replicas-engine 0.1.671 → 0.1.673

package/dist/src/app-server-process-EVCFSBVG.js

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+import {
+  AppServerProcess
+} from "./chunk-CKJJIOSE.js";
+import "./chunk-A2ZICXOK.js";
+import "./chunk-2CFOJHNH.js";
+import "./chunk-5NBVP6A2.js";
+export {
+  AppServerProcess
+};

package/dist/src/{chunk-4FTBKGMO.js → chunk-2CFOJHNH.js}

@@ -5,7 +5,7 @@ import {
   isValidAgentProvider,
   parsePosixEnvFile,
   readReplicasRuntimeEnv
-} from "./chunk-TMERKNQV.js";
+} from "./chunk-5NBVP6A2.js";
 
 // src/engine-env.ts
 import { readFileSync as readFileSync2 } from "fs";

package/dist/src/{chunk-TMERKNQV.js → chunk-5NBVP6A2.js}

@@ -451,6 +451,7 @@ var GPT_5_6_LUNA_MODEL = "gpt-5.6-luna";
 var DEFAULT_CODEX_MODEL = GPT_5_6_SOL_MODEL;
 var DEFAULT_CURSOR_MODEL = "composer-2.5";
 var DEFAULT_OPENCODE_MODEL = "z-ai/glm-5.2";
+var OX_ALPHA_MODEL = "stealth/ox-alpha";
 var DEEPSEEK_V4_PRO_MODEL = "deepseek/deepseek-v4-pro-0813";
 var DEEPSEEK_V4_FLASH_MODEL = "deepseek/deepseek-v4-flash-0731";
 var DEFAULT_DEEPSEEK_MODEL = DEEPSEEK_V4_PRO_MODEL;
@@ -459,6 +460,7 @@ var DEFAULT_KIMI_MODEL = "moonshotai/kimi-k2.6";
 var DEFAULT_PI_MODEL = DEFAULT_OPENCODE_MODEL;
 var OPENROUTER_MODELS = [
   DEFAULT_OPENCODE_MODEL,
+  OX_ALPHA_MODEL,
   DEEPSEEK_V4_PRO_MODEL,
   DEEPSEEK_V4_FLASH_MODEL,
   "minimax/minimax-m3",
@@ -586,6 +588,7 @@ var MODEL_LABELS = {
   [GPT_5_6_LUNA_MODEL]: "GPT-5.6 Luna",
   "gpt-5.5": "GPT-5.5",
   [DEFAULT_OPENCODE_MODEL]: "GLM 5.2 via OpenRouter",
+  [OX_ALPHA_MODEL]: "Ox Alpha via OpenRouter",
   [DEEPSEEK_V4_PRO_MODEL]: "DeepSeek V4 Pro via OpenRouter",
   [DEEPSEEK_V4_FLASH_MODEL]: "DeepSeek V4 Flash via OpenRouter",
   "minimax/minimax-m3": "MiniMax M3 via OpenRouter",
@@ -2571,7 +2574,7 @@ Use this when:
 - The user asks for Stripe customers, payments, invoices, subscriptions, or balances`;
 var REFERENCE8 = `# Plugins
 
-Plugins are TypeScript libraries, not MCP servers. Import \`@replicas/sdk\`; Replicas authenticates the workspace and selects only the owner\u2019s personal connection or the organization fallback. Provider credentials, sessions, and project keys are never exposed.
+Plugins are TypeScript libraries, not MCP servers. Import \`@replicas/sdk\`; Replicas authenticates the workspace and selects the owner\u2019s personal connection first, then the most specific environment the workspace inherits from, then Global. Provider credentials, sessions, and project keys are never exposed.
 
 Plugin tools may read or write provider data according to the connected account's permissions. Only execute write or destructive tools when they match the user's request.
 
@@ -2584,7 +2587,7 @@ const plugins = await replicas.plugins.list();
 const installed = plugins.filter((plugin) => plugin.connected);
 \`\`\`
 
-If a plugin is not connected, ask the user to install it under personal or organization Integrations in the Replicas dashboard.
+If a plugin is not connected, ask the user to install it under personal, environment, or organization Integrations in the Replicas dashboard. An organization install lands on Global and reaches every workspace; an environment install overrides Global for the workspaces built from it.
 
 ## Search, inspect, execute
 

package/dist/src/{chunk-6WY7NPCL.js → chunk-A2ZICXOK.js}

@@ -2,7 +2,7 @@
 import {
   ENGINE_ENV,
   setAgentCredentialSnapshot
-} from "./chunk-4FTBKGMO.js";
+} from "./chunk-2CFOJHNH.js";
 import {
   CODEX_AUTH_ENV_KEYS,
   CODEX_AUTH_ENV_KEYS_BY_METHOD,
@@ -11,7 +11,7 @@ import {
   createSuccessResult,
   isRecord,
   isValidAgentProvider
-} from "./chunk-TMERKNQV.js";
+} from "./chunk-5NBVP6A2.js";
 
 // src/managers/codex-token-manager.ts
 import { promises as fs } from "fs";

package/dist/src/{chunk-6GXXZQID.js → chunk-CKJJIOSE.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   CodexAspAuthMethodChangedError
-} from "./chunk-6WY7NPCL.js";
+} from "./chunk-A2ZICXOK.js";
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES,
   isVersionBelow
-} from "./chunk-TMERKNQV.js";
+} from "./chunk-5NBVP6A2.js";
 
 // src/managers/codex-asp/app-server-process.ts
 import { spawn } from "child_process";
@@ -223,7 +223,7 @@ var DEFAULT_CODEX_ARGS = [
 var MIN_CODEX_CLI_VERSION = "0.144.6";
 var CODEX_UPGRADE_TIMEOUT_MS = 12e4;
 var codexCliVersionEnsured = null;
-var ENGINE_PACKAGE_VERSION = "0.1.671";
+var ENGINE_PACKAGE_VERSION = "0.1.673";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/{codex-token-manager-RX4N2W22.js → codex-token-manager-VIZLBLS2.js}

@@ -3,9 +3,9 @@ import {
   CodexAspAuthMethodChangedError,
   CodexTokenManager,
   codexTokenManager
-} from "./chunk-6WY7NPCL.js";
-import "./chunk-4FTBKGMO.js";
-import "./chunk-TMERKNQV.js";
+} from "./chunk-A2ZICXOK.js";
+import "./chunk-2CFOJHNH.js";
+import "./chunk-5NBVP6A2.js";
 export {
   CodexAspAuthMethodChangedError,
   CodexTokenManager,

package/dist/src/{engine-env-A2FZA66L.js → engine-env-3AQ2O2WZ.js}

@@ -4,8 +4,8 @@ import {
   IS_WARMING_MODE,
   loadEngineEnv,
   setAgentCredentialSnapshot
-} from "./chunk-4FTBKGMO.js";
-import "./chunk-TMERKNQV.js";
+} from "./chunk-2CFOJHNH.js";
+import "./chunk-5NBVP6A2.js";
 export {
   ENGINE_ENV,
   IS_WARMING_MODE,

package/dist/src/headless-agent.js

@@ -8,7 +8,7 @@ import {
   AGENT,
   getMemoryOutputSafetyViolation,
   headlessAgentRequestSchema
-} from "./chunk-TMERKNQV.js";
+} from "./chunk-5NBVP6A2.js";
 
 // src/headless-agent.ts
 import { createHash } from "crypto";
@@ -173,9 +173,9 @@ function runCodexTurn(client, params, timeoutMs) {
 }
 async function runCodex(request) {
   const [{ AppServerProcess }, { codexTokenManager }, { ENGINE_ENV }] = await Promise.all([
-    import("./app-server-process-S2SD6PQE.js"),
-    import("./codex-token-manager-RX4N2W22.js"),
-    import("./engine-env-A2FZA66L.js")
+    import("./app-server-process-EVCFSBVG.js"),
+    import("./codex-token-manager-VIZLBLS2.js"),
+    import("./engine-env-3AQ2O2WZ.js")
   ]);
   for (let attempt = 0; attempt < 2; attempt++) {
     const authMethod = ENGINE_ENV.REPLICAS_CODEX_AUTH_METHOD;

package/dist/src/index.js

@@ -26,7 +26,7 @@ import {
   SUBPROCESS_MAX_BUFFER,
   execAsync,
   execFileAsync
-} from "./chunk-6GXXZQID.js";
+} from "./chunk-CKJJIOSE.js";
 import {
   BaseRefreshManager,
   CodexAspAuthMethodChangedError,
@@ -37,13 +37,13 @@ import {
   monolithService,
   recordCredentialFallback,
   recordExhaustedCredential
-} from "./chunk-6WY7NPCL.js";
+} from "./chunk-A2ZICXOK.js";
 import {
   ENGINE_ENV,
   IS_WARMING_MODE,
   isRecord as isRecord2,
   setAgentCredentialSnapshot
-} from "./chunk-4FTBKGMO.js";
+} from "./chunk-2CFOJHNH.js";
 import {
   AGENT,
   AGENT_MODELS,
@@ -203,7 +203,7 @@ import {
   serializeCanvasContentResponse,
   shellQuotePosix,
   stripAgentDiagnosticErrors
-} from "./chunk-TMERKNQV.js";
+} from "./chunk-5NBVP6A2.js";
 
 // src/index.ts
 import { serve } from "@hono/node-server";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.671",
+  "version": "0.1.673",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",

package/workspace-sdk/shared/routes/plugins.d.ts

@@ -161,7 +161,7 @@ export type NativePluginId = Extract<(typeof PLUGIN_CATALOG)[number], {
 export type ComposioPluginId = Extract<(typeof PLUGIN_CATALOG)[number], {
     backend: 'composio';
 }>['id'];
-export type PluginScope = 'organization' | 'environment' | 'personal';
+export type PluginScope = 'environment' | 'personal';
 export type PluginAuthType = (typeof PLUGIN_CATALOG)[number]['authType'];
 export type PluginCategory = (typeof PLUGIN_CATALOG)[number]['category'];
 export declare const PLUGIN_CONNECTION_STATUSES: readonly ["initiated", "active", "expired", "failed"];

package/dist/src/app-server-process-S2SD6PQE.js

@@ -1,10 +0,0 @@
-#!/usr/bin/env node
-import {
-  AppServerProcess
-} from "./chunk-6GXXZQID.js";
-import "./chunk-6WY7NPCL.js";
-import "./chunk-4FTBKGMO.js";
-import "./chunk-TMERKNQV.js";
-export {
-  AppServerProcess
-};