Skip to content

Commit b5fca41

Browse files
wilsoncccccwilsonccccc
authored
Require sandbox probe attachments as inline bytes (#15)
* Require inline bytes for sandbox probe attachments * Require sandbox probe attachments as inline bytes * Clarify probe attachment type coverage
1 parent aaba4d9 commit b5fca41

5 files changed

Lines changed: 53 additions & 20 deletions

File tree

‎.claude-plugin/marketplace.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@
99
"name": "cuey",
1010
"source": "./plugins/cuey",
1111
"description": "Cuey is an agentic financial intelligence system that analyzes prompts and Excel workbooks, improves decision accuracy through cross-checking and fact-checking, and delivers evidence-backed recommendations.",
12-
"version": "0.4.9",
12+
"version": "0.4.10",
1313
"author": {
1414
"name": "TensorBlock"
1515
},

‎plugins/cuey/.claude-plugin/plugin.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "cuey",
3-
"version": "0.4.9",
3+
"version": "0.4.10",
44
"description": "Cuey is an agentic financial intelligence system that analyzes prompts and Excel workbooks, improves decision accuracy through cross-checking and fact-checking, and delivers evidence-backed recommendations.",
55
"author": {
66
"name": "TensorBlock",

‎plugins/cuey/skills/cuey-probe/SKILL.md‎

Lines changed: 17 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -22,12 +22,23 @@ message contains a visible image but Claude exposes no raw file bytes, path, or
2222
handle for that image, leave `attachments` and `files` empty and state that
2323
the current image was visible but no raw attachment transport was exposed.
2424

25-
Prefer actual file bytes when Claude can expose them. For each current-message
26-
attachment, first try to include inline `base64`, `dataBase64`, or
27-
`contentBase64` content along with filename and MIME type. If Claude exposes
28-
only a file path or handle for the current-message attachment, pass that raw
29-
reference. If Claude exposes only extracted text and no raw file reference or
30-
bytes, leave `attachments` and `files` empty and put a short note in `note`.
25+
Prefer actual file bytes whenever Claude can read them. For each
26+
current-message attachment, first use Claude's available file access to read the
27+
attachment bytes and include inline `base64`, `dataBase64`, or `contentBase64`
28+
content along with filename and MIME type. Apply this to any current-message
29+
attachment type Claude can expose, including documents, spreadsheets, images,
30+
PDFs, text files, CSVs, archives, and other binary files.
31+
32+
If Claude exposes a `/root/.claude/uploads/...` sandbox path, do not pass that
33+
path as the only transport. That path is readable by Claude's sandbox, but not
34+
by the local Cuey MCP runtime. First read that current-message file in Claude's
35+
sandbox and pass its bytes inline as base64. Include the path only as metadata
36+
alongside the base64.
37+
38+
Only if Claude exposes a non-sandbox file path or handle that the MCP runtime
39+
can read may you pass a path or handle without base64. If Claude exposes only
40+
extracted text and no raw file reference or bytes, leave `attachments` and
41+
`files` empty and put a short note in `note`.
3142

3243
Use this payload shape:
3344

‎plugins/cuey/skills/cuey/SKILL.md‎

Lines changed: 17 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -38,12 +38,23 @@ message contains a visible image but Claude exposes no raw file bytes, path, or
3838
handle for that image, leave `attachments` and `files` empty and state that
3939
the current image was visible but no raw attachment transport was exposed.
4040

41-
Prefer actual file bytes when Claude can expose them. For each current-message
42-
attachment, first try to include inline `base64`, `dataBase64`, or
43-
`contentBase64` content along with filename and MIME type. If Claude exposes
44-
only a file path or handle for the current-message attachment, pass that raw
45-
reference. If Claude exposes only extracted text and no raw file reference or
46-
bytes, leave `attachments` and `files` empty and put a short note in `note`.
41+
Prefer actual file bytes whenever Claude can read them. For each
42+
current-message attachment, first use Claude's available file access to read the
43+
attachment bytes and include inline `base64`, `dataBase64`, or `contentBase64`
44+
content along with filename and MIME type. Apply this to any current-message
45+
attachment type Claude can expose, including documents, spreadsheets, images,
46+
PDFs, text files, CSVs, archives, and other binary files.
47+
48+
If Claude exposes a `/root/.claude/uploads/...` sandbox path, do not pass that
49+
path as the only transport. That path is readable by Claude's sandbox, but not
50+
by the local Cuey MCP runtime. First read that current-message file in Claude's
51+
sandbox and pass its bytes inline as base64. Include the path only as metadata
52+
alongside the base64.
53+
54+
Only if Claude exposes a non-sandbox file path or handle that the MCP runtime
55+
can read may you pass a path or handle without base64. If Claude exposes only
56+
extracted text and no raw file reference or bytes, leave `attachments` and
57+
`files` empty and put a short note in `note`.
4758

4859
Use this payload shape:
4960

‎plugins/cuey/skills/probe/SKILL.md‎

Lines changed: 17 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -22,12 +22,23 @@ message contains a visible image but Claude exposes no raw file bytes, path, or
2222
handle for that image, leave `attachments` and `files` empty and state that
2323
the current image was visible but no raw attachment transport was exposed.
2424

25-
Prefer actual file bytes when Claude can expose them. For each current-message
26-
attachment, first try to include inline `base64`, `dataBase64`, or
27-
`contentBase64` content along with filename and MIME type. If Claude exposes
28-
only a file path or handle for the current-message attachment, pass that raw
29-
reference. If Claude exposes only extracted text and no raw file reference or
30-
bytes, leave `attachments` and `files` empty and put a short note in `note`.
25+
Prefer actual file bytes whenever Claude can read them. For each
26+
current-message attachment, first use Claude's available file access to read the
27+
attachment bytes and include inline `base64`, `dataBase64`, or `contentBase64`
28+
content along with filename and MIME type. Apply this to any current-message
29+
attachment type Claude can expose, including documents, spreadsheets, images,
30+
PDFs, text files, CSVs, archives, and other binary files.
31+
32+
If Claude exposes a `/root/.claude/uploads/...` sandbox path, do not pass that
33+
path as the only transport. That path is readable by Claude's sandbox, but not
34+
by the local Cuey MCP runtime. First read that current-message file in Claude's
35+
sandbox and pass its bytes inline as base64. Include the path only as metadata
36+
alongside the base64.
37+
38+
Only if Claude exposes a non-sandbox file path or handle that the MCP runtime
39+
can read may you pass a path or handle without base64. If Claude exposes only
40+
extracted text and no raw file reference or bytes, leave `attachments` and
41+
`files` empty and put a short note in `note`.
3142

3243
Use this payload shape:
3344

0 commit comments

Comments
 (0)