replicas-engine 0.1.1335 → 0.1.1337

package/dist/src/{asp-host-DTHXBS7M.js → asp-host-KKYDT332.js}

@@ -8,12 +8,12 @@ import {
   listRunningCodexModels,
   restartCodexAspHost,
   restartCodexAspHostIfRunning
-} from "./chunk-BACQO2PI.js";
-import "./chunk-DOYKONMX.js";
-import "./chunk-3PQ6CG3I.js";
-import "./chunk-BDLWFK5Y.js";
+} from "./chunk-EN3MIIS3.js";
+import "./chunk-255L77KW.js";
+import "./chunk-TRXOPGTJ.js";
+import "./chunk-Y3EUVNQN.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-TP6SGS6C.js";
+import "./chunk-KX3PARGH.js";
 import "./chunk-VEQXQN22.js";
 export {
   CODEX_ULTRAFAST_SERVICE_TIER,

package/dist/src/{chunk-DOYKONMX.js → chunk-255L77KW.js}

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-BDLWFK5Y.js";
+} from "./chunk-Y3EUVNQN.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -21,7 +21,7 @@ import {
   provisionedDeviceSchema,
   readReplicasRuntimeEnv,
   serializePosixEnvFile
-} from "./chunk-TP6SGS6C.js";
+} from "./chunk-KX3PARGH.js";
 
 // src/runtime-env-loader.ts
 import { readFileSync } from "fs";

package/dist/src/{chunk-RH7Z62FZ.js → chunk-63D726GL.js}

@@ -6,7 +6,7 @@ import {
   getOriginDefaultBranch,
   monolithRequest,
   runGitCommand
-} from "./chunk-DOYKONMX.js";
+} from "./chunk-255L77KW.js";
 import {
   extractCommandProtectionCommandText,
   findCommandProtectionGitLookups,
@@ -14,7 +14,7 @@ import {
   findPrMergeSignals,
   findScoutRepoWriteSignals,
   parseCommandProtectionRequest
-} from "./chunk-TP6SGS6C.js";
+} from "./chunk-KX3PARGH.js";
 
 // src/services/command-protection-service.ts
 import { readFile, stat } from "fs/promises";

package/dist/src/{chunk-BACQO2PI.js → chunk-EN3MIIS3.js}

@@ -10,15 +10,15 @@ import {
   resolveDiffBase,
   runGitCommand,
   setAgentCredentialSnapshot
-} from "./chunk-DOYKONMX.js";
+} from "./chunk-255L77KW.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-3PQ6CG3I.js";
+} from "./chunk-TRXOPGTJ.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-BDLWFK5Y.js";
+} from "./chunk-Y3EUVNQN.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
@@ -56,7 +56,7 @@ import {
   resolveOpenAICompatibleModelsUrl,
   splitMothershipInstructions,
   withTimeout
-} from "./chunk-TP6SGS6C.js";
+} from "./chunk-KX3PARGH.js";
 
 // src/managers/codex-token-manager.ts
 import { promises as fs } from "fs";
@@ -139,6 +139,7 @@ function refreshDelayMs(expiresAtMs, maxMs = 5 * 60 * 1e3) {
   const ttlMs = expiresAtMs - Date.now();
   return Number.isFinite(ttlMs) ? Math.max(1e3, Math.min(maxMs, Math.floor(ttlMs * 0.8))) : maxMs;
 }
+var SHARED_REFRESH_MS = 1e4;
 var BaseRefreshManager = class {
   constructor(managerName, intervalMs = 15 * 60 * 1e3) {
     this.managerName = managerName;
@@ -158,6 +159,7 @@ var BaseRefreshManager = class {
   credentialUpdate = Promise.resolve();
   intervalHandle = null;
   pendingRefresh = null;
+  recentRefresh = null;
   health;
   async start(skipInitialRefresh = false) {
     if (this.intervalHandle) {
@@ -262,6 +264,17 @@ var BaseRefreshManager = class {
     }, delayMs);
     console.log(`[${this.managerName}] Token refresh scheduled in ${Math.round(delayMs / 1e3)} seconds`);
   }
+  refreshShared(rejected = false) {
+    if (!rejected && this.recentRefresh && Date.now() - this.recentRefresh.startedAt < SHARED_REFRESH_MS) {
+      return this.recentRefresh.result;
+    }
+    const recent = { startedAt: Date.now(), result: this.refreshOnce() };
+    this.recentRefresh = recent;
+    void recent.result.then((result) => {
+      if (!result.ok && this.recentRefresh === recent) this.recentRefresh = null;
+    });
+    return recent.result;
+  }
   async refreshOnce(force = false) {
     if (!force && this.getSkipReason()) {
       return createSuccessResult();
@@ -306,7 +319,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     await this.applyCredentialUpdate(++this.credentialGeneration, async () => {
       await this.applyCredentialsResponse(data);
       setAgentCredentialSnapshot("codex", data);
-      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-DTHXBS7M.js");
+      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-KKYDT332.js");
       await restartCodexAspHostIfRunning2();
     });
     await this.start(true);
@@ -328,7 +341,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
       const accountChanged = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.codex?.credentialId !== data.credentialId;
       await this.applyCredentialsResponse(data);
       if (restartOnChange && (accountChanged || CODEX_AUTH_ENV_KEYS.some((key, index) => process.env[key] !== previousEnv[index]))) {
-        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-DTHXBS7M.js");
+        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-KKYDT332.js");
         await restartCodexAspHostIfRunning2();
       }
       setAgentCredentialSnapshot("codex", data);

package/dist/src/{chunk-JI5JLM5L.js → chunk-GXH3ND2D.js}

@@ -5,7 +5,7 @@ import {
   extractCommandProtectionCommandText,
   isRecord,
   parseCodeHostPrUrl
-} from "./chunk-TP6SGS6C.js";
+} from "./chunk-KX3PARGH.js";
 
 // src/services/published-pull-request-urls.ts
 function publishedPullRequestUrls(result) {

package/dist/src/{chunk-TP6SGS6C.js → chunk-KX3PARGH.js}

@@ -2156,7 +2156,7 @@ refresh_credential() {
   esac
   [ -n "\${REPLICAS_ENGINE_SECRET:-}" ] || return 1
   command -v curl >/dev/null 2>&1 || return 1
-  curl --silent --fail --connect-timeout 1 --max-time 5     -X POST     -H "X-Replicas-Engine-Secret: $REPLICAS_ENGINE_SECRET"     "http://127.0.0.1:\${REPLICAS_ENGINE_PORT:-${ENGINE_PORT}}$refresh_path"     >/dev/null 2>&1
+  curl --silent --fail --connect-timeout 1 --max-time 5     -X POST     -H "X-Replicas-Engine-Secret: $REPLICAS_ENGINE_SECRET"     "http://127.0.0.1:\${REPLICAS_ENGINE_PORT:-${ENGINE_PORT}}$refresh_path$2"     >/dev/null 2>&1
 }
 
 if [ "$1" = "get" ]; then
@@ -2190,7 +2190,7 @@ if [ "$1" = "get" ]; then
 elif [ "$1" = "erase" ]; then
   username=$(printf '%s
 ' "$request" | sed -n 's/^username=//p' | head -n 1)
-  refresh_credential "$username" || true
+  refresh_credential "$username" "?rejected" || true
 fi
 exit 0
 `;
@@ -9898,6 +9898,7 @@ function shouldRefreshPullRequests(toolName, toolInput) {
 import { z as z23 } from "zod";
 var linearSessionMetadataSchema = z23.object({
   via_mothership: z23.boolean().optional(),
+  attached: z23.boolean().optional(),
   issue_id: z23.string(),
   issue_identifier: z23.string(),
   issue_title: z23.string(),

package/dist/src/{chunk-VZTMUL75.js → chunk-MIQVNW5K.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   AspClient
-} from "./chunk-3PQ6CG3I.js";
+} from "./chunk-TRXOPGTJ.js";
 import {
   ASTER_BASE_URL,
   ASTER_PROVIDER,
@@ -15,7 +15,7 @@ import {
   isRecord,
   readOllamaAuthEnv,
   readOpenAICompatibleAuthEnv
-} from "./chunk-TP6SGS6C.js";
+} from "./chunk-KX3PARGH.js";
 
 // src/managers/codex-asp/notification-dispatch.ts
 var TURN_STARTED_METHOD = "turn/started";

package/dist/src/{chunk-3PQ6CG3I.js → chunk-TRXOPGTJ.js}

@@ -3,10 +3,10 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   execFileAsync
-} from "./chunk-BDLWFK5Y.js";
+} from "./chunk-Y3EUVNQN.js";
 import {
   isVersionBelow
-} from "./chunk-TP6SGS6C.js";
+} from "./chunk-KX3PARGH.js";
 
 // src/utils/codex-agent-env.ts
 function buildCodexAgentEnv(source = process.env) {
@@ -240,7 +240,7 @@ function getCodexModelProvider(method) {
   if (method === "foundry") return "azure";
   return method === "ollama" || method === "openai-compatible" ? "replicas_openai_compatible" : "openai";
 }
-var ENGINE_PACKAGE_VERSION = "0.1.1334";
+var ENGINE_PACKAGE_VERSION = "0.1.1335";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/{chunk-BDLWFK5Y.js → chunk-Y3EUVNQN.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES
-} from "./chunk-TP6SGS6C.js";
+} from "./chunk-KX3PARGH.js";
 
 // src/utils/exec.ts
 import { exec, execFile } from "child_process";

package/dist/src/command-protection-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-RH7Z62FZ.js";
-import "./chunk-DOYKONMX.js";
-import "./chunk-BDLWFK5Y.js";
+} from "./chunk-63D726GL.js";
+import "./chunk-255L77KW.js";
+import "./chunk-Y3EUVNQN.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-TP6SGS6C.js";
+import "./chunk-KX3PARGH.js";
 import "./chunk-VEQXQN22.js";
 
 // src/command-protection-hook.ts

package/dist/src/headless-agent.js

@@ -14,12 +14,12 @@ import {
   recoverCompletedTurn,
   spawnMuseMsp,
   startMuseSession
-} from "./chunk-VZTMUL75.js";
+} from "./chunk-MIQVNW5K.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-3PQ6CG3I.js";
-import "./chunk-BDLWFK5Y.js";
+} from "./chunk-TRXOPGTJ.js";
+import "./chunk-Y3EUVNQN.js";
 import {
   AGENT,
   OPENCODE_GO_PROVIDER,
@@ -29,7 +29,7 @@ import {
   headlessAgentUsagePath,
   isRecord,
   withTimeout
-} from "./chunk-TP6SGS6C.js";
+} from "./chunk-KX3PARGH.js";
 import "./chunk-VEQXQN22.js";
 
 // src/headless-agent.ts

package/dist/src/index.js

@@ -27,7 +27,7 @@ import {
   evaluateCommandProtection,
   extractToolCommand,
   reportCommandProtectionBlock
-} from "./chunk-RH7Z62FZ.js";
+} from "./chunk-63D726GL.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -65,10 +65,10 @@ import {
   spawnMuseMsp,
   startMuseSession,
   uuidV7
-} from "./chunk-VZTMUL75.js";
+} from "./chunk-MIQVNW5K.js";
 import {
   publishedPullRequestUrls
-} from "./chunk-JI5JLM5L.js";
+} from "./chunk-GXH3ND2D.js";
 import {
   ACCOUNT_RATE_LIMITS_READ_METHOD,
   AsyncLock,
@@ -143,7 +143,7 @@ import {
   timestampFromSeconds,
   upsertCredentialFileLines,
   writeSecureCredentialFile
-} from "./chunk-BACQO2PI.js";
+} from "./chunk-EN3MIIS3.js";
 import {
   ENGINE_ENV,
   monolithRequest,
@@ -153,15 +153,15 @@ import {
   resolveDiffBase,
   setAgentCredentialSnapshot,
   setLinearSessionId
-} from "./chunk-DOYKONMX.js";
+} from "./chunk-255L77KW.js";
 import {
   getCodexModelProvider
-} from "./chunk-3PQ6CG3I.js";
+} from "./chunk-TRXOPGTJ.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execAsync,
   execFileAsync
-} from "./chunk-BDLWFK5Y.js";
+} from "./chunk-Y3EUVNQN.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -417,7 +417,7 @@ import {
   workspaceTokenRequestSchema,
   workspaceTokenResponseSchema,
   wrapInTag
-} from "./chunk-TP6SGS6C.js";
+} from "./chunk-KX3PARGH.js";
 import {
   cloneMcpConfig,
   ensureCompatibilityImports,
@@ -12298,9 +12298,9 @@ var LinearEventForwarder = class {
 // src/services/refresh-repo-state.ts
 async function refreshRepoStatuses(observedBranchesByRepo) {
   await Promise.all([
-    githubTokenManager.refreshOnce().catch(() => {
+    githubTokenManager.refreshShared().catch(() => {
     }),
-    gitlabTokenManager.refreshOnce().catch(() => {
+    gitlabTokenManager.refreshShared().catch(() => {
     })
   ]);
   return gitService.refreshRepos(observedBranchesByRepo);
@@ -64464,7 +64464,7 @@ app.get("/token-refresh/health", async (c) => {
   });
 });
 app.post(GITHUB_CREDENTIAL_REFRESH_PATH, async (c) => {
-  const result = await githubTokenManager.refreshOnce();
+  const result = await githubTokenManager.refreshShared(c.req.query("rejected") !== void 0);
   if (!result.ok) {
     return c.json({
       error: "Failed to refresh GitHub credentials",
@@ -64474,7 +64474,7 @@ app.post(GITHUB_CREDENTIAL_REFRESH_PATH, async (c) => {
   return c.body(null, 204);
 });
 app.post(GITLAB_CREDENTIAL_REFRESH_PATH, async (c) => {
-  const result = await gitlabTokenManager.refreshOnce();
+  const result = await gitlabTokenManager.refreshShared(c.req.query("rejected") !== void 0);
   if (!result.ok) {
     return c.json({
       error: "Failed to refresh GitLab credentials",

package/dist/src/post-tool-pr-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   publishedPullRequestUrls
-} from "./chunk-JI5JLM5L.js";
+} from "./chunk-GXH3ND2D.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
 import {
   shouldRefreshPullRequests
-} from "./chunk-TP6SGS6C.js";
+} from "./chunk-KX3PARGH.js";
 import "./chunk-VEQXQN22.js";
 
 // src/services/post-tool-pr-notifier.ts

package/dist/src/subagent-mcp.js

@@ -11,7 +11,7 @@ import {
   spawnSubagentRequestSchema,
   subagentResponseSchema,
   waitSubagentRequestSchema
-} from "./chunk-TP6SGS6C.js";
+} from "./chunk-KX3PARGH.js";
 import "./chunk-VEQXQN22.js";
 
 // src/subagent-mcp.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.1335",
+  "version": "0.1.1337",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",