replicas-engine 0.1.1303 → 0.1.1306

package/dist/src/{asp-host-SNQAHZ4O.js → asp-host-AQZFJO5T.js}

@@ -8,12 +8,12 @@ import {
   listRunningCodexModels,
   restartCodexAspHost,
   restartCodexAspHostIfRunning
-} from "./chunk-5OA7WBDC.js";
-import "./chunk-5ERKSVWK.js";
-import "./chunk-VQQPKWKF.js";
-import "./chunk-5MKQOOKZ.js";
+} from "./chunk-YJ7NCHM6.js";
+import "./chunk-TKAWFIXX.js";
+import "./chunk-OSPDTEXF.js";
+import "./chunk-IHC4JY3Q.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-MXHSZLHO.js";
+import "./chunk-QBNBBWCE.js";
 import "./chunk-VEQXQN22.js";
 export {
   CODEX_ULTRAFAST_SERVICE_TIER,

package/dist/src/{chunk-HWYNJQUU.js → chunk-4AY3GCWL.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   AspClient
-} from "./chunk-VQQPKWKF.js";
+} from "./chunk-OSPDTEXF.js";
 import {
   ASTER_BASE_URL,
   ASTER_PROVIDER,
@@ -15,7 +15,7 @@ import {
   isRecord,
   readOllamaAuthEnv,
   readOpenAICompatibleAuthEnv
-} from "./chunk-MXHSZLHO.js";
+} from "./chunk-QBNBBWCE.js";
 
 // src/managers/codex-asp/notification-dispatch.ts
 var TURN_STARTED_METHOD = "turn/started";

package/dist/src/{chunk-XHKAQ3OC.js → chunk-DDUTPOJ3.js}

@@ -5,7 +5,7 @@ import {
   extractCommandProtectionCommandText,
   isRecord,
   parseCodeHostPrUrl
-} from "./chunk-MXHSZLHO.js";
+} from "./chunk-QBNBBWCE.js";
 
 // src/services/published-pull-request-urls.ts
 function publishedPullRequestUrls(result) {

package/dist/src/{chunk-5MKQOOKZ.js → chunk-IHC4JY3Q.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES
-} from "./chunk-MXHSZLHO.js";
+} from "./chunk-QBNBBWCE.js";
 
 // src/utils/exec.ts
 import { exec, execFile } from "child_process";

package/dist/src/{chunk-VQQPKWKF.js → chunk-OSPDTEXF.js}

@@ -3,10 +3,10 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   execFileAsync
-} from "./chunk-5MKQOOKZ.js";
+} from "./chunk-IHC4JY3Q.js";
 import {
   isVersionBelow
-} from "./chunk-MXHSZLHO.js";
+} from "./chunk-QBNBBWCE.js";
 
 // src/utils/codex-agent-env.ts
 function buildCodexAgentEnv(source = process.env) {
@@ -240,7 +240,7 @@ function getCodexModelProvider(method) {
   if (method === "foundry") return "azure";
   return method === "ollama" || method === "openai-compatible" ? "replicas_openai_compatible" : "openai";
 }
-var ENGINE_PACKAGE_VERSION = "0.1.1303";
+var ENGINE_PACKAGE_VERSION = "0.1.1306";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/{chunk-MXHSZLHO.js → chunk-QBNBBWCE.js}

@@ -9720,6 +9720,7 @@ function findPushSignals({ commands, invocations, truncated }, context) {
   });
   return truncated ? [...signals, "git-push-unknown-destination"] : signals;
 }
+var apiMethod = (args) => /(?:^|\s)(?:-X\s*|--method[\s=])(\w+)/i.exec(args.join(" "))?.[1]?.toUpperCase();
 function isPrMergeCommand(argv) {
   const name = argv[0].split("/").pop();
   if (name !== "gh" && name !== "glab") return false;
@@ -9727,8 +9728,7 @@ function isPrMergeCommand(argv) {
   if (args.includes("--help") || args.includes("-h")) return false;
   const words = args.filter((arg, index) => !arg.startsWith("-") && !/^(?:-R|--repo)$/.test(args[index - 1] ?? ""));
   if (words[0] === (name === "gh" ? "pr" : "mr") && words[1] === "merge") return true;
-  const method = /(?:^|\s)(?:-X\s*|--method[\s=])(\w+)/i.exec(args.join(" "))?.[1];
-  return words[0] === "api" && method?.toUpperCase() === "PUT" && words.some((word) => /\/(?:pulls|merge_requests)\/[^/]+\/merge$/.test(word));
+  return words[0] === "api" && apiMethod(args) === "PUT" && words.some((word) => /\/(?:pulls|merge_requests)\/[^/]+\/merge$/.test(word));
 }
 var matchingChecks = (checks, text3) => checks.flatMap(([name, pattern]) => pattern.test(text3) ? [name] : []);
 function executedText(commands, keepWord = () => true) {
@@ -9760,6 +9760,29 @@ function findPrMergeSignals(parsed, context) {
 function findGitCommitSignals({ invocations, truncated }) {
   return truncated || invocations.some(({ subcommand }) => subcommand === "commit") ? ["git-commit"] : [];
 }
+var SCOUT_BLOCKED_GIT_SUBCOMMANDS = /* @__PURE__ */ new Set(["clone", "push"]);
+var SCOUT_BLOCKED_HOST_COMMANDS = {
+  gh: ["repo clone", "repo fork", "pr create", "pr new"],
+  glab: ["repo clone", "repo fork", "mr create", "mr new"]
+};
+function findScoutRepoWriteSignals(parsed) {
+  const { commands, invocations } = parsed;
+  return [.../* @__PURE__ */ new Set([
+    ...findGitCommitSignals(parsed),
+    ...invocations.flatMap(({ subcommand }) => SCOUT_BLOCKED_GIT_SUBCOMMANDS.has(subcommand) ? [`git-${subcommand}`] : []),
+    ...commands.flatMap(({ argv }) => {
+      const name = argv[0].split("/").pop() ?? "";
+      const args = argv.slice(1);
+      const words = args.filter((arg, index) => !arg.startsWith("-") && !/^(?:-R|--repo)$/.test(args[index - 1] ?? ""));
+      const command = words.slice(0, 2).join(" ");
+      if (SCOUT_BLOCKED_HOST_COMMANDS[name]?.includes(command)) return [`${name}-${command.replace(" ", "-")}`];
+      if (name !== "gh" || words[0] !== "api" || !words.some((word) => /\/pulls\/?$/.test(word))) return [];
+      const method = apiMethod(args);
+      const hasFields = args.some((arg) => /^(?:-[fF]|--(?:raw-)?field(?:=|$)|--input(?:=|$))/.test(arg));
+      return (method ? method === "POST" : hasFields) ? ["gh-api-create-pull-request"] : [];
+    })
+  ])];
+}
 function findCommandProtectionGitLookups({ invocations }) {
   const writes = invocations.filter(({ subcommand }) => subcommand === "commit" || subcommand === "push");
   const messageFiles = writes.flatMap(({ subcommand, args, dir, command }) => {
@@ -10892,6 +10915,7 @@ export {
   parseCommandProtectionRequest,
   findPrMergeSignals,
   findGitCommitSignals,
+  findScoutRepoWriteSignals,
   findCommandProtectionGitLookups,
   shouldRefreshPullRequests,
   MAX_REPO_FILE_CONTENT_BYTES,

package/dist/src/{chunk-5ERKSVWK.js → chunk-TKAWFIXX.js}

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-5MKQOOKZ.js";
+} from "./chunk-IHC4JY3Q.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -22,7 +22,7 @@ import {
   provisionedDeviceSchema,
   readReplicasRuntimeEnv,
   serializePosixEnvFile
-} from "./chunk-MXHSZLHO.js";
+} from "./chunk-QBNBBWCE.js";
 
 // src/runtime-env-loader.ts
 import { readFileSync } from "fs";
@@ -172,6 +172,7 @@ function loadEngineEnv(runtimeEnvValues) {
     REPLICAS_ENV_DEVICES: parseDevices(readEnv("REPLICAS_ENV_DEVICES")),
     TS_AUTHKEY: readEnv("TS_AUTHKEY"),
     REPLICAS_DISABLE_AUTO_START_HOOKS: readEnv("REPLICAS_DISABLE_AUTO_START_HOOKS")?.toLowerCase() === "true",
+    REPLICAS_SCOUT: readEnv("REPLICAS_SCOUT") === "true",
     REPLICAS_MAX_LIVE_AGENT_PROCESSES: Number(readEnv("REPLICAS_MAX_LIVE_AGENT_PROCESSES")) || void 0
   };
   delete process.env.REPLICAS_ENV_DEVICES;
@@ -354,16 +355,16 @@ var MonolithService = class {
 var monolithService = new MonolithService();
 
 export {
-  runGitCommand,
-  readRepoHeadBranches,
-  getOriginDefaultBranch,
-  getCurrentBranch,
-  resolveDiffBase,
   readRuntimeEnvFile,
   ENGINE_ENV,
   reloadEngineEnv,
   setLinearSessionId,
   setAgentCredentialSnapshot,
+  runGitCommand,
+  readRepoHeadBranches,
+  getOriginDefaultBranch,
+  getCurrentBranch,
+  resolveDiffBase,
   monolithRequest,
   monolithService
 };

package/dist/src/{chunk-RCJP3KY5.js → chunk-VZXRPXJI.js}

@@ -2,22 +2,25 @@
 import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
+  ENGINE_ENV,
   getOriginDefaultBranch,
   monolithRequest,
   runGitCommand
-} from "./chunk-5ERKSVWK.js";
+} from "./chunk-TKAWFIXX.js";
 import {
   extractCommandProtectionCommandText,
   findCommandProtectionGitLookups,
   findGitCommitSignals,
   findPrMergeSignals,
+  findScoutRepoWriteSignals,
   parseCommandProtectionRequest
-} from "./chunk-MXHSZLHO.js";
+} from "./chunk-QBNBBWCE.js";
 
 // src/services/command-protection-service.ts
 import { readFile, stat } from "fs/promises";
 var DEFAULT_COMMAND_PROTECTION_BLOCK_MESSAGE = "Blocked by Replicas command protection.";
 var MAX_COMMIT_MESSAGE_FILE_BYTES = 64 * 1024;
+var SCOUT_REPO_WRITE_BLOCK_MESSAGE = "Scout never clones, commits, pushes, or opens pull requests. Spawn a workspace on an environment that has the repository, or relay this to the thread's workspace.";
 async function resolveGitContext({ repoDirs, messageFiles }) {
   if (repoDirs.length === 0 && messageFiles.length === 0) return void 0;
   const git = (dir, args) => runGitCommand(args, dir).then((output) => output || null, () => null);
@@ -56,6 +59,10 @@ function failClosed(reason, matchedSignals) {
 }
 async function evaluateCommandProtection(request, signal) {
   const parsed = parseCommandProtectionRequest(request);
+  const scoutSignals = ENGINE_ENV.REPLICAS_SCOUT ? findScoutRepoWriteSignals(parsed) : [];
+  if (scoutSignals.length > 0) {
+    return { allowed: false, enabled: true, reason: SCOUT_REPO_WRITE_BLOCK_MESSAGE, matchedSignals: scoutSignals };
+  }
   const gitContext = await resolveGitContext(findCommandProtectionGitLookups(parsed));
   const matchedSignals = [...findGitCommitSignals(parsed), ...findPrMergeSignals(parsed, gitContext).signals];
   if (matchedSignals.length === 0) {

package/dist/src/{chunk-5OA7WBDC.js → chunk-YJ7NCHM6.js}

@@ -10,15 +10,15 @@ import {
   resolveDiffBase,
   runGitCommand,
   setAgentCredentialSnapshot
-} from "./chunk-5ERKSVWK.js";
+} from "./chunk-TKAWFIXX.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-VQQPKWKF.js";
+} from "./chunk-OSPDTEXF.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-5MKQOOKZ.js";
+} from "./chunk-IHC4JY3Q.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
@@ -56,7 +56,7 @@ import {
   resolveOpenAICompatibleModelsUrl,
   splitMothershipInstructions,
   withTimeout
-} from "./chunk-MXHSZLHO.js";
+} from "./chunk-QBNBBWCE.js";
 
 // src/managers/codex-token-manager.ts
 import { promises as fs } from "fs";
@@ -306,7 +306,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     await this.applyCredentialUpdate(++this.credentialGeneration, async () => {
       await this.applyCredentialsResponse(data);
       setAgentCredentialSnapshot("codex", data);
-      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-SNQAHZ4O.js");
+      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-AQZFJO5T.js");
       await restartCodexAspHostIfRunning2();
     });
     await this.start(true);
@@ -328,7 +328,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
       const accountChanged = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.codex?.credentialId !== data.credentialId;
       await this.applyCredentialsResponse(data);
       if (restartOnChange && (accountChanged || CODEX_AUTH_ENV_KEYS.some((key, index) => process.env[key] !== previousEnv[index]))) {
-        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-SNQAHZ4O.js");
+        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-AQZFJO5T.js");
         await restartCodexAspHostIfRunning2();
       }
       setAgentCredentialSnapshot("codex", data);

package/dist/src/command-protection-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-RCJP3KY5.js";
-import "./chunk-5ERKSVWK.js";
-import "./chunk-5MKQOOKZ.js";
+} from "./chunk-VZXRPXJI.js";
+import "./chunk-TKAWFIXX.js";
+import "./chunk-IHC4JY3Q.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-MXHSZLHO.js";
+import "./chunk-QBNBBWCE.js";
 import "./chunk-VEQXQN22.js";
 
 // src/command-protection-hook.ts

package/dist/src/headless-agent.js

@@ -14,12 +14,12 @@ import {
   recoverCompletedTurn,
   spawnMuseMsp,
   startMuseSession
-} from "./chunk-HWYNJQUU.js";
+} from "./chunk-4AY3GCWL.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-VQQPKWKF.js";
-import "./chunk-5MKQOOKZ.js";
+} from "./chunk-OSPDTEXF.js";
+import "./chunk-IHC4JY3Q.js";
 import {
   AGENT,
   OPENCODE_GO_PROVIDER,
@@ -29,7 +29,7 @@ import {
   headlessAgentUsagePath,
   isRecord,
   withTimeout
-} from "./chunk-MXHSZLHO.js";
+} from "./chunk-QBNBBWCE.js";
 import "./chunk-VEQXQN22.js";
 
 // src/headless-agent.ts

package/dist/src/index.js

@@ -27,7 +27,7 @@ import {
   evaluateCommandProtection,
   extractToolCommand,
   reportCommandProtectionBlock
-} from "./chunk-RCJP3KY5.js";
+} from "./chunk-VZXRPXJI.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -65,10 +65,10 @@ import {
   spawnMuseMsp,
   startMuseSession,
   uuidV7
-} from "./chunk-HWYNJQUU.js";
+} from "./chunk-4AY3GCWL.js";
 import {
   publishedPullRequestUrls
-} from "./chunk-XHKAQ3OC.js";
+} from "./chunk-DDUTPOJ3.js";
 import {
   ACCOUNT_RATE_LIMITS_READ_METHOD,
   AsyncLock,
@@ -143,7 +143,7 @@ import {
   timestampFromSeconds,
   upsertCredentialFileLines,
   writeSecureCredentialFile
-} from "./chunk-5OA7WBDC.js";
+} from "./chunk-YJ7NCHM6.js";
 import {
   ENGINE_ENV,
   monolithRequest,
@@ -153,15 +153,15 @@ import {
   resolveDiffBase,
   setAgentCredentialSnapshot,
   setLinearSessionId
-} from "./chunk-5ERKSVWK.js";
+} from "./chunk-TKAWFIXX.js";
 import {
   getCodexModelProvider
-} from "./chunk-VQQPKWKF.js";
+} from "./chunk-OSPDTEXF.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execAsync,
   execFileAsync
-} from "./chunk-5MKQOOKZ.js";
+} from "./chunk-IHC4JY3Q.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -415,7 +415,7 @@ import {
   workspaceTokenRequestSchema,
   workspaceTokenResponseSchema,
   wrapInTag
-} from "./chunk-MXHSZLHO.js";
+} from "./chunk-QBNBBWCE.js";
 import {
   cloneMcpConfig,
   ensureCompatibilityImports,
@@ -10639,11 +10639,9 @@ function getComparableUserMessage(event) {
 }
 function areDuplicateUserMessages(a, b) {
   if (areSameUserMessageEvents(a, b)) return true;
-  const aId = getUserMessageId(a);
-  const bId = getUserMessageId(b);
+  const { userMessageId: aId, userMessage: aMessage } = workspaceChatEventSignals(a);
+  const { userMessageId: bId, userMessage: bMessage } = workspaceChatEventSignals(b);
   if (aId !== null && bId !== null && aId !== bId) return false;
-  const aMessage = getComparableUserMessage(a);
-  const bMessage = getComparableUserMessage(b);
   if (!aMessage || aMessage !== bMessage) return false;
   const aAccepted = isAcceptedUserMessage(a);
   const bAccepted = isAcceptedUserMessage(b);
@@ -10652,7 +10650,7 @@ function areDuplicateUserMessages(a, b) {
     { content: bMessage, timestamp: b.timestamp }
   ) : false;
 }
-var eventJsonCache = /* @__PURE__ */ new WeakMap();
+var eventSignalsCache = /* @__PURE__ */ new WeakMap();
 function claudeToolResultId(event) {
   if (event.type !== "claude-user") return null;
   const { message } = event.payload;
@@ -10661,17 +10659,18 @@ function claudeToolResultId(event) {
   return isRecord(result) && typeof result.tool_use_id === "string" ? `tool_result:${result.tool_use_id}` : null;
 }
 function workspaceChatEventSignals(event) {
-  let json = eventJsonCache.get(event);
-  if (json === void 0) {
-    json = JSON.stringify(event);
-    eventJsonCache.set(event, json);
+  let signals = eventSignalsCache.get(event);
+  if (signals === void 0) {
+    signals = {
+      streamId: getEventStreamId(event) ?? claudeToolResultId(event),
+      json: JSON.stringify(event),
+      userMessage: getComparableUserMessage(event),
+      userMessageId: event.type === QUEUED_MESSAGE_REMOVED_EVENT_TYPE ? null : getUserMessageId(event),
+      timestampMs: getEventTimestampMs(event)
+    };
+    eventSignalsCache.set(event, signals);
   }
-  return {
-    streamId: getEventStreamId(event) ?? claudeToolResultId(event),
-    json,
-    userMessage: getComparableUserMessage(event),
-    userMessageId: event.type === QUEUED_MESSAGE_REMOVED_EVENT_TYPE ? null : getUserMessageId(event)
-  };
+  return signals;
 }
 var emptyIndex = () => ({
   byStreamId: /* @__PURE__ */ new Map(),
@@ -10799,12 +10798,13 @@ function mergeWorkspaceChatHistoryEvents(primary, supplemental, removedMessageId
   );
 }
 function insertChronologically(existing, additions) {
-  const sorted = [...additions].sort((a, b) => getEventTimestampMs(a) - getEventTimestampMs(b));
+  const timestampMs2 = (event) => workspaceChatEventSignals(event).timestampMs;
+  const sorted = [...additions].sort((a, b) => timestampMs2(a) - timestampMs2(b));
   const result = [];
   let next = 0;
   for (const event of existing) {
-    const ms = getEventTimestampMs(event);
-    while (next < sorted.length && getEventTimestampMs(sorted[next]) < ms) result.push(sorted[next++]);
+    const ms = timestampMs2(event);
+    while (next < sorted.length && timestampMs2(sorted[next]) < ms) result.push(sorted[next++]);
     result.push(event);
   }
   result.push(...sorted.slice(next));

package/dist/src/post-tool-pr-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   publishedPullRequestUrls
-} from "./chunk-XHKAQ3OC.js";
+} from "./chunk-DDUTPOJ3.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
 import {
   shouldRefreshPullRequests
-} from "./chunk-MXHSZLHO.js";
+} from "./chunk-QBNBBWCE.js";
 import "./chunk-VEQXQN22.js";
 
 // src/services/post-tool-pr-notifier.ts

package/dist/src/subagent-mcp.js

@@ -11,7 +11,7 @@ import {
   spawnSubagentRequestSchema,
   subagentResponseSchema,
   waitSubagentRequestSchema
-} from "./chunk-MXHSZLHO.js";
+} from "./chunk-QBNBBWCE.js";
 import "./chunk-VEQXQN22.js";
 
 // src/subagent-mcp.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.1303",
+  "version": "0.1.1306",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",