replicas-engine 0.1.989 → 0.1.991

package/dist/src/{asp-host-O3JY7A6A.js → asp-host-44AGB7NP.js}

@@ -5,12 +5,12 @@ import {
   getCodexAspHost,
   restartCodexAspHost,
   restartCodexAspHostIfRunning
-} from "./chunk-VUUSZ5JS.js";
-import "./chunk-LM4J2GLY.js";
-import "./chunk-BAJGQWIO.js";
-import "./chunk-TFUEJW43.js";
+} from "./chunk-5QXFYKQB.js";
+import "./chunk-4OFU44QS.js";
+import "./chunk-6REBKQ2X.js";
+import "./chunk-DFCNT76A.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-RZBMLP2H.js";
+import "./chunk-V7ADTVCG.js";
 import "./chunk-VEQXQN22.js";
 export {
   getCodexAspHost,

package/dist/src/{chunk-LM4J2GLY.js → chunk-4OFU44QS.js}

@@ -14,7 +14,7 @@ import {
   isValidAgentProvider,
   parsePosixEnvFile,
   readReplicasRuntimeEnv
-} from "./chunk-RZBMLP2H.js";
+} from "./chunk-V7ADTVCG.js";
 
 // src/runtime-env-loader.ts
 import { readFileSync } from "fs";
@@ -217,7 +217,6 @@ var MonolithService = class {
     const query = new URLSearchParams({ provider: params.provider, exclude: params.exclude.join(",") });
     if (params.exhaustedMethod) query.set("exhaustedMethod", params.exhaustedMethod);
     if (params.userId) query.set("userId", params.userId);
-    if (params.chatId) query.set("chatId", params.chatId);
     try {
       const response = await monolithRequest(`/v1/engine/fallback-plan?${query}`, { method: "GET" });
       if (response.status === 404) return createErrorResult({ message: "Monolith has no fallback-plan route", code: "unsupported" });

package/dist/src/{chunk-VUUSZ5JS.js → chunk-5QXFYKQB.js}

@@ -5,15 +5,15 @@ import {
   ENGINE_ENV,
   monolithRequest,
   setAgentCredentialSnapshot
-} from "./chunk-LM4J2GLY.js";
+} from "./chunk-4OFU44QS.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-BAJGQWIO.js";
+} from "./chunk-6REBKQ2X.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-TFUEJW43.js";
+} from "./chunk-DFCNT76A.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
@@ -27,7 +27,7 @@ import {
   listOpenAICompatibleModels,
   readOllamaAuthEnv,
   resolveOpenAICompatibleModelsUrl
-} from "./chunk-RZBMLP2H.js";
+} from "./chunk-V7ADTVCG.js";
 
 // src/managers/codex-token-manager.ts
 import { promises as fs } from "fs";
@@ -260,7 +260,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     await this.applyCredentialUpdate(++this.credentialGeneration, async () => {
       await this.applyCredentialsResponse(data);
       setAgentCredentialSnapshot("codex", data);
-      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-O3JY7A6A.js");
+      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-44AGB7NP.js");
       await restartCodexAspHostIfRunning2();
     });
     await this.start(true);
@@ -280,7 +280,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     await this.applyCredentialUpdate(generation, async () => {
       await this.applyCredentialsResponse(data);
       if (restartOnChange && CODEX_AUTH_ENV_KEYS.some((key, index) => process.env[key] !== previousEnv[index])) {
-        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-O3JY7A6A.js");
+        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-44AGB7NP.js");
         await restartCodexAspHostIfRunning2();
       }
       setAgentCredentialSnapshot("codex", data);
@@ -511,7 +511,6 @@ export {
   listCredentialFallbacks,
   routineRefreshExclusions,
   recordExhaustedCredential,
-  credentialSwapError,
   refreshDelayMs,
   BaseRefreshManager,
   applyAuthEnvTransition,

package/dist/src/{chunk-BAJGQWIO.js → chunk-6REBKQ2X.js}

@@ -3,10 +3,10 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   execFileAsync
-} from "./chunk-TFUEJW43.js";
+} from "./chunk-DFCNT76A.js";
 import {
   isVersionBelow
-} from "./chunk-RZBMLP2H.js";
+} from "./chunk-V7ADTVCG.js";
 
 // src/utils/codex-agent-env.ts
 function buildCodexAgentEnv(source = process.env) {
@@ -240,7 +240,7 @@ function getCodexModelProvider(method) {
   if (method === "foundry") return "azure";
   return method === "ollama" || method === "openai-compatible" ? "replicas_openai_compatible" : "openai";
 }
-var ENGINE_PACKAGE_VERSION = "0.1.989";
+var ENGINE_PACKAGE_VERSION = "0.1.991";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/{chunk-TFUEJW43.js → chunk-DFCNT76A.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES
-} from "./chunk-RZBMLP2H.js";
+} from "./chunk-V7ADTVCG.js";
 
 // src/utils/exec.ts
 import { exec, execFile } from "child_process";

package/dist/src/{chunk-WYERDOJD.js → chunk-KRUN7VY2.js}

@@ -5,7 +5,7 @@ import {
   extractCommandProtectionCommandText,
   isRecord,
   parseCodeHostPrUrl
-} from "./chunk-RZBMLP2H.js";
+} from "./chunk-V7ADTVCG.js";
 
 // src/services/published-pull-request-urls.ts
 function publishedPullRequestUrls(result) {

package/dist/src/{chunk-RZBMLP2H.js → chunk-V7ADTVCG.js}

@@ -1240,7 +1240,6 @@ var sendChatMessageRequestSchema = z3.object({
   idempotencyKey: z3.string().min(1).max(128).optional(),
   automationId: z3.string().optional(),
   environmentId: z3.string().min(1).optional(),
-  chatCredentials: z3.boolean().optional(),
   senderUserId: z3.string().optional(),
   senderEmail: z3.string().optional(),
   senderDisplayName: z3.string().optional(),

package/dist/src/{chunk-JBMI42EJ.js → chunk-XTEQAQO3.js}

@@ -3,18 +3,18 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   monolithRequest
-} from "./chunk-LM4J2GLY.js";
+} from "./chunk-4OFU44QS.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-TFUEJW43.js";
+} from "./chunk-DFCNT76A.js";
 import {
   extractCommandProtectionCommandText,
   findCommandProtectionGitLookups,
   findGitCommitSignals,
   findPrMergeSignals,
   parseCommandProtectionRequest
-} from "./chunk-RZBMLP2H.js";
+} from "./chunk-V7ADTVCG.js";
 
 // src/services/command-protection-service.ts
 import { readFile, stat } from "fs/promises";

package/dist/src/command-protection-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-JBMI42EJ.js";
-import "./chunk-LM4J2GLY.js";
-import "./chunk-TFUEJW43.js";
+} from "./chunk-XTEQAQO3.js";
+import "./chunk-4OFU44QS.js";
+import "./chunk-DFCNT76A.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-RZBMLP2H.js";
+import "./chunk-V7ADTVCG.js";
 import "./chunk-VEQXQN22.js";
 
 // src/command-protection-hook.ts

package/dist/src/headless-agent.js

@@ -7,12 +7,12 @@ import {
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-BAJGQWIO.js";
-import "./chunk-TFUEJW43.js";
+} from "./chunk-6REBKQ2X.js";
+import "./chunk-DFCNT76A.js";
 import {
   AGENT,
   headlessAgentRequestSchema
-} from "./chunk-RZBMLP2H.js";
+} from "./chunk-V7ADTVCG.js";
 import "./chunk-VEQXQN22.js";
 
 // src/headless-agent.ts

package/dist/src/index.js

@@ -32,7 +32,7 @@ import {
   reportCommandProtectionBlock,
   resolveDiffBase,
   runGitCommand
-} from "./chunk-JBMI42EJ.js";
+} from "./chunk-XTEQAQO3.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -57,14 +57,13 @@ import {
 } from "./chunk-P73LGPQO.js";
 import {
   publishedPullRequestUrls
-} from "./chunk-WYERDOJD.js";
+} from "./chunk-KRUN7VY2.js";
 import {
   BaseRefreshManager,
   CodexAspAuthMethodChangedError,
   applyAuthEnvTransition,
   clearCredentialFallbacks,
   codexTokenManager,
-  credentialSwapError,
   getCodexAspHost,
   listCredentialFallbacks,
   recordCredentialFallback,
@@ -72,7 +71,7 @@ import {
   refreshDelayMs,
   restartCodexAspHost,
   routineRefreshExclusions
-} from "./chunk-VUUSZ5JS.js";
+} from "./chunk-5QXFYKQB.js";
 import {
   ENGINE_ENV,
   monolithRequest,
@@ -80,16 +79,16 @@ import {
   readRuntimeEnvFile,
   reloadEngineEnv,
   setAgentCredentialSnapshot
-} from "./chunk-LM4J2GLY.js";
+} from "./chunk-4OFU44QS.js";
 import {
   AspClient,
   getCodexModelProvider
-} from "./chunk-BAJGQWIO.js";
+} from "./chunk-6REBKQ2X.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execAsync,
   execFileAsync
-} from "./chunk-TFUEJW43.js";
+} from "./chunk-DFCNT76A.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -315,7 +314,7 @@ import {
   workspaceCredentialProviderSchema,
   workspaceTokenRequestSchema,
   workspaceTokenResponseSchema
-} from "./chunk-RZBMLP2H.js";
+} from "./chunk-V7ADTVCG.js";
 import {
   cloneMcpConfig,
   ensureCompatibilityImports,
@@ -11684,21 +11683,16 @@ var AuthFallbackCoordinator = class {
   provider;
   record;
   context;
-  async fallBack(reason, detail, chatCredentials) {
-    const tokenManager = chatCredentials ?? SWAPPABLE_AGENTS[this.provider];
-    const current = () => chatCredentials ? chatCredentials.snapshot() : ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS[this.provider];
-    const exhausted = current();
-    if (exhausted) {
-      if (chatCredentials) chatCredentials.markExhausted(exhausted);
-      else recordExhaustedCredential(this.provider, exhausted);
-    }
+  async fallBack(reason, detail) {
+    const tokenManager = SWAPPABLE_AGENTS[this.provider];
+    const exhausted = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS[this.provider];
+    if (exhausted) recordExhaustedCredential(this.provider, exhausted);
     const { userId, excludeProviders, forkable } = this.context();
     const plan = await monolithService.getFallbackPlan({
       provider: this.provider,
       exhaustedMethod: exhausted?.method,
       exclude: excludeProviders,
-      userId,
-      chatId: chatCredentials?.chatId
+      userId
     });
     if (!plan.ok && plan.error.code === "unavailable") {
       console.error(`[AuthFallback] ${this.provider} fallback stopped; plan unavailable:`, plan.error.message);
@@ -11722,21 +11716,21 @@ var AuthFallbackCoordinator = class {
         failed ||= swap.error.code !== "no_credentials";
         continue;
       }
-      const applied = current() ?? exhausted;
+      const applied = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS[this.provider] ?? exhausted;
       if (applied.method === exhausted.method && applied.scope === exhausted.scope) {
         failed = true;
         continue;
       }
-      this.recordNotice(reason, exhausted, applied, "switched", detail, !chatCredentials);
+      this.recordNotice(reason, exhausted, applied, "switched", detail);
       const model = step.models?.[applied.method];
       return { outcome: "switched", ...model ? { model } : {} };
     }
     if (!tokenManager || !exhausted) return { outcome: "unavailable" };
     if (!failed) return { outcome: "not_configured" };
-    this.recordNotice(reason, exhausted, exhausted, "failed", "Replicas could not load an alternate credential.", !chatCredentials);
+    this.recordNotice(reason, exhausted, exhausted, "failed", "Replicas could not load an alternate credential.");
     return { outcome: "failed" };
   }
-  recordNotice(reason, exhausted, applied, status, detail, workspaceWide) {
+  recordNotice(reason, exhausted, applied, status, detail) {
     const payload = {
       provider: this.provider,
       reason,
@@ -11751,7 +11745,7 @@ var AuthFallbackCoordinator = class {
     };
     const at = (/* @__PURE__ */ new Date()).toISOString();
     this.record({ timestamp: at, type: AUTH_FALLBACK_EVENT_TYPE, payload: { ...payload } });
-    if (workspaceWide) recordCredentialFallback({ ...payload, at });
+    recordCredentialFallback({ ...payload, at });
   }
 };
 
@@ -12024,9 +12018,9 @@ var CodingAgentManager = class {
       this.getHistorySink()?.append(event);
     }, options.fallbackContext ?? (() => ({ excludeProviders: [], forkable: false }))) : null;
   }
-  async fallBackCredential(reason, detail, chatCredentials) {
+  async fallBackCredential(reason, detail) {
     if (!this.authFallback) return { outcome: "unavailable" };
-    const result = await this.authFallback.fallBack(reason, detail, chatCredentials);
+    const result = await this.authFallback.fallBack(reason, detail);
     if (result.outcome === "switched" && result.model) await this.onModelSwitched(result.model);
     return result;
   }
@@ -12353,12 +12347,12 @@ function resolveClaudeAuthMethodForMessage(env = ENGINE_ENV) {
   if (env.ANTHROPIC_API_KEY) return "api_key";
   return "unknown";
 }
-function buildClaudeAgentEnv(overrides, chatEnv) {
-  const env = { ...chatEnv ?? process.env };
+function buildClaudeAgentEnv(overrides) {
+  const env = { ...process.env };
   if (overrides) {
     Object.assign(env, overrides);
   }
-  const method = chatEnv ? chatEnv.REPLICAS_CLAUDE_AUTH_METHOD : ENGINE_ENV.REPLICAS_CLAUDE_AUTH_METHOD;
+  const method = ENGINE_ENV.REPLICAS_CLAUDE_AUTH_METHOD;
   const isBedrock = method === "bedrock" || env.REPLICAS_CLAUDE_AUTH_METHOD === "bedrock" || env.CLAUDE_CODE_USE_BEDROCK === "1";
   if (method === "oauth" || method === "bedrock" || method === "foundry" || isBedrock) {
     env.ANTHROPIC_API_KEY = void 0;
@@ -12390,90 +12384,6 @@ async function getAgentAdditionalDirectories() {
   }
 }
 
-// src/managers/chat-claude-credentials.ts
-var EXHAUSTED_RETRY_MS = 60 * 60 * 1e3;
-var AUTH_SELECTOR_KEYS = [
-  "ANTHROPIC_API_KEY",
-  "ANTHROPIC_AUTH_TOKEN",
-  "ANTHROPIC_BASE_URL",
-  "CLAUDE_CODE_USE_BEDROCK",
-  "CLAUDE_CODE_USE_FOUNDRY"
-];
-var ChatClaudeCredentials = class {
-  constructor(chatId) {
-    this.chatId = chatId;
-  }
-  chatId;
-  credential = null;
-  exhausted = /* @__PURE__ */ new Map();
-  get method() {
-    return this.credential?.type;
-  }
-  snapshot() {
-    const credential = this.credential;
-    if (!credential?.scope) return void 0;
-    return {
-      method: credential.type,
-      scope: credential.scope,
-      ...credential.revision ? { revision: credential.revision } : {},
-      ...credential.account ? { account: credential.account } : {}
-    };
-  }
-  /** The process env authenticated as this credential, without touching the workspace's. */
-  env() {
-    const env = { ...process.env, CLAUDE_CODE_OAUTH_TOKEN: void 0 };
-    if (!this.credential) return env;
-    for (const key of AUTH_SELECTOR_KEYS) env[key] = void 0;
-    applyAuthEnvTransition({
-      prevMethod: ENGINE_ENV.REPLICAS_CLAUDE_AUTH_METHOD ?? "none",
-      authKeys: CLAUDE_AUTH_ENV_KEYS,
-      authKeysByMethod: CLAUDE_AUTH_ENV_KEYS_BY_METHOD,
-      newEnvVars: claudeAuthEnvFromResponse(this.credential),
-      envs: [env]
-    });
-    if (this.credential.type === "oauth") env.CLAUDE_CODE_OAUTH_TOKEN = this.credential.accessToken;
-    return env;
-  }
-  markExhausted(credential) {
-    this.exhausted.set(`${credential.method}|${credential.scope}`, { credential, at: Date.now() });
-  }
-  async refresh() {
-    const live = this.snapshot();
-    const excludeCredentials = this.spent().filter((spent) => spent.method !== live?.method || spent.scope !== live?.scope);
-    try {
-      await this.request(excludeCredentials.length > 0 ? { excludeCredentials } : {});
-    } catch (error) {
-      if (!this.credential) throw error;
-      console.warn(`[ChatClaudeCredentials] Keeping the current credential for chat ${this.chatId}:`, error);
-    }
-  }
-  async fetchFreshCredentials(failureReason, failureKind, failedCredential = this.snapshot(), allowedMethods) {
-    const failedMethod = this.credential?.type;
-    const excludeCredentials = this.spent();
-    try {
-      await this.request({
-        ...failedMethod ? { failedMethod } : {},
-        ...failedCredential?.method === failedMethod ? { failedCredential } : {},
-        failureReason,
-        failureKind,
-        ...excludeCredentials.length > 0 ? { excludeCredentials } : {},
-        ...allowedMethods ? { allowedMethods: [...allowedMethods] } : {}
-      });
-      return createSuccessResult();
-    } catch (error) {
-      console.error(`[ChatClaudeCredentials] Failed to fetch fresh credentials for chat ${this.chatId}:`, error);
-      return credentialSwapError(error);
-    }
-  }
-  spent() {
-    const cutoff = Date.now() - EXHAUSTED_RETRY_MS;
-    return [...this.exhausted.values()].filter(({ at }) => at >= cutoff).map(({ credential }) => credential);
-  }
-  async request(body) {
-    this.credential = await requestClaudeCredentials({ ...body, chatId: this.chatId });
-  }
-};
-
 // src/utils/linear-event-forwarder.ts
 function isLinearThoughtEvent(event) {
   return event.content.type === "thought";
@@ -13388,8 +13298,6 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
   goalClear = null;
   lastRequest = null;
   onChatCredential;
-  chatCredentials = null;
-  turnCredentials = null;
   constructor(options) {
     super({
       ...options,
@@ -13707,10 +13615,8 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
     await this.goalClear?.catch(() => {
     });
     try {
-      this.turnCredentials = request.chatCredentials && this.chatId ? this.chatCredentials ??= new ChatClaudeCredentials(this.chatId) : null;
-      await this.turnCredentials?.refresh();
       while (true) {
-        const attemptedCredential = this.turnCredentials ? this.turnCredentials.snapshot() : ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.claude;
+        const attemptedCredential = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.claude;
         const steers = carriedSteers;
         carriedSteers = /* @__PURE__ */ new Map();
         try {
@@ -13721,7 +13627,7 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
           const quotaKind = _ClaudeManager.quotaLimitKind(error);
           if (quotaKind) {
             const detail = error instanceof ClaudeQuotaError ? error.message : extractErrorText(error);
-            const fallback = quotaFallbacks < MAX_QUOTA_FALLBACKS ? await this.fallBackCredential(quotaKind, detail, this.turnCredentials ?? void 0) : { outcome: "unavailable" };
+            const fallback = quotaFallbacks < MAX_QUOTA_FALLBACKS ? await this.fallBackCredential(quotaKind, detail) : { outcome: "unavailable" };
             if (fallback.outcome === "switched") {
               if (fallback.model) currentRequest = { ...currentRequest, model: fallback.model };
               quotaFallbacks++;
@@ -13743,7 +13649,7 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
               error
             );
             this.setAuthRetrying(true);
-            const refreshed = await (this.turnCredentials ?? claudeTokenManager).fetchFreshCredentials(
+            const refreshed = await claudeTokenManager.fetchFreshCredentials(
               error instanceof Error ? error.message : String(error),
               "rejected",
               attemptedCredential
@@ -13836,11 +13742,8 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
       [this.claudeAuthFailureMessage()]
     );
   }
-  claudeAuthMethod() {
-    return this.turnCredentials ? this.turnCredentials.method ?? "unknown" : resolveClaudeAuthMethodForMessage();
-  }
   claudeAuthFailureMessage() {
-    switch (this.claudeAuthMethod()) {
+    switch (resolveClaudeAuthMethodForMessage()) {
       case "oauth":
         return "Claude Code OAuth authentication failed after refreshing credentials. Reconnect Claude Code in Settings \u2192 Agents and try again.";
       case "api_key":
@@ -13908,19 +13811,16 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
       this.buildCombinedInstructions(customInstructions, true),
       "Background tasks must have a concrete completion condition. Use foreground commands for sequential work and managed workspace services for servers. Reserve persistent Monitor tasks for ongoing watches the user requested. You may end a turn while actual background work continues, but do not promise a later update unless a task was successfully launched. Report completion or failure when its notification arrives."
     ].filter(Boolean).join("\n\n");
-    const resolvedModel = normalizeClaudeModel(model) || (this.claudeAuthMethod() === "ollama" ? DEFAULT_OLLAMA_MODEL : void 0) || DEFAULT_CLAUDE_MODEL;
-    const claudeCodeModel = toClaudeCodeModel(resolvedModel, this.turnCredentials ? this.turnCredentials.method === "bedrock" : ENGINE_ENV.REPLICAS_CLAUDE_AUTH_METHOD === "bedrock" || ENGINE_ENV.CLAUDE_CODE_USE_BEDROCK === "1");
+    const resolvedModel = normalizeClaudeModel(model) || (resolveClaudeAuthMethodForMessage() === "ollama" ? DEFAULT_OLLAMA_MODEL : void 0) || DEFAULT_CLAUDE_MODEL;
+    const claudeCodeModel = toClaudeCodeModel(
+      resolvedModel,
+      ENGINE_ENV.REPLICAS_CLAUDE_AUTH_METHOD === "bedrock" || ENGINE_ENV.CLAUDE_CODE_USE_BEDROCK === "1"
+    );
     const resolvedPermissionMode = planMode ? "plan" : "bypassPermissions";
     const resolvedFastMode = Boolean(fastMode && canUseClaudeFastMode(resolvedModel));
-    const chatCredential = this.turnCredentials?.snapshot();
-    this.onChatCredential(chatCredential ? {
-      method: chatCredential.method,
-      scope: chatCredential.scope,
-      ...chatCredential.account ? { account: chatCredential.account } : {}
-    } : "workspace");
+    this.onChatCredential("workspace");
     const signature = {
-      // Prefixed so a session never carries one side's auth env over to the other.
-      credential: this.turnCredentials ? `chat:${JSON.stringify(this.turnCredentials.snapshot())}` : JSON.stringify(ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.claude),
+      credential: JSON.stringify(ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.claude),
       combinedInstructions,
       thinkingLevel,
       enableInteractiveTools: Boolean(enableInteractiveTools),
@@ -14029,10 +13929,7 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
   }
   /** Query inputs shared by real sessions and slash-command discovery. */
   async buildSharedQueryOptions() {
-    const env = buildClaudeAgentEnv(
-      this.subagentMcpParentChatId() ? { CLAUDE_CODE_STREAM_CLOSE_TIMEOUT: "900000" } : void 0,
-      this.turnCredentials?.env()
-    );
+    const env = buildClaudeAgentEnv(this.subagentMcpParentChatId() ? { CLAUDE_CODE_STREAM_CLOSE_TIMEOUT: "900000" } : void 0);
     const additionalDirectories = await getAgentAdditionalDirectories();
     let plugins = [];
     let enableAllSkills = false;
@@ -14093,7 +13990,7 @@ var ClaudeManager = class _ClaudeManager extends CodingAgentManager {
         ...shared.enableAllSkills ? { skills: "all" } : {},
         env: {
           ...shared.env,
-          ...this.claudeAuthMethod() === "ollama" ? {
+          ...resolveClaudeAuthMethodForMessage() === "ollama" ? {
             ANTHROPIC_DEFAULT_SONNET_MODEL: resolvedModel,
             ANTHROPIC_DEFAULT_OPUS_MODEL: resolvedModel,
             ANTHROPIC_DEFAULT_HAIKU_MODEL: resolvedModel

package/dist/src/post-tool-pr-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   publishedPullRequestUrls
-} from "./chunk-WYERDOJD.js";
+} from "./chunk-KRUN7VY2.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
 import {
   shouldRefreshPullRequests
-} from "./chunk-RZBMLP2H.js";
+} from "./chunk-V7ADTVCG.js";
 import "./chunk-VEQXQN22.js";
 
 // src/services/post-tool-pr-notifier.ts

package/dist/src/subagent-mcp.js

@@ -9,7 +9,7 @@ import {
   spawnSubagentRequestSchema,
   subagentResponseSchema,
   waitSubagentRequestSchema
-} from "./chunk-RZBMLP2H.js";
+} from "./chunk-V7ADTVCG.js";
 import "./chunk-VEQXQN22.js";
 
 // src/subagent-mcp.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.989",
+  "version": "0.1.991",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",