@lambdacurry/arbor 0.24.1 → 0.24.2

package/dist/arbor.js

@@ -2,7 +2,7 @@
 // package.json
 var package_default = {
   name: "@lambdacurry/arbor",
-  version: "0.24.1",
+  version: "0.24.2",
   description: "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   keywords: [
     "agents",
@@ -12314,7 +12314,7 @@ var ACTION_DEFINITIONS = [
   {
     name: "attachment",
     title: "Upload and read Thread Attachments",
-    description: "Upload a file (100 MB cap): upload_url → signed PUT (5 min) → attach (1 h after PUT expiry); receipts replay after expiry; JSON syntax checks stop at 10 MB, larger JSON gets UTF-8/control checks only, so validate locally. get/list recover receipts; mediaUrl/downloadUrl require an Arbor credential (401 otherwise), with no public read URLs.",
+    description: "Upload (100 MB): upload_url → signed PUT (5 min) → attach (1 h after PUT expiry); receipts replay after expiry; JSON syntax checked ≤10 MB, larger JSON gets UTF-8/control checks only (validate locally); get/list recover receipts; read URLs need Arbor credentials (401 otherwise), no public URLs. Missing tool: refresh the MCP tool catalog; CLI: arbor attachment upload (Node/Bun).",
     inputSchema: {
       verb: _enum(["upload_url", "attach", "get", "list"]),
       threadId: string2().optional().describe("upload_url/list: Thread id, thr_…"),
@@ -12382,10 +12382,20 @@ var ACTION_DEFINITIONS = [
   {
     name: "attachment_upload",
     title: "Upload a local Thread file",
-    description: "Upload with Node and SHA-256 via upload_url → presigned PUT → attach (100 MB cap); compress, split, or link larger files; JSON syntax checks stop at 10 MB, larger JSON gets UTF-8/control checks only. PUT expires in 5 min, first attach gets 1 h more, receipts replay after expiry; js-exec cannot upload; mediaUrl/downloadUrl require an Arbor credential (401 otherwise), no public read URLs; for a missing tool refresh the MCP tool catalog or use arbor attachment upload.",
+    description: "Upload a local file with Node or Bun (SHA-256 → presigned PUT → attach, 100 MB cap)",
+    cliHelpLead: "Requires Node or Bun.",
+    cliHelpNotes: [
+      "Upload with SHA-256 via upload_url → presigned PUT → attach (100 MB cap); compress, split, or link larger files.",
+      "PUT links expire after five minutes; first attach is allowed until one hour after PUT expiry. Finalized receipts replay after expiry.",
+      "JSON syntax checks stop at 10 MB; larger JSON gets UTF-8/control checks only, so validate syntax locally.",
+      "js-exec lacks file descriptors, node:crypto, and binary-safe fetch; run this command with Node or Bun.",
+      "With only curl available, use the MCP attachment tool: upload_url → returned curl PUT command → attach with the returned token.",
+      "mediaUrl/downloadUrl require an Arbor credential (401 otherwise); no public read URLs. The R2 PUT uses only the required signed headers, never an Arbor credential."
+    ].join(`
+`),
     inputSchema: {
       threadId: string2().min(1),
-      file: string2().min(1).describe("local file path (or positional file); requires Node"),
+      file: string2().min(1).describe("local file path (or positional file); requires Node or Bun"),
       description: string2().min(1).max(500).optional()
     },
     surfaces: ["cli"],
@@ -15060,8 +15070,8 @@ async function uploadLocalAttachment(executor, input, fetcher = fetch) {
   const mimeType = localAttachmentMime(filename);
   if (!mimeType)
     throw new UsageError(`Unsupported file extension for ${initialStat.size} bytes (limit ${MAX_ATTACHMENT_BYTES} bytes). Use PNG/JPEG/GIF/WebP/PDF/TXT/JSON/CSV, or link the file.`);
-  if (typeof fs.openSync !== "function")
-    throw new UsageError("Attachment upload requires Node: this js-exec runtime cannot PUT binary file bytes. Run `arbor attachment upload <file> --thread-id <thread>` with Node.");
+  if ([fs.openSync, fs.fstatSync, fs.readSync, fs.closeSync].some((api) => typeof api !== "function"))
+    throw new UsageError("Attachment upload requires Node or Bun: js-exec lacks file descriptors, node:crypto, and binary-safe fetch. Run `arbor attachment upload <file> --thread-id <thread>` with Node or Bun, or use MCP attachment upload_url → curl PUT → attach.");
   const descriptor = fs.openSync(file, "r");
   let bytes;
   try {
@@ -15838,12 +15848,24 @@ Aliases: ${aliases.map((alias) => `\`arbor ${alias}\``).join(", ")} (tool-name f
   const waitLines = action.name === "computer_exec" ? [
     "  --no-wait [<boolean>]  [optional] — return a running processId immediately instead of polling computer_process_read (implied by --background); mutually exclusive with --wait-for-terminal-ms"
   ] : [];
+  const notes = action.cliHelpNotes ? `
+
+${action.cliHelpNotes}` : "";
+  if (action.cliHelpLead) {
+    return `${usage}
+
+${action.cliHelpLead}
+
+${lines.join(`
+`)}${primaryNote}${explicitNote}${aliasNote}${notes}
+`;
+  }
   return `${heading} — ${action.description}
 
 ${usage}${waitLines.length > 0 ? " [--no-wait]" : ""}
 
 ${[...lines, ...waitLines].join(`
-`)}${primaryNote}${explicitNote}${aliasNote}
+`)}${primaryNote}${explicitNote}${aliasNote}${notes}
 `;
 }
 function commandCatalog() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.24.1",
+  "version": "0.24.2",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",