replicas-engine 0.1.992 → 0.1.994

package/dist/src/{asp-host-SYEHGXS4.js → asp-host-NXUZ3VZ7.js}

@@ -5,12 +5,12 @@ import {
   getCodexAspHost,
   restartCodexAspHost,
   restartCodexAspHostIfRunning
-} from "./chunk-N3QARJXC.js";
-import "./chunk-XYQGBMCF.js";
-import "./chunk-IXGE52GO.js";
-import "./chunk-ZZ5OWSEB.js";
+} from "./chunk-FUHUBWBQ.js";
+import "./chunk-MAFKR626.js";
+import "./chunk-K5CNOXH2.js";
+import "./chunk-W7DCWL4S.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-AXLQAMWY.js";
+import "./chunk-VRMTJFZQ.js";
 import "./chunk-VEQXQN22.js";
 export {
   getCodexAspHost,

package/dist/src/{chunk-N3QARJXC.js → chunk-FUHUBWBQ.js}

@@ -5,15 +5,15 @@ import {
   ENGINE_ENV,
   monolithRequest,
   setAgentCredentialSnapshot
-} from "./chunk-XYQGBMCF.js";
+} from "./chunk-MAFKR626.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-IXGE52GO.js";
+} from "./chunk-K5CNOXH2.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-ZZ5OWSEB.js";
+} from "./chunk-W7DCWL4S.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
@@ -23,11 +23,12 @@ import {
   codexAuthEnvFromResponse,
   createErrorResult,
   createSuccessResult,
+  isSameCredential,
   listOllamaModels,
   listOpenAICompatibleModels,
   readOllamaAuthEnv,
   resolveOpenAICompatibleModelsUrl
-} from "./chunk-AXLQAMWY.js";
+} from "./chunk-VRMTJFZQ.js";
 
 // src/managers/codex-token-manager.ts
 import { promises as fs } from "fs";
@@ -70,14 +71,17 @@ function listCredentialFallbacks() {
 function listExhaustedCredentials(provider) {
   return [...exhaustedByAgent.get(provider)?.values() ?? []];
 }
-function routineRefreshExclusions(provider) {
+function routineRefreshRequest(provider) {
   const live = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS[provider];
-  const excludeCredentials = listExhaustedCredentials(provider).filter((spent) => spent.method !== live?.method || spent.scope !== live?.scope);
-  return excludeCredentials.length > 0 ? { excludeCredentials } : {};
+  const excludeCredentials = listExhaustedCredentials(provider).filter((spent) => !live || !isSameCredential(spent, live));
+  return {
+    ...excludeCredentials.length > 0 ? { excludeCredentials } : {},
+    ...live ? { currentCredential: live } : {}
+  };
 }
 function recordExhaustedCredential(provider, credential) {
   const spent = exhaustedByAgent.get(provider) ?? /* @__PURE__ */ new Map();
-  spent.set(`${credential.method}|${credential.scope}`, credential);
+  spent.set(`${credential.method}|${credential.scope}|${credential.credentialId ?? ""}`, credential);
   exhaustedByAgent.set(provider, spent);
 }
 
@@ -254,13 +258,13 @@ var CodexTokenManager = class extends BaseRefreshManager {
     return null;
   }
   async doRefresh(_config) {
-    await this.refreshWithRequest(routineRefreshExclusions("codex"), true);
+    await this.refreshWithRequest(routineRefreshRequest("codex"), true);
   }
   async switchCredentials(data) {
     await this.applyCredentialUpdate(++this.credentialGeneration, async () => {
       await this.applyCredentialsResponse(data);
       setAgentCredentialSnapshot("codex", data);
-      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-SYEHGXS4.js");
+      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-NXUZ3VZ7.js");
       await restartCodexAspHostIfRunning2();
     });
     await this.start(true);
@@ -278,9 +282,10 @@ var CodexTokenManager = class extends BaseRefreshManager {
     }
     const data = await response.json();
     await this.applyCredentialUpdate(generation, async () => {
+      const accountChanged = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.codex?.credentialId !== data.credentialId;
       await this.applyCredentialsResponse(data);
-      if (restartOnChange && CODEX_AUTH_ENV_KEYS.some((key, index) => process.env[key] !== previousEnv[index])) {
-        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-SYEHGXS4.js");
+      if (restartOnChange && (accountChanged || CODEX_AUTH_ENV_KEYS.some((key, index) => process.env[key] !== previousEnv[index]))) {
+        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-NXUZ3VZ7.js");
         await restartCodexAspHostIfRunning2();
       }
       setAgentCredentialSnapshot("codex", data);
@@ -290,7 +295,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
   }
   async prepareAspOauthOptions() {
     if (ENGINE_ENV.REPLICAS_CODEX_AUTH_METHOD !== "oauth") return {};
-    const response = await this.refreshWithRequest();
+    const response = await this.refreshWithRequest(routineRefreshRequest("codex"));
     if (response.type !== "oauth") return {};
     const login = this.buildAspOauthLogin(response);
     let credential = login.credential;
@@ -509,7 +514,7 @@ export {
   clearCredentialFallbacks,
   recordCredentialFallback,
   listCredentialFallbacks,
-  routineRefreshExclusions,
+  routineRefreshRequest,
   recordExhaustedCredential,
   refreshDelayMs,
   BaseRefreshManager,

package/dist/src/{chunk-IXGE52GO.js → chunk-K5CNOXH2.js}

@@ -3,10 +3,10 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   execFileAsync
-} from "./chunk-ZZ5OWSEB.js";
+} from "./chunk-W7DCWL4S.js";
 import {
   isVersionBelow
-} from "./chunk-AXLQAMWY.js";
+} from "./chunk-VRMTJFZQ.js";
 
 // src/utils/codex-agent-env.ts
 function buildCodexAgentEnv(source = process.env) {
@@ -240,7 +240,7 @@ function getCodexModelProvider(method) {
   if (method === "foundry") return "azure";
   return method === "ollama" || method === "openai-compatible" ? "replicas_openai_compatible" : "openai";
 }
-var ENGINE_PACKAGE_VERSION = "0.1.992";
+var ENGINE_PACKAGE_VERSION = "0.1.994";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/{chunk-XYQGBMCF.js → chunk-MAFKR626.js}

@@ -14,7 +14,7 @@ import {
   isValidAgentProvider,
   parsePosixEnvFile,
   readReplicasRuntimeEnv
-} from "./chunk-AXLQAMWY.js";
+} from "./chunk-VRMTJFZQ.js";
 
 // src/runtime-env-loader.ts
 import { readFileSync } from "fs";
@@ -161,11 +161,17 @@ function reloadEngineEnv(runtimeEnvValues) {
   ENGINE_ENV = loadEngineEnv(runtimeEnvValues);
   return ENGINE_ENV;
 }
-function setAgentCredentialSnapshot(provider, { type, scope, revision, account }) {
+function setAgentCredentialSnapshot(provider, { type, scope, revision, account, credentialId }) {
   if (!scope) return;
   ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS = {
     ...ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS,
-    [provider]: { method: type, scope, ...revision ? { revision } : {}, ...account ? { account } : {} }
+    [provider]: {
+      method: type,
+      scope,
+      ...revision ? { revision } : {},
+      ...account ? { account } : {},
+      ...credentialId ? { credentialId } : {}
+    }
   };
   process.env.REPLICAS_AGENT_CREDENTIALS = JSON.stringify(ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS);
 }

package/dist/src/{chunk-F7L43VMI.js → chunk-SR3TRBEI.js}

@@ -5,7 +5,7 @@ import {
   extractCommandProtectionCommandText,
   isRecord,
   parseCodeHostPrUrl
-} from "./chunk-AXLQAMWY.js";
+} from "./chunk-VRMTJFZQ.js";
 
 // src/services/published-pull-request-urls.ts
 function publishedPullRequestUrls(result) {

package/dist/src/{chunk-AXLQAMWY.js → chunk-VRMTJFZQ.js}

@@ -1001,14 +1001,21 @@ function isAgentChatActivityRecord(value) {
 }
 var credentialAccountSchema = z2.object({
   ownerName: z2.string().optional(),
-  email: z2.string().optional()
+  email: z2.string().optional(),
+  /** 1-based place in the owner's account pool, set only when the pool holds several accounts. */
+  ordinal: z2.number().int().positive().optional()
 });
 var agentCredentialSnapshotSchema = z2.object({
   method: z2.enum(CREDENTIAL_METHOD),
   scope: z2.enum(CREDENTIAL_SCOPE),
   revision: z2.string().optional(),
-  account: credentialAccountSchema.optional()
+  account: credentialAccountSchema.optional(),
+  /** The `credentials` row, which tells apart accounts pooled under one method and scope. */
+  credentialId: z2.string().optional()
 });
+function isSameCredential(a, b) {
+  return a.method === b.method && a.scope === b.scope && a.credentialId === b.credentialId;
+}
 function isAuthMethod(value) {
   return typeof value === "string" && Object.values(CREDENTIAL_METHOD).some((method) => method === value);
 }
@@ -1852,8 +1859,8 @@ function detectAgentQuotaLimit(text2) {
 
 // ../shared/src/auth-fallback.ts
 function describeCredential(provider, credential) {
-  const label = getCredentialMethodLabel(provider, credential.method);
-  const { ownerName, email } = credential.account ?? {};
+  const { ownerName, email, ordinal } = credential.account ?? {};
+  const label = `${getCredentialMethodLabel(provider, credential.method)}${ordinal ? ` #${ordinal}` : ""}`;
   const owner = credential.scope === CREDENTIAL_SCOPE.USER ? ownerName ? `${ownerName}'s personal ${label}` : `your ${label}` : credential.scope === CREDENTIAL_SCOPE.ORG ? `the organization's ${label}` : `the ${label}`;
   return email ? `${owner} (${email})` : owner;
 }
@@ -1879,7 +1886,7 @@ function describeAuthFallback(payload) {
 import { z as z6 } from "zod";
 var WORKSPACE_CREDENTIAL_PROVIDERS = ["claude", "codex"];
 var workspaceCredentialProviderSchema = z6.enum(WORKSPACE_CREDENTIAL_PROVIDERS);
-var workspaceCredentialSelectionSchema = agentCredentialSnapshotSchema.omit({ revision: true, account: true });
+var workspaceCredentialSelectionSchema = agentCredentialSnapshotSchema.omit({ revision: true, account: true, credentialId: true });
 var createWorkspaceCredentialSchema = workspaceCredentialSelectionSchema.extend({
   provider: z6.enum(VALID_AGENT_PROVIDERS)
 }).refine(({ provider, method }) => agentCredentialMethods(provider).includes(method), {
@@ -1963,6 +1970,13 @@ function defaultForkChatTitle(source, provider) {
   return isDefaultChat(source) ? `Forked from ${source.title}` : `${source.title} (${getProviderDisplayName(provider)})`;
 }
 
+// ../shared/src/credential-pool.ts
+import { z as z9 } from "zod";
+var MAX_CREDENTIAL_POOL_ACCOUNTS = 10;
+var reorderCredentialPoolSchema = z9.object({
+  credential_ids: z9.array(z9.string().uuid()).min(1).max(MAX_CREDENTIAL_POOL_ACCOUNTS)
+});
+
 // ../shared/src/display-message/types.ts
 var BACKGROUND_TASK_SUBTYPES = /* @__PURE__ */ new Set([
   "task_started",
@@ -2662,10 +2676,10 @@ function buildCodeHostPrUrl(repoUrl, provider, prNumber) {
 }
 
 // ../shared/src/replicas-mcp.ts
-import { z as z10 } from "zod";
+import { z as z11 } from "zod";
 
 // ../shared/src/automations/trigger-schemas.ts
-import { z as z9 } from "zod";
+import { z as z10 } from "zod";
 
 // ../shared/src/uuid.ts
 function createUuidFromHex(value) {
@@ -2674,22 +2688,22 @@ function createUuidFromHex(value) {
 var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 
 // ../shared/src/automations/trigger-schemas.ts
-var repositoryTriggerConfigSchema = z9.object({
-  event: z9.string(),
-  repository_ids: z9.array(z9.string().regex(UUID_RE, "must be a repository id")).optional(),
-  group_pr_events: z9.boolean().optional(),
-  excluded_actors: z9.array(z9.string()).optional()
+var repositoryTriggerConfigSchema = z10.object({
+  event: z10.string(),
+  repository_ids: z10.array(z10.string().regex(UUID_RE, "must be a repository id")).optional(),
+  group_pr_events: z10.boolean().optional(),
+  excluded_actors: z10.array(z10.string()).optional()
 });
-var cronTriggerSchema = z9.object({ type: z9.literal("cron"), config: z9.object({ schedule: z9.string(), timezone: z9.string().optional() }) });
-var githubTriggerSchema = z9.object({ type: z9.literal("github"), config: repositoryTriggerConfigSchema });
-var gitlabTriggerSchema = z9.object({ type: z9.literal("gitlab"), config: repositoryTriggerConfigSchema });
-var automationTriggerSchema = z9.discriminatedUnion("type", [
+var cronTriggerSchema = z10.object({ type: z10.literal("cron"), config: z10.object({ schedule: z10.string(), timezone: z10.string().optional() }) });
+var githubTriggerSchema = z10.object({ type: z10.literal("github"), config: repositoryTriggerConfigSchema });
+var gitlabTriggerSchema = z10.object({ type: z10.literal("gitlab"), config: repositoryTriggerConfigSchema });
+var automationTriggerSchema = z10.discriminatedUnion("type", [
   cronTriggerSchema,
   githubTriggerSchema,
   gitlabTriggerSchema,
-  z9.object({ type: z9.literal("slack"), config: z9.object({ event: z9.string(), channel_ids: z9.array(z9.string()).optional(), group_thread_replies: z9.boolean().optional() }) }),
-  z9.object({ type: z9.literal("sentry"), config: z9.object({ event: z9.string(), project_slugs: z9.array(z9.string()).optional(), min_level: z9.string().optional() }) }),
-  z9.object({ type: z9.literal("custom"), config: z9.object({}) })
+  z10.object({ type: z10.literal("slack"), config: z10.object({ event: z10.string(), channel_ids: z10.array(z10.string()).optional(), group_thread_replies: z10.boolean().optional() }) }),
+  z10.object({ type: z10.literal("sentry"), config: z10.object({ event: z10.string(), project_slugs: z10.array(z10.string()).optional(), min_level: z10.string().optional() }) }),
+  z10.object({ type: z10.literal("custom"), config: z10.object({}) })
 ]);
 
 // ../shared/src/replicas-mcp.ts
@@ -2706,14 +2720,14 @@ var REPLICAS_MCP_TOOLS = {
   readSubagent: "read_subagent",
   archiveSubagent: "archive_subagent"
 };
-var automationToolInputSchema = z10.object({
-  name: z10.string().describe("Short automation name."),
-  prompt: z10.string().describe("Prompt each automation run starts with."),
-  environment_id: z10.string().describe(`Environment id from \`${REPLICAS_MCP_TOOLS.listEnvironments}\`.`),
-  triggers: z10.array(automationTriggerSchema).min(1).describe(
+var automationToolInputSchema = z11.object({
+  name: z11.string().describe("Short automation name."),
+  prompt: z11.string().describe("Prompt each automation run starts with."),
+  environment_id: z11.string().describe(`Environment id from \`${REPLICAS_MCP_TOOLS.listEnvironments}\`.`),
+  triggers: z11.array(automationTriggerSchema).min(1).describe(
     'One or more triggers. Cron: `{ "type": "cron", "config": { "schedule": "0 9 * * 1", "timezone": "America/New_York" } }`. GitHub: `{ "type": "github", "config": { "event": "pull_request.opened", "repository_ids": ["<repository uuid>"] } }`.'
   ),
-  description: z10.string().optional().describe("One-line summary shown in the dashboard.")
+  description: z11.string().optional().describe("One-line summary shown in the dashboard.")
 });
 
 // ../shared/src/default-skills/replicas-agent/abilities/computer.ts
@@ -2986,7 +3000,7 @@ var DOCKER_ABILITY = {
 };
 
 // ../shared/src/routes/environment-setups.ts
-import { z as z11 } from "zod";
+import { z as z12 } from "zod";
 var ENVIRONMENT_SETUP_STEPS = [
   { key: "understand", label: "Understand the codebase" },
   { key: "install", label: "Install dependencies and run the app" },
@@ -3020,17 +3034,17 @@ var ENVIRONMENT_SETUP_LIMITS = {
 };
 var ENVIRONMENT_SETUP_VARIABLE_WAIT = { defaultMs: 5 * 6e4, maxMs: 15 * 6e4, pollMs: 5e3 };
 var VARIABLE_KEY_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
-var text = (max) => max === void 0 ? z11.string().trim() : z11.string().trim().max(max);
+var text = (max) => max === void 0 ? z12.string().trim() : z12.string().trim().max(max);
 var requiredText = (max) => text(max).min(1, "must not be empty");
 var optionalText = (max) => text(max).nullish().transform((value) => value || null);
 var clearableText = (max) => text(max).nullish().transform((value) => value === void 0 ? void 0 : value || null);
-var list = (item, max) => max === void 0 ? z11.array(item) : z11.array(item).max(max);
+var list = (item, max) => max === void 0 ? z12.array(item) : z12.array(item).max(max);
 var ENVIRONMENT_SETUP_AUTHORED_TRIGGER_TYPES = ["cron", "github", "gitlab"];
 function isEnvironmentSetupAuthoredTriggerType(type) {
   return ENVIRONMENT_SETUP_AUTHORED_TRIGGER_TYPES.some((authored) => authored === type);
 }
-var proposalTriggerSchema = z11.discriminatedUnion("type", [cronTriggerSchema, githubTriggerSchema, gitlabTriggerSchema]);
-var existingTriggerSchema = z11.custom(
+var proposalTriggerSchema = z12.discriminatedUnion("type", [cronTriggerSchema, githubTriggerSchema, gitlabTriggerSchema]);
+var existingTriggerSchema = z12.custom(
   (value) => isRecord(value) && typeof value.type === "string" && isRecord(value.config),
   "must be an automation trigger"
 );
@@ -3038,17 +3052,17 @@ var carriedTriggerSchema = existingTriggerSchema.refine(
   (trigger) => !isEnvironmentSetupAuthoredTriggerType(trigger.type)
 );
 function automationSchema(limits) {
-  const authored = z11.object({
+  const authored = z12.object({
     name: text(limits.nameChars),
     description: text(limits.descriptionChars),
     prompt: text(limits.automationPromptChars),
     triggers: list(proposalTriggerSchema, limits.automationTriggers)
   });
-  const updated = authored.extend({ triggers: list(z11.union([proposalTriggerSchema, carriedTriggerSchema]), limits.automationTriggers) });
-  return z11.object({
+  const updated = authored.extend({ triggers: list(z12.union([proposalTriggerSchema, carriedTriggerSchema]), limits.automationTriggers) });
+  return z12.object({
     key: requiredText(limits.automationKeyChars),
-    action: z11.enum(ENVIRONMENT_SETUP_AUTOMATION_ACTIONS).default("create"),
-    automation_id: z11.string().regex(UUID_RE, "must be an automation id").nullable().default(null),
+    action: z12.enum(ENVIRONMENT_SETUP_AUTOMATION_ACTIONS).default("create"),
+    automation_id: z12.string().regex(UUID_RE, "must be an automation id").nullable().default(null),
     name: text().default(""),
     description: optionalText().transform((value) => value ?? ""),
     prompt: text().default(""),
@@ -3071,7 +3085,7 @@ function automationSchema(limits) {
     const content = (automation.action === "update" ? updated : authored).safeParse(automation);
     if (content.success) return { ...automation, ...content.data };
     for (const issue of content.error.issues) ctx.addIssue({ ...issue, code: "custom" });
-    return z11.NEVER;
+    return z12.NEVER;
   });
 }
 function automationListSchema(limits) {
@@ -3089,7 +3103,7 @@ function automationListSchema(limits) {
   });
 }
 function environmentSchema(limits) {
-  return z11.object({
+  return z12.object({
     name: optionalText(limits.nameChars).transform((value) => value ?? void 0),
     description: clearableText(limits.descriptionChars),
     system_prompt: clearableText(limits.systemPromptChars),
@@ -3098,26 +3112,26 @@ function environmentSchema(limits) {
   });
 }
 function variableSchema(limits, requiredDefault) {
-  return z11.object({
-    key: z11.string().regex(VARIABLE_KEY_RE, "must be a valid environment variable name").max(limits.variableKeyChars ?? Number.POSITIVE_INFINITY),
+  return z12.object({
+    key: z12.string().regex(VARIABLE_KEY_RE, "must be a valid environment variable name").max(limits.variableKeyChars ?? Number.POSITIVE_INFINITY),
     description: optionalText(limits.variableDescriptionChars).transform((value) => value ?? ""),
-    required: z11.boolean().default(requiredDefault)
+    required: z12.boolean().default(requiredDefault)
   });
 }
 function proposalSchema(limits) {
-  return z11.object({
+  return z12.object({
     summary: requiredText(limits.summaryChars),
     stack: list(text(), limits.stackItems).default([]).transform((items) => items.filter(Boolean)),
     environment: environmentSchema(limits),
     variables: list(variableSchema(limits, false), limits.variables).default([]),
     automations: automationListSchema(limits),
-    verification: list(z11.object({
+    verification: list(z12.object({
       label: requiredText(limits.nameChars),
-      status: z11.enum(ENVIRONMENT_SETUP_VERIFICATION_STATUSES),
+      status: z12.enum(ENVIRONMENT_SETUP_VERIFICATION_STATUSES),
       detail: optionalText(limits.verificationDetailChars).transform((value) => value ?? void 0)
     }), limits.verificationItems).default([]),
-    media: list(z11.object({
-      media_id: z11.string().regex(UUID_RE, "must be a media id"),
+    media: list(z12.object({
+      media_id: z12.string().regex(UUID_RE, "must be a media id"),
       title: requiredText(limits.nameChars)
     }), limits.mediaItems).default([])
   });
@@ -3125,35 +3139,35 @@ function proposalSchema(limits) {
 var environmentSetupProposalSchema = proposalSchema({});
 var environmentSetupProposalSubmissionSchema = proposalSchema(ENVIRONMENT_SETUP_LIMITS);
 var environmentSetupVariableRequestSchema = variableSchema({}, false).extend({
-  status: z11.enum(["pending", "provided", "skipped"]),
-  requested_at: z11.string(),
-  resolved_at: z11.string().nullable().default(null)
+  status: z12.enum(["pending", "provided", "skipped"]),
+  requested_at: z12.string(),
+  resolved_at: z12.string().nullable().default(null)
 });
-var environmentSetupRunStateSchema = z11.object({
-  status: z11.enum(ENVIRONMENT_SETUP_RUN_STATUSES),
-  steps: z11.partialRecord(z11.enum(ENVIRONMENT_SETUP_STEPS.map((step) => step.key)), z11.enum(ENVIRONMENT_SETUP_STEP_STATUSES)).default({}),
+var environmentSetupRunStateSchema = z12.object({
+  status: z12.enum(ENVIRONMENT_SETUP_RUN_STATUSES),
+  steps: z12.partialRecord(z12.enum(ENVIRONMENT_SETUP_STEPS.map((step) => step.key)), z12.enum(ENVIRONMENT_SETUP_STEP_STATUSES)).default({}),
   proposal: environmentSetupProposalSchema.nullable().default(null),
-  applied: z11.object({
-    applied_at: z11.string(),
-    automation_ids: z11.array(z11.string())
+  applied: z12.object({
+    applied_at: z12.string(),
+    automation_ids: z12.array(z12.string())
   }).nullable().default(null),
-  variable_requests: z11.array(environmentSetupVariableRequestSchema).default([])
+  variable_requests: z12.array(environmentSetupVariableRequestSchema).default([])
 });
-var applyEnvironmentSetupRequestSchema = z11.object({
+var applyEnvironmentSetupRequestSchema = z12.object({
   environment: environmentSchema(ENVIRONMENT_SETUP_LIMITS).extend({ name: requiredText(ENVIRONMENT_SETUP_LIMITS.nameChars) }),
-  variables: list(z11.object({ key: z11.string().regex(VARIABLE_KEY_RE), value: z11.string() }), ENVIRONMENT_SETUP_LIMITS.variables).default([]).refine((variables) => new Set(variables.map((variable) => variable.key)).size === variables.length, "must have unique keys").transform((variables) => variables.filter((variable) => variable.value.length > 0)),
+  variables: list(z12.object({ key: z12.string().regex(VARIABLE_KEY_RE), value: z12.string() }), ENVIRONMENT_SETUP_LIMITS.variables).default([]).refine((variables) => new Set(variables.map((variable) => variable.key)).size === variables.length, "must have unique keys").transform((variables) => variables.filter((variable) => variable.value.length > 0)),
   automations: automationListSchema(ENVIRONMENT_SETUP_LIMITS)
 });
-var requestEnvironmentSetupVariablesSchema = z11.object({
+var requestEnvironmentSetupVariablesSchema = z12.object({
   variables: list(variableSchema(ENVIRONMENT_SETUP_LIMITS, true), ENVIRONMENT_SETUP_LIMITS.variables).min(1, "must not be empty")
 }).superRefine(({ variables }, ctx) => {
   if (new Set(variables.map((variable) => variable.key)).size !== variables.length) {
     ctx.addIssue({ code: "custom", path: ["variables"], message: "must have unique keys" });
   }
 });
-var respondEnvironmentSetupVariablesSchema = z11.object({
-  values: z11.record(z11.string().regex(VARIABLE_KEY_RE), z11.string()).default({}),
-  skipped: z11.array(z11.string().regex(VARIABLE_KEY_RE)).default([])
+var respondEnvironmentSetupVariablesSchema = z12.object({
+  values: z12.record(z12.string().regex(VARIABLE_KEY_RE), z12.string()).default({}),
+  skipped: z12.array(z12.string().regex(VARIABLE_KEY_RE)).default([])
 });
 
 // ../shared/src/default-skills/replicas-agent/abilities/environment-setup.ts
@@ -3648,7 +3662,9 @@ if (result.errors?.length) throw new Error(JSON.stringify(result.errors));
 
 The gateway refreshes expired credentials and retries authentication failures once. Check the response's \`errors\` field before using \`data\`.
 
-Personal \u2192 Connections links a person's Linear identity for agent defaults and attribution. Its disconnected state does not mean the organization's Linear integration is disconnected, and connecting it does not refresh the organization's token. Only recommend reconnecting under Organization \u2192 Integrations when the gateway reports missing credentials or an unrecoverable OAuth failure. Report transient failures without asking the user to disconnect.
+Initiatives need the \`initiative:read\` scope, which organizations connected before it was requested do not have. If Linear answers \`Invalid scope\`, ask an admin to reconnect Linear under Organization \u2192 Integrations; retrying will not help.
+
+Personal \u2192 Connections links a person's Linear identity for agent defaults and attribution. Its disconnected state does not mean the organization's Linear integration is disconnected, and connecting it does not refresh the organization's token. Only recommend reconnecting under Organization \u2192 Integrations when the gateway reports missing credentials or an unrecoverable OAuth failure, or when Linear answers \`Invalid scope\`. Report transient failures without asking the user to disconnect.
 
 ## Create a ticket
 
@@ -4651,7 +4667,7 @@ var SENTRY_ABILITY = {
 };
 
 // ../shared/src/memory.ts
-import { z as z12 } from "zod";
+import { z as z13 } from "zod";
 
 // ../shared/src/sandbox.ts
 var SANDBOX_LIFECYCLE = {
@@ -4660,6 +4676,15 @@ var SANDBOX_LIFECYCLE = {
   AUTO_DELETE_MINUTES: -1,
   SSH_TOKEN_EXPIRATION_MINUTES: 3 * 60
 };
+var SANDBOX_SKILL_DIRS = [
+  ".agents/skills",
+  ".claude/skills",
+  ".codex/skills",
+  ".cursor/skills",
+  ".config/opencode/skills",
+  ".pi/agent/skills",
+  ".replicas/skill-registries"
+];
 var SANDBOX_PATHS = {
   HOME_DIR: "/home/user",
   WORKSPACES_DIR: "/home/user/workspaces",
@@ -4673,11 +4698,11 @@ var INVALID_WORKSPACE_SIZE_ERROR = `Invalid size: must be one of ${WORKSPACE_SIZ
 // ../shared/src/memory.ts
 var HISTORY_ROOT = `${SANDBOX_PATHS.REPLICAS_DIR}/history`;
 var HISTORY_INDEX_FILENAME = "INDEX.md";
-var memoryExtractionResultSchema = z12.object({
-  summary: z12.string().nullable(),
-  indexEntry: z12.string().nullable()
+var memoryExtractionResultSchema = z13.object({
+  summary: z13.string().nullable(),
+  indexEntry: z13.string().nullable()
 });
-var { $schema: _, ...MEMORY_EXTRACTION_SCHEMA } = z12.toJSONSchema(memoryExtractionResultSchema);
+var { $schema: _, ...MEMORY_EXTRACTION_SCHEMA } = z13.toJSONSchema(memoryExtractionResultSchema);
 
 // ../shared/src/default-skills/replicas-agent/abilities/session-history.ts
 var SECTION12 = `### Session history
@@ -7885,7 +7910,7 @@ var CLAUDE_AUTH_ENV_KEYS_BY_METHOD = {
 };
 
 // ../shared/src/routes/command-protection.ts
-import { z as z13 } from "zod";
+import { z as z14 } from "zod";
 
 // ../shared/src/git-invocations.ts
 var COMMIT_VALUE_OPTIONS = /* @__PURE__ */ new Set(["message", "file", "trailer", "reuse-message", "reedit-message", "fixup", "squash", "template", "author", "date", "cleanup", "pathspec-from-file"]);
@@ -7976,27 +8001,27 @@ function findCheckoutTarget(args) {
 }
 
 // ../shared/src/routes/command-protection.ts
-var commandProtectionRepoStateSchema = z13.object({
-  branch: z13.string().nullable(),
-  defaultBranch: z13.string().nullable(),
-  pushBranch: z13.string().nullable(),
-  pushConfig: z13.string().nullable(),
-  headMessage: z13.string().nullable(),
-  mergeInProgress: z13.boolean().optional()
+var commandProtectionRepoStateSchema = z14.object({
+  branch: z14.string().nullable(),
+  defaultBranch: z14.string().nullable(),
+  pushBranch: z14.string().nullable(),
+  pushConfig: z14.string().nullable(),
+  headMessage: z14.string().nullable(),
+  mergeInProgress: z14.boolean().optional()
 });
-var commandProtectionEvaluateRequestSchema = z13.object({
-  provider: z13.enum(["claude", "codex", "cursor", "opencode", "pi"]),
-  source: z13.enum(["claude_pre_tool_use", "codex_approval_request", "cursor_pre_tool_use", "opencode_pre_tool_use", "pi_tool_call"]),
-  toolName: z13.string(),
-  toolInput: z13.unknown(),
-  command: z13.string().nullish(),
-  cwd: z13.string().nullish(),
-  toolUseId: z13.string().nullish(),
+var commandProtectionEvaluateRequestSchema = z14.object({
+  provider: z14.enum(["claude", "codex", "cursor", "opencode", "pi"]),
+  source: z14.enum(["claude_pre_tool_use", "codex_approval_request", "cursor_pre_tool_use", "opencode_pre_tool_use", "pi_tool_call"]),
+  toolName: z14.string(),
+  toolInput: z14.unknown(),
+  command: z14.string().nullish(),
+  cwd: z14.string().nullish(),
+  toolUseId: z14.string().nullish(),
   // Read by the engine before the command runs, keyed by absolute path, so the
   // policy can see branches and commit messages the command text only references.
-  gitContext: z13.object({
-    repos: z13.record(z13.string(), commandProtectionRepoStateSchema),
-    messageFiles: z13.record(z13.string(), z13.string())
+  gitContext: z14.object({
+    repos: z14.record(z14.string(), commandProtectionRepoStateSchema),
+    messageFiles: z14.record(z14.string(), z14.string())
   }).optional()
 });
 var COMMAND_PROTECTION_COMMAND_KEYS = ["command", "cmd", "script", "query", "endpoint", "path", "url", "mutation"];
@@ -8193,75 +8218,75 @@ function shouldRefreshPullRequests(toolName, toolInput) {
 }
 
 // ../shared/src/routes/linear.ts
-import { z as z14 } from "zod";
-var linearSessionMetadataSchema = z14.object({
-  via_mothership: z14.boolean().optional(),
-  issue_id: z14.string(),
-  issue_identifier: z14.string(),
-  issue_title: z14.string(),
-  issue_description: z14.string(),
-  issue_url: z14.string(),
-  comment_id: z14.string(),
-  comment_body: z14.string(),
-  triggered_by_id: z14.string().optional(),
-  triggered_by_name: z14.string().optional(),
-  triggered_by_email: z14.string().optional(),
-  linear_workspace_id: z14.string().optional(),
-  creator_id: z14.string().optional(),
-  creator_name: z14.string().optional(),
-  creator_email: z14.string().optional(),
-  assignee_id: z14.string().optional(),
-  assignee_name: z14.string().optional(),
-  assignee_email: z14.string().optional(),
-  issue_state: z14.string().optional(),
-  parent_issue: z14.object({
-    id: z14.string(),
-    identifier: z14.string(),
-    title: z14.string(),
-    description: z14.string().nullable()
+import { z as z15 } from "zod";
+var linearSessionMetadataSchema = z15.object({
+  via_mothership: z15.boolean().optional(),
+  issue_id: z15.string(),
+  issue_identifier: z15.string(),
+  issue_title: z15.string(),
+  issue_description: z15.string(),
+  issue_url: z15.string(),
+  comment_id: z15.string(),
+  comment_body: z15.string(),
+  triggered_by_id: z15.string().optional(),
+  triggered_by_name: z15.string().optional(),
+  triggered_by_email: z15.string().optional(),
+  linear_workspace_id: z15.string().optional(),
+  creator_id: z15.string().optional(),
+  creator_name: z15.string().optional(),
+  creator_email: z15.string().optional(),
+  assignee_id: z15.string().optional(),
+  assignee_name: z15.string().optional(),
+  assignee_email: z15.string().optional(),
+  issue_state: z15.string().optional(),
+  parent_issue: z15.object({
+    id: z15.string(),
+    identifier: z15.string(),
+    title: z15.string(),
+    description: z15.string().nullable()
   }).optional(),
-  workspace: z14.object({
-    id: z14.string(),
-    coding_agent: z14.custom((value) => typeof value === "string" && isValidAgentProvider(value)),
-    task_description: z14.string(),
-    created_at: z14.string()
+  workspace: z15.object({
+    id: z15.string(),
+    coding_agent: z15.custom((value) => typeof value === "string" && isValidAgentProvider(value)),
+    task_description: z15.string(),
+    created_at: z15.string()
   }).optional()
 });
 
 // ../shared/src/routes/mothership.ts
-import { z as z15 } from "zod";
+import { z as z16 } from "zod";
 var MOTHERSHIP_LINEAR_ACTIONS = ["ask", "start"];
-var mothershipLinearSessionIntentRequestSchema = z15.object({
-  comment_id: z15.string().trim().min(1).describe("Id of the Linear comment the session will be created on."),
-  action: z15.enum(MOTHERSHIP_LINEAR_ACTIONS).describe("`ask` when the comment is a clarifying question, `start` when it is the complete task prompt.")
+var mothershipLinearSessionIntentRequestSchema = z16.object({
+  comment_id: z16.string().trim().min(1).describe("Id of the Linear comment the session will be created on."),
+  action: z16.enum(MOTHERSHIP_LINEAR_ACTIONS).describe("`ask` when the comment is a clarifying question, `start` when it is the complete task prompt.")
 });
-var mothershipLinearStartRequestSchema = z15.object({
-  issue_id: z15.string().describe("Linear issue id from the envelope's `issue_id`."),
-  agent_session_id: z15.string().describe("Existing Linear agent session id from the envelope's `agent_session_id`."),
-  prompt: z15.string().trim().min(1).describe("Complete task prompt for the coding workspace.")
+var mothershipLinearStartRequestSchema = z16.object({
+  issue_id: z16.string().describe("Linear issue id from the envelope's `issue_id`."),
+  agent_session_id: z16.string().describe("Existing Linear agent session id from the envelope's `agent_session_id`."),
+  prompt: z16.string().trim().min(1).describe("Complete task prompt for the coding workspace.")
 });
-var slackChannelIdSchema = z15.string().describe("Slack channel id from the envelope's `channel_id`.");
-var slackThreadTsSchema = z15.string().describe("Slack thread timestamp from the envelope's `thread_ts`.");
-var mothershipSlackSpawnRequestSchema = z15.object({
+var slackChannelIdSchema = z16.string().describe("Slack channel id from the envelope's `channel_id`.");
+var slackThreadTsSchema = z16.string().describe("Slack thread timestamp from the envelope's `thread_ts`.");
+var mothershipSlackSpawnRequestSchema = z16.object({
   channel_id: slackChannelIdSchema,
   thread_ts: slackThreadTsSchema,
-  message_ts: z15.string().describe("Timestamp of the Slack message that asked for the work (the envelope's `message_ts`). The server verifies this message and its author."),
-  user_id: z15.string().describe("Slack user id of that message's author (the envelope's `user_id`). The workspace is attributed to them."),
-  prompt: z15.string().describe("Complete task for the new workspace, written so it stands on its own."),
-  environment_id: z15.string().optional().describe(`Environment id from \`${REPLICAS_MCP_TOOLS.listEnvironments}\`. Pass it only when clearly confident it fits; omit it to let routing choose or ask the person.`)
+  message_ts: z16.string().describe("Timestamp of the Slack message that asked for the work (the envelope's `message_ts`). The server verifies this message and its author."),
+  user_id: z16.string().describe("Slack user id of that message's author (the envelope's `user_id`). The workspace is attributed to them."),
+  prompt: z16.string().describe("Complete task for the new workspace, written so it stands on its own."),
+  environment_id: z16.string().optional().describe(`Environment id from \`${REPLICAS_MCP_TOOLS.listEnvironments}\`. Pass it only when clearly confident it fits; omit it to let routing choose. If routing cannot choose, the call fails and nothing is posted, so pick one or ask the person.`)
 });
-var mothershipSlackRelayRequestSchema = z15.object({
+var mothershipSlackRelayRequestSchema = z16.object({
   channel_id: slackChannelIdSchema,
   thread_ts: slackThreadTsSchema,
-  message: z15.string().describe("The follow-up to deliver, combining every fresh message that belongs to this update."),
-  user_id: z15.string().optional().describe("Slack user id of the follow-up's author (the envelope's `user_id`), so it is attributed to them. Defaults to the thread's original requester."),
-  queue: z15.boolean().optional().describe("Set true only when the person explicitly asked for this to happen after the current task finishes. Delivers behind the active turn instead of interrupting it.")
+  message: z16.string().describe("The follow-up to deliver, combining every fresh message that belongs to this update."),
+  user_id: z16.string().optional().describe("Slack user id of the follow-up's author (the envelope's `user_id`), so it is attributed to them. Defaults to the thread's original requester."),
+  queue: z16.boolean().optional().describe("Set true only when the person explicitly asked for this to happen after the current task finishes. Delivers behind the active turn instead of interrupting it.")
 });
 var mothershipAutomationToolInputSchema = automationToolInputSchema.extend({
-  confirmation_channel_id: z15.string().describe("`channel_id` from the envelope of the Slack message that accepted the offer."),
-  confirmation_thread_ts: z15.string().describe("`thread_ts` from that message's envelope."),
-  confirmation_message_ts: z15.string().describe("`message_ts` from that message's envelope."),
-  confirmation_user_id: z15.string().describe("`user_id` from that message's envelope.")
+  confirmation_channel_id: z16.string().describe("`channel_id` from the envelope of the Slack message that accepted the offer."),
+  confirmation_thread_ts: z16.string().describe("`thread_ts` from that message's envelope."),
+  confirmation_message_ts: z16.string().describe("`message_ts` from that message's envelope."),
+  confirmation_user_id: z16.string().describe("`user_id` from that message's envelope.")
 });
 
 // ../shared/src/routes/plugin-catalog.ts
@@ -8570,7 +8595,7 @@ var MAX_CLIENT_STATE_REQUEST_BYTES = 5 * 1024 * 1024;
 var MAX_CLIENT_STATE_BYTES_PER_USER = 10 * 1024 * 1024;
 
 // ../shared/src/routes/workspaces.ts
-import { z as z16 } from "zod";
+import { z as z17 } from "zod";
 var WORKSPACE_STATUSES = ["active", "sleeping", "archived", "preparing", "error"];
 var WORKSPACE_STATUS_FILTERS = WORKSPACE_STATUSES.map((status) => status === "error" ? "failed" : status);
 var WORKSPACE_SORT_CHOICES = [
@@ -8594,56 +8619,56 @@ var DEFAULT_WORKSPACE_FILTERS = {
   activity: "any"
 };
 var ONE_DAY_MS = 24 * 60 * 60 * 1e3;
-var terminalRtcCandidateSchema = z16.object({ type: z16.literal("rtc-candidate"), candidate: z16.string(), mid: z16.string() });
-var terminalSocketServerMessageSchema = z16.discriminatedUnion("type", [
-  z16.object({ type: z16.literal("output"), data: z16.string() }),
-  z16.object({ type: z16.literal("rtc-answer"), sdp: z16.string() }),
+var terminalRtcCandidateSchema = z17.object({ type: z17.literal("rtc-candidate"), candidate: z17.string(), mid: z17.string() });
+var terminalSocketServerMessageSchema = z17.discriminatedUnion("type", [
+  z17.object({ type: z17.literal("output"), data: z17.string() }),
+  z17.object({ type: z17.literal("rtc-answer"), sdp: z17.string() }),
   terminalRtcCandidateSchema,
-  z16.object({ type: z16.literal("rtc-switch") })
+  z17.object({ type: z17.literal("rtc-switch") })
 ]);
 var TERMINAL_RTC_ICE_SERVER = "stun:stun.l.google.com:19302";
 
 // ../shared/src/routes/workspace-events.ts
-import { z as z17 } from "zod";
-var workspaceChangedEventSchema = z17.discriminatedUnion("type", [
-  z17.object({
-    type: z17.literal("workspace.changed"),
-    workspaceId: z17.string(),
-    completion: z17.object({
-      workspaceName: z17.string(),
-      completedAt: z17.string(),
-      processing: z17.boolean().optional()
+import { z as z18 } from "zod";
+var workspaceChangedEventSchema = z18.discriminatedUnion("type", [
+  z18.object({
+    type: z18.literal("workspace.changed"),
+    workspaceId: z18.string(),
+    completion: z18.object({
+      workspaceName: z18.string(),
+      completedAt: z18.string(),
+      processing: z18.boolean().optional()
     }).optional(),
-    ts: z17.string()
+    ts: z18.string()
   }),
-  z17.object({
-    type: z17.literal("workspace.chat.changed"),
-    workspaceId: z17.string(),
-    chatId: z17.string(),
-    ts: z17.string()
+  z18.object({
+    type: z18.literal("workspace.chat.changed"),
+    workspaceId: z18.string(),
+    chatId: z18.string(),
+    ts: z18.string()
   }),
-  z17.object({ type: z17.literal("presence.changed"), ts: z17.string() }),
-  z17.object({
-    type: z17.literal("mobile-testing.changed"),
-    workspaceId: z17.string(),
-    ts: z17.string()
+  z18.object({ type: z18.literal("presence.changed"), ts: z18.string() }),
+  z18.object({
+    type: z18.literal("mobile-testing.changed"),
+    workspaceId: z18.string(),
+    ts: z18.string()
   })
 ]);
 
 // ../shared/src/routes/presence.ts
-import { z as z18 } from "zod";
-var presenceStatusSchema = z18.enum(["online", "typing"]);
-var presenceLocationSchema = z18.object({
-  environmentId: z18.string().optional(),
-  workspaceId: z18.string().optional()
+import { z as z19 } from "zod";
+var presenceStatusSchema = z19.enum(["online", "typing"]);
+var presenceLocationSchema = z19.object({
+  environmentId: z19.string().optional(),
+  workspaceId: z19.string().optional()
 });
-var presenceEntrySchema = z18.object({
-  userId: z18.string(),
+var presenceEntrySchema = z19.object({
+  userId: z19.string(),
   status: presenceStatusSchema,
   location: presenceLocationSchema,
-  ts: z18.string()
+  ts: z19.string()
 });
-var updatePresenceRequestSchema = z18.object({
+var updatePresenceRequestSchema = z19.object({
   status: presenceStatusSchema,
   location: presenceLocationSchema.optional()
 });
@@ -8964,7 +8989,7 @@ function parseChatTranscriptArtifact(value) {
 }
 
 // ../shared/src/learned-skills.ts
-import { z as z19 } from "zod";
+import { z as z20 } from "zod";
 
 // ../shared/src/frontmatter.ts
 import { parse as parseYaml2 } from "yaml";
@@ -8987,8 +9012,8 @@ function parseFrontmatter(content) {
 var LEARNED_SKILLS_ROOT = `${SANDBOX_PATHS.REPLICAS_DIR}/learned-skills`;
 var LEARNED_SKILLS_MANIFEST_PATH = `${LEARNED_SKILLS_ROOT}/manifest.json`;
 var LEARNED_SKILL_DIR_PREFIX = "replicas-learned__";
-var learnedSkillsManifestSchema = z19.object({
-  skills: z19.array(z19.object({ name: z19.string(), sha256: z19.string() }))
+var learnedSkillsManifestSchema = z20.object({
+  skills: z20.array(z20.object({ name: z20.string(), sha256: z20.string() }))
 });
 
 // ../shared/src/skill-registry.ts
@@ -9030,6 +9055,7 @@ export {
   AGENT_CREDENTIAL_METHODS_IN_ORDER,
   describeCredential,
   agentCredentialSnapshotSchema,
+  isSameCredential,
   isAgentChatTurnActivityRecord,
   isAgentChatSkillActivityRecord,
   isAgentChatMcpActivityRecord,
@@ -9132,6 +9158,7 @@ export {
   decodePathSegments,
   buildCodeHostPrUrl,
   createUuidFromHex,
+  SANDBOX_SKILL_DIRS,
   HISTORY_ROOT,
   HISTORY_INDEX_FILENAME,
   extractErrorText,

package/dist/src/{chunk-TKYLRJF4.js → chunk-W3M6AME6.js}

@@ -3,18 +3,18 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   monolithRequest
-} from "./chunk-XYQGBMCF.js";
+} from "./chunk-MAFKR626.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-ZZ5OWSEB.js";
+} from "./chunk-W7DCWL4S.js";
 import {
   extractCommandProtectionCommandText,
   findCommandProtectionGitLookups,
   findGitCommitSignals,
   findPrMergeSignals,
   parseCommandProtectionRequest
-} from "./chunk-AXLQAMWY.js";
+} from "./chunk-VRMTJFZQ.js";
 
 // src/services/command-protection-service.ts
 import { readFile, stat } from "fs/promises";

package/dist/src/{chunk-ZZ5OWSEB.js → chunk-W7DCWL4S.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES
-} from "./chunk-AXLQAMWY.js";
+} from "./chunk-VRMTJFZQ.js";
 
 // src/utils/exec.ts
 import { exec, execFile } from "child_process";

package/dist/src/command-protection-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-TKYLRJF4.js";
-import "./chunk-XYQGBMCF.js";
-import "./chunk-ZZ5OWSEB.js";
+} from "./chunk-W3M6AME6.js";
+import "./chunk-MAFKR626.js";
+import "./chunk-W7DCWL4S.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-AXLQAMWY.js";
+import "./chunk-VRMTJFZQ.js";
 import "./chunk-VEQXQN22.js";
 
 // src/command-protection-hook.ts

package/dist/src/headless-agent.js

@@ -7,12 +7,12 @@ import {
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-IXGE52GO.js";
-import "./chunk-ZZ5OWSEB.js";
+} from "./chunk-K5CNOXH2.js";
+import "./chunk-W7DCWL4S.js";
 import {
   AGENT,
   headlessAgentRequestSchema
-} from "./chunk-AXLQAMWY.js";
+} from "./chunk-VRMTJFZQ.js";
 import "./chunk-VEQXQN22.js";
 
 // src/headless-agent.ts

package/dist/src/index.js

@@ -32,7 +32,7 @@ import {
   reportCommandProtectionBlock,
   resolveDiffBase,
   runGitCommand
-} from "./chunk-TKYLRJF4.js";
+} from "./chunk-W3M6AME6.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -57,7 +57,7 @@ import {
 } from "./chunk-P73LGPQO.js";
 import {
   publishedPullRequestUrls
-} from "./chunk-F7L43VMI.js";
+} from "./chunk-SR3TRBEI.js";
 import {
   BaseRefreshManager,
   CodexAspAuthMethodChangedError,
@@ -70,8 +70,8 @@ import {
   recordExhaustedCredential,
   refreshDelayMs,
   restartCodexAspHost,
-  routineRefreshExclusions
-} from "./chunk-N3QARJXC.js";
+  routineRefreshRequest
+} from "./chunk-FUHUBWBQ.js";
 import {
   ENGINE_ENV,
   monolithRequest,
@@ -79,16 +79,16 @@ import {
   readRuntimeEnvFile,
   reloadEngineEnv,
   setAgentCredentialSnapshot
-} from "./chunk-XYQGBMCF.js";
+} from "./chunk-MAFKR626.js";
 import {
   AspClient,
   getCodexModelProvider
-} from "./chunk-IXGE52GO.js";
+} from "./chunk-K5CNOXH2.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execAsync,
   execFileAsync
-} from "./chunk-ZZ5OWSEB.js";
+} from "./chunk-W7DCWL4S.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -164,6 +164,7 @@ import {
   REMOVED_MESSAGE_IDS_PAYLOAD_KEY,
   REPLICAS_CONFIG_FILENAMES,
   REPLICAS_RUNTIME_ENV_ALIASES,
+  SANDBOX_SKILL_DIRS,
   SUBAGENT_MCP_HARNESSES,
   SUBAGENT_MCP_SERVER_NAME,
   SUBAGENT_MCP_TOOLS,
@@ -261,6 +262,7 @@ import {
   isLatestChatHistoryPage,
   isNonEmptyString,
   isRecord,
+  isSameCredential,
   isSkillRegistryManifest,
   isTokenUsageCounts,
   isTokenUsageUploadRecord,
@@ -314,7 +316,7 @@ import {
   workspaceCredentialProviderSchema,
   workspaceTokenRequestSchema,
   workspaceTokenResponseSchema
-} from "./chunk-AXLQAMWY.js";
+} from "./chunk-VRMTJFZQ.js";
 import {
   cloneMcpConfig,
   ensureCompatibilityImports,
@@ -515,7 +517,7 @@ var require_lib = __commonJS({
   "../node_modules/.bun/which@5.0.0/node_modules/which/lib/index.js"(exports, module) {
     "use strict";
     var { isexe, sync: isexeSync } = require_index_min();
-    var { join: join41, delimiter: delimiter3, sep: sep2, posix } = __require("path");
+    var { join: join42, delimiter: delimiter3, sep: sep2, posix } = __require("path");
     var isWindows = process.platform === "win32";
     var rSlash = new RegExp(`[${posix.sep}${sep2 === posix.sep ? "" : sep2}]`.replace(/(\\)/g, "\\$1"));
     var rRel = new RegExp(`^\\.${rSlash.source}`);
@@ -544,7 +546,7 @@ var require_lib = __commonJS({
     var getPathPart = (raw, cmd) => {
       const pathPart = /^".*"$/.test(raw) ? raw.slice(1, -1) : raw;
       const prefix = !pathPart && rRel.test(cmd) ? cmd.slice(0, 2) : "";
-      return prefix + join41(pathPart, cmd);
+      return prefix + join42(pathPart, cmd);
     };
     var which = async (cmd, opt = {}) => {
       const { pathEnv, pathExt, pathExtExe } = getPathInfo(cmd, opt);
@@ -9493,7 +9495,7 @@ var ClaudeTokenManager = class extends BaseRefreshManager {
     return null;
   }
   async doRefresh(_config) {
-    await this.refreshWithRequest(routineRefreshExclusions("claude"));
+    await this.refreshWithRequest(routineRefreshRequest("claude"));
   }
   async switchCredentials(data) {
     await this.applyCredentialUpdate(++this.credentialGeneration, () => this.applyCredentialsResponse(data));
@@ -11717,7 +11719,7 @@ var AuthFallbackCoordinator = class {
         continue;
       }
       const applied = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS[this.provider] ?? exhausted;
-      if (applied.method === exhausted.method && applied.scope === exhausted.scope) {
+      if (isSameCredential(applied, exhausted)) {
         failed = true;
         continue;
       }
@@ -61928,7 +61930,8 @@ var ChatService = class {
 // src/services/repo-file-service.ts
 import { execFile as execFile7 } from "child_process";
 import { readFile as readFile20 } from "fs/promises";
-import { extname as extname3 } from "path";
+import { homedir as homedir14 } from "os";
+import { extname as extname3, join as join37 } from "path";
 
 // src/services/language-server-service.ts
 import { spawn as spawn6 } from "child_process";
@@ -62146,14 +62149,16 @@ function execGitAsync(args, cwd, timeoutMs) {
   });
 }
 var RepoFileService = class {
+  constructor(gitService2, homeDir = homedir14()) {
+    this.homeDir = homeDir;
+    this.gitService = gitService2;
+  }
+  homeDir;
   cache = /* @__PURE__ */ new Map();
   gitService;
   indexInflight = null;
   writeLock = new AsyncLock();
   languageServers = new LanguageServerService();
-  constructor(gitService2) {
-    this.gitService = gitService2;
-  }
   async search(params) {
     const { refresh = false } = params;
     let stale = false;
@@ -62198,7 +62203,15 @@ var RepoFileService = class {
   async readFile(repoName, filePath) {
     const resolved = await this.resolveFile(repoName, filePath);
     if (!resolved) return null;
-    const { fullPath, sizeBytes } = resolved;
+    const file = await this.readResolvedFile(repoName, filePath, resolved);
+    return typeof file?.content === "string" ? { ...file, revision: fileRevision(file.content) } : file;
+  }
+  /** Read-only: skill files carry no revision, so the viewer never offers to edit them. */
+  async readSkillFile(filePath) {
+    const resolved = await this.resolveSkillFile(filePath);
+    return resolved ? await this.readResolvedFile("", filePath, resolved) : null;
+  }
+  async readResolvedFile(repoName, filePath, { fullPath, sizeBytes }) {
     try {
       if (isBinaryExtension(filePath)) {
         const { kind, mimeType } = classifyCanvasFilename(filePath);
@@ -62257,8 +62270,7 @@ var RepoFileService = class {
         language: detectLanguageByPath(filePath),
         sizeBytes,
         binary: false,
-        tooLarge: false,
-        revision: fileRevision(content)
+        tooLarge: false
       };
     } catch {
       return null;
@@ -62330,6 +62342,16 @@ var RepoFileService = class {
     if (!repo) return null;
     return await resolveContainedFile(repo.path, filePath);
   }
+  async resolveSkillFile(filePath) {
+    const skillRoots = SANDBOX_SKILL_DIRS.map((dir) => join37(this.homeDir, dir));
+    if (!skillRoots.some((root) => filePath.startsWith(`${root}/`))) return null;
+    const repos = await this.gitService.listRepositories();
+    for (const root of [...skillRoots, ...repos.map((repo) => repo.path)]) {
+      const resolved = await resolveContainedFile(root, filePath);
+      if (resolved) return resolved.fullPath.split("/").includes(".git") ? null : resolved;
+    }
+    return null;
+  }
   async indexAll(refresh) {
     const repos = await this.gitService.listRepositories();
     for (const repo of repos) {
@@ -62395,20 +62417,20 @@ var RepoFileService = class {
 import { Hono } from "hono";
 import { z as z5 } from "zod";
 import { readdir as readdir11, stat as stat7, readFile as readFile23 } from "fs/promises";
-import { join as join39, resolve as resolve5 } from "path";
+import { join as join40, resolve as resolve5 } from "path";
 
 // src/services/warm-hooks-service.ts
 import { spawn as spawn7 } from "child_process";
 import { readFile as readFile22 } from "fs/promises";
 import { existsSync as existsSync19 } from "fs";
-import { join as join38 } from "path";
+import { join as join39 } from "path";
 
 // src/services/warm-hook-logs-service.ts
 import { mkdir as mkdir21, readFile as readFile21, writeFile as writeFile11, readdir as readdir10, appendFile as appendFile6, unlink as unlink4 } from "fs/promises";
-import { homedir as homedir14 } from "os";
-import { join as join37 } from "path";
-var LOGS_DIR2 = join37(homedir14(), ".replicas", "warm-hook-logs");
-var CURRENT_RUN_LOG = join37(LOGS_DIR2, "current-run.log");
+import { homedir as homedir15 } from "os";
+import { join as join38 } from "path";
+var LOGS_DIR2 = join38(homedir15(), ".replicas", "warm-hook-logs");
+var CURRENT_RUN_LOG = join38(LOGS_DIR2, "current-run.log");
 var GLOBAL_FILENAME = "global.json";
 function withPreview2(stored) {
   const preview = buildHookOutputPreview(stored.output);
@@ -62425,7 +62447,7 @@ var WarmHookLogsService = class {
       hookName: "organization",
       ...entry
     };
-    await writeFile11(join37(LOGS_DIR2, GLOBAL_FILENAME), `${JSON.stringify(log, null, 2)}
+    await writeFile11(join38(LOGS_DIR2, GLOBAL_FILENAME), `${JSON.stringify(log, null, 2)}
 `, "utf-8");
   }
   async saveEnvironmentHookLog(entry) {
@@ -62435,7 +62457,7 @@ var WarmHookLogsService = class {
       hookName: "environment",
       ...entry
     };
-    await writeFile11(join37(LOGS_DIR2, ENVIRONMENT_HOOK_LOG_FILENAME), `${JSON.stringify(log, null, 2)}
+    await writeFile11(join38(LOGS_DIR2, ENVIRONMENT_HOOK_LOG_FILENAME), `${JSON.stringify(log, null, 2)}
 `, "utf-8");
   }
   async saveRepoHookLog(repoName, entry) {
@@ -62445,7 +62467,7 @@ var WarmHookLogsService = class {
       hookName: repoName,
       ...entry
     };
-    await writeFile11(join37(LOGS_DIR2, repoHookLogFilename(repoName)), `${JSON.stringify(log, null, 2)}
+    await writeFile11(join38(LOGS_DIR2, repoHookLogFilename(repoName)), `${JSON.stringify(log, null, 2)}
 `, "utf-8");
   }
   async getAllLogs() {
@@ -62464,7 +62486,7 @@ var WarmHookLogsService = class {
         continue;
       }
       try {
-        const raw = await readFile21(join37(LOGS_DIR2, file), "utf-8");
+        const raw = await readFile21(join38(LOGS_DIR2, file), "utf-8");
         const stored = JSON.parse(raw);
         logs.push(withPreview2(stored));
       } catch {
@@ -62502,7 +62524,7 @@ var WarmHookLogsService = class {
   async getFullOutput(hookType, hookName) {
     const filename = hookType === "global" ? GLOBAL_FILENAME : hookType === "environment" ? ENVIRONMENT_HOOK_LOG_FILENAME : repoHookLogFilename(hookName);
     try {
-      const raw = await readFile21(join37(LOGS_DIR2, filename), "utf-8");
+      const raw = await readFile21(join38(LOGS_DIR2, filename), "utf-8");
       const stored = JSON.parse(raw);
       if (stored.hookType !== hookType || stored.hookName !== hookName) {
         return null;
@@ -62521,7 +62543,7 @@ var warmHookLogsService = new WarmHookLogsService();
 // src/services/warm-hooks-service.ts
 async function readRepoWarmHook(repoPath) {
   for (const filename of REPLICAS_CONFIG_FILENAMES) {
-    const configPath = join38(repoPath, filename);
+    const configPath = join39(repoPath, filename);
     if (!existsSync19(configPath)) {
       continue;
     }
@@ -63495,6 +63517,13 @@ function createV1Routes(deps) {
     }
     return c.json(result);
   });
+  app2.get("/skill-files/content", async (c) => {
+    const path7 = c.req.query("path");
+    if (!path7) return c.json(jsonError("path is required"), 400);
+    const result = await deps.repoFileService.readSkillFile(path7);
+    if (!result) return c.json(jsonError("File not found"), 404);
+    return c.json(result);
+  });
   app2.put("/repo-files/content", async (c) => {
     const repoName = c.req.query("repoName");
     const path7 = c.req.query("path");
@@ -63896,7 +63925,7 @@ data: ${JSON.stringify("Terminal session not found")}
       const logFiles = files.filter((f) => f.endsWith(".log"));
       const sessions = await Promise.all(
         logFiles.map(async (filename) => {
-          const filePath = join39(LOG_DIR, filename);
+          const filePath = join40(LOG_DIR, filename);
           const fileStat = await stat7(filePath);
           const sessionId = filename.replace(/\.log$/, "");
           return {
@@ -64122,8 +64151,8 @@ async function installWorkspaceSdk() {
 // src/services/git-push-tracker.ts
 import { mkdir as mkdir23, rm as rm5 } from "fs/promises";
 import { createServer as createServer2 } from "net";
-import { join as join40 } from "path";
-var SOCKET_PATH = join40(ENGINE_DIR2, "git-trace2.sock");
+import { join as join41 } from "path";
+var SOCKET_PATH = join41(ENGINE_DIR2, "git-trace2.sock");
 var MAX_LINE_LENGTH = 1024 * 1024;
 var listening = null;
 function startGitPushTracker() {

package/dist/src/post-tool-pr-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   publishedPullRequestUrls
-} from "./chunk-F7L43VMI.js";
+} from "./chunk-SR3TRBEI.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
 import {
   shouldRefreshPullRequests
-} from "./chunk-AXLQAMWY.js";
+} from "./chunk-VRMTJFZQ.js";
 import "./chunk-VEQXQN22.js";
 
 // src/services/post-tool-pr-notifier.ts

package/dist/src/subagent-mcp.js

@@ -9,7 +9,7 @@ import {
   spawnSubagentRequestSchema,
   subagentResponseSchema,
   waitSubagentRequestSchema
-} from "./chunk-AXLQAMWY.js";
+} from "./chunk-VRMTJFZQ.js";
 import "./chunk-VEQXQN22.js";
 
 // src/subagent-mcp.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.992",
+  "version": "0.1.994",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",

package/workspace-sdk/index.js

@@ -30,7 +30,8 @@ async function requestResponse(path, options = {}) {
   });
   if (response.ok) return response;
   const data = await parseResponse(response);
-  throw new Error(data && typeof data.error === 'string' ? data.error : `Replicas request failed (${response.status})`);
+  const message = typeof data?.error === 'string' ? data.error : data?.errors?.[0]?.message;
+  throw new Error(typeof message === 'string' ? message : `Replicas request failed (${response.status})`);
 }
 
 async function request(path, options = {}) {