replicas-cli 0.2.745 → 0.2.747

package/dist/index.cjs

@@ -22590,12 +22590,13 @@ var CLAUDE_SONNET_5_BEDROCK_MODEL = "anthropic.claude-sonnet-5";
 var CLAUDE_HAIKU_4_5_BEDROCK_MODEL = "us.anthropic.claude-haiku-4-5-20251001-v1:0";
 var DEFAULT_CLAUDE_MODEL = CLAUDE_OPUS_5_5_MODEL;
 var GPT_6_ASTRA_MODEL = "gpt-6-astra";
+var GPT_6_1_SOL_MODEL = "gpt-6.1-sol";
 var GPT_6_SOL_MODEL = "gpt-6-sol";
 var GPT_6_LUNA_MODEL = "gpt-6-luna";
 var GPT_5_6_SOL_MODEL = "gpt-5.6-sol";
 var GPT_5_6_TERRA_MODEL = "gpt-5.6-terra";
 var GPT_5_6_LUNA_MODEL = "gpt-5.6-luna";
-var DEFAULT_CODEX_MODEL = GPT_6_SOL_MODEL;
+var DEFAULT_CODEX_MODEL = GPT_6_1_SOL_MODEL;
 var DEFAULT_OPENCODE_MODEL = "z-ai/glm-5.3";
 var GLM_5_3_FLASH_MODEL = "z-ai/glm-5.3-flash";
 var OX_ALPHA_MODEL = "stealth/ox-alpha";
@@ -22669,7 +22670,7 @@ var AGENT_MODELS = {
     CLAUDE_SONNET_5_MODEL,
     CLAUDE_HAIKU_4_5_MODEL
   ],
-  codex: [DEFAULT_CODEX_MODEL, GPT_6_ASTRA_MODEL, GPT_6_LUNA_MODEL, GPT_5_6_SOL_MODEL, GPT_5_6_TERRA_MODEL, GPT_5_6_LUNA_MODEL, "gpt-5.5", "gpt-5.4", "gpt-5.4-mini", "gpt-5.2"],
+  codex: [DEFAULT_CODEX_MODEL, GPT_6_SOL_MODEL, GPT_6_ASTRA_MODEL, GPT_6_LUNA_MODEL, GPT_5_6_SOL_MODEL, GPT_5_6_TERRA_MODEL, GPT_5_6_LUNA_MODEL, "gpt-5.5", "gpt-5.4", "gpt-5.4-mini", "gpt-5.2"],
   cursor: [
     CLAUDE_FABLE_5_1_MODEL,
     CLAUDE_FABLE_5_MODEL,
@@ -22709,7 +22710,7 @@ var AGENT_MODELS = {
 };
 var DEFAULT_STATIC_AGENT_MODELS = {
   claude: AGENT_MODELS.claude.filter((model) => model !== CLAUDE_FABLE_5_MODEL && model !== CLAUDE_OPUS_4_8_MODEL),
-  codex: AGENT_MODELS.codex.filter((model) => !["gpt-5.5", "gpt-5.4", "gpt-5.4-mini", "gpt-5.2"].includes(model))
+  codex: AGENT_MODELS.codex.filter((model) => ![GPT_6_SOL_MODEL, "gpt-5.5", "gpt-5.4", "gpt-5.4-mini", "gpt-5.2"].includes(model))
 };
 var DEFAULT_CURSOR_MODELS = AGENT_MODELS.cursor;
 function getAgentModelOptions(provider, overrides) {
@@ -22724,9 +22725,13 @@ var CLAUDE_MODEL_MIN_SANDBOX_IMAGE = {
 };
 var CODEX_MODEL_MIN_SANDBOX_IMAGE = {
   [GPT_6_ASTRA_MODEL]: "replicas-sandbox-2026-09-04-v7",
+  [GPT_6_1_SOL_MODEL]: "replicas-sandbox-2026-09-29-v8",
   [GPT_6_SOL_MODEL]: "replicas-sandbox-2026-09-24-v1",
   [GPT_6_LUNA_MODEL]: "replicas-sandbox-2026-09-24-v1"
 };
+var SANDBOX_IMAGE_MODEL_FALLBACKS = {
+  [GPT_6_1_SOL_MODEL]: GPT_6_SOL_MODEL
+};
 function isAgentModelAllowed(provider, model, overrides) {
   return overrides?.[provider] === null || getAgentModelOptions(provider, overrides).includes(model);
 }
@@ -22744,6 +22749,7 @@ var MODEL_LABELS = {
   [LEGACY_CLAUDE_OPUS_1M_MODEL]: "Opus (1M)",
   haiku: "Haiku 4.5",
   [GPT_6_ASTRA_MODEL]: "GPT-6 Astra",
+  [GPT_6_1_SOL_MODEL]: "GPT-6.1 Sol",
   [GPT_6_SOL_MODEL]: "GPT-6 Sol",
   [GPT_6_LUNA_MODEL]: "GPT-6 Luna",
   [GPT_5_6_SOL_MODEL]: "GPT-5.6 Sol",
@@ -23146,6 +23152,313 @@ function normalizeBackgroundTaskStatus(status) {
 // ../shared/src/display-message/constants.ts
 var USER_MESSAGE_MATCH_GRACE_PERIOD_MS = 3e4;
 
+// ../shared/src/shell-commands.ts
+var SHELL_OPAQUE = "\0";
+var MAX_DEPTH = 8;
+var OPERATOR = /&&|\|\||;;|\|&|<<<|<<-|<<|&>>|&>|>>|>&|>\||<&|<>|[;&|()<>]/y;
+var NAME = /[A-Za-z_]\w*/y;
+var SHELLS = /* @__PURE__ */ new Set(["sh", "bash", "zsh", "dash", "ksh"]);
+var PREFIX_WORDS = /* @__PURE__ */ new Set(["!", "{", "}", "if", "then", "else", "elif", "fi", "do", "done", "while", "until", "time", "exec", "command", "builtin", "nohup"]);
+var WRAPPER_VALUE_OPTIONS = {
+  env: /^(?:-[uCS]|--(?:unset|chdir|split-string))$/,
+  sudo: /^(?:-[ugCpUrhDRT]|--(?:user|group|close-from|prompt|other-user|role|type|host|chdir|command-timeout))$/,
+  nice: /^(?:-n|--adjustment)$/,
+  timeout: /^(?:-[sk]|--(?:signal|kill-after))$/
+};
+var ANSI_C_ESCAPES = { n: "\n", t: "	", r: "\r", a: "\x07", b: "\b", e: "\x1B", E: "\x1B", f: "\f", v: "\v" };
+function parseShellScript(script, cwd) {
+  const scope = { src: script, vars: /* @__PURE__ */ new Map(), dir: cwd, commands: [], depth: 0 };
+  parseUntil(scope, 0, false);
+  return scope.commands;
+}
+function resolveShellPath(dir, path6) {
+  if (path6.includes(SHELL_OPAQUE) || path6.startsWith("~")) return null;
+  if (!path6.startsWith("/") && dir === null) return null;
+  const parts = [];
+  for (const part of (path6.startsWith("/") ? path6 : `${dir}/${path6}`).split("/")) {
+    if (part === "..") parts.pop();
+    else if (part && part !== ".") parts.push(part);
+  }
+  return `/${parts.join("/")}`;
+}
+function stripCommandPrefixes(words) {
+  const assignments = [];
+  let k = 0;
+  while (k < words.length) {
+    const word = words[k];
+    if (/^[A-Za-z_]\w*=/.test(word)) assignments.push(word);
+    else if (WRAPPER_VALUE_OPTIONS[word]) {
+      while (words[k + 1]?.startsWith("-")) k += WRAPPER_VALUE_OPTIONS[word].test(words[k + 1]) ? 2 : 1;
+      if (word === "timeout") k++;
+    } else if (!PREFIX_WORDS.has(word)) break;
+    k++;
+  }
+  return { argv: words.slice(k), assignments };
+}
+function indexOrEnd(src, search, from) {
+  const index = src.indexOf(search, from);
+  return index < 0 ? src.length : index;
+}
+function decodeAnsiC(text2) {
+  return text2.replace(/\\(x[0-9a-fA-F]{1,2}|u[0-9a-fA-F]{1,4}|[0-7]{1,3}|[\s\S])/g, (_match, escape) => {
+    if (escape[0] === "x" || escape[0] === "u") return String.fromCharCode(parseInt(escape.slice(1), 16));
+    if (/^[0-7]/.test(escape)) return String.fromCharCode(parseInt(escape, 8));
+    return ANSI_C_ESCAPES[escape] ?? escape;
+  });
+}
+function staticOutput(argv, stdin) {
+  const [name, ...args] = argv;
+  if (name === "cat") return args.length === 0 || args.length === 1 && args[0] === "-" ? stdin : void 0;
+  if (name === "echo") {
+    let newline = true;
+    let escapes = false;
+    while (/^-[neE]+$/.test(args[0] ?? "")) {
+      const flags = args.shift() ?? "";
+      if (flags.includes("n")) newline = false;
+      if (flags.includes("e")) escapes = true;
+    }
+    const text2 = args.join(" ");
+    return (escapes ? decodeAnsiC(text2) : text2) + (newline ? "\n" : "");
+  }
+  if (name === "printf" && args.length > 0) {
+    const format = decodeAnsiC(args[0]);
+    if (/%(?![s%])/.test(format)) return void 0;
+    const values = args.slice(1);
+    let output = "";
+    let next = 0;
+    do {
+      output += format.replace(/%([s%])/g, (_match, directive) => directive === "%" ? "%" : values[next++] ?? "");
+    } while (format.includes("%s") && next < values.length);
+    return output;
+  }
+  return void 0;
+}
+function commandStdin(raw) {
+  const heredoc = raw.heredocs.at(-1);
+  if (heredoc) return heredoc.body;
+  const input = raw.redirects.findLast(({ op }) => op === "<<<" || op === "<" || op === "0<");
+  if (input) return input.op === "<<<" ? `${input.target}
+` : SHELL_OPAQUE;
+  if (raw.pipeFrom) return staticOutput(stripCommandPrefixes(raw.pipeFrom.words).argv, commandStdin(raw.pipeFrom)) ?? SHELL_OPAQUE;
+  return void 0;
+}
+function assign(scope, assignments) {
+  for (const assignment of assignments) {
+    const separator = assignment.indexOf("=");
+    scope.vars.set(assignment.slice(0, separator), assignment.slice(separator + 1));
+  }
+}
+function emit(scope, raw) {
+  const { argv, assignments } = stripCommandPrefixes(raw.words);
+  if (argv.length === 0) {
+    assign(scope, assignments);
+    return;
+  }
+  const stdin = commandStdin(raw);
+  const output = staticOutput(argv, stdin) ?? SHELL_OPAQUE;
+  const stdinFile = raw.redirects.findLast(({ op }) => op === "<" || op === "0<");
+  const name = argv[0].split("/").pop() ?? "";
+  const flag = SHELLS.has(name) ? argv.findIndex((arg, index) => index > 0 && /^-[A-Za-z]*c[A-Za-z]*$/.test(arg)) : -1;
+  const script = flag > 0 ? argv[flag + 1] : SHELLS.has(name) && argv.length === 1 && stdin !== SHELL_OPAQUE ? stdin : name === "eval" ? argv.slice(1).join(" ") : void 0;
+  const truncated = script !== void 0 && scope.depth >= MAX_DEPTH;
+  scope.commands.push({
+    argv,
+    dir: scope.dir,
+    stdin,
+    afterAnd: raw.afterAnd,
+    stdinFile: stdinFile ? resolveShellPath(scope.dir, stdinFile.target) : null,
+    writes: raw.redirects.flatMap(({ op, target }) => /^(?:1?>|1?>\||1?>>|&>|&>>|>&)$/.test(op) && !/^(?:\d+|-)$/.test(target) ? [{ path: resolveShellPath(scope.dir, target), content: output, append: op.endsWith(">>") }] : []),
+    wrapper: script !== void 0,
+    truncated
+  });
+  if (name === "cd" || name === "pushd" || name === "popd") {
+    scope.dir = name !== "popd" && argv[1] && argv[1] !== "-" ? resolveShellPath(scope.dir, argv[1]) : null;
+  } else if (["export", "declare", "local", "readonly"].includes(name)) {
+    assign(scope, argv.slice(1).filter((arg) => /^[A-Za-z_]\w*=/.test(arg)));
+  }
+  if (script && !truncated) parseUntil({ src: script, vars: name === "eval" ? scope.vars : /* @__PURE__ */ new Map(), dir: scope.dir, commands: scope.commands, depth: scope.depth + 1 }, 0, false);
+}
+function readHeredocBodies(scope, heredocs, start) {
+  const { src } = scope;
+  let position = start;
+  for (const heredoc of heredocs) {
+    const lines = [];
+    while (position < src.length) {
+      const end = indexOrEnd(src, "\n", position);
+      const line = heredoc.strip ? src.slice(position, end).replace(/^\t+/, "") : src.slice(position, end);
+      position = end + 1;
+      if (line === heredoc.delimiter) break;
+      lines.push(line);
+    }
+    heredoc.body = lines.length > 0 ? `${lines.join("\n")}
+` : "";
+    if (heredoc.expand) heredoc.body = readDoubleQuoted({ ...scope, src: heredoc.body }, 0, null).value;
+  }
+  return Math.min(position, src.length);
+}
+function readDoubleQuoted(scope, start, terminator) {
+  const { src } = scope;
+  let value = "";
+  let i = start;
+  while (i < src.length && src[i] !== terminator) {
+    const c = src[i];
+    if (c === "\\" && i + 1 < src.length) {
+      const next = src[i + 1];
+      if (next === "\n") i += 2;
+      else if ("$`\\".includes(next) || next === terminator) {
+        value += next;
+        i += 2;
+      } else {
+        value += c;
+        i++;
+      }
+    } else if (c === "$" || c === "`") {
+      const expansion = readExpansion(scope, i, true);
+      value += expansion.value;
+      i = expansion.end;
+    } else {
+      value += c;
+      i++;
+    }
+  }
+  return { value, end: i };
+}
+function substitute(scope, src, start, closeParen) {
+  const child = { src, vars: new Map(scope.vars), dir: scope.dir, commands: [], depth: scope.depth + 1 };
+  const end = parseUntil(child, start, closeParen);
+  scope.commands.push(...child.commands);
+  const [only] = child.commands;
+  const output = child.commands.length === 1 ? staticOutput(only.argv, only.stdin) : void 0;
+  return { value: output?.replace(/\n+$/, "") ?? SHELL_OPAQUE, end };
+}
+function readExpansion(scope, i, inDouble) {
+  const { src } = scope;
+  if (src[i] === "`") {
+    let inner = "";
+    let j = i + 1;
+    while (j < src.length && src[j] !== "`") {
+      if (src[j] === "\\" && "$`\\".includes(src[j + 1] ?? "")) {
+        inner += src[j + 1];
+        j += 2;
+      } else inner += src[j++];
+    }
+    return { value: substitute(scope, inner, 0, false).value, end: j + 1 };
+  }
+  const next = src[i + 1];
+  if (next === "(") return substitute(scope, src, i + 2, true);
+  if (next === "{") {
+    const end = indexOrEnd(src, "}", i + 2);
+    return { value: scope.vars.get(src.slice(i + 2, end)) ?? SHELL_OPAQUE, end: end + 1 };
+  }
+  if (next === "'" && !inDouble) {
+    let j = i + 2;
+    while (j < src.length && src[j] !== "'") j += src[j] === "\\" ? 2 : 1;
+    return { value: decodeAnsiC(src.slice(i + 2, j)), end: j + 1, quoted: true };
+  }
+  if (next === '"' && !inDouble) {
+    const { value, end } = readDoubleQuoted(scope, i + 2, '"');
+    return { value, end: end + 1, quoted: true };
+  }
+  NAME.lastIndex = i + 1;
+  const name = NAME.exec(src)?.[0];
+  if (name) return { value: scope.vars.get(name) ?? SHELL_OPAQUE, end: i + 1 + name.length };
+  if (next && /[0-9@*#?$!-]/.test(next)) return { value: SHELL_OPAQUE, end: i + 2 };
+  return { value: "$", end: i + 1 };
+}
+function parseUntil(scope, start, closeParen) {
+  const { src } = scope;
+  let i = start;
+  let line = [];
+  let current = { words: [], redirects: [], heredocs: [], afterAnd: false };
+  let pendingHeredocs = [];
+  let word = null;
+  let quoted = false;
+  let redirect = null;
+  let parens = 0;
+  const append = (text2, isQuoted = false) => {
+    word = (word ?? "") + text2;
+    quoted || (quoted = isQuoted);
+  };
+  const endWord = () => {
+    if (word === null) return;
+    if (redirect === "<<" || redirect === "<<-") {
+      const heredoc = { strip: redirect === "<<-", delimiter: word, expand: !quoted, body: "" };
+      current.heredocs.push(heredoc);
+      pendingHeredocs.push(heredoc);
+    } else if (redirect) {
+      current.redirects.push({ op: redirect, target: word });
+    } else {
+      current.words.push(word);
+    }
+    word = null;
+    quoted = false;
+    redirect = null;
+  };
+  const endCommand = (op) => {
+    endWord();
+    const done = current;
+    current = { words: [], redirects: [], heredocs: [], pipeFrom: op === "|" || op === "|&" ? done : void 0, afterAnd: op === "&&" };
+    if (done.words.length > 0 || done.redirects.length > 0 || done.heredocs.length > 0) line.push(done);
+  };
+  const flush = () => {
+    endCommand();
+    for (const raw of line) emit(scope, raw);
+    line = [];
+  };
+  while (i < src.length) {
+    const c = src[i];
+    if (c === "\\") {
+      if (src[i + 1] !== "\n") append(src[i + 1] ?? "", true);
+      i += 2;
+    } else if (c === "'") {
+      const end = indexOrEnd(src, "'", i + 1);
+      append(src.slice(i + 1, end), true);
+      i = end + 1;
+    } else if (c === '"') {
+      const { value, end } = readDoubleQuoted(scope, i + 1, '"');
+      append(value, true);
+      i = end + 1;
+    } else if (c === "$" || c === "`") {
+      const expansion = readExpansion(scope, i, false);
+      append(expansion.value, expansion.quoted);
+      i = expansion.end;
+    } else if (c === "#" && word === null) {
+      i = indexOrEnd(src, "\n", i);
+    } else if (c === "\n") {
+      endWord();
+      i = readHeredocBodies(scope, pendingHeredocs, i + 1);
+      pendingHeredocs = [];
+      flush();
+    } else if (c === " " || c === "	" || c === "\r") {
+      endWord();
+      i++;
+    } else if (c === ")" && parens === 0 && closeParen) {
+      flush();
+      return i + 1;
+    } else {
+      OPERATOR.lastIndex = i;
+      const op = OPERATOR.exec(src)?.[0];
+      if (!op) {
+        append(c);
+        i++;
+        continue;
+      }
+      const fd = /[<>]/.test(op) && !quoted && /^\d+$/.test(word ?? "") ? word : null;
+      if (fd !== null) word = null;
+      endWord();
+      i += op.length;
+      if (/[<>]/.test(op)) redirect = `${fd ?? ""}${op}`;
+      else {
+        if (op === "(") parens++;
+        if (op === ")") parens = Math.max(0, parens - 1);
+        endCommand(op);
+      }
+    }
+  }
+  flush();
+  return i;
+}
+
 // ../shared/src/display-message/parsers/utils.ts
 var INTERRUPTED_MESSAGE_REGEX = /^\[Request interrupted by user.*\]$/;
 function userMessageImages(value) {
@@ -23261,61 +23574,11 @@ function insertDisplayMessageByTimestamp(messages, message) {
 }
 
 // ../shared/src/display-message/format.ts
-function unquoteShellArg(value) {
-  const trimmed = value.trim();
-  if (trimmed.length < 2) return trimmed;
-  if (trimmed[0] === "'" && trimmed[trimmed.length - 1] === "'") {
-    return trimmed.slice(1, -1).replace(/'\\''/g, "'");
-  }
-  if (trimmed[0] === '"' && trimmed[trimmed.length - 1] === '"') {
-    return trimmed.slice(1, -1).replace(/\\(["\\$`])/g, "$1");
-  }
-  return trimmed;
-}
-function shellPayload(command) {
-  const match = command.trim().match(/^(?:\S*\/)?(?:ba|z|c|fi)?sh\s+-(?:[a-zA-Z]*c[a-zA-Z]*|c)\s+([\s\S]+)$/);
-  return match ? unquoteShellArg(match[1]) : command.trim();
-}
-function splitShellWords(command) {
-  const words = [];
-  let word = "";
-  let quote = null;
-  let escaped = false;
-  for (const char of command) {
-    if (escaped) {
-      word += char;
-      escaped = false;
-      continue;
-    }
-    if (char === "\\" && quote !== "'") {
-      escaped = true;
-      continue;
-    }
-    if (quote) {
-      if (char === quote) quote = null;
-      else word += char;
-      continue;
-    }
-    if (char === '"' || char === "'") {
-      quote = char;
-      continue;
-    }
-    if (/\s/.test(char)) {
-      if (word) {
-        words.push(word);
-        word = "";
-      }
-      continue;
-    }
-    word += char;
-  }
-  if (word) words.push(word);
-  return words;
-}
 function commandWords(command) {
-  const payload = shellPayload(command);
-  if (!payload || /[;|<>]|&&/.test(payload)) return null;
-  return splitShellWords(payload);
+  const commands = parseShellScript(command, null).filter(({ wrapper }) => !wrapper);
+  if (commands.length !== 1) return null;
+  const [{ argv, stdin, stdinFile, writes }] = commands;
+  return stdin === void 0 && !stdinFile && writes.length === 0 ? argv.map((word) => word.replaceAll(SHELL_OPAQUE, "\u2026")) : null;
 }
 function skillNamesFromCommand(command) {
   const words = commandWords(command);
@@ -27172,7 +27435,7 @@ var headlessFilesystemAgentResultSchema = external_exports.object({
 });
 
 // ../shared/src/cli-version.ts
-var CLI_VERSION = "0.2.745";
+var CLI_VERSION = "0.2.747";
 
 // ../shared/src/version.ts
 function compareVersions(v1, v2) {
@@ -27187,6 +27450,31 @@ function compareVersions(v1, v2) {
   return 0;
 }
 
+// ../shared/src/routes/command-protection.ts
+var commandProtectionRepoStateSchema = external_exports.object({
+  branch: external_exports.string().nullable(),
+  defaultBranch: external_exports.string().nullable(),
+  pushBranch: external_exports.string().nullable(),
+  pushConfig: external_exports.string().nullable(),
+  headMessage: external_exports.string().nullable(),
+  mergeInProgress: external_exports.boolean().optional()
+});
+var commandProtectionEvaluateRequestSchema = external_exports.object({
+  provider: external_exports.enum(["claude", "codex", "cursor", "opencode", "pi"]),
+  source: external_exports.enum(["claude_pre_tool_use", "codex_approval_request", "cursor_pre_tool_use", "opencode_pre_tool_use", "pi_tool_call"]),
+  toolName: external_exports.string(),
+  toolInput: external_exports.unknown(),
+  command: external_exports.string().nullish(),
+  cwd: external_exports.string().nullish(),
+  toolUseId: external_exports.string().nullish(),
+  // Read by the engine before the command runs, keyed by absolute path, so the
+  // policy can see branches and commit messages the command text only references.
+  gitContext: external_exports.object({
+    repos: external_exports.record(external_exports.string(), commandProtectionRepoStateSchema),
+    messageFiles: external_exports.record(external_exports.string(), external_exports.string())
+  }).optional()
+});
+
 // ../shared/src/routes/linear.ts
 var linearSessionMetadataSchema = external_exports.object({
   via_mothership: external_exports.boolean().optional(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-cli",
-  "version": "0.2.745",
+  "version": "0.2.747",
   "description": "CLI for managing Replicas workspaces - SSH into cloud dev environments with automatic port forwarding",
   "main": "dist/index.cjs",
   "bin": {