replicas-engine 0.1.574 → 0.1.576

package/dist/src/index.js

@@ -785,10 +785,39 @@ function parsePosixEnvFile(content) {
 
 // ../shared/src/git.ts
 var GIT_CREDENTIAL_HELPER_FILENAME = ".git-credential-replicas";
+var GITLAB_CREDENTIAL_REFRESH_PATH = "/git-credentials/gitlab/refresh";
 function buildGitCredentialHelperScript(credentialsPath) {
   return `#!/bin/sh
+request=$(cat)
+
+get_credential() {
+  printf '%s
+' "$request" | git credential-store --file=${shellQuotePosix(credentialsPath)} get
+}
+
+refresh_gitlab_credential() {
+  [ -n "\${REPLICAS_ENGINE_SECRET:-}" ] || return 1
+  command -v curl >/dev/null 2>&1 || return 1
+  curl --silent --fail --connect-timeout 1 --max-time 5     -X POST     -H "X-Replicas-Engine-Secret: $REPLICAS_ENGINE_SECRET"     "http://127.0.0.1:\${REPLICAS_ENGINE_PORT:-3737}${GITLAB_CREDENTIAL_REFRESH_PATH}"     >/dev/null 2>&1
+}
+
 if [ "$1" = "get" ]; then
-  exec git credential-store --file=${shellQuotePosix(credentialsPath)} get
+  credential=$(get_credential)
+  if printf '%s
+%s
+' "$request" "$credential" | grep -q '^username=oauth2$'; then
+    if refresh_gitlab_credential; then
+      refreshed_credential=$(get_credential)
+      if [ -n "$refreshed_credential" ]; then
+        credential=$refreshed_credential
+      fi
+    fi
+  fi
+  printf '%s
+' "$credential"
+elif [ "$1" = "erase" ] && printf '%s
+' "$request" | grep -q '^username=oauth2$'; then
+  refresh_gitlab_credential || true
 fi
 exit 0
 `;
@@ -5516,6 +5545,14 @@ var MAX_ENGINE_LOG_BYTES = 50 * 1024 * 1024;
 
 // ../shared/src/skill-registry.ts
 var SKILL_REGISTRY_MANIFEST_VERSION = 1;
+function isSkillRegistryManifest(value) {
+  if (typeof value !== "object" || value === null) return false;
+  if (!("version" in value) || value.version !== SKILL_REGISTRY_MANIFEST_VERSION) return false;
+  if (!("registries" in value) || !Array.isArray(value.registries)) return false;
+  return value.registries.every(
+    (entry) => typeof entry === "object" && entry !== null && "index" in entry && typeof entry.index === "number" && "name" in entry && typeof entry.name === "string" && "url" in entry && typeof entry.url === "string" && "checkoutPath" in entry && typeof entry.checkoutPath === "string"
+  );
+}
 
 // src/index.ts
 import { randomUUID as randomUUID8 } from "crypto";
@@ -5756,21 +5793,23 @@ var BaseRefreshManager = class {
   }
   async refreshOnce() {
     if (this.getSkipReason()) {
-      return;
+      return createSuccessResult();
     }
     const config = this.getRuntimeConfig();
-    if (!config) return;
+    if (!config) return createSuccessResult();
     this.health.lastAttemptAt = (/* @__PURE__ */ new Date()).toISOString();
     try {
       await this.doRefresh(config);
       this.health.lastSuccessAt = (/* @__PURE__ */ new Date()).toISOString();
       this.health.lastErrorAt = null;
       this.health.lastErrorMessage = null;
+      return createSuccessResult();
     } catch (error) {
       const message = error instanceof Error ? error.message : "Unknown error";
       this.health.lastErrorAt = (/* @__PURE__ */ new Date()).toISOString();
       this.health.lastErrorMessage = message;
       console.error(`[${this.managerName}] Failed to refresh credentials:`, error);
+      return createErrorResult({ message });
     }
   }
 };
@@ -9248,7 +9287,7 @@ async function readManifest(homeDir) {
   try {
     const raw = await readFile8(getManifestPath(homeDir), "utf8");
     const parsed = JSON.parse(raw);
-    if (!isManifest(parsed)) {
+    if (!isSkillRegistryManifest(parsed)) {
       console.warn("[SkillRegistry] Ignoring invalid skill registry manifest.");
       return null;
     }
@@ -9258,14 +9297,6 @@ async function readManifest(homeDir) {
     throw error;
   }
 }
-function isManifest(value) {
-  if (typeof value !== "object" || value === null) return false;
-  return "version" in value && value.version === SKILL_REGISTRY_MANIFEST_VERSION && "registries" in value && Array.isArray(value.registries) && value.registries.every(isSkillRegistryEntry);
-}
-function isSkillRegistryEntry(value) {
-  if (typeof value !== "object" || value === null) return false;
-  return "index" in value && typeof value.index === "number" && "name" in value && typeof value.name === "string" && "url" in value && typeof value.url === "string" && "checkoutPath" in value && typeof value.checkoutPath === "string";
-}
 function getRegistryRoot(homeDir) {
   return join15(homeDir, REGISTRY_ROOT_DIR);
 }
@@ -10823,7 +10854,7 @@ var DEFAULT_CODEX_ARGS = ["app-server", "--listen", "stdio://"];
 var MIN_CODEX_CLI_VERSION = "0.144.6";
 var CODEX_UPGRADE_TIMEOUT_MS = 12e4;
 var codexCliVersionEnsured = null;
-var ENGINE_PACKAGE_VERSION = "0.1.574";
+var ENGINE_PACKAGE_VERSION = "0.1.576";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";
@@ -18100,14 +18131,14 @@ data: ${JSON.stringify("Terminal session not found")}
   });
   app2.post("/codex/refresh-now", async (c) => {
     try {
-      await codexTokenManager.refreshOnce();
-      const status = codexTokenManager.getHealthStatus();
-      if (status.lastErrorAt && (!status.lastSuccessAt || status.lastErrorAt > status.lastSuccessAt)) {
+      const result = await codexTokenManager.refreshOnce();
+      if (!result.ok) {
         return c.json(
-          jsonError("Failed to refresh Codex credentials", status.lastErrorMessage ?? "Unknown error"),
+          jsonError("Failed to refresh Codex credentials", result.error.message),
           502
         );
       }
+      const status = codexTokenManager.getHealthStatus();
       return c.json({ success: true, lastSuccessAt: status.lastSuccessAt });
     } catch (error) {
       return c.json(
@@ -18658,6 +18689,16 @@ app.get("/token-refresh/health", async (c) => {
     infisical: infisicalTokenManager.getHealthStatus()
   });
 });
+app.post(GITLAB_CREDENTIAL_REFRESH_PATH, async (c) => {
+  const result = await gitlabTokenManager.refreshOnce();
+  if (!result.ok) {
+    return c.json({
+      error: "Failed to refresh GitLab credentials",
+      details: result.error.message
+    }, 502);
+  }
+  return c.body(null, 204);
+});
 var repoFileService = new RepoFileService(gitService);
 app.route("/", createV1Routes({ chatService, repoFileService }));
 var port = ENGINE_ENV.REPLICAS_ENGINE_PORT;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.574",
+  "version": "0.1.576",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",