@gobi-ai/cli 2.0.14 → 2.0.16

package/.claude-plugin/marketplace.json

@@ -4,12 +4,12 @@
     "name": "gobi-ai"
   },
   "description": "Claude Code plugin for the Gobi collaborative knowledge platform CLI",
-  "version": "2.0.14",
+  "version": "2.0.16",
   "plugins": [
     {
       "name": "gobi",
       "description": "Manage the Gobi collaborative knowledge platform from the command line. Publish vault profiles, create posts and replies, manage saved notes and posts, manage sessions, generate images and videos.",
-      "version": "2.0.14",
+      "version": "2.0.16",
       "author": {
         "name": "gobi-ai"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "gobi",
   "description": "Manage the Gobi collaborative knowledge platform from the command line",
-  "version": "2.0.14",
+  "version": "2.0.16",
   "author": {
     "name": "gobi-ai"
   },

package/dist/attachments.js

@@ -1,8 +1,103 @@
-import { existsSync, readFileSync, appendFileSync } from "fs";
+import { existsSync, readFileSync, appendFileSync, statSync } from "fs";
 import { EOL } from "os";
-import { join, extname } from "path";
+import { basename, join, extname, isAbsolute, resolve } from "path";
 import ignore from "ignore";
 import { WEBDRIVE_BASE_URL } from "./constants.js";
+import { apiPost } from "./client.js";
+// Best-effort extension → MIME mapping. Anything we don't recognize falls
+// back to `application/octet-stream`; the backend caps size per content-type
+// tier (5MB photos / 15MB GIFs / 512MB video) so it's the authority on what's
+// allowed. We're just trying to set a usable Content-Type for the S3 PUT.
+const POST_MEDIA_MIME_MAP = {
+    ".jpg": "image/jpeg",
+    ".jpeg": "image/jpeg",
+    ".png": "image/png",
+    ".gif": "image/gif",
+    ".webp": "image/webp",
+    ".heic": "image/heic",
+    ".heif": "image/heif",
+    ".avif": "image/avif",
+    ".svg": "image/svg+xml",
+    ".bmp": "image/bmp",
+    ".tiff": "image/tiff",
+    ".mp4": "video/mp4",
+    ".mov": "video/quicktime",
+    ".webm": "video/webm",
+    ".m4v": "video/x-m4v",
+    ".pdf": "application/pdf",
+};
+// X-style cap: 4 photos OR 1 GIF OR 1 video. Anything not photo/gif/video
+// is treated as "photo" for cap purposes so misclassified files still get
+// the 4-cap rather than slipping through unlimited.
+export function assertPostAttachmentMix(paths) {
+    let photos = 0;
+    let gifs = 0;
+    let videos = 0;
+    for (const p of paths) {
+        const ext = extname(p).toLowerCase();
+        if (ext === ".gif")
+            gifs += 1;
+        else if ([".mp4", ".mov", ".webm", ".m4v"].includes(ext))
+            videos += 1;
+        else
+            photos += 1;
+    }
+    if (videos > 1)
+        throw new Error("Only 1 video allowed per post");
+    if (gifs > 1)
+        throw new Error("Only 1 GIF allowed per post");
+    if (photos > 4)
+        throw new Error("Up to 4 photos allowed per post");
+    if (videos > 0 && (gifs > 0 || photos > 0)) {
+        throw new Error("A video can't be combined with other media");
+    }
+    if (gifs > 0 && (videos > 0 || photos > 0)) {
+        throw new Error("A GIF can't be combined with other media");
+    }
+}
+/**
+ * Upload a single local file as a post attachment.
+ * init (`POST /posts/upload-url`) → PUT to S3 → return `{ mediaUrl, mediaKey }`
+ * suitable for the `attachments` array on create-post.
+ */
+export async function uploadPostAttachment(filePath) {
+    const abs = isAbsolute(filePath) ? filePath : resolve(process.cwd(), filePath);
+    if (!existsSync(abs)) {
+        throw new Error(`Attachment not found: ${filePath}`);
+    }
+    const ext = extname(abs).toLowerCase();
+    const contentType = POST_MEDIA_MIME_MAP[ext] || "application/octet-stream";
+    const fileSize = statSync(abs).size;
+    const initResp = (await apiPost("/posts/upload-url", {
+        fileName: basename(abs),
+        contentType,
+        fileSize,
+    }));
+    const data = (initResp.data ?? initResp);
+    const uploadUrl = data.uploadUrl;
+    const mediaUrl = data.mediaUrl;
+    const mediaKey = data.mediaKey;
+    if (!uploadUrl || !mediaUrl || !mediaKey) {
+        throw new Error("Upload init returned an incomplete payload");
+    }
+    const body = readFileSync(abs);
+    const putRes = await fetch(uploadUrl, {
+        method: "PUT",
+        headers: { "Content-Type": contentType },
+        body,
+    });
+    if (!putRes.ok) {
+        throw new Error(`Failed to PUT ${filePath} to S3: HTTP ${putRes.status}`);
+    }
+    return { mediaUrl, mediaKey };
+}
+export async function uploadPostAttachments(paths) {
+    const out = [];
+    for (const p of paths) {
+        out.push(await uploadPostAttachment(p));
+    }
+    return out;
+}
 export function extractWikiLinks(content) {
     const seen = new Set();
     const results = [];

package/dist/commands/global.js

@@ -1,6 +1,6 @@
 import { apiGet, apiPost, apiPatch, apiDelete } from "../client.js";
 import { fetchDraftSummary, isJsonMode, jsonOut, readStdin, resolveVaultSlug, unwrapResp, } from "./utils.js";
-import { extractWikiLinks, uploadAttachments } from "../attachments.js";
+import { extractWikiLinks, uploadAttachments, uploadPostAttachments, assertPostAttachmentMix, } from "../attachments.js";
 import { getValidToken } from "../auth/manager.js";
 function readContent(value) {
     if (value === "-")
@@ -184,6 +184,7 @@ export function registerGlobalCommand(program) {
         .option("--vault-slug <vaultSlug>", "Attribute the post to this vault (sets authorVaultSlug). Defaults to your primary vault.")
         .option("--auto-attachments", "Upload wiki-linked [[files]] to webdrive before posting (also sets authorVaultSlug to that vault)")
         .option("--draft-id <draftId>", "Use this draft as the source of title and content (mutually exclusive with --title/--content/--rich-text). On success, links the post back by recording postId on draft.metadata so the client can render an 'Open post' button. The draft's vaultSlug seeds --vault-slug when not given explicitly.")
+        .option("--attach <file>", "Local media file to attach. Repeatable. X-style mix rule: up to 4 photos OR 1 GIF OR 1 video. Size ceilings: 5MB photos / 15MB GIFs / 512MB video.", (value, prev = []) => [...prev, value], [])
         .action(async (opts) => {
         if (opts.draftId) {
             if (opts.title || opts.content || opts.richText) {
@@ -230,6 +231,10 @@ export function registerGlobalCommand(program) {
         }
         if (authorVaultSlug)
             body.authorVaultSlug = authorVaultSlug;
+        if (opts.attach && opts.attach.length > 0) {
+            assertPostAttachmentMix(opts.attach);
+            body.attachments = await uploadPostAttachments(opts.attach);
+        }
         const resp = (await apiPost(`/posts`, body));
         const post = unwrapResp(resp);
         if (opts.draftId && post.id != null) {
@@ -331,6 +336,7 @@ export function registerGlobalCommand(program) {
         .option("--rich-text <richText>", "Rich-text JSON array (mutually exclusive with --content)")
         .option("--vault-slug <vaultSlug>", "Attribute the reply to this vault (sets authorVaultSlug). Also used as upload destination for --auto-attachments.")
         .option("--auto-attachments", "Upload wiki-linked [[files]] to webdrive before posting (also attributes the reply to that vault)")
+        .option("--attach <file>", "Local media file to attach to this reply. Repeatable. X-style mix rule: up to 4 photos OR 1 GIF OR 1 video. Size ceilings: 5MB photos / 15MB GIFs / 512MB video.", (value, prev = []) => [...prev, value], [])
         .action(async (postId, opts) => {
         if (!opts.content && !opts.richText) {
             throw new Error("Provide either --content or --rich-text.");
@@ -364,6 +370,10 @@ export function registerGlobalCommand(program) {
         }
         if (authorVaultSlug)
             body.authorVaultSlug = authorVaultSlug;
+        if (opts.attach && opts.attach.length > 0) {
+            assertPostAttachmentMix(opts.attach);
+            body.attachments = await uploadPostAttachments(opts.attach);
+        }
         const resp = (await apiPost(`/posts/${postId}/replies`, body));
         const reply = unwrapResp(resp);
         if (isJsonMode(global)) {

package/dist/commands/space.js

@@ -1,7 +1,7 @@
 import { apiGet, apiPost, apiPatch, apiDelete } from "../client.js";
 import { requireSpace, selectSpace, setSpaceRequirement, writeSpaceSetting, } from "./init.js";
 import { fetchDraftSummary, isJsonMode, jsonOut, readStdin, resolveSpaceSlug, resolveVaultSlug, unwrapResp, } from "./utils.js";
-import { extractWikiLinks, uploadAttachments } from "../attachments.js";
+import { extractWikiLinks, uploadAttachments, uploadPostAttachments, assertPostAttachmentMix, } from "../attachments.js";
 import { getValidToken } from "../auth/manager.js";
 function readContent(value) {
     if (value === "-")
@@ -319,6 +319,7 @@ export function registerSpaceCommand(program) {
         .option("--vault-slug <vaultSlug>", "Attribute the post to this vault (sets authorVaultId). Also used as upload destination for --auto-attachments.")
         .option("--space-slug <spaceSlug>", "Space slug (overrides .gobi/settings.yaml)")
         .option("--draft-id <draftId>", "Use this draft as the source of title and content (mutually exclusive with --title/--content/--rich-text). On success, links the post back by recording postId/spaceSlug on draft.metadata so the client can render an 'Open post' button. The draft's vaultSlug seeds --vault-slug when not given explicitly.")
+        .option("--attach <file>", "Local media file to attach. Repeatable. X-style mix rule: up to 4 photos OR 1 GIF OR 1 video. Size ceilings: 5MB photos / 15MB GIFs / 512MB video.", (value, prev = []) => [...prev, value], [])
         .action(async (opts) => {
         if (opts.draftId) {
             if (opts.title || opts.content || opts.richText) {
@@ -365,6 +366,10 @@ export function registerSpaceCommand(program) {
         }
         if (authorVaultSlug)
             body.authorVaultSlug = authorVaultSlug;
+        if (opts.attach && opts.attach.length > 0) {
+            assertPostAttachmentMix(opts.attach);
+            body.attachments = await uploadPostAttachments(opts.attach);
+        }
         const spaceSlug = resolveSpaceSlug(space, opts);
         const resp = (await apiPost(`/spaces/${spaceSlug}/posts`, body));
         const post = unwrapResp(resp);
@@ -473,6 +478,7 @@ export function registerSpaceCommand(program) {
         .option("--auto-attachments", "Upload wiki-linked [[files]] to webdrive before posting (also attributes the reply to that vault)")
         .option("--vault-slug <vaultSlug>", "Attribute the reply to this vault (sets authorVaultSlug). Also used as upload destination for --auto-attachments.")
         .option("--space-slug <spaceSlug>", "Space slug (overrides .gobi/settings.yaml)")
+        .option("--attach <file>", "Local media file to attach to this reply. Repeatable. X-style mix rule: up to 4 photos OR 1 GIF OR 1 video. Size ceilings: 5MB photos / 15MB GIFs / 512MB video.", (value, prev = []) => [...prev, value], [])
         .action(async (postId, opts) => {
         if (!opts.content && !opts.richText) {
             throw new Error("Provide either --content or --rich-text.");
@@ -506,6 +512,10 @@ export function registerSpaceCommand(program) {
         }
         if (authorVaultSlug)
             body.authorVaultSlug = authorVaultSlug;
+        if (opts.attach && opts.attach.length > 0) {
+            assertPostAttachmentMix(opts.attach);
+            body.attachments = await uploadPostAttachments(opts.attach);
+        }
         const spaceSlug = resolveSpaceSlug(space, opts);
         const resp = (await apiPost(`/spaces/${spaceSlug}/posts/${postId}/replies`, body));
         const msg = unwrapResp(resp);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gobi-ai/cli",
-  "version": "2.0.14",
+  "version": "2.0.16",
   "description": "CLI client for the Gobi collaborative knowledge platform",
   "license": "MIT",
   "type": "module",

package/skills/gobi-media/SKILL.md

@@ -40,18 +40,25 @@ Replace `<RATIO>` with the desired aspect ratio: `1:1`, `16:9`, `9:16`, `4:3`, o
 
 The `-o` flag implies `--wait` and downloads the image when done.
 
-**IMPORTANT: After downloading, show the image using Obsidian wiki-link syntax EXACTLY like this:**
+**Where you reference the downloaded file depends on what you're doing with it:**
 
-```
-![[media/<NAME>.png]]
-```
+- **Chat / vault note (vault is mounted, ![[wikilinks]] resolve):** use Obsidian wiki-link syntax:
+  ```
+  ![[media/<NAME>.png]]
+  ```
+- **Post or reply (any flow that goes through `gobi <scope> create-post` or `gobi <scope> create-reply`):** do NOT embed the image in `--content`. Pass the file as a first-class attachment:
+  ```bash
+  gobi space create-post --title "<TITLE>" --content "<BODY>" --attach media/<NAME>.png
+  gobi space create-reply <postId> --content "<BODY>" --attach media/<NAME>.png
+  ```
+  This uploads the file to the CDN and renders it as a slider on the post card. The `--attach` flag is repeatable; mix rule is **4 photos OR 1 GIF OR 1 video**.
 
-Do NOT use markdown image syntax `![](...)` or `gobi://` URLs. Always use `![[media/<NAME>.png]]`.
+  In particular, when you're answering a post-mention (`@gobi` / `@space:<slug>` on a thread) and need to send media, **call `gobi <scope> create-reply <postId> --attach <file>` yourself** — your text-only assistant body is auto-posted only if you don't call create-reply this turn, so calling it explicitly is the only way to land media on the thread.
 
 ### Key rules
 - Replace `<NAME>` with a descriptive slug — NEVER use example names like `sunset.png` literally.
 - `--name` is **optional** — auto-derived from prompt if omitted.
-- Do NOT use the `downloadUrl` from the response — it is a frontend path, not a direct download link.
+- Do NOT use the `downloadUrl` from the response — it is a Miraflow-internal path, not a public link. Always download with `-o` then either wiki-link (chat/vault) or `--attach` (post/reply).
 - `download-image` takes a **positional** jobId (NOT `--job-id`): `gobi media download-image <jobId>`
 - The `jobId` (or `id`) field is what you pass to `download-image` / `get-image-status` — NOT `mediaId`.
 
@@ -133,7 +140,7 @@ gobi --json media get-avatar-job-status <jobId> --wait
 ![[media/<NAME>.mp4]]
 ```
 
-Do NOT use markdown image/link syntax `![](...)` or `gobi://` URLs. Always use `![[media/<NAME>.mp4]]`.
+Do NOT use markdown image/link syntax `![](...)` or `gobi://` URLs in chat. For posts/replies use `--attach media/<NAME>.mp4` instead — see the image workflow above for details.
 
 ## Available Commands
 

package/skills/gobi-space/SKILL.md

@@ -51,6 +51,14 @@ Both `gobi space create-post` / `edit-post` and `gobi global create-post` / `edi
 
 > **Before using `--auto-attachments`, check that the target vault is published.** Run `gobi --json vault status` (or `gobi vault status --vault-slug <slug>`) and verify `isPublished: true`. Files uploaded to a non-public vault are stored on webdrive but are not reachable at `gobispace.com/@{vaultSlug}` — readers will see broken `[[wikilinks]]`. If the status reports unpublished, ask the user to run `gobi vault publish` first (it requires `title` and `description` in `PUBLISH.md`). See the **gobi-vault** skill.
 
+## Post media attachments (`--attach`)
+
+Separate from `--auto-attachments`, `gobi space create-post` and `gobi global create-post` accept `--attach <file>` (repeatable) for inline post media — the photos/GIF/video that render in-feed alongside the post body. The CLI uploads each file to S3 via `POST /posts/upload-url` and passes the resulting `{ mediaUrl, mediaKey }` array as the post's `attachments`.
+
+X-style mix rule (enforced client-side before upload): up to **4 photos** OR **1 GIF** OR **1 video** — they don't combine. Server-side ceilings: 5MB photos, 15MB GIFs, 512MB video.
+
+Use `--attach` for media you want shown in the post itself; use `--auto-attachments` for `[[wikilinks]]` to vault files referenced in the body.
+
 ## Public link formats
 
 Once a post is created, you can build a shareable URL from the response:

package/skills/gobi-space/references/global.md

@@ -79,6 +79,7 @@ Options:
   --auto-attachments        Upload wiki-linked [[files]] to webdrive before posting (also sets authorVaultSlug to that vault)
   --draft-id <draftId>      Use this draft as the source of title and content (mutually exclusive with --title/--content/--rich-text). On success, links the post back by recording postId on
                             draft.metadata so the client can render an 'Open post' button. The draft's vaultSlug seeds --vault-slug when not given explicitly.
+  --attach <file>           Local media file to attach. Repeatable. X-style mix rule: up to 4 photos OR 1 GIF OR 1 video. Size ceilings: 5MB photos / 15MB GIFs / 512MB video. (default: [])
   -h, --help                display help for command
 ```
 
@@ -121,6 +122,8 @@ Options:
   --rich-text <richText>    Rich-text JSON array (mutually exclusive with --content)
   --vault-slug <vaultSlug>  Attribute the reply to this vault (sets authorVaultSlug). Also used as upload destination for --auto-attachments.
   --auto-attachments        Upload wiki-linked [[files]] to webdrive before posting (also attributes the reply to that vault)
+  --attach <file>           Local media file to attach to this reply. Repeatable. X-style mix rule: up to 4 photos OR 1 GIF OR 1 video. Size ceilings: 5MB photos / 15MB GIFs / 512MB video. (default:
+                            [])
   -h, --help                display help for command
 ```
 

package/skills/gobi-space/references/space.md

@@ -125,6 +125,7 @@ Options:
   --space-slug <spaceSlug>  Space slug (overrides .gobi/settings.yaml)
   --draft-id <draftId>      Use this draft as the source of title and content (mutually exclusive with --title/--content/--rich-text). On success, links the post back by recording postId/spaceSlug on
                             draft.metadata so the client can render an 'Open post' button. The draft's vaultSlug seeds --vault-slug when not given explicitly.
+  --attach <file>           Local media file to attach. Repeatable. X-style mix rule: up to 4 photos OR 1 GIF OR 1 video. Size ceilings: 5MB photos / 15MB GIFs / 512MB video. (default: [])
   -h, --help                display help for command
 ```
 
@@ -170,6 +171,8 @@ Options:
   --auto-attachments        Upload wiki-linked [[files]] to webdrive before posting (also attributes the reply to that vault)
   --vault-slug <vaultSlug>  Attribute the reply to this vault (sets authorVaultSlug). Also used as upload destination for --auto-attachments.
   --space-slug <spaceSlug>  Space slug (overrides .gobi/settings.yaml)
+  --attach <file>           Local media file to attach to this reply. Repeatable. X-style mix rule: up to 4 photos OR 1 GIF OR 1 video. Size ceilings: 5MB photos / 15MB GIFs / 512MB video. (default:
+                            [])
   -h, --help                display help for command
 ```