replicas-engine 0.1.722 → 0.1.724

package/dist/src/{chunk-CVGR6N24.js → chunk-DBTSJLH6.js}

@@ -2678,6 +2678,7 @@ Use this when:
 - The user asks to create or control an E2B sandbox
 - The user asks to invoke a connected Modal function
 - The user asks to access Vercel projects, deployments, domains, logs, or infrastructure
+- The user asks to inspect Vanta controls, tests, evidence, vendors, risks, or compliance data
 - The user asks to query or update a connected turbopuffer namespace
 - The user asks for PlanetScale organizations, databases, branches, or Insights data
 - The user asks to analyze text with Pangram`;
@@ -2756,6 +2757,15 @@ const deployments = await replicas.vercel.request('/v6/deployments?teamId=team_1
 
 Confirm mutations before using POST, PUT, PATCH, or DELETE.
 
+## Vanta
+
+Vanta is a native Manage API integration. Pass a relative path beginning with /v1/; Replicas exchanges the stored client credentials and caches the short-lived token server-side:
+
+    const controls = await replicas.vanta.request('/v1/controls?pageSize=100');
+    const failingTests = await replicas.vanta.request('/v1/tests?statusMatchesAny=NEEDS_ATTENTION');
+
+Use the optional \`method\` and \`body\` arguments for writes. Confirm mutations before using POST, PUT, PATCH, or DELETE. Paginate with the cursors returned by Vanta.
+
 ## Modal
 
 Modal is a native integration and uses its official JavaScript SDK behind the Replicas gateway. Invoke a deployed function by name:
@@ -3899,6 +3909,16 @@ var EXPLICIT_PLUGIN_CATALOG = [
     category: "data",
     name: "turbopuffer",
     description: "Query and manage turbopuffer namespaces."
+  },
+  {
+    id: "vanta",
+    backend: "native",
+    toolkit: "vanta",
+    authType: "credentials",
+    category: "data",
+    name: "Vanta",
+    description: "Review and manage controls, tests, evidence, vendors, risks, and compliance data.",
+    scopes: ["environment"]
   }
 ];
 var HOSTED_COMPOSIO_PLUGIN_DEFINITIONS = [

package/dist/src/{chunk-FV5BY3GF.js → chunk-EJRQEYTD.js}

@@ -2,7 +2,7 @@
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES,
   isVersionBelow
-} from "./chunk-CVGR6N24.js";
+} from "./chunk-DBTSJLH6.js";
 
 // src/utils/presigned-upload.ts
 import { createReadStream } from "fs";
@@ -267,7 +267,7 @@ var DEFAULT_CODEX_ARGS = [
 var MIN_CODEX_CLI_VERSION = "0.144.6";
 var CODEX_UPGRADE_TIMEOUT_MS = 12e4;
 var codexCliVersionEnsured = null;
-var ENGINE_PACKAGE_VERSION = "0.1.722";
+var ENGINE_PACKAGE_VERSION = "0.1.724";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/{chunk-ZCSOQR4G.js → chunk-IUOMR5VE.js}

@@ -12,7 +12,7 @@ import {
   isValidAgentProvider,
   parsePosixEnvFile,
   readReplicasRuntimeEnv
-} from "./chunk-CVGR6N24.js";
+} from "./chunk-DBTSJLH6.js";
 
 // src/engine-env.ts
 import { readFileSync as readFileSync2 } from "fs";

package/dist/src/{chunk-2C23KJ6W.js → chunk-PK45DCS5.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   mayCreatePullRequest
-} from "./chunk-CVGR6N24.js";
+} from "./chunk-DBTSJLH6.js";
 
 // src/services/post-tool-pr-notifier.ts
 async function notifyPostToolUse(toolName, toolInput) {

package/dist/src/command-protection-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   evaluateCommandProtection
-} from "./chunk-ZCSOQR4G.js";
+} from "./chunk-IUOMR5VE.js";
 import {
   isRecord
 } from "./chunk-2RB7SIP3.js";
-import "./chunk-CVGR6N24.js";
+import "./chunk-DBTSJLH6.js";
 
 // src/command-protection-hook.ts
 var provider = process.argv[2];

package/dist/src/deepseek-command-protection-plugin.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   evaluateCommandProtection
-} from "./chunk-ZCSOQR4G.js";
+} from "./chunk-IUOMR5VE.js";
 import {
   notifyPostToolUse
-} from "./chunk-2C23KJ6W.js";
+} from "./chunk-PK45DCS5.js";
 import "./chunk-2RB7SIP3.js";
-import "./chunk-CVGR6N24.js";
+import "./chunk-DBTSJLH6.js";
 
 // src/deepseek-command-protection-plugin.ts
 function replicasCommandProtection(context) {

package/dist/src/headless-agent.js

@@ -4,12 +4,12 @@ import {
   buildCodexAgentEnv,
   putPresignedFile,
   recoverCompletedTurn
-} from "./chunk-FV5BY3GF.js";
+} from "./chunk-EJRQEYTD.js";
 import {
   AGENT,
   getMemoryOutputSafetyViolation,
   headlessAgentRequestSchema
-} from "./chunk-CVGR6N24.js";
+} from "./chunk-DBTSJLH6.js";
 
 // src/headless-agent.ts
 import { createHash } from "crypto";

package/dist/src/index.js

@@ -8,7 +8,7 @@ import {
   monolithService,
   reportCommandProtectionBlock,
   setAgentCredentialSnapshot
-} from "./chunk-ZCSOQR4G.js";
+} from "./chunk-IUOMR5VE.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -35,7 +35,7 @@ import {
   execFileAsync,
   putPresignedFile,
   recoverCompletedTurn
-} from "./chunk-FV5BY3GF.js";
+} from "./chunk-EJRQEYTD.js";
 import {
   isRecord as isRecord2
 } from "./chunk-2RB7SIP3.js";
@@ -216,7 +216,7 @@ import {
   shellQuotePosix,
   stripAgentDiagnosticErrors,
   withTimeout
-} from "./chunk-CVGR6N24.js";
+} from "./chunk-DBTSJLH6.js";
 
 // src/index.ts
 import { serve } from "@hono/node-server";

package/dist/src/post-tool-pr-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   notifyPostToolUse
-} from "./chunk-2C23KJ6W.js";
+} from "./chunk-PK45DCS5.js";
 import {
   isRecord
 } from "./chunk-2RB7SIP3.js";
-import "./chunk-CVGR6N24.js";
+import "./chunk-DBTSJLH6.js";
 
 // src/post-tool-pr-hook.ts
 async function main() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.722",
+  "version": "0.1.724",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",

package/workspace-sdk/index.js

@@ -118,6 +118,8 @@ const planetscale = providerClient('/v1/engine/planetscale/api');
 
 const vercel = providerClient('/v1/engine/vercel/api');
 
+const vanta = providerClient('/v1/engine/vanta/api');
+
 const pangramRequest = (operation, input) =>
   request('/v1/engine/pangram', { method: 'POST', body: { operation, ...input } });
 const pangram = {
@@ -134,5 +136,5 @@ const e2b = {
   kill: (sandboxId) => request('/v1/engine/e2b', { method: 'POST', body: { operation: 'kill', sandboxId } }),
 };
 
-export const replicas = { integrations, plugins, linear, slack, github, gitlab, sentry, modal, pangram, planetscale, vercel, turbopuffer, e2b };
+export const replicas = { integrations, plugins, linear, slack, github, gitlab, sentry, modal, pangram, planetscale, vercel, vanta, turbopuffer, e2b };
 export default replicas;

package/workspace-sdk/index.test.ts

@@ -184,6 +184,37 @@ describe('@replicas/sdk', () => {
     }
   });
 
+  test('reads and writes Vanta through the workspace gateway', async () => {
+    let observed: { path: string; body: unknown } | null = null;
+    const server = Bun.serve({
+      port: 0,
+      async fetch(request) {
+        observed = { path: new URL(request.url).pathname, body: await request.json() };
+        return Response.json({ results: { data: [] } });
+      },
+    });
+    process.env.REPLICAS_MONOLITH_URL = server.url.toString().replace(/\/$/, '');
+    process.env.REPLICAS_ENGINE_SECRET = 'engine-secret';
+    process.env.REPLICAS_WORKSPACE_ID = 'workspace-1';
+    try {
+      await replicas.vanta.request('/v1/controls?pageSize=100');
+      expect(observed).toEqual({
+        path: '/v1/engine/vanta/api',
+        body: { path: '/v1/controls?pageSize=100' },
+      });
+      await replicas.vanta.request('/v1/vendors/vendor-1', {
+        method: 'PATCH',
+        body: { status: 'ARCHIVED' },
+      });
+      expect(observed).toEqual({
+        path: '/v1/engine/vanta/api',
+        body: { path: '/v1/vendors/vendor-1', method: 'PATCH', body: { status: 'ARCHIVED' } },
+      });
+    } finally {
+      server.stop(true);
+    }
+  });
+
   test('runs E2B commands through the workspace gateway', async () => {
     let observed: { path: string; body: unknown } | null = null;
     const server = Bun.serve({

package/workspace-sdk/shared/routes/plugin-catalog.d.ts

@@ -165,5 +165,14 @@ export declare const PLUGIN_CATALOG: readonly [{
     readonly category: "data";
     readonly name: "turbopuffer";
     readonly description: "Query and manage turbopuffer namespaces.";
+}, {
+    readonly id: "vanta";
+    readonly backend: "native";
+    readonly toolkit: "vanta";
+    readonly authType: "credentials";
+    readonly category: "data";
+    readonly name: "Vanta";
+    readonly description: "Review and manage controls, tests, evidence, vendors, risks, and compliance data.";
+    readonly scopes: readonly ["environment"];
 }, ...HostedComposioPlugin[]];
 export {};

package/workspace-sdk/shared/routes/plugins.d.ts

@@ -25,6 +25,7 @@ export interface PluginCatalogItem {
     category: PluginCategory;
     name: string;
     description: string;
+    scopes?: readonly PluginScope[];
 }
 export interface PluginConnectionSummary {
     id: string;
@@ -63,13 +64,20 @@ export interface PluginConnectModalRequest {
     tokenId: string;
     tokenSecret: string;
 }
+export declare const VANTA_DEPLOYMENTS: readonly ["standard", "gov"];
+export type VantaDeployment = (typeof VANTA_DEPLOYMENTS)[number];
+export interface PluginConnectVantaRequest {
+    clientId: string;
+    clientSecret: string;
+    deployment: VantaDeployment;
+}
 export declare const TURBOPUFFER_REGIONS: readonly ["aws-us-east-1", "aws-us-west-2", "gcp-us-central1", "gcp-europe-west3"];
 export type TurbopufferRegion = (typeof TURBOPUFFER_REGIONS)[number];
 export interface PluginConnectTurbopufferRequest {
     apiKey: string;
     region: TurbopufferRegion;
 }
-export type PluginConnectRequest = PluginConnectPostHogRequest | PluginConnectClickHouseRequest | PluginConnectApiKeyRequest | PluginConnectModalRequest | PluginConnectTurbopufferRequest;
+export type PluginConnectRequest = PluginConnectPostHogRequest | PluginConnectClickHouseRequest | PluginConnectApiKeyRequest | PluginConnectModalRequest | PluginConnectVantaRequest | PluginConnectTurbopufferRequest;
 export interface ModalCallRequest {
     app: string;
     function: string;

package/workspace-sdk/shared/workspace-sdk.d.ts

@@ -63,6 +63,9 @@ export interface ReplicasSdk {
     vercel: {
         request<T = unknown>(path: string, options?: ProviderRequestOptions): Promise<T>;
     };
+    vanta: {
+        request<T = unknown>(path: `/v1/${string}`, options?: ProviderRequestOptions): Promise<T>;
+    };
     pangram: {
         detect<T = unknown>(input: import('./routes/plugins').PangramAnalyzeRequest): Promise<T>;
         plagiarism<T = unknown>(text: string): Promise<T>;