replicas-engine 0.1.1005 → 0.1.1007

package/dist/src/{asp-host-OCHT3JKS.js → asp-host-NKNJVTOF.js}

@@ -5,12 +5,12 @@ import {
   getCodexAspHost,
   restartCodexAspHost,
   restartCodexAspHostIfRunning
-} from "./chunk-3SPI3DBP.js";
-import "./chunk-Y57FU4PE.js";
-import "./chunk-SWXXNS2U.js";
-import "./chunk-ZDIZBHEZ.js";
+} from "./chunk-U6JEKZGL.js";
+import "./chunk-M3FARRDB.js";
+import "./chunk-MPQHAEI4.js";
+import "./chunk-RCCLUBJX.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-VQDPYJKB.js";
+import "./chunk-FKI4Y34A.js";
 import "./chunk-VEQXQN22.js";
 export {
   getCodexAspHost,

package/dist/src/{chunk-6CRZSZVE.js → chunk-4L2COBFE.js}

@@ -3,18 +3,18 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   monolithRequest
-} from "./chunk-Y57FU4PE.js";
+} from "./chunk-M3FARRDB.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-ZDIZBHEZ.js";
+} from "./chunk-RCCLUBJX.js";
 import {
   extractCommandProtectionCommandText,
   findCommandProtectionGitLookups,
   findGitCommitSignals,
   findPrMergeSignals,
   parseCommandProtectionRequest
-} from "./chunk-VQDPYJKB.js";
+} from "./chunk-FKI4Y34A.js";
 
 // src/services/command-protection-service.ts
 import { readFile, stat } from "fs/promises";

package/dist/src/{chunk-JC2TIYY2.js → chunk-AHKE7S5O.js}

@@ -5,7 +5,7 @@ import {
   extractCommandProtectionCommandText,
   isRecord,
   parseCodeHostPrUrl
-} from "./chunk-VQDPYJKB.js";
+} from "./chunk-FKI4Y34A.js";
 
 // src/services/published-pull-request-urls.ts
 function publishedPullRequestUrls(result) {

package/dist/src/{chunk-VQDPYJKB.js → chunk-FKI4Y34A.js}

@@ -3182,10 +3182,11 @@ Explore a codebase, get it running in this workspace, verify it end to end, and
 Use this when:
 - This workspace was started as an environment setup run (\`replicas environment-setup status\` succeeds)
 - The user asks you to set up, configure, audit, or improve a Replicas environment for a repository
-- The user asks what should go in a start hook, warm hook, or environment system prompt`;
+- The user asks what should go in a start hook, warm hook, or environment system prompt
+- A warm pool, warm hook, or start hook is failing, or the fix you found belongs in the environment rather than the repository`;
 var REFERENCE3 = `# Environment setup (agent-led)
 
-Use this workflow to make a repository fully usable by Replicas background agents: agents booted from the environment should be able to install, run, test, verify, and demo changes without a human babysitting them. The result of the workflow is a **proposal**, never a direct change: the user reviews, edits, and saves it in the Environment panel next to the chat.
+Use this workflow to make a repository fully usable by Replicas background agents: agents booted from the environment should be able to install, run, test, verify, and demo changes without a human babysitting them. In a setup run, the result is a **proposal**, never a direct change: the user reviews, edits, and saves it in the Environment panel next to the chat. Outside a setup run, see below.
 
 ## Mental model
 
@@ -3217,7 +3218,14 @@ replicas environment-setup wait-variables [-t 5m]
 
 \`status\` prints the environment, repositories, current steps, and variable requests. \`request-variables\` returns immediately; \`wait-variables\` blocks until the required values arrive, are skipped, or the time runs out. Step statuses are \`pending\`, \`in_progress\`, \`completed\`, and \`skipped\`. Step keys, in order: \`understand\`, \`install\`, \`verify\`, \`configure\`, \`propose\`. Mark the first step \`in_progress\` before your first tool call, keep exactly one step \`in_progress\`, and mark a step \`completed\` only after its work actually succeeded. Use \`skipped\` when something genuinely cannot run (for example no browser UI to record) and say so in the proposal.
 
-If \`replicas environment-setup status\` reports that there is no active setup run, the user asked for this in an ordinary workspace. Follow the same discovery and verification steps, then present the configuration in chat; apply it with \`replicas environment ...\` and \`replicas automation ...\` only when the user explicitly asks you to.
+If \`replicas environment-setup status\` reports that there is no active setup run, you are in an ordinary workspace, either because the user asked for this or because the fix you found while debugging belongs in the environment. Follow the same discovery and verification steps, show the exact change in chat, and offer to apply and test it yourself. Ask the user before changing the environment, since it affects every workspace built from it. Once they approve:
+
+- Warm hook: \`replicas environment warm-hooks save-test <env> -f <file>\` runs it in an isolated sandbox and saves it only if it passes.
+- Start hook: \`replicas environment start-hooks test <env> -f <file>\`, then \`replicas environment start-hooks save <env> -f <file>\` with the same file once it passes.
+- Variables and files: apply with \`replicas environment vars set\` or \`files set\`, then confirm with \`vars list\` or \`files list\`.
+- Automations: apply with \`replicas automation ...\`, then read back with \`replicas automation get <id>\`.
+
+When a test fails, fix the earliest failure and test again instead of saving. If the fix materially changes what the user approved, show the revised change and ask again before saving. Report what you changed and the test result.
 
 ## 1. Understand the codebase
 
@@ -3409,7 +3417,7 @@ After \`propose\` succeeds, mark the \`propose\` step completed and send one mes
 Review the start hook, warm hook, system prompt, variables, and automations in the Environment panel on the right. Edit anything inline, then select **Save configuration**. Ask me here if you want changes and I will revise the proposal.
 \`\`\`
 
-Keep it under 250 words plus the lists. Do not paste the hooks or system prompt into chat; the panel shows them. Never imply the configuration was saved: saving is the user's action.
+Keep it under 250 words plus the lists. Do not paste the hooks or system prompt into chat; the panel shows them. Never imply the configuration was saved: in a setup run, saving is the user's action.
 
 ## Safety
 
@@ -3421,7 +3429,7 @@ Keep it under 250 words plus the lists. Do not paste the hooks or system prompt
 var ENVIRONMENT_SETUP_ABILITY = {
   label: "Environment setup",
   description: "Explore a codebase, verify it runs, and propose environment hooks, a system prompt, variables, and automations for review.",
-  bullet: "- Setting up, auditing, or improving a Replicas environment for a repository (hooks, system prompt, variables, automations)",
+  bullet: "- Setting up, auditing, fixing, or improving a Replicas environment for a repository (hooks, system prompt, variables, automations), including a failing warm pool or hook",
   section: SECTION3,
   referenceFile: { name: "ENVIRONMENT-SETUP.md", content: REFERENCE3 }
 };
@@ -6275,6 +6283,17 @@ function createSubagentMessage(messageIndex, timestamp, fields) {
 function collectNestedEvents(events, toolUseId) {
   return events.filter((e) => e.payload.parent_tool_use_id === toolUseId).map(({ timestamp, type, payload }) => ({ timestamp, type, payload }));
 }
+function readToolResult(event) {
+  if (event.type !== "claude-user") return void 0;
+  const toolResult = normalizeContentBlocks(event.payload.message?.content).find((c) => c.type === "tool_result");
+  if (!toolResult?.tool_use_id) return void 0;
+  return {
+    toolResult,
+    toolUseId: toolResult.tool_use_id,
+    output: extractToolResultText(toolResult.content),
+    status: toolResult.is_error ? "failed" : "completed"
+  };
+}
 function coerceClaudeResultPayload(payload) {
   return {
     is_error: typeof payload.is_error === "boolean" ? payload.is_error : void 0,
@@ -6716,52 +6735,47 @@ function parseClaudeEvents(events, parentToolUseId) {
     messages.push(fileOrCommandMessage(tool.name, tool.id, "filePath" in tool ? { file_path: tool.filePath } : { command: tool.command }, timestamp));
   }
   filteredEvents.forEach((event) => {
-    if (event.type === "claude-user") {
-      const content = normalizeContentBlocks(event.payload.message?.content);
-      const toolResult = content.find((c) => c.type === "tool_result");
-      if (toolResult && toolResult.tool_use_id) {
-        const toolInfo = toolCallMap.get(toolResult.tool_use_id);
-        if (!toolInfo) return;
-        const resultContent = extractToolResultText(toolResult.content);
-        const isError = toolResult.is_error || false;
-        const status = isError ? "failed" : "completed";
-        if (toolInfo.toolName === "TaskCreate" && !isError) {
-          taskAccumulator.processContentBlock(toolResult);
-        }
-        const message = messages[toolInfo.messageIndex];
-        if (!message) return;
-        if (message.type === "command") {
-          message.output = resultContent;
-          message.status = status;
-          const exitCodeMatch = resultContent.match(/exit code:?\s*(\d+)/i);
-          if (exitCodeMatch) {
-            message.exitCode = parseInt(exitCodeMatch[1], 10);
-          } else {
-            message.exitCode = isError ? 1 : 0;
-          }
-        } else if (message.type === "patch") {
-          message.status = status;
-        } else if (message.type === "web_search") {
-          message.status = status;
-        } else if (message.type === "tool_call") {
-          message.output = resultContent;
-          message.status = status;
-        } else if (message.type === "skill") {
-          message.status = status;
-        } else if (message.type === "subagent") {
-          message.output = resultContent;
-          message.status = status;
-          if (!message.chatId && resultContent) {
-            const parsed = safeJsonParse(resultContent, {});
-            if (parsed.chatId) {
-              message.chatId = parsed.chatId;
-            }
-          }
-        } else if (message.type === "subagent_followup") {
-          message.output = resultContent;
-          message.status = status;
+    const result = readToolResult(event);
+    if (!result) return;
+    const { toolResult, output: resultContent, status } = result;
+    const toolInfo = toolCallMap.get(result.toolUseId);
+    if (!toolInfo) return;
+    const isError = status === "failed";
+    if (toolInfo.toolName === "TaskCreate" && !isError) {
+      taskAccumulator.processContentBlock(toolResult);
+    }
+    const message = messages[toolInfo.messageIndex];
+    if (!message) return;
+    if (message.type === "command") {
+      message.output = resultContent;
+      message.status = status;
+      const exitCodeMatch = resultContent.match(/exit code:?\s*(\d+)/i);
+      if (exitCodeMatch) {
+        message.exitCode = parseInt(exitCodeMatch[1], 10);
+      } else {
+        message.exitCode = isError ? 1 : 0;
+      }
+    } else if (message.type === "patch") {
+      message.status = status;
+    } else if (message.type === "web_search") {
+      message.status = status;
+    } else if (message.type === "tool_call") {
+      message.output = resultContent;
+      message.status = status;
+    } else if (message.type === "skill") {
+      message.status = status;
+    } else if (message.type === "subagent") {
+      message.output = resultContent;
+      message.status = status;
+      if (!message.chatId && resultContent) {
+        const parsed = safeJsonParse(resultContent, {});
+        if (parsed.chatId) {
+          message.chatId = parsed.chatId;
         }
       }
+    } else if (message.type === "subagent_followup") {
+      message.output = resultContent;
+      message.status = status;
     }
   });
   for (const message of messages) {

package/dist/src/{chunk-Y57FU4PE.js → chunk-M3FARRDB.js}

@@ -14,7 +14,7 @@ import {
   isValidAgentProvider,
   parsePosixEnvFile,
   readReplicasRuntimeEnv
-} from "./chunk-VQDPYJKB.js";
+} from "./chunk-FKI4Y34A.js";
 
 // src/runtime-env-loader.ts
 import { readFileSync } from "fs";

package/dist/src/{chunk-SWXXNS2U.js → chunk-MPQHAEI4.js}

@@ -3,10 +3,10 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   execFileAsync
-} from "./chunk-ZDIZBHEZ.js";
+} from "./chunk-RCCLUBJX.js";
 import {
   isVersionBelow
-} from "./chunk-VQDPYJKB.js";
+} from "./chunk-FKI4Y34A.js";
 
 // src/utils/codex-agent-env.ts
 function buildCodexAgentEnv(source = process.env) {
@@ -240,7 +240,7 @@ function getCodexModelProvider(method) {
   if (method === "foundry") return "azure";
   return method === "ollama" || method === "openai-compatible" ? "replicas_openai_compatible" : "openai";
 }
-var ENGINE_PACKAGE_VERSION = "0.1.1005";
+var ENGINE_PACKAGE_VERSION = "0.1.1007";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/{chunk-ZDIZBHEZ.js → chunk-RCCLUBJX.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES
-} from "./chunk-VQDPYJKB.js";
+} from "./chunk-FKI4Y34A.js";
 
 // src/utils/exec.ts
 import { exec, execFile } from "child_process";

package/dist/src/{chunk-3SPI3DBP.js → chunk-U6JEKZGL.js}

@@ -5,15 +5,15 @@ import {
   ENGINE_ENV,
   monolithRequest,
   setAgentCredentialSnapshot
-} from "./chunk-Y57FU4PE.js";
+} from "./chunk-M3FARRDB.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-SWXXNS2U.js";
+} from "./chunk-MPQHAEI4.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-ZDIZBHEZ.js";
+} from "./chunk-RCCLUBJX.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
@@ -28,7 +28,7 @@ import {
   listOpenAICompatibleModels,
   readOllamaAuthEnv,
   resolveOpenAICompatibleModelsUrl
-} from "./chunk-VQDPYJKB.js";
+} from "./chunk-FKI4Y34A.js";
 
 // src/managers/codex-token-manager.ts
 import { promises as fs } from "fs";
@@ -264,7 +264,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     await this.applyCredentialUpdate(++this.credentialGeneration, async () => {
       await this.applyCredentialsResponse(data);
       setAgentCredentialSnapshot("codex", data);
-      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-OCHT3JKS.js");
+      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-NKNJVTOF.js");
       await restartCodexAspHostIfRunning2();
     });
     await this.start(true);
@@ -285,7 +285,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
       const accountChanged = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.codex?.credentialId !== data.credentialId;
       await this.applyCredentialsResponse(data);
       if (restartOnChange && (accountChanged || CODEX_AUTH_ENV_KEYS.some((key, index) => process.env[key] !== previousEnv[index]))) {
-        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-OCHT3JKS.js");
+        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-NKNJVTOF.js");
         await restartCodexAspHostIfRunning2();
       }
       setAgentCredentialSnapshot("codex", data);

package/dist/src/command-protection-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-6CRZSZVE.js";
-import "./chunk-Y57FU4PE.js";
-import "./chunk-ZDIZBHEZ.js";
+} from "./chunk-4L2COBFE.js";
+import "./chunk-M3FARRDB.js";
+import "./chunk-RCCLUBJX.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-VQDPYJKB.js";
+import "./chunk-FKI4Y34A.js";
 import "./chunk-VEQXQN22.js";
 
 // src/command-protection-hook.ts

package/dist/src/headless-agent.js

@@ -7,12 +7,12 @@ import {
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-SWXXNS2U.js";
-import "./chunk-ZDIZBHEZ.js";
+} from "./chunk-MPQHAEI4.js";
+import "./chunk-RCCLUBJX.js";
 import {
   AGENT,
   headlessAgentRequestSchema
-} from "./chunk-VQDPYJKB.js";
+} from "./chunk-FKI4Y34A.js";
 import "./chunk-VEQXQN22.js";
 
 // src/headless-agent.ts

package/dist/src/index.js

@@ -32,7 +32,7 @@ import {
   reportCommandProtectionBlock,
   resolveDiffBase,
   runGitCommand
-} from "./chunk-6CRZSZVE.js";
+} from "./chunk-4L2COBFE.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -57,7 +57,7 @@ import {
 } from "./chunk-P73LGPQO.js";
 import {
   publishedPullRequestUrls
-} from "./chunk-JC2TIYY2.js";
+} from "./chunk-AHKE7S5O.js";
 import {
   BaseRefreshManager,
   CodexAspAuthMethodChangedError,
@@ -71,7 +71,7 @@ import {
   refreshDelayMs,
   restartCodexAspHost,
   routineRefreshRequest
-} from "./chunk-3SPI3DBP.js";
+} from "./chunk-U6JEKZGL.js";
 import {
   ENGINE_ENV,
   monolithRequest,
@@ -79,16 +79,16 @@ import {
   readRuntimeEnvFile,
   reloadEngineEnv,
   setAgentCredentialSnapshot
-} from "./chunk-Y57FU4PE.js";
+} from "./chunk-M3FARRDB.js";
 import {
   AspClient,
   getCodexModelProvider
-} from "./chunk-SWXXNS2U.js";
+} from "./chunk-MPQHAEI4.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execAsync,
   execFileAsync
-} from "./chunk-ZDIZBHEZ.js";
+} from "./chunk-RCCLUBJX.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -316,7 +316,7 @@ import {
   workspaceCredentialProviderSchema,
   workspaceTokenRequestSchema,
   workspaceTokenResponseSchema
-} from "./chunk-VQDPYJKB.js";
+} from "./chunk-FKI4Y34A.js";
 import {
   cloneMcpConfig,
   ensureCompatibilityImports,

package/dist/src/post-tool-pr-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   publishedPullRequestUrls
-} from "./chunk-JC2TIYY2.js";
+} from "./chunk-AHKE7S5O.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
 import {
   shouldRefreshPullRequests
-} from "./chunk-VQDPYJKB.js";
+} from "./chunk-FKI4Y34A.js";
 import "./chunk-VEQXQN22.js";
 
 // src/services/post-tool-pr-notifier.ts

package/dist/src/subagent-mcp.js

@@ -9,7 +9,7 @@ import {
   spawnSubagentRequestSchema,
   subagentResponseSchema,
   waitSubagentRequestSchema
-} from "./chunk-VQDPYJKB.js";
+} from "./chunk-FKI4Y34A.js";
 import "./chunk-VEQXQN22.js";
 
 // src/subagent-mcp.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.1005",
+  "version": "0.1.1007",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",