@caplets/core 0.22.0 → 0.23.0

package/dist/{service-4_chB2wu.js → service-CSRCJfpA.js}

@@ -1,9 +1,9 @@
 import { A as safeParseAsync$1, C as toJSONSchema, D as parse$3, E as $ZodType, F as NEVER, M as defineLazy, N as normalizeParams, O as parseAsync, P as $constructor, S as datetime, T as $ZodObject, _ as record, a as any, b as unknown, c as custom, d as literal, f as looseObject, g as preprocess, h as optional, i as _null, j as clone, k as safeParse$1, l as discriminatedUnion, m as object$1, o as array, p as number$1, r as _enum, s as boolean, t as ZodNumber$1, u as intersection, v as string, w as _coercedNumber, x as url, y as union } from "./schemas-C0PNPwjS.js";
 import { a as isAllowedHttpBaseUrl, c as validateHttpActionHeaders, d as errorResult, f as redactSecrets, i as SERVER_ID_PATTERN, n as HEADER_NAME_PATTERN, o as isAllowedRemoteUrl, p as toSafeError, r as HTTP_BASE_URL_PATTERN, s as isUrl, t as FORBIDDEN_HEADERS, u as CapletsError } from "./validation-DgxCzt-A.js";
 import { generatedToolInputJsonSchema, generatedToolInputJsonSchemaForCaplet, generatedToolInputSchemaForCaplet, mcpOperations, operations } from "./generated-tool-input-schema.js";
-import { f as observedOutputShapeKey, i as observeOutputShape, r as normalizedObservableValue, t as usefulOutputSchema, u as FileObservedOutputShapeStore } from "./observed-output-shapes-CL5MFXwM.js";
+import { f as observedOutputShapeKey, i as observeOutputShape, r as normalizedObservableValue, t as usefulOutputSchema, u as FileObservedOutputShapeStore } from "./observed-output-shapes-D2k2-q8K.js";
 import { createRequire } from "node:module";
-import { accessSync, chmodSync, constants, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, watch, writeFileSync } from "node:fs";
+import { accessSync, chmodSync, constants, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, watch, writeFileSync } from "node:fs";
 import { basename, delimiter, dirname, extname, isAbsolute, join, parse, posix, relative, resolve, sep, win32 } from "node:path";
 import { spawn } from "node:child_process";
 import process$1 from "node:process";
@@ -11,6 +11,7 @@ import { PassThrough } from "node:stream";
 import { createServer } from "node:http";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { homedir } from "node:os";
+import { readFile } from "node:fs/promises";
 import ts from "typescript";
 import { getQuickJS, shouldInterruptAfterDeadline } from "quickjs-emscripten";
 import { Buffer as Buffer$1 } from "node:buffer";
@@ -17241,6 +17242,9 @@ function defaultConfigPath(env = process.env, home = homedir(), platform = proce
 function defaultAuthDir(env = process.env, home = homedir(), platform = process.platform) {
 	return (platform === "win32" ? win32.join : posix.join)(defaultStateBaseDir(env, home, platform), "caplets", "auth");
 }
+function defaultArtifactDir(env = process.env, home = homedir(), platform = process.platform) {
+	return (platform === "win32" ? win32.join : posix.join)(defaultStateBaseDir(env, home, platform), "caplets", "artifacts");
+}
 function defaultCompletionCacheDir(env = process.env, home = homedir(), platform = process.platform) {
 	const pathJoin = platform === "win32" ? win32.join : posix.join;
 	return platform === "win32" ? pathJoin(defaultCacheBaseDir(env, home, platform), "caplets", "cache", "completions") : pathJoin(defaultCacheBaseDir(env, home, platform), "caplets", "completions");
@@ -17251,6 +17255,7 @@ function defaultObservedOutputShapeCacheDir(env = process.env, home = homedir(),
 }
 const DEFAULT_CONFIG_PATH = defaultConfigPath();
 const DEFAULT_AUTH_DIR = defaultAuthDir();
+const DEFAULT_ARTIFACT_DIR = defaultArtifactDir();
 const DEFAULT_COMPLETION_CACHE_DIR = defaultCompletionCacheDir();
 const DEFAULT_OBSERVED_OUTPUT_SHAPE_CACHE_DIR = defaultObservedOutputShapeCacheDir();
 const PROJECT_CONFIG_FILE = join(".caplets", "config.json");
@@ -17568,7 +17573,7 @@ async function startGenericOAuthFlow(target, options) {
 	assertAllowedAuthUrl(authorizationEndpoint, "authorization endpoint", allowLoopbackHttp);
 	assertAllowedAuthUrl(tokenEndpoint, "token endpoint", allowLoopbackHttp);
 	const client = await resolveGenericClient(target, authConfig, metadata, redirectUri, allowLoopbackHttp);
-	const scope = scopesFor(authConfig);
+	const scope = scopesFor(authConfig, target.resolvedScopes);
 	const authorizationUrl = new URL(authorizationEndpoint);
 	authorizationUrl.searchParams.set("response_type", "code");
 	authorizationUrl.searchParams.set("client_id", client.clientId);
@@ -17617,6 +17622,7 @@ async function startGenericOAuthFlow(target, options) {
 				metadata: redactSecrets({
 					protectedResource: target.url ?? target.baseUrl ?? target.specUrl,
 					authorizationServer: metadata,
+					requestedScopes: scope?.split(/\s+/u).filter(Boolean),
 					dynamicClient: client.dynamic ? { client_id: client.clientId } : void 0
 				})
 			}), options.authDir);
@@ -17645,7 +17651,7 @@ async function runGenericOAuthFlow(target, options = {}) {
 		assertAllowedAuthUrl(authorizationEndpoint, "authorization endpoint", allowLoopbackHttp);
 		assertAllowedAuthUrl(tokenEndpoint, "token endpoint", allowLoopbackHttp);
 		const client = await resolveGenericClient(target, authConfig, metadata, redirectUri, allowLoopbackHttp);
-		const scope = scopesFor(authConfig);
+		const scope = scopesFor(authConfig, target.resolvedScopes);
 		const authorizationUrl = new URL(authorizationEndpoint);
 		authorizationUrl.searchParams.set("response_type", "code");
 		authorizationUrl.searchParams.set("client_id", client.clientId);
@@ -17695,6 +17701,7 @@ async function runGenericOAuthFlow(target, options = {}) {
 			metadata: redactSecrets({
 				protectedResource: target.url ?? target.baseUrl ?? target.specUrl,
 				authorizationServer: metadata,
+				requestedScopes: scope?.split(/\s+/u).filter(Boolean),
 				dynamicClient: client.dynamic ? { client_id: client.clientId } : void 0
 			})
 		});
@@ -17903,7 +17910,7 @@ async function refreshGenericOAuthBundle(target, authConfig, bundle, authDir) {
 		refreshToken: asString(tokenResponse.refresh_token) ?? bundle.refreshToken,
 		tokenType: asString(tokenResponse.token_type) ?? bundle.tokenType,
 		expiresAt: refreshedExpiresAt(tokenResponse.expires_in, bundle.expiresAt),
-		scope: asString(tokenResponse.scope) ?? bundle.scope ?? scopesFor(authConfig),
+		scope: asString(tokenResponse.scope) ?? bundle.scope ?? scopesFor(authConfig, target.resolvedScopes),
 		idToken: idToken ?? bundle.idToken,
 		issuer: asString(idClaims?.iss) ?? bundle.issuer ?? metadata.issuer ?? authConfig.issuer,
 		subject: asString(idClaims?.sub) ?? bundle.subject,
@@ -17969,7 +17976,7 @@ function assertAllowedAuthUrl(value, label, allowLoopbackHttp = false) {
 function assertTokenBundleMatchesTarget(bundle, target, authConfig) {
 	const configuredClientId = authConfig.clientId ?? authConfig.clientMetadataUrl;
 	const expectedOrigin = protectedResourceOrigin(target, authConfig);
-	if (bundle.authType !== authConfig.type || expectedOrigin && bundle.protectedResourceOrigin !== expectedOrigin || configuredClientId && bundle.clientId !== configuredClientId || authConfig.issuer && bundle.issuer !== authConfig.issuer) throw new CapletsError("AUTH_REQUIRED", `OAuth credentials for ${target.server} do not match the configured backend`, {
+	if (bundle.authType !== authConfig.type || expectedOrigin && bundle.protectedResourceOrigin !== expectedOrigin || configuredClientId && bundle.clientId !== configuredClientId || authConfig.issuer && bundle.issuer !== authConfig.issuer || tokenBundleMissingScopes(bundle, authConfig, target.resolvedScopes)) throw new CapletsError("AUTH_REQUIRED", `OAuth credentials for ${target.server} do not match the configured backend`, {
 		server: target.server,
 		backend: target.backend,
 		authType: authConfig.type,
@@ -17997,8 +18004,39 @@ function isLoopbackHttpUrl(value) {
 		"::1"
 	].includes(url.hostname);
 }
-function scopesFor(authConfig) {
+function tokenBundleMissingScopes(bundle, authConfig, resolvedScopes) {
+	const required = requiredStoredScopes(authConfig, resolvedScopes);
+	if (required.length === 0) return false;
+	const metadataScopes = requestedScopesFromMetadata(bundle.metadata);
+	const actual = new Set(bundle.scope?.split(/\s+/u).filter(Boolean) ?? metadataScopes ?? []);
+	return required.some((scope) => ![...actual].some((grantedScope) => oauthScopeSatisfies(grantedScope, scope)));
+}
+function oauthScopeSatisfies(grantedScope, requiredScope) {
+	if (grantedScope === requiredScope) return true;
+	const googleScopePrefix = "https://www.googleapis.com/auth/";
+	if (!grantedScope.startsWith(googleScopePrefix) || !requiredScope.startsWith(googleScopePrefix)) return false;
+	return requiredScope.startsWith(`${grantedScope}.`);
+}
+function requiredStoredScopes(authConfig, resolvedScopes) {
+	if (authConfig.scopes?.length) return authConfig.scopes;
+	return resolvedScopes?.length ? [...new Set(resolvedScopes)].sort() : [];
+}
+function requestedScopesFromMetadata(metadata) {
+	if (!metadata || typeof metadata !== "object" || Array.isArray(metadata)) return void 0;
+	const value = metadata.requestedScopes;
+	return Array.isArray(value) && value.every((entry) => typeof entry === "string") ? value : void 0;
+}
+function scopesFor(authConfig, resolvedScopes) {
 	if (authConfig.scopes?.length) return authConfig.scopes.join(" ");
+	if (resolvedScopes?.length) {
+		const apiScopes = [...new Set(resolvedScopes)].sort();
+		return authConfig.type === "oidc" ? [
+			"openid",
+			"profile",
+			"email",
+			...apiScopes
+		].join(" ") : apiScopes.join(" ");
+	}
 	return authConfig.type === "oidc" ? "openid profile email" : void 0;
 }
 function validateOidcToken(authConfig, metadata, idToken, claims, clientId) {
@@ -18589,8 +18627,8 @@ function compactToolSafetyHints(tool) {
 	};
 }
 function compactToolSchemaHints(tool) {
-	const schema = isRecord$4(tool.inputSchema) ? tool.inputSchema : void 0;
-	const properties = isRecord$4(schema?.properties) ? schema.properties : {};
+	const schema = isRecord$5(tool.inputSchema) ? tool.inputSchema : void 0;
+	const properties = isRecord$5(schema?.properties) ? schema.properties : {};
 	const acceptedArgs = Object.keys(properties).sort();
 	const requiredArgs = Array.isArray(schema?.required) ? schema.required.filter((value) => typeof value === "string").sort() : [];
 	const argsTemplate = compactArgsTemplate(properties, requiredArgs, acceptedArgs);
@@ -18614,7 +18652,7 @@ function compactArgsTemplate(properties, requiredArgs, acceptedArgs) {
 	if (templateArgs.length === 0 || templateArgs.length > 4) return void 0;
 	if (requiredArgs.length === 0 && acceptedArgs.length > 3) return void 0;
 	const entries = templateArgs.flatMap((name) => {
-		const value = placeholderForSchema(isRecord$4(properties[name]) ? properties[name] : void 0);
+		const value = placeholderForSchema(isRecord$5(properties[name]) ? properties[name] : void 0);
 		return value === void 0 ? [] : [[name, value]];
 	});
 	return entries.length === templateArgs.length ? Object.fromEntries(entries) : void 0;
@@ -18634,13 +18672,13 @@ function placeholderForSchema(schema) {
 	}
 }
 function compactToolSelectionHints(tool) {
-	if (!isRecord$4(tool)) return {};
+	if (!isRecord$5(tool)) return {};
 	return {
 		...typeof tool.useWhen === "string" && tool.useWhen.trim() ? { useWhen: tool.useWhen.trim() } : {},
 		...typeof tool.avoidWhen === "string" && tool.avoidWhen.trim() ? { avoidWhen: tool.avoidWhen.trim() } : {}
 	};
 }
-function isRecord$4(value) {
+function isRecord$5(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function sameServerConfig(left, right) {
@@ -18715,7 +18753,7 @@ function markdownCallToolResultContent(result, context = {}) {
 	return textContent(renderStructuredMarkdown(result, context));
 }
 function hasRenderableStructuredContent(value) {
-	if (!isRecord$3(value)) return false;
+	if (!isRecord$4(value)) return false;
 	return Object.keys(value).some((key) => key !== "caplets" && key !== "elapsedMs");
 }
 function renderStructuredMarkdown(value, context) {
@@ -18739,7 +18777,7 @@ function markdownTitle(context) {
 	return parts.length > 0 ? `# ${parts.join(" ")}` : "# Result";
 }
 function renderHttpMarkdown(value, title) {
-	const record = asRecord$2(value) ?? {};
+	const record = asRecord$3(value) ?? {};
 	const lines = [
 		title,
 		"",
@@ -18762,8 +18800,8 @@ function renderHttpMarkdown(value, title) {
 	return lines.join("\n");
 }
 function renderGraphQlMarkdown(value, title) {
-	const record = asRecord$2(value) ?? {};
-	const body = asRecord$2(record.body);
+	const record = asRecord$3(value) ?? {};
+	const body = asRecord$3(record.body);
 	if (!body || !("data" in body) && !("errors" in body)) return renderHttpMarkdown(value, title);
 	const lines = [
 		title,
@@ -18789,7 +18827,7 @@ function renderGraphQlMarkdown(value, title) {
 	return lines.join("\n");
 }
 function renderCliMarkdown(value, title) {
-	const record = asRecord$2(value) ?? {};
+	const record = asRecord$3(value) ?? {};
 	const lines = [
 		title,
 		"",
@@ -18816,14 +18854,14 @@ function renderCliMarkdown(value, title) {
 	return lines.join("\n");
 }
 function renderDiscoveryWrapper(value, context, title) {
-	const result = asRecord$2(value.result);
+	const result = asRecord$3(value.result);
 	const lines = [title, ""];
 	let renderedKnownWrapper = true;
 	if (context.operation === "tools" || context.operation === "search_tools") lines.push("## Tools", "", renderNamedList(arrayValue$1(result?.items ?? result?.tools), "tool"), "");
 	else if (context.operation === "resources" || context.operation === "search_resources") lines.push("## Resources", "", renderNamedList(arrayValue$1(result?.items ?? result?.resources ?? result?.matches), "uri"), "");
 	else if (context.operation === "resource_templates") lines.push("## Resource Templates", "", renderNamedList(arrayValue$1(result?.items ?? result?.resourceTemplates), "uriTemplate"), "");
 	else if (context.operation === "prompts" || context.operation === "search_prompts") lines.push("## Prompts", "", renderNamedList(arrayValue$1(result?.items ?? result?.prompts), "prompt"), "");
-	else if (context.operation === "describe_tool") lines.push("## Tool", "", renderToolSummary(asRecord$2(result?.tool)), "");
+	else if (context.operation === "describe_tool") lines.push("## Tool", "", renderToolSummary(asRecord$3(result?.tool)), "");
 	else if (context.operation === "check") lines.push("## Backend Status", "", renderBackendStatus(result), "");
 	else if (context.operation === "inspect") lines.push("## Caplet", "", renderCapletSummary(result), "");
 	else renderedKnownWrapper = false;
@@ -18833,7 +18871,7 @@ function renderDiscoveryWrapper(value, context, title) {
 	return lines.join("\n");
 }
 function renderErrorMarkdown(value, title) {
-	const error = asRecord$2(asRecord$2(value)?.error) ?? asRecord$2(value);
+	const error = asRecord$3(asRecord$3(value)?.error) ?? asRecord$3(value);
 	const code = typeof error?.code === "string" ? error.code : "Error";
 	const message = typeof error?.message === "string" ? error.message : "Tool call failed.";
 	return [
@@ -18849,21 +18887,21 @@ function renderErrorMarkdown(value, title) {
 	].join("\n");
 }
 function isDiscoveryWrapper(value) {
-	return isRecord$3(value) && "result" in value;
+	return isRecord$4(value) && "result" in value;
 }
 function isErrorStructuredContent(value) {
-	return isRecord$3(value) && "error" in value;
+	return isRecord$4(value) && "error" in value;
 }
 function isHttpLikeResult(value) {
-	return isRecord$3(value) && ("status" in value || "statusText" in value || "body" in value);
+	return isRecord$4(value) && ("status" in value || "statusText" in value || "body" in value);
 }
 function isGraphQlHttpResult(value) {
 	if (!isHttpLikeResult(value)) return false;
-	const body = asRecord$2(value.body);
+	const body = asRecord$3(value.body);
 	return Boolean(body && ("data" in body || "errors" in body));
 }
 function isCliResult(value) {
-	return isRecord$3(value) && ("exitCode" in value || "stdout" in value || "stderr" in value);
+	return isRecord$4(value) && ("exitCode" in value || "stdout" in value || "stderr" in value);
 }
 function renderBodyValue(value) {
 	if (value === void 0) return "_No response body._";
@@ -18894,7 +18932,7 @@ function textBlocksToString(content) {
 }
 function renderNamedList(items, nameKey) {
 	if (items.length === 0) return "_No items._";
-	const records = items.map((item) => asRecord$2(item));
+	const records = items.map((item) => asRecord$3(item));
 	const commonDescriptionSuffix = repeatedDescriptionSuffix(records.map((record) => stringValue$1(record?.description)).filter((description) => Boolean(description)));
 	const renderedItems = records.map((record, index) => {
 		const name = stringValue$1(record?.[nameKey]) ?? stringValue$1(record?.name) ?? `Item ${index + 1}`;
@@ -18931,8 +18969,8 @@ function compactListHints(record) {
 	const acceptedArgs = stringArrayValue(record.acceptedArgs);
 	if (requiredArgs.length > 0) hints.push(`required args: ${requiredArgs.join(", ")}`);
 	else if (acceptedArgs.length > 0) hints.push(`args: ${acceptedArgs.join(", ")}`);
-	if (isRecord$3(record.argsTemplate)) hints.push(`args template: ${compactJsonText(record.argsTemplate, 160)}`);
-	if (isRecord$3(record.callTemplate)) hints.push(`call: ${compactJsonText(record.callTemplate, 220)}`);
+	if (isRecord$4(record.argsTemplate)) hints.push(`args template: ${compactJsonText(record.argsTemplate, 160)}`);
+	if (isRecord$4(record.callTemplate)) hints.push(`call: ${compactJsonText(record.callTemplate, 220)}`);
 	if (record.supportsFields === true) hints.push("supports fields");
 	if (record.readOnlyHint === true) hints.push("read-only");
 	if (record.destructiveHint === true) hints.push("destructive");
@@ -18981,7 +19019,7 @@ function renderCapletSummary(result) {
 		"name",
 		"description"
 	]) if (result[key] !== void 0) lines.push(`- **${humanizeKey(key)}:** ${String(result[key])}`);
-	const backend = asRecord$2(result.backend);
+	const backend = asRecord$3(result.backend);
 	if (backend?.type !== void 0) lines.push(`- **Backend:** \`${String(backend.type)}\``);
 	return lines.length > 0 ? lines.join("\n") : jsonFence(result);
 }
@@ -19001,10 +19039,10 @@ function stringArrayValue(value) {
 function humanizeKey(key) {
 	return key.replace(/([A-Z])/gu, " $1").replace(/^./u, (char) => char.toUpperCase());
 }
-function asRecord$2(value) {
-	return isRecord$3(value) ? value : void 0;
+function asRecord$3(value) {
+	return isRecord$4(value) ? value : void 0;
 }
-function isRecord$3(value) {
+function isRecord$4(value) {
 	return Boolean(value && typeof value === "object" && !Array.isArray(value));
 }
 //#endregion
@@ -26100,6 +26138,36 @@ const capletOpenApiEndpointSchema = object$1({
 	});
 	validateEndpointAuthHeaders$1(endpoint.auth, ctx);
 });
+const capletGoogleDiscoveryOperationFilterSchema = array(string().trim().min(1).max(160));
+const capletGoogleDiscoveryApiSchema = object$1({
+	discoveryPath: string().min(1).optional().describe("Local Google Discovery document path."),
+	discoveryUrl: string().min(1).optional().describe("Remote Google Discovery document URL."),
+	baseUrl: string().min(1).optional().describe("Override base URL for Google API requests."),
+	auth: capletEndpointAuthSchema.describe("Explicit Google API request auth config. Use {\"type\":\"none\"} for public APIs."),
+	requestTimeoutMs: number$1().int().positive().optional().describe("Timeout in milliseconds for Google API HTTP requests."),
+	operationCacheTtlMs: number$1().int().nonnegative().optional().describe("Milliseconds Google Discovery operation metadata stays fresh. Set 0 to refresh every time."),
+	includeOperations: capletGoogleDiscoveryOperationFilterSchema.optional(),
+	excludeOperations: capletGoogleDiscoveryOperationFilterSchema.optional(),
+	disabled: boolean().optional().describe("When true, omit this Caplet from discovery."),
+	projectBinding: capletProjectBindingSchema.optional(),
+	runtime: capletRuntimeRequirementsSchema.optional()
+}).strict().superRefine((api, ctx) => {
+	if (Boolean(api.discoveryPath) === Boolean(api.discoveryUrl)) ctx.addIssue({
+		code: "custom",
+		message: "googleDiscoveryApi must define exactly one discovery source: discoveryPath or discoveryUrl"
+	});
+	if (api.discoveryUrl && !hasEnvReference$2(api.discoveryUrl) && !isAllowedRemoteUrl(api.discoveryUrl)) ctx.addIssue({
+		code: "custom",
+		path: ["discoveryUrl"],
+		message: "Google Discovery discoveryUrl must use https except loopback development urls"
+	});
+	if (api.baseUrl && !hasEnvReference$2(api.baseUrl) && !isAllowedHttpBaseUrl(api.baseUrl)) ctx.addIssue({
+		code: "custom",
+		path: ["baseUrl"],
+		message: "Google Discovery baseUrl must use https except loopback development urls and must not include credentials, query, or fragment"
+	});
+	validateEndpointAuthHeaders$1(api.auth, ctx);
+});
 const capletGraphQlOperationSchema = object$1({
 	document: string().min(1).optional().describe("Inline GraphQL operation document."),
 	documentPath: string().min(1).optional().describe("Path to a GraphQL operation document."),
@@ -26243,7 +26311,7 @@ const capletSetSchema = object$1({
 	});
 });
 const capletFileSchema = object$1({
-	$schema: string().url().optional().describe("Optional JSON Schema URL for editor validation."),
+	$schema: string().optional().describe("Optional JSON Schema for editor validation."),
 	name: string().trim().min(1).max(80).describe("Human-readable Caplet display name."),
 	description: string().describe("Compact capability description shown before the full Caplet card is disclosed.").refine((value) => value.trim().length >= 10, "description must contain at least 10 non-whitespace characters").refine((value) => value.length <= 1500, "description must be at most 1500 characters"),
 	tags: array(string().trim().min(1).max(80)).optional().describe("Optional tags for grouping or searching Caplets."),
@@ -26255,14 +26323,15 @@ const capletFileSchema = object$1({
 	runtime: capletRuntimeRequirementsSchema.optional(),
 	mcpServer: capletMcpServerSchema.describe("MCP server backend configuration for this Caplet.").optional(),
 	openapiEndpoint: capletOpenApiEndpointSchema.describe("OpenAPI endpoint backend configuration for this Caplet.").optional(),
+	googleDiscoveryApi: capletGoogleDiscoveryApiSchema.describe("Google Discovery API backend configuration for this Caplet.").optional(),
 	graphqlEndpoint: capletGraphQlEndpointSchema.describe("GraphQL endpoint backend configuration for this Caplet.").optional(),
 	httpApi: capletHttpApiSchema.describe("HTTP API backend configuration for this Caplet.").optional(),
 	cliTools: capletCliToolsSchema.describe("CLI tools backend configuration for this Caplet.").optional(),
 	capletSet: capletSetSchema.describe("Nested Caplet collection backend configuration for this Caplet.").optional()
 }).strict().superRefine((frontmatter, ctx) => {
-	if (Number(Boolean(frontmatter.mcpServer)) + Number(Boolean(frontmatter.openapiEndpoint)) + Number(Boolean(frontmatter.graphqlEndpoint)) + Number(Boolean(frontmatter.httpApi)) + Number(Boolean(frontmatter.cliTools)) + Number(Boolean(frontmatter.capletSet)) !== 1) ctx.addIssue({
+	if (Number(Boolean(frontmatter.mcpServer)) + Number(Boolean(frontmatter.openapiEndpoint)) + Number(Boolean(frontmatter.googleDiscoveryApi)) + Number(Boolean(frontmatter.graphqlEndpoint)) + Number(Boolean(frontmatter.httpApi)) + Number(Boolean(frontmatter.cliTools)) + Number(Boolean(frontmatter.capletSet)) !== 1) ctx.addIssue({
 		code: "custom",
-		message: "Caplet file must define exactly one backend: mcpServer, openapiEndpoint, graphqlEndpoint, httpApi, cliTools, or capletSet"
+		message: "Caplet file must define exactly one backend: mcpServer, openapiEndpoint, googleDiscoveryApi, graphqlEndpoint, httpApi, cliTools, or capletSet"
 	});
 });
 function loadCapletFilesFromMap(input) {
@@ -26281,13 +26350,14 @@ function loadCapletFilesFromMap(input) {
 function buildCapletFileLoadResultFromEntries(root, candidates, readConfig, warnings) {
 	const servers = {};
 	const openapiEndpoints = {};
+	const googleDiscoveryApis = {};
 	const graphqlEndpoints = {};
 	const httpApis = {};
 	const cliTools = {};
 	const capletSets = {};
 	const paths = {};
 	function hasId(id) {
-		return Boolean(servers[id] || openapiEndpoints[id] || graphqlEndpoints[id] || httpApis[id] || cliTools[id] || capletSets[id]);
+		return Boolean(servers[id] || openapiEndpoints[id] || googleDiscoveryApis[id] || graphqlEndpoints[id] || httpApis[id] || cliTools[id] || capletSets[id]);
 	}
 	for (const candidate of candidates) {
 		if (hasId(candidate.id)) {
@@ -26314,6 +26384,9 @@ function buildCapletFileLoadResultFromEntries(root, candidates, readConfig, warn
 		if (isPlainObject$6(config) && config.backend === "openapi") {
 			const { backend: _backend, ...endpoint } = config;
 			openapiEndpoints[candidate.id] = endpoint;
+		} else if (isPlainObject$6(config) && config.backend === "googleDiscovery") {
+			const { backend: _backend, ...api } = config;
+			googleDiscoveryApis[candidate.id] = api;
 		} else if (isPlainObject$6(config) && config.backend === "graphql") {
 			const { backend: _backend, ...endpoint } = config;
 			graphqlEndpoints[candidate.id] = endpoint;
@@ -26330,6 +26403,7 @@ function buildCapletFileLoadResultFromEntries(root, candidates, readConfig, warn
 	}
 	const hasServers = Object.keys(servers).length > 0;
 	const hasOpenApi = Object.keys(openapiEndpoints).length > 0;
+	const hasGoogleDiscovery = Object.keys(googleDiscoveryApis).length > 0;
 	const hasGraphQl = Object.keys(graphqlEndpoints).length > 0;
 	const hasHttpApis = Object.keys(httpApis).length > 0;
 	const hasCliTools = Object.keys(cliTools).length > 0;
@@ -26337,6 +26411,7 @@ function buildCapletFileLoadResultFromEntries(root, candidates, readConfig, warn
 	const config = {
 		...hasServers ? { mcpServers: servers } : {},
 		...hasOpenApi ? { openapiEndpoints } : {},
+		...hasGoogleDiscovery ? { googleDiscoveryApis } : {},
 		...hasGraphQl ? { graphqlEndpoints } : {},
 		...hasHttpApis ? { httpApis } : {},
 		...hasCliTools ? { cliTools } : {},
@@ -26396,6 +26471,15 @@ function capletToServerConfig(frontmatter, body, baseDir, normalizePath) {
 		...sharedCapletFields(frontmatter),
 		body
 	};
+	if (frontmatter.googleDiscoveryApi) return {
+		...frontmatter.googleDiscoveryApi,
+		discoveryPath: normalizePath(frontmatter.googleDiscoveryApi.discoveryPath, baseDir),
+		backend: "googleDiscovery",
+		name: frontmatter.name,
+		description: frontmatter.description,
+		...sharedCapletFields(frontmatter),
+		body
+	};
 	if (frontmatter.graphqlEndpoint) return {
 		...frontmatter.graphqlEndpoint,
 		schemaPath: normalizePath(frontmatter.graphqlEndpoint.schemaPath, baseDir),
@@ -26844,6 +26928,28 @@ const publicOpenApiEndpointSchema = object$1({
 	disabled: boolean().default(false).describe("When true, omit this OpenAPI Caplet from discovery.")
 }).strict();
 const normalizedOpenApiEndpointSchema = publicOpenApiEndpointSchema.extend({ body: string().optional() });
+const operationFilterSchema = array(string().trim().min(1).max(160));
+const publicGoogleDiscoveryApiSchema = object$1({
+	name: string().trim().min(1).max(80).describe("Human-readable Google Discovery API display name."),
+	description: string().describe("Capability description shown to agents before Google Discovery operations are disclosed.").refine((value) => value.trim().length >= 10, "description must contain at least 10 non-whitespace characters").refine((value) => value.length <= 1500, "description must be at most 1500 characters"),
+	discoveryPath: string().min(1).optional().describe("Local Google Discovery document path."),
+	discoveryUrl: string().url().optional().describe("Remote Google Discovery document URL."),
+	baseUrl: string().url().optional().describe("Override base URL for Google API requests."),
+	includeOperations: operationFilterSchema.optional(),
+	excludeOperations: operationFilterSchema.optional(),
+	auth: openApiAuthSchema.describe("Explicit Google API request auth config. Use {\"type\":\"none\"} for public APIs."),
+	tags: array(string().trim().min(1).max(80)).optional(),
+	exposure: exposureSchema.optional(),
+	shadowing: shadowingSchema,
+	...agentSelectionHintsSchema,
+	setup: setupSchema.optional(),
+	projectBinding: projectBindingSchema.optional(),
+	runtime: runtimeRequirementsSchema.optional(),
+	requestTimeoutMs: number$1().int().positive().default(6e4).describe("Timeout in milliseconds for Google Discovery HTTP requests."),
+	operationCacheTtlMs: number$1().int().nonnegative().default(3e4).describe("Milliseconds Google Discovery operation metadata stays fresh. Set 0 to refresh every time."),
+	disabled: boolean().default(false).describe("When true, omit this Google Discovery Caplet from discovery.")
+}).strict();
+const normalizedGoogleDiscoveryApiSchema = publicGoogleDiscoveryApiSchema.extend({ body: string().optional() });
 const graphQlOperationSchema = object$1({
 	document: string().min(1).optional().describe("Inline GraphQL operation document."),
 	documentPath: string().min(1).optional().describe("Path to a GraphQL operation document."),
@@ -26996,9 +27102,9 @@ const publicCapletSetSchema = object$1({
 	});
 });
 const normalizedCapletSetSchema = publicCapletSetSchema.extend({ body: string().optional() });
-function configSchemaFor(serverValueSchema, openApiEndpointValueSchema, graphQlEndpointValueSchema, httpApiValueSchema, cliToolsValueSchema, capletSetValueSchema) {
+function configSchemaFor(serverValueSchema, openApiEndpointValueSchema, googleDiscoveryApiValueSchema, graphQlEndpointValueSchema, httpApiValueSchema, cliToolsValueSchema, capletSetValueSchema) {
 	return object$1({
-		$schema: string().url().optional().describe("Optional JSON Schema URL for editor validation."),
+		$schema: string().optional().describe("Optional JSON Schema for editor validation."),
 		version: literal(1).default(1).describe("Caplets config schema version."),
 		defaultSearchLimit: number$1().int().positive().default(20).describe("Default maximum number of same-server search results."),
 		maxSearchLimit: number$1().int().positive().max(50).default(50).describe("Maximum accepted search_tools limit."),
@@ -27024,6 +27130,7 @@ function configSchemaFor(serverValueSchema, openApiEndpointValueSchema, graphQlE
 		}).describe("Global Caplets runtime options."),
 		mcpServers: record(string().regex(SERVER_ID_PATTERN), serverValueSchema).default({}).describe("Downstream MCP servers keyed by stable server ID."),
 		openapiEndpoints: record(string().regex(SERVER_ID_PATTERN), openApiEndpointValueSchema).default({}).describe("OpenAPI endpoints keyed by stable Caplet ID."),
+		googleDiscoveryApis: record(string().regex(SERVER_ID_PATTERN), googleDiscoveryApiValueSchema).default({}).describe("Google Discovery APIs keyed by stable Caplet ID."),
 		graphqlEndpoints: record(string().regex(SERVER_ID_PATTERN), graphQlEndpointValueSchema).default({}).describe("GraphQL endpoints keyed by stable Caplet ID."),
 		httpApis: record(string().regex(SERVER_ID_PATTERN), httpApiValueSchema).default({}).describe("HTTP APIs keyed by stable Caplet ID."),
 		cliTools: record(string().regex(SERVER_ID_PATTERN), cliToolsValueSchema).default({}).describe("CLI tools keyed by stable Caplet ID."),
@@ -27139,9 +27246,60 @@ function configSchemaFor(serverValueSchema, openApiEndpointValueSchema, graphQlE
 				});
 			}
 		}
+		for (const [api, rawValue] of Object.entries(config.googleDiscoveryApis)) {
+			const raw = rawValue;
+			const duplicateBackend = config.mcpServers[api] ? "mcpServers" : config.openapiEndpoints[api] ? "openapiEndpoints" : config.graphqlEndpoints[api] ? "graphqlEndpoints" : config.httpApis[api] ? "httpApis" : config.cliTools[api] ? "cliTools" : config.capletSets[api] ? "capletSets" : void 0;
+			if (duplicateBackend) ctx.addIssue({
+				code: "custom",
+				path: ["googleDiscoveryApis", api],
+				message: `Caplet ID ${api} is already used by ${duplicateBackend}`
+			});
+			if (!SERVER_ID_PATTERN.test(api)) ctx.addIssue({
+				code: "custom",
+				path: ["googleDiscoveryApis", api],
+				message: "Google Discovery API ID must match ^[a-zA-Z0-9_-]{1,64}$"
+			});
+			if (Boolean(raw.discoveryPath) === Boolean(raw.discoveryUrl)) ctx.addIssue({
+				code: "custom",
+				path: ["googleDiscoveryApis", api],
+				message: "Google Discovery API must define exactly one discovery source: discoveryPath or discoveryUrl"
+			});
+			if (raw.discoveryUrl && !isAllowedRemoteUrl(raw.discoveryUrl)) ctx.addIssue({
+				code: "custom",
+				path: [
+					"googleDiscoveryApis",
+					api,
+					"discoveryUrl"
+				],
+				message: "Google Discovery API discoveryUrl must use https except loopback development urls"
+			});
+			if (raw.baseUrl && !isAllowedHttpBaseUrl(raw.baseUrl)) ctx.addIssue({
+				code: "custom",
+				path: [
+					"googleDiscoveryApis",
+					api,
+					"baseUrl"
+				],
+				message: "Google Discovery API baseUrl must use https except loopback development urls and must not include credentials, query, or fragment"
+			});
+			if (raw.auth?.type === "headers") for (const headerName of Object.keys(raw.auth.headers)) {
+				const normalized = headerName.toLowerCase();
+				if (!HEADER_NAME_PATTERN.test(headerName) || FORBIDDEN_HEADERS.has(normalized)) ctx.addIssue({
+					code: "custom",
+					path: [
+						"googleDiscoveryApis",
+						api,
+						"auth",
+						"headers",
+						headerName
+					],
+					message: `header ${headerName} is not allowed`
+				});
+			}
+		}
 		for (const [endpoint, rawValue] of Object.entries(config.graphqlEndpoints)) {
 			const raw = rawValue;
-			const duplicateBackend = config.mcpServers[endpoint] ? "mcpServers" : config.openapiEndpoints[endpoint] ? "openapiEndpoints" : void 0;
+			const duplicateBackend = config.mcpServers[endpoint] ? "mcpServers" : config.openapiEndpoints[endpoint] ? "openapiEndpoints" : config.googleDiscoveryApis[endpoint] ? "googleDiscoveryApis" : void 0;
 			if (duplicateBackend) ctx.addIssue({
 				code: "custom",
 				path: ["graphqlEndpoints", endpoint],
@@ -27183,7 +27341,7 @@ function configSchemaFor(serverValueSchema, openApiEndpointValueSchema, graphQlE
 		}
 		for (const [endpoint, rawValue] of Object.entries(config.httpApis)) {
 			const raw = rawValue;
-			const duplicateBackend = config.mcpServers[endpoint] ? "mcpServers" : config.openapiEndpoints[endpoint] ? "openapiEndpoints" : config.graphqlEndpoints[endpoint] ? "graphqlEndpoints" : void 0;
+			const duplicateBackend = config.mcpServers[endpoint] ? "mcpServers" : config.openapiEndpoints[endpoint] ? "openapiEndpoints" : config.googleDiscoveryApis[endpoint] ? "googleDiscoveryApis" : config.graphqlEndpoints[endpoint] ? "graphqlEndpoints" : void 0;
 			if (duplicateBackend) ctx.addIssue({
 				code: "custom",
 				path: ["httpApis", endpoint],
@@ -27218,7 +27376,7 @@ function configSchemaFor(serverValueSchema, openApiEndpointValueSchema, graphQlE
 		}
 		for (const [server, rawValue] of Object.entries(config.cliTools)) {
 			const raw = rawValue;
-			const duplicateBackend = config.mcpServers[server] ? "mcpServers" : config.openapiEndpoints[server] ? "openapiEndpoints" : config.graphqlEndpoints[server] ? "graphqlEndpoints" : config.httpApis[server] ? "httpApis" : void 0;
+			const duplicateBackend = config.mcpServers[server] ? "mcpServers" : config.openapiEndpoints[server] ? "openapiEndpoints" : config.googleDiscoveryApis[server] ? "googleDiscoveryApis" : config.graphqlEndpoints[server] ? "graphqlEndpoints" : config.httpApis[server] ? "httpApis" : void 0;
 			if (duplicateBackend) ctx.addIssue({
 				code: "custom",
 				path: ["cliTools", server],
@@ -27242,7 +27400,7 @@ function configSchemaFor(serverValueSchema, openApiEndpointValueSchema, graphQlE
 		}
 		for (const [server, rawValue] of Object.entries(config.capletSets)) {
 			const raw = rawValue;
-			const duplicateBackend = config.mcpServers[server] ? "mcpServers" : config.openapiEndpoints[server] ? "openapiEndpoints" : config.graphqlEndpoints[server] ? "graphqlEndpoints" : config.httpApis[server] ? "httpApis" : config.cliTools[server] ? "cliTools" : void 0;
+			const duplicateBackend = config.mcpServers[server] ? "mcpServers" : config.openapiEndpoints[server] ? "openapiEndpoints" : config.googleDiscoveryApis[server] ? "googleDiscoveryApis" : config.graphqlEndpoints[server] ? "graphqlEndpoints" : config.httpApis[server] ? "httpApis" : config.cliTools[server] ? "cliTools" : void 0;
 			if (duplicateBackend) ctx.addIssue({
 				code: "custom",
 				path: ["capletSets", server],
@@ -27261,8 +27419,8 @@ function configSchemaFor(serverValueSchema, openApiEndpointValueSchema, graphQlE
 		}
 	});
 }
-const configFileSchema = configSchemaFor(publicServerSchema, publicOpenApiEndpointSchema, publicGraphQlEndpointSchema, publicHttpApiSchema, publicCliToolsSchema, publicCapletSetSchema);
-const normalizedConfigFileSchema = configSchemaFor(normalizedServerSchema, normalizedOpenApiEndpointSchema, normalizedGraphQlEndpointSchema, normalizedHttpApiSchema, normalizedCliToolsSchema, normalizedCapletSetSchema);
+const configFileSchema = configSchemaFor(publicServerSchema, publicOpenApiEndpointSchema, publicGoogleDiscoveryApiSchema, publicGraphQlEndpointSchema, publicHttpApiSchema, publicCliToolsSchema, publicCapletSetSchema);
+const normalizedConfigFileSchema = configSchemaFor(normalizedServerSchema, normalizedOpenApiEndpointSchema, normalizedGoogleDiscoveryApiSchema, normalizedGraphQlEndpointSchema, normalizedHttpApiSchema, normalizedCliToolsSchema, normalizedCapletSetSchema);
 function loadConfig(path = resolveConfigPath(), projectPath = resolveProjectConfigPath()) {
 	return loadConfigWithSources(path, projectPath).config;
 }
@@ -27303,7 +27461,7 @@ function loadConfigWithSources(path = resolveConfigPath(), projectPath = resolve
 				path: projectCaplets.paths
 			}
 		} : void 0
-	], `Caplets config not found at ${path} or ${projectPath}`, "Caplets config must define at least one MCP server, OpenAPI endpoint, GraphQL endpoint, HTTP API, CLI tools backend, or Caplet set");
+	], `Caplets config not found at ${path} or ${projectPath}`, "Caplets config must define at least one MCP server, OpenAPI endpoint, Google Discovery API, GraphQL endpoint, HTTP API, CLI tools backend, or Caplet set");
 }
 function loadGlobalConfig(path = resolveConfigPath()) {
 	const userConfig = existsSync(path) ? readPublicConfigInput(path) : void 0;
@@ -27345,7 +27503,7 @@ function buildConfigWithSources(inputs, notFoundMessage, emptyMessage) {
 	try {
 		const { input, sources, shadows } = mergeConfigInputsWithSources(...inputs);
 		const config = parseConfig(input);
-		if (emptyMessage && Object.keys(config.mcpServers).length === 0 && Object.keys(config.openapiEndpoints).length === 0 && Object.keys(config.graphqlEndpoints).length === 0 && Object.keys(config.httpApis).length === 0 && Object.keys(config.cliTools).length === 0 && Object.keys(config.capletSets).length === 0) throw new CapletsError("CONFIG_INVALID", emptyMessage);
+		if (emptyMessage && Object.keys(config.mcpServers).length === 0 && Object.keys(config.openapiEndpoints).length === 0 && Object.keys(config.googleDiscoveryApis).length === 0 && Object.keys(config.graphqlEndpoints).length === 0 && Object.keys(config.httpApis).length === 0 && Object.keys(config.cliTools).length === 0 && Object.keys(config.capletSets).length === 0) throw new CapletsError("CONFIG_INVALID", emptyMessage);
 		return {
 			config,
 			sources,
@@ -27434,7 +27592,7 @@ function loadIsolatedConfig(options) {
 		defaultSearchLimit: options.defaultSearchLimit,
 		maxSearchLimit: options.maxSearchLimit
 	}));
-	if (Object.keys(config.mcpServers).length === 0 && Object.keys(config.openapiEndpoints).length === 0 && Object.keys(config.graphqlEndpoints).length === 0 && Object.keys(config.httpApis).length === 0 && Object.keys(config.cliTools).length === 0 && Object.keys(config.capletSets).length === 0) throw new CapletsError("CONFIG_INVALID", "Nested Caplet set must define at least one Caplet");
+	if (Object.keys(config.mcpServers).length === 0 && Object.keys(config.openapiEndpoints).length === 0 && Object.keys(config.googleDiscoveryApis).length === 0 && Object.keys(config.graphqlEndpoints).length === 0 && Object.keys(config.httpApis).length === 0 && Object.keys(config.cliTools).length === 0 && Object.keys(config.capletSets).length === 0) throw new CapletsError("CONFIG_INVALID", "Nested Caplet set must define at least one Caplet");
 	return config;
 }
 function resolveProjectCapletsRootForConfigPath(projectPath) {
@@ -27456,6 +27614,7 @@ function normalizeLocalPaths(input, baseDir) {
 	return stripUndefined({
 		...input,
 		openapiEndpoints: normalizeEndpointPaths(input.openapiEndpoints, baseDir, normalizeOpenApiPath),
+		googleDiscoveryApis: normalizeEndpointPaths(input.googleDiscoveryApis, baseDir, normalizeGoogleDiscoveryPath),
 		graphqlEndpoints: normalizeEndpointPaths(input.graphqlEndpoints, baseDir, normalizeGraphQlPath),
 		cliTools: normalizeEndpointPaths(input.cliTools, baseDir, normalizeCliToolsPaths),
 		capletSets: normalizeEndpointPaths(input.capletSets, baseDir, normalizeCapletSetPaths)
@@ -27471,6 +27630,12 @@ function normalizeOpenApiPath(endpoint, baseDir) {
 		specPath: normalizeLocalPath(endpoint.specPath, baseDir)
 	};
 }
+function normalizeGoogleDiscoveryPath(endpoint, baseDir) {
+	return {
+		...endpoint,
+		discoveryPath: normalizeLocalPath(endpoint.discoveryPath, baseDir)
+	};
+}
 function normalizeGraphQlPath(endpoint, baseDir) {
 	const operations = isPlainObject$5(endpoint.operations) ? Object.fromEntries(Object.entries(endpoint.operations).map(([name, operation]) => [name, isPlainObject$5(operation) ? {
 		...operation,
@@ -27506,6 +27671,7 @@ function normalizeLocalPath(value, baseDir) {
 }
 function rejectProjectConfigExecutableBackendMaps(input, path) {
 	if (input.openapiEndpoints && Object.keys(input.openapiEndpoints).length > 0) throw new CapletsError("CONFIG_INVALID", `Project config at ${path} cannot define executable backend map openapiEndpoints; use project Markdown Caplet files or user config instead`);
+	if (input.googleDiscoveryApis && Object.keys(input.googleDiscoveryApis).length > 0) throw new CapletsError("CONFIG_INVALID", `Project config at ${path} cannot define executable backend map googleDiscoveryApis; use project Markdown Caplet files or user config instead`);
 	if (input.graphqlEndpoints && Object.keys(input.graphqlEndpoints).length > 0) throw new CapletsError("CONFIG_INVALID", `Project config at ${path} cannot define executable backend map graphqlEndpoints; use project Markdown Caplet files or user config instead`);
 	if (input.httpApis && Object.keys(input.httpApis).length > 0) throw new CapletsError("CONFIG_INVALID", `Project config at ${path} cannot define executable backend map httpApis; use project Markdown Caplet files or user config instead`);
 	if (input.cliTools && Object.keys(input.cliTools).length > 0) throw new CapletsError("CONFIG_INVALID", `Project config at ${path} cannot define executable backend map cliTools; use project Markdown Caplet files or user config instead`);
@@ -27527,6 +27693,10 @@ function mergeConfigInputs(...inputs) {
 				...merged?.openapiEndpoints,
 				...input.openapiEndpoints
 			},
+			googleDiscoveryApis: {
+				...merged?.googleDiscoveryApis,
+				...input.googleDiscoveryApis
+			},
 			graphqlEndpoints: {
 				...merged?.graphqlEndpoints,
 				...input.graphqlEndpoints
@@ -27570,6 +27740,7 @@ function mergeConfigInputsWithSources(...inputs) {
 function removeCapletId(input, id) {
 	const { [id]: _mcpServer, ...mcpServers } = input.mcpServers ?? {};
 	const { [id]: _openapiEndpoint, ...openapiEndpoints } = input.openapiEndpoints ?? {};
+	const { [id]: _googleDiscoveryApi, ...googleDiscoveryApis } = input.googleDiscoveryApis ?? {};
 	const { [id]: _graphqlEndpoint, ...graphqlEndpoints } = input.graphqlEndpoints ?? {};
 	const { [id]: _httpApi, ...httpApis } = input.httpApis ?? {};
 	const { [id]: _cliTools, ...cliTools } = input.cliTools ?? {};
@@ -27578,6 +27749,7 @@ function removeCapletId(input, id) {
 		...input,
 		mcpServers,
 		openapiEndpoints,
+		googleDiscoveryApis,
 		graphqlEndpoints,
 		httpApis,
 		cliTools,
@@ -27588,6 +27760,7 @@ function capletIds(input) {
 	return [
 		...Object.keys(input.mcpServers ?? {}),
 		...Object.keys(input.openapiEndpoints ?? {}),
+		...Object.keys(input.googleDiscoveryApis ?? {}),
 		...Object.keys(input.graphqlEndpoints ?? {}),
 		...Object.keys(input.httpApis ?? {}),
 		...Object.keys(input.cliTools ?? {}),
@@ -27619,6 +27792,12 @@ function parseConfig(input) {
 		server,
 		backend: "openapi"
 	});
+	const googleDiscoveryApis = {};
+	for (const [server, raw] of Object.entries(parsed.data.googleDiscoveryApis)) googleDiscoveryApis[server] = stripUndefined({
+		...raw,
+		server,
+		backend: "googleDiscovery"
+	});
 	const graphqlEndpoints = {};
 	for (const [server, raw] of Object.entries(parsed.data.graphqlEndpoints)) graphqlEndpoints[server] = stripUndefined({
 		...raw,
@@ -27655,6 +27834,7 @@ function parseConfig(input) {
 		},
 		mcpServers: servers,
 		openapiEndpoints,
+		googleDiscoveryApis,
 		graphqlEndpoints,
 		httpApis,
 		cliTools,
@@ -27687,7 +27867,7 @@ function interpolateConfig(value, path = []) {
 	return value;
 }
 function isPublicMetadataPath(path) {
-	if (path.length < 3 || path[0] !== "mcpServers" && path[0] !== "openapiEndpoints" && path[0] !== "graphqlEndpoints" && path[0] !== "httpApis" && path[0] !== "cliTools" && path[0] !== "capletSets") return false;
+	if (path.length < 3 || path[0] !== "mcpServers" && path[0] !== "openapiEndpoints" && path[0] !== "googleDiscoveryApis" && path[0] !== "graphqlEndpoints" && path[0] !== "httpApis" && path[0] !== "cliTools" && path[0] !== "capletSets") return false;
 	return NON_INTERPOLATED_SERVER_FIELDS.has(path[2] ?? "");
 }
 function isPlainObject$5(value) {
@@ -27700,6 +27880,1272 @@ function interpolateEnv(value) {
 	return value.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g, (_match, name) => process.env[name] ?? "").replace(/\$env:([A-Za-z_][A-Za-z0-9_]*)/g, (_match, name) => process.env[name] ?? "");
 }
 //#endregion
+//#region src/google-discovery/schema.ts
+function googleDiscoverySchemaToJsonSchema(value, schemas = {}, seen = /* @__PURE__ */ new Set()) {
+	if (!value) return {};
+	if (value.$ref) {
+		const target = schemas[value.$ref];
+		if (!target || seen.has(value.$ref)) return {
+			type: "object",
+			additionalProperties: true
+		};
+		return googleDiscoverySchemaToJsonSchema(target, schemas, new Set([...seen, value.$ref]));
+	}
+	const type = discoveryTypeToJsonSchemaType(value.type);
+	const converted = {};
+	if (value.description) converted.description = collapseWhitespace$1(value.description);
+	if (type) converted.type = type;
+	if (value.format) converted.format = value.format;
+	if (value.enum) converted.enum = value.enum;
+	const defaultValue = convertedDefault(value.default, type);
+	if (defaultValue !== void 0) converted.default = defaultValue;
+	if (value.repeated) return {
+		...converted.description ? { description: converted.description } : {},
+		type: "array",
+		items: omit(converted, ["description", "default"])
+	};
+	if (value.items) converted.items = googleDiscoverySchemaToJsonSchema(value.items, schemas, seen);
+	if (value.properties) {
+		converted.type = converted.type ?? "object";
+		converted.properties = Object.fromEntries(Object.entries(value.properties).map(([key, schema]) => [key, googleDiscoverySchemaToJsonSchema(schema, schemas, seen)]));
+		converted.additionalProperties = false;
+	}
+	if (typeof value.additionalProperties === "boolean") converted.additionalProperties = value.additionalProperties;
+	else if (value.additionalProperties) converted.additionalProperties = googleDiscoverySchemaToJsonSchema(value.additionalProperties, schemas, seen);
+	return converted;
+}
+function discoveryTypeToJsonSchemaType(type) {
+	if (type === "any") return "object";
+	return type;
+}
+function convertedDefault(value, type) {
+	if (value === void 0) return void 0;
+	if (type === "boolean" && typeof value === "string") return value === "true";
+	if ((type === "integer" || type === "number") && typeof value === "string") {
+		const number = Number(value);
+		return Number.isFinite(number) ? number : value;
+	}
+	return value;
+}
+function collapseWhitespace$1(value) {
+	return value.replace(/\s+/gu, " ").trim();
+}
+function omit(value, keys) {
+	return Object.fromEntries(Object.entries(value).filter(([key]) => !keys.includes(key)));
+}
+//#endregion
+//#region src/google-discovery/operations.ts
+function discoveryOperations(options) {
+	const document = validateGoogleDiscoveryDocument(options.document);
+	const schemas = document.schemas ?? {};
+	return collectDocumentMethods(document).map((entry) => operationFromMethod(options.server, document, schemas, entry)).filter((operation) => isIncluded(operation.name, options.includeOperations)).filter((operation) => !isExcluded(operation.name, options.excludeOperations)).sort((left, right) => left.name.localeCompare(right.name));
+}
+function googleDiscoveryScopesForOperations(operations) {
+	return [...new Set(operations.flatMap((operation) => operation.scopes))].sort();
+}
+function validateGoogleDiscoveryDocument(value) {
+	if (!isRecord$3(value)) throw new Error("Invalid Google Discovery document: expected an object");
+	if (value.kind !== void 0 && value.kind !== "discovery#restDescription") throw new Error("Invalid Google Discovery document: expected kind discovery#restDescription");
+	if (value.resources !== void 0 && !isRecord$3(value.resources)) throw new Error("Invalid Google Discovery document: expected resources object");
+	if (value.methods !== void 0 && !isRecord$3(value.methods)) throw new Error("Invalid Google Discovery document: expected methods object");
+	if (!isRecord$3(value.resources) && !isRecord$3(value.methods)) throw new Error("Invalid Google Discovery document: expected resources or methods object");
+	if (value.schemas !== void 0 && !isRecord$3(value.schemas)) throw new Error("Invalid Google Discovery document: expected schemas object");
+	if (value.parameters !== void 0 && !isRecord$3(value.parameters)) throw new Error("Invalid Google Discovery document: expected parameters object");
+	return value;
+}
+function collectDocumentMethods(document) {
+	return [...Object.entries(document.methods ?? {}).filter((entry) => isRecord$3(entry[1])).map(([methodKey, method]) => ({
+		resourcePath: [],
+		methodKey,
+		method
+	})), ...collectMethods(document.resources ?? {})];
+}
+function collectMethods(resources, resourcePath = []) {
+	const entries = [];
+	for (const [resourceName, resource] of Object.entries(resources)) {
+		if (!isRecord$3(resource)) continue;
+		const nextPath = [...resourcePath, resourceName];
+		for (const [methodKey, method] of Object.entries(resource.methods ?? {})) if (isRecord$3(method)) entries.push({
+			resourcePath: nextPath,
+			methodKey,
+			method
+		});
+		entries.push(...collectMethods(resource.resources ?? {}, nextPath));
+	}
+	return entries;
+}
+function operationFromMethod(server, document, schemas, entry) {
+	const method = normalizedHttpMethod(entry.method.httpMethod);
+	const name = entry.method.id ?? [
+		server,
+		...entry.resourcePath,
+		entry.methodKey
+	].join(".");
+	const scopes = selectGoogleDiscoveryScopes(entry.method.scopes);
+	const inputSchema = buildInputSchema(document.parameters ?? {}, entry.method, schemas);
+	const bodyOutputSchema = entry.method.response?.$ref ? googleDiscoverySchemaToJsonSchema(entry.method.response, schemas) : void 0;
+	const outputSchema = bodyOutputSchema ? structuredOutputSchema$1(bodyOutputSchema) : void 0;
+	const mediaUpload = entry.method.mediaUpload?.accept || entry.method.mediaUpload?.maxSize ? {
+		...entry.method.mediaUpload.accept ? { accept: entry.method.mediaUpload.accept } : {},
+		...entry.method.mediaUpload.maxSize ? { maxSize: entry.method.mediaUpload.maxSize } : {}
+	} : void 0;
+	return {
+		name,
+		method,
+		path: entry.method.path ?? entry.method.flatPath ?? "",
+		...entry.method.description ? { description: collapseWhitespace(entry.method.description) } : {},
+		inputSchema,
+		...outputSchema ? { outputSchema } : {},
+		readOnlyHint: method === "get" || method === "head",
+		destructiveHint: method === "delete" || /\.(delete|emptyTrash)$/u.test(name),
+		scopes,
+		supportsMediaUpload: entry.method.supportsMediaUpload === true,
+		supportsMediaDownload: entry.method.supportsMediaDownload === true,
+		...mediaUpload ? { mediaUpload } : {},
+		mediaUploadProtocols: mediaUploadProtocols(entry.method),
+		parameterOrder: entry.method.parameterOrder ?? []
+	};
+}
+function mediaUploadProtocols(method) {
+	const protocols = { ...method.mediaUpload?.protocols };
+	if (!protocols.multipart && protocols.simple?.multipart === true) protocols.multipart = protocols.simple;
+	return protocols;
+}
+function selectGoogleDiscoveryScopes(scopes) {
+	const preferred = [...new Set(scopes ?? [])].sort().toSorted(compareScopePreference)[0];
+	return preferred ? [preferred] : [];
+}
+function compareScopePreference(left, right) {
+	return scopePreferenceRank(left) - scopePreferenceRank(right) || right.length - left.length || left.localeCompare(right);
+}
+function scopePreferenceRank(scope) {
+	const suffix = scope.toLowerCase().split("/").pop() ?? scope.toLowerCase();
+	const tokens = suffix.split(/[._:-]+/u);
+	if (tokens.includes("readonly")) return 0;
+	if (tokens.includes("file")) return 1;
+	if (tokens.includes("metadata") || tokens.includes("appdata")) return 2;
+	if (tokens.includes("read")) return 3;
+	if (suffix === "cloud-platform") return 5;
+	return 4;
+}
+function structuredOutputSchema$1(bodySchema) {
+	return {
+		type: "object",
+		additionalProperties: false,
+		required: [
+			"status",
+			"statusText",
+			"headers"
+		],
+		properties: {
+			status: { type: "number" },
+			statusText: { type: "string" },
+			headers: {
+				type: "object",
+				additionalProperties: false,
+				required: ["content-type"],
+				properties: { "content-type": { type: "string" } }
+			},
+			body: bodySchema
+		}
+	};
+}
+function buildInputSchema(globalParameters, method, schemas) {
+	const groups = /* @__PURE__ */ new Map();
+	const requiredByGroup = /* @__PURE__ */ new Map();
+	const parameters = {
+		...globalParameters,
+		...method.parameters
+	};
+	for (const [name, parameter] of Object.entries(parameters)) {
+		const location = parameter.location ?? "query";
+		const group = groups.get(location) ?? {};
+		group[name] = googleDiscoverySchemaToJsonSchema(parameter, schemas);
+		groups.set(location, group);
+		if (parameter.required === true) {
+			const required = requiredByGroup.get(location) ?? [];
+			required.push(name);
+			requiredByGroup.set(location, required);
+		}
+	}
+	if (method.request?.$ref) groups.set("body", googleDiscoverySchemaToJsonSchema(method.request, schemas));
+	if (method.supportsMediaUpload === true) groups.set("media", {
+		type: "object",
+		additionalProperties: false,
+		properties: {
+			path: { type: "string" },
+			artifact: { type: "string" },
+			dataUrl: { type: "string" },
+			mimeType: { type: "string" },
+			filename: { type: "string" }
+		}
+	});
+	const properties = {};
+	const required = [];
+	for (const location of [
+		"path",
+		"query",
+		"header",
+		"body",
+		"media"
+	]) {
+		const group = groups.get(location);
+		if (!group) continue;
+		if ((location === "body" || location === "media") && isJsonSchemaObject(group)) properties[location] = group;
+		else {
+			const groupRequired = requiredByGroup.get(location) ?? [];
+			properties[location] = {
+				type: "object",
+				...groupRequired.length > 0 ? { required: groupRequired } : {},
+				properties: group,
+				additionalProperties: false
+			};
+		}
+		if (location === "path" || requiredByGroup.has(location)) required.push(location);
+	}
+	if (method.supportsMediaDownload === true) {
+		properties.filename = { type: "string" };
+		properties.outputPath = { type: "string" };
+	}
+	return {
+		type: "object",
+		...required.length > 0 ? { required } : {},
+		properties,
+		additionalProperties: false
+	};
+}
+function normalizedHttpMethod(method) {
+	const normalized = method?.toLowerCase();
+	if (normalized === "get" || normalized === "put" || normalized === "post" || normalized === "delete" || normalized === "patch" || normalized === "head") return normalized;
+	return "get";
+}
+function isIncluded(name, includeOperations) {
+	return !includeOperations?.length || includeOperations.some((pattern) => globMatches(pattern, name));
+}
+function isExcluded(name, excludeOperations) {
+	return excludeOperations?.some((pattern) => globMatches(pattern, name)) === true;
+}
+function globMatches(pattern, name) {
+	const patternSegments = pattern.split(".");
+	const nameSegments = name.split(".");
+	if (patternSegments[0] === "*" && patternSegments.length < nameSegments.length) {
+		const suffix = patternSegments.slice(1);
+		return suffix.every((segment, index) => segment === nameSegments[nameSegments.length - suffix.length + index]);
+	}
+	if (patternSegments.length !== nameSegments.length) return false;
+	return patternSegments.every((segment, index) => segment === "*" || segment === nameSegments[index]);
+}
+function isJsonSchemaObject(value) {
+	return value.type === "object" || "properties" in value || "additionalProperties" in value;
+}
+function isRecord$3(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function collapseWhitespace(value) {
+	return value.replace(/\s+/gu, " ").trim();
+}
+//#endregion
+//#region src/google-discovery/request.ts
+function buildGoogleDiscoveryUrl(api, operation, args) {
+	const base = api.baseUrl;
+	validateBaseUrl$1(api, base);
+	const url = buildOperationUrl$1(base, substitutePath$2(operation.path, asRecord$2(args.path), operation));
+	appendQueryArgs(url, args);
+	return url;
+}
+function buildGoogleDiscoveryUploadUrl(api, operation, uploadPath, uploadType, args) {
+	const base = api.baseUrl;
+	validateBaseUrl$1(api, base);
+	const url = buildUploadOperationUrl(base, substitutePath$2(uploadPath, asRecord$2(args.path), operation));
+	appendQueryArgs(url, args);
+	url.searchParams.set("uploadType", uploadType);
+	return url;
+}
+function buildJsonRequestInit(operation, args, headers) {
+	for (const [key, value] of Object.entries(asRecord$2(args.header))) if (value !== void 0 && value !== null) {
+		const normalized = key.toLowerCase();
+		if (FORBIDDEN_HEADERS.has(normalized)) throw new CapletsError("REQUEST_INVALID", `Header ${key} cannot be supplied by arguments`);
+		headers.set(key, serializeGoogleDiscoveryValue("header", key, value));
+	}
+	if ("body" in args) {
+		headers.set("content-type", "application/json");
+		return {
+			method: operation.method.toUpperCase(),
+			headers,
+			body: JSON.stringify(args.body),
+			redirect: "manual"
+		};
+	}
+	return {
+		method: operation.method.toUpperCase(),
+		headers,
+		redirect: "manual"
+	};
+}
+function validateBaseUrl$1(api, base) {
+	if (!base) throw new CapletsError("CONFIG_INVALID", `${api.server} is missing Google Discovery baseUrl`);
+	if (!isAllowedRemoteUrl(base)) throw new CapletsError("CONFIG_INVALID", `${api.server} Google Discovery baseUrl is not allowed`);
+	const url = new URL(base);
+	if (url.username || url.password || url.search || url.hash) throw new CapletsError("CONFIG_INVALID", `${api.server} Google Discovery baseUrl must not include credentials, query, or fragment`);
+}
+function buildOperationUrl$1(base, operationPath) {
+	if (/^[a-z][a-z0-9+.-]*:/iu.test(operationPath) || operationPath.startsWith("//")) throw new CapletsError("CONFIG_INVALID", "Google Discovery operation path cannot change origin");
+	const baseUrl = new URL(base);
+	const basePath = baseUrl.pathname.replace(/\/+$/u, "");
+	const relativePath = operationPath.replace(/^\/+/u, "");
+	assertSafeRelativePath(relativePath);
+	baseUrl.pathname = [basePath, relativePath].filter(Boolean).join("/");
+	assertInsideBasePath(baseUrl, basePath);
+	return baseUrl;
+}
+function buildUploadOperationUrl(base, uploadPath) {
+	if (/^[a-z][a-z0-9+.-]*:/iu.test(uploadPath) || uploadPath.startsWith("//")) throw new CapletsError("CONFIG_INVALID", "Google Discovery upload path cannot change origin");
+	const baseUrl = new URL(base);
+	const relativePath = uploadPath.replace(/^\/+/u, "");
+	assertSafeRelativePath(relativePath);
+	return uploadPath.startsWith("/") ? new URL(`/${relativePath}`, baseUrl.origin) : buildOperationUrl$1(base, uploadPath);
+}
+function appendQueryArgs(url, args) {
+	for (const [key, value] of Object.entries(asRecord$2(args.query))) {
+		if (value === void 0 || value === null) continue;
+		if (Array.isArray(value)) {
+			for (const entry of value) url.searchParams.append(key, serializeGoogleDiscoveryValue("query", key, entry));
+			continue;
+		}
+		url.searchParams.append(key, serializeGoogleDiscoveryValue("query", key, value));
+	}
+}
+function substitutePath$2(path, values, operation) {
+	return path.replace(/\{([^}]+)\}/gu, (_match, expression) => {
+		const reserved = expression.startsWith("+");
+		const name = reserved ? expression.slice(1) : expression;
+		const value = values[name];
+		if (value === void 0 || value === null || value === "") throw new CapletsError("REQUEST_INVALID", `Missing required path parameter ${name}`, { tool: operation.name });
+		const serialized = serializeGoogleDiscoveryValue("path", name, value);
+		return reserved ? encodeReservedPathValue(serialized) : encodeURIComponent(serialized);
+	});
+}
+function encodeReservedPathValue(value) {
+	return value.split("/").map((segment) => encodeURIComponent(segment)).join("/");
+}
+function assertSafeRelativePath(path) {
+	for (const segment of path.split("/")) {
+		const decoded = safeDecodePathSegment(segment);
+		if (decoded === "." || decoded === "..") throw new CapletsError("CONFIG_INVALID", "Google Discovery operation path cannot escape baseUrl");
+	}
+}
+function assertInsideBasePath(url, basePath) {
+	const normalizedBase = basePath === "" ? "/" : `${basePath}/`;
+	if (normalizedBase === "/") return;
+	const pathname = url.pathname.endsWith("/") ? url.pathname : `${url.pathname}/`;
+	if (pathname !== normalizedBase && !pathname.startsWith(normalizedBase)) throw new CapletsError("CONFIG_INVALID", "Google Discovery operation path cannot escape baseUrl");
+}
+function safeDecodePathSegment(segment) {
+	try {
+		return decodeURIComponent(segment);
+	} catch {
+		return segment;
+	}
+}
+function serializeGoogleDiscoveryValue(location, name, value) {
+	switch (typeof value) {
+		case "string":
+		case "number":
+		case "boolean": return String(value);
+		default: throw new CapletsError("REQUEST_INVALID", `Google Discovery ${location} parameter ${name} must be a string, number, or boolean`);
+	}
+}
+function asRecord$2(value) {
+	return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+//#endregion
+//#region src/media/artifacts.ts
+function artifactUri(capletId, callId, filename) {
+	return `caplets://artifacts/${encodeURIComponent(capletId)}/${encodeURIComponent(callId)}/${encodeURIComponent(filename)}`;
+}
+async function writeMediaArtifact(input) {
+	const rootDir = resolve(input.rootDir ?? DEFAULT_ARTIFACT_DIR);
+	const capletId = requiredSafePathSegment(input.capletId, "capletId");
+	const callId = safePathSegment(input.callId ?? defaultCallId(), "call");
+	const filename = safeFilename(input.suggestedFilename ?? (input.outputPath ? basename(input.outputPath) : "response.bin"));
+	const target = input.outputPath ? assertInsideRoot(rootDir, input.outputPath) : assertInsideRoot(rootDir, resolve(rootDir, capletId, callId, filename));
+	rejectSymlinkPathComponents(rootDir, target, true);
+	const uriParts = input.outputPath ? uriPartsForOutputPath(rootDir, target) : {
+		capletId,
+		callId,
+		filename: safeFilename(basename(target))
+	};
+	const bytes = Buffer.from(input.bytes);
+	mkdirSync(dirname(target), {
+		recursive: true,
+		mode: 448
+	});
+	writeFileSync(target, bytes, { mode: 384 });
+	chmodSync(target, 384);
+	const artifactFilename = uriParts.filename;
+	writeArtifactMetadata(target, input.mimeType ? { mimeType: input.mimeType } : {});
+	return {
+		uri: artifactUri(uriParts.capletId, uriParts.callId, artifactFilename),
+		...input.exposeLocalPath === false ? {} : { path: target },
+		filename: artifactFilename,
+		...input.mimeType ? { mimeType: input.mimeType } : {},
+		byteLength: bytes.byteLength,
+		sha256: sha256(bytes)
+	};
+}
+function resolveMediaArtifact(uri, options = {}) {
+	const parsed = parseArtifactUri(uri);
+	const rootDir = resolve(options.artifactRoot ?? DEFAULT_ARTIFACT_DIR);
+	const path = assertInsideRoot(rootDir, resolve(rootDir, parsed.capletId, parsed.callId, parsed.filename));
+	rejectSymlinkPathComponents(rootDir, path, true);
+	if (!existsSync(path)) throw new CapletsError("REQUEST_INVALID", "Media artifact was not found");
+	const stat = statSync(path);
+	if (!stat.isFile()) throw new CapletsError("REQUEST_INVALID", "Media artifact must resolve to a file");
+	if (options.maxBytes !== void 0 && stat.size > options.maxBytes) throw new CapletsError("REQUEST_INVALID", `media exceeds byte limit ${options.maxBytes}`);
+	const bytes = readFileSync(path);
+	const metadata = readArtifactMetadata(path);
+	return {
+		uri,
+		path,
+		filename: parsed.filename,
+		...metadata?.mimeType ? { mimeType: metadata.mimeType } : {},
+		byteLength: bytes.byteLength,
+		sha256: sha256(bytes)
+	};
+}
+function parseArtifactUri(uri) {
+	let url;
+	try {
+		url = new URL(uri);
+	} catch {
+		throw new CapletsError("REQUEST_INVALID", "Media artifact URI is invalid");
+	}
+	if (url.protocol !== "caplets:" || url.hostname !== "artifacts") throw new CapletsError("REQUEST_INVALID", "Media artifact URI must start with caplets://artifacts/");
+	const parts = url.pathname.split("/").filter(Boolean);
+	if (parts.length !== 3) throw new CapletsError("REQUEST_INVALID", "Media artifact URI is missing required parts");
+	return {
+		capletId: decodeSafePathSegment(parts[0], "capletId"),
+		callId: decodeSafePathSegment(parts[1], "callId"),
+		filename: decodeSafeFilename(parts[2])
+	};
+}
+function decodeSafePathSegment(value, label) {
+	const decoded = decodeArtifactUriPart(value);
+	const safe = safePathSegment(decoded, "");
+	if (!safe || safe !== decoded) throw new CapletsError("REQUEST_INVALID", `Media artifact URI ${label} is invalid`);
+	return safe;
+}
+function decodeSafeFilename(value) {
+	const decoded = decodeArtifactUriPart(value);
+	const safe = safeFilename(decoded);
+	if (safe !== decoded) throw new CapletsError("REQUEST_INVALID", "Media artifact URI filename is invalid");
+	return safe;
+}
+function decodeArtifactUriPart(value) {
+	try {
+		return decodeURIComponent(value);
+	} catch {
+		throw new CapletsError("REQUEST_INVALID", "Media artifact URI contains invalid encoding");
+	}
+}
+function assertInsideRoot(rootDir, candidate) {
+	if (!isAbsolute(candidate)) throw new CapletsError("REQUEST_INVALID", "Media artifact outputPath must be absolute");
+	const resolvedRoot = resolve(rootDir);
+	const resolved = resolve(candidate);
+	const rel = relative(resolvedRoot, resolved);
+	if (rel.startsWith("..") || isAbsolute(rel)) throw new CapletsError("REQUEST_INVALID", "Media artifact outputPath must stay inside the artifact root");
+	return resolved;
+}
+function rejectSymlinkPathComponents(rootDir, target, includeTarget) {
+	const resolvedRoot = resolve(rootDir);
+	rejectSymlinkRoot(resolvedRoot);
+	const parts = relative(resolvedRoot, resolve(target)).split(/[\\/]+/u).filter(Boolean);
+	let current = resolvedRoot;
+	const limit = includeTarget ? parts.length : Math.max(0, parts.length - 1);
+	for (let index = 0; index < limit; index += 1) {
+		current = resolve(current, parts[index]);
+		try {
+			if (lstatSync(current).isSymbolicLink()) throw new CapletsError("REQUEST_INVALID", "Media artifact path must not contain symlinks");
+		} catch (error) {
+			if (error instanceof CapletsError) throw error;
+			if (error.code === "ENOENT") return;
+			throw error;
+		}
+	}
+}
+function rejectSymlinkRoot(rootDir) {
+	try {
+		if (lstatSync(rootDir).isSymbolicLink()) throw new CapletsError("REQUEST_INVALID", "Media artifact root must not be a symlink");
+	} catch (error) {
+		if (error instanceof CapletsError) throw error;
+		if (error.code === "ENOENT") return;
+		throw error;
+	}
+}
+function uriPartsForOutputPath(rootDir, target) {
+	const parts = relative(resolve(rootDir), target).split(/[\\/]+/u).filter(Boolean);
+	if (parts.length !== 3) throw new CapletsError("REQUEST_INVALID", "Media artifact outputPath must be under <artifact-root>/<caplet-id>/<call-id>/<filename>");
+	return {
+		capletId: requireAlreadySafePathSegment(parts[0], "capletId"),
+		callId: requireAlreadySafePathSegment(parts[1], "callId"),
+		filename: requireAlreadySafeFilename(parts[2])
+	};
+}
+function requiredSafePathSegment(value, label) {
+	const safe = safePathSegment(value, "");
+	if (!safe) throw new CapletsError("REQUEST_INVALID", `Media artifact ${label} is required`);
+	return safe;
+}
+function requireAlreadySafePathSegment(value, label) {
+	const safe = requiredSafePathSegment(value, label);
+	if (safe !== value) throw new CapletsError("REQUEST_INVALID", `Media artifact outputPath ${label} is invalid`);
+	return safe;
+}
+function requireAlreadySafeFilename(value) {
+	const safe = safeFilename(value);
+	if (safe !== value) throw new CapletsError("REQUEST_INVALID", "Media artifact outputPath filename is invalid");
+	return safe;
+}
+function safePathSegment(value, fallback) {
+	return safeFilename(value, fallback);
+}
+function safeFilename(value, fallback = "response.bin") {
+	const name = basename(value).trim().replace(/[^\w.-]+/gu, "_");
+	return name && name !== "." && name !== ".." ? name : fallback;
+}
+function defaultCallId() {
+	return `${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/gu, "-")}-${randomUUID()}`;
+}
+function sha256(bytes) {
+	return createHash("sha256").update(bytes).digest("hex");
+}
+function artifactMetadataPath(path) {
+	return `${path}.caplets.json`;
+}
+function writeArtifactMetadata(path, metadata) {
+	const metadataPath = artifactMetadataPath(path);
+	if (!metadata.mimeType) {
+		rmSync(metadataPath, { force: true });
+		return;
+	}
+	writeFileSync(metadataPath, `${JSON.stringify(metadata)}\n`, { mode: 384 });
+	chmodSync(metadataPath, 384);
+}
+function readArtifactMetadata(path) {
+	const metadataPath = artifactMetadataPath(path);
+	if (!existsSync(metadataPath)) return void 0;
+	let parsed;
+	try {
+		parsed = JSON.parse(readFileSync(metadataPath, "utf8"));
+	} catch {
+		throw new CapletsError("REQUEST_INVALID", "Media artifact metadata is invalid");
+	}
+	if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new CapletsError("REQUEST_INVALID", "Media artifact metadata is invalid");
+	const value = parsed;
+	return typeof value.mimeType === "string" && value.mimeType ? { mimeType: value.mimeType } : {};
+}
+//#endregion
+//#region src/media/input.ts
+const DEFAULT_MAX_MEDIA_BYTES = 100 * 1024 * 1024;
+async function readMediaInput(input, options = {}) {
+	if (!input || typeof input !== "object" || Array.isArray(input)) throw new CapletsError("REQUEST_INVALID", "media must be an object");
+	const media = input;
+	if ([
+		"path",
+		"artifact",
+		"dataUrl"
+	].filter((key) => typeof media[key] === "string").length !== 1) throw new CapletsError("REQUEST_INVALID", "media must define exactly one of path, artifact, or dataUrl");
+	const filename = typeof media.filename === "string" ? media.filename : void 0;
+	const mimeType = typeof media.mimeType === "string" ? media.mimeType : void 0;
+	if (typeof media.path === "string") {
+		if (options.allowLocalPaths === false) throw new CapletsError("REQUEST_INVALID", "media.path is not available in this runtime");
+		enforceSize(statMediaFile(media.path).size, options.maxBytes);
+		const resolvedFilename = filename ?? basename(media.path);
+		const resolvedMimeType = mimeType ?? mimeTypeFromFilename(resolvedFilename);
+		return {
+			bytes: readMediaFile(media.path),
+			filename: resolvedFilename,
+			...resolvedMimeType ? { mimeType: resolvedMimeType } : {}
+		};
+	}
+	if (typeof media.artifact === "string") {
+		const artifactOptions = {};
+		if (options.artifactRoot !== void 0) artifactOptions.artifactRoot = options.artifactRoot;
+		artifactOptions.maxBytes = options.maxBytes ?? DEFAULT_MAX_MEDIA_BYTES;
+		const artifact = resolveMediaArtifact(media.artifact, artifactOptions);
+		if (!artifact.path) throw new CapletsError("REQUEST_INVALID", "Media artifact cannot be read from this runtime");
+		const resolvedMimeType = mimeType ?? artifact.mimeType;
+		return {
+			bytes: readMediaFile(artifact.path),
+			filename: filename ?? artifact.filename,
+			...resolvedMimeType ? { mimeType: resolvedMimeType } : {}
+		};
+	}
+	const dataUrlOptions = {};
+	if (filename !== void 0) dataUrlOptions.filename = filename;
+	if (mimeType !== void 0) dataUrlOptions.mimeType = mimeType;
+	if (options.maxBytes !== void 0) dataUrlOptions.maxBytes = options.maxBytes;
+	return readDataUrl(media.dataUrl, dataUrlOptions);
+}
+function mimeTypeFromFilename(filename) {
+	switch (extname(filename).toLowerCase()) {
+		case ".csv": return "text/csv";
+		case ".gif": return "image/gif";
+		case ".htm":
+		case ".html": return "text/html";
+		case ".jpeg":
+		case ".jpg": return "image/jpeg";
+		case ".json": return "application/json";
+		case ".pdf": return "application/pdf";
+		case ".png": return "image/png";
+		case ".txt": return "text/plain";
+		case ".webp": return "image/webp";
+		case ".xml": return "application/xml";
+		default: return;
+	}
+}
+function readDataUrl(dataUrl, options) {
+	const match = /^data:([^;,]+)(?:;[^,;=]+=[^,;]*)*;base64,([A-Za-z0-9+/=]*)$/u.exec(dataUrl);
+	if (!match) throw new CapletsError("REQUEST_INVALID", "media.dataUrl must be a base64 data URL");
+	const dataMimeType = match[1] ?? "";
+	const base64 = match[2] ?? "";
+	if (!dataMimeType || !isStrictBase64(base64)) throw new CapletsError("REQUEST_INVALID", "media.dataUrl must be a base64 data URL");
+	enforceSize(decodedBase64Length(base64), options.maxBytes);
+	return {
+		bytes: Buffer.from(base64, "base64"),
+		filename: options.filename ?? "media.bin",
+		mimeType: options.mimeType ?? dataMimeType
+	};
+}
+function isStrictBase64(value) {
+	return value.length % 4 === 0 && /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u.test(value);
+}
+function decodedBase64Length(value) {
+	const padding = value.endsWith("==") ? 2 : value.endsWith("=") ? 1 : 0;
+	return value.length / 4 * 3 - padding;
+}
+function statMediaFile(path) {
+	try {
+		const stat = statSync(path);
+		if (!stat.isFile()) throw new CapletsError("REQUEST_INVALID", "media.path must reference a file");
+		return stat;
+	} catch (error) {
+		if (error instanceof CapletsError) throw error;
+		throw new CapletsError("REQUEST_INVALID", "media.path could not be read");
+	}
+}
+function readMediaFile(path) {
+	try {
+		return readFileSync(path);
+	} catch {
+		throw new CapletsError("REQUEST_INVALID", "media file could not be read");
+	}
+}
+function enforceSize(size, maxBytes = DEFAULT_MAX_MEDIA_BYTES) {
+	if (size > maxBytes) throw new CapletsError("REQUEST_INVALID", `media exceeds byte limit ${maxBytes}`);
+}
+function parseHttpBody(contentType, text) {
+	if (!text) return;
+	const mime = contentType.split(";")[0]?.toLowerCase().trim() ?? "";
+	if (mime !== "application/json" && !mime.endsWith("+json") && !mime.endsWith("/json")) return text;
+	try {
+		return JSON.parse(text);
+	} catch {
+		return text;
+	}
+}
+async function readLimitedText(response, options) {
+	if (!response.body) return "";
+	const reader = response.body.getReader();
+	const chunks = [];
+	let bytes = 0;
+	while (true) {
+		const { done, value } = await reader.read();
+		if (done) break;
+		if (value) {
+			bytes += value.byteLength;
+			if (bytes > (options.maxBytes ?? 1048576)) {
+				await reader.cancel();
+				throw new CapletsError("DOWNSTREAM_PROTOCOL_ERROR", options.errorMessage);
+			}
+			chunks.push(value);
+		}
+	}
+	return new TextDecoder().decode(Buffer.concat(chunks));
+}
+function isAbortError(error) {
+	return error instanceof DOMException && error.name === "AbortError";
+}
+//#endregion
+//#region src/http/response.ts
+async function readHttpLikeResponse(response, options) {
+	const contentType = response.headers.get("content-type") ?? "";
+	const mimeType = mimeFromContentType(contentType);
+	const maxInlineBytes = options.maxInlineBytes ?? 1048576;
+	const maxBytes = options.maxBytes ?? 1048576;
+	const method = options.method?.toUpperCase();
+	await rejectOversizedContentLength(response, maxBytes, method);
+	if (method === "HEAD") return responseEnvelope(response, contentType);
+	if (!options.forceArtifact && shouldInline(response, mimeType)) {
+		const inline = await readInlineCandidate(response, {
+			maxInlineBytes,
+			maxBytes
+		});
+		if (!inline.exceeded) return responseEnvelope(response, contentType, parseHttpBody(contentType, new TextDecoder().decode(inline.bytes)));
+		return responseEnvelope(response, contentType, { artifact: await writeResponseArtifact(response, options, mimeType, inline.bytes) });
+	}
+	return responseEnvelope(response, contentType, { artifact: await writeResponseArtifact(response, options, mimeType, await readBoundedBytes(response, maxBytes)) });
+}
+async function readInlineCandidate(response, options) {
+	if (!response.body) return {
+		bytes: Buffer.alloc(0),
+		exceeded: false
+	};
+	const reader = response.body.getReader();
+	const chunks = [];
+	let bytes = 0;
+	let exceeded = false;
+	while (true) {
+		const { done, value } = await reader.read();
+		if (done) break;
+		if (value) {
+			bytes += value.byteLength;
+			if (bytes > options.maxBytes) {
+				await reader.cancel();
+				throw responseExceededLimit(options.maxBytes);
+			}
+			if (bytes > options.maxInlineBytes) exceeded = true;
+			chunks.push(value);
+		}
+	}
+	return {
+		bytes: Buffer.concat(chunks),
+		exceeded
+	};
+}
+async function readBoundedBytes(response, maxBytes) {
+	if (!response.body) return Buffer.alloc(0);
+	const reader = response.body.getReader();
+	const chunks = [];
+	let bytes = 0;
+	while (true) {
+		const { done, value } = await reader.read();
+		if (done) break;
+		if (value) {
+			bytes += value.byteLength;
+			if (bytes > maxBytes) {
+				await reader.cancel();
+				throw responseExceededLimit(maxBytes);
+			}
+			chunks.push(value);
+		}
+	}
+	return Buffer.concat(chunks);
+}
+async function rejectOversizedContentLength(response, maxBytes, method) {
+	if (method === "HEAD") return;
+	const contentLength = response.headers.get("content-length");
+	if (!contentLength) return;
+	const byteLength = Number.parseInt(contentLength, 10);
+	if (Number.isFinite(byteLength) && byteLength > maxBytes) {
+		await response.body?.cancel().catch(() => {});
+		throw responseExceededLimit(maxBytes);
+	}
+}
+function responseExceededLimit(maxBytes) {
+	return new CapletsError("DOWNSTREAM_PROTOCOL_ERROR", `HTTP response exceeded byte limit ${maxBytes}`);
+}
+async function writeResponseArtifact(response, options, mimeType, bytes) {
+	return await writeMediaArtifact({
+		capletId: options.capletId,
+		...options.artifactDir ? { rootDir: options.artifactDir } : {},
+		...response.ok && options.outputPath ? { outputPath: options.outputPath } : {},
+		...options.exposeLocalPath === false ? { exposeLocalPath: false } : {},
+		suggestedFilename: options.filename ?? filenameFromContentDisposition(response) ?? "response.bin",
+		...mimeType ? { mimeType } : {},
+		bytes
+	});
+}
+function responseEnvelope(response, contentType, body) {
+	return {
+		status: response.status,
+		statusText: response.statusText,
+		headers: { "content-type": contentType },
+		...body === void 0 ? {} : { body }
+	};
+}
+function shouldInline(response, mimeType) {
+	if (isAttachment(response)) return false;
+	return mimeType === "" || mimeType === "application/json" || mimeType.endsWith("+json") || mimeType.endsWith("/json") || mimeType.startsWith("text/");
+}
+function isAttachment(response) {
+	return /\battachment\b/iu.test(response.headers.get("content-disposition") ?? "");
+}
+function mimeFromContentType(contentType) {
+	return contentType.split(";")[0]?.toLowerCase().trim() ?? "";
+}
+function filenameFromContentDisposition(response) {
+	const contentDisposition = response.headers.get("content-disposition");
+	if (!contentDisposition) return;
+	return parseRfc5987Filename(contentDisposition) ?? parseQuotedFilename(contentDisposition);
+}
+function parseRfc5987Filename(contentDisposition) {
+	const value = /(?:^|;)\s*filename\*=([^;]+)/iu.exec(contentDisposition)?.[1]?.trim();
+	if (!value) return;
+	const encoded = value.replace(/^UTF-8''/iu, "");
+	try {
+		return decodeURIComponent(encoded.replace(/^"|"$/gu, ""));
+	} catch {
+		return encoded;
+	}
+}
+function parseQuotedFilename(contentDisposition) {
+	const quoted = /(?:^|;)\s*filename="([^"]+)"/iu.exec(contentDisposition)?.[1];
+	if (quoted) return quoted;
+	return /(?:^|;)\s*filename=([^;]+)/iu.exec(contentDisposition)?.[1]?.trim();
+}
+//#endregion
+//#region src/google-discovery/manager.ts
+const DEFAULT_RESUMABLE_THRESHOLD_BYTES = 8 * 1024 * 1024;
+const DEFAULT_MEDIA_RESPONSE_MAX_BYTES = 100 * 1024 * 1024;
+const DEFAULT_DISCOVERY_DOCUMENT_MAX_BYTES = 20 * 1024 * 1024;
+var GoogleDiscoveryManager = class {
+	registry;
+	options;
+	cache = /* @__PURE__ */ new Map();
+	constructor(registry, options = {}) {
+		this.registry = registry;
+		this.options = options;
+	}
+	updateRegistry(registry) {
+		this.registry = registry;
+	}
+	invalidate(serverId) {
+		this.cache.delete(serverId);
+	}
+	async checkApi(api) {
+		const startedAt = Date.now();
+		try {
+			const operations = await this.refreshOperations(api, true);
+			this.registry.setStatus(api.server, "available");
+			return {
+				id: api.server,
+				status: "available",
+				toolCount: operations.length,
+				elapsedMs: Date.now() - startedAt
+			};
+		} catch (error) {
+			const safe = toSafeError(error, "SERVER_UNAVAILABLE");
+			this.registry.setStatus(api.server, "unavailable", safe);
+			return {
+				id: api.server,
+				status: "unavailable",
+				elapsedMs: Date.now() - startedAt,
+				error: safe
+			};
+		}
+	}
+	async listTools(api) {
+		return (await this.refreshOperations(api, false)).map((operation) => this.toTool(operation));
+	}
+	async getTool(api, toolName) {
+		return this.toTool(await this.getOperation(api, toolName));
+	}
+	async callTool(api, toolName, args) {
+		const operation = await this.getOperation(api, toolName);
+		const requestApi = await this.resolveRequestApi(api);
+		if (operation.supportsMediaUpload && "media" in args) return this.callMediaUpload(requestApi, operation, args);
+		const url = buildGoogleDiscoveryUrl(requestApi, operation, shouldRequestMediaDownload(operation, args) ? withMediaDownloadQuery(args) : args);
+		const init = buildJsonRequestInit(operation, args, new Headers(await authHeaders$2(requestApi, this.options.authDir, operation.scopes)));
+		const controller = new AbortController();
+		const timeout = setTimeout(() => controller.abort(), requestApi.requestTimeoutMs);
+		try {
+			const response = await fetch(url, {
+				...init,
+				signal: controller.signal
+			});
+			if (response.status >= 300 && response.status < 400) throw new CapletsError("DOWNSTREAM_PROTOCOL_ERROR", "Google Discovery request returned a redirect", {
+				server: requestApi.server,
+				status: response.status,
+				location: response.headers.get("location") ? "[REDACTED]" : void 0
+			});
+			if (response.status === 401 || response.status === 403) throw googleAuthError(requestApi, response);
+			const parsed = await readHttpLikeResponse(response, {
+				capletId: requestApi.server,
+				method: operation.method,
+				...this.options.artifactDir ? { artifactDir: this.options.artifactDir } : {},
+				...this.options.exposeLocalArtifactPaths === false ? { exposeLocalPath: false } : {},
+				...typeof args.filename === "string" ? { filename: args.filename } : {},
+				...typeof args.outputPath === "string" ? { outputPath: args.outputPath } : {},
+				maxBytes: DEFAULT_MEDIA_RESPONSE_MAX_BYTES,
+				...operation.supportsMediaDownload && (typeof args.filename === "string" || typeof args.outputPath === "string") ? { forceArtifact: true } : {}
+			});
+			return {
+				content: markdownStructuredContent(parsed, {
+					title: `${requestApi.name} call_tool ${toolName}`,
+					backend: "googleDiscovery",
+					operation: "call_tool",
+					tool: toolName
+				}),
+				structuredContent: parsed,
+				isError: !response.ok
+			};
+		} catch (error) {
+			if (isAbortError(error)) throw new CapletsError("TOOL_CALL_TIMEOUT", `Google Discovery request timed out for ${requestApi.server}/${toolName}`);
+			if (error instanceof CapletsError) throw error;
+			throw new CapletsError("DOWNSTREAM_TOOL_ERROR", `Google Discovery request failed for ${requestApi.server}/${toolName}`, toSafeError(error));
+		} finally {
+			clearTimeout(timeout);
+		}
+	}
+	async callMediaUpload(api, operation, args) {
+		const mediaOptions = {};
+		if (this.options.artifactDir) mediaOptions.artifactRoot = this.options.artifactDir;
+		if (this.options.exposeLocalArtifactPaths === false) mediaOptions.allowLocalPaths = false;
+		const media = await readMediaInput(args.media, mediaOptions);
+		const headers = new Headers(await authHeaders$2(api, this.options.authDir, operation.scopes));
+		const protocol = selectUploadProtocol(operation, media, args);
+		const controller = new AbortController();
+		const timeout = setTimeout(() => controller.abort(), api.requestTimeoutMs);
+		try {
+			const response = protocol === "resumable" ? await this.callResumableUpload(api, operation, args, media, headers, controller.signal) : await this.callSingleUpload(api, operation, args, media, headers, protocol, controller.signal);
+			const parsed = await readHttpLikeResponse(response, {
+				capletId: api.server,
+				method: operation.method,
+				...this.options.artifactDir ? { artifactDir: this.options.artifactDir } : {},
+				...this.options.exposeLocalArtifactPaths === false ? { exposeLocalPath: false } : {}
+			});
+			return {
+				content: markdownStructuredContent(parsed, {
+					title: `${api.name} call_tool ${operation.name}`,
+					backend: "googleDiscovery",
+					operation: "call_tool",
+					tool: operation.name
+				}),
+				structuredContent: parsed,
+				isError: !response.ok
+			};
+		} catch (error) {
+			if (isAbortError(error)) throw new CapletsError("TOOL_CALL_TIMEOUT", `Google Discovery request timed out for ${api.server}/${operation.name}`);
+			if (error instanceof CapletsError) throw error;
+			throw new CapletsError("DOWNSTREAM_TOOL_ERROR", `Google Discovery request failed for ${api.server}/${operation.name}`, toSafeError(error));
+		} finally {
+			clearTimeout(timeout);
+		}
+	}
+	async callSingleUpload(api, operation, args, media, headers, protocol, signal) {
+		const upload = operation.mediaUploadProtocols[protocol];
+		if (!upload?.path) throw new CapletsError("CONFIG_INVALID", `Google Discovery ${protocol} upload path is missing`);
+		return fetchGoogleRequest(api, operation, buildGoogleDiscoveryUploadUrl(api, operation, upload.path, protocol === "simple" ? "media" : "multipart", args), protocol === "simple" ? simpleUploadInit(operation, media, headers) : multipartUploadInit(operation, args.body, media, headers), { signal });
+	}
+	async callResumableUpload(api, operation, args, media, headers, signal) {
+		const upload = operation.mediaUploadProtocols.resumable;
+		if (!upload?.path) throw new CapletsError("CONFIG_INVALID", "Google Discovery resumable upload path is missing");
+		const contentType = safeMediaContentType(media.mimeType);
+		const startUrl = buildGoogleDiscoveryUploadUrl(api, operation, upload.path, "resumable", args);
+		headers.set("content-type", "application/json; charset=UTF-8");
+		headers.set("x-upload-content-type", contentType);
+		headers.set("x-upload-content-length", String(media.bytes.byteLength));
+		const started = await fetchGoogleRequest(api, operation, startUrl, {
+			method: operation.method.toUpperCase(),
+			headers,
+			body: JSON.stringify(args.body ?? {}),
+			redirect: "manual"
+		}, { signal });
+		if (!started.ok) return started;
+		const location = started.headers.get("location");
+		if (!location) throw new CapletsError("DOWNSTREAM_PROTOCOL_ERROR", "Google resumable upload missing Location");
+		const uploadUrl = new URL(location);
+		const uploadHeaders = new Headers();
+		uploadHeaders.set("content-type", contentType);
+		uploadHeaders.set("content-length", String(media.bytes.byteLength));
+		uploadHeaders.set("content-range", resumableContentRange(media.bytes.byteLength));
+		copySessionAuthorization(api, startUrl, uploadUrl, headers, uploadHeaders);
+		return fetchGoogleRequest(api, operation, uploadUrl, {
+			method: "PUT",
+			headers: uploadHeaders,
+			body: media.bytes,
+			redirect: "manual"
+		}, { signal });
+	}
+	compact(_api, tool) {
+		return {
+			name: tool.name,
+			...tool.description ? { description: tool.description } : {},
+			hasInputSchema: Boolean(tool.inputSchema),
+			hasOutputSchema: Boolean(tool.outputSchema),
+			supportsFields: Boolean(tool.outputSchema),
+			...compactToolSelectionHints(tool),
+			...compactToolSchemaHints(tool),
+			...compactToolSafetyHints(tool)
+		};
+	}
+	search(api, tools, query, limit) {
+		return searchToolList(tools, query, limit, (tool) => this.compact(api, tool));
+	}
+	async resolveAuthScopes(api) {
+		return googleDiscoveryScopesForOperations(await this.refreshOperations(api, false));
+	}
+	async getOperation(api, toolName) {
+		const operations = await this.refreshOperations(api, false);
+		const operation = operations.find((candidate) => candidate.name === toolName);
+		if (!operation) throw new CapletsError("TOOL_NOT_FOUND", `Tool ${toolName} was not found on ${api.server}`, {
+			server: api.server,
+			tool: toolName,
+			suggestions: operations.map((candidate) => candidate.name).filter((name) => name.toLocaleLowerCase().includes(toolName.toLocaleLowerCase()[0] ?? "")).slice(0, 5)
+		});
+		return operation;
+	}
+	async refreshOperations(api, force) {
+		const cached = this.cache.get(api.server);
+		const cacheKey = googleDiscoveryCacheKey(api);
+		const now = Date.now();
+		const isFresh = cached?.operations && cached.cacheKey === cacheKey && cached.fetchedAt !== void 0 && api.operationCacheTtlMs > 0 && now - cached.fetchedAt <= api.operationCacheTtlMs;
+		if (!force && isFresh) return cached.operations ?? [];
+		try {
+			const document = await loadGoogleDiscoveryDocument(api, this.options.authDir);
+			const baseUrl = googleDiscoveryBaseUrl(api, document);
+			const operations = discoveryOperations({
+				server: api.server,
+				document,
+				...api.includeOperations ? { includeOperations: api.includeOperations } : {},
+				...api.excludeOperations ? { excludeOperations: api.excludeOperations } : {}
+			});
+			this.cache.set(api.server, {
+				operations,
+				...baseUrl ? { baseUrl } : {},
+				fetchedAt: Date.now(),
+				cacheKey
+			});
+			this.registry.setStatus(api.server, "available");
+			return operations;
+		} catch (error) {
+			const safe = toSafeError(error, "DOWNSTREAM_PROTOCOL_ERROR");
+			this.registry.setStatus(api.server, "unavailable", safe);
+			throw new CapletsError(safe.code, `Could not load Google Discovery operations for ${api.server}`, safe);
+		}
+	}
+	toTool(operation) {
+		return {
+			name: operation.name,
+			...operation.description ? { description: operation.description } : {},
+			inputSchema: operation.inputSchema,
+			...operation.outputSchema ? { outputSchema: operation.outputSchema } : {},
+			annotations: {
+				readOnlyHint: operation.readOnlyHint,
+				destructiveHint: operation.destructiveHint
+			}
+		};
+	}
+	async resolveBaseUrl(api) {
+		await this.refreshOperations(api, false);
+		return this.cache.get(api.server)?.baseUrl;
+	}
+	async resolveRequestApi(api) {
+		if (api.baseUrl) return api;
+		const baseUrl = await this.resolveBaseUrl(api);
+		if (!baseUrl) throw new CapletsError("CONFIG_INVALID", `${api.server} is missing Google Discovery baseUrl`);
+		return {
+			...api,
+			baseUrl
+		};
+	}
+};
+function selectUploadProtocol(operation, media, args) {
+	if (media.bytes.byteLength > DEFAULT_RESUMABLE_THRESHOLD_BYTES && operation.mediaUploadProtocols.resumable) return "resumable";
+	if ("body" in args) {
+		if (operation.mediaUploadProtocols.multipart) return "multipart";
+		if (operation.mediaUploadProtocols.resumable) return "resumable";
+		throw new CapletsError("CONFIG_INVALID", "Google Discovery media upload metadata requires multipart or resumable upload");
+	}
+	if (operation.mediaUploadProtocols.simple) return "simple";
+	if (operation.mediaUploadProtocols.resumable) return "resumable";
+	throw new CapletsError("CONFIG_INVALID", "Google Discovery media upload has no supported protocol");
+}
+function simpleUploadInit(operation, media, headers) {
+	headers.set("content-type", safeMediaContentType(media.mimeType));
+	headers.set("content-length", String(media.bytes.byteLength));
+	return {
+		method: operation.method.toUpperCase(),
+		headers,
+		body: media.bytes,
+		redirect: "manual"
+	};
+}
+function multipartUploadInit(operation, body, media, headers) {
+	const boundary = `caplets_${randomUUID().replace(/-/gu, "")}`;
+	const contentType = safeMediaContentType(media.mimeType);
+	const payload = Buffer.concat([
+		Buffer.from(`--${boundary}\r\ncontent-type: application/json; charset=UTF-8\r\n\r\n${JSON.stringify(body ?? {})}\r\n`),
+		Buffer.from(`--${boundary}\r\ncontent-type: ${contentType}\r\n\r\n`),
+		media.bytes,
+		Buffer.from(`\r\n--${boundary}--\r\n`)
+	]);
+	headers.set("content-type", `multipart/related; boundary=${boundary}`);
+	headers.set("content-length", String(payload.byteLength));
+	return {
+		method: operation.method.toUpperCase(),
+		headers,
+		body: payload,
+		redirect: "manual"
+	};
+}
+function resumableContentRange(byteLength) {
+	return byteLength === 0 ? "bytes */0" : `bytes 0-${byteLength - 1}/${byteLength}`;
+}
+function safeMediaContentType(mimeType) {
+	const contentType = mimeType ?? "application/octet-stream";
+	if (/[\r\n]/u.test(contentType)) throw new CapletsError("REQUEST_INVALID", "media.mimeType must not contain line breaks");
+	return contentType;
+}
+function googleDiscoveryBaseUrl(api, document) {
+	if (api.baseUrl) return api.baseUrl;
+	if (document.baseUrl) return document.baseUrl;
+	if (document.rootUrl && document.servicePath) return new URL(document.servicePath, document.rootUrl).toString();
+}
+async function fetchGoogleRequest(api, operation, url, init, options = {}) {
+	const controller = options.signal ? void 0 : new AbortController();
+	const timeout = controller ? setTimeout(() => controller.abort(), api.requestTimeoutMs) : void 0;
+	try {
+		const response = await fetch(url, {
+			...init,
+			signal: options.signal ?? controller.signal
+		});
+		if (response.status >= 300 && response.status < 400) throw new CapletsError("DOWNSTREAM_PROTOCOL_ERROR", "Google Discovery request returned a redirect", {
+			server: api.server,
+			status: response.status,
+			location: response.headers.get("location") ? "[REDACTED]" : void 0
+		});
+		if (response.status === 401 || response.status === 403) throw googleAuthError(api, response);
+		return response;
+	} catch (error) {
+		if (isAbortError(error)) throw new CapletsError("TOOL_CALL_TIMEOUT", `Google Discovery request timed out for ${api.server}/${operation.name}`);
+		throw error;
+	} finally {
+		if (timeout) clearTimeout(timeout);
+	}
+}
+async function loadGoogleDiscoveryDocument(api, authDir) {
+	const source = await loadGoogleDiscoverySource(api, authDir);
+	let parsed;
+	try {
+		parsed = JSON.parse(source);
+	} catch (error) {
+		throw new CapletsError("DOWNSTREAM_PROTOCOL_ERROR", "Google Discovery document is not JSON", {
+			server: api.server,
+			error: error instanceof Error ? error.message : String(error)
+		});
+	}
+	if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new CapletsError("DOWNSTREAM_PROTOCOL_ERROR", "Google Discovery document is not an object");
+	return parsed;
+}
+async function loadGoogleDiscoverySource(api, authDir) {
+	if (api.discoveryPath) return readFile(api.discoveryPath, "utf8");
+	if (!api.discoveryUrl) throw new CapletsError("CONFIG_INVALID", `${api.server} is missing Google Discovery document source`);
+	return fetchDiscoverySource(api, await discoveryAuthHeaders(api, authDir));
+}
+async function fetchDiscoverySource(api, headers) {
+	const controller = new AbortController();
+	const timeout = setTimeout(() => controller.abort(), api.requestTimeoutMs);
+	try {
+		const response = await fetch(api.discoveryUrl, {
+			headers,
+			redirect: "manual",
+			signal: controller.signal
+		});
+		if (response.status >= 300 && response.status < 400) throw new CapletsError("DOWNSTREAM_PROTOCOL_ERROR", "Google Discovery document request returned a redirect");
+		if (!response.ok) throw new CapletsError("DOWNSTREAM_PROTOCOL_ERROR", "Google Discovery document request failed", { status: response.status });
+		return await readLimitedText(response, {
+			maxBytes: DEFAULT_DISCOVERY_DOCUMENT_MAX_BYTES,
+			errorMessage: "Google Discovery document exceeded byte limit"
+		});
+	} catch (error) {
+		if (isAbortError(error)) throw new CapletsError("TOOL_CALL_TIMEOUT", "Google Discovery document request timed out");
+		throw error;
+	} finally {
+		clearTimeout(timeout);
+	}
+}
+async function discoveryAuthHeaders(api, authDir) {
+	if (api.auth.type === "none") return {};
+	if (api.auth.type === "oauth2" || api.auth.type === "oidc") {
+		const protectedOrigin = discoveryProtectedResourceOrigin(api, authDir);
+		if (!protectedOrigin || !shouldSendDiscoveryAuth(api, protectedOrigin)) return {};
+		const bundle = readTokenBundle(api.server, authDir);
+		if (!bundle?.accessToken && !bundle?.refreshToken) return {};
+		return genericOAuthHeaders({
+			...api,
+			baseUrl: protectedOrigin
+		}, authDir);
+	}
+	if (!api.baseUrl || !shouldSendDiscoveryAuth(api, new URL(api.baseUrl).origin)) return {};
+	return authHeaders$2(api, authDir);
+}
+async function authHeaders$2(api, authDir, resolvedScopes) {
+	switch (api.auth.type) {
+		case "none": return {};
+		case "bearer": return { authorization: `Bearer ${api.auth.token}` };
+		case "headers": return api.auth.headers;
+		case "oauth2":
+		case "oidc": return genericOAuthHeaders({
+			...api,
+			resolvedScopes
+		}, authDir);
+	}
+}
+function discoveryProtectedResourceOrigin(api, authDir) {
+	if (api.baseUrl) return new URL(api.baseUrl).origin;
+	return readTokenBundle(api.server, authDir)?.protectedResourceOrigin;
+}
+function copySessionAuthorization(api, startUrl, uploadUrl, source, target) {
+	const authorization = source.get("authorization");
+	if (!authorization || !isAllowedUploadSessionOrigin(api, startUrl, uploadUrl)) return;
+	target.set("authorization", authorization);
+}
+function isAllowedUploadSessionOrigin(api, startUrl, uploadUrl) {
+	if (uploadUrl.origin === startUrl.origin) return true;
+	if (api.baseUrl && uploadUrl.origin === new URL(api.baseUrl).origin) return true;
+	return isGoogleApiOrigin(uploadUrl);
+}
+function isGoogleApiOrigin(url) {
+	return url.protocol === "https:" && url.hostname.endsWith(".googleapis.com");
+}
+function shouldRequestMediaDownload(operation, args) {
+	return operation.supportsMediaDownload && (typeof args.filename === "string" || typeof args.outputPath === "string");
+}
+function withMediaDownloadQuery(args) {
+	const query = args.query && typeof args.query === "object" && !Array.isArray(args.query) ? args.query : {};
+	return {
+		...args,
+		query: {
+			...query,
+			alt: "media"
+		}
+	};
+}
+function googleAuthError(api, response) {
+	return new CapletsError(response.status === 401 ? "AUTH_REQUIRED" : "AUTH_FAILED", "Google Discovery authentication failed", {
+		server: api.server,
+		status: response.status,
+		message: response.statusText,
+		authType: api.auth.type,
+		challenge: response.headers.get("www-authenticate") ? "[REDACTED]" : void 0,
+		...api.auth.type === "oauth2" || api.auth.type === "oidc" ? { nextAction: "run_caplets_auth_login" } : {}
+	});
+}
+function shouldSendDiscoveryAuth(api, protectedResourceOrigin) {
+	return Boolean(api.discoveryUrl && new URL(api.discoveryUrl).origin === protectedResourceOrigin);
+}
+function googleDiscoveryCacheKey(api) {
+	return JSON.stringify({
+		discoveryPath: api.discoveryPath,
+		discoveryUrl: api.discoveryUrl,
+		baseUrl: api.baseUrl,
+		includeOperations: api.includeOperations,
+		excludeOperations: api.excludeOperations
+	});
+}
+//#endregion
 //#region ../../node_modules/.pnpm/graphql@16.14.2/node_modules/graphql/version.js
 var require_version = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });
@@ -48092,7 +49538,7 @@ var require_utilities = /* @__PURE__ */ __commonJSMin(((exports) => {
 	var _resolveSchemaCoordinate = require_resolveSchemaCoordinate();
 }));
 //#endregion
-//#region src/http/utils.ts
+//#region src/graphql.ts
 var import_graphql = (/* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });
 	Object.defineProperty(exports, "BREAK", {
@@ -49394,40 +50840,6 @@ var import_graphql = (/* @__PURE__ */ __commonJSMin(((exports) => {
 	var _index5 = require_error();
 	var _index6 = require_utilities();
 })))();
-function parseHttpBody(contentType, text) {
-	if (!text) return;
-	const mime = contentType.split(";")[0]?.toLowerCase().trim() ?? "";
-	if (mime !== "application/json" && !mime.endsWith("+json") && !mime.endsWith("/json")) return text;
-	try {
-		return JSON.parse(text);
-	} catch {
-		return text;
-	}
-}
-async function readLimitedText(response, options) {
-	if (!response.body) return "";
-	const reader = response.body.getReader();
-	const chunks = [];
-	let bytes = 0;
-	while (true) {
-		const { done, value } = await reader.read();
-		if (done) break;
-		if (value) {
-			bytes += value.byteLength;
-			if (bytes > (options.maxBytes ?? 1048576)) {
-				await reader.cancel();
-				throw new CapletsError("DOWNSTREAM_PROTOCOL_ERROR", options.errorMessage);
-			}
-			chunks.push(value);
-		}
-	}
-	return new TextDecoder().decode(Buffer.concat(chunks));
-}
-function isAbortError(error) {
-	return error instanceof DOMException && error.name === "AbortError";
-}
-//#endregion
-//#region src/graphql.ts
 const GRAPHQL_METHOD = "POST";
 const SCALAR_JSON_SCHEMA = {
 	String: { type: "string" },
@@ -49931,7 +51343,17 @@ var HttpActionManager = class {
 				status: response.status,
 				location: response.headers.get("location") ? "[REDACTED]" : void 0
 			});
-			const parsed = await readResponse$1(response, api, Date.now() - startedAt);
+			const parsed = {
+				...await readHttpLikeResponse(response, {
+					capletId: api.server,
+					method: operation.method,
+					...this.options.artifactDir ? { artifactDir: this.options.artifactDir } : {},
+					...this.options.exposeLocalArtifactPaths === false ? { exposeLocalPath: false } : {},
+					maxInlineBytes: this.options.maxInlineBytes ?? api.maxResponseBytes,
+					maxBytes: api.maxResponseBytes
+				}),
+				elapsedMs: Date.now() - startedAt
+			};
 			return {
 				content: markdownStructuredContent(parsed, {
 					title: `${api.name} call_tool ${toolName}`,
@@ -50097,23 +51519,6 @@ async function authHeaders$1(api, authDir) {
 		}, authDir);
 	}
 }
-async function readResponse$1(response, api, elapsedMs) {
-	const contentType = response.headers.get("content-type") ?? "";
-	const body = parseHttpBody(contentType, await readLimitedText(response, {
-		maxBytes: maxResponseBytes(api),
-		errorMessage: "HTTP action response exceeded byte limit"
-	}));
-	return {
-		status: response.status,
-		statusText: response.statusText,
-		headers: { "content-type": contentType },
-		...body === void 0 ? {} : { body },
-		elapsedMs
-	};
-}
-function maxResponseBytes(api) {
-	return api.maxResponseBytes;
-}
 function validateBaseUrl(api) {
 	if (!isAllowedRemoteUrl(api.baseUrl)) throw new CapletsError("CONFIG_INVALID", `${api.server} HTTP API baseUrl is not allowed`);
 	const url = new URL(api.baseUrl);
@@ -59853,6 +61258,7 @@ const HTTP_METHODS = [
 	"patch",
 	"trace"
 ];
+const DEFAULT_OPENAPI_RESPONSE_MAX_BYTES = 100 * 1024 * 1024;
 const JSON_CONTENT_TYPES = ["application/json"];
 const FORBIDDEN_ARGUMENT_HEADERS = new Set([
 	"accept",
@@ -59939,7 +61345,13 @@ var OpenApiManager = class {
 				challenge: response.headers.get("www-authenticate") ? "[REDACTED]" : void 0,
 				...endpoint.auth.type === "oauth2" || endpoint.auth.type === "oidc" ? { nextAction: "run_caplets_auth_login" } : {}
 			});
-			const parsed = await readResponse(response);
+			const parsed = await readHttpLikeResponse(response, {
+				capletId: endpoint.server,
+				method: operation.method,
+				...this.options.artifactDir ? { artifactDir: this.options.artifactDir } : {},
+				...this.options.exposeLocalArtifactPaths === false ? { exposeLocalPath: false } : {},
+				maxBytes: DEFAULT_OPENAPI_RESPONSE_MAX_BYTES
+			});
 			return {
 				content: markdownStructuredContent(parsed, {
 					title: `${endpoint.name} call_tool ${toolName}`,
@@ -60268,16 +61680,6 @@ async function authHeaders(endpoint, authDir) {
 function shouldSendSpecAuth(endpoint) {
 	return Boolean(endpoint.specUrl && endpoint.baseUrl && new URL(endpoint.specUrl).origin === new URL(endpoint.baseUrl).origin);
 }
-async function readResponse(response) {
-	const contentType = response.headers.get("content-type") ?? "";
-	const body = parseHttpBody(contentType, await readLimitedText(response, { errorMessage: "OpenAPI response exceeded byte limit" }));
-	return {
-		status: response.status,
-		statusText: response.statusText,
-		headers: { "content-type": contentType },
-		...body === void 0 ? {} : { body }
-	};
-}
 async function fetchWithLimit(url, timeoutMs, headers = {}) {
 	const controller = new AbortController();
 	const timeout = setTimeout(() => controller.abort(), timeoutMs);
@@ -60342,7 +61744,7 @@ var ServerRegistry = class {
 		return this.allCaplets().filter((server) => !server.disabled);
 	}
 	get(serverId) {
-		const server = this.config.mcpServers[serverId] ?? this.config.openapiEndpoints[serverId] ?? this.config.graphqlEndpoints[serverId] ?? this.config.httpApis[serverId] ?? this.config.cliTools[serverId] ?? this.config.capletSets[serverId];
+		const server = this.config.mcpServers[serverId] ?? this.config.openapiEndpoints[serverId] ?? this.config.googleDiscoveryApis?.[serverId] ?? this.config.graphqlEndpoints[serverId] ?? this.config.httpApis[serverId] ?? this.config.cliTools[serverId] ?? this.config.capletSets[serverId];
 		return server?.disabled ? void 0 : server;
 	}
 	require(serverId) {
@@ -60388,6 +61790,7 @@ var ServerRegistry = class {
 		return [
 			...Object.values(this.config.mcpServers),
 			...Object.values(this.config.openapiEndpoints),
+			...Object.values(this.config.googleDiscoveryApis ?? {}),
 			...Object.values(this.config.graphqlEndpoints),
 			...Object.values(this.config.httpApis),
 			...Object.values(this.config.cliTools),
@@ -60403,6 +61806,13 @@ function backendDetail(server) {
 		operationCacheTtlMs: server.operationCacheTtlMs,
 		source: server.specPath ? "specPath" : "specUrl"
 	};
+	if (server.backend === "googleDiscovery") return {
+		type: "googleDiscovery",
+		disabled: server.disabled,
+		requestTimeoutMs: server.requestTimeoutMs,
+		operationCacheTtlMs: server.operationCacheTtlMs,
+		source: googleDiscoverySource(server)
+	};
 	if (server.backend === "graphql") return {
 		type: "graphql",
 		disabled: server.disabled,
@@ -60439,6 +61849,9 @@ function backendDetail(server) {
 		toolCacheTtlMs: server.toolCacheTtlMs
 	};
 }
+function googleDiscoverySource(server) {
+	return server.discoveryPath ? "discoveryPath" : "discoveryUrl";
+}
 function capletSetSource(server) {
 	return server.configPath && server.capletsRoot ? "both" : server.configPath ? "configPath" : "capletsRoot";
 }
@@ -60560,14 +61973,14 @@ const ajv = new import_ajv.default({
 });
 const compiledValidators = /* @__PURE__ */ new WeakMap();
 const MAX_SCHEMA_ERRORS = 8;
-async function handleServerTool(server, request, registry, downstream, openapi, graphql, http, cli, caplets, options = {}) {
+async function handleServerTool(server, request, registry, downstream, openapi, graphql, http, cli, caplets, options = {}, googleDiscovery) {
 	const startedAt = Date.now();
 	const parsed = validateOperationRequest(request, registry.config.options.maxSearchLimit, server.backend);
 	switch (parsed.operation) {
 		case "inspect": return jsonResult(registry.detail(server), metadataFor(server, "inspect", void 0, startedAt));
-		case "check": return jsonResult(await backendFor(server, downstream, openapi, graphql, http, cli, caplets).check(server), metadataFor(server, "check", void 0, startedAt));
+		case "check": return jsonResult(await backendFor(server, downstream, openapi, graphql, http, cli, caplets, googleDiscovery).check(server), metadataFor(server, "check", void 0, startedAt));
 		case "tools": {
-			const backend = backendFor(server, downstream, openapi, graphql, http, cli, caplets);
+			const backend = backendFor(server, downstream, openapi, graphql, http, cli, caplets, googleDiscovery);
 			const page = pageItems((await backend.listTools(server)).map((tool) => backend.compact(server, tool)), parsed, registry.config.options.maxSearchLimit);
 			return jsonResult({
 				id: server.server,
@@ -60576,7 +61989,7 @@ async function handleServerTool(server, request, registry, downstream, openapi,
 			}, metadataFor(server, "tools", void 0, startedAt));
 		}
 		case "search_tools": {
-			const backend = backendFor(server, downstream, openapi, graphql, http, cli, caplets);
+			const backend = backendFor(server, downstream, openapi, graphql, http, cli, caplets, googleDiscovery);
 			const tools = await backend.listTools(server);
 			const limit = parsed.limit ?? registry.config.options.defaultSearchLimit;
 			const page = pageItems(backend.search(server, tools, parsed.query, limit), parsed, registry.config.options.maxSearchLimit);
@@ -60588,7 +62001,7 @@ async function handleServerTool(server, request, registry, downstream, openapi,
 			}, metadataFor(server, "search_tools", void 0, startedAt));
 		}
 		case "describe_tool": {
-			const tool = await backendFor(server, downstream, openapi, graphql, http, cli, caplets).getTool(server, parsed.name);
+			const tool = await backendFor(server, downstream, openapi, graphql, http, cli, caplets, googleDiscovery).getTool(server, parsed.name);
 			const observedOutputShape = await readObservedOutputShape(options, server, parsed.name, tool.outputSchema);
 			return jsonResult({
 				id: server.server,
@@ -60598,7 +62011,7 @@ async function handleServerTool(server, request, registry, downstream, openapi,
 			}, metadataFor(server, "describe_tool", parsed.name, startedAt));
 		}
 		case "call_tool": {
-			const backend = backendFor(server, downstream, openapi, graphql, http, cli, caplets);
+			const backend = backendFor(server, downstream, openapi, graphql, http, cli, caplets, googleDiscovery);
 			const tool = await maybeGetToolForValidation(backend, server, parsed.name);
 			validateToolArgsForAgent(tool, parsed.name, parsed.args);
 			if (parsed.fields === void 0) {
@@ -61156,6 +62569,7 @@ function projectCallToolResult(result, outputSchema, fields, context = {}) {
 	if (result.isError === true) return result;
 	const structuredContent = result.structuredContent;
 	if (!isPlainObject$2(structuredContent)) throw new CapletsError("DOWNSTREAM_PROTOCOL_ERROR", "Field selection requires the downstream tool to return object structuredContent");
+	if (hasArtifactPlaceholderForSelectedFields(structuredContent, fields)) throw new CapletsError("REQUEST_INVALID", "Field selection cannot project from an artifact response. Retry without fields and read the returned artifact.");
 	const projected = projectStructuredContent(structuredContent, outputSchema, fields);
 	return {
 		...result,
@@ -61163,10 +62577,19 @@ function projectCallToolResult(result, outputSchema, fields, context = {}) {
 		structuredContent: projected
 	};
 }
+function hasArtifactPlaceholderForSelectedFields(structuredContent, fields) {
+	const body = structuredContent.body;
+	return isPlainObject$2(body) && isPlainObject$2(body.artifact) && isArtifactPlaceholder(body.artifact) && fields.some((field) => field === "body" || field.startsWith("body."));
+}
+function isArtifactPlaceholder(value) {
+	return typeof value.uri === "string" && value.uri.startsWith("caplets://artifacts/") && typeof value.byteLength === "number" && typeof value.sha256 === "string";
+}
 function extractArtifacts(result) {
-	if (!isPlainObject$2(result) || !Array.isArray(result.content)) return [];
+	if (!isPlainObject$2(result)) return [];
 	const artifacts = [];
 	const seen = /* @__PURE__ */ new Set();
+	addStructuredArtifact(artifacts, seen, result.structuredContent);
+	if (!Array.isArray(result.content)) return artifacts;
 	for (const item of result.content) {
 		if (!isPlainObject$2(item) || item.type !== "text" || typeof item.text !== "string") continue;
 		const text = item.text;
@@ -61195,6 +62618,21 @@ function extractArtifacts(result) {
 	}
 	return artifacts;
 }
+function addStructuredArtifact(artifacts, seen, structuredContent) {
+	if (!isPlainObject$2(structuredContent)) return;
+	const body = structuredContent.body;
+	if (!isPlainObject$2(body) || !isPlainObject$2(body.artifact)) return;
+	const path = typeof body.artifact.path === "string" ? body.artifact.path : void 0;
+	const uri = typeof body.artifact.uri === "string" ? body.artifact.uri : void 0;
+	const displayPath = path ?? uri;
+	if (!displayPath || seen.has(displayPath)) return;
+	seen.add(displayPath);
+	artifacts.push({
+		kind: "file",
+		displayPath,
+		pathResolution: path ? "absolute" : "relative-to-mcp-server"
+	});
+}
 function parseMarkdownLinks(text) {
 	const links = [];
 	let index = 0;
@@ -61286,7 +62724,7 @@ function artifactKindFromText(text) {
 function isPlainObject$2(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
-function backendFor(server, downstream, openapi, graphql, http, cli, caplets) {
+function backendFor(server, downstream, openapi, graphql, http, cli, caplets, googleDiscovery) {
 	if (server.backend === "mcp") return {
 		check: (...args) => downstream.checkServer(...args),
 		listTools: (...args) => downstream.listTools(...args),
@@ -61295,6 +62733,17 @@ function backendFor(server, downstream, openapi, graphql, http, cli, caplets) {
 		compact: (...args) => downstream.compact(...args),
 		search: (...args) => downstream.search(...args)
 	};
+	if (server.backend === "googleDiscovery") {
+		if (!googleDiscovery) throw new CapletsError("INTERNAL_ERROR", "Google Discovery manager is not configured");
+		return {
+			check: (...args) => googleDiscovery.checkApi(...args),
+			listTools: (...args) => googleDiscovery.listTools(...args),
+			getTool: (...args) => googleDiscovery.getTool(...args),
+			callTool: (...args) => googleDiscovery.callTool(...args),
+			compact: (...args) => googleDiscovery.compact(...args),
+			search: (...args) => googleDiscovery.search(...args)
+		};
+	}
 	if (server.backend === "graphql") {
 		if (!graphql) throw new CapletsError("INTERNAL_ERROR", "GraphQL manager is not configured");
 		return {
@@ -61419,7 +62868,7 @@ var CapletSetManager = class CapletSetManager {
 			suggestions: nearbyCapletNames(child.registry.enabledServers(), toolName)
 		});
 		try {
-			return await handleServerTool(caplet, args, child.registry, child.downstream, child.openapi, child.graphql, child.http, child.cli, child.capletSets);
+			return await handleServerTool(caplet, args, child.registry, child.downstream, child.openapi, child.graphql, child.http, child.cli, child.capletSets, {}, child.googleDiscovery);
 		} catch (error) {
 			return errorResult(error);
 		}
@@ -61468,17 +62917,22 @@ var CapletSetManager = class CapletSetManager {
 				defaultSearchLimit: config.defaultSearchLimit,
 				maxSearchLimit: config.maxSearchLimit
 			}));
-			const authOptions = this.options.authDir ? { authDir: this.options.authDir } : {};
+			const sharedOptions = {
+				...this.options.authDir ? { authDir: this.options.authDir } : {},
+				...this.options.artifactDir ? { artifactDir: this.options.artifactDir } : {},
+				...this.options.exposeLocalArtifactPaths === false ? { exposeLocalArtifactPaths: false } : {}
+			};
 			const childAncestry = new Set([...ancestry, cacheKey]);
 			child = {
 				registry,
-				downstream: new DownstreamManager(registry, authOptions),
-				openapi: new OpenApiManager(registry, authOptions),
-				graphql: new GraphQLManager(registry, authOptions),
-				http: new HttpActionManager(registry, authOptions),
+				downstream: new DownstreamManager(registry, sharedOptions),
+				openapi: new OpenApiManager(registry, sharedOptions),
+				graphql: new GraphQLManager(registry, sharedOptions),
+				http: new HttpActionManager(registry, sharedOptions),
 				cli: new CliToolsManager(registry),
+				googleDiscovery: new GoogleDiscoveryManager(registry, sharedOptions),
 				capletSets: new CapletSetManager(registry, {
-					...authOptions,
+					...sharedOptions,
 					ancestry: childAncestry
 				}),
 				cacheKey,
@@ -61777,6 +63231,7 @@ var CapletsEngine = class {
 	registry;
 	downstream;
 	openapi;
+	googleDiscovery;
 	graphql;
 	http;
 	cli;
@@ -61806,11 +63261,12 @@ var CapletsEngine = class {
 		const config = this.configLoader(this.paths.configPath, this.paths.projectConfigPath);
 		this.registry = new ServerRegistry(config);
 		this.downstream = new DownstreamManager(this.registry, selectAuthOptions(options.authDir));
-		this.openapi = new OpenApiManager(this.registry, selectAuthOptions(options.authDir));
+		this.openapi = new OpenApiManager(this.registry, selectHttpLikeOptions(options));
+		this.googleDiscovery = new GoogleDiscoveryManager(this.registry, selectHttpLikeOptions(options));
 		this.graphql = new GraphQLManager(this.registry, selectAuthOptions(options.authDir));
-		this.http = new HttpActionManager(this.registry, selectAuthOptions(options.authDir));
+		this.http = new HttpActionManager(this.registry, selectHttpLikeOptions(options));
 		this.cli = new CliToolsManager(this.registry);
-		this.capletSets = new CapletSetManager(this.registry, selectAuthOptions(options.authDir));
+		this.capletSets = new CapletSetManager(this.registry, selectHttpLikeOptions(options));
 		this.watchDebounceMs = options.watchDebounceMs ?? 250;
 		this.watchEnabled = options.watch ?? true;
 		this.writeErr = options.writeErr ?? ((value) => process.stderr.write(value));
@@ -61874,7 +63330,7 @@ var CapletsEngine = class {
 				observedOutputShapeStore: this.observedOutputShapeStore,
 				observedOutputShapeScope: this.observedOutputShapeScope,
 				projectFingerprint: this.projectFingerprint
-			});
+			}, this.googleDiscovery);
 		} catch (error) {
 			return errorResult(error);
 		}
@@ -61906,7 +63362,7 @@ var CapletsEngine = class {
 		}
 	}
 	async completeCliWords(words) {
-		const { completeCliWords } = await import("./completion-DnQujlrc.js").then((n) => n.r);
+		const { completeCliWords } = await import("./completion-BC4BNWo0.js").then((n) => n.r);
 		return await completeCliWords(words, {
 			config: this.registry.config,
 			managers: {
@@ -61957,16 +63413,16 @@ var CapletsEngine = class {
 		}
 	}
 	async listCompletionTools(server) {
-		return (server.backend === "mcp" ? await this.downstream.listTools(server) : server.backend === "openapi" ? await this.openapi.listTools(server) : server.backend === "graphql" ? await this.graphql.listTools(server) : server.backend === "http" ? await this.http.listTools(server) : server.backend === "cli" ? await this.cli.listTools(server) : await this.capletSets.listTools(server)).map((tool) => ({
+		return (server.backend === "mcp" ? await this.downstream.listTools(server) : server.backend === "openapi" ? await this.openapi.listTools(server) : server.backend === "googleDiscovery" ? await this.googleDiscovery.listTools(server) : server.backend === "graphql" ? await this.graphql.listTools(server) : server.backend === "http" ? await this.http.listTools(server) : server.backend === "cli" ? await this.cli.listTools(server) : await this.capletSets.listTools(server)).map((tool) => ({
 			name: tool.name,
 			...tool.description ? { description: tool.description } : {}
 		}));
 	}
 	async listTools(server) {
-		return server.backend === "mcp" ? await this.downstream.listTools(server) : server.backend === "openapi" ? await this.openapi.listTools(server) : server.backend === "graphql" ? await this.graphql.listTools(server) : server.backend === "http" ? await this.http.listTools(server) : server.backend === "cli" ? await this.cli.listTools(server) : await this.capletSets.listTools(server);
+		return server.backend === "mcp" ? await this.downstream.listTools(server) : server.backend === "openapi" ? await this.openapi.listTools(server) : server.backend === "googleDiscovery" ? await this.googleDiscovery.listTools(server) : server.backend === "graphql" ? await this.graphql.listTools(server) : server.backend === "http" ? await this.http.listTools(server) : server.backend === "cli" ? await this.cli.listTools(server) : await this.capletSets.listTools(server);
 	}
 	async callTool(server, toolName, args) {
-		return server.backend === "mcp" ? await this.downstream.callTool(server, toolName, args) : server.backend === "openapi" ? await this.openapi.callTool(server, toolName, args) : server.backend === "graphql" ? await this.graphql.callTool(server, toolName, args) : server.backend === "http" ? await this.http.callTool(server, toolName, args) : server.backend === "cli" ? await this.cli.callTool(server, toolName, args) : await this.capletSets.callTool(server, toolName, args);
+		return server.backend === "mcp" ? await this.downstream.callTool(server, toolName, args) : server.backend === "openapi" ? await this.openapi.callTool(server, toolName, args) : server.backend === "googleDiscovery" ? await this.googleDiscovery.callTool(server, toolName, args) : server.backend === "graphql" ? await this.graphql.callTool(server, toolName, args) : server.backend === "http" ? await this.http.callTool(server, toolName, args) : server.backend === "cli" ? await this.cli.callTool(server, toolName, args) : await this.capletSets.callTool(server, toolName, args);
 	}
 	async optionalMcpList(caplet, list) {
 		try {
@@ -61992,6 +63448,7 @@ var CapletsEngine = class {
 		this.registry = nextRegistry;
 		this.downstream.updateRegistry(nextRegistry);
 		this.openapi.updateRegistry(nextRegistry);
+		this.googleDiscovery.updateRegistry(nextRegistry);
 		this.graphql.updateRegistry(nextRegistry);
 		this.http.updateRegistry(nextRegistry);
 		this.cli.updateRegistry(nextRegistry);
@@ -62045,6 +63502,7 @@ var CapletsEngine = class {
 			if (!(serializeCaplet(before) !== serializeCaplet(after))) continue;
 			if (before?.backend === "mcp") await this.downstream.closeServer(serverId);
 			if (before?.backend === "openapi" || after?.backend === "openapi" || !after) this.openapi.invalidate(serverId);
+			if (before?.backend === "googleDiscovery" || after?.backend === "googleDiscovery" || !after) this.googleDiscovery.invalidate(serverId);
 			if (before?.backend === "graphql" || after?.backend === "graphql" || !after) this.graphql.invalidate(serverId);
 			if (before?.backend === "http" || after?.backend === "http" || !after) this.http.invalidate(serverId);
 			if (before?.backend === "cli" || after?.backend === "cli" || !after) this.cli.invalidate(serverId);
@@ -62104,6 +63562,13 @@ var CapletsEngine = class {
 function selectAuthOptions(authDir) {
 	return authDir ? { authDir } : {};
 }
+function selectHttpLikeOptions(options) {
+	return {
+		...selectAuthOptions(options.authDir),
+		...options.artifactDir ? { artifactDir: options.artifactDir } : {},
+		...options.exposeLocalArtifactPaths === false ? { exposeLocalArtifactPaths: false } : {}
+	};
+}
 function safeProjectFingerprint() {
 	try {
 		return fingerprintProjectRoot(findProjectRoot());
@@ -62146,6 +63611,7 @@ function allCaplets(config) {
 	return [
 		...Object.values(config.mcpServers),
 		...Object.values(config.openapiEndpoints),
+		...Object.values(config.googleDiscoveryApis ?? {}),
 		...Object.values(config.graphqlEndpoints),
 		...Object.values(config.httpApis),
 		...Object.values(config.cliTools),
@@ -62243,7 +63709,7 @@ function capletHintText(caplet) {
 	].filter((value) => Boolean(value)).join(" ");
 }
 function minifyCodeModeDeclarationText(value) {
-	return value.replace(/^\s*export\s*\{\s*\}\s*;?\s*/u, "").replace(/\r\n?/gu, "\n").split("\n").map((line) => line.trim()).filter(Boolean).join(" ").replace(/\s+/gu, " ").replace(/\s*([{}()[\]:;,|&=])\s*/gu, "$1").replace(/\s*<\s*/gu, "<").replace(/\s*>\s*/gu, ">").replace(/\?\s*:/gu, "?:").trim();
+	return value.replace(/^\s*export\s*\{\s*\}\s*;?\s*/u, "").replace(/\s*export\s*\{\s*\}\s*;?\s*$/u, "").replace(/\r\n?/gu, "\n").split("\n").map((line) => line.trim()).filter(Boolean).join(" ").replace(/\s+/gu, " ").replace(/\s*([{}()[\]:;,|&=])\s*/gu, "$1").replace(/\s*<\s*/gu, "<").replace(/\s*>\s*/gu, ">").replace(/\?\s*:/gu, "?:").trim();
 }
 function codeModeDeclarationHash(declaration) {
 	return [
@@ -62869,6 +64335,9 @@ function isPlainObject$1(value) {
 	return Boolean(value && typeof value === "object" && !Array.isArray(value));
 }
 //#endregion
+//#region src/code-mode/diagnostics-builtins.generated.ts
+const CODE_MODE_DIAGNOSTICS_BUILTINS_DECLARATION = "type CodeModeBufferEncoding=\"utf8\"|\"utf-8\"|\"base64\"|\"base64url\"|\"hex\";interface CodeModeBuffer{readonly byteLength:number;readonly length:number;toString(encoding?:CodeModeBufferEncoding):string;toUint8Array():Uint8Array;}interface CodeModeBufferConstructor{from(input:string|ArrayLike<number>|ArrayBuffer|ArrayBufferView|CodeModeBuffer,encoding?:CodeModeBufferEncoding,):CodeModeBuffer;isBuffer(value:unknown):value is CodeModeBuffer;byteLength(input:string|ArrayLike<number>|ArrayBuffer|ArrayBufferView|CodeModeBuffer,encoding?:CodeModeBufferEncoding,):number;}declare const Buffer:CodeModeBufferConstructor;declare function atob(input:string):string;declare function btoa(input:string):string;type CodeModeURLSearchParamsInit=|string|Array<[string,string]>|Record<string,string>|URLSearchParams;declare class URLSearchParams{constructor(init?:CodeModeURLSearchParamsInit);append(name:string,value:string):void;delete(name:string):void;entries():IterableIterator<[string,string]>;forEach(callback:(value:string,key:string,parent:URLSearchParams)=>void):void;get(name:string):string|null;getAll(name:string):string[];has(name:string):boolean;keys():IterableIterator<string>;set(name:string,value:string):void;toString():string;values():IterableIterator<string>;[Symbol.iterator]():IterableIterator<[string,string]>;}declare class URL{constructor(input:string|URL,base?:string|URL);readonly hash:string;readonly host:string;readonly hostname:string;readonly href:string;readonly origin:string;readonly password:string;readonly pathname:string;readonly port:string;readonly protocol:string;readonly search:string;readonly searchParams:URLSearchParams;readonly username:string;toJSON():string;toString():string;}declare class TextEncoder{readonly encoding:\"utf-8\";encode(input?:string):Uint8Array;}declare class TextDecoder{readonly encoding:\"utf-8\";constructor(label?:string);decode(input?:ArrayBuffer|ArrayBufferView):string;}interface CodeModeCrypto{randomUUID():string;getRandomValues<T extends ArrayBufferView>(typedArray:T):T;}declare const crypto:CodeModeCrypto;declare function structuredClone<T>(value:T):T;type CodeModeHeadersInit=Headers|Record<string,string>|Array<[string,string]>;declare class Headers{constructor(init?:CodeModeHeadersInit);append(name:string,value:string):void;delete(name:string):void;entries():IterableIterator<[string,string]>;forEach(callback:(value:string,key:string,parent:Headers)=>void):void;get(name:string):string|null;has(name:string):boolean;keys():IterableIterator<string>;set(name:string,value:string):void;values():IterableIterator<string>;[Symbol.iterator]():IterableIterator<[string,string]>;}type CodeModeBlobPart=string|ArrayBuffer|ArrayBufferView|Blob;type CodeModeEndingType=\"transparent\"|\"native\";declare class Blob{constructor(parts?:CodeModeBlobPart[],options?:{type?:string;endings?:CodeModeEndingType},);readonly size:number;readonly type:string;arrayBuffer():Promise<ArrayBuffer>;slice(start?:number,end?:number,type?:string):Blob;text():Promise<string>;}declare class File extends Blob{constructor(parts:CodeModeBlobPart[],name:string,options?:{type?:string;lastModified?:number},);readonly lastModified:number;readonly name:string;}declare class FormData{constructor();append(name:string,value:string|Blob,filename?:string):void;delete(name:string):void;entries():IterableIterator<[string,string|File]>;get(name:string):string|File|null;getAll(name:string):Array<string|File>;has(name:string):boolean;keys():IterableIterator<string>;set(name:string,value:string|Blob,filename?:string):void;values():IterableIterator<string|File>;[Symbol.iterator]():IterableIterator<[string,string|File]>;}type CodeModeReadableStreamReadResult<T>=|{done:false;value:T}|{done:true;value?:undefined};interface ReadableStreamDefaultController<T>{enqueue(value:T):void;close():void;}interface ReadableStreamDefaultReader<T>{read():Promise<CodeModeReadableStreamReadResult<T>>;}declare class ReadableStream<T=unknown>{constructor(source?:{start?:(controller:ReadableStreamDefaultController<T>)=>void});getReader():ReadableStreamDefaultReader<T>;}interface WritableStreamDefaultWriter<T>{write(chunk:T):Promise<void>;close():Promise<void>;}declare class WritableStream<T=unknown>{constructor(sink?:{write?:(chunk:T)=>unknown;close?:()=>unknown});getWriter():WritableStreamDefaultWriter<T>;}interface TransformStreamDefaultController<T>{enqueue(value:T):void;}declare class TransformStream<I=unknown,O=unknown>{constructor(transformer?:{transform?:(chunk:I,controller:TransformStreamDefaultController<O>)=>void;flush?:(controller:ReadableStreamDefaultController<O>)=>void;});readonly readable:ReadableStream<O>;readonly writable:WritableStream<I>;}type CodeModeAbortListener=(event:{type:\"abort\";target:AbortSignal})=>void;declare class AbortSignal{readonly aborted:boolean;readonly reason:unknown;onabort:CodeModeAbortListener|null;addEventListener(type:\"abort\",listener:CodeModeAbortListener|null):void;removeEventListener(type:\"abort\",listener:CodeModeAbortListener|null):void;dispatchEvent(event:{type:\"abort\";target:AbortSignal}):boolean;throwIfAborted():void;static abort(reason?:unknown):AbortSignal;}declare class AbortController{readonly signal:AbortSignal;abort(reason?:unknown):void;}type CodeModeBodyInit=Blob|FormData|string|ArrayBuffer|ArrayBufferView|null|undefined;interface Body{readonly body:null;readonly bodyUsed:boolean;arrayBuffer():Promise<ArrayBuffer>;blob():Promise<Blob>;formData():Promise<FormData>;json():Promise<unknown>;text():Promise<string>;}declare class Request implements Body{constructor(input:string|URL|Request,init?:{method?:string;headers?:CodeModeHeadersInit;body?:CodeModeBodyInit;signal?:AbortSignal;},);readonly body:null;readonly bodyUsed:boolean;readonly headers:Headers;readonly method:string;readonly signal:AbortSignal;readonly url:string;arrayBuffer():Promise<ArrayBuffer>;blob():Promise<Blob>;clone():Request;formData():Promise<FormData>;json():Promise<unknown>;text():Promise<string>;}declare class Response implements Body{constructor(body?:CodeModeBodyInit,init?:{headers?:CodeModeHeadersInit;status?:number;statusText?:string},);readonly body:null;readonly bodyUsed:boolean;readonly headers:Headers;readonly ok:boolean;readonly redirected:false;readonly status:number;readonly statusText:string;readonly type:\"default\";readonly url:\"\";arrayBuffer():Promise<ArrayBuffer>;blob():Promise<Blob>;clone():Response;formData():Promise<FormData>;json():Promise<unknown>;text():Promise<string>;static json(data:unknown,init?:{headers?:CodeModeHeadersInit;status?:number;statusText?:string},):Response;}declare function queueMicrotask(callback:()=>void):void;type CodeModeTimerHandler=(...args:unknown[])=>void;declare function setTimeout(callback:CodeModeTimerHandler,delay?:number,...args:unknown[]):number;declare function clearTimeout(timerId:number):void;declare function setInterval(callback:CodeModeTimerHandler,delay?:number,...args:unknown[]):number;declare function clearInterval(timerId:number):void;";
+//#endregion
 //#region src/code-mode/static-analysis.ts
 var import_lib = (/* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });
@@ -75461,7 +76930,7 @@ const PARSER_OPTIONS = {
 	]
 };
 function hasDirectFetchCall(code) {
-	return hasMatchingAstNode(code, (node) => isCallExpression(node) && isFetchCallee(node.callee));
+	return hasMatchingAstNode(code, isDirectFetchCallNode);
 }
 function hasExecutableImport(code) {
 	return hasMatchingAstNode(code, isExecutableImportNode);
@@ -75470,9 +76939,9 @@ function hasMatchingAstNode(code, predicate) {
 	const ast = parseCode(code);
 	if (!ast) return false;
 	let found = false;
-	visitAst(ast, (node) => {
+	visitAst(ast, (node, parent) => {
 		if (found) return;
-		found = predicate(node);
+		found = predicate(node, parent);
 	});
 	return found;
 }
@@ -75490,11 +76959,10 @@ function isExecutableImportNode(node) {
 function isCallExpression(node) {
 	return (node.type === "CallExpression" || node.type === "OptionalCallExpression") && "callee" in node;
 }
-function isFetchCallee(value) {
-	if (!isNode(value)) return false;
-	if (value.type === "Identifier") return value.name === "fetch";
-	if (value.type === "MemberExpression" || value.type === "OptionalMemberExpression") return isGlobalFetchMember(value);
-	return false;
+function isDirectFetchCallNode(node) {
+	if (!isCallExpression(node) || !isNode(node.callee)) return false;
+	if (isIdentifierNamed(node.callee, "fetch")) return true;
+	return (node.callee.type === "MemberExpression" || node.callee.type === "OptionalMemberExpression") && isGlobalFetchMember(node.callee);
 }
 function isGlobalFetchMember(node) {
 	if (!isIdentifierNamed(node.object, "globalThis", "window", "self")) return false;
@@ -75504,16 +76972,22 @@ function isGlobalFetchMember(node) {
 function isExportDeclaration(node) {
 	return node.type === "ExportAllDeclaration" || node.type === "ExportDefaultDeclaration" || node.type === "ExportNamedDeclaration";
 }
-function visitAst(value, visit) {
+function visitAst(value, visit, parent) {
 	if (!isNode(value)) return;
-	visit(value);
+	visit(value, parent);
 	for (const [key, child] of Object.entries(value)) {
 		if (key === "loc" || key === "start" || key === "end" || key === "extra") continue;
 		if (Array.isArray(child)) {
-			for (const item of child) visitAst(item, visit);
+			for (const item of child) visitAst(item, visit, {
+				node: value,
+				key
+			});
 			continue;
 		}
-		visitAst(child, visit);
+		visitAst(child, visit, {
+			node: value,
+			key
+		});
 	}
 }
 function isNode(value) {
@@ -75557,7 +77031,7 @@ function diagnoseCodeModeTypeScript(input) {
 	const host = createVirtualCompilerHost(compilerOptions, {
 		[CODE_FILE]: wrappedCode,
 		[DECLARATION_FILE]: input.declaration,
-		[AMBIENT_FILE]: ambientDeclarations()
+		[AMBIENT_FILE]: CODE_MODE_DIAGNOSTICS_BUILTINS_DECLARATION
 	});
 	const program = ts.createProgram([
 		CODE_FILE,
@@ -75603,7 +77077,7 @@ function preflightDiagnostics(code) {
 	if (hasDirectFetchCall(code)) diagnostics.push({
 		code: "FETCH_UNAVAILABLE",
 		severity: "error",
-		message: "Direct fetch is not available in Code Mode; use a Caplet instead."
+		message: "Direct fetch is not available in Code Mode; use a Caplet instead. Cannot find name 'fetch'."
 	});
 	return diagnostics;
 }
@@ -75640,24 +77114,83 @@ function formatDiagnostic(diagnostic, syntacticDiagnostic = false) {
 		} : {}
 	};
 }
-function ambientDeclarations() {
-	return [
-		"declare class URL {",
-		"  constructor(input: string, base?: string);",
-		"  readonly href: string;",
-		"  readonly searchParams: URLSearchParams;",
-		"  toString(): string;",
-		"}",
-		"declare class URLSearchParams {",
-		"  constructor(init?: string | Record<string, string> | Array<[string, string]>);",
-		"  get(name: string): string | null;",
-		"  set(name: string, value: string): void;",
-		"  has(name: string): boolean;",
-		"  toString(): string;",
-		"}"
-	].join("\n");
+//#endregion
+//#region src/code-mode/platform-host.ts
+const MAX_RANDOM_VALUES_BYTES = 65536;
+function installCodeModePlatformHost(context, pendingDeferreds, _options) {
+	const timers = /* @__PURE__ */ new Map();
+	const randomUuidBridge = context.newFunction("__caplets_platform_random_uuid", () => {
+		return context.newString(randomUUID());
+	});
+	context.setProp(context.global, "__caplets_platform_random_uuid", randomUuidBridge);
+	randomUuidBridge.dispose();
+	const randomValuesBridge = context.newFunction("__caplets_platform_random_values", (lengthHandle) => {
+		const length = context.dump(lengthHandle);
+		if (!Number.isSafeInteger(length) || length < 0) return context.newError("Random byte length must be a non-negative safe integer");
+		if (length > MAX_RANDOM_VALUES_BYTES) return context.newError("Random byte length cannot exceed 65,536 bytes");
+		return numberArrayHandle(context, [...randomBytes(length)]);
+	});
+	context.setProp(context.global, "__caplets_platform_random_values", randomValuesBridge);
+	randomValuesBridge.dispose();
+	const sleepBridge = context.newFunction("__caplets_platform_sleep", (timerIdHandle, delayHandle) => {
+		const timerId = context.dump(timerIdHandle);
+		const delayMs = context.dump(delayHandle);
+		const deferred = context.newPromise();
+		pendingDeferreds.add(deferred);
+		deferred.settled.finally(() => pendingDeferreds.delete(deferred));
+		const timeout = setTimeout(() => {
+			timers.delete(timerId);
+			resolveTimer(context, deferred, true);
+		}, Math.max(0, Number(delayMs) || 0));
+		const existing = timers.get(timerId);
+		if (existing) {
+			clearTimeout(existing.timeout);
+			resolveTimer(context, existing.deferred, false);
+		}
+		timers.set(timerId, {
+			deferred,
+			timeout
+		});
+		return deferred.handle;
+	});
+	context.setProp(context.global, "__caplets_platform_sleep", sleepBridge);
+	sleepBridge.dispose();
+	const clearTimerBridge = context.newFunction("__caplets_platform_clear_timer", (timerIdHandle) => {
+		const timerId = context.dump(timerIdHandle);
+		const timer = timers.get(timerId);
+		if (!timer) return context.false;
+		timers.delete(timerId);
+		clearTimeout(timer.timeout);
+		resolveTimer(context, timer.deferred, false);
+		return context.true;
+	});
+	context.setProp(context.global, "__caplets_platform_clear_timer", clearTimerBridge);
+	clearTimerBridge.dispose();
+	return { dispose() {
+		for (const timer of timers.values()) {
+			clearTimeout(timer.timeout);
+			resolveTimer(context, timer.deferred, false);
+		}
+		timers.clear();
+	} };
+}
+function numberArrayHandle(context, values) {
+	const arrayHandle = context.newArray();
+	for (let index = 0; index < values.length; index += 1) {
+		const valueHandle = context.newNumber(values[index] ?? 0);
+		context.setProp(arrayHandle, index, valueHandle);
+		valueHandle.dispose();
+	}
+	return arrayHandle;
+}
+function resolveTimer(context, deferred, fired) {
+	if (!deferred.alive) return;
+	deferred.resolve(fired ? context.true : context.false);
 }
 //#endregion
+//#region src/code-mode/platform-runtime.generated.ts
+const CODE_MODE_PLATFORM_RUNTIME_SOURCE = "(function() {\n	//#region node_modules/.pnpm/@ungap+structured-clone@1.3.1/node_modules/@ungap/structured-clone/esm/deserialize.js\n	const env = typeof self === \"object\" ? self : globalThis;\n	const guard = (name, init) => {\n		switch (name) {\n			case \"Function\":\n			case \"SharedWorker\":\n			case \"Worker\":\n			case \"eval\":\n			case \"setInterval\":\n			case \"setTimeout\": throw new TypeError(\"unable to deserialize \" + name);\n		}\n		return new env[name](init);\n	};\n	const deserializer = ($, _) => {\n		const as = (out, index) => {\n			$.set(index, out);\n			return out;\n		};\n		const unpair = (index) => {\n			if ($.has(index)) return $.get(index);\n			const [type, value] = _[index];\n			switch (type) {\n				case 0:\n				case -1: return as(value, index);\n				case 1: {\n					const arr = as([], index);\n					for (const index of value) arr.push(unpair(index));\n					return arr;\n				}\n				case 2: {\n					const object = as({}, index);\n					for (const [key, index] of value) object[unpair(key)] = unpair(index);\n					return object;\n				}\n				case 3: return as(new Date(value), index);\n				case 4: {\n					const { source, flags } = value;\n					return as(new RegExp(source, flags), index);\n				}\n				case 5: {\n					const map = as(/* @__PURE__ */ new Map(), index);\n					for (const [key, index] of value) map.set(unpair(key), unpair(index));\n					return map;\n				}\n				case 6: {\n					const set = as(/* @__PURE__ */ new Set(), index);\n					for (const index of value) set.add(unpair(index));\n					return set;\n				}\n				case 7: {\n					const { name, message } = value;\n					return as(guard(name, message), index);\n				}\n				case 8: return as(BigInt(value), index);\n				case \"BigInt\": return as(Object(BigInt(value)), index);\n				case \"ArrayBuffer\": return as(new Uint8Array(value).buffer, value);\n				case \"DataView\": {\n					const { buffer } = new Uint8Array(value);\n					return as(new DataView(buffer), value);\n				}\n			}\n			return as(guard(type, value), index);\n		};\n		return unpair;\n	};\n	/**\n	* @typedef {Array<string,any>} Record a type representation\n	*/\n	/**\n	* Returns a deserialized value from a serialized array of Records.\n	* @param {Record[]} serialized a previously serialized value.\n	* @returns {any}\n	*/\n	const deserialize = (serialized) => deserializer(/* @__PURE__ */ new Map(), serialized)(0);\n	//#endregion\n	//#region node_modules/.pnpm/@ungap+structured-clone@1.3.1/node_modules/@ungap/structured-clone/esm/serialize.js\n	const EMPTY = \"\";\n	const { toString } = {};\n	const { keys } = Object;\n	const typeOf = (value) => {\n		const type = typeof value;\n		if (type !== \"object\" || !value) return [0, type];\n		const asString = toString.call(value).slice(8, -1);\n		switch (asString) {\n			case \"Array\": return [1, EMPTY];\n			case \"Object\": return [2, EMPTY];\n			case \"Date\": return [3, EMPTY];\n			case \"RegExp\": return [4, EMPTY];\n			case \"Map\": return [5, EMPTY];\n			case \"Set\": return [6, EMPTY];\n			case \"DataView\": return [1, asString];\n		}\n		if (asString.includes(\"Array\")) return [1, asString];\n		if (asString.includes(\"Error\")) return [7, asString];\n		return [2, asString];\n	};\n	const shouldSkip = ([TYPE, type]) => TYPE === 0 && (type === \"function\" || type === \"symbol\");\n	const serializer = (strict, json, $, _) => {\n		const as = (out, value) => {\n			const index = _.push(out) - 1;\n			$.set(value, index);\n			return index;\n		};\n		const pair = (value) => {\n			if ($.has(value)) return $.get(value);\n			let [TYPE, type] = typeOf(value);\n			switch (TYPE) {\n				case 0: {\n					let entry = value;\n					switch (type) {\n						case \"bigint\":\n							TYPE = 8;\n							entry = value.toString();\n							break;\n						case \"function\":\n						case \"symbol\":\n							if (strict) throw new TypeError(\"unable to serialize \" + type);\n							entry = null;\n							break;\n						case \"undefined\": return as([-1], value);\n					}\n					return as([TYPE, entry], value);\n				}\n				case 1: {\n					if (type) {\n						let spread = value;\n						if (type === \"DataView\") spread = new Uint8Array(value.buffer);\n						else if (type === \"ArrayBuffer\") spread = new Uint8Array(value);\n						return as([type, [...spread]], value);\n					}\n					const arr = [];\n					const index = as([TYPE, arr], value);\n					for (const entry of value) arr.push(pair(entry));\n					return index;\n				}\n				case 2: {\n					if (type) switch (type) {\n						case \"BigInt\": return as([type, value.toString()], value);\n						case \"Boolean\":\n						case \"Number\":\n						case \"String\": return as([type, value.valueOf()], value);\n					}\n					if (json && \"toJSON\" in value) return pair(value.toJSON());\n					const entries = [];\n					const index = as([TYPE, entries], value);\n					for (const key of keys(value)) if (strict || !shouldSkip(typeOf(value[key]))) entries.push([pair(key), pair(value[key])]);\n					return index;\n				}\n				case 3: return as([TYPE, value.toISOString()], value);\n				case 4: {\n					const { source, flags } = value;\n					return as([TYPE, {\n						source,\n						flags\n					}], value);\n				}\n				case 5: {\n					const entries = [];\n					const index = as([TYPE, entries], value);\n					for (const [key, entry] of value) if (strict || !(shouldSkip(typeOf(key)) || shouldSkip(typeOf(entry)))) entries.push([pair(key), pair(entry)]);\n					return index;\n				}\n				case 6: {\n					const entries = [];\n					const index = as([TYPE, entries], value);\n					for (const entry of value) if (strict || !shouldSkip(typeOf(entry))) entries.push(pair(entry));\n					return index;\n				}\n			}\n			const { message } = value;\n			return as([TYPE, {\n				name: type,\n				message\n			}], value);\n		};\n		return pair;\n	};\n	/**\n	* @typedef {Array<string,any>} Record a type representation\n	*/\n	/**\n	* Returns an array of serialized Records.\n	* @param {any} value a serializable value.\n	* @param {{json?: boolean, lossy?: boolean}?} options an object with a `lossy` or `json` property that,\n	*  if `true`, will not throw errors on incompatible types, and behave more\n	*  like JSON stringify would behave. Symbol and Function will be discarded.\n	* @returns {Record[]}\n	*/\n	const serialize = (value, { json, lossy } = {}) => {\n		const _ = [];\n		return serializer(!(json || lossy), !!json, /* @__PURE__ */ new Map(), _)(value), _;\n	};\n	//#endregion\n	//#region node_modules/.pnpm/@ungap+structured-clone@1.3.1/node_modules/@ungap/structured-clone/esm/index.js\n	/**\n	* @typedef {Array<string,any>} Record a type representation\n	*/\n	/**\n	* Returns an array of serialized Records.\n	* @param {any} any a serializable value.\n	* @param {{transfer?: any[], json?: boolean, lossy?: boolean}?} options an object with\n	* a transfer option (ignored when polyfilled) and/or non standard fields that\n	* fallback to the polyfill if present.\n	* @returns {Record[]}\n	*/\n	var esm_default = typeof structuredClone === \"function\" ? (any, options) => options && (\"json\" in options || \"lossy\" in options) ? deserialize(serialize(any, options)) : structuredClone(any) : (any, options) => deserialize(serialize(any, options));\n	//#endregion\n	//#region node_modules/.pnpm/formdata-node@6.0.3/node_modules/formdata-node/lib/form-data.js\n	var __accessCheck = (obj, member, msg) => {\n		if (!member.has(obj)) throw TypeError(\"Cannot \" + msg);\n	};\n	var __privateGet = (obj, member, getter) => {\n		__accessCheck(obj, member, \"read from private field\");\n		return getter ? getter.call(obj) : member.get(obj);\n	};\n	var __privateAdd = (obj, member, value) => {\n		if (member.has(obj)) throw TypeError(\"Cannot add the same private member more than once\");\n		member instanceof WeakSet ? member.add(obj) : member.set(obj, value);\n	};\n	var __privateSet = (obj, member, value, setter) => {\n		__accessCheck(obj, member, \"write to private field\");\n		setter ? setter.call(obj, value) : member.set(obj, value);\n		return value;\n	};\n	var __privateMethod = (obj, member, method) => {\n		__accessCheck(obj, member, \"access private method\");\n		return method;\n	};\n	var isFunction = (value) => typeof value === \"function\";\n	var isObject = (value) => typeof value === \"object\" && value != null && !Array.isArray(value);\n	var isAsyncIterable = (value) => isObject(value) && isFunction(value[Symbol.asyncIterator]);\n	var MAX_CHUNK_SIZE = 65536;\n	async function* clonePart(value) {\n		if (value.byteLength <= MAX_CHUNK_SIZE) {\n			yield value;\n			return;\n		}\n		let offset = 0;\n		while (offset < value.byteLength) {\n			const size = Math.min(value.byteLength - offset, MAX_CHUNK_SIZE);\n			const buffer = value.buffer.slice(offset, offset + size);\n			offset += buffer.byteLength;\n			yield new Uint8Array(buffer);\n		}\n	}\n	async function* readStream(readable) {\n		const reader = readable.getReader();\n		while (true) {\n			const { done, value } = await reader.read();\n			if (done) break;\n			yield value;\n		}\n	}\n	async function* chunkStream(stream) {\n		for await (const value of stream) yield* clonePart(value);\n	}\n	var getStreamIterator = (source) => {\n		if (isAsyncIterable(source)) return chunkStream(source);\n		if (isFunction(source.getReader)) return chunkStream(readStream(source));\n		throw new TypeError(\"Unsupported data source: Expected either ReadableStream or async iterable.\");\n	};\n	async function* consumeNodeBlob(blob) {\n		let position = 0;\n		while (position !== blob.size) {\n			const buffer = await blob.slice(position, Math.min(blob.size, position + MAX_CHUNK_SIZE)).arrayBuffer();\n			position += buffer.byteLength;\n			yield new Uint8Array(buffer);\n		}\n	}\n	async function* consumeBlobParts(parts, clone = false) {\n		for (const part of parts) if (ArrayBuffer.isView(part)) if (clone) yield* clonePart(part);\n		else yield part;\n		else if (isFunction(part.stream)) yield* getStreamIterator(part.stream());\n		else yield* consumeNodeBlob(part);\n	}\n	function* sliceBlob(blobParts, blobSize, start = 0, end) {\n		end ??= blobSize;\n		let relativeStart = start < 0 ? Math.max(blobSize + start, 0) : Math.min(start, blobSize);\n		let relativeEnd = end < 0 ? Math.max(blobSize + end, 0) : Math.min(end, blobSize);\n		const span = Math.max(relativeEnd - relativeStart, 0);\n		let added = 0;\n		for (const part of blobParts) {\n			if (added >= span) break;\n			const partSize = ArrayBuffer.isView(part) ? part.byteLength : part.size;\n			if (relativeStart && partSize <= relativeStart) {\n				relativeStart -= partSize;\n				relativeEnd -= partSize;\n			} else {\n				let chunk;\n				if (ArrayBuffer.isView(part)) {\n					chunk = part.subarray(relativeStart, Math.min(partSize, relativeEnd));\n					added += chunk.byteLength;\n				} else {\n					chunk = part.slice(relativeStart, Math.min(partSize, relativeEnd));\n					added += chunk.size;\n				}\n				relativeEnd -= partSize;\n				relativeStart = 0;\n				yield chunk;\n			}\n		}\n	}\n	var _parts, _type, _size;\n	var _Blob = class _Blob {\n		/**\n		* Returns a new [`Blob`](https://developer.mozilla.org/en-US/docs/Web/API/Blob) object.\n		* The content of the blob consists of the concatenation of the values given in the parameter array.\n		*\n		* @param blobParts An `Array` strings, or [`ArrayBuffer`](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/ArrayBuffer), [`ArrayBufferView`](https://developer.mozilla.org/en-US/docs/Web/API/ArrayBufferView), [`Blob`](https://developer.mozilla.org/en-US/docs/Web/API/Blob) objects, or a mix of any of such objects, that will be put inside the [`Blob`](https://developer.mozilla.org/en-US/docs/Web/API/Blob).\n		* @param options An optional object of type `BlobPropertyBag`.\n		*/\n		constructor(blobParts = [], options = {}) {\n			/**\n			* An `Array` of [`ArrayBufferView`](https://developer.mozilla.org/en-US/docs/Web/API/ArrayBufferView) or [`Blob`](https://developer.mozilla.org/en-US/docs/Web/API/Blob) objects, or a mix of any of such objects, that will be put inside the [`Blob`](https://developer.mozilla.org/en-US/docs/Web/API/Blob).\n			*/\n			__privateAdd(this, _parts, []);\n			/**\n			* Returns the [`MIME type`](https://developer.mozilla.org/en-US/docs/Glossary/MIME_type) of the [`Blob`](https://developer.mozilla.org/en-US/docs/Web/API/Blob) or [`File`](https://developer.mozilla.org/en-US/docs/Web/API/File).\n			*/\n			__privateAdd(this, _type, \"\");\n			/**\n			* Returns the size of the [`Blob`](https://developer.mozilla.org/en-US/docs/Web/API/Blob) or [`File`](https://developer.mozilla.org/en-US/docs/Web/API/File) in bytes.\n			*/\n			__privateAdd(this, _size, 0);\n			options ??= {};\n			if (typeof blobParts !== \"object\" || blobParts === null) throw new TypeError(\"Failed to construct 'Blob': The provided value cannot be converted to a sequence.\");\n			if (!isFunction(blobParts[Symbol.iterator])) throw new TypeError(\"Failed to construct 'Blob': The object must have a callable @@iterator property.\");\n			if (typeof options !== \"object\" && !isFunction(options)) throw new TypeError(\"Failed to construct 'Blob': parameter 2 cannot convert to dictionary.\");\n			const encoder = new TextEncoder();\n			for (const raw of blobParts) {\n				let part;\n				if (ArrayBuffer.isView(raw)) part = new Uint8Array(raw.buffer.slice(raw.byteOffset, raw.byteOffset + raw.byteLength));\n				else if (raw instanceof ArrayBuffer) part = new Uint8Array(raw.slice(0));\n				else if (raw instanceof _Blob) part = raw;\n				else part = encoder.encode(String(raw));\n				__privateSet(this, _size, __privateGet(this, _size) + (ArrayBuffer.isView(part) ? part.byteLength : part.size));\n				__privateGet(this, _parts).push(part);\n			}\n			const type = options.type === void 0 ? \"\" : String(options.type);\n			__privateSet(this, _type, /^[\\x20-\\x7E]*$/.test(type) ? type : \"\");\n		}\n		static [Symbol.hasInstance](value) {\n			return Boolean(value && typeof value === \"object\" && isFunction(value.constructor) && (isFunction(value.stream) || isFunction(value.arrayBuffer)) && /^(Blob|File)$/.test(value[Symbol.toStringTag]));\n		}\n		/**\n		* Returns the [`MIME type`](https://developer.mozilla.org/en-US/docs/Glossary/MIME_type) of the [`Blob`](https://developer.mozilla.org/en-US/docs/Web/API/Blob) or [`File`](https://developer.mozilla.org/en-US/docs/Web/API/File).\n		*/\n		get type() {\n			return __privateGet(this, _type);\n		}\n		/**\n		* Returns the size of the [`Blob`](https://developer.mozilla.org/en-US/docs/Web/API/Blob) or [`File`](https://developer.mozilla.org/en-US/docs/Web/API/File) in bytes.\n		*/\n		get size() {\n			return __privateGet(this, _size);\n		}\n		/**\n		* Creates and returns a new [`Blob`](https://developer.mozilla.org/en-US/docs/Web/API/Blob) object which contains data from a subset of the blob on which it's called.\n		*\n		* @param start An index into the Blob indicating the first byte to include in the new Blob. If you specify a negative value, it's treated as an offset from the end of the Blob toward the beginning. For example, -10 would be the 10th from last byte in the Blob. The default value is 0. If you specify a value for start that is larger than the size of the source Blob, the returned Blob has size 0 and contains no data.\n		* @param end An index into the Blob indicating the first byte that will *not* be included in the new Blob (i.e. the byte exactly at this index is not included). If you specify a negative value, it's treated as an offset from the end of the Blob toward the beginning. For example, -10 would be the 10th from last byte in the Blob. The default value is size.\n		* @param contentType The content type to assign to the new Blob; this will be the value of its type property. The default value is an empty string.\n		*/\n		slice(start, end, contentType) {\n			return new _Blob(sliceBlob(__privateGet(this, _parts), this.size, start, end), { type: contentType });\n		}\n		/**\n		* Returns a [`Promise`](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Promise) that resolves with a string containing the contents of the blob, interpreted as UTF-8.\n		*/\n		async text() {\n			const decoder = new TextDecoder();\n			let result = \"\";\n			for await (const chunk of consumeBlobParts(__privateGet(this, _parts))) result += decoder.decode(chunk, { stream: true });\n			result += decoder.decode();\n			return result;\n		}\n		/**\n		* Returns a [`Promise`](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Promise) that resolves with the contents of the blob as binary data contained in an [`ArrayBuffer`](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/ArrayBuffer).\n		*/\n		async arrayBuffer() {\n			const view = new Uint8Array(this.size);\n			let offset = 0;\n			for await (const chunk of consumeBlobParts(__privateGet(this, _parts))) {\n				view.set(chunk, offset);\n				offset += chunk.length;\n			}\n			return view.buffer;\n		}\n		/**\n		* Returns a [`ReadableStream`](https://developer.mozilla.org/en-US/docs/Web/API/ReadableStream) which upon reading returns the data contained within the [`Blob`](https://developer.mozilla.org/en-US/docs/Web/API/Blob).\n		*/\n		stream() {\n			const iterator = consumeBlobParts(__privateGet(this, _parts), true);\n			return new ReadableStream({\n				async pull(controller) {\n					const { value, done } = await iterator.next();\n					if (done) return queueMicrotask(() => controller.close());\n					controller.enqueue(value);\n				},\n				async cancel() {\n					await iterator.return();\n				}\n			});\n		}\n		get [Symbol.toStringTag]() {\n			return \"Blob\";\n		}\n	};\n	_parts = /* @__PURE__ */ new WeakMap();\n	_type = /* @__PURE__ */ new WeakMap();\n	_size = /* @__PURE__ */ new WeakMap();\n	var Blob = _Blob;\n	Object.defineProperties(Blob.prototype, {\n		type: { enumerable: true },\n		size: { enumerable: true },\n		slice: { enumerable: true },\n		stream: { enumerable: true },\n		text: { enumerable: true },\n		arrayBuffer: { enumerable: true }\n	});\n	var isBlob = (value) => value instanceof Blob;\n	var _name, _lastModified;\n	var File = class extends Blob {\n		/**\n		* Creates a new File instance.\n		*\n		* @param fileBits An `Array` strings, or [`ArrayBuffer`](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/ArrayBuffer), [`ArrayBufferView`](https://developer.mozilla.org/en-US/docs/Web/API/ArrayBufferView), [`Blob`](https://developer.mozilla.org/en-US/docs/Web/API/Blob) objects, or a mix of any of such objects, that will be put inside the [`File`](https://developer.mozilla.org/en-US/docs/Web/API/File).\n		* @param name The name of the file.\n		* @param options An options object containing optional attributes for the file.\n		*/\n		constructor(fileBits, name, options = {}) {\n			super(fileBits, options);\n			/**\n			* Returns the name of the file referenced by the File object.\n			*/\n			__privateAdd(this, _name, void 0);\n			/**\n			* The last modified date of the file as the number of milliseconds since the Unix epoch (January 1, 1970 at midnight). Files without a known last modified date return the current date.\n			*/\n			__privateAdd(this, _lastModified, 0);\n			if (arguments.length < 2) throw new TypeError(`Failed to construct 'File': 2 arguments required, but only ${arguments.length} present.`);\n			__privateSet(this, _name, String(name));\n			const lastModified = options.lastModified === void 0 ? Date.now() : Number(options.lastModified);\n			if (!Number.isNaN(lastModified)) __privateSet(this, _lastModified, lastModified);\n		}\n		static [Symbol.hasInstance](value) {\n			return value instanceof Blob && value[Symbol.toStringTag] === \"File\" && typeof value.name === \"string\";\n		}\n		/**\n		* Name of the file referenced by the File object.\n		*/\n		get name() {\n			return __privateGet(this, _name);\n		}\n		/* c8 ignore next 3 */\n		get webkitRelativePath() {\n			return \"\";\n		}\n		/**\n		* The last modified date of the file as the number of milliseconds since the Unix epoch (January 1, 1970 at midnight). Files without a known last modified date return the current date.\n		*/\n		get lastModified() {\n			return __privateGet(this, _lastModified);\n		}\n		get [Symbol.toStringTag]() {\n			return \"File\";\n		}\n	};\n	_name = /* @__PURE__ */ new WeakMap();\n	_lastModified = /* @__PURE__ */ new WeakMap();\n	var isFile = (value) => value instanceof File;\n	var _entries, _setEntry, setEntry_fn;\n	var FormData = class {\n		constructor() {\n			__privateAdd(this, _setEntry);\n			/**\n			* Stores internal data for every entry\n			*/\n			__privateAdd(this, _entries, /* @__PURE__ */ new Map());\n		}\n		static [Symbol.hasInstance](value) {\n			if (!value) return false;\n			const val = value;\n			return Boolean(isFunction(val.constructor) && val[Symbol.toStringTag] === \"FormData\" && isFunction(val.append) && isFunction(val.set) && isFunction(val.get) && isFunction(val.getAll) && isFunction(val.has) && isFunction(val.delete) && isFunction(val.entries) && isFunction(val.values) && isFunction(val.keys) && isFunction(val[Symbol.iterator]) && isFunction(val.forEach));\n		}\n		/**\n		* Appends a new value onto an existing key inside a FormData object,\n		* or adds the key if it does not already exist.\n		*\n		* The difference between `set()` and `append()` is that if the specified key already exists, `set()` will overwrite all existing values with the new one, whereas `append()` will append the new value onto the end of the existing set of values.\n		*\n		* @param name The name of the field whose data is contained in `value`.\n		* @param value The field's value. This can be [`Blob`](https://developer.mozilla.org/en-US/docs/Web/API/Blob)\n		or [`File`](https://developer.mozilla.org/en-US/docs/Web/API/File). If none of these are specified the value is converted to a string.\n		* @param fileName The filename reported to the server, when a Blob or File is passed as the second parameter. The default filename for Blob objects is \"blob\". The default filename for File objects is the file's filename.\n		*/\n		append(name, value, fileName) {\n			__privateMethod(this, _setEntry, setEntry_fn).call(this, {\n				name,\n				fileName,\n				append: true,\n				rawValue: value,\n				argsLength: arguments.length\n			});\n		}\n		/**\n		* Set a new value for an existing key inside FormData,\n		* or add the new field if it does not already exist.\n		*\n		* @param name The name of the field whose data is contained in `value`.\n		* @param value The field's value. This can be [`Blob`](https://developer.mozilla.org/en-US/docs/Web/API/Blob)\n		or [`File`](https://developer.mozilla.org/en-US/docs/Web/API/File). If none of these are specified the value is converted to a string.\n		* @param fileName The filename reported to the server, when a Blob or File is passed as the second parameter. The default filename for Blob objects is \"blob\". The default filename for File objects is the file's filename.\n		*\n		*/\n		set(name, value, fileName) {\n			__privateMethod(this, _setEntry, setEntry_fn).call(this, {\n				name,\n				fileName,\n				append: false,\n				rawValue: value,\n				argsLength: arguments.length\n			});\n		}\n		/**\n		* Returns the first value associated with a given key from within a `FormData` object.\n		* If you expect multiple values and want all of them, use the `getAll()` method instead.\n		*\n		* @param {string} name A name of the value you want to retrieve.\n		*\n		* @returns A `FormDataEntryValue` containing the value. If the key doesn't exist, the method returns null.\n		*/\n		get(name) {\n			const field = __privateGet(this, _entries).get(String(name));\n			if (!field) return null;\n			return field[0];\n		}\n		/**\n		* Returns all the values associated with a given key from within a `FormData` object.\n		*\n		* @param {string} name A name of the value you want to retrieve.\n		*\n		* @returns An array of `FormDataEntryValue` whose key matches the value passed in the `name` parameter. If the key doesn't exist, the method returns an empty list.\n		*/\n		getAll(name) {\n			const field = __privateGet(this, _entries).get(String(name));\n			if (!field) return [];\n			return field.slice();\n		}\n		/**\n		* Returns a boolean stating whether a `FormData` object contains a certain key.\n		*\n		* @param name A string representing the name of the key you want to test for.\n		*\n		* @return A boolean value.\n		*/\n		has(name) {\n			return __privateGet(this, _entries).has(String(name));\n		}\n		/**\n		* Deletes a key and its value(s) from a `FormData` object.\n		*\n		* @param name The name of the key you want to delete.\n		*/\n		delete(name) {\n			__privateGet(this, _entries).delete(String(name));\n		}\n		/**\n		* Returns an [`iterator`](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Iteration_protocols) allowing to go through all keys contained in this `FormData` object.\n		* Each key is a `string`.\n		*/\n		*keys() {\n			for (const key of __privateGet(this, _entries).keys()) yield key;\n		}\n		/**\n		* Returns an [`iterator`](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Iteration_protocols) allowing to go through the `FormData` key/value pairs.\n		* The key of each pair is a string; the value is a [`FormDataValue`](https://developer.mozilla.org/en-US/docs/Web/API/FormDataEntryValue).\n		*/\n		*entries() {\n			for (const name of this.keys()) {\n				const values = this.getAll(name);\n				for (const value of values) yield [name, value];\n			}\n		}\n		/**\n		* Returns an [`iterator`](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Iteration_protocols) allowing to go through all values contained in this object `FormData` object.\n		* Each value is a [`FormDataValue`](https://developer.mozilla.org/en-US/docs/Web/API/FormDataEntryValue).\n		*/\n		*values() {\n			for (const [, value] of this) yield value;\n		}\n		/**\n		* An alias for FormData#entries()\n		*/\n		[Symbol.iterator]() {\n			return this.entries();\n		}\n		/**\n		* Executes given callback function for each field of the FormData instance\n		*/\n		forEach(callback, thisArg) {\n			for (const [name, value] of this) callback.call(thisArg, value, name, this);\n		}\n		get [Symbol.toStringTag]() {\n			return \"FormData\";\n		}\n	};\n	_entries = /* @__PURE__ */ new WeakMap();\n	_setEntry = /* @__PURE__ */ new WeakSet();\n	setEntry_fn = function({ name, rawValue, append, fileName, argsLength }) {\n		const methodName = append ? \"append\" : \"set\";\n		if (argsLength < 2) throw new TypeError(`Failed to execute '${methodName}' on 'FormData': 2 arguments required, but only ${argsLength} present.`);\n		name = String(name);\n		let value;\n		if (isFile(rawValue)) value = fileName === void 0 ? rawValue : new File([rawValue], fileName, {\n			type: rawValue.type,\n			lastModified: rawValue.lastModified\n		});\n		else if (isBlob(rawValue)) value = new File([rawValue], fileName === void 0 ? \"blob\" : fileName, { type: rawValue.type });\n		else if (fileName) throw new TypeError(`Failed to execute '${methodName}' on 'FormData': parameter 2 is not of type 'Blob'.`);\n		else value = String(rawValue);\n		const values = __privateGet(this, _entries).get(name);\n		if (!values) {\n			__privateGet(this, _entries).set(name, [value]);\n			return;\n		}\n		if (!append) {\n			__privateGet(this, _entries).set(name, [value]);\n			return;\n		}\n		values.push(value);\n	};\n	/*! Based on fetch-blob. MIT License. Jimmy Wärting <https://jimmy.warting.se/opensource> & David Frank */\n	//#endregion\n	//#region node_modules/.pnpm/set-cookie-parser@3.1.0/node_modules/set-cookie-parser/lib/set-cookie.js\n	var defaultParseOptions = {\n		decodeValues: true,\n		map: false,\n		silent: false,\n		split: \"auto\"\n	};\n	function isForbiddenKey(key) {\n		return typeof key !== \"string\" || key in {};\n	}\n	function createNullObj() {\n		return Object.create(null);\n	}\n	function isNonEmptyString(str) {\n		return typeof str === \"string\" && !!str.trim();\n	}\n	function parseString(setCookieValue, options) {\n		var parts = setCookieValue.split(\";\").filter(isNonEmptyString);\n		var parsed = parseNameValuePair(parts.shift());\n		var name = parsed.name;\n		var value = parsed.value;\n		options = options ? Object.assign({}, defaultParseOptions, options) : defaultParseOptions;\n		if (isForbiddenKey(name)) return null;\n		try {\n			value = options.decodeValues ? decodeURIComponent(value) : value;\n		} catch (e) {\n			console.error(\"set-cookie-parser: failed to decode cookie value. Set options.decodeValues=false to disable decoding.\", e);\n		}\n		var cookie = createNullObj();\n		cookie.name = name;\n		cookie.value = value;\n		parts.forEach(function(part) {\n			var sides = part.split(\"=\");\n			var key = sides.shift().trimLeft().toLowerCase();\n			if (isForbiddenKey(key)) return;\n			var value = sides.join(\"=\");\n			if (key === \"expires\") cookie.expires = new Date(value);\n			else if (key === \"max-age\") {\n				var n = parseInt(value, 10);\n				if (!Number.isNaN(n)) cookie.maxAge = n;\n			} else if (key === \"secure\") cookie.secure = true;\n			else if (key === \"httponly\") cookie.httpOnly = true;\n			else if (key === \"samesite\") cookie.sameSite = value;\n			else if (key === \"partitioned\") cookie.partitioned = true;\n			else if (key) cookie[key] = value;\n		});\n		return cookie;\n	}\n	function parseNameValuePair(nameValuePairStr) {\n		var name = \"\";\n		var value = \"\";\n		var nameValueArr = nameValuePairStr.split(\"=\");\n		if (nameValueArr.length > 1) {\n			name = nameValueArr.shift();\n			value = nameValueArr.join(\"=\");\n		} else value = nameValuePairStr;\n		return {\n			name,\n			value\n		};\n	}\n	function parseSetCookie(input, options) {\n		options = options ? Object.assign({}, defaultParseOptions, options) : defaultParseOptions;\n		if (!input) if (!options.map) return [];\n		else return createNullObj();\n		if (input.headers) if (typeof input.headers.getSetCookie === \"function\") input = input.headers.getSetCookie();\n		else if (input.headers[\"set-cookie\"]) input = input.headers[\"set-cookie\"];\n		else {\n			var sch = input.headers[Object.keys(input.headers).find(function(key) {\n				return key.toLowerCase() === \"set-cookie\";\n			})];\n			if (!sch && input.headers.cookie && !options.silent) console.warn(\"Warning: set-cookie-parser appears to have been called on a request object. It is designed to parse Set-Cookie headers from responses, not Cookie headers from requests. Set the option {silent: true} to suppress this warning.\");\n			input = sch;\n		}\n		var split = options.split;\n		var isArray = Array.isArray(input);\n		if (split === \"auto\") split = !isArray;\n		if (!isArray) input = [input];\n		input = input.filter(isNonEmptyString);\n		if (split) input = input.map(splitCookiesString).flat();\n		if (!options.map) return input.map(function(str) {\n			return parseString(str, options);\n		}).filter(Boolean);\n		else {\n			var cookies = createNullObj();\n			return input.reduce(function(cookies, str) {\n				var cookie = parseString(str, options);\n				if (cookie && !isForbiddenKey(cookie.name)) cookies[cookie.name] = cookie;\n				return cookies;\n			}, cookies);\n		}\n	}\n	function splitCookiesString(cookiesString) {\n		if (Array.isArray(cookiesString)) return cookiesString;\n		if (typeof cookiesString !== \"string\") return [];\n		var cookiesStrings = [];\n		var pos = 0;\n		var start;\n		var ch;\n		var lastComma;\n		var nextStart;\n		var cookiesSeparatorFound;\n		function skipWhitespace() {\n			while (pos < cookiesString.length && /\\s/.test(cookiesString.charAt(pos))) pos += 1;\n			return pos < cookiesString.length;\n		}\n		function notSpecialChar() {\n			ch = cookiesString.charAt(pos);\n			return ch !== \"=\" && ch !== \";\" && ch !== \",\";\n		}\n		while (pos < cookiesString.length) {\n			start = pos;\n			cookiesSeparatorFound = false;\n			while (skipWhitespace()) {\n				ch = cookiesString.charAt(pos);\n				if (ch === \",\") {\n					lastComma = pos;\n					pos += 1;\n					skipWhitespace();\n					nextStart = pos;\n					while (pos < cookiesString.length && notSpecialChar()) pos += 1;\n					if (pos < cookiesString.length && cookiesString.charAt(pos) === \"=\") {\n						cookiesSeparatorFound = true;\n						pos = nextStart;\n						cookiesStrings.push(cookiesString.substring(start, lastComma));\n						start = pos;\n					} else pos = lastComma + 1;\n				} else pos += 1;\n			}\n			if (!cookiesSeparatorFound || pos >= cookiesString.length) cookiesStrings.push(cookiesString.substring(start, cookiesString.length));\n		}\n		return cookiesStrings;\n	}\n	parseSetCookie.parseSetCookie = parseSetCookie;\n	parseSetCookie.parse = parseSetCookie;\n	parseSetCookie.parseString = parseString;\n	parseSetCookie.splitCookiesString = splitCookiesString;\n	//#endregion\n	//#region node_modules/.pnpm/headers-polyfill@5.0.1/node_modules/headers-polyfill/lib/index.mjs\n	const HEADERS_INVALID_CHARACTERS = /[^a-z0-9\\-#$%&'*+.^_`|~]/i;\n	function normalizeHeaderName(name) {\n		if (HEADERS_INVALID_CHARACTERS.test(name) || name.trim() === \"\") throw new TypeError(\"Invalid character in header field name\");\n		return name.trim().toLowerCase();\n	}\n	const charCodesToRemove = [\n		String.fromCharCode(10),\n		String.fromCharCode(13),\n		String.fromCharCode(9),\n		String.fromCharCode(32)\n	];\n	const HEADER_VALUE_REMOVE_REGEXP = new RegExp(`(^[${charCodesToRemove.join(\"\")}]|$[${charCodesToRemove.join(\"\")}])`, \"g\");\n	/**\n	* Normalize the given header value.\n	* @see https://fetch.spec.whatwg.org/#concept-header-value-normalize\n	*/\n	function normalizeHeaderValue(value) {\n		return value.replace(HEADER_VALUE_REMOVE_REGEXP, \"\");\n	}\n	/**\n	* Validate the given header name.\n	* @see https://fetch.spec.whatwg.org/#header-name\n	*/\n	function isValidHeaderName(value) {\n		if (typeof value !== \"string\") return false;\n		if (value.length === 0) return false;\n		for (let i = 0; i < value.length; i++) {\n			const character = value.charCodeAt(i);\n			if (character > 127 || !isToken(character)) return false;\n		}\n		return true;\n	}\n	function isToken(value) {\n		return ![\n			127,\n			32,\n			\"(\",\n			\")\",\n			\"<\",\n			\">\",\n			\"@\",\n			\",\",\n			\";\",\n			\":\",\n			\"\\\\\",\n			\"\\\"\",\n			\"/\",\n			\"[\",\n			\"]\",\n			\"?\",\n			\"=\",\n			\"{\",\n			\"}\"\n		].includes(value);\n	}\n	/**\n	* Validate the given header value.\n	* @see https://fetch.spec.whatwg.org/#header-value\n	*/\n	function isValidHeaderValue(value) {\n		if (typeof value !== \"string\") return false;\n		if (value.trim() !== value) return false;\n		for (let i = 0; i < value.length; i++) {\n			const character = value.charCodeAt(i);\n			if (character === 0 || character === 10 || character === 13) return false;\n		}\n		return true;\n	}\n	let _Symbol$toStringTag;\n	const NORMALIZED_HEADERS = Symbol(\"normalizedHeaders\");\n	const RAW_HEADER_NAMES = Symbol(\"rawHeaderNames\");\n	const HEADER_VALUE_DELIMITER = \", \";\n	var Headers = class Headers {\n		constructor(init) {\n			this[NORMALIZED_HEADERS] = {};\n			this[RAW_HEADER_NAMES] = /* @__PURE__ */ new Map();\n			this[_Symbol$toStringTag] = \"Headers\";\n			/**\n			* @note Cannot necessarily check if the `init` is an instance of the\n			* `Headers` because that class may not be defined in Node or jsdom.\n			*/\n			if ([\"Headers\", \"HeadersPolyfill\"].includes(init?.constructor?.name) || init instanceof Headers || typeof globalThis.Headers !== \"undefined\" && init instanceof globalThis.Headers) init.forEach((value, name) => {\n				this.append(name, value);\n			}, this);\n			else if (Array.isArray(init)) init.forEach(([name, value]) => {\n				this.append(name, Array.isArray(value) ? value.join(HEADER_VALUE_DELIMITER) : value);\n			});\n			else if (init) Object.getOwnPropertyNames(init).forEach((name) => {\n				const value = init[name];\n				this.append(name, Array.isArray(value) ? value.join(HEADER_VALUE_DELIMITER) : value);\n			});\n		}\n		[(_Symbol$toStringTag = Symbol.toStringTag, Symbol.iterator)]() {\n			return this.entries();\n		}\n		*keys() {\n			for (const [name] of this.entries()) yield name;\n		}\n		*values() {\n			for (const [, value] of this.entries()) yield value;\n		}\n		*entries() {\n			let sortedKeys = Object.keys(this[NORMALIZED_HEADERS]).sort((a, b) => a.localeCompare(b));\n			for (const name of sortedKeys) if (name === \"set-cookie\") for (const value of this.getSetCookie()) yield [name, value];\n			else yield [name, this.get(name)];\n		}\n		/**\n		* Returns a boolean stating whether a `Headers` object contains a certain header.\n		*/\n		has(name) {\n			if (!isValidHeaderName(name)) throw new TypeError(`Invalid header name \"${name}\"`);\n			return this[NORMALIZED_HEADERS].hasOwnProperty(normalizeHeaderName(name));\n		}\n		/**\n		* Returns a `ByteString` sequence of all the values of a header with a given name.\n		*/\n		get(name) {\n			if (!isValidHeaderName(name)) throw TypeError(`Invalid header name \"${name}\"`);\n			return this[NORMALIZED_HEADERS][normalizeHeaderName(name)] ?? null;\n		}\n		/**\n		* Sets a new value for an existing header inside a `Headers` object, or adds the header if it does not already exist.\n		*/\n		set(name, value) {\n			if (!isValidHeaderName(name) || !isValidHeaderValue(value)) return;\n			const normalizedName = normalizeHeaderName(name);\n			const normalizedValue = normalizeHeaderValue(value);\n			this[NORMALIZED_HEADERS][normalizedName] = normalizeHeaderValue(normalizedValue);\n			this[RAW_HEADER_NAMES].set(normalizedName, name);\n		}\n		/**\n		* Appends a new value onto an existing header inside a `Headers` object, or adds the header if it does not already exist.\n		*/\n		append(name, value) {\n			if (!isValidHeaderName(name) || !isValidHeaderValue(value)) return;\n			const normalizedName = normalizeHeaderName(name);\n			const normalizedValue = normalizeHeaderValue(value);\n			let resolvedValue = this.has(normalizedName) ? `${this.get(normalizedName)}, ${normalizedValue}` : normalizedValue;\n			this.set(name, resolvedValue);\n		}\n		/**\n		* Deletes a header from the `Headers` object.\n		*/\n		delete(name) {\n			if (!isValidHeaderName(name)) return;\n			if (!this.has(name)) return;\n			const normalizedName = normalizeHeaderName(name);\n			delete this[NORMALIZED_HEADERS][normalizedName];\n			this[RAW_HEADER_NAMES].delete(normalizedName);\n		}\n		/**\n		* Traverses the `Headers` object,\n		* calling the given callback for each header.\n		*/\n		forEach(callback, thisArg) {\n			for (const [name, value] of this.entries()) callback.call(thisArg, value, name, this);\n		}\n		/**\n		* Returns an array containing the values\n		* of all Set-Cookie headers associated\n		* with a response\n		*/\n		getSetCookie() {\n			const setCookieHeader = this.get(\"set-cookie\");\n			if (setCookieHeader === null) return [];\n			if (setCookieHeader === \"\") return [\"\"];\n			return splitCookiesString(setCookieHeader);\n		}\n	};\n	//#endregion\n	//#region packages/core/src/code-mode/platform-entry.ts\n	const platformBridgeGlobalThis = globalThis;\n	const capletsPlatformHost = {\n		randomUUID: platformBridgeGlobalThis.__caplets_platform_random_uuid,\n		randomValues: platformBridgeGlobalThis.__caplets_platform_random_values,\n		sleep: platformBridgeGlobalThis.__caplets_platform_sleep,\n		clearTimer: platformBridgeGlobalThis.__caplets_platform_clear_timer\n	};\n	delete platformBridgeGlobalThis.__caplets_platform_random_uuid;\n	delete platformBridgeGlobalThis.__caplets_platform_random_values;\n	delete platformBridgeGlobalThis.__caplets_platform_sleep;\n	delete platformBridgeGlobalThis.__caplets_platform_clear_timer;\n	const DISABLED_FETCH_MESSAGE = \"Direct fetch is not available in Code Mode; use a Caplet instead.\";\n	const BASE64_ALPHABET = \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\";\n	const base64Lookup = new Map(BASE64_ALPHABET.split(\"\").map((char, index) => [char, index]));\n	function utf8Encode(input) {\n		const encoded = encodeURIComponent(input);\n		const bytes = [];\n		for (let index = 0; index < encoded.length; index += 1) {\n			if (encoded[index] === \"%\") {\n				bytes.push(Number.parseInt(encoded.slice(index + 1, index + 3), 16));\n				index += 2;\n				continue;\n			}\n			bytes.push(encoded.charCodeAt(index));\n		}\n		return Uint8Array.from(bytes);\n	}\n	function utf8Decode(input) {\n		let output = \"\";\n		for (let index = 0; index < input.length; index += 1) {\n			const first = input[index] ?? 0;\n			if (first < 128) {\n				output += String.fromCharCode(first);\n				continue;\n			}\n			if (first >= 194 && first <= 223) {\n				const second = input[index + 1];\n				if (isUtf8Continuation(second)) {\n					output += String.fromCodePoint((first & 31) << 6 | second & 63);\n					index += 1;\n					continue;\n				}\n				output += \"�\";\n				continue;\n			}\n			if (first >= 224 && first <= 239) {\n				const second = input[index + 1];\n				const third = input[index + 2];\n				if (isValidUtf8SecondForThreeByte(first, second) && isUtf8Continuation(third)) {\n					output += String.fromCodePoint((first & 15) << 12 | (second & 63) << 6 | third & 63);\n					index += 2;\n					continue;\n				}\n				output += \"�\";\n				if (isValidUtf8SecondForThreeByte(first, second)) index += 1;\n				continue;\n			}\n			if (first >= 240 && first <= 244) {\n				const second = input[index + 1];\n				const third = input[index + 2];\n				const fourth = input[index + 3];\n				if (isValidUtf8SecondForFourByte(first, second) && isUtf8Continuation(third) && isUtf8Continuation(fourth)) {\n					output += String.fromCodePoint((first & 7) << 18 | (second & 63) << 12 | (third & 63) << 6 | fourth & 63);\n					index += 3;\n					continue;\n				}\n				output += \"�\";\n				if (isValidUtf8SecondForFourByte(first, second)) index += isUtf8Continuation(third) ? 2 : 1;\n				continue;\n			}\n			output += \"�\";\n		}\n		return output;\n	}\n	function isUtf8Continuation(value) {\n		return value !== void 0 && value >= 128 && value <= 191;\n	}\n	function isValidUtf8SecondForThreeByte(first, second) {\n		if (second === void 0) return false;\n		if (first === 224) return second >= 160 && second <= 191;\n		if (first === 237) return second >= 128 && second <= 159;\n		return second >= 128 && second <= 191;\n	}\n	function isValidUtf8SecondForFourByte(first, second) {\n		if (second === void 0) return false;\n		if (first === 240) return second >= 144 && second <= 191;\n		if (first === 244) return second >= 128 && second <= 143;\n		return second >= 128 && second <= 191;\n	}\n	var TextEncoderShim = class {\n		encoding = \"utf-8\";\n		encode(input = \"\") {\n			return utf8Encode(String(input));\n		}\n	};\n	var TextDecoderShim = class {\n		encoding;\n		constructor(label = \"utf-8\") {\n			const normalized = label.toLowerCase();\n			if (![\n				\"utf-8\",\n				\"utf8\",\n				\"unicode-1-1-utf-8\"\n			].includes(normalized)) throw new TypeError(`Unsupported encoding: ${label}`);\n			this.encoding = \"utf-8\";\n		}\n		decode(input) {\n			if (input === void 0) return \"\";\n			return utf8Decode(copyBytes(input));\n		}\n	};\n	const textEncoder = new TextEncoderShim();\n	const textDecoder = new TextDecoderShim();\n	var URLSearchParamsShim = class URLSearchParamsShim {\n		#entries = [];\n		#onChange;\n		constructor(init = \"\", onChange) {\n			this.#onChange = onChange;\n			if (typeof init === \"string\") {\n				const source = init.startsWith(\"?\") ? init.slice(1) : init;\n				if (!source) return;\n				for (const pair of source.split(\"&\")) {\n					if (!pair) continue;\n					const separatorIndex = pair.indexOf(\"=\");\n					const key = separatorIndex >= 0 ? pair.slice(0, separatorIndex) : pair;\n					const value = separatorIndex >= 0 ? pair.slice(separatorIndex + 1) : \"\";\n					this.#entries.push([decodeUrlParam(key), decodeUrlParam(value)]);\n				}\n				return;\n			}\n			if (init instanceof URLSearchParamsShim) {\n				this.#entries = [...init.#entries];\n				return;\n			}\n			if (Array.isArray(init)) {\n				this.#entries = init.map(([key, value]) => [String(key), String(value)]);\n				return;\n			}\n			this.#entries = Object.entries(init).map(([key, value]) => [key, String(value)]);\n		}\n		append(name, value) {\n			this.#entries.push([String(name), String(value)]);\n			this.#onChange?.();\n		}\n		delete(name) {\n			const normalized = String(name);\n			this.#entries = this.#entries.filter(([key]) => key !== normalized);\n			this.#onChange?.();\n		}\n		entries() {\n			return this.#entries[Symbol.iterator]();\n		}\n		forEach(callback) {\n			for (const [key, value] of this.#entries) callback(value, key, this);\n		}\n		get(name) {\n			return this.#entries.find(([key]) => key === String(name))?.[1] ?? null;\n		}\n		getAll(name) {\n			return this.#entries.filter(([key]) => key === String(name)).map(([, value]) => value);\n		}\n		has(name) {\n			return this.#entries.some(([key]) => key === String(name));\n		}\n		keys() {\n			return this.#entries.map(([key]) => key)[Symbol.iterator]();\n		}\n		set(name, value) {\n			const normalizedName = String(name);\n			const normalizedValue = String(value);\n			const next = [];\n			let replaced = false;\n			for (const entry of this.#entries) {\n				if (entry[0] !== normalizedName) {\n					next.push(entry);\n					continue;\n				}\n				if (!replaced) {\n					next.push([normalizedName, normalizedValue]);\n					replaced = true;\n				}\n			}\n			if (!replaced) next.push([normalizedName, normalizedValue]);\n			this.#entries = next;\n			this.#onChange?.();\n		}\n		toString() {\n			return this.#entries.map(([key, value]) => `${encodeURIComponent(key)}=${encodeURIComponent(value)}`).join(\"&\");\n		}\n		values() {\n			return this.#entries.map(([, value]) => value)[Symbol.iterator]();\n		}\n		[Symbol.iterator]() {\n			return this.entries();\n		}\n	};\n	function decodeUrlParam(value) {\n		return decodeURIComponent(value.replace(/\\+/gu, \" \"));\n	}\n	function parseAbsoluteUrl(input) {\n		const match = /^(?<protocol>[a-zA-Z][a-zA-Z\\d+.-]*:)\\/\\/(?<host>[^/?#]*)(?<pathname>[^?#]*)?(?<search>\\?[^#]*)?(?<hash>#.*)?$/u.exec(input);\n		if (!match?.groups?.protocol || !match.groups.host) return;\n		return {\n			protocol: match.groups.protocol,\n			host: match.groups.host,\n			pathname: match.groups.pathname || \"/\",\n			search: match.groups.search || \"\",\n			hash: match.groups.hash || \"\"\n		};\n	}\n	function normalizePathname(pathname) {\n		const segments = [];\n		for (const part of pathname.split(\"/\")) {\n			if (!part || part === \".\") continue;\n			if (part === \"..\") {\n				segments.pop();\n				continue;\n			}\n			segments.push(part);\n		}\n		return `/${segments.join(\"/\")}`;\n	}\n	function resolveUrl(input, base) {\n		const absolute = parseAbsoluteUrl(input);\n		if (absolute) return absolute;\n		if (base === void 0) throw new TypeError(`Invalid URL: ${input}`);\n		const baseUrl = base instanceof URLShim ? base : new URLShim(String(base));\n		const basePath = baseUrl.pathname.endsWith(\"/\") ? baseUrl.pathname : baseUrl.pathname.slice(0, baseUrl.pathname.lastIndexOf(\"/\") + 1);\n		const [beforeHash, rawHash = \"\"] = input.split(\"#\");\n		const hasExplicitSearch = beforeHash?.includes(\"?\") ?? false;\n		const [rawPath, rawSearch = \"\"] = (beforeHash ?? \"\").split(\"?\");\n		const pathname = rawPath === \"\" && (input === \"\" || input.startsWith(\"?\") || input.startsWith(\"#\")) ? baseUrl.pathname : rawPath?.startsWith(\"/\") ? rawPath : `${basePath}${rawPath || \"\"}`;\n		return {\n			protocol: baseUrl.protocol,\n			host: baseUrl.host,\n			pathname: normalizePathname(pathname),\n			search: hasExplicitSearch ? `?${rawSearch}` : rawPath === \"\" && (input === \"\" || input.startsWith(\"#\")) ? baseUrl.search : \"\",\n			hash: rawHash ? `#${rawHash}` : \"\"\n		};\n	}\n	var URLShim = class {\n		host;\n		hostname;\n		origin;\n		password = \"\";\n		port;\n		protocol;\n		searchParams;\n		username = \"\";\n		hash;\n		pathname;\n		#search;\n		constructor(input, base) {\n			const parsed = resolveUrl(String(input), base);\n			this.protocol = parsed.protocol;\n			this.host = parsed.host;\n			const portIndex = this.host.lastIndexOf(\":\");\n			this.hostname = portIndex >= 0 ? this.host.slice(0, portIndex) : this.host;\n			this.port = portIndex >= 0 ? this.host.slice(portIndex + 1) : \"\";\n			this.pathname = parsed.pathname;\n			this.#search = parsed.search;\n			this.hash = parsed.hash;\n			this.origin = `${this.protocol}//${this.host}`;\n			this.searchParams = new URLSearchParamsShim(this.#search, () => {\n				const next = this.searchParams.toString();\n				this.#search = next ? `?${next}` : \"\";\n			});\n		}\n		get href() {\n			return `${this.origin}${this.pathname}${this.#search}${this.hash}`;\n		}\n		get search() {\n			return this.#search;\n		}\n		toString() {\n			return this.href;\n		}\n		toJSON() {\n			return this.href;\n		}\n	};\n	var ReadableStreamShim = class {\n		#queue = [];\n		#closed = false;\n		#pulling = false;\n		#source;\n		#controller;\n		#pending;\n		constructor(source = {}) {\n			this.#source = source;\n			this.#controller = {\n				enqueue: (value) => {\n					if (this.#pending) {\n						this.#pending.resolve({\n							done: false,\n							value\n						});\n						this.#pending = void 0;\n						return;\n					}\n					this.#queue.push(value);\n				},\n				close: () => {\n					this.#closed = true;\n					if (this.#pending) {\n						this.#pending.resolve({ done: true });\n						this.#pending = void 0;\n					}\n				}\n			};\n			source.start?.(this.#controller);\n		}\n		async #pull() {\n			if (this.#pulling || this.#closed || !this.#source.pull) return;\n			this.#pulling = true;\n			try {\n				await this.#source.pull(this.#controller);\n			} finally {\n				this.#pulling = false;\n			}\n		}\n		getReader() {\n			return { read: async () => {\n				if (this.#queue.length > 0) return {\n					done: false,\n					value: this.#queue.shift()\n				};\n				await this.#pull();\n				if (this.#queue.length > 0) return {\n					done: false,\n					value: this.#queue.shift()\n				};\n				if (this.#closed) return {\n					done: true,\n					value: void 0\n				};\n				return await new Promise((resolve) => {\n					this.#pending = { resolve };\n					this.#pull();\n				});\n			} };\n		}\n	};\n	var WritableStreamShim = class {\n		#sink;\n		constructor(sink = {}) {\n			this.#sink = sink;\n		}\n		getWriter() {\n			return {\n				write: async (chunk) => {\n					await this.#sink.write?.(chunk);\n				},\n				close: async () => {\n					await this.#sink.close?.();\n				}\n			};\n		}\n	};\n	var TransformStreamShim = class {\n		readable;\n		writable;\n		constructor(transformer = {}) {\n			const queue = [];\n			let closed = false;\n			let pending;\n			const controller = {\n				enqueue: (value) => {\n					if (pending) {\n						pending.resolve({\n							done: false,\n							value\n						});\n						pending = void 0;\n						return;\n					}\n					queue.push(value);\n				},\n				close: () => {\n					closed = true;\n					if (pending) {\n						pending.resolve({ done: true });\n						pending = void 0;\n					}\n				}\n			};\n			this.readable = { getReader() {\n				return { read: async () => {\n					if (queue.length > 0) return {\n						done: false,\n						value: queue.shift()\n					};\n					if (closed) return {\n						done: true,\n						value: void 0\n					};\n					return await new Promise((resolve) => {\n						pending = { resolve };\n					});\n				} };\n			} };\n			this.writable = new WritableStreamShim({\n				write: async (chunk) => {\n					transformer.transform?.(chunk, controller);\n				},\n				close: async () => {\n					transformer.flush?.(controller);\n					controller.close();\n				}\n			});\n		}\n	};\n	function definePlatformGlobal(name, value, options = {}) {\n		if (!options.overwrite && name in globalThis) return;\n		Object.defineProperty(globalThis, name, {\n			value,\n			writable: true,\n			configurable: true\n		});\n	}\n	function formatLogArg(value) {\n		if (typeof value === \"string\") return value;\n		try {\n			return JSON.stringify(value);\n		} catch {\n			return String(value);\n		}\n	}\n	function formatLogLine(args) {\n		return args.map(formatLogArg).join(\" \");\n	}\n	const platformConsole = {\n		log: (...args) => __caplets_log(\"log\", formatLogLine(args)),\n		info: (...args) => __caplets_log(\"info\", formatLogLine(args)),\n		warn: (...args) => __caplets_log(\"warn\", formatLogLine(args)),\n		error: (...args) => __caplets_log(\"error\", formatLogLine(args)),\n		debug: (...args) => __caplets_log(\"debug\", formatLogLine(args))\n	};\n	function normalizeEncoding(encoding) {\n		const normalized = (encoding ?? \"utf8\").toLowerCase();\n		switch (normalized) {\n			case \"utf8\":\n			case \"utf-8\":\n			case \"base64\":\n			case \"base64url\":\n			case \"hex\": return normalized;\n			default: throw new TypeError(`Unsupported Buffer encoding: ${encoding}`);\n		}\n	}\n	function hexToBytes(value) {\n		if (value.length % 2 !== 0) throw new TypeError(\"Invalid hex string length\");\n		const bytes = new Uint8Array(value.length / 2);\n		for (let index = 0; index < value.length; index += 2) {\n			const parsed = Number.parseInt(value.slice(index, index + 2), 16);\n			if (Number.isNaN(parsed)) throw new TypeError(\"Invalid hex string\");\n			bytes[index / 2] = parsed;\n		}\n		return bytes;\n	}\n	function bytesToHex(bytes) {\n		return Array.from(bytes, (value) => value.toString(16).padStart(2, \"0\")).join(\"\");\n	}\n	function base64ToBytes(value, encoding) {\n		let normalized = value.replace(/\\s+/gu, \"\");\n		if (encoding === \"base64url\") normalized = normalized.replace(/-/gu, \"+\").replace(/_/gu, \"/\");\n		const padding = normalized.length % 4;\n		if (padding === 1) throw new TypeError(\"Invalid base64 string\");\n		if (padding > 0) normalized = normalized.padEnd(normalized.length + (4 - padding), \"=\");\n		const output = [];\n		for (let index = 0; index < normalized.length; index += 4) {\n			const values = normalized.slice(index, index + 4).split(\"\").map((char) => char === \"=\" ? 64 : base64Lookup.get(char) ?? NaN);\n			if (values.some((entry) => Number.isNaN(entry))) throw new TypeError(\"Invalid base64 string\");\n			const [a = 0, b = 0, c = 64, d = 64] = values;\n			const triple = a << 18 | b << 12 | (c & 63) << 6 | d & 63;\n			output.push(triple >> 16 & 255);\n			if (c !== 64) output.push(triple >> 8 & 255);\n			if (d !== 64) output.push(triple & 255);\n		}\n		return Uint8Array.from(output);\n	}\n	function bytesToBase64(bytes, encoding) {\n		let output = \"\";\n		for (let index = 0; index < bytes.length; index += 3) {\n			const a = bytes[index] ?? 0;\n			const b = bytes[index + 1] ?? 0;\n			const c = bytes[index + 2] ?? 0;\n			const triple = a << 16 | b << 8 | c;\n			output += BASE64_ALPHABET[triple >> 18 & 63];\n			output += BASE64_ALPHABET[triple >> 12 & 63];\n			output += index + 1 < bytes.length ? BASE64_ALPHABET[triple >> 6 & 63] : \"=\";\n			output += index + 2 < bytes.length ? BASE64_ALPHABET[triple & 63] : \"=\";\n		}\n		if (encoding === \"base64url\") return output.replace(/\\+/gu, \"-\").replace(/\\//gu, \"_\").replace(/=+$/gu, \"\");\n		return output;\n	}\n	function copyBytes(input) {\n		if (input instanceof ArrayBuffer) return new Uint8Array(input.slice(0));\n		return new Uint8Array(input.buffer.slice(input.byteOffset, input.byteOffset + input.byteLength));\n	}\n	function toBytes(input, encoding) {\n		if (input instanceof BufferShim) return input.toUint8Array();\n		if (typeof input === \"string\") switch (normalizeEncoding(encoding)) {\n			case \"utf8\":\n			case \"utf-8\": return textEncoder.encode(input);\n			case \"base64\":\n			case \"base64url\": return base64ToBytes(input, normalizeEncoding(encoding));\n			case \"hex\": return hexToBytes(input);\n		}\n		if (input instanceof ArrayBuffer || ArrayBuffer.isView(input)) return copyBytes(input);\n		if (Array.isArray(input)) return Uint8Array.from(input);\n		throw new TypeError(\"Buffer.from only supports strings, arrays, ArrayBuffers, and typed arrays\");\n	}\n	var BufferShim = class BufferShim {\n		#bytes;\n		byteLength;\n		length;\n		constructor(bytes) {\n			this.#bytes = bytes;\n			this.byteLength = bytes.byteLength;\n			this.length = bytes.length;\n		}\n		static from(input, encoding) {\n			return new BufferShim(toBytes(input, encoding));\n		}\n		static isBuffer(value) {\n			return value instanceof BufferShim;\n		}\n		static byteLength(input, encoding) {\n			return toBytes(input, encoding).byteLength;\n		}\n		toUint8Array() {\n			return new Uint8Array(this.#bytes);\n		}\n		toString(encoding) {\n			switch (normalizeEncoding(encoding)) {\n				case \"utf8\":\n				case \"utf-8\": return textDecoder.decode(this.#bytes);\n				case \"base64\":\n				case \"base64url\": return bytesToBase64(this.#bytes, normalizeEncoding(encoding));\n				case \"hex\": return bytesToHex(this.#bytes);\n			}\n		}\n	};\n	function atobShim(input) {\n		return Array.from(base64ToBytes(String(input), \"base64\"), (value) => String.fromCharCode(value)).join(\"\");\n	}\n	function btoaShim(input) {\n		const bytes = new Uint8Array(input.length);\n		for (let index = 0; index < input.length; index += 1) {\n			const codePoint = input.charCodeAt(index);\n			if (codePoint > 255) throw new TypeError(\"The string to be encoded contains characters outside of Latin1\");\n			bytes[index] = codePoint;\n		}\n		return bytesToBase64(bytes, \"base64\");\n	}\n	function queueMicrotaskShim(callback) {\n		Promise.resolve().then(callback);\n	}\n	var AbortSignalShim = class AbortSignalShim {\n		aborted = false;\n		reason;\n		onabort = null;\n		#listeners = /* @__PURE__ */ new Set();\n		addEventListener(type, listener) {\n			if (type === \"abort\" && listener) this.#listeners.add(listener);\n		}\n		removeEventListener(type, listener) {\n			if (type === \"abort\" && listener) this.#listeners.delete(listener);\n		}\n		dispatchEvent(event) {\n			if (event.type !== \"abort\") return true;\n			this.onabort?.(event);\n			for (const listener of this.#listeners) listener(event);\n			return true;\n		}\n		throwIfAborted() {\n			if (this.aborted) throw this.reason ?? /* @__PURE__ */ new Error(\"Operation was aborted\");\n		}\n		static abort(reason) {\n			const signal = new AbortSignalShim();\n			signal.abort(reason);\n			return signal;\n		}\n		abort(reason) {\n			if (this.aborted) return;\n			this.aborted = true;\n			this.reason = reason;\n			this.dispatchEvent({\n				type: \"abort\",\n				target: this\n			});\n		}\n	};\n	var AbortControllerShim = class {\n		signal = new AbortSignalShim();\n		abort(reason) {\n			this.signal.abort(reason);\n		}\n	};\n	function cloneFormData(input) {\n		const clone = new FormData();\n		for (const [name, value] of input.entries()) {\n			if (value instanceof File) {\n				clone.append(name, new File([value], value.name, { type: value.type }), value.name);\n				continue;\n			}\n			clone.append(name, value);\n		}\n		return clone;\n	}\n	function cloneBodyValue(input) {\n		if (input === null || input === void 0 || typeof input === \"string\") return input;\n		if (input instanceof FormData) return cloneFormData(input);\n		if (input instanceof Blob) return input.slice(0, input.size, input.type);\n		if (input instanceof ArrayBuffer || ArrayBuffer.isView(input)) return copyBytes(input);\n		return input;\n	}\n	function blobFromBody(input) {\n		if (input instanceof Blob) return input;\n		if (typeof input === \"string\") return new Blob([input], { type: \"text/plain;charset=utf-8\" });\n		if (input instanceof FormData) throw new TypeError(\"FormData body reading is not supported in Code Mode\");\n		if (input instanceof ArrayBuffer || ArrayBuffer.isView(input)) return new Blob([copyBytes(input)]);\n		return new Blob([]);\n	}\n	var BodyMixin = class {\n		_bodyInit;\n		bodyUsed = false;\n		body = null;\n		constructor(body) {\n			this._bodyInit = cloneBodyValue(body);\n		}\n		async arrayBuffer() {\n			this.bodyUsed = true;\n			return await blobFromBody(this._bodyInit).arrayBuffer();\n		}\n		async blob() {\n			this.bodyUsed = true;\n			return blobFromBody(this._bodyInit);\n		}\n		async formData() {\n			this.bodyUsed = true;\n			if (this._bodyInit instanceof FormData) return cloneFormData(this._bodyInit);\n			throw new TypeError(\"Body does not contain FormData\");\n		}\n		async json() {\n			return JSON.parse(await this.text());\n		}\n		async text() {\n			this.bodyUsed = true;\n			return await blobFromBody(this._bodyInit).text();\n		}\n	};\n	function toHeaders(init) {\n		return init instanceof Headers ? new Headers(init) : new Headers(init ?? {});\n	}\n	function normalizeMethod(method) {\n		return String(method ?? \"GET\").toUpperCase();\n	}\n	var RequestShim = class RequestShim extends BodyMixin {\n		headers;\n		method;\n		signal;\n		url;\n		constructor(input, init = {}) {\n			const sourceBody = input instanceof RequestShim ? input._bodyInit : void 0;\n			super(init.body ?? sourceBody);\n			if (input instanceof RequestShim) this.url = input.url;\n			else this.url = input instanceof URLShim ? input.href : new URLShim(String(input)).href;\n			this.method = normalizeMethod(init.method ?? (input instanceof RequestShim ? input.method : \"GET\"));\n			this.headers = toHeaders(init.headers ?? (input instanceof RequestShim ? input.headers : void 0));\n			this.signal = init.signal ?? (input instanceof RequestShim ? input.signal : new AbortControllerShim().signal);\n		}\n		clone() {\n			return new RequestShim(this, {\n				method: this.method,\n				headers: this.headers,\n				body: this._bodyInit,\n				signal: this.signal\n			});\n		}\n	};\n	var ResponseShim = class ResponseShim extends BodyMixin {\n		headers;\n		ok;\n		redirected = false;\n		status;\n		statusText;\n		type = \"default\";\n		url = \"\";\n		constructor(body, init = {}) {\n			super(body);\n			this.status = init.status ?? 200;\n			this.statusText = init.statusText ?? \"\";\n			this.headers = toHeaders(init.headers);\n			this.ok = this.status >= 200 && this.status <= 299;\n		}\n		clone() {\n			return new ResponseShim(this._bodyInit, {\n				headers: this.headers,\n				status: this.status,\n				statusText: this.statusText\n			});\n		}\n		static json(data, init) {\n			const headers = toHeaders(init?.headers);\n			if (!headers.has(\"content-type\")) headers.set(\"content-type\", \"application/json\");\n			const responseInit = { headers };\n			if (init?.status !== void 0) responseInit.status = init.status;\n			if (init?.statusText !== void 0) responseInit.statusText = init.statusText;\n			return new ResponseShim(JSON.stringify(data), responseInit);\n		}\n	};\n	function disabledFetch() {\n		throw new Error(DISABLED_FETCH_MESSAGE);\n	}\n	const integerTypedArrayConstructors = new Set([\n		Int8Array,\n		Uint8Array,\n		Uint8ClampedArray,\n		Int16Array,\n		Uint16Array,\n		Int32Array,\n		Uint32Array,\n		typeof BigInt64Array === \"undefined\" ? void 0 : BigInt64Array,\n		typeof BigUint64Array === \"undefined\" ? void 0 : BigUint64Array\n	]);\n	var QuotaExceededErrorShim = class extends Error {\n		constructor(message) {\n			super(message);\n			this.name = \"QuotaExceededError\";\n		}\n	};\n	const platformCrypto = {\n		randomUUID() {\n			const randomUUID = capletsPlatformHost.randomUUID;\n			if (!randomUUID) throw new Error(\"Code Mode platform random UUID bridge is not installed\");\n			return randomUUID();\n		},\n		getRandomValues(typedArray) {\n			if (!ArrayBuffer.isView(typedArray) || typedArray instanceof DataView) throw new TypeError(\"crypto.getRandomValues requires an integer typed array\");\n			if (!integerTypedArrayConstructors.has(typedArray.constructor)) throw new TypeError(\"crypto.getRandomValues requires an integer typed array\");\n			if (typedArray.byteLength > 65536) throw new QuotaExceededErrorShim(\"crypto.getRandomValues cannot generate more than 65,536 bytes\");\n			const randomValues = capletsPlatformHost.randomValues;\n			if (!randomValues) throw new Error(\"Code Mode platform random values bridge is not installed\");\n			const bytes = randomValues(typedArray.byteLength);\n			new Uint8Array(typedArray.buffer, typedArray.byteOffset, typedArray.byteLength).set(bytes);\n			return typedArray;\n		}\n	};\n	let nextTimerId = 1;\n	const activeTimers = /* @__PURE__ */ new Set();\n	function normalizeTimerDelay(delay) {\n		const value = Number(delay ?? 0);\n		if (!Number.isFinite(value) || value <= 0) return 0;\n		return Math.trunc(value);\n	}\n	function setTimeoutShim(callback, delay, ...args) {\n		if (typeof callback !== \"function\") throw new TypeError(\"setTimeout callback must be a function\");\n		const timerId = nextTimerId++;\n		activeTimers.add(timerId);\n		const sleep = capletsPlatformHost.sleep;\n		if (!sleep) throw new Error(\"Code Mode platform sleep bridge is not installed\");\n		sleep(timerId, normalizeTimerDelay(delay)).then((fired) => {\n			activeTimers.delete(timerId);\n			if (fired) callback(...args);\n		});\n		return timerId;\n	}\n	function clearTimeoutShim(timerId) {\n		const id = Number(timerId);\n		activeTimers.delete(id);\n		capletsPlatformHost.clearTimer?.(id);\n	}\n	function setIntervalShim(callback, delay, ...args) {\n		if (typeof callback !== \"function\") throw new TypeError(\"setInterval callback must be a function\");\n		const timerId = nextTimerId++;\n		const intervalDelay = normalizeTimerDelay(delay);\n		activeTimers.add(timerId);\n		const tick = () => {\n			const sleep = capletsPlatformHost.sleep;\n			if (!sleep) throw new Error(\"Code Mode platform sleep bridge is not installed\");\n			sleep(timerId, intervalDelay).then((fired) => {\n				if (!fired || !activeTimers.has(timerId)) {\n					activeTimers.delete(timerId);\n					return;\n				}\n				callback(...args);\n				if (activeTimers.has(timerId)) tick();\n			});\n		};\n		tick();\n		return timerId;\n	}\n	function clearIntervalShim(timerId) {\n		clearTimeoutShim(timerId);\n	}\n	definePlatformGlobal(\"atob\", atobShim);\n	definePlatformGlobal(\"btoa\", btoaShim);\n	definePlatformGlobal(\"Buffer\", BufferShim);\n	definePlatformGlobal(\"TextEncoder\", TextEncoderShim);\n	definePlatformGlobal(\"TextDecoder\", TextDecoderShim);\n	definePlatformGlobal(\"URL\", URLShim);\n	definePlatformGlobal(\"URLSearchParams\", URLSearchParamsShim);\n	definePlatformGlobal(\"structuredClone\", esm_default);\n	definePlatformGlobal(\"Headers\", Headers);\n	definePlatformGlobal(\"Blob\", Blob);\n	definePlatformGlobal(\"File\", File);\n	definePlatformGlobal(\"FormData\", FormData);\n	definePlatformGlobal(\"ReadableStream\", ReadableStreamShim);\n	definePlatformGlobal(\"WritableStream\", WritableStreamShim);\n	definePlatformGlobal(\"TransformStream\", TransformStreamShim);\n	definePlatformGlobal(\"AbortController\", AbortControllerShim);\n	definePlatformGlobal(\"AbortSignal\", AbortSignalShim);\n	definePlatformGlobal(\"Request\", RequestShim);\n	definePlatformGlobal(\"Response\", ResponseShim);\n	definePlatformGlobal(\"crypto\", platformCrypto);\n	definePlatformGlobal(\"setTimeout\", setTimeoutShim);\n	definePlatformGlobal(\"clearTimeout\", clearTimeoutShim);\n	definePlatformGlobal(\"setInterval\", setIntervalShim);\n	definePlatformGlobal(\"clearInterval\", clearIntervalShim);\n	definePlatformGlobal(\"queueMicrotask\", queueMicrotaskShim);\n	definePlatformGlobal(\"console\", platformConsole);\n	definePlatformGlobal(\"fetch\", disabledFetch, { overwrite: true });\n	//#endregion\n})();";
+//#endregion
 //#region src/code-mode/sandbox.ts
 var QuickJsCodeModeSandbox = class {
 	async run(input) {
@@ -75686,6 +77219,7 @@ async function evaluateInQuickJs(input) {
 			});
 			context.setProp(context.global, "__caplets_log", logBridge);
 			logBridge.dispose();
+			const platformHost = installCodeModePlatformHost(context, pendingDeferreds, {});
 			const invokeBridge = createInvokeBridge(context, pendingDeferreds, input.invoke, deadlineMs, timeoutMs);
 			context.setProp(context.global, "__caplets_invoke", invokeBridge);
 			invokeBridge.dispose();
@@ -75745,6 +77279,7 @@ async function evaluateInQuickJs(input) {
 				};
 			} finally {
 				stateHandle.dispose();
+				platformHost.dispose();
 			}
 		} finally {
 			for (const deferred of pendingDeferreds) if (deferred.alive) deferred.dispose();
@@ -75804,19 +77339,7 @@ function buildExecutionSource(code, capletIds) {
 	} }).outputText;
 	return [
 		"\"use strict\";",
-		"const __formatLogArg = (value) => {",
-		"  if (typeof value === 'string') return value;",
-		"  try { return JSON.stringify(value); } catch { return String(value); }",
-		"};",
-		"const __formatLogLine = (args) => args.map(__formatLogArg).join(' ');",
-		"const console = {",
-		"  log: (...args) => __caplets_log('log', __formatLogLine(args)),",
-		"  info: (...args) => __caplets_log('info', __formatLogLine(args)),",
-		"  warn: (...args) => __caplets_log('warn', __formatLogLine(args)),",
-		"  error: (...args) => __caplets_log('error', __formatLogLine(args)),",
-		"  debug: (...args) => __caplets_log('debug', __formatLogLine(args)),",
-		"};",
-		"const fetch = () => { throw new Error('fetch is disabled in Code Mode'); };",
+		CODE_MODE_PLATFORM_RUNTIME_SOURCE,
 		"const __invoke = (capletId, method, args) => Promise.resolve(__caplets_invoke(capletId, method, args)).then(JSON.parse);",
 		"const __handle = (capletId) => ({",
 		"  id: capletId,",
@@ -77831,7 +79354,7 @@ var DefaultNativeCapletsService = class {
 			...options,
 			writeErr: this.writeErr
 		});
-		this.postReloadRefresh = this.refreshExposureSnapshot({ emitToolsChanged: this.hasDirectMcpExposure() });
+		this.postReloadRefresh = this.refreshExposureSnapshot({ emitToolsChanged: this.hasSnapshotBackedDirectExposure() });
 		this.unsubscribeEngineReload = this.engine.onReload(() => {
 			this.postReloadRefresh = this.refreshExposureSnapshot({ emitToolsChanged: true });
 		});
@@ -77900,13 +79423,13 @@ var DefaultNativeCapletsService = class {
 			...action.outputSchema ? { outputSchema: action.outputSchema } : {},
 			...action.annotations ? { annotations: action.annotations } : {}
 		}));
-		if (caplet.backend === "mcp") return [...snapshot?.directTools.filter((entry) => entry.caplet.server === caplet.server).map((entry) => this.directMcpTool(caplet, entry)) ?? [], ...mcpPrimitiveNativeTools(caplet, snapshot).map((operationName) => this.directNativeTool(caplet, operationName, {
+		if (caplet.backend === "mcp") return [...snapshot?.directTools.filter((entry) => entry.caplet.server === caplet.server).map((entry) => this.directDiscoveredTool(caplet, entry)) ?? [], ...mcpPrimitiveNativeTools(caplet, snapshot).map((operationName) => this.directNativeTool(caplet, operationName, {
 			description: `MCP ${operationName.replace(/_/g, " ")}.`,
 			inputSchema: nativeMcpPrimitiveInputSchema(operationName)
 		}))];
-		return [];
+		return snapshot?.directTools.filter((entry) => entry.caplet.server === caplet.server).map((entry) => this.directDiscoveredTool(caplet, entry)) ?? [];
 	}
-	directMcpTool(caplet, entry) {
+	directDiscoveredTool(caplet, entry) {
 		return this.directNativeTool(caplet, entry.downstreamName, {
 			...entry.tool.description ? { description: entry.tool.description } : {},
 			...entry.tool.inputSchema ? { inputSchema: entry.tool.inputSchema } : {},
@@ -77948,9 +79471,10 @@ var DefaultNativeCapletsService = class {
 			this.writeErr(`${error instanceof Error ? error.message : String(error)}\n`);
 		}
 	}
-	hasDirectMcpExposure() {
+	hasSnapshotBackedDirectExposure() {
 		return this.engine.enabledServers().some((caplet) => {
-			if (caplet.backend !== "mcp" || caplet.setup || caplet.projectBinding?.required) return false;
+			if (caplet.setup || caplet.projectBinding?.required) return false;
+			if (caplet.backend === "http" || caplet.backend === "cli") return false;
 			return resolveExposure(caplet.exposure, this.engine.currentConfig().options.exposure).direct;
 		});
 	}
@@ -78447,4 +79971,4 @@ function errorMessage(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 //#endregion
-export { loadGlobalConfig as $, ListRootsResultSchema as $t, codeModeRunParamsSchema as A, assertToolsCallTaskCapability as At, generateCodeModeRunToolDescription as B, CreateTaskResultSchema as Bt, nativeCapletPromptGuidance as C, resolveCapletsRoot as Ct, nativeCodeModeToolId as D, ReadBuffer as Dt, nativeCapletsSystemGuidance as E, resolveProjectConfigPath as Et, listCodeModeCallableCaplets as F, CallToolRequestSchema as Ft, directResourceUriMatchesTemplate as G, GetPromptRequestSchema as Gt, CapletsEngine as H, ElicitResultSchema as Ht, CodeModeLogStore as I, CallToolResultSchema as It, handleServerTool as J, JSONRPCMessageSchema as Jt, findProjectRoot as K, InitializeRequestSchema as Kt, redactCodeModeLogText as L, CompleteRequestSchema as Lt, QuickJsCodeModeSandbox as M, Protocol as Mt, diagnoseCodeModeTypeScript as N, mergeCapabilities as Nt, nativeCodeModeToolName as O, serializeMessage as Ot, createCodeModeCapletsApi as P, toJsonSchemaCompat as Pt, loadConfigWithSources as Q, ListResourcesRequestSchema as Qt, codeModeDeclarationHash as R, CreateMessageResultSchema as Rt, resolveCapletsServer as S, __exportAll as Sn, defaultStateBaseDir as St, nativeCapletToolName as T, resolveProjectCapletsRoot as Tt, resolveExposure as U, EmptyResultSchema as Ut, minifyCodeModeDeclarationText as V, DEFAULT_NEGOTIATED_PROTOCOL_VERSION as Vt, decodeDirectResourceUri as W, ErrorCode as Wt, capabilityDescription as X, ListPromptsRequestSchema as Xt, ServerRegistry as Y, LATEST_PROTOCOL_VERSION as Yt, loadConfig as Z, ListResourceTemplatesRequestSchema as Zt, resolveHostedCloudRemote as _, isZ4Schema as _n, DEFAULT_AUTH_DIR as _t, projectBindingError as a, SetLevelRequestSchema as an, loadCapletFilesFromMap as at, parseServerBaseUrl as b, safeParse as bn, defaultCacheBaseDir as bt, cloudAuthPath as c, isInitializeRequest as cn, markdownStructuredContent as ct, CloudAuthClient as d, isJSONRPCResultResponse as dn, runOAuthFlow as dt, ListToolsRequestSchema as en, loadLocalOverlayConfigWithSources as et, RemoteNativeCapletsService as f, getLiteralValue as fn, startGenericOAuthFlow as ft, resolveCapletsRemote as g, isSchemaOptional as gn, readTokenBundle as gt, resolveNativeCapletsServiceOptions as h, getSchemaDescription as hn, isTokenBundleExpired as ht, ProjectBindingError as i, SUPPORTED_PROTOCOL_VERSIONS as in, validateCapletFile as it, runCodeMode as j, AjvJsonSchemaValidator as jt, codeModeRunInputSchema as k, assertClientRequestTaskCapability as kt, migrateCredentials as l, isJSONRPCErrorResponse as ln, refreshOAuthTokenBundle as lt, buildProjectSyncManifest as m, getParseErrorMessage as mn, deleteTokenBundle as mt, resolveRemoteSelection as n, McpError as nn, parseConfig as nt, projectBindingRecovery as o, assertCompleteRequestPrompt as on, hasRenderableStructuredContent as ot, createSdkRemoteCapletsClient as p, getObjectShape as pn, startOAuthFlow as pt, fingerprintProjectRoot as q, InitializedNotificationSchema as qt, PROJECT_BINDING_ERROR_CODES as r, ReadResourceRequestSchema as rn, discoverCapletFiles as rt, CloudAuthStore as s, assertCompleteRequestResourceTemplate as sn, markdownCallToolResultContent as st, createNativeCapletsService as t, LoggingLevelSchema as tn, loadProjectConfig as tt, redactedCloudAuthStatus as u, isJSONRPCRequest as un, runGenericOAuthFlow as ut, resolveRemoteMode as v, normalizeObjectSchema as vn, DEFAULT_COMPLETION_CACHE_DIR as vt, nativeCapletToolDescription as w, resolveConfigPath as wt, resolveCapletsMode as x, safeParseAsync as xn, defaultConfigBaseDir as xt, controlUrlForBase as y, objectFromShape as yn, DEFAULT_OBSERVED_OUTPUT_SHAPE_CACHE_DIR as yt, generateCodeModeDeclarations as z, CreateMessageResultWithToolsSchema as zt };
+export { loadConfigWithSources as $, ListResourcesRequestSchema as $t, codeModeRunParamsSchema as A, assertClientRequestTaskCapability as At, generateCodeModeRunToolDescription as B, CreateMessageResultWithToolsSchema as Bt, nativeCapletPromptGuidance as C, __exportAll as Cn, defaultStateBaseDir as Ct, nativeCodeModeToolId as D, resolveProjectConfigPath as Dt, nativeCapletsSystemGuidance as E, resolveProjectCapletsRoot as Et, listCodeModeCallableCaplets as F, toJsonSchemaCompat as Ft, directResourceUriMatchesTemplate as G, ErrorCode as Gt, CapletsEngine as H, DEFAULT_NEGOTIATED_PROTOCOL_VERSION as Ht, CodeModeLogStore as I, CallToolRequestSchema as It, handleServerTool as J, InitializedNotificationSchema as Jt, findProjectRoot as K, GetPromptRequestSchema as Kt, redactCodeModeLogText as L, CallToolResultSchema as Lt, QuickJsCodeModeSandbox as M, AjvJsonSchemaValidator as Mt, diagnoseCodeModeTypeScript as N, Protocol as Nt, nativeCodeModeToolName as O, ReadBuffer as Ot, createCodeModeCapletsApi as P, mergeCapabilities as Pt, loadConfig as Q, ListResourceTemplatesRequestSchema as Qt, codeModeDeclarationHash as R, CompleteRequestSchema as Rt, resolveCapletsServer as S, safeParseAsync as Sn, defaultConfigBaseDir as St, nativeCapletToolName as T, resolveConfigPath as Tt, resolveExposure as U, ElicitResultSchema as Ut, minifyCodeModeDeclarationText as V, CreateTaskResultSchema as Vt, decodeDirectResourceUri as W, EmptyResultSchema as Wt, capabilityDescription as X, LATEST_PROTOCOL_VERSION as Xt, ServerRegistry as Y, JSONRPCMessageSchema as Yt, GoogleDiscoveryManager as Z, ListPromptsRequestSchema as Zt, resolveHostedCloudRemote as _, isSchemaOptional as _n, readTokenBundle as _t, projectBindingError as a, SUPPORTED_PROTOCOL_VERSIONS as an, validateCapletFile as at, parseServerBaseUrl as b, objectFromShape as bn, DEFAULT_OBSERVED_OUTPUT_SHAPE_CACHE_DIR as bt, cloudAuthPath as c, assertCompleteRequestResourceTemplate as cn, markdownCallToolResultContent as ct, CloudAuthClient as d, isJSONRPCRequest as dn, runGenericOAuthFlow as dt, ListRootsResultSchema as en, loadGlobalConfig as et, RemoteNativeCapletsService as f, isJSONRPCResultResponse as fn, runOAuthFlow as ft, resolveCapletsRemote as g, getSchemaDescription as gn, isTokenBundleExpired as gt, resolveNativeCapletsServiceOptions as h, getParseErrorMessage as hn, deleteTokenBundle as ht, ProjectBindingError as i, ReadResourceRequestSchema as in, discoverCapletFiles as it, runCodeMode as j, assertToolsCallTaskCapability as jt, codeModeRunInputSchema as k, serializeMessage as kt, migrateCredentials as l, isInitializeRequest as ln, markdownStructuredContent as lt, buildProjectSyncManifest as m, getObjectShape as mn, startOAuthFlow as mt, resolveRemoteSelection as n, LoggingLevelSchema as nn, loadProjectConfig as nt, projectBindingRecovery as o, SetLevelRequestSchema as on, loadCapletFilesFromMap as ot, createSdkRemoteCapletsClient as p, getLiteralValue as pn, startGenericOAuthFlow as pt, fingerprintProjectRoot as q, InitializeRequestSchema as qt, PROJECT_BINDING_ERROR_CODES as r, McpError as rn, parseConfig as rt, CloudAuthStore as s, assertCompleteRequestPrompt as sn, hasRenderableStructuredContent as st, createNativeCapletsService as t, ListToolsRequestSchema as tn, loadLocalOverlayConfigWithSources as tt, redactedCloudAuthStatus as u, isJSONRPCErrorResponse as un, refreshOAuthTokenBundle as ut, resolveRemoteMode as v, isZ4Schema as vn, DEFAULT_AUTH_DIR as vt, nativeCapletToolDescription as w, resolveCapletsRoot as wt, resolveCapletsMode as x, safeParse as xn, defaultCacheBaseDir as xt, controlUrlForBase as y, normalizeObjectSchema as yn, DEFAULT_COMPLETION_CACHE_DIR as yt, generateCodeModeDeclarations as z, CreateMessageResultSchema as zt };