replicas-engine 0.1.581 → 0.1.583

package/dist/src/index.js

@@ -1434,6 +1434,7 @@ GitHub does NOT have a public API for uploading images to PRs/issues. When you n
 - Do NOT use placeholder image URLs
 - Do NOT commit screenshots as files to the repository
 - Run \`replicas media upload <image> --name "<display name>" --share\` and put the printed \`Forge embed\` Markdown in the PR body or comment
+- For a self-contained HTML report, run \`replicas media upload <page.html> --name "<display name>" --access organization\` and put the printed \`Forge link\` Markdown in the PR body or comment. Organization members who are already signed in open it directly; others sign in and return to the page
 - For video, embed a shared poster image linked to the recording's **View in Replicas** URL; GitHub does not reliably render externally hosted video inline
 - Treat the public URL as an opt-in bearer capability; revoke it with \`replicas media revoke <media-id>\` only when the user asks or the media should stop rendering \u2014 revoking breaks embeds already posted on the PR
 - If you were triggered from Slack, also upload the image to the Slack thread so the user can see it directly
@@ -2035,17 +2036,18 @@ var LINEAR_ABILITY = {
 
 // ../shared/src/default-skills/replicas-agent/abilities/media.ts
 var SECTION8 = `### Media
-Share screenshots, screen recordings, generated diagrams, and audio clips inline in the Replicas chat and natively embedded in external messages.
+Share screenshots, screen recordings, generated diagrams, audio clips, and self-contained HTML pages through Replicas and external messages.
 
 **Reference:** \`references/MEDIA.md\`
 
 Use this when:
 - You produce a screenshot, recording, generated image, or audio clip the user should see
+- You produce a self-contained HTML report that should be linked from a pull request
 - You record video output (browser automation, screen capture) \u2014 including the recommended aspect ratio and FPS
 - You need to embed media in a Slack/Linear/GitHub message AND keep a referenceable copy in the Replicas dashboard`;
-var REFERENCE8 = `# Media (Screenshots, Recordings, Audio)
+var REFERENCE8 = `# Media (Screenshots, Recordings, Audio, HTML)
 
-This guide covers how to share screenshots, screen recordings, generated diagrams, and audio clips \u2014 both inline in the Replicas chat and natively embedded in external surfaces (Slack, Linear, GitHub).
+This guide covers how to share screenshots, screen recordings, generated diagrams, audio clips, and self-contained HTML pages through Replicas and external surfaces (Slack, Linear, GitHub).
 
 ## Prerequisites
 
@@ -2056,7 +2058,7 @@ The \`replicas\` CLI is pre-installed and authenticated in your workspace. No ad
 Upload to Replicas in these cases \u2014 and **only** these cases:
 
 1. **Media you produce.** Any screenshot, screen recording, generated diagram, or audio clip you create that the user might want to see. Upload before doing anything else with the file (analyzing, deleting, sending elsewhere). This applies even when you're also sending the file to Slack, Linear, GitHub, etc.
-2. **Files the user explicitly asks you to upload.** If the user sends or points at a file (image, video, audio) and asks you to upload it, run \`replicas media upload\`. Otherwise leave it alone \u2014 files in the workspace the user did not ask about should not be auto-uploaded as media.
+2. **Files the user explicitly asks you to upload.** If the user sends or points at a file (image, video, audio, HTML) and asks you to upload it, run \`replicas media upload\`. Otherwise leave it alone \u2014 files in the workspace the user did not ask about should not be auto-uploaded as media.
 3. **Anything you plan to share externally (Slack, Linear, GitHub, etc.).** Upload to Replicas *in addition to* the platform's native upload. Never as a replacement.
 
 If none of these apply, don't upload.
@@ -2085,28 +2087,39 @@ replicas media upload /tmp/before.png /tmp/after.png --name "Before fix" --name
 
 Names are normalized to hyphen-case (spaces become hyphens, e.g. \`Login page\` is stored as \`login-page\`). Give every asset a **distinct** name \u2014 duplicates are not rejected, but Replicas keeps the first as-is and adds a \`-1\`, \`-2\` suffix to later collisions, which produces confusing lists, so pick unique names yourself.
 
-For each file, the CLI prints two lines:
+For each media file, the CLI prints two lines:
 
 1. \`![filename](<api-url>)\` \u2014 the chat embed (renders inline in Replicas chat **only** \u2014 see below).
 2. \`View in Replicas: <deep-link>\` \u2014 a per-file dashboard URL of the form \`https://tryreplicas.com/workspaces/<workspace-id>?media=<media-id>\` that opens directly to that specific file.
 
 Match each "View in Replicas" line to the embed line directly above it \u2014 that's the deep link for that file.
 
-Pass \`--share\` only when the media must render on an external forge:
+HTML uploads print an \`HTML page\` Markdown link instead of an image embed.
+
+For an HTML page that should stay inside the Replicas organization, create an authenticated link:
 
 \`\`\`bash
-replicas media upload screenshot.png --name "Login page" --share
+replicas media upload recap.html --name "Visual recap" --access organization
 \`\`\`
 
-This prints an additional \`Forge embed\` Markdown line backed by an opt-in public bearer URL. Anyone with that unguessable URL can view the asset until it is rotated or revoked. Use \`replicas media share <media-id>\` to rotate it and \`replicas media revoke <media-id>\` to revoke it.
+The printed \`Forge link (organization only)\` opens a dedicated page. Signed-in organization members go straight to it; signed-out members sign in and return to the page.
+
+Use public access only when the media must render without Replicas authentication:
 
-## The two URLs the CLI gives you \u2014 and where each one is allowed
+\`\`\`bash
+replicas media upload screenshot.png --name "Login page" --access public
+\`\`\`
+
+\`--share\` remains an alias for \`--access public\`. Public access prints an additional \`Forge embed\` for image, video, or audio media, backed by an opt-in bearer URL. Anyone with that unguessable URL can view the asset until it is rotated or revoked. HTML pages only support organization access. Use \`replicas media share <media-id>\` to rotate a public media URL and \`replicas media revoke <media-id>\` to revoke it.
+
+## The URLs the CLI gives you \u2014 and where each one is allowed
 
 | URL | What it is | Where it's allowed |
 |---|---|---|
 | \`https://api.tryreplicas.com/v1/media/<id>\` (inside \`![\u2026](\u2026)\`) | Authenticated API redirect to a presigned blob \u2014 requires the Replicas chat session | **Only** in the Replicas chat reply. Nowhere else. |
-| \`https://api.tryreplicas.com/v1/media/public/<id>/<token>\` | Opt-in public bearer URL printed by \`--share\` | GitHub image embeds only. |
-| \`https://tryreplicas.com/workspaces/<workspace-id>?media=<media-id>\` | Public dashboard deep link that opens the media file in the workspace | Everywhere external \u2014 Slack, GitHub, Linear, PR bodies, comments, emails. |
+| \`https://tryreplicas.com/organizations/<organization-id>/media/<media-id>\` | Organization-only page printed by \`--access organization\` | Pull requests and other places where every viewer belongs to the Replicas organization. |
+| \`https://api.tryreplicas.com/v1/media/public/<id>/<token>\` | Opt-in public bearer URL printed by \`--access public\` or \`--share\` | GitHub embeds for image, video, or audio media. |
+| \`https://tryreplicas.com/workspaces/<workspace-id>?media=<media-id>\` | Authenticated dashboard deep link that opens the media file in the workspace | Everywhere external \u2014 Slack, GitHub, Linear, PR bodies, comments, emails. |
 
 ### NEVER link the API redirect URL outside the Replicas chat reply
 
@@ -2119,9 +2132,9 @@ This rule has no exceptions:
 - \u274C Never link to it from any external doc, email, or external chat.
 - \u274C Never include it as a "backup link" in case the dashboard link breaks \u2014 it will always break externally.
 
-### ALWAYS link the dashboard URL \u2014 never the API URL \u2014 when referencing media externally
+### ALWAYS link a Replicas web URL \u2014 never the authenticated API URL \u2014 when referencing media externally
 
-When you reference an uploaded file from anywhere outside the Replicas chat reply, the link must be the dashboard form:
+For an organization-only HTML page, use the \`Forge link\` printed by \`--access organization\`. For other authenticated media references, use the dashboard form:
 
 \`\`\`
 https://tryreplicas.com/workspaces/<workspace-id>?media=<media-id>
@@ -2135,7 +2148,7 @@ Always render as a markdown / mrkdwn hyperlink labeled **View in Replicas** \u20
 
 ## In your Replicas chat reply
 
-Include each markdown embed line **verbatim** where you want that file to render inline. The chat substitutes each one with an embedded image, video, or audio player. Multiple embeds can appear in a single reply.
+Include each markdown embed line **verbatim** where you want that file to render inline. The chat substitutes each one with an embedded image, video, or audio player. For HTML, use the \`HTML page\` or \`View in Replicas\` link instead. Multiple embeds can appear in a single reply.
 
 After (or alongside) the embeds, include a \`[View in Replicas](<deep-link>)\` hyperlink for each file using the per-file dashboard URL from the CLI. This lets the user open the specific item in the workspace.
 
@@ -2281,6 +2294,8 @@ GitHub does not reliably render arbitrary external videos as inline players. For
 
 Public forge shares are bearer capabilities. For private repositories, create one only when the user asked for inline PR media. Revoke with \`replicas media revoke <media-id>\` **only** when the user asks or the media should intentionally stop rendering \u2014 never as routine post-task cleanup, since revoking breaks every embed already posted on the PR.
 
+For a self-contained HTML report, upload it with \`--access organization\` and put the printed \`Forge link\` Markdown in the PR body or comment. GitHub cannot render the page inline, so use the normal link rather than image syntax. HTML pages cannot be shared publicly.
+
 Do **not** commit screenshots to the repo, use placeholder URLs, expose the authenticated \`/v1/media/<id>\` URL, or automate GitHub's undocumented browser upload flow.
 
 ### GitLab: native inline screenshots and videos
@@ -2315,8 +2330,9 @@ Auto-detected from the filename extension:
 | \`png\`, \`jpg\`, \`jpeg\`, \`webp\` | image |
 | \`mp4\`, \`webm\` | video |
 | \`mp3\`, \`wav\` | audio |
+| \`html\`, \`htm\` | html |
 
-For other extensions, pass \`--kind image|video|audio\` explicitly. The kind applies to every file in that invocation, so group files of the same kind together:
+For other extensions, pass \`--kind image|video|audio|html\` explicitly. The kind applies to every file in that invocation, so group files of the same kind together:
 
 \`\`\`bash
 replicas media upload diagram.svg --name "Architecture diagram" --kind image
@@ -2325,15 +2341,16 @@ replicas media upload chart-a.svg chart-b.svg --name "Latency chart" --name "Err
 
 ## Options
 
-- \`--kind <image|video|audio>\` \u2014 override auto-detection
+- \`--kind <image|video|audio|html>\` \u2014 override auto-detection
 - \`--name <name>\`: required display name shown in the dashboard, one per file in order
 - \`--session-id <id>\` \u2014 associate the upload with a specific session
-- \`--share\`: create a revocable public bearer URL for a forge image embed
+- \`--access organization|public\`: create an organization-only link, or a public bearer URL for non-HTML media
+- \`--share\`: alias for \`--access public\`; not supported for HTML
 `;
 var MEDIA_ABILITY = {
   label: "Media",
-  description: "Share screenshots, recordings, generated images, and audio clips.",
-  bullet: "- Producing or showing the user any media \u2014 screenshots, screen recordings, generated images or diagrams, audio clips \u2014 including in your Replicas chat reply, PR descriptions/comments, and other external platforms",
+  description: "Share screenshots, recordings, generated images, audio clips, and HTML pages.",
+  bullet: "- Producing or showing the user any media \u2014 screenshots, screen recordings, generated images or diagrams, audio clips, or HTML recap pages \u2014 including in your Replicas chat reply, PR descriptions/comments, and other external platforms",
   section: SECTION8,
   referenceFile: { name: "MEDIA.md", content: REFERENCE8 }
 };
@@ -5567,9 +5584,11 @@ var EMAIL_TEMPLATE_KEYS = [...EMAIL_KEYS, ...MANUAL_EMAIL_TEMPLATE_KEYS];
 var MEDIA_KIND = {
   IMAGE: "image",
   VIDEO: "video",
-  AUDIO: "audio"
+  AUDIO: "audio",
+  HTML: "html"
 };
-var MEDIA_KINDS = [MEDIA_KIND.IMAGE, MEDIA_KIND.VIDEO, MEDIA_KIND.AUDIO];
+var MEDIA_KINDS = [MEDIA_KIND.IMAGE, MEDIA_KIND.VIDEO, MEDIA_KIND.AUDIO, MEDIA_KIND.HTML];
+var PUBLIC_MEDIA_KINDS = [MEDIA_KIND.IMAGE, MEDIA_KIND.VIDEO, MEDIA_KIND.AUDIO];
 var MAX_ENGINE_LOG_BYTES = 50 * 1024 * 1024;
 
 // ../shared/src/skill-registry.ts
@@ -10988,7 +11007,7 @@ var DEFAULT_CODEX_ARGS = ["app-server", "--listen", "stdio://"];
 var MIN_CODEX_CLI_VERSION = "0.144.6";
 var CODEX_UPGRADE_TIMEOUT_MS = 12e4;
 var codexCliVersionEnsured = null;
-var ENGINE_PACKAGE_VERSION = "0.1.581";
+var ENGINE_PACKAGE_VERSION = "0.1.583";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.581",
+  "version": "0.1.583",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",