@aaronsb/google-workspace-mcp 2.7.1 → 4.0.0

package/build/factory/manifest/gmail.yaml

@@ -1,7 +1,7 @@
 tool_name: manage_email
 description: "Search, read, send, forward, or manage emails in a Google Workspace account. Supports Gmail search syntax."
 requires_email: true
-gws_service: gmail
+google_service: gmail
 operations:
 
   # --- Core message operations ---
@@ -49,7 +49,6 @@ operations:
   send:
     type: action
     description: "compose and send a new email (creates draft when attachments present, 35MB attachment limit via upload endpoint)"
-    helper: "+send"
     params:
       to:
         type: string
@@ -63,6 +62,9 @@ operations:
         type: string
         description: "Email body text"
         required: true
+      from:
+        type: string
+        description: "Sender email or RFC 2822 mailbox for a verified Gmail Send As alias"
       cc:
         type: string
         description: "CC email(s), comma-separated"
@@ -78,17 +80,10 @@ operations:
       draft:
         type: boolean
         description: "Save as draft instead of sending (default: false, forced true when attachments present)"
-    cli_args:
-      to: "--to"
-      subject: "--subject"
-      body: "--body"
-      cc: "--cc"
-      bcc: "--bcc"
 
   reply:
     type: action
-    description: "reply to a message (thread-aware)"
-    helper: "+reply"
+    description: "reply to a message (thread-aware, creates draft when attachments present)"
     params:
       messageId:
         type: string
@@ -98,14 +93,19 @@ operations:
         type: string
         description: "Reply body text"
         required: true
-    cli_args:
-      messageId: "--message-id"
-      body: "--body"
+      attachments:
+        type: string
+        description: "Workspace filenames to attach, comma-separated (files must exist in workspace via manage_workspace). Creates draft when present."
+      html:
+        type: boolean
+        description: "Treat body as HTML content (default: plain text)"
+      draft:
+        type: boolean
+        description: "Save as draft instead of sending (default: false, forced true when attachments present)"
 
   replyAll:
     type: action
-    description: "reply-all to a message (thread-aware, includes all recipients)"
-    helper: "+reply-all"
+    description: "reply-all to a message (thread-aware, includes all recipients, creates draft when attachments present)"
     params:
       messageId:
         type: string
@@ -118,15 +118,19 @@ operations:
       cc:
         type: string
         description: "Additional CC email(s), comma-separated"
-    cli_args:
-      messageId: "--message-id"
-      body: "--body"
-      cc: "--cc"
+      attachments:
+        type: string
+        description: "Workspace filenames to attach, comma-separated (files must exist in workspace via manage_workspace). Creates draft when present."
+      html:
+        type: boolean
+        description: "Treat body as HTML content (default: plain text)"
+      draft:
+        type: boolean
+        description: "Save as draft instead of sending (default: false, forced true when attachments present)"
 
   forward:
     type: action
     description: "forward a message to new recipients (includes original attachments by default)"
-    helper: "+forward"
     params:
       messageId:
         type: string
@@ -139,17 +143,20 @@ operations:
       body:
         type: string
         description: "Optional note to prepend above forwarded message"
-    cli_args:
-      messageId: "--message-id"
-      to: "--to"
-      body: "--body"
 
   # --- Inbox management ---
 
+  # triage is just a filtered list: messages.list with an unread query. The
+  # hydration walk (messages.get per id) is already done by gmailPatch.afterExecute,
+  # which also carries threadId and snippet.
   triage:
     type: list
     description: "unread inbox summary (sender, subject, date)"
-    helper: "+triage"
+    resource: users.messages.list
+    defaults:
+      userId: me
+      q: "is:unread in:inbox"
+      maxResults: 20
 
   trash:
     type: action

package/build/factory/manifest/meet.yaml

@@ -1,7 +1,7 @@
 tool_name: manage_meet
 description: "Browse past Google Meet conferences, participants, transcripts, recordings, and AI-generated smart notes. Requires Workspace Business Standard+ for transcripts/recordings."
 requires_email: true
-gws_service: meet
+google_service: meet
 operations:
 
   # --- Conference records ---

package/build/factory/manifest/sheets.yaml

@@ -1,7 +1,7 @@
 tool_name: manage_sheets
 description: "Read, write, and manage Google Sheets spreadsheets."
 requires_email: true
-gws_service: sheets
+google_service: sheets
 operations:
 
   get:
@@ -26,7 +26,7 @@ operations:
   read:
     type: detail
     description: "read cell values from a range; rendered rows are prefixed with their sheet row number (e.g. 'R3: …') since blank rows are otherwise invisible"
-    helper: "+read"
+    resource: spreadsheets.values.get
     params:
       spreadsheetId:
         type: string
@@ -36,9 +36,6 @@ operations:
         type: string
         description: "Range to read (e.g. 'Sheet1!A1:D10' or just 'Sheet1')"
         required: true
-    cli_args:
-      spreadsheetId: "--spreadsheet"
-      range: "--range"
 
   append:
     type: action

package/build/factory/manifest/tasks.yaml

@@ -1,7 +1,7 @@
 tool_name: manage_tasks
 description: "Manage task lists and tasks in Google Tasks."
 requires_email: true
-gws_service: tasks
+google_service: tasks
 operations:
 
   # --- Task lists ---
@@ -22,10 +22,18 @@ operations:
         required: true
         maps_to: tasklist
 
+  # A TaskList's only meaningful field is its title, and it rides in the BODY —
+  # tasklists.insert declares no parameters. Without it this could only ever create
+  # nameless task lists, and did so without complaint.
   createTaskList:
     type: action
     description: "create a new task list"
     resource: tasklists.insert
+    params:
+      title:
+        type: string
+        description: "Task list name"
+        required: true
 
   deleteTaskList:
     type: action
@@ -75,6 +83,10 @@ operations:
         required: true
         maps_to: task
 
+  # title / notes / due are BODY fields (the Task resource). tasks.insert declares only
+  # `tasklist` (path) and `parent`/`previous` (query), so anything else goes in the body.
+  # Without them, `create` sent an empty Task and produced a BLANK task — no title, no
+  # content, no error. A titleless task is not a degraded task; it is a useless one.
   create:
     type: action
     description: "create a new task"
@@ -85,10 +97,23 @@ operations:
         description: "Task list ID"
         required: true
         maps_to: tasklist
+      title:
+        type: string
+        description: "Task title"
+        required: true
+      notes:
+        type: string
+        description: "Task notes / details"
+      due:
+        type: string
+        description: "Due date (RFC 3339, e.g. 2026-07-20T00:00:00.000Z — Google stores the date, not the time)"
 
+  # An `update` with no updatable fields could only ever PATCH an empty body, which
+  # Google Tasks answers with a 500 "Internal error encountered". So this operation did
+  # not merely fail to update — it failed EVERY time, and blamed Google while doing it.
   update:
     type: action
-    description: "update a task (patch semantics)"
+    description: "update a task (patch semantics — only the fields you pass are changed)"
     resource: tasks.patch
     params:
       taskListId:
@@ -101,6 +126,19 @@ operations:
         description: "Task ID"
         required: true
         maps_to: task
+      title:
+        type: string
+        description: "New task title"
+      notes:
+        type: string
+        description: "New task notes / details"
+      due:
+        type: string
+        description: "New due date (RFC 3339)"
+      status:
+        type: string
+        description: "Task status"
+        enum: [needsAction, completed]
 
   complete:
     type: action

package/build/factory/patches.js

@@ -8,6 +8,7 @@ import { drivePatch } from '../services/drive/patch.js';
 import { docsPatch } from '../services/docs/patch.js';
 import { meetPatch } from '../services/meet/patch.js';
 import { sheetsPatch } from '../services/sheets/patch.js';
+import { tasksPatch } from '../services/tasks/patch.js';
 export const patches = {
     gmail: gmailPatch,
     calendar: calendarPatch,
@@ -15,5 +16,6 @@ export const patches = {
     docs: docsPatch,
     meet: meetPatch,
     sheets: sheetsPatch,
+    tasks: tasksPatch,
 };
 //# sourceMappingURL=patches.js.map

package/build/factory/patches.js.map

@@ -1 +1 @@
-{"version":3,"file":"patches.js","sourceRoot":"","sources":["../../src/factory/patches.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAG1D,MAAM,CAAC,MAAM,OAAO,GAAiC;IACnD,KAAK,EAAE,UAAU;IACjB,QAAQ,EAAE,aAAa;IACvB,KAAK,EAAE,UAAU;IACjB,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,SAAS;IACf,MAAM,EAAE,WAAW;CACpB,CAAC"}
+{"version":3,"file":"patches.js","sourceRoot":"","sources":["../../src/factory/patches.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAGxD,MAAM,CAAC,MAAM,OAAO,GAAiC;IACnD,KAAK,EAAE,UAAU;IACjB,QAAQ,EAAE,aAAa;IACvB,KAAK,EAAE,UAAU;IACjB,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,SAAS;IACf,MAAM,EAAE,WAAW;IACnB,KAAK,EAAE,UAAU;CAClB,CAAC"}

package/build/factory/registry.d.ts

@@ -2,9 +2,8 @@
  * Shared factory registry — single instance of manifest + generated tools.
  * Both handler.ts and tools.ts import from here instead of loading independently.
  *
- * This module uses import.meta.url (ESM only) to resolve the manifest
- * directory relative to the built output, which works when running via npx
- * or mcpb where cwd is NOT the project root.
+ * generator.ts resolves the manifest relative to its own module directory, so
+ * this works under npx and .mcpb where cwd is NOT the project root.
  */
 import type { GeneratedTool } from './types.js';
 import type { Manifest } from './types.js';

package/build/factory/registry.js

@@ -2,17 +2,11 @@
  * Shared factory registry — single instance of manifest + generated tools.
  * Both handler.ts and tools.ts import from here instead of loading independently.
  *
- * This module uses import.meta.url (ESM only) to resolve the manifest
- * directory relative to the built output, which works when running via npx
- * or mcpb where cwd is NOT the project root.
+ * generator.ts resolves the manifest relative to its own module directory, so
+ * this works under npx and .mcpb where cwd is NOT the project root.
  */
-import { dirname } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { setModuleDir, loadManifest, generateTools } from './generator.js';
+import { loadManifest, generateTools } from './generator.js';
 import { patches } from './patches.js';
-// Inject module directory so loadManifest can find the manifest directory
-// relative to the built output (build/factory/registry.js → build/factory/manifest/)
-setModuleDir(dirname(fileURLToPath(import.meta.url)));
 export const manifest = loadManifest();
 export const generatedTools = generateTools(manifest, patches);
 //# sourceMappingURL=registry.js.map

package/build/factory/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/factory/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAIvC,0EAA0E;AAC1E,qFAAqF;AACrF,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAEtD,MAAM,CAAC,MAAM,QAAQ,GAAa,YAAY,EAAE,CAAC;AACjD,MAAM,CAAC,MAAM,cAAc,GAAoB,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/factory/registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAIvC,MAAM,CAAC,MAAM,QAAQ,GAAa,YAAY,EAAE,CAAC;AACjD,MAAM,CAAC,MAAM,cAAc,GAAoB,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC"}

package/build/factory/safety.js

@@ -113,7 +113,7 @@ export const auditLog = {
     applies: () => true,
     evaluate: (_args, ctx, service) => {
         if (!isReadOperation(ctx.operation)) {
-            process.stderr.write(`[gws-mcp] AUDIT: ${service}.${ctx.operation} account=${ctx.account} ` +
+            process.stderr.write(`[google-workspace-mcp] AUDIT: ${service}.${ctx.operation} account=${ctx.account} ` +
                 `args=${JSON.stringify(ctx.params)}\n`);
         }
         return { action: 'allow' };
@@ -126,7 +126,7 @@ let activePolicies = [];
 export function configurePolicies(policies) {
     activePolicies = policies;
     if (policies.length > 0) {
-        process.stderr.write(`[gws-mcp] safety: ${policies.length} policy(ies) active: ` +
+        process.stderr.write(`[google-workspace-mcp] safety: ${policies.length} policy(ies) active: ` +
             `${policies.map(p => p.name).join(', ')}\n`);
     }
 }
@@ -144,11 +144,11 @@ export function evaluatePolicies(args, ctx, service) {
             continue;
         const result = policy.evaluate(args, ctx, service);
         if (result.action === 'block') {
-            process.stderr.write(`[gws-mcp] safety: BLOCKED ${service}.${ctx.operation} by ${policy.name}: ${result.reason}\n`);
+            process.stderr.write(`[google-workspace-mcp] safety: BLOCKED ${service}.${ctx.operation} by ${policy.name}: ${result.reason}\n`);
             return result;
         }
         if (result.action === 'downgrade' && result.replacementArgs) {
-            process.stderr.write(`[gws-mcp] safety: DOWNGRADED ${service}.${ctx.operation} by ${policy.name}: ${result.reason}\n`);
+            process.stderr.write(`[google-workspace-mcp] safety: DOWNGRADED ${service}.${ctx.operation} by ${policy.name}: ${result.reason}\n`);
             return result;
         }
     }

package/build/factory/safety.js.map

@@ -1 +1 @@
-{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../src/factory/safety.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAyBH,wEAAwE;AAExE;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAiB;IAC1C,IAAI,EAAE,kBAAkB;IACxB,WAAW,EAAE,qDAAqD;IAClE,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,OAAO;IACzC,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,cAAc,GAAG,CAAC,SAAS,2CAA2C;oBAC5E,sFAAsF;aACzF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAiB;IACpC,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,4DAA4D;IACzE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;IACnB,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QAChC,0DAA0D;QAC1D,oCAAoC;QACpC,+BAA+B;QAC/B,MAAM,gBAAgB,GAA6B;YACjD,KAAK,EAAE,EAAE,EAAW,uCAAuC;YAC3D,QAAQ,EAAE,CAAC,QAAQ,CAAC;YACpB,KAAK,EAAE,CAAC,QAAQ,CAAC;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC;YACnC,IAAI,EAAE,EAAE;YACR,MAAM,EAAE,EAAE;SACX,CAAC;QAEF,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,cAAc,GAAG,CAAC,SAAS,QAAQ,OAAO,mCAAmC;oBACnF,sFAAsF;aACzF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;CACF,CAAC;AAEF;;;;GAIG;AACH,SAAS,eAAe,CAAC,SAAiB;IACxC,MAAM,EAAE,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACnC,wCAAwC;IACxC,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1F,wBAAwB;IACxB,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAC3F,OAAO,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAiB;IACpC,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,+CAA+C;IAC5D,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;IACnB,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACvB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,cAAc,GAAG,CAAC,SAAS,oCAAoC;oBACrE,0DAA0D;aAC7D,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAiB;IACpC,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,kDAAkD;IAC/D,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;IACnB,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QAChC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oBAAoB,OAAO,IAAI,GAAG,CAAC,SAAS,YAAY,GAAG,CAAC,OAAO,GAAG;gBACtE,QAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CACvC,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;CACF,CAAC;AAEF,wEAAwE;AAExE,+CAA+C;AAC/C,IAAI,cAAc,GAAmB,EAAE,CAAC;AAExC,sCAAsC;AACtC,MAAM,UAAU,iBAAiB,CAAC,QAAwB;IACxD,cAAc,GAAG,QAAQ,CAAC;IAC1B,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qBAAqB,QAAQ,CAAC,MAAM,uBAAuB;YAC3D,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAC5C,CAAC;IACJ,CAAC;AACH,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,iBAAiB;IAC/B,OAAO,CAAC,GAAG,cAAc,CAAC,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAc,EACd,GAAiB,EACjB,OAAe;IAEf,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC;YAAE,SAAS;QAEtD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6BAA6B,OAAO,IAAI,GAAG,CAAC,SAAS,OAAO,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,IAAI,CAC9F,CAAC;YACF,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gCAAgC,OAAO,IAAI,GAAG,CAAC,SAAS,OAAO,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,IAAI,CACjG,CAAC;YACF,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC"}
+{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../src/factory/safety.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAyBH,wEAAwE;AAExE;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAiB;IAC1C,IAAI,EAAE,kBAAkB;IACxB,WAAW,EAAE,qDAAqD;IAClE,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,OAAO;IACzC,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,cAAc,GAAG,CAAC,SAAS,2CAA2C;oBAC5E,sFAAsF;aACzF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAiB;IACpC,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,4DAA4D;IACzE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;IACnB,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QAChC,0DAA0D;QAC1D,oCAAoC;QACpC,+BAA+B;QAC/B,MAAM,gBAAgB,GAA6B;YACjD,KAAK,EAAE,EAAE,EAAW,uCAAuC;YAC3D,QAAQ,EAAE,CAAC,QAAQ,CAAC;YACpB,KAAK,EAAE,CAAC,QAAQ,CAAC;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC;YACnC,IAAI,EAAE,EAAE;YACR,MAAM,EAAE,EAAE;SACX,CAAC;QAEF,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,cAAc,GAAG,CAAC,SAAS,QAAQ,OAAO,mCAAmC;oBACnF,sFAAsF;aACzF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;CACF,CAAC;AAEF;;;;GAIG;AACH,SAAS,eAAe,CAAC,SAAiB;IACxC,MAAM,EAAE,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACnC,wCAAwC;IACxC,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1F,wBAAwB;IACxB,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAC3F,OAAO,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAiB;IACpC,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,+CAA+C;IAC5D,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;IACnB,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACvB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,cAAc,GAAG,CAAC,SAAS,oCAAoC;oBACrE,0DAA0D;aAC7D,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAiB;IACpC,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,kDAAkD;IAC/D,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;IACnB,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QAChC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iCAAiC,OAAO,IAAI,GAAG,CAAC,SAAS,YAAY,GAAG,CAAC,OAAO,GAAG;gBACnF,QAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CACvC,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;CACF,CAAC;AAEF,wEAAwE;AAExE,+CAA+C;AAC/C,IAAI,cAAc,GAAmB,EAAE,CAAC;AAExC,sCAAsC;AACtC,MAAM,UAAU,iBAAiB,CAAC,QAAwB;IACxD,cAAc,GAAG,QAAQ,CAAC;IAC1B,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kCAAkC,QAAQ,CAAC,MAAM,uBAAuB;YACxE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAC5C,CAAC;IACJ,CAAC;AACH,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,iBAAiB;IAC/B,OAAO,CAAC,GAAG,cAAc,CAAC,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAc,EACd,GAAiB,EACjB,OAAe;IAEf,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC;YAAE,SAAS;QAEtD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0CAA0C,OAAO,IAAI,GAAG,CAAC,SAAS,OAAO,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,IAAI,CAC3G,CAAC;YACF,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6CAA6C,OAAO,IAAI,GAAG,CAAC,SAAS,OAAO,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,IAAI,CAC9G,CAAC;YACF,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC"}

package/build/factory/types.d.ts

@@ -10,19 +10,19 @@ export interface ParamDef {
     required?: boolean;
     default?: string | number | boolean;
     max?: number;
-    /** Maps this param name to a different key in the gws --params JSON. */
+    /** Maps this param name to a different key in the params sent to Google. */
     maps_to?: string;
     enum?: string[];
     /**
      * If true, the param is for the formatter/handler only and is NOT forwarded
-     * to the gws CLI. Used for client-side controls like `bodyFormat` (ADR-305)
+     * to Google. Used for client-side controls like `bodyFormat` (ADR-305)
      * that affect rendering, not the API call itself.
      */
     client_only?: boolean;
 }
 /** Hydration config — fetch detail for each item in a list result. */
 export interface HydrationDef {
-    /** gws resource path for the detail call (e.g. "users.messages.get"). */
+    /** Google resource path for the detail call (e.g. "users.messages.get"). */
     resource: string;
     /** Format parameter passed to the detail call. */
     format?: string;
@@ -34,20 +34,16 @@ export interface OperationDef {
     /** Categorizes the operation for default formatting. */
     type: 'list' | 'detail' | 'action';
     description: string;
-    /** gws resource path (e.g. "users.messages.list"). */
+    /** Google resource path (e.g. "users.messages.list"). */
     resource?: string;
-    /** gws helper shorthand (e.g. "+triage", "+send"). */
-    helper?: string;
     /** Named parameters the caller can provide. */
     params?: Record<string, ParamDef>;
-    /** Default values merged into the gws --params JSON. */
+    /** Default values merged into the params sent to Google. */
     defaults?: Record<string, unknown>;
     /** Post-fetch hydration (list operations only). */
     hydration?: HydrationDef;
-    /** Fields to extract from the gws response for the result. */
+    /** Fields to extract from Google's response for the result. */
     fields?: string;
-    /** CLI-style args instead of --params JSON (for helpers). */
-    cli_args?: Record<string, string>;
 }
 /** A service declaration in the manifest. */
 export interface ServiceDef {
@@ -55,8 +51,8 @@ export interface ServiceDef {
     description: string;
     /** Whether this service requires an email account param. */
     requires_email: boolean;
-    /** The gws service name (e.g. "gmail", "calendar", "drive"). */
-    gws_service: string;
+    /** The Google service name (e.g. "gmail", "calendar", "drive"). */
+    google_service: string;
     operations: Record<string, OperationDef>;
 }
 /** Top-level manifest shape. */
@@ -69,9 +65,14 @@ export interface PatchContext {
     params: Record<string, unknown>;
     account: string;
 }
-/** A patch hook that runs after arg construction, before gws execution. */
-export type BeforeExecuteHook = (args: string[], ctx: PatchContext) => Promise<string[]> | string[];
-/** A patch hook that runs after gws returns, before formatting. */
+/**
+ * A patch hook that runs after the manifest's param mapping, before the call.
+ *
+ * It receives the PARAMS Google will be sent. Hooks operate on the param object
+ * directly — never on a serialised command line. See ADR-103.
+ */
+export type BeforeExecuteHook = (params: Record<string, unknown>, ctx: PatchContext) => Promise<Record<string, unknown>> | Record<string, unknown>;
+/** A patch hook that runs after Google returns, before formatting. */
 export type AfterExecuteHook = (result: unknown, ctx: PatchContext) => Promise<unknown> | unknown;
 /** A formatter override for a specific operation type. */
 export type FormatHook = (data: unknown, ctx: PatchContext) => HandlerResponse;

package/build/google/client.d.ts

@@ -0,0 +1,45 @@
+import { type ApiDescriptor } from './descriptor.js';
+import type { GoogleService, ServiceMethods } from './methods.js';
+export interface CallOptions {
+    /** Account email — the token is minted for this identity. */
+    account: string;
+    descriptor?: ApiDescriptor;
+    fetchImpl?: typeof fetch;
+}
+export interface BuiltRequest {
+    url: string;
+    method: string;
+    body?: Record<string, unknown>;
+}
+/** Pure: descriptor + params -> the request. No I/O, so it is testable offline. */
+export declare function buildRequest(descriptor: ApiDescriptor, service: string, resourcePath: string, params?: Record<string, unknown>): BuiltRequest;
+/**
+ * Call a Google API method. Returns RAW Google JSON — no envelope, no reshaping.
+ * Throws GoogleApiError carrying Google's real error body.
+ */
+export declare function call<S extends GoogleService>(service: S, resourcePath: ServiceMethods[S], params: Record<string, unknown>, options: CallOptions): Promise<unknown>;
+/**
+ * Download media to disk.
+ *
+ * STREAMED, deliberately. The bytes go from the socket to the file and are never a
+ * string at all. Never buffer a download through an in-memory string: accumulating
+ * the whole response and JSON.parse-ing it turns a 30 MB attachment into a ~40 MB
+ * string, then an object, then a Buffer — uncapped, for every download.
+ */
+export declare function download<S extends GoogleService>(service: S, resourcePath: ServiceMethods[S], params: Record<string, unknown>, outputPath: string, options: CallOptions): Promise<string>;
+export interface UploadOptions extends CallOptions {
+    media: Buffer;
+    contentType: string;
+    metadata?: Record<string, unknown>;
+    /** Non-final chunks must be a multiple of 256 KiB. */
+    chunkSize?: number;
+}
+/**
+ * Resumable, chunked media upload.
+ *
+ * The descriptor carries the upload paths for both protocols because Discovery
+ * DECLARES them. Verified live (ADR-103 item 4): a 25 MB attachment — 34.2 MB as
+ * RFC822, 93% of Google's declared 36,700,160-byte cap — uploaded in 5 chunks and
+ * read back byte-for-byte identical.
+ */
+export declare function upload<S extends GoogleService>(service: S, resourcePath: ServiceMethods[S], params: Record<string, unknown>, options: UploadOptions): Promise<unknown>;