replicas-engine 0.1.1312 → 0.1.1314

package/dist/src/{asp-host-5YBXALSS.js → asp-host-EL42KXDC.js}

@@ -8,12 +8,12 @@ import {
   listRunningCodexModels,
   restartCodexAspHost,
   restartCodexAspHostIfRunning
-} from "./chunk-4FC4NBAH.js";
-import "./chunk-FJGC3SKY.js";
-import "./chunk-D6BGWZZE.js";
-import "./chunk-PKLNM4OL.js";
+} from "./chunk-4QZ7XHR7.js";
+import "./chunk-U7VLLW2G.js";
+import "./chunk-PAOPBQ5K.js";
+import "./chunk-KKGZ52QD.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-BG2GDBAV.js";
+import "./chunk-UV7FB3QX.js";
 import "./chunk-VEQXQN22.js";
 export {
   CODEX_ULTRAFAST_SERVICE_TIER,

package/dist/src/{chunk-3KI4Z7U5.js → chunk-2UGSLVGB.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   AspClient
-} from "./chunk-D6BGWZZE.js";
+} from "./chunk-PAOPBQ5K.js";
 import {
   ASTER_BASE_URL,
   ASTER_PROVIDER,
@@ -15,7 +15,7 @@ import {
   isRecord,
   readOllamaAuthEnv,
   readOpenAICompatibleAuthEnv
-} from "./chunk-BG2GDBAV.js";
+} from "./chunk-UV7FB3QX.js";
 
 // src/managers/codex-asp/notification-dispatch.ts
 var TURN_STARTED_METHOD = "turn/started";

package/dist/src/{chunk-4FC4NBAH.js → chunk-4QZ7XHR7.js}

@@ -10,15 +10,15 @@ import {
   resolveDiffBase,
   runGitCommand,
   setAgentCredentialSnapshot
-} from "./chunk-FJGC3SKY.js";
+} from "./chunk-U7VLLW2G.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-D6BGWZZE.js";
+} from "./chunk-PAOPBQ5K.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-PKLNM4OL.js";
+} from "./chunk-KKGZ52QD.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
@@ -56,7 +56,7 @@ import {
   resolveOpenAICompatibleModelsUrl,
   splitMothershipInstructions,
   withTimeout
-} from "./chunk-BG2GDBAV.js";
+} from "./chunk-UV7FB3QX.js";
 
 // src/managers/codex-token-manager.ts
 import { promises as fs } from "fs";
@@ -306,7 +306,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     await this.applyCredentialUpdate(++this.credentialGeneration, async () => {
       await this.applyCredentialsResponse(data);
       setAgentCredentialSnapshot("codex", data);
-      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-5YBXALSS.js");
+      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-EL42KXDC.js");
       await restartCodexAspHostIfRunning2();
     });
     await this.start(true);
@@ -328,7 +328,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
       const accountChanged = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.codex?.credentialId !== data.credentialId;
       await this.applyCredentialsResponse(data);
       if (restartOnChange && (accountChanged || CODEX_AUTH_ENV_KEYS.some((key, index) => process.env[key] !== previousEnv[index]))) {
-        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-5YBXALSS.js");
+        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-EL42KXDC.js");
         await restartCodexAspHostIfRunning2();
       }
       setAgentCredentialSnapshot("codex", data);
@@ -511,7 +511,7 @@ async function configureManagedGitCredentialHelper(homeDir) {
   const credentialsPath = join2(homeDir, ".git-credentials");
   const helperPath = join2(homeDir, GIT_CREDENTIAL_HELPER_FILENAME);
   await atomicWriteFile(helperPath, buildGitCredentialHelperScript(credentialsPath), { mode: 448 });
-  await execFileAsync("git", ["config", "--global", "credential.helper", helperPath], {
+  await execFileAsync("git", ["config", "--global", "--replace-all", "credential.helper", helperPath], {
     env: { ...process.env, HOME: homeDir }
   });
   await execFileAsync("git", ["config", "--global", "credential.https://github.com.useHttpPath", "true"], {

package/dist/src/{chunk-GBZIVMEH.js → chunk-7AKRQ6LY.js}

@@ -6,7 +6,7 @@ import {
   getOriginDefaultBranch,
   monolithRequest,
   runGitCommand
-} from "./chunk-FJGC3SKY.js";
+} from "./chunk-U7VLLW2G.js";
 import {
   extractCommandProtectionCommandText,
   findCommandProtectionGitLookups,
@@ -14,7 +14,7 @@ import {
   findPrMergeSignals,
   findScoutRepoWriteSignals,
   parseCommandProtectionRequest
-} from "./chunk-BG2GDBAV.js";
+} from "./chunk-UV7FB3QX.js";
 
 // src/services/command-protection-service.ts
 import { readFile, stat } from "fs/promises";

package/dist/src/{chunk-PKLNM4OL.js → chunk-KKGZ52QD.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES
-} from "./chunk-BG2GDBAV.js";
+} from "./chunk-UV7FB3QX.js";
 
 // src/utils/exec.ts
 import { exec, execFile } from "child_process";

package/dist/src/{chunk-D6BGWZZE.js → chunk-PAOPBQ5K.js}

@@ -3,10 +3,10 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   execFileAsync
-} from "./chunk-PKLNM4OL.js";
+} from "./chunk-KKGZ52QD.js";
 import {
   isVersionBelow
-} from "./chunk-BG2GDBAV.js";
+} from "./chunk-UV7FB3QX.js";
 
 // src/utils/codex-agent-env.ts
 function buildCodexAgentEnv(source = process.env) {
@@ -240,7 +240,7 @@ function getCodexModelProvider(method) {
   if (method === "foundry") return "azure";
   return method === "ollama" || method === "openai-compatible" ? "replicas_openai_compatible" : "openai";
 }
-var ENGINE_PACKAGE_VERSION = "0.1.1312";
+var ENGINE_PACKAGE_VERSION = "0.1.1313";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/{chunk-FJGC3SKY.js → chunk-U7VLLW2G.js}

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-PKLNM4OL.js";
+} from "./chunk-KKGZ52QD.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -17,12 +17,11 @@ import {
   fallbackPlanResponseSchema,
   isRecord,
   isValidAgentProvider,
-  parsePosixEnvFile,
-  parsePosixEnvUnsetKeys,
+  parsePosixEnv,
   provisionedDeviceSchema,
   readReplicasRuntimeEnv,
   serializePosixEnvFile
-} from "./chunk-BG2GDBAV.js";
+} from "./chunk-UV7FB3QX.js";
 
 // src/runtime-env-loader.ts
 import { readFileSync } from "fs";
@@ -31,20 +30,20 @@ import { join } from "path";
 var loadedKeys = [];
 function readRuntimeEnvFile() {
   try {
-    return parsePosixEnvFile(readFileSync(join(homedir(), ".replicas", "runtime-env.sh"), "utf-8"));
+    return parsePosixEnv(readFileSync(join(homedir(), ".replicas", "runtime-env.sh"), "utf-8"));
   } catch {
     return null;
   }
 }
-function loadRuntimeEnvFile(values = readRuntimeEnvFile()) {
-  if (!values) return;
-  for (const key of loadedKeys) {
-    if (!(key in values)) delete process.env[key];
+function loadRuntimeEnvFile(file = readRuntimeEnvFile()) {
+  if (!file) return;
+  for (const key of [...loadedKeys, ...file.unsetKeys]) {
+    if (!(key in file.values)) delete process.env[key];
   }
-  for (const [key, value] of Object.entries(values)) {
+  for (const [key, value] of Object.entries(file.values)) {
     process.env[key] = value;
   }
-  loadedKeys = Object.keys(values);
+  loadedKeys = Object.keys(file.values);
 }
 
 // src/engine-env.ts
@@ -129,8 +128,8 @@ function parseAgentCredentialSnapshots(value) {
     return {};
   }
 }
-function loadEngineEnv(runtimeEnvValues) {
-  loadRuntimeEnvFile(runtimeEnvValues);
+function loadEngineEnv(runtimeEnvFile) {
+  loadRuntimeEnvFile(runtimeEnvFile);
   const HOME_DIR = homedir2();
   const env = {
     // Defined: always available
@@ -179,17 +178,17 @@ function loadEngineEnv(runtimeEnvValues) {
   return env;
 }
 var ENGINE_ENV = loadEngineEnv();
-function reloadEngineEnv(runtimeEnvValues) {
-  ENGINE_ENV = loadEngineEnv(runtimeEnvValues);
+function reloadEngineEnv(runtimeEnvFile) {
+  ENGINE_ENV = loadEngineEnv(runtimeEnvFile);
   return ENGINE_ENV;
 }
 function setLinearSessionId(linearSessionId) {
   const path = join2(homedir2(), ".replicas", "runtime-env.sh");
-  const content = readFileSync2(path, "utf-8");
+  const persisted = parsePosixEnv(readFileSync2(path, "utf-8"));
   const key = REPLICAS_RUNTIME_ENV_ALIASES.linearSessionId[0];
   writeFileSync(path, serializePosixEnvFile(
-    { ...parsePosixEnvFile(content), [key]: linearSessionId },
-    parsePosixEnvUnsetKeys(content).filter((unset) => unset !== key)
+    { ...persisted.values, [key]: linearSessionId },
+    persisted.unsetKeys.filter((unset) => unset !== key)
   ));
   process.env[key] = linearSessionId;
   ENGINE_ENV.REPLICAS_LINEAR_SESSION_ID = linearSessionId;

package/dist/src/{chunk-BG2GDBAV.js → chunk-UV7FB3QX.js}

@@ -2004,11 +2004,9 @@ function serializePosixEnvFile(env, unsetKeys = []) {
   ].join("\n")}
 `;
 }
-function parsePosixEnvUnsetKeys(content) {
-  return content.split("\n").filter((line) => line.startsWith("unset ")).map((line) => line.slice("unset ".length).trim());
-}
-function parsePosixEnvFile(content) {
+function parsePosixEnv(content) {
   const result = {};
+  const unsetKeys = [];
   let pos = 0;
   while (pos < content.length) {
     let lineStart;
@@ -2021,6 +2019,9 @@ function parsePosixEnvFile(content) {
     }
     if (!content.startsWith("export ", lineStart)) {
       const nl2 = content.indexOf("\n", lineStart);
+      if (content.startsWith("unset ", lineStart)) {
+        unsetKeys.push(content.slice(lineStart + "unset ".length, nl2 === -1 ? void 0 : nl2).trim());
+      }
       if (nl2 === -1) break;
       pos = nl2 + 1;
       continue;
@@ -2059,7 +2060,7 @@ function parsePosixEnvFile(content) {
     const nl = content.indexOf("\n", cursor);
     pos = nl === -1 ? content.length : nl + 1;
   }
-  return result;
+  return { values: result, unsetKeys };
 }
 
 // ../shared/src/engine/environment.ts
@@ -10856,8 +10857,7 @@ export {
   readReplicasRuntimeEnv,
   shellQuotePosix,
   serializePosixEnvFile,
-  parsePosixEnvUnsetKeys,
-  parsePosixEnvFile,
+  parsePosixEnv,
   ENGINE_PORT,
   DESKTOP_STREAM_PORT,
   DEVICES_DIR,

package/dist/src/{chunk-CPBB3JKK.js → chunk-YPQAQGW3.js}

@@ -5,7 +5,7 @@ import {
   extractCommandProtectionCommandText,
   isRecord,
   parseCodeHostPrUrl
-} from "./chunk-BG2GDBAV.js";
+} from "./chunk-UV7FB3QX.js";
 
 // src/services/published-pull-request-urls.ts
 function publishedPullRequestUrls(result) {

package/dist/src/command-protection-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-GBZIVMEH.js";
-import "./chunk-FJGC3SKY.js";
-import "./chunk-PKLNM4OL.js";
+} from "./chunk-7AKRQ6LY.js";
+import "./chunk-U7VLLW2G.js";
+import "./chunk-KKGZ52QD.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-BG2GDBAV.js";
+import "./chunk-UV7FB3QX.js";
 import "./chunk-VEQXQN22.js";
 
 // src/command-protection-hook.ts

package/dist/src/headless-agent.js

@@ -14,12 +14,12 @@ import {
   recoverCompletedTurn,
   spawnMuseMsp,
   startMuseSession
-} from "./chunk-3KI4Z7U5.js";
+} from "./chunk-2UGSLVGB.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-D6BGWZZE.js";
-import "./chunk-PKLNM4OL.js";
+} from "./chunk-PAOPBQ5K.js";
+import "./chunk-KKGZ52QD.js";
 import {
   AGENT,
   OPENCODE_GO_PROVIDER,
@@ -29,7 +29,7 @@ import {
   headlessAgentUsagePath,
   isRecord,
   withTimeout
-} from "./chunk-BG2GDBAV.js";
+} from "./chunk-UV7FB3QX.js";
 import "./chunk-VEQXQN22.js";
 
 // src/headless-agent.ts

package/dist/src/index.js

@@ -27,7 +27,7 @@ import {
   evaluateCommandProtection,
   extractToolCommand,
   reportCommandProtectionBlock
-} from "./chunk-GBZIVMEH.js";
+} from "./chunk-7AKRQ6LY.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -65,10 +65,10 @@ import {
   spawnMuseMsp,
   startMuseSession,
   uuidV7
-} from "./chunk-3KI4Z7U5.js";
+} from "./chunk-2UGSLVGB.js";
 import {
   publishedPullRequestUrls
-} from "./chunk-CPBB3JKK.js";
+} from "./chunk-YPQAQGW3.js";
 import {
   ACCOUNT_RATE_LIMITS_READ_METHOD,
   AsyncLock,
@@ -143,7 +143,7 @@ import {
   timestampFromSeconds,
   upsertCredentialFileLines,
   writeSecureCredentialFile
-} from "./chunk-4FC4NBAH.js";
+} from "./chunk-4QZ7XHR7.js";
 import {
   ENGINE_ENV,
   monolithRequest,
@@ -153,15 +153,15 @@ import {
   resolveDiffBase,
   setAgentCredentialSnapshot,
   setLinearSessionId
-} from "./chunk-FJGC3SKY.js";
+} from "./chunk-U7VLLW2G.js";
 import {
   getCodexModelProvider
-} from "./chunk-D6BGWZZE.js";
+} from "./chunk-PAOPBQ5K.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execAsync,
   execFileAsync
-} from "./chunk-PKLNM4OL.js";
+} from "./chunk-KKGZ52QD.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -415,7 +415,7 @@ import {
   workspaceTokenRequestSchema,
   workspaceTokenResponseSchema,
   wrapInTag
-} from "./chunk-BG2GDBAV.js";
+} from "./chunk-UV7FB3QX.js";
 import {
   cloneMcpConfig,
   ensureCompatibilityImports,
@@ -64339,7 +64339,7 @@ var authMiddleware = async (c, next) => {
     return c.json({ error: "Unauthorized: X-Replicas-Engine-Secret header required" }, 401);
   }
   const activating = c.req.path === ENGINE_ACTIVATE_PATH;
-  const accepted = secret === ENGINE_ENV.REPLICAS_ENGINE_SECRET || activating && lifecycle.state === "parked" && secret === readRuntimeEnvFile()?.REPLICAS_ENGINE_SECRET;
+  const accepted = secret === ENGINE_ENV.REPLICAS_ENGINE_SECRET || activating && lifecycle.state === "parked" && secret === readRuntimeEnvFile()?.values.REPLICAS_ENGINE_SECRET;
   if (!accepted) {
     return c.json({ error: "Unauthorized: Invalid secret" }, 401);
   }
@@ -64576,9 +64576,9 @@ async function stopWorkspaceServices() {
 }
 async function activate(requested) {
   await engineBooted.promise;
-  const values = readRuntimeEnvFile();
-  const workspaceId = values && readReplicasRuntimeEnv((name) => values[name], REPLICAS_RUNTIME_ENV_ALIASES.workspaceId);
-  if (!values || !workspaceId) {
+  const runtimeEnvFile = readRuntimeEnvFile();
+  const workspaceId = runtimeEnvFile && readReplicasRuntimeEnv((name) => runtimeEnvFile.values[name], REPLICAS_RUNTIME_ENV_ALIASES.workspaceId);
+  if (!runtimeEnvFile || !workspaceId) {
     return createErrorResult({ message: "Settings file has no workspace id", code: 400 });
   }
   if (requested && requested.workspaceId !== workspaceId) {
@@ -64589,7 +64589,7 @@ async function activate(requested) {
   }
   lifecycle.claim(workspaceId);
   await stopWorkspaceServices();
-  reloadEngineEnv(values);
+  reloadEngineEnv(runtimeEnvFile);
   startupStartedAt = performance.now();
   backgroundController = new AbortController();
   const signal = backgroundController.signal;

package/dist/src/post-tool-pr-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   publishedPullRequestUrls
-} from "./chunk-CPBB3JKK.js";
+} from "./chunk-YPQAQGW3.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
 import {
   shouldRefreshPullRequests
-} from "./chunk-BG2GDBAV.js";
+} from "./chunk-UV7FB3QX.js";
 import "./chunk-VEQXQN22.js";
 
 // src/services/post-tool-pr-notifier.ts

package/dist/src/subagent-mcp.js

@@ -11,7 +11,7 @@ import {
   spawnSubagentRequestSchema,
   subagentResponseSchema,
   waitSubagentRequestSchema
-} from "./chunk-BG2GDBAV.js";
+} from "./chunk-UV7FB3QX.js";
 import "./chunk-VEQXQN22.js";
 
 // src/subagent-mcp.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.1312",
+  "version": "0.1.1314",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",