@sideboard-ai/core 0.1.303 → 0.1.304

package/dist/{chunk-RSATPXU4.js → chunk-A2YXQC65.js}

@@ -14,14 +14,14 @@ import {
   withAddedAccount,
   withRemovedAccount,
   withSelectedAccount
-} from "./chunk-3HO2OY5T.js";
+} from "./chunk-KI45T4DI.js";
 import {
   chmodOwnerOnly,
   writePrivateFile
 } from "./chunk-JT7R45JB.js";
 import {
   appDataDir
-} from "./chunk-EHT2DRT4.js";
+} from "./chunk-H4UEFJRI.js";
 
 // src/store/app-settings.ts
 import { randomUUID } from "crypto";
@@ -158,6 +158,226 @@ function formatViewerContextReminder() {
   return "Viewer context: get_viewer_context to read; update_viewer_context only after ask_user confirms (Save this context / Do not save).";
 }
 
+// src/remote/protocol.ts
+var REMOTE_RELAY_PATH = "/remote";
+var REMOTE_PING_INTERVAL_MS = 2e4;
+var REMOTE_PONG_TIMEOUT_MS = 15e3;
+var BAKED_REMOTE_RELAY_URL = `wss://relay.sideboard.cloud${REMOTE_RELAY_PATH}`;
+function normalizeRemoteRelayUrl(raw) {
+  let text = raw.trim();
+  if (!text) return null;
+  if (!/^[a-z][a-z0-9+.-]*:\/\//i.test(text)) text = `wss://${text}`;
+  let url;
+  try {
+    url = new URL(text);
+  } catch {
+    return null;
+  }
+  if (url.protocol === "https:") url.protocol = "wss:";
+  else if (url.protocol === "http:") url.protocol = "ws:";
+  if (url.protocol !== "ws:" && url.protocol !== "wss:") return null;
+  if (url.username || url.password) return null;
+  const path = url.pathname.replace(/\/+$/, "") || "/";
+  if (path !== "/" && path !== REMOTE_RELAY_PATH) return null;
+  url.pathname = REMOTE_RELAY_PATH;
+  url.search = "";
+  url.hash = "";
+  return url.toString();
+}
+function remoteRelayUrl(configured) {
+  const fromSettings = configured?.trim() ? normalizeRemoteRelayUrl(configured) : null;
+  if (fromSettings) return fromSettings;
+  const fromEnv = process.env.SIDEBOARD_REMOTE_RELAY_URL?.trim();
+  if (fromEnv) return normalizeRemoteRelayUrl(fromEnv) || BAKED_REMOTE_RELAY_URL;
+  return BAKED_REMOTE_RELAY_URL;
+}
+function str(value) {
+  return typeof value === "string" ? value.trim() : "";
+}
+function questions(value) {
+  if (!Array.isArray(value)) return null;
+  const out = [];
+  for (const item of value) {
+    if (!item || typeof item !== "object") return null;
+    const row = item;
+    const question = str(row.question);
+    if (!question || !Array.isArray(row.options)) return null;
+    const options = [];
+    for (const opt of row.options) {
+      if (!opt || typeof opt !== "object") return null;
+      const label = str(opt.label);
+      if (!label) return null;
+      const description = str(opt.description);
+      options.push(description ? { label, description } : { label });
+    }
+    if (options.length === 0) return null;
+    out.push({ question, options });
+  }
+  return out;
+}
+function parseRemoteClientMessage(raw) {
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  if (!parsed || typeof parsed !== "object" || !("type" in parsed)) return null;
+  const msg = parsed;
+  if (msg.type === "ping") return { type: "ping" };
+  if (msg.type === "host_pair") return { type: "host_pair" };
+  if (msg.type === "e2ee_fail") return { type: "e2ee_fail" };
+  if (msg.type === "stop") return { type: "stop" };
+  if (msg.type === "host_register") {
+    const deviceId = str(parsed.deviceId);
+    const hostSecret = str(parsed.hostSecret);
+    const deviceLabel = str(parsed.deviceLabel);
+    if (!deviceId || !hostSecret || !deviceLabel) return null;
+    const accountToken = str(parsed.accountToken);
+    return {
+      type: "host_register",
+      deviceId,
+      hostSecret,
+      deviceLabel,
+      ...accountToken ? { accountToken } : {}
+    };
+  }
+  if (msg.type === "pair") {
+    const code = str(parsed.code).toUpperCase();
+    if (!code) return null;
+    return { type: "pair", code };
+  }
+  if (msg.type === "resume") {
+    const sessionToken = str(parsed.sessionToken);
+    if (!sessionToken) return null;
+    return { type: "resume", sessionToken };
+  }
+  if (msg.type === "list_hosts") {
+    const raw2 = parsed.sessionTokens;
+    if (!Array.isArray(raw2)) return null;
+    const sessionTokens = raw2.filter((item) => typeof item === "string" && item.trim().length > 0).map((item) => item.trim()).slice(0, 32);
+    return { type: "list_hosts", sessionTokens };
+  }
+  if (msg.type === "prompt") {
+    const text = str(parsed.text);
+    if (!text) return null;
+    return { type: "prompt", text };
+  }
+  const encrypted = parseEncrypted(parsed);
+  if (encrypted) return encrypted;
+  if (msg.type === "assistant") {
+    return { type: "assistant", text: str(parsed.text) };
+  }
+  if (msg.type === "ask_user") {
+    const parsedQuestions = questions(parsed.questions);
+    if (!parsedQuestions?.length) return null;
+    return {
+      type: "ask_user",
+      text: str(parsed.text),
+      questions: parsedQuestions
+    };
+  }
+  return null;
+}
+function parseRemoteServerMessage(raw) {
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  if (!parsed || typeof parsed !== "object" || !("type" in parsed)) return null;
+  const type = parsed.type;
+  if (type === "pong") return { type: "pong" };
+  if (type === "phone_joined") return { type: "phone_joined" };
+  if (type === "phone_left") return { type: "phone_left" };
+  if (type === "host_offline") return { type: "host_offline" };
+  if (type === "hosts") {
+    const raw2 = parsed.hosts;
+    if (!Array.isArray(raw2)) return null;
+    const hosts = [];
+    for (const item of raw2) {
+      if (!item || typeof item !== "object") return null;
+      const row = item;
+      const sessionToken = str(row.sessionToken);
+      if (!sessionToken || typeof row.deviceId !== "string" || typeof row.deviceLabel !== "string") return null;
+      if (typeof row.online !== "boolean") return null;
+      hosts.push({
+        sessionToken,
+        deviceId: row.deviceId.trim(),
+        deviceLabel: row.deviceLabel.trim(),
+        online: row.online
+      });
+    }
+    return { type: "hosts", hosts };
+  }
+  if (type === "stop") return { type: "stop" };
+  if (type === "registered") {
+    const deviceId = str(parsed.deviceId);
+    const deviceLabel = str(parsed.deviceLabel);
+    if (!deviceId || !deviceLabel) return null;
+    return { type: "registered", deviceId, deviceLabel };
+  }
+  if (type === "pairing_code") {
+    const code = str(parsed.code);
+    const expiresAt = parsed.expiresAt;
+    if (!code || typeof expiresAt !== "number") return null;
+    return { type: "pairing_code", code, expiresAt };
+  }
+  if (type === "inbound") {
+    const text = str(parsed.text);
+    if (!text) return null;
+    return { type: "inbound", text };
+  }
+  if (type === "paired") {
+    const deviceId = str(parsed.deviceId);
+    const deviceLabel = str(parsed.deviceLabel);
+    const sessionToken = str(parsed.sessionToken);
+    if (!deviceId || !deviceLabel || !sessionToken) return null;
+    return { type: "paired", deviceId, deviceLabel, sessionToken };
+  }
+  if (type === "assistant") {
+    return { type: "assistant", text: str(parsed.text) };
+  }
+  if (type === "ask_user") {
+    const parsedQuestions = questions(parsed.questions);
+    if (!parsedQuestions?.length) return null;
+    return {
+      type: "ask_user",
+      text: str(parsed.text),
+      questions: parsedQuestions
+    };
+  }
+  if (type === "error") {
+    const message = str(parsed.message) || "remote error";
+    return { type: "error", message };
+  }
+  return parseEncrypted(parsed);
+}
+function parseEncrypted(parsed) {
+  if (!parsed || typeof parsed !== "object") return null;
+  const type = parsed.type;
+  if (type === "e2ee") {
+    const frame = str(parsed.frame);
+    if (!frame) return null;
+    return { type: "e2ee", frame };
+  }
+  if (type === "e2ee_hello") {
+    const clientPublicKey = str(parsed.clientPublicKey);
+    const clientNonce = str(parsed.clientNonce);
+    if (parsed.v !== 1 || !clientPublicKey || !clientNonce) return null;
+    return { type: "e2ee_hello", v: 1, clientPublicKey, clientNonce };
+  }
+  if (type === "e2ee_ready") {
+    const desktopPublicKey = str(parsed.desktopPublicKey);
+    const clientNonce = str(parsed.clientNonce);
+    const desktopNonce = str(parsed.desktopNonce);
+    if (parsed.v !== 1 || !desktopPublicKey || !clientNonce || !desktopNonce) return null;
+    return { type: "e2ee_ready", v: 1, desktopPublicKey, clientNonce, desktopNonce };
+  }
+  return null;
+}
+
 // src/store/secret-vault.ts
 import { join } from "path";
 
@@ -333,6 +553,12 @@ function normalizeVault(raw) {
   if (typeof raw.remoteHostSecret === "string" && raw.remoteHostSecret.trim()) {
     out.remoteHostSecret = raw.remoteHostSecret.trim();
   }
+  if (typeof raw.remoteHostPrivateKey === "string" && raw.remoteHostPrivateKey.trim()) {
+    out.remoteHostPrivateKey = raw.remoteHostPrivateKey.trim();
+  }
+  if (typeof raw.remotePhoneToken === "string" && raw.remotePhoneToken.trim()) {
+    out.remotePhoneToken = raw.remotePhoneToken.trim();
+  }
   if (typeof raw.remoteAccountToken === "string" && raw.remoteAccountToken.trim()) {
     out.remoteAccountToken = raw.remoteAccountToken.trim();
   }
@@ -921,6 +1147,10 @@ function normalizeIntegrations(raw) {
     const email = source.remoteAccountEmail.trim().toLowerCase();
     if (email) out.remoteAccountEmail = email;
   }
+  if (typeof source.remoteRelayUrl === "string") {
+    const url = normalizeRemoteRelayUrl(source.remoteRelayUrl);
+    if (url) out.remoteRelayUrl = url;
+  }
   if (typeof source.githubGitAuthMode === "string" && GIT_AUTH_MODES.has(source.githubGitAuthMode)) {
     out.githubGitAuthMode = source.githubGitAuthMode;
   }
@@ -1296,6 +1526,9 @@ function persistSplit(settings) {
     vault[key] = integrations[key];
     delete integrations[key];
   }
+  const previous = loadSecretVault();
+  if (previous.remoteHostPrivateKey) vault.remoteHostPrivateKey = previous.remoteHostPrivateKey;
+  if (previous.remotePhoneToken) vault.remotePhoneToken = previous.remotePhoneToken;
   writePrivateFile(
     appSettingsPath(),
     `${JSON.stringify({ ...settings, environment: {}, integrations }, null, 2)}
@@ -1526,6 +1759,25 @@ function updateIntegrationsSettings(patch) {
       integrations.remoteAccountEmail = patch.remoteAccountEmail.trim().toLowerCase();
     }
   }
+  if ("remoteRelayUrl" in patch) {
+    const previous = remoteRelayUrl(integrations.remoteRelayUrl);
+    if (patch.remoteRelayUrl == null || patch.remoteRelayUrl.trim() === "") {
+      delete integrations.remoteRelayUrl;
+    } else {
+      const url = normalizeRemoteRelayUrl(patch.remoteRelayUrl);
+      if (!url) {
+        throw new Error(
+          "Relay URL must be a WebSocket address, for example wss://relay.example.com/remote."
+        );
+      }
+      integrations.remoteRelayUrl = url;
+    }
+    const next = remoteRelayUrl(integrations.remoteRelayUrl);
+    if (new URL(previous).origin !== new URL(next).origin) {
+      delete integrations.remoteAccountToken;
+      delete integrations.remoteAccountEmail;
+    }
+  }
   if ("githubGitAuthMode" in patch) {
     if (patch.githubGitAuthMode == null) {
       delete integrations.githubGitAuthMode;
@@ -2290,6 +2542,14 @@ export {
   formatWorkspaceProfileSuffix,
   formatViewerContextDirective,
   formatViewerContextReminder,
+  REMOTE_RELAY_PATH,
+  REMOTE_PING_INTERVAL_MS,
+  REMOTE_PONG_TIMEOUT_MS,
+  BAKED_REMOTE_RELAY_URL,
+  normalizeRemoteRelayUrl,
+  remoteRelayUrl,
+  parseRemoteClientMessage,
+  parseRemoteServerMessage,
   setVaultMasterKey,
   persistVaultKeyInKeychain,
   readKeychainVaultKey,
@@ -2298,6 +2558,8 @@ export {
   writeSecureJson,
   isSecureFileEncrypted,
   secureFileUnlocksWith,
+  loadSecretVault,
+  saveSecretVault,
   fromInclusiveInputUsage,
   requestOccupancy,
   mergeUsage,

package/dist/{chunk-GEFH4QFX.js → chunk-BIPXOHZI.js}

@@ -4,7 +4,7 @@ import {
   normalizeTakenSlug,
   normalizeWorktreePath,
   takenSlugsFromThread
-} from "./chunk-P2GHFJOB.js";
+} from "./chunk-HG25AYBV.js";
 import {
   ensureWorktreeSideboardIgnored
 } from "./chunk-2P4XKWV2.js";
@@ -24,10 +24,10 @@ import {
 import {
   getGithubGitAuthMode,
   getGithubPat
-} from "./chunk-RSATPXU4.js";
+} from "./chunk-A2YXQC65.js";
 import {
   worktreesRoot
-} from "./chunk-EHT2DRT4.js";
+} from "./chunk-H4UEFJRI.js";
 
 // src/git/worktree.ts
 import { randomBytes } from "crypto";

package/dist/{chunk-HSF2RQSQ.js → chunk-CFTOKVQN.js}

@@ -6,7 +6,7 @@ import {
 import {
   getAbleTimeHost,
   isAbleTimeConnected
-} from "./chunk-BU6HH5VA.js";
+} from "./chunk-PHMFAU35.js";
 
 // src/integrations/abletime-mcp.ts
 var DEFAULT_ABLETIME_HOST = "https://track.abletime.com";
@@ -155,7 +155,7 @@ function textsFromUnknown(value) {
   return "";
 }
 async function abletimeMcpRequest(method, params, opts) {
-  const rawToken = opts?.token ?? await import("./abletime-oauth-ZURGXSY6.js").then((m) => m.ensureAbleTimeAccessToken());
+  const rawToken = opts?.token ?? await import("./abletime-oauth-2TOOZ2FN.js").then((m) => m.ensureAbleTimeAccessToken());
   if (!rawToken?.trim()) {
     throw new Error("AbleTime is not connected \u2014 paste a personal access token in Account settings");
   }
@@ -226,9 +226,9 @@ async function callAbleTimeTool(name, args = {}, opts) {
   if (!opts?.token && !isAbleTimeConnected()) {
     throw new Error("AbleTime is not connected \u2014 paste a personal access token in Account settings");
   }
-  const rawToken = opts?.token ?? await import("./abletime-oauth-ZURGXSY6.js").then((m) => m.ensureAbleTimeAccessToken());
+  const rawToken = opts?.token ?? await import("./abletime-oauth-2TOOZ2FN.js").then((m) => m.ensureAbleTimeAccessToken());
   if (rawToken && ableTimeUsesRest(rawToken)) {
-    const { callAbleTimeRestTool } = await import("./abletime-rest-4TVIWLZK.js");
+    const { callAbleTimeRestTool } = await import("./abletime-rest-5TDRIFEV.js");
     return callAbleTimeRestTool(name, args, { ...opts, token: rawToken });
   }
   const requestOpts = { ...opts, pm: opts?.pm ?? abletimeToolUsesPm(name) };
@@ -244,7 +244,7 @@ async function callAbleTimeTool(name, args = {}, opts) {
       return await call();
     }
     if (rawToken && ableTimeUsesRest(rawToken) && isAbleTimeRejectedCredential(message)) {
-      const { callAbleTimeRestTool } = await import("./abletime-rest-4TVIWLZK.js");
+      const { callAbleTimeRestTool } = await import("./abletime-rest-5TDRIFEV.js");
       return callAbleTimeRestTool(name, args, { ...opts, token: rawToken });
     }
     throw err instanceof Error ? new Error(rewriteAbleTimeError(err.message)) : err;

package/dist/{chunk-3D3GGL6X.js → chunk-CW4FIIDE.js}

@@ -1,7 +1,7 @@
 import {
   DEFAULT_ABLETIME_HOST,
   normalizeAbleTimeHost
-} from "./chunk-FAXOEKQR.js";
+} from "./chunk-JWW66PO3.js";
 import {
   httpFetch
 } from "./chunk-JAT3JFOS.js";
@@ -10,7 +10,7 @@ import {
   getAbleTimeHost,
   loadAppSettings,
   saveAbleTimeConnection
-} from "./chunk-RSATPXU4.js";
+} from "./chunk-A2YXQC65.js";
 
 // src/integrations/abletime-oauth.ts
 import { createHash, randomBytes } from "crypto";
@@ -280,7 +280,7 @@ async function startAbleTimeOAuth(opts) {
   persistAbleTimeTokens(data, { host });
   const token = data.access_token.trim();
   try {
-    const { getAbleTimeOrientation } = await import("./abletime-RYDAQ3FE.js");
+    const { getAbleTimeOrientation } = await import("./abletime-T5YSJLNZ.js");
     const orientation = await getAbleTimeOrientation({ token, host });
     return saveAbleTimeConnection({
       accessToken: token,

package/dist/{chunk-5DZUWGKV.js → chunk-DC3VZXMA.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-NSTQ6QKD.js";
 import {
   appDataDir
-} from "./chunk-H5XL4KUS.js";
+} from "./chunk-WOU343SI.js";
 
 // src/store/caffeinate-hold.ts
 import { spawn } from "child_process";

package/dist/{chunk-5MVOZLN7.js → chunk-DLGGLV2M.js}

@@ -19,17 +19,17 @@ import {
 import {
   getGithubGitAuthMode,
   getGithubPat
-} from "./chunk-BU6HH5VA.js";
+} from "./chunk-PHMFAU35.js";
 import {
   allocateTeamName,
   listThreads,
   normalizeTakenSlug,
   normalizeWorktreePath,
   takenSlugsFromThread
-} from "./chunk-FA3V56KF.js";
+} from "./chunk-3UDRWMIM.js";
 import {
   worktreesRoot
-} from "./chunk-H5XL4KUS.js";
+} from "./chunk-WOU343SI.js";
 
 // src/git/worktree.ts
 import { randomBytes } from "crypto";

package/dist/{chunk-WZCPZVUC.js → chunk-EGTCXNQM.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-2UG25RMK.js";
 import {
   resolveAgentExecutable
-} from "./chunk-BU6HH5VA.js";
+} from "./chunk-PHMFAU35.js";
 
 // src/agents/install.ts
 import { existsSync } from "fs";
@@ -267,8 +267,8 @@ async function loginAgent(agent) {
   };
 }
 async function loginManagedAccount(accountId) {
-  const { loadAppSettings } = await import("./app-settings-2IH42VA5.js");
-  const { loginEnvPrefix } = await import("./managed-accounts-46A4KRUE.js");
+  const { loadAppSettings } = await import("./app-settings-CC65VPBL.js");
+  const { loginEnvPrefix } = await import("./managed-accounts-PITLFLKU.js");
   const account = loadAppSettings().accounts.accounts.find((a) => a.id === accountId);
   if (!account) {
     return { ok: false, message: `Account not found: ${accountId}` };