@sideboard-ai/core 0.1.45 → 0.1.49

package/dist/index.cjs

@@ -528,7 +528,7 @@ function normalizeAdvanced(raw) {
   if (source.orchestrationQuotaOnLimit === "switch_agent" || source.orchestrationQuotaOnLimit === "wait_reset") {
     out.orchestrationQuotaOnLimit = source.orchestrationQuotaOnLimit;
   }
-  if (typeof source.orchestrationQuotaFallbackAgent === "string" && DEFAULT_AGENTS.has(source.orchestrationQuotaFallbackAgent)) {
+  if (typeof source.orchestrationQuotaFallbackAgent === "string" && DEFAULT_AGENTS.has(source.orchestrationQuotaFallbackAgent) && source.orchestrationQuotaFallbackAgent !== "brightsy") {
     out.orchestrationQuotaFallbackAgent = source.orchestrationQuotaFallbackAgent;
   }
   return out;
@@ -768,7 +768,7 @@ function updateAdvancedSettings(patch) {
   if (patch.orchestrationQuotaOnLimit === "switch_agent" || patch.orchestrationQuotaOnLimit === "wait_reset") {
     advanced.orchestrationQuotaOnLimit = patch.orchestrationQuotaOnLimit;
   }
-  if (typeof patch.orchestrationQuotaFallbackAgent === "string" && DEFAULT_AGENTS.has(patch.orchestrationQuotaFallbackAgent)) {
+  if (typeof patch.orchestrationQuotaFallbackAgent === "string" && DEFAULT_AGENTS.has(patch.orchestrationQuotaFallbackAgent) && patch.orchestrationQuotaFallbackAgent !== "brightsy") {
     advanced.orchestrationQuotaFallbackAgent = patch.orchestrationQuotaFallbackAgent;
   }
   return saveAppSettings({ ...current, advanced });
@@ -796,7 +796,10 @@ function orchestrationQuotaOnLimit(settings = loadAppSettings()) {
 }
 function orchestrationQuotaFallbackAgent(settings = loadAppSettings()) {
   const preferred = settings.advanced.orchestrationQuotaFallbackAgent;
-  return preferred && DEFAULT_AGENTS.has(preferred) ? preferred : "cursor";
+  if (preferred && DEFAULT_AGENTS.has(preferred) && preferred !== "brightsy") {
+    return preferred;
+  }
+  return "cursor";
 }
 function maxConcurrentAgents(settings = loadAppSettings()) {
   const n = settings.advanced.maxConcurrent;
@@ -1075,6 +1078,36 @@ var init_cloud_connect_constants = __esm({
   }
 });
 
+// src/agents/orchestrator-capable.ts
+function isOrchestratorCapableAgent(agent) {
+  return Boolean(
+    agent && ORCHESTRATOR_AGENT_KINDS.includes(agent)
+  );
+}
+function assertOrchestratorCapableAgent(agent, context = "orchestration") {
+  if (!isOrchestratorCapableAgent(agent)) {
+    throw new Error(
+      `${agent} cannot run ${context} \u2014 it does not support Sideboard MCP. Use Claude, Cursor, Codex, or OpenCode.`
+    );
+  }
+  return agent;
+}
+function coerceOrchestratorAgent(agent, fallback = "claude") {
+  return isOrchestratorCapableAgent(agent) ? agent : fallback;
+}
+var ORCHESTRATOR_AGENT_KINDS;
+var init_orchestrator_capable = __esm({
+  "src/agents/orchestrator-capable.ts"() {
+    "use strict";
+    ORCHESTRATOR_AGENT_KINDS = [
+      "claude",
+      "codex",
+      "opencode",
+      "cursor"
+    ];
+  }
+});
+
 // src/git/team-meta.ts
 var SOCCER_TEAM_META;
 var init_team_meta = __esm({
@@ -3224,7 +3257,7 @@ var init_coordinator_prompt = __esm({
       "- list_run_scripts / run_dev_script / stop_dev_script \u2014 start/stop named run scripts",
       "Inspect / review / PRs:",
       "- get_diff \u2014 compact diff summary",
-      "- request_review \u2014 open a Review chat tab on a worktree thread (merge-readiness recommendation); then wait_for_turn / get_turn_result on the returned id",
+      '- request_review \u2014 open a Review chat tab on a worktree thread (attaches .sideboard/review.md when present, else local guidelines; sends "Review."); then wait_for_turn / get_turn_result on the returned id',
       "- Ask the worktree agent via send_to_thread to open a draft PR with `gh pr create --draft -R <origin-owner/name>` (workspace `github:` slug / that worktree's origin \u2014 never upstream). Do not open PRs from the orchestrator yourself.",
       "Human-only (do not attempt): merge, ready-for-review land, purge_thread.",
       "Thread links in replies: when mentioning a chat/thread for the user, include a markdown link `[Title](sideboard://thread/<id>)` using the full id (or the link field from create_thread / list_threads). Sideboard renders these as clickable opens.",
@@ -3312,6 +3345,7 @@ function createGlobalChat(opts) {
   const explicit = opts.title?.trim();
   const title = explicit && explicit !== CLOUD_ORCHESTRATOR_GOAL ? explicit : allocateTeamName(takenTeamSlugsForOrchestration()).name;
   const sourceRef = opts.sourceRef?.trim() || (isCloud ? CLOUD_ORCHESTRATOR_GOAL : title);
+  const agent = assertOrchestratorCapableAgent(opts.agent);
   const thread = createEmptyThread({
     title,
     // Stick nicknames the same way chat tabs do (avoid later sync overwrites).
@@ -3321,7 +3355,7 @@ function createGlobalChat(opts) {
     branchName: "global",
     worktreePath: globalAgentCwd(),
     repoPath: GLOBAL_WORKSPACE_ID,
-    agent: opts.agent,
+    agent,
     autonomy: opts.autonomy ?? "default",
     model: opts.model ?? null,
     effort: opts.effort ?? "high",
@@ -3383,6 +3417,7 @@ var init_global_workspace = __esm({
   "src/store/global-workspace.ts"() {
     "use strict";
     init_cloud_connect_constants();
+    init_orchestrator_capable();
     init_teams();
     init_coordinator_prompt();
     init_paths();
@@ -4538,6 +4573,45 @@ async function buildInjectedMcpServers(opts) {
   }
   return servers;
 }
+function toCursorMcpServers(servers) {
+  const out = {};
+  for (const s of servers) {
+    out[s.name] = {
+      command: s.command,
+      ...s.args ? { args: s.args } : {},
+      ...s.env ? { env: s.env } : {}
+    };
+  }
+  return out;
+}
+function toCodexMcpConfigArgs(servers) {
+  const args = [];
+  for (const s of servers) {
+    const prefix = `mcp_servers.${s.name}`;
+    args.push("-c", `${prefix}.command=${JSON.stringify(s.command)}`);
+    if (s.args?.length) {
+      args.push("-c", `${prefix}.args=${JSON.stringify(s.args)}`);
+    }
+    if (s.env) {
+      for (const [key, value] of Object.entries(s.env)) {
+        args.push("-c", `${prefix}.env.${key}=${JSON.stringify(value)}`);
+      }
+    }
+  }
+  return args;
+}
+function toOpencodeMcpConfigContent(servers) {
+  const mcp = {};
+  for (const s of servers) {
+    mcp[s.name] = {
+      type: "local",
+      command: [s.command, ...s.args ?? []],
+      enabled: true,
+      ...s.env && Object.keys(s.env).length > 0 ? { environment: s.env } : {}
+    };
+  }
+  return JSON.stringify({ mcp });
+}
 function writeMcpServersConfig(servers) {
   if (servers.length === 0) return null;
   const mcpServers = {};
@@ -5045,6 +5119,7 @@ var init_codex = __esm({
     import_node_path12 = require("path");
     init_run();
     init_error_detail();
+    init_injected_mcp();
     init_turn_input();
     init_types();
     CODEX_PROMPT_ARG_MAX = 2e5;
@@ -5103,6 +5178,11 @@ var init_codex = __esm({
         }
         const mode = permissionMode(thread);
         const model = thread.model?.trim();
+        const injected = await buildInjectedMcpServers({
+          includeSideboard: true,
+          includeBrightsy: isBrightsyConnected()
+        });
+        const mcpOverrides = toCodexMcpConfigArgs(injected);
         const args = [
           "exec",
           ...sessionId ? ["resume", sessionId] : [],
@@ -5114,7 +5194,8 @@ var init_codex = __esm({
           mode.codexSandbox,
           "--ask-for-approval",
           "never",
-          ...model ? ["--model", model] : []
+          ...model ? ["--model", model] : [],
+          ...mcpOverrides
         ];
         return {
           file: "codex",
@@ -5399,6 +5480,7 @@ var init_cursor = __esm({
     init_run();
     init_app_settings();
     init_cursor_events();
+    init_injected_mcp();
     init_node_launch();
     init_turn_input();
     init_cursor_events();
@@ -5449,6 +5531,11 @@ var init_cursor = __esm({
         const prompt = flattenTurnInput(input);
         const agentId = await this.resolveSessionId(thread.worktreePath, thread.sessionId);
         const apiKey = resolveCursorApiKey() || void 0;
+        const injected = await buildInjectedMcpServers({
+          includeSideboard: true,
+          includeBrightsy: isBrightsyConnected()
+        });
+        const mcpServers = toCursorMcpServers(injected);
         const req = {
           prompt,
           cwd: thread.worktreePath,
@@ -5457,7 +5544,8 @@ var init_cursor = __esm({
           effort: thread.effort,
           fast: thread.fast,
           planMode: thread.planMode,
-          apiKey
+          apiKey,
+          ...Object.keys(mcpServers).length > 0 ? { mcpServers } : {}
         };
         const runner = cursorRunnerPath();
         const isTs = runner.endsWith(".ts");
@@ -5551,6 +5639,7 @@ var init_opencode = __esm({
     "use strict";
     init_run();
     init_error_detail();
+    init_injected_mcp();
     init_turn_input();
     init_types();
     FALLBACK_OPENCODE_MODELS = [
@@ -5611,6 +5700,11 @@ var init_opencode = __esm({
         if (model) {
           args.push("--model", model);
         }
+        const injected = await buildInjectedMcpServers({
+          includeSideboard: true,
+          includeBrightsy: isBrightsyConnected()
+        });
+        const mcpContent = injected.length > 0 ? toOpencodeMcpConfigContent(injected) : null;
         return {
           file: "opencode",
           args,
@@ -5619,7 +5713,8 @@ var init_opencode = __esm({
           // message is given (see resolveRunInput in opencode's run.ts).
           stdin: prompt,
           env: {
-            OPENCODE_PERMISSION: mode.opencodePermission
+            OPENCODE_PERMISSION: mode.opencodePermission,
+            ...mcpContent ? { OPENCODE_CONFIG_CONTENT: mcpContent } : {}
           }
         };
       },
@@ -5915,7 +6010,10 @@ function zonedWallTimeToUtc(day, hour, minute, timeZone) {
   }
 }
 function resolveQuotaFallbackAgent(current, preferred) {
-  const ordered = preferred ? [preferred, ...FALLBACK_ORDER.filter((a) => a !== preferred)] : FALLBACK_ORDER;
+  const ordered = [
+    ...preferred && preferred !== "brightsy" ? [preferred] : [],
+    ...FALLBACK_ORDER.filter((a) => a !== preferred)
+  ];
   return ordered.find((a) => a !== current) ?? (current === "cursor" ? "codex" : "cursor");
 }
 var FALLBACK_ORDER;
@@ -5926,7 +6024,6 @@ var init_session_quota = __esm({
       "cursor",
       "codex",
       "opencode",
-      "brightsy",
       "claude"
     ];
   }
@@ -6113,11 +6210,14 @@ var init_install = __esm({
 var agents_exports = {};
 __export(agents_exports, {
   CLAUDE_MODEL_CATALOG: () => CLAUDE_MODEL_CATALOG,
+  ORCHESTRATOR_AGENT_KINDS: () => ORCHESTRATOR_AGENT_KINDS,
   PLAN_MODE_INSTRUCTION: () => PLAN_MODE_INSTRUCTION,
   allAdapters: () => allAdapters,
+  assertOrchestratorCapableAgent: () => assertOrchestratorCapableAgent,
   brightsyAdapter: () => brightsyAdapter,
   claudeAdapter: () => claudeAdapter,
   codexAdapter: () => codexAdapter,
+  coerceOrchestratorAgent: () => coerceOrchestratorAgent,
   cursorAdapter: () => cursorAdapter,
   cursorSdkMessageToEvents: () => cursorSdkMessageToEvents,
   decodeBrightsyTarget: () => decodeBrightsyTarget,
@@ -6127,6 +6227,7 @@ __export(agents_exports, {
   getAgentSetupInfo: () => getAgentSetupInfo,
   installAgent: () => installAgent,
   isCursorAutoModel: () => isCursorAutoModel,
+  isOrchestratorCapableAgent: () => isOrchestratorCapableAgent,
   isSessionQuotaLimit: () => isSessionQuotaLimit,
   listAgentSetupInfo: () => listAgentSetupInfo,
   listBrightsyChatTargets: () => listBrightsyChatTargets,
@@ -6169,6 +6270,7 @@ var init_agents = __esm({
     init_opencode();
     init_list_models();
     init_session_quota();
+    init_orchestrator_capable();
     init_path();
     init_install();
     adapters = {
@@ -6278,10 +6380,13 @@ __export(index_exports, {
   GLOBAL_WORKSPACE_ID: () => GLOBAL_WORKSPACE_ID,
   HARNESS_ENV_KEYS: () => HARNESS_ENV_KEYS,
   MAX_ANTHROPIC_CACHE_CONTROL_BLOCKS: () => MAX_ANTHROPIC_CACHE_CONTROL_BLOCKS,
+  ORCHESTRATOR_AGENT_KINDS: () => ORCHESTRATOR_AGENT_KINDS,
   Orchestrator: () => Orchestrator,
   PASTE_ATTACH_MIN_CHARS: () => PASTE_ATTACH_MIN_CHARS,
   PASTE_ATTACH_MIN_LINES: () => PASTE_ATTACH_MIN_LINES,
   PLAN_MODE_INSTRUCTION: () => PLAN_MODE_INSTRUCTION,
+  REPO_REVIEW_NAME: () => REPO_REVIEW_NAME,
+  REPO_REVIEW_PATH: () => REPO_REVIEW_PATH,
   REVIEW_REQUEST_NAME: () => REVIEW_REQUEST_NAME,
   REVIEW_REQUEST_PATH: () => REVIEW_REQUEST_PATH,
   REVIEW_REQUEST_PREFILL: () => REVIEW_REQUEST_PREFILL,
@@ -6302,6 +6407,7 @@ __export(index_exports, {
   applyAppEnvironment: () => applyAppEnvironment,
   applyCompaction: () => applyCompaction,
   applyThreadIntoMain: () => applyThreadIntoMain,
+  assertOrchestratorCapableAgent: () => assertOrchestratorCapableAgent,
   attachmentFromAbsolutePath: () => attachmentFromAbsolutePath,
   attachmentsFromBuffers: () => attachmentsFromBuffers,
   attachmentsFromWorktreePaths: () => attachmentsFromWorktreePaths,
@@ -6334,6 +6440,7 @@ __export(index_exports, {
   cleanupOrphanWorktrees: () => cleanupOrphanWorktrees,
   cloneRepoIntoSideboard: () => cloneRepoIntoSideboard,
   codexAdapter: () => codexAdapter,
+  coerceOrchestratorAgent: () => coerceOrchestratorAgent,
   collectTakenTeamSlugs: () => collectTakenTeamSlugs,
   commitAll: () => commitAll,
   conductorDbPath: () => conductorDbPath,
@@ -6365,6 +6472,7 @@ __export(index_exports, {
   ensureCloudCoordinator: () => ensureCloudCoordinator,
   ensureGhPreferOrigin: () => ensureGhPreferOrigin,
   ensureGlobalCoordinatorCwd: () => ensureGlobalCoordinatorCwd,
+  ensureReviewRequestFile: () => ensureReviewRequestFile,
   ensureWorkspace: () => ensureWorkspace,
   estimateMessageChars: () => estimateMessageChars,
   estimateThreadChars: () => estimateThreadChars,
@@ -6438,6 +6546,7 @@ __export(index_exports, {
   isGlobalThread: () => isGlobalThread,
   isImageFilePath: () => isImageFilePath,
   isLinearConnected: () => isLinearConnected,
+  isOrchestratorCapableAgent: () => isOrchestratorCapableAgent,
   isOrchestratorThread: () => isOrchestratorThread,
   isPidAlive: () => isPidAlive,
   isPlaceholderBranch: () => isPlaceholderBranch,
@@ -6527,6 +6636,7 @@ __export(index_exports, {
   resolvePrSelector: () => resolvePrSelector,
   resolveQuotaFallbackAgent: () => resolveQuotaFallbackAgent,
   resolveRepoRoot: () => resolveRepoRoot,
+  resolveReviewGuidelines: () => resolveReviewGuidelines,
   resolveThreadDefaults: () => resolveThreadDefaults,
   resolveThreadEffort: () => resolveThreadEffort,
   resolveWorktreeStartPoint: () => resolveWorktreeStartPoint,
@@ -6542,6 +6652,7 @@ __export(index_exports, {
   settingsSourceLabel: () => settingsSourceLabel,
   shouldAttachPastedText: () => shouldAttachPastedText,
   shouldCompactContext: () => shouldCompactContext,
+  shouldRefreshReviewRequestTemplate: () => shouldRefreshReviewRequestTemplate,
   shouldRunWorktreeCleanup: () => shouldRunWorktreeCleanup,
   sideboardHomeDir: () => sideboardHomeDir,
   sideboardReposDir: () => sideboardReposDir,
@@ -6790,6 +6901,7 @@ init_app_settings();
 init_global_workspace();
 init_brightsy();
 init_agents();
+init_orchestrator_capable();
 
 // src/agents/message-parts.ts
 function asRecord(input) {
@@ -7034,6 +7146,9 @@ async function spawnAgentTurn(thread, input, onEvent) {
     const { ensureGlobalCoordinatorCwd: ensureGlobalCoordinatorCwd2 } = await Promise.resolve().then(() => (init_coordinator_prompt(), coordinator_prompt_exports));
     ensureGlobalCoordinatorCwd2();
   }
+  if (isOrchestratorThread(thread)) {
+    assertOrchestratorCapableAgent(thread.agent);
+  }
   const adapter = getAdapter(thread.agent);
   const cmd = await adapter.buildTurn(thread, input);
   if (cmd.cwd !== thread.worktreePath) {
@@ -9326,6 +9441,7 @@ var import_node_crypto4 = require("crypto");
 init_teams();
 init_worktree_labels();
 init_global_workspace();
+init_orchestrator_capable();
 init_thread_store();
 init_worktree_labels();
 function sameWorktreePath(a, b) {
@@ -9389,6 +9505,10 @@ function createChatTab(input) {
   const binding = worktreeBindingFrom(from);
   const explicitTitle = input.title?.trim();
   const title = explicitTitle || allocateTeamName(takenTeamSlugsForChatTab(binding.worktreePath)).name;
+  const nextAgent = input.agent ?? from.agent;
+  if (isOrchestratorThread(from) || binding.sourceType === "orchestration") {
+    assertOrchestratorCapableAgent(nextAgent);
+  }
   const thread = createEmptyThread({
     title,
     // Chat-tab nicknames (soccer team or explicit) must stick. Post-turn
@@ -9396,7 +9516,7 @@ function createChatTab(input) {
     // shared worktree folder name (e.g. fork "Arsenal" → "Monaco").
     userSetTitle: true,
     ...binding,
-    agent: input.agent ?? from.agent,
+    agent: nextAgent,
     model: input.model !== void 0 ? input.model : input.agent && input.agent !== from.agent ? null : from.model,
     effort: input.effort !== void 0 ? input.effort : from.effort,
     fast: input.fast !== void 0 ? Boolean(input.fast) : from.fast,
@@ -9999,6 +10119,7 @@ async function cloneRepoIntoSideboard(opts) {
 
 // src/orchestrator/orchestrator.ts
 init_thread_store();
+init_orchestrator_capable();
 
 // src/review/request-review.ts
 var import_node_crypto5 = require("crypto");
@@ -10006,22 +10127,149 @@ var import_node_fs24 = require("fs");
 var import_node_path23 = require("path");
 init_global_workspace();
 init_thread_store();
+
+// src/review/review-request-template.ts
+var REVIEW_REQUEST_TEMPLATE = `# Review guidelines:
+
+You are reviewing a proposed code change so a human can decide whether it is **ready to merge / land**. Findings matter, but the primary deliverable is a clear readiness recommendation \u2014 not a laundry list of style notes.
+
+## Required outcome
+
+Start your reply with a **Recommendation** section using exactly one of:
+
+- **Approve** \u2014 ready to merge as-is (or with only trivial nits the author can ignore).
+- **Approve with nits** \u2014 ready to merge; list only optional polish that should not block.
+- **Request changes** \u2014 not ready; blocking issues must be fixed first.
+- **Needs more information** \u2014 cannot judge readiness yet (missing context, incomplete diff, unclear intent).
+
+In 1\u20133 sentences, say **why** \u2014 grounded in correctness, risk, test coverage, and scope \u2014 not vibes. If you request changes, name the blockers explicitly.
+
+People running this review are asking \u201Ccan we ship this?\u201D Treat that as the question you answer first.
+
+## Findings
+
+Below are guidelines for determining whether an issue is worth flagging to the original author.
+
+These are not the final word. More specific guidelines elsewhere (developer message, user message, a file, etc.) override these.
+
+Flag something as a bug / blocking finding only when:
+
+1. It meaningfully impacts the accuracy, performance, security, or maintainability of the code.
+2. The bug is discrete and actionable (not a vague codebase-wide complaint or a bundle of unrelated issues).
+3. Fixing it does not demand rigor absent from the rest of the codebase.
+4. The issue was introduced by this change (do not flag pre-existing bugs unless they are newly exposed by this PR).
+5. The author would likely fix it if made aware.
+6. It does not rely on unstated assumptions about the codebase or author intent.
+7. Speculative breakage is not enough \u2014 identify the other code that is provably affected.
+8. It is clearly not just an intentional change by the author.
+
+When flagging an issue, include a short accompanying comment:
+
+1. Clear about why it is a problem.
+2. Severity must match reality \u2014 do not inflate.
+3. Brief: at most one paragraph; avoid unnecessary line breaks in prose.
+4. No code chunks longer than 3 lines; wrap code in inline ticks or a fenced block.
+5. Call out scenarios / environments / inputs needed to hit the bug when severity depends on them.
+6. Matter-of-fact tone \u2014 helpful assistant, not accusatory or effusive.
+7. Skimmable on first read.
+8. No empty flattery (\u201CGreat job\u2026\u201D, \u201CThanks for\u2026\u201D).
+
+HOW MANY FINDINGS TO RETURN:
+
+List every finding the author would fix if they knew about it. If nothing qualifies, say so and still give the Recommendation. Do not stop at the first finding.
+
+GUIDELINES:
+
+- Ignore trivial style unless it obscures meaning or violates documented standards.
+- One comment per distinct issue (or a short multi-line range if needed).
+- Use \`\`\`suggestion blocks ONLY for concrete replacement code (minimal lines; no commentary inside the block).
+- In every \`\`\`suggestion block, preserve the exact leading whitespace of the replaced lines (spaces vs tabs, number of spaces).
+- Do NOT introduce or remove outer indentation levels unless that is the actual fix.
+- Separate **blocking** findings from **nits**. Only blocking findings should drive Request changes.
+
+The report appears in chat (and can become Sideboard diff comments). Avoid unnecessary location chatter in the body; keep line ranges as short as possible (prefer \u22645\u201310 lines).
+
+## Getting the diff
+
+Use Sideboard's diff for this thread's worktree. Prefer the \`get_diff\` MCP tool (pass this thread's ref) for a compact summary, then read specific files with Read/Glob as needed. In the Sideboard desktop app, the Changes panel shows the same worktree diff.
+
+If the user asks you to address or read line comments they added in the Changes / file diff UI, those arrive as \`diff-comment\` attachments on the next turn \u2014 follow them precisely.
+
+## Fallback: if you don't have access to the Sideboard diff tool
+
+If you don't have access to \`get_diff\`, use the following git commands to get the diff:
+
+\`\`\`bash
+# Get the merge base between this branch and the target
+MERGE_BASE=$(git merge-base origin/main HEAD)
+
+# Get the committed diff against the merge base
+git diff $MERGE_BASE HEAD
+
+# Get any uncommitted changes (staged and unstaged)
+git diff HEAD
+\`\`\`
+
+Review the combination of both outputs: the first shows all committed changes on this branch relative to the target, and the second shows any uncommitted work in progress.
+
+No need to mention in your report whether or not you used one of the fallback strategies; it's usually irrelevant.
+
+## Output format
+
+**1. Recommendation first** (required), then **2. Findings** (may be empty).
+
+Only report ONE finding per unique issue.
+
+<example>
+## Recommendation
+
+**Request changes** \u2014 The empty-input crash on load will break first-run users; fix that before merge. The unused helper is a nit and can wait.
+
+## Findings
+
+### **#1 Empty input causes crash** (blocking)
+
+If the input field is empty when the page loads, the app will crash.
+
+File: src/client/frontends/desktop/ui/Input.tsx
+
+### **#2 Dead code** (nit)
+
+The getUserData function is now unused. It should be deleted.
+
+File: src/client/frontends/desktop/core/UserData.ts
+</example>
+
+<example>
+## Recommendation
+
+**Approve** \u2014 Diff is scoped, behavior looks correct, and there are no blocking issues. Safe to merge.
+</example>
+`;
+
+// src/review/request-review.ts
+var REPO_REVIEW_PATH = ".sideboard/review.md";
+var REPO_REVIEW_NAME = "review.md";
 var REVIEW_REQUEST_PATH = ".sideboard/attachments/Review request.md";
 var REVIEW_REQUEST_NAME = "Review request.md";
-var REVIEW_REQUEST_PREFILL = `Please review the changes in this workspace and recommend whether they are ready to merge.
-
-Start with a **Recommendation**: Approve, Approve with nits, Request changes, or Needs more information \u2014 and say why in 1\u20133 sentences. Then list blocking findings vs nits (findings may be empty).`;
-function buildReviewRequestAttachment(content) {
-  return {
-    id: (0, import_node_crypto5.randomUUID)(),
-    name: REVIEW_REQUEST_NAME,
-    kind: "file",
-    path: REVIEW_REQUEST_PATH,
-    content
-  };
+var REVIEW_REQUEST_PREFILL = "Review.";
+var ATTACHMENTS_GITIGNORE2 = `# Sideboard review / composer attachments (local only)
+*
+!.gitignore
+`;
+var LEGACY_REVIEW_TEMPLATE_MARKERS = [
+  "You are acting as a reviewer for a proposed code change made by another engineer.",
+  "HOW MANY FINDINGS TO RETURN:"
+];
+function shouldRefreshReviewRequestTemplate(content) {
+  const trimmed = content.trim();
+  if (!trimmed) return true;
+  if (/##\s*Recommendation|ready to merge|Approve with nits|Request changes/i.test(trimmed)) {
+    return false;
+  }
+  return LEGACY_REVIEW_TEMPLATE_MARKERS.every((m) => trimmed.includes(m));
 }
-function readExistingReviewRequestFile(worktreePath) {
-  const abs = (0, import_node_path23.join)(worktreePath, REVIEW_REQUEST_PATH);
+function readTextIfPresent(abs) {
   if (!(0, import_node_fs24.existsSync)(abs)) return null;
   try {
     const content = (0, import_node_fs24.readFileSync)(abs, "utf8");
@@ -10030,6 +10278,87 @@ function readExistingReviewRequestFile(worktreePath) {
     return null;
   }
 }
+function ensureAttachmentsGitignore(worktreePath) {
+  const gitignoreAbs = (0, import_node_path23.join)(worktreePath, ".sideboard", "attachments", ".gitignore");
+  if ((0, import_node_fs24.existsSync)(gitignoreAbs)) return;
+  (0, import_node_fs24.mkdirSync)((0, import_node_path23.dirname)(gitignoreAbs), { recursive: true });
+  (0, import_node_fs24.writeFileSync)(gitignoreAbs, ATTACHMENTS_GITIGNORE2, "utf8");
+}
+function resolveReviewGuidelines(worktreePath) {
+  const repoAbs = (0, import_node_path23.join)(worktreePath, REPO_REVIEW_PATH);
+  const repoContent = readTextIfPresent(repoAbs);
+  if (repoContent) {
+    return {
+      path: REPO_REVIEW_PATH,
+      name: REPO_REVIEW_NAME,
+      content: repoContent,
+      source: "repo"
+    };
+  }
+  const localAbs = (0, import_node_path23.join)(worktreePath, REVIEW_REQUEST_PATH);
+  const localContent = readTextIfPresent(localAbs);
+  if (localContent && !shouldRefreshReviewRequestTemplate(localContent)) {
+    return {
+      path: REVIEW_REQUEST_PATH,
+      name: REVIEW_REQUEST_NAME,
+      content: localContent,
+      source: "local"
+    };
+  }
+  ensureAttachmentsGitignore(worktreePath);
+  (0, import_node_fs24.mkdirSync)((0, import_node_path23.dirname)(localAbs), { recursive: true });
+  (0, import_node_fs24.writeFileSync)(localAbs, REVIEW_REQUEST_TEMPLATE, "utf8");
+  return {
+    path: REVIEW_REQUEST_PATH,
+    name: REVIEW_REQUEST_NAME,
+    content: REVIEW_REQUEST_TEMPLATE,
+    source: "stock"
+  };
+}
+function ensureReviewRequestFile(worktreePath) {
+  const repoAbs = (0, import_node_path23.join)(worktreePath, REPO_REVIEW_PATH);
+  const repoContent = readTextIfPresent(repoAbs);
+  if (repoContent) {
+    return {
+      path: REPO_REVIEW_PATH,
+      name: REPO_REVIEW_NAME,
+      content: repoContent,
+      source: "repo"
+    };
+  }
+  const localAbs = (0, import_node_path23.join)(worktreePath, REVIEW_REQUEST_PATH);
+  const localContent = readTextIfPresent(localAbs);
+  if (localContent && !shouldRefreshReviewRequestTemplate(localContent)) {
+    return {
+      path: REVIEW_REQUEST_PATH,
+      name: REVIEW_REQUEST_NAME,
+      content: localContent,
+      source: "local"
+    };
+  }
+  (0, import_node_fs24.mkdirSync)((0, import_node_path23.dirname)(repoAbs), { recursive: true });
+  (0, import_node_fs24.writeFileSync)(repoAbs, REVIEW_REQUEST_TEMPLATE, "utf8");
+  return {
+    path: REPO_REVIEW_PATH,
+    name: REPO_REVIEW_NAME,
+    content: REVIEW_REQUEST_TEMPLATE,
+    source: "repo"
+  };
+}
+function buildReviewRequestAttachment(content, opts) {
+  const path = opts?.path ?? REVIEW_REQUEST_PATH;
+  const name = opts?.name ?? (path === REPO_REVIEW_PATH ? REPO_REVIEW_NAME : REVIEW_REQUEST_NAME);
+  return {
+    id: (0, import_node_crypto5.randomUUID)(),
+    name,
+    kind: "file",
+    path,
+    content
+  };
+}
+function readExistingReviewRequestFile(worktreePath) {
+  return readTextIfPresent((0, import_node_path23.join)(worktreePath, REPO_REVIEW_PATH)) ?? readTextIfPresent((0, import_node_path23.join)(worktreePath, REVIEW_REQUEST_PATH));
+}
 async function requestReview(threadRef, send) {
   const from = findThreadByRef(threadRef);
   if (!from) throw new Error(`Thread not found: ${threadRef}`);
@@ -10041,12 +10370,16 @@ async function requestReview(threadRef, send) {
   if (from.status === "archived") {
     throw new Error(`Thread is archived: ${from.id}`);
   }
-  const existing = readExistingReviewRequestFile(from.worktreePath);
-  const attachments = existing ? [buildReviewRequestAttachment(existing)] : [];
+  const guidelines = resolveReviewGuidelines(from.worktreePath);
   const tab = createChatTab({
     fromThreadId: from.id,
     title: "Review",
-    attachments
+    attachments: [
+      buildReviewRequestAttachment(guidelines.content, {
+        path: guidelines.path,
+        name: guidelines.name
+      })
+    ]
   });
   const started = await send(tab.id, REVIEW_REQUEST_PREFILL);
   return { tab: started, from };
@@ -10626,9 +10959,11 @@ var Orchestrator = class {
       this.emit({ type: "error", threadId, message: `context compact failed: ${message}` });
       thread = this.requireThread(threadId);
     }
+    const sentAttachments = thread.attachments.length > 0 ? [...thread.attachments] : void 0;
     appendMessage(threadId, {
       role: "user",
       text: prompt,
+      ...sentAttachments ? { attachments: sentAttachments } : {},
       ts: (/* @__PURE__ */ new Date()).toISOString()
     });
     thread = this.requireThread(threadId);
@@ -10636,7 +10971,7 @@ var Orchestrator = class {
       thread.worktreePath,
       prompt,
       {
-        attachments: thread.attachments
+        attachments: sentAttachments ?? thread.attachments
       }
     );
     const orchestrationReminder = isOrchestratorThread(thread) ? coordinatorTurnReminder({
@@ -11320,6 +11655,9 @@ var Orchestrator = class {
             `Cannot switch agent provider mid-chat (${thread.agent} \u2192 ${patch.agent}). Start a new chat tab instead.`
           );
         }
+        if (isOrchestratorThread(thread)) {
+          assertOrchestratorCapableAgent(patch.agent);
+        }
         next.agent = patch.agent;
         if (patch.agent !== "claude" && patch.model === void 0) next.model = null;
         next.sessionId = null;
@@ -11937,7 +12275,7 @@ async function startMcpServer() {
   );
   server.tool(
     "request_review",
-    "Start a merge-readiness Review on a worktree agent thread (same as the desktop Review button). Opens a new Review chat tab, optionally attaches .sideboard/attachments/Review request.md when present, and asks for Approve / Approve with nits / Request changes / Needs more information. Pass a worktree thread ref \u2014 not the orchestrator. Then wait_for_turn / get_turn_result on the returned review tab id.",
+    'Start a merge-readiness Review on a worktree agent thread (same as the desktop Review button). Opens a new Review chat tab, attaches .sideboard/review.md when present (else local Review request.md / stock template), and sends "Review." Expect Approve / Approve with nits / Request changes / Needs more information. Pass a worktree thread ref \u2014 not the orchestrator. Then wait_for_turn / get_turn_result on the returned review tab id.',
     { ref: import_zod.z.string().describe("Worktree thread id/ref to review") },
     async ({ ref }) => {
       try {
@@ -12029,7 +12367,7 @@ async function startMcpServer() {
   );
   server.tool(
     "fork_chat",
-    "Fork a chat into a NEW tab on the SAME workspace: worktree agent \u2192 same worktree tab; Global orchestration chat \u2192 new orchestration chat (same synthetic home). Seeds a transcript; optional agent override. Leave model unset for Auto unless you have a reason. Remote coordinators use this to continue an orchestration chat on another agent after session limits. Then send_to_thread / wait_for_turn on the returned id. Use fork_worktree only for worktree agents that need a new git worktree.",
+    "Fork a chat into a NEW tab on the SAME workspace: worktree agent \u2192 same worktree tab; Global orchestration chat \u2192 new orchestration chat (same synthetic home). Seeds a transcript; optional agent override. Leave model unset for Auto unless you have a reason. Orchestration forks require an MCP-capable agent (claude, cursor, codex, opencode \u2014 not brightsy). Remote coordinators use this to continue an orchestration chat on another agent after session limits. Then send_to_thread / wait_for_turn on the returned id. Use fork_worktree only for worktree agents that need a new git worktree.",
     {
       ref: import_zod.z.string().describe("Thread id/ref to fork (worktree agent or orchestration chat)"),
       through_index: import_zod.z.number().optional().describe("Inclusive message index to include in the transcript (default: all)"),
@@ -12617,10 +12955,13 @@ init_injected_mcp();
   GLOBAL_WORKSPACE_ID,
   HARNESS_ENV_KEYS,
   MAX_ANTHROPIC_CACHE_CONTROL_BLOCKS,
+  ORCHESTRATOR_AGENT_KINDS,
   Orchestrator,
   PASTE_ATTACH_MIN_CHARS,
   PASTE_ATTACH_MIN_LINES,
   PLAN_MODE_INSTRUCTION,
+  REPO_REVIEW_NAME,
+  REPO_REVIEW_PATH,
   REVIEW_REQUEST_NAME,
   REVIEW_REQUEST_PATH,
   REVIEW_REQUEST_PREFILL,
@@ -12641,6 +12982,7 @@ init_injected_mcp();
   applyAppEnvironment,
   applyCompaction,
   applyThreadIntoMain,
+  assertOrchestratorCapableAgent,
   attachmentFromAbsolutePath,
   attachmentsFromBuffers,
   attachmentsFromWorktreePaths,
@@ -12673,6 +13015,7 @@ init_injected_mcp();
   cleanupOrphanWorktrees,
   cloneRepoIntoSideboard,
   codexAdapter,
+  coerceOrchestratorAgent,
   collectTakenTeamSlugs,
   commitAll,
   conductorDbPath,
@@ -12704,6 +13047,7 @@ init_injected_mcp();
   ensureCloudCoordinator,
   ensureGhPreferOrigin,
   ensureGlobalCoordinatorCwd,
+  ensureReviewRequestFile,
   ensureWorkspace,
   estimateMessageChars,
   estimateThreadChars,
@@ -12777,6 +13121,7 @@ init_injected_mcp();
   isGlobalThread,
   isImageFilePath,
   isLinearConnected,
+  isOrchestratorCapableAgent,
   isOrchestratorThread,
   isPidAlive,
   isPlaceholderBranch,
@@ -12866,6 +13211,7 @@ init_injected_mcp();
   resolvePrSelector,
   resolveQuotaFallbackAgent,
   resolveRepoRoot,
+  resolveReviewGuidelines,
   resolveThreadDefaults,
   resolveThreadEffort,
   resolveWorktreeStartPoint,
@@ -12881,6 +13227,7 @@ init_injected_mcp();
   settingsSourceLabel,
   shouldAttachPastedText,
   shouldCompactContext,
+  shouldRefreshReviewRequestTemplate,
   shouldRunWorktreeCleanup,
   sideboardHomeDir,
   sideboardReposDir,