replicas-mcp 0.2.14 → 0.2.15

package/README.md

@@ -1,8 +1,8 @@
 # replicas-mcp
 
-Stdio MCP server for [Replicas](https://tryreplicas.com) - cloud workspaces for AI coding agents.
+Stdio MCP server for [Replicas](https://replicas.dev) - cloud workspaces for AI coding agents.
 
-For MCP clients that require a remote server URL instead of stdio, use the streamable HTTP endpoint at `https://api.tryreplicas.com/v1/mcp`.
+For MCP clients that require a remote server URL instead of stdio, use the streamable HTTP endpoint at `https://api.replicas.dev/v1/mcp`.
 
 ## Installation
 
@@ -20,7 +20,7 @@ For MCP clients that require a remote server URL instead of stdio, use the strea
 }
 ```
 
-Get your API key from [Settings > API Keys](https://tryreplicas.com/dashboard/settings?tab=api-keys).
+Get your API key from [Settings > API Keys](https://replicas.dev/dashboard/settings?tab=api-keys).
 
 ## Tools
 

package/dist/index.js

@@ -181,6 +181,7 @@ var WEB_APP_PATHS = {
   automations: `${HOME_PATH}/automations`,
   environment: `${HOME_PATH}/environment`,
   analytics: `${HOME_PATH}/analytics`,
+  memory: `${HOME_PATH}/memory`,
   dashboard: DASHBOARD_PATH,
   agents: `${DASHBOARD_PATH}/agents`,
   integrations: `${DASHBOARD_PATH}/integrations`,
@@ -192,6 +193,7 @@ var WEB_APP_PATHS = {
   "audit-logs": `${DASHBOARD_PATH}/audit-logs`,
   accountAgents: `${DASHBOARD_PATH}/account/agents`,
   accountProfile: `${DASHBOARD_PATH}/account/profile`,
+  accountConnections: `${DASHBOARD_PATH}/account/connections`,
   accountIntegrations: `${DASHBOARD_PATH}/account/integrations`,
   accountApiKeys: `${DASHBOARD_PATH}/account/api-keys`,
   accountPreferences: `${DASHBOARD_PATH}/account/preferences`,
@@ -264,10 +266,12 @@ replicas computer record stop
 replicas media upload /tmp/demo.mp4 --name "Demo recording"
 \`\`\`
 
+For any external destination, continue with the required delivery flow in \`MEDIA.md\`.
+
 ## Command reference
 
 ### \`replicas computer info\`
-Prints the live desktop viewer URL (\`https://6080-<hash>.tryreplicas.com/\`). The engine auto-registers this authenticated preview on startup; \`info\` just looks it up. Use it when you want to share the live stream URL with the user out-of-band (e.g. in a Slack reply) - the dashboard \`Desktop\` tab already points at the same URL automatically.
+Prints the live desktop viewer URL (\`https://6080-<hash>.replicas.dev/\`). The engine auto-registers this authenticated preview on startup; \`info\` just looks it up. Use it when you want to share the live stream URL with the user out-of-band (e.g. in a Slack reply) - the dashboard \`Desktop\` tab already points at the same URL automatically.
 
 If invoked very early in the workspace lifecycle, \`info\` will poll briefly while the engine finishes registering the preview, then error if it's still not available.
 
@@ -398,7 +402,7 @@ replicas computer record start /tmp/walkthrough.mp4
 replicas computer record stop
 replicas media upload /tmp/walkthrough.mp4 --name "Walkthrough recording"
 \`\`\`
-Then embed the printed \`![\u2026](\u2026)\` line in your chat reply. See \`MEDIA.md\`.
+Then embed the printed \`![\u2026](\u2026)\` line in your chat reply and follow \`MEDIA.md\` for any external destination.
 
 ## Failure modes
 
@@ -598,16 +602,9 @@ gh pr review 123 --approve
 gh pr review 123 --request-changes --body "Changes needed"
 \`\`\`
 
-## Image Uploads in PRs
+## Media in GitHub workflows
 
-GitHub does NOT have a public API for uploading images to PRs/issues. When you need to include images:
-- Do NOT use placeholder image URLs
-- Do NOT commit screenshots as files to the repository
-- Run \`replicas media upload <image> --name "<display name>" --share\` and put the printed \`Forge embed\` Markdown in the PR body or comment
-- For a self-contained HTML report, run \`replicas media upload <page.html> --name "<display name>" --access organization\` and put the printed \`Forge link\` Markdown in the PR body or comment. Organization members who are already signed in open it directly; others sign in and return to the page
-- For video, embed a shared poster image linked to the recording's **View in Replicas** URL; GitHub does not reliably render externally hosted video inline
-- Treat the public URL as an opt-in bearer capability; revoke it with \`replicas media revoke <media-id>\` only when the user asks or the media should stop rendering \u2014 revoking breaks embeds already posted on the PR
-- If you were triggered from Slack, also upload the image to the Slack thread so the user can see it directly
+Media delivery is owned by \`references/MEDIA.md\`. Read its GitHub section before adding screenshots, recordings, diagrams, or HTML reports to a pull request, issue, review comment, or commit; it covers the Replicas upload, GitHub's inline fallback, and the required **View in Replicas** link.
 `;
 var GITHUB_ABILITY = {
   label: "GitHub",
@@ -669,7 +666,7 @@ await replicas.gitlab.request('/projects/group%2Frepo/pipelines', {
 
 ## Descriptions and media
 
-API updates replace the entire merge request description, so always preserve the required Replicas footer and co-author trailers. For media, first run \`replicas media upload\` as documented in \`MEDIA.md\`; use GitLab's project uploads endpoint only when a native repository-protected embed is required.
+API updates replace the entire merge request description, so always preserve the required Replicas footer and co-author trailers. Media delivery is owned by \`references/MEDIA.md\`; read its GitLab section before adding media so the original bytes are uploaded to Replicas and GitLab and the dashboard link remains secondary.
 `;
 var GITLAB_ABILITY = {
   label: "GitLab",
@@ -734,6 +731,8 @@ await replicas.linear.graphql({
 \`\`\`
 
 Search with \`containsIgnoreCase: $query\` filters, for example on both \`title\` and \`description\`. Batch independent queries with \`Promise.all\` to save round trips.
+
+For screenshots, recordings, diagrams, or other media, read \`references/MEDIA.md\` before adding it to an issue or comment. It is the single source of truth for uploading the Replicas copy and the raw file to Linear; a dashboard link alone is not an inline attachment.
 `;
 var LINEAR_ABILITY = {
   label: "Linear",
@@ -745,18 +744,19 @@ var LINEAR_ABILITY = {
 
 // ../shared/src/default-skills/replicas-agent/abilities/media.ts
 var SECTION6 = `### Media
-Share screenshots, screen recordings, generated diagrams, audio clips, and self-contained HTML pages through Replicas and external messages.
+Deliver screenshots, screen recordings, generated diagrams, audio clips, and self-contained HTML pages to the Replicas dashboard and, when applicable, inline in the destination workflow.
 
 **Reference:** \`references/MEDIA.md\`
 
 Use this when:
+- You are about to run \`replicas media upload\`; this reference owns the complete Replicas-first, destination-second workflow
 - You produce a screenshot, recording, generated image, or audio clip the user should see
 - You produce a self-contained HTML report that should be linked from a pull request
 - You record video output (browser automation, screen capture) \u2014 including the recommended aspect ratio and FPS
-- You need to embed media in a Slack/Linear/GitHub message AND keep a referenceable copy in the Replicas dashboard`;
+- You need to embed media in a Slack/Linear/GitHub/GitLab message AND keep a referenceable copy in the Replicas dashboard`;
 var REFERENCE6 = `# Media (Screenshots, Recordings, Audio, HTML)
 
-This guide covers how to share screenshots, screen recordings, generated diagrams, audio clips, and self-contained HTML pages through Replicas and external surfaces (Slack, Linear, GitHub).
+This is the single source of truth for delivering screenshots, screen recordings, generated diagrams, audio clips, and self-contained HTML pages through Replicas and external surfaces (Slack, Linear, GitHub, GitLab).
 
 ## Prerequisites
 
@@ -766,12 +766,32 @@ The \`replicas\` CLI is pre-installed and authenticated in your workspace. No ad
 
 Upload to Replicas in these cases \u2014 and **only** these cases:
 
-1. **Media you produce.** Any screenshot, screen recording, generated diagram, or audio clip you create that the user might want to see. Upload before doing anything else with the file (analyzing, deleting, sending elsewhere). This applies even when you're also sending the file to Slack, Linear, GitHub, etc.
+1. **Media you produce.** Any screenshot, screen recording, generated diagram, audio clip, or HTML page you create that the user might want to see. Upload before doing anything else with the file (analyzing, deleting, sending elsewhere). This applies even when you're also sending the file to Slack, Linear, GitHub, or GitLab.
 2. **Files the user explicitly asks you to upload.** If the user sends or points at a file (image, video, audio, HTML) and asks you to upload it, run \`replicas media upload\`. Otherwise leave it alone \u2014 files in the workspace the user did not ask about should not be auto-uploaded as media.
-3. **Anything you plan to share externally (Slack, Linear, GitHub, etc.).** Upload to Replicas *in addition to* the platform's native upload. Never as a replacement.
+3. **Anything you plan to share externally (Slack, Linear, GitHub, GitLab, etc.).** Upload to Replicas *in addition to* the platform's destination upload. Never as a replacement.
 
 If none of these apply, don't upload.
 
+## Required delivery contract
+
+\`replicas media upload\` is always the first delivery action. When the current task has an external destination, every other delivery step follows only after that command succeeds. For every file:
+
+1. First, run \`replicas media upload\` with the original file. Do not begin any destination upload until the command succeeds. This creates the canonical dashboard copy and prints the authenticated chat embed plus a per-file dashboard link.
+2. Include the printed embed line in the Replicas chat reply, followed by the matching **View in Replicas** link. HTML uses its printed page link instead of an image embed.
+3. Identify every destination in the task and attempt to upload the same original bytes there. Use the destination's inline representation from the table below; do not replace the file with a Replicas link.
+4. Put the **View in Replicas** dashboard link next to the destination embed as a secondary link.
+5. Check each destination response. If a native upload is unavailable or fails, say so explicitly and keep the dashboard link; never claim that a link is an inline upload.
+
+| Destination | Required file delivery | Inline result |
+|---|---|---|
+| Replicas dashboard/chat | \`replicas media upload\` | Printed \`![\u2026](\u2026)\` line in chat |
+| Slack | \`files.getUploadURLExternal\` \u2192 raw-byte POST \u2192 \`files.completeUploadExternal\` | Uploaded file in the channel or thread |
+| Linear | \`fileUpload\` mutation \u2192 presigned upload \u2192 issue/comment mutation | Returned \`assetUrl\` in Markdown |
+| GitLab | Project \`/uploads\` endpoint with the original bytes | Returned GitLab Markdown |
+| GitHub | No supported attachment API; use a Replicas public forge share for the inline image or video poster | Printed Forge embed, linked to the recording when needed |
+
+The dashboard link is the subtitle and jump-back path. It is never a substitute for the destination upload.
+
 ## Uploading to Replicas
 
 \`\`\`bash
@@ -799,7 +819,7 @@ Names are normalized to hyphen-case (spaces become hyphens, e.g. \`Login page\`
 For each media file, the CLI prints two lines:
 
 1. \`![filename](<api-url>)\` \u2014 the chat embed (renders inline in Replicas chat **only** \u2014 see below).
-2. \`View in Replicas: <deep-link>\` \u2014 a per-file dashboard URL of the form \`https://tryreplicas.com/workspaces/<workspace-id>?media=<media-id>\` that opens directly to that specific file.
+2. \`View in Replicas: <deep-link>\` \u2014 a per-file dashboard URL of the form \`https://replicas.dev/workspaces/<workspace-id>?media=<media-id>\` that opens directly to that specific file.
 
 Match each "View in Replicas" line to the embed line directly above it \u2014 that's the deep link for that file.
 
@@ -825,19 +845,20 @@ replicas media upload screenshot.png --name "Login page" --access public
 
 | URL | What it is | Where it's allowed |
 |---|---|---|
-| \`https://api.tryreplicas.com/v1/media/<id>\` (inside \`![\u2026](\u2026)\`) | Authenticated API redirect to a presigned blob \u2014 requires the Replicas chat session | **Only** in the Replicas chat reply. Nowhere else. |
-| \`https://tryreplicas.com/organizations/<organization-id>/media/<media-id>\` | Organization-only page printed by \`--access organization\` | Pull requests and other places where every viewer belongs to the Replicas organization. |
-| \`https://api.tryreplicas.com/v1/media/public/<id>/<token>\` | Opt-in public bearer URL printed by \`--access public\` or \`--share\` | GitHub embeds for image, video, or audio media. |
-| \`https://tryreplicas.com/workspaces/<workspace-id>?media=<media-id>\` | Authenticated dashboard deep link that opens the media file in the workspace | Everywhere external \u2014 Slack, GitHub, Linear, PR bodies, comments, emails. |
+| \`https://api.replicas.dev/v1/media/<id>\` (inside \`![\u2026](\u2026)\`) | Authenticated API redirect to a presigned blob \u2014 requires the Replicas chat session | **Only** in the Replicas chat reply. Nowhere else. |
+| \`https://replicas.dev/organizations/<organization-id>/media/<media-id>\` | Organization-only page printed by \`--access organization\` | Pull requests and other places where every viewer belongs to the Replicas organization. |
+| \`https://api.replicas.dev/v1/media/public/<id>/<token>\` | Opt-in public bearer URL printed by \`--access public\` or \`--share\` | GitHub embeds for image, video, or audio media. |
+| \`https://replicas.dev/workspaces/<workspace-id>?media=<media-id>\` | Authenticated dashboard deep link that opens the media file in the workspace | Everywhere external: Slack, GitHub, GitLab, Linear, PR bodies, comments, emails. |
 
 ### NEVER link the API redirect URL outside the Replicas chat reply
 
-The \`api.tryreplicas.com/v1/media/<id>\` URL is **not public**. It's an authenticated redirect that only resolves to a presigned download when the Replicas chat session token is present. Anywhere else (Slack, Linear, GitHub, a browser tab the user opens directly, a customer copy-pasting from chat) it returns \`{"error":"Missing authorization token"}\` and renders as a broken image.
+The \`api.replicas.dev/v1/media/<id>\` URL is **not public**. It's an authenticated redirect that only resolves to a presigned download when the Replicas chat session token is present. Anywhere else (Slack, Linear, GitHub, a browser tab the user opens directly, a customer copy-pasting from chat) it returns \`{"error":"Missing authorization token"}\` and renders as a broken image.
 
 This rule has no exceptions:
 - \u274C Never paste it in a Slack message \u2014 upload the actual bytes via the 3-step \`files.getUploadURLExternal\` \u2192 POST bytes \u2192 \`files.completeUploadExternal\` flow instead (see below).
 - \u274C Never paste it in a GitHub PR description, issue body, review comment, or commit message.
 - \u274C Never paste it in a Linear issue body or comment \u2014 upload via Linear's \`fileUpload\` mutation instead (see below).
+- \u274C Never paste it in a GitLab merge request or issue; upload the original bytes through GitLab's project upload endpoint instead (see below).
 - \u274C Never link to it from any external doc, email, or external chat.
 - \u274C Never include it as a "backup link" in case the dashboard link breaks \u2014 it will always break externally.
 
@@ -846,7 +867,7 @@ This rule has no exceptions:
 For an organization-only HTML page, use the \`Forge link\` printed by \`--access organization\`. For other authenticated media references, use the dashboard form:
 
 \`\`\`
-https://tryreplicas.com/workspaces/<workspace-id>?media=<media-id>
+https://replicas.dev/workspaces/<workspace-id>?media=<media-id>
 \`\`\`
 
 The \`media=<media-id>\` query param opens that specific file in the workspace.
@@ -861,20 +882,20 @@ Include each markdown embed line **verbatim** where you want that file to render
 
 After (or alongside) the embeds, include a \`[View in Replicas](<deep-link>)\` hyperlink for each file using the per-file dashboard URL from the CLI. This lets the user open the specific item in the workspace.
 
-## On external platforms \u2014 upload natively AND link the dashboard
+## On external platforms: embed the file AND link the dashboard
 
-Sharing media externally is a **two-step requirement** for every file:
+After \`replicas media upload\` succeeds, external delivery has two required follow-up steps for every file:
 
-1. **Upload the raw bytes natively to that platform** so the recipient sees the media embedded inline in the message itself.
+1. **Upload the raw bytes through that platform's supported inline path** so the recipient sees the media embedded in the message itself.
 2. **Link the Replicas dashboard deep link** (\`?media=<id>\` form) so the user can jump straight to the file in the workspace.
 
-A link alone is not enough. A native upload alone is not enough. Do both.
+A link alone is not enough. An upload without the dashboard link is not enough. Do both.
 
-GitHub has no native upload API, so use an explicit Replicas public share for screenshots and recording previews. GitLab has a native upload API and should receive the original bytes.
+Slack, Linear, and GitLab receive the original bytes through their native upload APIs. GitHub has no supported attachment API, so use an explicit Replicas public share for screenshots and recording previews.
 
 ### Slack \u2014 embed natively via the 3-step external file upload flow
 
-A Slack message that just contains a \`tryreplicas.com\` link is not acceptable when the message is supposed to show an image. The recipient should see the image inline in the thread.
+A Slack message that just contains a \`replicas.dev\` link is not acceptable when the message is supposed to show an image. The recipient should see the image inline in the thread.
 
 Slack deprecated the single-shot \`files.upload\` endpoint. The raw HTTP replacement is a 3-step flow: reserve an upload URL with \`files.getUploadURLExternal\`, POST the bytes to it, then share into the channel/thread with \`files.completeUploadExternal\`. (\`files.uploadV2\` is **only** an SDK convenience wrapper \u2014 it is NOT a real Web API HTTP endpoint and \`POST https://slack.com/api/files.uploadV2\` will return \`unknown_method\`.)
 
@@ -906,7 +927,7 @@ curl -s -X POST "https://slack.com/api/files.completeUploadExternal" \\
     \\"files\\": [{\\"id\\": \\"$FILE_ID\\", \\"title\\": \\"Screenshot\\"}],
     \\"channel_id\\": \\"CHANNEL_ID\\",
     \\"thread_ts\\": \\"THREAD_TS\\",
-    \\"initial_comment\\": \\"<https://tryreplicas.com/workspaces/<workspace-id>?media=<media-id>|View in Replicas>\\"
+    \\"initial_comment\\": \\"<https://replicas.dev/workspaces/<workspace-id>?media=<media-id>|View in Replicas>\\"
   }"
 \`\`\`
 
@@ -917,7 +938,7 @@ Notes:
 - For multiple files in the same message, run steps 1\u20132 per file and pass all \`{id, title}\` objects in the \`files\` array of a single \`files.completeUploadExternal\` call \u2014 they share into the thread together.
 - If you also need to post a separate text reply in the thread, send it with \`chat.postMessage\` after the upload \u2014 but the upload itself must carry the image.
 
-Never paste the \`api.tryreplicas.com/v1/media/<id>\` URL into a Slack message body or \`initial_comment\` \u2014 it will render as a broken image attempt.
+Never paste the \`api.replicas.dev/v1/media/<id>\` URL into a Slack message body or \`initial_comment\` \u2014 it will render as a broken image attempt.
 
 ### Linear \u2014 embed natively via the GraphQL \`fileUpload\` mutation
 
@@ -966,7 +987,7 @@ curl -s -X PUT "$UPLOAD_URL" \\
   --data-binary @"$FILE"
 
 # 3. Reference assetUrl inline in the comment body, alongside the dashboard link.
-BODY=$(printf '![screenshot](%s)\\n\\n[View in Replicas](https://tryreplicas.com/workspaces/%s?media=%s)' \\
+BODY=$(printf '![screenshot](%s)\\n\\n[View in Replicas](https://replicas.dev/workspaces/%s?media=%s)' \\
   "$ASSET_URL" "$REPLICAS_WORKSPACE_ID" "$MEDIA_ID")
 
 jq -n \\
@@ -980,7 +1001,7 @@ jq -n \\
 
 The same flow works for issue bodies (use \`issueCreate\` / \`issueUpdate\` with the same markdown body).
 
-Never paste the \`api.tryreplicas.com/v1/media/<id>\` URL into a Linear body or comment \u2014 it will render as a broken image to anyone outside your Replicas chat.
+Never paste the \`api.replicas.dev/v1/media/<id>\` URL into a Linear body or comment \u2014 it will render as a broken image to anyone outside your Replicas chat.
 
 ### GitHub: inline screenshots and recording previews
 
@@ -1001,7 +1022,7 @@ GitHub does not reliably render arbitrary external videos as inline players. For
 [![Demo recording](<public-poster-url>)](<recording-dashboard-url>)
 \`\`\`
 
-Public forge shares are bearer capabilities. For private repositories, create one only when the user asked for inline PR media. Revoke with \`replicas media revoke <media-id>\` **only** when the user asks or the media should intentionally stop rendering \u2014 never as routine post-task cleanup, since revoking breaks every embed already posted on the PR.
+Public forge shares are unauthenticated bearer capabilities. For private repositories, create one only when the user explicitly asked for inline PR media. Without that consent, keep the media private in Replicas and report that GitHub has no supported attachment API; do not publish a bearer share or pretend the dashboard link is an embed. Revoke with \`replicas media revoke <media-id>\` **only** when the user asks or the media should intentionally stop rendering; never as routine post-task cleanup, since revoking breaks every embed already posted on the PR.
 
 For a self-contained HTML report, upload it with \`--access organization\` and put the printed \`Forge link\` Markdown in the PR body or comment. GitHub cannot render the page inline, so use the normal link rather than image syntax. HTML pages cannot be shared publicly.
 
@@ -1009,7 +1030,7 @@ Do **not** commit screenshots to the repo, use placeholder URLs, expose the auth
 
 ### GitLab: native inline screenshots and videos
 
-GitLab supports native project Markdown uploads. Always upload the media to Replicas first, then POST the same original file to the repository's \`/projects/:id/uploads\` API using the workspace GitLab credential. Insert the returned \`markdown\` value into the merge request body or comment and include the Replicas dashboard link. Image uploads render inline; MP4, MOV, and WebM uploads render as inline video players.
+GitLab supports native project Markdown uploads. For a GitLab destination, always upload the media to Replicas first, then POST the same original file to the repository's \`/projects/:id/uploads\` API using the workspace GitLab credential. Insert the returned \`markdown\` value into the merge request body or comment and include the Replicas dashboard link. Image uploads render inline; MP4, MOV, and WebM uploads render as inline video players.
 
 Do not use a Replicas public forge share for GitLab when the native project upload succeeds; native uploads preserve project access controls.
 
@@ -1058,7 +1079,7 @@ replicas media upload chart-a.svg chart-b.svg --name "Latency chart" --name "Err
 `;
 var MEDIA_ABILITY = {
   label: "Media",
-  description: "Share screenshots, recordings, generated images, audio clips, and HTML pages.",
+  description: "Deliver media to Replicas and destination workflows with inline uploads.",
   bullet: "- Producing or showing the user any media \u2014 screenshots, screen recordings, generated images or diagrams, audio clips, or HTML recap pages \u2014 including in your Replicas chat reply, PR descriptions/comments, and other external platforms",
   section: SECTION6,
   referenceFile: { name: "MEDIA.md", content: REFERENCE6 }
@@ -1161,19 +1182,16 @@ Discover and execute installed marketplace tools through the workspace-scoped Ty
 **Reference:** \`references/PLUGINS.md\`
 
 Use this when:
-- The user asks for CRM data from Attio
-- The user asks to manage Calendly events, invitees, or scheduling links
-- The user asks to read or change Google Ads, Docs, Drive, Search Console, or Sheets data
-- The user asks for ClickHouse analytics or PostHog product data
+- The user asks to work with an installed productivity, data, engineering, or business plugin
+- The user asks to discover which external services are connected
 - The user asks to create or control an E2B sandbox
 - The user asks to invoke a connected Modal function
 - The user asks to query or update a connected turbopuffer namespace
 - The user asks for PlanetScale organizations, databases, branches, or Insights data
-- The user asks to analyze text with Pangram
-- The user asks for Stripe customers, payments, invoices, subscriptions, or balances`;
+- The user asks to analyze text with Pangram`;
 var REFERENCE8 = `# Plugins
 
-Plugins are TypeScript libraries, not MCP servers. Import \`@replicas/sdk\`; Replicas authenticates the workspace and selects only the owner\u2019s personal connection or the organization fallback. Provider credentials, sessions, and project keys are never exposed.
+Plugins are TypeScript libraries, not MCP servers. Import \`@replicas/sdk\`; Replicas authenticates the workspace and selects the owner\u2019s personal connection first, then the most specific environment the workspace inherits from, then Global. Provider credentials, sessions, and project keys are never exposed.
 
 Plugin tools may read or write provider data according to the connected account's permissions. Only execute write or destructive tools when they match the user's request.
 
@@ -1186,7 +1204,7 @@ const plugins = await replicas.plugins.list();
 const installed = plugins.filter((plugin) => plugin.connected);
 \`\`\`
 
-If a plugin is not connected, ask the user to install it under personal or organization Integrations in the Replicas dashboard.
+If a plugin is not connected, ask the user to connect it under personal Connections or the relevant environment's Plugins tab. A connection on Global reaches every workspace unless a more specific environment overrides it.
 
 ## Search, inspect, execute
 
@@ -1343,7 +1361,7 @@ In agent mode the CLI hides commands that don't make sense for in-workspace agen
 | \`replicas automation ...\` | Manage automations (cron + GitHub/GitLab event triggers) |
 | \`replicas preview ...\` | Register / list preview URLs (covered in \`PREVIEWS.md\`) |
 | \`replicas service ...\` | Run long-lived services detached so they survive workspace sleep/wake (see below) |
-| \`replicas media ...\` | Upload screenshots, videos, audio (covered in \`MEDIA.md\`) |
+| \`replicas media ...\` | Upload media to the dashboard and follow \`MEDIA.md\` for destination embedding |
 | \`replicas slack thread ...\` | Attach or switch Slack thread routing (covered in \`SLACK.md\`) |
 
 \`replicas <command> --help\` is always the source of truth for flags.
@@ -1637,6 +1655,8 @@ await replicas.slack.call('chat.postMessage', {
 
 Only the announcing message gets the button \u2014 follow-ups about a pull request already linked in the thread keep the link in the text and drop the \`blocks\`. Use "View MR" for GitLab. With several links, give each button a unique \`action_id\` and name its repository in the label ("View PR \xB7 web").
 
+For screenshots, recordings, diagrams, or other media, read \`references/MEDIA.md\` before posting. It is the single source of truth for uploading the Replicas copy and the raw file to Slack; a dashboard link in \`text\` is not an inline attachment.
+
 Attach every new top-level conversation so future replies route to this workspace. For a reply in another thread, attach its root \`thread_ts\`, not the reply timestamp. Do not attach the originating thread again.
 
 ## Search and batch
@@ -1758,12 +1778,14 @@ var GPT_5_6_TERRA_MODEL = "gpt-5.6-terra";
 var GPT_5_6_LUNA_MODEL = "gpt-5.6-luna";
 var DEFAULT_CODEX_MODEL = GPT_5_6_SOL_MODEL;
 var DEFAULT_OPENCODE_MODEL = "z-ai/glm-5.2";
+var OX_ALPHA_MODEL = "stealth/ox-alpha";
 var DEEPSEEK_V4_PRO_MODEL = "deepseek/deepseek-v4-pro-0813";
 var DEEPSEEK_V4_FLASH_MODEL = "deepseek/deepseek-v4-flash-0731";
 var DEFAULT_FX_MODEL = "zai/glm-5.2";
 var DEFAULT_KIMI_MODEL = "moonshotai/kimi-k2.6";
 var OPENROUTER_MODELS = [
   DEFAULT_OPENCODE_MODEL,
+  OX_ALPHA_MODEL,
   DEEPSEEK_V4_PRO_MODEL,
   DEEPSEEK_V4_FLASH_MODEL,
   "minimax/minimax-m3",
@@ -1853,6 +1875,7 @@ var MODEL_LABELS = {
   [GPT_5_6_LUNA_MODEL]: "GPT-5.6 Luna",
   "gpt-5.5": "GPT-5.5",
   [DEFAULT_OPENCODE_MODEL]: "GLM 5.2 via OpenRouter",
+  [OX_ALPHA_MODEL]: "Ox Alpha via OpenRouter",
   [DEEPSEEK_V4_PRO_MODEL]: "DeepSeek V4 Pro via OpenRouter",
   [DEEPSEEK_V4_FLASH_MODEL]: "DeepSeek V4 Flash via OpenRouter",
   "minimax/minimax-m3": "MiniMax M3 via OpenRouter",
@@ -3274,7 +3297,11 @@ function parseClaudeEvents(events, parentToolUseId) {
   const assistantTextCounts = /* @__PURE__ */ new Map();
   const acceptedUserMessageIndexes = /* @__PURE__ */ new Set();
   const canonicalUserMessageIndexes = /* @__PURE__ */ new Set();
-  const findMatchingUserMessageIndex = (indexes, content, timestamp) => {
+  const findMatchingUserMessageIndex = (indexes, content, timestamp, messageId) => {
+    if (typeof messageId === "string") {
+      const byId = messages.findIndex((message) => message.type === "user" && message.id === messageId);
+      if (byId !== -1) return byId;
+    }
     return [...indexes].find((index) => {
       const message = messages[index];
       return message?.type === "user" && areUserMessagesWithinMatchWindow(message, { content, timestamp });
@@ -3292,7 +3319,7 @@ function parseClaudeEvents(events, parentToolUseId) {
       const images = userMessageImages(event.payload.images);
       if (content || images) {
         const messageId = event.payload[USER_MESSAGE_ID_PAYLOAD_KEY];
-        const canonicalIndex = findMatchingUserMessageIndex(canonicalUserMessageIndexes, content, event.timestamp);
+        const canonicalIndex = findMatchingUserMessageIndex(canonicalUserMessageIndexes, content, event.timestamp, messageId);
         const canonical = canonicalIndex === void 0 ? void 0 : messages[canonicalIndex];
         const message = {
           id: typeof messageId === "string" ? messageId : `user-${event.timestamp}`,
@@ -3367,14 +3394,16 @@ function parseClaudeEvents(events, parentToolUseId) {
         };
       }).filter((img) => img.data);
       if (textContent || images.length > 0) {
+        const stampedId = event.payload[USER_MESSAGE_ID_PAYLOAD_KEY];
         const acceptedIndex = findMatchingUserMessageIndex(
           acceptedUserMessageIndexes,
           textContent,
-          event.timestamp
+          event.timestamp,
+          stampedId
         );
         const accepted = acceptedIndex === void 0 ? void 0 : messages[acceptedIndex];
         const message = {
-          id: accepted?.id ?? `user-${event.timestamp}`,
+          id: accepted?.id ?? (typeof stampedId === "string" ? stampedId : `user-${event.timestamp}`),
           type: "user",
           content: textContent || (images.length > 0 ? `[${images.length} image${images.length > 1 ? "s" : ""} attached]` : ""),
           images: images.length > 0 ? images : accepted?.type === "user" ? accepted.images : void 0,
@@ -3878,7 +3907,7 @@ var DEFAULT_WORKSPACE_FILTERS = {
 var ONE_DAY_MS = 24 * 60 * 60 * 1e3;
 
 // src/index.ts
-var API_URL = process.env.REPLICAS_API_URL || "https://api.tryreplicas.com";
+var API_URL = process.env.REPLICAS_API_URL || "https://api.replicas.dev";
 var API_KEY = process.env.REPLICAS_API_KEY;
 if (!API_KEY) {
   console.error("REPLICAS_API_KEY environment variable required");
@@ -3910,7 +3939,7 @@ function result(data, isError = false) {
 }
 var server = new McpServer({
   name: "replicas-mcp",
-  version: "0.2.14"
+  version: "0.2.15"
 });
 var registerTool = server.registerTool.bind(server);
 var codingAgentSchema = z3.string().refine(isValidCodingAgentProvider, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-mcp",
-  "version": "0.2.14",
+  "version": "0.2.15",
   "license": "UNLICENSED",
   "type": "module",
   "main": "dist/index.js",

package/src/index.ts

@@ -18,7 +18,7 @@ import {
   VALID_LIFECYCLE_POLICIES,
 } from '../../shared/src/routes/workspaces';
 
-const API_URL = process.env.REPLICAS_API_URL || 'https://api.tryreplicas.com';
+const API_URL = process.env.REPLICAS_API_URL || 'https://api.replicas.dev';
 const API_KEY = process.env.REPLICAS_API_KEY;
 
 if (!API_KEY) {
@@ -71,7 +71,7 @@ type RegisterToolFn = (
 
 const server = new McpServer({
   name: 'replicas-mcp',
-  version: '0.2.14',
+  version: '0.2.15',
 });
 
 const registerTool = server.registerTool.bind(server) as RegisterToolFn;