replicas-cli 0.3.88 → 0.3.91

package/dist/index.cjs

@@ -24527,7 +24527,7 @@ Every Replicas workspace is a remote Linux VM. Repositories are cloned under \`~
 
 Hooks run with \`bash -lc\` from \`~/workspaces\` (the parent of every repository checkout), so start scripts with \`cd ~/workspaces/<repo-name>\`. A repository may also ship its own \`replicas.json\` / \`replicas.yaml\` with \`startHook\`, \`warmHook\`, and \`systemPrompt\`; repository hooks run after the environment hooks. Prefer proposing environment hooks unless the repository already manages its own.
 
-The Global environment applies to every workspace in the organization; never propose putting repository-specific setup there.
+The organization's base environment applies to every environment built on it; never propose putting repository-specific setup there.
 
 ## Progress and the setup run
 
@@ -25479,7 +25479,8 @@ Expose locally running services (web apps, APIs, databases) as public preview UR
 Use this when:
 - You need to start a service that a human should view or interact with
 - The task involves UI work that benefits from human review
-- You are verifying frontend/backend integrations visually`;
+- You are verifying frontend/backend integrations visually
+- You need a URL for OAuth redirects, GitHub App callbacks, or webhooks (never the sandbox's \`*.e2b.app\` address)`;
 var REFERENCE8 = `# Preview URLs
 
 When you run services on ports \u2014 such as a web app, API server, or database \u2014 humans may want to interact with them directly. You can expose your locally running services as public preview URLs.
@@ -25526,6 +25527,19 @@ Previews can optionally require cookie-based authentication. When \`--authentica
 
 **Rule of thumb:** Make frontend previews authenticated, leave backend/API previews unauthenticated.
 
+## OAuth Redirects, App Callbacks, and Webhooks
+
+Never use the sandbox's raw \`https://<port>-<sandbox-id>.e2b.app\` address (built from \`E2B_SANDBOX_ID\`) anywhere a browser or third party will load it. It only accepts requests carrying a per-sandbox token that the Replicas preview proxy adds, so browsers, OAuth providers, and webhook senders get \`403 Missing traffic access token\`.
+
+Use the port's preview URL instead:
+- As the app's public base URL (\`APP_URL\`, \`NEXTAUTH_URL\`, and similar)
+- For OAuth redirect URIs and GitHub App callback and setup URLs
+- For webhook URLs (GitHub, Stripe, Slack, and others)
+
+OAuth and GitHub App redirects happen in the browser, so they work on an \`--authenticated\` preview when the person is logged in to Replicas. Webhooks and other server-to-server calls carry no Replicas login, so the port receiving them needs a preview without \`--authenticated\`. That makes the whole port public to anyone with the URL: tell the user, and verify webhook signatures in the app.
+
+A preview URL stays the same for a workspace and port, so register it with the provider once. Other workspaces get different URLs.
+
 ## Cross-Service References
 
 When you expose multiple services that reference each other, you must update their configuration so they use preview URLs instead of \`localhost\`.
@@ -25555,7 +25569,7 @@ It is your responsibility to make previews work for outsiders as well as they wo
 var PREVIEWS_ABILITY = {
   label: "Previews",
   description: "Expose locally running services on public preview URLs for humans.",
-  bullet: "- Creating preview URLs for locally running services",
+  bullet: "- Creating preview URLs for locally running services, including OAuth redirect, app callback, and webhook URLs (never a raw `*.e2b.app` address)",
   section: SECTION8,
   referenceFile: { name: "PREVIEWS.md", content: REFERENCE8 }
 };
@@ -25876,7 +25890,7 @@ Environments are the org-scoped *primitives* workspaces are built from. Each env
 
 \`\`\`bash
 replicas environment list
-replicas environment get <id-or-name>          # use "global" for the Global env
+replicas environment get <id-or-name>
 replicas environment create [name] \\
   --description "..." \\
   --repository <repo-name-or-id> \\
@@ -25888,9 +25902,8 @@ replicas environment delete <id-or-name> [--force]
 \`\`\`
 
 Notes:
-- Environments resolve by **name or UUID**. \`global\` is an alias for the org's Global env.
-- Non-global envs need a repo (or repo set) to back a workspace. If you \`create\` without \`--repository\`, the CLI prompts; in non-interactive contexts pass \`-r\`.
-- \`edit\` on the Global env is rejected by the API \u2014 manage its contents through the \`vars\` / \`files\` subcommands instead.
+- Environments resolve by **name or UUID**. \`replicas environment list\` marks the org's base environment, which every other environment builds on.
+- An env needs a repo to back a workspace with code. If you \`create\` without \`--repository\`, the CLI prompts; in non-interactive contexts pass \`-r\`.
 
 ### Environment variables
 
@@ -26059,7 +26072,6 @@ Repos are connected via the GitHub integration in the dashboard \u2014 not from
 - \`Missing Replicas-Org-Id header\` \u2192 the workspace is hitting an older monolith that doesn't yet recognize agent auth on this endpoint. Surface this to the user; don't try to work around it by faking headers.
 - \`Workspace not found\` \u2192 the workspace was deleted while you were running. Stop and tell the user.
 - \`An environment with this name already exists\` \u2192 use \`environment edit\` instead, or pick a different name.
-- \`Cannot delete the global environment\` \u2192 there is exactly one Global env per org and it's permanent. Manage its *contents* (\`vars\`, \`files\`) instead.
 `;
 var REPLICAS_ABILITY = {
   label: "Replicas",
@@ -28652,7 +28664,7 @@ var headlessAgentRequestSchema = external_exports.object({
 });
 
 // ../shared/src/cli-version.ts
-var CLI_VERSION = "0.3.88";
+var CLI_VERSION = "0.3.91";
 
 // ../shared/src/version.ts
 function compareVersions(v1, v2) {
@@ -31504,8 +31516,8 @@ async function resolveEnvironmentId(input) {
   }
   return resolved.id;
 }
-function printEnvironment(env) {
-  console.log(import_chalk20.default.white(`  ${env.name}${env.is_global ? import_chalk20.default.gray(" (global)") : ""}`));
+function printEnvironment(env, isBase = false) {
+  console.log(import_chalk20.default.white(`  ${env.name}${isBase ? import_chalk20.default.gray(" (base)") : ""}`));
   console.log(import_chalk20.default.gray(`    ID: ${env.id}`));
   if (env.description) {
     console.log(import_chalk20.default.gray(`    Description: ${env.description}`));
@@ -31523,7 +31535,7 @@ function printEnvironment(env) {
 async function environmentListCommand() {
   ensureOrgApiAuthenticated();
   const response = await orgAuthenticatedFetch("/v1/environments");
-  output(response, ({ environments }) => {
+  output(response, ({ environments, base_environment_id }) => {
     if (environments.length === 0) {
       console.log(import_chalk20.default.yellow("\nNo environments found.\n"));
       return;
@@ -31531,7 +31543,7 @@ async function environmentListCommand() {
     console.log(import_chalk20.default.green(`
 Environments (${environments.length}):
 `));
-    for (const env of environments) printEnvironment(env);
+    for (const env of environments) printEnvironment(env, env.id === base_environment_id);
   });
 }
 async function environmentGetCommand(idOrName) {
@@ -32215,7 +32227,7 @@ async function replicaCreateCommand(name, options) {
       choices: environments.map((env) => ({
         title: env.name,
         value: env.id,
-        description: env.is_global ? "global" : `${env.repository_ids?.length ?? 0} repositories`
+        description: env.id === envResponse.base_environment_id ? "base" : `${env.repository_ids?.length ?? 0} repositories`
       }))
     });
     const answer = response2.environment;
@@ -34568,7 +34580,7 @@ media.command("list").description("List media uploaded by a workspace (this work
 media.command("url <mediaId>").description("Print a short-lived download URL for media").action(run(mediaUrlCommand));
 var environment = program.command("environment").alias("env").description("Manage environments (org-scoped templates that back workspaces)");
 environment.command("list").description("List all environments").action(run(environmentListCommand));
-environment.command("get <id-or-name>").description('Get an environment by ID or name (use "global" for the global env)').action(run(environmentGetCommand));
+environment.command("get <id-or-name>").description("Get an environment by ID or name").action(run(environmentGetCommand));
 environment.command("create [name]").description("Create a new environment").option("-d, --description <description>", "Environment description").option("-r, --repository <names>", "Repositories to clone (comma-separated names or IDs)").option("--system-prompt <prompt>", "System prompt for agents started in this environment").action(run(environmentCreateCommand));
 environment.command("edit <id-or-name>").description("Edit an environment").option("-n, --name <name>", "New name").option("-d, --description <description>", "New description").option("-r, --repository <names>", "Replace the repositories (comma-separated names or IDs; empty string for none)").option("--system-prompt <prompt>", "System prompt").action(run(environmentEditCommand));
 environment.command("delete <id-or-name>").description("Delete an environment").option("-f, --force", "Skip confirmation prompt").action(run(environmentDeleteCommand));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-cli",
-  "version": "0.3.88",
+  "version": "0.3.91",
   "description": "CLI for managing Replicas workspaces - SSH into cloud dev environments with automatic port forwarding",
   "main": "dist/index.cjs",
   "bin": {