replicas-engine 0.1.757 → 0.1.758

package/dist/src/{asp-host-2UNVLNRC.js → asp-host-WE57RJ6E.js}

@@ -5,11 +5,11 @@ import {
   getCodexAspHost,
   restartCodexAspHost,
   restartCodexAspHostIfRunning
-} from "./chunk-QCFJKMNS.js";
-import "./chunk-ONBZ7L3S.js";
-import "./chunk-A2656WZ4.js";
+} from "./chunk-EQEWL6FF.js";
+import "./chunk-WTNFZX53.js";
+import "./chunk-IHGPS5IS.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-VAXA2XOP.js";
+import "./chunk-24FE3TDH.js";
 import "./chunk-VEQXQN22.js";
 export {
   getCodexAspHost,

package/dist/src/{chunk-VAXA2XOP.js → chunk-24FE3TDH.js}

@@ -465,6 +465,7 @@ var CREDENTIAL_SCOPE_PRIORITY = [CREDENTIAL_SCOPE.USER, CREDENTIAL_SCOPE.ORG];
 var CREDENTIAL_METHOD = {
   OAUTH: "oauth",
   API_KEY: "api_key",
+  OPENAI_COMPATIBLE: "openai-compatible",
   FOUNDRY: "foundry",
   BEDROCK: "bedrock",
   OPENCODE_GO: "opencode-go",
@@ -480,6 +481,7 @@ var CREDENTIAL_TYPE = {
   CLAUDE_BEDROCK: "claude_bedrock",
   CODEX_OAUTH: "codex",
   OPENAI_API_KEY: "openai_api_key",
+  OPENAI_COMPATIBLE: "openai_compatible",
   CODEX_FOUNDRY: "codex_foundry",
   CURSOR_API_KEY: "cursor_api_key",
   OPENCODE_GO_API_KEY: "opencode_go_api_key",
@@ -503,6 +505,7 @@ var AGENT_CREDENTIAL_METHODS_IN_ORDER = {
   [AGENT.CODEX]: [
     { method: CREDENTIAL_METHOD.OAUTH, credentialType: CREDENTIAL_TYPE.CODEX_OAUTH },
     { method: CREDENTIAL_METHOD.API_KEY, credentialType: CREDENTIAL_TYPE.OPENAI_API_KEY },
+    { method: CREDENTIAL_METHOD.OPENAI_COMPATIBLE, credentialType: CREDENTIAL_TYPE.OPENAI_COMPATIBLE },
     { method: CREDENTIAL_METHOD.FOUNDRY, credentialType: CREDENTIAL_TYPE.CODEX_FOUNDRY }
   ],
   [AGENT.CURSOR]: [
@@ -539,6 +542,8 @@ function getCredentialMethodLabel(agent, method) {
       if (agent === AGENT.CODEX) return "OpenAI API key";
       if (agent === AGENT.CURSOR) return "Cursor API key";
       return "Anthropic API key";
+    case CREDENTIAL_METHOD.OPENAI_COMPATIBLE:
+      return "OpenAI-compatible endpoint";
     case CREDENTIAL_METHOD.FOUNDRY:
       return "Microsoft Foundry";
     case CREDENTIAL_METHOD.BEDROCK:
@@ -6468,17 +6473,28 @@ var CODEX_AUTH_ENV_KEYS = [
   "CODEX_FOUNDRY_MODEL",
   "REPLICAS_CODEX_AUTH_METHOD"
 ];
+function codexOpenAICompatibleAuthEnv(response) {
+  return {
+    ...response.apiKey && !response.authorizationHeader ? { OPENAI_API_KEY: response.apiKey } : {},
+    ...response.baseUrl ? { CODEX_OPENAI_BASE_URL: response.baseUrl } : {},
+    ...response.authorizationHeader ? { CODEX_OPENAI_AUTHORIZATION_HEADER: response.authorizationHeader } : {},
+    REPLICAS_CODEX_AUTH_METHOD: "openai-compatible"
+  };
+}
 function codexAuthEnvFromResponse(response) {
   switch (response.type) {
     case "oauth":
       return { REPLICAS_CODEX_AUTH_METHOD: "oauth" };
     case "api_key":
+      if (response.baseUrl) {
+        return codexOpenAICompatibleAuthEnv(response);
+      }
       return {
-        ...response.apiKey && !response.authorizationHeader ? { OPENAI_API_KEY: response.apiKey } : {},
-        ...response.baseUrl ? { CODEX_OPENAI_BASE_URL: response.baseUrl } : {},
-        ...response.authorizationHeader ? { CODEX_OPENAI_AUTHORIZATION_HEADER: response.authorizationHeader } : {},
+        ...response.apiKey ? { OPENAI_API_KEY: response.apiKey } : {},
         REPLICAS_CODEX_AUTH_METHOD: "api_key"
       };
+    case "openai-compatible":
+      return codexOpenAICompatibleAuthEnv(response);
     case "foundry":
       return {
         AZURE_OPENAI_API_KEY: response.apiKey,
@@ -6492,6 +6508,10 @@ var CODEX_AUTH_ENV_KEYS_BY_METHOD = {
   none: [],
   oauth: ["REPLICAS_CODEX_AUTH_METHOD"],
   api_key: [
+    "OPENAI_API_KEY",
+    "REPLICAS_CODEX_AUTH_METHOD"
+  ],
+  "openai-compatible": [
     "OPENAI_API_KEY",
     "CODEX_OPENAI_BASE_URL",
     "CODEX_OPENAI_AUTHORIZATION_HEADER",
@@ -6548,6 +6568,7 @@ var CLAUDE_AUTH_ENV_KEYS_BY_METHOD = {
   none: [],
   oauth: ["REPLICAS_CLAUDE_AUTH_METHOD"],
   api_key: ["ANTHROPIC_API_KEY", "REPLICAS_CLAUDE_AUTH_METHOD"],
+  "openai-compatible": [],
   bedrock: [
     "CLAUDE_CODE_USE_BEDROCK",
     "AWS_ACCESS_KEY_ID",

package/dist/src/{chunk-ZZYDVS4Z.js → chunk-2N4HGHFZ.js}

@@ -3,12 +3,12 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   monolithRequest
-} from "./chunk-ONBZ7L3S.js";
+} from "./chunk-WTNFZX53.js";
 import {
   extractCommandProtectionCommandText,
   findGitCommitSignals,
   findPrMergeSignals
-} from "./chunk-VAXA2XOP.js";
+} from "./chunk-24FE3TDH.js";
 
 // src/services/command-protection-service.ts
 var DEFAULT_COMMAND_PROTECTION_BLOCK_MESSAGE = "Blocked by Replicas command protection.";

package/dist/src/{chunk-QCFJKMNS.js → chunk-EQEWL6FF.js}

@@ -5,18 +5,18 @@ import {
   ENGINE_ENV,
   monolithRequest,
   setAgentCredentialSnapshot
-} from "./chunk-ONBZ7L3S.js";
+} from "./chunk-WTNFZX53.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-A2656WZ4.js";
+} from "./chunk-IHGPS5IS.js";
 import {
   CODEX_AUTH_ENV_KEYS,
   CODEX_AUTH_ENV_KEYS_BY_METHOD,
   codexAuthEnvFromResponse,
   createErrorResult,
   createSuccessResult
-} from "./chunk-VAXA2XOP.js";
+} from "./chunk-24FE3TDH.js";
 
 // src/managers/codex-token-manager.ts
 import { promises as fs } from "fs";
@@ -223,7 +223,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     const previousEnv = CODEX_AUTH_ENV_KEYS.map((key) => process.env[key]);
     console.log("[CodexTokenManager] Refreshing Codex credentials...");
     const response = await monolithRequest("/v1/engine/codex/refresh-credentials", {
-      body: request
+      body: { supportsOpenAICompatibleAuth: true, ...request }
     });
     if (!response.ok) {
       const errorText = await response.text();
@@ -232,7 +232,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     const data = await response.json();
     await this.applyCredentialsResponse(data);
     if (restartOnChange && CODEX_AUTH_ENV_KEYS.some((key, index) => process.env[key] !== previousEnv[index])) {
-      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-2UNVLNRC.js");
+      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-WE57RJ6E.js");
       await restartCodexAspHostIfRunning2();
     }
     if (data.scope) {
@@ -293,14 +293,14 @@ var CodexTokenManager = class extends BaseRefreshManager {
     }
   }
   async fetchFreshCredentials(failureReason, failureKind = "rejected", failedCredential = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.codex, allowedMethods) {
-    const failedMethod = failedCredential?.method === "oauth" || failedCredential?.method === "api_key" || failedCredential?.method === "foundry" ? failedCredential.method : ENGINE_ENV.REPLICAS_CODEX_AUTH_METHOD;
+    const failedMethod = failedCredential?.method === "oauth" || failedCredential?.method === "api_key" || failedCredential?.method === "openai-compatible" || failedCredential?.method === "foundry" ? failedCredential.method : ENGINE_ENV.REPLICAS_CODEX_AUTH_METHOD;
     return this.swapCredentials({
       provider: "codex",
       failureKind,
       allowedMethods,
       refresh: async (exclusions) => {
         await this.refreshWithRequest(
-          failedMethod === "oauth" || failedMethod === "api_key" || failedMethod === "foundry" ? {
+          failedMethod === "oauth" || failedMethod === "api_key" || failedMethod === "openai-compatible" || failedMethod === "foundry" ? {
             failedMethod,
             ...failedCredential?.method === failedMethod ? { failedCredential } : {},
             failureReason,

package/dist/src/{chunk-63OSLNBW.js → chunk-FTXE5FES.js}

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   findCodeHostPullRequestUrls,
   mayCreatePullRequest
-} from "./chunk-VAXA2XOP.js";
+} from "./chunk-24FE3TDH.js";
 
 // src/services/post-tool-pr-notifier.ts
 async function notifyPostToolUse(toolName, toolInput, toolResult) {

package/dist/src/{chunk-A2656WZ4.js → chunk-IHGPS5IS.js}

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES,
   isVersionBelow
-} from "./chunk-VAXA2XOP.js";
+} from "./chunk-24FE3TDH.js";
 
 // src/utils/codex-agent-env.ts
 function buildCodexAgentEnv(source = process.env) {
@@ -241,7 +241,7 @@ var DEFAULT_CODEX_ARGS = [
 var MIN_CODEX_CLI_VERSION = "0.153.3";
 var CODEX_UPGRADE_TIMEOUT_MS = 12e4;
 var codexCliVersionEnsured = null;
-var ENGINE_PACKAGE_VERSION = "0.1.757";
+var ENGINE_PACKAGE_VERSION = "0.1.758";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";
@@ -276,7 +276,7 @@ var AppServerProcess = class {
         "-c",
         'model_providers.azure.wire_api="responses"'
       ];
-    } else if (!options.args && options.env.REPLICAS_CODEX_AUTH_METHOD === "api_key" && options.env.CODEX_OPENAI_BASE_URL) {
+    } else if (!options.args && options.env.REPLICAS_CODEX_AUTH_METHOD === "openai-compatible") {
       baseArgs = [
         ...DEFAULT_CODEX_ARGS,
         "-c",

package/dist/src/{chunk-ONBZ7L3S.js → chunk-WTNFZX53.js}

@@ -15,7 +15,7 @@ import {
   isValidRelayBaseProvider,
   parsePosixEnvFile,
   readReplicasRuntimeEnv
-} from "./chunk-VAXA2XOP.js";
+} from "./chunk-24FE3TDH.js";
 
 // src/engine-env.ts
 import { readFileSync as readFileSync2 } from "fs";
@@ -84,7 +84,7 @@ function parseClaudeAuthMethod(value) {
   return void 0;
 }
 function parseCodexAuthMethod(value) {
-  if (value === "oauth" || value === "api_key" || value === "foundry") {
+  if (value === "oauth" || value === "api_key" || value === "openai-compatible" || value === "foundry") {
     return value;
   }
   return void 0;

package/dist/src/command-protection-hook.js

@@ -3,12 +3,12 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-ZZYDVS4Z.js";
-import "./chunk-ONBZ7L3S.js";
+} from "./chunk-2N4HGHFZ.js";
+import "./chunk-WTNFZX53.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-VAXA2XOP.js";
+import "./chunk-24FE3TDH.js";
 import "./chunk-VEQXQN22.js";
 
 // src/command-protection-hook.ts

package/dist/src/deepseek-command-protection-plugin.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-ZZYDVS4Z.js";
+} from "./chunk-2N4HGHFZ.js";
 import {
   notifyPostToolUse
-} from "./chunk-63OSLNBW.js";
-import "./chunk-ONBZ7L3S.js";
+} from "./chunk-FTXE5FES.js";
+import "./chunk-WTNFZX53.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-VAXA2XOP.js";
+import "./chunk-24FE3TDH.js";
 import "./chunk-VEQXQN22.js";
 
 // src/deepseek-command-protection-plugin.ts

package/dist/src/headless-agent.js

@@ -8,12 +8,12 @@ import {
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-A2656WZ4.js";
+} from "./chunk-IHGPS5IS.js";
 import {
   AGENT,
   getMemoryOutputSafetyViolation,
   headlessAgentRequestSchema
-} from "./chunk-VAXA2XOP.js";
+} from "./chunk-24FE3TDH.js";
 import "./chunk-VEQXQN22.js";
 
 // src/headless-agent.ts

package/dist/src/index.js

@@ -91,7 +91,7 @@ import {
   evaluateCommandProtection,
   extractToolCommand,
   reportCommandProtectionBlock
-} from "./chunk-ZZYDVS4Z.js";
+} from "./chunk-2N4HGHFZ.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -124,20 +124,20 @@ import {
   recordCredentialFallback,
   recordExhaustedCredential,
   restartCodexAspHost
-} from "./chunk-QCFJKMNS.js";
+} from "./chunk-EQEWL6FF.js";
 import {
   ENGINE_ENV,
   IS_WARMING_MODE,
   monolithRequest,
   monolithService,
   setAgentCredentialSnapshot
-} from "./chunk-ONBZ7L3S.js";
+} from "./chunk-WTNFZX53.js";
 import {
   AspClient,
   SUBPROCESS_MAX_BUFFER,
   execAsync,
   execFileAsync
-} from "./chunk-A2656WZ4.js";
+} from "./chunk-IHGPS5IS.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -331,7 +331,7 @@ import {
   spawnRelaySubagentRequestSchema,
   stripAgentDiagnosticErrors,
   withTimeout
-} from "./chunk-VAXA2XOP.js";
+} from "./chunk-24FE3TDH.js";
 import {
   __commonJS,
   __export,
@@ -9422,12 +9422,13 @@ var ClaudeTokenManager = class extends BaseRefreshManager {
     console.log(`[ClaudeTokenManager] Credentials refreshed (method=${data.type})`);
   }
   async fetchFreshCredentials(failureReason, failureKind = "rejected", failedCredential = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.claude, allowedMethods) {
-    const failedMethod = failedCredential?.method === "oauth" || failedCredential?.method === "api_key" || failedCredential?.method === "bedrock" || failedCredential?.method === "foundry" ? failedCredential.method : ENGINE_ENV.REPLICAS_CLAUDE_AUTH_METHOD;
+    const configuredMethod = ENGINE_ENV.REPLICAS_CLAUDE_AUTH_METHOD;
+    const failedMethod = failedCredential?.method === "oauth" || failedCredential?.method === "api_key" || failedCredential?.method === "bedrock" || failedCredential?.method === "foundry" ? failedCredential.method : configuredMethod === "oauth" || configuredMethod === "api_key" || configuredMethod === "bedrock" || configuredMethod === "foundry" ? configuredMethod : void 0;
     return this.swapCredentials({
       provider: "claude",
       failureKind,
       allowedMethods,
-      refresh: (exclusions) => this.refreshWithRequest(failedMethod && failedMethod !== "none" ? {
+      refresh: (exclusions) => this.refreshWithRequest(failedMethod ? {
         failedMethod,
         ...failedCredential?.method === failedMethod ? { failedCredential } : {},
         failureReason,

package/dist/src/post-tool-pr-hook.js

@@ -3,11 +3,11 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   notifyPostToolUse
-} from "./chunk-63OSLNBW.js";
+} from "./chunk-FTXE5FES.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-VAXA2XOP.js";
+import "./chunk-24FE3TDH.js";
 import "./chunk-VEQXQN22.js";
 
 // src/post-tool-pr-hook.ts

package/dist/src/relay-mcp.js

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   messageRelaySubagentRequestSchema,
   spawnRelaySubagentRequestSchema
-} from "./chunk-VAXA2XOP.js";
+} from "./chunk-24FE3TDH.js";
 import "./chunk-VEQXQN22.js";
 
 // src/relay-mcp.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.757",
+  "version": "0.1.758",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",