replicas-engine 0.1.1246 → 0.1.1248

package/dist/src/{asp-host-7XJAB2XD.js → asp-host-DFIT2PB7.js}

@@ -8,12 +8,12 @@ import {
   listRunningCodexModels,
   restartCodexAspHost,
   restartCodexAspHostIfRunning
-} from "./chunk-GLQBX74T.js";
-import "./chunk-B2IU3EA4.js";
-import "./chunk-ASZPCUVD.js";
-import "./chunk-N4MLANHG.js";
+} from "./chunk-3V6VDRU5.js";
+import "./chunk-6PVW5AKP.js";
+import "./chunk-P3G4OERE.js";
+import "./chunk-3C2WTKME.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-BITFRIB7.js";
+import "./chunk-7QJWP5ZL.js";
 import "./chunk-VEQXQN22.js";
 export {
   CODEX_ULTRAFAST_SERVICE_TIER,

package/dist/src/{chunk-N4MLANHG.js → chunk-3C2WTKME.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES
-} from "./chunk-BITFRIB7.js";
+} from "./chunk-7QJWP5ZL.js";
 
 // src/utils/exec.ts
 import { exec, execFile } from "child_process";

package/dist/src/{chunk-GLQBX74T.js → chunk-3V6VDRU5.js}

@@ -10,15 +10,15 @@ import {
   resolveDiffBase,
   runGitCommand,
   setAgentCredentialSnapshot
-} from "./chunk-B2IU3EA4.js";
+} from "./chunk-6PVW5AKP.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-ASZPCUVD.js";
+} from "./chunk-P3G4OERE.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-N4MLANHG.js";
+} from "./chunk-3C2WTKME.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
@@ -55,7 +55,7 @@ import {
   resolveOpenAICompatibleModelsUrl,
   splitMothershipInstructions,
   withTimeout
-} from "./chunk-BITFRIB7.js";
+} from "./chunk-7QJWP5ZL.js";
 
 // src/managers/codex-token-manager.ts
 import { promises as fs } from "fs";
@@ -291,7 +291,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     await this.applyCredentialUpdate(++this.credentialGeneration, async () => {
       await this.applyCredentialsResponse(data);
       setAgentCredentialSnapshot("codex", data);
-      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-7XJAB2XD.js");
+      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-DFIT2PB7.js");
       await restartCodexAspHostIfRunning2();
     });
     await this.start(true);
@@ -313,7 +313,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
       const accountChanged = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.codex?.credentialId !== data.credentialId;
       await this.applyCredentialsResponse(data);
       if (restartOnChange && (accountChanged || CODEX_AUTH_ENV_KEYS.some((key, index) => process.env[key] !== previousEnv[index]))) {
-        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-7XJAB2XD.js");
+        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-DFIT2PB7.js");
         await restartCodexAspHostIfRunning2();
       }
       setAgentCredentialSnapshot("codex", data);

package/dist/src/{chunk-G5LEEPN7.js → chunk-4AIHQBEA.js}

@@ -5,14 +5,14 @@ import {
   getOriginDefaultBranch,
   monolithRequest,
   runGitCommand
-} from "./chunk-B2IU3EA4.js";
+} from "./chunk-6PVW5AKP.js";
 import {
   extractCommandProtectionCommandText,
   findCommandProtectionGitLookups,
   findGitCommitSignals,
   findPrMergeSignals,
   parseCommandProtectionRequest
-} from "./chunk-BITFRIB7.js";
+} from "./chunk-7QJWP5ZL.js";
 
 // src/services/command-protection-service.ts
 import { readFile, stat } from "fs/promises";

package/dist/src/{chunk-B2IU3EA4.js → chunk-6PVW5AKP.js}

@@ -4,11 +4,12 @@ const require = __createRequire(import.meta.url);
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-N4MLANHG.js";
+} from "./chunk-3C2WTKME.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
 import {
+  ENGINE_PORT,
   REPLICAS_RUNTIME_ENV_ALIASES,
   agentCredentialSnapshotSchema,
   createErrorResult,
@@ -18,7 +19,7 @@ import {
   isValidAgentProvider,
   parsePosixEnvFile,
   readReplicasRuntimeEnv
-} from "./chunk-BITFRIB7.js";
+} from "./chunk-7QJWP5ZL.js";
 
 // src/runtime-env-loader.ts
 import { readFileSync } from "fs";
@@ -63,7 +64,7 @@ function readSandboxImageVersion() {
 }
 function parsePort(value) {
   if (!value) {
-    return 3737;
+    return ENGINE_PORT;
   }
   const parsed = Number(value);
   if (!Number.isInteger(parsed) || parsed <= 0) {

package/dist/src/{chunk-BITFRIB7.js → chunk-7QJWP5ZL.js}

@@ -1510,6 +1510,7 @@ var ENGINE_STREAM_LAST_EVENT_ID_HEADER = "Last-Event-ID";
 var ENGINE_HEALTH_WAIT_HEADER = "X-Replicas-Health-Wait";
 var ENGINE_HEALTH_WAIT_QUERY_PARAM = "wait_ms";
 var ENGINE_HEALTH_MAX_WAIT_MS = 2e3;
+var ENGINE_PROXY_SAFE_HEALTH_PATH = "/engine-health";
 var ENGINE_ACTIVATE_PATH = "/lifecycle/activate";
 var ENGINE_SLEEP_PATH = "/lifecycle/sleep";
 var updateChatDisplayNameRequestSchema = z4.object({
@@ -2002,6 +2003,10 @@ function parsePosixEnvFile(content) {
   return result;
 }
 
+// ../shared/src/engine/environment.ts
+var ENGINE_PORT = 3737;
+var DESKTOP_STREAM_PORT = 6080;
+
 // ../shared/src/git.ts
 var GIT_CREDENTIAL_HELPER_FILENAME = ".git-credential-replicas";
 var GITHUB_CREDENTIAL_REFRESH_PATH = "/git-credentials/github/refresh";
@@ -2066,7 +2071,7 @@ refresh_credential() {
   esac
   [ -n "\${REPLICAS_ENGINE_SECRET:-}" ] || return 1
   command -v curl >/dev/null 2>&1 || return 1
-  curl --silent --fail --connect-timeout 1 --max-time 5     -X POST     -H "X-Replicas-Engine-Secret: $REPLICAS_ENGINE_SECRET"     "http://127.0.0.1:\${REPLICAS_ENGINE_PORT:-3737}$refresh_path"     >/dev/null 2>&1
+  curl --silent --fail --connect-timeout 1 --max-time 5     -X POST     -H "X-Replicas-Engine-Secret: $REPLICAS_ENGINE_SECRET"     "http://127.0.0.1:\${REPLICAS_ENGINE_PORT:-${ENGINE_PORT}}$refresh_path"     >/dev/null 2>&1
 }
 
 if [ "$1" = "get" ]; then
@@ -2136,9 +2141,6 @@ var headlessAgentRequestSchema = z7.object({
 });
 var headlessAgentUsagePath = (outputPath) => `${outputPath}.usage`;
 
-// ../shared/src/engine/environment.ts
-var DESKTOP_STREAM_PORT = 6080;
-
 // ../shared/src/sse.ts
 function parseSseChunk(chunk) {
   let data = "";
@@ -4994,6 +4996,7 @@ var DEFAULT_USER_PREFERENCES = {
   open_prs_in_graphite: false,
   open_links_in_desktop_app: false,
   port_forwarding: false,
+  spotify_controls: false,
   mothership_intro_seen: false,
   follow_up_mode: "steer",
   memory_enabled: null,
@@ -10384,6 +10387,7 @@ export {
   ENGINE_HEALTH_WAIT_HEADER,
   ENGINE_HEALTH_WAIT_QUERY_PARAM,
   ENGINE_HEALTH_MAX_WAIT_MS,
+  ENGINE_PROXY_SAFE_HEALTH_PATH,
   ENGINE_ACTIVATE_PATH,
   ENGINE_SLEEP_PATH,
   updateChatDisplayNameRequestSchema,
@@ -10478,6 +10482,8 @@ export {
   readReplicasRuntimeEnv,
   shellQuotePosix,
   parsePosixEnvFile,
+  ENGINE_PORT,
+  DESKTOP_STREAM_PORT,
   GIT_CREDENTIAL_HELPER_FILENAME,
   GITHUB_CREDENTIAL_REFRESH_PATH,
   GITLAB_CREDENTIAL_REFRESH_PATH,
@@ -10509,7 +10515,6 @@ export {
   serializeMuseAuthFile,
   isVersionBelow,
   hasChatStarted,
-  DESKTOP_STREAM_PORT,
   CODEX_AUTH_ENV_KEYS,
   codexAuthEnvFromResponse,
   CODEX_AUTH_ENV_KEYS_BY_METHOD,

package/dist/src/{chunk-IBAF7TOR.js → chunk-EVNSRGKX.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   AspClient
-} from "./chunk-ASZPCUVD.js";
+} from "./chunk-P3G4OERE.js";
 import {
   ASTER_BASE_URL,
   ASTER_PROVIDER,
@@ -13,7 +13,7 @@ import {
   isRecord,
   readOllamaAuthEnv,
   readOpenAICompatibleAuthEnv
-} from "./chunk-BITFRIB7.js";
+} from "./chunk-7QJWP5ZL.js";
 
 // src/managers/codex-asp/notification-dispatch.ts
 var TURN_STARTED_METHOD = "turn/started";

package/dist/src/{chunk-M3IIIYS7.js → chunk-FQZ6YTN2.js}

@@ -5,7 +5,7 @@ import {
   extractCommandProtectionCommandText,
   isRecord,
   parseCodeHostPrUrl
-} from "./chunk-BITFRIB7.js";
+} from "./chunk-7QJWP5ZL.js";
 
 // src/services/published-pull-request-urls.ts
 function publishedPullRequestUrls(result) {

package/dist/src/{chunk-ASZPCUVD.js → chunk-P3G4OERE.js}

@@ -3,10 +3,10 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   execFileAsync
-} from "./chunk-N4MLANHG.js";
+} from "./chunk-3C2WTKME.js";
 import {
   isVersionBelow
-} from "./chunk-BITFRIB7.js";
+} from "./chunk-7QJWP5ZL.js";
 
 // src/utils/codex-agent-env.ts
 function buildCodexAgentEnv(source = process.env) {
@@ -240,7 +240,7 @@ function getCodexModelProvider(method) {
   if (method === "foundry") return "azure";
   return method === "ollama" || method === "openai-compatible" ? "replicas_openai_compatible" : "openai";
 }
-var ENGINE_PACKAGE_VERSION = "0.1.1246";
+var ENGINE_PACKAGE_VERSION = "0.1.1248";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/command-protection-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-G5LEEPN7.js";
-import "./chunk-B2IU3EA4.js";
-import "./chunk-N4MLANHG.js";
+} from "./chunk-4AIHQBEA.js";
+import "./chunk-6PVW5AKP.js";
+import "./chunk-3C2WTKME.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-BITFRIB7.js";
+import "./chunk-7QJWP5ZL.js";
 import "./chunk-VEQXQN22.js";
 
 // src/command-protection-hook.ts

package/dist/src/headless-agent.js

@@ -13,12 +13,12 @@ import {
   recoverCompletedTurn,
   spawnMuseMsp,
   startMuseSession
-} from "./chunk-IBAF7TOR.js";
+} from "./chunk-EVNSRGKX.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-ASZPCUVD.js";
-import "./chunk-N4MLANHG.js";
+} from "./chunk-P3G4OERE.js";
+import "./chunk-3C2WTKME.js";
 import {
   AGENT,
   OPENCODE_GO_PROVIDER,
@@ -28,7 +28,7 @@ import {
   headlessAgentUsagePath,
   isRecord,
   withTimeout
-} from "./chunk-BITFRIB7.js";
+} from "./chunk-7QJWP5ZL.js";
 import "./chunk-VEQXQN22.js";
 
 // src/headless-agent.ts

package/dist/src/index.js

@@ -27,7 +27,7 @@ import {
   evaluateCommandProtection,
   extractToolCommand,
   reportCommandProtectionBlock
-} from "./chunk-G5LEEPN7.js";
+} from "./chunk-4AIHQBEA.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -64,10 +64,10 @@ import {
   spawnMuseMsp,
   startMuseSession,
   uuidV7
-} from "./chunk-IBAF7TOR.js";
+} from "./chunk-EVNSRGKX.js";
 import {
   publishedPullRequestUrls
-} from "./chunk-M3IIIYS7.js";
+} from "./chunk-FQZ6YTN2.js";
 import {
   ACCOUNT_RATE_LIMITS_READ_METHOD,
   AsyncLock,
@@ -140,7 +140,7 @@ import {
   timestampFromSeconds,
   upsertCredentialFileLines,
   writeSecureCredentialFile
-} from "./chunk-GLQBX74T.js";
+} from "./chunk-3V6VDRU5.js";
 import {
   ENGINE_ENV,
   monolithRequest,
@@ -149,15 +149,15 @@ import {
   reloadEngineEnv,
   resolveDiffBase,
   setAgentCredentialSnapshot
-} from "./chunk-B2IU3EA4.js";
+} from "./chunk-6PVW5AKP.js";
 import {
   getCodexModelProvider
-} from "./chunk-ASZPCUVD.js";
+} from "./chunk-P3G4OERE.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execAsync,
   execFileAsync
-} from "./chunk-N4MLANHG.js";
+} from "./chunk-3C2WTKME.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -211,6 +211,7 @@ import {
   ENGINE_HEALTH_MAX_WAIT_MS,
   ENGINE_HEALTH_WAIT_HEADER,
   ENGINE_HEALTH_WAIT_QUERY_PARAM,
+  ENGINE_PROXY_SAFE_HEALTH_PATH,
   ENGINE_SEND_MESSAGE_FAILED_ERROR,
   ENGINE_SLEEP_PATH,
   ENGINE_STREAM_LAST_EVENT_ID_HEADER,
@@ -395,7 +396,7 @@ import {
   workspaceTokenRequestSchema,
   workspaceTokenResponseSchema,
   wrapInTag
-} from "./chunk-BITFRIB7.js";
+} from "./chunk-7QJWP5ZL.js";
 import {
   cloneMcpConfig,
   ensureCompatibilityImports,
@@ -63789,7 +63790,7 @@ var chatService = new ChatService(
   agentChatActivityTrackerService,
   agentTokenUsageTracker
 );
-app.get("/health", async (c) => {
+app.on("GET", ["/health", ENGINE_PROXY_SAFE_HEALTH_PATH], async (c) => {
   const requestedWaitMs = Number(c.req.query(ENGINE_HEALTH_WAIT_QUERY_PARAM));
   const waitMs = Number.isFinite(requestedWaitMs) ? Math.min(Math.max(requestedWaitMs, 0), ENGINE_HEALTH_MAX_WAIT_MS) : 0;
   if (!lifecycle.active && waitMs > 0) {

package/dist/src/post-tool-pr-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   publishedPullRequestUrls
-} from "./chunk-M3IIIYS7.js";
+} from "./chunk-FQZ6YTN2.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
 import {
   shouldRefreshPullRequests
-} from "./chunk-BITFRIB7.js";
+} from "./chunk-7QJWP5ZL.js";
 import "./chunk-VEQXQN22.js";
 
 // src/services/post-tool-pr-notifier.ts

package/dist/src/subagent-mcp.js

@@ -11,7 +11,7 @@ import {
   spawnSubagentRequestSchema,
   subagentResponseSchema,
   waitSubagentRequestSchema
-} from "./chunk-BITFRIB7.js";
+} from "./chunk-7QJWP5ZL.js";
 import "./chunk-VEQXQN22.js";
 
 // src/subagent-mcp.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.1246",
+  "version": "0.1.1248",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",