la-machina-engine 0.8.0 → 0.9.0

package/README.md

@@ -1301,6 +1301,28 @@ model cannot spoof `Authorization` via `input.headers`).
 dispatch with `{ service, method, path, status, latencyMs, bytesIn }`
 — no secrets — for metering, billing, audit logs.
 
+**Raw-body uploads (0.9.0):** set `bodyEncoding: 'raw'` on the call to
+send a string body verbatim — no `JSON.stringify`. Use for upload APIs
+that take binary or text-blob bodies (Drive media upload, S3
+PutObject, image push, log ingestion, etc.). The caller-supplied
+`Content-Type` header wins; default falls back to `text/plain`.
+
+```ts
+ApiCall({
+  service: 'gdrive',
+  method: 'PATCH',
+  path: `/upload/drive/v3/files/${fileId}?uploadType=media`,
+  headers: { 'Content-Type': 'text/markdown' },
+  body: '# Hello world',
+  bodyEncoding: 'raw',
+})
+```
+
+`bodyEncoding: 'raw'` requires the body to be a string — passing an
+object returns `ERR_API_RAW_BODY_NOT_STRING` and never makes the
+fetch. The default `'json'` encoding behaves exactly as in 0.8.x.
+`maxBodyBytes` is enforced under both encodings.
+
 **Disabling:** `tools.disabled: ['ApiCall']` turns it off even when
 services are configured. Absent `config.api` → tool never registered,
 no prompt mention.

package/dist/index.cjs

@@ -8208,6 +8208,19 @@ function createApiCallTool(opts) {
     path: import_zod23.z.string().regex(/^\//, "path must start with /"),
     query: import_zod23.z.record(import_zod23.z.string(), import_zod23.z.string()).optional(),
     body: import_zod23.z.unknown().optional(),
+    /**
+     * Plan 032 — how to encode the body before sending.
+     *
+     *   'json' (default, back-compat): `JSON.stringify(body)` and
+     *           Content-Type defaults to `application/json` (caller
+     *           header still wins).
+     *   'raw':  `body` MUST be a string, sent verbatim. Caller-
+     *           supplied Content-Type wins; default falls back to
+     *           `text/plain`. Use for binary or text-blob upload
+     *           APIs (Drive media upload, S3 PutObject, log
+     *           ingestion, image push, etc.).
+     */
+    bodyEncoding: import_zod23.z.enum(["json", "raw"]).optional(),
     headers: import_zod23.z.record(import_zod23.z.string(), import_zod23.z.string()).optional()
   });
   const description = opts.toolDescription ?? `Call a configured external API. Services: ${serviceNames.join(", ")}. Auth is injected automatically \u2014 do not pass credentials via headers.`;
@@ -8230,8 +8243,20 @@ function createApiCallTool(opts) {
         return errResult(`ERR_API_PATH_NOT_ALLOWED: ${input.path} for service ${svc.name}`);
       }
       let bodyText;
+      let defaultContentType;
       if (input.body !== void 0) {
-        bodyText = JSON.stringify(input.body);
+        if (input.bodyEncoding === "raw") {
+          if (typeof input.body !== "string") {
+            return errResult(
+              "ERR_API_RAW_BODY_NOT_STRING: bodyEncoding=raw requires body to be a string"
+            );
+          }
+          bodyText = input.body;
+          defaultContentType = "text/plain";
+        } else {
+          bodyText = JSON.stringify(input.body);
+          defaultContentType = "application/json";
+        }
         const cap = svc.maxBodyBytes ?? DEFAULT_MAX_BODY_BYTES;
         if (byteLength2(bodyText) > cap) {
           return errResult(`ERR_API_BODY_TOO_LARGE: exceeds ${cap} bytes`);
@@ -8263,7 +8288,10 @@ function createApiCallTool(opts) {
         res = await fetchFn(url, {
           method: input.method,
           headers: {
-            "Content-Type": "application/json",
+            // Plan 032 — Content-Type default depends on body encoding;
+            // omit when there's no body. Caller-supplied Content-Type
+            // (in `userHeaders`) wins through normal merge order.
+            ...defaultContentType !== void 0 ? { "Content-Type": defaultContentType } : {},
             ...svc.defaultHeaders ?? {},
             ...userHeaders,
             ...authHeaders