replicas-engine 0.1.732 → 0.1.733

package/dist/src/{chunk-6RLBLURM.js → chunk-2ZP6PIHD.js}

@@ -2,7 +2,7 @@
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES,
   isVersionBelow
-} from "./chunk-4WSQK4KO.js";
+} from "./chunk-YBI3HWHT.js";
 
 // src/utils/presigned-upload.ts
 import { createReadStream } from "fs";
@@ -272,7 +272,7 @@ var DEFAULT_CODEX_ARGS = [
 var MIN_CODEX_CLI_VERSION = "0.144.6";
 var CODEX_UPGRADE_TIMEOUT_MS = 12e4;
 var codexCliVersionEnsured = null;
-var ENGINE_PACKAGE_VERSION = "0.1.732";
+var ENGINE_PACKAGE_VERSION = "0.1.733";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/{chunk-MSIRAEIY.js → chunk-5U46EQRM.js}

@@ -12,7 +12,7 @@ import {
   isValidAgentProvider,
   parsePosixEnvFile,
   readReplicasRuntimeEnv
-} from "./chunk-4WSQK4KO.js";
+} from "./chunk-YBI3HWHT.js";
 
 // src/engine-env.ts
 import { readFileSync as readFileSync2 } from "fs";

package/dist/src/{chunk-RN4NHKXF.js → chunk-MWD54BEE.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   mayCreatePullRequest
-} from "./chunk-4WSQK4KO.js";
+} from "./chunk-YBI3HWHT.js";
 
 // src/services/post-tool-pr-notifier.ts
 async function notifyPostToolUse(toolName, toolInput) {

package/dist/src/{chunk-4WSQK4KO.js → chunk-YBI3HWHT.js}

@@ -2299,7 +2299,7 @@ If none of these apply, don't upload.
 | Slack | \`files.getUploadURLExternal\` \u2192 raw-byte POST \u2192 \`files.completeUploadExternal\` | Uploaded file in the channel or thread |
 | Linear | \`fileUpload\` mutation \u2192 presigned upload \u2192 issue/comment mutation | Returned \`assetUrl\` in Markdown |
 | GitLab | Project \`/uploads\` endpoint with the original bytes | Returned GitLab Markdown |
-| GitHub | No supported attachment API; use a Replicas public forge share for the inline image or video poster | Printed Forge embed, linked to the recording when needed |
+| GitHub | \`gh\` v2.99.0+ \`--attach\` for images and videos; use a Replicas public forge share as the fallback | Native GitHub attachment URL, or a Forge embed fallback |
 
 The dashboard link is the subtitle and jump-back path. It is never a substitute for the destination upload.
 
@@ -2330,7 +2330,7 @@ Names are normalized to hyphen-case (spaces become hyphens, e.g. \`Login page\`
 For each media file, the CLI prints an embed line and a dashboard link:
 
 1. Default and organization access print \`Replicas chat embed: ![filename](<api-url>)\`; this authenticated URL renders inline in Replicas chat **only** \u2014 see below.
-2. Public access (\`--access public\` or \`--share\`) prints \`![filename](<public-url>)\` as the Forge embed instead. This is the public, stable bearer URL to paste into GitHub.
+2. Public access (\`--access public\` or \`--share\`) prints \`![filename](<public-url>)\` as the Forge embed instead. This is the public, stable bearer URL for GitHub fallback embeds when native \`--attach\` is unavailable and sharing is authorized.
 3. \`View in Replicas: <deep-link>\` is a per-file dashboard URL of the form \`https://replicas.dev/workspaces/<workspace-id>?media=<media-id>\` that opens directly to that specific file.
 
 Match each "View in Replicas" line to the embed line directly above it \u2014 that's the deep link for that file.
@@ -2359,7 +2359,7 @@ replicas media upload screenshot.png --name "Login page" --access public
 |---|---|---|
 | \`https://api.replicas.dev/v1/media/<id>\` (inside \`![\u2026](\u2026)\`) | Authenticated API redirect to a presigned blob \u2014 requires the Replicas chat session | **Only** in the Replicas chat reply. Nowhere else. |
 | \`https://replicas.dev/organizations/<organization-id>/media/<media-id>\` | Organization-only page printed by \`--access organization\` | Pull requests and other places where every viewer belongs to the Replicas organization. |
-| \`https://api.replicas.dev/v1/media/public/<id>/<token>\` | Opt-in public bearer URL printed by \`--access public\` or \`--share\` | The Replicas chat reply and GitHub embeds, for image, video, or audio media. |
+| \`https://api.replicas.dev/v1/media/public/<id>/<token>\` | Opt-in public bearer URL printed by \`--access public\` or \`--share\` | The Replicas chat reply and GitHub fallback embeds, for image, video, or audio media. |
 | \`https://replicas.dev/workspaces/<workspace-id>?media=<media-id>\` | Authenticated dashboard deep link that opens the media file in the workspace | Everywhere external: Slack, GitHub, GitLab, Linear, PR bodies, comments, emails. |
 
 ### NEVER link the API redirect URL outside the Replicas chat reply
@@ -2403,7 +2403,7 @@ After \`replicas media upload\` succeeds, external delivery has two required fol
 
 A link alone is not enough. An upload without the dashboard link is not enough. Do both.
 
-Slack, Linear, and GitLab receive the original bytes through their native upload APIs. GitHub has no supported attachment API, so use an explicit Replicas public share for screenshots and recording previews.
+Slack, Linear, and GitLab receive the original bytes through their native upload APIs. GitHub image and video attachments use \`gh --attach\` when the installed CLI and host support it; use an explicit Replicas public share only as the fallback.
 
 ### Slack \u2014 embed natively via the 3-step external file upload flow
 
@@ -2515,26 +2515,50 @@ The same flow works for issue bodies (use \`issueCreate\` / \`issueUpdate\` with
 
 Never paste the \`api.replicas.dev/v1/media/<id>\` URL into a Linear body or comment \u2014 it will render as a broken image to anyone outside your Replicas chat.
 
-### GitHub: inline screenshots and recording previews
+### GitHub: native image and video attachments
 
-GitHub has **no public API** for uploading attachments to PRs or issues. Its web UI uses an undocumented internal endpoint that API clients must not emulate. For screenshots, explicitly create a forge share and put the printed \`Forge embed\` Markdown directly in the PR body or comment, followed by the dashboard link:
+GitHub CLI v2.99.0+ supports a repeatable \`--attach\` flag on \`gh pr create\`, \`gh pr edit\`, and \`gh pr comment\` for GitHub.com and GitHub Enterprise Cloud. It uploads local images and videos to GitHub and writes the resulting attachment URL into the PR body or comment; it requires push access to the repository. GitHub Enterprise Server and unsupported media kinds are not covered by this path. See [GitHub's attachment guide](https://docs.github.com/en/github-cli/github-cli/attaching-files-with-github-cli).
+
+Check \`gh --version\` before choosing the delivery path. On a supported host with v2.99.0 or later:
+
+1. Run \`replicas media upload\` with the original file first, without \`--share\`. Keep the matching **View in Replicas** dashboard link for the PR.
+2. Put each local file path in the Markdown body where the attachment should appear, and place its dashboard link next to it.
+3. Pass the same original path once with \`--attach\`. GitHub CLI rewrites a matching local reference in place, preserving its alt text; an unreferenced attachment is appended to the body.
+
+\`\`\`markdown
+Before the change:
+
+![Before state](/tmp/before.png)
+[View in Replicas](https://replicas.dev/workspaces/<workspace-id>?media=<before-media-id>)
+\`\`\`
 
 \`\`\`bash
-replicas media upload /tmp/screenshot.png --name "PR screenshot" --share
+gh pr create \\
+  --title "Describe the change" \\
+  --body-file /tmp/pr-body.md \\
+  --attach /tmp/before.png
+
+gh pr edit 456 --body-file /tmp/pr-body.md --attach /tmp/after.png
+gh pr comment 456 --body-file /tmp/comment.md --attach /tmp/result.mp4
 \`\`\`
 
-GitHub does not reliably render arbitrary external videos as inline players. For a recording:
+Repeat \`--attach\` for multiple files, up to 50 per command. For an appended image, add alt text after the path with \`#\`, for example \`--attach './error.png#Error state'\`. To render a video as a player, its local Markdown reference must be the only content in its paragraph. Do not paste a Replicas authenticated API URL into the body, and do not emulate GitHub's undocumented browser upload endpoint.
+
+### GitHub attachment fallback
+
+If \`--attach\` is unavailable, the target is GitHub Enterprise Server, the file is not an image or video, or the native upload fails, keep the Replicas dashboard link and report the limitation. For an inline screenshot or video poster, create a Replicas public forge share only for a public repository or after explicit consent to publish media from a private repository, then use the printed \`Forge embed\` Markdown:
+
+\`\`\`bash
+replicas media upload /tmp/screenshot.png --name "PR screenshot" --share
+\`\`\`
 
-1. Upload the MP4 normally so it remains available in Replicas.
-2. Generate a poster image from the recording: \`ffmpeg -i /tmp/demo.mp4 -frames:v 1 /tmp/demo-poster.png\`.
-3. Upload the poster with \`--share\`.
-4. Wrap the poster embed in a link to the recording's **View in Replicas** URL.
+For a fallback recording preview, upload the MP4 normally, generate a poster with \`ffmpeg -i /tmp/demo.mp4 -frames:v 1 /tmp/demo-poster.png\`, share the poster, and link its embed to the recording's **View in Replicas** URL:
 
 \`\`\`markdown
 [![Demo recording](<public-poster-url>)](<recording-dashboard-url>)
 \`\`\`
 
-Public forge shares are unauthenticated bearer capabilities. For private repositories, create one only when the user explicitly asked for inline PR media. Without that consent, keep the media private in Replicas and report that GitHub has no supported attachment API; do not publish a bearer share or pretend the dashboard link is an embed. Revoke with \`replicas media revoke <media-id>\` **only** when the user asks or the media should intentionally stop rendering; never as routine post-task cleanup, since revoking breaks every embed already posted on the PR.
+Public forge shares are unauthenticated bearer capabilities. Revoke with \`replicas media revoke <media-id>\` **only** when the user asks or the media should intentionally stop rendering; never as routine post-task cleanup, since revoking breaks every embed already posted on the PR.
 
 For a self-contained HTML report, upload it with \`--access organization\` and put the printed \`Forge link\` Markdown in the PR body or comment. GitHub cannot render the page inline, so use the normal link rather than image syntax. HTML pages cannot be shared publicly.
 

package/dist/src/command-protection-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   evaluateCommandProtection
-} from "./chunk-MSIRAEIY.js";
+} from "./chunk-5U46EQRM.js";
 import {
   isRecord
 } from "./chunk-2RB7SIP3.js";
-import "./chunk-4WSQK4KO.js";
+import "./chunk-YBI3HWHT.js";
 
 // src/command-protection-hook.ts
 var provider = process.argv[2];

package/dist/src/deepseek-command-protection-plugin.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   evaluateCommandProtection
-} from "./chunk-MSIRAEIY.js";
+} from "./chunk-5U46EQRM.js";
 import {
   notifyPostToolUse
-} from "./chunk-RN4NHKXF.js";
+} from "./chunk-MWD54BEE.js";
 import "./chunk-2RB7SIP3.js";
-import "./chunk-4WSQK4KO.js";
+import "./chunk-YBI3HWHT.js";
 
 // src/deepseek-command-protection-plugin.ts
 function replicasCommandProtection(context) {

package/dist/src/headless-agent.js

@@ -4,12 +4,12 @@ import {
   buildCodexAgentEnv,
   putPresignedFile,
   recoverCompletedTurn
-} from "./chunk-6RLBLURM.js";
+} from "./chunk-2ZP6PIHD.js";
 import {
   AGENT,
   getMemoryOutputSafetyViolation,
   headlessAgentRequestSchema
-} from "./chunk-4WSQK4KO.js";
+} from "./chunk-YBI3HWHT.js";
 
 // src/headless-agent.ts
 import { createHash } from "crypto";

package/dist/src/index.js

@@ -8,7 +8,7 @@ import {
   monolithService,
   reportCommandProtectionBlock,
   setAgentCredentialSnapshot
-} from "./chunk-MSIRAEIY.js";
+} from "./chunk-5U46EQRM.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -36,7 +36,7 @@ import {
   execFileAsync,
   putPresignedFile,
   recoverCompletedTurn
-} from "./chunk-6RLBLURM.js";
+} from "./chunk-2ZP6PIHD.js";
 import {
   isRecord as isRecord2
 } from "./chunk-2RB7SIP3.js";
@@ -220,7 +220,7 @@ import {
   shellQuotePosix,
   stripAgentDiagnosticErrors,
   withTimeout
-} from "./chunk-4WSQK4KO.js";
+} from "./chunk-YBI3HWHT.js";
 
 // src/index.ts
 import { serve } from "@hono/node-server";

package/dist/src/post-tool-pr-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   notifyPostToolUse
-} from "./chunk-RN4NHKXF.js";
+} from "./chunk-MWD54BEE.js";
 import {
   isRecord
 } from "./chunk-2RB7SIP3.js";
-import "./chunk-4WSQK4KO.js";
+import "./chunk-YBI3HWHT.js";
 
 // src/post-tool-pr-hook.ts
 async function main() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.732",
+  "version": "0.1.733",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",