replicas-engine 0.1.1291 → 0.1.1293

package/dist/src/{asp-host-OVSPRNQE.js → asp-host-4YRJNFYD.js}

@@ -8,12 +8,12 @@ import {
   listRunningCodexModels,
   restartCodexAspHost,
   restartCodexAspHostIfRunning
-} from "./chunk-YGYYGLWA.js";
-import "./chunk-THUCGBYF.js";
-import "./chunk-3IVAKSKY.js";
-import "./chunk-3DNCWVQY.js";
+} from "./chunk-FI7FILEX.js";
+import "./chunk-5MO5TWHJ.js";
+import "./chunk-6C472IYE.js";
+import "./chunk-CYBM2QOH.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-2G5ZU67U.js";
+import "./chunk-BG4HQ56D.js";
 import "./chunk-VEQXQN22.js";
 export {
   CODEX_ULTRAFAST_SERVICE_TIER,

package/dist/src/{chunk-THUCGBYF.js → chunk-5MO5TWHJ.js}

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-3DNCWVQY.js";
+} from "./chunk-CYBM2QOH.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -22,7 +22,7 @@ import {
   provisionedDeviceSchema,
   readReplicasRuntimeEnv,
   serializePosixEnvFile
-} from "./chunk-2G5ZU67U.js";
+} from "./chunk-BG4HQ56D.js";
 
 // src/runtime-env-loader.ts
 import { readFileSync } from "fs";

package/dist/src/{chunk-3IVAKSKY.js → chunk-6C472IYE.js}

@@ -3,10 +3,10 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   execFileAsync
-} from "./chunk-3DNCWVQY.js";
+} from "./chunk-CYBM2QOH.js";
 import {
   isVersionBelow
-} from "./chunk-2G5ZU67U.js";
+} from "./chunk-BG4HQ56D.js";
 
 // src/utils/codex-agent-env.ts
 function buildCodexAgentEnv(source = process.env) {
@@ -240,7 +240,7 @@ function getCodexModelProvider(method) {
   if (method === "foundry") return "azure";
   return method === "ollama" || method === "openai-compatible" ? "replicas_openai_compatible" : "openai";
 }
-var ENGINE_PACKAGE_VERSION = "0.1.1291";
+var ENGINE_PACKAGE_VERSION = "0.1.1293";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/{chunk-VLLPTYEF.js → chunk-B3D66EN3.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   AspClient
-} from "./chunk-3IVAKSKY.js";
+} from "./chunk-6C472IYE.js";
 import {
   ASTER_BASE_URL,
   ASTER_PROVIDER,
@@ -15,7 +15,7 @@ import {
   isRecord,
   readOllamaAuthEnv,
   readOpenAICompatibleAuthEnv
-} from "./chunk-2G5ZU67U.js";
+} from "./chunk-BG4HQ56D.js";
 
 // src/managers/codex-asp/notification-dispatch.ts
 var TURN_STARTED_METHOD = "turn/started";

package/dist/src/{chunk-2G5ZU67U.js → chunk-BG4HQ56D.js}

@@ -271,6 +271,7 @@ var WEB_APP_PATHS = {
   integrations: `${DASHBOARD_PATH}/integrations`,
   integrationsGithub: `${DASHBOARD_PATH}/integrations/github`,
   integrationsGitlab: `${DASHBOARD_PATH}/integrations/gitlab`,
+  integrationsSlack: `${DASHBOARD_PATH}/integrations/slack`,
   settings: `${DASHBOARD_PATH}/settings`,
   billing: `${DASHBOARD_PATH}/billing`,
   members: `${DASHBOARD_PATH}/members`,
@@ -7506,6 +7507,7 @@ function coerceClaudeResultPayload(payload) {
     is_error: typeof payload.is_error === "boolean" ? payload.is_error : void 0,
     subtype: typeof payload.subtype === "string" ? payload.subtype : void 0,
     errors: Array.isArray(payload.errors) ? payload.errors.filter((e) => typeof e === "string") : void 0,
+    result: typeof payload.result === "string" ? payload.result : void 0,
     terminal_reason: typeof payload.terminal_reason === "string" ? payload.terminal_reason : void 0
   };
 }
@@ -7859,7 +7861,7 @@ function parseClaudeEvents(events, parentToolUseId) {
         messages.push({
           id: `error-${event.timestamp}`,
           type: "error",
-          message: genuineErrors.length > 0 ? genuineErrors.join("\n") : "Claude session encountered an unexpected error.",
+          message: genuineErrors.length > 0 ? genuineErrors.join("\n") : payload.result || "Claude session encountered an unexpected error.",
           timestamp: event.timestamp
         });
       }

package/dist/src/{chunk-3DNCWVQY.js → chunk-CYBM2QOH.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES
-} from "./chunk-2G5ZU67U.js";
+} from "./chunk-BG4HQ56D.js";
 
 // src/utils/exec.ts
 import { exec, execFile } from "child_process";

package/dist/src/{chunk-YGYYGLWA.js → chunk-FI7FILEX.js}

@@ -10,15 +10,15 @@ import {
   resolveDiffBase,
   runGitCommand,
   setAgentCredentialSnapshot
-} from "./chunk-THUCGBYF.js";
+} from "./chunk-5MO5TWHJ.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-3IVAKSKY.js";
+} from "./chunk-6C472IYE.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-3DNCWVQY.js";
+} from "./chunk-CYBM2QOH.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
@@ -55,7 +55,7 @@ import {
   resolveOpenAICompatibleModelsUrl,
   splitMothershipInstructions,
   withTimeout
-} from "./chunk-2G5ZU67U.js";
+} from "./chunk-BG4HQ56D.js";
 
 // src/managers/codex-token-manager.ts
 import { promises as fs } from "fs";
@@ -291,7 +291,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     await this.applyCredentialUpdate(++this.credentialGeneration, async () => {
       await this.applyCredentialsResponse(data);
       setAgentCredentialSnapshot("codex", data);
-      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-OVSPRNQE.js");
+      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-4YRJNFYD.js");
       await restartCodexAspHostIfRunning2();
     });
     await this.start(true);
@@ -313,7 +313,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
       const accountChanged = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.codex?.credentialId !== data.credentialId;
       await this.applyCredentialsResponse(data);
       if (restartOnChange && (accountChanged || CODEX_AUTH_ENV_KEYS.some((key, index) => process.env[key] !== previousEnv[index]))) {
-        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-OVSPRNQE.js");
+        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-4YRJNFYD.js");
         await restartCodexAspHostIfRunning2();
       }
       setAgentCredentialSnapshot("codex", data);

package/dist/src/{chunk-TXAJDSKC.js → chunk-TZ43BQUR.js}

@@ -5,7 +5,7 @@ import {
   extractCommandProtectionCommandText,
   isRecord,
   parseCodeHostPrUrl
-} from "./chunk-2G5ZU67U.js";
+} from "./chunk-BG4HQ56D.js";
 
 // src/services/published-pull-request-urls.ts
 function publishedPullRequestUrls(result) {

package/dist/src/{chunk-6Q2GHJ6S.js → chunk-W7IRX3ZE.js}

@@ -5,14 +5,14 @@ import {
   getOriginDefaultBranch,
   monolithRequest,
   runGitCommand
-} from "./chunk-THUCGBYF.js";
+} from "./chunk-5MO5TWHJ.js";
 import {
   extractCommandProtectionCommandText,
   findCommandProtectionGitLookups,
   findGitCommitSignals,
   findPrMergeSignals,
   parseCommandProtectionRequest
-} from "./chunk-2G5ZU67U.js";
+} from "./chunk-BG4HQ56D.js";
 
 // src/services/command-protection-service.ts
 import { readFile, stat } from "fs/promises";

package/dist/src/command-protection-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-6Q2GHJ6S.js";
-import "./chunk-THUCGBYF.js";
-import "./chunk-3DNCWVQY.js";
+} from "./chunk-W7IRX3ZE.js";
+import "./chunk-5MO5TWHJ.js";
+import "./chunk-CYBM2QOH.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-2G5ZU67U.js";
+import "./chunk-BG4HQ56D.js";
 import "./chunk-VEQXQN22.js";
 
 // src/command-protection-hook.ts

package/dist/src/headless-agent.js

@@ -14,12 +14,12 @@ import {
   recoverCompletedTurn,
   spawnMuseMsp,
   startMuseSession
-} from "./chunk-VLLPTYEF.js";
+} from "./chunk-B3D66EN3.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-3IVAKSKY.js";
-import "./chunk-3DNCWVQY.js";
+} from "./chunk-6C472IYE.js";
+import "./chunk-CYBM2QOH.js";
 import {
   AGENT,
   OPENCODE_GO_PROVIDER,
@@ -29,7 +29,7 @@ import {
   headlessAgentUsagePath,
   isRecord,
   withTimeout
-} from "./chunk-2G5ZU67U.js";
+} from "./chunk-BG4HQ56D.js";
 import "./chunk-VEQXQN22.js";
 
 // src/headless-agent.ts

package/dist/src/index.js

@@ -27,7 +27,7 @@ import {
   evaluateCommandProtection,
   extractToolCommand,
   reportCommandProtectionBlock
-} from "./chunk-6Q2GHJ6S.js";
+} from "./chunk-W7IRX3ZE.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -65,10 +65,10 @@ import {
   spawnMuseMsp,
   startMuseSession,
   uuidV7
-} from "./chunk-VLLPTYEF.js";
+} from "./chunk-B3D66EN3.js";
 import {
   publishedPullRequestUrls
-} from "./chunk-TXAJDSKC.js";
+} from "./chunk-TZ43BQUR.js";
 import {
   ACCOUNT_RATE_LIMITS_READ_METHOD,
   AsyncLock,
@@ -141,7 +141,7 @@ import {
   timestampFromSeconds,
   upsertCredentialFileLines,
   writeSecureCredentialFile
-} from "./chunk-YGYYGLWA.js";
+} from "./chunk-FI7FILEX.js";
 import {
   ENGINE_ENV,
   monolithRequest,
@@ -151,15 +151,15 @@ import {
   resolveDiffBase,
   setAgentCredentialSnapshot,
   setLinearSessionId
-} from "./chunk-THUCGBYF.js";
+} from "./chunk-5MO5TWHJ.js";
 import {
   getCodexModelProvider
-} from "./chunk-3IVAKSKY.js";
+} from "./chunk-6C472IYE.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execAsync,
   execFileAsync
-} from "./chunk-3DNCWVQY.js";
+} from "./chunk-CYBM2QOH.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -409,7 +409,7 @@ import {
   workspaceTokenRequestSchema,
   workspaceTokenResponseSchema,
   wrapInTag
-} from "./chunk-2G5ZU67U.js";
+} from "./chunk-BG4HQ56D.js";
 import {
   cloneMcpConfig,
   ensureCompatibilityImports,
@@ -11300,8 +11300,14 @@ function describeLoginFailure(provider, login, configuredMethod, revoked) {
   const agent = getProviderDisplayName(provider);
   const method = login?.method ?? configuredMethod;
   const name = login ? describeCredential(provider, login) : `the ${agent} credential this workspace uses`;
+  const orgLogin = login?.scope === CREDENTIAL_SCOPE.ORG;
+  const agentsPage = orgLogin ? `Organization \u2192 Coding Agents: ${DEFAULT_WEB_APP_URL}${WEB_APP_PATHS.agents}` : `Personal \u2192 Coding Agents: ${DEFAULT_WEB_APP_URL}${WEB_APP_PATHS.accountAgents}`;
+  if (provider === "claude" && (method === "oauth" || revoked)) {
+    const fixer = orgLogin ? "an organization admin" : login?.account?.ownerName ?? "you";
+    return `${agent} could not sign in with ${name}. The login expired or was revoked. Replicas recently switched to one-year Claude logins, so ${fixer} should update the Replicas CLI (\`npm install -g replicas-cli@latest\`) and reconnect with \`replicas claude-auth${orgLogin ? " --org" : ""}\`. Claude logins are listed in ${agentsPage}`;
+  }
   const why = revoked ? "It was signed out, revoked, or expired." : method === "api_key" ? "The key may be invalid, revoked, out of credits, or missing access to the selected model." : method === "bedrock" ? "Check its credentials, region, IAM permissions, and Claude model access." : method === "foundry" ? `Check its API key, resource, and ${agent} deployment names.` : "It was rejected even after a refresh.";
-  const reconnect = login?.scope === CREDENTIAL_SCOPE.ORG ? `An organization admin can reconnect it in Organization \u2192 Coding Agents: ${DEFAULT_WEB_APP_URL}${WEB_APP_PATHS.agents}` : `Reconnect it in Personal \u2192 Coding Agents: ${DEFAULT_WEB_APP_URL}${WEB_APP_PATHS.accountAgents}`;
+  const reconnect = orgLogin ? `An organization admin can reconnect it in ${agentsPage}` : `Reconnect it in ${agentsPage}`;
   return `${agent} could not sign in with ${name}. ${why} ${reconnect}`;
 }
 var fallbackLocks = /* @__PURE__ */ new Map();
@@ -13030,6 +13036,8 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
   sessionLinearForwarder = null;
   pendingTurn = null;
   attemptSawActivity = false;
+  // A broken login the turn moved past; if the turn still fails, it is the error the user can act on.
+  turnLoginFailure = null;
   sessionActivity = createClaudeSessionActivity();
   backgroundContinuationTimer = null;
   pendingInterrupt = false;
@@ -13416,6 +13424,7 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
     let missingSessionReset = false;
     let currentRequest = request;
     let carriedSteers = /* @__PURE__ */ new Map();
+    this.turnLoginFailure = null;
     await this.goalClear?.catch(() => {
     });
     try {
@@ -13448,6 +13457,10 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
               attemptedCredential
             );
             if (refreshed.ok) {
+              const live = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.claude;
+              if (attemptedCredential && live && !isSameCredential(attemptedCredential, live)) {
+                this.turnLoginFailure ??= describeLoginFailure("claude", attemptedCredential, resolveClaudeAuthMethodForMessage(), false);
+              }
               attempt++;
               continue;
             }
@@ -13463,6 +13476,9 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
             if (attemptedCredential) failedCredentials.push(attemptedCredential);
             const fallback = repeated ? { outcome: "unavailable" } : await this.fallBackCredential(reason, detail, attemptedCredential, error instanceof ClaudeQuotaError ? error.resetsAt : void 0);
             if (fallback.outcome === "switched") {
+              if (isAuthError) {
+                this.turnLoginFailure ??= describeLoginFailure("claude", attemptedCredential ?? namedLogin, resolveClaudeAuthMethodForMessage(), loginRevoked);
+              }
               if (fallback.model) currentRequest = { ...currentRequest, model: fallback.model };
               authRetries = 0;
               loginRevoked = false;
@@ -13525,6 +13541,7 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
       if (failedLogin) {
         await this.emitAuthRetryExhaustedEvent(lastError, failedLogin.credential, failedLogin.revoked);
       }
+      this.turnLoginFailure = null;
       try {
         await this.historyFile.flush();
         await this.onTurnComplete();
@@ -13544,7 +13561,7 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
         subtype: "error_during_execution",
         is_error: true,
         result,
-        errors,
+        errors: [.../* @__PURE__ */ new Set([...this.turnLoginFailure ? [this.turnLoginFailure] : [], ...errors])],
         session_id: this.sessionId ?? "",
         parent_tool_use_id: null
       }
@@ -13931,7 +13948,9 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
         if (!this.pendingTurn && msg.type === "system" && (msg.subtype === "init" || msg.subtype === "session_state_changed" && msg.state === "running")) {
           this.pendingBackgroundCompletion = true;
         }
-        await this.handleMessage(msg);
+        const loginFailure = msg.type === "result" && msg.user_message_uuid && this.pendingTurn?.userMessageUuids.has(msg.user_message_uuid) ? this.turnLoginFailure : null;
+        await this.handleMessage(msg.type === "result" && loginFailure && isClaudeResultError(msg) ? msg.subtype === "success" ? { ...msg, result: `${loginFailure}
+${msg.result}` } : { ...msg, errors: [loginFailure, ...msg.errors] } : msg);
         if (this.activeQuery !== response) break;
         const linearSessionId = this.linearSessionId;
         if (linearSessionId && this.sessionLinearForwarder) {
@@ -60049,7 +60068,7 @@ function terminalErrorsFromEvent(event, provider) {
     const payload = coerceClaudeResultPayload(event.payload);
     if (!isClaudeResultError(payload)) return null;
     const errors2 = stripAgentDiagnosticErrors(payload.errors ?? []);
-    return errors2.length > 0 ? errors2 : ["Claude run failed"];
+    return errors2.length > 0 ? errors2 : [payload.result || "Claude run failed"];
   }
   if (event.type === CODEX_QUOTA_STATUS_EVENT_TYPE) {
     return event.payload.state === "out_of_credits" ? ["Codex is out of credits. Top up the connected OpenAI account to resume."] : null;

package/dist/src/post-tool-pr-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   publishedPullRequestUrls
-} from "./chunk-TXAJDSKC.js";
+} from "./chunk-TZ43BQUR.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
 import {
   shouldRefreshPullRequests
-} from "./chunk-2G5ZU67U.js";
+} from "./chunk-BG4HQ56D.js";
 import "./chunk-VEQXQN22.js";
 
 // src/services/post-tool-pr-notifier.ts

package/dist/src/subagent-mcp.js

@@ -11,7 +11,7 @@ import {
   spawnSubagentRequestSchema,
   subagentResponseSchema,
   waitSubagentRequestSchema
-} from "./chunk-2G5ZU67U.js";
+} from "./chunk-BG4HQ56D.js";
 import "./chunk-VEQXQN22.js";
 
 // src/subagent-mcp.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.1291",
+  "version": "0.1.1293",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",