@sideboard-ai/core 0.1.312 → 0.1.314

package/dist/{chunk-PXMLMBMI.js → chunk-E63AM3PW.js}

@@ -5,27 +5,50 @@ import {
 } from "./chunk-2GPQZZLY.js";
 
 // src/brightsy/config.ts
-import { existsSync, readFileSync, writeFileSync } from "fs";
+import { existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from "fs";
 import { homedir } from "os";
-import { join } from "path";
+import { dirname, join } from "path";
+function resolveBrightsyConfigFile(path) {
+  try {
+    if (existsSync(path) && statSync(path).isDirectory()) {
+      return join(path, "config.json");
+    }
+  } catch {
+  }
+  return path;
+}
 function brightsyConfigPath() {
   const override = process.env.BRIGHTSY_CONFIG?.trim();
-  if (override) return override;
-  return join(homedir(), ".brightsy", "config.json");
+  const raw = override || join(homedir(), ".brightsy", "config.json");
+  return resolveBrightsyConfigFile(raw);
 }
 function loadBrightsyConfig() {
   const path = brightsyConfigPath();
   if (!existsSync(path)) {
     throw new Error("Brightsy not logged in \u2014 run `brightsy login` first");
   }
-  const raw = JSON.parse(readFileSync(path, "utf8"));
+  let text;
+  try {
+    text = readFileSync(path, "utf8");
+  } catch (err) {
+    const code = err && typeof err === "object" && "code" in err ? String(err.code) : "";
+    if (code === "EISDIR") {
+      throw new Error(
+        `Brightsy config is a directory (${path}) \u2014 expected ~/.brightsy/config.json`
+      );
+    }
+    throw err;
+  }
+  const raw = JSON.parse(text);
   if (!raw.access_token || !raw.account_id) {
     throw new Error("Brightsy config incomplete \u2014 run `brightsy login`");
   }
   return raw;
 }
 function saveBrightsyConfig(cfg) {
-  writeFileSync(brightsyConfigPath(), `${JSON.stringify(cfg, null, 2)}
+  const path = brightsyConfigPath();
+  mkdirSync(dirname(path), { recursive: true });
+  writeFileSync(path, `${JSON.stringify(cfg, null, 2)}
 `, {
     mode: 384
   });

package/dist/{chunk-VEVFHO6K.js → chunk-HH3VVTEC.js}

@@ -5,7 +5,7 @@ import {
   loadBrightsyConfig,
   refreshBrightsyAccessToken,
   saveBrightsyConfig
-} from "./chunk-33KDPEK4.js";
+} from "./chunk-RSA47QYR.js";
 import {
   run
 } from "./chunk-QVN2WOKJ.js";
@@ -19,7 +19,7 @@ import { join } from "path";
 
 // src/brightsy/accounts.ts
 async function loadConnectedTeams() {
-  const { listConnectedBrightsyTeams: listConnectedBrightsyTeams2 } = await import("./connected-teams-BBNYTR3I.js");
+  const { listConnectedBrightsyTeams: listConnectedBrightsyTeams2 } = await import("./connected-teams-IHK2WXUI.js");
   return listConnectedBrightsyTeams2();
 }
 async function runBrightsyTeamsJson(args) {
@@ -47,15 +47,15 @@ async function listBrightsyAccounts() {
 }
 async function getBrightsySession() {
   try {
-    const { ensureBrightsyLocalConfigFresh: ensureBrightsyLocalConfigFresh2 } = await import("./oauth-DP4ZV2M2.js");
-    const { ensureConnectedBrightsyTeamTokens: ensureConnectedBrightsyTeamTokens2 } = await import("./connected-teams-BBNYTR3I.js");
+    const { ensureBrightsyLocalConfigFresh: ensureBrightsyLocalConfigFresh2 } = await import("./oauth-CR5FY4CJ.js");
+    const { ensureConnectedBrightsyTeamTokens: ensureConnectedBrightsyTeamTokens2 } = await import("./connected-teams-IHK2WXUI.js");
     await ensureBrightsyLocalConfigFresh2();
     await ensureConnectedBrightsyTeamTokens2();
     loadBrightsyConfig();
     const data = await runBrightsyTeamsJson([]);
     const accounts = Array.isArray(data.teams) ? data.teams : [];
     const active = data.active ?? accounts.find((a) => a.active) ?? null;
-    const { ensureCliTeamTracked: ensureCliTeamTracked2 } = await import("./connected-teams-BBNYTR3I.js");
+    const { ensureCliTeamTracked: ensureCliTeamTracked2 } = await import("./connected-teams-IHK2WXUI.js");
     const connectedTeams = ensureCliTeamTracked2(
       active ? { id: active.id, slug: active.slug, name: active.name } : void 0
     );
@@ -95,7 +95,7 @@ async function performBrightsyAccountSwitch(accountIdOrSlug) {
   return { cfg, target: data.active };
 }
 async function switchBrightsyAccount(accountIdOrSlug) {
-  const { connectBrightsyTeam: connectBrightsyTeam2 } = await import("./connected-teams-BBNYTR3I.js");
+  const { connectBrightsyTeam: connectBrightsyTeam2 } = await import("./connected-teams-IHK2WXUI.js");
   await connectBrightsyTeam2(accountIdOrSlug);
   return getBrightsySession();
 }
@@ -134,6 +134,25 @@ function listConnectedBrightsyTeams() {
 function getConnectedBrightsyTeamsRaw() {
   return readStore();
 }
+function teamFromCliSession(cfg, current) {
+  return {
+    ...current,
+    access_token: cfg.access_token,
+    refresh_token: cfg.refresh_token ?? current.refresh_token,
+    expires_at: cfg.expires_at ?? current.expires_at,
+    endpoint: cfg.endpoint ?? current.endpoint,
+    oauth_client_id: cfg.oauth_client_id ?? current.oauth_client_id,
+    slug: cfg.account_slug || current.slug
+  };
+}
+function brightsySessionShouldReplace(a, b) {
+  if (!a.access_token) return false;
+  const aStale = brightsyAccessTokenNeedsRefresh(a.expires_at);
+  const bStale = !b.access_token || brightsyAccessTokenNeedsRefresh(b.expires_at);
+  if (!aStale && bStale) return true;
+  if (aStale) return false;
+  return (a.expires_at ?? 0) > (b.expires_at ?? 0);
+}
 function applyConnectedTeamToCli(team) {
   let base = {};
   try {
@@ -220,22 +239,34 @@ async function ensureConnectedBrightsyTeamTokens(opts) {
     }
     next.push(refreshed);
   }
-  if (changed) writeStore(next);
   try {
     const cfg2 = loadBrightsyConfig();
-    const active = next.find((t) => t.id === cfg2.account_id);
-    if (active && active.access_token !== cfg2.access_token) {
-      applyConnectedTeamToCli(active);
+    const idx = next.findIndex((t) => t.id === cfg2.account_id);
+    if (idx >= 0) {
+      const active = next[idx];
+      if (brightsySessionShouldReplace(cfg2, active)) {
+        next[idx] = teamFromCliSession(cfg2, active);
+        changed = true;
+      } else if (active.access_token !== cfg2.access_token) {
+        applyConnectedTeamToCli(active);
+      }
     }
   } catch {
   }
+  if (changed) writeStore(next);
   return next;
 }
 function ensureCliTeamTracked(meta) {
   try {
     const cfg = loadBrightsyConfig();
     const existing = readStore();
-    if (existing.some((t) => t.id === cfg.account_id)) {
+    const idx = existing.findIndex((t) => t.id === cfg.account_id);
+    if (idx >= 0) {
+      const current = existing[idx];
+      if (brightsySessionShouldReplace(cfg, current)) {
+        existing[idx] = teamFromCliSession(cfg, current);
+        writeStore(existing);
+      }
       return listConnectedBrightsyTeams();
     }
     const team = {
@@ -312,6 +343,7 @@ export {
   switchBrightsyAccount,
   listConnectedBrightsyTeams,
   getConnectedBrightsyTeamsRaw,
+  brightsySessionShouldReplace,
   applyConnectedTeamToCli,
   ensureConnectedBrightsyTeamTokens,
   ensureCliTeamTracked,

package/dist/{chunk-WRZRX4Q7.js → chunk-NMPQ7GIS.js}

@@ -239,7 +239,7 @@ function connectorAuthCaution(posthog, cliConnected) {
   const signIn = posthog ? "If a connector MCP is listed but needsAuth or returns unauthorized, do not sign in to that MCP." : "If a Vercel, Supabase, or Sentry MCP is listed but needsAuth or returns unauthorized, do not sign in to that MCP.";
   const token = cliConnected ? " CLI tokens are already in this process." : "";
   const key = posthog ? " Do not read a PostHog key from the environment." : "";
-  return `${signIn}${token}${key}`;
+  return `${signIn}${token}${key} When this Sideboard connection works, ignore a Claude connector that failed to start. Use the Claude connector only when this connection is not set or the CLI call fails.`;
 }
 function connectorReminderBit(spec, cli) {
   if (!spec.cli) return `${spec.label}: \`posthog_api\``;
@@ -266,14 +266,14 @@ function formatOptionalServicesReminder(integrations, cli) {
   const bits = connected.map((spec) => connectorReminderBit(spec, cli)).join(". ");
   const tokenBit = connected.some((spec) => spec.cli) ? "CLI tokens are already in this process. " : "";
   const posthog = connected.some((spec) => spec.id === "posthog");
-  const auth = posthog ? "If a connector MCP needsAuth or is unauthorized, ignore it and use the CLI or `posthog_api`. Do not read a PostHog key from the environment." : "If a Vercel, Supabase, or Sentry MCP needsAuth or is unauthorized, ignore it and use the CLI.";
+  const auth = posthog ? "If a connector MCP needsAuth or is unauthorized, ignore it and use the CLI or `posthog_api` while this Sideboard connection works. Use the Claude connector only when it is not set or the call fails. Do not read a PostHog key from the environment." : "If a Vercel, Supabase, or Sentry MCP needsAuth or is unauthorized, ignore it and use the CLI while this Sideboard connection works. Use the Claude connector only when it is not set or the CLI call fails.";
   return `Settings \u2192 Connectors: ${tokenBit}${bits}. ${auth} Do not add vendor MCPs. Shell dumps from those CLIs go in \`.context/cli/\` \u2014 read a slice.`;
 }
 async function connectedCliPresence(integrations) {
   const ids = connectedOptionalServices(integrations).filter((spec) => spec.cli).map((spec) => spec.id);
   if (ids.length === 0) return void 0;
   try {
-    const { optionalCliPresence } = await import("./optional-cli-QY6V5S5N.js");
+    const { optionalCliPresence } = await import("./optional-cli-SI4BCPRH.js");
     return await optionalCliPresence(ids);
   } catch {
     return void 0;

package/dist/{chunk-33KDPEK4.js → chunk-RSA47QYR.js}

@@ -3,27 +3,50 @@ import {
 } from "./chunk-JAT3JFOS.js";
 
 // src/brightsy/config.ts
-import { existsSync, readFileSync, writeFileSync } from "fs";
+import { existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from "fs";
 import { homedir } from "os";
-import { join } from "path";
+import { dirname, join } from "path";
+function resolveBrightsyConfigFile(path) {
+  try {
+    if (existsSync(path) && statSync(path).isDirectory()) {
+      return join(path, "config.json");
+    }
+  } catch {
+  }
+  return path;
+}
 function brightsyConfigPath() {
   const override = process.env.BRIGHTSY_CONFIG?.trim();
-  if (override) return override;
-  return join(homedir(), ".brightsy", "config.json");
+  const raw = override || join(homedir(), ".brightsy", "config.json");
+  return resolveBrightsyConfigFile(raw);
 }
 function loadBrightsyConfig() {
   const path = brightsyConfigPath();
   if (!existsSync(path)) {
     throw new Error("Brightsy not logged in \u2014 run `brightsy login` first");
   }
-  const raw = JSON.parse(readFileSync(path, "utf8"));
+  let text;
+  try {
+    text = readFileSync(path, "utf8");
+  } catch (err) {
+    const code = err && typeof err === "object" && "code" in err ? String(err.code) : "";
+    if (code === "EISDIR") {
+      throw new Error(
+        `Brightsy config is a directory (${path}) \u2014 expected ~/.brightsy/config.json`
+      );
+    }
+    throw err;
+  }
+  const raw = JSON.parse(text);
   if (!raw.access_token || !raw.account_id) {
     throw new Error("Brightsy config incomplete \u2014 run `brightsy login`");
   }
   return raw;
 }
 function saveBrightsyConfig(cfg) {
-  writeFileSync(brightsyConfigPath(), `${JSON.stringify(cfg, null, 2)}
+  const path = brightsyConfigPath();
+  mkdirSync(dirname(path), { recursive: true });
+  writeFileSync(path, `${JSON.stringify(cfg, null, 2)}
 `, {
     mode: 384
   });

package/dist/{chunk-X3FSWWW2.js → chunk-S3KYDK6W.js}

@@ -341,12 +341,12 @@ var COORDINATOR_TOOL_PLAYBOOK = [
   "- list_projects \u2014 registered repos (path + github slug + project context when set). Use account / project context to pick the right repo for tickets or reviews.",
   "- list_board \u2014 Home Kanban of workspaces (New / Draft / Review / Approved / Merged; one card per checkout). Sibling chats on a card are separate agents, not one agent. Path to merge: no PR \u2192 draft PR \u2192 open PR \u2192 approved \u2192 merged. Archive removes the card to Settings \u2192 History (list_archive to browse, restore_workspace to bring it back). Queued/running are activity on the card, not columns. Orchestration chats are not on the board. Filters: query, repoPath, kind, column, limit.",
   `- list_branches / list_prs / list_issues \u2014 pass repoPath from list_projects. Review is PRs (the surface for assigned ticket work), not the tickets: "Get me N tickets to review" \u2192 list_prs(queue=review, limit=N) then create_workspace sourceType=pr. That is open non-draft PRs labeled with this project's ready-for-review GitHub label (Settings \u2192 Projects; default eng-review) with no individual user reviewer yet. A team request (engineering-team) is not a claim \u2014 the viewer is on that team and can pick it up; claimed means an individual account is the reviewer. Bots ignored. Use Settings \u2192 Agents / Projects context (roles, teams, labels \u2014 freeform text; project adds to account) to prefer the right queues. queue=mine is review-requested:@me; queue=approved|changes uses those labels. Also: state, label, reviewer=me|unassigned|login, query, limit default 40 max 250; raise limit or tighten when truncated. list_issues (query, assignee=me|unassigned|all|user, limit default 40 max 250) lists Linear, AbleTime, or GitHub tickets \u2014 do not use it for that review-inbox ask. When they ask for tickets to work on, follow their context (assignee=me or unassigned as it says).`,
-  "- Find work: when they ask to find work, pick up tickets, or list reviews, use Settings \u2192 Agents (account) plus Settings \u2192 Projects (per-repo) context. Tickets \u2192 Sideboard list_issues / linear_* (Account Linear). Reviews \u2192 list_prs(queue=review). Do not call Claude Linear MCP or any other vendor Linear MCP \u2014 those HTTP connectors hang or flap on the first turn. If a vendor MCP is down or reconnecting, ignore it and keep going with Sideboard tools. Show the options \u2014 do not create_workspace or start unless they also asked to start (e.g. \u201Cfind me work and start it\u201D). Do not start this unprompted. To change that context, show the proposed text, ask_user (Save this context / Do not save), wait, then update_viewer_context with confirmed=true. Never write it without confirmation.",
+  "- Find work: when they ask to find work, pick up tickets, or list reviews, use Settings \u2192 Agents (account) plus Settings \u2192 Projects (per-repo) context. Tickets \u2192 Sideboard list_issues / linear_* (Account Linear). Reviews \u2192 list_prs(queue=review). Do not call Claude Linear MCP or any other vendor Linear MCP \u2014 those HTTP connectors hang or flap on the first turn. If a vendor MCP is down or reconnecting, ignore it and keep going with Sideboard tools. A failed Claude connector is not a Sideboard outage \u2014 do not mention it when the Account connection works. Show the options \u2014 do not create_workspace or start unless they also asked to start (e.g. \u201Cfind me work and start it\u201D). Do not start this unprompted. To change that context, show the proposed text, ask_user (Save this context / Do not save), wait, then update_viewer_context with confirmed=true. Never write it without confirmation.",
   "- Ticket updates: list_issues / linear_search_issues / github_search_issues with updatedSince (yesterday, 2d, or ISO). One call returns new assignments, ticket edits, and new comments \u2014 do not get_issue every ticket just to check for comments. kind=created vs updated distinguishes new tickets from existing ones.",
-  "- linear_* (when Linear is connected) \u2014 list_teams for team key/states; linear_list_projects for project names; get/search include the project a ticket is on; get/create/update/comment with ENG-123. Worktree agents have the same Account tools \u2014 prefer they comment, update status, and create spin-offs (parent=) on their own ticket when they were asked to do the work. When reviewing a PR or ticket, do not comment or update until the user types a next step \u2014 they should work through the feedback in chat first. Do not tell the child to ask_user after the review. Scope errors: reconnect Linear in Account settings. Prefer these over any Linear MCP the CLI may still list.",
-  "- github_* \u2014 get/comment/update/create GitHub issues via Account `gh` (#123). github_list_projects and get/search include GitHub Projects. projectsError or a missing read:project scope \u2192 `gh auth refresh -s read:project`. Worktree agents have these too. Prefer over any vendor GitHub MCP. Pass parent= for spin-offs. When reviewing a PR or ticket, do not comment, submit `gh pr review`, or update the PR/ticket until the user types a next step.",
+  "- linear_* (when Linear is connected) \u2014 list_teams for team key/states; linear_list_projects for project names; get/search include the project a ticket is on; get/create/update/comment with ENG-123. Worktree agents have the same Account tools \u2014 prefer they comment, update status, and create spin-offs (parent=) on their own ticket when they were asked to do the work. When reviewing a PR or ticket, do not comment or update until the user types a next step \u2014 they should work through the feedback in chat first. Do not tell the child to ask_user after the review. Scope errors: reconnect Linear in Account settings. Prefer these over any Linear MCP the CLI may still list. Worktree agents use the Claude Linear connector only when Account Linear is not set or the Sideboard call fails, and they do not mention that connector startup failure when Sideboard works.",
+  "- github_* \u2014 get/comment/update/create GitHub issues via Account `gh` (#123). github_list_projects and get/search include GitHub Projects. projectsError or a missing read:project scope \u2192 `gh auth refresh -s read:project`. Worktree agents have these too. Prefer Sideboard `github_*` while Account `gh` works. A failed Claude GitHub connector (`mcp_github_github`) is not a Sideboard outage \u2014 do not mention it. Use that connector only when `gh` is not set up or the Sideboard call fails. Pass parent= for spin-offs. When reviewing a PR or ticket, do not comment, submit `gh pr review`, or update the PR/ticket until the user types a next step.",
   "- abletime_* (when AbleTime is connected) \u2014 orientation first; abletime_list_projects lists projects; get/list include the project a task is on; get/comment/update/create (parent= for spin-offs); ensure_task when work has no ticket (or create_workspace from the default branch auto-creates one). Worktree agents have the same Account tools. Same review-write gate as Linear/GitHub.",
-  "- Optional connectors (Vercel, Supabase, Sentry) in Settings \u2192 Connectors inject tokens into worktree agent env when connected. Prefer official CLIs (`vercel`, `supabase`, `sentry-cli`). When Settings \u2192 Connectors has a PostHog personal API key, PostHog is the Sideboard tool `posthog_api` (GET by default; POST `/api/projects/:id/query/` or `/api/environments/:id/query/` is a read and does not need write=true; other POST and PATCH need write=true only when the user asked to change data). The PostHog key stays in the vault \u2014 do not read it from the environment, and do not sign in to a PostHog MCP. When no PostHog API key is set, leave the Claude PostHog connector alone. If a Vercel, Supabase, or Sentry MCP needsAuth or is unauthorized, do not sign in \u2014 use the native CLI. Tell any worktree agent (Claude / Cursor / Codex / OpenCode) to write CLI output to `.context/cli/` and read a slice. If a CLI is missing, the user presses Install CLI on that row. Do not add vendor MCPs. Git (`gh`) stays Settings \u2192 Git; issue tracking stays Settings \u2192 Issues. The phone remote is Settings \u2192 Remote \u2014 do not look up Slack users.",
+  "- Optional connectors (Vercel, Supabase, Sentry) in Settings \u2192 Connectors inject tokens into worktree agent env when connected. Prefer official CLIs (`vercel`, `supabase`, `sentry-cli`). When Settings \u2192 Connectors has a PostHog personal API key, PostHog is the Sideboard tool `posthog_api` (GET by default; POST `/api/projects/:id/query/` or `/api/environments/:id/query/` is a read and does not need write=true; other POST and PATCH need write=true only when the user asked to change data). The PostHog key stays in the vault \u2014 do not read it from the environment, and do not sign in to a PostHog MCP. When no PostHog API key is set, use the Claude PostHog connector. When a key is set, ignore a failed Claude PostHog connector and do not sign in to a PostHog MCP. If a Vercel, Supabase, or Sentry MCP needsAuth or is unauthorized while that Sideboard token is set, do not sign in \u2014 use the native CLI. When that token is not set or the CLI call fails, the Claude connector is the fallback. Do not mention a Claude connector startup failure when the Sideboard connection works. Tell any worktree agent (Claude / Cursor / Codex / OpenCode) to write CLI output to `.context/cli/` and read a slice. If a CLI is missing, the user presses Install CLI on that row. Do not add vendor MCPs. Git (`gh`) stays Settings \u2192 Git; issue tracking stays Settings \u2192 Issues. The phone remote is Settings \u2192 Remote \u2014 do not look up Slack users.",
   "- get_pr_stack / open_pr_stack_layers / add_stack_layer / create_pr_stack \u2014 GitHub stacked PRs (`gh stack`); one worktree per layer",
   "- list_models \u2014 only when you need a specific model (rare); otherwise omit model so Account defaults apply",
   "- list_chats / get_chat \u2014 live thread list (parent id + last message preview). get_chat on this orchestration chat lists child worktree agents (status + lastText). blockedReason is why that agent is waiting on a person. Also includes usage / lastTurnUsage. Archived workspaces and agents are list_archive, not this list.",

package/dist/{chunk-62ESCTJ4.js → chunk-TO5UL7VN.js}

@@ -91,7 +91,7 @@ function connectorAuthCaution(posthog, cliConnected) {
   const signIn = posthog ? "If a connector MCP is listed but needsAuth or returns unauthorized, do not sign in to that MCP." : "If a Vercel, Supabase, or Sentry MCP is listed but needsAuth or returns unauthorized, do not sign in to that MCP.";
   const token = cliConnected ? " CLI tokens are already in this process." : "";
   const key = posthog ? " Do not read a PostHog key from the environment." : "";
-  return `${signIn}${token}${key}`;
+  return `${signIn}${token}${key} When this Sideboard connection works, ignore a Claude connector that failed to start. Use the Claude connector only when this connection is not set or the CLI call fails.`;
 }
 function connectorReminderBit(spec, cli) {
   if (!spec.cli) return `${spec.label}: \`posthog_api\``;
@@ -118,14 +118,14 @@ function formatOptionalServicesReminder(integrations, cli) {
   const bits = connected.map((spec) => connectorReminderBit(spec, cli)).join(". ");
   const tokenBit = connected.some((spec) => spec.cli) ? "CLI tokens are already in this process. " : "";
   const posthog = connected.some((spec) => spec.id === "posthog");
-  const auth = posthog ? "If a connector MCP needsAuth or is unauthorized, ignore it and use the CLI or `posthog_api`. Do not read a PostHog key from the environment." : "If a Vercel, Supabase, or Sentry MCP needsAuth or is unauthorized, ignore it and use the CLI.";
+  const auth = posthog ? "If a connector MCP needsAuth or is unauthorized, ignore it and use the CLI or `posthog_api` while this Sideboard connection works. Use the Claude connector only when it is not set or the call fails. Do not read a PostHog key from the environment." : "If a Vercel, Supabase, or Sentry MCP needsAuth or is unauthorized, ignore it and use the CLI while this Sideboard connection works. Use the Claude connector only when it is not set or the CLI call fails.";
   return `Settings \u2192 Connectors: ${tokenBit}${bits}. ${auth} Do not add vendor MCPs. Shell dumps from those CLIs go in \`.context/cli/\` \u2014 read a slice.`;
 }
 async function connectedCliPresence(integrations) {
   const ids = connectedOptionalServices(integrations).filter((spec) => spec.cli).map((spec) => spec.id);
   if (ids.length === 0) return void 0;
   try {
-    const { optionalCliPresence } = await import("./optional-cli-QDIT57VD.js");
+    const { optionalCliPresence } = await import("./optional-cli-MLZSE6KW.js");
     return await optionalCliPresence(ids);
   } catch {
     return void 0;

package/dist/{chunk-42JGPPVS.js → chunk-V5BTGQ6M.js}

@@ -7,7 +7,7 @@ import {
   loadBrightsyConfig,
   refreshBrightsyAccessToken,
   saveBrightsyConfig
-} from "./chunk-PXMLMBMI.js";
+} from "./chunk-E63AM3PW.js";
 import {
   run
 } from "./chunk-2UG25RMK.js";
@@ -93,6 +93,25 @@ function listConnectedBrightsyTeams() {
 function getConnectedBrightsyTeamsRaw() {
   return readStore();
 }
+function teamFromCliSession(cfg, current) {
+  return {
+    ...current,
+    access_token: cfg.access_token,
+    refresh_token: cfg.refresh_token ?? current.refresh_token,
+    expires_at: cfg.expires_at ?? current.expires_at,
+    endpoint: cfg.endpoint ?? current.endpoint,
+    oauth_client_id: cfg.oauth_client_id ?? current.oauth_client_id,
+    slug: cfg.account_slug || current.slug
+  };
+}
+function brightsySessionShouldReplace(a, b) {
+  if (!a.access_token) return false;
+  const aStale = brightsyAccessTokenNeedsRefresh(a.expires_at);
+  const bStale = !b.access_token || brightsyAccessTokenNeedsRefresh(b.expires_at);
+  if (!aStale && bStale) return true;
+  if (aStale) return false;
+  return (a.expires_at ?? 0) > (b.expires_at ?? 0);
+}
 function applyConnectedTeamToCli(team) {
   let base = {};
   try {
@@ -179,22 +198,34 @@ async function ensureConnectedBrightsyTeamTokens(opts) {
     }
     next.push(refreshed);
   }
-  if (changed) writeStore(next);
   try {
     const cfg2 = loadBrightsyConfig();
-    const active = next.find((t) => t.id === cfg2.account_id);
-    if (active && active.access_token !== cfg2.access_token) {
-      applyConnectedTeamToCli(active);
+    const idx = next.findIndex((t) => t.id === cfg2.account_id);
+    if (idx >= 0) {
+      const active = next[idx];
+      if (brightsySessionShouldReplace(cfg2, active)) {
+        next[idx] = teamFromCliSession(cfg2, active);
+        changed = true;
+      } else if (active.access_token !== cfg2.access_token) {
+        applyConnectedTeamToCli(active);
+      }
     }
   } catch {
   }
+  if (changed) writeStore(next);
   return next;
 }
 function ensureCliTeamTracked(meta) {
   try {
     const cfg = loadBrightsyConfig();
     const existing = readStore();
-    if (existing.some((t) => t.id === cfg.account_id)) {
+    const idx = existing.findIndex((t) => t.id === cfg.account_id);
+    if (idx >= 0) {
+      const current = existing[idx];
+      if (brightsySessionShouldReplace(cfg, current)) {
+        existing[idx] = teamFromCliSession(cfg, current);
+        writeStore(existing);
+      }
       return listConnectedBrightsyTeams();
     }
     const team = {
@@ -268,6 +299,7 @@ function brightsyMcpServerName(slug) {
 export {
   listConnectedBrightsyTeams,
   getConnectedBrightsyTeamsRaw,
+  brightsySessionShouldReplace,
   applyConnectedTeamToCli,
   ensureConnectedBrightsyTeamTokens,
   ensureCliTeamTracked,

package/dist/{chunk-LLTWP4PK.js → chunk-YK77HB3W.js}

@@ -6,7 +6,7 @@ import {
 import {
   formatOptionalServicesDirectiveForTurn,
   formatOptionalServicesReminderForTurn
-} from "./chunk-62ESCTJ4.js";
+} from "./chunk-TO5UL7VN.js";
 import {
   extractPresentedPlan,
   isPresentPlanToolName,
@@ -27,7 +27,7 @@ import {
   parseSessionQuotaResetAt,
   planModeTurnInstruction,
   resolveQuotaFallbackAgent
-} from "./chunk-2P2HYXA2.js";
+} from "./chunk-A45QMSVB.js";
 import {
   REVIEW_TAB_TITLE,
   applyWorktreePkgCacheEnv,
@@ -69,7 +69,7 @@ import {
   worktreeDevProcessKey,
   worktreeRunProcessKey,
   worktreeSetupProcessKey
-} from "./chunk-ZW7RSQHY.js";
+} from "./chunk-5QYCCXXQ.js";
 import {
   applyAgentEvent,
   clipAgentEventForPaint,
@@ -121,7 +121,7 @@ import {
   stageAbsolutePathsAsAttachments,
   stageBuffersAsAttachments,
   syncWorkspacesFromThreads
-} from "./chunk-X3FSWWW2.js";
+} from "./chunk-S3KYDK6W.js";
 import {
   addPrStackLayer,
   allocateTeamSlug,
@@ -506,9 +506,9 @@ async function spawnAgentTurn(thread, input, onEvent) {
       `Cannot spawn ${thread.agent}: thread ${thread.id} has no worktreePath`
     );
   }
-  const { isGlobalThread: isGlobalThread2 } = await import("./global-workspace-H6X32IJZ.js");
+  const { isGlobalThread: isGlobalThread2 } = await import("./global-workspace-UDRTONQE.js");
   if (isGlobalThread2(thread)) {
-    const { ensureGlobalCoordinatorCwd: ensureGlobalCoordinatorCwd2 } = await import("./coordinator-prompt-GZCWQAAV.js");
+    const { ensureGlobalCoordinatorCwd: ensureGlobalCoordinatorCwd2 } = await import("./coordinator-prompt-EXJSULAR.js");
     ensureGlobalCoordinatorCwd2(
       isOrchestratorThread(thread) ? { orchestratorThreadId: thread.id } : void 0
     );
@@ -3544,7 +3544,7 @@ async function adoptThread(input) {
     messages: input.messages ?? []
   });
   writeThread(thread);
-  const { addWorkspace: addWorkspace2 } = await import("./workspaces-AGOLRBYZ.js");
+  const { addWorkspace: addWorkspace2 } = await import("./workspaces-TATO466L.js");
   await addWorkspace2(repoPath);
   const { ensureWorktreeSideboardIgnored } = await import("./worktree-exclude-5N2KTYIT.js");
   await ensureWorktreeSideboardIgnored(input.worktreePath);
@@ -5628,7 +5628,7 @@ function formatIssueToolsDirective(opts) {
   if (!opts.linear && !opts.abletime && !github) return null;
   const lines = [
     "Issue tracking (Settings \u2192 Issues / Git \u2014 already signed in):",
-    "- Use Sideboard `linear_*` / `github_*` / `abletime_*` tools. Do not call Claude Linear MCP, vendor GitHub MCP, or any other vendor issue MCP \u2014 those need a separate login and hang. If a vendor namespace shows needsAuth, ignore it and keep going with Sideboard tools."
+    "- Use Sideboard `linear_*` / `github_*` / `abletime_*` when that Account connection is set and the call works. If it is not set, or the Sideboard call fails because the connection is down, use the Claude connector for that service. Do not mention a Claude connector that failed to start (for example `mcp_github_github` or `plugin:github:github`) when the Sideboard connection is working. A vendor issue MCP that only needsAuth is noise \u2014 do not sign in to it while Sideboard covers that service."
   ];
   if (opts.linear) {
     lines.push(
@@ -5668,7 +5668,7 @@ function formatIssueToolsReminder(opts) {
   ].filter(Boolean);
   const ticket = opts.ticketId?.trim();
   const ticketBit = ticket ? ` This ticket: ${ticket}${opts.ticketProvider ? ` (${opts.ticketProvider})` : ""} \u2014 get; comment/update review findings only after they ask. Spin-offs use parent=.` : " get/comment/update/create (parent= for spin-offs).";
-  return `Issues: Sideboard ${names.join(" / ")} (Account). Ignore vendor issue MCP auth.${ticketBit} Review stays in chat \u2014 do not ask_user after it; they type next steps. Authors see comments immediately.`;
+  return `Issues: Sideboard ${names.join(" / ")} when that Account connection works. If it is not set or the call fails, use the Claude connector. Do not mention a Claude connector startup failure when Sideboard covers it.${ticketBit} Review stays in chat \u2014 do not ask_user after it; they type next steps. Authors see comments immediately.`;
 }
 function formatPrGateDirective() {
   return [
@@ -6438,7 +6438,7 @@ function formatScheduledPrompt(name, prompt) {
 ${prompt}`;
 }
 async function defaultDeps() {
-  const { getOrchestrator: getOrchestrator2, startOrchestration: startOrchestration2 } = await import("./orchestrator-S44BMNN7.js");
+  const { getOrchestrator: getOrchestrator2, startOrchestration: startOrchestration2 } = await import("./orchestrator-AM7VT2BD.js");
   const orch = getOrchestrator2();
   return {
     findThread: (id) => findThreadByRef(id),

package/dist/{chunk-RU6DTCCV.js → chunk-ZQLZ2A3I.js}

@@ -2,7 +2,7 @@ import {
   OPTIONAL_SERVICES,
   isOptionalServiceId,
   optionalServiceSpec
-} from "./chunk-WRZRX4Q7.js";
+} from "./chunk-NMPQ7GIS.js";
 import {
   installNpmGlobalPackage,
   whichOnPath

package/dist/{chunk-5QX2NYXL.js → chunk-ZSVKUOFH.js}

@@ -386,12 +386,12 @@ var COORDINATOR_TOOL_PLAYBOOK = [
   "- list_projects \u2014 registered repos (path + github slug + project context when set). Use account / project context to pick the right repo for tickets or reviews.",
   "- list_board \u2014 Home Kanban of workspaces (New / Draft / Review / Approved / Merged; one card per checkout). Sibling chats on a card are separate agents, not one agent. Path to merge: no PR \u2192 draft PR \u2192 open PR \u2192 approved \u2192 merged. Archive removes the card to Settings \u2192 History (list_archive to browse, restore_workspace to bring it back). Queued/running are activity on the card, not columns. Orchestration chats are not on the board. Filters: query, repoPath, kind, column, limit.",
   `- list_branches / list_prs / list_issues \u2014 pass repoPath from list_projects. Review is PRs (the surface for assigned ticket work), not the tickets: "Get me N tickets to review" \u2192 list_prs(queue=review, limit=N) then create_workspace sourceType=pr. That is open non-draft PRs labeled with this project's ready-for-review GitHub label (Settings \u2192 Projects; default eng-review) with no individual user reviewer yet. A team request (engineering-team) is not a claim \u2014 the viewer is on that team and can pick it up; claimed means an individual account is the reviewer. Bots ignored. Use Settings \u2192 Agents / Projects context (roles, teams, labels \u2014 freeform text; project adds to account) to prefer the right queues. queue=mine is review-requested:@me; queue=approved|changes uses those labels. Also: state, label, reviewer=me|unassigned|login, query, limit default 40 max 250; raise limit or tighten when truncated. list_issues (query, assignee=me|unassigned|all|user, limit default 40 max 250) lists Linear, AbleTime, or GitHub tickets \u2014 do not use it for that review-inbox ask. When they ask for tickets to work on, follow their context (assignee=me or unassigned as it says).`,
-  "- Find work: when they ask to find work, pick up tickets, or list reviews, use Settings \u2192 Agents (account) plus Settings \u2192 Projects (per-repo) context. Tickets \u2192 Sideboard list_issues / linear_* (Account Linear). Reviews \u2192 list_prs(queue=review). Do not call Claude Linear MCP or any other vendor Linear MCP \u2014 those HTTP connectors hang or flap on the first turn. If a vendor MCP is down or reconnecting, ignore it and keep going with Sideboard tools. Show the options \u2014 do not create_workspace or start unless they also asked to start (e.g. \u201Cfind me work and start it\u201D). Do not start this unprompted. To change that context, show the proposed text, ask_user (Save this context / Do not save), wait, then update_viewer_context with confirmed=true. Never write it without confirmation.",
+  "- Find work: when they ask to find work, pick up tickets, or list reviews, use Settings \u2192 Agents (account) plus Settings \u2192 Projects (per-repo) context. Tickets \u2192 Sideboard list_issues / linear_* (Account Linear). Reviews \u2192 list_prs(queue=review). Do not call Claude Linear MCP or any other vendor Linear MCP \u2014 those HTTP connectors hang or flap on the first turn. If a vendor MCP is down or reconnecting, ignore it and keep going with Sideboard tools. A failed Claude connector is not a Sideboard outage \u2014 do not mention it when the Account connection works. Show the options \u2014 do not create_workspace or start unless they also asked to start (e.g. \u201Cfind me work and start it\u201D). Do not start this unprompted. To change that context, show the proposed text, ask_user (Save this context / Do not save), wait, then update_viewer_context with confirmed=true. Never write it without confirmation.",
   "- Ticket updates: list_issues / linear_search_issues / github_search_issues with updatedSince (yesterday, 2d, or ISO). One call returns new assignments, ticket edits, and new comments \u2014 do not get_issue every ticket just to check for comments. kind=created vs updated distinguishes new tickets from existing ones.",
-  "- linear_* (when Linear is connected) \u2014 list_teams for team key/states; linear_list_projects for project names; get/search include the project a ticket is on; get/create/update/comment with ENG-123. Worktree agents have the same Account tools \u2014 prefer they comment, update status, and create spin-offs (parent=) on their own ticket when they were asked to do the work. When reviewing a PR or ticket, do not comment or update until the user types a next step \u2014 they should work through the feedback in chat first. Do not tell the child to ask_user after the review. Scope errors: reconnect Linear in Account settings. Prefer these over any Linear MCP the CLI may still list.",
-  "- github_* \u2014 get/comment/update/create GitHub issues via Account `gh` (#123). github_list_projects and get/search include GitHub Projects. projectsError or a missing read:project scope \u2192 `gh auth refresh -s read:project`. Worktree agents have these too. Prefer over any vendor GitHub MCP. Pass parent= for spin-offs. When reviewing a PR or ticket, do not comment, submit `gh pr review`, or update the PR/ticket until the user types a next step.",
+  "- linear_* (when Linear is connected) \u2014 list_teams for team key/states; linear_list_projects for project names; get/search include the project a ticket is on; get/create/update/comment with ENG-123. Worktree agents have the same Account tools \u2014 prefer they comment, update status, and create spin-offs (parent=) on their own ticket when they were asked to do the work. When reviewing a PR or ticket, do not comment or update until the user types a next step \u2014 they should work through the feedback in chat first. Do not tell the child to ask_user after the review. Scope errors: reconnect Linear in Account settings. Prefer these over any Linear MCP the CLI may still list. Worktree agents use the Claude Linear connector only when Account Linear is not set or the Sideboard call fails, and they do not mention that connector startup failure when Sideboard works.",
+  "- github_* \u2014 get/comment/update/create GitHub issues via Account `gh` (#123). github_list_projects and get/search include GitHub Projects. projectsError or a missing read:project scope \u2192 `gh auth refresh -s read:project`. Worktree agents have these too. Prefer Sideboard `github_*` while Account `gh` works. A failed Claude GitHub connector (`mcp_github_github`) is not a Sideboard outage \u2014 do not mention it. Use that connector only when `gh` is not set up or the Sideboard call fails. Pass parent= for spin-offs. When reviewing a PR or ticket, do not comment, submit `gh pr review`, or update the PR/ticket until the user types a next step.",
   "- abletime_* (when AbleTime is connected) \u2014 orientation first; abletime_list_projects lists projects; get/list include the project a task is on; get/comment/update/create (parent= for spin-offs); ensure_task when work has no ticket (or create_workspace from the default branch auto-creates one). Worktree agents have the same Account tools. Same review-write gate as Linear/GitHub.",
-  "- Optional connectors (Vercel, Supabase, Sentry) in Settings \u2192 Connectors inject tokens into worktree agent env when connected. Prefer official CLIs (`vercel`, `supabase`, `sentry-cli`). When Settings \u2192 Connectors has a PostHog personal API key, PostHog is the Sideboard tool `posthog_api` (GET by default; POST `/api/projects/:id/query/` or `/api/environments/:id/query/` is a read and does not need write=true; other POST and PATCH need write=true only when the user asked to change data). The PostHog key stays in the vault \u2014 do not read it from the environment, and do not sign in to a PostHog MCP. When no PostHog API key is set, leave the Claude PostHog connector alone. If a Vercel, Supabase, or Sentry MCP needsAuth or is unauthorized, do not sign in \u2014 use the native CLI. Tell any worktree agent (Claude / Cursor / Codex / OpenCode) to write CLI output to `.context/cli/` and read a slice. If a CLI is missing, the user presses Install CLI on that row. Do not add vendor MCPs. Git (`gh`) stays Settings \u2192 Git; issue tracking stays Settings \u2192 Issues. The phone remote is Settings \u2192 Remote \u2014 do not look up Slack users.",
+  "- Optional connectors (Vercel, Supabase, Sentry) in Settings \u2192 Connectors inject tokens into worktree agent env when connected. Prefer official CLIs (`vercel`, `supabase`, `sentry-cli`). When Settings \u2192 Connectors has a PostHog personal API key, PostHog is the Sideboard tool `posthog_api` (GET by default; POST `/api/projects/:id/query/` or `/api/environments/:id/query/` is a read and does not need write=true; other POST and PATCH need write=true only when the user asked to change data). The PostHog key stays in the vault \u2014 do not read it from the environment, and do not sign in to a PostHog MCP. When no PostHog API key is set, use the Claude PostHog connector. When a key is set, ignore a failed Claude PostHog connector and do not sign in to a PostHog MCP. If a Vercel, Supabase, or Sentry MCP needsAuth or is unauthorized while that Sideboard token is set, do not sign in \u2014 use the native CLI. When that token is not set or the CLI call fails, the Claude connector is the fallback. Do not mention a Claude connector startup failure when the Sideboard connection works. Tell any worktree agent (Claude / Cursor / Codex / OpenCode) to write CLI output to `.context/cli/` and read a slice. If a CLI is missing, the user presses Install CLI on that row. Do not add vendor MCPs. Git (`gh`) stays Settings \u2192 Git; issue tracking stays Settings \u2192 Issues. The phone remote is Settings \u2192 Remote \u2014 do not look up Slack users.",
   "- get_pr_stack / open_pr_stack_layers / add_stack_layer / create_pr_stack \u2014 GitHub stacked PRs (`gh stack`); one worktree per layer",
   "- list_models \u2014 only when you need a specific model (rare); otherwise omit model so Account defaults apply",
   "- list_chats / get_chat \u2014 live thread list (parent id + last message preview). get_chat on this orchestration chat lists child worktree agents (status + lastText). blockedReason is why that agent is waiting on a person. Also includes usage / lastTurnUsage. Archived workspaces and agents are list_archive, not this list.",

package/dist/{conductor-CTWR6NH4.js → conductor-G6TKCMIW.js}

@@ -34,9 +34,9 @@ import {
   tryReservePort,
   tryReservePorts,
   worktreeRunPortsPath
-} from "./chunk-ZW7RSQHY.js";
+} from "./chunk-5QYCCXXQ.js";
 import "./chunk-I5TESHDN.js";
-import "./chunk-X3FSWWW2.js";
+import "./chunk-S3KYDK6W.js";
 import "./chunk-DLGGLV2M.js";
 import "./chunk-N2WW62LF.js";
 import "./chunk-DD67JWTN.js";

package/dist/{conductor-YOBSYPLT.js → conductor-IIDQ2U24.js}

@@ -32,9 +32,9 @@ import {
   tryReservePort,
   tryReservePorts,
   worktreeRunPortsPath
-} from "./chunk-QC2TQMPJ.js";
+} from "./chunk-7UP4D5XI.js";
 import "./chunk-7Q327QF2.js";
-import "./chunk-5QX2NYXL.js";
+import "./chunk-ZSVKUOFH.js";
 import "./chunk-BIPXOHZI.js";
 import "./chunk-HG25AYBV.js";
 import "./chunk-2P4XKWV2.js";

package/dist/{connected-teams-WLWIVYGD.js → connected-teams-IFW3NQ6G.js}

@@ -3,14 +3,15 @@
 import {
   applyConnectedTeamToCli,
   brightsyMcpServerName,
+  brightsySessionShouldReplace,
   connectBrightsyTeam,
   disconnectBrightsyTeam,
   ensureCliTeamTracked,
   ensureConnectedBrightsyTeamTokens,
   getConnectedBrightsyTeamsRaw,
   listConnectedBrightsyTeams
-} from "./chunk-42JGPPVS.js";
-import "./chunk-PXMLMBMI.js";
+} from "./chunk-V5BTGQ6M.js";
+import "./chunk-E63AM3PW.js";
 import "./chunk-2GPQZZLY.js";
 import "./chunk-2UG25RMK.js";
 import "./chunk-WWUABK6B.js";
@@ -18,6 +19,7 @@ import "./chunk-WOU343SI.js";
 export {
   applyConnectedTeamToCli,
   brightsyMcpServerName,
+  brightsySessionShouldReplace,
   connectBrightsyTeam,
   disconnectBrightsyTeam,
   ensureCliTeamTracked,

package/dist/{connected-teams-BBNYTR3I.js → connected-teams-IHK2WXUI.js}

@@ -1,14 +1,15 @@
 import {
   applyConnectedTeamToCli,
   brightsyMcpServerName,
+  brightsySessionShouldReplace,
   connectBrightsyTeam,
   disconnectBrightsyTeam,
   ensureCliTeamTracked,
   ensureConnectedBrightsyTeamTokens,
   getConnectedBrightsyTeamsRaw,
   listConnectedBrightsyTeams
-} from "./chunk-VEVFHO6K.js";
-import "./chunk-33KDPEK4.js";
+} from "./chunk-HH3VVTEC.js";
+import "./chunk-RSA47QYR.js";
 import "./chunk-JAT3JFOS.js";
 import "./chunk-QVN2WOKJ.js";
 import "./chunk-4TR3HZFT.js";
@@ -16,6 +17,7 @@ import "./chunk-H4UEFJRI.js";
 export {
   applyConnectedTeamToCli,
   brightsyMcpServerName,
+  brightsySessionShouldReplace,
   connectBrightsyTeam,
   disconnectBrightsyTeam,
   ensureCliTeamTracked,

package/dist/{coordinator-prompt-YAZRQ4BI.js → coordinator-prompt-5USNNCG6.js}

@@ -7,7 +7,7 @@ import {
   enrichWorkspacesWithGithub,
   ensureGlobalCoordinatorCwd,
   formatWorkspaceInventory
-} from "./chunk-5QX2NYXL.js";
+} from "./chunk-ZSVKUOFH.js";
 import "./chunk-BIPXOHZI.js";
 import "./chunk-HG25AYBV.js";
 import "./chunk-2P4XKWV2.js";

package/dist/{coordinator-prompt-GZCWQAAV.js → coordinator-prompt-EXJSULAR.js}

@@ -9,7 +9,7 @@ import {
   enrichWorkspacesWithGithub,
   ensureGlobalCoordinatorCwd,
   formatWorkspaceInventory
-} from "./chunk-X3FSWWW2.js";
+} from "./chunk-S3KYDK6W.js";
 import "./chunk-DLGGLV2M.js";
 import "./chunk-N2WW62LF.js";
 import "./chunk-DD67JWTN.js";