replicas-engine 0.1.503 → 0.1.505

package/dist/src/index.js

@@ -611,7 +611,7 @@ var WORKSPACE_SIZES = ["small", "large"];
 var INVALID_WORKSPACE_SIZE_ERROR = `Invalid size: must be one of ${WORKSPACE_SIZES.join(", ")}`;
 
 // ../shared/src/e2b.ts
-var E2B_TEMPLATE_NAME = "replicas-sandbox-2026-07-25-v5";
+var E2B_TEMPLATE_NAME = "replicas-sandbox-2026-07-25-v7";
 
 // ../shared/src/runtime-env.ts
 function shellQuotePosix(value) {
@@ -3203,6 +3203,12 @@ function findPrMergeSignals(request) {
   ];
   return checks.flatMap(([name, pattern]) => pattern.test(combined) ? [name] : []);
 }
+function findGitCommitSignals(request) {
+  const command = normalizeCommandProtectionText(
+    extractCommandProtectionCommandText(request, { stringifyFallback: true }) ?? ""
+  );
+  return /\bgit\s+(?:-[^\s]+\s+)*commit\b/.test(command) ? ["git-commit"] : [];
+}
 
 // ../shared/src/routes/workspaces.ts
 var WORKSPACE_STATUSES = ["active", "sleeping", "archived", "preparing", "error"];
@@ -4875,7 +4881,6 @@ function loadEngineEnv() {
     ANTHROPIC_SMALL_FAST_MODEL_AWS_REGION: readEnv("ANTHROPIC_SMALL_FAST_MODEL_AWS_REGION"),
     REPLICAS_CLAUDE_AUTH_METHOD: parseClaudeAuthMethod(readEnv("REPLICAS_CLAUDE_AUTH_METHOD")),
     REPLICAS_CODEX_AUTH_METHOD: parseCodexAuthMethod(readEnv("REPLICAS_CODEX_AUTH_METHOD")),
-    REPLICAS_DISABLE_GH_PR_MERGE: readEnv("REPLICAS_DISABLE_GH_PR_MERGE")?.toLowerCase() === "true",
     REPLICAS_ENV_SYSTEM_PROMPT: readEnv("REPLICAS_ENV_SYSTEM_PROMPT"),
     REPLICAS_ENV_START_HOOK: readEnv("REPLICAS_ENV_START_HOOK"),
     REPLICAS_DISABLE_AUTO_START_HOOKS: readEnv("REPLICAS_DISABLE_AUTO_START_HOOKS")?.toLowerCase() === "true",
@@ -8245,7 +8250,7 @@ var LinearEventForwarder = class {
 };
 
 // src/services/command-protection-service.ts
-var DEFAULT_COMMAND_PROTECTION_BLOCK_MESSAGE = "Blocked by organization policy: agents may not merge pull requests.";
+var DEFAULT_COMMAND_PROTECTION_BLOCK_MESSAGE = "Blocked by Replicas command protection.";
 function asCommandProtectionResponse(value) {
   if (typeof value !== "object" || value === null) return null;
   const candidate = value;
@@ -8260,7 +8265,7 @@ function failClosed(reason, matchedSignals) {
   };
 }
 async function evaluateCommandProtection(request, signal) {
-  const matchedSignals = findPrMergeSignals(request);
+  const matchedSignals = [...findGitCommitSignals(request), ...findPrMergeSignals(request)];
   if (matchedSignals.length === 0) {
     return { allowed: true, enabled: true };
   }
@@ -8292,7 +8297,7 @@ function extractToolCommand(input) {
 }
 function reportCommandProtectionBlock(options) {
   const message = options.result.reason || DEFAULT_COMMAND_PROTECTION_BLOCK_MESSAGE;
-  console.warn(`[${options.managerName}] blocked ${options.action} by PR merge policy: ${message}`);
+  console.warn(`[${options.managerName}] blocked ${options.action} by command protection: ${message}`);
   options.recordHistoryEvent(options.eventType, {
     type: "error",
     message,
@@ -9031,7 +9036,7 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
         hookSpecificOutput: {
           hookEventName: "PreToolUse",
           permissionDecision: "deny",
-          permissionDecisionReason: result.reason || "Blocked by organization policy: agents may not merge pull requests."
+          permissionDecisionReason: result.reason || "Blocked by Replicas command protection."
         }
       };
     };
@@ -9365,15 +9370,13 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
         ...supportsClaudeThinkingDisplay(resolvedModel) ? { thinking: { type: "adaptive", display: "summarized" } } : {},
         ...effort ? { effort } : {},
         canUseTool: this.buildCanUseTool(),
-        ...ENGINE_ENV.REPLICAS_DISABLE_GH_PR_MERGE ? {
-          hooks: {
-            PreToolUse: [{
-              matcher: "*",
-              hooks: [this.buildCommandProtectionHook()],
-              timeout: 30
-            }]
-          }
-        } : {}
+        hooks: {
+          PreToolUse: [{
+            matcher: "*",
+            hooks: [this.buildCommandProtectionHook()],
+            timeout: 30
+          }]
+        }
       }
     });
     this.activeQuery = response;
@@ -9955,7 +9958,7 @@ var DEFAULT_CODEX_ARGS = ["app-server", "--listen", "stdio://"];
 var MIN_CODEX_CLI_VERSION = "0.144.6";
 var CODEX_UPGRADE_TIMEOUT_MS = 12e4;
 var codexCliVersionEnsured = null;
-var ENGINE_PACKAGE_VERSION = "0.1.503";
+var ENGINE_PACKAGE_VERSION = "0.1.505";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";
@@ -10259,9 +10262,6 @@ var MODEL_LIST_METHOD = "model/list";
 var SKILLS_LIST_METHOD = "skills/list";
 var MAX_CODEX_ASP_TRANSCRIPT_OUTPUT_CHARS = DEFAULT_HOOK_OUTPUT_PREVIEW_CHARS;
 function codexApprovalPolicyOverrides() {
-  if (!ENGINE_ENV.REPLICAS_DISABLE_GH_PR_MERGE) {
-    return { approvalPolicy: "never" };
-  }
   return {
     approvalPolicy: "untrusted",
     approvalsReviewer: "user"
@@ -11654,36 +11654,33 @@ var CodexAspManager = class extends CodingAgentManager {
     const method = serverRequest.method;
     switch (serverRequest.method) {
       case "item/commandExecution/requestApproval": {
-        if (ENGINE_ENV.REPLICAS_DISABLE_GH_PR_MERGE) {
-          const result = await evaluateCommandProtection({
-            provider: "codex",
-            source: "codex_approval_request",
-            toolName: "commandExecution",
-            toolInput: {
-              command: serverRequest.params.command,
-              commandActions: serverRequest.params.commandActions ?? null
-            },
+        const result = await evaluateCommandProtection({
+          provider: "codex",
+          source: "codex_approval_request",
+          toolName: "commandExecution",
+          toolInput: {
             command: serverRequest.params.command,
-            cwd: serverRequest.params.cwd ?? null,
-            toolUseId: serverRequest.params.itemId ?? null
-          });
-          if (!result.allowed) {
-            console.warn(`[CodexAspManager] blocked command approval by PR merge policy: ${result.reason ?? "unknown reason"}`);
-            this.recordBlockedCommand(
-              serverRequest.params.threadId,
-              serverRequest.params.turnId,
-              serverRequest.params.itemId,
-              serverRequest.params.command ?? "",
-              result.reason,
-              serverRequest.params.startedAtMs,
-              serverRequest.params.cwd,
-              serverRequest.params.commandActions
-            );
-            host.client.respond(requestId, { decision: "decline" });
-            return;
-          }
+            commandActions: serverRequest.params.commandActions ?? null
+          },
+          command: serverRequest.params.command,
+          cwd: serverRequest.params.cwd ?? null,
+          toolUseId: serverRequest.params.itemId ?? null
+        });
+        if (!result.allowed) {
+          console.warn(`[CodexAspManager] blocked command approval: ${result.reason ?? "unknown reason"}`);
+          this.recordBlockedCommand(
+            serverRequest.params.threadId,
+            serverRequest.params.turnId,
+            serverRequest.params.itemId,
+            serverRequest.params.command ?? "",
+            result.reason,
+            serverRequest.params.startedAtMs,
+            serverRequest.params.cwd,
+            serverRequest.params.commandActions
+          );
+          host.client.respond(requestId, { decision: "decline" });
+          return;
         }
-        console.warn("[CodexAspManager] approval requested while sandbox is danger-full-access");
         host.client.respond(requestId, { decision: "accept" });
         return;
       }
@@ -11692,37 +11689,34 @@ var CodexAspManager = class extends CodingAgentManager {
         host.client.respond(requestId, { decision: "accept" });
         return;
       case "execCommandApproval": {
-        if (ENGINE_ENV.REPLICAS_DISABLE_GH_PR_MERGE) {
-          const command = serverRequest.params.command.join(" ");
-          const result = await evaluateCommandProtection({
-            provider: "codex",
-            source: "codex_approval_request",
-            toolName: "execCommand",
-            toolInput: {
-              command: serverRequest.params.command,
-              parsedCmd: serverRequest.params.parsedCmd ?? null
-            },
+        const command = serverRequest.params.command.join(" ");
+        const result = await evaluateCommandProtection({
+          provider: "codex",
+          source: "codex_approval_request",
+          toolName: "execCommand",
+          toolInput: {
+            command: serverRequest.params.command,
+            parsedCmd: serverRequest.params.parsedCmd ?? null
+          },
+          command,
+          cwd: serverRequest.params.cwd ?? null,
+          toolUseId: serverRequest.params.callId ?? null
+        });
+        if (!result.allowed) {
+          console.warn(`[CodexAspManager] blocked legacy command approval: ${result.reason ?? "unknown reason"}`);
+          this.recordBlockedCommand(
+            this.currentThreadId ?? serverRequest.params.conversationId,
+            this.activeTurnId ?? `legacy-${requestId}`,
+            serverRequest.params.callId,
             command,
-            cwd: serverRequest.params.cwd ?? null,
-            toolUseId: serverRequest.params.callId ?? null
-          });
-          if (!result.allowed) {
-            console.warn(`[CodexAspManager] blocked legacy command approval by PR merge policy: ${result.reason ?? "unknown reason"}`);
-            this.recordBlockedCommand(
-              this.currentThreadId ?? serverRequest.params.conversationId,
-              this.activeTurnId ?? `legacy-${requestId}`,
-              serverRequest.params.callId,
-              command,
-              result.reason,
-              Date.now(),
-              serverRequest.params.cwd,
-              [{ type: "unknown", command }]
-            );
-            host.client.respond(requestId, { decision: "denied" });
-            return;
-          }
+            result.reason,
+            Date.now(),
+            serverRequest.params.cwd,
+            [{ type: "unknown", command }]
+          );
+          host.client.respond(requestId, { decision: "denied" });
+          return;
         }
-        console.warn("[CodexAspManager] legacy approval requested while sandbox is danger-full-access");
         host.client.respond(requestId, { decision: "approved" });
         return;
       }
@@ -12428,7 +12422,7 @@ var CursorManager = class extends CodingAgentManager {
     }
   }
   async handleCursorToolCall(toolCall) {
-    if (!ENGINE_ENV.REPLICAS_DISABLE_GH_PR_MERGE || !toolCall) return;
+    if (!toolCall) return;
     if (this.blockedToolCallIds.has(toolCall.toolUseId)) return;
     const result = await evaluateCommandProtection({
       provider: "cursor",
@@ -13079,7 +13073,7 @@ var OpencodeManager = class extends CodingAgentManager {
       const callId = typeof source?.callID === "string" ? source.callID : isRecord4(payload.tool) && typeof payload.tool.callID === "string" ? payload.tool.callID : void 0;
       const toolInput = callId ? this.opencodeToolInputs.get(callId) ?? payload : payload;
       const command = opencodePermissionCommand(payload, toolInput);
-      const result = ENGINE_ENV.REPLICAS_DISABLE_GH_PR_MERGE ? await evaluateCommandProtection({
+      const result = await evaluateCommandProtection({
         provider: "opencode",
         source: "opencode_permission_request",
         toolName: typeof payload.action === "string" ? payload.action : typeof payload.permission === "string" ? payload.permission : "permission",
@@ -13087,7 +13081,7 @@ var OpencodeManager = class extends CodingAgentManager {
         command,
         cwd: this.workingDirectory,
         toolUseId: requestId
-      }) : { allowed: true, enabled: false };
+      });
       const reply = result.allowed ? "once" : "reject";
       const message = result.allowed ? void 0 : reportCommandProtectionBlock({
         managerName: "OpencodeManager",
@@ -13137,7 +13131,7 @@ var OpencodeManager = class extends CodingAgentManager {
     await this.evaluateOpencodeToolProtection(part.tool, state.input, extractToolCommand(state.input), part.id);
   }
   async evaluateOpencodeToolProtection(toolName, toolInput, command, toolUseId) {
-    if (!ENGINE_ENV.REPLICAS_DISABLE_GH_PR_MERGE || this.handledToolCallIds.has(toolUseId) || this.pendingToolCallIds.has(toolUseId)) return;
+    if (this.handledToolCallIds.has(toolUseId) || this.pendingToolCallIds.has(toolUseId)) return;
     this.pendingToolCallIds.add(toolUseId);
     try {
       const result = await evaluateCommandProtection({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.503",
+  "version": "0.1.505",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",