@buildinternet/uploads 0.48.1 → 0.50.0

package/README.md

@@ -27,6 +27,8 @@ uploads put ./ui.png --frame browser --frame-url "https://app.example"
 uploads put ./after.png --pr 123
 uploads put ./capture-2026-…Z.png --pr 123 --name hero.png   # clean leaf, stable path
 uploads put ./shot.png --pr 123 --name hero.png --dry-run --format url  # preview URL, no upload
+uploads put --url https://cdn.example/shot.png --pr 123
+uploads put --url http://localhost:4321/shot.png
 uploads gallery create --title "Release screenshots"
 uploads put ./after.png --gallery gal_example
 # custom metadata (queryable): page URL, in-app path, which surface
@@ -196,7 +198,7 @@ Config layers (first match wins): CLI flags → env vars → `--env-file` → `~
 
 ## MCP server
 
-`uploads mcp` serves the Model Context Protocol over stdio (newline-delimited JSON-RPC, no extra dependencies). Tools include file operations plus public gallery workflows: `gallery_create`, `gallery_get`, `gallery_add`, `gallery_link`, and `gallery_find_by_reference`. Gallery tools return API-provided canonical URLs and never need GitHub credentials. The remaining stdio tools are `put`, `attach`, `list`, `delete`, `get_metadata`, `set_metadata`, `find_files`, `usage`, `reconcile`, `purge_expired`, `comment`, `health`, and `doctor` — with the same config resolution and defaults, plus a per-call `workspace` argument. `put` and `attach` accept a `metadata` param (same `gh.*` auto-injection as the CLI's `attach`); `get_metadata`, `set_metadata`, and `find_files` mirror `uploads meta get` / `meta set` / `find`. Interactive/credential commands (`setup`, `login`, `admin`, `config`) are not exposed. A token isn't required to start the server; auth errors surface per tool call (`health` needs no auth).
+`uploads mcp` serves the Model Context Protocol over stdio (newline-delimited JSON-RPC, no extra dependencies). Tools include file operations plus public gallery workflows: `gallery_create`, `gallery_get`, `gallery_add`, `gallery_link`, and `gallery_find_by_reference`. Gallery tools return API-provided canonical URLs and never need GitHub credentials. The remaining stdio tools are `put`, `attach`, `list`, `delete`, `get_metadata`, `set_metadata`, `find_files`, `usage`, `reconcile`, `purge_expired`, `comment`, `whoami`, and `doctor` — with the same config resolution and defaults, plus a per-call `workspace` argument. `put` and `attach` accept a `metadata` param (same `gh.*` auto-injection as the CLI's `attach`); `get_metadata`, `set_metadata`, and `find_files` mirror `uploads meta get` / `meta set` / `find`. Interactive/credential commands (`setup`, `login`, `admin`, `config`) are not exposed. A token isn't required to start the server; auth errors surface per tool call (`whoami` needs no auth).
 
 ```json
 { "command": "uploads", "args": ["--env-file", "/path/to/.env", "mcp"] }

package/dist/cli-help.js

@@ -106,6 +106,7 @@ ${section(style, "Examples:")}
   ${style.command("uploads whoami")}
   ${style.command("uploads put")} ./shot.png --pr 123 --name hero.png
   ${style.command("uploads put")} ./after.png --pr 123
+  ${style.command("uploads put")} --url https://cdn.example/shot.png --pr 123
   ${style.command("uploads put")} ./bug.png --issue 45
   ${style.command("uploads put")} ./shot.png --meta path=/settings --state after
   ${style.command("uploads attach")} ./before.png ./after.png
@@ -155,6 +156,7 @@ ${section(style, "Examples:")}
   ${style.command("uploads whoami")}
   ${style.command("uploads put")} ./shot.png --pr 123 --name hero.png
   ${style.command("uploads put")} ./after.png --pr 123
+  ${style.command("uploads put")} --url https://cdn.example/shot.png --pr 123
   ${style.command("uploads put")} ./bug.png --issue 45 --repo myorg/myapp
   ${style.command("uploads put")} ./shot.png --dry-run --format url
   ${style.command("uploads put")} ./shot.png --meta path=/settings --state after

package/dist/client.d.ts

@@ -441,6 +441,8 @@ export interface UsageResult {
     uploadsRemaining?: number;
     /** Bytes still on hosted storage (shared-lane residue). */
     sharedBytes?: number;
+    /** Objects still on hosted storage (shared-lane residue). */
+    sharedObjects?: number;
     /** "shared" = BYO bucket active: the storage cap meters only hosted
      * residue; the customer's own bucket is unmetered. */
     storageBudgetBasis?: "total" | "shared";

package/dist/commands/completion.js

@@ -124,7 +124,10 @@ ${subMaps.join("\n")}
 
   if [[ "$cur" == -* ]]; then
     case "$cmd" in
-      put|attach)
+      put)
+        COMPREPLY=( $(compgen -W "\${put_flags[*]} --url" -- "$cur") )
+        ;;
+      attach)
         COMPREPLY=( $(compgen -W "\${put_flags[*]}" -- "$cur") )
         ;;
       screenshot)
@@ -284,6 +287,7 @@ function fishScript() {
             continue;
         lines.push(`complete -c uploads -n '__fish_seen_subcommand_from put attach' -l ${flag.slice(2)}`);
     }
+    lines.push(`complete -c uploads -n '__fish_seen_subcommand_from put' -l url -r`);
     for (const flag of SCREENSHOT_FLAGS) {
         if (!flag.startsWith("--"))
             continue;

package/dist/commands/mcp.js

@@ -10,7 +10,7 @@ const MCP_HELP = `uploads [globals] mcp
 
 Serve the Model Context Protocol (MCP) over stdio for agent clients. Tools
 mirror the CLI commands: put, attach, list, delete, usage, reconcile,
-purge_expired, comment, health, doctor.
+purge_expired, comment, whoami, doctor.
 Global flags before "mcp" (--api-url, --token, --workspace, --env-file)
 configure every tool call; a per-call "workspace" argument overrides
 --workspace, like the CLI's per-command flag.

package/dist/commands.d.ts

@@ -350,7 +350,16 @@ export type PutUploadItem = PutResult & {
  */
 export declare function uploadPuts(opts: {
     client: UploadsClient;
-    files: readonly string[];
+    files?: readonly string[];
+    /**
+     * In-memory bodies (CLI `--url`, MCP `contentUrl`). Mutually exclusive
+     * with `files`. `source` is the failure/progress label (the URL).
+     */
+    byteSources?: readonly {
+        bytes: Uint8Array;
+        filename: string;
+        source: string;
+    }[];
     /** Single-file --name leaf override. */
     nameOverride?: string;
     /** Single-file --key. */

package/dist/commands.js

@@ -8,6 +8,7 @@ import { buildUploadMarkdown } from "./embed.js";
 import { readLocalRepoCommentConfig, resolveCommentOptions } from "./comment-config.js";
 import { urlForGithubEmbed } from "./public-urls.js";
 import { UploadsError } from "./errors.js";
+import { fetchUploadSource, resolveUploadFilename } from "./fetch-upload-source.js";
 import { writeJson, writeStdout } from "./io.js";
 import { imageFactsFromBytes } from "./image-facts.js";
 import { parseMetaFlags, validateMetaMap } from "./metadata.js";
@@ -94,8 +95,12 @@ export function readFileArg(fileArg) {
 }
 // --- put ---
 const PUT_HELP = `uploads put <file...> [options]
+uploads put --url <url> [options]
 
 Upload one or more images for GitHub embeds. Use "-" for stdin (single file only).
+Pass --url (repeatable) to fetch a file instead of a local path. Public HTTPS,
+or http://localhost / 127.0.0.1 / *.localhost on this machine. Other private
+hosts are rejected. The filename comes from the URL path, or --name.
 
 Multiple files upload in parallel (bounded concurrency). One bad file does not
 block the rest; multi-file JSON is { uploads, failures } (exit 1 when any failed).
@@ -135,6 +140,7 @@ MARKDOWN prefers embedUrl for GitHub. Override: UPLOADS_EMBED_PUBLIC_BASE_URL.
 Options:
   --key <key>           Object key (default: <prefix>/<repo>/<ref>/<name>-<hash>.<ext>). Single file only
   --name <leaf>         Clean key leaf + default alt (no '/'); keeps --pr/default path. Single file only. Not with --key
+  --url <url>           Fetch this URL and upload its body (repeatable). Public HTTPS, or http://localhost on the CLI. Not with file arguments
   --destination <id>    Typed root: screenshots | gh | f (sets --prefix)
   --prefix <path>       Key prefix (default: screenshots, or UPLOADS_DEFAULT_PREFIX)
   --repo <owner/repo>   Repo segment (default: git remote, or UPLOADS_DEFAULT_REPO)
@@ -201,6 +207,8 @@ Examples:
   uploads put ./shot.png --pr 128 --name hero.webp --dry-run --format url
   uploads put ./after.png --gallery gal_example
   uploads put ./shot.png --meta path=/settings --state after --app web
+  uploads put --url https://cdn.example/shot.png --pr 128 --name hero.png
+  uploads put --url http://localhost:4321/shot.png
 `;
 /**
  * Turns a pr/issue pair (+ optional repo) into a GhTarget; undefined when
@@ -641,6 +649,13 @@ export async function syncAttachmentsComment(client, target, run, workspace, opt
         // byte-identical.
         const path = metadata?.path;
         const state = metadata?.state;
+        // Server-derived image dimensions (parity with the bot path's
+        // COMMENT_META_KEYS hydration): finite positive numbers only, field
+        // omitted entirely when neither parses.
+        const imgWidth = Number(metadata?.["image.width"]);
+        const imgHeight = Number(metadata?.["image.height"]);
+        const hasImgWidth = Number.isFinite(imgWidth) && imgWidth > 0;
+        const hasImgHeight = Number.isFinite(imgHeight) && imgHeight > 0;
         return {
             key,
             url,
@@ -649,6 +664,14 @@ export async function syncAttachmentsComment(client, target, run, workspace, opt
             ...(path || state
                 ? { meta: { ...(path ? { path } : {}), ...(state ? { state } : {}) } }
                 : {}),
+            ...(hasImgWidth || hasImgHeight
+                ? {
+                    imageMeta: {
+                        ...(hasImgWidth ? { width: imgWidth } : {}),
+                        ...(hasImgHeight ? { height: imgHeight } : {}),
+                    },
+                }
+                : {}),
         };
     }));
     const galleries = [];
@@ -1027,13 +1050,21 @@ function errorDetail(err) {
  * Same partial-failure shape as uploadAttachments.
  */
 export async function uploadPuts(opts) {
-    if (opts.files.length > 1 && opts.files.some((f) => f === "-")) {
+    const files = opts.files ?? [];
+    const byteSources = opts.byteSources ?? [];
+    if (files.length > 0 && byteSources.length > 0) {
+        throw new UsageError("internal: uploadPuts files and byteSources are mutually exclusive");
+    }
+    const count = files.length + byteSources.length;
+    if (count === 0)
+        throw new UsageError("put requires at least one file");
+    if (count > 1 && files.some((f) => f === "-")) {
         throw new UsageError("stdin (-) cannot be combined with multiple file arguments");
     }
-    if (opts.files.length > 1 && opts.explicitKey) {
+    if (count > 1 && opts.explicitKey) {
         throw new UsageError("--key cannot be combined with multiple files");
     }
-    if (opts.files.length > 1 && opts.nameOverride) {
+    if (count > 1 && opts.nameOverride) {
         throw new UsageError("--name cannot be combined with multiple files");
     }
     // Resolved once for the whole batch (issue #631) — never per file.
@@ -1048,18 +1079,33 @@ export async function uploadPuts(opts) {
                 branch: opts.ghBranchTarget.branch,
             })
             : undefined;
-    const slots = await mapBounded(opts.files, opts.concurrency ?? UPLOAD_BATCH_CONCURRENCY, async (file) => {
+    const items = byteSources.length > 0
+        ? byteSources.map((s) => ({
+            source: s.source,
+            filename: opts.nameOverride ?? s.filename,
+            bytes: s.bytes,
+        }))
+        : files.map((file) => ({
+            source: file,
+            path: file,
+        }));
+    const slots = await mapBounded(items, opts.concurrency ?? UPLOAD_BATCH_CONCURRENCY, async (item) => {
+        const file = item.source;
         try {
-            const sourceName = opts.nameOverride ??
+            const bytes = item.bytes ?? readFileArg(item.path ?? file);
+            const sourceName = item.filename ??
+                opts.nameOverride ??
                 (file === "-"
                     ? opts.explicitKey
                         ? basename(opts.explicitKey)
                         : "stdin.bin"
                     : basename(file));
-            const bytes = readFileArg(file);
             // Sidecar manifest from a prior `screenshot --out` of this exact file
-            // (issue #469 lever 2) — see mergeSidecarMeta. Not applicable to stdin.
-            const metadata = file !== "-" ? mergeSidecarMeta(file, bytes, opts.metadata) : opts.metadata;
+            // (issue #469 lever 2) — see mergeSidecarMeta. Not applicable to stdin
+            // or URL fetches.
+            const metadata = item.path && item.path !== "-"
+                ? mergeSidecarMeta(item.path, bytes, opts.metadata)
+                : opts.metadata;
             const { result, prepared, markdown, sentMetadata } = await uploadPreparedImage(opts.client, bytes, sourceName, {
                 frame: opts.frame,
                 optimize: opts.optimize,
@@ -1883,12 +1929,23 @@ export async function runPut(ctx, args, help = false, run = execRunner) {
         return 0;
     }
     const files = parsed.positionals;
-    if (files.length === 0) {
-        throw new UsageError("put requires at least one file", {
+    if (parsed.flags.get("--url") === true) {
+        throw new UsageError("missing value for --url", {
+            example: "uploads put --url https://cdn.example/shot.png --pr 123",
+        });
+    }
+    const urlArgs = flagValues(parsed.flags, "--url");
+    if (files.length > 0 && urlArgs.length > 0) {
+        throw new UsageError("--url cannot be combined with file arguments", {
+            example: "uploads put --url https://cdn.example/shot.png --pr 123",
+        });
+    }
+    if (files.length === 0 && urlArgs.length === 0) {
+        throw new UsageError("put requires at least one file or --url", {
             example: "uploads put ./shot.png --pr 123",
         });
     }
-    const multi = files.length > 1;
+    const multi = files.length > 1 || urlArgs.length > 1;
     // Resolved early (issue #700): both the auto-PR opt-out default and the
     // `--no-git`-gated staging/auto-PR detection below need it before the rest
     // of put's flag parsing.
@@ -2135,36 +2192,77 @@ export async function runPut(ctx, args, help = false, run = execRunner) {
     const logHuman = !ctx.quiet && format === "human";
     if (logHuman) {
         if (multi) {
-            process.stderr.write(`>> ${dryRun ? "dry run for" : "uploading"} ${files.length} files\n`);
+            const n = files.length > 0 ? files.length : urlArgs.length;
+            process.stderr.write(`>> ${dryRun ? "dry run for" : "uploading"} ${n} files\n`);
         }
         else {
-            const fileArg = files[0];
+            const fileArg = files[0] ?? urlArgs[0];
             process.stderr.write(`>> ${dryRun ? "dry run" : "uploading"} ${fileArg === "-" ? "stdin" : fileArg}\n`);
         }
         if (attachedRef)
             process.stderr.write(`>> attached to ${attachedRef}\n`);
     }
-    const { uploads, failures, firstError, sentMetadata } = await uploadPuts({
-        client: ctx.client,
-        files,
-        nameOverride: nameFlag,
-        explicitKey: keyHint,
-        ghTarget: effectiveGhTarget,
-        ghBranchTarget: stagingTarget,
-        prefix: resolvedPrefix ?? defaults.prefix,
-        repo: flagString(parsed.flags, "--repo") ?? defaults.repo,
-        ref: flagString(parsed.flags, "--ref") ?? defaults.ref,
-        deriveRepoFromGit: !noGit,
-        contentType: contentTypeOverride,
-        dryRun,
-        replace: replaceFlag,
-        optimize: optimizeOpts,
-        frame: frameOpts,
-        metadata,
-        deriveImageFacts: derivedMetaEnabled(parsed.flags, defaults),
-        alt: altFlag,
-        width,
-    });
+    let byteSources;
+    const urlFetchFailures = [];
+    let urlFetchFirstError;
+    if (urlArgs.length > 0) {
+        byteSources = [];
+        for (const raw of urlArgs) {
+            try {
+                const filename = resolveUploadFilename(raw, !multi ? nameFlag : undefined, "--url", {
+                    allowLoopback: true,
+                });
+                const bytes = await fetchUploadSource(raw, {
+                    label: "--url",
+                    userAgent: "uploads.sh/cli",
+                    allowLoopback: true,
+                });
+                byteSources.push({ bytes, filename, source: raw });
+            }
+            catch (err) {
+                urlFetchFirstError ??= err;
+                urlFetchFailures.push({ file: raw, error: errorDetail(err) });
+            }
+        }
+    }
+    let uploads;
+    let failures;
+    let firstError;
+    let sentMetadata;
+    if (byteSources && byteSources.length === 0) {
+        uploads = [];
+        failures = urlFetchFailures;
+        firstError = urlFetchFirstError;
+        sentMetadata = [];
+    }
+    else {
+        const batch = await uploadPuts({
+            client: ctx.client,
+            files: byteSources ? undefined : files,
+            byteSources,
+            nameOverride: byteSources ? undefined : nameFlag,
+            explicitKey: keyHint,
+            ghTarget: effectiveGhTarget,
+            ghBranchTarget: stagingTarget,
+            prefix: resolvedPrefix ?? defaults.prefix,
+            repo: flagString(parsed.flags, "--repo") ?? defaults.repo,
+            ref: flagString(parsed.flags, "--ref") ?? defaults.ref,
+            deriveRepoFromGit: !noGit,
+            contentType: contentTypeOverride,
+            dryRun,
+            replace: replaceFlag,
+            optimize: optimizeOpts,
+            frame: frameOpts,
+            metadata,
+            deriveImageFacts: derivedMetaEnabled(parsed.flags, defaults),
+            alt: altFlag,
+            width,
+        });
+        uploads = batch.uploads;
+        failures = [...urlFetchFailures, ...batch.failures];
+        firstError = urlFetchFirstError ?? batch.firstError;
+        sentMetadata = batch.sentMetadata;
+    }
     // Single-file total failure: rethrow so CLI exit codes stay auth/network-aware.
     if (uploads.length === 0 && failures.length > 0 && !multi) {
         throw firstError instanceof Error ? firstError : new Error(String(firstError));

package/dist/comment-render.generated.d.ts

@@ -107,6 +107,11 @@ export interface AttachmentItem {
         width?: number;
         height?: number;
     };
+    /** Server-derived pixel dimensions for an image (never client-settable). */
+    imageMeta?: {
+        width?: number;
+        height?: number;
+    };
 }
 /** A public gallery linked to the PR or issue whose managed comment is syncing. */
 export interface GalleryCommentItem {
@@ -144,6 +149,11 @@ export declare function attachmentPairWidth(density?: AttachmentDensity): number
  * only affects managed-comment auto layout; other callers leave it `"dense"`.
  */
 export declare function attachmentImageWidth(filename: string, density?: AttachmentDensity): number;
+/**
+ * Icons and other small assets: both dimensions known and no edge above this
+ * flow inline at natural size rather than each becoming a full row.
+ */
+export declare const SMALL_ASSET_MAX_EDGE = 200;
 /**
  * Render the one marker-owned GitHub comment. When there are no galleries this
  * intentionally preserves the legacy attachment-only body byte-for-byte.

package/dist/comment-render.generated.js

@@ -183,19 +183,32 @@ function formatDuration(seconds) {
     return `${h}:${String(m).padStart(2, "0")}:${ss}`;
 }
 /**
- * Display width for a video poster. Real dimensions only *select* among the
- * density table's tiers — a raw 1920 would blow out the comment column — and
- * the result is capped at the real width so a small clip is never upscaled.
+ * Display width for an image or video-poster embed. Real dimensions only
+ * *select* among the density table's tiers — a raw 1920 would blow out the
+ * comment column — and the result is capped at the real width so a small
+ * asset is never upscaled into a blurry tile. Without dims (either missing),
+ * falls back to the filename heuristic exactly, keeping dimension-less
+ * renders byte-identical to before dims existed.
  */
-function posterImageWidth(videoMeta, filename, density = "dense") {
-    const w = videoMeta?.width ?? 0;
-    const h = videoMeta?.height ?? 0;
+function naturalMediaWidth(dims, filename, density = "dense") {
+    const w = dims?.width ?? 0;
+    const h = dims?.height ?? 0;
     if (w <= 0 || h <= 0)
         return attachmentImageWidth(filename, density);
     const table = WIDTH_BY_DENSITY[density];
     const chosen = h > w ? table.portrait : w / h >= 16 / 9 ? table.wide : table.default;
     return Math.min(chosen, w);
 }
+/**
+ * Icons and other small assets: both dimensions known and no edge above this
+ * flow inline at natural size rather than each becoming a full row.
+ */
+export const SMALL_ASSET_MAX_EDGE = 200;
+function isSmallAsset(dims) {
+    const w = dims?.width ?? 0;
+    const h = dims?.height ?? 0;
+    return w > 0 && h > 0 && Math.max(w, h) <= SMALL_ASSET_MAX_EDGE;
+}
 function escapeHtmlAttr(s) {
     return s.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;");
 }
@@ -360,7 +373,7 @@ function renderPairCell(item, label, options, density) {
     const name = item.key.slice(item.key.lastIndexOf("/") + 1);
     const src = item.embedUrl ?? item.url;
     const link = item.pageUrl ?? item.url;
-    const autoPx = Math.min(attachmentImageWidth(name, density), attachmentPairWidth(density));
+    const autoPx = Math.min(naturalMediaWidth(item.imageMeta, name, density), attachmentPairWidth(density));
     const w = resolvedWidth(autoPx, options);
     const alt = escapeHtmlAttr(name);
     const href = escapeHtmlAttr((link ?? src));
@@ -480,7 +493,7 @@ export function attachmentsCommentBody(items, galleries = [], marker = ATTACHMEN
         }
         if (isPosterVideo) {
             inlinedImages++;
-            const autoPx = posterImageWidth(item.videoMeta, name, density);
+            const autoPx = naturalMediaWidth(item.videoMeta, name, density);
             const w = resolvedWidth(autoPx, options);
             const href = escapeHtmlAttr(link ?? item.posterUrl);
             lines.push(`<a href="${href}">${imgTag(w, escapeHtmlAttr(name), escapeHtmlAttr(item.posterUrl))}</a>`);
@@ -496,10 +509,53 @@ export function attachmentsCommentBody(items, galleries = [], marker = ATTACHMEN
             lines.push(parts.join(" · "), "");
         }
         else if (isImage) {
+            // Small-asset flow layout: consecutive captionless small images (icons)
+            // join onto one line so GitHub flows them horizontally at natural size
+            // instead of stacking a giant column per icon. Auto mode only — a
+            // numeric imageWidth override or "full" keeps today's one-per-row form.
+            const smallGroupable = (candidate, i) => {
+                if (options.imageWidth !== "auto")
+                    return false;
+                if (consumedByPair.has(i) || partnerOf.has(i))
+                    return false;
+                if (!isSmallAsset(candidate.imageMeta))
+                    return false;
+                if (metaCaptionValues(candidate.meta, options).length > 0)
+                    return false;
+                const n = candidate.key.slice(candidate.key.lastIndexOf("/") + 1);
+                const s = candidate.embedUrl ?? candidate.url;
+                return Boolean(s) && inferContentType(n).startsWith("image/");
+            };
+            if (smallGroupable(item, idx)) {
+                const group = [item];
+                let j = idx + 1;
+                // Each grouped image still counts toward maxInlineImages.
+                while (j < sorted.length &&
+                    inlinedImages + group.length < options.maxInlineImages &&
+                    smallGroupable(sorted[j], j)) {
+                    group.push(sorted[j]);
+                    j++;
+                }
+                if (group.length > 1) {
+                    inlinedImages += group.length;
+                    lines.push(group
+                        .map((g) => {
+                        const gName = g.key.slice(g.key.lastIndexOf("/") + 1);
+                        const gSrc = (g.embedUrl ?? g.url);
+                        const gHref = escapeHtmlAttr((g.pageUrl ?? g.url ?? gSrc));
+                        // Natural width — a small asset is never upscaled.
+                        const gW = g.imageMeta?.width;
+                        return `<a href="${gHref}">${imgTag(gW, escapeHtmlAttr(gName), escapeHtmlAttr(gSrc))}</a>`;
+                    })
+                        .join(" "), "");
+                    idx = j - 1;
+                    continue;
+                }
+            }
             inlinedImages++;
             // Markdown ![]() has no width control — phone frames become full-column giants.
             // img src uses embed host when available (Camo revalidates); click-through prefers the file page.
-            const autoPx = attachmentImageWidth(name, density);
+            const autoPx = naturalMediaWidth(item.imageMeta, name, density);
             const w = resolvedWidth(autoPx, options);
             const alt = escapeHtmlAttr(name);
             const href = escapeHtmlAttr(link ?? src);

package/dist/fetch-upload-source.d.ts

@@ -0,0 +1,35 @@
+export declare const FETCH_UPLOAD_SOURCE_TIMEOUT_MS = 15000;
+export declare const FETCH_UPLOAD_SOURCE_MAX_REDIRECTS = 5;
+/** Client-side cap when the caller does not pass a workspace policy ceiling. */
+export declare const FETCH_UPLOAD_SOURCE_DEFAULT_MAX_BYTES: number;
+export interface FetchableUploadUrlOptions {
+    /**
+     * CLI / stdio MCP only. Permit loopback (`localhost`, `*.localhost`,
+     * `127.0.0.0/8`, `::1`) and `http` on those hosts. LAN, link-local, and
+     * `.internal` stay rejected. Hosted MCP must not set this.
+     */
+    allowLoopback?: boolean;
+}
+export interface FetchUploadSourceOptions extends FetchableUploadUrlOptions {
+    maxBytes?: number;
+    fetch?: typeof fetch;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+    /** Human label in errors (`--url`, `contentUrl`). */
+    label?: string;
+    userAgent?: string;
+}
+/** Parse and reject URLs we will not fetch. Used on the original URL and every redirect. */
+export declare function assertFetchableUploadUrl(raw: string, label?: string, opts?: FetchableUploadUrlOptions): URL;
+/** Filename leaf from a URL path (`https://cdn.example/a/shot.png?x=1` → `shot.png`). */
+export declare function filenameFromUploadUrl(url: URL): string | undefined;
+/** `filename` if given, else the URL path leaf. Throws USAGE when neither works. */
+export declare function resolveUploadFilename(rawUrl: string, filename: string | undefined, label?: string, opts?: FetchableUploadUrlOptions): string;
+/**
+ * GET `url` and return the body bytes, capped at `maxBytes`.
+ *
+ * Redirects are followed manually so each hop is re-validated (scheme, no
+ * credentials, host policy). A public origin cannot redirect onto loopback
+ * even when `allowLoopback` is set. Auth headers are never forwarded.
+ */
+export declare function fetchUploadSource(raw: string, opts?: FetchUploadSourceOptions): Promise<Uint8Array>;