replicas-engine 0.1.297 → 0.1.299

package/dist/src/index.js

@@ -14,6 +14,21 @@ function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
+// ../shared/src/result.ts
+function createSuccessResult(data) {
+  return { ok: true, data };
+}
+function createErrorResult(error) {
+  return {
+    ok: false,
+    error: {
+      message: error.message,
+      code: error.code,
+      details: error.details
+    }
+  };
+}
+
 // ../shared/src/agent.ts
 var CODEX_REASONING_EFFORT_BY_THINKING_LEVEL = {
   low: "low",
@@ -286,7 +301,7 @@ var WORKSPACE_SIZES = ["small", "large"];
 var INVALID_WORKSPACE_SIZE_ERROR = `Invalid size: must be one of ${WORKSPACE_SIZES.join(", ")}`;
 
 // ../shared/src/e2b.ts
-var E2B_TEMPLATE_NAME = "replicas-sandbox-2026-06-11-v6";
+var E2B_TEMPLATE_NAME = "replicas-sandbox-2026-06-12-v2";
 
 // ../shared/src/runtime-env.ts
 function parsePosixEnvFile(content) {
@@ -736,8 +751,66 @@ var GITHUB_ABILITY = {
   referenceFile: { name: "GITHUB.md", content: REFERENCE3 }
 };
 
+// ../shared/src/default-skills/replicas-agent/abilities/gitlab.ts
+var SECTION4 = `### GitLab
+Workspace repos hosted on GitLab use pre-configured git credentials \u2014 push, pull, and open merge requests with plain \`git\`.
+
+**Reference:** \`references/GITLAB.md\`
+
+Use this when:
+- A repo's remote is on gitlab.com or a self-managed GitLab instance
+- You need to open or update a merge request`;
+var REFERENCE4 = `# GitLab Integration
+
+This guide covers how to work with GitLab-hosted repositories from within your Replicas workspace.
+
+## Prerequisites
+
+Git credentials for the workspace's GitLab hosts are pre-configured in \`~/.git-credentials\` and refreshed automatically. Plain \`git fetch\` / \`git pull\` / \`git push\` over HTTPS work with no additional setup.
+
+- Never ask the user for a GitLab token or PAT \u2014 credentials are already wired. If a push fails with an authentication error, report it to the user instead of working around it.
+- There is no \`glab\` CLI in the workspace, and \`gh\` only works for GitHub remotes. Check a repo's host with \`git remote get-url origin\` before choosing the GitHub or GitLab workflow.
+
+## Merge Requests
+
+Create a merge request directly from a push using push options:
+
+\`\`\`bash
+git push -o merge_request.create -o merge_request.target=<default-branch> origin HEAD
+\`\`\`
+
+Useful options:
+
+\`\`\`bash
+-o merge_request.title="Title"
+-o merge_request.description="Description"
+-o merge_request.draft                  # open as draft
+-o merge_request.remove_source_branch   # delete branch on merge
+\`\`\`
+
+GitLab prints the MR URL in the push output \u2014 include it in your reply to the user.
+
+## GitLab API (advanced)
+
+For operations with no git equivalent (commenting on MRs, reading pipelines), call the REST API with the workspace credential:
+
+\`\`\`bash
+TOKEN=$(grep -m1 '://oauth2:' ~/.git-credentials | sed -E 's#https://oauth2:([^@]+)@.*#\\1#')
+curl -s -H "Authorization: Bearer $TOKEN" "https://gitlab.com/api/v4/projects/<url-encoded-path>/merge_requests"
+\`\`\`
+
+Use the repo's own host in the API base URL for self-managed instances.
+`;
+var GITLAB_ABILITY = {
+  label: "GitLab",
+  description: "Pre-configured git credentials for GitLab repos; merge requests via push options.",
+  bullet: "- Interacting with GitLab (pushing to GitLab repos, opening merge requests)",
+  section: SECTION4,
+  referenceFile: { name: "GITLAB.md", content: REFERENCE4 }
+};
+
 // ../shared/src/default-skills/replicas-agent/abilities/google.ts
-var SECTION4 = `### Google Workspace (Docs, Sheets, Forms, Drive)
+var SECTION5 = `### Google Workspace (Docs, Sheets, Forms, Drive)
 Create and edit Google Docs, Sheets, and Forms via the Replicas gateway. Files are owned by Replicas \u2014 the integration cannot access pre-existing Google content created outside of it.
 
 **Reference:** \`references/GOOGLE.md\`
@@ -746,7 +819,7 @@ Use this when:
 - You need to create or edit a Google Doc, Sheet, or Form
 - You need to share, rename, move, or delete a Replicas-created Google file
 - You need to read responses from a Replicas-created Google Form`;
-var REFERENCE4 = `# Google Workspace (Docs, Sheets, Forms, Drive)
+var REFERENCE5 = `# Google Workspace (Docs, Sheets, Forms, Drive)
 
 This guide covers how to create and edit Google Docs, Sheets, and Forms \u2014 plus do basic Drive file operations \u2014 from inside a Replicas workspace, using the monolith as a gateway to Google's APIs.
 
@@ -1007,12 +1080,12 @@ var GOOGLE_ABILITY = {
   label: "Google Workspace",
   description: "Create / edit Docs, Sheets, Forms, and Drive files via the Replicas gateway.",
   bullet: "- Interacting with Google Workspace (creating and editing Docs, Sheets, and Forms, sharing files, reading form responses, etc.)",
-  section: SECTION4,
-  referenceFile: { name: "GOOGLE.md", content: REFERENCE4 }
+  section: SECTION5,
+  referenceFile: { name: "GOOGLE.md", content: REFERENCE5 }
 };
 
 // ../shared/src/default-skills/replicas-agent/abilities/linear.ts
-var SECTION5 = `### Linear
+var SECTION6 = `### Linear
 Fetch issues, update state, add comments, and search via the Linear GraphQL API.
 
 **Reference:** \`references/LINEAR.md\`
@@ -1021,7 +1094,7 @@ Use this when:
 - You encounter a Linear issue link and need to understand the task
 - You need to update an issue's state (e.g. mark as done)
 - You need to comment on or search for Linear issues`;
-var REFERENCE5 = `# Linear Integration
+var REFERENCE6 = `# Linear Integration
 
 This guide covers how to interact with Linear from within your Replicas workspace.
 
@@ -1096,12 +1169,12 @@ var LINEAR_ABILITY = {
   label: "Linear",
   description: "Fetch issues, post comments, update states via the Linear GraphQL API.",
   bullet: "- Interacting with Linear (fetching issues, updating state, commenting, etc.)",
-  section: SECTION5,
-  referenceFile: { name: "LINEAR.md", content: REFERENCE5 }
+  section: SECTION6,
+  referenceFile: { name: "LINEAR.md", content: REFERENCE6 }
 };
 
 // ../shared/src/default-skills/replicas-agent/abilities/media.ts
-var SECTION6 = `### Media
+var SECTION7 = `### Media
 Share screenshots, screen recordings, generated diagrams, and audio clips inline in the Replicas chat and natively embedded in external messages.
 
 **Reference:** \`references/MEDIA.md\`
@@ -1110,7 +1183,7 @@ Use this when:
 - You produce a screenshot, recording, generated image, or audio clip the user should see
 - You record video output (browser automation, screen capture) \u2014 including the recommended aspect ratio and FPS
 - You need to embed media in a Slack/Linear/GitHub message AND keep a referenceable copy in the Replicas dashboard`;
-var REFERENCE6 = `# Media (Screenshots, Recordings, Audio)
+var REFERENCE7 = `# Media (Screenshots, Recordings, Audio)
 
 This guide covers how to share screenshots, screen recordings, generated diagrams, and audio clips \u2014 both inline in the Replicas chat and natively embedded in external surfaces (Slack, Linear, GitHub).
 
@@ -1361,12 +1434,12 @@ var MEDIA_ABILITY = {
   label: "Media",
   description: "Share screenshots, recordings, generated images, and audio clips.",
   bullet: "- Producing or showing the user any media \u2014 screenshots, screen recordings, generated images or diagrams, audio clips \u2014 including in your Replicas chat reply, PR descriptions/comments, and other external platforms",
-  section: SECTION6,
-  referenceFile: { name: "MEDIA.md", content: REFERENCE6 }
+  section: SECTION7,
+  referenceFile: { name: "MEDIA.md", content: REFERENCE7 }
 };
 
 // ../shared/src/default-skills/replicas-agent/abilities/previews.ts
-var SECTION7 = `### Previews
+var SECTION8 = `### Previews
 Expose locally running services (web apps, APIs, databases) as public preview URLs so humans can interact with them directly.
 
 **Reference:** \`references/PREVIEWS.md\`
@@ -1375,7 +1448,7 @@ Use this when:
 - You need to start a service that a human should view or interact with
 - The task involves UI work that benefits from human review
 - You are verifying frontend/backend integrations visually`;
-var REFERENCE7 = `# Preview URLs
+var REFERENCE8 = `# Preview URLs
 
 When you run services on ports \u2014 such as a web app, API server, or database \u2014 humans may want to interact with them directly. You can expose your locally running services as public preview URLs.
 
@@ -1457,12 +1530,12 @@ var PREVIEWS_ABILITY = {
   label: "Previews",
   description: "Expose locally running services on public preview URLs for humans.",
   bullet: "- Creating preview URLs for locally running services",
-  section: SECTION7,
-  referenceFile: { name: "PREVIEWS.md", content: REFERENCE7 }
+  section: SECTION8,
+  referenceFile: { name: "PREVIEWS.md", content: REFERENCE8 }
 };
 
 // ../shared/src/default-skills/replicas-agent/abilities/replicas.ts
-var SECTION8 = `### Replicas (in-workspace CLI)
+var SECTION9 = `### Replicas (in-workspace CLI)
 Take action *with* Replicas itself \u2014 manage automations, environments (variables, files), repos, and \`replicas.json\` config \u2014 using the pre-installed, pre-authenticated \`replicas\` CLI.
 
 **Reference:** \`references/REPLICAS.md\`
@@ -1472,7 +1545,7 @@ Use this when:
 - The user asks you to manage environments, environment variables, or environment files
 - The user asks "what envs / repos / automations do I have?"
 - The user asks you to scaffold a \`replicas.json\` / \`replicas.yaml\` in a repo`;
-var REFERENCE8 = `# Replicas (in-workspace CLI)
+var REFERENCE9 = `# Replicas (in-workspace CLI)
 
 This guide covers how to take action *with* Replicas itself from inside a Replicas workspace \u2014 managing automations, environments (and their variables/files), repos, previews, and the user's \`replicas.json\` config \u2014 using the pre-installed \`replicas\` CLI.
 
@@ -1666,13 +1739,13 @@ var REPLICAS_ABILITY = {
   description: "Teach the agent about Replicas itself \u2014 automations, environments, the in-workspace CLI.",
   // No bullet — help_instructions covers the `replicas` CLI surface in detail.
   bullet: "",
-  section: SECTION8,
-  referenceFile: { name: "REPLICAS.md", content: REFERENCE8 },
+  section: SECTION9,
+  referenceFile: { name: "REPLICAS.md", content: REFERENCE9 },
   locked: true
 };
 
 // ../shared/src/default-skills/replicas-agent/abilities/slack.ts
-var SECTION9 = `### Slack
+var SECTION10 = `### Slack
 Send messages, read threads, search conversations, and upload files via the Slack Web API.
 
 **Reference:** \`references/SLACK.md\`
@@ -1682,7 +1755,7 @@ Use this when:
 - You need to read or fetch a Slack conversation
 - You encounter a Slack message link and need to retrieve its content
 - The task asks you to notify, update, or communicate via Slack`;
-var REFERENCE9 = `# Slack Integration
+var REFERENCE10 = `# Slack Integration
 
 This guide covers how to interact with Slack from within your Replicas workspace.
 
@@ -1783,8 +1856,8 @@ var SLACK_ABILITY = {
   label: "Slack",
   description: "Send messages, read threads, search conversations, upload files.",
   bullet: "- Interacting with Slack (sending messages, reading threads, etc.)",
-  section: SECTION9,
-  referenceFile: { name: "SLACK.md", content: REFERENCE9 }
+  section: SECTION10,
+  referenceFile: { name: "SLACK.md", content: REFERENCE10 }
 };
 
 // ../shared/src/default-skills/replicas-agent/registry.ts
@@ -1793,6 +1866,7 @@ var REPLICAS_AGENT_ABILITY_REGISTRY = {
   computer: COMPUTER_ABILITY,
   docker: DOCKER_ABILITY,
   github: GITHUB_ABILITY,
+  gitlab: GITLAB_ABILITY,
   google: GOOGLE_ABILITY,
   linear: LINEAR_ABILITY,
   media: MEDIA_ABILITY,
@@ -2790,7 +2864,7 @@ var BaseRefreshManager = class {
 };
 
 // src/services/monolith-service.ts
-async function monolithRequest(path4, init = {}) {
+async function monolithRequest(path5, init = {}) {
   if (!ENGINE_ENV.WORKSPACE_ID) {
     throw new Error("WORKSPACE_ID is not set; cannot call monolith");
   }
@@ -2800,7 +2874,7 @@ async function monolithRequest(path4, init = {}) {
     "X-Workspace-Id": ENGINE_ENV.WORKSPACE_ID
   };
   if (!isFormData) headers["Content-Type"] = "application/json";
-  return fetch(`${ENGINE_ENV.MONOLITH_URL}${path4}`, {
+  return fetch(`${ENGINE_ENV.MONOLITH_URL}${path5}`, {
     method: init.method ?? "POST",
     headers,
     body: init.body === void 0 ? void 0 : isFormData ? init.body : JSON.stringify(init.body),
@@ -2826,13 +2900,13 @@ var MonolithService = class {
 var monolithService = new MonolithService();
 
 // src/utils/file.ts
-import { mkdir, rename, unlink, writeFile } from "fs/promises";
+import { mkdir, readFile, rename, unlink, writeFile } from "fs/promises";
 import { dirname } from "path";
-async function atomicWriteFile(path4, data, options) {
-  const tmpFile = `${path4}.${process.pid}.${Date.now()}.tmp`;
+async function atomicWriteFile(path5, data, options) {
+  const tmpFile = `${path5}.${process.pid}.${Date.now()}.tmp`;
   try {
     await writeFile(tmpFile, data, { encoding: "utf-8", mode: options?.mode });
-    await rename(tmpFile, path4);
+    await rename(tmpFile, path5);
   } catch (error) {
     await unlink(tmpFile).catch(() => void 0);
     throw error;
@@ -2844,6 +2918,21 @@ async function writeSecureCredentialFile(filePath, content, options) {
   }
   await atomicWriteFile(filePath, content, { mode: 384 });
 }
+var credentialFileQueue = Promise.resolve();
+function upsertCredentialFileLines(filePath, hosts, lines) {
+  const task = credentialFileQueue.then(async () => {
+    let existing = [];
+    try {
+      existing = (await readFile(filePath, "utf-8")).split("\n").filter(Boolean);
+    } catch {
+      existing = [];
+    }
+    const kept = existing.filter((line) => !hosts.some((host) => line.endsWith(`@${host}`)));
+    await writeSecureCredentialFile(filePath, [...lines, ...kept, ""].join("\n"));
+  });
+  credentialFileQueue = task.catch(() => void 0);
+  return task;
+}
 
 // src/managers/github-token-manager.ts
 var GitHubTokenManager = class extends BaseRefreshManager {
@@ -2873,10 +2962,10 @@ var GitHubTokenManager = class extends BaseRefreshManager {
   }
   async updateGitCredentials(token) {
     const credentialsPath = path.join(ENGINE_ENV.HOME_DIR, ".git-credentials");
-    const credentialsContent = `https://x-access-token:${token}@github.com
-`;
     try {
-      await writeSecureCredentialFile(credentialsPath, credentialsContent);
+      await upsertCredentialFileLines(credentialsPath, ["github.com"], [
+        `https://x-access-token:${token}@github.com`
+      ]);
       console.log(`[GitHubTokenManager] Updated ${credentialsPath}`);
     } catch (error) {
       console.error("[GitHubTokenManager] Failed to update git credentials:", error);
@@ -2909,9 +2998,44 @@ var GitHubTokenManager = class extends BaseRefreshManager {
 };
 var githubTokenManager = new GitHubTokenManager();
 
+// src/managers/gitlab-token-manager.ts
+import path2 from "path";
+var GitLabTokenManager = class extends BaseRefreshManager {
+  constructor() {
+    super("GitLabTokenManager");
+  }
+  async doRefresh(_config) {
+    const result = await this.fetchRefresh();
+    if (!result.ok) {
+      throw new Error(`Token refresh failed: ${result.error.message}`);
+    }
+    const data = result.data;
+    if (!data.token) {
+      console.log(`[GitLabTokenManager] No GitLab token to install: ${data.reason}`);
+      return;
+    }
+    const hosts = data.hosts.length > 0 ? data.hosts : ["gitlab.com"];
+    const credentialsPath = path2.join(ENGINE_ENV.HOME_DIR, ".git-credentials");
+    await upsertCredentialFileLines(
+      credentialsPath,
+      hosts,
+      hosts.map((host) => `https://oauth2:${data.token}@${host}`)
+    );
+    console.log(`[GitLabTokenManager] Updated ${credentialsPath} for ${hosts.join(", ")}`);
+  }
+  async fetchRefresh() {
+    const response = await monolithRequest("/v1/engine/gitlab/refresh-token");
+    if (!response.ok) {
+      return createErrorResult({ message: `${response.status} ${await response.text()}` });
+    }
+    return createSuccessResult(await response.json());
+  }
+};
+var gitlabTokenManager = new GitLabTokenManager();
+
 // src/managers/claude-token-manager.ts
 import { promises as fs } from "fs";
-import path2 from "path";
+import path3 from "path";
 
 // src/managers/auth-env-transition.ts
 function applyAuthEnvTransition(params) {
@@ -3003,7 +3127,7 @@ var ClaudeTokenManager = class extends BaseRefreshManager {
     });
   }
   async writeOauthCredentialsFile(credentials) {
-    const credentialsPath = path2.join(ENGINE_ENV.HOME_DIR, ".claude", ".credentials.json");
+    const credentialsPath = path3.join(ENGINE_ENV.HOME_DIR, ".claude", ".credentials.json");
     const claudeCliConfig = {
       claudeAiOauth: {
         accessToken: credentials.accessToken,
@@ -3025,7 +3149,7 @@ var ClaudeTokenManager = class extends BaseRefreshManager {
     }
   }
   async removeOauthCredentialsFile() {
-    const credentialsPath = path2.join(ENGINE_ENV.HOME_DIR, ".claude", ".credentials.json");
+    const credentialsPath = path3.join(ENGINE_ENV.HOME_DIR, ".claude", ".credentials.json");
     try {
       await fs.unlink(credentialsPath);
     } catch {
@@ -3036,7 +3160,7 @@ var claudeTokenManager = new ClaudeTokenManager();
 
 // src/managers/codex-token-manager.ts
 import { promises as fs2 } from "fs";
-import path3 from "path";
+import path4 from "path";
 var CodexTokenManager = class extends BaseRefreshManager {
   constructor() {
     super("CodexTokenManager");
@@ -3104,7 +3228,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     });
   }
   async writeOauthCredentialsFile(credentials) {
-    const authPath = path3.join(ENGINE_ENV.HOME_DIR, ".codex", "auth.json");
+    const authPath = path4.join(ENGINE_ENV.HOME_DIR, ".codex", "auth.json");
     const codexAuthConfig = {
       OPENAI_API_KEY: null,
       tokens: {
@@ -3127,7 +3251,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     }
   }
   async removeOauthCredentialsFile() {
-    const authPath = path3.join(ENGINE_ENV.HOME_DIR, ".codex", "auth.json");
+    const authPath = path4.join(ENGINE_ENV.HOME_DIR, ".codex", "auth.json");
     try {
       await fs2.unlink(authPath);
     } catch {
@@ -3137,13 +3261,13 @@ var CodexTokenManager = class extends BaseRefreshManager {
 var codexTokenManager = new CodexTokenManager();
 
 // src/git/service.ts
-import { readdir, readFile as readFile2, stat } from "fs/promises";
+import { readdir, readFile as readFile3, stat } from "fs/promises";
 import { existsSync as existsSync2, unlinkSync } from "fs";
 import { spawn } from "child_process";
 import { join as join5 } from "path";
 
 // src/utils/state.ts
-import { readFile, mkdir as mkdir2 } from "fs/promises";
+import { readFile as readFile2, mkdir as mkdir2 } from "fs/promises";
 import { existsSync } from "fs";
 import { join as join3 } from "path";
 import { homedir as homedir3 } from "os";
@@ -3224,7 +3348,7 @@ async function loadEngineState() {
     if (!existsSync(STATE_FILE)) {
       return { ...DEFAULT_STATE };
     }
-    const content = await readFile(STATE_FILE, "utf-8");
+    const content = await readFile2(STATE_FILE, "utf-8");
     const state = coerceEngineState(JSON.parse(content));
     return {
       ...DEFAULT_STATE,
@@ -3600,9 +3724,9 @@ var GitService = class {
     try {
       const paths = await this.listUntrackedPaths(repoPath);
       let total = 0;
-      for (const path4 of paths) {
+      for (const path5 of paths) {
         try {
-          const contents = await readFile2(join5(repoPath, path4));
+          const contents = await readFile3(join5(repoPath, path5));
           if (contents.length === 0 || contents.includes(0)) {
             continue;
           }
@@ -3781,12 +3905,12 @@ var GitService = class {
     await saveRepoState(repo.name, state, state);
     return state;
   }
-  pathExists(path4) {
-    return existsSync2(path4);
+  pathExists(path5) {
+    return existsSync2(path5);
   }
-  async safeStat(path4) {
+  async safeStat(path5) {
     try {
-      return await stat(path4);
+      return await stat(path5);
     } catch {
       return null;
     }
@@ -3809,8 +3933,8 @@ var StreamWriter = class {
   backpressured = false;
   droppedCount = 0;
   flushTimer = null;
-  open(path4, highWaterMark = DEFAULT_HIGH_WATER) {
-    this.stream = createWriteStream(path4, { flags: "a", highWaterMark });
+  open(path5, highWaterMark = DEFAULT_HIGH_WATER) {
+    this.stream = createWriteStream(path5, { flags: "a", highWaterMark });
     this.stream.on("error", () => {
       this.stream = null;
     });
@@ -3916,14 +4040,14 @@ var EngineLogger = class {
 var engineLogger = new EngineLogger();
 
 // src/services/replicas-config-service.ts
-import { readFile as readFile5, appendFile, writeFile as writeFile4, mkdir as mkdir6 } from "fs/promises";
+import { readFile as readFile6, appendFile, writeFile as writeFile4, mkdir as mkdir6 } from "fs/promises";
 import { existsSync as existsSync4 } from "fs";
 import { join as join9 } from "path";
 import { homedir as homedir7 } from "os";
 import { spawn as spawn2 } from "child_process";
 
 // src/services/environment-details-service.ts
-import { mkdir as mkdir4, readFile as readFile3 } from "fs/promises";
+import { mkdir as mkdir4, readFile as readFile4 } from "fs/promises";
 import { existsSync as existsSync3 } from "fs";
 import { homedir as homedir5 } from "os";
 import { join as join7 } from "path";
@@ -4000,7 +4124,7 @@ async function readDetails() {
     if (!existsSync3(DETAILS_FILE)) {
       return createDefaultDetails();
     }
-    const raw = await readFile3(DETAILS_FILE, "utf-8");
+    const raw = await readFile4(DETAILS_FILE, "utf-8");
     const parsed = JSON.parse(raw);
     return { ...createDefaultDetails(), ...parsed };
   } catch {
@@ -4095,7 +4219,7 @@ var EnvironmentDetailsService = class {
 var environmentDetailsService = new EnvironmentDetailsService();
 
 // src/services/start-hook-logs-service.ts
-import { mkdir as mkdir5, readFile as readFile4, writeFile as writeFile3, readdir as readdir2 } from "fs/promises";
+import { mkdir as mkdir5, readFile as readFile5, writeFile as writeFile3, readdir as readdir2 } from "fs/promises";
 import { homedir as homedir6 } from "os";
 import { join as join8 } from "path";
 
@@ -4172,7 +4296,7 @@ var StartHookLogsService = class {
         continue;
       }
       try {
-        const raw = await readFile4(join8(LOGS_DIR, file), "utf-8");
+        const raw = await readFile5(join8(LOGS_DIR, file), "utf-8");
         const stored = normalizeStored(JSON.parse(raw));
         if (stored) {
           logs.push(withPreview(stored));
@@ -4191,7 +4315,7 @@ var StartHookLogsService = class {
   async getFullOutput(hookType, hookName) {
     const filename = hookType === "environment" ? ENVIRONMENT_HOOK_LOG_FILENAME : repoHookLogFilename(hookName);
     try {
-      const raw = await readFile4(join8(LOGS_DIR, filename), "utf-8");
+      const raw = await readFile5(join8(LOGS_DIR, filename), "utf-8");
       const stored = normalizeStored(JSON.parse(raw));
       if (!stored || stored.hookType !== hookType || stored.hookName !== hookName) {
         return null;
@@ -4223,7 +4347,7 @@ async function readReplicasConfigFromDir(dirPath) {
     if (!existsSync4(configPath)) {
       continue;
     }
-    const data = await readFile5(configPath, "utf-8");
+    const data = await readFile6(configPath, "utf-8");
     const config = parseReplicasConfigString(data, filename);
     return { config, filename };
   }
@@ -4654,7 +4778,7 @@ var EventService = class {
 var eventService = new EventService();
 
 // src/services/preview-service.ts
-import { mkdir as mkdir8, readFile as readFile6 } from "fs/promises";
+import { mkdir as mkdir8, readFile as readFile7 } from "fs/promises";
 import { existsSync as existsSync5 } from "fs";
 import { randomUUID as randomUUID2 } from "crypto";
 import { homedir as homedir9 } from "os";
@@ -4665,7 +4789,7 @@ async function readPreviewsFile() {
     if (!existsSync5(PREVIEW_PORTS_FILE)) {
       return { previews: [] };
     }
-    const raw = await readFile6(PREVIEW_PORTS_FILE, "utf-8");
+    const raw = await readFile7(PREVIEW_PORTS_FILE, "utf-8");
     return JSON.parse(raw);
   } catch {
     return { previews: [] };
@@ -4770,7 +4894,7 @@ async function registerDesktopPreview() {
 
 // src/services/chat/chat-service.ts
 import { existsSync as existsSync7 } from "fs";
-import { appendFile as appendFile4, copyFile, mkdir as mkdir11, readFile as readFile10, rename as rename2, rm } from "fs/promises";
+import { appendFile as appendFile4, copyFile, mkdir as mkdir11, readFile as readFile11, rename as rename2, rm } from "fs/promises";
 import { homedir as homedir13 } from "os";
 import { join as join15 } from "path";
 import { randomUUID as randomUUID5 } from "crypto";
@@ -4785,10 +4909,10 @@ import { mkdir as mkdir10, appendFile as appendFile2 } from "fs/promises";
 import { homedir as homedir11 } from "os";
 
 // src/utils/jsonl-reader.ts
-import { readFile as readFile7 } from "fs/promises";
+import { readFile as readFile8 } from "fs/promises";
 async function readJSONL(filePath) {
   try {
-    const content = await readFile7(filePath, "utf-8");
+    const content = await readFile8(filePath, "utf-8");
     return parseAgentEventJsonl(content);
   } catch (error) {
     return [];
@@ -5159,7 +5283,7 @@ async function saveNormalizedImagesToTempFiles(images, tempImageDir = join12(hom
   return tempPaths;
 }
 async function removeTempImageFiles(paths) {
-  await Promise.allSettled(paths.map((path4) => unlink2(path4)));
+  await Promise.allSettled(paths.map((path5) => unlink2(path5)));
 }
 
 // src/services/message-queue-service.ts
@@ -6617,7 +6741,7 @@ var AspClient = class {
 // src/managers/codex-asp/app-server-process.ts
 var DEFAULT_CODEX_BINARY = "codex";
 var DEFAULT_CODEX_ARGS = ["app-server", "--listen", "stdio://"];
-var ENGINE_PACKAGE_VERSION = "0.1.297";
+var ENGINE_PACKAGE_VERSION = "0.1.299";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";
@@ -6941,16 +7065,16 @@ function transcriptItemsForTurn(turn) {
   const otherItems = turn.items.filter((item) => item.type !== "userMessage");
   return [...userItems, ...otherItems];
 }
-function userImageForLocalPath(path4) {
-  const cached = localImageCache.get(path4);
+function userImageForLocalPath(path5) {
+  const cached = localImageCache.get(path5);
   if (cached) return cached;
-  if (!existsSync6(path4)) return null;
+  if (!existsSync6(path5)) return null;
   const image = {
     type: "image",
-    mediaType: inferMediaType(path4),
-    data: readFileSync3(path4).toString("base64")
+    mediaType: inferMediaType(path5),
+    data: readFileSync3(path5).toString("base64")
   };
-  if (image.data.length > 0) localImageCache.set(path4, image);
+  if (image.data.length > 0) localImageCache.set(path5, image);
   return image;
 }
 function userImagesForInput(input) {
@@ -7308,9 +7432,9 @@ async function buildTurnInput(request) {
   }
   const normalizedImages = await normalizeImages(request.images);
   const tempImagePaths = await saveNormalizedImagesToTempFiles(normalizedImages);
-  input.push(...tempImagePaths.map((path4) => ({
+  input.push(...tempImagePaths.map((path5) => ({
     type: "localImage",
-    path: path4
+    path: path5
   })));
   return { input, tempImagePaths };
 }
@@ -7420,7 +7544,7 @@ var TranscriptUpdateCoalescer = class {
 };
 
 // src/managers/codex-asp/codex-history-file.ts
-import { appendFile as appendFile3, readFile as readFile8 } from "fs/promises";
+import { appendFile as appendFile3, readFile as readFile9 } from "fs/promises";
 var CodexHistoryFile = class {
   constructor(filePath) {
     this.filePath = filePath;
@@ -7438,7 +7562,7 @@ var CodexHistoryFile = class {
   }
   async load() {
     try {
-      const content = await readFile8(this.filePath, "utf-8");
+      const content = await readFile9(this.filePath, "utf-8");
       return parseAgentEventJsonlWithCodexAspTranscript(content);
     } catch (error) {
       if (!(error && typeof error === "object" && "code" in error && error.code === "ENOENT")) {
@@ -8347,9 +8471,9 @@ import { createSdkMcpServer, tool } from "@anthropic-ai/claude-agent-sdk";
 import { z } from "zod";
 var POLL_INTERVAL_MS = 2e3;
 var DEFAULT_SUBAGENT_TIMEOUT_MS = 6e5;
-async function engineFetch(path4, options) {
+async function engineFetch(path5, options) {
   const baseUrl = `http://localhost:${ENGINE_ENV.REPLICAS_ENGINE_PORT}`;
-  return fetch(`${baseUrl}${path4}`, {
+  return fetch(`${baseUrl}${path5}`, {
     ...options,
     headers: {
       "Content-Type": "application/json",
@@ -8918,7 +9042,7 @@ var KeepAliveService = class _KeepAliveService {
 var keepAliveService = new KeepAliveService();
 
 // src/services/upload-chat-transcripts.ts
-import { readdir as readdir3, readFile as readFile9 } from "fs/promises";
+import { readdir as readdir3, readFile as readFile10 } from "fs/promises";
 import { basename, join as join14 } from "path";
 import { homedir as homedir12 } from "os";
 var ENGINE_DIR2 = join14(homedir12(), ".replicas", "engine");
@@ -8955,7 +9079,7 @@ async function flushAllChatTranscripts(chatsById = /* @__PURE__ */ new Map()) {
   return { flushed, failed };
 }
 async function uploadChatTranscript(chatId, filePath, chat) {
-  const bytes = await readFile9(filePath);
+  const bytes = await readFile10(filePath);
   if (bytes.byteLength === 0) return;
   const form = new FormData();
   form.append("chat_id", chatId);
@@ -9232,7 +9356,7 @@ var ChatService = class {
   }
   async readSenders(chatId) {
     try {
-      const content = await readFile10(this.senderFilePath(chatId), "utf-8");
+      const content = await readFile11(this.senderFilePath(chatId), "utf-8");
       const lines = content.split("\n").filter((line) => line.trim().length > 0);
       const senders = [];
       for (const line of lines) {
@@ -9598,7 +9722,7 @@ var ChatService = class {
   }
   async loadChats() {
     try {
-      const content = await readFile10(CHATS_FILE, "utf-8");
+      const content = await readFile11(CHATS_FILE, "utf-8");
       return parsePersistedChatsContent(content);
     } catch (error) {
       if (error && typeof error === "object" && "code" in error && error.code === "ENOENT") {
@@ -9613,7 +9737,7 @@ var ChatService = class {
         console.error("[ChatService] Failed to quarantine corrupt chats file:", renameError);
       }
       try {
-        const backupContent = await readFile10(CHATS_BACKUP_FILE, "utf-8");
+        const backupContent = await readFile11(CHATS_BACKUP_FILE, "utf-8");
         return parsePersistedChatsContent(backupContent);
       } catch (backupError) {
         if (backupError && typeof backupError === "object" && "code" in backupError && backupError.code === "ENOENT") {
@@ -9698,7 +9822,7 @@ var ChatService = class {
 
 // src/services/repo-file-service.ts
 import { execFile as execFile2 } from "child_process";
-import { readFile as readFile11, realpath, stat as stat2 } from "fs/promises";
+import { readFile as readFile12, realpath, stat as stat2 } from "fs/promises";
 import { join as join16, resolve, extname } from "path";
 var CACHE_TTL_MS = 3e4;
 var SEARCH_TIMEOUT_MS = 15e3;
@@ -9888,7 +10012,7 @@ var RepoFileService = class {
           tooLarge: true
         };
       }
-      const content = await readFile11(fullPath, "utf-8");
+      const content = await readFile12(fullPath, "utf-8");
       return {
         repoName,
         path: filePath,
@@ -9966,11 +10090,11 @@ var RepoFileService = class {
 // src/v1-routes.ts
 import { Hono } from "hono";
 import { z as z2 } from "zod";
-import { readdir as readdir6, stat as stat4, readFile as readFile15 } from "fs/promises";
+import { readdir as readdir6, stat as stat4, readFile as readFile16 } from "fs/promises";
 import { join as join20, resolve as resolve2 } from "path";
 
 // src/services/canvas-service.ts
-import { readdir as readdir4, readFile as readFile12, stat as stat3 } from "fs/promises";
+import { readdir as readdir4, readFile as readFile13, stat as stat3 } from "fs/promises";
 import { homedir as homedir14 } from "os";
 import { basename as basename2, join as join17 } from "path";
 var CANVAS_DIRECTORIES = [
@@ -10035,10 +10159,10 @@ var CanvasService = class {
       }
       try {
         if (isTextKind(kind)) {
-          const content = await readFile12(filePath, "utf-8");
+          const content = await readFile13(filePath, "utf-8");
           return { filename: safe, kind, sizeBytes, mimeType, content };
         }
-        const buf = await readFile12(filePath);
+        const buf = await readFile13(filePath);
         return { filename: safe, kind, sizeBytes, mimeType, base64: buf.toString("base64") };
       } catch {
         continue;
@@ -10051,12 +10175,12 @@ var canvasService = new CanvasService();
 
 // src/services/warm-hooks-service.ts
 import { spawn as spawn4 } from "child_process";
-import { readFile as readFile14 } from "fs/promises";
+import { readFile as readFile15 } from "fs/promises";
 import { existsSync as existsSync8 } from "fs";
 import { join as join19 } from "path";
 
 // src/services/warm-hook-logs-service.ts
-import { mkdir as mkdir12, readFile as readFile13, writeFile as writeFile6, readdir as readdir5, appendFile as appendFile5, unlink as unlink3 } from "fs/promises";
+import { mkdir as mkdir12, readFile as readFile14, writeFile as writeFile6, readdir as readdir5, appendFile as appendFile5, unlink as unlink3 } from "fs/promises";
 import { homedir as homedir15 } from "os";
 import { join as join18 } from "path";
 var LOGS_DIR2 = join18(homedir15(), ".replicas", "warm-hook-logs");
@@ -10116,7 +10240,7 @@ var WarmHookLogsService = class {
         continue;
       }
       try {
-        const raw = await readFile13(join18(LOGS_DIR2, file), "utf-8");
+        const raw = await readFile14(join18(LOGS_DIR2, file), "utf-8");
         const stored = JSON.parse(raw);
         logs.push(withPreview2(stored));
       } catch {
@@ -10145,7 +10269,7 @@ var WarmHookLogsService = class {
   }
   async getCurrentRunLog() {
     try {
-      return await readFile13(CURRENT_RUN_LOG, "utf-8");
+      return await readFile14(CURRENT_RUN_LOG, "utf-8");
     } catch (err) {
       if (err.code === "ENOENT") return null;
       throw err;
@@ -10154,7 +10278,7 @@ var WarmHookLogsService = class {
   async getFullOutput(hookType, hookName) {
     const filename = hookType === "global" ? GLOBAL_FILENAME : hookType === "environment" ? ENVIRONMENT_HOOK_LOG_FILENAME : repoHookLogFilename(hookName);
     try {
-      const raw = await readFile13(join18(LOGS_DIR2, filename), "utf-8");
+      const raw = await readFile14(join18(LOGS_DIR2, filename), "utf-8");
       const stored = JSON.parse(raw);
       if (stored.hookType !== hookType || stored.hookName !== hookName) {
         return null;
@@ -10178,7 +10302,7 @@ async function readRepoWarmHook(repoPath) {
       continue;
     }
     try {
-      const raw = await readFile14(configPath, "utf-8");
+      const raw = await readFile15(configPath, "utf-8");
       const config = parseReplicasConfigString(raw, filename);
       if (!config.warmHook) {
         return null;
@@ -10739,11 +10863,11 @@ function createV1Routes(deps) {
   });
   app2.get("/repo-files/content", async (c) => {
     const repoName = c.req.query("repoName");
-    const path4 = c.req.query("path");
-    if (!repoName || !path4) {
+    const path5 = c.req.query("path");
+    if (!repoName || !path5) {
       return c.json(jsonError("repoName and path are required"), 400);
     }
-    const result = await deps.repoFileService.readFile(repoName, path4);
+    const result = await deps.repoFileService.readFile(repoName, path5);
     if (!result) {
       return c.json(jsonError("File not found"), 404);
     }
@@ -11141,7 +11265,7 @@ function createV1Routes(deps) {
       const limit = Math.min(parseInt(c.req.query("limit") || "500", 10), 5e3);
       let content;
       try {
-        content = await readFile15(filePath, "utf-8");
+        content = await readFile16(filePath, "utf-8");
       } catch {
         return c.json(jsonError("Log session not found"), 404);
       }
@@ -11291,6 +11415,7 @@ app.get("/status", async (c) => {
 app.get("/token-refresh/health", async (c) => {
   return c.json({
     github: githubTokenManager.getHealthStatus(),
+    gitlab: gitlabTokenManager.getHealthStatus(),
     claude: claudeTokenManager.getHealthStatus(),
     codex: codexTokenManager.getHealthStatus()
   });
@@ -11436,6 +11561,7 @@ serve(
     void registerDesktopPreview();
     heartbeatService.start(bootTimeMs);
     if (!IS_WARMING_MODE) {
+      await gitlabTokenManager.start();
       await claudeTokenManager.start();
       await codexTokenManager.start();
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.297",
+  "version": "0.1.299",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",