replicas-engine 0.1.568 → 0.1.569

package/dist/src/index.js

@@ -2114,7 +2114,7 @@ LENGTH=$(stat -c%s "$FILE" 2>/dev/null || stat -f%z "$FILE")
 
 # 1. Reserve an upload URL + file ID.
 RESERVE=$(curl -s -G "https://slack.com/api/files.getUploadURLExternal" \\
-  -H "Authorization: Bearer $SLACK_BOT_TOKEN" \\
+  -H "Authorization: Bearer $REPLICAS_SLACK_BOT_TOKEN" \\
   --data-urlencode "filename=$FILENAME" \\
   --data-urlencode "length=$LENGTH")
 UPLOAD_URL=$(echo "$RESERVE" | jq -r '.upload_url')
@@ -2129,7 +2129,7 @@ curl -s -X POST "$UPLOAD_URL" \\
 
 # 3. Complete the upload, sharing it into the channel/thread with the dashboard link.
 curl -s -X POST "https://slack.com/api/files.completeUploadExternal" \\
-  -H "Authorization: Bearer $SLACK_BOT_TOKEN" \\
+  -H "Authorization: Bearer $REPLICAS_SLACK_BOT_TOKEN" \\
   -H "Content-Type: application/json; charset=utf-8" \\
   -d "{
     \\"files\\": [{\\"id\\": \\"$FILE_ID\\", \\"title\\": \\"Screenshot\\"}],
@@ -2640,10 +2640,10 @@ This guide covers how to interact with Slack from within your Replicas workspace
 
 ## Prerequisites
 
-Check if the \`SLACK_BOT_TOKEN\` environment variable is set:
+Check if the \`REPLICAS_SLACK_BOT_TOKEN\` environment variable is set:
 
 \`\`\`bash
-echo "\${SLACK_BOT_TOKEN:+set}"
+echo "\${REPLICAS_SLACK_BOT_TOKEN:+set}"
 \`\`\`
 
 - If **set**: Your workspace has Slack access. You can use the Slack Web API as described below.
@@ -2651,7 +2651,7 @@ echo "\${SLACK_BOT_TOKEN:+set}"
 
 ## Using the Slack API
 
-All requests use the \`$SLACK_BOT_TOKEN\` for authentication via the Slack Web API.
+All requests use the \`$REPLICAS_SLACK_BOT_TOKEN\` for authentication via the Slack Web API.
 
 ### Fetching a Thread from a Slack Link
 
@@ -2662,14 +2662,14 @@ If you encounter a Slack message link (e.g. \`https://team.slack.com/archives/C0
 
 \`\`\`bash
 curl -s "https://slack.com/api/conversations.replies?channel=CHANNEL_ID&ts=THREAD_TS" \\
-  -H "Authorization: Bearer $SLACK_BOT_TOKEN"
+  -H "Authorization: Bearer $REPLICAS_SLACK_BOT_TOKEN"
 \`\`\`
 
 ### Sending a Message
 
 \`\`\`bash
 curl -s -X POST "https://slack.com/api/chat.postMessage" \\
-  -H "Authorization: Bearer $SLACK_BOT_TOKEN" \\
+  -H "Authorization: Bearer $REPLICAS_SLACK_BOT_TOKEN" \\
   -H "Content-Type: application/json" \\
   -d '{
     "channel": "CHANNEL_ID",
@@ -2708,7 +2708,7 @@ The channel and thread flags default to \`SLACK_CHANNEL_ID\` and \`SLACK_THREAD_
 
 \`\`\`bash
 curl -s "https://slack.com/api/search.messages?query=YOUR_SEARCH_QUERY" \\
-  -H "Authorization: Bearer $SLACK_BOT_TOKEN"
+  -H "Authorization: Bearer $REPLICAS_SLACK_BOT_TOKEN"
 \`\`\`
 
 ### Uploading Files
@@ -2722,7 +2722,7 @@ LENGTH=$(stat -c%s "$FILE" 2>/dev/null || stat -f%z "$FILE")
 
 # 1. Reserve an upload URL + file ID.
 RESERVE=$(curl -s -G "https://slack.com/api/files.getUploadURLExternal" \\
-  -H "Authorization: Bearer $SLACK_BOT_TOKEN" \\
+  -H "Authorization: Bearer $REPLICAS_SLACK_BOT_TOKEN" \\
   --data-urlencode "filename=$FILENAME" \\
   --data-urlencode "length=$LENGTH")
 UPLOAD_URL=$(echo "$RESERVE" | jq -r '.upload_url')
@@ -2737,7 +2737,7 @@ curl -s -X POST "$UPLOAD_URL" \\
 
 # 3. Complete the upload and share into a channel (and optionally a thread).
 curl -s -X POST "https://slack.com/api/files.completeUploadExternal" \\
-  -H "Authorization: Bearer $SLACK_BOT_TOKEN" \\
+  -H "Authorization: Bearer $REPLICAS_SLACK_BOT_TOKEN" \\
   -H "Content-Type: application/json; charset=utf-8" \\
   -d "{
     \\"files\\": [{\\"id\\": \\"$FILE_ID\\", \\"title\\": \\"File title\\"}],
@@ -5583,7 +5583,7 @@ function loadEngineEnv() {
     WORKSPACE_ID: readEnv("WORKSPACE_ID"),
     LINEAR_SESSION_ID: readEnv("LINEAR_SESSION_ID"),
     LINEAR_ACCESS_TOKEN: readEnv("LINEAR_ACCESS_TOKEN"),
-    SLACK_BOT_TOKEN: readEnv("SLACK_BOT_TOKEN"),
+    REPLICAS_SLACK_BOT_TOKEN: readEnv("REPLICAS_SLACK_BOT_TOKEN"),
     SLACK_CHANNEL_ID: readEnv("SLACK_CHANNEL_ID"),
     SLACK_THREAD_TS: readEnv("SLACK_THREAD_TS"),
     ANTHROPIC_API_KEY: readEnv("ANTHROPIC_API_KEY"),
@@ -7218,7 +7218,7 @@ var EnvironmentDetailsService = class {
     details.gitlabAccessConfigured = gitlabAccessConfigured;
     details.gitlabCredentialsConfigured = gitlabAccessConfigured;
     details.linearAccessConfigured = Boolean(ENGINE_ENV.LINEAR_SESSION_ID || ENGINE_ENV.LINEAR_ACCESS_TOKEN);
-    details.slackAccessConfigured = Boolean(ENGINE_ENV.SLACK_BOT_TOKEN);
+    details.slackAccessConfigured = Boolean(ENGINE_ENV.REPLICAS_SLACK_BOT_TOKEN);
     const freshRepos = repositories.map((repo) => ({
       repositoryName: repo.name,
       warmHookCompleted: "n/a",
@@ -8407,9 +8407,9 @@ async function fetchImageAsBase64(url, linearAccessToken) {
     }
   }
   if (hostname === "files.slack.com") {
-    const token = ENGINE_ENV.SLACK_BOT_TOKEN;
+    const token = ENGINE_ENV.REPLICAS_SLACK_BOT_TOKEN;
     if (!token) {
-      throw new Error(`Cannot fetch Slack file from ${url}: SLACK_BOT_TOKEN is not configured`);
+      throw new Error(`Cannot fetch Slack file from ${url}: REPLICAS_SLACK_BOT_TOKEN is not configured`);
     }
     headers["Authorization"] = `Bearer ${token}`;
   }
@@ -10776,7 +10776,7 @@ var DEFAULT_CODEX_ARGS = ["app-server", "--listen", "stdio://"];
 var MIN_CODEX_CLI_VERSION = "0.144.6";
 var CODEX_UPGRADE_TIMEOUT_MS = 12e4;
 var codexCliVersionEnsured = null;
-var ENGINE_PACKAGE_VERSION = "0.1.568";
+var ENGINE_PACKAGE_VERSION = "0.1.569";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";
@@ -11071,6 +11071,7 @@ var THREAD_GOAL_SET_METHOD = "thread/goal/set";
 var THREAD_GOAL_GET_METHOD = "thread/goal/get";
 var THREAD_GOAL_CLEAR_METHOD = "thread/goal/clear";
 var THREAD_COMPACT_START_METHOD = "thread/compact/start";
+var THREAD_INJECT_ITEMS_METHOD = "thread/inject_items";
 var THREAD_SETTINGS_UPDATE_METHOD = "thread/settings/update";
 var TURN_START_METHOD = "turn/start";
 var TURN_INTERRUPT_METHOD = "turn/interrupt";
@@ -11743,6 +11744,10 @@ var DuplicateDefaultChatError = class extends Error {
 // src/managers/codex-asp/codex-asp-manager.ts
 var GOAL_TURN_CONTINUATION_GRACE_MS = 5e3;
 var CODEX_SLASH_COMMANDS_CACHE_MS = 3e4;
+var POLICY_REASON_INJECTION_TIMEOUT_MS = 5e3;
+function formatBlockedCommandReason(reason) {
+  return reason?.includes("Blocked by organization policy") ? reason : `Blocked by organization policy: ${reason || "agents may not merge pull requests."}`;
+}
 async function readCodexAspThreadHistory(threadId) {
   let entries;
   try {
@@ -12498,6 +12503,11 @@ var CodexAspManager = class extends CodingAgentManager {
             serverRequest.params.cwd,
             serverRequest.params.commandActions
           );
+          await this.injectBlockedCommandReason(
+            host,
+            serverRequest.params.threadId,
+            result.reason
+          );
           host.client.respond(requestId, { decision: "decline" });
           return;
         }
@@ -12534,6 +12544,11 @@ var CodexAspManager = class extends CodingAgentManager {
             serverRequest.params.cwd,
             [{ type: "unknown", command }]
           );
+          await this.injectBlockedCommandReason(
+            host,
+            this.currentThreadId ?? serverRequest.params.conversationId,
+            result.reason
+          );
           host.client.respond(requestId, { decision: "denied" });
           return;
         }
@@ -12584,11 +12599,38 @@ var CodexAspManager = class extends CodingAgentManager {
     }
     host.client.reject(requestId, -32601, `Replicas does not support ASP server request ${method}`);
   }
+  async injectBlockedCommandReason(host, threadId, reason) {
+    try {
+      await host.client.request(
+        THREAD_INJECT_ITEMS_METHOD,
+        {
+          threadId,
+          items: [{
+            type: "message",
+            role: "developer",
+            content: [{
+              type: "input_text",
+              text: [
+                "<organization_policy>",
+                "The command currently awaiting approval was rejected for this reason:",
+                formatBlockedCommandReason(reason),
+                "Do not retry the blocked command unchanged. Adjust your approach to comply with this policy.",
+                "</organization_policy>"
+              ].join("\n")
+            }]
+          }]
+        },
+        { timeoutMs: POLICY_REASON_INJECTION_TIMEOUT_MS }
+      );
+    } catch (error) {
+      console.warn("[CodexAspManager] Failed to inject blocked command reason:", error);
+    }
+  }
   nextTranscriptSequence() {
     return this.codexAspSequence++;
   }
   recordBlockedCommand(threadId, turnId, itemId, command, reason, startedAtMs, cwd, commandActions) {
-    const output = reason?.includes("Blocked by organization policy") ? reason : `Blocked by organization policy: ${reason || "agents may not merge pull requests."}`;
+    const output = formatBlockedCommandReason(reason);
     const timestamp = timestampFromMilliseconds(startedAtMs);
     const blockedItem = {
       type: "commandExecution",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.568",
+  "version": "0.1.569",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",