replicas-engine 0.1.756 → 0.1.758

package/dist/src/{asp-host-RF22WMSU.js → asp-host-WE57RJ6E.js}

@@ -5,11 +5,11 @@ import {
   getCodexAspHost,
   restartCodexAspHost,
   restartCodexAspHostIfRunning
-} from "./chunk-QJJE6MBM.js";
-import "./chunk-D7K5M3NA.js";
-import "./chunk-KO62WDEE.js";
+} from "./chunk-EQEWL6FF.js";
+import "./chunk-WTNFZX53.js";
+import "./chunk-IHGPS5IS.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-CRFPCWWZ.js";
+import "./chunk-24FE3TDH.js";
 import "./chunk-VEQXQN22.js";
 export {
   getCodexAspHost,

package/dist/src/{chunk-CRFPCWWZ.js → chunk-24FE3TDH.js}

@@ -465,6 +465,7 @@ var CREDENTIAL_SCOPE_PRIORITY = [CREDENTIAL_SCOPE.USER, CREDENTIAL_SCOPE.ORG];
 var CREDENTIAL_METHOD = {
   OAUTH: "oauth",
   API_KEY: "api_key",
+  OPENAI_COMPATIBLE: "openai-compatible",
   FOUNDRY: "foundry",
   BEDROCK: "bedrock",
   OPENCODE_GO: "opencode-go",
@@ -480,6 +481,7 @@ var CREDENTIAL_TYPE = {
   CLAUDE_BEDROCK: "claude_bedrock",
   CODEX_OAUTH: "codex",
   OPENAI_API_KEY: "openai_api_key",
+  OPENAI_COMPATIBLE: "openai_compatible",
   CODEX_FOUNDRY: "codex_foundry",
   CURSOR_API_KEY: "cursor_api_key",
   OPENCODE_GO_API_KEY: "opencode_go_api_key",
@@ -503,6 +505,7 @@ var AGENT_CREDENTIAL_METHODS_IN_ORDER = {
   [AGENT.CODEX]: [
     { method: CREDENTIAL_METHOD.OAUTH, credentialType: CREDENTIAL_TYPE.CODEX_OAUTH },
     { method: CREDENTIAL_METHOD.API_KEY, credentialType: CREDENTIAL_TYPE.OPENAI_API_KEY },
+    { method: CREDENTIAL_METHOD.OPENAI_COMPATIBLE, credentialType: CREDENTIAL_TYPE.OPENAI_COMPATIBLE },
     { method: CREDENTIAL_METHOD.FOUNDRY, credentialType: CREDENTIAL_TYPE.CODEX_FOUNDRY }
   ],
   [AGENT.CURSOR]: [
@@ -539,6 +542,8 @@ function getCredentialMethodLabel(agent, method) {
       if (agent === AGENT.CODEX) return "OpenAI API key";
       if (agent === AGENT.CURSOR) return "Cursor API key";
       return "Anthropic API key";
+    case CREDENTIAL_METHOD.OPENAI_COMPATIBLE:
+      return "OpenAI-compatible endpoint";
     case CREDENTIAL_METHOD.FOUNDRY:
       return "Microsoft Foundry";
     case CREDENTIAL_METHOD.BEDROCK:
@@ -1692,6 +1697,53 @@ var LEGACY_WEB_APP_PATHS = {
   app: "/app",
   dashboardWorkspaces: `${DASHBOARD_PATH}/workspaces`
 };
+var PR_URL_REGEX = /github\.com\/([^/]+)\/([^/]+)\/pull\/(\d+)/;
+function parsePrUrl(url) {
+  const match = url.match(PR_URL_REGEX);
+  if (!match) return null;
+  const [, owner, repo, numberStr] = match;
+  const number = Number.parseInt(numberStr, 10);
+  if (!Number.isFinite(number)) return null;
+  return { owner, repo, number };
+}
+function parseCodeHostPrUrl(url) {
+  const github = parsePrUrl(url);
+  if (github) {
+    return {
+      ...github,
+      provider: "github",
+      host: "github.com",
+      repositoryPath: `${github.owner}/${github.repo}`,
+      repoUrl: `https://github.com/${github.owner}/${github.repo}`
+    };
+  }
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    return null;
+  }
+  if (parsed.protocol !== "https:" && parsed.protocol !== "http:") return null;
+  const segments = parsed.pathname.split("/").filter(Boolean);
+  const separatorIndex = segments.indexOf("-");
+  if (separatorIndex <= 0 || segments[separatorIndex + 1] !== "merge_requests") return null;
+  const number = Number.parseInt(segments[separatorIndex + 2] ?? "", 10);
+  if (!Number.isFinite(number)) return null;
+  const repositorySegments = decodePathSegments(segments.slice(0, separatorIndex));
+  const repo = repositorySegments[repositorySegments.length - 1];
+  const owner = repositorySegments[0];
+  if (!owner || !repo) return null;
+  const repositoryPath = repositorySegments.join("/");
+  return {
+    provider: "gitlab",
+    host: parsed.host.toLowerCase(),
+    owner,
+    repo,
+    number,
+    repositoryPath,
+    repoUrl: `${parsed.origin}/${repositoryPath}`
+  };
+}
 function decodePathSegments(segments) {
   return segments.map((segment) => {
     try {
@@ -6421,17 +6473,28 @@ var CODEX_AUTH_ENV_KEYS = [
   "CODEX_FOUNDRY_MODEL",
   "REPLICAS_CODEX_AUTH_METHOD"
 ];
+function codexOpenAICompatibleAuthEnv(response) {
+  return {
+    ...response.apiKey && !response.authorizationHeader ? { OPENAI_API_KEY: response.apiKey } : {},
+    ...response.baseUrl ? { CODEX_OPENAI_BASE_URL: response.baseUrl } : {},
+    ...response.authorizationHeader ? { CODEX_OPENAI_AUTHORIZATION_HEADER: response.authorizationHeader } : {},
+    REPLICAS_CODEX_AUTH_METHOD: "openai-compatible"
+  };
+}
 function codexAuthEnvFromResponse(response) {
   switch (response.type) {
     case "oauth":
       return { REPLICAS_CODEX_AUTH_METHOD: "oauth" };
     case "api_key":
+      if (response.baseUrl) {
+        return codexOpenAICompatibleAuthEnv(response);
+      }
       return {
-        ...response.apiKey && !response.authorizationHeader ? { OPENAI_API_KEY: response.apiKey } : {},
-        ...response.baseUrl ? { CODEX_OPENAI_BASE_URL: response.baseUrl } : {},
-        ...response.authorizationHeader ? { CODEX_OPENAI_AUTHORIZATION_HEADER: response.authorizationHeader } : {},
+        ...response.apiKey ? { OPENAI_API_KEY: response.apiKey } : {},
         REPLICAS_CODEX_AUTH_METHOD: "api_key"
       };
+    case "openai-compatible":
+      return codexOpenAICompatibleAuthEnv(response);
     case "foundry":
       return {
         AZURE_OPENAI_API_KEY: response.apiKey,
@@ -6445,6 +6508,10 @@ var CODEX_AUTH_ENV_KEYS_BY_METHOD = {
   none: [],
   oauth: ["REPLICAS_CODEX_AUTH_METHOD"],
   api_key: [
+    "OPENAI_API_KEY",
+    "REPLICAS_CODEX_AUTH_METHOD"
+  ],
+  "openai-compatible": [
     "OPENAI_API_KEY",
     "CODEX_OPENAI_BASE_URL",
     "CODEX_OPENAI_AUTHORIZATION_HEADER",
@@ -6501,6 +6568,7 @@ var CLAUDE_AUTH_ENV_KEYS_BY_METHOD = {
   none: [],
   oauth: ["REPLICAS_CLAUDE_AUTH_METHOD"],
   api_key: ["ANTHROPIC_API_KEY", "REPLICAS_CLAUDE_AUTH_METHOD"],
+  "openai-compatible": [],
   bedrock: [
     "CLAUDE_CODE_USE_BEDROCK",
     "AWS_ACCESS_KEY_ID",
@@ -6549,6 +6617,10 @@ function stringifyCommandProtectionInput(value) {
     return String(value);
   }
 }
+function findCodeHostPullRequestUrls(value) {
+  const candidates = stringifyCommandProtectionInput(value).match(/https?:\/\/[^\s<>"'\\]+/g) ?? [];
+  return [...new Set(candidates.map((url) => url.replace(/[),.;\]}]+$/, "")).filter((url) => parseCodeHostPrUrl(url) !== null))];
+}
 function normalizeCommandProtectionText(text) {
   return text.replace(/\\\n/g, " ").replace(/\s+/g, " ").trim().toLowerCase();
 }
@@ -7494,6 +7566,7 @@ export {
   CLAUDE_AUTH_ENV_KEYS_BY_METHOD,
   AI_GATEWAY_BASE_URL,
   fetchAiGatewayModels,
+  findCodeHostPullRequestUrls,
   extractCommandProtectionCommandText,
   findPrMergeSignals,
   findGitCommitSignals,

package/dist/src/{chunk-AGAAN5SZ.js → chunk-2N4HGHFZ.js}

@@ -3,12 +3,12 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   monolithRequest
-} from "./chunk-D7K5M3NA.js";
+} from "./chunk-WTNFZX53.js";
 import {
   extractCommandProtectionCommandText,
   findGitCommitSignals,
   findPrMergeSignals
-} from "./chunk-CRFPCWWZ.js";
+} from "./chunk-24FE3TDH.js";
 
 // src/services/command-protection-service.ts
 var DEFAULT_COMMAND_PROTECTION_BLOCK_MESSAGE = "Blocked by Replicas command protection.";

package/dist/src/{chunk-QJJE6MBM.js → chunk-EQEWL6FF.js}

@@ -5,18 +5,18 @@ import {
   ENGINE_ENV,
   monolithRequest,
   setAgentCredentialSnapshot
-} from "./chunk-D7K5M3NA.js";
+} from "./chunk-WTNFZX53.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-KO62WDEE.js";
+} from "./chunk-IHGPS5IS.js";
 import {
   CODEX_AUTH_ENV_KEYS,
   CODEX_AUTH_ENV_KEYS_BY_METHOD,
   codexAuthEnvFromResponse,
   createErrorResult,
   createSuccessResult
-} from "./chunk-CRFPCWWZ.js";
+} from "./chunk-24FE3TDH.js";
 
 // src/managers/codex-token-manager.ts
 import { promises as fs } from "fs";
@@ -223,7 +223,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     const previousEnv = CODEX_AUTH_ENV_KEYS.map((key) => process.env[key]);
     console.log("[CodexTokenManager] Refreshing Codex credentials...");
     const response = await monolithRequest("/v1/engine/codex/refresh-credentials", {
-      body: request
+      body: { supportsOpenAICompatibleAuth: true, ...request }
     });
     if (!response.ok) {
       const errorText = await response.text();
@@ -232,7 +232,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     const data = await response.json();
     await this.applyCredentialsResponse(data);
     if (restartOnChange && CODEX_AUTH_ENV_KEYS.some((key, index) => process.env[key] !== previousEnv[index])) {
-      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-RF22WMSU.js");
+      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-WE57RJ6E.js");
       await restartCodexAspHostIfRunning2();
     }
     if (data.scope) {
@@ -293,14 +293,14 @@ var CodexTokenManager = class extends BaseRefreshManager {
     }
   }
   async fetchFreshCredentials(failureReason, failureKind = "rejected", failedCredential = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.codex, allowedMethods) {
-    const failedMethod = failedCredential?.method === "oauth" || failedCredential?.method === "api_key" || failedCredential?.method === "foundry" ? failedCredential.method : ENGINE_ENV.REPLICAS_CODEX_AUTH_METHOD;
+    const failedMethod = failedCredential?.method === "oauth" || failedCredential?.method === "api_key" || failedCredential?.method === "openai-compatible" || failedCredential?.method === "foundry" ? failedCredential.method : ENGINE_ENV.REPLICAS_CODEX_AUTH_METHOD;
     return this.swapCredentials({
       provider: "codex",
       failureKind,
       allowedMethods,
       refresh: async (exclusions) => {
         await this.refreshWithRequest(
-          failedMethod === "oauth" || failedMethod === "api_key" || failedMethod === "foundry" ? {
+          failedMethod === "oauth" || failedMethod === "api_key" || failedMethod === "openai-compatible" || failedMethod === "foundry" ? {
             failedMethod,
             ...failedCredential?.method === failedMethod ? { failedCredential } : {},
             failureReason,

package/dist/src/{chunk-KERIK6MD.js → chunk-FTXE5FES.js}

@@ -2,18 +2,20 @@
 import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
+  findCodeHostPullRequestUrls,
   mayCreatePullRequest
-} from "./chunk-CRFPCWWZ.js";
+} from "./chunk-24FE3TDH.js";
 
 // src/services/post-tool-pr-notifier.ts
-async function notifyPostToolUse(toolName, toolInput) {
+async function notifyPostToolUse(toolName, toolInput, toolResult) {
   if (!mayCreatePullRequest(toolName, toolInput)) return false;
   const port = process.env.REPLICAS_ENGINE_PORT;
   const secret = process.env.REPLICAS_ENGINE_SECRET;
   if (!port || !secret) throw new Error("Replicas engine connection is unavailable.");
   const response = await fetch(`http://127.0.0.1:${port}/pull-requests/check`, {
     method: "POST",
-    headers: { "X-Replicas-Engine-Secret": secret },
+    headers: { "X-Replicas-Engine-Secret": secret, "Content-Type": "application/json" },
+    body: JSON.stringify({ prUrls: findCodeHostPullRequestUrls(toolResult) }),
     signal: AbortSignal.timeout(3e4)
   });
   if (!response.ok) throw new Error(`Replicas pull request check failed (${response.status}).`);

package/dist/src/{chunk-KO62WDEE.js → chunk-IHGPS5IS.js}

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES,
   isVersionBelow
-} from "./chunk-CRFPCWWZ.js";
+} from "./chunk-24FE3TDH.js";
 
 // src/utils/codex-agent-env.ts
 function buildCodexAgentEnv(source = process.env) {
@@ -241,7 +241,7 @@ var DEFAULT_CODEX_ARGS = [
 var MIN_CODEX_CLI_VERSION = "0.153.3";
 var CODEX_UPGRADE_TIMEOUT_MS = 12e4;
 var codexCliVersionEnsured = null;
-var ENGINE_PACKAGE_VERSION = "0.1.756";
+var ENGINE_PACKAGE_VERSION = "0.1.758";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";
@@ -276,7 +276,7 @@ var AppServerProcess = class {
         "-c",
         'model_providers.azure.wire_api="responses"'
       ];
-    } else if (!options.args && options.env.REPLICAS_CODEX_AUTH_METHOD === "api_key" && options.env.CODEX_OPENAI_BASE_URL) {
+    } else if (!options.args && options.env.REPLICAS_CODEX_AUTH_METHOD === "openai-compatible") {
       baseArgs = [
         ...DEFAULT_CODEX_ARGS,
         "-c",

package/dist/src/{chunk-D7K5M3NA.js → chunk-WTNFZX53.js}

@@ -15,7 +15,7 @@ import {
   isValidRelayBaseProvider,
   parsePosixEnvFile,
   readReplicasRuntimeEnv
-} from "./chunk-CRFPCWWZ.js";
+} from "./chunk-24FE3TDH.js";
 
 // src/engine-env.ts
 import { readFileSync as readFileSync2 } from "fs";
@@ -84,7 +84,7 @@ function parseClaudeAuthMethod(value) {
   return void 0;
 }
 function parseCodexAuthMethod(value) {
-  if (value === "oauth" || value === "api_key" || value === "foundry") {
+  if (value === "oauth" || value === "api_key" || value === "openai-compatible" || value === "foundry") {
     return value;
   }
   return void 0;

package/dist/src/command-protection-hook.js

@@ -3,12 +3,12 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-AGAAN5SZ.js";
-import "./chunk-D7K5M3NA.js";
+} from "./chunk-2N4HGHFZ.js";
+import "./chunk-WTNFZX53.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-CRFPCWWZ.js";
+import "./chunk-24FE3TDH.js";
 import "./chunk-VEQXQN22.js";
 
 // src/command-protection-hook.ts

package/dist/src/deepseek-command-protection-plugin.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-AGAAN5SZ.js";
+} from "./chunk-2N4HGHFZ.js";
 import {
   notifyPostToolUse
-} from "./chunk-KERIK6MD.js";
-import "./chunk-D7K5M3NA.js";
+} from "./chunk-FTXE5FES.js";
+import "./chunk-WTNFZX53.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-CRFPCWWZ.js";
+import "./chunk-24FE3TDH.js";
 import "./chunk-VEQXQN22.js";
 
 // src/deepseek-command-protection-plugin.ts
@@ -25,8 +25,8 @@ function replicasCommandProtection(context) {
     });
     return result.allowed ? next() : { kind: "deny", reason: result.reason ?? "Blocked by Replicas command protection." };
   });
-  context.on("tools/post-execute", async (execution, _result, next) => {
-    await notifyPostToolUse(execution.name, execution.arguments).catch(() => {
+  context.on("tools/post-execute", async (execution, result, next) => {
+    await notifyPostToolUse(execution.name, execution.arguments, result).catch(() => {
     });
     return next();
   });

package/dist/src/headless-agent.js

@@ -8,12 +8,12 @@ import {
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-KO62WDEE.js";
+} from "./chunk-IHGPS5IS.js";
 import {
   AGENT,
   getMemoryOutputSafetyViolation,
   headlessAgentRequestSchema
-} from "./chunk-CRFPCWWZ.js";
+} from "./chunk-24FE3TDH.js";
 import "./chunk-VEQXQN22.js";
 
 // src/headless-agent.ts

package/dist/src/index.js

@@ -91,7 +91,7 @@ import {
   evaluateCommandProtection,
   extractToolCommand,
   reportCommandProtectionBlock
-} from "./chunk-AGAAN5SZ.js";
+} from "./chunk-2N4HGHFZ.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -124,20 +124,20 @@ import {
   recordCredentialFallback,
   recordExhaustedCredential,
   restartCodexAspHost
-} from "./chunk-QJJE6MBM.js";
+} from "./chunk-EQEWL6FF.js";
 import {
   ENGINE_ENV,
   IS_WARMING_MODE,
   monolithRequest,
   monolithService,
   setAgentCredentialSnapshot
-} from "./chunk-D7K5M3NA.js";
+} from "./chunk-WTNFZX53.js";
 import {
   AspClient,
   SUBPROCESS_MAX_BUFFER,
   execAsync,
   execFileAsync
-} from "./chunk-KO62WDEE.js";
+} from "./chunk-IHGPS5IS.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -252,6 +252,7 @@ import {
   extractToolResultText,
   fetchAiGatewayModels,
   fetchModelsDevCatalog,
+  findCodeHostPullRequestUrls,
   forkChatRequestSchema,
   formatChatForkHandoffMessage,
   getChatExecutionProvider,
@@ -330,7 +331,7 @@ import {
   spawnRelaySubagentRequestSchema,
   stripAgentDiagnosticErrors,
   withTimeout
-} from "./chunk-CRFPCWWZ.js";
+} from "./chunk-24FE3TDH.js";
 import {
   __commonJS,
   __export,
@@ -9421,12 +9422,13 @@ var ClaudeTokenManager = class extends BaseRefreshManager {
     console.log(`[ClaudeTokenManager] Credentials refreshed (method=${data.type})`);
   }
   async fetchFreshCredentials(failureReason, failureKind = "rejected", failedCredential = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.claude, allowedMethods) {
-    const failedMethod = failedCredential?.method === "oauth" || failedCredential?.method === "api_key" || failedCredential?.method === "bedrock" || failedCredential?.method === "foundry" ? failedCredential.method : ENGINE_ENV.REPLICAS_CLAUDE_AUTH_METHOD;
+    const configuredMethod = ENGINE_ENV.REPLICAS_CLAUDE_AUTH_METHOD;
+    const failedMethod = failedCredential?.method === "oauth" || failedCredential?.method === "api_key" || failedCredential?.method === "bedrock" || failedCredential?.method === "foundry" ? failedCredential.method : configuredMethod === "oauth" || configuredMethod === "api_key" || configuredMethod === "bedrock" || configuredMethod === "foundry" ? configuredMethod : void 0;
     return this.swapCredentials({
       provider: "claude",
       failureKind,
       allowedMethods,
-      refresh: (exclusions) => this.refreshWithRequest(failedMethod && failedMethod !== "none" ? {
+      refresh: (exclusions) => this.refreshWithRequest(failedMethod ? {
         failedMethod,
         ...failedCredential?.method === failedMethod ? { failedCredential } : {},
         failureReason,
@@ -12094,15 +12096,15 @@ var PullRequestCheckService = class {
   // Plain single-flight would hand a caller a result gathered before its PR
   // existed, so callers arriving mid-run instead share one trailing run that
   // starts after the current one settles.
-  check() {
+  check(prUrls = []) {
+    const registration = prUrls.length > 0 ? monolithService.sendEvent({ type: "pull_request_check", payload: { repoStatuses: [], prUrls } }) : Promise.resolve();
     const running = this.running;
-    if (!running) return this.start();
-    this.trailing ??= running.catch(() => {
+    const refresh = !running ? this.start() : this.trailing ??= running.catch(() => {
     }).then(() => {
       this.trailing = null;
       return this.start();
     });
-    return this.trailing;
+    return registration.then(() => refresh);
   }
   start() {
     const run = withTimeout(this.refresh(), CHECK_TIMEOUT_MS, "Pull request check timed out").finally(() => {
@@ -13352,7 +13354,7 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
             matcher: "*",
             hooks: [async (input) => {
               if (input.hook_event_name === "PostToolUse" && mayCreatePullRequest(input.tool_name, input.tool_input)) {
-                pullRequestCheckService.check().catch(() => {
+                pullRequestCheckService.check(findCodeHostPullRequestUrls(input)).catch(() => {
                 });
               }
               return {};
@@ -15298,7 +15300,7 @@ var CodexAspManager = class extends CodingAgentManager {
         linearForwarder.sendEvent(convertCodexAspNotification(notification, linearSessionId ?? ""));
         const completedItem = notification.params.item;
         if (completedItem.type === "commandExecution" && completedItem.exitCode === 0 && mayCreatePullRequest("commandExecution", { command: completedItem.command }) || completedItem.type === "mcpToolCall" && completedItem.status === "completed" && mayCreatePullRequest(completedItem.tool, completedItem.arguments) || completedItem.type === "dynamicToolCall" && completedItem.success !== false && mayCreatePullRequest(completedItem.tool, completedItem.arguments)) {
-          pullRequestCheckService.check().catch(() => {
+          pullRequestCheckService.check(findCodeHostPullRequestUrls(completedItem)).catch(() => {
           });
         }
       },
@@ -59256,7 +59258,7 @@ function registerCommandProtection(cwd, historyFile, recordHistoryEvent) {
     });
     pi.on("tool_result", (event) => {
       if (!event.isError && mayCreatePullRequest(event.toolName, event.input)) {
-        pullRequestCheckService.check().catch(() => {
+        pullRequestCheckService.check(findCodeHostPullRequestUrls(event)).catch(() => {
         });
       }
     });
@@ -63443,8 +63445,10 @@ function jsonError(message, details) {
 }
 function createV1Routes(deps) {
   const app2 = new Hono();
-  app2.post("/pull-requests/check", (c) => {
-    pullRequestCheckService.check().catch(() => {
+  app2.post("/pull-requests/check", async (c) => {
+    const body = await c.req.json().catch(() => null);
+    const prUrls = isRecord2(body) && Array.isArray(body.prUrls) ? body.prUrls.filter((url3) => typeof url3 === "string") : [];
+    pullRequestCheckService.check(prUrls).catch(() => {
     });
     return c.json({ accepted: true }, 202);
   });

package/dist/src/post-tool-pr-hook.js

@@ -3,11 +3,11 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   notifyPostToolUse
-} from "./chunk-KERIK6MD.js";
+} from "./chunk-FTXE5FES.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-CRFPCWWZ.js";
+import "./chunk-24FE3TDH.js";
 import "./chunk-VEQXQN22.js";
 
 // src/post-tool-pr-hook.ts
@@ -19,7 +19,8 @@ async function main() {
     const record = isRecord(input) ? input : {};
     const toolName = [record.tool_name, record.tool, record.name].find((value) => typeof value === "string") ?? "";
     const toolInput = record.tool_input ?? record.arguments ?? record.args ?? ("command" in record ? { command: record.command } : record);
-    await notifyPostToolUse(toolName, toolInput);
+    const toolResult = record.tool_response ?? record.tool_result ?? record.tool_output ?? record.toolOutput ?? record.output ?? record.result;
+    await notifyPostToolUse(toolName, toolInput, toolResult);
   } catch (error) {
     process.stderr.write(`${error instanceof Error ? error.message : String(error)}
 `);

package/dist/src/relay-mcp.js

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   messageRelaySubagentRequestSchema,
   spawnRelaySubagentRequestSchema
-} from "./chunk-CRFPCWWZ.js";
+} from "./chunk-24FE3TDH.js";
 import "./chunk-VEQXQN22.js";
 
 // src/relay-mcp.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.756",
+  "version": "0.1.758",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",

package/scripts/opencode-command-protection-plugin.ts

@@ -14,6 +14,10 @@ interface ToolExecuteBeforeOutput {
   args: unknown;
 }
 
+interface ToolExecuteAfterOutput {
+  output: string;
+}
+
 const toolInputs = new Map<string, unknown>();
 
 function evaluate(tool: string, args: unknown, callId: string, cwd: string): Promise<PolicyResult> {
@@ -69,7 +73,7 @@ export const ReplicasCommandProtection = async ({ directory }: { directory: stri
     if (!result.allowed) throw new Error(result.reason ?? 'Blocked by Replicas command protection.');
     toolInputs.set(input.callID, output.args);
   },
-  'tool.execute.after': async (input: ToolExecuteBeforeInput) => {
+  'tool.execute.after': async (input: ToolExecuteBeforeInput, output: ToolExecuteAfterOutput) => {
     const args = toolInputs.get(input.callID);
     toolInputs.delete(input.callID);
     const hookPath = process.env.REPLICAS_POST_TOOL_PR_HOOK_PATH;
@@ -82,7 +86,7 @@ export const ReplicasCommandProtection = async ({ directory }: { directory: stri
       const child = spawn(runtimePath, hookArgs, { cwd: directory, stdio: ['pipe', 'ignore', 'ignore'] });
       child.on('error', () => resolve());
       child.on('exit', () => resolve());
-      child.stdin.end(JSON.stringify({ tool: input.tool, args }));
+      child.stdin.end(JSON.stringify({ tool: input.tool, args, output: output.output }));
     });
   },
 });