@swmansion/argent 0.27.1-next.18 → 0.27.1-next.19

package/dist/cli-cmds.mjs

@@ -2026,228 +2026,10 @@ async function ensureToolsServer(paths) {
   }
 }
 
-// ../argent-tools-client/src/link-config.ts
-import * as path2 from "node:path";
-import { homedir as homedir2 } from "node:os";
-import { mkdir as mkdir2, writeFile as writeFile2, readFile as readFile2, unlink as unlink2, chmod as chmod2 } from "node:fs/promises";
-var LINK_DIR = path2.join(homedir2(), ".argent");
-var LINK_FILE = path2.join(LINK_DIR, "link.json");
-async function readLinkConfig() {
-  try {
-    const raw = await readFile2(LINK_FILE, "utf8");
-    const parsed = JSON.parse(raw);
-    if (!parsed || typeof parsed.url !== "string" || typeof parsed.host !== "string" || typeof parsed.port !== "number" || typeof parsed.createdAt !== "string") {
-      return null;
-    }
-    return {
-      url: parsed.url,
-      host: parsed.host,
-      port: parsed.port,
-      createdAt: parsed.createdAt,
-      ...typeof parsed.token === "string" ? { token: parsed.token } : {}
-    };
-  } catch {
-    return null;
-  }
-}
-async function writeLinkConfig(cfg) {
-  await mkdir2(LINK_DIR, { recursive: true });
-  await writeFile2(LINK_FILE, JSON.stringify(cfg, null, 2) + "\n", {
-    encoding: "utf8",
-    mode: 384
-  });
-  await chmod2(LINK_FILE, 384);
-}
-async function clearLinkConfig() {
-  try {
-    await unlink2(LINK_FILE);
-  } catch {
-  }
-}
-async function getResolvedToolsUrl() {
-  const envUrl = process.env.ARGENT_TOOLS_URL;
-  if (envUrl) {
-    const link3 = await readLinkConfig();
-    const envToken = process.env[AUTH_TOKEN_ENV];
-    return {
-      url: envUrl,
-      source: "env",
-      ...envToken ? { token: envToken } : {},
-      ...link3 ? { shadowedLink: link3 } : {}
-    };
-  }
-  const link2 = await readLinkConfig();
-  if (link2) {
-    return { url: link2.url, source: "link", ...link2.token ? { token: link2.token } : {} };
-  }
-  return { url: null, source: "none" };
-}
-var LINK_URL_SCHEME = "argent:";
-function formatLinkUrl(parts) {
-  const h2 = parts.host.includes(":") && !parts.host.startsWith("[") ? `[${parts.host}]` : parts.host;
-  const auth = parts.token ? `${encodeURIComponent(parts.token)}@` : "";
-  return `${LINK_URL_SCHEME}//${auth}${h2}:${parts.port}`;
-}
-function parseLinkUrl(input) {
-  if (!input.startsWith(`${LINK_URL_SCHEME}//`)) return null;
-  let u3;
-  try {
-    u3 = new URL(input);
-  } catch {
-    throw new Error(
-      `Invalid connection string "${input}" \u2014 expected argent://[<token>@]<host>:<port>`
-    );
-  }
-  const host = u3.hostname.startsWith("[") ? u3.hostname.slice(1, -1) : u3.hostname;
-  if (!host) throw new Error(`Connection string "${input}" is missing a host.`);
-  if (!u3.port) throw new Error(`Connection string "${input}" is missing a port.`);
-  const port = Number(u3.port);
-  const token = u3.username ? decodeURIComponent(u3.username) : void 0;
-  return { host, port, ...token ? { token } : {} };
-}
-function httpFromHostPort(host, port) {
-  const h2 = host.includes(":") && !host.startsWith("[") ? `[${host}]` : host;
-  return `http://${h2}:${port}`;
-}
-function parseLinkTarget(input) {
-  const argent = parseLinkUrl(input);
-  if (argent) {
-    return {
-      url: httpFromHostPort(argent.host, argent.port),
-      host: argent.host,
-      port: argent.port,
-      ...argent.token ? { token: argent.token } : {}
-    };
-  }
-  if (!/^https?:\/\//i.test(input)) return null;
-  let u3;
-  try {
-    u3 = new URL(input);
-  } catch {
-    throw new Error(`Invalid URL "${input}" \u2014 expected http(s)://<host>[:<port>][/path].`);
-  }
-  const host = u3.hostname.startsWith("[") ? u3.hostname.slice(1, -1) : u3.hostname;
-  if (!host) throw new Error(`URL "${input}" is missing a host.`);
-  const port = u3.port ? Number(u3.port) : u3.protocol === "https:" ? 443 : 80;
-  const path21 = u3.pathname === "/" ? "" : u3.pathname.replace(/\/+$/, "");
-  const url2 = `${u3.protocol}//${u3.host}${path21}`;
-  const token = u3.username ? decodeURIComponent(u3.username) : void 0;
-  return { url: url2, host, port, ...token ? { token } : {} };
-}
-
-// ../argent-tools-client/src/file-inputs.ts
-import { createHash as createHash2, randomUUID as randomUUID3 } from "node:crypto";
-import { createReadStream } from "node:fs";
-import { mkdir as mkdir3, readFile as readFile3, rm as rm2, stat as stat2, writeFile as writeFile3 } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import * as path3 from "node:path";
-
-// ../archive/src/index.ts
-import { execFile } from "node:child_process";
-import { rm, readdir as readdir2 } from "node:fs/promises";
-import { basename, dirname as dirname2, join as join3, posix, resolve as resolve2, sep } from "node:path";
-import { promisify } from "node:util";
-var execFileAsync = promisify(execFile);
-var ArchiveError = class extends Error {
-};
-function createTarGzArgs(sourcePath, target) {
-  return ["-czf", target, "-C", dirname2(sourcePath), basename(sourcePath)];
-}
-async function createTarGzFile(sourcePath, tarPath) {
-  try {
-    await execFileAsync("tar", createTarGzArgs(sourcePath, tarPath));
-  } catch (err) {
-    await rm(tarPath, { force: true }).catch(() => {
-    });
-    throw err;
-  }
-}
-function normalizeTarMemberPath(memberPath) {
-  return memberPath.replace(/^\.\//, "").replace(/\\/g, "/");
-}
-function isSafeTarMember(memberPath, destDir) {
-  const normalized = normalizeTarMemberPath(memberPath);
-  if (!normalized || normalized === "." || normalized === "./") return false;
-  if (normalized.startsWith("/") || /^[A-Za-z]:[\\/]/.test(normalized)) return false;
-  const relative3 = posix.normalize(normalized);
-  if (relative3 === ".." || relative3.startsWith("../") || relative3.split("/").includes("..")) {
-    return false;
-  }
-  const root = resolve2(destDir);
-  const resolved = resolve2(destDir, relative3);
-  return resolved === root || resolved.startsWith(root + sep);
-}
-async function listTarMembers(tarPath) {
-  const { stdout: stdout2 } = await execFileAsync("tar", ["-tzf", tarPath]);
-  return stdout2.split("\n").map((line) => line.trim()).filter((line) => line.length > 0);
-}
-function isEscapingLinkTarget(target) {
-  if (target.startsWith("/") || /^[A-Za-z]:[\\/]/.test(target)) return true;
-  return posix.normalize(target.replace(/\\/g, "/")).split("/").includes("..");
-}
-async function assertSafeMemberTypes(tarPath) {
-  const { stdout: stdout2 } = await execFileAsync("tar", ["-tzvf", tarPath]);
-  for (const line of stdout2.split("\n")) {
-    if (!line.trim()) continue;
-    const type = line[0];
-    if (type === "-" || type === "d") continue;
-    if (type === "l") {
-      const parts = line.split(" -> ");
-      const target = parts.length === 2 ? parts[1].trim() : "";
-      if (parts.length !== 2 || !target || isEscapingLinkTarget(target)) {
-        throw new ArchiveError(
-          `Archive contains a symlink whose target could not be confirmed safe: "${line.trim()}".`
-        );
-      }
-      continue;
-    }
-    throw new ArchiveError(
-      `Archive contains an unsupported member type "${type}" (hardlink/device/\u2026) \u2014 refusing extraction.`
-    );
-  }
-}
-async function assertSafeArchive(tarPath, destDir) {
-  let members;
-  try {
-    members = await listTarMembers(tarPath);
-  } catch (err) {
-    throw new ArchiveError(
-      `Could not read archive: ${err instanceof Error ? err.message : String(err)}`
-    );
-  }
-  if (members.length === 0) {
-    throw new ArchiveError("Archive is empty.");
-  }
-  for (const member of members) {
-    if (!isSafeTarMember(member, destDir)) {
-      throw new ArchiveError(`Archive contains an unsafe path "${member}" \u2014 refusing extraction.`);
-    }
-  }
-  await assertSafeMemberTypes(tarPath);
-}
-async function resolveMember(destDir, expectedName) {
-  const entries = await readdir2(destDir);
-  if (entries.includes(expectedName)) {
-    return join3(destDir, expectedName);
-  }
-  const real = entries.filter((e) => !e.startsWith("._"));
-  if (real.length !== 1) {
-    throw new ArchiveError(
-      `Could not identify the extracted member (expected "${expectedName}", found ${real.length} entries).`
-    );
-  }
-  return join3(destDir, real[0]);
-}
-async function safeExtractTarGz(tarPath, destDir, expectedName) {
-  await assertSafeArchive(tarPath, destDir);
-  await execFileAsync("tar", ["-xzf", tarPath, "-C", destDir]);
-  return resolveMember(destDir, expectedName);
-}
-
 // ../registry/src/artifacts.ts
 import { stat } from "node:fs/promises";
 import { randomUUID } from "node:crypto";
-import { basename as basename2, extname } from "node:path";
+import { basename, extname } from "node:path";
 
 // ../registry/src/file-inputs.ts
 var FLOW_NAME_CHARSET = "[A-Za-z0-9_-]+";
@@ -17125,6 +16907,282 @@ config(en_default());
 import { randomUUID as randomUUID2 } from "node:crypto";
 import { AsyncLocalStorage } from "node:async_hooks";
 var resolvedDuringInvocation = new AsyncLocalStorage();
+function valueAtPath(root, path21) {
+  let current = root;
+  for (const key of path21) {
+    if (current === null || typeof current !== "object") return void 0;
+    if (!Object.hasOwn(current, key)) return void 0;
+    current = current[key];
+  }
+  return current;
+}
+var MAX_UNION_ALTERNATIVES = 12;
+function describeParamIssues(error52, params) {
+  const allKeys = params !== null && typeof params === "object" && !Array.isArray(params) ? Object.keys(params) : [];
+  const supplied = allKeys.slice(0, 24);
+  const truncated = allKeys.length > supplied.length;
+  const parts = error52.issues.map((issue2) => {
+    const at = issue2.path.length > 0 ? issue2.path.join(".") : "(root)";
+    if (issue2.code === "custom") {
+      return issue2.path.length > 0 ? `\`${at}\`: ${issue2.message}` : issue2.message;
+    }
+    if (valueAtPath(params, issue2.path) === void 0) {
+      const expected = issue2.expected;
+      const kind = typeof expected === "string" ? ` (${expected})` : "";
+      return `\`${at}\` is required${kind} and was not provided`;
+    }
+    if (issue2.code === "unrecognized_keys") {
+      const keys = issue2.keys ?? [];
+      const at2 = issue2.path.length > 0 ? `${issue2.path.join(".")}.` : "";
+      return `unknown parameter${keys.length === 1 ? "" : "s"} ${keys.map((k) => `\`${at2}${k}\``).join(", ")}`;
+    }
+    if (issue2.code === "invalid_union") {
+      const branches = issue2.errors ?? [];
+      const alternatives = [];
+      const seen = /* @__PURE__ */ new Set();
+      let moreAlternatives = false;
+      for (const branch of branches) {
+        for (const inner of branch) {
+          const innerAt = inner.path.length > 0 ? `${at}.${inner.path.join(".")}: ` : "";
+          const text2 = `${innerAt}${inner.message}`;
+          if (seen.has(text2)) continue;
+          if (alternatives.length >= MAX_UNION_ALTERNATIVES) {
+            moreAlternatives = true;
+            break;
+          }
+          seen.add(text2);
+          alternatives.push(text2);
+        }
+        if (moreAlternatives) break;
+      }
+      if (alternatives.length > 0) {
+        return `\`${at}\`: ${alternatives.join("; or ")}${moreAlternatives ? "; or \u2026" : ""}`;
+      }
+    }
+    return `\`${at}\`: ${issue2.message}`;
+  });
+  const sent = supplied.length > 0 ? ` You sent: ${supplied.map((k) => `\`${k}\``).join(", ")}${truncated ? ", \u2026" : ""}.` : "";
+  const body = parts.length > 0 ? `${parts.map((p) => p.replace(/\.$/, "")).join("; ")}.` : "";
+  return `${body}${sent}`.trim() || "invalid parameters";
+}
+
+// ../argent-tools-client/src/link-config.ts
+import * as path2 from "node:path";
+import { homedir as homedir2 } from "node:os";
+import { mkdir as mkdir2, writeFile as writeFile2, readFile as readFile2, unlink as unlink2, chmod as chmod2 } from "node:fs/promises";
+var LINK_DIR = path2.join(homedir2(), ".argent");
+var LINK_FILE = path2.join(LINK_DIR, "link.json");
+async function readLinkConfig() {
+  try {
+    const raw = await readFile2(LINK_FILE, "utf8");
+    const parsed = JSON.parse(raw);
+    if (!parsed || typeof parsed.url !== "string" || typeof parsed.host !== "string" || typeof parsed.port !== "number" || typeof parsed.createdAt !== "string") {
+      return null;
+    }
+    return {
+      url: parsed.url,
+      host: parsed.host,
+      port: parsed.port,
+      createdAt: parsed.createdAt,
+      ...typeof parsed.token === "string" ? { token: parsed.token } : {}
+    };
+  } catch {
+    return null;
+  }
+}
+async function writeLinkConfig(cfg) {
+  await mkdir2(LINK_DIR, { recursive: true });
+  await writeFile2(LINK_FILE, JSON.stringify(cfg, null, 2) + "\n", {
+    encoding: "utf8",
+    mode: 384
+  });
+  await chmod2(LINK_FILE, 384);
+}
+async function clearLinkConfig() {
+  try {
+    await unlink2(LINK_FILE);
+  } catch {
+  }
+}
+async function getResolvedToolsUrl() {
+  const envUrl = process.env.ARGENT_TOOLS_URL;
+  if (envUrl) {
+    const link3 = await readLinkConfig();
+    const envToken = process.env[AUTH_TOKEN_ENV];
+    return {
+      url: envUrl,
+      source: "env",
+      ...envToken ? { token: envToken } : {},
+      ...link3 ? { shadowedLink: link3 } : {}
+    };
+  }
+  const link2 = await readLinkConfig();
+  if (link2) {
+    return { url: link2.url, source: "link", ...link2.token ? { token: link2.token } : {} };
+  }
+  return { url: null, source: "none" };
+}
+var LINK_URL_SCHEME = "argent:";
+function formatLinkUrl(parts) {
+  const h2 = parts.host.includes(":") && !parts.host.startsWith("[") ? `[${parts.host}]` : parts.host;
+  const auth = parts.token ? `${encodeURIComponent(parts.token)}@` : "";
+  return `${LINK_URL_SCHEME}//${auth}${h2}:${parts.port}`;
+}
+function parseLinkUrl(input) {
+  if (!input.startsWith(`${LINK_URL_SCHEME}//`)) return null;
+  let u3;
+  try {
+    u3 = new URL(input);
+  } catch {
+    throw new Error(
+      `Invalid connection string "${input}" \u2014 expected argent://[<token>@]<host>:<port>`
+    );
+  }
+  const host = u3.hostname.startsWith("[") ? u3.hostname.slice(1, -1) : u3.hostname;
+  if (!host) throw new Error(`Connection string "${input}" is missing a host.`);
+  if (!u3.port) throw new Error(`Connection string "${input}" is missing a port.`);
+  const port = Number(u3.port);
+  const token = u3.username ? decodeURIComponent(u3.username) : void 0;
+  return { host, port, ...token ? { token } : {} };
+}
+function httpFromHostPort(host, port) {
+  const h2 = host.includes(":") && !host.startsWith("[") ? `[${host}]` : host;
+  return `http://${h2}:${port}`;
+}
+function parseLinkTarget(input) {
+  const argent = parseLinkUrl(input);
+  if (argent) {
+    return {
+      url: httpFromHostPort(argent.host, argent.port),
+      host: argent.host,
+      port: argent.port,
+      ...argent.token ? { token: argent.token } : {}
+    };
+  }
+  if (!/^https?:\/\//i.test(input)) return null;
+  let u3;
+  try {
+    u3 = new URL(input);
+  } catch {
+    throw new Error(`Invalid URL "${input}" \u2014 expected http(s)://<host>[:<port>][/path].`);
+  }
+  const host = u3.hostname.startsWith("[") ? u3.hostname.slice(1, -1) : u3.hostname;
+  if (!host) throw new Error(`URL "${input}" is missing a host.`);
+  const port = u3.port ? Number(u3.port) : u3.protocol === "https:" ? 443 : 80;
+  const path21 = u3.pathname === "/" ? "" : u3.pathname.replace(/\/+$/, "");
+  const url2 = `${u3.protocol}//${u3.host}${path21}`;
+  const token = u3.username ? decodeURIComponent(u3.username) : void 0;
+  return { url: url2, host, port, ...token ? { token } : {} };
+}
+
+// ../argent-tools-client/src/file-inputs.ts
+import { createHash as createHash2, randomUUID as randomUUID3 } from "node:crypto";
+import { createReadStream, rmSync } from "node:fs";
+import { mkdir as mkdir3, readFile as readFile3, rm as rm2, stat as stat2, writeFile as writeFile3 } from "node:fs/promises";
+import { constants, tmpdir } from "node:os";
+import * as path3 from "node:path";
+
+// ../archive/src/index.ts
+import { execFile } from "node:child_process";
+import { rm, readdir as readdir2 } from "node:fs/promises";
+import { basename as basename2, dirname as dirname2, join as join3, posix, resolve as resolve2, sep } from "node:path";
+import { promisify } from "node:util";
+var execFileAsync = promisify(execFile);
+var ArchiveError = class extends Error {
+};
+function createTarGzArgs(sourcePath, target) {
+  return ["-czf", target, "-C", dirname2(sourcePath), basename2(sourcePath)];
+}
+async function createTarGzFile(sourcePath, tarPath) {
+  try {
+    await execFileAsync("tar", createTarGzArgs(sourcePath, tarPath));
+  } catch (err) {
+    await rm(tarPath, { force: true }).catch(() => {
+    });
+    throw err;
+  }
+}
+function normalizeTarMemberPath(memberPath) {
+  return memberPath.replace(/^\.\//, "").replace(/\\/g, "/");
+}
+function isSafeTarMember(memberPath, destDir) {
+  const normalized = normalizeTarMemberPath(memberPath);
+  if (!normalized || normalized === "." || normalized === "./") return false;
+  if (normalized.startsWith("/") || /^[A-Za-z]:[\\/]/.test(normalized)) return false;
+  const relative3 = posix.normalize(normalized);
+  if (relative3 === ".." || relative3.startsWith("../") || relative3.split("/").includes("..")) {
+    return false;
+  }
+  const root = resolve2(destDir);
+  const resolved = resolve2(destDir, relative3);
+  return resolved === root || resolved.startsWith(root + sep);
+}
+async function listTarMembers(tarPath) {
+  const { stdout: stdout2 } = await execFileAsync("tar", ["-tzf", tarPath]);
+  return stdout2.split("\n").map((line) => line.trim()).filter((line) => line.length > 0);
+}
+function isEscapingLinkTarget(target) {
+  if (target.startsWith("/") || /^[A-Za-z]:[\\/]/.test(target)) return true;
+  return posix.normalize(target.replace(/\\/g, "/")).split("/").includes("..");
+}
+async function assertSafeMemberTypes(tarPath) {
+  const { stdout: stdout2 } = await execFileAsync("tar", ["-tzvf", tarPath]);
+  for (const line of stdout2.split("\n")) {
+    if (!line.trim()) continue;
+    const type = line[0];
+    if (type === "-" || type === "d") continue;
+    if (type === "l") {
+      const parts = line.split(" -> ");
+      const target = parts.length === 2 ? parts[1].trim() : "";
+      if (parts.length !== 2 || !target || isEscapingLinkTarget(target)) {
+        throw new ArchiveError(
+          `Archive contains a symlink whose target could not be confirmed safe: "${line.trim()}".`
+        );
+      }
+      continue;
+    }
+    throw new ArchiveError(
+      `Archive contains an unsupported member type "${type}" (hardlink/device/\u2026) \u2014 refusing extraction.`
+    );
+  }
+}
+async function assertSafeArchive(tarPath, destDir) {
+  let members;
+  try {
+    members = await listTarMembers(tarPath);
+  } catch (err) {
+    throw new ArchiveError(
+      `Could not read archive: ${err instanceof Error ? err.message : String(err)}`
+    );
+  }
+  if (members.length === 0) {
+    throw new ArchiveError("Archive is empty.");
+  }
+  for (const member of members) {
+    if (!isSafeTarMember(member, destDir)) {
+      throw new ArchiveError(`Archive contains an unsafe path "${member}" \u2014 refusing extraction.`);
+    }
+  }
+  await assertSafeMemberTypes(tarPath);
+}
+async function resolveMember(destDir, expectedName) {
+  const entries = await readdir2(destDir);
+  if (entries.includes(expectedName)) {
+    return join3(destDir, expectedName);
+  }
+  const real = entries.filter((e) => !e.startsWith("._"));
+  if (real.length !== 1) {
+    throw new ArchiveError(
+      `Could not identify the extracted member (expected "${expectedName}", found ${real.length} entries).`
+    );
+  }
+  return join3(destDir, real[0]);
+}
+async function safeExtractTarGz(tarPath, destDir, expectedName) {
+  await assertSafeArchive(tarPath, destDir);
+  await execFileAsync("tar", ["-xzf", tarPath, "-C", destDir]);
+  return resolveMember(destDir, expectedName);
+}
 
 // ../argent-tools-client/src/file-inputs.ts
 var FILE_INPUT_MARKER2 = "__argentFileInput";
@@ -17142,10 +17200,39 @@ function interpolatePath(template, args) {
   });
   return missing ? null : out;
 }
-async function tarball(sourcePath) {
-  const tarPath = path3.join(tmpdir(), `argent-upload-${randomUUID3()}.tar.gz`);
-  await createTarGzFile(sourcePath, tarPath);
-  return tarPath;
+var pendingArchives = /* @__PURE__ */ new Set();
+var ARCHIVE_SIGNALS = ["SIGINT", "SIGTERM", "SIGHUP"];
+function removePendingArchives() {
+  for (const archive of pendingArchives) {
+    try {
+      rmSync(archive, { force: true });
+    } catch {
+    }
+  }
+  pendingArchives.clear();
+  for (const s of ARCHIVE_SIGNALS) process.removeListener(s, removeArchivesOnSignal);
+  process.removeListener("exit", removePendingArchives);
+}
+function removeArchivesOnSignal(signal) {
+  removePendingArchives();
+  if (process.listenerCount(signal) > 0) return;
+  try {
+    process.kill(process.pid, signal);
+  } catch {
+    process.exit(128 + constants.signals[signal]);
+  }
+}
+function trackArchive(archive) {
+  if (pendingArchives.size === 0) {
+    for (const s of ARCHIVE_SIGNALS) process.on(s, removeArchivesOnSignal);
+    process.on("exit", removePendingArchives);
+  }
+  pendingArchives.add(archive);
+}
+function untrackArchive(archive) {
+  if (!pendingArchives.delete(archive) || pendingArchives.size > 0) return;
+  for (const s of ARCHIVE_SIGNALS) process.removeListener(s, removeArchivesOnSignal);
+  process.removeListener("exit", removePendingArchives);
 }
 function sha256File(filePath) {
   return new Promise((resolve11, reject) => {
@@ -17206,17 +17293,19 @@ async function prepareFileInputs(specs, args, opts) {
         wire.mtimeMs = st.mtimeMs;
       }
       if (opts.uploadEndpoint && st) {
-        let tarPath = null;
+        const tarPath = path3.join(tmpdir(), `argent-upload-${randomUUID3()}.tar.gz`);
+        trackArchive(tarPath);
         try {
           process.stderr.write(
             `Uploading ${path3.basename(filePath)} to the remote tool-server...
 `
           );
-          tarPath = await tarball(filePath);
+          await createTarGzFile(filePath, tarPath);
           wire.contentHash = await sha256File(tarPath);
           wire.uploadId = await uploadTar(tarPath, opts.uploadEndpoint, opts.signal);
         } finally {
-          if (tarPath) await rm2(tarPath, { force: true }).catch(() => {
+          untrackArchive(tarPath);
+          await rm2(tarPath, { force: true }).catch(() => {
           });
         }
       }
@@ -17331,29 +17420,65 @@ function errorBodyMessage(body) {
   if (Array.isArray(body.issues) && typeof body.message === "string") return body.message;
   return body.error ?? body.message;
 }
+function assertRequiredPresent(meta3, args) {
+  const record2 = typeof args === "object" && args !== null ? args : {};
+  const schema = meta3.inputSchema;
+  const derived = new Set(
+    (meta3.fileInputs ?? []).filter((spec) => spec.path !== `\${${spec.target}}`).map((spec) => spec.target)
+  );
+  const required2 = Array.isArray(schema.required) ? schema.required : [];
+  const missing = required2.filter(
+    (name) => typeof name === "string" && !derived.has(name) && record2[name] === void 0
+  );
+  if (missing.length === 0) return;
+  const issues = missing.map((name) => {
+    const property = schema.properties?.[name];
+    const type = property?.enum === void 0 ? property?.type : void 0;
+    const expected = type === "integer" ? "number" : typeof type === "string" ? type : void 0;
+    return { code: "invalid_type", path: [name], message: "", expected };
+  });
+  throw new ToolInvocationError(
+    describeParamIssues({ issues }, record2)
+  );
+}
+function carriesUpload(args) {
+  if (typeof args !== "object" || args === null) return false;
+  return Object.values(args).some((value) => {
+    const wire = value;
+    return wire?.[FILE_INPUT_MARKER2] === true && typeof wire.uploadId === "string";
+  });
+}
 function createToolsClient(options = {}) {
   let cached3 = null;
-  async function baseUrl() {
+  const doFetch = options.fetchImpl ?? ((url2, init2) => fetch(url2, init2));
+  async function route() {
+    if (options.baseUrl) return options.baseUrl();
     const resolved = await getResolvedToolsUrl();
     if (resolved.url) {
-      return { url: resolved.url, token: resolved.token ?? "" };
+      return { url: resolved.url, token: resolved.token ?? "", remote: true };
     }
-    if (cached3) return cached3;
-    if (!options.paths) {
-      throw new Error(
-        "tools-client: cannot spawn tool-server without `paths`; set ARGENT_TOOLS_URL or pass paths to createToolsClient()"
-      );
+    if (!cached3) {
+      if (!options.paths) {
+        throw new Error(
+          "tools-client: cannot spawn tool-server without `paths`; set ARGENT_TOOLS_URL or pass paths to createToolsClient()"
+        );
+      }
+      cached3 = await ensureToolsServer(options.paths);
     }
-    cached3 = await ensureToolsServer(options.paths);
-    return cached3;
+    return { ...cached3, remote: false };
+  }
+  async function baseUrl() {
+    const { url: url2, token } = await route();
+    return { url: url2, token };
   }
   async function fetchTools(opts) {
     opts?.signal?.throwIfAborted();
     const { url: url2, token } = await baseUrl();
-    const res = await fetch(`${url2}/tools`, {
-      headers: authHeaders2(token),
-      signal: opts?.signal
-    });
+    const res = await doFetch(
+      `${url2}/tools`,
+      { headers: authHeaders2(token), signal: opts?.signal },
+      { longRunning: false, carriesUpload: false }
+    );
     if (!res.ok) throw new Error(`GET /tools failed: ${res.status} ${res.statusText}`);
     const json2 = await res.json();
     return json2.tools;
@@ -17364,36 +17489,50 @@ function createToolsClient(options = {}) {
   }
   async function callTool(name, args, opts) {
     opts?.signal?.throwIfAborted();
-    const { url: url2, token } = await baseUrl();
+    const { url: url2, token, remote } = await route();
     let finalArgs = args;
     const meta3 = await fetchTool(name, { signal: opts?.signal });
     if (meta3?.fileInputs?.length) {
-      const { url: routedUrl } = await getResolvedToolsUrl();
-      const isRemote = routedUrl !== null;
+      if (remote) assertRequiredPresent(meta3, args);
       finalArgs = await prepareFileInputs(meta3.fileInputs, args ?? {}, {
-        includeContent: isRemote,
-        uploadEndpoint: isRemote ? { url: url2, token } : void 0,
+        includeContent: remote,
+        uploadEndpoint: remote ? { url: url2, token } : void 0,
         signal: opts?.signal
       });
     }
-    const res = await fetch(`${url2}/tools/${encodeURIComponent(name)}`, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        ...opts?.onProgress ? { Accept: "application/x-ndjson" } : {},
-        ...authHeaders2(token)
+    const res = await doFetch(
+      `${url2}/tools/${encodeURIComponent(name)}`,
+      {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          ...opts?.onProgress ? { Accept: "application/x-ndjson" } : {},
+          ...authHeaders2(token)
+        },
+        body: JSON.stringify(finalArgs ?? {}),
+        signal: opts?.signal
       },
-      body: JSON.stringify(finalArgs ?? {}),
-      signal: opts?.signal
-    });
+      { longRunning: meta3?.longRunning === true, carriesUpload: carriesUpload(finalArgs) }
+    );
     const contentType = res.headers.get("content-type") ?? "";
     if (opts?.onProgress && res.ok && res.body && contentType.includes("application/x-ndjson")) {
-      return consumeToolStream(res.body, opts.onProgress, opts.signal);
+      const streamed = await consumeToolStream(res.body, opts.onProgress, opts.signal);
+      return { ...streamed, outputHint: meta3?.outputHint };
     }
-    const json2 = await res.json().catch(() => {
+    let json2;
+    try {
+      json2 = await res.json();
+    } catch (err) {
       opts?.signal?.throwIfAborted();
-      return {};
-    });
+      if (res.ok) {
+        const reason = err instanceof Error ? err.message : String(err);
+        throw new Error(
+          `The tool-server answered ${res.status} ${res.statusText} to ${name}, but the answer could not be read (${reason}). The tool may have run; check its effect before you run it again.`,
+          { cause: err }
+        );
+      }
+      json2 = {};
+    }
     if (!res.ok) {
       throw new ToolInvocationError(errorBodyMessage(json2) ?? `${res.status} ${res.statusText}`, {
         errorCode: json2.error_code,
@@ -17403,7 +17542,7 @@ function createToolsClient(options = {}) {
     }
     opts?.signal?.throwIfAborted();
     const { result: data } = await applyClientFileDirectives(json2.data);
-    return { data, note: json2.note };
+    return { data, note: json2.note, outputHint: meta3?.outputHint };
   }
   return { fetchTools, fetchTool, callTool, baseUrl };
 }
@@ -18258,14 +18397,14 @@ async function resolveLocalFile(handle) {
   }
 }
 async function downloadAndExtractArchive(handle, data, dir) {
-  const tarball2 = join9(dir, `${sanitizeSegment(handle.filename)}.tar.gz`);
+  const tarball = join9(dir, `${sanitizeSegment(handle.filename)}.tar.gz`);
   try {
-    await writeFile4(tarball2, data);
-    return await safeExtractTarGz(tarball2, dir, handle.filename);
+    await writeFile4(tarball, data);
+    return await safeExtractTarGz(tarball, dir, handle.filename);
   } catch {
     return null;
   } finally {
-    await rm3(tarball2, { force: true }).catch(() => {
+    await rm3(tarball, { force: true }).catch(() => {
     });
   }
 }
@@ -21916,7 +22055,7 @@ var _CI_VENDOR_COUNT_FOR_TEST = vendors_default.length;
 var SESSION_ID2 = randomUUID5();
 function readCliVersion() {
   if (true) {
-    return "0.27.1-next.18";
+    return "0.27.1-next.19";
   }
   return "0.0.0";
 }