replicas-engine 0.1.642 → 0.1.644

package/dist/src/{chunk-QUFG5FRL.js → chunk-UMIEA67Y.js}

@@ -1219,6 +1219,7 @@ var PLANS = {
       "Unlimited automations",
       "Warm pools and warm hooks",
       "Higher API rate limits",
+      "Access to a static egress IP",
       "Auto-upgraded sandbox resources (4 vCPU, 32 GB disk, 16 GB memory)",
       "Shared Slack support channel"
     ]
@@ -1297,12 +1298,13 @@ var EGRESS_PATHS = {
   /**
    * Under /run, which is tmpfs. The key therefore never touches disk and cannot
    * be carried into a filesystem snapshot or a paused sandbox's disk image. It
-   * does not survive a reboot either, which is correct: the monolith rewrites
-   * it on every resume, so a revoked credential cannot come back with the
-   * workspace.
+   * does not survive a reboot either. A full-memory resume can reuse it only
+   * while the root-owned revision still matches the current profile and the
+   * running service and route are healthy.
    */
   CONFIG_DIR: "/run/replicas-egress",
   CONFIG_FILE: "/run/replicas-egress/config.json",
+  REVISION_FILE: "/run/replicas-egress/revision",
   /** Persistent: this records the workspace's original resolver so the tunnel can put it back, and must outlive a reboot. */
   RESOLV_BACKUP: "/var/lib/replicas-egress-resolv.conf.orig",
   UNIT_FILE: `/etc/systemd/system/${EGRESS_TUNNEL_SERVICE}`,
@@ -2448,6 +2450,7 @@ Use this when:
 - The user asks to manage Calendly events, invitees, or scheduling links
 - The user asks to read or change Google Ads, Docs, Drive, Search Console, or Sheets data
 - The user asks for ClickHouse analytics or PostHog product data
+- The user asks to create or control an E2B sandbox
 - The user asks to invoke a connected Modal function
 - The user asks to query or update a connected turbopuffer namespace
 - The user asks for PlanetScale organizations, databases, branches, or Insights data
@@ -2556,6 +2559,18 @@ const plagiarism = await replicas.pangram.plagiarism(text);
 \`\`\`
 
 Do not send private or sensitive text without the user's authorization.
+
+## E2B
+
+E2B is a native integration backed by its official JavaScript SDK. Create a sandbox, run commands, and remove it when finished:
+
+\`\`\`ts
+const { sandboxId } = await replicas.e2b.create({ timeoutMs: 300_000 });
+const result = await replicas.e2b.run(sandboxId, 'python analysis.py', { cwd: '/home/user' });
+await replicas.e2b.kill(sandboxId);
+\`\`\`
+
+Sandbox operations consume the connected account's E2B credits. Kill sandboxes after use unless the user asked to keep one running.
 `;
 var PLUGINS_ABILITY = {
   label: "Plugins",
@@ -5875,7 +5890,7 @@ var DEFAULT_CODEX_ARGS = [
 var MIN_CODEX_CLI_VERSION = "0.144.6";
 var CODEX_UPGRADE_TIMEOUT_MS = 12e4;
 var codexCliVersionEnsured = null;
-var ENGINE_PACKAGE_VERSION = "0.1.642";
+var ENGINE_PACKAGE_VERSION = "0.1.644";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/headless-agent.js

@@ -7,7 +7,7 @@ import {
   isUnsafeMemoryOutput,
   putPresignedFile,
   recoverCompletedTurn
-} from "./chunk-QUFG5FRL.js";
+} from "./chunk-UMIEA67Y.js";
 
 // src/headless-agent.ts
 import { createHash } from "crypto";

package/dist/src/index.js

@@ -172,7 +172,7 @@ import {
   serializeCanvasContentResponse,
   shellQuotePosix,
   stripAgentDiagnosticErrors
-} from "./chunk-QUFG5FRL.js";
+} from "./chunk-UMIEA67Y.js";
 
 // src/index.ts
 import { serve } from "@hono/node-server";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.642",
+  "version": "0.1.644",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",

package/workspace-sdk/index.js

@@ -123,5 +123,14 @@ const pangram = {
   plagiarism: (text) => pangramRequest('plagiarism', { text }),
 };
 
-export const replicas = { integrations, plugins, linear, slack, github, gitlab, sentry, modal, pangram, planetscale, turbopuffer };
+const e2b = {
+  create: (input = {}) => request('/v1/engine/e2b', { method: 'POST', body: { ...input, operation: 'create' } }),
+  run: (sandboxId, command, options = {}) => request('/v1/engine/e2b', {
+    method: 'POST',
+    body: { ...options, operation: 'run', sandboxId, command },
+  }),
+  kill: (sandboxId) => request('/v1/engine/e2b', { method: 'POST', body: { operation: 'kill', sandboxId } }),
+};
+
+export const replicas = { integrations, plugins, linear, slack, github, gitlab, sentry, modal, pangram, planetscale, turbopuffer, e2b };
 export default replicas;

package/workspace-sdk/index.test.ts

@@ -160,6 +160,29 @@ describe('@replicas/sdk', () => {
       server.stop(true);
     }
   });
+
+  test('runs E2B commands through the workspace gateway', async () => {
+    let observed: { path: string; body: unknown } | null = null;
+    const server = Bun.serve({
+      port: 0,
+      async fetch(request) {
+        observed = { path: new URL(request.url).pathname, body: await request.json() };
+        return Response.json({ exitCode: 0, stdout: 'ok\n', stderr: '' });
+      },
+    });
+    process.env.REPLICAS_MONOLITH_URL = server.url.toString().replace(/\/$/, '');
+    process.env.REPLICAS_ENGINE_SECRET = 'engine-secret';
+    process.env.REPLICAS_WORKSPACE_ID = 'workspace-1';
+    try {
+      await replicas.e2b.run('sandbox-1', 'echo ok', { cwd: '/home/user' });
+      expect(observed).toEqual({
+        path: '/v1/engine/e2b',
+        body: { operation: 'run', sandboxId: 'sandbox-1', command: 'echo ok', cwd: '/home/user' },
+      });
+    } finally {
+      server.stop(true);
+    }
+  });
 });
 
   test('analyzes text with Pangram through the workspace gateway', async () => {

package/workspace-sdk/shared/routes/plugins.d.ts

@@ -28,6 +28,14 @@ export declare const PLUGIN_CATALOG: readonly [{
     readonly category: "data";
     readonly name: "Cloudflare";
     readonly description: "Manage zones, DNS records, analytics, and security settings.";
+}, {
+    readonly id: "e2b";
+    readonly toolkit: "e2b";
+    readonly source: "native";
+    readonly authType: "api_key";
+    readonly category: "data";
+    readonly name: "E2B";
+    readonly description: "Create secure cloud sandboxes and run commands in them.";
 }, {
     readonly id: "gmail";
     readonly toolkit: "gmail";
@@ -202,6 +210,30 @@ export interface TurbopufferOperationRequest {
     namespace?: string;
     params?: Record<string, unknown>;
 }
+export interface E2BCreateSandboxRequest {
+    template?: string;
+    timeoutMs?: number;
+    metadata?: Record<string, string>;
+    envs?: Record<string, string>;
+}
+export interface E2BRunCommandOptions {
+    cwd?: string;
+    envs?: Record<string, string>;
+    user?: string;
+    timeoutMs?: number;
+}
+export interface E2BCreateSandboxResponse {
+    sandboxId: string;
+}
+export interface E2BCommandResult {
+    exitCode: number;
+    error?: string;
+    stdout: string;
+    stderr: string;
+}
+export interface E2BKillSandboxResponse {
+    killed: boolean;
+}
 export interface PluginConnectResponse {
     success: true;
 }

package/workspace-sdk/shared/workspace-sdk.d.ts

@@ -64,4 +64,9 @@ export interface ReplicasSdk {
         detect<T = unknown>(input: import('./routes/plugins').PangramAnalyzeRequest): Promise<T>;
         plagiarism<T = unknown>(text: string): Promise<T>;
     };
+    e2b: {
+        create(input?: import('./routes/plugins').E2BCreateSandboxRequest): Promise<import('./routes/plugins').E2BCreateSandboxResponse>;
+        run(sandboxId: string, command: string, options?: import('./routes/plugins').E2BRunCommandOptions): Promise<import('./routes/plugins').E2BCommandResult>;
+        kill(sandboxId: string): Promise<import('./routes/plugins').E2BKillSandboxResponse>;
+    };
 }