replicas-cli 0.2.728 → 0.2.729

package/dist/index.cjs

@@ -22513,10 +22513,15 @@ var TEAM_PLAN = PLANS.team;
 var ENTERPRISE_PLAN = PLANS.enterprise;
 
 // ../shared/src/analytics/types.ts
+var credentialAccountSchema = external_exports.object({
+  ownerName: external_exports.string().optional(),
+  email: external_exports.string().optional()
+});
 var agentCredentialSnapshotSchema = external_exports.object({
   method: external_exports.enum(CREDENTIAL_METHOD),
   scope: external_exports.enum(CREDENTIAL_SCOPE),
-  revision: external_exports.string().optional()
+  revision: external_exports.string().optional(),
+  account: credentialAccountSchema.optional()
 });
 function isAuthMethod(value) {
   return typeof value === "string" && Object.values(CREDENTIAL_METHOD).some((method) => method === value);
@@ -22528,7 +22533,7 @@ function isCredentialScope(value) {
 // ../shared/src/workspace-credentials.ts
 var WORKSPACE_CREDENTIAL_PROVIDERS = ["claude", "codex"];
 var workspaceCredentialProviderSchema = external_exports.enum(WORKSPACE_CREDENTIAL_PROVIDERS);
-var workspaceCredentialSelectionSchema = agentCredentialSnapshotSchema.omit({ revision: true });
+var workspaceCredentialSelectionSchema = agentCredentialSnapshotSchema.omit({ revision: true, account: true });
 var createWorkspaceCredentialSchema = workspaceCredentialSelectionSchema.extend({
   provider: external_exports.enum(VALID_CODING_AGENT_PROVIDERS)
 }).refine(({ provider, method }) => agentCredentialMethods(provider).includes(method), {
@@ -22916,6 +22921,8 @@ var CHAT_INTERRUPTED_EVENT_TYPE = "replicas-interrupted";
 var AUTH_FALLBACK_EVENT_TYPE = "auth-fallback";
 function coerceAuthFallbackPayload(payload) {
   const { provider, reason, exhaustedMethod, exhaustedScope, candidateMethod, candidateScope, status, detail } = payload;
+  const exhaustedAccount = credentialAccountSchema.safeParse(payload.exhaustedAccount).data;
+  const candidateAccount = credentialAccountSchema.safeParse(payload.candidateAccount).data;
   if (typeof provider !== "string" || !isValidCodingAgentProvider(provider) || reason !== "rate_limit" && reason !== "out_of_credits" || !isAuthMethod(exhaustedMethod) || !isAuthMethod(candidateMethod) || !isCredentialScope(candidateScope) || status !== "switched" && status !== "failed") {
     return null;
   }
@@ -22924,8 +22931,10 @@ function coerceAuthFallbackPayload(payload) {
     reason,
     exhaustedMethod,
     ...isCredentialScope(exhaustedScope) ? { exhaustedScope } : {},
+    ...exhaustedAccount ? { exhaustedAccount } : {},
     candidateMethod,
     candidateScope,
+    ...candidateAccount ? { candidateAccount } : {},
     status,
     ...typeof detail === "string" && detail ? { detail } : {}
   };
@@ -23736,7 +23745,7 @@ gh pr review 123 --request-changes --body "Changes needed"
 
 ## Media in GitHub workflows
 
-Media delivery is owned by \`references/MEDIA.md\`. Read its GitHub section before adding screenshots, recordings, diagrams, or HTML reports to a pull request, issue, review comment, or commit; it covers public Forge embeds for images and recording previews, organization-only HTML links, and the required **View in Replicas** link.
+Media delivery is owned by \`references/MEDIA.md\`. Read its GitHub section before adding screenshots, recordings, diagrams, or HTML reports to a pull request, issue, review comment, or commit; it covers the public links every image upload prints, recording previews, organization-only HTML links, and the required **View in Replicas** link.
 `;
 var GITHUB_ABILITY = {
   label: "GitHub",
@@ -23947,11 +23956,11 @@ If none of these apply, don't upload.
 
 \`replicas media upload\` is always the first delivery action. When the current task has an external destination, every other delivery step follows only after that command succeeds. For every file:
 
-1. First, run \`replicas media upload\` with the original file. Do not begin any destination upload until the command succeeds. This creates the canonical dashboard copy and prints a chat embed plus a per-file dashboard link. With public access, the printed Forge embed is the chat embed and is also safe to use on GitHub.
+1. First, run \`replicas media upload\` with the original file. Do not begin any destination upload until the command succeeds. This creates the canonical dashboard copy and prints an embed plus a per-file dashboard link. Every image gets a public link, so its printed embed works in chat and on GitHub.
 2. Include the printed embed line in the Replicas chat reply, followed by **View in Canvas** using the matching per-file dashboard URL. HTML uses its printed page link instead of an image embed.
-3. Identify every destination in the task and use its inline representation from the table below. Slack, Linear, and GitLab require an upload of the same original bytes; GitHub uses the public Forge embed.
+3. Identify every destination in the task and use its inline representation from the table below. Slack, Linear, and GitLab require an upload of the same original bytes; GitHub uses the image's printed public embed.
 4. Put the **View in Replicas** dashboard link next to the destination embed as a secondary link.
-5. Check each destination response. If its upload or Forge share fails, say so explicitly and keep the dashboard link; never claim that a dashboard link is an inline embed.
+5. Check each destination response. If its upload or public link fails, say so explicitly and keep the dashboard link; never claim that a dashboard link is an inline embed.
 
 | Destination | Required file delivery | Inline result |
 |---|---|---|
@@ -23959,7 +23968,7 @@ If none of these apply, don't upload.
 | Slack | \`files.getUploadURLExternal\` \u2192 raw-byte POST \u2192 \`files.completeUploadExternal\` | Uploaded file in the channel or thread |
 | Linear | \`fileUpload\` mutation \u2192 presigned upload \u2192 issue/comment mutation | Returned \`assetUrl\` in Markdown |
 | GitLab | Project \`/uploads\` endpoint with the original bytes | Returned GitLab Markdown |
-| GitHub | Replicas public Forge share for an image or recording poster | Printed Forge embed, linked to the recording when needed |
+| GitHub | Printed public embed for an image or recording poster | Printed embed, linked to the recording when needed |
 
 The dashboard link is the subtitle and jump-back path. It is never a substitute for the destination embed.
 
@@ -23989,8 +23998,8 @@ Names are normalized to hyphen-case (spaces become hyphens, e.g. \`Login page\`
 
 For each media file, the CLI prints an embed line and a dashboard link:
 
-1. Default and organization access print \`Replicas chat embed: ![filename](<api-url>)\`; this authenticated URL renders inline in Replicas chat **only** \u2014 see below.
-2. Public access (\`--access public\` or \`--share\`) prints \`![filename](<public-url>)\` as the Forge embed instead. This is the public, stable bearer URL to paste into GitHub when sharing is authorized.
+1. Images always print \`![filename](<public-url>)\`. This public, stable link works in Replicas chat, GitHub, and anywhere else Markdown images render. No flag is needed.
+2. Video and audio print \`Replicas chat embed: ![filename](<api-url>)\` by default; this authenticated URL renders inline in Replicas chat **only** \u2014 see below. \`--access public\` prints a public embed instead.
 3. \`View in Replicas: <deep-link>\` is a per-file dashboard URL of the form \`https://app.replicas.dev/workspaces/<workspace-id>?media=<media-id>\` that opens directly to that specific file.
 
 Match each "View in Replicas" line to the embed line directly above it \u2014 that's the deep link for that file.
@@ -24005,13 +24014,13 @@ replicas media upload recap.html --name "Visual recap" --access organization
 
 The printed \`Forge link (organization only)\` opens a dedicated page. Signed-in organization members go straight to it; signed-out members sign in and return to the page.
 
-Use public access only when the media must render without Replicas authentication:
+Video and audio stay private unless they must play without Replicas sign-in; then pass \`--access public\` (alias \`--share\`):
 
 \`\`\`bash
-replicas media upload screenshot.png --name "Login page" --access public
+replicas media upload demo.mp4 --name "Checkout demo" --access public
 \`\`\`
 
-\`--share\` remains an alias for \`--access public\`. Public access prints the raw \`Forge embed\` Markdown instead of the authenticated chat-only embed for image, video, or audio media, backed by an opt-in bearer URL. Anyone with that unguessable URL can view the asset until it is rotated or revoked. HTML pages only support organization access. Use \`replicas media share <media-id>\` to rotate a public media URL and \`replicas media revoke <media-id>\` to revoke it.
+Public links are unguessable bearer URLs: anyone with the link can view the file until it is rotated or revoked. HTML pages only support organization access. Reuse the link printed at upload. \`replicas media share <media-id>\` issues a new link and breaks the old one everywhere it is embedded, and \`replicas media revoke <media-id>\` removes public access.
 
 Permanently delete an upload with \`replicas media delete <media-id>\`. The backend only permits deletion when the media belongs to the current workspace; media from another workspace returns not found.
 
@@ -24019,14 +24028,14 @@ Permanently delete an upload with \`replicas media delete <media-id>\`. The back
 
 | URL | What it is | Where it's allowed |
 |---|---|---|
-| \`https://api.replicas.dev/v1/media/<id>\` (inside \`![\u2026](\u2026)\`) | Authenticated API redirect to a presigned blob \u2014 requires the Replicas chat session | **Only** in the Replicas chat reply. Nowhere else. |
+| \`https://api.replicas.dev/v1/media/<id>\` (inside \`![\u2026](\u2026)\`) | Authenticated API redirect printed for private video, audio, and HTML \u2014 requires the Replicas chat session | **Only** in the Replicas chat reply. Nowhere else. |
 | \`https://replicas.dev/organizations/<organization-id>/media/<media-id>\` | Organization-only page printed by \`--access organization\` | Pull requests and other places where every viewer belongs to the Replicas organization. |
-| \`https://api.replicas.dev/v1/media/public/<id>/<token>\` | Opt-in public bearer URL printed by \`--access public\` or \`--share\` | The Replicas chat reply and GitHub embeds, for image, video, or audio media. |
+| \`https://api.replicas.dev/v1/media/public/<id>/<token>\` | Public bearer URL printed for every image, and for video or audio with \`--access public\` | The Replicas chat reply and GitHub embeds. |
 | \`https://app.replicas.dev/workspaces/<workspace-id>?media=<media-id>\` | Authenticated dashboard deep link that opens the media file in the workspace | Everywhere external: Slack, GitHub, GitLab, Linear, PR bodies, comments, emails. |
 
 ### NEVER link the API redirect URL outside the Replicas chat reply
 
-The \`api.replicas.dev/v1/media/<id>\` URL is **not public**. It's an authenticated redirect that only resolves to a presigned download when the Replicas chat session token is present. Anywhere else (Slack, Linear, GitHub, a browser tab the user opens directly, a customer copy-pasting from chat) it returns \`{"error":"Missing authorization token"}\` and renders as a broken image.
+The \`api.replicas.dev/v1/media/<id>\` URL is **not public**. Image uploads never print it; if you have one for an image from an older upload, run \`replicas media share <media-id>\` to get a public link. It's an authenticated redirect that only resolves to a presigned download when the Replicas chat session token is present. Anywhere else (Slack, Linear, GitHub, a browser tab the user opens directly, a customer copy-pasting from chat) it returns \`{"error":"Missing authorization token"}\` and renders as a broken image.
 
 This rule has no exceptions:
 - \u274C Never paste it in a Slack message \u2014 upload the actual bytes via the 3-step \`files.getUploadURLExternal\` \u2192 POST bytes \u2192 \`files.completeUploadExternal\` flow instead (see below).
@@ -24060,12 +24069,12 @@ After (or alongside) the embeds, include a \`[View in Canvas](<deep-link>)\` hyp
 
 After \`replicas media upload\` succeeds, external delivery has two required follow-up steps for every file:
 
-1. **Use the destination's inline representation:** upload the raw bytes to Slack, Linear, or GitLab; embed a public Forge share on GitHub.
+1. **Use the destination's inline representation:** upload the raw bytes to Slack, Linear, or GitLab; embed the image's printed public link on GitHub.
 2. **Link the Replicas dashboard deep link** (\`?media=<id>\` form) so the user can jump straight to the file in the workspace.
 
 A dashboard link alone is not enough. An embed without the dashboard link is not enough. Do both.
 
-Slack, Linear, and GitLab receive the original bytes through their native upload APIs. GitHub uses a Replicas public Forge share for screenshots and recording previews.
+Slack, Linear, and GitLab receive the original bytes through their native upload APIs. GitHub uses the printed public link for screenshots and recording previews.
 
 ### Slack \u2014 embed natively via the 3-step external file upload flow
 
@@ -24166,19 +24175,17 @@ The same flow works for issue bodies (use \`issueCreate\` / \`issueUpdate\` with
 
 Never paste the \`api.replicas.dev/v1/media/<id>\` URL into a Linear body or comment \u2014 it will render as a broken image to anyone outside your Replicas chat.
 
-### GitHub: inline images and recording previews via Forge
-
-Replicas authenticates GitHub with GitHub App tokens, which native GitHub CLI attachment uploads do not support. Do not use \`gh --attach\` for media. Use a public Forge share for images in PR descriptions, issues, and comments.
+### GitHub: inline images and recording previews
 
-Create a public share only for a public repository or after explicit consent to publish media from a private repository. If sharing is not authorized, keep the media private and include its **View in Replicas** link, explaining that inline GitHub images require a public share.
+Replicas authenticates GitHub with GitHub App tokens, which GitHub's attachment upload rejects, so \`gh --attach\` does not work. Use the public link every image upload prints, in public and private repositories alike, for PR descriptions, issues, and comments.
 
-1. Upload the image with public access. This creates both the Replicas dashboard copy and the Forge share:
+1. Upload the image:
 
 \`\`\`bash
-replicas media upload /tmp/screenshot.png --name "PR screenshot" --access public
+replicas media upload /tmp/screenshot.png --name "PR screenshot"
 \`\`\`
 
-2. Copy the printed \`![filename](<public-url>)\` Forge embed into the body file, followed by the matching **View in Replicas** link. Use the printed public URL verbatim; never use a local file path, the authenticated API URL, or an expiring storage URL.
+2. Copy the printed \`![filename](<public-url>)\` line verbatim into the body file, followed by the matching **View in Replicas** link. Never use a local file path, a \`/v1/media/<id>\` URL, a Linear \`assetUrl\`, or an expiring storage URL.
 3. Create or update the PR using the body file:
 
 \`\`\`bash
@@ -24187,13 +24194,13 @@ gh pr edit 456 --body-file /tmp/pr-body.md
 gh pr comment 456 --body-file /tmp/comment.md
 \`\`\`
 
-GitHub does not reliably render external videos as inline players. For a recording preview, upload the MP4 normally, generate a poster with \`ffmpeg -i /tmp/demo.mp4 -frames:v 1 /tmp/demo-poster.png\`, upload the poster with \`--access public\`, and link its Forge embed to the recording's **View in Replicas** URL:
+Videos stay private, and GitHub does not play external videos inline. Upload the MP4 normally, generate a poster with \`ffmpeg -i /tmp/demo.mp4 -frames:v 1 /tmp/demo-poster.png\`, upload the poster like any image, and link its printed embed to the recording's **View in Replicas** URL:
 
 \`\`\`markdown
 [![Demo recording](<public-poster-url>)](<recording-dashboard-url>)
 \`\`\`
 
-Public forge shares are unauthenticated bearer capabilities. Revoke with \`replicas media revoke <media-id>\` **only** when the user asks or the media should intentionally stop rendering; never as routine post-task cleanup, since revoking breaks every embed already posted on the PR.
+Public links are unauthenticated bearer capabilities. Revoke with \`replicas media revoke <media-id>\` **only** when the user asks or the media should intentionally stop rendering; never as routine post-task cleanup, since revoking breaks every embed already posted on the PR.
 
 For a self-contained HTML report, upload it with \`--access organization\` and put the printed \`Forge link\` Markdown in the PR body or comment. GitHub cannot render the page inline, so use the normal link rather than image syntax. HTML pages cannot be shared publicly.
 
@@ -24203,7 +24210,7 @@ Do **not** commit screenshots to the repo, use placeholder URLs, expose the auth
 
 GitLab supports native project Markdown uploads. For a GitLab destination, always upload the media to Replicas first, then POST the same original file to the repository's \`/projects/:id/uploads\` API using the workspace GitLab credential. Insert the returned \`markdown\` value into the merge request body or comment and include the Replicas dashboard link. Image uploads render inline; MP4, MOV, and WebM uploads render as inline video players.
 
-Do not use a Replicas public forge share for GitLab when the native project upload succeeds; native uploads preserve project access controls.
+Do not use a Replicas public link for GitLab when the native project upload succeeds; native uploads preserve project access controls.
 
 ## Recording defaults
 
@@ -24245,7 +24252,7 @@ replicas media upload chart-a.svg chart-b.svg --name "Latency chart" --name "Err
 - \`--kind <image|video|audio|html>\` \u2014 override auto-detection
 - \`--name <name>\`: required display name shown in the dashboard, one per file in order
 - \`--session-id <id>\` \u2014 associate the upload with a specific session
-- \`--access organization|public\`: create an organization-only link, or a public bearer URL for non-HTML media
+- \`--access organization|public\`: for video, audio, and HTML, create an organization-only link or a public bearer URL (video and audio only). Images are always public
 - \`--share\`: alias for \`--access public\`; not supported for HTML
 `;
 var MEDIA_ABILITY = {
@@ -27254,7 +27261,7 @@ var headlessFilesystemAgentResultSchema = external_exports.object({
 });
 
 // ../shared/src/cli-version.ts
-var CLI_VERSION = "0.2.728";
+var CLI_VERSION = "0.2.729";
 
 // ../shared/src/version.ts
 function compareVersions(v1, v2) {
@@ -31333,38 +31340,41 @@ async function mediaUploadCommand(filePaths, options) {
   if (publicAccess && kinds.some((kind) => !isPublicMediaKind(kind))) {
     throw new Error("HTML pages only support organization access. Use --access organization.");
   }
+  const shared = kinds.map((kind) => publicAccess || kind === MEDIA_KIND.IMAGE);
   const results = await Promise.allSettled(
     filePaths.map((filePath, i) => uploadOne(filePath, names[i], kinds[i], options))
   );
-  const shareResults = publicAccess ? await Promise.allSettled(
+  const shareResults = await Promise.allSettled(
     results.map(
-      (result) => result.status === "fulfilled" ? shareMedia(result.value.media.id) : Promise.resolve(null)
+      (result, i) => result.status === "fulfilled" && shared[i] ? shareMedia(result.value.media.id) : Promise.resolve(null)
     )
-  ) : [];
+  );
   const config3 = readAgentConfig();
   const failures = [];
   for (let i = 0; i < results.length; i++) {
     const result = results[i];
     if (result.status === "fulfilled") {
       const { fileName, media } = result.value;
-      const shareResult = publicAccess ? shareResults[i] : void 0;
+      const shareResult = shareResults[i];
       const publicUrl = shareResult?.status === "fulfilled" ? shareResult.value ?? void 0 : void 0;
-      if (publicAccess) {
+      if (shared[i]) {
         if (!publicUrl) {
-          const error51 = shareResult?.status === "rejected" ? shareResult.reason : new Error("Missing public share URL");
+          const reason = shareResult?.status === "rejected" ? shareResult.reason : new Error("Missing public share URL");
           failures.push({
             filePath: filePaths[i],
             operation: "share",
-            error: error51 instanceof Error ? error51 : new Error(String(error51))
+            error: new Error(
+              `${reason instanceof Error ? reason.message : String(reason)}. Uploaded as ${media.id}; retry with \`replicas media share ${media.id}\``
+            )
           });
         }
       }
       if (media.kind === MEDIA_KIND.HTML) {
         console.log(`HTML page: [${fileName}](${MONOLITH_URL}/v1/media/${media.id})`);
-      } else if (!publicAccess || publicUrl) {
+      } else if (!shared[i] || publicUrl) {
         console.log(formatMediaEmbed(fileName, media.id, publicUrl));
       }
-      if (options.access === "organization") {
+      if (options.access === "organization" && !shared[i]) {
         console.log(
           `Forge link (organization only): [View ${options.name?.[i] ?? fileName}](${getOrganizationMediaUrl(media.organization_id, media.id)})`
         );
@@ -31405,7 +31415,7 @@ async function mediaListCommand(options) {
   const query = qs.toString() ? `?${qs.toString()}` : "";
   const { media } = await agentFetch(`/v1/engine/media${query}`);
   for (const m of media) {
-    console.log(`${MONOLITH_URL}/v1/media/${m.id}	${m.kind}	${m.size}	${m.created_at}`);
+    console.log(`${m.id}	${m.kind}	${m.display_name ?? ""}	${m.size}	${m.created_at}`);
   }
 }
 
@@ -32978,7 +32988,7 @@ if (isAgentMode()) {
     "Required human-facing display name shown in the dashboard. Pass one --name per file, in order.",
     (value, previous) => [...previous, value],
     []
-  ).option("--access <access>", "Link access: organization (sign-in required) or public (non-HTML bearer URL)").option("--share", "Alias for --access public; not supported for HTML").action(async (files, options) => {
+  ).option("--access <access>", "Link access for video, audio, and HTML: organization (sign-in required) or public (video and audio only). Images always get a public link").option("--share", "Alias for --access public; not supported for HTML").action(async (files, options) => {
     try {
       await mediaUploadCommand(files, options);
     } catch (error51) {
@@ -32990,7 +33000,7 @@ if (isAgentMode()) {
       process.exit(1);
     }
   });
-  media.command("share <mediaId>").description("Create or rotate a public forge URL for uploaded image, video, or audio media").action(async (mediaId) => {
+  media.command("share <mediaId>").description("Rotate an image's public forge URL, or create one for video or audio media").action(async (mediaId) => {
     try {
       await mediaShareCommand(mediaId);
     } catch (error51) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-cli",
-  "version": "0.2.728",
+  "version": "0.2.729",
   "description": "CLI for managing Replicas workspaces - SSH into cloud dev environments with automatic port forwarding",
   "main": "dist/index.cjs",
   "bin": {