replicas-engine 0.1.309 → 0.1.312

package/dist/src/index.js

@@ -14,21 +14,6 @@ function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
-// ../shared/src/result.ts
-function createSuccessResult(data) {
-  return { ok: true, data };
-}
-function createErrorResult(error) {
-  return {
-    ok: false,
-    error: {
-      message: error.message,
-      code: error.code,
-      details: error.details
-    }
-  };
-}
-
 // ../shared/src/agent.ts
 var CODEX_REASONING_EFFORT_BY_THINKING_LEVEL = {
   low: "low",
@@ -302,7 +287,7 @@ var WORKSPACE_SIZES = ["small", "large"];
 var INVALID_WORKSPACE_SIZE_ERROR = `Invalid size: must be one of ${WORKSPACE_SIZES.join(", ")}`;
 
 // ../shared/src/e2b.ts
-var E2B_TEMPLATE_NAME = "replicas-sandbox-2026-06-13-v5";
+var E2B_TEMPLATE_NAME = "replicas-sandbox-2026-06-13-v8";
 
 // ../shared/src/runtime-env.ts
 function parsePosixEnvFile(content) {
@@ -2925,6 +2910,32 @@ function upsertCredentialFileLines(filePath, hosts, lines) {
   credentialFileQueue = task.catch(() => void 0);
   return task;
 }
+function removeCredentialFileLines(filePath, shouldRemove) {
+  const task = credentialFileQueue.then(async () => {
+    let existing = [];
+    try {
+      existing = (await readFile(filePath, "utf-8")).split("\n").filter(Boolean);
+    } catch {
+      return;
+    }
+    const kept = existing.filter((line) => !shouldRemove(line));
+    await writeSecureCredentialFile(filePath, [...kept, ""].join("\n"));
+  });
+  credentialFileQueue = task.catch(() => void 0);
+  return task;
+}
+
+// src/utils/git-identity.ts
+async function updateGitIdentity(identity, tag) {
+  try {
+    const [nameArgs, emailArgs] = gitIdentityConfigCommands(identity);
+    await execFileAsync("git", nameArgs);
+    await execFileAsync("git", emailArgs);
+    console.log(`[${tag}] Updated git identity to ${identity.name} <${identity.email}>`);
+  } catch (error) {
+    console.error(`[${tag}] Failed to update git identity:`, error);
+  }
+}
 
 // src/managers/github-token-manager.ts
 var GitHubTokenManager = class extends BaseRefreshManager {
@@ -2935,6 +2946,9 @@ var GitHubTokenManager = class extends BaseRefreshManager {
     console.log("[GitHubTokenManager] Refreshing GitHub token...");
     const response = await monolithRequest("/v1/engine/github/refresh-token");
     if (!response.ok) {
+      if (response.status === 403) {
+        await this.clearGitHubCredentials();
+      }
       const errorText = await response.text();
       throw new Error(`Token refresh failed: ${response.status} ${errorText}`);
     }
@@ -2944,7 +2958,7 @@ var GitHubTokenManager = class extends BaseRefreshManager {
     await this.updateGitCredentials(ghToken);
     await this.updateGhHostsFile(ghToken, ghUsername);
     if (data.gitIdentity) {
-      await this.updateGitIdentity(data.gitIdentity);
+      await updateGitIdentity(data.gitIdentity, "GitHubTokenManager");
     }
     if (data.userToken) {
       console.log(`[GitHubTokenManager] Token refreshed with user token for PR attribution, installation token expires at ${data.expiresAt}, user token expires at ${data.userToken.expiresAt}`);
@@ -2977,15 +2991,12 @@ var GitHubTokenManager = class extends BaseRefreshManager {
       console.error("[GitHubTokenManager] Failed to update gh hosts file:", error);
     }
   }
-  async updateGitIdentity(identity) {
-    try {
-      const [nameArgs, emailArgs] = gitIdentityConfigCommands(identity);
-      await execFileAsync("git", nameArgs);
-      await execFileAsync("git", emailArgs);
-      console.log(`[GitHubTokenManager] Updated git identity to ${identity.name} <${identity.email}>`);
-    } catch (error) {
-      console.error("[GitHubTokenManager] Failed to update git identity:", error);
-    }
+  async clearGitHubCredentials() {
+    const credentialsPath = path.join(ENGINE_ENV.HOME_DIR, ".git-credentials");
+    await removeCredentialFileLines(
+      credentialsPath,
+      (line) => line.endsWith("@github.com")
+    );
   }
 };
 var githubTokenManager = new GitHubTokenManager();
@@ -2997,12 +3008,16 @@ var GitLabTokenManager = class extends BaseRefreshManager {
     super("GitLabTokenManager");
   }
   async doRefresh(_config) {
-    const result = await this.fetchRefresh();
-    if (!result.ok) {
-      throw new Error(`Token refresh failed: ${result.error.message}`);
+    const response = await monolithRequest("/v1/engine/gitlab/refresh-token");
+    if (!response.ok) {
+      if (response.status === 403) {
+        await this.clearGitLabCredentials();
+      }
+      throw new Error(`Token refresh failed: ${response.status} ${await response.text()}`);
     }
-    const data = result.data;
+    const data = await response.json();
     if (!data.token) {
+      await this.clearGitLabCredentials(data.hosts);
       console.log(`[GitLabTokenManager] No GitLab token to install: ${data.reason}`);
       return;
     }
@@ -3015,25 +3030,15 @@ var GitLabTokenManager = class extends BaseRefreshManager {
     );
     console.log(`[GitLabTokenManager] Updated ${credentialsPath} for ${hosts.join(", ")}`);
     if (data.gitIdentity) {
-      await this.updateGitIdentity(data.gitIdentity);
+      await updateGitIdentity(data.gitIdentity, "GitLabTokenManager");
     }
   }
-  async fetchRefresh() {
-    const response = await monolithRequest("/v1/engine/gitlab/refresh-token");
-    if (!response.ok) {
-      return createErrorResult({ message: `${response.status} ${await response.text()}` });
-    }
-    return createSuccessResult(await response.json());
-  }
-  async updateGitIdentity(identity) {
-    try {
-      const [nameArgs, emailArgs] = gitIdentityConfigCommands(identity);
-      await execFileAsync("git", nameArgs);
-      await execFileAsync("git", emailArgs);
-      console.log(`[GitLabTokenManager] Updated git identity to ${identity.name} <${identity.email}>`);
-    } catch (error) {
-      console.error("[GitLabTokenManager] Failed to update git identity:", error);
-    }
+  async clearGitLabCredentials(hosts = []) {
+    const credentialsPath = path2.join(ENGINE_ENV.HOME_DIR, ".git-credentials");
+    await removeCredentialFileLines(
+      credentialsPath,
+      (line) => line.startsWith("https://oauth2:") && (hosts.length === 0 || hosts.some((host) => line.endsWith(`@${host}`)))
+    );
   }
 };
 var gitlabTokenManager = new GitLabTokenManager();
@@ -6846,7 +6851,7 @@ var AspClient = class {
 // src/managers/codex-asp/app-server-process.ts
 var DEFAULT_CODEX_BINARY = "codex";
 var DEFAULT_CODEX_ARGS = ["app-server", "--listen", "stdio://"];
-var ENGINE_PACKAGE_VERSION = "0.1.309";
+var ENGINE_PACKAGE_VERSION = "0.1.312";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.309",
+  "version": "0.1.312",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",