replicas-engine 0.1.711 → 0.1.713

package/dist/src/{chunk-F4HJ4HAT.js → chunk-4TBCMRGQ.js}

@@ -2,7 +2,7 @@
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES,
   isVersionBelow
-} from "./chunk-VTONH6X5.js";
+} from "./chunk-GSMOYM7N.js";
 
 // src/utils/presigned-upload.ts
 import { createReadStream } from "fs";
@@ -267,7 +267,7 @@ var DEFAULT_CODEX_ARGS = [
 var MIN_CODEX_CLI_VERSION = "0.144.6";
 var CODEX_UPGRADE_TIMEOUT_MS = 12e4;
 var codexCliVersionEnsured = null;
-var ENGINE_PACKAGE_VERSION = "0.1.711";
+var ENGINE_PACKAGE_VERSION = "0.1.713";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/{chunk-VTONH6X5.js → chunk-GSMOYM7N.js}

@@ -536,7 +536,8 @@ function serializeCanvasContentResponse(input) {
     filename: input.filename,
     kind: input.kind,
     sizeBytes: input.sizeBytes,
-    mimeType: input.mimeType
+    mimeType: input.mimeType,
+    revision: input.revision
   };
   if (isCanvasTextKind(input.kind)) {
     return { ...base, content: new TextDecoder().decode(input.bytes) };
@@ -4066,6 +4067,9 @@ var AUDIT_LOG_ACTIONS = Object.values(AUDIT_LOG_ACTION);
 // ../shared/src/automations/types.ts
 var AUTOMATION_DEBOUNCE_MAX_SECONDS = 24 * 60 * 60;
 
+// ../shared/src/routes/repo-files.ts
+var MAX_REPO_FILE_CONTENT_BYTES = 256 * 1024;
+
 // ../shared/src/routes/admin.ts
 var WEBHOOK_PROVIDERS = ["linear", "github", "gitlab", "slack", "e2b", "stripe", "sentry"];
 var WEBHOOK_PROVIDER_SET = new Set(WEBHOOK_PROVIDERS);
@@ -6685,6 +6689,7 @@ export {
   IMAGE_MEDIA_TYPES,
   MAX_CANVAS_FILE_BYTES,
   MAX_CANVAS_PREVIEW_BYTES,
+  isCanvasTextKind,
   sanitizeCanvasFilename,
   serializeCanvasContentResponse,
   classifyCanvasFilename,
@@ -6768,6 +6773,7 @@ export {
   findPrMergeSignals,
   findGitCommitSignals,
   mayCreatePullRequest,
+  MAX_REPO_FILE_CONTENT_BYTES,
   coerceBackgroundTaskPayload,
   isTerminalBackgroundTaskStatus,
   areUserMessagesWithinMatchWindow,

package/dist/src/{chunk-Z7X6ZWKP.js → chunk-JSCZVP7Q.js}

@@ -12,7 +12,7 @@ import {
   isValidAgentProvider,
   parsePosixEnvFile,
   readReplicasRuntimeEnv
-} from "./chunk-VTONH6X5.js";
+} from "./chunk-GSMOYM7N.js";
 
 // src/engine-env.ts
 import { readFileSync as readFileSync2 } from "fs";

package/dist/src/{chunk-SI3I5LZI.js → chunk-OF3EDBVV.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   mayCreatePullRequest
-} from "./chunk-VTONH6X5.js";
+} from "./chunk-GSMOYM7N.js";
 
 // src/services/post-tool-pr-notifier.ts
 async function notifyPostToolUse(toolName, toolInput) {

package/dist/src/command-protection-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   evaluateCommandProtection
-} from "./chunk-Z7X6ZWKP.js";
+} from "./chunk-JSCZVP7Q.js";
 import {
   isRecord
 } from "./chunk-2RB7SIP3.js";
-import "./chunk-VTONH6X5.js";
+import "./chunk-GSMOYM7N.js";
 
 // src/command-protection-hook.ts
 var provider = process.argv[2];

package/dist/src/deepseek-command-protection-plugin.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   evaluateCommandProtection
-} from "./chunk-Z7X6ZWKP.js";
+} from "./chunk-JSCZVP7Q.js";
 import {
   notifyPostToolUse
-} from "./chunk-SI3I5LZI.js";
+} from "./chunk-OF3EDBVV.js";
 import "./chunk-2RB7SIP3.js";
-import "./chunk-VTONH6X5.js";
+import "./chunk-GSMOYM7N.js";
 
 // src/deepseek-command-protection-plugin.ts
 function replicasCommandProtection(context) {

package/dist/src/headless-agent.js

@@ -4,12 +4,12 @@ import {
   buildCodexAgentEnv,
   putPresignedFile,
   recoverCompletedTurn
-} from "./chunk-F4HJ4HAT.js";
+} from "./chunk-4TBCMRGQ.js";
 import {
   AGENT,
   getMemoryOutputSafetyViolation,
   headlessAgentRequestSchema
-} from "./chunk-VTONH6X5.js";
+} from "./chunk-GSMOYM7N.js";
 
 // src/headless-agent.ts
 import { createHash } from "crypto";

package/dist/src/index.js

@@ -8,7 +8,7 @@ import {
   monolithService,
   reportCommandProtectionBlock,
   setAgentCredentialSnapshot
-} from "./chunk-Z7X6ZWKP.js";
+} from "./chunk-JSCZVP7Q.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -35,7 +35,7 @@ import {
   execFileAsync,
   putPresignedFile,
   recoverCompletedTurn
-} from "./chunk-F4HJ4HAT.js";
+} from "./chunk-4TBCMRGQ.js";
 import {
   isRecord as isRecord2
 } from "./chunk-2RB7SIP3.js";
@@ -97,6 +97,7 @@ import {
   MAX_CANVAS_FILE_BYTES,
   MAX_CANVAS_PREVIEW_BYTES,
   MAX_CODEX_GOAL_OBJECTIVE_CHARS,
+  MAX_REPO_FILE_CONTENT_BYTES,
   MEMORY_INDEX_FILENAME,
   MEMORY_ROOT,
   MERGED_MESSAGE_SEPARATOR,
@@ -165,6 +166,7 @@ import {
   isAgentChatMcpActivityRecord,
   isAgentChatSkillActivityRecord,
   isAgentChatTurnActivityRecord,
+  isCanvasTextKind,
   isChatMessageSender,
   isClaudeAuthErrorText,
   isClaudeResultError,
@@ -211,7 +213,7 @@ import {
   shellQuotePosix,
   stripAgentDiagnosticErrors,
   withTimeout
-} from "./chunk-VTONH6X5.js";
+} from "./chunk-GSMOYM7N.js";
 
 // src/index.ts
 import { serve } from "@hono/node-server";
@@ -2627,7 +2629,7 @@ async function registerDesktopPreview() {
 
 // src/services/chat/chat-service.ts
 import { existsSync as existsSync11 } from "fs";
-import { appendFile as appendFile4, copyFile as copyFile2, mkdir as mkdir18, readFile as readFile19, rename as rename3, rm as rm3 } from "fs/promises";
+import { appendFile as appendFile4, copyFile as copyFile2, mkdir as mkdir18, readFile as readFile20, rename as rename3, rm as rm3 } from "fs/promises";
 import { join as join28 } from "path";
 import { randomUUID as randomUUID9 } from "crypto";
 
@@ -11929,9 +11931,49 @@ var KeepAliveService = class _KeepAliveService {
 var keepAliveService = new KeepAliveService();
 
 // src/services/canvas-service.ts
-import { readdir as readdir7, readFile as readFile17, stat as stat3 } from "fs/promises";
+import { readdir as readdir7, readFile as readFile18, stat as stat4 } from "fs/promises";
 import { homedir as homedir12 } from "os";
 import { join as join24 } from "path";
+
+// src/utils/contained-file.ts
+import { realpath, stat as stat3 } from "fs/promises";
+import { resolve as resolve2 } from "path";
+async function resolveContainedFile(root, relativePath) {
+  try {
+    const [fullPath, resolvedRoot] = await Promise.all([
+      realpath(resolve2(root, relativePath)),
+      realpath(root)
+    ]);
+    const fileStat = await stat3(fullPath);
+    const rootPrefix = resolvedRoot.endsWith("/") ? resolvedRoot : `${resolvedRoot}/`;
+    return fullPath.startsWith(rootPrefix) && fileStat.isFile() ? { fullPath, sizeBytes: fileStat.size } : null;
+  } catch {
+    return null;
+  }
+}
+
+// src/utils/file-revision.ts
+import { createHash as createHash3 } from "crypto";
+function fileRevision(content) {
+  return createHash3("sha256").update(content).digest("hex");
+}
+
+// src/utils/revisioned-text-file.ts
+import { readFile as readFile17 } from "fs/promises";
+async function writeRevisionedTextFile(filePath, content, expectedRevision) {
+  const current = await readFile17(filePath, "utf8");
+  const revision = fileRevision(current);
+  if (revision !== expectedRevision) {
+    return {
+      saved: false,
+      current: { content: current, revision, sizeBytes: Buffer.byteLength(current) }
+    };
+  }
+  await atomicWriteFile(filePath, content);
+  return { saved: true, revision: fileRevision(content), sizeBytes: Buffer.byteLength(content) };
+}
+
+// src/services/canvas-service.ts
 var GLOBAL_CANVAS_DIRECTORIES = [
   join24(homedir12(), ".claude", "plans"),
   join24(process.env.XDG_DATA_HOME ?? join24(homedir12(), ".local", "share"), "opencode", "plans"),
@@ -11949,6 +11991,7 @@ var CanvasService = class {
     this.directories = directories;
   }
   directories;
+  writeLock = new AsyncLock();
   async listItems() {
     const items = /* @__PURE__ */ new Map();
     for (const directory of await this.directories()) {
@@ -11974,7 +12017,7 @@ var CanvasService = class {
           const { kind } = classifyCanvasFilename(filename);
           let sizeBytes = 0;
           try {
-            const s = await stat3(filePath);
+            const s = await stat4(filePath);
             sizeBytes = s.size;
           } catch {
             continue;
@@ -11994,7 +12037,7 @@ var CanvasService = class {
       let sizeBytes = 0;
       let updatedAt = "";
       try {
-        const s = await stat3(filePath);
+        const s = await stat4(filePath);
         sizeBytes = s.size;
         updatedAt = s.mtime.toISOString();
       } catch {
@@ -12011,7 +12054,7 @@ var CanvasService = class {
         };
       }
       try {
-        const bytes = await readFile17(filePath);
+        const bytes = await readFile18(filePath);
         return { filename: safe, kind, sizeBytes, mimeType, updatedAt, bytes };
       } catch {
         continue;
@@ -12036,7 +12079,19 @@ var CanvasService = class {
       kind: item.kind,
       sizeBytes: item.sizeBytes,
       mimeType: item.mimeType,
-      bytes: item.bytes
+      bytes: item.bytes,
+      revision: fileRevision(item.bytes)
+    });
+  }
+  async updateItem(filename, content, expectedRevision) {
+    const safe = sanitizeCanvasFilename(filename);
+    if (!safe || !isCanvasTextKind(classifyCanvasFilename(safe).kind) || Buffer.byteLength(content) > MAX_CANVAS_PREVIEW_BYTES) return null;
+    return this.writeLock.run(async () => {
+      for (const directory of await this.directories()) {
+        const file = await resolveContainedFile(directory, safe);
+        if (file) return await writeRevisionedTextFile(file.fullPath, content, expectedRevision);
+      }
+      return null;
     });
   }
 };
@@ -12160,8 +12215,8 @@ async function reconcileCanvasItems(filenames) {
 
 // src/services/upload-chat-transcripts.ts
 import { createReadStream } from "fs";
-import { createHash as createHash3 } from "crypto";
-import { readFile as readFile18, readdir as readdir8, stat as stat4 } from "fs/promises";
+import { createHash as createHash4 } from "crypto";
+import { readFile as readFile19, readdir as readdir8, stat as stat5 } from "fs/promises";
 import { basename as basename3, join as join26 } from "path";
 
 // src/services/chat/chat-senders.ts
@@ -12218,9 +12273,9 @@ async function flushAllChatTranscripts(chatsById = /* @__PURE__ */ new Map(), ca
   return capture ? { flushed, failed, captureSupported: true, revisions } : { flushed, failed };
 }
 async function uploadChatTranscript(chatId, filePath, chat, capture) {
-  const { size } = await stat4(filePath);
+  const { size } = await stat5(filePath);
   if (size === 0) return null;
-  const historyPages = createChatTranscriptPages(await readFile18(filePath));
+  const historyPages = createChatTranscriptPages(await readFile19(filePath));
   const metadata = chat ? {
     provider: chat.provider,
     credential: ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS[chat.provider],
@@ -12231,7 +12286,7 @@ async function uploadChatTranscript(chatId, filePath, chat, capture) {
     deletedAt: chat.deletedAt ?? null
   } : {};
   if (capture) {
-    const hash = createHash3("sha256");
+    const hash = createHash4("sha256");
     for await (const chunk of createReadStream(filePath)) hash.update(chunk);
     metadata.captureId = capture.captureId;
     metadata.captureReason = capture.reason;
@@ -12239,7 +12294,7 @@ async function uploadChatTranscript(chatId, filePath, chat, capture) {
   }
   try {
     metadata.senders = parseChatMessageSendersJsonl(
-      await readFile18(chatMessageSendersFilePath(chatId), "utf-8")
+      await readFile19(chatMessageSendersFilePath(chatId), "utf-8")
     );
   } catch (error) {
     if (!(error && typeof error === "object" && "code" in error && error.code === "ENOENT")) throw error;
@@ -12288,7 +12343,7 @@ async function uploadChatTranscript(chatId, filePath, chat, capture) {
 
 // src/services/upload-engine-logs.ts
 import { createReadStream as createReadStream2 } from "fs";
-import { readdir as readdir9, stat as stat5 } from "fs/promises";
+import { readdir as readdir9, stat as stat6 } from "fs/promises";
 import { join as join27 } from "path";
 var MAX_ENGINE_LOG_FLUSH_SESSIONS = 10;
 var MAX_ENGINE_LOG_FLUSH_BYTES = 5 * 1024 * 1024;
@@ -12319,7 +12374,7 @@ async function flushAllEngineLogs() {
     try {
       const sessionId = filename.slice(0, -".log".length);
       const filePath = join27(LOG_DIR, filename);
-      const fileStat = await runBeforeDeadline(() => stat5(filePath), deadline);
+      const fileStat = await runBeforeDeadline(() => stat6(filePath), deadline);
       if (!fileStat.isFile()) {
         skipped++;
         return null;
@@ -12776,7 +12831,7 @@ var ChatService = class {
     }
   }
   async readSenders(chatId) {
-    return readFile19(chatMessageSendersFilePath(chatId), "utf-8").then(parseChatMessageSendersJsonl).catch((error) => {
+    return readFile20(chatMessageSendersFilePath(chatId), "utf-8").then(parseChatMessageSendersJsonl).catch((error) => {
       if (error && typeof error === "object" && "code" in error && error.code === "ENOENT") return [];
       console.error("[ChatService] Failed to read sender records:", error);
       return [];
@@ -13479,7 +13534,7 @@ var ChatService = class {
   }
   async loadChats() {
     try {
-      const content = await readFile19(CHATS_FILE, "utf-8");
+      const content = await readFile20(CHATS_FILE, "utf-8");
       return parsePersistedChatsContent(content);
     } catch (error) {
       if (error && typeof error === "object" && "code" in error && error.code === "ENOENT") {
@@ -13494,7 +13549,7 @@ var ChatService = class {
         console.error("[ChatService] Failed to quarantine corrupt chats file:", renameError);
       }
       try {
-        const backupContent = await readFile19(CHATS_BACKUP_FILE, "utf-8");
+        const backupContent = await readFile20(CHATS_BACKUP_FILE, "utf-8");
         return parsePersistedChatsContent(backupContent);
       } catch (backupError) {
         if (backupError && typeof backupError === "object" && "code" in backupError && backupError.code === "ENOENT") {
@@ -13584,11 +13639,10 @@ var ChatService = class {
 
 // src/services/repo-file-service.ts
 import { execFile } from "child_process";
-import { readFile as readFile20, realpath, stat as stat6 } from "fs/promises";
-import { join as join29, resolve as resolve2, extname as extname2 } from "path";
+import { readFile as readFile21 } from "fs/promises";
+import { extname as extname2 } from "path";
 var CACHE_TTL_MS = 3e4;
 var SEARCH_TIMEOUT_MS = 15e3;
-var MAX_CONTENT_BYTES = 256 * 1024;
 var DEFAULT_LIMIT = 50;
 var MAX_LIMIT = 5e3;
 var EXCLUDED_DIRS = /* @__PURE__ */ new Set([".git", "node_modules", ".next", "dist", "build", "out", "vendor", ".turbo", "__pycache__"]);
@@ -13667,6 +13721,7 @@ var RepoFileService = class {
   cache = /* @__PURE__ */ new Map();
   gitService;
   indexInflight = null;
+  writeLock = new AsyncLock();
   constructor(gitService2) {
     this.gitService = gitService2;
   }
@@ -13730,20 +13785,10 @@ var RepoFileService = class {
     };
   }
   async readFile(repoName, filePath) {
-    if (filePath.includes("..") || filePath.startsWith("/")) {
-      return null;
-    }
-    const repos = await this.gitService.listRepositories();
-    const repo = repos.find((r) => r.name === repoName);
-    if (!repo) return null;
+    const resolved = await this.resolveFile(repoName, filePath);
+    if (!resolved) return null;
+    const { fullPath, sizeBytes } = resolved;
     try {
-      const fullPath = await realpath(resolve2(join29(repo.path, filePath)));
-      const repoRoot = await realpath(repo.path);
-      const repoPrefix = repoRoot.endsWith("/") ? repoRoot : repoRoot + "/";
-      if (!fullPath.startsWith(repoPrefix) && fullPath !== repoRoot) return null;
-      const fileStat = await stat6(fullPath);
-      if (!fileStat.isFile()) return null;
-      const sizeBytes = fileStat.size;
       if (isBinaryExtension(filePath)) {
         const { kind, mimeType } = classifyCanvasFilename(filePath);
         if (kind === "image" || kind === "pdf") {
@@ -13768,7 +13813,7 @@ var RepoFileService = class {
             sizeBytes,
             binary: true,
             tooLarge: false,
-            base64: (await readFile20(fullPath)).toString("base64"),
+            base64: (await readFile21(fullPath)).toString("base64"),
             mimeType
           };
         }
@@ -13782,7 +13827,7 @@ var RepoFileService = class {
           tooLarge: false
         };
       }
-      if (sizeBytes > MAX_CONTENT_BYTES) {
+      if (sizeBytes > MAX_REPO_FILE_CONTENT_BYTES) {
         return {
           repoName,
           path: filePath,
@@ -13793,7 +13838,7 @@ var RepoFileService = class {
           tooLarge: true
         };
       }
-      const content = await readFile20(fullPath, "utf-8");
+      const content = await readFile21(fullPath, "utf-8");
       return {
         repoName,
         path: filePath,
@@ -13801,12 +13846,33 @@ var RepoFileService = class {
         language: detectLanguageByPath(filePath),
         sizeBytes,
         binary: false,
-        tooLarge: false
+        tooLarge: false,
+        revision: fileRevision(content)
       };
     } catch {
       return null;
     }
   }
+  async updateFile(repoName, filePath, content, expectedRevision) {
+    if (filePath.includes("..") || filePath.startsWith("/") || isBinaryExtension(filePath) || Buffer.byteLength(content) > MAX_REPO_FILE_CONTENT_BYTES) return null;
+    return this.writeLock.run(async () => {
+      const resolved = await this.resolveFile(repoName, filePath);
+      if (!resolved) return null;
+      try {
+        const result = await writeRevisionedTextFile(resolved.fullPath, content, expectedRevision);
+        if (result.saved) this.cache.delete(repoName);
+        return result;
+      } catch {
+        return null;
+      }
+    });
+  }
+  async resolveFile(repoName, filePath) {
+    if (filePath.includes("..") || filePath.startsWith("/")) return null;
+    const repo = (await this.gitService.listRepositories()).find((repository) => repository.name === repoName);
+    if (!repo) return null;
+    return await resolveContainedFile(repo.path, filePath);
+  }
   async indexAll(refresh) {
     const repos = await this.gitService.listRepositories();
     for (const repo of repos) {
@@ -13871,17 +13937,17 @@ var RepoFileService = class {
 // src/v1-routes.ts
 import { Hono } from "hono";
 import { z as z5 } from "zod";
-import { readdir as readdir11, stat as stat7, readFile as readFile23 } from "fs/promises";
+import { readdir as readdir11, stat as stat7, readFile as readFile24 } from "fs/promises";
 import { join as join32, resolve as resolve3 } from "path";
 
 // src/services/warm-hooks-service.ts
 import { spawn as spawn6 } from "child_process";
-import { readFile as readFile22 } from "fs/promises";
+import { readFile as readFile23 } from "fs/promises";
 import { existsSync as existsSync12 } from "fs";
 import { join as join31 } from "path";
 
 // src/services/warm-hook-logs-service.ts
-import { mkdir as mkdir19, readFile as readFile21, writeFile as writeFile9, readdir as readdir10, appendFile as appendFile5, unlink as unlink4 } from "fs/promises";
+import { mkdir as mkdir19, readFile as readFile22, writeFile as writeFile9, readdir as readdir10, appendFile as appendFile5, unlink as unlink4 } from "fs/promises";
 import { homedir as homedir13 } from "os";
 import { join as join30 } from "path";
 var LOGS_DIR2 = join30(homedir13(), ".replicas", "warm-hook-logs");
@@ -13941,7 +14007,7 @@ var WarmHookLogsService = class {
         continue;
       }
       try {
-        const raw = await readFile21(join30(LOGS_DIR2, file), "utf-8");
+        const raw = await readFile22(join30(LOGS_DIR2, file), "utf-8");
         const stored = JSON.parse(raw);
         logs.push(withPreview2(stored));
       } catch {
@@ -13970,7 +14036,7 @@ var WarmHookLogsService = class {
   }
   async getCurrentRunLog() {
     try {
-      return await readFile21(CURRENT_RUN_LOG, "utf-8");
+      return await readFile22(CURRENT_RUN_LOG, "utf-8");
     } catch (err) {
       if (err.code === "ENOENT") return null;
       throw err;
@@ -13979,7 +14045,7 @@ var WarmHookLogsService = class {
   async getFullOutput(hookType, hookName) {
     const filename = hookType === "global" ? GLOBAL_FILENAME : hookType === "environment" ? ENVIRONMENT_HOOK_LOG_FILENAME : repoHookLogFilename(hookName);
     try {
-      const raw = await readFile21(join30(LOGS_DIR2, filename), "utf-8");
+      const raw = await readFile22(join30(LOGS_DIR2, filename), "utf-8");
       const stored = JSON.parse(raw);
       if (stored.hookType !== hookType || stored.hookName !== hookName) {
         return null;
@@ -14003,7 +14069,7 @@ async function readRepoWarmHook(repoPath) {
       continue;
     }
     try {
-      const raw = await readFile22(configPath, "utf-8");
+      const raw = await readFile23(configPath, "utf-8");
       const config = parseReplicasConfigString(raw, filename);
       if (!config.warmHook) {
         return null;
@@ -14401,6 +14467,10 @@ var updateGoalSchema = z5.object({
 }).refine((body) => body.objective !== void 0 || body.status !== void 0, {
   message: "Goal objective or status required"
 });
+var updateTextFileSchema = (maxLength) => z5.object({
+  content: z5.string().max(maxLength),
+  expectedRevision: z5.string().regex(/^[a-f0-9]{64}$/)
+});
 function jsonError(message, details) {
   return { error: message, details };
 }
@@ -14782,6 +14852,17 @@ function createV1Routes(deps) {
     }
     return c.json(result);
   });
+  app2.put("/repo-files/content", async (c) => {
+    const repoName = c.req.query("repoName");
+    const path6 = c.req.query("path");
+    if (!repoName || !path6) {
+      return c.json(jsonError("repoName and path are required"), 400);
+    }
+    const body = updateTextFileSchema(MAX_REPO_FILE_CONTENT_BYTES).parse(await c.req.json());
+    const result = await deps.repoFileService.updateFile(repoName, path6, body.content, body.expectedRevision);
+    if (!result) return c.json(jsonError("File is not editable"), 400);
+    return c.json(result);
+  });
   app2.get("/terminal/sessions", (c) => {
     return c.json({ sessions: terminalService.list() });
   });
@@ -14883,6 +14964,14 @@ data: ${JSON.stringify("Terminal session not found")}
       );
     }
   });
+  app2.put("/canvas/:filename{.+}", async (c) => {
+    const filename = c.req.param("filename");
+    if (!filename) return c.json(jsonError("Filename required"), 400);
+    const body = updateTextFileSchema(MAX_CANVAS_PREVIEW_BYTES).parse(await c.req.json());
+    const result = await deps.canvasService.updateItem(filename, body.content, body.expectedRevision);
+    if (!result) return c.json(jsonError("Canvas item is not editable"), 400);
+    return c.json(result);
+  });
   app2.get("/hooks/status", (c) => {
     const response = {
       running: replicasConfigService.areHooksRunning(),
@@ -15250,7 +15339,7 @@ data: ${JSON.stringify("Terminal session not found")}
       }
       let content;
       try {
-        content = await readFile23(filePath, "utf-8");
+        content = await readFile24(filePath, "utf-8");
       } catch {
         return c.json(jsonError("Log session not found"), 404);
       }

package/dist/src/post-tool-pr-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   notifyPostToolUse
-} from "./chunk-SI3I5LZI.js";
+} from "./chunk-OF3EDBVV.js";
 import {
   isRecord
 } from "./chunk-2RB7SIP3.js";
-import "./chunk-VTONH6X5.js";
+import "./chunk-GSMOYM7N.js";
 
 // src/post-tool-pr-hook.ts
 async function main() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.711",
+  "version": "0.1.713",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",