@caplets/core 0.22.0 → 0.24.0

package/dist/index.js

@@ -1,9 +1,9 @@
-import { $ as loadGlobalConfig, $t as ListRootsResultSchema, A as codeModeRunParamsSchema, At as assertToolsCallTaskCapability, B as generateCodeModeRunToolDescription, Bt as CreateTaskResultSchema, C as nativeCapletPromptGuidance, Ct as resolveCapletsRoot, D as nativeCodeModeToolId, Dt as ReadBuffer, Et as resolveProjectConfigPath, F as listCodeModeCallableCaplets, Ft as CallToolRequestSchema, G as directResourceUriMatchesTemplate, Gt as GetPromptRequestSchema, H as CapletsEngine, Ht as ElicitResultSchema, I as CodeModeLogStore, It as CallToolResultSchema, J as handleServerTool, Jt as JSONRPCMessageSchema, K as findProjectRoot, Kt as InitializeRequestSchema, L as redactCodeModeLogText, Lt as CompleteRequestSchema, M as QuickJsCodeModeSandbox, Mt as Protocol, N as diagnoseCodeModeTypeScript, Nt as mergeCapabilities, Ot as serializeMessage, P as createCodeModeCapletsApi, Pt as toJsonSchemaCompat, Q as loadConfigWithSources, Qt as ListResourcesRequestSchema, R as codeModeDeclarationHash, Rt as CreateMessageResultSchema, S as resolveCapletsServer, St as defaultStateBaseDir, T as nativeCapletToolName, Tt as resolveProjectCapletsRoot, U as resolveExposure, Ut as EmptyResultSchema, V as minifyCodeModeDeclarationText, W as decodeDirectResourceUri, Wt as ErrorCode, X as capabilityDescription, Xt as ListPromptsRequestSchema, Y as ServerRegistry, Yt as LATEST_PROTOCOL_VERSION, Z as loadConfig, Zt as ListResourceTemplatesRequestSchema, _ as resolveHostedCloudRemote, _n as isZ4Schema, a as projectBindingError, an as SetLevelRequestSchema, at as loadCapletFilesFromMap, b as parseServerBaseUrl, bn as safeParse, bt as defaultCacheBaseDir, c as cloudAuthPath, cn as isInitializeRequest, ct as markdownStructuredContent, d as CloudAuthClient, dn as isJSONRPCResultResponse, dt as runOAuthFlow, en as ListToolsRequestSchema, et as loadLocalOverlayConfigWithSources, fn as getLiteralValue, ft as startGenericOAuthFlow, g as resolveCapletsRemote, gn as isSchemaOptional, gt as readTokenBundle, hn as getSchemaDescription, ht as isTokenBundleExpired, i as ProjectBindingError, in as SUPPORTED_PROTOCOL_VERSIONS, it as validateCapletFile, j as runCodeMode, jt as AjvJsonSchemaValidator, k as codeModeRunInputSchema, kt as assertClientRequestTaskCapability, l as migrateCredentials, ln as isJSONRPCErrorResponse, lt as refreshOAuthTokenBundle, m as buildProjectSyncManifest, mn as getParseErrorMessage, mt as deleteTokenBundle, n as resolveRemoteSelection, nn as McpError, nt as parseConfig, o as projectBindingRecovery, on as assertCompleteRequestPrompt, ot as hasRenderableStructuredContent, p as createSdkRemoteCapletsClient, pn as getObjectShape, pt as startOAuthFlow, q as fingerprintProjectRoot, qt as InitializedNotificationSchema, r as PROJECT_BINDING_ERROR_CODES, rn as ReadResourceRequestSchema, rt as discoverCapletFiles, s as CloudAuthStore, sn as assertCompleteRequestResourceTemplate, st as markdownCallToolResultContent, t as createNativeCapletsService, tn as LoggingLevelSchema, tt as loadProjectConfig, u as redactedCloudAuthStatus, un as isJSONRPCRequest, ut as runGenericOAuthFlow, v as resolveRemoteMode, vn as normalizeObjectSchema, w as nativeCapletToolDescription, wt as resolveConfigPath, x as resolveCapletsMode, xn as safeParseAsync, xt as defaultConfigBaseDir, y as controlUrlForBase, yn as objectFromShape, yt as DEFAULT_OBSERVED_OUTPUT_SHAPE_CACHE_DIR, z as generateCodeModeDeclarations, zt as CreateMessageResultWithToolsSchema } from "./service-4_chB2wu.js";
+import { $ as GoogleDiscoveryManager, $t as ListPromptsRequestSchema, A as emptyCodeModeRunMeta, At as ReadBuffer, B as codeModeDeclarationHash, Bt as CompleteRequestSchema, C as nativeCapletToolDescription, Cn as safeParse, Ct as defaultCacheBaseDir, Dt as resolveConfigPath, Et as resolveCapletsRoot, F as createCodeModeCapletsApi, Ft as Protocol, G as resolveExposure, Gt as ElicitResultSchema, H as generateCodeModeRunToolDescription, Ht as CreateMessageResultWithToolsSchema, I as listCodeModeCallableCaplets, It as mergeCapabilities, J as findProjectRoot, Jt as GetPromptRequestSchema, K as decodeDirectResourceUri, Kt as EmptyResultSchema, L as CodeModeJournalStore, Lt as toJsonSchemaCompat, M as CodeModeSessionManager, Mt as assertClientRequestTaskCapability, N as QuickJsCodeModeSandbox, Nt as assertToolsCallTaskCapability, O as codeModeRunInputSchema, Ot as resolveProjectCapletsRoot, P as diagnoseCodeModeTypeScript, Pt as AjvJsonSchemaValidator, Q as capabilityDescription, Qt as LATEST_PROTOCOL_VERSION, R as CodeModeLogStore, Rt as CallToolRequestSchema, S as nativeCapletPromptGuidance, Sn as objectFromShape, St as DEFAULT_OBSERVED_OUTPUT_SHAPE_CACHE_DIR, Tt as defaultStateBaseDir, U as minifyCodeModeDeclarationText, Ut as CreateTaskResultSchema, V as generateCodeModeDeclarations, Vt as CreateMessageResultSchema, W as CapletsEngine, X as handleServerTool, Xt as InitializedNotificationSchema, Y as fingerprintProjectRoot, Yt as InitializeRequestSchema, Z as ServerRegistry, Zt as JSONRPCMessageSchema, _ as resolveHostedCloudRemote, _n as getParseErrorMessage, _t as deleteTokenBundle, a as projectBindingError, an as McpError, at as parseConfig, b as parseServerBaseUrl, bn as isZ4Schema, c as cloudAuthPath, cn as SetLevelRequestSchema, ct as loadCapletFilesFromMap, d as CloudAuthClient, dn as isInitializeRequest, dt as markdownStructuredContent, en as ListResourceTemplatesRequestSchema, et as loadConfig, fn as isJSONRPCErrorResponse, ft as refreshOAuthTokenBundle, g as resolveCapletsRemote, gn as getObjectShape, gt as startOAuthFlow, hn as getLiteralValue, ht as startGenericOAuthFlow, i as ProjectBindingError, in as LoggingLevelSchema, it as loadProjectConfig, j as runCodeMode, jt as serializeMessage, k as codeModeRunParamsSchema, kt as resolveProjectConfigPath, l as migrateCredentials, ln as assertCompleteRequestPrompt, lt as hasRenderableStructuredContent, m as buildProjectSyncManifest, mn as isJSONRPCResultResponse, mt as runOAuthFlow, n as resolveRemoteSelection, nn as ListRootsResultSchema, nt as loadGlobalConfig, o as projectBindingRecovery, on as ReadResourceRequestSchema, ot as discoverCapletFiles, p as createSdkRemoteCapletsClient, pn as isJSONRPCRequest, pt as runGenericOAuthFlow, q as directResourceUriMatchesTemplate, qt as ErrorCode, r as PROJECT_BINDING_ERROR_CODES, rn as ListToolsRequestSchema, rt as loadLocalOverlayConfigWithSources, s as CloudAuthStore, sn as SUPPORTED_PROTOCOL_VERSIONS, st as validateCapletFile, t as createNativeCapletsService, tn as ListResourcesRequestSchema, tt as loadConfigWithSources, u as redactedCloudAuthStatus, un as assertCompleteRequestResourceTemplate, ut as markdownCallToolResultContent, v as resolveRemoteMode, vn as getSchemaDescription, vt as isTokenBundleExpired, w as nativeCapletToolName, wn as safeParseAsync, wt as defaultConfigBaseDir, x as resolveCapletsServer, xn as normalizeObjectSchema, y as controlUrlForBase, yn as isSchemaOptional, yt as readTokenBundle, z as redactCodeModeLogText, zt as CallToolResultSchema } from "./service-BCT_Ls_3.js";
 import { _ as record, b as unknown, d as literal, m as object, n as ZodOptional, o as array, p as number, r as _enum, s as boolean, v as string, x as url } from "./schemas-C0PNPwjS.js";
 import { f as redactSecrets, i as SERVER_ID_PATTERN, l as CAPLETS_ERROR_CODES, p as toSafeError, u as CapletsError } from "./validation-DgxCzt-A.js";
 import { generatedToolInputJsonSchemaForCaplet, generatedToolInputSchema, generatedToolInputSchemaForCaplet } from "./generated-tool-input-schema.js";
-import { f as observedOutputShapeKey, g as stableJsonStringify, h as schemaHash, i as observeOutputShape, u as FileObservedOutputShapeStore } from "./observed-output-shapes-CL5MFXwM.js";
-import { a as formatCapletList, c as resolveCliConfigPaths, l as cliCommands$1, n as completionScript, o as formatConfigPaths, s as listCaplets, t as completeCliWords, u as completionShells } from "./completion-DnQujlrc.js";
+import { f as observedOutputShapeKey, g as stableJsonStringify, h as schemaHash, i as observeOutputShape, u as FileObservedOutputShapeStore } from "./observed-output-shapes-D2k2-q8K.js";
+import { a as formatCapletList, c as resolveCliConfigPaths, l as cliCommands$1, n as completionScript, o as formatConfigPaths, s as listCaplets, t as completeCliWords, u as completionShells } from "./completion-CzHdM9B_.js";
 import { n as normalizeCapletSourcePath, t as FilesystemCapletSource } from "./filesystem-Kkg32TOJ.js";
 import { parseConfig as parseConfig$1 } from "./config-runtime.js";
 import fs, { accessSync, chmodSync, closeSync, constants, copyFileSync, cpSync, existsSync, lstatSync, mkdirSync, mkdtempSync, openSync, readFileSync, readdirSync, readlinkSync, realpathSync, rmSync, statSync, writeFileSync, writeSync } from "node:fs";
@@ -1553,7 +1553,7 @@ const EMPTY_COMPLETION_RESULT = { completion: {
 } };
 //#endregion
 //#region package.json
-var version = "0.22.0";
+var version = "0.24.0";
 //#endregion
 //#region src/serve/session.ts
 var CapletsMcpSession = class {
@@ -1563,6 +1563,7 @@ var CapletsMcpSession = class {
 	resources = /* @__PURE__ */ new Map();
 	prompts = /* @__PURE__ */ new Map();
 	codeModeTool;
+	codeModeSessions = new CodeModeSessionManager();
 	unsubscribeReload;
 	closed = false;
 	constructor(engine, options = {}) {
@@ -1592,6 +1593,7 @@ var CapletsMcpSession = class {
 		if (this.closed) return;
 		this.closed = true;
 		this.unsubscribeReload();
+		this.codeModeSessions.close();
 		this.clearRegistrations();
 		await this.server.close();
 	}
@@ -1675,7 +1677,11 @@ var CapletsMcpSession = class {
 			code: parsed.data.code,
 			service: new EngineNativeCapletsService(this.engine),
 			...parsed.data.timeoutMs === void 0 ? {} : { timeoutMs: parsed.data.timeoutMs },
-			logStore: new CodeModeLogStore()
+			...parsed.data.sessionId === void 0 ? {} : { sessionId: parsed.data.sessionId },
+			logStore: new CodeModeLogStore(),
+			journalStore: new CodeModeJournalStore(),
+			sessionManager: this.codeModeSessions,
+			runtimeScope: "mcp"
 		}) : {
 			ok: false,
 			error: {
@@ -1689,14 +1695,7 @@ var CapletsMcpSession = class {
 				truncated: false,
 				stored: false
 			},
-			meta: {
-				runId: "",
-				traceId: "",
-				declarationHash: "",
-				durationMs: 0,
-				timeoutMs: 0,
-				maxTimeoutMs: 0
-			}
+			meta: emptyCodeModeRunMeta()
 		};
 		return {
 			content: [{
@@ -1895,6 +1894,8 @@ function engineOptions(options) {
 	if (options.configPath !== void 0) engineOptions.configPath = options.configPath;
 	if (options.projectConfigPath !== void 0) engineOptions.projectConfigPath = options.projectConfigPath;
 	if (options.authDir !== void 0) engineOptions.authDir = options.authDir;
+	if (options.artifactDir !== void 0) engineOptions.artifactDir = options.artifactDir;
+	if (options.exposeLocalArtifactPaths !== void 0) engineOptions.exposeLocalArtifactPaths = options.exposeLocalArtifactPaths;
 	if (options.watchDebounceMs !== void 0) engineOptions.watchDebounceMs = options.watchDebounceMs;
 	if (options.writeErr !== void 0) engineOptions.writeErr = options.writeErr;
 	return engineOptions;
@@ -4994,7 +4995,7 @@ function isPackageCommand(command) {
 function renderCaplet(input) {
 	const lines = [
 		"---",
-		"$schema: https://caplets.dev/caplet-frontmatter.schema.json",
+		"# yaml-language-server: $schema=https://caplets.dev/caplet.schema.json",
 		`name: ${yamlString$1(input.name)}`,
 		`description: ${yamlString$1(input.description)}`,
 		"tags:",
@@ -5081,6 +5082,15 @@ function addOpenApiCaplet(id, options) {
 		["auth", authFromTokenEnv(options.tokenEnv) ?? { type: "none" }]
 	], options);
 }
+function addGoogleDiscoveryCaplet(id, options) {
+	const discovery = options.discovery ?? options.discoveryUrl;
+	if (!discovery) throw new CapletsError("REQUEST_INVALID", "Google Discovery Caplet requires --discovery or --discovery-url");
+	return writeGeneratedCaplet(id, "Google Discovery", "googleDiscoveryApi", [
+		[options.discoveryUrl ? "discoveryUrl" : isUrlLike(discovery) ? "discoveryUrl" : "discoveryPath", discovery],
+		["baseUrl", options.baseUrl],
+		["auth", authFromTokenEnv(options.tokenEnv) ?? { type: "none" }]
+	], options);
+}
 function addGraphqlCaplet(id, options) {
 	if (!options.endpointUrl) throw new CapletsError("REQUEST_INVALID", "GraphQL Caplet requires --endpoint-url");
 	if (Boolean(options.schema) === Boolean(options.introspection)) throw new CapletsError("REQUEST_INVALID", "GraphQL Caplet requires exactly one of --schema or --introspection");
@@ -5183,7 +5193,7 @@ function resolvePrintOutputPath(id, options) {
 }
 function renderLocalPaths(fields, outputDir) {
 	return fields.map(([key, value]) => {
-		if (key !== "specPath" && key !== "schemaPath" || typeof value !== "string") return [key, value];
+		if (key !== "specPath" && key !== "schemaPath" && key !== "discoveryPath" || typeof value !== "string") return [key, value];
 		return [key, localPathRelativeToOutput(value, outputDir)];
 	});
 }
@@ -5234,7 +5244,7 @@ function renderBackendCaplet(id, label, backend, fields) {
 	const description = `${label} backend Caplet generated by caplets add.`;
 	const lines = [
 		"---",
-		"$schema: https://caplets.dev/caplet-frontmatter.schema.json",
+		"$schema: https://caplets.dev/caplet.schema.json",
 		`name: ${yamlString(name)}`,
 		`description: ${yamlString(description)}`,
 		"tags:",
@@ -5343,7 +5353,7 @@ function collectFiles(root) {
 //#endregion
 //#region src/cli/auth.ts
 async function loginAuth(serverId, options) {
-	const server = findAuthTarget(serverId, options.config ?? loadConfig(options.configPath));
+	const server = await resolveAuthTarget$1(serverId, options.config ?? loadConfig(options.configPath), options.authDir);
 	assertLoginTarget(server, serverId);
 	try {
 		const flowOptions = {
@@ -5376,7 +5386,7 @@ async function refreshAuth(serverId, options) {
 	options.writeOut(`Refreshed OAuth credentials for \`${serverId}\`.\n`);
 }
 async function refreshAuthResult(serverId, options) {
-	const target = findAuthTarget(serverId, options.config ?? loadConfig(options.configPath));
+	const target = await resolveAuthTarget$1(serverId, options.config ?? loadConfig(options.configPath), options.authDir);
 	assertLoginTarget(target, serverId);
 	await refreshOAuthTokenBundle(target, options.authDir);
 	return { server: serverId };
@@ -5450,14 +5460,35 @@ function formatAuthRows(rows, format) {
 function findAuthTarget(serverId, config = loadConfig()) {
 	return authTargets(config).find((server) => server.server === serverId);
 }
+async function resolveAuthTarget$1(serverId, config, authDir) {
+	const target = findAuthTarget(serverId, config);
+	if (target?.backend !== "googleDiscovery") return target;
+	const api = config.googleDiscoveryApis[serverId];
+	if (!api || api.auth.type !== "oauth2" && api.auth.type !== "oidc") return target;
+	const manager = new GoogleDiscoveryManager(new ServerRegistry(config), authDir ? { authDir } : {});
+	const baseUrl = api.baseUrl ?? await manager.resolveBaseUrl(api).catch(() => void 0) ?? api.discoveryUrl;
+	return {
+		...target,
+		...baseUrl ? { baseUrl } : {},
+		...api.auth.scopes?.length ? {} : { resolvedScopes: await manager.resolveAuthScopes(api) }
+	};
+}
 function authTargets(config) {
 	return [
 		...Object.values(config.mcpServers).filter((server) => server.transport !== "stdio" && (server.auth?.type === "oauth2" || server.auth?.type === "oidc")),
 		...Object.values(config.openapiEndpoints).filter((endpoint) => endpoint.auth?.type === "oauth2" || endpoint.auth?.type === "oidc"),
+		...Object.values(config.googleDiscoveryApis).filter((api) => api.auth?.type === "oauth2" || api.auth?.type === "oidc").map(googleDiscoveryAuthTarget),
 		...Object.values(config.graphqlEndpoints).filter((endpoint) => endpoint.auth?.type === "oauth2" || endpoint.auth?.type === "oidc").map(graphQlAuthTarget),
 		...Object.values(config.httpApis).filter((api) => api.auth?.type === "oauth2" || api.auth?.type === "oidc").map(httpAuthTarget)
 	];
 }
+function googleDiscoveryAuthTarget(api) {
+	const baseUrl = api.baseUrl ?? api.discoveryUrl;
+	return {
+		...api,
+		...baseUrl ? { baseUrl } : {}
+	};
+}
 function graphQlAuthTarget(endpoint) {
 	return {
 		...endpoint,
@@ -5493,10 +5524,31 @@ async function runCodeModeCli(options) {
 		...options.authDir ? { authDir: options.authDir } : {}
 	});
 	try {
-		const code = await readCodeModeCliCode(options);
-		const result = await service.execute(nativeCodeModeToolId, {
-			code,
-			...options.timeoutMs === void 0 ? {} : { timeoutMs: options.timeoutMs }
+		if (options.sessionId !== void 0) {
+			const result = {
+				ok: false,
+				error: {
+					code: "SESSION_NOT_FOUND",
+					message: "Code Mode one-shot CLI runs do not support --session-id. Omit --session-id to start a fresh one-shot run."
+				},
+				diagnostics: [],
+				logs: {
+					entries: [],
+					truncated: false,
+					stored: false
+				},
+				meta: emptyCodeModeRunMeta()
+			};
+			if (options.json) options.writeOut(`${JSON.stringify(result, null, 2)}\n`);
+			else options.writeOut(`${result.error.code}: ${result.error.message}\n`);
+			options.setExitCode(1);
+			return;
+		}
+		const result = await runCodeMode({
+			code: await readCodeModeCliCode(options),
+			service: service.codeModeService?.() ?? service,
+			...options.timeoutMs === void 0 ? {} : { timeoutMs: options.timeoutMs },
+			runtimeScope: "cli-one-shot"
 		});
 		if (options.json) options.writeOut(`${JSON.stringify(result, null, 2)}\n`);
 		else if (result.ok) options.writeOut(`${formatHumanValue(result.value)}\n`);
@@ -5509,6 +5561,25 @@ async function runCodeModeCli(options) {
 		await service.close();
 	}
 }
+async function runCodeModeReplCli(options) {
+	const envelope = {
+		ok: false,
+		error: {
+			code: "UNSUPPORTED_OPERATION",
+			message: "Code Mode REPL sessions are not available in this build. Use `caplets code-mode` for one-shot runs."
+		},
+		diagnostics: [],
+		logs: {
+			entries: [],
+			truncated: false,
+			stored: false
+		},
+		meta: emptyCodeModeRunMeta()
+	};
+	if (options.json) options.writeOut(`${JSON.stringify(envelope, null, 2)}\n`);
+	else options.writeOut(`${envelope.error.code}: ${envelope.error.message}\n`);
+	options.setExitCode(1);
+}
 async function codeModeTypesCli(options) {
 	const engine = new CapletsEngine({
 		...options.configPath ? { configPath: options.configPath } : {},
@@ -6090,6 +6161,7 @@ function allCaplets(config) {
 	return [
 		...Object.values(typed.mcpServers ?? {}),
 		...Object.values(typed.openapiEndpoints ?? {}),
+		...Object.values(typed.googleDiscoveryApis ?? {}),
 		...Object.values(typed.graphqlEndpoints ?? {}),
 		...Object.values(typed.httpApis ?? {}),
 		...Object.values(typed.cliTools ?? {}),
@@ -6690,6 +6762,7 @@ async function runCapletSetupCli(capletId, options = {}) {
 	const caplet = Object.values({
 		...config.mcpServers,
 		...config.openapiEndpoints,
+		...config.googleDiscoveryApis,
 		...config.graphqlEndpoints,
 		...config.httpApis,
 		...config.cliTools,
@@ -6815,6 +6888,8 @@ async function runSetup(integration, options = {}) {
 	if (!setupIntegrationIds.includes(integration)) return await runCapletSetupCli(integration, {
 		...options.yes === void 0 ? {} : { yes: options.yes },
 		target: resolveSetupTargetKind(options),
+		...options.env?.CAPLETS_CONFIG ? { configPath: options.env.CAPLETS_CONFIG } : {},
+		...options.env?.CAPLETS_PROJECT_CONFIG ? { projectConfigPath: options.env.CAPLETS_PROJECT_CONFIG } : {},
 		...options.remote === void 0 && !isRemoteSetup(options) ? {} : { remote: isRemoteSetup(options) }
 	});
 	const result = await executeSetup(integration, options);
@@ -6932,7 +7007,7 @@ function setupDefinition(id, options) {
 	}
 }
 function remoteSetupDefinition(id, options) {
-	const serverUrl = nonEmpty$1(options.remoteUrl) ?? nonEmpty$1(options.serverUrl) ?? nonEmpty$1(options.env?.CAPLETS_REMOTE_URL) ?? nonEmpty$1(options.env?.CAPLETS_SERVER_URL) ?? "https://caplets.example.com/caplets";
+	const serverUrl = nonEmpty$1(options.remoteUrl) ?? nonEmpty$1(options.serverUrl) ?? nonEmpty$1(options.env?.CAPLETS_REMOTE_URL) ?? "https://caplets.example.com/caplets";
 	if (id === "opencode") return {
 		name: "OpenCode",
 		actions: [{
@@ -6945,7 +7020,7 @@ function remoteSetupDefinition(id, options) {
 				"--global"
 			]
 		}],
-		nextSteps: [`Run OpenCode with CAPLETS_MODE=remote and CAPLETS_SERVER_URL=${serverUrl}.`, "Keep CAPLETS_SERVER_PASSWORD in your shell or secret manager."]
+		nextSteps: [`Run OpenCode with CAPLETS_MODE=remote and CAPLETS_REMOTE_URL=${serverUrl}.`, "Keep CAPLETS_REMOTE_TOKEN or CAPLETS_REMOTE_PASSWORD in your shell or secret manager."]
 	};
 	if (id === "pi") return {
 		name: "Pi",
@@ -6955,7 +7030,7 @@ function remoteSetupDefinition(id, options) {
 			command: "pi",
 			args: ["install", "npm:@caplets/pi"]
 		}],
-		nextSteps: [`Start Pi with CAPLETS_MODE=remote and CAPLETS_SERVER_URL=${serverUrl}.`, "Keep CAPLETS_SERVER_PASSWORD in your shell or secret manager."]
+		nextSteps: [`Start Pi with CAPLETS_MODE=remote and CAPLETS_REMOTE_URL=${serverUrl}.`, "Keep CAPLETS_REMOTE_TOKEN or CAPLETS_REMOTE_PASSWORD in your shell or secret manager."]
 	};
 	if (id === "codex") return {
 		name: "Codex",
@@ -6994,7 +7069,7 @@ function remoteSetupDefinition(id, options) {
 			path: options.output,
 			content: `${JSON.stringify({ mcpServers: { caplets: { url: `${serverUrl.replace(/\/$/, "")}/v1/mcp` } } }, null, 2)}\n`
 		}],
-		nextSteps: ["Add Basic Auth credentials through your agent's secret mechanism.", "Do not hardcode CAPLETS_SERVER_PASSWORD in a committed config file."]
+		nextSteps: ["Add Basic Auth credentials through your agent's secret mechanism.", "Do not hardcode CAPLETS_REMOTE_TOKEN or CAPLETS_REMOTE_PASSWORD in a committed config file."]
 	};
 }
 function parseSetupIntegrationId(value) {
@@ -10974,7 +11049,7 @@ async function dispatch(request, context) {
 async function startRemoteAuthLogin(serverId, context) {
 	if (!context.authFlowStore || !context.controlCallbackBaseUrl) throw new CapletsError("REQUEST_INVALID", "Remote auth login is not available on this server");
 	const config = loadConfigWithSources(context.configPath, context.projectConfigPath).config;
-	const target = findAuthTarget(serverId, config);
+	const target = await resolveAuthTarget$1(serverId, config, context.authDir);
 	assertLoginTarget(target, serverId);
 	const flowId = randomUUID();
 	const baseUrl = context.controlCallbackBaseUrl.endsWith("/") ? context.controlCallbackBaseUrl : `${context.controlCallbackBaseUrl}/`;
@@ -11043,6 +11118,16 @@ function dispatchAdd(args, context) {
 				print: false
 			})
 		};
+		case "google-discovery":
+		case "googleDiscovery": return {
+			remote: true,
+			label: "Google Discovery",
+			...addGoogleDiscoveryCaplet(id, {
+				...options,
+				destinationRoot: context.projectCapletsRoot,
+				print: false
+			})
+		};
 		case "graphql": return {
 			remote: true,
 			label: "GraphQL",
@@ -11061,7 +11146,7 @@ function dispatchAdd(args, context) {
 				print: false
 			})
 		};
-		default: throw new CapletsError("REQUEST_INVALID", "add.kind must be cli, mcp, openapi, graphql, or http");
+		default: throw new CapletsError("REQUEST_INVALID", "add.kind must be cli, mcp, openapi, google-discovery, googleDiscovery, graphql, or http");
 	}
 }
 function optionalProp(key, value) {
@@ -11118,6 +11203,14 @@ function remoteAddOptions$1(kind, options) {
 			tokenEnv: "string",
 			force: "boolean"
 		});
+		case "google-discovery":
+		case "googleDiscovery": return pickOptions(options, {
+			discovery: "string",
+			discoveryUrl: "string",
+			baseUrl: "string",
+			tokenEnv: "string",
+			force: "boolean"
+		});
 		case "graphql": return pickOptions(options, {
 			endpointUrl: "string",
 			schema: "string",
@@ -11458,12 +11551,16 @@ function attachEventsResponse(engine, activeStreams) {
 	} });
 }
 async function serveHttp(options, engineOptions = {}, writeErr = (value) => process.stderr.write(value)) {
-	const engine = new CapletsEngine(engineOptions);
+	const resolvedEngineOptions = {
+		exposeLocalArtifactPaths: false,
+		...engineOptions
+	};
+	const engine = new CapletsEngine(resolvedEngineOptions);
 	const app = createHttpServeApp(options, engine, {
 		writeErr,
 		control: {
-			...engineOptions,
-			projectCapletsRoot: projectCapletsRootForEngineOptions(engineOptions)
+			...resolvedEngineOptions,
+			projectCapletsRoot: projectCapletsRootForEngineOptions(resolvedEngineOptions)
 		}
 	});
 	const paths = servicePaths(options.path);
@@ -11483,12 +11580,16 @@ async function serveHttp(options, engineOptions = {}, writeErr = (value) => proc
 	}), app, engine, writeErr);
 }
 async function serveHttpWithSessionFactory(options, createSession, writeErr = (value) => process.stderr.write(value)) {
-	const engine = new CapletsEngine({});
+	const resolvedEngineOptions = { exposeLocalArtifactPaths: false };
+	const engine = new CapletsEngine(resolvedEngineOptions);
 	const app = createHttpServeApp(options, engine, {
 		writeErr,
 		exposeAttach: false,
 		sessionFactory: createSession,
-		control: { projectCapletsRoot: resolveProjectCapletsRoot() }
+		control: {
+			...resolvedEngineOptions,
+			projectCapletsRoot: resolveProjectCapletsRoot()
+		}
 	});
 	const paths = servicePaths(options.path);
 	const origin = `http://${formatHost(options.host)}:${options.port}`;
@@ -11729,11 +11830,8 @@ function createAttachNativeService(options, io) {
 		mode: options.selection.kind === "hosted_cloud" ? "cloud" : "remote",
 		configPath: options.configPath,
 		projectConfigPath: options.projectConfigPath,
-		server: {
-			url: options.selection.remote.baseUrl.toString(),
-			...options.selection.remote.fetch ? { fetch: options.selection.remote.fetch } : {}
-		},
 		remote: {
+			url: options.selection.remote.baseUrl.toString(),
 			...options.selection.remote.fetch ? { fetch: options.selection.remote.fetch } : {},
 			...options.selection.kind === "hosted_cloud" ? { cloud: {
 				url: options.selection.cloudPresence.url.toString(),
@@ -11749,6 +11847,7 @@ function createAttachNativeService(options, io) {
 			url: options.selection.remote.attachUrl,
 			...options.selection.remote.fetch ? { fetch: options.selection.remote.fetch } : {}
 		}),
+		exposeLocalArtifactPaths: false,
 		...io.writeErr ? { writeErr: io.writeErr } : {}
 	});
 }
@@ -12895,7 +12994,35 @@ function createProgram(io = {}) {
 		}
 		if (suggestions.length > 0) writeOut(`${suggestions.join("\n")}\n`);
 	});
-	program.command(cliCommands$1.codeMode).description("Run, inspect, and debug Caplets Code Mode.").argument("[code]", "inline TypeScript code to run").option("--file <path>", "read TypeScript code from a file relative to the current directory").option("--timeout-ms <ms>", "execution timeout in milliseconds", parsePositiveInteger).option("--json", "print the structured run envelope").action(async (code, options) => {
+	program.command(cliCommands$1.codeMode).description("Run, inspect, and debug Caplets Code Mode.").argument("[code]", "inline TypeScript code to run").option("--file <path>", "read TypeScript code from a file relative to the current directory").option("--session-id <id>", "optional Code Mode session identifier").option("--recover <ref>", "recover a prior Code Mode REPL session when supported").option("--timeout-ms <ms>", "execution timeout in milliseconds", parsePositiveInteger).option("--json", "print the structured run envelope").action(async (code, options) => {
+		if (code === "repl" && options.file === void 0) {
+			await runCodeModeReplCli({
+				env,
+				...currentConfigPath() ? { configPath: currentConfigPath() } : {},
+				projectConfigPath: envProjectConfigPath(env),
+				...io.authDir ? { authDir: io.authDir } : {},
+				...options.sessionId === void 0 ? {} : { sessionId: options.sessionId },
+				...options.recover === void 0 ? {} : { recoveryRef: options.recover },
+				...options.json === void 0 ? {} : { json: options.json },
+				writeOut,
+				setExitCode
+			});
+			return;
+		}
+		if (options.recover !== void 0) {
+			await runCodeModeReplCli({
+				env,
+				...currentConfigPath() ? { configPath: currentConfigPath() } : {},
+				projectConfigPath: envProjectConfigPath(env),
+				...io.authDir ? { authDir: io.authDir } : {},
+				...options.sessionId === void 0 ? {} : { sessionId: options.sessionId },
+				recoveryRef: options.recover,
+				...options.json === void 0 ? {} : { json: options.json },
+				writeOut,
+				setExitCode
+			});
+			return;
+		}
 		await runCodeModeCli({
 			env,
 			...currentConfigPath() ? { configPath: currentConfigPath() } : {},
@@ -12903,6 +13030,7 @@ function createProgram(io = {}) {
 			...io.authDir ? { authDir: io.authDir } : {},
 			...code === void 0 ? {} : { inlineCode: code },
 			...options.file === void 0 ? {} : { file: options.file },
+			...options.sessionId === void 0 ? {} : { sessionId: options.sessionId },
 			...options.timeoutMs === void 0 ? {} : { timeoutMs: options.timeoutMs },
 			...options.json === void 0 ? {} : { json: options.json },
 			...io.readStdin ? { readStdin: io.readStdin } : {},
@@ -13314,6 +13442,22 @@ function createProgram(io = {}) {
 		});
 		writeAddResult(writeOut, `${localMutationTargetLabel(target, io)}OpenAPI`, result);
 	});
+	add.command("google-discovery").description("Add a Google Discovery API backend Caplet.").argument("<id>", "Caplet ID/display seed").option("--discovery <path-or-url>", "Google Discovery document path or URL").option("--discovery-url <url>", "remote Google Discovery document URL").option("--base-url <url>", "request base URL override").option("--token-env <ENV>", "bearer token environment variable reference").option("--project", "write to the project Caplets root").option("-g, --global", "write to the user Caplets root").option("--remote", "add through remote control").option("--print", "print generated Caplet text without writing a file").option("--output <path>", "output path").option("--force", "overwrite an existing destination file").action(async (id, options) => {
+		const target = parseMutationTarget(options);
+		if (target === "remote") {
+			writeAddResult(writeOut, "Google Discovery", await requireRemoteClientForTarget(io).request("add", {
+				kind: "googleDiscovery",
+				id,
+				options: remoteAddOptions(options)
+			}));
+			return;
+		}
+		const result = addGoogleDiscoveryCaplet(id, {
+			...options,
+			destinationRoot: addDestinationRoot(target, currentConfigPath(), env)
+		});
+		writeAddResult(writeOut, `${localMutationTargetLabel(target, io)}Google Discovery`, result);
+	});
 	add.command("graphql").description("Add a GraphQL backend Caplet.").argument("<id>", "Caplet ID/display seed").option("--endpoint-url <url>", "GraphQL endpoint URL").option("--schema <path-or-url>", "GraphQL schema path or URL").option("--introspection", "load schema through endpoint introspection").option("--token-env <ENV>", "bearer token environment variable reference").option("--project", "write to the project Caplets root").option("-g, --global", "write to the user Caplets root").option("--remote", "add through remote control").option("--print", "print generated Caplet text without writing a file").option("--output <path>", "output path").option("--force", "overwrite an existing destination file").action(async (id, options) => {
 		const target = parseMutationTarget(options);
 		if (target === "remote") {
@@ -13636,8 +13780,8 @@ function envConfigPath(env) {
 }
 function remoteClientForCli(io) {
 	const env = io.env ?? process.env;
-	if (resolveCapletsMode({}, env).mode !== "remote") return;
-	return new RemoteControlClient(resolveCapletsServer(io.fetch ? { fetch: io.fetch } : {}, env));
+	if (resolveRemoteMode({}, env).mode !== "remote") return;
+	return new RemoteControlClient(resolveCapletsRemote(io.fetch ? { fetch: io.fetch } : {}, env));
 }
 async function openBrowser(url) {
 	const { spawn } = await import("node:child_process");
@@ -13752,7 +13896,7 @@ async function remoteAuthLogin(remote, serverId, open, writeOut) {
 }
 function requireRemoteClientForTarget(io) {
 	const remote = remoteClientForCli(io);
-	if (!remote) throw new CapletsError("REQUEST_INVALID", "--remote requires CAPLETS_MODE=remote and CAPLETS_SERVER_URL");
+	if (!remote) throw new CapletsError("REQUEST_INVALID", "--remote requires CAPLETS_MODE=remote and CAPLETS_REMOTE_URL");
 	return remote;
 }
 function collect(value, previous) {
@@ -13954,6 +14098,7 @@ function mergePartialLocalOverlays(globalOverlay, projectOverlay) {
 const capletConfigKinds = [
 	"mcpServers",
 	"openapiEndpoints",
+	"googleDiscoveryApis",
 	"graphqlEndpoints",
 	"httpApis",
 	"cliTools",
@@ -13996,7 +14141,7 @@ function formatOverlaySource(kind) {
 	return kind;
 }
 function hasEnabledCaplet(config, id) {
-	const caplet = config.mcpServers[id] ?? config.openapiEndpoints[id] ?? config.graphqlEndpoints[id] ?? config.httpApis[id] ?? config.cliTools[id] ?? config.capletSets[id];
+	const caplet = config.mcpServers[id] ?? config.openapiEndpoints[id] ?? config.googleDiscoveryApis[id] ?? config.graphqlEndpoints[id] ?? config.httpApis[id] ?? config.cliTools[id] ?? config.capletSets[id];
 	return Boolean(caplet && !caplet.disabled);
 }
 async function executeLocalOperation(caplet, request, io, config) {
@@ -14631,7 +14776,7 @@ function classifyCapletRuntimeRoute(caplet) {
 	if (caplet.setup) return "process";
 	if (caplet.backend === "cli") return "process";
 	if (caplet.backend === "mcp") return caplet.transport === "stdio" || Boolean(caplet.command) ? "process" : "worker_safe";
-	if (caplet.backend === "openapi" || caplet.backend === "graphql" || caplet.backend === "http") return "worker_safe";
+	if (caplet.backend === "openapi" || caplet.backend === "googleDiscovery" || caplet.backend === "graphql" || caplet.backend === "http") return "worker_safe";
 	if (caplet.backend === "caplets") return "worker_safe";
 	return "local_only";
 }
@@ -14740,6 +14885,7 @@ function capletsFromConfig(config) {
 	return [
 		...Object.values(config.mcpServers),
 		...Object.values(config.openapiEndpoints),
+		...Object.values(config.googleDiscoveryApis ?? {}),
 		...Object.values(config.graphqlEndpoints),
 		...Object.values(config.httpApis),
 		...Object.values(config.cliTools),
@@ -14748,6 +14894,7 @@ function capletsFromConfig(config) {
 }
 function localReferencePaths(caplet) {
 	if (caplet.backend === "openapi") return filterLocalReferences([caplet.specPath]);
+	if (caplet.backend === "googleDiscovery") return filterLocalReferences([caplet.discoveryPath]);
 	if (caplet.backend === "graphql") return filterLocalReferences([caplet.schemaPath, ...Object.values(caplet.operations ?? {}).map((operation) => operation.documentPath)]);
 	if (caplet.backend === "caplets") return filterLocalReferences([caplet.configPath]);
 	return [];

package/dist/media/artifacts.d.ts

@@ -0,0 +1,24 @@
+export type MediaArtifact = {
+    uri: string;
+    path?: string;
+    filename: string;
+    mimeType?: string;
+    byteLength: number;
+    sha256: string;
+};
+export type WriteMediaArtifactInput = {
+    rootDir?: string;
+    capletId: string;
+    callId?: string;
+    suggestedFilename?: string;
+    outputPath?: string;
+    mimeType?: string;
+    bytes: Uint8Array | Buffer;
+    exposeLocalPath?: boolean;
+};
+export declare function artifactUri(capletId: string, callId: string, filename: string): string;
+export declare function writeMediaArtifact(input: WriteMediaArtifactInput): Promise<MediaArtifact>;
+export declare function resolveMediaArtifact(uri: string, options?: {
+    artifactRoot?: string;
+    maxBytes?: number;
+}): MediaArtifact;

package/dist/media/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./artifacts";
+export * from "./input";

package/dist/media/input.d.ts

@@ -0,0 +1,29 @@
+export type MediaInput = {
+    path: string;
+    artifact?: never;
+    dataUrl?: never;
+    filename?: string;
+    mimeType?: string;
+} | {
+    artifact: string;
+    path?: never;
+    dataUrl?: never;
+    filename?: string;
+    mimeType?: string;
+} | {
+    dataUrl: string;
+    path?: never;
+    artifact?: never;
+    filename?: string;
+    mimeType?: string;
+};
+export type ResolvedMediaInput = {
+    bytes: Buffer;
+    filename: string;
+    mimeType?: string;
+};
+export declare function readMediaInput(input: unknown, options?: {
+    artifactRoot?: string;
+    maxBytes?: number;
+    allowLocalPaths?: boolean;
+}): Promise<ResolvedMediaInput>;

package/dist/native/options.d.ts

@@ -1,10 +1,8 @@
-import type { CapletsServerEnv, CapletsServerInput } from "../server/options";
-import { type CapletsRemoteEnv } from "../remote/options";
+import { type CapletsRemoteEnv, type CapletsRemoteInput } from "../remote/options";
 type CapletsMode = "auto" | "local" | "remote" | "cloud";
 export type NativeCapletsMode = CapletsMode;
-export type NativeRemoteCapletsOptions = {
+export type NativeRemoteCapletsOptions = CapletsRemoteInput & {
     pollIntervalMs?: number;
-    fetch?: typeof fetch;
     cloud?: NativeCloudPresenceInput;
 };
 export type NativeCloudPresenceInput = {
@@ -16,10 +14,9 @@ export type NativeCloudPresenceInput = {
 };
 export type NativeCapletsServiceResolutionInput = {
     mode?: NativeCapletsMode;
-    server?: CapletsServerInput;
     remote?: NativeRemoteCapletsOptions;
 };
-export type NativeCapletsEnv = CapletsServerEnv & CapletsRemoteEnv;
+export type NativeCapletsEnv = CapletsRemoteEnv & Partial<Record<"CAPLETS_CLOUD_URL" | "CAPLETS_CLOUD_TOKEN" | "CAPLETS_CLOUD_WORKSPACE_ID" | "CAPLETS_PROJECT_ROOT", string>>;
 export type NativeRemoteAuthOptions = {
     enabled: false;
     user: string;

package/dist/native/remote.d.ts

@@ -40,11 +40,13 @@ export declare class RemoteNativeCapletsService implements NativeCapletsService
     private client;
     private unsubscribeRemote;
     private readonly pollTimer;
+    private readonly codeModeSessions;
     private closed;
     private resetInFlight;
     constructor(options: RemoteNativeCapletsServiceOptions);
     listTools(): NativeCapletTool[];
     execute(capletId: string, request: unknown): Promise<unknown>;
+    codeModeService(): NativeCapletsService;
     reload(): Promise<boolean>;
     onToolsChanged(listener: NativeCapletsToolsChangedListener): () => void;
     close(): Promise<void>;

package/dist/native/service.d.ts

@@ -8,6 +8,7 @@ export type NativeCapletsServiceOptions = NativeCapletsServiceResolutionInput &
     configPath?: string;
     projectConfigPath?: string;
     authDir?: string;
+    exposeLocalArtifactPaths?: boolean;
     watchDebounceMs?: number;
     watch?: boolean;
     writeErr?: (value: string) => void;
@@ -35,6 +36,7 @@ export type NativeCapletsToolsChangedListener = (tools: NativeCapletTool[]) => v
 export type NativeCapletsService = {
     listTools(): NativeCapletTool[];
     execute(capletId: string, request: unknown): Promise<unknown>;
+    codeModeService?(): NativeCapletsService;
     reload(): Promise<boolean>;
     onToolsChanged(listener: NativeCapletsToolsChangedListener): () => void;
     close(): Promise<void>;