replicas-engine 0.1.1020 → 0.1.1022

package/dist/src/{asp-host-5WGJNLEZ.js → asp-host-QDG4NGFE.js}

@@ -5,12 +5,12 @@ import {
   getCodexAspHost,
   restartCodexAspHost,
   restartCodexAspHostIfRunning
-} from "./chunk-UCM46K5V.js";
-import "./chunk-WJGY4JE2.js";
-import "./chunk-Y7NT47YP.js";
-import "./chunk-HCVB7XLV.js";
+} from "./chunk-3VEV6OKT.js";
+import "./chunk-K64GTMH6.js";
+import "./chunk-XR5FZAUG.js";
+import "./chunk-FB2CARXP.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-B5WGCH5R.js";
+import "./chunk-ZXU7SQP3.js";
 import "./chunk-VEQXQN22.js";
 export {
   getCodexAspHost,

package/dist/src/{chunk-77TEQCW5.js → chunk-3PGSQAYB.js}

@@ -3,18 +3,18 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   monolithRequest
-} from "./chunk-WJGY4JE2.js";
+} from "./chunk-K64GTMH6.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-HCVB7XLV.js";
+} from "./chunk-FB2CARXP.js";
 import {
   extractCommandProtectionCommandText,
   findCommandProtectionGitLookups,
   findGitCommitSignals,
   findPrMergeSignals,
   parseCommandProtectionRequest
-} from "./chunk-B5WGCH5R.js";
+} from "./chunk-ZXU7SQP3.js";
 
 // src/services/command-protection-service.ts
 import { readFile, stat } from "fs/promises";

package/dist/src/{chunk-UCM46K5V.js → chunk-3VEV6OKT.js}

@@ -5,15 +5,15 @@ import {
   ENGINE_ENV,
   monolithRequest,
   setAgentCredentialSnapshot
-} from "./chunk-WJGY4JE2.js";
+} from "./chunk-K64GTMH6.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-Y7NT47YP.js";
+} from "./chunk-XR5FZAUG.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-HCVB7XLV.js";
+} from "./chunk-FB2CARXP.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
@@ -28,7 +28,7 @@ import {
   listOpenAICompatibleModels,
   readOllamaAuthEnv,
   resolveOpenAICompatibleModelsUrl
-} from "./chunk-B5WGCH5R.js";
+} from "./chunk-ZXU7SQP3.js";
 
 // src/managers/codex-token-manager.ts
 import { promises as fs } from "fs";
@@ -264,7 +264,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     await this.applyCredentialUpdate(++this.credentialGeneration, async () => {
       await this.applyCredentialsResponse(data);
       setAgentCredentialSnapshot("codex", data);
-      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-5WGJNLEZ.js");
+      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-QDG4NGFE.js");
       await restartCodexAspHostIfRunning2();
     });
     await this.start(true);
@@ -285,7 +285,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
       const accountChanged = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.codex?.credentialId !== data.credentialId;
       await this.applyCredentialsResponse(data);
       if (restartOnChange && (accountChanged || CODEX_AUTH_ENV_KEYS.some((key, index) => process.env[key] !== previousEnv[index]))) {
-        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-5WGJNLEZ.js");
+        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-QDG4NGFE.js");
         await restartCodexAspHostIfRunning2();
       }
       setAgentCredentialSnapshot("codex", data);

package/dist/src/{chunk-QHQGQJCB.js → chunk-7OCJPQZ4.js}

@@ -5,7 +5,7 @@ import {
   extractCommandProtectionCommandText,
   isRecord,
   parseCodeHostPrUrl
-} from "./chunk-B5WGCH5R.js";
+} from "./chunk-ZXU7SQP3.js";
 
 // src/services/published-pull-request-urls.ts
 function publishedPullRequestUrls(result) {

package/dist/src/{chunk-HCVB7XLV.js → chunk-FB2CARXP.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES
-} from "./chunk-B5WGCH5R.js";
+} from "./chunk-ZXU7SQP3.js";
 
 // src/utils/exec.ts
 import { exec, execFile } from "child_process";

package/dist/src/{chunk-WJGY4JE2.js → chunk-K64GTMH6.js}

@@ -14,7 +14,7 @@ import {
   isValidAgentProvider,
   parsePosixEnvFile,
   readReplicasRuntimeEnv
-} from "./chunk-B5WGCH5R.js";
+} from "./chunk-ZXU7SQP3.js";
 
 // src/runtime-env-loader.ts
 import { readFileSync } from "fs";

package/dist/src/{chunk-Y7NT47YP.js → chunk-XR5FZAUG.js}

@@ -3,10 +3,10 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   execFileAsync
-} from "./chunk-HCVB7XLV.js";
+} from "./chunk-FB2CARXP.js";
 import {
   isVersionBelow
-} from "./chunk-B5WGCH5R.js";
+} from "./chunk-ZXU7SQP3.js";
 
 // src/utils/codex-agent-env.ts
 function buildCodexAgentEnv(source = process.env) {
@@ -240,7 +240,7 @@ function getCodexModelProvider(method) {
   if (method === "foundry") return "azure";
   return method === "ollama" || method === "openai-compatible" ? "replicas_openai_compatible" : "openai";
 }
-var ENGINE_PACKAGE_VERSION = "0.1.1020";
+var ENGINE_PACKAGE_VERSION = "0.1.1022";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/{chunk-B5WGCH5R.js → chunk-ZXU7SQP3.js}

@@ -196,6 +196,7 @@ var CLAUDE_OPUS_5_MODEL = "claude-opus-5";
 var CLAUDE_OPUS_4_8_MODEL = "claude-opus-4-8";
 var CLAUDE_SONNET_5_5_MODEL = "claude-sonnet-5-5";
 var CLAUDE_SONNET_5_MODEL = "claude-sonnet-5";
+var CLAUDE_HAIKU_5_5_MODEL = "claude-haiku-5-5";
 var CLAUDE_HAIKU_4_5_MODEL = "claude-haiku-4-5";
 var CLAUDE_FABLE_5_1_BEDROCK_MODEL = "anthropic.claude-fable-5-1";
 var CLAUDE_FABLE_5_BEDROCK_MODEL = "anthropic.claude-fable-5";
@@ -204,6 +205,7 @@ var CLAUDE_OPUS_5_BEDROCK_MODEL = "anthropic.claude-opus-5";
 var CLAUDE_OPUS_4_8_BEDROCK_MODEL = "us.anthropic.claude-opus-4-8";
 var CLAUDE_SONNET_5_5_BEDROCK_MODEL = "anthropic.claude-sonnet-5-5";
 var CLAUDE_SONNET_5_BEDROCK_MODEL = "anthropic.claude-sonnet-5";
+var CLAUDE_HAIKU_5_5_BEDROCK_MODEL = "anthropic.claude-haiku-5-5";
 var CLAUDE_HAIKU_4_5_BEDROCK_MODEL = "us.anthropic.claude-haiku-4-5-20251001-v1:0";
 var DEFAULT_CLAUDE_MODEL = CLAUDE_OPUS_5_5_MODEL;
 var GPT_6_ASTRA_MODEL = "gpt-6-astra";
@@ -284,6 +286,8 @@ function toClaudeCodeModel(model, bedrock) {
       return CLAUDE_SONNET_5_5_BEDROCK_MODEL;
     case CLAUDE_SONNET_5_MODEL:
       return "sonnet";
+    case CLAUDE_HAIKU_5_5_MODEL:
+      return CLAUDE_HAIKU_5_5_BEDROCK_MODEL;
     case CLAUDE_HAIKU_4_5_MODEL:
       return "haiku";
     default:
@@ -298,6 +302,7 @@ var CLAUDE_MODEL_CONTEXT_WINDOWS = {
   [CLAUDE_OPUS_4_8_MODEL]: 1e6,
   [CLAUDE_SONNET_5_5_MODEL]: 1e6,
   [CLAUDE_SONNET_5_MODEL]: 1e6,
+  [CLAUDE_HAIKU_5_5_MODEL]: 1e6,
   [CLAUDE_HAIKU_4_5_MODEL]: 2e5,
   [CLAUDE_FABLE_5_1_BEDROCK_MODEL]: 1e6,
   [CLAUDE_FABLE_5_BEDROCK_MODEL]: 1e6,
@@ -306,6 +311,7 @@ var CLAUDE_MODEL_CONTEXT_WINDOWS = {
   [CLAUDE_OPUS_4_8_BEDROCK_MODEL]: 1e6,
   [CLAUDE_SONNET_5_5_BEDROCK_MODEL]: 1e6,
   [CLAUDE_SONNET_5_BEDROCK_MODEL]: 1e6,
+  [CLAUDE_HAIKU_5_5_BEDROCK_MODEL]: 1e6,
   [CLAUDE_HAIKU_4_5_BEDROCK_MODEL]: 2e5,
   "anthropic.claude-opus-4-8": 1e6,
   "us.anthropic.claude-sonnet-5": 1e6,
@@ -322,18 +328,33 @@ function canUseClaudeFastMode(model) {
   const normalized = normalizeClaudeModel(model);
   return normalized === CLAUDE_OPUS_5_5_MODEL || normalized === CLAUDE_OPUS_5_MODEL || normalized === CLAUDE_OPUS_4_8_MODEL || model === "claude-opus-4-7";
 }
+var CLAUDE_MODEL_MIN_SANDBOX_IMAGE = {
+  [CLAUDE_FABLE_5_1_MODEL]: "replicas-sandbox-2026-09-01-v6",
+  [CLAUDE_FABLE_5_MODEL]: null,
+  [CLAUDE_OPUS_5_5_MODEL]: "replicas-sandbox-2026-09-22-v4",
+  [CLAUDE_OPUS_5_MODEL]: null,
+  [CLAUDE_OPUS_4_8_MODEL]: null,
+  [CLAUDE_SONNET_5_5_MODEL]: "replicas-sandbox-2026-09-28-v7",
+  [CLAUDE_SONNET_5_MODEL]: null,
+  [CLAUDE_HAIKU_5_5_MODEL]: "replicas-sandbox-2026-10-08-v4",
+  [CLAUDE_HAIKU_4_5_MODEL]: null
+};
+var CODEX_MODEL_MIN_SANDBOX_IMAGE = {
+  [DEFAULT_CODEX_MODEL]: "replicas-sandbox-2026-09-30-v11",
+  [GPT_6_SOL_MODEL]: "replicas-sandbox-2026-09-24-v1",
+  [GPT_6_ASTRA_MODEL]: "replicas-sandbox-2026-09-04-v7",
+  [GPT_6_LUNA_MODEL]: "replicas-sandbox-2026-09-24-v1",
+  [GPT_5_6_SOL_MODEL]: null,
+  [GPT_5_6_TERRA_MODEL]: null,
+  [GPT_5_6_LUNA_MODEL]: null,
+  "gpt-5.5": null,
+  "gpt-5.4": null,
+  "gpt-5.4-mini": null,
+  "gpt-5.2": null
+};
 var AGENT_MODELS = {
-  claude: [
-    CLAUDE_FABLE_5_1_MODEL,
-    CLAUDE_FABLE_5_MODEL,
-    CLAUDE_OPUS_5_5_MODEL,
-    CLAUDE_OPUS_5_MODEL,
-    CLAUDE_OPUS_4_8_MODEL,
-    CLAUDE_SONNET_5_5_MODEL,
-    CLAUDE_SONNET_5_MODEL,
-    CLAUDE_HAIKU_4_5_MODEL
-  ],
-  codex: [DEFAULT_CODEX_MODEL, GPT_6_SOL_MODEL, GPT_6_ASTRA_MODEL, GPT_6_LUNA_MODEL, GPT_5_6_SOL_MODEL, GPT_5_6_TERRA_MODEL, GPT_5_6_LUNA_MODEL, "gpt-5.5", "gpt-5.4", "gpt-5.4-mini", "gpt-5.2"],
+  claude: Object.keys(CLAUDE_MODEL_MIN_SANDBOX_IMAGE),
+  codex: Object.keys(CODEX_MODEL_MIN_SANDBOX_IMAGE),
   cursor: [
     CLAUDE_FABLE_5_1_MODEL,
     CLAUDE_FABLE_5_MODEL,
@@ -412,20 +433,10 @@ function getAgentModelOptions(provider, overrides) {
   if (provider === "cursor") return DEFAULT_CURSOR_MODELS;
   return AGENT_MODELS[provider];
 }
-var CLAUDE_MODEL_MIN_SANDBOX_IMAGE = {
-  [CLAUDE_FABLE_5_1_MODEL]: "replicas-sandbox-2026-09-01-v6",
-  [CLAUDE_OPUS_5_5_MODEL]: "replicas-sandbox-2026-09-22-v4",
-  [CLAUDE_SONNET_5_5_MODEL]: "replicas-sandbox-2026-09-28-v7"
-};
-var CODEX_MODEL_MIN_SANDBOX_IMAGE = {
-  [GPT_6_ASTRA_MODEL]: "replicas-sandbox-2026-09-04-v7",
-  [GPT_6_1_SOL_MODEL]: "replicas-sandbox-2026-09-30-v11",
-  [GPT_6_SOL_MODEL]: "replicas-sandbox-2026-09-24-v1",
-  [GPT_6_LUNA_MODEL]: "replicas-sandbox-2026-09-24-v1"
-};
 var SANDBOX_IMAGE_MODEL_FALLBACKS = {
   [CLAUDE_OPUS_5_5_MODEL]: CLAUDE_OPUS_5_MODEL,
   [CLAUDE_SONNET_5_5_MODEL]: CLAUDE_SONNET_5_MODEL,
+  [CLAUDE_HAIKU_5_5_MODEL]: CLAUDE_HAIKU_4_5_MODEL,
   [GPT_6_1_SOL_MODEL]: GPT_6_SOL_MODEL,
   [GPT_6_SOL_MODEL]: GPT_5_6_SOL_MODEL,
   [GPT_6_ASTRA_MODEL]: GPT_5_6_TERRA_MODEL,
@@ -479,6 +490,7 @@ var MODEL_LABELS = {
   "composer-2.5": "Composer 2.5",
   [CLAUDE_OPUS_4_8_MODEL]: "Opus 4.8",
   "claude-opus-4-7": "Opus 4.7",
+  [CLAUDE_HAIKU_5_5_MODEL]: "Haiku 5.5",
   [CLAUDE_HAIKU_4_5_MODEL]: "Haiku 4.5",
   "gemini-3.8-flash": "Gemini 3.8 Flash",
   "gemini-3.1-pro": "Gemini 3.1 Pro",
@@ -910,6 +922,9 @@ function getCredentialMethodLabel(agent, method) {
 var WORKSPACE_SOURCES = ["api", "dashboard", "slack", "linear", "github", "gitlab", "automation", "mothership"];
 var CLIENT_MESSAGE_SOURCES = ["web", "desktop", "mobile", "tui"];
 var MESSAGE_SOURCES = [...CLIENT_MESSAGE_SOURCES, ...WORKSPACE_SOURCES];
+function isClientMessageSource(value) {
+  return typeof value === "string" && CLIENT_MESSAGE_SOURCES.some((source) => source === value);
+}
 function isMessageSource(value) {
   return typeof value === "string" && MESSAGE_SOURCES.some((source) => source === value);
 }
@@ -4935,6 +4950,11 @@ var DEFAULT_DEFAULT_SKILLS = {
 
 // ../shared/src/prompts.ts
 var REPLICAS_INSTRUCTIONS_TAG = "replicas_instructions";
+function wrapInTag(content, tag) {
+  return `<${tag}>
+${content}
+</${tag}>`;
+}
 function removeTag(text2, tag) {
   const regex = new RegExp(`<${tag}>[\\s\\S]*?</${tag}>`, "g");
   return text2.replace(regex, "").trim();
@@ -9201,6 +9221,7 @@ export {
   detectEnvironmentAuthMethod,
   AGENT_CREDENTIAL_METHODS_IN_ORDER,
   describeCredential,
+  isClientMessageSource,
   agentCredentialSnapshotSchema,
   isSameCredential,
   isAgentChatTurnActivityRecord,
@@ -9309,6 +9330,8 @@ export {
   SANDBOX_SKILL_DIRS,
   HISTORY_ROOT,
   HISTORY_INDEX_FILENAME,
+  REPLICAS_INSTRUCTIONS_TAG,
+  wrapInTag,
   extractErrorText,
   isTransientErrorText,
   extractToolResultText,

package/dist/src/command-protection-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-77TEQCW5.js";
-import "./chunk-WJGY4JE2.js";
-import "./chunk-HCVB7XLV.js";
+} from "./chunk-3PGSQAYB.js";
+import "./chunk-K64GTMH6.js";
+import "./chunk-FB2CARXP.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-B5WGCH5R.js";
+import "./chunk-ZXU7SQP3.js";
 import "./chunk-VEQXQN22.js";
 
 // src/command-protection-hook.ts

package/dist/src/headless-agent.js

@@ -7,12 +7,12 @@ import {
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-Y7NT47YP.js";
-import "./chunk-HCVB7XLV.js";
+} from "./chunk-XR5FZAUG.js";
+import "./chunk-FB2CARXP.js";
 import {
   AGENT,
   headlessAgentRequestSchema
-} from "./chunk-B5WGCH5R.js";
+} from "./chunk-ZXU7SQP3.js";
 import "./chunk-VEQXQN22.js";
 
 // src/headless-agent.ts

package/dist/src/index.js

@@ -32,7 +32,7 @@ import {
   reportCommandProtectionBlock,
   resolveDiffBase,
   runGitCommand
-} from "./chunk-77TEQCW5.js";
+} from "./chunk-3PGSQAYB.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -57,7 +57,7 @@ import {
 } from "./chunk-P73LGPQO.js";
 import {
   publishedPullRequestUrls
-} from "./chunk-QHQGQJCB.js";
+} from "./chunk-7OCJPQZ4.js";
 import {
   BaseRefreshManager,
   CodexAspAuthMethodChangedError,
@@ -71,7 +71,7 @@ import {
   refreshDelayMs,
   restartCodexAspHost,
   routineRefreshRequest
-} from "./chunk-UCM46K5V.js";
+} from "./chunk-3VEV6OKT.js";
 import {
   ENGINE_ENV,
   monolithRequest,
@@ -79,16 +79,16 @@ import {
   readRuntimeEnvFile,
   reloadEngineEnv,
   setAgentCredentialSnapshot
-} from "./chunk-WJGY4JE2.js";
+} from "./chunk-K64GTMH6.js";
 import {
   AspClient,
   getCodexModelProvider
-} from "./chunk-Y7NT47YP.js";
+} from "./chunk-XR5FZAUG.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execAsync,
   execFileAsync
-} from "./chunk-HCVB7XLV.js";
+} from "./chunk-FB2CARXP.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -164,6 +164,7 @@ import {
   QUEUED_MESSAGE_REMOVED_EVENT_TYPE,
   REMOVED_MESSAGE_IDS_PAYLOAD_KEY,
   REPLICAS_CONFIG_FILENAMES,
+  REPLICAS_INSTRUCTIONS_TAG,
   REPLICAS_RUNTIME_ENV_ALIASES,
   SANDBOX_SKILL_DIRS,
   SUBAGENT_MCP_HARNESSES,
@@ -255,6 +256,7 @@ import {
   isChatMessageSender,
   isClaudeAuthErrorText,
   isClaudeResultError,
+  isClientMessageSource,
   isCodexAuthError,
   isDefaultChat,
   isExcludedRepoFilePath,
@@ -315,8 +317,9 @@ import {
   workspaceAudienceSchema,
   workspaceCredentialProviderSchema,
   workspaceTokenRequestSchema,
-  workspaceTokenResponseSchema
-} from "./chunk-B5WGCH5R.js";
+  workspaceTokenResponseSchema,
+  wrapInTag
+} from "./chunk-ZXU7SQP3.js";
 import {
   cloneMcpConfig,
   ensureCompatibilityImports,
@@ -11999,10 +12002,15 @@ var CodingAgentManager = class {
   subagentMcpChatId;
   subagentMcpEnabledForTurn = false;
   unreadSteers = /* @__PURE__ */ new Map();
+  lastSenderKey;
+  onLastSenderKeyChanged;
   constructor(options) {
     this.workingDirectory = options.workingDirectory ?? ENGINE_ENV.WORKSPACE_ROOT;
     this.initialSessionId = options.initialSessionId;
-    this.onSaveSessionId = options.onSaveSessionId;
+    this.onSaveSessionId = async (sessionId) => {
+      if (!sessionId) await this.saveLastSenderKey(null);
+      await options.onSaveSessionId(sessionId);
+    };
     this.onEvent = options.onEvent;
     this.onUsageUpdate = options.onUsageUpdate ?? (() => {
     });
@@ -12016,6 +12024,9 @@ var CodingAgentManager = class {
     });
     this.onModelSwitched = options.onModelSwitched ?? (async () => {
     });
+    this.lastSenderKey = options.lastSenderKey ?? null;
+    this.onLastSenderKeyChanged = options.onLastSenderKeyChanged ?? (async () => {
+    });
     this.authFallback = options.provider ? new AuthFallbackCoordinator(options.provider, (event) => {
       this.onEvent(event);
       this.getHistorySink()?.append(event);
@@ -12076,13 +12087,33 @@ var CodingAgentManager = class {
       async (request, signal) => {
         await this.refreshSubagentMcp();
         if (signal.aborted) return;
-        await processMessage(request, signal);
+        const { request: delivered, senderKey } = this.withSenderLine(request);
+        await this.saveLastSenderKey(senderKey);
+        await processMessage(delivered, signal);
       },
       this.onProcessingChanged,
       this.onMessageStarted
     );
     this.initialized = this.initialize();
   }
+  // Integration turns (Slack, GitHub, Linear) carry no sender fields and name their sender in the text, so they reset the key.
+  withSenderLine(request) {
+    if (request.goalMode || request.message.trimStart().startsWith("/")) return { request, senderKey: this.lastSenderKey };
+    if (!request.senderUserId || !request.senderEmail) return { request, senderKey: null };
+    const via = request.source && !isClientMessageSource(request.source) ? request.source : void 0;
+    const senderKey = `${request.senderUserId}:${via ?? ""}`;
+    if (senderKey === this.lastSenderKey) return { request, senderKey };
+    const name = request.senderDisplayName && request.senderDisplayName !== request.senderEmail ? `${request.senderDisplayName} (${request.senderEmail})` : request.senderEmail;
+    const line = wrapInTag(`From ${name}${via ? ` via ${via}` : ""}.`, REPLICAS_INSTRUCTIONS_TAG);
+    return { request: { ...request, message: `${line}
+
+${request.message}` }, senderKey };
+  }
+  async saveLastSenderKey(senderKey) {
+    if (senderKey === this.lastSenderKey) return;
+    this.lastSenderKey = senderKey;
+    await this.onLastSenderKeyChanged(senderKey);
+  }
   /** The workspace preference is resolved per turn so a change applies to the next turn; failures keep the last value. */
   async refreshSubagentMcp() {
     if (!this.subagentMcpChatId || !ENGINE_ENV.REPLICAS_WORKSPACE_ID) return;
@@ -12199,8 +12230,10 @@ var CodingAgentManager = class {
       return { success: false, queue: this.getQueue() };
     }
     let steered = false;
+    const { request: delivered, senderKey } = this.withSenderLine(taken.message);
     try {
-      steered = await this.steerRequest(taken.message);
+      steered = await this.steerRequest(delivered);
+      if (steered) await this.saveLastSenderKey(senderKey);
     } catch (error) {
       console.error("[CodingAgentManager] steerRequest threw, keeping message queued:", error);
     }
@@ -12234,6 +12267,11 @@ var CodingAgentManager = class {
     const steers = [...this.unreadSteers.values()].map(({ message }) => message);
     this.unreadSteers.clear();
     this.restoreQueuedMessages(steers.map((message) => ({ message, index: 0 })));
+    if (steers.length > 0) {
+      this.saveLastSenderKey(null).catch((error) => {
+        console.error("[CodingAgentManager] Failed to reset last sender:", error);
+      });
+    }
   }
   markSteerRead(messageId) {
     const steer = this.unreadSteers.get(messageId);
@@ -12268,6 +12306,7 @@ var CodingAgentManager = class {
     if (enginePortProtectionInstruction) {
       parts.push(enginePortProtectionInstruction);
     }
+    parts.push("Each message names its sender when the sender changes. Any account email the harness attaches, such as Claude Code's `userEmail`, belongs to the inference account: never use it to identify or contact the user.");
     parts.push(`Unless the user asks for a different location, clone a repository you will change into ${ENGINE_ENV.WORKSPACE_ROOT}/<repository-name> so the user can review its changes in the workspace. Clones you only read can go anywhere.`);
     if (startHooksInstruction) {
       parts.push(startHooksInstruction);
@@ -60591,6 +60630,7 @@ function normalizePersistedChat(chat) {
     pendingForkHandoff: chat.pendingForkHandoff === true,
     ...chat.chatCredential === "workspace" || agentCredentialSnapshotSchema.safeParse(chat.chatCredential).success ? { chatCredential: chat.chatCredential } : {},
     transcriptAuth: normalizeTranscriptAuth(chat.transcriptAuth),
+    ...typeof chat.lastSenderKey === "string" ? { lastSenderKey: chat.lastSenderKey } : {},
     removedMessageIds: Array.isArray(chat.removedMessageIds) ? chat.removedMessageIds.filter((id) => typeof id === "string").slice(-MAX_REMOVED_MESSAGE_IDS) : [],
     acceptedSendResponses: isRecord2(chat.acceptedSendResponses) ? Object.fromEntries(Object.entries(chat.acceptedSendResponses).filter((entry) => {
       const response = entry[1];
@@ -61534,6 +61574,10 @@ var ChatService = class {
         console.error("[ChatService] Failed to record chat credential:", { chatId: persisted.id, error });
       });
     };
+    const onLastSenderKeyChanged = async (senderKey) => {
+      persisted.lastSenderKey = senderKey ?? void 0;
+      await this.persistAllChats();
+    };
     const onProcessingChanged = (processing) => {
       if (processing) return;
       this.handleProcessingStopped(persisted.id);
@@ -61576,6 +61620,8 @@ var ChatService = class {
       chatId: persisted.id,
       onModelSwitched,
       onChatCredential,
+      lastSenderKey: persisted.lastSenderKey,
+      onLastSenderKeyChanged,
       linearSessionId: persisted.parentChatId === null ? ENGINE_ENV.REPLICAS_LINEAR_SESSION_ID : void 0,
       parentChatId: persisted.parentChatId
     };

package/dist/src/post-tool-pr-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   publishedPullRequestUrls
-} from "./chunk-QHQGQJCB.js";
+} from "./chunk-7OCJPQZ4.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
 import {
   shouldRefreshPullRequests
-} from "./chunk-B5WGCH5R.js";
+} from "./chunk-ZXU7SQP3.js";
 import "./chunk-VEQXQN22.js";
 
 // src/services/post-tool-pr-notifier.ts

package/dist/src/subagent-mcp.js

@@ -9,7 +9,7 @@ import {
   spawnSubagentRequestSchema,
   subagentResponseSchema,
   waitSubagentRequestSchema
-} from "./chunk-B5WGCH5R.js";
+} from "./chunk-ZXU7SQP3.js";
 import "./chunk-VEQXQN22.js";
 
 // src/subagent-mcp.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.1020",
+  "version": "0.1.1022",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",
@@ -39,7 +39,7 @@
   "author": "Replicas",
   "license": "MIT",
   "dependencies": {
-    "@anthropic-ai/claude-agent-sdk": "0.3.290",
+    "@anthropic-ai/claude-agent-sdk": "0.3.293",
     "@anthropic-ai/sdk": "0.128.0",
     "@connectrpc/connect-node": "1.7.0",
     "@cursor/sdk": "1.0.36",