replicas-engine 0.1.988 → 0.1.990

package/dist/src/{asp-host-64RO3V36.js → asp-host-56F3BJ3U.js}

@@ -5,12 +5,12 @@ import {
   getCodexAspHost,
   restartCodexAspHost,
   restartCodexAspHostIfRunning
-} from "./chunk-D246GL25.js";
-import "./chunk-W4UVXL3R.js";
-import "./chunk-4V3WESQO.js";
-import "./chunk-5MEISXIX.js";
+} from "./chunk-GBIUC3IW.js";
+import "./chunk-6U4QFF5X.js";
+import "./chunk-KPG62IXT.js";
+import "./chunk-RO6HHOHQ.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-FWG6GISJ.js";
+import "./chunk-LTK6ZXLV.js";
 import "./chunk-VEQXQN22.js";
 export {
   getCodexAspHost,

package/dist/src/{chunk-W4UVXL3R.js → chunk-6U4QFF5X.js}

@@ -14,7 +14,7 @@ import {
   isValidAgentProvider,
   parsePosixEnvFile,
   readReplicasRuntimeEnv
-} from "./chunk-FWG6GISJ.js";
+} from "./chunk-LTK6ZXLV.js";
 
 // src/runtime-env-loader.ts
 import { readFileSync } from "fs";

package/dist/src/{chunk-D246GL25.js → chunk-GBIUC3IW.js}

@@ -5,15 +5,15 @@ import {
   ENGINE_ENV,
   monolithRequest,
   setAgentCredentialSnapshot
-} from "./chunk-W4UVXL3R.js";
+} from "./chunk-6U4QFF5X.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-4V3WESQO.js";
+} from "./chunk-KPG62IXT.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-5MEISXIX.js";
+} from "./chunk-RO6HHOHQ.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
@@ -27,7 +27,7 @@ import {
   listOpenAICompatibleModels,
   readOllamaAuthEnv,
   resolveOpenAICompatibleModelsUrl
-} from "./chunk-FWG6GISJ.js";
+} from "./chunk-LTK6ZXLV.js";
 
 // src/managers/codex-token-manager.ts
 import { promises as fs } from "fs";
@@ -260,7 +260,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     await this.applyCredentialUpdate(++this.credentialGeneration, async () => {
       await this.applyCredentialsResponse(data);
       setAgentCredentialSnapshot("codex", data);
-      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-64RO3V36.js");
+      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-56F3BJ3U.js");
       await restartCodexAspHostIfRunning2();
     });
     await this.start(true);
@@ -280,7 +280,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     await this.applyCredentialUpdate(generation, async () => {
       await this.applyCredentialsResponse(data);
       if (restartOnChange && CODEX_AUTH_ENV_KEYS.some((key, index) => process.env[key] !== previousEnv[index])) {
-        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-64RO3V36.js");
+        const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-56F3BJ3U.js");
         await restartCodexAspHostIfRunning2();
       }
       setAgentCredentialSnapshot("codex", data);

package/dist/src/{chunk-4V3WESQO.js → chunk-KPG62IXT.js}

@@ -3,10 +3,10 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   execFileAsync
-} from "./chunk-5MEISXIX.js";
+} from "./chunk-RO6HHOHQ.js";
 import {
   isVersionBelow
-} from "./chunk-FWG6GISJ.js";
+} from "./chunk-LTK6ZXLV.js";
 
 // src/utils/codex-agent-env.ts
 function buildCodexAgentEnv(source = process.env) {
@@ -240,7 +240,7 @@ function getCodexModelProvider(method) {
   if (method === "foundry") return "azure";
   return method === "ollama" || method === "openai-compatible" ? "replicas_openai_compatible" : "openai";
 }
-var ENGINE_PACKAGE_VERSION = "0.1.988";
+var ENGINE_PACKAGE_VERSION = "0.1.990";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/{chunk-FWG6GISJ.js → chunk-LTK6ZXLV.js}

@@ -3274,7 +3274,7 @@ replicas computer record stop
 replicas media upload /tmp/walkthrough.mp4 --name "<Project> walkthrough"
 \`\`\`
 
-Keep the recording short (one to three minutes) and focused on the flow that proves the environment works. \`replicas media upload\` prints a chat embed line and a \`View in Replicas\` link ending in \`?media=<media-id>\`; keep both. The media id goes into the proposal, and the embed line goes into your final message. Follow \`MEDIA.md\` for anything shared outside the dashboard.
+Keep the recording short (one to three minutes) and focused on the flow that proves the environment works. \`replicas media upload\` prints a chat embed line and a \`View in Replicas\` link ending in \`?mode=media&media=<media-id>\`; keep both. The media id goes into the proposal, and the embed line goes into your final message. Follow \`MEDIA.md\` for anything shared outside the dashboard.
 
 Add screenshots of important states (a passing test run, the running app) with \`replicas computer screenshot\` and upload them the same way when they help the user trust the result.
 
@@ -3798,7 +3798,7 @@ For each media file, the CLI prints an embed line and a dashboard link:
 
 1. Images always print \`![filename](<public-url>)\`. This public, stable link works in Replicas chat, GitHub, and anywhere else Markdown images render. No flag is needed.
 2. Video and audio print \`Replicas chat embed: ![filename](<api-url>)\` by default; this authenticated URL renders inline in Replicas chat **only** \u2014 see below. \`--access public\` prints a public embed instead.
-3. \`View in Replicas: <deep-link>\` is a per-file dashboard URL of the form \`https://app.replicas.dev/workspaces/<workspace-id>?media=<media-id>\` that opens directly to that specific file.
+3. \`View in Replicas: <deep-link>\` is a per-file dashboard URL of the form \`https://app.replicas.dev/workspaces/<workspace-id>?mode=media&media=<media-id>\` that opens directly to that specific file.
 
 Match each "View in Replicas" line to the embed line directly above it \u2014 that's the deep link for that file.
 
@@ -3829,7 +3829,7 @@ Permanently delete an upload with \`replicas media delete <media-id>\`. The back
 | \`https://api.replicas.dev/v1/media/<id>\` (inside \`![\u2026](\u2026)\`) | Authenticated API redirect printed for private video, audio, and HTML \u2014 requires the Replicas chat session | **Only** in the Replicas chat reply. Nowhere else. |
 | \`https://replicas.dev/organizations/<organization-id>/media/<media-id>\` | Organization-only page printed by \`--access organization\` | Pull requests and other places where every viewer belongs to the Replicas organization. |
 | \`https://api.replicas.dev/v1/media/public/<id>/<token>\` | Public bearer URL printed for every image, and for video or audio with \`--access public\` | The Replicas chat reply and GitHub embeds. |
-| \`https://app.replicas.dev/workspaces/<workspace-id>?media=<media-id>\` | Authenticated dashboard deep link that opens the media file in the workspace | Everywhere external: Slack, GitHub, GitLab, Linear, PR bodies, comments, emails. |
+| \`https://app.replicas.dev/workspaces/<workspace-id>?mode=media&media=<media-id>\` | Authenticated dashboard deep link that opens the media file in the workspace | Everywhere external: Slack, GitHub, GitLab, Linear, PR bodies, comments, emails. |
 
 ### NEVER link the API redirect URL outside the Replicas chat reply
 
@@ -3848,10 +3848,10 @@ This rule has no exceptions:
 For an organization-only HTML page, use the \`Forge link\` printed by \`--access organization\`. For other authenticated media references, use the dashboard form:
 
 \`\`\`
-https://app.replicas.dev/workspaces/<workspace-id>?media=<media-id>
+https://app.replicas.dev/workspaces/<workspace-id>?mode=media&media=<media-id>
 \`\`\`
 
-The \`media=<media-id>\` query param opens that specific file in the workspace.
+The \`mode=media&media=<media-id>\` query params open that specific file in the workspace.
 
 When you have a specific file in mind, never link the bare workspace URL without the \`media=<id>\` param.
 
@@ -3861,6 +3861,8 @@ Always render as a markdown / mrkdwn hyperlink labeled **View in Replicas** \u20
 
 Include each markdown embed line **verbatim** where you want that file to render inline. The chat substitutes each one with an embedded image, video, or audio player. For HTML, use the printed \`HTML page\` link. Multiple embeds can appear in a single reply.
 
+Never reply with only dashboard links (for example a "Links:" list of \`?mode=media&media=\` URLs) in place of the embeds: a dashboard link renders as plain text, so the user sees nothing inline. This applies even when the task came from Slack, Linear, GitHub, or GitLab; the chat reply still gets the embeds.
+
 After (or alongside) the embeds, include a \`[View in Canvas](<deep-link>)\` hyperlink for each file using the per-file dashboard URL printed by the CLI as **View in Replicas**. Keep that URL unchanged so it opens the specific media item in the workspace's Canvas. External messages still label this dashboard link **View in Replicas**.
 
 ## On external platforms: embed the file AND link the dashboard
@@ -3868,7 +3870,7 @@ After (or alongside) the embeds, include a \`[View in Canvas](<deep-link>)\` hyp
 After \`replicas media upload\` succeeds, external delivery has two required follow-up steps for every file:
 
 1. **Use the destination's inline representation:** upload the raw bytes to Slack, Linear, or GitLab; embed the image's printed public link on GitHub.
-2. **Link the Replicas dashboard deep link** (\`?media=<id>\` form) so the user can jump straight to the file in the workspace.
+2. **Link the Replicas dashboard deep link** (\`?mode=media&media=<id>\` form) so the user can jump straight to the file in the workspace.
 
 A dashboard link alone is not enough. An embed without the dashboard link is not enough. Do both.
 
@@ -3897,7 +3899,7 @@ await replicas.slack.call('files.completeUploadExternal', {
   files: [{ id: reservation.file_id, title: 'Screenshot' }],
   channel_id: 'CHANNEL_ID',
   thread_ts: 'THREAD_TS',
-  initial_comment: '<https://app.replicas.dev/workspaces/<workspace-id>?media=<media-id>|View in Replicas>',
+  initial_comment: '<https://app.replicas.dev/workspaces/<workspace-id>?mode=media&media=<media-id>|View in Replicas>',
 });
 \`\`\`
 
@@ -3920,7 +3922,7 @@ Use \`jq\` to build the JSON bodies \u2014 the GraphQL variables (\`size\`, \`fi
 FILE=/abs/path/to/screenshot.png
 FILENAME=$(basename "$FILE")
 SIZE=$(stat -c%s "$FILE" 2>/dev/null || stat -f%z "$FILE")
-CONTENT_TYPE=image/png
+CONTENT_TYPE=image/png   # the file's real MIME type, e.g. video/mp4 for a recording
 ISSUE_UUID=...           # the Linear issue's UUID
 MEDIA_ID=...             # the media ID printed by \`replicas media upload\`
 
@@ -3957,7 +3959,7 @@ curl -s -X PUT "$UPLOAD_URL" \\
   --data-binary @"$FILE"
 
 # 3. Reference assetUrl inline in the comment body, alongside the dashboard link.
-BODY=$(printf '![screenshot](%s)\\n\\n[View in Replicas](https://app.replicas.dev/workspaces/%s?media=%s)' \\
+BODY=$(printf '![screenshot](%s)\\n\\n[View in Replicas](https://app.replicas.dev/workspaces/%s?mode=media&media=%s)' \\
   "$ASSET_URL" "$REPLICAS_WORKSPACE_ID" "$MEDIA_ID")
 
 jq -n \\
@@ -3969,6 +3971,8 @@ jq -n \\
     }' | linear_graphql
 \`\`\`
 
+For a recording, upload the MP4 with its own MIME type, then upload a poster frame (\`ffmpeg -i /tmp/demo.mp4 -frames:v 1 /tmp/demo-poster.png\`) the same way as \`image/png\` and link it: \`[![Demo recording](<poster-asset-url>)](<recording-asset-url>)\`.
+
 The same flow works for issue bodies (use \`issueCreate\` / \`issueUpdate\` with the same markdown body).
 
 Never paste the \`api.replicas.dev/v1/media/<id>\` URL into a Linear body or comment \u2014 it will render as a broken image to anyone outside your Replicas chat.
@@ -4008,7 +4012,7 @@ Do **not** commit screenshots to the repo, use placeholder URLs, expose the auth
 
 GitLab supports native project Markdown uploads. For a GitLab destination, always upload the media to Replicas first, then POST the same original file to the repository's \`/projects/:id/uploads\` API using the workspace GitLab credential. Insert the returned \`markdown\` value into the merge request body or comment and include the Replicas dashboard link. Image uploads render inline; MP4, MOV, and WebM uploads render as inline video players.
 
-Do not use a Replicas public link for GitLab when the native project upload succeeds; native uploads preserve project access controls.
+Do not use a Replicas public link for GitLab when the native project upload succeeds; native uploads preserve project access controls. \`replicas.gitlab.request\` only sends JSON and cannot POST multipart file bytes, so without another supported upload path use the GitHub flow above instead: the image's printed public embed, and a poster linked to the recording's **View in Replicas** URL.
 
 ## Recording defaults
 
@@ -4056,7 +4060,7 @@ replicas media upload chart-a.svg chart-b.svg --name "Latency chart" --name "Err
 var MEDIA_ABILITY = {
   label: "Media",
   description: "Deliver media to Replicas and destination workflows with inline uploads.",
-  bullet: "- Producing or showing the user any media \u2014 screenshots, screen recordings, generated images or diagrams, audio clips, or HTML recap pages \u2014 including in your Replicas chat reply, PR descriptions/comments, and other external platforms",
+  bullet: "- Producing or showing the user any media \u2014 screenshots, screen recordings, generated images or diagrams, audio clips, or HTML recap pages \u2014 including in your Replicas chat reply, PR descriptions/comments, and other external platforms. Paste the printed `![\u2026](\u2026)` embeds in your chat reply, never only dashboard links, and upload the file itself to Slack, Linear, or GitLab",
   section: SECTION7,
   referenceFile: { name: "MEDIA.md", content: REFERENCE7 }
 };

package/dist/src/{chunk-6LIDXAYC.js → chunk-PZRTVPBS.js}

@@ -5,7 +5,7 @@ import {
   extractCommandProtectionCommandText,
   isRecord,
   parseCodeHostPrUrl
-} from "./chunk-FWG6GISJ.js";
+} from "./chunk-LTK6ZXLV.js";
 
 // src/services/published-pull-request-urls.ts
 function publishedPullRequestUrls(result) {

package/dist/src/{chunk-5MEISXIX.js → chunk-RO6HHOHQ.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES
-} from "./chunk-FWG6GISJ.js";
+} from "./chunk-LTK6ZXLV.js";
 
 // src/utils/exec.ts
 import { exec, execFile } from "child_process";

package/dist/src/{chunk-TZHZU4JB.js → chunk-ZKLDWIYS.js}

@@ -3,18 +3,18 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   monolithRequest
-} from "./chunk-W4UVXL3R.js";
+} from "./chunk-6U4QFF5X.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execFileAsync
-} from "./chunk-5MEISXIX.js";
+} from "./chunk-RO6HHOHQ.js";
 import {
   extractCommandProtectionCommandText,
   findCommandProtectionGitLookups,
   findGitCommitSignals,
   findPrMergeSignals,
   parseCommandProtectionRequest
-} from "./chunk-FWG6GISJ.js";
+} from "./chunk-LTK6ZXLV.js";
 
 // src/services/command-protection-service.ts
 import { readFile, stat } from "fs/promises";

package/dist/src/command-protection-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-TZHZU4JB.js";
-import "./chunk-W4UVXL3R.js";
-import "./chunk-5MEISXIX.js";
+} from "./chunk-ZKLDWIYS.js";
+import "./chunk-6U4QFF5X.js";
+import "./chunk-RO6HHOHQ.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-FWG6GISJ.js";
+import "./chunk-LTK6ZXLV.js";
 import "./chunk-VEQXQN22.js";
 
 // src/command-protection-hook.ts

package/dist/src/headless-agent.js

@@ -7,12 +7,12 @@ import {
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-4V3WESQO.js";
-import "./chunk-5MEISXIX.js";
+} from "./chunk-KPG62IXT.js";
+import "./chunk-RO6HHOHQ.js";
 import {
   AGENT,
   headlessAgentRequestSchema
-} from "./chunk-FWG6GISJ.js";
+} from "./chunk-LTK6ZXLV.js";
 import "./chunk-VEQXQN22.js";
 
 // src/headless-agent.ts

package/dist/src/index.js

@@ -32,7 +32,7 @@ import {
   reportCommandProtectionBlock,
   resolveDiffBase,
   runGitCommand
-} from "./chunk-TZHZU4JB.js";
+} from "./chunk-ZKLDWIYS.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -57,7 +57,7 @@ import {
 } from "./chunk-P73LGPQO.js";
 import {
   publishedPullRequestUrls
-} from "./chunk-6LIDXAYC.js";
+} from "./chunk-PZRTVPBS.js";
 import {
   BaseRefreshManager,
   CodexAspAuthMethodChangedError,
@@ -72,7 +72,7 @@ import {
   refreshDelayMs,
   restartCodexAspHost,
   routineRefreshExclusions
-} from "./chunk-D246GL25.js";
+} from "./chunk-GBIUC3IW.js";
 import {
   ENGINE_ENV,
   monolithRequest,
@@ -80,16 +80,16 @@ import {
   readRuntimeEnvFile,
   reloadEngineEnv,
   setAgentCredentialSnapshot
-} from "./chunk-W4UVXL3R.js";
+} from "./chunk-6U4QFF5X.js";
 import {
   AspClient,
   getCodexModelProvider
-} from "./chunk-4V3WESQO.js";
+} from "./chunk-KPG62IXT.js";
 import {
   SUBPROCESS_MAX_BUFFER,
   execAsync,
   execFileAsync
-} from "./chunk-5MEISXIX.js";
+} from "./chunk-RO6HHOHQ.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -315,7 +315,7 @@ import {
   workspaceCredentialProviderSchema,
   workspaceTokenRequestSchema,
   workspaceTokenResponseSchema
-} from "./chunk-FWG6GISJ.js";
+} from "./chunk-LTK6ZXLV.js";
 import {
   cloneMcpConfig,
   ensureCompatibilityImports,

package/dist/src/post-tool-pr-hook.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   publishedPullRequestUrls
-} from "./chunk-6LIDXAYC.js";
+} from "./chunk-PZRTVPBS.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
 import {
   shouldRefreshPullRequests
-} from "./chunk-FWG6GISJ.js";
+} from "./chunk-LTK6ZXLV.js";
 import "./chunk-VEQXQN22.js";
 
 // src/services/post-tool-pr-notifier.ts

package/dist/src/subagent-mcp.js

@@ -9,7 +9,7 @@ import {
   spawnSubagentRequestSchema,
   subagentResponseSchema,
   waitSubagentRequestSchema
-} from "./chunk-FWG6GISJ.js";
+} from "./chunk-LTK6ZXLV.js";
 import "./chunk-VEQXQN22.js";
 
 // src/subagent-mcp.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.988",
+  "version": "0.1.990",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",