@sideboard-ai/core 0.1.45 → 0.1.49

package/dist/mcp/run-stdio.cjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+
 "use strict";
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -2753,7 +2754,7 @@ function normalizeAdvanced(raw) {
   if (source.orchestrationQuotaOnLimit === "switch_agent" || source.orchestrationQuotaOnLimit === "wait_reset") {
     out.orchestrationQuotaOnLimit = source.orchestrationQuotaOnLimit;
   }
-  if (typeof source.orchestrationQuotaFallbackAgent === "string" && DEFAULT_AGENTS.has(source.orchestrationQuotaFallbackAgent)) {
+  if (typeof source.orchestrationQuotaFallbackAgent === "string" && DEFAULT_AGENTS.has(source.orchestrationQuotaFallbackAgent) && source.orchestrationQuotaFallbackAgent !== "brightsy") {
     out.orchestrationQuotaFallbackAgent = source.orchestrationQuotaFallbackAgent;
   }
   return out;
@@ -2993,7 +2994,7 @@ function updateAdvancedSettings(patch) {
   if (patch.orchestrationQuotaOnLimit === "switch_agent" || patch.orchestrationQuotaOnLimit === "wait_reset") {
     advanced.orchestrationQuotaOnLimit = patch.orchestrationQuotaOnLimit;
   }
-  if (typeof patch.orchestrationQuotaFallbackAgent === "string" && DEFAULT_AGENTS.has(patch.orchestrationQuotaFallbackAgent)) {
+  if (typeof patch.orchestrationQuotaFallbackAgent === "string" && DEFAULT_AGENTS.has(patch.orchestrationQuotaFallbackAgent) && patch.orchestrationQuotaFallbackAgent !== "brightsy") {
     advanced.orchestrationQuotaFallbackAgent = patch.orchestrationQuotaFallbackAgent;
   }
   return saveAppSettings({ ...current, advanced });
@@ -3021,7 +3022,10 @@ function orchestrationQuotaOnLimit(settings = loadAppSettings()) {
 }
 function orchestrationQuotaFallbackAgent(settings = loadAppSettings()) {
   const preferred = settings.advanced.orchestrationQuotaFallbackAgent;
-  return preferred && DEFAULT_AGENTS.has(preferred) ? preferred : "cursor";
+  if (preferred && DEFAULT_AGENTS.has(preferred) && preferred !== "brightsy") {
+    return preferred;
+  }
+  return "cursor";
 }
 function maxConcurrentAgents(settings = loadAppSettings()) {
   const n = settings.advanced.maxConcurrent;
@@ -3129,6 +3133,36 @@ var init_cloud_connect_constants = __esm({
   }
 });
 
+// src/agents/orchestrator-capable.ts
+function isOrchestratorCapableAgent(agent) {
+  return Boolean(
+    agent && ORCHESTRATOR_AGENT_KINDS.includes(agent)
+  );
+}
+function assertOrchestratorCapableAgent(agent, context = "orchestration") {
+  if (!isOrchestratorCapableAgent(agent)) {
+    throw new Error(
+      `${agent} cannot run ${context} \u2014 it does not support Sideboard MCP. Use Claude, Cursor, Codex, or OpenCode.`
+    );
+  }
+  return agent;
+}
+function coerceOrchestratorAgent(agent, fallback = "claude") {
+  return isOrchestratorCapableAgent(agent) ? agent : fallback;
+}
+var ORCHESTRATOR_AGENT_KINDS;
+var init_orchestrator_capable = __esm({
+  "src/agents/orchestrator-capable.ts"() {
+    "use strict";
+    ORCHESTRATOR_AGENT_KINDS = [
+      "claude",
+      "codex",
+      "opencode",
+      "cursor"
+    ];
+  }
+});
+
 // src/orchestrator/coordinator-prompt.ts
 var coordinator_prompt_exports = {};
 __export(coordinator_prompt_exports, {
@@ -3267,7 +3301,7 @@ var init_coordinator_prompt = __esm({
       "- list_run_scripts / run_dev_script / stop_dev_script \u2014 start/stop named run scripts",
       "Inspect / review / PRs:",
       "- get_diff \u2014 compact diff summary",
-      "- request_review \u2014 open a Review chat tab on a worktree thread (merge-readiness recommendation); then wait_for_turn / get_turn_result on the returned id",
+      '- request_review \u2014 open a Review chat tab on a worktree thread (attaches .sideboard/review.md when present, else local guidelines; sends "Review."); then wait_for_turn / get_turn_result on the returned id',
       "- Ask the worktree agent via send_to_thread to open a draft PR with `gh pr create --draft -R <origin-owner/name>` (workspace `github:` slug / that worktree's origin \u2014 never upstream). Do not open PRs from the orchestrator yourself.",
       "Human-only (do not attempt): merge, ready-for-review land, purge_thread.",
       "Thread links in replies: when mentioning a chat/thread for the user, include a markdown link `[Title](sideboard://thread/<id>)` using the full id (or the link field from create_thread / list_threads). Sideboard renders these as clickable opens.",
@@ -3355,6 +3389,7 @@ function createGlobalChat(opts) {
   const explicit = opts.title?.trim();
   const title = explicit && explicit !== CLOUD_ORCHESTRATOR_GOAL ? explicit : allocateTeamName(takenTeamSlugsForOrchestration()).name;
   const sourceRef = opts.sourceRef?.trim() || (isCloud ? CLOUD_ORCHESTRATOR_GOAL : title);
+  const agent = assertOrchestratorCapableAgent(opts.agent);
   const thread = createEmptyThread({
     title,
     // Stick nicknames the same way chat tabs do (avoid later sync overwrites).
@@ -3364,7 +3399,7 @@ function createGlobalChat(opts) {
     branchName: "global",
     worktreePath: globalAgentCwd(),
     repoPath: GLOBAL_WORKSPACE_ID,
-    agent: opts.agent,
+    agent,
     autonomy: opts.autonomy ?? "default",
     model: opts.model ?? null,
     effort: opts.effort ?? "high",
@@ -3426,6 +3461,7 @@ var init_global_workspace = __esm({
   "src/store/global-workspace.ts"() {
     "use strict";
     init_cloud_connect_constants();
+    init_orchestrator_capable();
     init_teams();
     init_coordinator_prompt();
     init_paths();
@@ -4158,6 +4194,45 @@ async function buildInjectedMcpServers(opts) {
   }
   return servers;
 }
+function toCursorMcpServers(servers) {
+  const out = {};
+  for (const s of servers) {
+    out[s.name] = {
+      command: s.command,
+      ...s.args ? { args: s.args } : {},
+      ...s.env ? { env: s.env } : {}
+    };
+  }
+  return out;
+}
+function toCodexMcpConfigArgs(servers) {
+  const args = [];
+  for (const s of servers) {
+    const prefix = `mcp_servers.${s.name}`;
+    args.push("-c", `${prefix}.command=${JSON.stringify(s.command)}`);
+    if (s.args?.length) {
+      args.push("-c", `${prefix}.args=${JSON.stringify(s.args)}`);
+    }
+    if (s.env) {
+      for (const [key, value] of Object.entries(s.env)) {
+        args.push("-c", `${prefix}.env.${key}=${JSON.stringify(value)}`);
+      }
+    }
+  }
+  return args;
+}
+function toOpencodeMcpConfigContent(servers) {
+  const mcp = {};
+  for (const s of servers) {
+    mcp[s.name] = {
+      type: "local",
+      command: [s.command, ...s.args ?? []],
+      enabled: true,
+      ...s.env && Object.keys(s.env).length > 0 ? { environment: s.env } : {}
+    };
+  }
+  return JSON.stringify({ mcp });
+}
 function writeMcpServersConfig(servers) {
   if (servers.length === 0) return null;
   const mcpServers = {};
@@ -4658,6 +4733,7 @@ var init_codex = __esm({
     import_node_path11 = require("path");
     init_run();
     init_error_detail();
+    init_injected_mcp();
     init_turn_input();
     init_types();
     CODEX_PROMPT_ARG_MAX = 2e5;
@@ -4716,6 +4792,11 @@ var init_codex = __esm({
         }
         const mode = permissionMode(thread);
         const model = thread.model?.trim();
+        const injected = await buildInjectedMcpServers({
+          includeSideboard: true,
+          includeBrightsy: isBrightsyConnected()
+        });
+        const mcpOverrides = toCodexMcpConfigArgs(injected);
         const args = [
           "exec",
           ...sessionId ? ["resume", sessionId] : [],
@@ -4727,7 +4808,8 @@ var init_codex = __esm({
           mode.codexSandbox,
           "--ask-for-approval",
           "never",
-          ...model ? ["--model", model] : []
+          ...model ? ["--model", model] : [],
+          ...mcpOverrides
         ];
         return {
           file: "codex",
@@ -5012,6 +5094,7 @@ var init_cursor = __esm({
     init_run();
     init_app_settings();
     init_cursor_events();
+    init_injected_mcp();
     init_node_launch();
     init_turn_input();
     init_cursor_events();
@@ -5062,6 +5145,11 @@ var init_cursor = __esm({
         const prompt = flattenTurnInput(input);
         const agentId = await this.resolveSessionId(thread.worktreePath, thread.sessionId);
         const apiKey = resolveCursorApiKey() || void 0;
+        const injected = await buildInjectedMcpServers({
+          includeSideboard: true,
+          includeBrightsy: isBrightsyConnected()
+        });
+        const mcpServers = toCursorMcpServers(injected);
         const req = {
           prompt,
           cwd: thread.worktreePath,
@@ -5070,7 +5158,8 @@ var init_cursor = __esm({
           effort: thread.effort,
           fast: thread.fast,
           planMode: thread.planMode,
-          apiKey
+          apiKey,
+          ...Object.keys(mcpServers).length > 0 ? { mcpServers } : {}
         };
         const runner = cursorRunnerPath();
         const isTs = runner.endsWith(".ts");
@@ -5164,6 +5253,7 @@ var init_opencode = __esm({
     "use strict";
     init_run();
     init_error_detail();
+    init_injected_mcp();
     init_turn_input();
     init_types();
     FALLBACK_OPENCODE_MODELS = [
@@ -5224,6 +5314,11 @@ var init_opencode = __esm({
         if (model) {
           args.push("--model", model);
         }
+        const injected = await buildInjectedMcpServers({
+          includeSideboard: true,
+          includeBrightsy: isBrightsyConnected()
+        });
+        const mcpContent = injected.length > 0 ? toOpencodeMcpConfigContent(injected) : null;
         return {
           file: "opencode",
           args,
@@ -5232,7 +5327,8 @@ var init_opencode = __esm({
           // message is given (see resolveRunInput in opencode's run.ts).
           stdin: prompt,
           env: {
-            OPENCODE_PERMISSION: mode.opencodePermission
+            OPENCODE_PERMISSION: mode.opencodePermission,
+            ...mcpContent ? { OPENCODE_CONFIG_CONTENT: mcpContent } : {}
           }
         };
       },
@@ -5528,7 +5624,10 @@ function zonedWallTimeToUtc(day, hour, minute, timeZone) {
   }
 }
 function resolveQuotaFallbackAgent(current, preferred) {
-  const ordered = preferred ? [preferred, ...FALLBACK_ORDER.filter((a) => a !== preferred)] : FALLBACK_ORDER;
+  const ordered = [
+    ...preferred && preferred !== "brightsy" ? [preferred] : [],
+    ...FALLBACK_ORDER.filter((a) => a !== preferred)
+  ];
   return ordered.find((a) => a !== current) ?? (current === "cursor" ? "codex" : "cursor");
 }
 var FALLBACK_ORDER;
@@ -5539,7 +5638,6 @@ var init_session_quota = __esm({
       "cursor",
       "codex",
       "opencode",
-      "brightsy",
       "claude"
     ];
   }
@@ -5726,11 +5824,14 @@ var init_install = __esm({
 var agents_exports = {};
 __export(agents_exports, {
   CLAUDE_MODEL_CATALOG: () => CLAUDE_MODEL_CATALOG,
+  ORCHESTRATOR_AGENT_KINDS: () => ORCHESTRATOR_AGENT_KINDS,
   PLAN_MODE_INSTRUCTION: () => PLAN_MODE_INSTRUCTION,
   allAdapters: () => allAdapters,
+  assertOrchestratorCapableAgent: () => assertOrchestratorCapableAgent,
   brightsyAdapter: () => brightsyAdapter,
   claudeAdapter: () => claudeAdapter,
   codexAdapter: () => codexAdapter,
+  coerceOrchestratorAgent: () => coerceOrchestratorAgent,
   cursorAdapter: () => cursorAdapter,
   cursorSdkMessageToEvents: () => cursorSdkMessageToEvents,
   decodeBrightsyTarget: () => decodeBrightsyTarget,
@@ -5740,6 +5841,7 @@ __export(agents_exports, {
   getAgentSetupInfo: () => getAgentSetupInfo,
   installAgent: () => installAgent,
   isCursorAutoModel: () => isCursorAutoModel,
+  isOrchestratorCapableAgent: () => isOrchestratorCapableAgent,
   isSessionQuotaLimit: () => isSessionQuotaLimit,
   listAgentSetupInfo: () => listAgentSetupInfo,
   listBrightsyChatTargets: () => listBrightsyChatTargets,
@@ -5782,6 +5884,7 @@ var init_agents = __esm({
     init_opencode();
     init_list_models();
     init_session_quota();
+    init_orchestrator_capable();
     init_path();
     init_install();
     adapters = {
@@ -5979,6 +6082,7 @@ init_app_settings();
 init_global_workspace();
 init_brightsy();
 init_agents();
+init_orchestrator_capable();
 
 // src/agents/message-parts.ts
 function asRecord(input) {
@@ -6220,6 +6324,9 @@ async function spawnAgentTurn(thread, input, onEvent) {
     const { ensureGlobalCoordinatorCwd: ensureGlobalCoordinatorCwd2 } = await Promise.resolve().then(() => (init_coordinator_prompt(), coordinator_prompt_exports));
     ensureGlobalCoordinatorCwd2();
   }
+  if (isOrchestratorThread(thread)) {
+    assertOrchestratorCapableAgent(thread.agent);
+  }
   const adapter = getAdapter(thread.agent);
   const cmd = await adapter.buildTurn(thread, input);
   if (cmd.cwd !== thread.worktreePath) {
@@ -7038,6 +7145,9 @@ async function listLinearIssues(agent, repoPath) {
   return adapter.listLinearIssues(repoPath);
 }
 
+// src/orchestrator/orchestrator.ts
+init_orchestrator_capable();
+
 // src/threads/chat-tabs.ts
 var import_node_crypto2 = require("crypto");
 
@@ -7319,6 +7429,7 @@ async function maybeCompactContext(thread, thresholds = {}, summarize = summariz
 init_teams();
 init_worktree_labels();
 init_global_workspace();
+init_orchestrator_capable();
 init_thread_store();
 init_worktree_labels();
 function sameWorktreePath(a, b) {
@@ -7382,6 +7493,10 @@ function createChatTab(input) {
   const binding = worktreeBindingFrom(from);
   const explicitTitle = input.title?.trim();
   const title = explicitTitle || allocateTeamName(takenTeamSlugsForChatTab(binding.worktreePath)).name;
+  const nextAgent = input.agent ?? from.agent;
+  if (isOrchestratorThread(from) || binding.sourceType === "orchestration") {
+    assertOrchestratorCapableAgent(nextAgent);
+  }
   const thread = createEmptyThread({
     title,
     // Chat-tab nicknames (soccer team or explicit) must stick. Post-turn
@@ -7389,7 +7504,7 @@ function createChatTab(input) {
     // shared worktree folder name (e.g. fork "Arsenal" → "Monaco").
     userSetTitle: true,
     ...binding,
-    agent: input.agent ?? from.agent,
+    agent: nextAgent,
     model: input.model !== void 0 ? input.model : input.agent && input.agent !== from.agent ? null : from.model,
     effort: input.effort !== void 0 ? input.effort : from.effort,
     fast: input.fast !== void 0 ? Boolean(input.fast) : from.fast,
@@ -7426,22 +7541,149 @@ var import_node_fs19 = require("fs");
 var import_node_path18 = require("path");
 init_global_workspace();
 init_thread_store();
+
+// src/review/review-request-template.ts
+var REVIEW_REQUEST_TEMPLATE = `# Review guidelines:
+
+You are reviewing a proposed code change so a human can decide whether it is **ready to merge / land**. Findings matter, but the primary deliverable is a clear readiness recommendation \u2014 not a laundry list of style notes.
+
+## Required outcome
+
+Start your reply with a **Recommendation** section using exactly one of:
+
+- **Approve** \u2014 ready to merge as-is (or with only trivial nits the author can ignore).
+- **Approve with nits** \u2014 ready to merge; list only optional polish that should not block.
+- **Request changes** \u2014 not ready; blocking issues must be fixed first.
+- **Needs more information** \u2014 cannot judge readiness yet (missing context, incomplete diff, unclear intent).
+
+In 1\u20133 sentences, say **why** \u2014 grounded in correctness, risk, test coverage, and scope \u2014 not vibes. If you request changes, name the blockers explicitly.
+
+People running this review are asking \u201Ccan we ship this?\u201D Treat that as the question you answer first.
+
+## Findings
+
+Below are guidelines for determining whether an issue is worth flagging to the original author.
+
+These are not the final word. More specific guidelines elsewhere (developer message, user message, a file, etc.) override these.
+
+Flag something as a bug / blocking finding only when:
+
+1. It meaningfully impacts the accuracy, performance, security, or maintainability of the code.
+2. The bug is discrete and actionable (not a vague codebase-wide complaint or a bundle of unrelated issues).
+3. Fixing it does not demand rigor absent from the rest of the codebase.
+4. The issue was introduced by this change (do not flag pre-existing bugs unless they are newly exposed by this PR).
+5. The author would likely fix it if made aware.
+6. It does not rely on unstated assumptions about the codebase or author intent.
+7. Speculative breakage is not enough \u2014 identify the other code that is provably affected.
+8. It is clearly not just an intentional change by the author.
+
+When flagging an issue, include a short accompanying comment:
+
+1. Clear about why it is a problem.
+2. Severity must match reality \u2014 do not inflate.
+3. Brief: at most one paragraph; avoid unnecessary line breaks in prose.
+4. No code chunks longer than 3 lines; wrap code in inline ticks or a fenced block.
+5. Call out scenarios / environments / inputs needed to hit the bug when severity depends on them.
+6. Matter-of-fact tone \u2014 helpful assistant, not accusatory or effusive.
+7. Skimmable on first read.
+8. No empty flattery (\u201CGreat job\u2026\u201D, \u201CThanks for\u2026\u201D).
+
+HOW MANY FINDINGS TO RETURN:
+
+List every finding the author would fix if they knew about it. If nothing qualifies, say so and still give the Recommendation. Do not stop at the first finding.
+
+GUIDELINES:
+
+- Ignore trivial style unless it obscures meaning or violates documented standards.
+- One comment per distinct issue (or a short multi-line range if needed).
+- Use \`\`\`suggestion blocks ONLY for concrete replacement code (minimal lines; no commentary inside the block).
+- In every \`\`\`suggestion block, preserve the exact leading whitespace of the replaced lines (spaces vs tabs, number of spaces).
+- Do NOT introduce or remove outer indentation levels unless that is the actual fix.
+- Separate **blocking** findings from **nits**. Only blocking findings should drive Request changes.
+
+The report appears in chat (and can become Sideboard diff comments). Avoid unnecessary location chatter in the body; keep line ranges as short as possible (prefer \u22645\u201310 lines).
+
+## Getting the diff
+
+Use Sideboard's diff for this thread's worktree. Prefer the \`get_diff\` MCP tool (pass this thread's ref) for a compact summary, then read specific files with Read/Glob as needed. In the Sideboard desktop app, the Changes panel shows the same worktree diff.
+
+If the user asks you to address or read line comments they added in the Changes / file diff UI, those arrive as \`diff-comment\` attachments on the next turn \u2014 follow them precisely.
+
+## Fallback: if you don't have access to the Sideboard diff tool
+
+If you don't have access to \`get_diff\`, use the following git commands to get the diff:
+
+\`\`\`bash
+# Get the merge base between this branch and the target
+MERGE_BASE=$(git merge-base origin/main HEAD)
+
+# Get the committed diff against the merge base
+git diff $MERGE_BASE HEAD
+
+# Get any uncommitted changes (staged and unstaged)
+git diff HEAD
+\`\`\`
+
+Review the combination of both outputs: the first shows all committed changes on this branch relative to the target, and the second shows any uncommitted work in progress.
+
+No need to mention in your report whether or not you used one of the fallback strategies; it's usually irrelevant.
+
+## Output format
+
+**1. Recommendation first** (required), then **2. Findings** (may be empty).
+
+Only report ONE finding per unique issue.
+
+<example>
+## Recommendation
+
+**Request changes** \u2014 The empty-input crash on load will break first-run users; fix that before merge. The unused helper is a nit and can wait.
+
+## Findings
+
+### **#1 Empty input causes crash** (blocking)
+
+If the input field is empty when the page loads, the app will crash.
+
+File: src/client/frontends/desktop/ui/Input.tsx
+
+### **#2 Dead code** (nit)
+
+The getUserData function is now unused. It should be deleted.
+
+File: src/client/frontends/desktop/core/UserData.ts
+</example>
+
+<example>
+## Recommendation
+
+**Approve** \u2014 Diff is scoped, behavior looks correct, and there are no blocking issues. Safe to merge.
+</example>
+`;
+
+// src/review/request-review.ts
+var REPO_REVIEW_PATH = ".sideboard/review.md";
+var REPO_REVIEW_NAME = "review.md";
 var REVIEW_REQUEST_PATH = ".sideboard/attachments/Review request.md";
 var REVIEW_REQUEST_NAME = "Review request.md";
-var REVIEW_REQUEST_PREFILL = `Please review the changes in this workspace and recommend whether they are ready to merge.
-
-Start with a **Recommendation**: Approve, Approve with nits, Request changes, or Needs more information \u2014 and say why in 1\u20133 sentences. Then list blocking findings vs nits (findings may be empty).`;
-function buildReviewRequestAttachment(content) {
-  return {
-    id: (0, import_node_crypto3.randomUUID)(),
-    name: REVIEW_REQUEST_NAME,
-    kind: "file",
-    path: REVIEW_REQUEST_PATH,
-    content
-  };
+var REVIEW_REQUEST_PREFILL = "Review.";
+var ATTACHMENTS_GITIGNORE = `# Sideboard review / composer attachments (local only)
+*
+!.gitignore
+`;
+var LEGACY_REVIEW_TEMPLATE_MARKERS = [
+  "You are acting as a reviewer for a proposed code change made by another engineer.",
+  "HOW MANY FINDINGS TO RETURN:"
+];
+function shouldRefreshReviewRequestTemplate(content) {
+  const trimmed = content.trim();
+  if (!trimmed) return true;
+  if (/##\s*Recommendation|ready to merge|Approve with nits|Request changes/i.test(trimmed)) {
+    return false;
+  }
+  return LEGACY_REVIEW_TEMPLATE_MARKERS.every((m) => trimmed.includes(m));
 }
-function readExistingReviewRequestFile(worktreePath) {
-  const abs = (0, import_node_path18.join)(worktreePath, REVIEW_REQUEST_PATH);
+function readTextIfPresent(abs) {
   if (!(0, import_node_fs19.existsSync)(abs)) return null;
   try {
     const content = (0, import_node_fs19.readFileSync)(abs, "utf8");
@@ -7450,6 +7692,54 @@ function readExistingReviewRequestFile(worktreePath) {
     return null;
   }
 }
+function ensureAttachmentsGitignore(worktreePath) {
+  const gitignoreAbs = (0, import_node_path18.join)(worktreePath, ".sideboard", "attachments", ".gitignore");
+  if ((0, import_node_fs19.existsSync)(gitignoreAbs)) return;
+  (0, import_node_fs19.mkdirSync)((0, import_node_path18.dirname)(gitignoreAbs), { recursive: true });
+  (0, import_node_fs19.writeFileSync)(gitignoreAbs, ATTACHMENTS_GITIGNORE, "utf8");
+}
+function resolveReviewGuidelines(worktreePath) {
+  const repoAbs = (0, import_node_path18.join)(worktreePath, REPO_REVIEW_PATH);
+  const repoContent = readTextIfPresent(repoAbs);
+  if (repoContent) {
+    return {
+      path: REPO_REVIEW_PATH,
+      name: REPO_REVIEW_NAME,
+      content: repoContent,
+      source: "repo"
+    };
+  }
+  const localAbs = (0, import_node_path18.join)(worktreePath, REVIEW_REQUEST_PATH);
+  const localContent = readTextIfPresent(localAbs);
+  if (localContent && !shouldRefreshReviewRequestTemplate(localContent)) {
+    return {
+      path: REVIEW_REQUEST_PATH,
+      name: REVIEW_REQUEST_NAME,
+      content: localContent,
+      source: "local"
+    };
+  }
+  ensureAttachmentsGitignore(worktreePath);
+  (0, import_node_fs19.mkdirSync)((0, import_node_path18.dirname)(localAbs), { recursive: true });
+  (0, import_node_fs19.writeFileSync)(localAbs, REVIEW_REQUEST_TEMPLATE, "utf8");
+  return {
+    path: REVIEW_REQUEST_PATH,
+    name: REVIEW_REQUEST_NAME,
+    content: REVIEW_REQUEST_TEMPLATE,
+    source: "stock"
+  };
+}
+function buildReviewRequestAttachment(content, opts) {
+  const path = opts?.path ?? REVIEW_REQUEST_PATH;
+  const name = opts?.name ?? (path === REPO_REVIEW_PATH ? REPO_REVIEW_NAME : REVIEW_REQUEST_NAME);
+  return {
+    id: (0, import_node_crypto3.randomUUID)(),
+    name,
+    kind: "file",
+    path,
+    content
+  };
+}
 async function requestReview(threadRef, send) {
   const from = findThreadByRef(threadRef);
   if (!from) throw new Error(`Thread not found: ${threadRef}`);
@@ -7461,12 +7751,16 @@ async function requestReview(threadRef, send) {
   if (from.status === "archived") {
     throw new Error(`Thread is archived: ${from.id}`);
   }
-  const existing = readExistingReviewRequestFile(from.worktreePath);
-  const attachments = existing ? [buildReviewRequestAttachment(existing)] : [];
+  const guidelines = resolveReviewGuidelines(from.worktreePath);
   const tab = createChatTab({
     fromThreadId: from.id,
     title: "Review",
-    attachments
+    attachments: [
+      buildReviewRequestAttachment(guidelines.content, {
+        path: guidelines.path,
+        name: guidelines.name
+      })
+    ]
   });
   const started = await send(tab.id, REVIEW_REQUEST_PREFILL);
   return { tab: started, from };
@@ -8850,7 +9144,7 @@ var IMAGE_MIME_BY_EXT = {
   ico: "image/x-icon"
 };
 var ATTACHMENTS_DIR = ".sideboard/attachments";
-var ATTACHMENTS_GITIGNORE = `# Sideboard review / composer attachments (local only)
+var ATTACHMENTS_GITIGNORE2 = `# Sideboard review / composer attachments (local only)
 *
 !.gitignore
 `;
@@ -8871,7 +9165,7 @@ function ensureAttachmentsDir(worktreePath) {
   (0, import_node_fs23.mkdirSync)(dir, { recursive: true });
   const gi = (0, import_node_path22.join)(dir, ".gitignore");
   if (!(0, import_node_fs23.existsSync)(gi)) {
-    (0, import_node_fs23.writeFileSync)(gi, ATTACHMENTS_GITIGNORE, "utf8");
+    (0, import_node_fs23.writeFileSync)(gi, ATTACHMENTS_GITIGNORE2, "utf8");
   }
   return dir;
 }
@@ -9655,9 +9949,11 @@ var Orchestrator = class {
       this.emit({ type: "error", threadId, message: `context compact failed: ${message}` });
       thread = this.requireThread(threadId);
     }
+    const sentAttachments = thread.attachments.length > 0 ? [...thread.attachments] : void 0;
     appendMessage(threadId, {
       role: "user",
       text: prompt,
+      ...sentAttachments ? { attachments: sentAttachments } : {},
       ts: (/* @__PURE__ */ new Date()).toISOString()
     });
     thread = this.requireThread(threadId);
@@ -9665,7 +9961,7 @@ var Orchestrator = class {
       thread.worktreePath,
       prompt,
       {
-        attachments: thread.attachments
+        attachments: sentAttachments ?? thread.attachments
       }
     );
     const orchestrationReminder = isOrchestratorThread(thread) ? coordinatorTurnReminder({
@@ -10349,6 +10645,9 @@ var Orchestrator = class {
             `Cannot switch agent provider mid-chat (${thread.agent} \u2192 ${patch.agent}). Start a new chat tab instead.`
           );
         }
+        if (isOrchestratorThread(thread)) {
+          assertOrchestratorCapableAgent(patch.agent);
+        }
         next.agent = patch.agent;
         if (patch.agent !== "claude" && patch.model === void 0) next.model = null;
         next.sessionId = null;
@@ -11022,7 +11321,7 @@ async function startMcpServer() {
   );
   server.tool(
     "request_review",
-    "Start a merge-readiness Review on a worktree agent thread (same as the desktop Review button). Opens a new Review chat tab, optionally attaches .sideboard/attachments/Review request.md when present, and asks for Approve / Approve with nits / Request changes / Needs more information. Pass a worktree thread ref \u2014 not the orchestrator. Then wait_for_turn / get_turn_result on the returned review tab id.",
+    'Start a merge-readiness Review on a worktree agent thread (same as the desktop Review button). Opens a new Review chat tab, attaches .sideboard/review.md when present (else local Review request.md / stock template), and sends "Review." Expect Approve / Approve with nits / Request changes / Needs more information. Pass a worktree thread ref \u2014 not the orchestrator. Then wait_for_turn / get_turn_result on the returned review tab id.',
     { ref: import_zod.z.string().describe("Worktree thread id/ref to review") },
     async ({ ref }) => {
       try {
@@ -11114,7 +11413,7 @@ async function startMcpServer() {
   );
   server.tool(
     "fork_chat",
-    "Fork a chat into a NEW tab on the SAME workspace: worktree agent \u2192 same worktree tab; Global orchestration chat \u2192 new orchestration chat (same synthetic home). Seeds a transcript; optional agent override. Leave model unset for Auto unless you have a reason. Remote coordinators use this to continue an orchestration chat on another agent after session limits. Then send_to_thread / wait_for_turn on the returned id. Use fork_worktree only for worktree agents that need a new git worktree.",
+    "Fork a chat into a NEW tab on the SAME workspace: worktree agent \u2192 same worktree tab; Global orchestration chat \u2192 new orchestration chat (same synthetic home). Seeds a transcript; optional agent override. Leave model unset for Auto unless you have a reason. Orchestration forks require an MCP-capable agent (claude, cursor, codex, opencode \u2014 not brightsy). Remote coordinators use this to continue an orchestration chat on another agent after session limits. Then send_to_thread / wait_for_turn on the returned id. Use fork_worktree only for worktree agents that need a new git worktree.",
     {
       ref: import_zod.z.string().describe("Thread id/ref to fork (worktree agent or orchestration chat)"),
       through_index: import_zod.z.number().optional().describe("Inclusive message index to include in the transcript (default: all)"),