replicas-engine 0.1.540 → 0.1.542

package/dist/src/index.js

@@ -203,9 +203,72 @@ function detectLanguageByPath(filePath) {
   return EXT_TO_LANGUAGE[ext] ?? null;
 }
 
+// ../shared/src/credentials/types.ts
+var CREDENTIAL_SCOPE = {
+  USER: "user",
+  ORG: "org"
+};
+var CREDENTIAL_SCOPES = Object.values(CREDENTIAL_SCOPE);
+var CREDENTIAL_SCOPE_PRIORITY = [CREDENTIAL_SCOPE.USER, CREDENTIAL_SCOPE.ORG];
+
+// ../shared/src/credentials/agents.ts
+var CREDENTIAL_METHOD = {
+  OAUTH: "oauth",
+  API_KEY: "api_key",
+  FOUNDRY: "foundry",
+  BEDROCK: "bedrock",
+  OPENCODE_GO: "opencode-go",
+  ASTER: "aster",
+  OPENROUTER: "openrouter"
+};
+var CREDENTIAL_TYPE = {
+  CLAUDE_OAUTH: "claude",
+  ANTHROPIC_API_KEY: "claude_anthropic_api_key",
+  CLAUDE_FOUNDRY: "claude_foundry",
+  CLAUDE_BEDROCK: "claude_bedrock",
+  CODEX_OAUTH: "codex",
+  OPENAI_API_KEY: "openai_api_key",
+  CODEX_FOUNDRY: "codex_foundry",
+  CURSOR_API_KEY: "cursor_api_key",
+  OPENCODE_GO_API_KEY: "opencode_go_api_key",
+  ASTER_API_KEY: "aster_api_key",
+  OPENROUTER_API_KEY: "openrouter_api_key"
+};
+var AGENT_CREDENTIAL_METHODS_IN_ORDER = {
+  [AGENT.CLAUDE]: [
+    { method: CREDENTIAL_METHOD.OAUTH, credentialType: CREDENTIAL_TYPE.CLAUDE_OAUTH },
+    { method: CREDENTIAL_METHOD.API_KEY, credentialType: CREDENTIAL_TYPE.ANTHROPIC_API_KEY },
+    { method: CREDENTIAL_METHOD.FOUNDRY, credentialType: CREDENTIAL_TYPE.CLAUDE_FOUNDRY },
+    { method: CREDENTIAL_METHOD.BEDROCK, credentialType: CREDENTIAL_TYPE.CLAUDE_BEDROCK }
+  ],
+  [AGENT.CODEX]: [
+    { method: CREDENTIAL_METHOD.OAUTH, credentialType: CREDENTIAL_TYPE.CODEX_OAUTH },
+    { method: CREDENTIAL_METHOD.API_KEY, credentialType: CREDENTIAL_TYPE.OPENAI_API_KEY },
+    { method: CREDENTIAL_METHOD.FOUNDRY, credentialType: CREDENTIAL_TYPE.CODEX_FOUNDRY }
+  ],
+  [AGENT.CURSOR]: [
+    { method: CREDENTIAL_METHOD.API_KEY, credentialType: CREDENTIAL_TYPE.CURSOR_API_KEY }
+  ],
+  [AGENT.OPENCODE]: [
+    { method: CREDENTIAL_METHOD.OPENCODE_GO, credentialType: CREDENTIAL_TYPE.OPENCODE_GO_API_KEY },
+    { method: CREDENTIAL_METHOD.ASTER, credentialType: CREDENTIAL_TYPE.ASTER_API_KEY },
+    { method: CREDENTIAL_METHOD.OPENROUTER, credentialType: CREDENTIAL_TYPE.OPENROUTER_API_KEY }
+  ],
+  [AGENT.PI]: [
+    { method: CREDENTIAL_METHOD.ASTER, credentialType: CREDENTIAL_TYPE.ASTER_API_KEY },
+    { method: CREDENTIAL_METHOD.OPENROUTER, credentialType: CREDENTIAL_TYPE.OPENROUTER_API_KEY }
+  ]
+};
+
 // ../shared/src/chat-turn-usage.ts
+function isAuthMethod(value) {
+  return typeof value === "string" && Object.values(CREDENTIAL_METHOD).some((method) => method === value);
+}
+function isCredentialScope(value) {
+  return typeof value === "string" && CREDENTIAL_SCOPES.some((scope) => scope === value);
+}
 function isChatTurnUsageRecord(value) {
-  return isRecord(value) && typeof value.turnId === "string" && typeof value.chatId === "string" && typeof value.provider === "string" && isValidAgentProvider(value.provider) && typeof value.model === "string" && (value.senderUserId === void 0 || typeof value.senderUserId === "string") && typeof value.occurredAt === "string" && typeof value.seconds === "number" && Number.isFinite(value.seconds) && value.seconds >= 0;
+  return isRecord(value) && typeof value.turnId === "string" && typeof value.chatId === "string" && typeof value.provider === "string" && isValidAgentProvider(value.provider) && typeof value.model === "string" && (value.credentialMethod === void 0 || isAuthMethod(value.credentialMethod)) && (value.credentialScope === void 0 || isCredentialScope(value.credentialScope)) && value.credentialMethod === void 0 === (value.credentialScope === void 0) && (value.senderUserId === void 0 || typeof value.senderUserId === "string") && typeof value.occurredAt === "string" && typeof value.seconds === "number" && Number.isFinite(value.seconds) && value.seconds >= 0;
 }
 
 // ../shared/src/aster.ts
@@ -639,7 +702,7 @@ var WORKSPACE_SIZES = ["small", "large"];
 var INVALID_WORKSPACE_SIZE_ERROR = `Invalid size: must be one of ${WORKSPACE_SIZES.join(", ")}`;
 
 // ../shared/src/e2b.ts
-var E2B_TEMPLATE_NAME = "replicas-sandbox-2026-07-31-v11";
+var E2B_TEMPLATE_NAME = "replicas-sandbox-2026-08-01-v2";
 
 // ../shared/src/runtime-env.ts
 function shellQuotePosix(value) {
@@ -2944,63 +3007,6 @@ function isTransientErrorText(text, options = {}) {
   return false;
 }
 
-// ../shared/src/credentials/types.ts
-var CREDENTIAL_SCOPE = {
-  USER: "user",
-  ORG: "org"
-};
-var CREDENTIAL_SCOPES = Object.values(CREDENTIAL_SCOPE);
-var CREDENTIAL_SCOPE_PRIORITY = [CREDENTIAL_SCOPE.USER, CREDENTIAL_SCOPE.ORG];
-
-// ../shared/src/credentials/agents.ts
-var CREDENTIAL_METHOD = {
-  OAUTH: "oauth",
-  API_KEY: "api_key",
-  FOUNDRY: "foundry",
-  BEDROCK: "bedrock",
-  OPENCODE_GO: "opencode-go",
-  ASTER: "aster",
-  OPENROUTER: "openrouter"
-};
-var CREDENTIAL_TYPE = {
-  CLAUDE_OAUTH: "claude",
-  ANTHROPIC_API_KEY: "claude_anthropic_api_key",
-  CLAUDE_FOUNDRY: "claude_foundry",
-  CLAUDE_BEDROCK: "claude_bedrock",
-  CODEX_OAUTH: "codex",
-  OPENAI_API_KEY: "openai_api_key",
-  CODEX_FOUNDRY: "codex_foundry",
-  CURSOR_API_KEY: "cursor_api_key",
-  OPENCODE_GO_API_KEY: "opencode_go_api_key",
-  ASTER_API_KEY: "aster_api_key",
-  OPENROUTER_API_KEY: "openrouter_api_key"
-};
-var AGENT_CREDENTIAL_METHODS_IN_ORDER = {
-  [AGENT.CLAUDE]: [
-    { method: CREDENTIAL_METHOD.OAUTH, credentialType: CREDENTIAL_TYPE.CLAUDE_OAUTH },
-    { method: CREDENTIAL_METHOD.API_KEY, credentialType: CREDENTIAL_TYPE.ANTHROPIC_API_KEY },
-    { method: CREDENTIAL_METHOD.FOUNDRY, credentialType: CREDENTIAL_TYPE.CLAUDE_FOUNDRY },
-    { method: CREDENTIAL_METHOD.BEDROCK, credentialType: CREDENTIAL_TYPE.CLAUDE_BEDROCK }
-  ],
-  [AGENT.CODEX]: [
-    { method: CREDENTIAL_METHOD.OAUTH, credentialType: CREDENTIAL_TYPE.CODEX_OAUTH },
-    { method: CREDENTIAL_METHOD.API_KEY, credentialType: CREDENTIAL_TYPE.OPENAI_API_KEY },
-    { method: CREDENTIAL_METHOD.FOUNDRY, credentialType: CREDENTIAL_TYPE.CODEX_FOUNDRY }
-  ],
-  [AGENT.CURSOR]: [
-    { method: CREDENTIAL_METHOD.API_KEY, credentialType: CREDENTIAL_TYPE.CURSOR_API_KEY }
-  ],
-  [AGENT.OPENCODE]: [
-    { method: CREDENTIAL_METHOD.OPENCODE_GO, credentialType: CREDENTIAL_TYPE.OPENCODE_GO_API_KEY },
-    { method: CREDENTIAL_METHOD.ASTER, credentialType: CREDENTIAL_TYPE.ASTER_API_KEY },
-    { method: CREDENTIAL_METHOD.OPENROUTER, credentialType: CREDENTIAL_TYPE.OPENROUTER_API_KEY }
-  ],
-  [AGENT.PI]: [
-    { method: CREDENTIAL_METHOD.ASTER, credentialType: CREDENTIAL_TYPE.ASTER_API_KEY },
-    { method: CREDENTIAL_METHOD.OPENROUTER, credentialType: CREDENTIAL_TYPE.OPENROUTER_API_KEY }
-  ]
-};
-
 // ../shared/src/claude-auth.ts
 function isClaudeAuthErrorText(text) {
   const lower = text.toLowerCase();
@@ -4998,6 +5004,11 @@ function loadRuntimeEnvFile() {
   }
 }
 
+// src/utils/type-guards.ts
+function isRecord4(value) {
+  return typeof value === "object" && value !== null;
+}
+
 // src/engine-env.ts
 function readEnv(name) {
   const value = process.env[name]?.trim();
@@ -5039,6 +5050,23 @@ function parseCodexAuthMethod(value) {
   }
   return void 0;
 }
+function parseAgentCredentialSnapshots(value) {
+  if (!value) return {};
+  try {
+    const parsed = JSON.parse(value);
+    if (!isRecord4(parsed)) return {};
+    const snapshots = {};
+    for (const [provider, snapshot] of Object.entries(parsed)) {
+      if (!isValidAgentProvider(provider) || !isRecord4(snapshot)) continue;
+      const { method, scope } = snapshot;
+      if (!isAuthMethod(method) || !isCredentialScope(scope)) continue;
+      snapshots[provider] = { method, scope };
+    }
+    return snapshots;
+  } catch {
+    return {};
+  }
+}
 var IS_WARMING_MODE = process.argv.includes("--warming");
 function loadEngineEnv() {
   loadRuntimeEnvFile();
@@ -5067,6 +5095,7 @@ function loadEngineEnv() {
     ANTHROPIC_SMALL_FAST_MODEL_AWS_REGION: readEnv("ANTHROPIC_SMALL_FAST_MODEL_AWS_REGION"),
     REPLICAS_CLAUDE_AUTH_METHOD: parseClaudeAuthMethod(readEnv("REPLICAS_CLAUDE_AUTH_METHOD")),
     REPLICAS_CODEX_AUTH_METHOD: parseCodexAuthMethod(readEnv("REPLICAS_CODEX_AUTH_METHOD")),
+    REPLICAS_AGENT_CREDENTIALS: parseAgentCredentialSnapshots(readEnv("REPLICAS_AGENT_CREDENTIALS")),
     REPLICAS_ENV_SYSTEM_PROMPT: readEnv("REPLICAS_ENV_SYSTEM_PROMPT"),
     REPLICAS_ENV_START_HOOK: readEnv("REPLICAS_ENV_START_HOOK"),
     REPLICAS_DISABLE_AUTO_START_HOOKS: readEnv("REPLICAS_DISABLE_AUTO_START_HOOKS")?.toLowerCase() === "true",
@@ -5078,6 +5107,13 @@ function loadEngineEnv() {
   return env;
 }
 var ENGINE_ENV = loadEngineEnv();
+function setAgentCredentialSnapshot(provider, snapshot) {
+  ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS = {
+    ...ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS,
+    [provider]: snapshot
+  };
+  process.env.REPLICAS_AGENT_CREDENTIALS = JSON.stringify(ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS);
+}
 
 // src/managers/base-refresh-manager.ts
 var BaseRefreshManager = class {
@@ -5317,13 +5353,6 @@ import { readFile as readFile2, mkdir as mkdir2 } from "fs/promises";
 import { existsSync } from "fs";
 import { join as join4 } from "path";
 import { homedir as homedir3 } from "os";
-
-// src/utils/type-guards.ts
-function isRecord4(value) {
-  return typeof value === "object" && value !== null;
-}
-
-// src/utils/state.ts
 var STATE_DIR = join4(homedir3(), ".replicas");
 var STATE_FILE = join4(STATE_DIR, "engine-state.json");
 var DEFAULT_STATE = {
@@ -6142,6 +6171,7 @@ var ClaudeTokenManager = class extends BaseRefreshManager {
     }
     const data = await response.json();
     await this.applyCredentialsResponse(data);
+    if (data.scope) setAgentCredentialSnapshot("claude", { method: data.type, scope: data.scope });
     console.log(`[ClaudeTokenManager] Credentials refreshed (method=${data.type})`);
   }
   async fetchFreshCredentials(failureReason) {
@@ -6249,6 +6279,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     }
     const data = await response.json();
     await this.applyCredentialsResponse(data);
+    if (data.scope) setAgentCredentialSnapshot("codex", { method: data.type, scope: data.scope });
     console.log(`[CodexTokenManager] Credentials refreshed (method=${data.type})`);
   }
   async fetchFreshCredentials(failureReason) {
@@ -10178,7 +10209,7 @@ var DEFAULT_CODEX_ARGS = ["app-server", "--listen", "stdio://"];
 var MIN_CODEX_CLI_VERSION = "0.144.6";
 var CODEX_UPGRADE_TIMEOUT_MS = 12e4;
 var codexCliVersionEnsured = null;
-var ENGINE_PACKAGE_VERSION = "0.1.540";
+var ENGINE_PACKAGE_VERSION = "0.1.542";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";
@@ -14392,7 +14423,14 @@ function noteMessageAccepted(messageId, request) {
   }
 }
 function noteTurnStarted(chatId, messageId, provider) {
-  activeTurns.set(chatId, { messageId, startedAtMs: Date.now(), provider });
+  const credential = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS[provider];
+  activeTurns.set(chatId, {
+    turnId: randomUUID5(),
+    messageId,
+    startedAtMs: Date.now(),
+    provider,
+    ...credential ? { credentialMethod: credential.method, credentialScope: credential.scope } : {}
+  });
 }
 function noteTurnEnded(chatId) {
   const turn = activeTurns.get(chatId);
@@ -14415,9 +14453,10 @@ function recordTurn(chatId, turn) {
   const attrs = messageAttrs.get(turn.messageId) ?? {};
   messageAttrs.delete(turn.messageId);
   writeRecord({
-    turnId: randomUUID5(),
+    turnId: turn.turnId,
     chatId,
     provider: turn.provider,
+    ...turn.credentialMethod && turn.credentialScope ? { credentialMethod: turn.credentialMethod, credentialScope: turn.credentialScope } : {},
     ...attrs,
     // A request without a model runs the agent's default, so record that rather than nothing.
     model: attrs.model ?? getDefaultAgentModel(turn.provider),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.540",
+  "version": "0.1.542",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",