@arbol-ai/cli 3.35.0 → 3.37.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/README.md +6 -0
  2. package/dist/index.js +9714 -3249
  3. package/package.json +4 -4
package/README.md CHANGED
@@ -209,3 +209,9 @@ review the owner contract changes before publishing.
209
209
  `bun run verify` checks types and builds the CLI without executing tests. Tests are
210
210
  manual: run `bun run test` or `bun run verify:with-tests` only when a human requests
211
211
  that run. Automatic verification, generation and publication use the static path.
212
+
213
+ ## Staff connection administration
214
+
215
+ Authorized staff users can manage provider connections with `arbol account connections create`, `update <connectionId>`, `delete <connectionId>`, `discover` and `refresh-tools <connectionId>`, using `--input` for the owner's strict JSON body. These hidden REST commands use captured Account contracts, not public SDK or MCP credential intake. The API requires a real user and `account:connections:operate`; an API-key profile is refused locally too. Requests are sent once and an uncertain write must be checked before repeating. `--dry-run` is local and does not authenticate or save credentials.
216
+
217
+ The credential bundle is sealed by Account Vault. e-Oficlinic takes both login stages atomically plus the source company/site/IPS selection; Sanitas takes its portal login and document type. Never place real credentials in a repository or shell history. Refresh these contracts from a clean owner checkout with `bun scripts/update-account-operator-contracts.ts <account-repository>`. The captured file records the owner commit and source hash.