replicas-engine 0.1.1279 → 0.1.1281

package/dist/src/{asp-host-CYLNJ6JB.js → asp-host-VCIWMQXN.js}

@@ -8,12 +8,12 @@ import {
   listRunningCodexModels,
   restartCodexAspHost,
   restartCodexAspHostIfRunning
-} from "./chunk-VCCUBYU3.js";
-import "./chunk-HUUEA35W.js";
-import "./chunk-GJN2TDJ7.js";
-import "./chunk-CQR3GSM4.js";
+} from "./chunk-JPOHWGGI.js";
+import "./chunk-4J7EZ245.js";
+import "./chunk-5OYGVDKL.js";
+import "./chunk-3MSBE24K.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-47JJX56J.js";
+import "./chunk-5YU4KQIU.js";
 import "./chunk-VEQXQN22.js";
 export {
   CODEX_ULTRAFAST_SERVICE_TIER,

package/dist/src/{chunk-CQR3GSM4.js → chunk-3MSBE24K.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES
-} from "./chunk-47JJX56J.js";
+} from "./chunk-5YU4KQIU.js";
 
 // src/utils/exec.ts
 import { exec, execFile } from "child_process";

package/dist/src/{chunk-HUUEA35W.js → chunk-4J7EZ245.js}

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-CQR3GSM4.js";
+} from "./chunk-3MSBE24K.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -22,7 +22,7 @@ import {
   provisionedDeviceSchema,
   readReplicasRuntimeEnv,
   serializePosixEnvFile
-} from "./chunk-47JJX56J.js";
+} from "./chunk-5YU4KQIU.js";
 
 // src/runtime-env-loader.ts
 import { readFileSync } from "fs";

package/dist/src/{chunk-GJN2TDJ7.js → chunk-5OYGVDKL.js}

@@ -3,10 +3,10 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   execFileAsync
-} from "./chunk-CQR3GSM4.js";
+} from "./chunk-3MSBE24K.js";
 import {
   isVersionBelow
-} from "./chunk-47JJX56J.js";
+} from "./chunk-5YU4KQIU.js";
 
 // src/utils/codex-agent-env.ts
 function buildCodexAgentEnv(source = process.env) {
@@ -240,7 +240,7 @@ function getCodexModelProvider(method) {
   if (method === "foundry") return "azure";
   return method === "ollama" || method === "openai-compatible" ? "replicas_openai_compatible" : "openai";
 }
-var ENGINE_PACKAGE_VERSION = "0.1.1279";
+var ENGINE_PACKAGE_VERSION = "0.1.1280";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/{chunk-47JJX56J.js → chunk-5YU4KQIU.js}

@@ -167,14 +167,20 @@ async function fetchModelsDevCatalog() {
 
 // ../shared/src/credentials/opencode-go.ts
 var OPENCODE_GO_PROVIDER = "opencode-go";
+var OPENCODE_ZEN_PROVIDER = "opencode";
 var OPENCODE_GO_BASE_URL = "https://opencode.ai/zen/go/v1";
 var DEFAULT_OPENCODE_GO_MODEL = "glm-5.3";
-async function fetchOpenCodeGoCatalog(fallbackModelIds = [DEFAULT_OPENCODE_GO_MODEL]) {
+function isOpenCodeZenModel(model2) {
+  return model2.startsWith(`${OPENCODE_ZEN_PROVIDER}/`);
+}
+async function fetchOpenCodeGoCatalog(agent, fallbackModelIds = [DEFAULT_OPENCODE_GO_MODEL]) {
   try {
-    const provider2 = (await fetchModelsDevCatalog())[OPENCODE_GO_PROVIDER];
+    const catalog = await fetchModelsDevCatalog();
+    const provider2 = catalog[OPENCODE_GO_PROVIDER];
     if (!provider2) throw new Error("OpenCode Go model catalog is unavailable");
+    const zenFreeModels = agent === "opencode" ? Object.entries(catalog[OPENCODE_ZEN_PROVIDER]?.models ?? {}).filter(([, definition]) => definition.cost?.input === 0).map(([id, definition]) => [`${OPENCODE_ZEN_PROVIDER}/${id}`, definition]) : [];
     const models = Object.fromEntries(
-      Object.entries(provider2.models).filter(([, definition]) => definition.status !== "deprecated" && definition.status !== "alpha").map(([id, definition]) => [id, {
+      [...Object.entries(provider2.models), ...zenFreeModels].filter(([, definition]) => definition.status !== "deprecated" && definition.status !== "alpha").map(([id, definition]) => [id, {
         id: definition.id ?? id,
         name: definition.name,
         api: definition.provider?.npm === "@ai-sdk/anthropic" ? "anthropic-messages" : definition.provider?.npm === "@ai-sdk/openai" ? "openai-responses" : void 0,
@@ -187,7 +193,7 @@ async function fetchOpenCodeGoCatalog(fallbackModelIds = [DEFAULT_OPENCODE_GO_MO
   } catch {
     return {
       authoritative: false,
-      models: Object.fromEntries(fallbackModelIds.map((id) => [id, {
+      models: Object.fromEntries(fallbackModelIds.filter((id) => agent === "opencode" || !isOpenCodeZenModel(id)).map((id) => [id, {
         id,
         name: id === DEFAULT_OPENCODE_GO_MODEL ? "GLM 5.3" : id
       }]))
@@ -4496,6 +4502,7 @@ In agent mode the CLI hides commands that don't make sense for in-workspace agen
 | "Make an automation that runs when a PR opens on \`acme/web\`" | \`replicas automation create ... --trigger-github pull_request.opened --trigger-github-repos acme/web\` |
 | "Make an automation that runs when an MR opens on \`acme/web\`" | \`replicas automation create ... --trigger-gitlab merge_request.opened --trigger-gitlab-repos acme/web\` |
 | "Ignore Dependabot for this PR automation" | \`replicas automation edit <id> --trigger-github-exclude-users 'dependabot[bot]'\` |
+| "Also run this PR automation on every push" | \`replicas automation edit <id> --keep-triggers --trigger-github pull_request.synchronize --trigger-github-repos acme/web\` |
 | "What repos are connected?" | \`replicas repos\` |
 | "Set up a \`replicas.json\` in this repo" | \`replicas init\` (\`-y\` for YAML) |
 
@@ -4657,7 +4664,7 @@ replicas automation edit <id> \\
   --trigger-cron "0 4 * * *"   # replaces existing triggers
 \`\`\`
 
-\`replicas automation edit <id> --trigger-github-exclude-users "dependabot[bot],renovate[bot]"\` updates existing GitHub triggers without replacing the rest of the trigger list. The GitLab equivalent is \`--trigger-gitlab-exclude-users\`. Passing an empty string (for example, \`--trigger-github-exclude-users ""\`) clears existing exclusions for that code host. Passing \`--trigger-github\` or \`--trigger-gitlab\` still replaces triggers (repeat it to keep several events), and the matching exclude flag is applied to the replacement triggers.
+\`replicas automation edit <id> --trigger-github-exclude-users "dependabot[bot],renovate[bot]"\` updates existing GitHub triggers without replacing the rest of the trigger list. The GitLab equivalent is \`--trigger-gitlab-exclude-users\`. Passing an empty string (for example, \`--trigger-github-exclude-users ""\`) clears existing exclusions for that code host. Passing \`--trigger-cron\`, \`--trigger-github\` or \`--trigger-gitlab\` replaces all triggers (repeat a flag for several events); add \`--keep-triggers\` to add them to the existing triggers instead. The repo, exclude and reviewer flags apply only to the events you pass.
 
 \`replicas automation edit <id> --move-to-org\` turns a personal automation into a shared one the whole team can see. It can't be undone.
 
@@ -10557,8 +10564,10 @@ export {
   detectAgentQuotaLimit,
   listOpenAICompatibleModels,
   resolveOpenAICompatibleModelsUrl,
+  openAICompatibleAuthEnvKeys,
   readOpenAICompatibleAuthEnv,
   OLLAMA_AGENTS,
+  ollamaAuthEnvKeys,
   readOllamaAuthEnv,
   DEFAULT_OLLAMA_MODEL,
   getDefaultOllamaModel,
@@ -10586,8 +10595,10 @@ export {
   DEFAULT_ASTER_MODEL,
   ASTER_MODEL_LABELS,
   OPENCODE_GO_PROVIDER,
+  OPENCODE_ZEN_PROVIDER,
   OPENCODE_GO_BASE_URL,
   DEFAULT_OPENCODE_GO_MODEL,
+  isOpenCodeZenModel,
   fetchOpenCodeGoCatalog,
   getChatKind,
   isGitHubUrl,

package/dist/src/{chunk-VCCUBYU3.js → chunk-JPOHWGGI.js}

@@ -10,15 +10,15 @@ import {
   resolveDiffBase,
   runGitCommand,
   setAgentCredentialSnapshot
-} from "./chunk-HUUEA35W.js";
+} from "./chunk-4J7EZ245.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-GJN2TDJ7.js";
+} from "./chunk-5OYGVDKL.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-CQR3GSM4.js";
+} from "./chunk-3MSBE24K.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
@@ -55,7 +55,7 @@ import {
   resolveOpenAICompatibleModelsUrl,
   splitMothershipInstructions,
   withTimeout
-} from "./chunk-47JJX56J.js";
+} from "./chunk-5YU4KQIU.js";
 
 // src/managers/codex-token-manager.ts
 import { promises as fs } from "fs";
@@ -291,7 +291,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     await this.applyCredentialUpdate(++this.credentialGeneration, async () => {
       await this.applyCredentialsResponse(data);
       setAgentCredentialSnapshot("codex", data);
-      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-CYLNJ6JB.js");
+      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-VCIWMQXN.js");
       await restartCodexAspHostIfRunning2();
     });
     await this.start(true);
@@ -313,7 +313,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
       const accountChanged = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.codex?.credentialId !== data.credentialId;
       await this.applyCredentialsResponse(data);
       if (restartOnChange && (accountChanged || CODEX_AUTH_ENV_KEYS.some((key, index) => process.env[key] !== previousEnv[index]))) {
-        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-CYLNJ6JB.js");
+        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-VCIWMQXN.js");
         await restartCodexAspHostIfRunning2();
       }
       setAgentCredentialSnapshot("codex", data);

package/dist/src/{chunk-32B2T6C3.js → chunk-OYPH6PPR.js}

@@ -3,17 +3,19 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   AspClient
-} from "./chunk-GJN2TDJ7.js";
+} from "./chunk-5OYGVDKL.js";
 import {
   ASTER_BASE_URL,
   ASTER_PROVIDER,
   CREDENTIAL_METHOD,
   OPENCODE_GO_PROVIDER,
+  OPENCODE_ZEN_PROVIDER,
   codexReasoningEffortForThinkingLevel,
+  isOpenCodeZenModel,
   isRecord,
   readOllamaAuthEnv,
   readOpenAICompatibleAuthEnv
-} from "./chunk-47JJX56J.js";
+} from "./chunk-5YU4KQIU.js";
 
 // src/managers/codex-asp/notification-dispatch.ts
 var TURN_STARTED_METHOD = "turn/started";
@@ -109,17 +111,23 @@ async function getOpencodeProvider() {
   return "openrouter";
 }
 function getOpenCodeGoModel(model) {
-  return model.replace(/^[^/]+\//, "");
+  return isOpenCodeZenModel(model) ? model : model.replace(/^[^/]+\//, "");
+}
+function opencodeModelRef(provider, model) {
+  if (provider !== OPENCODE_GO_PROVIDER) return { providerID: provider, modelID: model };
+  return isOpenCodeZenModel(model) ? { providerID: OPENCODE_ZEN_PROVIDER, modelID: model.slice(OPENCODE_ZEN_PROVIDER.length + 1) } : { providerID: OPENCODE_GO_PROVIDER, modelID: getOpenCodeGoModel(model) };
 }
 function opencodeConfig(provider, model, providerModels = [model]) {
   let config;
   if (provider === OPENCODE_GO_PROVIDER) {
+    const { providerID, modelID } = opencodeModelRef(provider, model);
     config = {
-      enabled_providers: [OPENCODE_GO_PROVIDER],
-      model: `${OPENCODE_GO_PROVIDER}/${model}`,
+      // Without a key OpenCode's own provider serves only its free Zen models.
+      enabled_providers: [OPENCODE_GO_PROVIDER, OPENCODE_ZEN_PROVIDER],
+      model: `${providerID}/${modelID}`,
       provider: {
         [OPENCODE_GO_PROVIDER]: {
-          models: Object.fromEntries(providerModels.map((candidate) => [candidate, {}]))
+          models: Object.fromEntries(providerModels.filter((candidate) => !isOpenCodeZenModel(candidate)).map((candidate) => [candidate, {}]))
         }
       },
       permission: OPENCODE_WORKSPACE_PERMISSION,
@@ -235,6 +243,7 @@ export {
   hasOpencodeCredentials,
   getOpencodeProvider,
   getOpenCodeGoModel,
+  opencodeModelRef,
   opencodeConfig,
   uuidV7,
   spawnMuseMsp,

package/dist/src/{chunk-YD76ZL7D.js → chunk-THAFUTL3.js}

@@ -5,7 +5,7 @@ import {
   extractCommandProtectionCommandText,
   isRecord,
   parseCodeHostPrUrl
-} from "./chunk-47JJX56J.js";
+} from "./chunk-5YU4KQIU.js";
 
 // src/services/published-pull-request-urls.ts
 function publishedPullRequestUrls(result) {

package/dist/src/{chunk-5WJNG5IX.js → chunk-VI33T336.js}

@@ -5,14 +5,14 @@ import {
   getOriginDefaultBranch,
   monolithRequest,
   runGitCommand
-} from "./chunk-HUUEA35W.js";
+} from "./chunk-4J7EZ245.js";
 import {
   extractCommandProtectionCommandText,
   findCommandProtectionGitLookups,
   findGitCommitSignals,
   findPrMergeSignals,
   parseCommandProtectionRequest
-} from "./chunk-47JJX56J.js";
+} from "./chunk-5YU4KQIU.js";
 
 // src/services/command-protection-service.ts
 import { readFile, stat } from "fs/promises";

package/dist/src/command-protection-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-5WJNG5IX.js";
-import "./chunk-HUUEA35W.js";
-import "./chunk-CQR3GSM4.js";
+} from "./chunk-VI33T336.js";
+import "./chunk-4J7EZ245.js";
+import "./chunk-3MSBE24K.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-47JJX56J.js";
+import "./chunk-5YU4KQIU.js";
 import "./chunk-VEQXQN22.js";
 
 // src/command-protection-hook.ts

package/dist/src/headless-agent.js

@@ -9,16 +9,17 @@ import {
   initializeMuse,
   museTurnStartParams,
   opencodeConfig,
+  opencodeModelRef,
   opencodeThinkingVariant,
   recoverCompletedTurn,
   spawnMuseMsp,
   startMuseSession
-} from "./chunk-32B2T6C3.js";
+} from "./chunk-OYPH6PPR.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-GJN2TDJ7.js";
-import "./chunk-CQR3GSM4.js";
+} from "./chunk-5OYGVDKL.js";
+import "./chunk-3MSBE24K.js";
 import {
   AGENT,
   OPENCODE_GO_PROVIDER,
@@ -28,7 +29,7 @@ import {
   headlessAgentUsagePath,
   isRecord,
   withTimeout
-} from "./chunk-47JJX56J.js";
+} from "./chunk-5YU4KQIU.js";
 import "./chunk-VEQXQN22.js";
 
 // src/headless-agent.ts
@@ -175,6 +176,7 @@ async function runCodex(request) {
 async function runOpencode(request) {
   const provider = await getOpencodeProvider();
   const model = provider === OPENCODE_GO_PROVIDER ? getOpenCodeGoModel(request.model) : request.model;
+  const { providerID, modelID } = opencodeModelRef(provider, model);
   const server = await createOpencodeServer({ port: 0, timeout: 3e4, config: opencodeConfig(provider, model) });
   try {
     const password = process.env.OPENCODE_SERVER_PASSWORD;
@@ -182,12 +184,12 @@ async function runOpencode(request) {
       baseUrl: server.url,
       ...password ? { headers: { Authorization: `Basic ${Buffer.from(`opencode:${password}`).toString("base64")}` } } : {}
     });
-    const variant = opencodeThinkingVariant((await fetchOpencodeModelVariants(client, request.workingDirectory, provider)).get(model), request.thinkingLevel);
-    const session = await client.session.create({ directory: request.workingDirectory, model: { providerID: provider, id: model } }, { throwOnError: true });
+    const variant = opencodeThinkingVariant((await fetchOpencodeModelVariants(client, request.workingDirectory, providerID)).get(modelID), request.thinkingLevel);
+    const session = await client.session.create({ directory: request.workingDirectory, model: { providerID, id: modelID } }, { throwOnError: true });
     const result = await client.session.prompt({
       sessionID: session.data.id,
       directory: request.workingDirectory,
-      model: { providerID: provider, modelID: model },
+      model: { providerID, modelID },
       ...variant ? { variant } : {},
       format: { type: "json_schema", schema: request.outputSchema, retryCount: 2 },
       parts: [{ type: "text", text: request.prompt }]

package/dist/src/index.js

@@ -27,7 +27,7 @@ import {
   evaluateCommandProtection,
   extractToolCommand,
   reportCommandProtectionBlock
-} from "./chunk-5WJNG5IX.js";
+} from "./chunk-VI33T336.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -59,15 +59,16 @@ import {
   initializeMuse,
   museTurnStartParams,
   opencodeConfig,
+  opencodeModelRef,
   opencodeThinkingVariant,
   recoverCompletedTurn,
   spawnMuseMsp,
   startMuseSession,
   uuidV7
-} from "./chunk-32B2T6C3.js";
+} from "./chunk-OYPH6PPR.js";
 import {
   publishedPullRequestUrls
-} from "./chunk-YD76ZL7D.js";
+} from "./chunk-THAFUTL3.js";
 import {
   ACCOUNT_RATE_LIMITS_READ_METHOD,
   AsyncLock,
@@ -140,7 +141,7 @@ import {
   timestampFromSeconds,
   upsertCredentialFileLines,
   writeSecureCredentialFile
-} from "./chunk-VCCUBYU3.js";
+} from "./chunk-JPOHWGGI.js";
 import {
   ENGINE_ENV,
   monolithRequest,
@@ -150,15 +151,15 @@ import {
   resolveDiffBase,
   setAgentCredentialSnapshot,
   setLinearSessionId
-} from "./chunk-HUUEA35W.js";
+} from "./chunk-4J7EZ245.js";
 import {
   getCodexModelProvider
-} from "./chunk-GJN2TDJ7.js";
+} from "./chunk-5OYGVDKL.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execAsync,
   execFileAsync
-} from "./chunk-CQR3GSM4.js";
+} from "./chunk-3MSBE24K.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -364,6 +365,8 @@ import {
   normalizeClaudeModel,
   normalizeCodexAspTranscriptStatus,
   normalizeContentBlocks,
+  ollamaAuthEnvKeys,
+  openAICompatibleAuthEnvKeys,
   paginateChatHistory,
   paginateEngineLogContent,
   parseAgentEventJsonlLine,
@@ -406,7 +409,7 @@ import {
   workspaceTokenRequestSchema,
   workspaceTokenResponseSchema,
   wrapInTag
-} from "./chunk-47JJX56J.js";
+} from "./chunk-5YU4KQIU.js";
 import {
   cloneMcpConfig,
   ensureCompatibilityImports,
@@ -11229,11 +11232,57 @@ var MuseTokenManager = class extends BaseRefreshManager {
 };
 var museTokenManager = new MuseTokenManager();
 
+// src/managers/opencode-token-manager.ts
+var OPENCODE_AUTH_ENV_KEYS = [...ollamaAuthEnvKeys("opencode"), ...openAICompatibleAuthEnvKeys("opencode")];
+var OpencodeTokenManager = class extends BaseRefreshManager {
+  constructor() {
+    super("OpencodeTokenManager");
+  }
+  doRefresh() {
+    return Promise.resolve();
+  }
+  async fetchFreshCredentials(failureReason, failureKind = "exhausted", failedCredential = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.opencode, allowedMethods, resetsAt) {
+    const failedMethod = AGENT_CREDENTIAL_METHODS_IN_ORDER.opencode.find(({ method }) => method === failedCredential?.method)?.method;
+    if (!failedMethod || allowedMethods && !allowedMethods.includes(failedMethod)) {
+      return createErrorResult({ message: "OpenCode only switches between keys of the same provider", code: "no_credentials" });
+    }
+    return this.swapCredentials({
+      provider: "opencode",
+      failureKind,
+      allowedMethods: [failedMethod],
+      refresh: async (exclusions) => {
+        const request = {
+          failedMethod,
+          ...failedCredential ? { failedCredential } : {},
+          failureReason,
+          failureKind,
+          ...resetsAt ? { resetsAt } : {},
+          ...exclusions
+        };
+        const response = await monolithRequest("/v1/engine/opencode/refresh-credentials", { body: request, signal: AbortSignal.timeout(12e4) });
+        if (!response.ok) {
+          throw new Error(`Credentials refresh failed: ${response.status} ${await response.text()}`);
+        }
+        const data = await response.json();
+        for (const file of data.auth.files ?? []) {
+          await writeSecureCredentialFile(file.path, file.contents, { ensureParentDir: true });
+        }
+        for (const key of OPENCODE_AUTH_ENV_KEYS) delete process.env[key];
+        Object.assign(process.env, data.auth.env);
+        setAgentCredentialSnapshot("opencode", data);
+      },
+      isOauthNow: () => false
+    });
+  }
+};
+var opencodeTokenManager = new OpencodeTokenManager();
+
 // src/managers/auth-fallback.ts
 var SWAPPABLE_AGENTS = {
   claude: claudeTokenManager,
   codex: codexTokenManager,
-  muse: museTokenManager
+  muse: museTokenManager,
+  opencode: opencodeTokenManager
 };
 var QUOTA_STOP_NEXT_STEP = {
   failed: "The next credential in the fallback chain could not be used. Check it in Settings \u2192 Fallbacks and try again.",
@@ -16796,9 +16845,9 @@ var OPENCODE_COMMAND_PROTECTION_PLUGIN_SOURCE = join15(OPENCODE_SHIM_DIR, "openc
 var OPENCODE_COMMAND_PROTECTION_PLUGIN_PATH = join15(ENGINE_ENV.HOME_DIR, ".config", "opencode", "plugins", "replicas-command-protection.ts");
 var OPENCODE_LEGACY_COMMAND_PROTECTION_PLUGIN_PATH = join15(ENGINE_ENV.HOME_DIR, ".config", "opencode", "plugins", "replicas-command-protection.mjs");
 var OPENCODE_CONFIG_PATH = join15(ENGINE_ENV.HOME_DIR, ".config", "opencode", "opencode.json");
-var OPENCODE_FETCH_DISPATCHER = new Agent({ headersTimeout: 0, bodyTimeout: 0 });
 var OPENCODE_SERVER_STARTUP_TIMEOUT_MS = 3e4;
 var OPENCODE_SLASH_COMMANDS_CACHE_MS = 3e4;
+var OPENCODE_SWITCHED_CREDENTIAL_PROMPT = "Your previous turn stopped at a usage limit. Continue from where you left off: first check what is already done, and do not repeat commands, edits, or messages you already completed.";
 async function getDefaultOpencodeModel(provider) {
   const ollama = readOllamaAuthEnv("opencode", process.env);
   if (provider === "ollama" && ollama) {
@@ -16911,13 +16960,16 @@ function opencodeErrorPayload(error) {
     ...status !== void 0 ? { status } : {}
   };
 }
-function opencodeFetch(input, init) {
-  const requestInit = { ...init, dispatcher: OPENCODE_FETCH_DISPATCHER };
-  return fetch(input, requestInit);
+function opencodeFetch(dispatcher) {
+  return (input, init) => {
+    const requestInit = { ...init, dispatcher };
+    return fetch(input, requestInit);
+  };
 }
 var OpencodeManager = class extends CodingAgentManager {
   client = null;
   server = null;
+  dispatcher = null;
   sessionId = null;
   historyFilePath;
   historyFile;
@@ -16935,6 +16987,9 @@ var OpencodeManager = class extends CodingAgentManager {
   activeLinearForwarder = null;
   forwardedLinearPartKeys = /* @__PURE__ */ new Set();
   handledAccountRateLimit = false;
+  credentialSwitch = null;
+  /** OpenCode reads its key when the server starts, so a server started on another credential has to restart. */
+  serverCredential;
   modelVariants = /* @__PURE__ */ new Map();
   slashCommandsCache = null;
   slashCommandsRequest = null;
@@ -17025,18 +17080,16 @@ var OpencodeManager = class extends CodingAgentManager {
     try {
       if (reuseExisting && this.client) return this.client;
       const subagentMcpParentChatId = this.subagentMcpParentChatId();
-      if (this.client && (this.providerId !== providerId || this.serverSubagentMcpParentChatId !== subagentMcpParentChatId)) {
-        this.eventAbortController?.abort();
-        this.server?.close();
+      if (this.client && (this.providerId !== providerId || this.serverSubagentMcpParentChatId !== subagentMcpParentChatId || this.serverCredential !== ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.opencode)) {
+        this.stopServer();
         this.client = null;
-        this.server = null;
         this.configuredModels.clear();
       }
       this.providerId = providerId;
       const configuredModel = providerId === OPENCODE_GO_PROVIDER ? getOpenCodeGoModel(model) : model;
       const ollama = providerId === "ollama" ? readOllamaAuthEnv("opencode", process.env) : null;
       const compatible = providerId === CREDENTIAL_METHOD.OPENAI_COMPATIBLE ? readOpenAICompatibleAuthEnv("opencode", process.env) : null;
-      const providerModels = ollama ? (await listOllamaModels(ollama)).map(({ id }) => id) : compatible ? (await listOpenAICompatibleModels(compatible)).map(({ id }) => id) : providerId === OPENCODE_GO_PROVIDER ? Object.keys((await fetchOpenCodeGoCatalog()).models) : providerId === ASTER_PROVIDER ? ASTER_MODELS : await getAllowedOpenRouterModels();
+      const providerModels = ollama ? (await listOllamaModels(ollama)).map(({ id }) => id) : compatible ? (await listOpenAICompatibleModels(compatible)).map(({ id }) => id) : providerId === OPENCODE_GO_PROVIDER ? Object.keys((await fetchOpenCodeGoCatalog("opencode")).models) : providerId === ASTER_PROVIDER ? ASTER_MODELS : await getAllowedOpenRouterModels();
       if (!providerModels.includes(configuredModel)) {
         throw new Error(`Model ${configuredModel} is not available through ${providerId}.`);
       }
@@ -17055,8 +17108,7 @@ var OpencodeManager = class extends CodingAgentManager {
       process.env.REPLICAS_COMMAND_PROTECTION_HOOK_PATH = getCommandProtectionHookPath();
       process.env.REPLICAS_POST_TOOL_PR_HOOK_PATH = getPostToolPrHookPath();
       process.env.REPLICAS_COMMAND_PROTECTION_RUNTIME_PATH = process.execPath;
-      this.eventAbortController?.abort();
-      this.server?.close();
+      this.stopServer();
       const pathEntries = (process.env.PATH ?? "").split(delimiter).filter(Boolean);
       if (!pathEntries.includes(OPENCODE_SHIM_DIR)) {
         process.env.PATH = [OPENCODE_SHIM_DIR, ...pathEntries].join(delimiter);
@@ -17079,6 +17131,7 @@ var OpencodeManager = class extends CodingAgentManager {
         };
       }
       if (this.originChatId) process.env.REPLICAS_CHAT_ID = this.originChatId;
+      const credential = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.opencode;
       const serverStart = createOpencodeServer({
         port: 0,
         timeout: OPENCODE_SERVER_STARTUP_TIMEOUT_MS,
@@ -17086,16 +17139,19 @@ var OpencodeManager = class extends CodingAgentManager {
       });
       delete process.env.REPLICAS_CHAT_ID;
       const server3 = await serverStart;
+      const dispatcher = new Agent({ headersTimeout: 0, bodyTimeout: 0 });
       const client = createOpencodeClient({
         baseUrl: server3.url,
-        fetch: opencodeFetch,
+        fetch: opencodeFetch(dispatcher),
         headers: {
           Authorization: `Basic ${Buffer.from(`opencode:${password}`).toString("base64")}`
         }
       });
       this.client = client;
       this.server = server3;
+      this.dispatcher = dispatcher;
       this.serverSubagentMcpParentChatId = subagentMcpParentChatId;
+      this.serverCredential = credential;
       this.configuredModels = new Set(providerModels);
       const eventController = new AbortController();
       this.eventAbortController = eventController;
@@ -17117,7 +17173,14 @@ var OpencodeManager = class extends CodingAgentManager {
       finishUpdate();
     }
   }
-  async ensureSession(client, model, agent, variant) {
+  stopServer() {
+    this.eventAbortController?.abort();
+    this.server?.close();
+    void this.dispatcher?.destroy();
+    this.server = null;
+    this.dispatcher = null;
+  }
+  async ensureSession(client, providerID, model, agent, variant) {
     if (this.sessionId) {
       try {
         await client.session.get(
@@ -17132,79 +17195,97 @@ var OpencodeManager = class extends CodingAgentManager {
     const result = await client.session.create({
       directory: this.workingDirectory,
       agent,
-      model: { providerID: this.providerId, id: model, ...variant ? { variant } : {} }
+      model: { providerID, id: model, ...variant ? { variant } : {} }
     }, { throwOnError: true });
     const session = result.data;
     this.sessionId = session.id;
     await this.onSaveSessionId(session.id);
     return session.id;
   }
-  async getModelVariants(client, model) {
-    const cached = this.modelVariants.get(model);
+  async getModelVariants(client, providerID, model) {
+    const key = `${providerID}/${model}`;
+    const cached = this.modelVariants.get(key);
     if (cached) return cached;
     try {
-      for (const [id, variants] of await fetchOpencodeModelVariants(client, this.workingDirectory, this.providerId)) {
-        this.modelVariants.set(id, variants);
+      for (const [id, variants] of await fetchOpencodeModelVariants(client, this.workingDirectory, providerID)) {
+        this.modelVariants.set(`${providerID}/${id}`, variants);
       }
     } catch {
-      this.modelVariants.set(model, /* @__PURE__ */ new Set());
+      this.modelVariants.set(key, /* @__PURE__ */ new Set());
     }
-    return this.modelVariants.get(model) ?? /* @__PURE__ */ new Set();
+    return this.modelVariants.get(key) ?? /* @__PURE__ */ new Set();
   }
-  async getThinkingVariant(client, model, thinkingLevel) {
+  async getThinkingVariant(client, providerID, model, thinkingLevel) {
     if (!thinkingLevel) return void 0;
-    return opencodeThinkingVariant(await this.getModelVariants(client, model), thinkingLevel);
+    return opencodeThinkingVariant(await this.getModelVariants(client, providerID, model), thinkingLevel);
   }
-  async processMessageInternal(request) {
-    const provider = await getOpencodeProvider();
-    const controller = new AbortController();
+  async processMessageInternal(request, signal) {
     const linearForwarder = new LinearEventForwarder(() => this.linearSessionId);
-    this.handledAccountRateLimit = false;
-    this.activeAbortController = controller;
     this.activeLinearForwarder = linearForwarder;
     this.forwardedLinearPartKeys.clear();
+    this.credentialSwitch = null;
+    try {
+      let retry = false;
+      while (await this.promptTurn(request, linearForwarder, signal, retry)) retry = true;
+    } finally {
+      this.activeAbortController = null;
+      this.activeLinearForwarder = null;
+      this.forwardedLinearPartKeys.clear();
+      await this.historyFile.flush();
+      await this.onTurnComplete();
+    }
+  }
+  async promptTurn(request, linearForwarder, signal, retry) {
+    const controller = new AbortController();
+    this.handledAccountRateLimit = false;
+    this.activeAbortController = controller;
+    if (signal.aborted) controller.abort();
     try {
+      controller.signal.throwIfAborted();
+      const provider = await getOpencodeProvider();
       const model = request.model ?? await getDefaultOpencodeModel(provider);
       const client = await this.ensureClient(model, provider);
-      const providerModel = this.providerId === OPENCODE_GO_PROVIDER ? getOpenCodeGoModel(model) : model;
+      const { providerID, modelID } = opencodeModelRef(this.providerId, model);
       const agent = request.planMode ? "plan" : "build";
-      const variant = await this.getThinkingVariant(client, providerModel, request.thinkingLevel);
-      const sessionId = await this.ensureSession(client, providerModel, agent, variant);
+      const variant = await this.getThinkingVariant(client, providerID, modelID, request.thinkingLevel);
+      const sessionId = await this.ensureSession(client, providerID, modelID, agent, variant);
       const system = this.buildCombinedInstructions(request.customInstructions);
-      this.recordUserMessageHistoryEvent(request, this.historyFile);
+      if (!retry) this.recordUserMessageHistoryEvent(request, this.historyFile);
       const result = await client.session.prompt({
         sessionID: sessionId,
         directory: this.workingDirectory,
         agent,
-        model: { providerID: this.providerId, modelID: providerModel },
+        model: { providerID, modelID },
         ...variant ? { variant } : {},
         ...system ? { system } : {},
         ...this.subagentMcpParentChatId() ? { tools: { task: false } } : {},
-        parts: [{ type: "text", text: request.message }]
+        parts: [{ type: "text", text: retry ? OPENCODE_SWITCHED_CREDENTIAL_PROMPT : request.message }]
       }, { signal: controller.signal, throwOnError: true });
       this.recordHistoryEvent("opencode-message.updated", { info: result.data.info }, this.historyFile);
       for (const part of result.data.parts) this.recordOpencodePart(part);
       linearForwarder.flushThoughtAsResponse();
       this.recordHistoryEvent("opencode-session.idle", { sessionID: sessionId }, this.historyFile);
     } catch (error) {
+      const credentialSwitch = this.credentialSwitch;
+      if (credentialSwitch) {
+        this.credentialSwitch = null;
+        await credentialSwitch.catch(() => {
+        });
+        if (!signal.aborted) return true;
+      }
       if (controller.signal.aborted) {
         this.recordHistoryEvent("opencode-session.idle", { sessionID: this.sessionId }, this.historyFile);
       } else {
         console.error("[OpencodeManager] Turn failed:", error);
         this.recordHistoryEvent("opencode-error", opencodeErrorPayload(error), this.historyFile);
       }
-    } finally {
-      this.activeAbortController = null;
-      this.activeLinearForwarder = null;
-      this.forwardedLinearPartKeys.clear();
-      await this.historyFile.flush();
-      await this.onTurnComplete();
     }
+    return false;
   }
   async subscribeToEvents(client, controller) {
     let streamError;
-    const result = await client.v2.event.subscribe(
-      { location: { directory: this.workingDirectory } },
+    const result = await client.event.subscribe(
+      { directory: this.workingDirectory },
       {
         signal: controller.signal,
         sseMaxRetryAttempts: 1,
@@ -17225,6 +17306,7 @@ var OpencodeManager = class extends CodingAgentManager {
     if (!controller.signal.aborted && streamError) throw streamError;
   }
   recordOpencodeEvent(event) {
+    if (!/^(session|message)\./.test(event.type)) return;
     const payload = opencodeEventPayload(event);
     if (!payload) return;
     const sessionID = typeof payload.sessionID === "string" ? payload.sessionID : void 0;
@@ -17251,8 +17333,15 @@ var OpencodeManager = class extends CodingAgentManager {
     if (status?.type !== "retry" || action?.reason !== "account_rate_limit" || this.handledAccountRateLimit) return;
     this.handledAccountRateLimit = true;
     const message = typeof status.message === "string" ? status.message : typeof action.message === "string" ? action.message : "OpenCode Go usage limit reached.";
+    const controller = this.activeAbortController;
+    const fallback = await this.fallBackCredential("rate_limit", message, this.serverCredential);
+    if (!controller || controller.signal.aborted || controller !== this.activeAbortController) return;
+    if (fallback.outcome === "switched") {
+      this.credentialSwitch = this.abortActiveTurn();
+      await this.credentialSwitch;
+      return;
+    }
     this.recordHistoryEvent("opencode-error", { message, code: "account_rate_limit" }, this.historyFile);
-    const fallback = await this.fallBackCredential("rate_limit", message);
     this.emitQuotaExhausted({
       provider: "opencode",
       reason: "rate_limit",
@@ -58088,7 +58177,7 @@ var PiManager = class extends CodingAgentManager {
         }))
       });
     } else if (this.providerId === OPENCODE_GO_PROVIDER) {
-      const catalog = await fetchOpenCodeGoCatalog([request.model ?? DEFAULT_OPENCODE_GO_MODEL]);
+      const catalog = await fetchOpenCodeGoCatalog("pi", [request.model ?? DEFAULT_OPENCODE_GO_MODEL]);
       const models = Object.entries(catalog.models);
       defaultModel = catalog.models[DEFAULT_OPENCODE_GO_MODEL] ? DEFAULT_OPENCODE_GO_MODEL : models[0]?.[0] ?? DEFAULT_OPENCODE_GO_MODEL;
       registerPiProvider(modelRegistry, {

package/dist/src/post-tool-pr-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   publishedPullRequestUrls
-} from "./chunk-YD76ZL7D.js";
+} from "./chunk-THAFUTL3.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
 import {
   shouldRefreshPullRequests
-} from "./chunk-47JJX56J.js";
+} from "./chunk-5YU4KQIU.js";
 import "./chunk-VEQXQN22.js";
 
 // src/services/post-tool-pr-notifier.ts

package/dist/src/subagent-mcp.js

@@ -11,7 +11,7 @@ import {
   spawnSubagentRequestSchema,
   subagentResponseSchema,
   waitSubagentRequestSchema
-} from "./chunk-47JJX56J.js";
+} from "./chunk-5YU4KQIU.js";
 import "./chunk-VEQXQN22.js";
 
 // src/subagent-mcp.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.1279",
+  "version": "0.1.1281",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",
@@ -49,11 +49,11 @@
     "@earendil-works/pi-server": "0.85.0",
     "@hono/node-server": "^1.19.5",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@opencode-ai/sdk": "1.17.9",
+    "@opencode-ai/sdk": "1.19.4",
     "bash-language-server": "^5.6.0",
     "dockerfile-language-server-nodejs": "^0.14.1",
     "hono": "^4.10.3",
-    "opencode-ai": "1.17.9",
+    "opencode-ai": "1.19.4",
     "pi-mcp-adapter": "2.32.1",
     "pyright": "^1.1.413",
     "typescript": "^5.9.3",