replicas-engine 0.1.716 → 0.1.717

package/dist/src/{chunk-LQ7KHFS5.js → chunk-7ZCPXUQ3.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   mayCreatePullRequest
-} from "./chunk-UF32U5Z4.js";
+} from "./chunk-AIO4PUU7.js";
 
 // src/services/post-tool-pr-notifier.ts
 async function notifyPostToolUse(toolName, toolInput) {

package/dist/src/{chunk-UF32U5Z4.js → chunk-AIO4PUU7.js}

@@ -3452,6 +3452,17 @@ function isTransientErrorText(text, options = {}) {
   return false;
 }
 
+// ../shared/src/auth-errors.ts
+var AUTHENTICATION_ERROR_PATTERNS = [
+  /unauthorized/,
+  /authentication error/,
+  /invalid api key/
+];
+function isAuthenticationErrorText(text, extraPatterns = []) {
+  const normalized = text.toLowerCase();
+  return AUTHENTICATION_ERROR_PATTERNS.some((pattern) => pattern.test(normalized)) || extraPatterns.some((pattern) => pattern.test(normalized));
+}
+
 // ../shared/src/claude-auth.ts
 function isClaudeAuthErrorText(text) {
   const lower = text.toLowerCase();
@@ -3462,7 +3473,7 @@ function isClaudeAuthErrorText(text) {
 function isCodexAuthError(error) {
   const msg = error instanceof Error ? error.message : String(error);
   const lower = msg.toLowerCase();
-  return lower.includes("unauthorized") || lower.includes("authentication") || lower.includes("invalid api key") || lower.includes("incorrect api key") || lower.includes("api key") && lower.includes("invalid") || lower.includes("401") || lower.includes('codexerrorinfo="unauthorized"') || lower.includes("codexerrorinfo=unauthorized") || lower.includes("failed to refresh token") || lower.includes("your session has ended");
+  return isAuthenticationErrorText(msg) || lower.includes("authentication") || lower.includes("incorrect api key") || lower.includes("api key") && lower.includes("invalid") || lower.includes("401") || lower.includes('codexerrorinfo="unauthorized"') || lower.includes("codexerrorinfo=unauthorized") || lower.includes("failed to refresh token") || lower.includes("your session has ended");
 }
 
 // ../shared/src/version.ts
@@ -6734,6 +6745,7 @@ export {
   headlessAgentRequestSchema,
   extractErrorText,
   isTransientErrorText,
+  isAuthenticationErrorText,
   isClaudeAuthErrorText,
   isCodexAuthError,
   isVersionBelow,

package/dist/src/{chunk-6KPIG34S.js → chunk-R2MUWRL5.js}

@@ -2,7 +2,7 @@
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES,
   isVersionBelow
-} from "./chunk-UF32U5Z4.js";
+} from "./chunk-AIO4PUU7.js";
 
 // src/utils/presigned-upload.ts
 import { createReadStream } from "fs";
@@ -267,7 +267,7 @@ var DEFAULT_CODEX_ARGS = [
 var MIN_CODEX_CLI_VERSION = "0.144.6";
 var CODEX_UPGRADE_TIMEOUT_MS = 12e4;
 var codexCliVersionEnsured = null;
-var ENGINE_PACKAGE_VERSION = "0.1.716";
+var ENGINE_PACKAGE_VERSION = "0.1.717";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/{chunk-TQQYZEKY.js → chunk-Z4EWBCBT.js}

@@ -12,7 +12,7 @@ import {
   isValidAgentProvider,
   parsePosixEnvFile,
   readReplicasRuntimeEnv
-} from "./chunk-UF32U5Z4.js";
+} from "./chunk-AIO4PUU7.js";
 
 // src/engine-env.ts
 import { readFileSync as readFileSync2 } from "fs";

package/dist/src/command-protection-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   evaluateCommandProtection
-} from "./chunk-TQQYZEKY.js";
+} from "./chunk-Z4EWBCBT.js";
 import {
   isRecord
 } from "./chunk-2RB7SIP3.js";
-import "./chunk-UF32U5Z4.js";
+import "./chunk-AIO4PUU7.js";
 
 // src/command-protection-hook.ts
 var provider = process.argv[2];

package/dist/src/deepseek-command-protection-plugin.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   evaluateCommandProtection
-} from "./chunk-TQQYZEKY.js";
+} from "./chunk-Z4EWBCBT.js";
 import {
   notifyPostToolUse
-} from "./chunk-LQ7KHFS5.js";
+} from "./chunk-7ZCPXUQ3.js";
 import "./chunk-2RB7SIP3.js";
-import "./chunk-UF32U5Z4.js";
+import "./chunk-AIO4PUU7.js";
 
 // src/deepseek-command-protection-plugin.ts
 function replicasCommandProtection(context) {

package/dist/src/headless-agent.js

@@ -4,12 +4,12 @@ import {
   buildCodexAgentEnv,
   putPresignedFile,
   recoverCompletedTurn
-} from "./chunk-6KPIG34S.js";
+} from "./chunk-R2MUWRL5.js";
 import {
   AGENT,
   getMemoryOutputSafetyViolation,
   headlessAgentRequestSchema
-} from "./chunk-UF32U5Z4.js";
+} from "./chunk-AIO4PUU7.js";
 
 // src/headless-agent.ts
 import { createHash } from "crypto";

package/dist/src/index.js

@@ -8,7 +8,7 @@ import {
   monolithService,
   reportCommandProtectionBlock,
   setAgentCredentialSnapshot
-} from "./chunk-TQQYZEKY.js";
+} from "./chunk-Z4EWBCBT.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -35,7 +35,7 @@ import {
   execFileAsync,
   putPresignedFile,
   recoverCompletedTurn
-} from "./chunk-6KPIG34S.js";
+} from "./chunk-R2MUWRL5.js";
 import {
   isRecord as isRecord2
 } from "./chunk-2RB7SIP3.js";
@@ -166,6 +166,7 @@ import {
   isAgentChatMcpActivityRecord,
   isAgentChatSkillActivityRecord,
   isAgentChatTurnActivityRecord,
+  isAuthenticationErrorText,
   isCanvasTextKind,
   isChatMessageSender,
   isClaudeAuthErrorText,
@@ -213,7 +214,7 @@ import {
   shellQuotePosix,
   stripAgentDiagnosticErrors,
   withTimeout
-} from "./chunk-UF32U5Z4.js";
+} from "./chunk-AIO4PUU7.js";
 
 // src/index.ts
 import { serve } from "@hono/node-server";
@@ -8020,6 +8021,9 @@ var CURSOR_TRANSPORT_ERROR_PATTERNS = [
 function isCursorTransportError(text) {
   return isTransientErrorText(text, { extraPatterns: CURSOR_TRANSPORT_ERROR_PATTERNS });
 }
+function isCursorAuthenticationError(text) {
+  return isAuthenticationErrorText(text, [/error_not_logged_in/]);
+}
 function finiteNumber(value) {
   return typeof value === "number" && Number.isFinite(value) ? value : 0;
 }
@@ -8287,7 +8291,15 @@ var CursorManager = class extends CodingAgentManager {
         detail: failure.text,
         transport: failure.transport
       });
-      const displayMessage = failure.transport ? sawCursorActivity ? "Cursor couldn't reconnect after its automatic retries. Retry the message to continue from the same chat." : run ? "Cursor couldn't connect after its automatic retries. Retry the message or start a new Cursor chat if the problem continues." : "The connection to Cursor failed. Retry the message or start a new Cursor chat if the problem continues." : failure.text;
+      const credentialScope = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.cursor?.scope;
+      const credentialLabel = credentialScope === "user" ? "personal API key or account" : credentialScope === "org" ? "organization API key or account" : "configured API key or account";
+      const authenticationMessage = isCursorAuthenticationError(failure.text) ? [
+        `Cursor rejected the ${credentialLabel} for this request.`,
+        "Logging out and back in does not replace the Cursor API key stored in Replicas.",
+        "Update it in Settings \u2192 Coding Agents before starting a new workspace.",
+        failure.requestId ? `If a fresh key still fails, contact Cursor support with request ID ${failure.requestId}.` : ""
+      ].filter(Boolean).join(" ") : null;
+      const displayMessage = failure.transport ? sawCursorActivity ? "Cursor couldn't reconnect after its automatic retries. Retry the message to continue from the same chat." : run ? "Cursor couldn't connect after its automatic retries. Retry the message or start a new Cursor chat if the problem continues." : "The connection to Cursor failed. Retry the message or start a new Cursor chat if the problem continues." : authenticationMessage ?? failure.text;
       if (failure.transport) {
         this.activeRun = null;
         this.closeAgent();

package/dist/src/post-tool-pr-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   notifyPostToolUse
-} from "./chunk-LQ7KHFS5.js";
+} from "./chunk-7ZCPXUQ3.js";
 import {
   isRecord
 } from "./chunk-2RB7SIP3.js";
-import "./chunk-UF32U5Z4.js";
+import "./chunk-AIO4PUU7.js";
 
 // src/post-tool-pr-hook.ts
 async function main() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.716",
+  "version": "0.1.717",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",