@swmansion/argent 0.26.1-next.11 → 0.26.1-next.13

package/dist/cli-cmds.mjs

@@ -17134,7 +17134,7 @@ function sha256File(filePath) {
     createReadStream(filePath).on("data", (chunk) => hash2.update(chunk)).on("end", () => resolve11(hash2.digest("hex"))).on("error", reject);
   });
 }
-async function uploadTar(tarPath, endpoint) {
+async function uploadTar(tarPath, endpoint, signal) {
   const init2 = {
     method: "POST",
     headers: {
@@ -17142,7 +17142,8 @@ async function uploadTar(tarPath, endpoint) {
       ...endpoint.token ? { Authorization: `Bearer ${endpoint.token}` } : {}
     },
     body: createReadStream(tarPath),
-    duplex: "half"
+    duplex: "half",
+    signal
   };
   const res = await fetch(`${endpoint.url}/upload`, init2);
   if (!res.ok) {
@@ -17194,7 +17195,7 @@ async function prepareFileInputs(specs, args, opts) {
           );
           tarPath = await tarball(filePath);
           wire.contentHash = await sha256File(tarPath);
-          wire.uploadId = await uploadTar(tarPath, opts.uploadEndpoint);
+          wire.uploadId = await uploadTar(tarPath, opts.uploadEndpoint, opts.signal);
         } finally {
           if (tarPath) await rm2(tarPath, { force: true }).catch(() => {
           });
@@ -17263,7 +17264,7 @@ var ToolInvocationError = class extends Error {
 function authHeaders2(token) {
   return token ? { Authorization: `Bearer ${token}` } : {};
 }
-async function consumeToolStream(body, onProgress) {
+async function consumeToolStream(body, onProgress, signal) {
   let final;
   const handleLine = (line) => {
     if (!line.trim()) return;
@@ -17287,6 +17288,7 @@ async function consumeToolStream(body, onProgress) {
       buffered += decoder.decode(value, { stream: true });
       let newline;
       while ((newline = buffered.indexOf("\n")) !== -1) {
+        signal?.throwIfAborted();
         const line = buffered.slice(0, newline);
         buffered = buffered.slice(newline + 1);
         handleLine(line);
@@ -17299,6 +17301,7 @@ async function consumeToolStream(body, onProgress) {
     });
     throw err;
   }
+  signal?.throwIfAborted();
   if (!final) {
     throw new Error("tool stream ended without a result \u2014 connection lost mid-run?");
   }
@@ -17325,27 +17328,33 @@ function createToolsClient(options = {}) {
     cached3 = await ensureToolsServer(options.paths);
     return cached3;
   }
-  async function fetchTools() {
+  async function fetchTools(opts) {
+    opts?.signal?.throwIfAborted();
     const { url: url2, token } = await baseUrl();
-    const res = await fetch(`${url2}/tools`, { headers: authHeaders2(token) });
+    const res = await fetch(`${url2}/tools`, {
+      headers: authHeaders2(token),
+      signal: opts?.signal
+    });
     if (!res.ok) throw new Error(`GET /tools failed: ${res.status} ${res.statusText}`);
     const json2 = await res.json();
     return json2.tools;
   }
-  async function fetchTool(name) {
-    const tools2 = await fetchTools();
+  async function fetchTool(name, opts) {
+    const tools2 = await fetchTools(opts);
     return tools2.find((t2) => t2.name === name) ?? null;
   }
   async function callTool(name, args, opts) {
+    opts?.signal?.throwIfAborted();
     const { url: url2, token } = await baseUrl();
     let finalArgs = args;
-    const meta3 = await fetchTool(name);
+    const meta3 = await fetchTool(name, { signal: opts?.signal });
     if (meta3?.fileInputs?.length) {
       const { url: routedUrl } = await getResolvedToolsUrl();
       const isRemote = routedUrl !== null;
       finalArgs = await prepareFileInputs(meta3.fileInputs, args ?? {}, {
         includeContent: isRemote,
-        uploadEndpoint: isRemote ? { url: url2, token } : void 0
+        uploadEndpoint: isRemote ? { url: url2, token } : void 0,
+        signal: opts?.signal
       });
     }
     const res = await fetch(`${url2}/tools/${encodeURIComponent(name)}`, {
@@ -17355,13 +17364,17 @@ function createToolsClient(options = {}) {
         ...opts?.onProgress ? { Accept: "application/x-ndjson" } : {},
         ...authHeaders2(token)
       },
-      body: JSON.stringify(finalArgs ?? {})
+      body: JSON.stringify(finalArgs ?? {}),
+      signal: opts?.signal
     });
     const contentType = res.headers.get("content-type") ?? "";
     if (opts?.onProgress && res.ok && res.body && contentType.includes("application/x-ndjson")) {
-      return consumeToolStream(res.body, opts.onProgress);
+      return consumeToolStream(res.body, opts.onProgress, opts.signal);
     }
-    const json2 = await res.json().catch(() => ({}));
+    const json2 = await res.json().catch(() => {
+      opts?.signal?.throwIfAborted();
+      return {};
+    });
     if (!res.ok) {
       throw new ToolInvocationError(errorBodyMessage(json2) ?? `${res.status} ${res.statusText}`, {
         errorCode: json2.error_code,
@@ -17369,6 +17382,7 @@ function createToolsClient(options = {}) {
         issues: Array.isArray(json2.issues) ? json2.issues : void 0
       });
     }
+    opts?.signal?.throwIfAborted();
     const { result: data } = await applyClientFileDirectives(json2.data);
     return { data, note: json2.note };
   }
@@ -18279,7 +18293,8 @@ async function materializeArtifacts(result, ctx) {
             return null;
           }
           const res = await fetchFn(`${ctx.toolsUrl}/artifacts/${value.id}`, {
-            headers: authHeaders3
+            headers: authHeaders3,
+            signal: ctx.signal
           });
           if (!res.ok) return null;
           const data = await readCapped(res, value.size);
@@ -18306,7 +18321,8 @@ async function materializeArtifacts(result, ctx) {
       }
       try {
         const res = await fetchFn(`${ctx.toolsUrl}/artifacts/${value.id}`, {
-          headers: authHeaders3
+          headers: authHeaders3,
+          signal: ctx.signal
         });
         if (!res.ok) return null;
         const data = Buffer.from(await res.arrayBuffer());
@@ -21881,7 +21897,7 @@ var _CI_VENDOR_COUNT_FOR_TEST = vendors_default.length;
 var SESSION_ID2 = randomUUID5();
 function readCliVersion() {
   if (true) {
-    return "0.26.1-next.11";
+    return "0.26.1-next.13";
   }
   return "0.0.0";
 }

package/dist/client.d.ts

@@ -13,6 +13,8 @@ export interface ArgentToolResult<T = unknown> {
 export interface CallToolOptions {
     /** Receive progress events while a long-running tool works. */
     onProgress?: (event: unknown) => void;
+    /** Stop waiting for the call. It rejects with the signal's reason, not ArgentToolError. */
+    signal?: AbortSignal;
 }
 /** The tool-server rejected or failed a call. */
 export declare class ArgentToolError extends Error {
@@ -37,7 +39,9 @@ export interface ArgentFlag {
 /** Feature flags and their effective state: project overrides global, then the default. */
 export declare function listFlags(): ArgentFlag[];
 export interface ArgentClient {
-    listTools(): Promise<ArgentTool[]>;
+    listTools(options?: {
+        signal?: AbortSignal;
+    }): Promise<ArgentTool[]>;
     callTool<T = unknown>(name: string, args?: Record<string, unknown>, options?: CallToolOptions): Promise<ArgentToolResult<T>>;
     /**
      * Stop this install's local tool-server, like `argent server stop`. The next

package/dist/client.js

@@ -1718,7 +1718,7 @@ function sha256File(filePath) {
     createReadStream(filePath).on("data", (chunk) => hash.update(chunk)).on("end", () => resolve7(hash.digest("hex"))).on("error", reject);
   });
 }
-async function uploadTar(tarPath, endpoint) {
+async function uploadTar(tarPath, endpoint, signal) {
   const init = {
     method: "POST",
     headers: {
@@ -1726,7 +1726,8 @@ async function uploadTar(tarPath, endpoint) {
       ...endpoint.token ? { Authorization: `Bearer ${endpoint.token}` } : {}
     },
     body: createReadStream(tarPath),
-    duplex: "half"
+    duplex: "half",
+    signal
   };
   const res = await fetch(`${endpoint.url}/upload`, init);
   if (!res.ok) {
@@ -1778,7 +1779,7 @@ async function prepareFileInputs(specs, args, opts) {
           );
           tarPath = await tarball(filePath);
           wire.contentHash = await sha256File(tarPath);
-          wire.uploadId = await uploadTar(tarPath, opts.uploadEndpoint);
+          wire.uploadId = await uploadTar(tarPath, opts.uploadEndpoint, opts.signal);
         } finally {
           if (tarPath) await rm2(tarPath, { force: true }).catch(() => {
           });
@@ -1847,7 +1848,7 @@ var ToolInvocationError = class extends Error {
 function authHeaders2(token) {
   return token ? { Authorization: `Bearer ${token}` } : {};
 }
-async function consumeToolStream(body, onProgress) {
+async function consumeToolStream(body, onProgress, signal) {
   let final;
   const handleLine = (line) => {
     if (!line.trim()) return;
@@ -1871,6 +1872,7 @@ async function consumeToolStream(body, onProgress) {
       buffered += decoder.decode(value, { stream: true });
       let newline;
       while ((newline = buffered.indexOf("\n")) !== -1) {
+        signal?.throwIfAborted();
         const line = buffered.slice(0, newline);
         buffered = buffered.slice(newline + 1);
         handleLine(line);
@@ -1883,6 +1885,7 @@ async function consumeToolStream(body, onProgress) {
     });
     throw err;
   }
+  signal?.throwIfAborted();
   if (!final) {
     throw new Error("tool stream ended without a result \u2014 connection lost mid-run?");
   }
@@ -1909,27 +1912,33 @@ function createToolsClient(options = {}) {
     cached = await ensureToolsServer(options.paths);
     return cached;
   }
-  async function fetchTools() {
+  async function fetchTools(opts) {
+    opts?.signal?.throwIfAborted();
     const { url, token } = await baseUrl();
-    const res = await fetch(`${url}/tools`, { headers: authHeaders2(token) });
+    const res = await fetch(`${url}/tools`, {
+      headers: authHeaders2(token),
+      signal: opts?.signal
+    });
     if (!res.ok) throw new Error(`GET /tools failed: ${res.status} ${res.statusText}`);
     const json = await res.json();
     return json.tools;
   }
-  async function fetchTool(name) {
-    const tools = await fetchTools();
+  async function fetchTool(name, opts) {
+    const tools = await fetchTools(opts);
     return tools.find((t) => t.name === name) ?? null;
   }
   async function callTool(name, args, opts) {
+    opts?.signal?.throwIfAborted();
     const { url, token } = await baseUrl();
     let finalArgs = args;
-    const meta = await fetchTool(name);
+    const meta = await fetchTool(name, { signal: opts?.signal });
     if (meta?.fileInputs?.length) {
       const { url: routedUrl } = await getResolvedToolsUrl();
       const isRemote = routedUrl !== null;
       finalArgs = await prepareFileInputs(meta.fileInputs, args ?? {}, {
         includeContent: isRemote,
-        uploadEndpoint: isRemote ? { url, token } : void 0
+        uploadEndpoint: isRemote ? { url, token } : void 0,
+        signal: opts?.signal
       });
     }
     const res = await fetch(`${url}/tools/${encodeURIComponent(name)}`, {
@@ -1939,13 +1948,17 @@ function createToolsClient(options = {}) {
         ...opts?.onProgress ? { Accept: "application/x-ndjson" } : {},
         ...authHeaders2(token)
       },
-      body: JSON.stringify(finalArgs ?? {})
+      body: JSON.stringify(finalArgs ?? {}),
+      signal: opts?.signal
     });
     const contentType = res.headers.get("content-type") ?? "";
     if (opts?.onProgress && res.ok && res.body && contentType.includes("application/x-ndjson")) {
-      return consumeToolStream(res.body, opts.onProgress);
+      return consumeToolStream(res.body, opts.onProgress, opts.signal);
     }
-    const json = await res.json().catch(() => ({}));
+    const json = await res.json().catch(() => {
+      opts?.signal?.throwIfAborted();
+      return {};
+    });
     if (!res.ok) {
       throw new ToolInvocationError(errorBodyMessage(json) ?? `${res.status} ${res.statusText}`, {
         errorCode: json.error_code,
@@ -1953,6 +1966,7 @@ function createToolsClient(options = {}) {
         issues: Array.isArray(json.issues) ? json.issues : void 0
       });
     }
+    opts?.signal?.throwIfAborted();
     const { result: data } = await applyClientFileDirectives(json.data);
     return { data, note: json.note };
   }
@@ -2159,7 +2173,8 @@ async function materializeArtifacts(result, ctx) {
             return null;
           }
           const res = await fetchFn(`${ctx.toolsUrl}/artifacts/${value.id}`, {
-            headers: authHeaders3
+            headers: authHeaders3,
+            signal: ctx.signal
           });
           if (!res.ok) return null;
           const data = await readCapped(res, value.size);
@@ -2186,7 +2201,8 @@ async function materializeArtifacts(result, ctx) {
       }
       try {
         const res = await fetchFn(`${ctx.toolsUrl}/artifacts/${value.id}`, {
-          headers: authHeaders3
+          headers: authHeaders3,
+          signal: ctx.signal
         });
         if (!res.ok) return null;
         const data = Buffer.from(await res.arrayBuffer());
@@ -2345,19 +2361,22 @@ function createArgentClient() {
     client = createToolsClient({ paths: BUNDLED_RUNTIME_PATHS });
     return stopped;
   }
-  async function listTools() {
-    const tools = await client.fetchTools();
+  async function listTools(options) {
+    const tools = await client.fetchTools({ signal: options?.signal });
     return tools.map(({ name, description, inputSchema }) => ({ name, description, inputSchema }));
   }
   async function callTool(name, args = {}, options) {
     try {
       const response = await client.callTool(name, args, options);
       const { url, token } = await client.baseUrl();
+      options?.signal?.throwIfAborted();
       const { result } = await materializeArtifacts(response.data, {
         toolsUrl: url,
         authToken: token,
-        deviceId: getDeviceIdFromArgs(args)
+        deviceId: getDeviceIdFromArgs(args),
+        signal: options?.signal
       });
+      options?.signal?.throwIfAborted();
       return { data: result, note: response.note };
     } catch (err) {
       if (err instanceof ToolInvocationError) {

package/dist/installer.mjs

@@ -16730,7 +16730,7 @@ var _CI_VENDOR_COUNT_FOR_TEST = vendors_default.length;
 var SESSION_ID = randomUUID4();
 function readCliVersion() {
   if (true) {
-    return "0.26.1-next.11";
+    return "0.26.1-next.13";
   }
   return "0.0.0";
 }

package/dist/mcp-server.mjs

@@ -16796,7 +16796,7 @@ function sha256File(filePath) {
     createReadStream(filePath).on("data", (chunk) => hash.update(chunk)).on("end", () => resolve8(hash.digest("hex"))).on("error", reject);
   });
 }
-async function uploadTar(tarPath, endpoint) {
+async function uploadTar(tarPath, endpoint, signal) {
   const init = {
     method: "POST",
     headers: {
@@ -16804,7 +16804,8 @@ async function uploadTar(tarPath, endpoint) {
       ...endpoint.token ? { Authorization: `Bearer ${endpoint.token}` } : {}
     },
     body: createReadStream(tarPath),
-    duplex: "half"
+    duplex: "half",
+    signal
   };
   const res = await fetch(`${endpoint.url}/upload`, init);
   if (!res.ok) {
@@ -16856,7 +16857,7 @@ async function prepareFileInputs(specs, args, opts) {
           );
           tarPath = await tarball(filePath);
           wire.contentHash = await sha256File(tarPath);
-          wire.uploadId = await uploadTar(tarPath, opts.uploadEndpoint);
+          wire.uploadId = await uploadTar(tarPath, opts.uploadEndpoint, opts.signal);
         } finally {
           if (tarPath) await rm2(tarPath, { force: true }).catch(() => {
           });
@@ -17524,7 +17525,8 @@ async function materializeArtifacts(result, ctx) {
             return null;
           }
           const res = await fetchFn(`${ctx.toolsUrl}/artifacts/${value.id}`, {
-            headers: authHeaders2
+            headers: authHeaders2,
+            signal: ctx.signal
           });
           if (!res.ok) return null;
           const data = await readCapped(res, value.size);
@@ -17551,7 +17553,8 @@ async function materializeArtifacts(result, ctx) {
       }
       try {
         const res = await fetchFn(`${ctx.toolsUrl}/artifacts/${value.id}`, {
-          headers: authHeaders2
+          headers: authHeaders2,
+          signal: ctx.signal
         });
         if (!res.ok) return null;
         const data = Buffer.from(await res.arrayBuffer());

package/dist/tool-server.cjs

@@ -94814,7 +94814,7 @@ var _CI_VENDOR_COUNT_FOR_TEST = vendors_default.length;
 var SESSION_ID = (0, import_node_crypto3.randomUUID)();
 function readCliVersion() {
   if (true) {
-    return "0.26.1-next.11";
+    return "0.26.1-next.13";
   }
   return "0.0.0";
 }
@@ -108061,14 +108061,16 @@ async function pointerPost(api, body, signal) {
     return false;
   }
 }
-async function setSimulatorClipboardText(api, text, signal) {
+var SENSITIVE_TEXT_REFUSED = "refused to set sensitive text";
+async function setSimulatorClipboardText(api, text, options = {}) {
+  const { sensitive = false, signal } = options;
   if (api.external) assertAllowedSimServerEndpoint("/api/clipboard/text");
   let res;
   try {
     res = await fetch(`${api.apiUrl}/api/clipboard/text`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ text }),
+      body: JSON.stringify(sensitive ? { text, sensitive } : { text }),
       signal
     });
   } catch (err) {
@@ -108087,6 +108089,7 @@ async function setSimulatorClipboardText(api, text, signal) {
     );
   }
   const body = await res.json().catch(() => null);
+  if (sensitive && body?.error?.includes(SENSITIVE_TEXT_REFUSED)) return "refused";
   if (!res.ok || body?.status !== "ok") {
     throw new FailureError(
       `Paste failed: could not set the device clipboard (${body?.error ?? `HTTP ${res.status}`}).`,
@@ -108098,6 +108101,7 @@ async function setSimulatorClipboardText(api, text, signal) {
       }
     );
   }
+  return "set";
 }
 async function simulatorPost(toolLabel, api, endpoint, reqBody, signal, fallbackHint) {
   if (api.external) assertAllowedSimServerEndpoint(endpoint);
@@ -125814,10 +125818,12 @@ var pasteZodSchema = external_exports.object({
 });
 
 // ../tool-server/src/tools/paste/platforms/ios.ts
+init_src2();
 var LEFT_GUI_KEYCODE = 227;
 var V_KEYCODE = charToKeyPress("v").keyCode;
 var CHORD_STEP_MS = 50;
 var sleep10 = (ms) => new Promise((r) => setTimeout(r, ms));
+var typesAsText = (char) => !"\n\r	".includes(char) && !!charToKeyPress(char);
 function rejectTv(device) {
   throw new UnsupportedOperationError(
     "paste",
@@ -125825,8 +125831,22 @@ function rejectTv(device) {
     "tvOS has no pasteboard to paste from \u2014 type into the focused field with keyboard instead"
   );
 }
-async function pasteSimulator(api, text) {
-  await setSimulatorClipboardText(api, text);
+async function pasteSimulator(registry2, device, api, params) {
+  const sensitive = params.hasSecrets === true;
+  if (await setSimulatorClipboardText(api, params.text, { sensitive }) === "refused") {
+    if (![...params.text].every(typesAsText)) {
+      throw new InvalidToolInputError(
+        "Paste failed: Device Hub has opened this simulator, so a secret is typed instead of pasted, and this secret holds a newline, a tab or a character the keyboard cannot type. Nothing was typed.",
+        {
+          error_code: FAILURE_CODES.KEYBOARD_CHARACTER_UNSUPPORTED,
+          failure_stage: "paste_secret_typed_simulator",
+          error_kind: "unsupported"
+        }
+      );
+    }
+    await typeSimulatorServer(registry2, device, { udid: params.udid, text: params.text });
+    return { pasted: true, via: "keyboard" };
+  }
   await api.pressKey("Down", LEFT_GUI_KEYCODE);
   await sleep10(CHORD_STEP_MS);
   await api.pressKey("Down", V_KEYCODE);
@@ -125846,7 +125866,7 @@ function makeIosImpl4(registry2) {
       if (await isTvOsSimulator(device.id)) rejectTv(device);
       const ref = simulatorServerRef(device);
       const api = await registry2.resolveService(ref.urn, ref.options);
-      return pasteSimulator(api, params.text);
+      return pasteSimulator(registry2, device, api, params);
     }
   };
 }
@@ -125938,9 +125958,9 @@ function createPasteTool(registry2) {
       completedMsg: () => "Pasted text",
       failedMsg: ({ failureSignal: failureSignal2 }) => `Failed to paste text: ${failureSignal2.error_code}`
     },
-    description: `Paste text into the focused field: puts \`text\` on the DEVICE clipboard (the host clipboard is untouched), then triggers the platform's paste shortcut (iOS simulator, Android emulator).
+    description: `Paste text into the focused field: puts \`text\` on the DEVICE clipboard, then triggers the platform's paste shortcut (iOS simulator, Android emulator).
 Do NOT use this in place of \`keyboard\`. \`keyboard\` types as a user would and is the default for all text entry; use \`paste\` only where a real user would paste \u2014 a 2FA/OTP code copied from another app, a long link or token, or when testing the app's own paste handling.
-Tap the field first so it has focus. Returns { pasted: true }. Fails on a TV target, when the device clipboard cannot be set, or when the simulator-server build lacks clipboard support.
+Tap the field first so it has focus. Returns { pasted: true }, plus via: "keyboard" when a secret was typed instead of pasted. Fails on a TV target, when the device clipboard cannot be set, when a secret that has to be typed holds a character that cannot be typed, or when the simulator-server build lacks clipboard support.
 Supports \`{{secret:<NAME>}}\` placeholders like \`keyboard\`; the value is never echoed back.`,
     searchHint: "paste clipboard pasteboard otp 2fa code fill field",
     zodSchema: pasteZodSchema,
@@ -125951,7 +125971,7 @@ Supports \`{{secret:<NAME>}}\` placeholders like \`keyboard\`; the value is neve
       return serializedPerDevice(params.udid, async () => {
         if (secrets.length === 0) return dispatch(services, params, options);
         try {
-          return await dispatch(services, { ...params, text }, options);
+          return await dispatch(services, { ...params, text, hasSecrets: true }, options);
         } catch (err) {
           throw redactSecretsFromError(err, secrets);
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@swmansion/argent",
-  "version": "0.26.1-next.11",
+  "version": "0.26.1-next.13",
   "mcpName": "io.github.software-mansion/argent",
   "description": "MCP server for iOS Simulator and Android Emulator control",
   "license": "Apache-2.0",

package/skills/argent-device-interact/SKILL.md

@@ -185,7 +185,7 @@ Where the value is read from, and the rules for using a placeholder — includin
 { "udid": "<UDID>", "text": "482913" }
 ```
 
-Puts `text` on the **device** clipboard (the host clipboard is untouched) and triggers the platform's paste shortcut. iOS simulator and Android emulator only; a TV target, a physical device, Chromium and Vega are rejected.
+Puts `text` on the **device** clipboard and triggers the platform's paste shortcut. iOS simulator and Android emulator only; a TV target, a physical device, Chromium and Vega are rejected.
 
 `paste` is **not** a faster `keyboard`. `keyboard` types the way a user types and stays the default for every text entry — a search query, a login, a form field. Reach for `paste` only where a real user would paste: a 2FA / OTP code copied from another app, a long link or token, or to test how the app handles pasted input. It also carries what `keyboard` can't type on a given platform (multi-line text, non-ASCII on Android), but that alone is not a reason to paste — ask whether the user would.