replicas-engine 0.1.657 → 0.1.659

package/dist/src/{chunk-HF62RZGX.js → chunk-OFT63LK5.js}

@@ -638,7 +638,8 @@ function isAgentChatActivityRecord(value) {
 }
 var agentCredentialSnapshotSchema = z2.object({
   method: z2.enum(CREDENTIAL_METHOD),
-  scope: z2.enum(CREDENTIAL_SCOPE)
+  scope: z2.enum(CREDENTIAL_SCOPE),
+  revision: z2.string().optional()
 });
 function isAuthMethod(value) {
   return typeof value === "string" && Object.values(CREDENTIAL_METHOD).some((method) => method === value);
@@ -4443,11 +4444,14 @@ function parseDeepseekEvents(events) {
       continue;
     }
     if (event.type === "tool/result") {
-      const callId = typeof data.callId === "string" ? data.callId : String(seq);
-      const existing = messages.find((message) => message.id === `deepseek-tool-${callId}` && message.type === "tool_call");
+      const message = isRecord(data.message) ? data.message : {};
+      const messageSource = isRecord(message.source) ? message.source : {};
+      const result = Array.isArray(message.content) && isRecord(message.content[0]) ? message.content[0] : {};
+      const callId = typeof messageSource.callId === "string" ? messageSource.callId : typeof data.callId === "string" ? data.callId : String(seq);
+      const existing = messages.find((message2) => message2.id === `deepseek-tool-${callId}` && message2.type === "tool_call");
       if (existing?.type === "tool_call") {
-        existing.output = stringifyDisplayValue(data.message ?? data.result);
-        existing.status = data.isError === true ? "failed" : "completed";
+        existing.output = stringifyDisplayValue(result.content ?? data.result);
+        existing.status = result.isError === true || data.isError === true ? "failed" : "completed";
       }
       continue;
     }
@@ -6226,7 +6230,7 @@ var DEFAULT_CODEX_ARGS = [
 var MIN_CODEX_CLI_VERSION = "0.144.6";
 var CODEX_UPGRADE_TIMEOUT_MS = 12e4;
 var codexCliVersionEnsured = null;
-var ENGINE_PACKAGE_VERSION = "0.1.657";
+var ENGINE_PACKAGE_VERSION = "0.1.659";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/headless-agent.js

@@ -7,7 +7,7 @@ import {
   headlessAgentRequestSchema,
   putPresignedFile,
   recoverCompletedTurn
-} from "./chunk-HF62RZGX.js";
+} from "./chunk-OFT63LK5.js";
 
 // src/headless-agent.ts
 import { createHash } from "crypto";

package/dist/src/index.js

@@ -183,7 +183,7 @@ import {
   serializeCanvasContentResponse,
   shellQuotePosix,
   stripAgentDiagnosticErrors
-} from "./chunk-HF62RZGX.js";
+} from "./chunk-OFT63LK5.js";
 
 // src/index.ts
 import { serve } from "@hono/node-server";
@@ -1459,15 +1459,27 @@ var ClaudeTokenManager = class extends BaseRefreshManager {
     }
     const data = await response.json();
     await this.applyCredentialsResponse(data);
-    if (data.scope) setAgentCredentialSnapshot("claude", { method: data.type, scope: data.scope });
+    if (data.scope) {
+      setAgentCredentialSnapshot("claude", {
+        method: data.type,
+        scope: data.scope,
+        ...data.revision ? { revision: data.revision } : {}
+      });
+    }
     console.log(`[ClaudeTokenManager] Credentials refreshed (method=${data.type})`);
   }
-  async fetchFreshCredentials(failureReason, failureKind = "rejected") {
-    const failedMethod = ENGINE_ENV.REPLICAS_CLAUDE_AUTH_METHOD;
+  async fetchFreshCredentials(failureReason, failureKind = "rejected", failedCredential = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.claude) {
+    const failedMethod = failedCredential?.method === "oauth" || failedCredential?.method === "api_key" || failedCredential?.method === "bedrock" || failedCredential?.method === "foundry" ? failedCredential.method : ENGINE_ENV.REPLICAS_CLAUDE_AUTH_METHOD;
     return this.swapCredentials({
       provider: "claude",
       failureKind,
-      refresh: (exclusions) => this.refreshWithRequest(failedMethod && failedMethod !== "none" ? { failedMethod, failureReason, failureKind, ...exclusions } : exclusions),
+      refresh: (exclusions) => this.refreshWithRequest(failedMethod && failedMethod !== "none" ? {
+        failedMethod,
+        ...failedCredential?.method === failedMethod ? { failedCredential } : {},
+        failureReason,
+        failureKind,
+        ...exclusions
+      } : exclusions),
       isOauthNow: () => ENGINE_ENV.REPLICAS_CLAUDE_AUTH_METHOD === "oauth"
     });
   }
@@ -1555,16 +1567,28 @@ var CodexTokenManager = class extends BaseRefreshManager {
     }
     const data = await response.json();
     await this.applyCredentialsResponse(data);
-    if (data.scope) setAgentCredentialSnapshot("codex", { method: data.type, scope: data.scope });
+    if (data.scope) {
+      setAgentCredentialSnapshot("codex", {
+        method: data.type,
+        scope: data.scope,
+        ...data.revision ? { revision: data.revision } : {}
+      });
+    }
     console.log(`[CodexTokenManager] Credentials refreshed (method=${data.type})`);
   }
-  async fetchFreshCredentials(failureReason, failureKind = "rejected") {
-    const failedMethod = ENGINE_ENV.REPLICAS_CODEX_AUTH_METHOD;
+  async fetchFreshCredentials(failureReason, failureKind = "rejected", failedCredential = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.codex) {
+    const failedMethod = failedCredential?.method === "oauth" || failedCredential?.method === "api_key" || failedCredential?.method === "foundry" ? failedCredential.method : ENGINE_ENV.REPLICAS_CODEX_AUTH_METHOD;
     return this.swapCredentials({
       provider: "codex",
       failureKind,
       refresh: (exclusions) => this.refreshWithRequest(
-        failedMethod === "oauth" || failedMethod === "api_key" || failedMethod === "foundry" ? { failedMethod, failureReason, failureKind, ...exclusions } : exclusions
+        failedMethod === "oauth" || failedMethod === "api_key" || failedMethod === "foundry" ? {
+          failedMethod,
+          ...failedCredential?.method === failedMethod ? { failedCredential } : {},
+          failureReason,
+          failureKind,
+          ...exclusions
+        } : exclusions
       ),
       isOauthNow: () => ENGINE_ENV.REPLICAS_CODEX_AUTH_METHOD === "oauth"
     });
@@ -4763,6 +4787,7 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
     let currentRequest = request;
     try {
       while (true) {
+        const attemptedCredential = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.claude;
         try {
           await this.executeQuery(currentRequest, { skipUserMessageRecord: attempt > 0 });
           return;
@@ -4793,7 +4818,9 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
             );
             this.setAuthRetrying(true);
             const refreshed = await claudeTokenManager.fetchFreshCredentials(
-              error instanceof Error ? error.message : String(error)
+              error instanceof Error ? error.message : String(error),
+              "rejected",
+              attemptedCredential
             );
             if (!refreshed.ok) {
               authRetryExhausted = true;
@@ -6739,6 +6766,7 @@ var CodexAspManager = class extends CodingAgentManager {
       }
       await this.executeAspTurn(request, recordUserMessage);
     };
+    let attemptedCredential = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.codex;
     try {
       await dispatch();
     } catch (error) {
@@ -6750,6 +6778,7 @@ var CodexAspManager = class extends CodingAgentManager {
           terminalError.message
         );
         if (outcome === "switched") {
+          attemptedCredential = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.codex;
           const retryFailure = await this.restartAndRetry(dispatch);
           if (!retryFailure) return;
           terminalError = retryFailure.error;
@@ -6758,7 +6787,11 @@ var CodexAspManager = class extends CodingAgentManager {
         }
       }
       if (isCodexAuthError(terminalError)) {
-        const refreshed = await codexTokenManager.fetchFreshCredentials(terminalError instanceof Error ? terminalError.message : String(terminalError));
+        const refreshed = await codexTokenManager.fetchFreshCredentials(
+          terminalError instanceof Error ? terminalError.message : String(terminalError),
+          "rejected",
+          attemptedCredential
+        );
         if (refreshed.ok) {
           const retryFailure = await this.restartAndRetry(dispatch);
           if (!retryFailure) return;
@@ -8331,7 +8364,7 @@ var DeepseekManager = class extends CodingAgentManager {
         DEEPSEEK_API_KEY: apiKey,
         DEEPSEEK_BASE_URL: "https://openrouter.ai/api/v1",
         DSH_HOME: join21(ENGINE_ENV.HOME_DIR, ".replicas", "deepseek"),
-        DSH_PERMISSION_MODE: "workspace-write",
+        DSH_PERMISSION_MODE: "danger-full-access",
         DSH_TELEMETRY_DISABLED: "true"
       },
       stdio: ["ignore", "pipe", "pipe"]
@@ -8464,6 +8497,7 @@ var DeepseekManager = class extends CodingAgentManager {
         this.sessionId = unwrap(await client.sessions.create({ cwd: this.workingDirectory })).sessionId;
         await this.onSaveSessionId(this.sessionId);
       }
+      await client.executeCommand(this.sessionId, "/permission danger-full-access");
       const model = request.model ?? DEFAULT_DEEPSEEK_MODEL;
       this.selectedModel = model;
       const current = unwrap(await client.sessions.models({ sessionId: this.sessionId })).current;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.657",
+  "version": "0.1.659",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",