replicas-engine 0.1.643 → 0.1.644

package/dist/src/{chunk-NJUUACT2.js → chunk-UMIEA67Y.js}

@@ -1219,6 +1219,7 @@ var PLANS = {
       "Unlimited automations",
       "Warm pools and warm hooks",
       "Higher API rate limits",
+      "Access to a static egress IP",
       "Auto-upgraded sandbox resources (4 vCPU, 32 GB disk, 16 GB memory)",
       "Shared Slack support channel"
     ]
@@ -1297,12 +1298,13 @@ var EGRESS_PATHS = {
   /**
    * Under /run, which is tmpfs. The key therefore never touches disk and cannot
    * be carried into a filesystem snapshot or a paused sandbox's disk image. It
-   * does not survive a reboot either, which is correct: the monolith rewrites
-   * it on every resume, so a revoked credential cannot come back with the
-   * workspace.
+   * does not survive a reboot either. A full-memory resume can reuse it only
+   * while the root-owned revision still matches the current profile and the
+   * running service and route are healthy.
    */
   CONFIG_DIR: "/run/replicas-egress",
   CONFIG_FILE: "/run/replicas-egress/config.json",
+  REVISION_FILE: "/run/replicas-egress/revision",
   /** Persistent: this records the workspace's original resolver so the tunnel can put it back, and must outlive a reboot. */
   RESOLV_BACKUP: "/var/lib/replicas-egress-resolv.conf.orig",
   UNIT_FILE: `/etc/systemd/system/${EGRESS_TUNNEL_SERVICE}`,
@@ -5888,7 +5890,7 @@ var DEFAULT_CODEX_ARGS = [
 var MIN_CODEX_CLI_VERSION = "0.144.6";
 var CODEX_UPGRADE_TIMEOUT_MS = 12e4;
 var codexCliVersionEnsured = null;
-var ENGINE_PACKAGE_VERSION = "0.1.643";
+var ENGINE_PACKAGE_VERSION = "0.1.644";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/headless-agent.js

@@ -7,7 +7,7 @@ import {
   isUnsafeMemoryOutput,
   putPresignedFile,
   recoverCompletedTurn
-} from "./chunk-NJUUACT2.js";
+} from "./chunk-UMIEA67Y.js";
 
 // src/headless-agent.ts
 import { createHash } from "crypto";

package/dist/src/index.js

@@ -172,7 +172,7 @@ import {
   serializeCanvasContentResponse,
   shellQuotePosix,
   stripAgentDiagnosticErrors
-} from "./chunk-NJUUACT2.js";
+} from "./chunk-UMIEA67Y.js";
 
 // src/index.ts
 import { serve } from "@hono/node-server";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.643",
+  "version": "0.1.644",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",