replicas-engine 0.1.1027 → 0.1.1029

package/dist/src/{asp-host-R6LN7ANF.js → asp-host-2QL3R5O5.js}

@@ -5,12 +5,12 @@ import {
   getCodexAspHost,
   restartCodexAspHost,
   restartCodexAspHostIfRunning
-} from "./chunk-73446GJ3.js";
-import "./chunk-QFJFKNXF.js";
-import "./chunk-FOVYFK2H.js";
-import "./chunk-IPL36DTU.js";
+} from "./chunk-DWWWY7HA.js";
+import "./chunk-IPOU7CXA.js";
+import "./chunk-SMKDV5DS.js";
+import "./chunk-HIRAX6GE.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-HLUAG4YU.js";
+import "./chunk-BOAIMJKK.js";
 import "./chunk-VEQXQN22.js";
 export {
   getCodexAspHost,

package/dist/src/{chunk-HLUAG4YU.js → chunk-BOAIMJKK.js}

@@ -1548,6 +1548,19 @@ var mcpWorkloadAuthSchema = z4.strictObject({
   type: z4.literal("workspace_identity"),
   audience: workspaceAudienceSchema
 });
+var mcpAuthSchema = z4.discriminatedUnion("type", [
+  mcpWorkloadAuthSchema,
+  z4.strictObject({ type: z4.literal("oauth") })
+]);
+var engineMcpOAuthTokenRequestSchema = z4.object({
+  environment_mcp_id: z4.string().uuid(),
+  force_refresh: z4.boolean().optional()
+});
+var engineMcpOAuthTokenResponseSchema = z4.object({
+  url: z4.string(),
+  access_token: z4.string(),
+  expires_at: z4.string().nullable()
+});
 
 // ../shared/src/runtime-env.ts
 var REPLICAS_RUNTIME_ENV_ALIASES = {
@@ -2748,15 +2761,30 @@ function createUuidFromHex(value) {
 }
 var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 
+// ../shared/src/automations/github/index.ts
+var REVIEW_REQUESTED_EVENT = "pull_request.review_requested";
+
 // ../shared/src/automations/trigger-schemas.ts
+function getReviewerLoginsError(event, logins) {
+  const isReviewRequested = event === REVIEW_REQUESTED_EVENT;
+  if (isReviewRequested === !!logins?.some((login) => login.trim().replace(/^@+/, ""))) return null;
+  return isReviewRequested ? "The PR review requested trigger needs at least one GitHub username" : "Requested reviewers only apply to the PR review requested trigger";
+}
 var repositoryTriggerConfigSchema = z10.object({
   event: z10.string(),
   repository_ids: z10.array(z10.string().regex(UUID_RE, "must be a repository id")).optional(),
   group_pr_events: z10.boolean().optional(),
-  excluded_actors: z10.array(z10.string()).optional()
+  excluded_actors: z10.array(z10.string()).optional(),
+  reviewer_logins: z10.array(z10.string()).optional()
 });
 var cronTriggerSchema = z10.object({ type: z10.literal("cron"), config: z10.object({ schedule: z10.string(), timezone: z10.string().optional() }) });
-var githubTriggerSchema = z10.object({ type: z10.literal("github"), config: repositoryTriggerConfigSchema });
+var githubTriggerSchema = z10.object({
+  type: z10.literal("github"),
+  config: repositoryTriggerConfigSchema.superRefine((config, ctx) => {
+    const message2 = getReviewerLoginsError(config.event, config.reviewer_logins);
+    if (message2) ctx.addIssue({ code: "custom", message: message2, path: ["reviewer_logins"] });
+  })
+});
 var gitlabTriggerSchema = z10.object({ type: z10.literal("gitlab"), config: repositoryTriggerConfigSchema });
 var automationTriggerSchema = z10.discriminatedUnion("type", [
   cronTriggerSchema,
@@ -2776,7 +2804,7 @@ var createEnvironmentMcpRequestSchema = z11.object({
   transport: z11.enum(ENVIRONMENT_MCP_TRANSPORTS),
   config: z11.union([
     z11.object({ command: z11.string().min(1), args: z11.array(z11.string()).optional(), env: stringMap.optional() }),
-    z11.object({ url: z11.url(), headers: stringMap.optional(), auth: mcpWorkloadAuthSchema.optional() })
+    z11.object({ url: z11.url(), headers: stringMap.optional(), auth: mcpAuthSchema.optional() })
   ]).describe("stdio: `{ command, args, env }`. http/sse: `{ url, headers }`.")
 });
 var updateEnvironmentMcpRequestSchema = createEnvironmentMcpRequestSchema.partial();
@@ -3377,7 +3405,7 @@ Trigger shapes:
 { "type": "cron", "config": { "schedule": "0 9 * * 1-5", "timezone": "UTC" } }
 \`\`\`
 
-GitHub events: \`pull_request.opened\`, \`pull_request.synchronize\`, \`pull_request.merged\`, \`pull_request.closed\`. GitLab events: \`merge_request.opened\`, \`merge_request.updated\`, \`merge_request.merged\`, \`merge_request.closed\`. Use one trigger type family per automation and pick the code host the repositories actually live on.
+GitHub events: \`pull_request.opened\`, \`pull_request.synchronize\`, \`pull_request.review_requested\` (requires a \`reviewer_logins\` list of GitHub usernames), \`pull_request.merged\`, \`pull_request.closed\`. GitLab events: \`merge_request.opened\`, \`merge_request.updated\`, \`merge_request.merged\`, \`merge_request.closed\`. Use one trigger type family per automation and pick the code host the repositories actually live on.
 
 Test the hooks before proposing them: run the drafted warm hook and start hook scripts in this workspace (from \`~/workspaces\`) and fix the earliest failure until both exit 0 on a second run.
 
@@ -7619,6 +7647,7 @@ var EGRESS_SHELL_CONFIG = [
   `EGRESS_UDP_MAX_ASSOCIATIONS=${EGRESS_UDP_MAX_ASSOCIATIONS}`
 ].join("\n");
 var EGRESS_TUNNEL_SERVICE = "replicas-egress.service";
+var EGRESS_ROUTES_SERVICE = "replicas-egress-routes.service";
 var EGRESS_TUNNEL_INTERFACE = "rpxtun0";
 var EGRESS_PATHS = {
   /**
@@ -7631,9 +7660,11 @@ var EGRESS_PATHS = {
   CONFIG_DIR: "/run/replicas-egress",
   CONFIG_FILE: "/run/replicas-egress/config.json",
   REVISION_FILE: "/run/replicas-egress/revision",
+  DESTINATIONS_FILE: "/run/replicas-egress/destinations",
   /** Persistent: this records the workspace's original resolver so the tunnel can put it back, and must outlive a reboot. */
   RESOLV_BACKUP: "/var/lib/replicas-egress-resolv.conf.orig",
   UNIT_FILE: `/etc/systemd/system/${EGRESS_TUNNEL_SERVICE}`,
+  ROUTES_UNIT_FILE: `/etc/systemd/system/${EGRESS_ROUTES_SERVICE}`,
   UP_SCRIPT: "/usr/local/lib/replicas-egress-up",
   DOWN_SCRIPT: "/usr/local/lib/replicas-egress-down"
 };
@@ -9355,6 +9386,7 @@ export {
   workspaceTokenRequestSchema,
   workspaceTokenResponseSchema,
   legacyWorkspaceTokenBundleSchema,
+  engineMcpOAuthTokenResponseSchema,
   SANDBOX_SKILL_DIRS,
   HISTORY_ROOT,
   HISTORY_INDEX_FILENAME,

package/dist/src/{chunk-73446GJ3.js → chunk-DWWWY7HA.js}

@@ -5,15 +5,15 @@ import {
   ENGINE_ENV,
   monolithRequest,
   setAgentCredentialSnapshot
-} from "./chunk-QFJFKNXF.js";
+} from "./chunk-IPOU7CXA.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-FOVYFK2H.js";
+} from "./chunk-SMKDV5DS.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-IPL36DTU.js";
+} from "./chunk-HIRAX6GE.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
@@ -28,7 +28,7 @@ import {
   listOpenAICompatibleModels,
   readOllamaAuthEnv,
   resolveOpenAICompatibleModelsUrl
-} from "./chunk-HLUAG4YU.js";
+} from "./chunk-BOAIMJKK.js";
 
 // src/managers/codex-token-manager.ts
 import { promises as fs } from "fs";
@@ -264,7 +264,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     await this.applyCredentialUpdate(++this.credentialGeneration, async () => {
       await this.applyCredentialsResponse(data);
       setAgentCredentialSnapshot("codex", data);
-      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-R6LN7ANF.js");
+      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-2QL3R5O5.js");
       await restartCodexAspHostIfRunning2();
     });
     await this.start(true);
@@ -285,7 +285,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
       const accountChanged = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.codex?.credentialId !== data.credentialId;
       await this.applyCredentialsResponse(data);
       if (restartOnChange && (accountChanged || CODEX_AUTH_ENV_KEYS.some((key, index) => process.env[key] !== previousEnv[index]))) {
-        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-R6LN7ANF.js");
+        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-2QL3R5O5.js");
         await restartCodexAspHostIfRunning2();
       }
       setAgentCredentialSnapshot("codex", data);

package/dist/src/{chunk-X5VJ2FDA.js → chunk-E35XSXJE.js}

@@ -5,7 +5,7 @@ import {
   extractCommandProtectionCommandText,
   isRecord,
   parseCodeHostPrUrl
-} from "./chunk-HLUAG4YU.js";
+} from "./chunk-BOAIMJKK.js";
 
 // src/services/published-pull-request-urls.ts
 function publishedPullRequestUrls(result) {

package/dist/src/{chunk-IPL36DTU.js → chunk-HIRAX6GE.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES
-} from "./chunk-HLUAG4YU.js";
+} from "./chunk-BOAIMJKK.js";
 
 // src/utils/exec.ts
 import { exec, execFile } from "child_process";

package/dist/src/{chunk-QFJFKNXF.js → chunk-IPOU7CXA.js}

@@ -14,7 +14,7 @@ import {
   isValidAgentProvider,
   parsePosixEnvFile,
   readReplicasRuntimeEnv
-} from "./chunk-HLUAG4YU.js";
+} from "./chunk-BOAIMJKK.js";
 
 // src/runtime-env-loader.ts
 import { readFileSync } from "fs";

package/dist/src/{chunk-FOVYFK2H.js → chunk-SMKDV5DS.js}

@@ -3,10 +3,10 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   execFileAsync
-} from "./chunk-IPL36DTU.js";
+} from "./chunk-HIRAX6GE.js";
 import {
   isVersionBelow
-} from "./chunk-HLUAG4YU.js";
+} from "./chunk-BOAIMJKK.js";
 
 // src/utils/codex-agent-env.ts
 function buildCodexAgentEnv(source = process.env) {
@@ -240,7 +240,7 @@ function getCodexModelProvider(method) {
   if (method === "foundry") return "azure";
   return method === "ollama" || method === "openai-compatible" ? "replicas_openai_compatible" : "openai";
 }
-var ENGINE_PACKAGE_VERSION = "0.1.1027";
+var ENGINE_PACKAGE_VERSION = "0.1.1029";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/{chunk-7BKBAILL.js → chunk-UMI7BLA3.js}

@@ -3,18 +3,18 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   monolithRequest
-} from "./chunk-QFJFKNXF.js";
+} from "./chunk-IPOU7CXA.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-IPL36DTU.js";
+} from "./chunk-HIRAX6GE.js";
 import {
   extractCommandProtectionCommandText,
   findCommandProtectionGitLookups,
   findGitCommitSignals,
   findPrMergeSignals,
   parseCommandProtectionRequest
-} from "./chunk-HLUAG4YU.js";
+} from "./chunk-BOAIMJKK.js";
 
 // src/services/command-protection-service.ts
 import { readFile, stat } from "fs/promises";

package/dist/src/command-protection-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-7BKBAILL.js";
-import "./chunk-QFJFKNXF.js";
-import "./chunk-IPL36DTU.js";
+} from "./chunk-UMI7BLA3.js";
+import "./chunk-IPOU7CXA.js";
+import "./chunk-HIRAX6GE.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-HLUAG4YU.js";
+import "./chunk-BOAIMJKK.js";
 import "./chunk-VEQXQN22.js";
 
 // src/command-protection-hook.ts

package/dist/src/headless-agent.js

@@ -7,12 +7,12 @@ import {
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-FOVYFK2H.js";
-import "./chunk-IPL36DTU.js";
+} from "./chunk-SMKDV5DS.js";
+import "./chunk-HIRAX6GE.js";
 import {
   AGENT,
   headlessAgentRequestSchema
-} from "./chunk-HLUAG4YU.js";
+} from "./chunk-BOAIMJKK.js";
 import "./chunk-VEQXQN22.js";
 
 // src/headless-agent.ts

package/dist/src/index.js

@@ -32,7 +32,7 @@ import {
   reportCommandProtectionBlock,
   resolveDiffBase,
   runGitCommand
-} from "./chunk-7BKBAILL.js";
+} from "./chunk-UMI7BLA3.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -57,7 +57,7 @@ import {
 } from "./chunk-P73LGPQO.js";
 import {
   publishedPullRequestUrls
-} from "./chunk-X5VJ2FDA.js";
+} from "./chunk-E35XSXJE.js";
 import {
   BaseRefreshManager,
   CodexAspAuthMethodChangedError,
@@ -71,7 +71,7 @@ import {
   refreshDelayMs,
   restartCodexAspHost,
   routineRefreshRequest
-} from "./chunk-73446GJ3.js";
+} from "./chunk-DWWWY7HA.js";
 import {
   ENGINE_ENV,
   monolithRequest,
@@ -79,16 +79,16 @@ import {
   readRuntimeEnvFile,
   reloadEngineEnv,
   setAgentCredentialSnapshot
-} from "./chunk-QFJFKNXF.js";
+} from "./chunk-IPOU7CXA.js";
 import {
   AspClient,
   getCodexModelProvider
-} from "./chunk-FOVYFK2H.js";
+} from "./chunk-SMKDV5DS.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execAsync,
   execFileAsync
-} from "./chunk-IPL36DTU.js";
+} from "./chunk-HIRAX6GE.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -218,6 +218,7 @@ import {
   detectAgentQuotaLimit,
   detectEnvironmentAuthMethod,
   detectLanguageByPath,
+  engineMcpOAuthTokenResponseSchema,
   excludeQueuedAcceptedEvents,
   extractErrorText,
   extractFinalResponse,
@@ -318,7 +319,7 @@ import {
   workspaceTokenRequestSchema,
   workspaceTokenResponseSchema,
   wrapInTag
-} from "./chunk-HLUAG4YU.js";
+} from "./chunk-BOAIMJKK.js";
 import {
   cloneMcpConfig,
   ensureCompatibilityImports,
@@ -9636,6 +9637,41 @@ async function applyInfisicalCredentials(data, paths) {
 }
 var infisicalTokenManager = new InfisicalTokenManager();
 
+// src/token-cache.ts
+var TokenCache = class {
+  constructor(maxEntries = Infinity) {
+    this.maxEntries = maxEntries;
+  }
+  maxEntries;
+  cache = /* @__PURE__ */ new Map();
+  inflight = /* @__PURE__ */ new Map();
+  get(key, load, force = false) {
+    const cached = this.cache.get(key);
+    if (!force && cached && cached.refreshAt > Date.now()) return Promise.resolve(createSuccessResult(cached.token));
+    const inflightKey = force ? `${key}\0force` : key;
+    let pending = this.inflight.get(inflightKey);
+    if (!pending) {
+      pending = load().then((result) => {
+        this.cache.delete(key);
+        if (!result.ok) return result;
+        const oldest = this.cache.keys().next();
+        if (this.cache.size >= this.maxEntries && !oldest.done) this.cache.delete(oldest.value);
+        this.cache.set(key, result.data);
+        return createSuccessResult(result.data.token);
+      }).finally(() => this.inflight.delete(inflightKey));
+      this.inflight.set(inflightKey, pending);
+    }
+    return pending;
+  }
+};
+async function requestToken(request, path7, body, failureMessage) {
+  try {
+    return createSuccessResult(await request(path7, { body }));
+  } catch (error) {
+    return createErrorResult({ message: error instanceof Error ? error.message : failureMessage, code: 503 });
+  }
+}
+
 // src/workspace-identity-tokens.ts
 var MIN_REMAINING_MS = 5 * 60 * 1e3;
 var MAX_CACHED_AUDIENCES = 32;
@@ -9644,30 +9680,19 @@ var WorkspaceIdentityTokens = class {
     this.request = request;
   }
   request;
-  cache = /* @__PURE__ */ new Map();
-  inflight = /* @__PURE__ */ new Map();
+  tokens = new TokenCache(MAX_CACHED_AUDIENCES);
   async get(audience = WORKSPACE_IDENTITY_AUDIENCE, awsSourceIdentity = false) {
     const parsed = workspaceAudienceSchema.safeParse(audience);
     if (!parsed.success) {
       return createErrorResult({ message: parsed.error.issues[0]?.message ?? "Invalid audience", code: 400 });
     }
     const key = awsSourceIdentity ? `${audience} aws_source_identity` : audience;
-    const cached = this.cache.get(key);
-    if (cached && Date.parse(cached.expires_at) - Date.now() > MIN_REMAINING_MS) return createSuccessResult(cached);
-    let pending = this.inflight.get(key);
-    if (!pending) {
-      pending = this.mint(audience, awsSourceIdentity, key).finally(() => this.inflight.delete(key));
-      this.inflight.set(key, pending);
-    }
-    return pending;
+    return this.tokens.get(key, () => this.mint(audience, awsSourceIdentity));
   }
-  async mint(audience, awsSourceIdentity, key) {
-    let response;
-    try {
-      response = await this.request("/v1/engine/workspace-identity/token", { body: { audience, aws_source_identity: awsSourceIdentity } });
-    } catch (error) {
-      return createErrorResult({ message: error instanceof Error ? error.message : "Workspace identity request failed", code: 503 });
-    }
+  async mint(audience, awsSourceIdentity) {
+    const requested = await requestToken(this.request, "/v1/engine/workspace-identity/token", { audience, aws_source_identity: awsSourceIdentity }, "Workspace identity request failed");
+    if (!requested.ok) return requested;
+    const response = requested.data;
     if (!response.ok) {
       return createErrorResult({ message: `Workspace identity request failed: ${response.status} ${await response.text()}`, code: response.status === 400 ? 400 : 503 });
     }
@@ -9687,11 +9712,7 @@ var WorkspaceIdentityTokens = class {
         return createErrorResult({ message: "AWS source identity is unavailable from this Replicas version", code: 503 });
       }
     }
-    this.cache.delete(key);
-    const oldest = this.cache.keys().next();
-    if (this.cache.size >= MAX_CACHED_AUDIENCES && !oldest.done) this.cache.delete(oldest.value);
-    this.cache.set(key, token);
-    return createSuccessResult(token);
+    return createSuccessResult({ token, refreshAt: Date.parse(token.expires_at) - MIN_REMAINING_MS });
   }
 };
 var workspaceIdentityTokens = new WorkspaceIdentityTokens();
@@ -9729,27 +9750,85 @@ function resolveIdentityRoute(requestUrl) {
   target.search = url3.search;
   return { target, audience: decode(encodedAudience) };
 }
-function readJsonBody(request) {
+function resolveMcpOAuthRoute(requestUrl) {
+  const url3 = new URL(requestUrl, "http://127.0.0.1");
+  const [, kind, environmentMcpId, ...rest] = url3.pathname.split("/");
+  return kind === "mcp-oauth" && environmentMcpId ? { environmentMcpId, rest, search: url3.search } : null;
+}
+var MAX_MCP_OAUTH_BODY_BYTES = 10 * 1024 * 1024;
+function readBody(request, maxBytes) {
   return new Promise((resolve7) => {
     const chunks = [];
     let size = 0;
     request.on("data", (chunk) => {
       size += chunk.length;
-      if (size <= MAX_TOKEN_REQUEST_BYTES) chunks.push(chunk);
-    });
-    request.on("end", () => {
-      if (size > MAX_TOKEN_REQUEST_BYTES) return resolve7(null);
-      const text = Buffer.concat(chunks).toString("utf8").trim();
-      try {
-        resolve7(text ? JSON.parse(text) : {});
-      } catch {
-        resolve7(null);
-      }
+      if (size > maxBytes) resolve7("too_large");
+      else chunks.push(chunk);
     });
+    request.on("end", () => resolve7(Buffer.concat(chunks)));
     request.on("error", () => resolve7(null));
   });
 }
-function createIdentityProxy(tokens) {
+function forward(request, response, target, token, onResponse = (incoming) => pipeResponse(incoming, response)) {
+  const headers = { host: target.host };
+  for (const [name, value] of Object.entries(request.headers)) {
+    if (!STRIPPED_HEADERS.has(name) && !name.startsWith("x-replicas-") && value !== void 0) headers[name] = value;
+  }
+  headers.authorization = `Bearer ${token}`;
+  const upstream = (target.protocol === "https:" ? https : http).request(target, { method: request.method, headers }, onResponse);
+  upstream.on("error", () => {
+    if (!response.headersSent) response.writeHead(502);
+    response.end();
+  });
+  response.on("close", () => upstream.destroy());
+  return upstream;
+}
+function pipeResponse(incoming, response) {
+  response.writeHead(incoming.statusCode ?? 502, incoming.headers);
+  incoming.pipe(response);
+  response.on("close", () => incoming.destroy());
+}
+async function proxyMcpOAuth(request, response, tokens, route) {
+  const body = await readBody(request, MAX_MCP_OAUTH_BODY_BYTES);
+  if (body === "too_large") {
+    response.writeHead(413, { connection: "close" }).end();
+    return;
+  }
+  if (!body) {
+    response.writeHead(400).end();
+    return;
+  }
+  const send = async (forceRefresh) => {
+    const token = await tokens.get(route.environmentMcpId, forceRefresh);
+    if (!token.ok) {
+      response.writeHead(token.error.code ?? 503).end(token.error.message);
+      return;
+    }
+    const target = new URL(token.data.url);
+    if (route.rest.length) target.pathname = [target.pathname.replace(/\/$/, ""), ...route.rest].join("/");
+    target.search = route.search;
+    forward(request, response, target, token.data.access_token, (incoming) => {
+      if (incoming.statusCode === 401 && !forceRefresh) {
+        incoming.resume();
+        void send(true);
+        return;
+      }
+      pipeResponse(incoming, response);
+    }).end(body);
+  };
+  await send(false);
+}
+async function readJsonBody(request) {
+  const body = await readBody(request, MAX_TOKEN_REQUEST_BYTES);
+  if (!body || body === "too_large") return null;
+  const text = body.toString("utf8").trim();
+  try {
+    return text ? JSON.parse(text) : {};
+  } catch {
+    return null;
+  }
+}
+function createIdentityProxy(tokens, mcpOAuthTokens2) {
   return http.createServer(async (request, response) => {
     const url3 = new URL(request.url ?? "/", "http://127.0.0.1");
     if (url3.pathname === IDENTITY_TOKEN_PATH) {
@@ -9767,6 +9846,11 @@ function createIdentityProxy(tokens) {
       response.end(JSON.stringify(result.ok ? result.data : { error: result.error.message }));
       return;
     }
+    const mcpOAuthRoute = resolveMcpOAuthRoute(request.url ?? "/");
+    if (mcpOAuthRoute) {
+      await proxyMcpOAuth(request, response, mcpOAuthTokens2, mcpOAuthRoute);
+      return;
+    }
     const route = resolveIdentityRoute(request.url ?? "/");
     if (!route) {
       response.writeHead(404).end("Unknown identity route");
@@ -9777,29 +9861,46 @@ function createIdentityProxy(tokens) {
       response.writeHead(token.error.code ?? 503).end(token.error.message);
       return;
     }
-    const headers = { host: route.target.host };
-    for (const [name, value] of Object.entries(request.headers)) {
-      if (!STRIPPED_HEADERS.has(name) && !name.startsWith("x-replicas-") && value !== void 0) headers[name] = value;
-    }
-    headers.authorization = `Bearer ${token.data.token}`;
-    const upstream = (route.target.protocol === "https:" ? https : http).request(
-      route.target,
-      { method: request.method, headers },
-      (incoming) => {
-        response.writeHead(incoming.statusCode ?? 502, incoming.headers);
-        incoming.pipe(response);
-        response.on("close", () => incoming.destroy());
-      }
-    );
-    upstream.on("error", () => {
-      if (!response.headersSent) response.writeHead(502);
-      response.end();
-    });
-    response.on("close", () => upstream.destroy());
-    request.pipe(upstream);
+    request.pipe(forward(request, response, route.target, token.data.token));
   });
 }
 
+// src/mcp-oauth-tokens.ts
+var MIN_REMAINING_MS2 = 60 * 1e3;
+var MAX_CACHE_MS = 5 * 60 * 1e3;
+var McpOAuthTokens = class {
+  constructor(request = monolithRequest) {
+    this.request = request;
+  }
+  request;
+  tokens = new TokenCache();
+  get(environmentMcpId, forceRefresh = false) {
+    return this.tokens.get(environmentMcpId, () => this.fetch(environmentMcpId, forceRefresh), forceRefresh);
+  }
+  async fetch(environmentMcpId, forceRefresh) {
+    const requested = await requestToken(
+      this.request,
+      "/v1/engine/mcp-oauth/token",
+      { environment_mcp_id: environmentMcpId, force_refresh: forceRefresh },
+      "MCP OAuth token request failed"
+    );
+    if (!requested.ok) return requested;
+    const response = requested.data;
+    const data = await response.json().catch(() => null);
+    const parsed = engineMcpOAuthTokenResponseSchema.safeParse(data);
+    if (!response.ok || !parsed.success) {
+      const message = isRecord(data) && typeof data.error === "string" ? data.error : `MCP OAuth token request failed: ${response.status}`;
+      return createErrorResult({ message, code: response.ok ? 502 : response.status });
+    }
+    const remaining = parsed.data.expires_at ? Date.parse(parsed.data.expires_at) - Date.now() : Infinity;
+    return createSuccessResult({
+      token: parsed.data,
+      refreshAt: Date.now() + Math.min(Math.max(remaining - MIN_REMAINING_MS2, remaining / 2), MAX_CACHE_MS)
+    });
+  }
+};
+var mcpOAuthTokens = new McpOAuthTokens();
+
 // src/lifecycle.ts
 import { readFileSync, rmSync, writeFileSync } from "fs";
 var CLAIM_FILE = "/tmp/replicas-engine.claim";
@@ -50655,7 +50756,7 @@ data: ${JSON.stringify(payload)}
 }
 async function parseBody(req, res) {
   try {
-    const body = await readBody(req);
+    const body = await readBody2(req);
     if (!body || typeof body !== "object") {
       sendJson(res, 400, { ok: false, error: "Invalid request body" });
       return null;
@@ -50666,7 +50767,7 @@ async function parseBody(req, res) {
     return null;
   }
 }
-function readBody(req) {
+function readBody2(req) {
   return new Promise((resolve7, reject) => {
     let size = 0;
     const chunks = [];
@@ -64677,7 +64778,7 @@ async function startBackgroundServices(signal) {
   heartbeatService.start(bootTimeMs);
   if (!identityProxyStarted) {
     identityProxyStarted = true;
-    createIdentityProxy(workspaceIdentityTokens).on("error", (error) => console.error("[identity-proxy] failed to listen:", error)).listen(IDENTITY_PROXY_PORT, "127.0.0.1");
+    createIdentityProxy(workspaceIdentityTokens, mcpOAuthTokens).on("error", (error) => console.error("[identity-proxy] failed to listen:", error)).listen(IDENTITY_PROXY_PORT, "127.0.0.1");
   }
   for (const manager of tokenManagers.slice(1)) {
     if (signal.aborted) return;

package/dist/src/post-tool-pr-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   publishedPullRequestUrls
-} from "./chunk-X5VJ2FDA.js";
+} from "./chunk-E35XSXJE.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
 import {
   shouldRefreshPullRequests
-} from "./chunk-HLUAG4YU.js";
+} from "./chunk-BOAIMJKK.js";
 import "./chunk-VEQXQN22.js";
 
 // src/services/post-tool-pr-notifier.ts

package/dist/src/subagent-mcp.js

@@ -9,7 +9,7 @@ import {
   spawnSubagentRequestSchema,
   subagentResponseSchema,
   waitSubagentRequestSchema
-} from "./chunk-HLUAG4YU.js";
+} from "./chunk-BOAIMJKK.js";
 import "./chunk-VEQXQN22.js";
 
 // src/subagent-mcp.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.1027",
+  "version": "0.1.1029",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",