA5L.js";
-import "./chunk-G52HLBQR.js";
-import "./chunk-K5EACGG2.js";
+} from "./chunk-7SEWZXPT.js";
+import "./chunk-KIWICTLW.js";
+import "./chunk-WV33I2GC.js";
 import "./chunk-2P4XKWV2.js";
+import "./chunk-FO3NKZVJ.js";
 import "./chunk-6K64FJDD.js";
 import "./chunk-UWQ6UCIB.js";
 import "./chunk-QVN2WOKJ.js";