replicas-engine 0.1.1259 → 0.1.1260

package/dist/src/{asp-host-2UZIRESH.js → asp-host-Q7ZKKHP5.js}

@@ -8,12 +8,12 @@ import {
   listRunningCodexModels,
   restartCodexAspHost,
   restartCodexAspHostIfRunning
-} from "./chunk-FGY76DQS.js";
-import "./chunk-Z4XYSDTH.js";
-import "./chunk-J6HOKJPO.js";
-import "./chunk-2FL5CZ6M.js";
+} from "./chunk-Q67KCHMN.js";
+import "./chunk-ARSZGGKG.js";
+import "./chunk-XCTN3EYU.js";
+import "./chunk-DEE2MIUW.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-YRQOIVBF.js";
+import "./chunk-WINIX7II.js";
 import "./chunk-VEQXQN22.js";
 export {
   CODEX_ULTRAFAST_SERVICE_TIER,

package/dist/src/{chunk-Z4XYSDTH.js → chunk-ARSZGGKG.js}

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-2FL5CZ6M.js";
+} from "./chunk-DEE2MIUW.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -18,8 +18,9 @@ import {
   isRecord,
   isValidAgentProvider,
   parsePosixEnvFile,
+  provisionedDeviceSchema,
   readReplicasRuntimeEnv
-} from "./chunk-YRQOIVBF.js";
+} from "./chunk-WINIX7II.js";
 
 // src/runtime-env-loader.ts
 import { readFileSync } from "fs";
@@ -101,6 +102,15 @@ function parseCodexAuthMethod(value) {
 function parseMuseAuthMethod(value) {
   return value === "oauth" || value === "api_key" ? value : void 0;
 }
+function parseDevices(value) {
+  if (!value) return [];
+  try {
+    const parsed = provisionedDeviceSchema.array().safeParse(JSON.parse(value));
+    return parsed.success ? parsed.data : [];
+  } catch {
+    return [];
+  }
+}
 function parseAgentCredentialSnapshots(value) {
   if (!value) return {};
   try {
@@ -157,9 +167,12 @@ function loadEngineEnv(runtimeEnvValues) {
     REPLICAS_AGENT_CREDENTIALS: parseAgentCredentialSnapshots(readEnv("REPLICAS_AGENT_CREDENTIALS")),
     REPLICAS_ENV_SYSTEM_PROMPT: readEnv("REPLICAS_ENV_SYSTEM_PROMPT"),
     REPLICAS_ENV_START_HOOK: readEnv("REPLICAS_ENV_START_HOOK"),
+    REPLICAS_ENV_DEVICES: parseDevices(readEnv("REPLICAS_ENV_DEVICES")),
+    TS_AUTHKEY: readEnv("TS_AUTHKEY"),
     REPLICAS_DISABLE_AUTO_START_HOOKS: readEnv("REPLICAS_DISABLE_AUTO_START_HOOKS")?.toLowerCase() === "true",
     REPLICAS_MAX_LIVE_AGENT_PROCESSES: Number(readEnv("REPLICAS_MAX_LIVE_AGENT_PROCESSES")) || void 0
   };
+  delete process.env.REPLICAS_ENV_DEVICES;
   return env;
 }
 var ENGINE_ENV = loadEngineEnv();

package/dist/src/{chunk-LDA3D6FQ.js → chunk-CNWOP7LH.js}

@@ -5,14 +5,14 @@ import {
   getOriginDefaultBranch,
   monolithRequest,
   runGitCommand
-} from "./chunk-Z4XYSDTH.js";
+} from "./chunk-ARSZGGKG.js";
 import {
   extractCommandProtectionCommandText,
   findCommandProtectionGitLookups,
   findGitCommitSignals,
   findPrMergeSignals,
   parseCommandProtectionRequest
-} from "./chunk-YRQOIVBF.js";
+} from "./chunk-WINIX7II.js";
 
 // src/services/command-protection-service.ts
 import { readFile, stat } from "fs/promises";

package/dist/src/{chunk-2FL5CZ6M.js → chunk-DEE2MIUW.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES
-} from "./chunk-YRQOIVBF.js";
+} from "./chunk-WINIX7II.js";
 
 // src/utils/exec.ts
 import { exec, execFile } from "child_process";

package/dist/src/{chunk-TSFAQGEX.js → chunk-IRNCCK42.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   AspClient
-} from "./chunk-J6HOKJPO.js";
+} from "./chunk-XCTN3EYU.js";
 import {
   ASTER_BASE_URL,
   ASTER_PROVIDER,
@@ -13,7 +13,7 @@ import {
   isRecord,
   readOllamaAuthEnv,
   readOpenAICompatibleAuthEnv
-} from "./chunk-YRQOIVBF.js";
+} from "./chunk-WINIX7II.js";
 
 // src/managers/codex-asp/notification-dispatch.ts
 var TURN_STARTED_METHOD = "turn/started";

package/dist/src/{chunk-FGY76DQS.js → chunk-Q67KCHMN.js}

@@ -10,15 +10,15 @@ import {
   resolveDiffBase,
   runGitCommand,
   setAgentCredentialSnapshot
-} from "./chunk-Z4XYSDTH.js";
+} from "./chunk-ARSZGGKG.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-J6HOKJPO.js";
+} from "./chunk-XCTN3EYU.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-2FL5CZ6M.js";
+} from "./chunk-DEE2MIUW.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
@@ -55,7 +55,7 @@ import {
   resolveOpenAICompatibleModelsUrl,
   splitMothershipInstructions,
   withTimeout
-} from "./chunk-YRQOIVBF.js";
+} from "./chunk-WINIX7II.js";
 
 // src/managers/codex-token-manager.ts
 import { promises as fs } from "fs";
@@ -291,7 +291,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     await this.applyCredentialUpdate(++this.credentialGeneration, async () => {
       await this.applyCredentialsResponse(data);
       setAgentCredentialSnapshot("codex", data);
-      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-2UZIRESH.js");
+      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-Q7ZKKHP5.js");
       await restartCodexAspHostIfRunning2();
     });
     await this.start(true);
@@ -313,7 +313,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
       const accountChanged = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.codex?.credentialId !== data.credentialId;
       await this.applyCredentialsResponse(data);
       if (restartOnChange && (accountChanged || CODEX_AUTH_ENV_KEYS.some((key, index) => process.env[key] !== previousEnv[index]))) {
-        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-2UZIRESH.js");
+        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-Q7ZKKHP5.js");
         await restartCodexAspHostIfRunning2();
       }
       setAgentCredentialSnapshot("codex", data);

package/dist/src/{chunk-YRQOIVBF.js → chunk-WINIX7II.js}

@@ -2387,6 +2387,20 @@ var createEnvironmentMcpRequestSchema = z14.object({
   ]).describe("stdio: `{ command, args, env }`. http/sse: `{ url, headers }`.")
 });
 var updateEnvironmentMcpRequestSchema = createEnvironmentMcpRequestSchema.partial();
+var createEnvironmentDeviceRequestSchema = z14.object({
+  name: z14.string().regex(/^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/, "Use lowercase letters, numbers and dashes").describe("SSH alias in workspaces, e.g. `mac-mini` for `ssh mac-mini`."),
+  host: z14.string().max(253).regex(/^(?:[A-Za-z0-9](?:[A-Za-z0-9.-]*[A-Za-z0-9])?|[0-9A-Fa-f:]+)$/, "Enter a hostname or IP address").describe("Hostname or IP, such as a Tailscale MagicDNS name (`mac-mini`) or a public address."),
+  port: z14.number().int().min(1).max(65535).optional().describe("SSH port. Defaults to 22."),
+  username: z14.string().regex(/^[A-Za-z0-9_][A-Za-z0-9._-]{0,63}$/, "Enter the account name on the device").describe("Account the agent signs in as.")
+});
+var updateEnvironmentDeviceRequestSchema = createEnvironmentDeviceRequestSchema.partial();
+var provisionedDeviceSchema = z14.object({
+  name: z14.string(),
+  host: z14.string(),
+  port: z14.number(),
+  username: z14.string(),
+  private_key: z14.string()
+});
 
 // ../shared/src/routes/workspaces.ts
 import { z as z15 } from "zod";
@@ -2492,6 +2506,7 @@ var updateEnvironmentMcpToolInputSchema = z16.object({
   mcp_id: z16.string().describe("MCP ID"),
   ...updateEnvironmentMcpRequestSchema.shape
 });
+var createEnvironmentDeviceToolInputSchema = z16.object({ ...environmentMcpPath, ...createEnvironmentDeviceRequestSchema.shape });
 
 // ../shared/src/scout.ts
 var SCOUT_SOURCE_TYPES = ["slack", "linear"];
@@ -10465,6 +10480,7 @@ export {
   workspaceTokenResponseSchema,
   legacyWorkspaceTokenBundleSchema,
   engineMcpOAuthTokenResponseSchema,
+  provisionedDeviceSchema,
   SUBAGENT_SERVICE_TIERS,
   serviceTierRequestFields,
   TERMINAL_RTC_ICE_SERVER,

package/dist/src/{chunk-J6HOKJPO.js → chunk-XCTN3EYU.js}

@@ -3,10 +3,10 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   execFileAsync
-} from "./chunk-2FL5CZ6M.js";
+} from "./chunk-DEE2MIUW.js";
 import {
   isVersionBelow
-} from "./chunk-YRQOIVBF.js";
+} from "./chunk-WINIX7II.js";
 
 // src/utils/codex-agent-env.ts
 function buildCodexAgentEnv(source = process.env) {
@@ -240,7 +240,7 @@ function getCodexModelProvider(method) {
   if (method === "foundry") return "azure";
   return method === "ollama" || method === "openai-compatible" ? "replicas_openai_compatible" : "openai";
 }
-var ENGINE_PACKAGE_VERSION = "0.1.1259";
+var ENGINE_PACKAGE_VERSION = "0.1.1260";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/{chunk-XUNIYFH5.js → chunk-XDF5QDJU.js}

@@ -5,7 +5,7 @@ import {
   extractCommandProtectionCommandText,
   isRecord,
   parseCodeHostPrUrl
-} from "./chunk-YRQOIVBF.js";
+} from "./chunk-WINIX7II.js";
 
 // src/services/published-pull-request-urls.ts
 function publishedPullRequestUrls(result) {

package/dist/src/command-protection-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-LDA3D6FQ.js";
-import "./chunk-Z4XYSDTH.js";
-import "./chunk-2FL5CZ6M.js";
+} from "./chunk-CNWOP7LH.js";
+import "./chunk-ARSZGGKG.js";
+import "./chunk-DEE2MIUW.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-YRQOIVBF.js";
+import "./chunk-WINIX7II.js";
 import "./chunk-VEQXQN22.js";
 
 // src/command-protection-hook.ts

package/dist/src/headless-agent.js

@@ -13,12 +13,12 @@ import {
   recoverCompletedTurn,
   spawnMuseMsp,
   startMuseSession
-} from "./chunk-TSFAQGEX.js";
+} from "./chunk-IRNCCK42.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-J6HOKJPO.js";
-import "./chunk-2FL5CZ6M.js";
+} from "./chunk-XCTN3EYU.js";
+import "./chunk-DEE2MIUW.js";
 import {
   AGENT,
   OPENCODE_GO_PROVIDER,
@@ -28,7 +28,7 @@ import {
   headlessAgentUsagePath,
   isRecord,
   withTimeout
-} from "./chunk-YRQOIVBF.js";
+} from "./chunk-WINIX7II.js";
 import "./chunk-VEQXQN22.js";
 
 // src/headless-agent.ts