replicas-engine 0.1.828 → 0.1.831

package/dist/src/{asp-host-ASOHN5L2.js → asp-host-2BT65CNP.js}

@@ -5,11 +5,11 @@ import {
   getCodexAspHost,
   restartCodexAspHost,
   restartCodexAspHostIfRunning
-} from "./chunk-EDAMOFQS.js";
-import "./chunk-C3MWT2WD.js";
-import "./chunk-FH3UQKLS.js";
+} from "./chunk-Y7T6IWID.js";
+import "./chunk-VZ6VMXC7.js";
+import "./chunk-I4FXRLZH.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-5XK2ECRO.js";
+import "./chunk-EJKLU7KX.js";
 import "./chunk-VEQXQN22.js";
 export {
   getCodexAspHost,

package/dist/src/{chunk-HUXYXVH3.js → chunk-3ZA72VWO.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   shouldRefreshPullRequests
-} from "./chunk-5XK2ECRO.js";
+} from "./chunk-EJKLU7KX.js";
 
 // src/services/post-tool-pr-notifier.ts
 async function notifyPostToolUse(toolName, toolInput) {

package/dist/src/{chunk-5XK2ECRO.js → chunk-EJKLU7KX.js}

@@ -2367,14 +2367,16 @@ Download protected attachments with \`await replicas.linear.download(url)\`; thi
 
 ## Check access
 
+Call Linear directly; integration listing is optional. If \`replicas.integrations.list()\` returns a 5xx or \`Internal server error\`, skip it and continue through \`replicas.linear.graphql\`.
+
 \`\`\`ts
 import { replicas } from '@replicas/sdk';
 
-const { native } = await replicas.integrations.list();
-if (!native.linear) throw new Error('Connect Linear in Replicas organization integrations first.');
+const result = await replicas.linear.graphql({ query: 'query { viewer { id } }' });
+if (result.errors?.length) throw new Error(JSON.stringify(result.errors));
 \`\`\`
 
-\`native.linear\` checks whether an organization credential exists. To diagnose authentication, make a read-only request through \`replicas.linear.graphql({ query: 'query { viewer { id } }' })\`; the gateway refreshes expired credentials and retries authentication failures once.
+The gateway refreshes expired credentials and retries authentication failures once. Check the response's \`errors\` field before using \`data\`.
 
 Personal \u2192 Connections links a person's Linear identity for agent defaults and attribution. Its disconnected state does not mean the organization's Linear integration is disconnected, and connecting it does not refresh the organization's token. Only recommend reconnecting under Organization \u2192 Integrations when the gateway reports missing credentials or an unrecoverable OAuth failure. Report transient failures without asking the user to disconnect.
 
@@ -2952,7 +2954,7 @@ Use this when:
 - The user asks to analyze text with Pangram`;
 var REFERENCE9 = `# Plugins
 
-Plugins are TypeScript libraries, not MCP servers. Import \`@replicas/sdk\`; Replicas authenticates the workspace and selects the owner\u2019s personal connection first, then the most specific environment the workspace inherits from, then Global. Provider credentials, sessions, and project keys are never exposed.
+Plugins are TypeScript libraries, not MCP servers. Import \`@replicas/sdk\`; Replicas authenticates the workspace and selects the most specific environment the workspace inherits from, then Global. Provider credentials, sessions, and project keys are never exposed.
 
 Plugin tools may read or write provider data according to the connected account's permissions. Only execute write or destructive tools when they match the user's request.
 
@@ -2965,7 +2967,7 @@ const plugins = await replicas.plugins.list();
 const installed = plugins.filter((plugin) => plugin.connected);
 \`\`\`
 
-If a plugin is not connected, ask the user to connect it under personal Connections or the relevant environment's Plugins tab. A connection on Global reaches every workspace unless a more specific environment overrides it.
+If listing returns a 5xx or \`Internal server error\`, skip it and use the known plugin's search, describe, or direct SDK API. Listing failure does not mean the plugin is disconnected. Only ask the user to connect it when the direct gateway reports missing credentials or an unrecoverable authentication failure. A connection on Global reaches every workspace unless a more specific environment overrides it.
 
 ## Search, inspect, execute
 
@@ -3351,12 +3353,11 @@ var REFERENCE11 = `# Sentry Integration
 
 Use \`@replicas/sdk\`; never request or read a Sentry token. Sentry access is organization-scoped and read-only.
 
+Call Sentry directly; integration listing is optional. If \`replicas.integrations.list()\` returns a 5xx or \`Internal server error\`, skip it and continue through \`replicas.sentry.request\`. Only recommend reconnecting when the direct gateway reports missing credentials or an unrecoverable authentication failure.
+
 \`\`\`ts
 import { replicas } from '@replicas/sdk';
 
-const { native } = await replicas.integrations.list();
-if (!native.sentry) throw new Error('Connect Sentry in Replicas organization integrations first.');
-
 const issues = await replicas.sentry.request('/organizations/acme/issues/?query=is:unresolved');
 \`\`\`
 
@@ -3391,20 +3392,15 @@ var REFERENCE12 = `# Slack Integration
 
 Use \`@replicas/sdk\`; never read or send a Slack token directly. The SDK calls Replicas, which selects only this workspace's organization connection.
 
-## Check access
-
-\`\`\`ts
-import { replicas } from '@replicas/sdk';
-
-const { native } = await replicas.integrations.list();
-if (!native.slack) throw new Error('Connect Slack in Replicas organization integrations first.');
-\`\`\`
+Call Slack directly; integration listing is optional. If \`replicas.integrations.list()\` returns a 5xx or \`Internal server error\`, skip it and continue through \`replicas.slack.call\`. Only recommend reconnecting when the direct gateway reports missing credentials or an unrecoverable authentication failure.
 
 ## Read a thread
 
 For a link such as \`https://team.slack.com/archives/C0123ABC/p1234567890123456\`, the channel is \`C0123ABC\` and the timestamp is \`1234567890.123456\`.
 
 \`\`\`ts
+import { replicas } from '@replicas/sdk';
+
 const thread = await replicas.slack.call('conversations.replies', {
   channel: 'C0123ABC',
   ts: '1234567890.123456',
@@ -7103,8 +7099,7 @@ var EXPLICIT_PLUGIN_CATALOG = [
     authType: "credentials",
     category: "data",
     name: "Vanta",
-    description: "Review and manage controls, tests, evidence, vendors, risks, and compliance data.",
-    scopes: ["environment"]
+    description: "Review and manage controls, tests, evidence, vendors, risks, and compliance data."
   }
 ];
 var HOSTED_COMPOSIO_PLUGIN_DEFINITIONS = [

package/dist/src/{chunk-ULXOFMGF.js → chunk-GLZE6UHB.js}

@@ -3,12 +3,12 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   monolithRequest
-} from "./chunk-C3MWT2WD.js";
+} from "./chunk-VZ6VMXC7.js";
 import {
   extractCommandProtectionCommandText,
   findGitCommitSignals,
   findPrMergeSignals
-} from "./chunk-5XK2ECRO.js";
+} from "./chunk-EJKLU7KX.js";
 
 // src/services/command-protection-service.ts
 var DEFAULT_COMMAND_PROTECTION_BLOCK_MESSAGE = "Blocked by Replicas command protection.";

package/dist/src/{chunk-FH3UQKLS.js → chunk-I4FXRLZH.js}

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES,
   isVersionBelow
-} from "./chunk-5XK2ECRO.js";
+} from "./chunk-EJKLU7KX.js";
 
 // src/utils/codex-agent-env.ts
 function buildCodexAgentEnv(source = process.env) {
@@ -241,7 +241,7 @@ var DEFAULT_CODEX_ARGS = [
 var MIN_CODEX_CLI_VERSION = "0.153.3";
 var CODEX_UPGRADE_TIMEOUT_MS = 12e4;
 var codexCliVersionEnsured = null;
-var ENGINE_PACKAGE_VERSION = "0.1.828";
+var ENGINE_PACKAGE_VERSION = "0.1.831";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/{chunk-C3MWT2WD.js → chunk-VZ6VMXC7.js}

@@ -15,7 +15,7 @@ import {
   isValidRelayBaseProvider,
   parsePosixEnvFile,
   readReplicasRuntimeEnv
-} from "./chunk-5XK2ECRO.js";
+} from "./chunk-EJKLU7KX.js";
 
 // src/engine-env.ts
 import { readFileSync as readFileSync2 } from "fs";

package/dist/src/{chunk-EDAMOFQS.js → chunk-Y7T6IWID.js}

@@ -5,18 +5,18 @@ import {
   ENGINE_ENV,
   monolithRequest,
   setAgentCredentialSnapshot
-} from "./chunk-C3MWT2WD.js";
+} from "./chunk-VZ6VMXC7.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-FH3UQKLS.js";
+} from "./chunk-I4FXRLZH.js";
 import {
   CODEX_AUTH_ENV_KEYS,
   CODEX_AUTH_ENV_KEYS_BY_METHOD,
   codexAuthEnvFromResponse,
   createErrorResult,
   createSuccessResult
-} from "./chunk-5XK2ECRO.js";
+} from "./chunk-EJKLU7KX.js";
 
 // src/managers/codex-token-manager.ts
 import { promises as fs } from "fs";
@@ -232,7 +232,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     const data = await response.json();
     await this.applyCredentialsResponse(data);
     if (restartOnChange && CODEX_AUTH_ENV_KEYS.some((key, index) => process.env[key] !== previousEnv[index])) {
-      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-ASOHN5L2.js");
+      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-2BT65CNP.js");
       await restartCodexAspHostIfRunning2();
     }
     if (data.scope) {

package/dist/src/command-protection-hook.js

@@ -3,12 +3,12 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-ULXOFMGF.js";
-import "./chunk-C3MWT2WD.js";
+} from "./chunk-GLZE6UHB.js";
+import "./chunk-VZ6VMXC7.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-5XK2ECRO.js";
+import "./chunk-EJKLU7KX.js";
 import "./chunk-VEQXQN22.js";
 
 // src/command-protection-hook.ts

package/dist/src/deepseek-command-protection-plugin.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-ULXOFMGF.js";
+} from "./chunk-GLZE6UHB.js";
 import {
   notifyPostToolUse
-} from "./chunk-HUXYXVH3.js";
-import "./chunk-C3MWT2WD.js";
+} from "./chunk-3ZA72VWO.js";
+import "./chunk-VZ6VMXC7.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-5XK2ECRO.js";
+import "./chunk-EJKLU7KX.js";
 import "./chunk-VEQXQN22.js";
 
 // src/deepseek-command-protection-plugin.ts

package/dist/src/headless-agent.js

@@ -8,12 +8,12 @@ import {
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-FH3UQKLS.js";
+} from "./chunk-I4FXRLZH.js";
 import {
   AGENT,
   getMemoryOutputSafetyViolation,
   headlessAgentRequestSchema
-} from "./chunk-5XK2ECRO.js";
+} from "./chunk-EJKLU7KX.js";
 import "./chunk-VEQXQN22.js";
 
 // src/headless-agent.ts

package/dist/src/index.js

@@ -91,7 +91,7 @@ import {
   evaluateCommandProtection,
   extractToolCommand,
   reportCommandProtectionBlock
-} from "./chunk-ULXOFMGF.js";
+} from "./chunk-GLZE6UHB.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -131,20 +131,20 @@ import {
   recordCredentialFallback,
   recordExhaustedCredential,
   restartCodexAspHost
-} from "./chunk-EDAMOFQS.js";
+} from "./chunk-Y7T6IWID.js";
 import {
   ENGINE_ENV,
   IS_WARMING_MODE,
   monolithRequest,
   monolithService,
   setAgentCredentialSnapshot
-} from "./chunk-C3MWT2WD.js";
+} from "./chunk-VZ6VMXC7.js";
 import {
   AspClient,
   SUBPROCESS_MAX_BUFFER,
   execAsync,
   execFileAsync
-} from "./chunk-FH3UQKLS.js";
+} from "./chunk-I4FXRLZH.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -352,7 +352,7 @@ import {
   spawnRelaySubagentRequestSchema,
   stripAgentDiagnosticErrors,
   withTimeout
-} from "./chunk-5XK2ECRO.js";
+} from "./chunk-EJKLU7KX.js";
 import {
   __commonJS,
   __export,

package/dist/src/post-tool-pr-hook.js

@@ -3,11 +3,11 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   notifyPostToolUse
-} from "./chunk-HUXYXVH3.js";
+} from "./chunk-3ZA72VWO.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-5XK2ECRO.js";
+import "./chunk-EJKLU7KX.js";
 import "./chunk-VEQXQN22.js";
 
 // src/post-tool-pr-hook.ts

package/dist/src/relay-mcp.js

@@ -7,7 +7,7 @@ import {
 import {
   messageRelaySubagentRequestSchema,
   spawnRelaySubagentRequestSchema
-} from "./chunk-5XK2ECRO.js";
+} from "./chunk-EJKLU7KX.js";
 import "./chunk-VEQXQN22.js";
 
 // src/relay-mcp.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.828",
+  "version": "0.1.831",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",

package/workspace-sdk/index.d.ts

@@ -3,7 +3,6 @@ import type { ReplicasSdk } from './shared/workspace-sdk';
 export type {
   PluginConnectionStatus,
   PluginId,
-  PluginScope,
   PluginToolSchema,
   ProviderRequestOptions,
   ReplicasSdk,

package/workspace-sdk/shared/routes/plugin-catalog.d.ts

@@ -173,6 +173,5 @@ export declare const PLUGIN_CATALOG: readonly [{
     readonly category: "data";
     readonly name: "Vanta";
     readonly description: "Review and manage controls, tests, evidence, vendors, risks, and compliance data.";
-    readonly scopes: readonly ["environment"];
 }, ...HostedComposioPlugin[]];
 export {};

package/workspace-sdk/shared/routes/plugins.d.ts

@@ -10,7 +10,6 @@ export type NativePluginId = Extract<(typeof PLUGIN_CATALOG)[number], {
 export type ComposioPluginId = Extract<(typeof PLUGIN_CATALOG)[number], {
     backend: 'composio';
 }>['id'];
-export type PluginScope = 'environment' | 'personal';
 export type PluginAuthType = (typeof PLUGIN_CATALOG)[number]['authType'];
 export type PluginCategory = (typeof PLUGIN_CATALOG)[number]['category'];
 export declare const PLUGIN_CONNECTION_STATUSES: readonly ["initiated", "active", "expired", "failed"];
@@ -25,13 +24,11 @@ export interface PluginCatalogItem {
     category: PluginCategory;
     name: string;
     description: string;
-    scopes?: readonly PluginScope[];
 }
 export interface PluginConnectionSummary {
     id: string;
     pluginId: PluginId;
-    scope: PluginScope;
-    environmentId?: string;
+    environmentId: string;
     status: PluginConnectionStatus;
     accountLabel?: string;
     connectedAt?: string;
@@ -39,7 +36,6 @@ export interface PluginConnectionSummary {
 export interface PluginConnectionsResponse {
     plugins: PluginCatalogItem[];
     environment: PluginConnectionSummary[];
-    personal: PluginConnectionSummary[];
 }
 export interface PluginStartOAuthResponse {
     authorizationUrl: string;
@@ -126,7 +122,6 @@ export interface PangramAnalyzeRequest {
 }
 export interface WorkspacePluginSummary extends PluginCatalogItem {
     connected: boolean;
-    scope?: PluginScope;
     status?: PluginConnectionStatus;
     accountLabel?: string;
 }

package/workspace-sdk/shared/workspace-sdk.d.ts

@@ -1,6 +1,6 @@
 // Generated from shared/src by generate-workspace-sdk-types.mjs; do not edit.
 import type { PluginDescribeRequest, PluginDescribeResponse, PluginExecuteRequest, PluginExecuteResponse, PluginSearchRequest, PluginSearchResponse, WorkspaceIntegrationsResponse, WorkspacePluginSummary } from './routes/plugins';
-export type { PluginConnectionStatus, PluginId, PluginScope, PluginToolSchema, WorkspaceIntegrationsResponse, WorkspacePluginSummary, } from './routes/plugins';
+export type { PluginConnectionStatus, PluginId, PluginToolSchema, WorkspaceIntegrationsResponse, WorkspacePluginSummary, } from './routes/plugins';
 export interface ProviderRequestOptions {
     method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
     body?: unknown;