replicas-cli 0.2.560 → 0.2.562

package/dist/index.cjs

@@ -23396,7 +23396,7 @@ If none of these apply, don't upload.
 
 \`replicas media upload\` is always the first delivery action. When the current task has an external destination, every other delivery step follows only after that command succeeds. For every file:
 
-1. First, run \`replicas media upload\` with the original file. Do not begin any destination upload until the command succeeds. This creates the canonical dashboard copy and prints the authenticated chat embed plus a per-file dashboard link.
+1. First, run \`replicas media upload\` with the original file. Do not begin any destination upload until the command succeeds. This creates the canonical dashboard copy and prints a chat embed plus a per-file dashboard link. With public access, the printed Forge embed is the chat embed and is also safe to use on GitHub.
 2. Include the printed embed line in the Replicas chat reply, followed by the matching **View in Replicas** link. HTML uses its printed page link instead of an image embed.
 3. Identify every destination in the task and attempt to upload the same original bytes there. Use the destination's inline representation from the table below; do not replace the file with a Replicas link.
 4. Put the **View in Replicas** dashboard link next to the destination embed as a secondary link.
@@ -23436,10 +23436,11 @@ replicas media upload /tmp/before.png /tmp/after.png --name "Before fix" --name
 
 Names are normalized to hyphen-case (spaces become hyphens, e.g. \`Login page\` is stored as \`login-page\`). Give every asset a **distinct** name \u2014 duplicates are not rejected, but Replicas keeps the first as-is and adds a \`-1\`, \`-2\` suffix to later collisions, which produces confusing lists, so pick unique names yourself.
 
-For each media file, the CLI prints two lines:
+For each media file, the CLI prints an embed line and a dashboard link:
 
-1. \`![filename](<api-url>)\` \u2014 the chat embed (renders inline in Replicas chat **only** \u2014 see below).
-2. \`View in Replicas: <deep-link>\` \u2014 a per-file dashboard URL of the form \`https://replicas.dev/workspaces/<workspace-id>?media=<media-id>\` that opens directly to that specific file.
+1. Default and organization access print \`Replicas chat embed: ![filename](<api-url>)\`; this authenticated URL renders inline in Replicas chat **only** \u2014 see below.
+2. Public access (\`--access public\` or \`--share\`) prints \`![filename](<public-url>)\` as the Forge embed instead. This is the public, stable bearer URL to paste into GitHub.
+3. \`View in Replicas: <deep-link>\` is a per-file dashboard URL of the form \`https://replicas.dev/workspaces/<workspace-id>?media=<media-id>\` that opens directly to that specific file.
 
 Match each "View in Replicas" line to the embed line directly above it \u2014 that's the deep link for that file.
 
@@ -23459,7 +23460,7 @@ Use public access only when the media must render without Replicas authenticatio
 replicas media upload screenshot.png --name "Login page" --access public
 \`\`\`
 
-\`--share\` remains an alias for \`--access public\`. Public access prints an additional \`Forge embed\` for image, video, or audio media, backed by an opt-in bearer URL. Anyone with that unguessable URL can view the asset until it is rotated or revoked. HTML pages only support organization access. Use \`replicas media share <media-id>\` to rotate a public media URL and \`replicas media revoke <media-id>\` to revoke it.
+\`--share\` remains an alias for \`--access public\`. Public access prints the raw \`Forge embed\` Markdown instead of the authenticated chat-only embed for image, video, or audio media, backed by an opt-in bearer URL. Anyone with that unguessable URL can view the asset until it is rotated or revoked. HTML pages only support organization access. Use \`replicas media share <media-id>\` to rotate a public media URL and \`replicas media revoke <media-id>\` to revoke it.
 
 ## The URLs the CLI gives you \u2014 and where each one is allowed
 
@@ -23467,7 +23468,7 @@ replicas media upload screenshot.png --name "Login page" --access public
 |---|---|---|
 | \`https://api.replicas.dev/v1/media/<id>\` (inside \`![\u2026](\u2026)\`) | Authenticated API redirect to a presigned blob \u2014 requires the Replicas chat session | **Only** in the Replicas chat reply. Nowhere else. |
 | \`https://replicas.dev/organizations/<organization-id>/media/<media-id>\` | Organization-only page printed by \`--access organization\` | Pull requests and other places where every viewer belongs to the Replicas organization. |
-| \`https://api.replicas.dev/v1/media/public/<id>/<token>\` | Opt-in public bearer URL printed by \`--access public\` or \`--share\` | GitHub embeds for image, video, or audio media. |
+| \`https://api.replicas.dev/v1/media/public/<id>/<token>\` | Opt-in public bearer URL printed by \`--access public\` or \`--share\` | The Replicas chat reply and GitHub embeds, for image, video, or audio media. |
 | \`https://replicas.dev/workspaces/<workspace-id>?media=<media-id>\` | Authenticated dashboard deep link that opens the media file in the workspace | Everywhere external: Slack, GitHub, GitLab, Linear, PR bodies, comments, emails. |
 
 ### NEVER link the API redirect URL outside the Replicas chat reply
@@ -24430,7 +24431,7 @@ var headlessFilesystemAgentResultSchema = external_exports.object({
 });
 
 // ../shared/src/cli-version.ts
-var CLI_VERSION = "0.2.560";
+var CLI_VERSION = "0.2.562";
 
 // ../shared/src/version.ts
 function compareVersions(v1, v2) {
@@ -30337,6 +30338,10 @@ var MEDIA_ACCESS_VALUES = ["organization", "public"];
 function publicMediaUrl(mediaId, token) {
   return `${MONOLITH_URL}/v1/media/public/${mediaId}/${token}`;
 }
+function formatMediaEmbed(fileName, mediaId, publicUrl) {
+  if (publicUrl) return `![${fileName}](${publicUrl})`;
+  return `Replicas chat embed: ![${fileName}](${MONOLITH_URL}/v1/media/${mediaId})`;
+}
 async function shareMedia(mediaId) {
   const { token } = await agentFetch(`/v1/engine/media/${mediaId}/share`, {
     method: "POST"
@@ -30437,22 +30442,11 @@ async function mediaUploadCommand(filePaths, options) {
     const result = results[i];
     if (result.status === "fulfilled") {
       const { fileName, media } = result.value;
-      if (media.kind === MEDIA_KIND.HTML) {
-        console.log(`HTML page: [${fileName}](${MONOLITH_URL}/v1/media/${media.id})`);
-      } else {
-        console.log(`![${fileName}](${MONOLITH_URL}/v1/media/${media.id})`);
-      }
-      if (options.access === "organization") {
-        console.log(
-          `Forge link (organization only): [View ${options.name?.[i] ?? fileName}](${getOrganizationMediaUrl(media.organization_id, media.id)})`
-        );
-      }
+      const shareResult = publicAccess ? shareResults[i] : void 0;
+      const publicUrl = shareResult?.status === "fulfilled" ? shareResult.value ?? void 0 : void 0;
       if (publicAccess) {
-        const shareResult = shareResults[i];
-        if (shareResult.status === "fulfilled" && shareResult.value) {
-          console.log(`Forge embed: ![${fileName}](${shareResult.value})`);
-        } else {
-          const error51 = shareResult.status === "rejected" ? shareResult.reason : new Error("Missing public share URL");
+        if (!publicUrl) {
+          const error51 = shareResult?.status === "rejected" ? shareResult.reason : new Error("Missing public share URL");
           failures.push({
             filePath: filePaths[i],
             operation: "share",
@@ -30460,6 +30454,16 @@ async function mediaUploadCommand(filePaths, options) {
           });
         }
       }
+      if (media.kind === MEDIA_KIND.HTML) {
+        console.log(`HTML page: [${fileName}](${MONOLITH_URL}/v1/media/${media.id})`);
+      } else if (!publicAccess || publicUrl) {
+        console.log(formatMediaEmbed(fileName, media.id, publicUrl));
+      }
+      if (options.access === "organization") {
+        console.log(
+          `Forge link (organization only): [View ${options.name?.[i] ?? fileName}](${getOrganizationMediaUrl(media.organization_id, media.id)})`
+        );
+      }
       if (config3?.workspace_id) {
         const deepLink = getWorkspaceDashboardUrl(config3.workspace_id, {
           mode: "media",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-cli",
-  "version": "0.2.560",
+  "version": "0.2.562",
   "description": "CLI for managing Replicas workspaces - SSH into cloud dev environments with automatic port forwarding",
   "main": "dist/index.cjs",
   "bin": {
@@ -18,6 +18,7 @@
     "dev": "bun run src/index.ts",
     "dev-pack": "bun run build && node scripts/pack-dev-tarball.mjs",
     "start": "node dist/index.cjs",
+    "test": "bun test",
     "prepublishOnly": "bun run build"
   },
   "keywords": [