@sideboard-ai/core 0.1.84 → 0.1.85

package/dist/mcp/run-stdio.cjs

@@ -1732,261 +1732,9 @@ var init_gh_errors = __esm({
   }
 });
 
-// src/git/git-auth-mode.ts
-function appendIndexedGitConfig(existing, entries) {
-  const start = Number.parseInt(String(existing?.GIT_CONFIG_COUNT ?? "0"), 10);
-  const count = Number.isFinite(start) && start > 0 ? start : 0;
-  const out = {};
-  entries.forEach((entry, i) => {
-    const n = count + i;
-    out[`GIT_CONFIG_KEY_${n}`] = entry.key;
-    out[`GIT_CONFIG_VALUE_${n}`] = entry.value;
-  });
-  out.GIT_CONFIG_COUNT = String(count + entries.length);
-  return out;
-}
-function githubAgentGitEnv(existing) {
-  return appendIndexedGitConfig(existing, HTTPS_REWRITE);
-}
-function applyGithubGitAuthEnv(existing, opts) {
-  const out = {};
-  if (opts.mode === "gh" || opts.mode === "token") {
-    Object.assign(out, githubAgentGitEnv(existing));
-  }
-  if (opts.mode === "token") {
-    const token = opts.token?.trim();
-    if (token && !existing?.GH_TOKEN?.trim()) {
-      out.GH_TOKEN = token;
-    }
-  }
-  return out;
-}
-function formatGitAuthModeDirective(mode) {
-  switch (mode) {
-    case "gh":
-      return [
-        "Git authentication (Account \u2192 GitHub mode: gh CLI):",
-        "- This process rewrites `git@github.com:` and `ssh://git@github.com/` to HTTPS.",
-        "- `gh` supplies credentials (`gh auth git-credential`). Do not switch remotes to SSH.",
-        "- Push with `git push -u origin HEAD`. Create/update PRs with `gh` as below."
-      ].join("\n");
-    case "ssh":
-      return [
-        "Git authentication (Account \u2192 GitHub mode: SSH):",
-        "- Keep SSH remotes (`git@github.com:\u2026`). Do not rewrite them to HTTPS.",
-        "- Use this Mac\u2019s SSH agent / keys. If push fails with `Permission denied (publickey)`, tell the user to start ssh-agent or switch Account \u2192 GitHub to Auto / gh CLI \u2014 do not rewrite remotes yourself.",
-        "- Push with `git push -u origin HEAD`. Create/update PRs with `gh` as below (API still uses `gh`)."
-      ].join("\n");
-    case "token":
-      return [
-        "Git authentication (Account \u2192 GitHub mode: personal access token):",
-        "- This process rewrites GitHub SSH remotes to HTTPS.",
-        "- `GH_TOKEN` is set in the environment. Use HTTPS git and `gh`; do not paste the token into commands or chat.",
-        "- Push with `git push -u origin HEAD`. Create/update PRs with `gh` as below."
-      ].join("\n");
-    case "auto":
-    default:
-      return [
-        "Git authentication (Account \u2192 GitHub mode: auto):",
-        "- Prefer the existing remote URL (SSH or HTTPS). Do not rewrite remotes unless a push/fetch fails.",
-        '- If `git push` fails with `Permission denied (publickey)`, this shell has no ssh-agent. Retry over HTTPS (do not stop): `git -c url.https://github.com/.insteadOf=git@github.com: -c http.extraHeader="AUTHORIZATION: bearer $(gh auth token)" push -u origin HEAD`.',
-        "- Then create/update the PR with `gh` as below."
-      ].join("\n");
-  }
-}
-var HTTPS_REWRITE;
-var init_git_auth_mode = __esm({
-  "src/git/git-auth-mode.ts"() {
-    "use strict";
-    HTTPS_REWRITE = [
-      { key: "url.https://github.com/.insteadOf", value: "git@github.com:" },
-      { key: "url.https://github.com/.insteadOf", value: "ssh://git@github.com/" },
-      { key: "credential.https://github.com.helper", value: "!gh auth git-credential" }
-    ];
-  }
-});
-
-// src/agents/path.ts
-function prependPathDir(env, dir) {
-  if (!dir || !(0, import_node_fs8.existsSync)(dir)) return;
-  const current = env.PATH ?? "";
-  const parts = current.split(import_node_path8.delimiter).filter(Boolean);
-  if (parts.includes(dir)) {
-    env.PATH = current;
-    return;
-  }
-  env.PATH = [dir, ...parts].join(import_node_path8.delimiter);
-}
-function conductorBundledBinDir(home = process.env.HOME || process.env.USERPROFILE || (0, import_node_os3.homedir)()) {
-  return (0, import_node_path8.join)(home, "Library", "Application Support", "com.conductor.app", "bin");
-}
-function isConductorBundledCli(filePath) {
-  const p = (filePath ?? "").replace(/\\/g, "/");
-  return p.includes("/com.conductor.app/bin/") || p.endsWith("/com.conductor.app/bin");
-}
-function ensureAgentPath(env = process.env) {
-  const home = env.HOME || env.USERPROFILE || (0, import_node_os3.homedir)();
-  const current = env.PATH ?? "";
-  const parts = current.split(import_node_path8.delimiter).filter(Boolean);
-  const seen = new Set(parts);
-  const extras = [
-    ...EXTRA_BIN_DIRS.map((rel) => (0, import_node_path8.join)(home, rel)),
-    "/opt/homebrew/bin",
-    "/usr/local/bin",
-    // Keep after Homebrew/npm so a user-installed CLI still wins.
-    conductorBundledBinDir(home)
-  ];
-  for (const dir of extras.reverse()) {
-    if (!dir || seen.has(dir) || !(0, import_node_fs8.existsSync)(dir)) continue;
-    parts.unshift(dir);
-    seen.add(dir);
-  }
-  const next = parts.join(import_node_path8.delimiter);
-  env.PATH = next;
-  return next;
-}
-function enrichPathWithNpmGlobalBin(env = process.env) {
-  ensureAgentPath(env);
-  try {
-    const prefix = (0, import_node_child_process2.execFileSync)("npm", ["prefix", "-g"], {
-      encoding: "utf8",
-      env: { ...process.env, ...env },
-      timeout: 8e3,
-      stdio: ["ignore", "pipe", "ignore"]
-    }).trim().split(/\r?\n/).find(Boolean);
-    if (prefix) {
-      const binDir = process.platform === "win32" ? prefix : (0, import_node_path8.join)(prefix, "bin");
-      prependPathDir(env, binDir);
-    }
-  } catch {
-  }
-  return env.PATH ?? "";
-}
-function posixShellSingleQuote(value) {
-  return `'${value.replace(/'/g, `'\\''`)}'`;
-}
-function resolveCommandBinarySync(command, whichPath) {
-  const trimmed = command.trim();
-  if (!trimmed) return trimmed;
-  const match = /^(\S+)(\s[\s\S]*)?$/.exec(trimmed);
-  if (!match) return trimmed;
-  const bin = match[1];
-  const rest = match[2] ?? "";
-  if (bin.includes("/") || bin.includes("\\")) return trimmed;
-  const abs = whichPath?.trim().split(/\r?\n/).find(Boolean);
-  if (!abs) return trimmed;
-  return `${abs}${rest}`;
-}
-function withExportedPath(command, pathValue) {
-  const trimmed = command.trim();
-  if (!trimmed) return trimmed;
-  if (/^(export\s+PATH=|PATH=)/.test(trimmed)) return trimmed;
-  return `export PATH=${posixShellSingleQuote(pathValue)} && ${trimmed}`;
-}
-var import_node_fs8, import_node_child_process2, import_node_os3, import_node_path8, EXTRA_BIN_DIRS;
-var init_path = __esm({
-  "src/agents/path.ts"() {
-    "use strict";
-    import_node_fs8 = require("fs");
-    import_node_child_process2 = require("child_process");
-    import_node_os3 = require("os");
-    import_node_path8 = require("path");
-    EXTRA_BIN_DIRS = [
-      ".local/bin",
-      ".cargo/bin",
-      ".nvm/current/bin",
-      ".asdf/shims",
-      ".volta/bin",
-      ".npm-global/bin",
-      // fnm default alias (common when shell init is skipped)
-      ".local/share/fnm/aliases/default/bin",
-      // pnpm / npm global bins (where `@brightsy/cli` typically lands)
-      "Library/pnpm",
-      ".pnpm"
-    ];
-  }
-});
-
-// src/git/run.ts
-var run_exports = {};
-__export(run_exports, {
-  gh: () => gh,
-  git: () => git,
-  resolveGhAuthToken: () => resolveGhAuthToken,
-  run: () => run
-});
-async function run(file, args, opts) {
-  ensureAgentPath();
-  try {
-    const result = await (0, import_execa.execa)(file, args, {
-      cwd: opts?.cwd,
-      env: { ...process.env, ...opts?.env },
-      reject: opts?.reject ?? true,
-      ...opts?.timeoutMs != null ? { timeout: opts.timeoutMs } : {}
-    });
-    return {
-      stdout: result.stdout ?? "",
-      stderr: result.stderr ?? "",
-      exitCode: result.exitCode ?? 0
-    };
-  } catch (err) {
-    const e = err;
-    if (opts?.reject === false) {
-      return {
-        stdout: String(e.stdout ?? ""),
-        stderr: String(e.stderr ?? ""),
-        exitCode: e.exitCode ?? 1
-      };
-    }
-    throw err;
-  }
-}
-async function git(args, cwd, opts) {
-  const prefix = [];
-  if (opts?.config) {
-    for (const [key, value] of Object.entries(opts.config)) {
-      if (!key) continue;
-      prefix.push("-c", `${key}=${value}`);
-    }
-  }
-  return run("git", ["--no-pager", ...prefix, ...args], {
-    cwd,
-    reject: opts?.reject,
-    timeoutMs: opts?.timeoutMs,
-    // Never block forever on a credential/SSH prompt inside MCP / Electron.
-    env: {
-      GIT_TERMINAL_PROMPT: "0",
-      GIT_ASKPASS: process.env.GIT_ASKPASS || "echo",
-      GIT_SSH_COMMAND: process.env.GIT_SSH_COMMAND || "ssh -o BatchMode=yes -o ConnectTimeout=15",
-      ...opts?.env
-    }
-  });
-}
-async function gh(args, cwd, opts) {
-  return run("gh", args, {
-    cwd,
-    reject: opts?.reject,
-    timeoutMs: opts?.timeoutMs
-  });
-}
-async function resolveGhAuthToken(cwd) {
-  const result = await gh(["auth", "token"], cwd, { reject: false });
-  if (result.exitCode !== 0) return null;
-  const token = result.stdout.trim();
-  return token || null;
-}
-var import_execa;
-var init_run = __esm({
-  "src/git/run.ts"() {
-    "use strict";
-    import_execa = require("execa");
-    init_path();
-  }
-});
-
 // src/store/secret-vault.ts
 function secretVaultPath() {
-  return (0, import_node_path9.join)(appDataDir(), "secrets.json");
+  return (0, import_node_path8.join)(appDataDir(), "secrets.json");
 }
 function loadSecretVault() {
   const parsed = readSecureJson(secretVaultPath());
@@ -2030,11 +1778,11 @@ function normalizeVault(raw) {
   }
   return out;
 }
-var import_node_path9;
+var import_node_path8;
 var init_secret_vault = __esm({
   "src/store/secret-vault.ts"() {
     "use strict";
-    import_node_path9 = require("path");
+    import_node_path8 = require("path");
     init_paths();
     init_secure_file();
   }
@@ -2135,10 +1883,10 @@ function toPublicAppSettings(settings) {
   };
 }
 function appSettingsPath() {
-  return (0, import_node_path10.join)(appDataDir(), "settings.json");
+  return (0, import_node_path9.join)(appDataDir(), "settings.json");
 }
 function claudeUserSettingsPath() {
-  return (0, import_node_path10.join)((0, import_node_os4.homedir)(), ".claude", "settings.json");
+  return (0, import_node_path9.join)((0, import_node_os3.homedir)(), ".claude", "settings.json");
 }
 function normalizeClaude(raw) {
   if (!raw || typeof raw !== "object") return {};
@@ -2381,10 +2129,10 @@ function normalizeSettings(raw) {
 }
 function readSettingsFile() {
   const path = appSettingsPath();
-  if (!(0, import_node_fs9.existsSync)(path)) return { ...EMPTY_SETTINGS };
+  if (!(0, import_node_fs8.existsSync)(path)) return { ...EMPTY_SETTINGS };
   try {
     chmodOwnerOnly(path);
-    const parsed = JSON.parse((0, import_node_fs9.readFileSync)(path, "utf8"));
+    const parsed = JSON.parse((0, import_node_fs8.readFileSync)(path, "utf8"));
     return normalizeSettings(parsed);
   } catch {
     return { ...EMPTY_SETTINGS };
@@ -2769,7 +2517,7 @@ function ensureSlackDeviceIdentity(settings = loadAppSettings()) {
   }
   if (!deviceLabel) {
     try {
-      deviceLabel = (0, import_node_os4.hostname)().split(".")[0]?.trim() || "This Mac";
+      deviceLabel = (0, import_node_os3.hostname)().split(".")[0]?.trim() || "This Mac";
     } catch {
       deviceLabel = "This Mac";
     }
@@ -2944,14 +2692,14 @@ function childEnvWithAppSettings(extra) {
 function harnessEnvKey(harness) {
   return HARNESS_ENV_KEYS[harness];
 }
-var import_node_crypto3, import_node_fs9, import_node_os4, import_node_path10, HARNESS_ENV_KEYS, DEFAULT_AGENTS, GITHUB_GIT_AUTH_MODES, CLOUD_CONNECT_AGENTS, ISSUE_SOURCES, GIT_AUTH_MODES, EMPTY_SETTINGS, DEFAULT_CLI_BIN;
+var import_node_crypto3, import_node_fs8, import_node_os3, import_node_path9, HARNESS_ENV_KEYS, DEFAULT_AGENTS, GITHUB_GIT_AUTH_MODES, CLOUD_CONNECT_AGENTS, ISSUE_SOURCES, GIT_AUTH_MODES, EMPTY_SETTINGS, DEFAULT_CLI_BIN;
 var init_app_settings = __esm({
   "src/store/app-settings.ts"() {
     "use strict";
     import_node_crypto3 = require("crypto");
-    import_node_fs9 = require("fs");
-    import_node_os4 = require("os");
-    import_node_path10 = require("path");
+    import_node_fs8 = require("fs");
+    import_node_os3 = require("os");
+    import_node_path9 = require("path");
     init_thinking_effort();
     init_nested_electron_env();
     init_paths();
@@ -2999,6 +2747,333 @@ var init_app_settings = __esm({
   }
 });
 
+// src/agents/path.ts
+function prependPathDir(env, dir) {
+  if (!dir || !(0, import_node_fs9.existsSync)(dir)) return;
+  const current = env.PATH ?? "";
+  const parts = current.split(import_node_path10.delimiter).filter(Boolean);
+  if (parts.includes(dir)) {
+    env.PATH = current;
+    return;
+  }
+  env.PATH = [dir, ...parts].join(import_node_path10.delimiter);
+}
+function conductorBundledBinDir(home = process.env.HOME || process.env.USERPROFILE || (0, import_node_os4.homedir)()) {
+  return (0, import_node_path10.join)(home, "Library", "Application Support", "com.conductor.app", "bin");
+}
+function isConductorBundledCli(filePath) {
+  const p = (filePath ?? "").replace(/\\/g, "/");
+  return p.includes("/com.conductor.app/bin/") || p.endsWith("/com.conductor.app/bin");
+}
+function ensureAgentPath(env = process.env) {
+  const home = env.HOME || env.USERPROFILE || (0, import_node_os4.homedir)();
+  const current = env.PATH ?? "";
+  const parts = current.split(import_node_path10.delimiter).filter(Boolean);
+  const seen = new Set(parts);
+  const extras = [
+    ...EXTRA_BIN_DIRS.map((rel) => (0, import_node_path10.join)(home, rel)),
+    "/opt/homebrew/bin",
+    "/usr/local/bin",
+    // Keep after Homebrew/npm so a user-installed CLI still wins.
+    conductorBundledBinDir(home)
+  ];
+  for (const dir of extras.reverse()) {
+    if (!dir || seen.has(dir) || !(0, import_node_fs9.existsSync)(dir)) continue;
+    parts.unshift(dir);
+    seen.add(dir);
+  }
+  const next = parts.join(import_node_path10.delimiter);
+  env.PATH = next;
+  return next;
+}
+function enrichPathWithNpmGlobalBin(env = process.env) {
+  ensureAgentPath(env);
+  try {
+    const prefix = (0, import_node_child_process2.execFileSync)("npm", ["prefix", "-g"], {
+      encoding: "utf8",
+      env: { ...process.env, ...env },
+      timeout: 8e3,
+      stdio: ["ignore", "pipe", "ignore"]
+    }).trim().split(/\r?\n/).find(Boolean);
+    if (prefix) {
+      const binDir = process.platform === "win32" ? prefix : (0, import_node_path10.join)(prefix, "bin");
+      prependPathDir(env, binDir);
+    }
+  } catch {
+  }
+  return env.PATH ?? "";
+}
+function posixShellSingleQuote(value) {
+  return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+function resolveCommandBinarySync(command, whichPath) {
+  const trimmed = command.trim();
+  if (!trimmed) return trimmed;
+  const match = /^(\S+)(\s[\s\S]*)?$/.exec(trimmed);
+  if (!match) return trimmed;
+  const bin = match[1];
+  const rest = match[2] ?? "";
+  if (bin.includes("/") || bin.includes("\\")) return trimmed;
+  const abs = whichPath?.trim().split(/\r?\n/).find(Boolean);
+  if (!abs) return trimmed;
+  return `${abs}${rest}`;
+}
+function withExportedPath(command, pathValue) {
+  const trimmed = command.trim();
+  if (!trimmed) return trimmed;
+  if (/^(export\s+PATH=|PATH=)/.test(trimmed)) return trimmed;
+  return `export PATH=${posixShellSingleQuote(pathValue)} && ${trimmed}`;
+}
+var import_node_fs9, import_node_child_process2, import_node_os4, import_node_path10, EXTRA_BIN_DIRS;
+var init_path = __esm({
+  "src/agents/path.ts"() {
+    "use strict";
+    import_node_fs9 = require("fs");
+    import_node_child_process2 = require("child_process");
+    import_node_os4 = require("os");
+    import_node_path10 = require("path");
+    EXTRA_BIN_DIRS = [
+      ".local/bin",
+      ".cargo/bin",
+      ".nvm/current/bin",
+      ".asdf/shims",
+      ".volta/bin",
+      ".npm-global/bin",
+      // fnm default alias (common when shell init is skipped)
+      ".local/share/fnm/aliases/default/bin",
+      // pnpm / npm global bins (where `@brightsy/cli` typically lands)
+      "Library/pnpm",
+      ".pnpm"
+    ];
+  }
+});
+
+// src/git/run.ts
+var run_exports = {};
+__export(run_exports, {
+  gh: () => gh,
+  git: () => git,
+  resolveGhAuthToken: () => resolveGhAuthToken,
+  run: () => run
+});
+async function run(file, args, opts) {
+  ensureAgentPath();
+  try {
+    const result = await (0, import_execa.execa)(file, args, {
+      cwd: opts?.cwd,
+      env: { ...process.env, ...opts?.env },
+      reject: opts?.reject ?? true,
+      ...opts?.timeoutMs != null ? { timeout: opts.timeoutMs } : {}
+    });
+    return {
+      stdout: result.stdout ?? "",
+      stderr: result.stderr ?? "",
+      exitCode: result.exitCode ?? 0
+    };
+  } catch (err) {
+    const e = err;
+    if (opts?.reject === false) {
+      return {
+        stdout: String(e.stdout ?? ""),
+        stderr: String(e.stderr ?? ""),
+        exitCode: e.exitCode ?? 1
+      };
+    }
+    throw err;
+  }
+}
+async function git(args, cwd, opts) {
+  const prefix = [];
+  if (opts?.config) {
+    for (const [key, value] of Object.entries(opts.config)) {
+      if (!key) continue;
+      prefix.push("-c", `${key}=${value}`);
+    }
+  }
+  return run("git", ["--no-pager", ...prefix, ...args], {
+    cwd,
+    reject: opts?.reject,
+    timeoutMs: opts?.timeoutMs,
+    // Never block forever on a credential/SSH prompt inside MCP / Electron.
+    env: {
+      GIT_TERMINAL_PROMPT: "0",
+      GIT_ASKPASS: process.env.GIT_ASKPASS || "echo",
+      SSH_ASKPASS: process.env.SSH_ASKPASS || "echo",
+      GIT_SSH_COMMAND: process.env.GIT_SSH_COMMAND || "ssh -o BatchMode=yes -o ConnectTimeout=15",
+      GCM_INTERACTIVE: "never",
+      GH_PROMPT_DISABLED: "1",
+      ...opts?.env
+    }
+  });
+}
+async function gh(args, cwd, opts) {
+  return run("gh", args, {
+    cwd,
+    reject: opts?.reject,
+    timeoutMs: opts?.timeoutMs,
+    env: {
+      GH_PROMPT_DISABLED: "1",
+      GIT_TERMINAL_PROMPT: "0"
+    }
+  });
+}
+async function resolveGhAuthToken(cwd) {
+  const result = await gh(["auth", "token"], cwd, { reject: false, timeoutMs: 8e3 });
+  if (result.exitCode !== 0) return null;
+  const token = result.stdout.trim();
+  return token || null;
+}
+var import_execa;
+var init_run = __esm({
+  "src/git/run.ts"() {
+    "use strict";
+    import_execa = require("execa");
+    init_path();
+  }
+});
+
+// src/git/git-auth-mode.ts
+function nonInteractiveGitProcessEnv() {
+  return {
+    GIT_TERMINAL_PROMPT: "0",
+    GIT_ASKPASS: process.env.GIT_ASKPASS?.trim() || "echo",
+    SSH_ASKPASS: process.env.SSH_ASKPASS?.trim() || "echo",
+    GIT_SSH_COMMAND: process.env.GIT_SSH_COMMAND?.trim() || "ssh -o BatchMode=yes -o ConnectTimeout=15",
+    GCM_INTERACTIVE: "never",
+    GH_PROMPT_DISABLED: "1"
+  };
+}
+function appendIndexedGitConfig(existing, entries) {
+  const start = Number.parseInt(String(existing?.GIT_CONFIG_COUNT ?? "0"), 10);
+  const count = Number.isFinite(start) && start > 0 ? start : 0;
+  const out = {};
+  entries.forEach((entry, i) => {
+    const n = count + i;
+    out[`GIT_CONFIG_KEY_${n}`] = entry.key;
+    out[`GIT_CONFIG_VALUE_${n}`] = entry.value;
+  });
+  out.GIT_CONFIG_COUNT = String(count + entries.length);
+  return out;
+}
+function githubAgentGitEnv(existing) {
+  return appendIndexedGitConfig(existing, HTTPS_REWRITE);
+}
+function githubHttpsBearerEnv(existing, token) {
+  const rewrite = githubAgentGitEnv(existing);
+  const header = appendIndexedGitConfig(
+    { ...existing, ...rewrite },
+    [
+      {
+        key: "http.https://github.com/.extraHeader",
+        value: `AUTHORIZATION: bearer ${token}`
+      }
+    ]
+  );
+  return { ...rewrite, ...header };
+}
+function applyGithubGitAuthEnv(existing, opts) {
+  const out = { ...nonInteractiveGitProcessEnv() };
+  if (opts.mode === "ssh") return out;
+  const existingToken = existing?.GH_TOKEN?.trim() || "";
+  const provided = existingToken ? "" : opts.token?.trim() || "";
+  const token = existingToken || provided;
+  Object.assign(
+    out,
+    token ? githubHttpsBearerEnv(existing, token) : githubAgentGitEnv(existing)
+  );
+  if (provided) out.GH_TOKEN = provided;
+  return out;
+}
+async function resolveGithubAgentToken(mode, cwd) {
+  if (mode === "ssh") return null;
+  if (mode === "token") return getGithubPat();
+  try {
+    return await resolveGhAuthToken(cwd);
+  } catch {
+    return null;
+  }
+}
+async function resolveAgentGitAuthEnv(existing, opts) {
+  let mode = "auto";
+  if (opts?.mode) {
+    mode = opts.mode;
+  } else {
+    try {
+      mode = getGithubGitAuthMode();
+    } catch {
+      mode = "auto";
+    }
+  }
+  const cwd = opts?.cwd?.trim() || process.cwd();
+  let token = null;
+  try {
+    token = await resolveGithubAgentToken(mode, cwd);
+  } catch {
+    token = null;
+  }
+  return applyGithubGitAuthEnv(existing, { mode, token });
+}
+function codexUnattendedGitConfigArgs(sandbox) {
+  const args = [
+    "-c",
+    'shell_environment_policy.inherit="all"',
+    "-c",
+    "shell_environment_policy.ignore_default_excludes=true"
+  ];
+  if (sandbox === "workspace-write") {
+    args.push("-c", "sandbox_workspace_write.network_access=true");
+  }
+  return args;
+}
+function formatGitAuthModeDirective(mode) {
+  switch (mode) {
+    case "gh":
+      return [
+        "Git authentication (Account \u2192 GitHub mode: gh CLI):",
+        "- This process rewrites `git@github.com:` and `ssh://git@github.com/` to HTTPS.",
+        "- `GH_TOKEN` is injected from `gh auth token` (no macOS Keychain prompts). Do not switch remotes to SSH.",
+        "- Push with `git push -u origin HEAD`. Create/update PRs with `gh` as below."
+      ].join("\n");
+    case "ssh":
+      return [
+        "Git authentication (Account \u2192 GitHub mode: SSH):",
+        "- Keep SSH remotes (`git@github.com:\u2026`). Do not rewrite them to HTTPS.",
+        "- SSH is batch-mode: it will not prompt for a Keychain password. If push fails with `Permission denied (publickey)`, tell the user to unlock ssh-agent or switch Account \u2192 GitHub to Auto / gh CLI \u2014 do not rewrite remotes yourself.",
+        "- Push with `git push -u origin HEAD`. Create/update PRs with `gh` as below (API still uses `gh`)."
+      ].join("\n");
+    case "token":
+      return [
+        "Git authentication (Account \u2192 GitHub mode: personal access token):",
+        "- This process rewrites GitHub SSH remotes to HTTPS.",
+        "- `GH_TOKEN` is set in the environment. Use HTTPS git and `gh`; do not paste the token into commands or chat.",
+        "- Push with `git push -u origin HEAD`. Create/update PRs with `gh` as below."
+      ].join("\n");
+    case "auto":
+    default:
+      return [
+        "Git authentication (Account \u2192 GitHub mode: auto):",
+        "- This process rewrites GitHub SSH remotes to HTTPS and authenticates with `GH_TOKEN` from `gh` so git/ssh never prompt the macOS Keychain (required for Slack / unattended Cursor).",
+        "- Do not switch remotes to SSH. Push with `git push -u origin HEAD`.",
+        "- If HTTPS auth fails, tell the user to run `gh auth login` on this Mac or set Account \u2192 GitHub to a PAT \u2014 do not wait for a Keychain dialog."
+      ].join("\n");
+  }
+}
+var HTTPS_REWRITE;
+var init_git_auth_mode = __esm({
+  "src/git/git-auth-mode.ts"() {
+    "use strict";
+    init_app_settings();
+    init_run();
+    HTTPS_REWRITE = [
+      { key: "url.https://github.com/.insteadOf", value: "git@github.com:" },
+      { key: "url.https://github.com/.insteadOf", value: "ssh://git@github.com/" },
+      // Empty helper disables ~/.gitconfig osxkeychain so GUI agents cannot pop
+      // "git-credential-osxkeychain wants to use the keychain".
+      { key: "credential.helper", value: "" }
+    ];
+  }
+});
+
 // src/git/pr-gates.ts
 function prIsInMergeQueue(gate) {
   if (gate.isInMergeQueue) return true;
@@ -3456,7 +3531,7 @@ async function originGhRepoEnv(cwd, opts) {
   await ensureGhPreferOrigin(cwd);
   const slug = await resolveGithubRepoSlug(cwd);
   const mode = opts?.mode ?? getGithubGitAuthMode();
-  const token = mode === "token" ? getGithubPat() : null;
+  const token = mode === "token" ? getGithubPat() : mode === "ssh" ? null : await resolveGhAuthToken(cwd);
   return {
     ...applyGithubGitAuthEnv(opts?.env, { mode, token }),
     ...slug ? { GH_REPO: slug } : {}
@@ -5814,6 +5889,10 @@ async function buildInjectedMcpServers(opts) {
     if (orchId) {
       sideboard.env.SIDEBOARD_ORCHESTRATOR_THREAD_ID = orchId;
     }
+    try {
+      Object.assign(sideboard.env, await resolveAgentGitAuthEnv(sideboard.env));
+    } catch {
+    }
     servers.push(sideboard);
   }
   if (opts.includeBrightsy && isBrightsyConnected()) {
@@ -5916,6 +5995,7 @@ var init_injected_mcp = __esm({
     init_paths();
     init_node_launch();
     init_nested_electron_env();
+    init_git_auth_mode();
     import_meta = {};
     SIDEBOARD_MCP_ALLOWED_TOOLS = [
       "mcp__sideboard",
@@ -6455,6 +6535,7 @@ var init_codex = __esm({
     init_global_workspace();
     init_error_detail();
     init_usage();
+    init_git_auth_mode();
     init_injected_mcp();
     init_turn_input();
     init_types();
@@ -6546,6 +6627,8 @@ var init_codex = __esm({
           // `codex exec` rejects `--ask-for-approval` (global-only on newer CLIs).
           "-c",
           'approval_policy="never"',
+          // Seatbelt cannot use the login Keychain; default policy also strips GH_TOKEN.
+          ...codexUnattendedGitConfigArgs(mode.codexSandbox),
           ...model ? ["--model", model] : [],
           ...mcpOverrides
         ];
@@ -8825,6 +8908,7 @@ init_error_detail();
 var import_node_readline = require("readline");
 var import_execa2 = require("execa");
 init_worktree();
+init_git_auth_mode();
 init_app_settings();
 init_global_workspace();
 init_brightsy();
@@ -9087,14 +9171,16 @@ async function spawnAgentTurn(thread, input, onEvent) {
     );
   }
   const env = childEnvWithAppSettings(cmd.env);
-  if (!isOrchestratorThread(thread)) {
-    try {
+  try {
+    if (isOrchestratorThread(thread)) {
+      Object.assign(env, await resolveAgentGitAuthEnv(env));
+    } else {
       const originEnv = await originGhRepoEnv(thread.worktreePath, { env });
       Object.assign(env, originEnv);
-    } catch (err) {
-      const detail = err instanceof Error ? err.message : String(err);
-      console.warn(`[sideboard] originGhRepoEnv failed (${thread.worktreePath}): ${detail}`);
     }
+  } catch (err) {
+    const detail = err instanceof Error ? err.message : String(err);
+    console.warn(`[sideboard] git auth env failed (${thread.worktreePath}): ${detail}`);
   }
   const child = (0, import_execa2.execa)(cmd.file, cmd.args, {
     cwd: cmd.cwd,
@@ -9308,6 +9394,7 @@ var import_execa3 = require("execa");
 var import_node_readline2 = require("readline");
 init_settings();
 init_nested_electron_env();
+init_git_auth_mode();
 init_nested_electron_env();
 var PORT_RANGE_SIZE = 10;
 function matchSimpleGlob(pattern, name) {
@@ -9481,6 +9568,10 @@ async function spawnWorkspaceScript(command, opts) {
     },
     loginEnv
   );
+  try {
+    Object.assign(env, await resolveAgentGitAuthEnv(env, { cwd: opts.worktreePath }));
+  } catch {
+  }
   const shell = process.platform === "darwin" ? "zsh" : "bash";
   const child = (0, import_execa3.execa)(shell, ["-lc", command], {
     cwd: opts.worktreePath,