replicas-engine 0.1.651 → 0.1.653

package/dist/src/{chunk-CJKDLHFP.js → chunk-KWNVQJRM.js}

@@ -782,6 +782,12 @@ function createAcceptedUserMessageEvent(message, messageId, timestamp, images) {
     }
   };
 }
+function getCodexAspTurnResponse(turn) {
+  const finalAnswer = turn.items.find((item) => item.type === "agentMessage" && item.phase === "final_answer");
+  if (finalAnswer) return finalAnswer;
+  if (normalizeCodexAspTranscriptStatus(turn.status) === "in_progress") return null;
+  return turn.items.findLast((item) => item.type === "agentMessage") ?? null;
+}
 function isCodexAspTranscript(value) {
   if (!isRecord(value)) return false;
   return typeof value.threadId === "string" && typeof value.updatedAt === "string" && Array.isArray(value.turns);
@@ -949,8 +955,11 @@ function containsKnownSecret(value, secrets) {
     return flattened.length >= MIN_SECRET_MATCH_CHARS && haystack.includes(flattened);
   }));
 }
-function isUnsafeMemoryOutput(value, secrets, maxChars) {
-  return maxChars !== void 0 && value.length > maxChars || containsSecret(value) || containsKnownSecret(value, secrets);
+function getMemoryOutputSafetyViolation(value, secrets, maxChars) {
+  if (maxChars !== void 0 && value.length > maxChars) return "max_chars";
+  if (containsSecret(value)) return "secret_pattern";
+  if (containsKnownSecret(value, secrets)) return "known_secret";
+  return null;
 }
 
 // ../shared/src/async.ts
@@ -5397,10 +5406,11 @@ function parseCodexAspTranscript(transcript) {
   for (const turn of transcript.turns) {
     const reasoningIndex = coalescedItems.findIndex(({ item, turn: itemTurn }) => itemTurn.id === turn.id && item.type === "reasoning");
     if (reasoningIndex === -1) continue;
-    let finalAnswerIndex = coalescedItems.findIndex(({ item, turn: itemTurn }) => itemTurn.id === turn.id && item.type === "agentMessage" && item.phase === "final_answer");
-    if (finalAnswerIndex === -1 && normalizeCodexAspTranscriptStatus(turn.status) !== "in_progress") {
-      finalAnswerIndex = coalescedItems.findLastIndex(({ item, turn: itemTurn }) => itemTurn.id === turn.id && item.type === "agentMessage");
-    }
+    const responseItem = getCodexAspTurnResponse({
+      status: turn.status,
+      items: coalescedItems.filter(({ turn: itemTurn }) => itemTurn.id === turn.id).map(({ item }) => item)
+    });
+    const finalAnswerIndex = responseItem ? coalescedItems.findIndex(({ item }) => item === responseItem) : -1;
     if (finalAnswerIndex === -1 || reasoningIndex < finalAnswerIndex) continue;
     const [reasoning] = coalescedItems.splice(reasoningIndex, 1);
     coalescedItems.splice(finalAnswerIndex, 0, reasoning);
@@ -5922,7 +5932,7 @@ var DEFAULT_CODEX_ARGS = [
 var MIN_CODEX_CLI_VERSION = "0.144.6";
 var CODEX_UPGRADE_TIMEOUT_MS = 12e4;
 var codexCliVersionEnsured = null;
-var ENGINE_PACKAGE_VERSION = "0.1.651";
+var ENGINE_PACKAGE_VERSION = "0.1.653";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";
@@ -6250,6 +6260,7 @@ export {
   normalizeCodexAspTranscriptStatus,
   imageContentToUserMessageImages,
   createAcceptedUserMessageEvent,
+  getCodexAspTurnResponse,
   isCodexAspTranscript,
   isCodexAspTranscriptDelta,
   applyCodexAspTranscriptDelta,
@@ -6286,7 +6297,7 @@ export {
   MEMORY_ROOT,
   MEMORY_SUMMARY_FILENAME,
   MEMORY_INDEX_FILENAME,
-  isUnsafeMemoryOutput,
+  getMemoryOutputSafetyViolation,
   isSkillRegistryManifest,
   putPresignedFile,
   buildCodexAgentEnv,

package/dist/src/headless-agent.js

@@ -3,11 +3,11 @@ import {
   AGENT,
   AppServerProcess,
   buildCodexAgentEnv,
+  getMemoryOutputSafetyViolation,
   headlessAgentRequestSchema,
-  isUnsafeMemoryOutput,
   putPresignedFile,
   recoverCompletedTurn
-} from "./chunk-CJKDLHFP.js";
+} from "./chunk-KWNVQJRM.js";
 
 // src/headless-agent.ts
 import { createHash } from "crypto";
@@ -59,8 +59,13 @@ async function publishFilesystemOutputs(request) {
   for (const output of request.outputFiles) {
     const filePath = resolveFile(request.workingDirectory, output.path);
     const content = (await readFile(filePath, "utf8")).trim();
-    if (output.minChars !== void 0 && content.length < output.minChars || isUnsafeMemoryOutput(content, request.sensitiveValues, output.maxChars)) {
-      throw new Error(`Headless agent output failed validation: ${output.path}`);
+    if (output.minChars !== void 0 && content.length < output.minChars) {
+      throw new Error(`Headless agent output failed validation: ${output.path} has ${content.length} characters; minimum is ${output.minChars}`);
+    }
+    const safetyViolation = getMemoryOutputSafetyViolation(content, request.sensitiveValues, output.maxChars);
+    if (safetyViolation) {
+      const reason = safetyViolation === "max_chars" ? `has ${content.length} characters; maximum is ${output.maxChars}` : safetyViolation === "secret_pattern" ? "contains secret-like content" : "contains an installed credential";
+      throw new Error(`Headless agent output failed validation: ${output.path} ${reason}`);
     }
     await writeFile(filePath, content, { mode: 384 });
     const { size } = await stat(filePath);

package/dist/src/index.js

@@ -119,6 +119,7 @@ import {
   findPrMergeSignals,
   getChatHistoryPageWindow,
   getClaudeModelContextWindow,
+  getCodexAspTurnResponse,
   getDefaultAgentModel,
   getEventTimestampMs,
   getGoalCommand,
@@ -172,7 +173,7 @@ import {
   serializeCanvasContentResponse,
   shellQuotePosix,
   stripAgentDiagnosticErrors
-} from "./chunk-CJKDLHFP.js";
+} from "./chunk-KWNVQJRM.js";
 
 // src/index.ts
 import { serve } from "@hono/node-server";
@@ -9181,16 +9182,11 @@ async function waitForChatCompletion(chatId, timeoutMs = DEFAULT_SUBAGENT_TIMEOU
   }
   throw new Error(`Subagent chat ${chatId} timed out after ${timeoutMs}ms`);
 }
-async function getChatFinalResponse(chatId) {
-  const res = await engineFetch(`/chats/${chatId}/history`);
-  if (!res.ok) {
-    return "[Failed to retrieve subagent history]";
-  }
-  let history;
-  try {
-    history = await res.json();
-  } catch {
-    return "[Failed to parse subagent history (response may have been interrupted)]";
+function extractFinalResponse(history) {
+  const turns = history.codexAspTranscript?.turns ?? [];
+  for (let turnIndex = turns.length - 1; turnIndex >= 0; turnIndex--) {
+    const response = getCodexAspTurnResponse(turns[turnIndex]);
+    if (response?.text) return response.text;
   }
   const events = history.events || [];
   for (let i = events.length - 1; i >= 0; i--) {
@@ -9226,7 +9222,20 @@ async function getChatFinalResponse(chatId) {
       if (text) return text;
     }
   }
-  return "[No response from subagent]";
+  return null;
+}
+async function getChatFinalResponse(chatId) {
+  const res = await engineFetch(`/chats/${chatId}/history`);
+  if (!res.ok) {
+    return "[Failed to retrieve subagent history]";
+  }
+  let history;
+  try {
+    history = await res.json();
+  } catch {
+    return "[Failed to parse subagent history (response may have been interrupted)]";
+  }
+  return extractFinalResponse(history) ?? "[No response from subagent]";
 }
 function buildSpawnAgentTool(parentChatId, availability = {}, getAllowedProviders = () => monolithService.getRelaySubagentProviders()) {
   const codexAvailable = availability.codexAvailable ?? false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.651",
+  "version": "0.1.653",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",