replicas-engine 0.1.847 → 0.1.848

package/dist/src/{asp-host-TSFKIZ5K.js → asp-host-W2DTK3J5.js}

@@ -5,11 +5,11 @@ import {
   getCodexAspHost,
   restartCodexAspHost,
   restartCodexAspHostIfRunning
-} from "./chunk-PSF3DN47.js";
-import "./chunk-HEH6SVCF.js";
-import "./chunk-56WIWER6.js";
+} from "./chunk-43SDL344.js";
+import "./chunk-2QWUV5HZ.js";
+import "./chunk-YVEE5YOO.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-MQMKKDOH.js";
+import "./chunk-Q42GPHHD.js";
 import "./chunk-VEQXQN22.js";
 export {
   getCodexAspHost,

package/dist/src/{chunk-HEH6SVCF.js → chunk-2QWUV5HZ.js}

@@ -15,7 +15,7 @@ import {
   isValidRelayBaseProvider,
   parsePosixEnvFile,
   readReplicasRuntimeEnv
-} from "./chunk-MQMKKDOH.js";
+} from "./chunk-Q42GPHHD.js";
 
 // src/engine-env.ts
 import { readFileSync as readFileSync2 } from "fs";

package/dist/src/{chunk-PSF3DN47.js → chunk-43SDL344.js}

@@ -5,13 +5,13 @@ import {
   ENGINE_ENV,
   monolithRequest,
   setAgentCredentialSnapshot
-} from "./chunk-HEH6SVCF.js";
+} from "./chunk-2QWUV5HZ.js";
 import {
   AppServerProcess,
   SUBPROCESS_MAX_BUFFER,
   buildCodexAgentEnv,
   execFileAsync
-} from "./chunk-56WIWER6.js";
+} from "./chunk-YVEE5YOO.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
@@ -23,7 +23,7 @@ import {
   createSuccessResult,
   listOpenAICompatibleModels,
   resolveOpenAICompatibleModelsUrl
-} from "./chunk-MQMKKDOH.js";
+} from "./chunk-Q42GPHHD.js";
 
 // src/managers/codex-token-manager.ts
 import { promises as fs } from "fs";
@@ -49,6 +49,10 @@ function applyAuthEnvTransition(params) {
 // src/services/credential-fallbacks.ts
 var fallbacksByAgent = /* @__PURE__ */ new Map();
 var exhaustedByAgent = /* @__PURE__ */ new Map();
+function clearCredentialFallbacks(provider) {
+  fallbacksByAgent.delete(provider);
+  exhaustedByAgent.delete(provider);
+}
 function recordCredentialFallback(notice) {
   fallbacksByAgent.set(notice.provider, notice);
 }
@@ -84,9 +88,11 @@ var BaseRefreshManager = class {
   }
   managerName;
   intervalMs;
+  credentialGeneration = 0;
+  credentialUpdate = Promise.resolve();
   intervalHandle = null;
   health;
-  async start() {
+  async start(skipInitialRefresh = false) {
     if (this.intervalHandle) {
       return;
     }
@@ -98,7 +104,7 @@ var BaseRefreshManager = class {
     console.log(`[${this.managerName}] Starting token refresh service`);
     this.health.isRunning = true;
     const config = this.getRuntimeConfig();
-    if (config) {
+    if (config && !skipInitialRefresh) {
       this.health.lastAttemptAt = (/* @__PURE__ */ new Date()).toISOString();
       for (let attempt = 1; attempt <= 3; attempt++) {
         try {
@@ -166,6 +172,15 @@ var BaseRefreshManager = class {
   getNextRefreshDelayMs() {
     return this.intervalMs;
   }
+  applyCredentialUpdate(generation, apply) {
+    const update = this.credentialUpdate.then(async () => {
+      if (generation !== this.credentialGeneration) throw new Error("Credential changed during refresh; retry with the current credential.");
+      await apply();
+    });
+    this.credentialUpdate = update.catch(() => {
+    });
+    return update;
+  }
   getRuntimeConfig() {
     if (!ENGINE_ENV.REPLICAS_WORKSPACE_ID) {
       return null;
@@ -225,7 +240,17 @@ var CodexTokenManager = class extends BaseRefreshManager {
   async doRefresh(_config) {
     await this.refreshWithRequest(void 0, true);
   }
+  async switchCredentials(data) {
+    await this.applyCredentialUpdate(++this.credentialGeneration, async () => {
+      await this.applyCredentialsResponse(data);
+      if (data.scope) setAgentCredentialSnapshot("codex", { method: data.type, scope: data.scope, revision: data.revision });
+      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-W2DTK3J5.js");
+      await restartCodexAspHostIfRunning2();
+    });
+    await this.start(true);
+  }
   async refreshWithRequest(request, restartOnChange = false) {
+    const generation = this.credentialGeneration;
     const previousEnv = CODEX_AUTH_ENV_KEYS.map((key) => process.env[key]);
     console.log("[CodexTokenManager] Refreshing Codex credentials...");
     const response = await monolithRequest("/v1/engine/codex/refresh-credentials", {
@@ -236,18 +261,20 @@ var CodexTokenManager = class extends BaseRefreshManager {
       throw new Error(`Credentials refresh failed: ${response.status} ${errorText}`);
     }
     const data = await response.json();
-    await this.applyCredentialsResponse(data);
-    if (restartOnChange && CODEX_AUTH_ENV_KEYS.some((key, index) => process.env[key] !== previousEnv[index])) {
-      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-TSFKIZ5K.js");
-      await restartCodexAspHostIfRunning2();
-    }
-    if (data.scope) {
-      setAgentCredentialSnapshot("codex", {
-        method: data.type,
-        scope: data.scope,
-        ...data.revision ? { revision: data.revision } : {}
-      });
-    }
+    await this.applyCredentialUpdate(generation, async () => {
+      await this.applyCredentialsResponse(data);
+      if (restartOnChange && CODEX_AUTH_ENV_KEYS.some((key, index) => process.env[key] !== previousEnv[index])) {
+        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-W2DTK3J5.js");
+        await restartCodexAspHostIfRunning2();
+      }
+      if (data.scope) {
+        setAgentCredentialSnapshot("codex", {
+          method: data.type,
+          scope: data.scope,
+          ...data.revision ? { revision: data.revision } : {}
+        });
+      }
+    });
     console.log(`[CodexTokenManager] Credentials refreshed (method=${data.type})`);
     return data;
   }
@@ -471,6 +498,7 @@ async function restartCodexAspHostIfRunning() {
 }
 
 export {
+  clearCredentialFallbacks,
   recordCredentialFallback,
   listCredentialFallbacks,
   recordExhaustedCredential,

package/dist/src/{chunk-LZSQ7376.js → chunk-CGN7NMUB.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   shouldRefreshPullRequests
-} from "./chunk-MQMKKDOH.js";
+} from "./chunk-Q42GPHHD.js";
 
 // src/services/post-tool-pr-notifier.ts
 async function notifyPostToolUse(toolName, toolInput) {

package/dist/src/{chunk-MQMKKDOH.js → chunk-Q42GPHHD.js}

@@ -631,6 +631,9 @@ var AGENT_CREDENTIAL_METHODS_IN_ORDER = {
     { method: CREDENTIAL_METHOD.OPENROUTER, credentialType: CREDENTIAL_TYPE.OPENROUTER_API_KEY }
   ]
 };
+function agentCredentialMethods(agent) {
+  return AGENT_CREDENTIAL_METHODS_IN_ORDER[agent].map((entry) => entry.method);
+}
 function getCredentialMethodLabel(agent, method) {
   switch (method) {
     case CREDENTIAL_METHOD.OAUTH:
@@ -1626,58 +1629,69 @@ function describeAuthFallback(payload) {
   };
 }
 
+// ../shared/src/workspace-credentials.ts
+import { z as z5 } from "zod";
+var WORKSPACE_CREDENTIAL_PROVIDERS = ["claude", "codex"];
+var workspaceCredentialProviderSchema = z5.enum(WORKSPACE_CREDENTIAL_PROVIDERS);
+var workspaceCredentialSelectionSchema = agentCredentialSnapshotSchema.omit({ revision: true });
+var switchWorkspaceCredentialSchema = workspaceCredentialSelectionSchema.extend({
+  provider: workspaceCredentialProviderSchema
+}).refine(({ provider, method }) => agentCredentialMethods(provider).includes(method), {
+  message: "This authentication method is not supported by this agent"
+});
+
 // ../shared/src/chat-fork.ts
-import { z as z6 } from "zod";
+import { z as z7 } from "zod";
 
 // ../shared/src/fallback-chains.ts
-import { z as z5 } from "zod";
-var fallbackHarnessStepSchema = z5.object({
-  kind: z5.literal("harness"),
-  provider: z5.enum(VALID_AGENT_PROVIDERS),
-  relayBaseProvider: z5.enum(VALID_RELAY_BASE_PROVIDERS).optional(),
-  model: z5.string().min(1),
-  thinkingLevel: z5.enum(VALID_THINKING_LEVELS).optional()
+import { z as z6 } from "zod";
+var fallbackHarnessStepSchema = z6.object({
+  kind: z6.literal("harness"),
+  provider: z6.enum(VALID_AGENT_PROVIDERS),
+  relayBaseProvider: z6.enum(VALID_RELAY_BASE_PROVIDERS).optional(),
+  model: z6.string().min(1),
+  thinkingLevel: z6.enum(VALID_THINKING_LEVELS).optional()
 });
-var fallbackPlanStepSchema = z5.discriminatedUnion("kind", [
-  z5.object({ kind: z5.literal("credentials"), methods: z5.array(z5.custom(isAuthMethod)).min(1) }),
+var fallbackPlanStepSchema = z6.discriminatedUnion("kind", [
+  z6.object({ kind: z6.literal("credentials"), methods: z6.array(z6.custom(isAuthMethod)).min(1) }),
   fallbackHarnessStepSchema
 ]);
-var fallbackPlanResponseSchema = z5.object({ steps: z5.array(fallbackPlanStepSchema) });
+var fallbackPlanResponseSchema = z6.object({ steps: z6.array(fallbackPlanStepSchema) });
 
 // ../shared/src/chat-fork.ts
-var quotaLimitKindSchema = z6.enum(["rate_limit", "out_of_credits"]);
-var chatForkInfoSchema = z6.object({
-  source: z6.object({
-    chatId: z6.string().min(1),
-    provider: z6.enum(VALID_AGENT_PROVIDERS),
-    title: z6.string()
+var quotaLimitKindSchema = z7.enum(["rate_limit", "out_of_credits"]);
+var chatForkInfoSchema = z7.object({
+  source: z7.object({
+    chatId: z7.string().min(1),
+    provider: z7.enum(VALID_AGENT_PROVIDERS),
+    title: z7.string()
   }),
-  trigger: z6.enum(["manual", "auto"]),
+  trigger: z7.enum(["manual", "auto"]),
   reason: quotaLimitKindSchema.optional(),
-  state: z6.enum(["preparing", "ready", "failed"]),
-  error: z6.string().optional(),
-  startedAt: z6.string(),
-  completedAt: z6.string().optional()
+  state: z7.enum(["preparing", "ready", "failed"]),
+  error: z7.string().optional(),
+  startedAt: z7.string(),
+  completedAt: z7.string().optional()
 });
 function coerceChatForkInfo(value) {
   const parsed = chatForkInfoSchema.safeParse(value);
   return parsed.success ? parsed.data : null;
 }
-var forkChatRequestSchema = z6.object({
-  provider: z6.enum(VALID_AGENT_PROVIDERS),
-  relayBaseProvider: z6.enum(VALID_RELAY_BASE_PROVIDERS).optional(),
-  model: z6.string().min(1).optional(),
-  thinkingLevel: z6.enum(VALID_THINKING_LEVELS).optional(),
-  title: z6.string().min(1).max(200).optional(),
-  message: z6.string().trim().optional(),
-  id: z6.string().uuid().optional(),
-  clientRequestId: z6.string().min(1).max(128).optional(),
-  enableInteractiveTools: z6.boolean().optional(),
+var forkChatRequestSchema = z7.object({
+  provider: z7.enum(VALID_AGENT_PROVIDERS),
+  relayBaseProvider: z7.enum(VALID_RELAY_BASE_PROVIDERS).optional(),
+  model: z7.string().min(1).optional(),
+  thinkingLevel: z7.enum(VALID_THINKING_LEVELS).optional(),
+  title: z7.string().min(1).max(200).optional(),
+  message: z7.string().trim().optional(),
+  id: z7.string().uuid().optional(),
+  clientRequestId: z7.string().min(1).max(128).optional(),
+  enableInteractiveTools: z7.boolean().optional(),
   // Server-injected by the monolith from the authenticated request; never trusted from clients.
-  senderUserId: z6.string().optional(),
-  senderEmail: z6.string().optional(),
-  senderDisplayName: z6.string().optional(),
-  senderAvatarUrl: z6.string().optional()
+  senderUserId: z7.string().optional(),
+  senderEmail: z7.string().optional(),
+  senderDisplayName: z7.string().optional(),
+  senderAvatarUrl: z7.string().optional()
 });
 function describeQuotaLimit(reason) {
   return reason === "out_of_credits" ? "ran out of credits" : "hit its usage limit";
@@ -1686,10 +1700,10 @@ function describeChatForkReason(reason, provider) {
   return reason ? `${getProviderDisplayName(provider)} ${describeQuotaLimit(reason)}` : null;
 }
 var AGENT_QUOTA_EXHAUSTED_EVENT_TYPE = "agent-quota-exhausted";
-var agentQuotaExhaustedPayloadSchema = z6.object({
-  provider: z6.enum(VALID_CODING_AGENT_PROVIDERS),
+var agentQuotaExhaustedPayloadSchema = z7.object({
+  provider: z7.enum(VALID_CODING_AGENT_PROVIDERS),
   reason: quotaLimitKindSchema,
-  detail: z6.string().optional(),
+  detail: z7.string().optional(),
   forkTo: fallbackHarnessStepSchema.optional()
 });
 function defaultForkChatTitle(source, provider) {
@@ -2954,32 +2968,32 @@ var MEDIA_ABILITY = {
 };
 
 // ../shared/src/memory.ts
-import { z as z7 } from "zod";
+import { z as z8 } from "zod";
 var MEMORY_ROOT = `${SANDBOX_PATHS.REPLICAS_DIR}/memories`;
 var MEMORY_INDEX_FILENAME = "MEMORY.md";
 var MEMORY_BUNDLE_FILENAME = "memory.tar.gz";
 var MEMORY_MARKER_GUIDANCE = `When you decide that a preference, correction, decision, procedure, or lesson is worth remembering for future sessions, say so in your response casually, like a coworker: "Ah, I'll remember that for next time" or "I'll keep that in mind." Keep it natural and never mention the memory feature, memory pipeline, markers, persistence, or that you are saving or adding something to memory. These phrases signal intent to remember; they do not mean anything has already been saved, so do not claim persistence is complete.`;
-var memoryExtractionResultSchema = z7.object({
-  seatSummary: z7.string().nullable(),
-  organizationSummary: z7.string().nullable()
+var memoryExtractionResultSchema = z8.object({
+  seatSummary: z8.string().nullable(),
+  organizationSummary: z8.string().nullable()
 });
-var { $schema: _, ...MEMORY_EXTRACTION_SCHEMA } = z7.toJSONSchema(memoryExtractionResultSchema);
-var memoryGenerationManifestSchema = z7.object({
-  domainId: z7.string(),
-  generation: z7.number().int().nonnegative(),
-  previousManifestKey: z7.string().nullable(),
-  createdAt: z7.string(),
-  promptVersion: z7.string(),
-  harness: z7.enum(["claude", "codex", "none"]),
-  model: z7.string(),
-  bundle: z7.object({
-    path: z7.literal(MEMORY_BUNDLE_FILENAME),
-    sha256: z7.string().regex(/^[a-f0-9]{64}$/),
-    sizeBytes: z7.number().int().positive()
+var { $schema: _, ...MEMORY_EXTRACTION_SCHEMA } = z8.toJSONSchema(memoryExtractionResultSchema);
+var memoryGenerationManifestSchema = z8.object({
+  domainId: z8.string(),
+  generation: z8.number().int().nonnegative(),
+  previousManifestKey: z8.string().nullable(),
+  createdAt: z8.string(),
+  promptVersion: z8.string(),
+  harness: z8.enum(["claude", "codex", "none"]),
+  model: z8.string(),
+  bundle: z8.object({
+    path: z8.literal(MEMORY_BUNDLE_FILENAME),
+    sha256: z8.string().regex(/^[a-f0-9]{64}$/),
+    sizeBytes: z8.number().int().positive()
   }).nullable(),
-  files: z7.record(z7.string(), z7.string()),
-  rollouts: z7.record(z7.string(), z7.string()),
-  rolloutSources: z7.record(z7.string(), z7.string()).optional()
+  files: z8.record(z8.string(), z8.string()),
+  rollouts: z8.record(z8.string(), z8.string()),
+  rolloutSources: z8.record(z8.string(), z8.string()).optional()
 });
 
 // ../shared/src/default-skills/replicas-agent/abilities/memory.ts
@@ -7435,46 +7449,46 @@ var DEFAULT_WORKSPACE_FILTERS = {
 var ONE_DAY_MS = 24 * 60 * 60 * 1e3;
 
 // ../shared/src/routes/workspace-events.ts
-import { z as z8 } from "zod";
-var workspaceChangedEventSchema = z8.discriminatedUnion("type", [
-  z8.object({
-    type: z8.literal("workspace.changed"),
-    workspaceId: z8.string(),
-    completion: z8.object({
-      workspaceName: z8.string(),
-      completedAt: z8.string(),
-      processing: z8.boolean().optional()
+import { z as z9 } from "zod";
+var workspaceChangedEventSchema = z9.discriminatedUnion("type", [
+  z9.object({
+    type: z9.literal("workspace.changed"),
+    workspaceId: z9.string(),
+    completion: z9.object({
+      workspaceName: z9.string(),
+      completedAt: z9.string(),
+      processing: z9.boolean().optional()
     }).optional(),
-    ts: z8.string()
+    ts: z9.string()
   }),
-  z8.object({
-    type: z8.literal("workspace.chat.changed"),
-    workspaceId: z8.string(),
-    chatId: z8.string(),
-    ts: z8.string()
+  z9.object({
+    type: z9.literal("workspace.chat.changed"),
+    workspaceId: z9.string(),
+    chatId: z9.string(),
+    ts: z9.string()
   }),
-  z8.object({ type: z8.literal("presence.changed"), ts: z8.string() }),
-  z8.object({
-    type: z8.literal("mobile-testing.changed"),
-    workspaceId: z8.string(),
-    ts: z8.string()
+  z9.object({ type: z9.literal("presence.changed"), ts: z9.string() }),
+  z9.object({
+    type: z9.literal("mobile-testing.changed"),
+    workspaceId: z9.string(),
+    ts: z9.string()
   })
 ]);
 
 // ../shared/src/routes/presence.ts
-import { z as z9 } from "zod";
-var presenceStatusSchema = z9.enum(["online", "typing"]);
-var presenceLocationSchema = z9.object({
-  environmentId: z9.string().optional(),
-  workspaceId: z9.string().optional()
+import { z as z10 } from "zod";
+var presenceStatusSchema = z10.enum(["online", "typing"]);
+var presenceLocationSchema = z10.object({
+  environmentId: z10.string().optional(),
+  workspaceId: z10.string().optional()
 });
-var presenceEntrySchema = z9.object({
-  userId: z9.string(),
+var presenceEntrySchema = z10.object({
+  userId: z10.string(),
   status: presenceStatusSchema,
   location: presenceLocationSchema,
-  ts: z9.string()
+  ts: z10.string()
 });
-var updatePresenceRequestSchema = z9.object({
+var updatePresenceRequestSchema = z10.object({
   status: presenceStatusSchema,
   location: presenceLocationSchema.optional()
 });
@@ -7839,6 +7853,7 @@ export {
   TOKEN_USAGE_PATH,
   isTokenUsageCounts,
   isTokenUsageUploadRecord,
+  workspaceCredentialProviderSchema,
   fallbackPlanResponseSchema,
   ASTER_PROVIDER,
   ASTER_BASE_URL,

package/dist/src/{chunk-T32XK5XV.js → chunk-RLNQ34YJ.js}

@@ -3,12 +3,12 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   monolithRequest
-} from "./chunk-HEH6SVCF.js";
+} from "./chunk-2QWUV5HZ.js";
 import {
   extractCommandProtectionCommandText,
   findGitCommitSignals,
   findPrMergeSignals
-} from "./chunk-MQMKKDOH.js";
+} from "./chunk-Q42GPHHD.js";
 
 // src/services/command-protection-service.ts
 var DEFAULT_COMMAND_PROTECTION_BLOCK_MESSAGE = "Blocked by Replicas command protection.";

package/dist/src/{chunk-56WIWER6.js → chunk-YVEE5YOO.js}

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES,
   isVersionBelow
-} from "./chunk-MQMKKDOH.js";
+} from "./chunk-Q42GPHHD.js";
 
 // src/utils/codex-agent-env.ts
 function buildCodexAgentEnv(source = process.env) {
@@ -241,7 +241,7 @@ var DEFAULT_CODEX_ARGS = [
 var MIN_CODEX_CLI_VERSION = "0.153.3";
 var CODEX_UPGRADE_TIMEOUT_MS = 12e4;
 var codexCliVersionEnsured = null;
-var ENGINE_PACKAGE_VERSION = "0.1.847";
+var ENGINE_PACKAGE_VERSION = "0.1.848";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/command-protection-hook.js

@@ -3,12 +3,12 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-T32XK5XV.js";
-import "./chunk-HEH6SVCF.js";
+} from "./chunk-RLNQ34YJ.js";
+import "./chunk-2QWUV5HZ.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-MQMKKDOH.js";
+import "./chunk-Q42GPHHD.js";
 import "./chunk-VEQXQN22.js";
 
 // src/command-protection-hook.ts

package/dist/src/deepseek-command-protection-plugin.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-T32XK5XV.js";
+} from "./chunk-RLNQ34YJ.js";
 import {
   notifyPostToolUse
-} from "./chunk-LZSQ7376.js";
-import "./chunk-HEH6SVCF.js";
+} from "./chunk-CGN7NMUB.js";
+import "./chunk-2QWUV5HZ.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-MQMKKDOH.js";
+import "./chunk-Q42GPHHD.js";
 import "./chunk-VEQXQN22.js";
 
 // src/deepseek-command-protection-plugin.ts

package/dist/src/headless-agent.js

@@ -8,12 +8,12 @@ import {
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-56WIWER6.js";
+} from "./chunk-YVEE5YOO.js";
 import {
   AGENT,
   getMemoryOutputSafetyViolation,
   headlessAgentRequestSchema
-} from "./chunk-MQMKKDOH.js";
+} from "./chunk-Q42GPHHD.js";
 import "./chunk-VEQXQN22.js";
 
 // src/headless-agent.ts

package/dist/src/index.js

@@ -91,7 +91,7 @@ import {
   evaluateCommandProtection,
   extractToolCommand,
   reportCommandProtectionBlock
-} from "./chunk-T32XK5XV.js";
+} from "./chunk-RLNQ34YJ.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -125,26 +125,27 @@ import {
   BaseRefreshManager,
   CodexAspAuthMethodChangedError,
   applyAuthEnvTransition,
+  clearCredentialFallbacks,
   codexTokenManager,
   getCodexAspHost,
   listCredentialFallbacks,
   recordCredentialFallback,
   recordExhaustedCredential,
   restartCodexAspHost
-} from "./chunk-PSF3DN47.js";
+} from "./chunk-43SDL344.js";
 import {
   ENGINE_ENV,
   IS_WARMING_MODE,
   monolithRequest,
   monolithService,
   setAgentCredentialSnapshot
-} from "./chunk-HEH6SVCF.js";
+} from "./chunk-2QWUV5HZ.js";
 import {
   AspClient,
   SUBPROCESS_MAX_BUFFER,
   execAsync,
   execFileAsync
-} from "./chunk-56WIWER6.js";
+} from "./chunk-YVEE5YOO.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -354,8 +355,9 @@ import {
   shouldRefreshPullRequests,
   spawnRelaySubagentRequestSchema,
   stripAgentDiagnosticErrors,
-  withTimeout
-} from "./chunk-MQMKKDOH.js";
+  withTimeout,
+  workspaceCredentialProviderSchema
+} from "./chunk-Q42GPHHD.js";
 import {
   __commonJS,
   __export,
@@ -9427,7 +9429,12 @@ var ClaudeTokenManager = class extends BaseRefreshManager {
   async doRefresh(_config) {
     await this.refreshWithRequest();
   }
+  async switchCredentials(data) {
+    await this.applyCredentialUpdate(++this.credentialGeneration, () => this.applyCredentialsResponse(data));
+    await this.start(true);
+  }
   async refreshWithRequest(request) {
+    const generation = this.credentialGeneration;
     console.log("[ClaudeTokenManager] Refreshing Claude credentials...");
     const response = await monolithRequest("/v1/engine/claude/refresh-credentials", {
       body: request
@@ -9437,14 +9444,7 @@ var ClaudeTokenManager = class extends BaseRefreshManager {
       throw new Error(`Credentials refresh failed: ${response.status} ${errorText}`);
     }
     const data = await response.json();
-    await this.applyCredentialsResponse(data);
-    if (data.scope) {
-      setAgentCredentialSnapshot("claude", {
-        method: data.type,
-        scope: data.scope,
-        ...data.revision ? { revision: data.revision } : {}
-      });
-    }
+    await this.applyCredentialUpdate(generation, () => this.applyCredentialsResponse(data));
     console.log(`[ClaudeTokenManager] Credentials refreshed (method=${data.type})`);
   }
   async fetchFreshCredentials(failureReason, failureKind = "rejected", failedCredential = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.claude, allowedMethods) {
@@ -9484,6 +9484,13 @@ var ClaudeTokenManager = class extends BaseRefreshManager {
       newEnvVars: envVars,
       envs: [ENGINE_ENV, process.env]
     });
+    if (response.scope) {
+      setAgentCredentialSnapshot("claude", {
+        method: response.type,
+        scope: response.scope,
+        ...response.revision ? { revision: response.revision } : {}
+      });
+    }
   }
   async writeOauthCredentialsFile(credentials) {
     const credentialsPath = path3.join(ENGINE_ENV.HOME_DIR, ".claude", ".credentials.json");
@@ -9505,14 +9512,12 @@ var ClaudeTokenManager = class extends BaseRefreshManager {
       console.log(`[ClaudeTokenManager] Updated ${credentialsPath}`);
     } catch (error) {
       console.error("[ClaudeTokenManager] Failed to update credentials file:", error);
+      throw error;
     }
   }
   async removeOauthCredentialsFile() {
     const credentialsPath = path3.join(ENGINE_ENV.HOME_DIR, ".claude", ".credentials.json");
-    try {
-      await fs.unlink(credentialsPath);
-    } catch {
-    }
+    await fs.rm(credentialsPath, { force: true });
   }
 };
 var claudeTokenManager = new ClaudeTokenManager();
@@ -9928,6 +9933,8 @@ var EnvironmentDetailsService = class {
     details.supportsQueuedMessageEditing = true;
     details.supportsChatForking = true;
     details.supportsChatForkMessage = true;
+    details.supportsCredentialSwitching = true;
+    details.agentCredentials = { ...ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS };
     details.claudeAuthMethod = detectAgentAuthMethod(AGENT.CLAUDE);
     details.codexAuthMethod = detectAgentAuthMethod(AGENT.CODEX);
     details.cursorAuthMethod = detectAgentAuthMethod(AGENT.CURSOR);
@@ -12838,7 +12845,6 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
   activePromptStream = null;
   activeSessionSignature = null;
   activeSessionModel = null;
-  activeSessionPermissionMode = null;
   sessionLoop = null;
   sessionLinearForwarder = null;
   pendingTurn = null;
@@ -13327,13 +13333,12 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
     const resolvedPermissionMode = planMode ? "plan" : "bypassPermissions";
     const resolvedFastMode = Boolean(fastMode && canUseClaudeFastMode(resolvedModel));
     const signature = {
+      credential: JSON.stringify(ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.claude),
       combinedInstructions,
       thinkingLevel,
-      // enableInteractiveTools only matters in plan mode; the session signature
-      // tracks the effective flag so a mode change can hot-swap via setPermissionMode
-      // without restarting.
       enableInteractiveTools: Boolean(enableInteractiveTools),
-      fastMode: resolvedFastMode
+      fastMode: resolvedFastMode,
+      permissionMode: resolvedPermissionMode
     };
     await this.ensureSession({
       signature,
@@ -13378,15 +13383,6 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
           await this.tearDownSession();
         }
       }
-      if (this.activeQuery && this.activeSessionPermissionMode !== resolvedPermissionMode) {
-        try {
-          await this.activeQuery.setPermissionMode(resolvedPermissionMode);
-          this.activeSessionPermissionMode = resolvedPermissionMode;
-        } catch (err) {
-          console.warn("[ClaudeManager] setPermissionMode failed; recreating session:", err);
-          await this.tearDownSession();
-        }
-      }
       if (this.activeQuery) return;
     } else if (this.activeQuery) {
       await this.tearDownSession();
@@ -13402,7 +13398,7 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
     });
   }
   sessionSignaturesMatch(a, b) {
-    return a.combinedInstructions === b.combinedInstructions && a.thinkingLevel === b.thinkingLevel && a.enableInteractiveTools === b.enableInteractiveTools && a.fastMode === b.fastMode;
+    return a.combinedInstructions === b.combinedInstructions && a.credential === b.credential && a.thinkingLevel === b.thinkingLevel && a.enableInteractiveTools === b.enableInteractiveTools && a.fastMode === b.fastMode && a.permissionMode === b.permissionMode;
   }
   /** Query inputs shared by real sessions and slash-command discovery. */
   async buildSharedQueryOptions() {
@@ -13474,7 +13470,7 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
         forwardSubagentText: true,
         ...supportsClaudeThinkingDisplay(resolvedModel) ? { thinking: { type: "adaptive", display: "summarized" } } : {},
         ...effort ? { effort } : {},
-        canUseTool: this.buildCanUseTool(),
+        ...resolvedPermissionMode === "plan" ? { canUseTool: this.buildCanUseTool() } : {},
         hooks: {
           PreToolUse: [{
             matcher: "*",
@@ -13509,7 +13505,6 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
     this.activePromptStream = promptStream;
     this.activeSessionSignature = signature;
     this.activeSessionModel = claudeCodeModel;
-    this.activeSessionPermissionMode = resolvedPermissionMode;
     this.sessionLinearForwarder = new LinearEventForwarder(ENGINE_ENV.REPLICAS_LINEAR_SESSION_ID);
     this.sessionLoop = this.runSessionLoop(response).catch((err) => {
       console.error("[ClaudeManager] Session loop crashed:", err);
@@ -13634,7 +13629,6 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
     this.activePromptStream = null;
     this.activeSessionSignature = null;
     this.activeSessionModel = null;
-    this.activeSessionPermissionMode = null;
     this.sessionLinearForwarder = null;
     this.sessionLoop = null;
     this.clearBackgroundContinuationTimer();
@@ -61728,6 +61722,9 @@ var ChatService = class {
   listChats(includeChildren = false) {
     return Array.from(this.chats.values()).filter((chat) => !chat.persisted.deletedAt && (includeChildren || chat.persisted.parentChatId === null)).map((chat) => this.toSummary(chat)).sort((a, b) => b.updatedAt.localeCompare(a.updatedAt));
   }
+  hasActiveAgentWork(provider) {
+    return [...this.chats.values()].some((chat) => getChatExecutionProvider(chat.persisted) === provider && (chat.provider.isProcessing() || chat.acceptingMessages > 0 || chat.pendingMessageIds.length > 0));
+  }
   listDeletedChats() {
     return Array.from(this.chats.values()).filter((chat) => chat.persisted.deletedAt && chat.persisted.parentChatId === null).map((chat) => this.toSummary(chat)).sort((a, b) => (b.deletedAt ?? "").localeCompare(a.deletedAt ?? ""));
   }
@@ -64521,6 +64518,18 @@ data: ${JSON.stringify("Terminal session not found")}
       );
     }
   });
+  app2.post("/credentials/switch", async (c) => {
+    const body = await c.req.json();
+    const provider = workspaceCredentialProviderSchema.safeParse(body.provider);
+    if (!provider.success) return c.json(jsonError("Unsupported agent"), 400);
+    if (deps.chatService.hasActiveAgentWork(provider.data)) {
+      return c.json(jsonError("Stop this agent\u2019s running chats and clear their queues before switching credentials."), 409);
+    }
+    if (body.provider === "codex") await codexTokenManager.switchCredentials(body.credential);
+    else await claudeTokenManager.switchCredentials(body.credential);
+    clearCredentialFallbacks(provider.data);
+    return c.json(await environmentDetailsService.getDetails());
+  });
   app2.post("/codex/refresh-now", async (c) => {
     try {
       const result = await codexTokenManager.refreshOnce(true);

package/dist/src/post-tool-pr-hook.js

@@ -3,11 +3,11 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   notifyPostToolUse
-} from "./chunk-LZSQ7376.js";
+} from "./chunk-CGN7NMUB.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-MQMKKDOH.js";
+import "./chunk-Q42GPHHD.js";
 import "./chunk-VEQXQN22.js";
 
 // src/post-tool-pr-hook.ts

package/dist/src/relay-mcp.js

@@ -7,7 +7,7 @@ import {
 import {
   messageRelaySubagentRequestSchema,
   spawnRelaySubagentRequestSchema
-} from "./chunk-MQMKKDOH.js";
+} from "./chunk-Q42GPHHD.js";
 import "./chunk-VEQXQN22.js";
 
 // src/relay-mcp.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.847",
+  "version": "0.1.848",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",