@soat/cli 0.18.6 → 0.19.1

package/dist/index.mjs

@@ -13,7 +13,7 @@ import { load } from "js-yaml";
 import * as os from "node:os";
 
 //#region package.json
-var version = "0.18.6";
+var version = "0.19.1";
 
 //#endregion
 //#region src/cli-wrappers/wrappers/formations.ts
@@ -254,6 +254,51 @@ var extractPositionalArgs = args => {
   }
   return positional;
 };
+/**
+* Coerce a raw flag value to the JSON type the spec declares for it.
+*
+* `declaredType` comes from the generated route manifest. A flag the spec
+* declares as `string` is passed through untouched — its content is data, not
+* syntax, so a value that merely *looks* like JSON (a GCP service account key
+* file in `create-secret --value`) or like a number (an account number) must
+* still arrive as a string. Coercing it produced a body the server rejects,
+* with no way to escape it from the shell.
+*
+* The one value a string flag still coerces is the literal `null`: "set it to
+* null to clear" is the documented way to detach a nullable reference
+* (`--default_model_route_id null`, `--ai_provider_id null`), and the shell has
+* no other way to spell JSON null. The cost is that a string whose entire value
+* is `null` cannot be sent — a far rarer need than clearing a field.
+*
+* Every other flag keeps the permissive behavior: an undeclared type (a flag
+* the manifest has no entry for) is still sniffed, since that is the only
+* signal available.
+*/
+var parseFlagValue = (value, declaredType) => {
+  if (declaredType === "string") return value.trim() === "null" ? null : value;
+  const trimmed = value.trim();
+  if (trimmed.startsWith("{") || trimmed.startsWith("[") || trimmed === "true" || trimmed === "false" || trimmed === "null" || /^-?\d+(\.\d+)?$/.test(trimmed)) try {
+    return JSON.parse(trimmed);
+  } catch {
+    return value;
+  }
+  return value;
+};
+/**
+* Build the value for an array-typed flag. Collects repeated occurrences
+* (`--document_paths /a/ --document_paths /b/`) into a list, coercing each
+* element with `parseFlagValue`. A single JSON-array literal
+* (`--document_ids '["doc_1","doc_2"]'`) is passed through as-is rather than
+* being wrapped again, and a single scalar (`--document_paths /playbooks/`)
+* becomes a one-element array.
+*/
+var buildArrayFlagValue = rawValues => {
+  const parsed = rawValues.map(v => {
+    return parseFlagValue(v);
+  });
+  if (parsed.length === 1 && Array.isArray(parsed[0])) return parsed[0];
+  return parsed;
+};
 
 //#endregion
 //#region src/cli-wrappers/index.ts
@@ -772,7 +817,7 @@ var routes = {
       "in": "body"
     }, {
       "name": "output_schema",
-      "description": "JSON Schema describing the structured object the model must return. When set, non-streaming generations use the AI SDK to constrain output to this schema; the parsed value is returned as `output.object` in the generation response. See the Structured Output section in the Agents module docs.",
+      "description": "JSON Schema describing the structured object the model must return. When set, non-streaming generations constrain output to this schema and the parsed value is returned as `output.object`. The schema is enforced on the way back, not just sent to the model: an object that violates it fails the generation with 502 `OUTPUT_SCHEMA_VALIDATION_FAILED`, naming the violated field. Constraints beyond `required`/`type` (`minLength`, `enum`, `pattern`, `minItems`) are honored and are what reject a structurally valid but degenerate answer. See the Structured Output section in the Agents module docs.",
       "required": false,
       "type": "object",
       "in": "body"
@@ -788,6 +833,12 @@ var routes = {
       "required": false,
       "type": "boolean",
       "in": "body"
+    }, {
+      "name": "trace_content_mode",
+      "description": "Zero-retention opt-in for this agent. `null` inherits the project's setting; `none` means trace and generation content is never written. Setting `full` under a project whose own mode is `none` is refused with 400 — the project is a floor an agent may only tighten.",
+      "required": false,
+      "type": "string",
+      "in": "body"
     }, {
       "name": "version_label",
       "description": "Optional tag for the config version this write archives (e.g. `initial`). Annotates the version only — it is not stored on the agent and is not part of the config, so labelling a change is never itself a change.",
@@ -930,7 +981,7 @@ var routes = {
       "in": "body"
     }, {
       "name": "output_schema",
-      "description": "JSON Schema describing the structured object the model must return. When set, non-streaming generations use the AI SDK to constrain output to this schema; the parsed value is returned as `output.object` in the generation response. See the Structured Output section in the Agents module docs.",
+      "description": "JSON Schema describing the structured object the model must return. When set, non-streaming generations constrain output to this schema and the parsed value is returned as `output.object`. The schema is enforced on the way back, not just sent to the model: an object that violates it fails the generation with 502 `OUTPUT_SCHEMA_VALIDATION_FAILED`, naming the violated field. Constraints beyond `required`/`type` (`minLength`, `enum`, `pattern`, `minItems`) are honored and are what reject a structurally valid but degenerate answer. See the Structured Output section in the Agents module docs.",
       "required": false,
       "type": "object",
       "in": "body"
@@ -946,6 +997,12 @@ var routes = {
       "required": false,
       "type": "boolean",
       "in": "body"
+    }, {
+      "name": "trace_content_mode",
+      "description": "Zero-retention opt-in for this agent. `null` inherits the project's setting; `none` means trace and generation content is never written. Setting `full` under a project whose own mode is `none` is refused with 400.",
+      "required": false,
+      "type": "string",
+      "in": "body"
     }, {
       "name": "version_label",
       "description": "Optional tag for the config version this write archives (e.g. `pre-tone-change`). Annotates the version only — it is not stored on the agent and is not part of the config, so labelling a change is never itself a change. Ignored when the write changes nothing, since no version is created.",
@@ -1072,7 +1129,7 @@ var routes = {
       "in": "body"
     }, {
       "name": "output_schema",
-      "description": "JSON Schema describing the structured object the model must return. When set, non-streaming generations use the AI SDK to constrain output to this schema; the parsed value is returned as `output.object` in the generation response. See the Structured Output section in the Agents module docs.",
+      "description": "JSON Schema describing the structured object the model must return. When set, non-streaming generations constrain output to this schema and the parsed value is returned as `output.object`. The schema is enforced on the way back, not just sent to the model: an object that violates it fails the generation with 502 `OUTPUT_SCHEMA_VALIDATION_FAILED`, naming the violated field. Constraints beyond `required`/`type` (`minLength`, `enum`, `pattern`, `minItems`) are honored and are what reject a structurally valid but degenerate answer. See the Structured Output section in the Agents module docs.",
       "required": false,
       "type": "object",
       "in": "body"
@@ -1088,6 +1145,12 @@ var routes = {
       "required": false,
       "type": "boolean",
       "in": "body"
+    }, {
+      "name": "trace_content_mode",
+      "description": "Zero-retention opt-in for this agent. `null` inherits the project's setting; `none` means trace and generation content is never written. Setting `full` under a project whose own mode is `none` is refused with 400.",
+      "required": false,
+      "type": "string",
+      "in": "body"
     }, {
       "name": "version_label",
       "description": "Optional tag for the config version this write archives (e.g. `pre-tone-change`). Annotates the version only — it is not stored on the agent and is not part of the config, so labelling a change is never itself a change. Ignored when the write changes nothing, since no version is created.",
@@ -4268,7 +4331,7 @@ var routes = {
       "in": "body"
     }, {
       "name": "chunk_strategy",
-      "description": "",
+      "description": "Send `null` to clear the rule's override and fall back to the per-request default.",
       "required": false,
       "type": "string",
       "in": "body"
@@ -5311,7 +5374,7 @@ var routes = {
   "update-project": {
     serviceClass: "Projects",
     operationId: "updateProject",
-    description: "Updates a project's name, its attached guardrails (`guardrail_ids` — the project-scope baseline governing every tool call by every agent in the project), its orchestration concurrency limit (`max_concurrent_runs`), its inherited model route (`default_model_route_id`), and/or its read-auditing opt-in (`audit_reads_enabled`). At least one field is required. Requires admin role. Detaching a guardrail (removing an id) additionally requires guardrails:DetachGuardrail.",
+    description: "Updates a project's name, its attached guardrails (`guardrail_ids` — the project-scope baseline governing every tool call by every agent in the project), its orchestration concurrency limit (`max_concurrent_runs`), its inherited model route (`default_model_route_id`), its read-auditing opt-in (`audit_reads_enabled`), its trace-content retention window (`trace_content_retention_days`), and/or its zero-retention setting (`trace_content_mode`). At least one field is required. Requires admin role. Detaching a guardrail (removing an id) additionally requires guardrails:DetachGuardrail.",
     moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/projects",
     httpMethod: "patch",
     pathParams: ["project_id"],
@@ -5352,6 +5415,18 @@ var routes = {
       "required": false,
       "type": "boolean",
       "in": "body"
+    }, {
+      "name": "trace_content_retention_days",
+      "description": "How long trace and generation content is kept before the daily retention sweep content-purges it. `null` (the default) disables retention; otherwise an integer >= 1. The sweep uses the same purge path as `DELETE /traces/{trace_id}/content`, so the row survives as an auditable skeleton with `content_redacted_at` set.",
+      "required": false,
+      "type": "integer",
+      "in": "body"
+    }, {
+      "name": "trace_content_mode",
+      "description": "Whether trace and generation content is persisted at all. `full` (the default) stores it; `none` is zero-retention — content is never written, for every agent in the project. An agent may tighten this to `none` on its own but cannot loosen a `none` project back to `full`.",
+      "required": false,
+      "type": "string",
+      "in": "body"
     }]
   },
   "delete-project": {
@@ -7683,31 +7758,6 @@ var formatResultData = async data => {
   if (data instanceof Blob) return data.text();
   return JSON.stringify(data, null, 2);
 };
-var parseFlagValue = value => {
-  const trimmed = value.trim();
-  if (trimmed.startsWith("{") || trimmed.startsWith("[") || trimmed === "true" || trimmed === "false" || trimmed === "null" || /^-?\d+(\.\d+)?$/.test(trimmed)) try {
-    return JSON.parse(trimmed);
-  } catch {
-    return value;
-  }
-  return value;
-};
-/**
-* Build the value for an array-typed flag. Collects repeated occurrences
-* (`--document_paths /a/ --document_paths /b/`) into a list, coercing each
-* element with `parseFlagValue`. A single JSON-array literal
-* (`--document_ids '["doc_1","doc_2"]'`) is passed through as-is rather than
-* being wrapped again, and a single scalar (`--document_paths /playbooks/`)
-* becomes a one-element array.
-*/
-var buildArrayFlagValue = rawValues => {
-  const parsed = rawValues.map(v => {
-    return parseFlagValue(v);
-  });
-  if (parsed.length === 1 && Array.isArray(parsed[0])) return parsed[0];
-  return parsed;
-};
-/** Normalize symbol names to compare exports across acronym casing differences. */
 var normalizeSymbol = name => {
   return name.toLowerCase().replace(/[^a-z0-9]/g, "");
 };
@@ -7896,7 +7946,8 @@ program.argument("[command]", "API command in kebab-case (e.g. list-actors)").ar
   for (const [flagKey, val] of Object.entries(flags)) {
     if (flagKey === "profile" || flagKey === "id") continue;
     const canonical = toCanonical(flagKey);
-    const parsedValue = flagTypeByCanonical.get(canonical) === "array" ? buildArrayFlagValue(repeatedFlags[flagKey] ?? [val]) : parseFlagValue(val);
+    const declaredType = flagTypeByCanonical.get(canonical);
+    const parsedValue = declaredType === "array" ? buildArrayFlagValue(repeatedFlags[flagKey] ?? [val]) : parseFlagValue(val, declaredType);
     const pathParam = route.pathParams.find(p => {
       return toCanonical(p) === canonical;
     });
@@ -7910,7 +7961,7 @@ program.argument("[command]", "API command in kebab-case (e.g. list-actors)").ar
   });
   const idAlias = flags["id"] ?? positionalArgs[0];
   const solePathParam = route.pathParams.length === 1 && route.pathParams[0];
-  if (idAlias !== void 0 && solePathParam && !(solePathParam in pathArgs)) pathArgs[solePathParam] = parseFlagValue(idAlias);
+  if (idAlias !== void 0 && solePathParam && !(solePathParam in pathArgs)) pathArgs[solePathParam] = parseFlagValue(idAlias, flagTypeByCanonical.get(toCanonical(solePathParam)));
   const missingPathParams = route.pathParams.filter(p => {
     return !(p in pathArgs);
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@soat/cli",
-  "version": "0.18.6",
+  "version": "0.19.1",
   "type": "module",
   "dependencies": {
     "@inquirer/input": "^5.1.2",
@@ -8,7 +8,7 @@
     "@ttoss/logger": "^0.8.19",
     "commander": "^15.0.0",
     "js-yaml": "^5.2.1",
-    "@soat/sdk": "0.18.6"
+    "@soat/sdk": "0.19.1"
   },
   "devDependencies": {
     "@ttoss/config": "^1.37.17",