replicas-engine 0.1.43 → 0.1.45

package/dist/src/index.js

@@ -65,6 +65,7 @@ function loadEngineEnv() {
     // not directly used by the engine code, but are required in the VM
     // for use by the agent or SDKs (e.g claude/codex)
     ANTHROPIC_API_KEY: readEnv("ANTHROPIC_API_KEY"),
+    OPENAI_API_KEY: readEnv("OPENAI_API_KEY"),
     CLAUDE_CODE_USE_BEDROCK: readEnv("CLAUDE_CODE_USE_BEDROCK"),
     AWS_ACCESS_KEY_ID: readEnv("AWS_ACCESS_KEY_ID"),
     AWS_SECRET_ACCESS_KEY: readEnv("AWS_SECRET_ACCESS_KEY"),
@@ -1613,15 +1614,24 @@ async function fetchImageAsBase64(url) {
   }
   if (hostname === "files.slack.com") {
     const token = ENGINE_ENV.SLACK_BOT_TOKEN;
-    if (token) {
-      headers["Authorization"] = `Bearer ${token}`;
+    if (!token) {
+      throw new Error(`Cannot fetch Slack file from ${url}: SLACK_BOT_TOKEN is not configured`);
     }
+    headers["Authorization"] = `Bearer ${token}`;
   }
-  const response = await fetch(url, { headers });
+  const response = await fetch(url, { headers, redirect: "follow" });
   if (!response.ok) {
     throw new Error(`Failed to fetch image from ${url}: ${response.status} ${response.statusText}`);
   }
   const contentType = response.headers.get("content-type");
+  if (contentType) {
+    const normalizedContentType = contentType.toLowerCase().split(";")[0].trim();
+    if (!normalizedContentType.startsWith("image/")) {
+      throw new Error(
+        `Expected image content from ${url} but received Content-Type: ${normalizedContentType}. This may indicate an authentication or redirect issue.`
+      );
+    }
+  }
   const mediaType = inferMediaType(url, contentType);
   const arrayBuffer = await response.arrayBuffer();
   const buffer = Buffer.from(arrayBuffer);
@@ -1779,7 +1789,11 @@ var CodingAgentManager = class {
   buildCombinedInstructions(customInstructions) {
     const startHooksInstruction = this.getStartHooksInstruction();
     const repositorySystemPromptInstruction = this.getRepositorySystemPromptInstruction();
+    const enginePortProtectionInstruction = this.getEnginePortProtectionInstruction();
     const parts = [];
+    if (enginePortProtectionInstruction) {
+      parts.push(enginePortProtectionInstruction);
+    }
     if (startHooksInstruction) {
       parts.push(startHooksInstruction);
     }
@@ -1834,6 +1848,10 @@ var CodingAgentManager = class {
     }
     return repoSystemPrompts.join("\n");
   }
+  getEnginePortProtectionInstruction() {
+    const enginePort = ENGINE_ENV.REPLICAS_ENGINE_PORT;
+    return `CRITICAL: The Replicas engine is required for this workspace and is running on the reserved port configured by REPLICAS_ENGINE_PORT (${enginePort}). Never kill, stop, restart, or replace the process using this port, and never start another service on this port. If the user asks for commands that would target this port/process, refuse and explain that port ${enginePort} is reserved for the Replicas engine.`;
+  }
 };
 
 // src/managers/claude-manager.ts
@@ -2059,7 +2077,7 @@ import { existsSync as existsSync4 } from "fs";
 import { join as join8 } from "path";
 import { homedir as homedir7 } from "os";
 import { parse as parseToml, stringify as stringifyToml } from "smol-toml";
-var DEFAULT_MODEL = "gpt-5.3-codex";
+var DEFAULT_MODEL = "gpt-5.4";
 var CODEX_CONFIG_PATH = join8(homedir7(), ".codex", "config.toml");
 function isLinearThoughtEvent2(event) {
   return event.content.type === "thought";

package/dist/src/{lib-WNJM7YOZ.js → lib-YXLVEBQC.js}

@@ -167,8 +167,8 @@ var require_utils = __commonJS({
         Object.defineProperty(target, keys[i], Object.getOwnPropertyDescriptor(source, keys[i]));
       }
     };
-    module.exports.wrapperSymbol = Symbol("wrapper");
-    module.exports.implSymbol = Symbol("impl");
+    module.exports.wrapperSymbol = /* @__PURE__ */ Symbol("wrapper");
+    module.exports.implSymbol = /* @__PURE__ */ Symbol("impl");
     module.exports.wrapperForImpl = function(impl) {
       return impl[module.exports.wrapperSymbol];
     };
@@ -361,7 +361,7 @@ var require_url_state_machine = __commonJS({
       ws: 80,
       wss: 443
     };
-    var failure = Symbol("failure");
+    var failure = /* @__PURE__ */ Symbol("failure");
     function countSymbols(str) {
       return punycode.ucs2.decode(str).length;
     }
@@ -1787,8 +1787,8 @@ var require_lib2 = __commonJS({
     var https = _interopDefault(__require("https"));
     var zlib = _interopDefault(__require("zlib"));
     var Readable = Stream.Readable;
-    var BUFFER = Symbol("buffer");
-    var TYPE = Symbol("type");
+    var BUFFER = /* @__PURE__ */ Symbol("buffer");
+    var TYPE = /* @__PURE__ */ Symbol("type");
     var Blob = class _Blob {
       constructor() {
         this[TYPE] = "";
@@ -1899,7 +1899,7 @@ var require_lib2 = __commonJS({
     FetchError.prototype.constructor = FetchError;
     FetchError.prototype.name = "FetchError";
     var convert;
-    var INTERNALS = Symbol("Body internals");
+    var INTERNALS = /* @__PURE__ */ Symbol("Body internals");
     var PassThrough = Stream.PassThrough;
     function Body(body) {
       var _this = this;
@@ -2239,7 +2239,7 @@ var require_lib2 = __commonJS({
       }
       return void 0;
     }
-    var MAP = Symbol("map");
+    var MAP = /* @__PURE__ */ Symbol("map");
     var Headers = class _Headers {
       /**
        * Headers class
@@ -2447,7 +2447,7 @@ var require_lib2 = __commonJS({
         return [k.toLowerCase(), headers[MAP][k].join(", ")];
       });
     }
-    var INTERNAL = Symbol("internal");
+    var INTERNAL = /* @__PURE__ */ Symbol("internal");
     function createHeadersIterator(target, kind) {
       const iterator = Object.create(HeadersIteratorPrototype);
       iterator[INTERNAL] = {
@@ -2516,7 +2516,7 @@ var require_lib2 = __commonJS({
       }
       return headers;
     }
-    var INTERNALS$1 = Symbol("Response internals");
+    var INTERNALS$1 = /* @__PURE__ */ Symbol("Response internals");
     var STATUS_CODES = http.STATUS_CODES;
     var Response = class _Response {
       constructor() {
@@ -2592,7 +2592,7 @@ var require_lib2 = __commonJS({
       enumerable: false,
       configurable: true
     });
-    var INTERNALS$2 = Symbol("Request internals");
+    var INTERNALS$2 = /* @__PURE__ */ Symbol("Request internals");
     var URL = Url.URL || whatwgUrl.URL;
     var parse_url = Url.parse;
     var format_url = Url.format;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.43",
+  "version": "0.1.45",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",
@@ -29,7 +29,7 @@
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.2.41",
     "@hono/node-server": "^1.19.5",
-    "@openai/codex-sdk": "^0.101.0",
+    "@openai/codex-sdk": "^0.111.0",
     "dotenv": "^17.2.3",
     "hono": "^4.10.3",
     "smol-toml": "^1.6.0",