@lambdacurry/arbor 0.24.20 → 0.24.22

package/dist/arbor.js

@@ -12503,6 +12503,15 @@ function verbatimList(description) {
 function isVerbatimList(schema) {
   return VERBATIM_LISTS.has(schema);
 }
+var FILE_BODIES = registry();
+function fileBody(description, base = string2()) {
+  const schema = base.describe(description);
+  FILE_BODIES.add(schema, { fileBody: true });
+  return schema;
+}
+function isFileBody(schema) {
+  return FILE_BODIES.has(schema);
+}
 var ATTACHMENT_DESCRIPTION_HINT = "durable summary and default alt text; defaults to the filename when omitted; permanent once bound; 1-500 chars; give each file its own";
 function forward(operation) {
   const run = (ex, input) => ex.call(operation, input);
@@ -13677,7 +13686,7 @@ var ACTION_DEFINITIONS = [
       computerSessionId: string2().optional().describe("legacy alternative to runId: a computerSessionId on that Computer, cms_…; required unless runId is supplied"),
       path: string2().describe("absolute path under /workspace, or a path inside the run"),
       runId: string2().optional().describe("route this write according to this Run execution placement, run_… (from computer_run_start)"),
-      content: string2().describe("complete UTF-8 content, or base64 bytes when encoding=base64"),
+      content: fileBody("complete UTF-8 content, or base64 bytes when encoding=base64"),
       encoding: _enum(["utf8", "base64"]).optional().describe("content encoding; defaults to utf8, use base64 for binary files")
     },
     surfaces: ["computer-mcp", "computer-cli"],
@@ -13855,7 +13864,7 @@ var ACTION_DEFINITIONS = [
       type: _enum(ARTIFACT_TYPES).describe(ARTIFACT_TYPE_DESCRIPTION),
       kind: _enum(["doc", "table", "diagram", "html", "file"]).optional().describe("structural kind (default file). doc/table/diagram/html are editable, versioned text"),
       title: string2().min(1),
-      source: string2().optional().describe("text kinds: the initial content (v1)"),
+      source: fileBody("text kinds: the initial content (v1)").optional(),
       contentRef: string2().optional().describe("kind=file: where the content lives, e.g. inline://… or a URL"),
       editPolicy: _enum(["owner", "members", "anyone"]).optional().describe("who may edit (default members)"),
       summary: string2().min(1).max(500).describe("required one-line description of what this durable Artifact is or accomplishes"),
@@ -13893,7 +13902,7 @@ var ACTION_DEFINITIONS = [
     inputSchema: {
       artifactId: string2().describe("the artifact, art_…"),
       baseVersion: number2().describe("the version you READ (get_artifact) — stale is rejected"),
-      source: string2().optional().describe("full replace: the complete new content"),
+      source: fileBody("full replace: the complete new content").optional(),
       patches: array(object({ old: string2(), new: string2() })).optional().describe("exact-match hunks applied in order; each old must match exactly once"),
       note: string2().optional().describe("one-line summary of what changed"),
       idempotencyKey: string2().min(1).max(200).optional().describe("stable retry key for this logical edit; the CLI derives one from the artifact, base version, and content when omitted")
@@ -14886,7 +14895,7 @@ var ACTION_DEFINITIONS = [
       title: string2().optional().describe("create: the artifact's title"),
       kind: _enum(["doc", "table", "diagram", "html", "file"]).optional().describe("create: structural kind (default file). doc/table/diagram/html are editable text"),
       type: _enum(ARTIFACT_TYPES).optional().describe(`create: ${ARTIFACT_TYPE_DESCRIPTION}`),
-      source: string2().optional().describe("create (text kinds): the initial content · edit verb=replace: the full new content"),
+      source: fileBody("create (text kinds): the initial content · edit verb=replace: the full new content").optional(),
       contentRef: string2().optional().describe("create (kind=file): where the content lives, e.g. inline://… or a URL"),
       editPolicy: _enum(["owner", "members", "anyone"]).optional().describe("create: who may edit (default members)"),
       summary: string2().min(1).max(500).optional().describe("create: REQUIRED one-line description of what this Artifact is or accomplishes"),
@@ -15140,7 +15149,7 @@ var ACTION_DEFINITIONS = [
       description: string2().max(500).optional().describe("create: non-sensitive purpose"),
       owner: _enum(["organization", "profile"]).optional().describe("create: who owns the Secret (default organization). profile keeps administration with one identity; names are unique per owner"),
       ownerProfileId: string2().optional().describe("create + owner=profile: the owning identity, defaulting to you; assigning another Profile is an Org owner/admin action"),
-      value: string2().min(1).optional().describe("set/rotate: plaintext submitted once and never returned or recorded"),
+      value: fileBody("set/rotate: plaintext submitted once and never returned or recorded; --value-file is sent byte-exact (printf, not echo)", string2().min(1)).optional(),
       profileId: string2().optional().describe("grant/revoke_grant: authorized human or agent"),
       permissions: array(_enum([
         "create",
@@ -15210,7 +15219,7 @@ var ACTION_DEFINITIONS = [
     description: "Write the first encrypted SecretVersion. The submitted value is never echoed, logged, audited, or placed in provenance; use secret_rotate after the first version.",
     inputSchema: {
       secretId: string2().describe("the empty Secret, sec_…"),
-      value: string2().min(1).describe("plaintext submitted once and never returned")
+      value: fileBody("plaintext submitted once and never returned; --value-file is sent byte-exact (printf, not echo)", string2().min(1))
     },
     surfaces: ["cli"],
     toolset: "apps",
@@ -15222,7 +15231,7 @@ var ACTION_DEFINITIONS = [
     description: "Append a new encrypted SecretVersion and make every active App binding consume it. Rotation permission is independent of value-write, bind, and plaintext-read permission; the submitted value is never returned.",
     inputSchema: {
       secretId: string2().describe("the active Secret, sec_…"),
-      value: string2().min(1).describe("new plaintext submitted once and never returned")
+      value: fileBody("new plaintext submitted once and never returned; --value-file is sent byte-exact (printf, not echo)", string2().min(1))
     },
     surfaces: ["cli"],
     toolset: "apps",
@@ -15454,7 +15463,7 @@ var ACTION_DEFINITIONS = [
       path: string2().min(1).max(2048).describe("relative App path beginning with /; may include a query string"),
       method: _enum(["POST", "PUT", "PATCH", "DELETE"]).describe("mutating HTTP method"),
       json: json().optional().describe("JSON request value; mutually exclusive with body and sets application/json. On the CLI, pass serialized JSON after the command as --json '<value>'"),
-      body: string2().optional().describe("UTF-8 request body; mutually exclusive with json"),
+      body: fileBody("UTF-8 request body; mutually exclusive with json").optional(),
       contentType: string2().max(160).optional().describe("body media type; allowed only with body, default text/plain; charset=utf-8")
     },
     surfaces: ["computer-mcp", "cli"],
@@ -15610,7 +15619,7 @@ var ACTIONS = ACTION_DEFINITIONS.map((action) => {
 });
 
 // ../actions/src/retention-entry.ts
-var ARBOR_VERSION = "0.24.20";
+var ARBOR_VERSION = "0.24.22";
 var historyPolicySchema = _enum(["full", "checkpoint"]).optional().describe("text Artifacts: future history retention policy; full retains every source snapshot, checkpoint keeps metadata for every revision and source only when explicitly retained");
 var retainSourceSchema = boolean2().optional().describe("edit: in checkpoint mode, retain this newly minted content revision's source");
 var checkpointSchema = boolean2().optional().describe("edit: retain the exact current version source without incrementing content version");
@@ -16494,7 +16503,7 @@ function dispositionFilename(value) {
 // package.json
 var package_default = {
   name: "@lambdacurry/arbor",
-  version: "0.24.20",
+  version: "0.24.22",
   description: "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   keywords: [
     "agents",
@@ -16992,7 +17001,7 @@ function acceptedFlags(inputSchema) {
   }
   return out;
 }
-function readTextSource(src) {
+function readTextSource(src, verbatim) {
   let text;
   try {
     text = readFileSync2(src === "-" ? 0 : src, "utf8");
@@ -17000,7 +17009,7 @@ function readTextSource(src) {
     const where = src === "-" ? "stdin" : src;
     throw new UsageError(`could not read ${where}: ${e instanceof Error ? e.message : String(e)}`);
   }
-  return text.replace(/[\r\n]+$/, "");
+  return verbatim ? text : text.replace(/[\r\n]+$/, "");
 }
 function primaryPositionalField(inputSchema) {
   return flagsForSchema(inputSchema).find((f) => f.required && (f.kind === "string" || f.kind === "number"));
@@ -17016,7 +17025,8 @@ function flagsForSchema(inputSchema) {
       nullable,
       description: description(inner) ?? description(raw),
       literal: isProseList(inner),
-      verbatim: isVerbatimList(inner)
+      verbatim: isVerbatimList(inner),
+      fileBody: isFileBody(inner)
     };
   });
 }
@@ -17032,7 +17042,7 @@ function buildInput(inputSchema, flags, command) {
         }
         if (fileSrc === true)
           throw new UsageError(`--${spec.flag}-file expects a path (or - for stdin)`);
-        const sourced = readTextSource(String(fileSrc));
+        const sourced = readTextSource(String(fileSrc), spec.fileBody === true);
         if (spec.kind === "json") {
           try {
             input[spec.field] = JSON.parse(sourced);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambdacurry/arbor",
-  "version": "0.24.20",
+  "version": "0.24.22",
   "description": "The Arbor CLI — a shared workspace for people and agents. The human + headless-agent write path over Arbor's guarded operation surface.",
   "keywords": [
     "agents",