replicas-engine 0.1.1340 → 0.1.1341

package/dist/src/{asp-host-JDGOQWLP.js → asp-host-55HGCROI.js}

@@ -8,12 +8,12 @@ import {
   listRunningCodexModels,
   restartCodexAspHost,
   restartCodexAspHostIfRunning
-} from "./chunk-2SOISK6E.js";
-import "./chunk-FG54X6T7.js";
-import "./chunk-MGENJGMN.js";
-import "./chunk-XVRSJ6CE.js";
+} from "./chunk-SZLXZ6OW.js";
+import "./chunk-PR4ZRFCP.js";
+import "./chunk-2HSG7T6G.js";
+import "./chunk-KBCPQGM3.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-76QHBB5F.js";
+import "./chunk-PQR6H3DK.js";
 import "./chunk-VEQXQN22.js";
 export {
   CODEX_ULTRAFAST_SERVICE_TIER,

package/dist/src/{chunk-MGENJGMN.js → chunk-2HSG7T6G.js}

@@ -3,10 +3,10 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   execFileAsync
-} from "./chunk-XVRSJ6CE.js";
+} from "./chunk-KBCPQGM3.js";
 import {
   isVersionBelow
-} from "./chunk-76QHBB5F.js";
+} from "./chunk-PQR6H3DK.js";
 
 // src/utils/codex-agent-env.ts
 function buildCodexAgentEnv(source = process.env) {
@@ -240,7 +240,7 @@ function getCodexModelProvider(method) {
   if (method === "foundry") return "azure";
   return method === "ollama" || method === "openai-compatible" ? "replicas_openai_compatible" : "openai";
 }
-var ENGINE_PACKAGE_VERSION = "0.1.1340";
+var ENGINE_PACKAGE_VERSION = "0.1.1341";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/{chunk-Q7WE7OXC.js → chunk-6QYHV7TN.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   AspClient
-} from "./chunk-MGENJGMN.js";
+} from "./chunk-2HSG7T6G.js";
 import {
   ASTER_BASE_URL,
   ASTER_PROVIDER,
@@ -15,7 +15,7 @@ import {
   isRecord,
   readOllamaAuthEnv,
   readOpenAICompatibleAuthEnv
-} from "./chunk-76QHBB5F.js";
+} from "./chunk-PQR6H3DK.js";
 
 // src/managers/codex-asp/notification-dispatch.ts
 var TURN_STARTED_METHOD = "turn/started";

package/dist/src/{chunk-XVRSJ6CE.js → chunk-KBCPQGM3.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES
-} from "./chunk-76QHBB5F.js";
+} from "./chunk-PQR6H3DK.js";
 
 // src/utils/exec.ts
 import { exec, execFile } from "child_process";

package/dist/src/{chunk-SMDEV7Y6.js → chunk-LSOWOQWI.js}

@@ -5,7 +5,7 @@ import {
   extractCommandProtectionCommandText,
   isRecord,
   parseCodeHostPrUrl
-} from "./chunk-76QHBB5F.js";
+} from "./chunk-PQR6H3DK.js";
 
 // src/services/published-pull-request-urls.ts
 function publishedPullRequestUrls(result) {

package/dist/src/{chunk-FA346FXI.js → chunk-OEGLTJHI.js}

@@ -6,7 +6,7 @@ import {
   getOriginDefaultBranch,
   monolithRequest,
   runGitCommand
-} from "./chunk-FG54X6T7.js";
+} from "./chunk-PR4ZRFCP.js";
 import {
   extractCommandProtectionCommandText,
   findCommandProtectionGitLookups,
@@ -14,7 +14,7 @@ import {
   findPrMergeSignals,
   findScoutRepoWriteSignals,
   parseCommandProtectionRequest
-} from "./chunk-76QHBB5F.js";
+} from "./chunk-PQR6H3DK.js";
 
 // src/services/command-protection-service.ts
 import { readFile, stat } from "fs/promises";

package/dist/src/{chunk-76QHBB5F.js → chunk-PQR6H3DK.js}

@@ -9357,6 +9357,22 @@ function parseReplicasConfigString(content, filename) {
   return parseReplicasConfig(parsed, filename);
 }
 
+// ../shared/src/start-hook-network.ts
+function proxyRouteCheckScript(proxyAddress) {
+  return [
+    `addr=${proxyAddress ? shellQuotePosix(proxyAddress) : "$(ip -4 route show default dev eth0 | awk '{print $3; exit}')"}`,
+    '[ -n "$addr" ] || exit 0',
+    'ip -4 route get "$addr" 2>/dev/null | head -1',
+    "sudo -n iptables -S 2>/dev/null | grep -E '^-P (INPUT|OUTPUT) DROP|^-A (INPUT|OUTPUT) .*-j (DROP|REJECT)' || true"
+  ].join("\n");
+}
+function parseProxyRouteCheck(output) {
+  const lines = output.split("\n").filter(Boolean);
+  const route = lines.find((line) => !line.startsWith("-"));
+  if (!route) return void 0;
+  return { device: route.match(/\bdev (\S+)/)?.[1] ?? null, firewallRules: lines.filter((line) => line.startsWith("-")) };
+}
+
 // ../shared/src/auth-errors.ts
 var AUTHENTICATION_ERROR_PATTERNS = [
   /unauthorized/,
@@ -10978,6 +10994,8 @@ export {
   resolveWarmHookConfig,
   REPLICAS_CONFIG_FILENAMES,
   parseReplicasConfigString,
+  proxyRouteCheckScript,
+  parseProxyRouteCheck,
   headlessAgentRequestSchema,
   headlessAgentUsagePath,
   isClaudeAuthErrorText,

package/dist/src/{chunk-FG54X6T7.js → chunk-PR4ZRFCP.js}

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-XVRSJ6CE.js";
+} from "./chunk-KBCPQGM3.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -21,7 +21,7 @@ import {
   provisionedDeviceSchema,
   readReplicasRuntimeEnv,
   serializePosixEnvFile
-} from "./chunk-76QHBB5F.js";
+} from "./chunk-PQR6H3DK.js";
 
 // src/runtime-env-loader.ts
 import { readFileSync } from "fs";

package/dist/src/{chunk-2SOISK6E.js → chunk-SZLXZ6OW.js}

@@ -10,15 +10,15 @@ import {
   resolveDiffBase,
   runGitCommand,
   setAgentCredentialSnapshot
-} from "./chunk-FG54X6T7.js";
+} from "./chunk-PR4ZRFCP.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-MGENJGMN.js";
+} from "./chunk-2HSG7T6G.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-XVRSJ6CE.js";
+} from "./chunk-KBCPQGM3.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
@@ -56,7 +56,7 @@ import {
   resolveOpenAICompatibleModelsUrl,
   splitMothershipInstructions,
   withTimeout
-} from "./chunk-76QHBB5F.js";
+} from "./chunk-PQR6H3DK.js";
 
 // src/managers/codex-token-manager.ts
 import { promises as fs } from "fs";
@@ -319,7 +319,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     await this.applyCredentialUpdate(++this.credentialGeneration, async () => {
       await this.applyCredentialsResponse(data);
       setAgentCredentialSnapshot("codex", data);
-      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-JDGOQWLP.js");
+      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-55HGCROI.js");
       await restartCodexAspHostIfRunning2();
     });
     await this.start(true);
@@ -341,7 +341,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
       const accountChanged = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.codex?.credentialId !== data.credentialId;
       await this.applyCredentialsResponse(data);
       if (restartOnChange && (accountChanged || CODEX_AUTH_ENV_KEYS.some((key, index) => process.env[key] !== previousEnv[index]))) {
-        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-JDGOQWLP.js");
+        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-55HGCROI.js");
         await restartCodexAspHostIfRunning2();
       }
       setAgentCredentialSnapshot("codex", data);

package/dist/src/command-protection-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-FA346FXI.js";
-import "./chunk-FG54X6T7.js";
-import "./chunk-XVRSJ6CE.js";
+} from "./chunk-OEGLTJHI.js";
+import "./chunk-PR4ZRFCP.js";
+import "./chunk-KBCPQGM3.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-76QHBB5F.js";
+import "./chunk-PQR6H3DK.js";
 import "./chunk-VEQXQN22.js";
 
 // src/command-protection-hook.ts

package/dist/src/headless-agent.js

@@ -14,12 +14,12 @@ import {
   recoverCompletedTurn,
   spawnMuseMsp,
   startMuseSession
-} from "./chunk-Q7WE7OXC.js";
+} from "./chunk-6QYHV7TN.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-MGENJGMN.js";
-import "./chunk-XVRSJ6CE.js";
+} from "./chunk-2HSG7T6G.js";
+import "./chunk-KBCPQGM3.js";
 import {
   AGENT,
   OPENCODE_GO_PROVIDER,
@@ -29,7 +29,7 @@ import {
   headlessAgentUsagePath,
   isRecord,
   withTimeout
-} from "./chunk-76QHBB5F.js";
+} from "./chunk-PQR6H3DK.js";
 import "./chunk-VEQXQN22.js";
 
 // src/headless-agent.ts

package/dist/src/index.js

@@ -27,7 +27,7 @@ import {
   evaluateCommandProtection,
   extractToolCommand,
   reportCommandProtectionBlock
-} from "./chunk-FA346FXI.js";
+} from "./chunk-OEGLTJHI.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -65,10 +65,10 @@ import {
   spawnMuseMsp,
   startMuseSession,
   uuidV7
-} from "./chunk-Q7WE7OXC.js";
+} from "./chunk-6QYHV7TN.js";
 import {
   publishedPullRequestUrls
-} from "./chunk-SMDEV7Y6.js";
+} from "./chunk-LSOWOQWI.js";
 import {
   ACCOUNT_RATE_LIMITS_READ_METHOD,
   AsyncLock,
@@ -143,7 +143,7 @@ import {
   timestampFromSeconds,
   upsertCredentialFileLines,
   writeSecureCredentialFile
-} from "./chunk-2SOISK6E.js";
+} from "./chunk-SZLXZ6OW.js";
 import {
   ENGINE_ENV,
   monolithRequest,
@@ -153,15 +153,15 @@ import {
   resolveDiffBase,
   setAgentCredentialSnapshot,
   setLinearSessionId
-} from "./chunk-FG54X6T7.js";
+} from "./chunk-PR4ZRFCP.js";
 import {
   getCodexModelProvider
-} from "./chunk-MGENJGMN.js";
+} from "./chunk-2HSG7T6G.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execAsync,
   execFileAsync
-} from "./chunk-XVRSJ6CE.js";
+} from "./chunk-KBCPQGM3.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -383,8 +383,10 @@ import {
   parseDisplayMessages,
   parseFrontmatter,
   parseMcpToolName,
+  parseProxyRouteCheck,
   parseReplicasConfigString,
   percentage,
+  proxyRouteCheckScript,
   raceWithTimeout,
   readChatHistoryAppended,
   readChatHistoryPage,
@@ -417,7 +419,7 @@ import {
   workspaceTokenRequestSchema,
   workspaceTokenResponseSchema,
   wrapInTag
-} from "./chunk-76QHBB5F.js";
+} from "./chunk-PQR6H3DK.js";
 import {
   cloneMcpConfig,
   ensureCompatibilityImports,
@@ -8658,7 +8660,7 @@ var require_dist2 = __commonJS({
 // src/index.ts
 import { serve } from "@hono/node-server";
 import { Hono as Hono2 } from "hono";
-import { randomUUID as randomUUID12 } from "crypto";
+import { randomUUID as randomUUID11 } from "crypto";
 import { connect } from "net";
 import { WebSocketServer } from "ws";
 
@@ -9489,7 +9491,7 @@ import { existsSync as existsSync3 } from "fs";
 import { join as join5 } from "path";
 import { homedir as homedir5 } from "os";
 import { spawn } from "child_process";
-import { randomUUID } from "crypto";
+import { createHash as createHash2 } from "crypto";
 import { setTimeout as delay } from "timers/promises";
 
 // src/services/environment-details-service.ts
@@ -9877,6 +9879,18 @@ var StartHookLogsService = class {
 };
 var startHookLogsService = new StartHookLogsService();
 
+// src/services/network-check.ts
+import { networkInterfaces } from "os";
+var proxyAddress = null;
+var ipv4 = (address) => address?.replace(/^::ffff:/, "");
+function recordProxyConnection(socket) {
+  const eth0 = networkInterfaces().eth0?.find((entry) => entry.family === "IPv4")?.address;
+  if (eth0 && ipv4(socket.localAddress) === eth0) proxyAddress = ipv4(socket.remoteAddress) ?? proxyAddress;
+}
+function checkProxyRoute() {
+  return execFileAsync("sh", ["-c", proxyRouteCheckScript(proxyAddress)], { timeout: 1e4 }).then(({ stdout }) => parseProxyRouteCheck(stdout), () => void 0);
+}
+
 // src/services/replicas-config-service.ts
 var START_HOOK_REPORT_ATTEMPTS = 6;
 var START_HOOK_REPORT_RETRY_MS = 2e3;
@@ -9919,7 +9933,7 @@ var ReplicasConfigService = class {
       this.hooksFailed = false;
       return;
     }
-    const runId = randomUUID();
+    const runId = createUuidFromHex(createHash2("sha256").update(`${ENGINE_ENV.REPLICAS_WORKSPACE_ID}:${Date.now()}`).digest("hex"));
     const report = async (payload, attempts = 1) => {
       for (let attempt = 1; attempt <= attempts; attempt += 1) {
         if (await monolithService.sendEvent({ type: "start_hooks", payload: { runId, ...payload } })) return;
@@ -9927,12 +9941,13 @@ var ReplicasConfigService = class {
       }
     };
     this.hooksRunning = true;
-    void beforeHooks.then(() => this.executeStartHooks({ onStart: () => void report({ status: "running" }) })).then((result) => report({
+    void beforeHooks.then(() => this.executeStartHooks({ onStart: () => void report({ status: "running" }) })).then(async (result) => report({
       status: result.exitCode === 0 && !result.timedOut ? "succeeded" : "failed",
       exitCode: result.exitCode,
       timedOut: result.timedOut,
       output: result.output.slice(-ENVIRONMENT_HOOK_RUN_LOG_LIMIT),
-      outputChars: result.output.length
+      outputChars: result.output.length,
+      network: await checkProxyRoute()
     }, START_HOOK_REPORT_ATTEMPTS), (error) => {
       const errorMessage = error instanceof Error ? error.message : String(error);
       this.hooksFailed = true;
@@ -10331,7 +10346,7 @@ var replicasConfigService = new ReplicasConfigService();
 // src/services/event-service.ts
 import { mkdir as mkdir5 } from "fs/promises";
 import { join as join6 } from "path";
-import { randomUUID as randomUUID2 } from "crypto";
+import { randomUUID } from "crypto";
 var EVENTS_FILE = join6(ENGINE_DIR, "events.jsonl");
 var MAX_REPLAY_EVENTS = 2e3;
 var MAX_REPLAY_CHARS = 4 * 1024 * 1024;
@@ -10345,7 +10360,7 @@ function partialKey(event) {
 var EventService = class {
   subscribers = /* @__PURE__ */ new Set();
   writer = new StreamWriter();
-  epoch = randomUUID2();
+  epoch = randomUUID();
   seq = 0;
   replay = [];
   replayChars = 0;
@@ -10361,7 +10376,7 @@ var EventService = class {
     const after = lastEventId ? Number(lastEventId.slice(separator + 1)) : Number.NaN;
     const resumed = separator > 0 && lastEventId?.slice(0, separator) === this.epoch && Number.isSafeInteger(after) && after >= this.replayFloor && after <= this.seq;
     const opened = {
-      id: randomUUID2(),
+      id: randomUUID(),
       ts: (/* @__PURE__ */ new Date()).toISOString(),
       type: "engine.stream.opened",
       payload: { epoch: this.epoch, seq: this.seq, resumed }
@@ -10430,7 +10445,7 @@ var eventService = new EventService();
 // src/services/preview-service.ts
 import { mkdir as mkdir6, readFile as readFile5 } from "fs/promises";
 import { existsSync as existsSync4 } from "fs";
-import { randomUUID as randomUUID3 } from "crypto";
+import { randomUUID as randomUUID2 } from "crypto";
 import { homedir as homedir6 } from "os";
 import { dirname, join as join7 } from "path";
 var PREVIEW_PORTS_FILE = join7(homedir6(), ".replicas", "preview-ports.json");
@@ -10469,7 +10484,7 @@ var PreviewService = class {
     data.previews.push(preview);
     await writePreviewsFile(data);
     eventService.publish({
-      id: randomUUID3(),
+      id: randomUUID2(),
       ts: (/* @__PURE__ */ new Date()).toISOString(),
       type: "preview.changed",
       payload: { previews: data.previews }
@@ -10489,7 +10504,7 @@ var PreviewService = class {
     }
     await writePreviewsFile(data);
     eventService.publish({
-      id: randomUUID3(),
+      id: randomUUID2(),
       ts: (/* @__PURE__ */ new Date()).toISOString(),
       type: "preview.changed",
       payload: { previews: data.previews }
@@ -10624,7 +10639,7 @@ function devicesInstruction() {
 // src/services/chat/chat-service.ts
 import { appendFile as appendFile5, copyFile as copyFile2, mkdir as mkdir18, readFile as readFile17, rename as rename3, rm as rm5, stat as stat6 } from "fs/promises";
 import { join as join29 } from "path";
-import { randomUUID as randomUUID10 } from "crypto";
+import { randomUUID as randomUUID9 } from "crypto";
 
 // ../shared/src/workspace-chat.ts
 var WORKSPACE_CHATS_QUERY_SCHEMA_VERSION = 17;
@@ -10826,7 +10841,7 @@ import {
   getSessionMessages,
   query
 } from "@anthropic-ai/claude-agent-sdk";
-import { randomUUID as randomUUID4 } from "crypto";
+import { randomUUID as randomUUID3 } from "crypto";
 import { dirname as dirname3, join as join11 } from "path";
 import { mkdir as mkdir8, readdir as readdir3, readFile as readFile7 } from "fs/promises";
 import { homedir as homedir7 } from "os";
@@ -13407,7 +13422,7 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
       if (!handler) {
         return { behavior: "allow" };
       }
-      const requestId = randomUUID4();
+      const requestId = randomUUID3();
       const toolUseId = options.toolUseID;
       const { options: requestOptions, questions: requestQuestions } = handler.getRequest(input);
       const result = await new Promise((resolve7) => {
@@ -13820,7 +13835,7 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
     }
     return {
       type: "user",
-      uuid: randomUUID4(),
+      uuid: randomUUID3(),
       message: {
         role: "user",
         content
@@ -14204,7 +14219,7 @@ ${msg.result}` } : { ...msg, errors: [loginFailure, ...msg.errors] } : msg);
     this.backgroundRecoveryAttempted = true;
     this.activePromptStream?.push({
       type: "user",
-      uuid: randomUUID4(),
+      uuid: randomUUID3(),
       isSynthetic: true,
       session_id: this.sessionId ?? "",
       parent_tool_use_id: null,
@@ -14280,7 +14295,7 @@ ${msg.result}` } : { ...msg, errors: [loginFailure, ...msg.errors] } : msg);
         type: "system",
         subtype: "task_updated",
         task_id: taskId,
-        uuid: randomUUID4(),
+        uuid: randomUUID3(),
         session_id: this.sessionId ?? "",
         patch: { status: error ? "failed" : "killed", ...error ? { error } : {} }
       });
@@ -40648,7 +40663,7 @@ function createJsonSchemaValidator() {
 
 // ../node_modules/.bun/pi-mcp-adapter@2.32.1+04b0d7b0bc944965/node_modules/pi-mcp-adapter/mcp-auth.ts
 import { spawnSync } from "child_process";
-import { createHash as createHash2 } from "crypto";
+import { createHash as createHash3 } from "crypto";
 import { createRequire } from "module";
 import { readFileSync as readFileSync3, existsSync as existsSync10, rmSync as rmSync2 } from "fs";
 import { dirname as dirname9, join as join17 } from "path";
@@ -40918,7 +40933,7 @@ function getAuthEntryAccount(serverName) {
   if (typeof serverName !== "string") {
     throw new Error(`Invalid MCP server name: ${JSON.stringify(serverName)}`);
   }
-  return `sha256-${createHash2("sha256").update(serverName, "utf8").digest("hex")}`;
+  return `sha256-${createHash3("sha256").update(serverName, "utf8").digest("hex")}`;
 }
 function getAuthEntryFilePath(serverName, options) {
   return join17(getServerDir(serverName, options), "tokens.json");
@@ -41047,7 +41062,7 @@ function createChunkManifest(payload) {
   return {
     [AUTH_CHUNK_MANIFEST_KEY]: 1,
     chunkCount: Math.ceil(payload.length / AUTH_SECRET_CHUNK_SIZE),
-    chunkDigest: createHash2("sha256").update(payload, "utf8").digest("hex").slice(0, 16)
+    chunkDigest: createHash3("sha256").update(payload, "utf8").digest("hex").slice(0, 16)
   };
 }
 function readChunkedAuthEntry(store, serverName, account, manifest) {
@@ -43522,7 +43537,7 @@ async function shutdownOAuth(runtime = legacyRuntime) {
 }
 
 // ../node_modules/.bun/pi-mcp-adapter@2.32.1+04b0d7b0bc944965/node_modules/pi-mcp-adapter/mcp-bearer-store.ts
-import { createHash as createHash3 } from "crypto";
+import { createHash as createHash4 } from "crypto";
 import { createRequire as createRequire2 } from "module";
 import { dirname as dirname10, join as join18 } from "path";
 var require3 = createRequire2(import.meta.url);
@@ -43656,7 +43671,7 @@ function getBearerAccount(serverName) {
   if (typeof serverName !== "string") {
     throw new Error(`Invalid MCP server name: ${JSON.stringify(serverName)}`);
   }
-  return `sha256-${createHash3("sha256").update(serverName, "utf8").digest("hex")}`;
+  return `sha256-${createHash4("sha256").update(serverName, "utf8").digest("hex")}`;
 }
 function parseBearerPayload(serverName, payload) {
   const parsed = parseStoredBearerJson(serverName, payload);
@@ -44442,7 +44457,7 @@ function traceTransportKind(definition, transport) {
 
 // ../node_modules/.bun/pi-mcp-adapter@2.32.1+04b0d7b0bc944965/node_modules/pi-mcp-adapter/request-headers-command.ts
 import { spawn as spawn3, spawnSync as spawnSync2 } from "child_process";
-import { randomUUID as randomUUID5 } from "crypto";
+import { randomUUID as randomUUID4 } from "crypto";
 var DEFAULT_TIMEOUT_MS = 1e4;
 var MAX_OUTPUT_BYTES = 64 * 1024;
 var USE_PROCESS_GROUP = process.platform !== "win32";
@@ -44590,7 +44605,7 @@ async function invokeRequestHeadersCommand(config, envelope, signal) {
   return new Promise((resolve7, reject) => {
     let stdout = Buffer.alloc(0);
     let settled = false;
-    const cleanupToken = randomUUID5();
+    const cleanupToken = randomUUID4();
     const child = spawn3(resolved.command, resolved.args, {
       env: { ...resolved.env, [CLEANUP_TOKEN_ENV]: cleanupToken },
       stdio: ["pipe", "pipe", "ignore"],
@@ -48655,14 +48670,14 @@ function formatSize(bytes) {
 
 // ../node_modules/.bun/pi-mcp-adapter@2.32.1+04b0d7b0bc944965/node_modules/pi-mcp-adapter/ui-session.ts
 import { execFile as execFile6 } from "child_process";
-import { randomUUID as randomUUID8 } from "crypto";
+import { randomUUID as randomUUID7 } from "crypto";
 import net from "net";
 
 // ../node_modules/.bun/pi-mcp-adapter@2.32.1+04b0d7b0bc944965/node_modules/pi-mcp-adapter/ui-server.ts
 import http2 from "http";
 import fs7 from "fs/promises";
 import path6 from "path";
-import { randomUUID as randomUUID7 } from "crypto";
+import { randomUUID as randomUUID6 } from "crypto";
 
 // ../node_modules/.bun/pi-mcp-adapter@2.32.1+04b0d7b0bc944965/node_modules/pi-mcp-adapter/host-html-template.ts
 var DEFAULT_APP_BRIDGE_MODULE_URL = "/app-bridge.bundle.js";
@@ -49324,7 +49339,7 @@ function safeInlineJSON2(value) {
 }
 
 // ../node_modules/.bun/pi-mcp-adapter@2.32.1+04b0d7b0bc944965/node_modules/pi-mcp-adapter/tool-approval.ts
-import { createHash as createHash4, randomUUID as randomUUID6 } from "crypto";
+import { createHash as createHash5, randomUUID as randomUUID5 } from "crypto";
 function stableStringify(value) {
   if (value === null || value === void 0 || typeof value !== "object") {
     const serialized = JSON.stringify(value);
@@ -49390,7 +49405,7 @@ async function requestBrokerApproval(state, serverName, toolMeta, args, origin,
   let acceptingClaim = true;
   let handler;
   const request = {
-    requestId: randomUUID6(),
+    requestId: randomUUID5(),
     serverName,
     originalToolName: toolMeta.originalName,
     prefixedToolName: toolMeta.name,
@@ -49415,7 +49430,7 @@ async function requestBrokerApproval(state, serverName, toolMeta, args, origin,
   }
 }
 async function ensureToolCallApproved(state, serverName, toolMeta, args, signal, origin = toolMeta.resourceUri ? "resource" : "proxy", approvalMetadata) {
-  const argsHash = createHash4("sha256").update(stableStringify(args ?? {})).digest("hex");
+  const argsHash = createHash5("sha256").update(stableStringify(args ?? {})).digest("hex");
   const cacheKey = `${serverName}\0${toolMeta.originalName}\0${argsHash}`;
   const approvedToolCalls = state.approvedToolCalls ??= /* @__PURE__ */ new Map();
   if (approvedToolCalls.has(cacheKey)) {
@@ -49469,8 +49484,8 @@ var MOSHI_DISCOVERY_PORT_START = 8377;
 var MOSHI_DISCOVERY_PORT_END = 8396;
 var nextMoshiDiscoveryPort = MOSHI_DISCOVERY_PORT_START;
 async function startUiServer(options) {
-  const sessionToken = options.sessionToken ?? randomUUID7();
-  const uiResourceToken = randomUUID7();
+  const sessionToken = options.sessionToken ?? randomUUID6();
+  const uiResourceToken = randomUUID6();
   const log = logger.child({
     component: "UiServer",
     server: options.serverName,
@@ -50429,8 +50444,8 @@ async function maybeStartUiSession(state, request) {
     if (state.uiServer && state.uiServer.serverName === request.serverName && state.uiServer.toolName === request.toolName) {
       const existingHandle = state.uiServer;
       const streamMode2 = request.streamMode;
-      const streamId2 = streamMode2 ? randomUUID8() : void 0;
-      const streamToken2 = streamMode2 ? randomUUID8() : void 0;
+      const streamId2 = streamMode2 ? randomUUID7() : void 0;
+      const streamToken2 = streamMode2 ? randomUUID7() : void 0;
       let active2 = true;
       let nextStreamSequence2 = 0;
       const cleanupStreamListener = () => {
@@ -50506,8 +50521,8 @@ async function maybeStartUiSession(state, request) {
       activeGlimpseWindow = null;
     }
     const streamMode = request.streamMode;
-    const streamId = streamMode ? randomUUID8() : void 0;
-    const streamToken = streamMode ? randomUUID8() : void 0;
+    const streamId = streamMode ? randomUUID7() : void 0;
+    const streamToken = streamMode ? randomUUID7() : void 0;
     const hostContext = streamMode && streamId ? {
       [UI_STREAM_HOST_CONTEXT_KEY]: {
         mode: streamMode,
@@ -50519,7 +50534,7 @@ async function maybeStartUiSession(state, request) {
     let active = true;
     let nextStreamSequence = 0;
     let handle;
-    const resourceListenerToken = randomUUID8();
+    const resourceListenerToken = randomUUID7();
     const cleanupListeners = () => {
       if (streamToken) {
         state.manager.removeUiStreamListener(streamToken);
@@ -58445,7 +58460,7 @@ var PiManager = class extends CodingAgentManager {
 };
 
 // src/analytics/agent/activity/agent-chat-activity-tracker-service.ts
-import { randomUUID as randomUUID9 } from "crypto";
+import { randomUUID as randomUUID8 } from "crypto";
 
 // src/analytics/analytics-upload.ts
 async function uploadAnalytics(endpoint, body) {
@@ -58707,7 +58722,7 @@ var AgentChatTurnActivityTracker = class {
     this.pendingMessages.delete(messageId);
     const context = {
       chatId,
-      turnId: randomUUID9(),
+      turnId: randomUUID8(),
       provider,
       model: attributes.model ?? getDefaultAgentModel(provider),
       senderUserId: attributes.senderUserId,
@@ -58830,7 +58845,7 @@ var AgentChatActivityTrackerService = class {
 };
 
 // src/analytics/token-usage/agent-token-usage-tracker.ts
-import { createHash as createHash5 } from "crypto";
+import { createHash as createHash6 } from "crypto";
 
 // src/analytics/token-usage/types.ts
 function calculateCumulativeTokenUsageDelta(current, previous) {
@@ -59332,7 +59347,7 @@ var AgentTokenUsageTracker = class {
       harness: event.harness,
       records: batch.records.map((record3) => ({
         ...record3,
-        eventId: record3.eventId ?? createUuidFromHex(createHash5("sha256").update(JSON.stringify([
+        eventId: record3.eventId ?? createUuidFromHex(createHash6("sha256").update(JSON.stringify([
           event.harness,
           event.type,
           event.chatId,
@@ -59424,9 +59439,9 @@ async function resolveContainedFile(root, relativePath) {
 }
 
 // src/utils/file-revision.ts
-import { createHash as createHash6 } from "crypto";
+import { createHash as createHash7 } from "crypto";
 function fileRevision(content) {
-  return createHash6("sha256").update(content).digest("hex");
+  return createHash7("sha256").update(content).digest("hex");
 }
 
 // src/utils/revisioned-text-file.ts
@@ -59686,7 +59701,7 @@ async function reconcileCanvasItems(filenames) {
 
 // src/services/upload-chat-transcripts.ts
 import { createReadStream as createReadStream3 } from "fs";
-import { createHash as createHash7 } from "crypto";
+import { createHash as createHash8 } from "crypto";
 import { readFile as readFile15, readdir as readdir7, stat as stat4 } from "fs/promises";
 import { basename as basename3, join as join26 } from "path";
 
@@ -59849,7 +59864,7 @@ async function uploadChatTranscriptNow(chatId, filePath, chat, capture) {
     return capture ? { ...last.artifact, metadata: { ...last.artifact.metadata, captureId: capture.captureId } } : null;
   }
   if (capture) {
-    const hash = createHash7("sha256");
+    const hash = createHash8("sha256");
     for await (const chunk of createReadStream3(filePath, { start: 0, end: size - 1 })) hash.update(chunk);
     metadata.captureId = capture.captureId;
     metadata.captureReason = capture.reason;
@@ -60044,7 +60059,7 @@ async function uploadEngineLog(input, timeoutMs) {
 }
 
 // src/services/chat/fork-handoff.ts
-import { createHash as createHash8 } from "crypto";
+import { createHash as createHash9 } from "crypto";
 import { mkdir as mkdir17, open as open3, readFile as readFile16, writeFile as writeFile9 } from "fs/promises";
 import { homedir as homedir9 } from "os";
 import { join as join28 } from "path";
@@ -60084,7 +60099,7 @@ function tailBlocks(blocks, maxChars) {
   return { excerpt, truncated: start > 0 };
 }
 function hashTranscriptBlocks(blocks) {
-  return blocks.map((block) => createHash8("sha1").update(block).digest("base64"));
+  return blocks.map((block) => createHash9("sha1").update(block).digest("base64"));
 }
 function unseenBlocks(seenHashes, blocks) {
   const hashes = hashTranscriptBlocks(blocks);
@@ -60399,7 +60414,7 @@ var ChatService = class {
     }
     const source = request.forkSourceChatId ? this.requireChat(request.forkSourceChatId) : void 0;
     const persisted = {
-      id: request.id ?? randomUUID10(),
+      id: request.id ?? randomUUID9(),
       provider: request.provider,
       title,
       createdAt: now,
@@ -60559,7 +60574,7 @@ var ChatService = class {
       const detail = errors?.length ? errors.join("\n") : extractFinalResponse(await chat.provider.getHistory(), chat.persisted.provider) ?? "[No response from subagent]";
       await this.sendMessage(parentChatId, {
         message: formatMothershipEvents([{
-          id: randomUUID10(),
+          id: randomUUID9(),
           at: completedAt,
           kind: "finished",
           agentId: chat.persisted.id,
@@ -60636,7 +60651,7 @@ ${decisions}` };
           thinkingLevel: request.thinkingLevel ?? (request.inheritThinkingLevel ? chat.persisted.thinkingLevel : void 0)
         };
         const { steer, ...queued } = request;
-        const enqueued = steer ? { ...queued, messageId: queued.messageId ?? `msg_${randomUUID10()}` } : queued;
+        const enqueued = steer ? { ...queued, messageId: queued.messageId ?? `msg_${randomUUID9()}` } : queued;
         if (enqueued.messageId && steer && chat.provider.isProcessing() && (steer === "alone" || chat.provider.getQueue().every(({ steeredAt }) => steeredAt)) && canSteerMessage(chat.persisted.provider, enqueued)) {
           chat.steeringOnArrival.add(enqueued.messageId);
         }
@@ -61605,7 +61620,7 @@ ${note}`;
     }
     return {
       persisted,
-      historyVersion: randomUUID10(),
+      historyVersion: randomUUID9(),
       provider,
       pendingMessageIds: [],
       steeringOnArrival: /* @__PURE__ */ new Set(),
@@ -61975,7 +61990,7 @@ ${note}`;
   }
   async publish(input) {
     const event = {
-      id: randomUUID10(),
+      id: randomUUID9(),
       ts: (/* @__PURE__ */ new Date()).toISOString(),
       ...input
     };
@@ -62894,7 +62909,7 @@ ${combinedScript}` : combinedScript;
 }
 
 // src/services/terminal-service.ts
-import { randomUUID as randomUUID11 } from "crypto";
+import { randomUUID as randomUUID10 } from "crypto";
 import { existsSync as existsSync17 } from "fs";
 import { spawn as spawn6 } from "node-pty";
 import { z as z3 } from "zod";
@@ -62922,7 +62937,7 @@ var TerminalService = class {
         code: "limit"
       });
     }
-    const id = randomUUID11();
+    const id = randomUUID10();
     const shell = process.env.SHELL && existsSync17(process.env.SHELL) ? process.env.SHELL : "/bin/bash";
     const pty = spawn6(shell, ["-l"], {
       name: "xterm-256color",
@@ -64516,7 +64531,7 @@ function startStatusBroadcaster() {
       if (serialized !== previousRepoStatus) {
         previousRepoStatus = serialized;
         eventService.publish({
-          id: randomUUID12(),
+          id: randomUUID11(),
           ts: (/* @__PURE__ */ new Date()).toISOString(),
           type: "repo.status.changed",
           payload: { repos }
@@ -64537,7 +64552,7 @@ function startStatusBroadcaster() {
       if (engineStatusJson !== previousEngineStatus) {
         previousEngineStatus = engineStatusJson;
         eventService.publish({
-          id: randomUUID12(),
+          id: randomUUID11(),
           ts: (/* @__PURE__ */ new Date()).toISOString(),
           type: "engine.status.changed",
           payload: { status: engineStatus }
@@ -64556,7 +64571,7 @@ function startStatusBroadcaster() {
         previousHookStatus = hookSnapshot;
         if (!lastHooksRunning && hooksRunning) {
           eventService.publish({
-            id: randomUUID12(),
+            id: randomUUID11(),
             ts: (/* @__PURE__ */ new Date()).toISOString(),
             type: "hooks.started",
             payload: { running: true, completed: false }
@@ -64565,7 +64580,7 @@ function startStatusBroadcaster() {
         }
         if (hooksRunning) {
           eventService.publish({
-            id: randomUUID12(),
+            id: randomUUID11(),
             ts: (/* @__PURE__ */ new Date()).toISOString(),
             type: "hooks.progress",
             payload: { running: true, completed: false }
@@ -64574,7 +64589,7 @@ function startStatusBroadcaster() {
         }
         if (lastHooksRunning && !hooksRunning && hooksCompleted && !hooksFailed) {
           eventService.publish({
-            id: randomUUID12(),
+            id: randomUUID11(),
             ts: (/* @__PURE__ */ new Date()).toISOString(),
             type: "hooks.completed",
             payload: { running: false, completed: true }
@@ -64583,7 +64598,7 @@ function startStatusBroadcaster() {
         }
         if (lastHooksRunning && !hooksRunning && hooksFailed) {
           eventService.publish({
-            id: randomUUID12(),
+            id: randomUUID11(),
             ts: (/* @__PURE__ */ new Date()).toISOString(),
             type: "hooks.failed",
             payload: { running: false, completed: hooksCompleted }
@@ -64591,7 +64606,7 @@ function startStatusBroadcaster() {
           });
         }
         eventService.publish({
-          id: randomUUID12(),
+          id: randomUUID11(),
           ts: (/* @__PURE__ */ new Date()).toISOString(),
           type: "hooks.status",
           payload: {
@@ -64691,7 +64706,7 @@ async function startBackgroundServices(signal) {
     { type: "engine.ready", payload: { version: "v1" } }
   ]) {
     if (signal.aborted) return;
-    await eventService.publish({ id: randomUUID12(), ts: (/* @__PURE__ */ new Date()).toISOString(), ...event });
+    await eventService.publish({ id: randomUUID11(), ts: (/* @__PURE__ */ new Date()).toISOString(), ...event });
   }
   if (!signal.aborted) startStatusBroadcaster();
 }
@@ -64726,6 +64741,7 @@ var server2 = serve(
     }
   }
 );
+server2.on("connection", recordProxyConnection);
 server2.on("upgrade", (req, socket, head) => {
   const sessionId = TERMINAL_SOCKET_PATH.exec(new URL(req.url ?? "/", "http://engine").pathname)?.[1];
   if (!sessionId || req.headers["x-replicas-engine-secret"] !== ENGINE_ENV.REPLICAS_ENGINE_SECRET || !lifecycle.active) {

package/dist/src/post-tool-pr-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   publishedPullRequestUrls
-} from "./chunk-SMDEV7Y6.js";
+} from "./chunk-LSOWOQWI.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
 import {
   shouldRefreshPullRequests
-} from "./chunk-76QHBB5F.js";
+} from "./chunk-PQR6H3DK.js";
 import "./chunk-VEQXQN22.js";
 
 // src/services/post-tool-pr-notifier.ts

package/dist/src/subagent-mcp.js

@@ -11,7 +11,7 @@ import {
   spawnSubagentRequestSchema,
   subagentResponseSchema,
   waitSubagentRequestSchema
-} from "./chunk-76QHBB5F.js";
+} from "./chunk-PQR6H3DK.js";
 import "./chunk-VEQXQN22.js";
 
 // src/subagent-mcp.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.1340",
+  "version": "0.1.1341",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",