replicas-engine 0.1.567 → 0.1.569

package/dist/src/index.js

@@ -2114,7 +2114,7 @@ LENGTH=$(stat -c%s "$FILE" 2>/dev/null || stat -f%z "$FILE")
 
 # 1. Reserve an upload URL + file ID.
 RESERVE=$(curl -s -G "https://slack.com/api/files.getUploadURLExternal" \\
-  -H "Authorization: Bearer $SLACK_BOT_TOKEN" \\
+  -H "Authorization: Bearer $REPLICAS_SLACK_BOT_TOKEN" \\
   --data-urlencode "filename=$FILENAME" \\
   --data-urlencode "length=$LENGTH")
 UPLOAD_URL=$(echo "$RESERVE" | jq -r '.upload_url')
@@ -2129,7 +2129,7 @@ curl -s -X POST "$UPLOAD_URL" \\
 
 # 3. Complete the upload, sharing it into the channel/thread with the dashboard link.
 curl -s -X POST "https://slack.com/api/files.completeUploadExternal" \\
-  -H "Authorization: Bearer $SLACK_BOT_TOKEN" \\
+  -H "Authorization: Bearer $REPLICAS_SLACK_BOT_TOKEN" \\
   -H "Content-Type: application/json; charset=utf-8" \\
   -d "{
     \\"files\\": [{\\"id\\": \\"$FILE_ID\\", \\"title\\": \\"Screenshot\\"}],
@@ -2640,10 +2640,10 @@ This guide covers how to interact with Slack from within your Replicas workspace
 
 ## Prerequisites
 
-Check if the \`SLACK_BOT_TOKEN\` environment variable is set:
+Check if the \`REPLICAS_SLACK_BOT_TOKEN\` environment variable is set:
 
 \`\`\`bash
-echo "\${SLACK_BOT_TOKEN:+set}"
+echo "\${REPLICAS_SLACK_BOT_TOKEN:+set}"
 \`\`\`
 
 - If **set**: Your workspace has Slack access. You can use the Slack Web API as described below.
@@ -2651,7 +2651,7 @@ echo "\${SLACK_BOT_TOKEN:+set}"
 
 ## Using the Slack API
 
-All requests use the \`$SLACK_BOT_TOKEN\` for authentication via the Slack Web API.
+All requests use the \`$REPLICAS_SLACK_BOT_TOKEN\` for authentication via the Slack Web API.
 
 ### Fetching a Thread from a Slack Link
 
@@ -2662,14 +2662,14 @@ If you encounter a Slack message link (e.g. \`https://team.slack.com/archives/C0
 
 \`\`\`bash
 curl -s "https://slack.com/api/conversations.replies?channel=CHANNEL_ID&ts=THREAD_TS" \\
-  -H "Authorization: Bearer $SLACK_BOT_TOKEN"
+  -H "Authorization: Bearer $REPLICAS_SLACK_BOT_TOKEN"
 \`\`\`
 
 ### Sending a Message
 
 \`\`\`bash
 curl -s -X POST "https://slack.com/api/chat.postMessage" \\
-  -H "Authorization: Bearer $SLACK_BOT_TOKEN" \\
+  -H "Authorization: Bearer $REPLICAS_SLACK_BOT_TOKEN" \\
   -H "Content-Type: application/json" \\
   -d '{
     "channel": "CHANNEL_ID",
@@ -2708,7 +2708,7 @@ The channel and thread flags default to \`SLACK_CHANNEL_ID\` and \`SLACK_THREAD_
 
 \`\`\`bash
 curl -s "https://slack.com/api/search.messages?query=YOUR_SEARCH_QUERY" \\
-  -H "Authorization: Bearer $SLACK_BOT_TOKEN"
+  -H "Authorization: Bearer $REPLICAS_SLACK_BOT_TOKEN"
 \`\`\`
 
 ### Uploading Files
@@ -2722,7 +2722,7 @@ LENGTH=$(stat -c%s "$FILE" 2>/dev/null || stat -f%z "$FILE")
 
 # 1. Reserve an upload URL + file ID.
 RESERVE=$(curl -s -G "https://slack.com/api/files.getUploadURLExternal" \\
-  -H "Authorization: Bearer $SLACK_BOT_TOKEN" \\
+  -H "Authorization: Bearer $REPLICAS_SLACK_BOT_TOKEN" \\
   --data-urlencode "filename=$FILENAME" \\
   --data-urlencode "length=$LENGTH")
 UPLOAD_URL=$(echo "$RESERVE" | jq -r '.upload_url')
@@ -2737,7 +2737,7 @@ curl -s -X POST "$UPLOAD_URL" \\
 
 # 3. Complete the upload and share into a channel (and optionally a thread).
 curl -s -X POST "https://slack.com/api/files.completeUploadExternal" \\
-  -H "Authorization: Bearer $SLACK_BOT_TOKEN" \\
+  -H "Authorization: Bearer $REPLICAS_SLACK_BOT_TOKEN" \\
   -H "Content-Type: application/json; charset=utf-8" \\
   -d "{
     \\"files\\": [{\\"id\\": \\"$FILE_ID\\", \\"title\\": \\"File title\\"}],
@@ -4260,8 +4260,9 @@ function parseOpencodeEvents(events) {
     if (event.type === "event_msg" && event.payload.type === "user_message") {
       const message = event.payload.message;
       if (typeof message === "string" && message.trim()) {
+        const messageId = event.payload[USER_MESSAGE_ID_PAYLOAD_KEY];
         messages.push({
-          id: `opencode-user-${event.timestamp}-${messages.length}`,
+          id: typeof messageId === "string" ? messageId : `opencode-user-${event.timestamp}`,
           type: "user",
           content: message,
           timestamp: event.timestamp
@@ -4273,7 +4274,7 @@ function parseOpencodeEvents(events) {
       const error = assistantError(event.payload.info);
       if (error) {
         messages.push({
-          id: `opencode-error-${event.timestamp}-${messages.length}`,
+          id: `opencode-${event.type}-${event.timestamp}`,
           type: "error",
           message: error,
           timestamp: event.timestamp
@@ -4284,7 +4285,7 @@ function parseOpencodeEvents(events) {
     if (event.type === "opencode-error") {
       const message = typeof event.payload.message === "string" ? event.payload.message : "Opencode run failed";
       messages.push({
-        id: `opencode-error-${event.timestamp}-${messages.length}`,
+        id: `opencode-${event.type}-${event.timestamp}`,
         type: "error",
         message,
         timestamp: event.timestamp
@@ -4295,7 +4296,7 @@ function parseOpencodeEvents(events) {
       const tool2 = typeof event.payload.tool === "string" ? event.payload.tool : "tool";
       const input = event.payload.input ?? event.payload.arguments;
       const callId = typeof event.payload.callID === "string" ? event.payload.callID : null;
-      const id2 = callId ? `opencode-${callId}` : `opencode-${event.timestamp}-${messages.length}`;
+      const id2 = callId ? `opencode-${callId}` : `opencode-${event.type}-${event.timestamp}`;
       upsertDisplayMessage(messages, createCallDisplayMessage({
         id: id2,
         server: "opencode",
@@ -4308,7 +4309,7 @@ function parseOpencodeEvents(events) {
     }
     const part = partFromEvent(event);
     if (!part) continue;
-    let id = `opencode-${event.timestamp}-${messages.length}`;
+    let id = `opencode-${event.type}-${event.timestamp}`;
     if (typeof part.callID === "string") id = `opencode-${part.callID}`;
     else if (typeof part.id === "string") id = `opencode-${part.id}`;
     const time = isRecord(part.time) ? part.time : null;
@@ -5252,38 +5253,81 @@ function stableString(value) {
     return String(value);
   }
 }
-function duplicateMessage(a, b) {
-  if (a.id === b.id) return true;
-  if (a.type !== b.type || !nearTimestamp(a.timestamp, b.timestamp)) {
-    return false;
+function duplicateKey(message) {
+  if (message.type === "user" || message.type === "agent" || message.type === "reasoning") {
+    return JSON.stringify([message.type, message.content]);
   }
-  if (a.type === "user" && b.type === "user") return a.content === b.content;
-  if (a.type === "agent" && b.type === "agent") return a.content === b.content;
-  if (a.type === "reasoning" && b.type === "reasoning") return a.content === b.content;
-  if (a.type === "command" && b.type === "command") return a.command === b.command;
-  if (a.type === "web_search" && b.type === "web_search") return a.query === b.query;
-  if (a.type === "subagent" && b.type === "subagent") {
-    return a.description === b.description && a.prompt === b.prompt && a.subagentType === b.subagentType && a.model === b.model;
+  if (message.type === "command") return JSON.stringify([message.type, message.command]);
+  if (message.type === "web_search") return JSON.stringify([message.type, message.query]);
+  if (message.type === "subagent") {
+    return JSON.stringify([
+      message.type,
+      message.description,
+      message.prompt,
+      message.subagentType,
+      message.model
+    ]);
   }
-  if (a.type === "todo_list" && b.type === "todo_list") {
-    return stableString(a.items) === stableString(b.items);
+  if (message.type === "todo_list") {
+    return JSON.stringify([message.type, stableString(message.items)]);
   }
-  if (a.type === "patch" && b.type === "patch") {
-    return stableString(a.operations) === stableString(b.operations);
+  if (message.type === "patch") {
+    return JSON.stringify([message.type, stableString(message.operations)]);
   }
-  if (a.type === "tool_call" && b.type === "tool_call") {
-    return a.server === b.server && a.tool === b.tool && stableString(a.input) === stableString(b.input);
+  if (message.type === "tool_call") {
+    return JSON.stringify([
+      message.type,
+      message.server,
+      message.tool,
+      stableString(message.input)
+    ]);
   }
-  return false;
+  return null;
+}
+function duplicateBucketKey(message, bucketOffset = 0) {
+  const key = duplicateKey(message);
+  if (key === null) return null;
+  const bucket = Math.floor(parseTimestampMs(message.timestamp) / DUPLICATE_WINDOW_MS) + bucketOffset;
+  return JSON.stringify([bucket, key]);
 }
 function mergeCodexAspDisplayMessages(primary, supplemental) {
   const merged = [...primary];
+  const firstIndexById = /* @__PURE__ */ new Map();
+  const indexesByDuplicateBucket = /* @__PURE__ */ new Map();
+  const indexMessage = (message, index) => {
+    if (!firstIndexById.has(message.id)) firstIndexById.set(message.id, index);
+    const key = duplicateBucketKey(message);
+    if (key === null) return;
+    const indexes = indexesByDuplicateBucket.get(key) ?? /* @__PURE__ */ new Set();
+    indexes.add(index);
+    indexesByDuplicateBucket.set(key, indexes);
+  };
+  const unindexMessage = (message, index) => {
+    const key = duplicateBucketKey(message);
+    if (key === null) return;
+    const indexes = indexesByDuplicateBucket.get(key);
+    indexes?.delete(index);
+    if (indexes?.size === 0) indexesByDuplicateBucket.delete(key);
+  };
+  merged.forEach(indexMessage);
   for (const message of supplemental) {
-    const duplicateIndex = merged.findIndex((existing) => duplicateMessage(existing, message));
-    if (duplicateIndex === -1) {
-      merged.push(message);
+    let duplicateIndex = firstIndexById.get(message.id);
+    if (duplicateIndex === void 0) {
+      for (let bucketOffset = -1; bucketOffset <= 1; bucketOffset += 1) {
+        const key = duplicateBucketKey(message, bucketOffset);
+        for (const index of (key === null ? void 0 : indexesByDuplicateBucket.get(key)) ?? []) {
+          if (nearTimestamp(merged[index].timestamp, message.timestamp) && (duplicateIndex === void 0 || index < duplicateIndex)) {
+            duplicateIndex = index;
+          }
+        }
+      }
+    }
+    if (duplicateIndex === void 0) {
+      indexMessage(message, merged.push(message) - 1);
     } else if (message.type === "user") {
+      unindexMessage(merged[duplicateIndex], duplicateIndex);
       merged[duplicateIndex] = { ...merged[duplicateIndex], timestamp: message.timestamp };
+      indexMessage(merged[duplicateIndex], duplicateIndex);
     }
   }
   return merged.map((message, index) => ({ message, index })).sort((a, b) => parseTimestampMs(a.message.timestamp) - parseTimestampMs(b.message.timestamp) || a.index - b.index).map(({ message }) => message);
@@ -5539,7 +5583,7 @@ function loadEngineEnv() {
     WORKSPACE_ID: readEnv("WORKSPACE_ID"),
     LINEAR_SESSION_ID: readEnv("LINEAR_SESSION_ID"),
     LINEAR_ACCESS_TOKEN: readEnv("LINEAR_ACCESS_TOKEN"),
-    SLACK_BOT_TOKEN: readEnv("SLACK_BOT_TOKEN"),
+    REPLICAS_SLACK_BOT_TOKEN: readEnv("REPLICAS_SLACK_BOT_TOKEN"),
     SLACK_CHANNEL_ID: readEnv("SLACK_CHANNEL_ID"),
     SLACK_THREAD_TS: readEnv("SLACK_THREAD_TS"),
     ANTHROPIC_API_KEY: readEnv("ANTHROPIC_API_KEY"),
@@ -7174,7 +7218,7 @@ var EnvironmentDetailsService = class {
     details.gitlabAccessConfigured = gitlabAccessConfigured;
     details.gitlabCredentialsConfigured = gitlabAccessConfigured;
     details.linearAccessConfigured = Boolean(ENGINE_ENV.LINEAR_SESSION_ID || ENGINE_ENV.LINEAR_ACCESS_TOKEN);
-    details.slackAccessConfigured = Boolean(ENGINE_ENV.SLACK_BOT_TOKEN);
+    details.slackAccessConfigured = Boolean(ENGINE_ENV.REPLICAS_SLACK_BOT_TOKEN);
     const freshRepos = repositories.map((repo) => ({
       repositoryName: repo.name,
       warmHookCompleted: "n/a",
@@ -8363,9 +8407,9 @@ async function fetchImageAsBase64(url, linearAccessToken) {
     }
   }
   if (hostname === "files.slack.com") {
-    const token = ENGINE_ENV.SLACK_BOT_TOKEN;
+    const token = ENGINE_ENV.REPLICAS_SLACK_BOT_TOKEN;
     if (!token) {
-      throw new Error(`Cannot fetch Slack file from ${url}: SLACK_BOT_TOKEN is not configured`);
+      throw new Error(`Cannot fetch Slack file from ${url}: REPLICAS_SLACK_BOT_TOKEN is not configured`);
     }
     headers["Authorization"] = `Bearer ${token}`;
   }
@@ -10732,7 +10776,7 @@ var DEFAULT_CODEX_ARGS = ["app-server", "--listen", "stdio://"];
 var MIN_CODEX_CLI_VERSION = "0.144.6";
 var CODEX_UPGRADE_TIMEOUT_MS = 12e4;
 var codexCliVersionEnsured = null;
-var ENGINE_PACKAGE_VERSION = "0.1.567";
+var ENGINE_PACKAGE_VERSION = "0.1.569";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";
@@ -11027,6 +11071,7 @@ var THREAD_GOAL_SET_METHOD = "thread/goal/set";
 var THREAD_GOAL_GET_METHOD = "thread/goal/get";
 var THREAD_GOAL_CLEAR_METHOD = "thread/goal/clear";
 var THREAD_COMPACT_START_METHOD = "thread/compact/start";
+var THREAD_INJECT_ITEMS_METHOD = "thread/inject_items";
 var THREAD_SETTINGS_UPDATE_METHOD = "thread/settings/update";
 var TURN_START_METHOD = "turn/start";
 var TURN_INTERRUPT_METHOD = "turn/interrupt";
@@ -11699,6 +11744,10 @@ var DuplicateDefaultChatError = class extends Error {
 // src/managers/codex-asp/codex-asp-manager.ts
 var GOAL_TURN_CONTINUATION_GRACE_MS = 5e3;
 var CODEX_SLASH_COMMANDS_CACHE_MS = 3e4;
+var POLICY_REASON_INJECTION_TIMEOUT_MS = 5e3;
+function formatBlockedCommandReason(reason) {
+  return reason?.includes("Blocked by organization policy") ? reason : `Blocked by organization policy: ${reason || "agents may not merge pull requests."}`;
+}
 async function readCodexAspThreadHistory(threadId) {
   let entries;
   try {
@@ -12454,6 +12503,11 @@ var CodexAspManager = class extends CodingAgentManager {
             serverRequest.params.cwd,
             serverRequest.params.commandActions
           );
+          await this.injectBlockedCommandReason(
+            host,
+            serverRequest.params.threadId,
+            result.reason
+          );
           host.client.respond(requestId, { decision: "decline" });
           return;
         }
@@ -12490,6 +12544,11 @@ var CodexAspManager = class extends CodingAgentManager {
             serverRequest.params.cwd,
             [{ type: "unknown", command }]
           );
+          await this.injectBlockedCommandReason(
+            host,
+            this.currentThreadId ?? serverRequest.params.conversationId,
+            result.reason
+          );
           host.client.respond(requestId, { decision: "denied" });
           return;
         }
@@ -12540,11 +12599,38 @@ var CodexAspManager = class extends CodingAgentManager {
     }
     host.client.reject(requestId, -32601, `Replicas does not support ASP server request ${method}`);
   }
+  async injectBlockedCommandReason(host, threadId, reason) {
+    try {
+      await host.client.request(
+        THREAD_INJECT_ITEMS_METHOD,
+        {
+          threadId,
+          items: [{
+            type: "message",
+            role: "developer",
+            content: [{
+              type: "input_text",
+              text: [
+                "<organization_policy>",
+                "The command currently awaiting approval was rejected for this reason:",
+                formatBlockedCommandReason(reason),
+                "Do not retry the blocked command unchanged. Adjust your approach to comply with this policy.",
+                "</organization_policy>"
+              ].join("\n")
+            }]
+          }]
+        },
+        { timeoutMs: POLICY_REASON_INJECTION_TIMEOUT_MS }
+      );
+    } catch (error) {
+      console.warn("[CodexAspManager] Failed to inject blocked command reason:", error);
+    }
+  }
   nextTranscriptSequence() {
     return this.codexAspSequence++;
   }
   recordBlockedCommand(threadId, turnId, itemId, command, reason, startedAtMs, cwd, commandActions) {
-    const output = reason?.includes("Blocked by organization policy") ? reason : `Blocked by organization policy: ${reason || "agents may not merge pull requests."}`;
+    const output = formatBlockedCommandReason(reason);
     const timestamp = timestampFromMilliseconds(startedAtMs);
     const blockedItem = {
       type: "commandExecution",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.567",
+  "version": "0.1.569",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",