replicas-engine 0.1.1017 → 0.1.1019

package/dist/src/{asp-host-S7GXAJPC.js → asp-host-YJWSUD5E.js}

@@ -5,12 +5,12 @@ import {
   getCodexAspHost,
   restartCodexAspHost,
   restartCodexAspHostIfRunning
-} from "./chunk-HUJTXZYJ.js";
-import "./chunk-P55NZKFG.js";
-import "./chunk-KZBWIWGY.js";
-import "./chunk-PEHCBBPE.js";
+} from "./chunk-7VUQPXFS.js";
+import "./chunk-WJGY4JE2.js";
+import "./chunk-AVAUTFKY.js";
+import "./chunk-HCVB7XLV.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-SLOE5Q64.js";
+import "./chunk-B5WGCH5R.js";
 import "./chunk-VEQXQN22.js";
 export {
   getCodexAspHost,

package/dist/src/{chunk-H4FZ7JKV.js → chunk-77TEQCW5.js}

@@ -3,18 +3,18 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   monolithRequest
-} from "./chunk-P55NZKFG.js";
+} from "./chunk-WJGY4JE2.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-PEHCBBPE.js";
+} from "./chunk-HCVB7XLV.js";
 import {
   extractCommandProtectionCommandText,
   findCommandProtectionGitLookups,
   findGitCommitSignals,
   findPrMergeSignals,
   parseCommandProtectionRequest
-} from "./chunk-SLOE5Q64.js";
+} from "./chunk-B5WGCH5R.js";
 
 // src/services/command-protection-service.ts
 import { readFile, stat } from "fs/promises";

package/dist/src/{chunk-HUJTXZYJ.js → chunk-7VUQPXFS.js}

@@ -5,15 +5,15 @@ import {
   ENGINE_ENV,
   monolithRequest,
   setAgentCredentialSnapshot
-} from "./chunk-P55NZKFG.js";
+} from "./chunk-WJGY4JE2.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-KZBWIWGY.js";
+} from "./chunk-AVAUTFKY.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-PEHCBBPE.js";
+} from "./chunk-HCVB7XLV.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
@@ -28,7 +28,7 @@ import {
   listOpenAICompatibleModels,
   readOllamaAuthEnv,
   resolveOpenAICompatibleModelsUrl
-} from "./chunk-SLOE5Q64.js";
+} from "./chunk-B5WGCH5R.js";
 
 // src/managers/codex-token-manager.ts
 import { promises as fs } from "fs";
@@ -264,7 +264,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     await this.applyCredentialUpdate(++this.credentialGeneration, async () => {
       await this.applyCredentialsResponse(data);
       setAgentCredentialSnapshot("codex", data);
-      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-S7GXAJPC.js");
+      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-YJWSUD5E.js");
       await restartCodexAspHostIfRunning2();
     });
     await this.start(true);
@@ -285,7 +285,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
       const accountChanged = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.codex?.credentialId !== data.credentialId;
       await this.applyCredentialsResponse(data);
       if (restartOnChange && (accountChanged || CODEX_AUTH_ENV_KEYS.some((key, index) => process.env[key] !== previousEnv[index]))) {
-        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-S7GXAJPC.js");
+        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-YJWSUD5E.js");
         await restartCodexAspHostIfRunning2();
       }
       setAgentCredentialSnapshot("codex", data);

package/dist/src/{chunk-KZBWIWGY.js → chunk-AVAUTFKY.js}

@@ -3,10 +3,10 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   execFileAsync
-} from "./chunk-PEHCBBPE.js";
+} from "./chunk-HCVB7XLV.js";
 import {
   isVersionBelow
-} from "./chunk-SLOE5Q64.js";
+} from "./chunk-B5WGCH5R.js";
 
 // src/utils/codex-agent-env.ts
 function buildCodexAgentEnv(source = process.env) {
@@ -240,7 +240,7 @@ function getCodexModelProvider(method) {
   if (method === "foundry") return "azure";
   return method === "ollama" || method === "openai-compatible" ? "replicas_openai_compatible" : "openai";
 }
-var ENGINE_PACKAGE_VERSION = "0.1.1017";
+var ENGINE_PACKAGE_VERSION = "0.1.1019";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/{chunk-SLOE5Q64.js → chunk-B5WGCH5R.js}

@@ -1719,40 +1719,6 @@ var headlessAgentRequestSchema = z4.object({
 // ../shared/src/engine/environment.ts
 var DESKTOP_STREAM_PORT = 6080;
 
-// ../shared/src/sse.ts
-function parseSseChunk(chunk) {
-  let data = "";
-  for (const line of chunk.split("\n")) {
-    if (line.startsWith("data: ")) {
-      data += line.slice(6);
-    }
-  }
-  if (!data) return null;
-  try {
-    return JSON.parse(data);
-  } catch {
-    return null;
-  }
-}
-async function readSseStream(body, onEvent, shouldContinue = () => true) {
-  const reader = body.getReader();
-  const decoder2 = new TextDecoder();
-  let buffer = "";
-  while (shouldContinue()) {
-    const { done, value } = await reader.read();
-    if (done) break;
-    buffer += decoder2.decode(value, { stream: true });
-    const chunks = buffer.split("\n\n");
-    buffer = chunks.pop() ?? "";
-    for (const chunk of chunks) {
-      if (!shouldContinue()) break;
-      const event = parseSseChunk(chunk);
-      if (!event) continue;
-      await onEvent(event);
-    }
-  }
-}
-
 // ../shared/src/workspace-identity.ts
 import { z as z5 } from "zod";
 var WORKSPACE_IDENTITY_AUDIENCE = "replicas:workspace";
@@ -1797,6 +1763,40 @@ var mcpWorkloadAuthSchema = z5.strictObject({
   audience: workspaceAudienceSchema
 });
 
+// ../shared/src/sse.ts
+function parseSseChunk(chunk) {
+  let data = "";
+  for (const line of chunk.split("\n")) {
+    if (line.startsWith("data: ")) {
+      data += line.slice(6);
+    }
+  }
+  if (!data) return null;
+  try {
+    return JSON.parse(data);
+  } catch {
+    return null;
+  }
+}
+async function readSseStream(body, onEvent, shouldContinue = () => true) {
+  const reader = body.getReader();
+  const decoder2 = new TextDecoder();
+  let buffer = "";
+  while (shouldContinue()) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    buffer += decoder2.decode(value, { stream: true });
+    const chunks = buffer.split("\n\n");
+    buffer = chunks.pop() ?? "";
+    for (const chunk of chunks) {
+      if (!shouldContinue()) break;
+      const event = parseSseChunk(chunk);
+      if (!event) continue;
+      await onEvent(event);
+    }
+  }
+}
+
 // ../shared/src/json.ts
 function safeJsonParse(str, fallback) {
   try {
@@ -8785,6 +8785,10 @@ var DEFAULT_WORKSPACE_FILTERS = {
   activity: "any"
 };
 var ONE_DAY_MS = 24 * 60 * 60 * 1e3;
+var workspaceExecRequestSchema = z16.object({
+  command: z16.string().regex(/\S/, "command is required"),
+  timeout_seconds: z16.number().int().min(1).max(50).optional().describe("Default: 30")
+});
 var terminalRtcCandidateSchema = z16.object({ type: z16.literal("rtc-candidate"), candidate: z16.string(), mid: z16.string() });
 var terminalSocketServerMessageSchema = z16.discriminatedUnion("type", [
   z16.object({ type: z16.literal("output"), data: z16.string() }),
@@ -8908,6 +8912,20 @@ function scoreRepoFileMatch(query, filePath) {
 var WEBHOOK_PROVIDERS = ["linear", "github", "gitlab", "slack", "e2b", "stripe", "sentry"];
 var WEBHOOK_PROVIDER_SET = new Set(WEBHOOK_PROVIDERS);
 
+// ../shared/src/routes/environment.ts
+import { z as z19 } from "zod";
+var ENVIRONMENT_MCP_TRANSPORTS = ["stdio", "http", "sse"];
+var stringMap = z19.record(z19.string(), z19.string());
+var createEnvironmentMcpRequestSchema = z19.object({
+  name: z19.string(),
+  transport: z19.enum(ENVIRONMENT_MCP_TRANSPORTS),
+  config: z19.union([
+    z19.object({ command: z19.string().min(1), args: z19.array(z19.string()).optional(), env: stringMap.optional() }),
+    z19.object({ url: z19.url(), headers: stringMap.optional(), auth: mcpWorkloadAuthSchema.optional() })
+  ]).describe("stdio: `{ command, args, env }`. http/sse: `{ url, headers }`.")
+});
+var updateEnvironmentMcpRequestSchema = createEnvironmentMcpRequestSchema.partial();
+
 // ../shared/src/workspace-sidebar-state.ts
 var FIRST_BOOT_GRACE_MS = 15 * 6e4;
 var SLOW_ENGINE_GRACE_MS = 10 * 6e4;
@@ -9118,7 +9136,7 @@ function parseChatTranscriptArtifact(value) {
 }
 
 // ../shared/src/learned-skills.ts
-import { z as z19 } from "zod";
+import { z as z20 } from "zod";
 
 // ../shared/src/frontmatter.ts
 import { parse as parseYaml2 } from "yaml";
@@ -9141,8 +9159,8 @@ function parseFrontmatter(content) {
 var LEARNED_SKILLS_ROOT = `${SANDBOX_PATHS.REPLICAS_DIR}/learned-skills`;
 var LEARNED_SKILLS_MANIFEST_PATH = `${LEARNED_SKILLS_ROOT}/manifest.json`;
 var LEARNED_SKILL_DIR_PREFIX = "replicas-learned__";
-var learnedSkillsManifestSchema = z19.object({
-  skills: z19.array(z19.object({ name: z19.string(), sha256: z19.string() }))
+var learnedSkillsManifestSchema = z20.object({
+  skills: z20.array(z20.object({ name: z20.string(), sha256: z20.string() }))
 });
 
 // ../shared/src/skill-registry.ts
@@ -9379,6 +9397,14 @@ export {
   MAX_REPO_FILE_CONTENT_BYTES,
   searchRepoFileIndex,
   isExcludedRepoFilePath,
+  WORKSPACE_IDENTITY_AUDIENCE,
+  AWS_SOURCE_IDENTITY_CLAIM,
+  IDENTITY_PROXY_PORT,
+  IDENTITY_TOKEN_PATH,
+  workspaceAudienceSchema,
+  workspaceTokenRequestSchema,
+  workspaceTokenResponseSchema,
+  legacyWorkspaceTokenBundleSchema,
   readJsonlPage,
   normalizeChatTranscriptMetadata,
   parseChatTranscriptArtifact,
@@ -9387,13 +9413,5 @@ export {
   LEARNED_SKILL_DIR_PREFIX,
   learnedSkillsManifestSchema,
   readSseStream,
-  isSkillRegistryManifest,
-  WORKSPACE_IDENTITY_AUDIENCE,
-  AWS_SOURCE_IDENTITY_CLAIM,
-  IDENTITY_PROXY_PORT,
-  IDENTITY_TOKEN_PATH,
-  workspaceAudienceSchema,
-  workspaceTokenRequestSchema,
-  workspaceTokenResponseSchema,
-  legacyWorkspaceTokenBundleSchema
+  isSkillRegistryManifest
 };

package/dist/src/{chunk-PEHCBBPE.js → chunk-HCVB7XLV.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES
-} from "./chunk-SLOE5Q64.js";
+} from "./chunk-B5WGCH5R.js";
 
 // src/utils/exec.ts
 import { exec, execFile } from "child_process";

package/dist/src/{chunk-OHVXJGZT.js → chunk-QHQGQJCB.js}

@@ -5,7 +5,7 @@ import {
   extractCommandProtectionCommandText,
   isRecord,
   parseCodeHostPrUrl
-} from "./chunk-SLOE5Q64.js";
+} from "./chunk-B5WGCH5R.js";
 
 // src/services/published-pull-request-urls.ts
 function publishedPullRequestUrls(result) {

package/dist/src/{chunk-P55NZKFG.js → chunk-WJGY4JE2.js}

@@ -14,7 +14,7 @@ import {
   isValidAgentProvider,
   parsePosixEnvFile,
   readReplicasRuntimeEnv
-} from "./chunk-SLOE5Q64.js";
+} from "./chunk-B5WGCH5R.js";
 
 // src/runtime-env-loader.ts
 import { readFileSync } from "fs";

package/dist/src/command-protection-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-H4FZ7JKV.js";
-import "./chunk-P55NZKFG.js";
-import "./chunk-PEHCBBPE.js";
+} from "./chunk-77TEQCW5.js";
+import "./chunk-WJGY4JE2.js";
+import "./chunk-HCVB7XLV.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-SLOE5Q64.js";
+import "./chunk-B5WGCH5R.js";
 import "./chunk-VEQXQN22.js";
 
 // src/command-protection-hook.ts

package/dist/src/headless-agent.js

@@ -7,12 +7,12 @@ import {
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-KZBWIWGY.js";
-import "./chunk-PEHCBBPE.js";
+} from "./chunk-AVAUTFKY.js";
+import "./chunk-HCVB7XLV.js";
 import {
   AGENT,
   headlessAgentRequestSchema
-} from "./chunk-SLOE5Q64.js";
+} from "./chunk-B5WGCH5R.js";
 import "./chunk-VEQXQN22.js";
 
 // src/headless-agent.ts

package/dist/src/index.js

@@ -32,7 +32,7 @@ import {
   reportCommandProtectionBlock,
   resolveDiffBase,
   runGitCommand
-} from "./chunk-H4FZ7JKV.js";
+} from "./chunk-77TEQCW5.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -57,7 +57,7 @@ import {
 } from "./chunk-P73LGPQO.js";
 import {
   publishedPullRequestUrls
-} from "./chunk-OHVXJGZT.js";
+} from "./chunk-QHQGQJCB.js";
 import {
   BaseRefreshManager,
   CodexAspAuthMethodChangedError,
@@ -71,7 +71,7 @@ import {
   refreshDelayMs,
   restartCodexAspHost,
   routineRefreshRequest
-} from "./chunk-HUJTXZYJ.js";
+} from "./chunk-7VUQPXFS.js";
 import {
   ENGINE_ENV,
   monolithRequest,
@@ -79,16 +79,16 @@ import {
   readRuntimeEnvFile,
   reloadEngineEnv,
   setAgentCredentialSnapshot
-} from "./chunk-P55NZKFG.js";
+} from "./chunk-WJGY4JE2.js";
 import {
   AspClient,
   getCodexModelProvider
-} from "./chunk-KZBWIWGY.js";
+} from "./chunk-AVAUTFKY.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execAsync,
   execFileAsync
-} from "./chunk-PEHCBBPE.js";
+} from "./chunk-HCVB7XLV.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -316,7 +316,7 @@ import {
   workspaceCredentialProviderSchema,
   workspaceTokenRequestSchema,
   workspaceTokenResponseSchema
-} from "./chunk-SLOE5Q64.js";
+} from "./chunk-B5WGCH5R.js";
 import {
   cloneMcpConfig,
   ensureCompatibilityImports,
@@ -60238,7 +60238,7 @@ async function uploadChatTranscriptNow(chatId, filePath, chat, capture) {
   } : {};
   if (capture) {
     const hash = createHash7("sha256");
-    for await (const chunk of createReadStream3(filePath)) hash.update(chunk);
+    for await (const chunk of createReadStream3(filePath, { start: 0, end: size - 1 })) hash.update(chunk);
     metadata.captureId = capture.captureId;
     metadata.captureReason = capture.reason;
     metadata.sha256 = hash.digest("hex");

package/dist/src/post-tool-pr-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   publishedPullRequestUrls
-} from "./chunk-OHVXJGZT.js";
+} from "./chunk-QHQGQJCB.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
 import {
   shouldRefreshPullRequests
-} from "./chunk-SLOE5Q64.js";
+} from "./chunk-B5WGCH5R.js";
 import "./chunk-VEQXQN22.js";
 
 // src/services/post-tool-pr-notifier.ts

package/dist/src/subagent-mcp.js

@@ -9,7 +9,7 @@ import {
   spawnSubagentRequestSchema,
   subagentResponseSchema,
   waitSubagentRequestSchema
-} from "./chunk-SLOE5Q64.js";
+} from "./chunk-B5WGCH5R.js";
 import "./chunk-VEQXQN22.js";
 
 // src/subagent-mcp.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.1017",
+  "version": "0.1.1019",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",