replicas-cli 0.2.481 → 0.2.483

package/dist/index.mjs

@@ -8156,6 +8156,7 @@ var WORKSPACE_SIZES = ["small", "large"];
 var INVALID_WORKSPACE_SIZE_ERROR = `Invalid size: must be one of ${WORKSPACE_SIZES.join(", ")}`;
 
 // ../shared/src/urls.ts
+var DEFAULT_WEB_APP_URL = "https://tryreplicas.com";
 function getWorkspaceDashboardUrl(workspaceId, options = {}) {
   const { encodeWorkspaceId = true, mode, mediaId } = options;
   const workspaceIdValue = encodeWorkspaceId ? encodeURIComponent(workspaceId) : workspaceId;
@@ -8165,6 +8166,12 @@ function getWorkspaceDashboardUrl(workspaceId, options = {}) {
   const query = params.length > 0 ? `?${params.join("&")}` : "";
   return `https://tryreplicas.com/workspaces/${workspaceIdValue}${query}`;
 }
+function getOrganizationMediaPath(organizationId, mediaId) {
+  return `/organizations/${encodeURIComponent(organizationId)}/media/${encodeURIComponent(mediaId)}`;
+}
+function getOrganizationMediaUrl(organizationId, mediaId, webAppUrl = DEFAULT_WEB_APP_URL) {
+  return `${webAppUrl}${getOrganizationMediaPath(organizationId, mediaId)}`;
+}
 var PR_URL_REGEX = /github\.com\/([^/]+)\/([^/]+)\/pull\/(\d+)/;
 function parsePrUrl(url2) {
   const match = url2.match(PR_URL_REGEX);
@@ -8629,6 +8636,7 @@ GitHub does NOT have a public API for uploading images to PRs/issues. When you n
 - Do NOT use placeholder image URLs
 - Do NOT commit screenshots as files to the repository
 - Run \`replicas media upload <image> --name "<display name>" --share\` and put the printed \`Forge embed\` Markdown in the PR body or comment
+- For a self-contained HTML report, run \`replicas media upload <page.html> --name "<display name>" --access organization\` and put the printed \`Forge link\` Markdown in the PR body or comment. Organization members who are already signed in open it directly; others sign in and return to the page
 - For video, embed a shared poster image linked to the recording's **View in Replicas** URL; GitHub does not reliably render externally hosted video inline
 - Treat the public URL as an opt-in bearer capability; revoke it with \`replicas media revoke <media-id>\` only when the user asks or the media should stop rendering \u2014 revoking breaks embeds already posted on the PR
 - If you were triggered from Slack, also upload the image to the Slack thread so the user can see it directly
@@ -9230,17 +9238,18 @@ var LINEAR_ABILITY = {
 
 // ../shared/src/default-skills/replicas-agent/abilities/media.ts
 var SECTION8 = `### Media
-Share screenshots, screen recordings, generated diagrams, and audio clips inline in the Replicas chat and natively embedded in external messages.
+Share screenshots, screen recordings, generated diagrams, audio clips, and self-contained HTML pages through Replicas and external messages.
 
 **Reference:** \`references/MEDIA.md\`
 
 Use this when:
 - You produce a screenshot, recording, generated image, or audio clip the user should see
+- You produce a self-contained HTML report that should be linked from a pull request
 - You record video output (browser automation, screen capture) \u2014 including the recommended aspect ratio and FPS
 - You need to embed media in a Slack/Linear/GitHub message AND keep a referenceable copy in the Replicas dashboard`;
-var REFERENCE8 = `# Media (Screenshots, Recordings, Audio)
+var REFERENCE8 = `# Media (Screenshots, Recordings, Audio, HTML)
 
-This guide covers how to share screenshots, screen recordings, generated diagrams, and audio clips \u2014 both inline in the Replicas chat and natively embedded in external surfaces (Slack, Linear, GitHub).
+This guide covers how to share screenshots, screen recordings, generated diagrams, audio clips, and self-contained HTML pages through Replicas and external surfaces (Slack, Linear, GitHub).
 
 ## Prerequisites
 
@@ -9251,7 +9260,7 @@ The \`replicas\` CLI is pre-installed and authenticated in your workspace. No ad
 Upload to Replicas in these cases \u2014 and **only** these cases:
 
 1. **Media you produce.** Any screenshot, screen recording, generated diagram, or audio clip you create that the user might want to see. Upload before doing anything else with the file (analyzing, deleting, sending elsewhere). This applies even when you're also sending the file to Slack, Linear, GitHub, etc.
-2. **Files the user explicitly asks you to upload.** If the user sends or points at a file (image, video, audio) and asks you to upload it, run \`replicas media upload\`. Otherwise leave it alone \u2014 files in the workspace the user did not ask about should not be auto-uploaded as media.
+2. **Files the user explicitly asks you to upload.** If the user sends or points at a file (image, video, audio, HTML) and asks you to upload it, run \`replicas media upload\`. Otherwise leave it alone \u2014 files in the workspace the user did not ask about should not be auto-uploaded as media.
 3. **Anything you plan to share externally (Slack, Linear, GitHub, etc.).** Upload to Replicas *in addition to* the platform's native upload. Never as a replacement.
 
 If none of these apply, don't upload.
@@ -9280,28 +9289,39 @@ replicas media upload /tmp/before.png /tmp/after.png --name "Before fix" --name
 
 Names are normalized to hyphen-case (spaces become hyphens, e.g. \`Login page\` is stored as \`login-page\`). Give every asset a **distinct** name \u2014 duplicates are not rejected, but Replicas keeps the first as-is and adds a \`-1\`, \`-2\` suffix to later collisions, which produces confusing lists, so pick unique names yourself.
 
-For each file, the CLI prints two lines:
+For each media file, the CLI prints two lines:
 
 1. \`![filename](<api-url>)\` \u2014 the chat embed (renders inline in Replicas chat **only** \u2014 see below).
 2. \`View in Replicas: <deep-link>\` \u2014 a per-file dashboard URL of the form \`https://tryreplicas.com/workspaces/<workspace-id>?media=<media-id>\` that opens directly to that specific file.
 
 Match each "View in Replicas" line to the embed line directly above it \u2014 that's the deep link for that file.
 
-Pass \`--share\` only when the media must render on an external forge:
+HTML uploads print an \`HTML page\` Markdown link instead of an image embed.
+
+For an HTML page that should stay inside the Replicas organization, create an authenticated link:
 
 \`\`\`bash
-replicas media upload screenshot.png --name "Login page" --share
+replicas media upload recap.html --name "Visual recap" --access organization
 \`\`\`
 
-This prints an additional \`Forge embed\` Markdown line backed by an opt-in public bearer URL. Anyone with that unguessable URL can view the asset until it is rotated or revoked. Use \`replicas media share <media-id>\` to rotate it and \`replicas media revoke <media-id>\` to revoke it.
+The printed \`Forge link (organization only)\` opens a dedicated page. Signed-in organization members go straight to it; signed-out members sign in and return to the page.
 
-## The two URLs the CLI gives you \u2014 and where each one is allowed
+Use public access only when the media must render without Replicas authentication:
+
+\`\`\`bash
+replicas media upload screenshot.png --name "Login page" --access public
+\`\`\`
+
+\`--share\` remains an alias for \`--access public\`. Public access prints an additional \`Forge embed\` for media or \`Forge link\` for HTML, backed by an opt-in bearer URL. Anyone with that unguessable URL can view the asset until it is rotated or revoked. Use \`replicas media share <media-id>\` to rotate it and \`replicas media revoke <media-id>\` to revoke it.
+
+## The URLs the CLI gives you \u2014 and where each one is allowed
 
 | URL | What it is | Where it's allowed |
 |---|---|---|
 | \`https://api.tryreplicas.com/v1/media/<id>\` (inside \`![\u2026](\u2026)\`) | Authenticated API redirect to a presigned blob \u2014 requires the Replicas chat session | **Only** in the Replicas chat reply. Nowhere else. |
-| \`https://api.tryreplicas.com/v1/media/public/<id>/<token>\` | Opt-in public bearer URL printed by \`--share\` | GitHub image embeds only. |
-| \`https://tryreplicas.com/workspaces/<workspace-id>?media=<media-id>\` | Public dashboard deep link that opens the media file in the workspace | Everywhere external \u2014 Slack, GitHub, Linear, PR bodies, comments, emails. |
+| \`https://tryreplicas.com/organizations/<organization-id>/media/<media-id>\` | Organization-only page printed by \`--access organization\` | Pull requests and other places where every viewer belongs to the Replicas organization. |
+| \`https://api.tryreplicas.com/v1/media/public/<id>/<token>\` | Opt-in public bearer URL printed by \`--access public\` or \`--share\` | GitHub image embeds and intentionally public HTML page links. |
+| \`https://tryreplicas.com/workspaces/<workspace-id>?media=<media-id>\` | Authenticated dashboard deep link that opens the media file in the workspace | Everywhere external \u2014 Slack, GitHub, Linear, PR bodies, comments, emails. |
 
 ### NEVER link the API redirect URL outside the Replicas chat reply
 
@@ -9314,9 +9334,9 @@ This rule has no exceptions:
 - \u274C Never link to it from any external doc, email, or external chat.
 - \u274C Never include it as a "backup link" in case the dashboard link breaks \u2014 it will always break externally.
 
-### ALWAYS link the dashboard URL \u2014 never the API URL \u2014 when referencing media externally
+### ALWAYS link a Replicas web URL \u2014 never the authenticated API URL \u2014 when referencing media externally
 
-When you reference an uploaded file from anywhere outside the Replicas chat reply, the link must be the dashboard form:
+For an organization-only HTML page, use the \`Forge link\` printed by \`--access organization\`. For other authenticated media references, use the dashboard form:
 
 \`\`\`
 https://tryreplicas.com/workspaces/<workspace-id>?media=<media-id>
@@ -9330,7 +9350,7 @@ Always render as a markdown / mrkdwn hyperlink labeled **View in Replicas** \u20
 
 ## In your Replicas chat reply
 
-Include each markdown embed line **verbatim** where you want that file to render inline. The chat substitutes each one with an embedded image, video, or audio player. Multiple embeds can appear in a single reply.
+Include each markdown embed line **verbatim** where you want that file to render inline. The chat substitutes each one with an embedded image, video, or audio player. For HTML, use the \`HTML page\` or \`View in Replicas\` link instead. Multiple embeds can appear in a single reply.
 
 After (or alongside) the embeds, include a \`[View in Replicas](<deep-link>)\` hyperlink for each file using the per-file dashboard URL from the CLI. This lets the user open the specific item in the workspace.
 
@@ -9476,6 +9496,8 @@ GitHub does not reliably render arbitrary external videos as inline players. For
 
 Public forge shares are bearer capabilities. For private repositories, create one only when the user asked for inline PR media. Revoke with \`replicas media revoke <media-id>\` **only** when the user asks or the media should intentionally stop rendering \u2014 never as routine post-task cleanup, since revoking breaks every embed already posted on the PR.
 
+For a self-contained HTML report, upload it with \`--access organization\` and put the printed \`Forge link\` Markdown in the PR body or comment. GitHub cannot render the page inline, so use the normal link rather than image syntax. Use \`--access public\` only when the user explicitly wants unauthenticated access.
+
 Do **not** commit screenshots to the repo, use placeholder URLs, expose the authenticated \`/v1/media/<id>\` URL, or automate GitHub's undocumented browser upload flow.
 
 ### GitLab: native inline screenshots and videos
@@ -9510,8 +9532,9 @@ Auto-detected from the filename extension:
 | \`png\`, \`jpg\`, \`jpeg\`, \`webp\` | image |
 | \`mp4\`, \`webm\` | video |
 | \`mp3\`, \`wav\` | audio |
+| \`html\`, \`htm\` | html |
 
-For other extensions, pass \`--kind image|video|audio\` explicitly. The kind applies to every file in that invocation, so group files of the same kind together:
+For other extensions, pass \`--kind image|video|audio|html\` explicitly. The kind applies to every file in that invocation, so group files of the same kind together:
 
 \`\`\`bash
 replicas media upload diagram.svg --name "Architecture diagram" --kind image
@@ -9520,15 +9543,16 @@ replicas media upload chart-a.svg chart-b.svg --name "Latency chart" --name "Err
 
 ## Options
 
-- \`--kind <image|video|audio>\` \u2014 override auto-detection
+- \`--kind <image|video|audio|html>\` \u2014 override auto-detection
 - \`--name <name>\`: required display name shown in the dashboard, one per file in order
 - \`--session-id <id>\` \u2014 associate the upload with a specific session
-- \`--share\`: create a revocable public bearer URL for a forge image embed
+- \`--access organization|public\`: create an organization-only page link or a public bearer URL
+- \`--share\`: alias for \`--access public\`
 `;
 var MEDIA_ABILITY = {
   label: "Media",
-  description: "Share screenshots, recordings, generated images, and audio clips.",
-  bullet: "- Producing or showing the user any media \u2014 screenshots, screen recordings, generated images or diagrams, audio clips \u2014 including in your Replicas chat reply, PR descriptions/comments, and other external platforms",
+  description: "Share screenshots, recordings, generated images, audio clips, and HTML pages.",
+  bullet: "- Producing or showing the user any media \u2014 screenshots, screen recordings, generated images or diagrams, audio clips, or HTML recap pages \u2014 including in your Replicas chat reply, PR descriptions/comments, and other external platforms",
   section: SECTION8,
   referenceFile: { name: "MEDIA.md", content: REFERENCE8 }
 };
@@ -10117,7 +10141,7 @@ function formatTurnElapsed(ms) {
 }
 
 // ../shared/src/cli-version.ts
-var CLI_VERSION = "0.2.481";
+var CLI_VERSION = "0.2.483";
 
 // ../shared/src/version.ts
 function compareVersions(v1, v2) {
@@ -27491,9 +27515,10 @@ var EMAIL_TEMPLATE_KEYS = [...EMAIL_KEYS, ...MANUAL_EMAIL_TEMPLATE_KEYS];
 var MEDIA_KIND = {
   IMAGE: "image",
   VIDEO: "video",
-  AUDIO: "audio"
+  AUDIO: "audio",
+  HTML: "html"
 };
-var MEDIA_KINDS = [MEDIA_KIND.IMAGE, MEDIA_KIND.VIDEO, MEDIA_KIND.AUDIO];
+var MEDIA_KINDS = [MEDIA_KIND.IMAGE, MEDIA_KIND.VIDEO, MEDIA_KIND.AUDIO, MEDIA_KIND.HTML];
 var MAX_ENGINE_LOG_BYTES = 50 * 1024 * 1024;
 
 // ../shared/src/sse.ts
@@ -30526,6 +30551,7 @@ async function previewRemoveCommand(workspaceId, options) {
 // src/commands/media.ts
 import fs4 from "fs";
 import path5 from "path";
+var MEDIA_ACCESS_VALUES = ["organization", "public"];
 function publicMediaUrl(mediaId, token) {
   return `${MONOLITH_URL}/v1/media/public/${mediaId}/${token}`;
 }
@@ -30537,12 +30563,15 @@ async function shareMedia(mediaId) {
 }
 function mediaInfo(ext) {
   const { kind, mimeType } = classifyCanvasFilename(`.${ext}`);
-  if (kind !== "image" && kind !== "video" && kind !== "audio") return void 0;
+  if (kind !== "image" && kind !== "video" && kind !== "audio" && kind !== "html") return void 0;
   return { kind, contentType: mimeType };
 }
 function isMediaKind(value) {
   return MEDIA_KINDS.some((kind) => kind === value);
 }
+function isMediaAccess(value) {
+  return MEDIA_ACCESS_VALUES.some((access) => access === value);
+}
 function resolveKind(ext, override) {
   if (override) {
     if (!isMediaKind(override)) {
@@ -30590,6 +30619,12 @@ async function mediaUploadCommand(filePaths, options) {
   if (options.kind && !isMediaKind(options.kind)) {
     throw new Error(`Invalid kind '${options.kind}'. Must be one of: ${MEDIA_KINDS.join(", ")}`);
   }
+  if (options.access && !isMediaAccess(options.access)) {
+    throw new Error(`Invalid access '${options.access}'. Must be one of: ${MEDIA_ACCESS_VALUES.join(", ")}`);
+  }
+  if (options.share && options.access) {
+    throw new Error("Pass either --share or --access, not both. --share is an alias for --access public.");
+  }
   const names = options.name ?? [];
   if (names.length !== filePaths.length) {
     throw new Error(
@@ -30600,17 +30635,36 @@ async function mediaUploadCommand(filePaths, options) {
     throw new Error("--name must not be empty.");
   }
   const results = await Promise.allSettled(filePaths.map((p, i) => uploadOne(p, names[i], options)));
+  const publicAccess = options.share || options.access === "public";
+  const shareResults = publicAccess ? await Promise.allSettled(
+    results.map(
+      (result) => result.status === "fulfilled" ? shareMedia(result.value.media.id) : Promise.resolve(null)
+    )
+  ) : [];
   const config3 = readAgentConfig();
   const failures = [];
   for (let i = 0; i < results.length; i++) {
     const result = results[i];
     if (result.status === "fulfilled") {
       const { fileName, media } = result.value;
-      console.log(`![${fileName}](${MONOLITH_URL}/v1/media/${media.id})`);
-      if (options.share) {
-        try {
-          console.log(`Forge embed: ![${fileName}](${await shareMedia(media.id)})`);
-        } catch (error51) {
+      if (media.kind === MEDIA_KIND.HTML) {
+        console.log(`HTML page: [${fileName}](${MONOLITH_URL}/v1/media/${media.id})`);
+      } else {
+        console.log(`![${fileName}](${MONOLITH_URL}/v1/media/${media.id})`);
+      }
+      if (options.access === "organization") {
+        console.log(
+          `Forge link (organization only): [View ${options.name?.[i] ?? fileName}](${getOrganizationMediaUrl(media.organization_id, media.id)})`
+        );
+      }
+      if (publicAccess) {
+        const shareResult = shareResults[i];
+        if (shareResult.status === "fulfilled" && shareResult.value) {
+          console.log(
+            media.kind === MEDIA_KIND.HTML ? `Forge link: [View ${options.name?.[i] ?? fileName}](${shareResult.value})` : `Forge embed: ![${fileName}](${shareResult.value})`
+          );
+        } else {
+          const error51 = shareResult.status === "rejected" ? shareResult.reason : new Error("Missing public share URL");
           failures.push({
             filePath: filePaths[i],
             operation: "share",
@@ -35537,13 +35591,13 @@ if (isAgentMode()) {
       process.exit(1);
     }
   });
-  const media = program.command("media").description("Share workspace media (screenshots, videos, audio) inline in chat");
-  media.command("upload <files...>").description("Upload one or more screenshot, video, or audio files. Multiple files are uploaded concurrently. Prints a markdown embed per file for the assistant reply.").option("-k, --kind <kind>", "Media kind: image, video, or audio (inferred from extension if omitted)").option("-s, --session-id <id>", "Session ID to associate the asset with").option(
+  const media = program.command("media").description("Share workspace media and HTML pages");
+  media.command("upload <files...>").description("Upload one or more image, video, audio, or HTML files. Multiple files are uploaded concurrently.").option("-k, --kind <kind>", "Media kind: image, video, audio, or html (inferred from extension if omitted)").option("-s, --session-id <id>", "Session ID to associate the asset with").option(
     "-n, --name <name>",
     "Required human-facing display name shown in the dashboard. Pass one --name per file, in order.",
     (value, previous) => [...previous, value],
     []
-  ).option("--share", "Create an opt-in public forge embed URL for each asset").action(async (files, options) => {
+  ).option("--access <access>", "Link access: organization (sign-in required) or public (bearer URL)").option("--share", "Alias for --access public").action(async (files, options) => {
     try {
       await mediaUploadCommand(files, options);
     } catch (error51) {
@@ -35555,7 +35609,7 @@ if (isAgentMode()) {
       process.exit(1);
     }
   });
-  media.command("share <mediaId>").description("Create or rotate a public forge embed URL for uploaded media").action(async (mediaId) => {
+  media.command("share <mediaId>").description("Create or rotate a public forge URL for uploaded media").action(async (mediaId) => {
     try {
       await mediaShareCommand(mediaId);
     } catch (error51) {
@@ -35565,7 +35619,7 @@ if (isAgentMode()) {
       process.exit(1);
     }
   });
-  media.command("revoke <mediaId>").description("Revoke the public forge embed URL for uploaded media").action(async (mediaId) => {
+  media.command("revoke <mediaId>").description("Revoke the public forge URL for uploaded media").action(async (mediaId) => {
     try {
       await mediaRevokeCommand(mediaId);
     } catch (error51) {
@@ -35575,7 +35629,7 @@ if (isAgentMode()) {
       process.exit(1);
     }
   });
-  media.command("list").description("List media uploaded for this workspace").option("-k, --kind <kind>", "Filter by kind: image, video, or audio").option("-l, --limit <n>", "Page size (default 50, max 200)").option("-p, --page <n>", "Page number (default 1)").action(async (options) => {
+  media.command("list").description("List media uploaded for this workspace").option("-k, --kind <kind>", "Filter by kind: image, video, audio, or html").option("-l, --limit <n>", "Page size (default 50, max 200)").option("-p, --page <n>", "Page number (default 1)").action(async (options) => {
     try {
       await mediaListCommand(options);
     } catch (error51) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-cli",
-  "version": "0.2.481",
+  "version": "0.2.483",
   "description": "CLI for managing Replicas workspaces - SSH into cloud dev environments with automatic port forwarding",
   "main": "dist/index.mjs",
   "bin": {