replicas-engine 0.1.764 → 0.1.765

package/dist/src/{asp-host-GYPV5SL7.js → asp-host-X3XQGPRO.js}

@@ -5,11 +5,11 @@ import {
   getCodexAspHost,
   restartCodexAspHost,
   restartCodexAspHostIfRunning
-} from "./chunk-ZXO6LQFR.js";
-import "./chunk-WOFZOLYF.js";
-import "./chunk-SQWL6FMP.js";
+} from "./chunk-4OLXBASZ.js";
+import "./chunk-WFWT2YFN.js";
+import "./chunk-SQX57KJM.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-UMU4HGV6.js";
+import "./chunk-UQETFAOK.js";
 import "./chunk-VEQXQN22.js";
 export {
   getCodexAspHost,

package/dist/src/{chunk-ZXO6LQFR.js → chunk-4OLXBASZ.js}

@@ -5,18 +5,18 @@ import {
   ENGINE_ENV,
   monolithRequest,
   setAgentCredentialSnapshot
-} from "./chunk-WOFZOLYF.js";
+} from "./chunk-WFWT2YFN.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-SQWL6FMP.js";
+} from "./chunk-SQX57KJM.js";
 import {
   CODEX_AUTH_ENV_KEYS,
   CODEX_AUTH_ENV_KEYS_BY_METHOD,
   codexAuthEnvFromResponse,
   createErrorResult,
   createSuccessResult
-} from "./chunk-UMU4HGV6.js";
+} from "./chunk-UQETFAOK.js";
 
 // src/managers/codex-token-manager.ts
 import { promises as fs } from "fs";
@@ -232,7 +232,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     const data = await response.json();
     await this.applyCredentialsResponse(data);
     if (restartOnChange && CODEX_AUTH_ENV_KEYS.some((key, index) => process.env[key] !== previousEnv[index])) {
-      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-GYPV5SL7.js");
+      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-X3XQGPRO.js");
       await restartCodexAspHostIfRunning2();
     }
     if (data.scope) {

package/dist/src/{chunk-N3ACGL4O.js → chunk-CWSZPPD6.js}

@@ -3,12 +3,12 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   monolithRequest
-} from "./chunk-WOFZOLYF.js";
+} from "./chunk-WFWT2YFN.js";
 import {
   extractCommandProtectionCommandText,
   findGitCommitSignals,
   findPrMergeSignals
-} from "./chunk-UMU4HGV6.js";
+} from "./chunk-UQETFAOK.js";
 
 // src/services/command-protection-service.ts
 var DEFAULT_COMMAND_PROTECTION_BLOCK_MESSAGE = "Blocked by Replicas command protection.";

package/dist/src/{chunk-RCRX7ATX.js → chunk-L2BNNGQB.js}

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   findCodeHostPullRequestUrls,
   mayCreatePullRequest
-} from "./chunk-UMU4HGV6.js";
+} from "./chunk-UQETFAOK.js";
 
 // src/services/post-tool-pr-notifier.ts
 async function notifyPostToolUse(toolName, toolInput, toolResult) {

package/dist/src/{chunk-SQWL6FMP.js → chunk-SQX57KJM.js}

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES,
   isVersionBelow
-} from "./chunk-UMU4HGV6.js";
+} from "./chunk-UQETFAOK.js";
 
 // src/utils/codex-agent-env.ts
 function buildCodexAgentEnv(source = process.env) {
@@ -241,7 +241,7 @@ var DEFAULT_CODEX_ARGS = [
 var MIN_CODEX_CLI_VERSION = "0.153.3";
 var CODEX_UPGRADE_TIMEOUT_MS = 12e4;
 var codexCliVersionEnsured = null;
-var ENGINE_PACKAGE_VERSION = "0.1.764";
+var ENGINE_PACKAGE_VERSION = "0.1.765";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/{chunk-UMU4HGV6.js → chunk-UQETFAOK.js}

@@ -1537,7 +1537,8 @@ function upsertDisplayMessage(messages, message) {
 }
 function applyToolInputEvent(event, messages, provider, state, questionFilter) {
   if (event.type === "replicas-tool-input-request" && typeof event.payload.toolUseId === "string" && typeof event.payload.requestId === "string" && (Array.isArray(event.payload.options) || Array.isArray(event.payload.questions))) {
-    const resolved = state.resolutions.get(event.payload.toolUseId);
+    const previous = state.resolutions.get(event.payload.toolUseId);
+    const resolved = previous && (!previous.requestId || previous.requestId === event.payload.requestId) ? previous : void 0;
     const inputRequest = {
       requestId: event.payload.requestId,
       status: resolved?.selectionId === "aborted" || resolved?.selectionId === "declined" ? "aborted" : resolved ? "resolved" : "pending",
@@ -1553,12 +1554,13 @@ function applyToolInputEvent(event, messages, provider, state, questionFilter) {
   }
   if (event.type === "replicas-tool-input-resolved" && typeof event.payload.toolUseId === "string" && typeof event.payload.selectionId === "string") {
     const resolved = {
+      ...typeof event.payload.requestId === "string" ? { requestId: event.payload.requestId } : {},
       selectionId: event.payload.selectionId,
       ...typeof event.payload.selectionSummary === "string" ? { selectionSummary: event.payload.selectionSummary } : {}
     };
     state.resolutions.set(event.payload.toolUseId, resolved);
     const inputRequest = state.requests.get(event.payload.toolUseId);
-    if (inputRequest) {
+    if (inputRequest && (!resolved.requestId || resolved.requestId === inputRequest.requestId)) {
       inputRequest.status = resolved.selectionId === "aborted" || resolved.selectionId === "declined" ? "aborted" : "resolved";
       inputRequest.selectionId = resolved.selectionId;
       if (resolved.selectionSummary) inputRequest.selectionSummary = resolved.selectionSummary;
@@ -1607,6 +1609,7 @@ function skillNameFromToolCall(tool, input) {
   return parseSkillFilePath(input);
 }
 function createCallDisplayMessage(message) {
+  if (message.inputRequest) return { ...message, type: "tool_call" };
   const skillName = message.server.toLowerCase() === "skills" ? message.tool : skillNameFromToolCall(message.tool, message.input);
   if (skillName === null) return { ...message, type: "tool_call" };
   return {
@@ -4516,12 +4519,12 @@ function parseMuseEvents(events) {
         id: `muse-tool-${item.itemId}`,
         server: "muse",
         tool: typeof item.tool === "string" ? item.tool : "tool",
+        inputRequest: inputState.requests.get(item.itemId),
         input: isRecord(input) ? input : typeof input === "string" ? input : void 0,
         output: typeof item.visibleOutput === "string" ? item.visibleOutput : item.failureReason === void 0 ? void 0 : stringifyDisplayValue(item.failureReason),
         status: item.status === "failed" || item.status === "rejected" ? "failed" : terminal ? "completed" : "in_progress",
         timestamp: typeof item.recordedAt === "string" ? item.recordedAt : event.timestamp
       });
-      if (message.type === "tool_call") message.inputRequest = inputState.requests.get(item.itemId);
       upsertDisplayMessage(messages, message);
     }
   }

package/dist/src/{chunk-WOFZOLYF.js → chunk-WFWT2YFN.js}

@@ -15,7 +15,7 @@ import {
   isValidRelayBaseProvider,
   parsePosixEnvFile,
   readReplicasRuntimeEnv
-} from "./chunk-UMU4HGV6.js";
+} from "./chunk-UQETFAOK.js";
 
 // src/engine-env.ts
 import { readFileSync as readFileSync2 } from "fs";

package/dist/src/command-protection-hook.js

@@ -3,12 +3,12 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-N3ACGL4O.js";
-import "./chunk-WOFZOLYF.js";
+} from "./chunk-CWSZPPD6.js";
+import "./chunk-WFWT2YFN.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-UMU4HGV6.js";
+import "./chunk-UQETFAOK.js";
 import "./chunk-VEQXQN22.js";
 
 // src/command-protection-hook.ts

package/dist/src/deepseek-command-protection-plugin.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-N3ACGL4O.js";
+} from "./chunk-CWSZPPD6.js";
 import {
   notifyPostToolUse
-} from "./chunk-RCRX7ATX.js";
-import "./chunk-WOFZOLYF.js";
+} from "./chunk-L2BNNGQB.js";
+import "./chunk-WFWT2YFN.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-UMU4HGV6.js";
+import "./chunk-UQETFAOK.js";
 import "./chunk-VEQXQN22.js";
 
 // src/deepseek-command-protection-plugin.ts

package/dist/src/headless-agent.js

@@ -8,12 +8,12 @@ import {
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-SQWL6FMP.js";
+} from "./chunk-SQX57KJM.js";
 import {
   AGENT,
   getMemoryOutputSafetyViolation,
   headlessAgentRequestSchema
-} from "./chunk-UMU4HGV6.js";
+} from "./chunk-UQETFAOK.js";
 import "./chunk-VEQXQN22.js";
 
 // src/headless-agent.ts

package/dist/src/index.js

@@ -91,7 +91,7 @@ import {
   evaluateCommandProtection,
   extractToolCommand,
   reportCommandProtectionBlock
-} from "./chunk-N3ACGL4O.js";
+} from "./chunk-CWSZPPD6.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -124,20 +124,20 @@ import {
   recordCredentialFallback,
   recordExhaustedCredential,
   restartCodexAspHost
-} from "./chunk-ZXO6LQFR.js";
+} from "./chunk-4OLXBASZ.js";
 import {
   ENGINE_ENV,
   IS_WARMING_MODE,
   monolithRequest,
   monolithService,
   setAgentCredentialSnapshot
-} from "./chunk-WOFZOLYF.js";
+} from "./chunk-WFWT2YFN.js";
 import {
   AspClient,
   SUBPROCESS_MAX_BUFFER,
   execAsync,
   execFileAsync
-} from "./chunk-SQWL6FMP.js";
+} from "./chunk-SQX57KJM.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -333,7 +333,7 @@ import {
   spawnRelaySubagentRequestSchema,
   stripAgentDiagnosticErrors,
   withTimeout
-} from "./chunk-UMU4HGV6.js";
+} from "./chunk-UQETFAOK.js";
 import {
   __commonJS,
   __export,
@@ -17638,6 +17638,8 @@ var MuseManager = class extends CodingAgentManager {
   turnError = null;
   compactionComplete = null;
   pendingInput = null;
+  pendingApprovals = /* @__PURE__ */ new Map();
+  resolvedApprovals = /* @__PURE__ */ new Set();
   slashCommands = null;
   constructor(options) {
     super({ ...options, provider: "muse" });
@@ -17663,6 +17665,15 @@ var MuseManager = class extends CodingAgentManager {
     const client2 = new AspClient({ stdin: child.stdin, stdout: child.stdout, jsonRpcVersion: "2.0" });
     this.client = client2;
     client2.on("notification", (notification) => this.handleNotification(notification));
+    client2.on("serverRequest", (request) => {
+      const frame = request;
+      if (isRecord(frame) && frame.method === "approval/request") {
+        this.handleNotification({ method: "approval/requested", params: frame.params });
+        client2.respond(request.id, {});
+      } else {
+        client2.reject(request.id, -32601, "Unsupported Muse request");
+      }
+    });
     child.stderr.on("data", (chunk) => console.error("[muse MSP]", chunk.toString().trimEnd()));
     child.on("error", (error) => this.handleProcessExit(child, error));
     child.on("exit", (code, signal) => this.handleProcessExit(
@@ -17681,6 +17692,7 @@ var MuseManager = class extends CodingAgentManager {
       } catch {
         this.sessionId = null;
       }
+      if (this.sessionId) await this.refreshPendingApprovals();
     }
     if (!this.sessionId) {
       const result = await this.request("session/start", {
@@ -17703,12 +17715,92 @@ var MuseManager = class extends CodingAgentManager {
   notify(method, params) {
     this.client?.notify(method, params);
   }
+  async refreshPendingApprovals() {
+    if (!this.sessionId) return;
+    const previous = new Map(this.pendingApprovals);
+    const result = await this.request("approval/listPending", { sessionId: this.sessionId }).catch(() => null);
+    if (!isRecord(result) || !Array.isArray(result.approvals)) return;
+    for (const [approvalId, pending] of previous) {
+      if (this.pendingApprovals.get(approvalId) === pending && !result.approvals.some((approval) => isRecord(approval) && approval.approvalId === approvalId)) {
+        this.resolveApproval(approvalId, "resolved");
+      }
+    }
+    for (const approval of result.approvals) {
+      this.handleNotification({ method: "approval/requested", params: approval });
+    }
+  }
+  resolveApproval(approvalId, selectionId, terminal = true) {
+    const pending = this.pendingApprovals.get(approvalId);
+    if (terminal) this.resolvedApprovals.add(approvalId);
+    if (!pending) return;
+    this.pendingApprovals.delete(approvalId);
+    const choice = pending.availableChoices.find((choice2) => choice2.choiceId === selectionId);
+    this.recordHistoryEvent("replicas-tool-input-resolved", {
+      requestId: pending.requestId,
+      toolUseId: pending.itemId,
+      toolName: pending.toolName,
+      selectionId: choice ? JSON.stringify({ approval: { options: [choice.choiceId] } }) : selectionId,
+      selectionSummary: choice?.label,
+      parent_tool_use_id: null
+    }, this.historyFile);
+  }
+  handleApproval(params) {
+    if (!this.sessionId || params.sessionId !== this.sessionId || typeof params.approvalId !== "string" || this.resolvedApprovals.has(params.approvalId)) return;
+    const previous = this.pendingApprovals.get(params.approvalId);
+    const value = { ...previous, ...params };
+    const requirement = value.currentRequirementId;
+    if (!isRecord(requirement) || requirement.approvalId !== params.approvalId || typeof requirement.sourceIndex !== "number" || !Number.isSafeInteger(requirement.sourceIndex) || requirement.sourceIndex < 0 || typeof value.itemId !== "string" || typeof value.toolName !== "string" || typeof value.rawArgs !== "string" || !isRecord(value.subject) || !Array.isArray(value.availableChoices)) return;
+    const choices = value.availableChoices.filter((choice) => isRecord(choice) && typeof choice.choiceId === "string" && typeof choice.label === "string" && typeof choice.decision === "string" && (choice.rulePreview === void 0 || typeof choice.rulePreview === "string"));
+    if (choices.length === 0 || choices.length !== value.availableChoices.length) return;
+    if (previous && (requirement.sourceIndex < previous.currentRequirementId.sourceIndex || typeof params.viewCursor === "string" && params.viewCursor === previous.viewCursor)) return;
+    const requestId = previous?.currentRequirementId.sourceIndex === requirement.sourceIndex ? previous.requestId : `muse-approval:${params.approvalId}:${requirement.sourceIndex}:${uuidV7()}`;
+    const pending = {
+      approvalId: params.approvalId,
+      sessionId: this.sessionId,
+      itemId: value.itemId,
+      toolName: value.toolName,
+      rawArgs: value.rawArgs,
+      currentRequirementId: { approvalId: params.approvalId, sourceIndex: requirement.sourceIndex },
+      availableChoices: choices,
+      subject: value.subject,
+      requestId,
+      ...typeof params.viewCursor === "string" ? { viewCursor: params.viewCursor } : {},
+      ...previous?.requestId === requestId ? { selectionId: previous.selectionId } : {}
+    };
+    if (previous && previous.requestId !== requestId) {
+      this.resolveApproval(pending.approvalId, previous.selectionId ?? "resolved", false);
+    }
+    this.pendingApprovals.set(pending.approvalId, pending);
+    const stages = Array.isArray(pending.subject.stages) ? pending.subject.stages : [];
+    const stage = stages.find((stage2) => isRecord(stage2) && isRecord(stage2.requirementId) && stage2.requirementId.sourceIndex === requirement.sourceIndex);
+    const stageLabel = isRecord(stage) ? ` (stage ${stage.position} of ${stage.totalStages})` : "";
+    this.recordHistoryEvent("replicas-tool-input-request", {
+      requestId,
+      toolUseId: pending.itemId,
+      toolName: pending.toolName,
+      questions: [{
+        id: "approval",
+        prompt: `Allow ${pending.toolName}${stageLabel}?
+
+${typeof pending.subject.command === "string" ? pending.subject.command : JSON.stringify(pending.subject, null, 2)}`,
+        multiSelect: false,
+        allowCustom: false,
+        options: choices.map((choice) => ({ id: choice.choiceId, label: choice.label, ...choice.rulePreview ? { preview: choice.rulePreview } : {} }))
+      }],
+      parent_tool_use_id: null
+    }, this.historyFile);
+    this.recordHistoryEvent("muse-item-started", {
+      item: { itemId: pending.itemId, kind: "toolCall", tool: pending.toolName, args: pending.rawArgs, status: "inProgress" }
+    }, this.historyFile);
+  }
   handleProcessExit(child, error) {
     if (this.process !== child) return;
     const hadPendingRequest = (this.client?.pendingRequestCount ?? 0) > 0;
     this.process = null;
     this.client?.dispose(error);
     this.client = null;
+    for (const approvalId of this.pendingApprovals.keys()) this.resolveApproval(approvalId, "aborted");
+    this.resolvedApprovals.clear();
     if (this.turnComplete && !hadPendingRequest) {
       this.recordHistoryEvent("muse-error", { message: error.message }, this.historyFile);
     }
@@ -17722,6 +17814,8 @@ var MuseManager = class extends CodingAgentManager {
     this.process = null;
     this.client?.dispose();
     this.client = null;
+    for (const approvalId of this.pendingApprovals.keys()) this.resolveApproval(approvalId, "aborted");
+    this.resolvedApprovals.clear();
     process10?.kill("SIGTERM");
   }
   createTurnInput(text, images) {
@@ -17734,8 +17828,17 @@ var MuseManager = class extends CodingAgentManager {
   }
   handleNotification(frame) {
     if (!isRecord(frame) || typeof frame.method !== "string" || !isRecord(frame.params)) return;
+    if (typeof frame.params.sessionId === "string" && this.sessionId && frame.params.sessionId !== this.sessionId) return;
     this.recordHistoryEvent(`muse-${frame.method.replaceAll("/", "-")}`, frame.params, this.historyFile);
-    if (frame.method === "turn/completed") {
+    if (frame.method === "approval/requested" || frame.method === "approval/updated") {
+      this.handleApproval(frame.params);
+    } else if (frame.method === "approval/resolved" && typeof frame.params.approvalId === "string") {
+      const pending = this.pendingApprovals.get(frame.params.approvalId);
+      const decision = typeof frame.params.decision === "string" ? frame.params.decision : "resolved";
+      const choice = pending?.availableChoices.find((choice2) => choice2.decision === decision && choice2.choiceId === pending.selectionId) ?? pending?.availableChoices.find((choice2) => choice2.decision === decision);
+      this.resolveApproval(frame.params.approvalId, choice?.choiceId ?? decision);
+    } else if (frame.method === "turn/completed") {
+      for (const approvalId of this.pendingApprovals.keys()) this.resolveApproval(approvalId, "aborted");
       this.turnError = isRecord(frame.params.error) && typeof frame.params.error.message === "string" ? frame.params.error.message : null;
       this.activeTurnId = null;
       this.turnComplete?.resolve();
@@ -17878,6 +17981,7 @@ ${pending}
       this.activeTurnId = null;
       this.turnError = null;
       this.pendingInput = null;
+      for (const approvalId of this.pendingApprovals.keys()) this.resolveApproval(approvalId, "aborted");
       this.compactionComplete?.resolve();
       this.compactionComplete = null;
       try {
@@ -17907,6 +18011,36 @@ ${pending}
     return true;
   }
   async respondToToolInput(requestId, selectionId) {
+    const approval = [...this.pendingApprovals.values()].find((pending2) => pending2.requestId === requestId);
+    if (approval) {
+      if (!this.sessionId || approval.selectionId) return false;
+      let selections;
+      try {
+        selections = JSON.parse(selectionId);
+      } catch {
+      }
+      const answer = isRecord(selections) && isRecord(selections.approval) ? selections.approval : null;
+      const choiceId = selectionId === "declined" ? approval.availableChoices.find((choice2) => choice2.decision === "abort" || choice2.decision === "denied")?.choiceId : answer && !answer.custom && Array.isArray(answer.options) && answer.options.length === 1 ? answer.options[0] : selectionId;
+      const choice = approval.availableChoices.find((candidate) => candidate.choiceId === choiceId);
+      if (!choice) return false;
+      approval.selectionId = choice.choiceId;
+      try {
+        await this.request("approval/decide", {
+          commandId: uuidV7(),
+          sessionId: approval.sessionId,
+          approvalId: approval.approvalId,
+          requirementId: approval.currentRequirementId,
+          choiceId: choice.choiceId
+        });
+      } catch (error) {
+        approval.selectionId = void 0;
+        const current = this.pendingApprovals.get(approval.approvalId);
+        if (current?.requestId === requestId) current.selectionId = void 0;
+        await this.refreshPendingApprovals();
+        throw error;
+      }
+      return true;
+    }
     if (!this.pendingInput || this.pendingInput.userInputId !== requestId || !this.sessionId) return false;
     const pending = this.pendingInput;
     if (selectionId === "declined") {
@@ -17944,7 +18078,7 @@ ${pending}
     return true;
   }
   isAwaitingInput() {
-    return this.pendingInput !== null;
+    return this.pendingInput !== null || this.pendingApprovals.size > 0;
   }
   async getHistory(page2 = {}) {
     await this.historyFile.flush();

package/dist/src/post-tool-pr-hook.js

@@ -3,11 +3,11 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   notifyPostToolUse
-} from "./chunk-RCRX7ATX.js";
+} from "./chunk-L2BNNGQB.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-UMU4HGV6.js";
+import "./chunk-UQETFAOK.js";
 import "./chunk-VEQXQN22.js";
 
 // src/post-tool-pr-hook.ts

package/dist/src/relay-mcp.js

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   messageRelaySubagentRequestSchema,
   spawnRelaySubagentRequestSchema
-} from "./chunk-UMU4HGV6.js";
+} from "./chunk-UQETFAOK.js";
 import "./chunk-VEQXQN22.js";
 
 // src/relay-mcp.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.764",
+  "version": "0.1.765",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",