@sideboard-ai/core 0.1.309 → 0.1.311

package/dist/index.cjs

@@ -6720,6 +6720,191 @@ var init_message_parts = __esm({
   }
 });
 
+// src/plan/ask-user.ts
+function planQuestionsSignature(questions2) {
+  return questions2.map((q) => {
+    const opts = q.options.map((o) => o.label).join("");
+    return `${q.question}${opts}`;
+  }).join("");
+}
+function asRecord2(v) {
+  return v != null && typeof v === "object" && !Array.isArray(v) ? v : null;
+}
+function parseOptions(raw) {
+  if (!Array.isArray(raw)) return [];
+  const out = [];
+  for (const item of raw) {
+    if (typeof item === "string" && item.trim()) {
+      out.push({ label: item.trim() });
+      continue;
+    }
+    const o = asRecord2(item);
+    if (!o) continue;
+    const label = typeof o.label === "string" ? o.label.trim() : typeof o.text === "string" ? o.text.trim() : typeof o.title === "string" ? o.title.trim() : "";
+    if (!label) continue;
+    const description = typeof o.description === "string" && o.description.trim() ? o.description.trim() : void 0;
+    out.push({ label, description });
+  }
+  return out;
+}
+function parseOneQuestion(raw) {
+  const o = asRecord2(raw);
+  if (!o) return null;
+  const question = typeof o.question === "string" ? o.question.trim() : typeof o.text === "string" ? o.text.trim() : typeof o.prompt === "string" ? o.prompt.trim() : "";
+  if (!question) return null;
+  const options = parseOptions(o.options);
+  if (options.length < 1) return null;
+  const header = typeof o.header === "string" && o.header.trim() ? o.header.trim() : void 0;
+  const multiSelect = Boolean(o.multiSelect ?? o.multi_select);
+  return { question, header, multiSelect, options };
+}
+function parsePlanQuestionsInput(input) {
+  const root = asRecord2(input);
+  if (!root) return [];
+  const list = Array.isArray(root.questions) ? root.questions : Array.isArray(root.question) ? root.question : root.question || root.prompt ? [root] : [];
+  const out = [];
+  for (const item of list) {
+    const q = parseOneQuestion(item);
+    if (q) out.push(q);
+  }
+  return out;
+}
+function isAskUserToolName(name) {
+  if (!name) return false;
+  const base = name.replace(/^mcp__sideboard__/i, "");
+  return ASK_USER_TOOL_RE.test(name) || /^ask_user$/i.test(base);
+}
+function lastTopLevelToolIsAskUser(parts) {
+  if (!parts?.length) return false;
+  for (let i = parts.length - 1; i >= 0; i--) {
+    const part = parts[i];
+    if (part.type === "tool" && !part.parentId) {
+      return isAskUserToolName(part.name);
+    }
+  }
+  return false;
+}
+function hasTopLevelTool(parts) {
+  return Boolean(parts?.some((part) => part.type === "tool" && !part.parentId));
+}
+function questionsFromToolPart(part) {
+  const fromInput = parsePlanQuestionsInput(part.input);
+  if (fromInput.length) return fromInput;
+  const raw = part.result?.trim();
+  if (!raw || !raw.startsWith("{")) return [];
+  try {
+    return parsePlanQuestionsInput(JSON.parse(raw));
+  } catch {
+    return [];
+  }
+}
+function extractPendingPlanQuestions(parts) {
+  if (!parts?.length) return null;
+  for (let i = parts.length - 1; i >= 0; i--) {
+    const p = parts[i];
+    if (p.type !== "tool" || !isAskUserToolName(p.name)) continue;
+    const questions2 = questionsFromToolPart(p);
+    if (!questions2.length) continue;
+    return {
+      id: p.id || `ask-${i}`,
+      signature: planQuestionsSignature(questions2),
+      questions: questions2,
+      source: p.name || "ask_user"
+    };
+  }
+  return null;
+}
+function pendingFromAskBlock(block, dismissedQuestionSignature) {
+  if (!block || block.source !== "ask_user" || !block.questions?.length) return null;
+  const dismissed = dismissedQuestionSignature?.trim();
+  if (dismissed && (!block.questionSignature || block.questionSignature === dismissed)) {
+    return null;
+  }
+  const signature = block.questionSignature?.trim() || planQuestionsSignature(block.questions);
+  return {
+    id: `ask-block:${signature}`,
+    signature,
+    questions: block.questions,
+    source: "ask_user"
+  };
+}
+function askBlockStillWaiting(block, messages) {
+  if (!messages?.length) return Boolean(block?.at);
+  const askedAt = block?.at;
+  if (!askedAt) return false;
+  for (let i = messages.length - 1; i >= 0; i--) {
+    const message = messages[i];
+    if (message.role !== "user" || message.origin === "continue") continue;
+    if (!message.ts) return true;
+    return askedAt > message.ts;
+  }
+  return true;
+}
+function latestPendingPlanQuestions(input) {
+  if (input.userReplied) return null;
+  const fromBlock = () => pendingFromAskBlock(input.agentBlock, input.dismissedQuestionSignature);
+  if (lastTopLevelToolIsAskUser(input.liveParts)) {
+    return extractPendingPlanQuestions(input.liveParts) ?? fromBlock();
+  }
+  const last = input.messages[input.messages.length - 1];
+  if (last?.role === "agent" && lastTopLevelToolIsAskUser(last.parts)) {
+    return extractPendingPlanQuestions(last.parts) ?? fromBlock();
+  }
+  if (hasTopLevelTool(input.liveParts) || last?.role === "agent" && hasTopLevelTool(last.parts)) {
+    return null;
+  }
+  if (input.status === "running" || input.status === "queued") return null;
+  const stamped = fromBlock();
+  if (stamped && askBlockStillWaiting(input.agentBlock, input.messages)) {
+    return stamped;
+  }
+  return null;
+}
+function isPlanQuestionAnswersMessage(text7) {
+  return text7.startsWith(PLAN_QUESTION_ANSWERS_PREFIX);
+}
+function formatPlanQuestionAnswers(questions2, answers) {
+  const lines = [PLAN_QUESTION_ANSWERS_PREFIX, ""];
+  for (let i = 0; i < questions2.length; i++) {
+    const q = questions2[i];
+    const a = answers.find((x) => x.questionIndex === i);
+    const header = q.header ? `**${q.header}** \u2014 ` : "";
+    const parts = [];
+    if (a?.selected.length) parts.push(a.selected.join(", "));
+    if (a?.other?.trim()) parts.push(a.other.trim());
+    const body = parts.length ? parts.join(" \xB7 ") : "(no answer)";
+    lines.push(`${i + 1}. ${header}${q.question}  `);
+    lines.push(`   \u2192 ${body}`);
+  }
+  return lines.join("\n");
+}
+function formatPlanQuestionsForChat(questions2) {
+  const lines = ["### Questions for you", ""];
+  for (let i = 0; i < questions2.length; i++) {
+    const q = questions2[i];
+    const header = q.header ? `**${q.header}** \u2014 ` : "";
+    lines.push(`${i + 1}. ${header}${q.question}`);
+    for (let oi = 0; oi < q.options.length; oi++) {
+      const opt = q.options[oi];
+      const desc = opt.description?.trim();
+      lines.push(
+        desc ? `   - **${opt.label}** \u2014 ${desc}` : `   - **${opt.label}**`
+      );
+    }
+    lines.push("");
+  }
+  lines.push("_Answer in the composer below._");
+  return lines.join("\n").trimEnd();
+}
+var ASK_USER_TOOL_RE, PLAN_QUESTION_ANSWERS_PREFIX;
+var init_ask_user = __esm({
+  "src/plan/ask-user.ts"() {
+    "use strict";
+    ASK_USER_TOOL_RE = /^(AskUserQuestion|ask_user|mcp__sideboard__ask_user)$/i;
+    PLAN_QUESTION_ANSWERS_PREFIX = "Answers to your questions:";
+  }
+});
+
 // src/board/agent-block-view.ts
 function worktreeBoardStatus(group) {
   const order = ["running", "queued", "error", "broken"];
@@ -6742,6 +6927,11 @@ function visibleAgentBlock(thread) {
   const block = thread.agentBlock;
   if (!block?.reason?.trim()) return null;
   if (isDismissedAskUserBlock(block, thread.dismissedQuestionSignature)) return null;
+  if (block.source === "ask_user") {
+    const inFlight = thread.status === "running" || thread.status === "queued";
+    if (inFlight && !block.onScreen) return null;
+    if (!askBlockStillWaiting(block, thread.messages)) return null;
+  }
   return block;
 }
 function worktreeAgentBlock(group) {
@@ -6777,6 +6967,7 @@ function threadCardBlockFields(group) {
 var init_agent_block_view = __esm({
   "src/board/agent-block-view.ts"() {
     "use strict";
+    init_ask_user();
   }
 });
 
@@ -8309,175 +8500,6 @@ var init_injected_notices = __esm({
   }
 });
 
-// src/plan/ask-user.ts
-function planQuestionsSignature(questions2) {
-  return questions2.map((q) => {
-    const opts = q.options.map((o) => o.label).join("");
-    return `${q.question}${opts}`;
-  }).join("");
-}
-function asRecord2(v) {
-  return v != null && typeof v === "object" && !Array.isArray(v) ? v : null;
-}
-function parseOptions(raw) {
-  if (!Array.isArray(raw)) return [];
-  const out = [];
-  for (const item of raw) {
-    if (typeof item === "string" && item.trim()) {
-      out.push({ label: item.trim() });
-      continue;
-    }
-    const o = asRecord2(item);
-    if (!o) continue;
-    const label = typeof o.label === "string" ? o.label.trim() : typeof o.text === "string" ? o.text.trim() : typeof o.title === "string" ? o.title.trim() : "";
-    if (!label) continue;
-    const description = typeof o.description === "string" && o.description.trim() ? o.description.trim() : void 0;
-    out.push({ label, description });
-  }
-  return out;
-}
-function parseOneQuestion(raw) {
-  const o = asRecord2(raw);
-  if (!o) return null;
-  const question = typeof o.question === "string" ? o.question.trim() : typeof o.text === "string" ? o.text.trim() : typeof o.prompt === "string" ? o.prompt.trim() : "";
-  if (!question) return null;
-  const options = parseOptions(o.options);
-  if (options.length < 1) return null;
-  const header = typeof o.header === "string" && o.header.trim() ? o.header.trim() : void 0;
-  const multiSelect = Boolean(o.multiSelect ?? o.multi_select);
-  return { question, header, multiSelect, options };
-}
-function parsePlanQuestionsInput(input) {
-  const root = asRecord2(input);
-  if (!root) return [];
-  const list = Array.isArray(root.questions) ? root.questions : Array.isArray(root.question) ? root.question : root.question || root.prompt ? [root] : [];
-  const out = [];
-  for (const item of list) {
-    const q = parseOneQuestion(item);
-    if (q) out.push(q);
-  }
-  return out;
-}
-function isAskUserToolName(name) {
-  if (!name) return false;
-  const base = name.replace(/^mcp__sideboard__/i, "");
-  return ASK_USER_TOOL_RE.test(name) || /^ask_user$/i.test(base);
-}
-function questionsFromToolPart(part) {
-  const fromInput = parsePlanQuestionsInput(part.input);
-  if (fromInput.length) return fromInput;
-  const raw = part.result?.trim();
-  if (!raw || !raw.startsWith("{")) return [];
-  try {
-    return parsePlanQuestionsInput(JSON.parse(raw));
-  } catch {
-    return [];
-  }
-}
-function extractPendingPlanQuestions(parts) {
-  if (!parts?.length) return null;
-  for (let i = parts.length - 1; i >= 0; i--) {
-    const p = parts[i];
-    if (p.type !== "tool" || !isAskUserToolName(p.name)) continue;
-    const questions2 = questionsFromToolPart(p);
-    if (!questions2.length) continue;
-    return {
-      id: p.id || `ask-${i}`,
-      signature: planQuestionsSignature(questions2),
-      questions: questions2,
-      source: p.name || "ask_user"
-    };
-  }
-  return null;
-}
-function pendingFromAskBlock(block, dismissedQuestionSignature) {
-  if (!block || block.source !== "ask_user" || !block.questions?.length) return null;
-  const dismissed = dismissedQuestionSignature?.trim();
-  if (dismissed && (!block.questionSignature || block.questionSignature === dismissed)) {
-    return null;
-  }
-  const signature = block.questionSignature?.trim() || planQuestionsSignature(block.questions);
-  return {
-    id: `ask-block:${signature}`,
-    signature,
-    questions: block.questions,
-    source: "ask_user"
-  };
-}
-function askBlockStillWaiting(block, messages) {
-  const askedAt = block?.at;
-  if (!askedAt) return false;
-  for (let i = messages.length - 1; i >= 0; i--) {
-    const message = messages[i];
-    if (message.role !== "user" || message.origin === "continue") continue;
-    if (!message.ts) return true;
-    return askedAt > message.ts;
-  }
-  return true;
-}
-function latestPendingPlanQuestions(input) {
-  if (input.userReplied) return null;
-  const fromLive = extractPendingPlanQuestions(input.liveParts);
-  if (fromLive) return fromLive;
-  const last = input.messages[input.messages.length - 1];
-  if (last?.role === "agent") {
-    const fromParts = extractPendingPlanQuestions(last.parts);
-    if (fromParts) return fromParts;
-  }
-  const fromBlock = pendingFromAskBlock(
-    input.agentBlock,
-    input.dismissedQuestionSignature
-  );
-  if (fromBlock && askBlockStillWaiting(input.agentBlock, input.messages)) {
-    return fromBlock;
-  }
-  return null;
-}
-function isPlanQuestionAnswersMessage(text7) {
-  return text7.startsWith(PLAN_QUESTION_ANSWERS_PREFIX);
-}
-function formatPlanQuestionAnswers(questions2, answers) {
-  const lines = [PLAN_QUESTION_ANSWERS_PREFIX, ""];
-  for (let i = 0; i < questions2.length; i++) {
-    const q = questions2[i];
-    const a = answers.find((x) => x.questionIndex === i);
-    const header = q.header ? `**${q.header}** \u2014 ` : "";
-    const parts = [];
-    if (a?.selected.length) parts.push(a.selected.join(", "));
-    if (a?.other?.trim()) parts.push(a.other.trim());
-    const body = parts.length ? parts.join(" \xB7 ") : "(no answer)";
-    lines.push(`${i + 1}. ${header}${q.question}  `);
-    lines.push(`   \u2192 ${body}`);
-  }
-  return lines.join("\n");
-}
-function formatPlanQuestionsForChat(questions2) {
-  const lines = ["### Questions for you", ""];
-  for (let i = 0; i < questions2.length; i++) {
-    const q = questions2[i];
-    const header = q.header ? `**${q.header}** \u2014 ` : "";
-    lines.push(`${i + 1}. ${header}${q.question}`);
-    for (let oi = 0; oi < q.options.length; oi++) {
-      const opt = q.options[oi];
-      const desc = opt.description?.trim();
-      lines.push(
-        desc ? `   - **${opt.label}** \u2014 ${desc}` : `   - **${opt.label}**`
-      );
-    }
-    lines.push("");
-  }
-  lines.push("_Answer in the composer below._");
-  return lines.join("\n").trimEnd();
-}
-var ASK_USER_TOOL_RE, PLAN_QUESTION_ANSWERS_PREFIX;
-var init_ask_user = __esm({
-  "src/plan/ask-user.ts"() {
-    "use strict";
-    ASK_USER_TOOL_RE = /^(AskUserQuestion|ask_user|mcp__sideboard__ask_user)$/i;
-    PLAN_QUESTION_ANSWERS_PREFIX = "Answers to your questions:";
-  }
-});
-
 // src/orchestrator/task-state.ts
 function isTerminalTaskState(state) {
   return state !== "submitted" && state !== "working";
@@ -8489,14 +8511,7 @@ function needsCoordinatorAction(state) {
   return isIncompleteTaskState(state) || state === "input-required";
 }
 function endedOnAskUser(parts) {
-  if (!parts?.length) return false;
-  for (let i = parts.length - 1; i >= 0; i--) {
-    const p = parts[i];
-    if (p.type === "tool" && !p.parentId) {
-      return isAskUserToolName(p.name);
-    }
-  }
-  return false;
+  return lastTopLevelToolIsAskUser(parts);
 }
 function deriveTaskState(input) {
   if (input.stillRunning) {
@@ -14366,31 +14381,60 @@ function applySystemCaEnv(env) {
   const inherited = process.env.NODE_EXTRA_CA_CERTS?.trim();
   if (inherited) env[NODE_EXTRA_CA_CERTS] = inherited;
 }
-function extraCertsFromBundle() {
+function extraCertsFromBundle(io = {}) {
   const path2 = process.env.NODE_EXTRA_CA_CERTS?.trim();
   if (path2) return splitPemCertificates(readExistingFile(path2));
-  const dest = systemCaBundlePath();
-  return splitPemCertificates(readExistingFile(dest));
+  return splitPemCertificates(readExistingFile(systemCaBundlePath(io)));
+}
+function extraSystemCaPems(io = {}) {
+  const fromBundle = extraCertsFromBundle(io);
+  if (fromBundle.length > 0) return fromBundle;
+  return splitPemCertificates(collectSystemCaPem(io));
+}
+function mergeSystemCaIntoTlsOptions(options, extra, roots = import_node_tls.default.rootCertificates) {
+  const existing = options?.ca;
+  const base = existing == null ? [...roots] : Array.isArray(existing) ? [...existing] : [existing];
+  return { ...options, ca: [...base, ...extra] };
+}
+function systemCaTlsOptions(io = {}) {
+  const extra = extraSystemCaPems(io);
+  if (extra.length === 0) return {};
+  return { ca: [...import_node_tls.default.rootCertificates, ...extra] };
+}
+function installCreateSecureContextCaPatch(api, extra) {
+  if (api.__sideboardSystemCaPatched) return true;
+  if (typeof api.createSecureContext !== "function") return false;
+  const orig = api.createSecureContext;
+  const roots = api.rootCertificates ?? import_node_tls.default.rootCertificates;
+  api.createSecureContext = ((options) => orig(mergeSystemCaIntoTlsOptions(options, extra, roots)));
+  api.__sideboardSystemCaPatched = true;
+  return true;
 }
 function trustSystemCertificates(io = {}) {
   try {
-    const api = import_node_tls.default;
-    if (typeof api.getCACertificates !== "function" || typeof api.setDefaultCACertificates !== "function") {
-      return false;
-    }
-    const current = api.getCACertificates("default");
-    const system = api.getCACertificates("system");
-    let extra = extraCertsFromBundle();
-    if (system.length === 0 && extra.length === 0) {
-      extra = splitPemCertificates(collectSystemCaPem(io));
+    const extra = extraSystemCaPems(io);
+    const api = io.tls ?? import_node_tls.default;
+    if (typeof api.getCACertificates === "function" && typeof api.setDefaultCACertificates === "function") {
+      const current = api.getCACertificates("default");
+      const system = api.getCACertificates("system");
+      if (system.length === 0 && extra.length === 0) return false;
+      api.setDefaultCACertificates([...current, ...system, ...extra]);
+      return true;
     }
-    if (system.length === 0 && extra.length === 0) return false;
-    api.setDefaultCACertificates([...current, ...system, ...extra]);
-    return true;
+    if (extra.length === 0) return false;
+    return installCreateSecureContextCaPatch(api, extra);
   } catch {
     return false;
   }
 }
+function bootstrapSystemCa(io = {}) {
+  const systemCaBundle = materializeSystemCaBundle(io);
+  if (systemCaBundle && !process.env.NODE_EXTRA_CA_CERTS?.trim()) {
+    process.env.NODE_EXTRA_CA_CERTS = systemCaBundle;
+  }
+  applySystemCaEnv(process.env);
+  trustSystemCertificates(io);
+}
 var import_node_child_process4, import_node_fs31, import_node_path34, import_node_tls, NODE_USE_SYSTEM_CA, NODE_EXTRA_CA_CERTS, BUNDLE_NAME, BUNDLE_MAX_AGE_MS, LINUX_CA_FILES, PEM_CERT_RE;
 var init_system_ca = __esm({
   "src/http/system-ca.ts"() {
@@ -22230,6 +22274,7 @@ function decisionBlockFromParts(parts, planMode, at = (/* @__PURE__ */ new Date(
     const reason = pending ? formatAskUserNotifyMessage(pending.questions) : "Waiting for an answer in that chat.";
     return {
       ...makeAgentBlock("ask_user", reason, at),
+      onScreen: true,
       ...pending ? { questionSignature: pending.signature, questions: pending.questions } : {}
     };
   }
@@ -22287,6 +22332,38 @@ function dismissAskUserQuestion(threadId, signature) {
     ...clearBlock ? { agentBlock: null } : {}
   });
 }
+function askBlocksEqual(a, b) {
+  if (a === b) return true;
+  if (!a || !b) return false;
+  return a.source === b.source && a.reason === b.reason && a.at === b.at && a.onScreen === b.onScreen && a.questionSignature === b.questionSignature;
+}
+function askBlockAfterLiveParts(existing, parts) {
+  const last = lastTopLevelTool(parts);
+  if (last?.type === "tool" && isAskUserToolName(last.name)) {
+    if (existing?.source === "ask_user" && existing.onScreen) return existing;
+    const pending = extractPendingPlanQuestions(parts);
+    const questions2 = pending?.questions ?? existing?.questions;
+    if (!questions2?.length) {
+      return existing?.source === "ask_user" ? { ...existing, onScreen: true } : existing ?? null;
+    }
+    const at = existing?.source === "ask_user" ? existing.at : void 0;
+    return {
+      ...makeAgentBlock("ask_user", formatAskUserNotifyMessage(questions2), at),
+      onScreen: true,
+      questionSignature: pending?.signature ?? existing?.questionSignature,
+      questions: questions2
+    };
+  }
+  if (last && existing?.source === "ask_user") return null;
+  return existing ?? null;
+}
+function syncAskUserBlockFromLive(threadId, parts) {
+  const thread = readThread(threadId);
+  if (!thread || thread.status === "archived") return;
+  const next = askBlockAfterLiveParts(thread.agentBlock, parts);
+  if (askBlocksEqual(thread.agentBlock, next)) return;
+  updateThread(threadId, { agentBlock: next });
+}
 function writeAgentBlock(threadId, block) {
   const thread = readThread(threadId);
   if (!thread || thread.status === "archived") return;
@@ -25139,6 +25216,7 @@ function noteTurnLiveEvent(threadId, event) {
   const prev = buffers.get(threadId) ?? { parts: [], timer: null };
   prev.parts = trimParts(applyAgentEvent(prev.parts, event));
   buffers.set(threadId, prev);
+  syncAskUserBlockFromLive(threadId, prev.parts);
   if (event.type === "exit") {
     flush(threadId);
     const cur = buffers.get(threadId);
@@ -25195,6 +25273,7 @@ var init_turn_live = __esm({
     import_node_fs57 = require("fs");
     init_message_parts();
     init_paths();
+    init_agent_block();
     buffers = /* @__PURE__ */ new Map();
     FLUSH_MS = 800;
     MAX_PARTS = 80;
@@ -32088,6 +32167,7 @@ __export(index_exports, {
   archiveRemovedWorkspaceChats: () => archiveRemovedWorkspaceChats,
   archivesWithRemovedWorkspace: () => archivesWithRemovedWorkspace,
   armSchedules: () => armSchedules,
+  askBlockStillWaiting: () => askBlockStillWaiting,
   assertAbleTimeCredential: () => assertAbleTimeCredential,
   assertAbleTimeMcpCredential: () => assertAbleTimeMcpCredential,
   assertOrchestratorCapableAgent: () => assertOrchestratorCapableAgent,
@@ -32100,6 +32180,7 @@ __export(index_exports, {
   autoCleanupOrphansEnabled: () => autoCleanupOrphansEnabled,
   autoRenameBranchEnabled: () => autoRenameBranchEnabled,
   autoRunAfterSetupEnabled: () => autoRunAfterSetupEnabled,
+  bootstrapSystemCa: () => bootstrapSystemCa,
   branchDisplayLabel: () => branchDisplayLabel,
   brightsyAccessTokenNeedsRefresh: () => brightsyAccessTokenNeedsRefresh,
   brightsyAdapter: () => brightsyAdapter,
@@ -32527,6 +32608,7 @@ __export(index_exports, {
   lastAgentReply: () => lastAgentReply,
   lastAssistantMessageText: () => lastAssistantMessageText,
   lastRequestOccupancy: () => lastRequestOccupancy,
+  lastTopLevelToolIsAskUser: () => lastTopLevelToolIsAskUser,
   latestPendingPlanQuestions: () => latestPendingPlanQuestions,
   linearAuthorizationHeader: () => linearAuthorizationHeader,
   linearCycleIsActive: () => linearCycleIsActive,
@@ -33440,6 +33522,7 @@ init_schedule_runner();
 // src/host/serve.ts
 var import_node_child_process7 = require("child_process");
 var import_node_os22 = require("os");
+init_system_ca();
 init_app_settings();
 init_desktop_host();
 init_schedules();
@@ -33447,6 +33530,7 @@ init_schedule_runner();
 
 // src/remote/client.ts
 var import_ws2 = require("ws");
+init_system_ca();
 
 // src/slack/public-dns.ts
 var import_node_dns = require("dns");
@@ -34796,6 +34880,7 @@ function parsePhoneCreate(value) {
 }
 function summarize(thread) {
   const pr = phonePrPill(thread);
+  const block = visibleAgentBlock(thread);
   return {
     id: thread.id,
     title: thread.title?.trim() || "Untitled",
@@ -34806,14 +34891,12 @@ function summarize(thread) {
     ...pr?.url ? { prUrl: pr.url } : {},
     ...pr?.number ? { prNumber: pr.number } : {},
     ...pr?.status ? { prStatus: pr.status } : {},
-    ...thread.agentBlock ? { needsYou: true, blockedReason: thread.agentBlock.reason } : {}
+    ...block ? { needsYou: true, blockedReason: block.reason } : {}
   };
 }
 function previewOf2(thread) {
-  const messages = listPhoneMessages(thread);
-  const last = messages[messages.length - 1];
-  if (!last) return "";
-  return clip(last.text.replace(/\s+/g, " ").trim(), PREVIEW_LIMIT2);
+  const last = listPhoneMessages(thread).at(-1);
+  return last ? clip(last.text.replace(/\s+/g, " ").trim(), PREVIEW_LIMIT2) : "";
 }
 function repoName2(repoPath) {
   return repoPath.replace(/\/$/, "").split("/").pop() || repoPath;
@@ -35169,7 +35252,8 @@ function emitChatTurn(opts, chatId, threadId) {
   const pending = latestPendingPlanQuestions({
     messages: thread.messages,
     agentBlock: thread.agentBlock,
-    dismissedQuestionSignature: thread.dismissedQuestionSignature
+    dismissedQuestionSignature: thread.dismissedQuestionSignature,
+    status: thread.status
   });
   if (pending && result.taskState !== "failed" && result.taskState !== "canceled" && (result.taskState === "input-required" || thread.agentBlock?.source === "ask_user")) {
     emitControl(opts, {
@@ -35540,7 +35624,8 @@ function republishPendingAsk(opts, chatId) {
   const pending = latestPendingPlanQuestions({
     messages: thread.messages,
     agentBlock: thread.agentBlock,
-    dismissedQuestionSignature: thread.dismissedQuestionSignature
+    dismissedQuestionSignature: thread.dismissedQuestionSignature,
+    status: thread.status
   });
   if (!pending) return;
   emitControl(opts, {
@@ -37803,7 +37888,8 @@ function runCoordinatorPrompt(opts, body, generation) {
     const pending = latestPendingPlanQuestions({
       messages: thread.messages,
       agentBlock: thread.agentBlock,
-      dismissedQuestionSignature: thread.dismissedQuestionSignature
+      dismissedQuestionSignature: thread.dismissedQuestionSignature,
+      status: thread.status
     });
     if (pending && result.taskState !== "failed" && result.taskState !== "canceled" && (result.taskState === "input-required" || thread.agentBlock?.source === "ask_user")) {
       opts.onOutbound({
@@ -38252,7 +38338,15 @@ init_paths();
 init_thread_store();
 var PHONE_BOARD_SYNC_MS = 300;
 function chatKey(row2) {
-  return [row2.id, row2.title, row2.status, row2.agent, row2.preview].join("	");
+  return [
+    row2.id,
+    row2.title,
+    row2.status,
+    row2.agent,
+    row2.preview,
+    row2.needsYou ? "1" : "0",
+    row2.blockedReason ?? ""
+  ].join("	");
 }
 function phoneBoardKey(sidebar) {
   const orchestration = sidebar.orchestration.map(chatKey).join("\n");
@@ -38363,6 +38457,14 @@ function startPhoneBoardSync(opts) {
 init_protocol();
 var BACKOFF_START_MS = 1e3;
 var BACKOFF_MAX_MS = 3e4;
+var RELAY_TLS_RE = /UNABLE_TO_GET_ISSUER|unable to get local issuer|SELF_SIGNED_CERT_IN_CHAIN/i;
+var RELAY_TLS_HINT = " \u2014 the TLS certificate was rejected. GitHub login can still work (browser Keychain trust); the relay socket uses Node TLS, which needs the corporate CA.";
+function formatRemoteHostError(err) {
+  const message = err instanceof Error ? err.message : String(err);
+  if (message === "aborted") return message;
+  if (RELAY_TLS_RE.test(message)) return `${message}${RELAY_TLS_HINT}`;
+  return message;
+}
 function createRemoteKeepalive(opts) {
   let pongTimer = null;
   const arm = () => {
@@ -38459,7 +38561,7 @@ function runRemoteHost(opts) {
         backoff = BACKOFF_START_MS;
       } catch (err) {
         if (opts.signal?.aborted) return;
-        const message = err instanceof Error ? err.message : String(err);
+        const message = formatRemoteHostError(err);
         if (message !== "aborted") log(`remote error: ${message}`);
       }
       opts.onStatus?.({ connected: false, phoneConnected: false });
@@ -38477,7 +38579,10 @@ function runRemoteHost(opts) {
     const gen = ++connectionGen;
     stopBoardSync();
     setPhoneOpenChat(null);
-    const ws = new import_ws2.WebSocket(opts.url, { lookup: lookupPreferPublicDns });
+    const ws = new import_ws2.WebSocket(opts.url, {
+      lookup: lookupPreferPublicDns,
+      ...systemCaTlsOptions()
+    });
     socket = ws;
     let settled = false;
     const finish2 = (err) => {
@@ -40881,6 +40986,7 @@ async function startHeadlessHost(opts) {
   const blocked = headlessHostBlockedReason();
   if (blocked) return { ok: false, reason: blocked };
   claimDesktopHost();
+  bootstrapSystemCa();
   armSchedules();
   const ac = new AbortController();
   let stopped = false;
@@ -45465,6 +45571,7 @@ function getSlackReplyTarget(threadId) {
 }
 
 // src/slack/relay-client.ts
+init_system_ca();
 var import_ws6 = require("ws");
 var CLAIM_FALLBACK_MS = 400;
 var BACKOFF_START_MS3 = 1e3;
@@ -45493,7 +45600,10 @@ async function runSlackRelayClient(opts) {
   const log = opts.onLog ?? (() => void 0);
   const Ws = opts.WebSocketImpl ? resolveWebSocket(opts.WebSocketImpl) : class {
     constructor(url2) {
-      return new import_ws6.WebSocket(url2, { lookup: lookupPreferPublicDns });
+      return new import_ws6.WebSocket(url2, {
+        lookup: lookupPreferPublicDns,
+        ...systemCaTlsOptions()
+      });
     }
   };
   const url = opts.url.trim();
@@ -46316,12 +46426,12 @@ function sleep2(ms, signal) {
     signal?.addEventListener("abort", onAbort, { once: true });
   });
 }
-var RELAY_TLS_HINT = " \u2014 the TLS certificate was rejected. A work proxy often does this when Sideboard is not allowlisted, or when the app does not trust the corporate CA.";
+var RELAY_TLS_HINT2 = " \u2014 the TLS certificate was rejected. A work proxy often does this when Sideboard is not allowlisted, or when the app does not trust the corporate CA.";
 var RELAY_NETWORK_HINT = " Sideboard could not reach the relay. On a work computer this is often a VPN, a proxy, or an allowlist that does not include Sideboard.";
 var RELAY_NETWORK_RE = /fetch failed|Failed to fetch|ENOTFOUND|ECONNREFUSED|ECONNRESET|ETIMEDOUT|EHOSTUNREACH|ENETUNREACH|EAI_AGAIN|EPERM|UND_ERR_|ERR_CONNECTION|ERR_NETWORK|ERR_PROXY|ERR_TUNNEL|ERR_INTERNET|ERR_BLOCKED|ERR_NAME_NOT_RESOLVED|ERR_ADDRESS_UNREACHABLE|ERR_CERT|CERT_|UNABLE_TO_GET_ISSUER|SELF_SIGNED/i;
 function relayFetchError(err, url) {
-  const formatted = formatFetchError(err, url, { tlsHint: RELAY_TLS_HINT });
-  if (formatted.includes(RELAY_TLS_HINT) || !RELAY_NETWORK_RE.test(formatted)) {
+  const formatted = formatFetchError(err, url, { tlsHint: RELAY_TLS_HINT2 });
+  if (formatted.includes(RELAY_TLS_HINT2) || !RELAY_NETWORK_RE.test(formatted)) {
     return new Error(formatted);
   }
   return new Error(`${formatted}${RELAY_NETWORK_HINT}`);
@@ -46955,6 +47065,7 @@ async function pollSlackOutboundWatches(opts) {
   archiveRemovedWorkspaceChats,
   archivesWithRemovedWorkspace,
   armSchedules,
+  askBlockStillWaiting,
   assertAbleTimeCredential,
   assertAbleTimeMcpCredential,
   assertOrchestratorCapableAgent,
@@ -46967,6 +47078,7 @@ async function pollSlackOutboundWatches(opts) {
   autoCleanupOrphansEnabled,
   autoRenameBranchEnabled,
   autoRunAfterSetupEnabled,
+  bootstrapSystemCa,
   branchDisplayLabel,
   brightsyAccessTokenNeedsRefresh,
   brightsyAdapter,
@@ -47394,6 +47506,7 @@ async function pollSlackOutboundWatches(opts) {
   lastAgentReply,
   lastAssistantMessageText,
   lastRequestOccupancy,
+  lastTopLevelToolIsAskUser,
   latestPendingPlanQuestions,
   linearAuthorizationHeader,
   linearCycleIsActive,