@caplets/core 0.28.1 → 0.29.1

package/dist/native.js

@@ -1,4 +1,4 @@
-import { B as nativeCodeModeToolId, I as nativeCapletPromptGuidance, L as nativeCapletToolDescription, R as nativeCapletToolName, V as nativeCodeModeToolName, h as createSdkRemoteCapletsClient, m as RemoteNativeCapletsService, t as createNativeCapletsService, w as resolveNativeCapletsServiceOptions, z as nativeCapletsSystemGuidance } from "./service-B6YvNthO.js";
+import { B as nativeCodeModeToolId, I as nativeCapletPromptGuidance, L as nativeCapletToolDescription, R as nativeCapletToolName, V as nativeCodeModeToolName, h as createSdkRemoteCapletsClient, m as RemoteNativeCapletsService, t as createNativeCapletsService, w as resolveNativeCapletsServiceOptions, z as nativeCapletsSystemGuidance } from "./service-DxPo2KUs.js";
 import { generatedToolInputJsonSchema, generatedToolInputSchema } from "./generated-tool-input-schema.js";
 //#region src/native/process-cleanup.ts
 function registerNativeCapletsProcessCleanup(service, options = {}) {

package/dist/{service-B6YvNthO.js → service-DxPo2KUs.js}

@@ -17221,6 +17221,13 @@ function defaultTelemetryNoticePath(env = process.env, home = homedir(), platfor
 function defaultTelemetryDeliveryHealthPath(env = process.env, home = homedir(), platform = process.platform) {
 	return (platform === "win32" ? win32.join : posix.join)(defaultTelemetryStateDir(env, home, platform), "delivery-health.json");
 }
+function defaultUpdateCheckStateDir(env = process.env, home = homedir(), platform = process.platform) {
+	return (platform === "win32" ? win32.join : posix.join)(defaultStateBaseDir(env, home, platform), "caplets", "update-check");
+}
+function defaultUpdateCheckCacheDir(env = process.env, home = homedir(), platform = process.platform) {
+	const pathJoin = platform === "win32" ? win32.join : posix.join;
+	return platform === "win32" ? pathJoin(defaultCacheBaseDir(env, home, platform), "caplets", "cache", "update-check") : pathJoin(defaultCacheBaseDir(env, home, platform), "caplets", "update-check");
+}
 function defaultArtifactDir(env = process.env, home = homedir(), platform = process.platform) {
 	return (platform === "win32" ? win32.join : posix.join)(defaultStateBaseDir(env, home, platform), "caplets", "artifacts");
 }
@@ -17239,6 +17246,8 @@ const DEFAULT_TELEMETRY_STATE_DIR = defaultTelemetryStateDir();
 defaultTelemetryIdentityPath();
 defaultTelemetryNoticePath();
 defaultTelemetryDeliveryHealthPath();
+const DEFAULT_UPDATE_CHECK_STATE_DIR = defaultUpdateCheckStateDir();
+const DEFAULT_UPDATE_CHECK_CACHE_DIR = defaultUpdateCheckCacheDir();
 const DEFAULT_COMPLETION_CACHE_DIR = defaultCompletionCacheDir();
 const DEFAULT_OBSERVED_OUTPUT_SHAPE_CACHE_DIR = defaultObservedOutputShapeCacheDir();
 const PROJECT_CONFIG_FILE = join(".caplets", "config.json");
@@ -18173,23 +18182,33 @@ var DownstreamManager = class {
 			const capabilities = (await this.connect(server)).client.getServerCapabilities() ?? {};
 			const tools = await this.refreshTools(server, true);
 			this.registry.setStatus(server.server, "available");
+			const capabilitySummary = {
+				tools: Boolean(capabilities.tools),
+				resources: Boolean(capabilities.resources),
+				resourceTemplates: Boolean(capabilities.resources),
+				prompts: Boolean(capabilities.prompts),
+				completions: Boolean(capabilities.completions)
+			};
 			const result = {
 				id: server.server,
 				status: "available",
-				capabilities: {
-					tools: Boolean(capabilities.tools),
-					resources: Boolean(capabilities.resources),
-					resourceTemplates: Boolean(capabilities.resources),
-					prompts: Boolean(capabilities.prompts),
-					completions: Boolean(capabilities.completions)
-				},
+				capabilities: capabilitySummary,
 				toolCount: tools.length,
 				elapsedMs: Date.now() - startedAt
 			};
-			if (capabilities.resources) Object.assign(result, {
-				resourceCount: (await this.listResources(server, true)).length,
-				resourceTemplateCount: (await this.listResourceTemplates(server, true)).length
-			});
+			if (capabilities.resources) {
+				let resourceTemplateCount = 0;
+				try {
+					resourceTemplateCount = (await this.listResourceTemplates(server, true)).length;
+				} catch (error) {
+					if (!isUnsupportedCapability$1(error)) throw error;
+					capabilitySummary.resourceTemplates = false;
+				}
+				Object.assign(result, {
+					resourceCount: (await this.listResources(server, true)).length,
+					resourceTemplateCount
+				});
+			}
 			if (capabilities.prompts) Object.assign(result, { promptCount: (await this.listPrompts(server, true)).length });
 			return result;
 		} catch (error) {
@@ -18252,11 +18271,23 @@ var DownstreamManager = class {
 		if (!force && connection.resourceTemplates && this.isCacheFresh(connection.resourceTemplatesFetchedAt, server.toolCacheTtlMs)) return connection.resourceTemplates;
 		const resourceTemplates = [];
 		let cursor;
-		do {
-			const result = await connection.client.listResourceTemplates(cursor ? { cursor } : void 0, { timeout: server.startupTimeoutMs });
-			resourceTemplates.push(...result.resourceTemplates ?? []);
-			cursor = result.nextCursor;
-		} while (cursor);
+		try {
+			do {
+				const result = await connection.client.listResourceTemplates(cursor ? { cursor } : void 0, { timeout: server.startupTimeoutMs });
+				resourceTemplates.push(...result.resourceTemplates ?? []);
+				cursor = result.nextCursor;
+			} while (cursor);
+		} catch (error) {
+			if (isMcpMethodNotFoundError(error)) {
+				connection.resourceTemplates = [];
+				connection.resourceTemplatesFetchedAt = Date.now();
+				throw new CapletsError("UNSUPPORTED_CAPABILITY", `${server.server} does not implement MCP resource templates`, {
+					server: server.server,
+					capability: "resourceTemplates"
+				});
+			}
+			throw error;
+		}
 		connection.resourceTemplates = resourceTemplates;
 		connection.resourceTemplatesFetchedAt = Date.now();
 		return resourceTemplates;
@@ -18680,6 +18711,12 @@ function nearbyToolNames(tools, needle) {
 function isTimeoutLike(error) {
 	return error instanceof Error && /timeout|timed out|aborted/i.test(error.message);
 }
+function isUnsupportedCapability$1(error) {
+	return error instanceof CapletsError && error.code === "UNSUPPORTED_CAPABILITY";
+}
+function isMcpMethodNotFoundError(error) {
+	return error instanceof Error && /MCP error -32601/i.test(error.message);
+}
 function stringifyPromptArgs(args) {
 	const stringified = {};
 	for (const [key, value] of Object.entries(args)) {
@@ -64478,7 +64515,7 @@ async function defaultSentryFactory(dsn) {
 }
 //#endregion
 //#region package.json
-var version = "0.28.1";
+var version = "0.29.1";
 //#endregion
 //#region src/telemetry/runtime.ts
 function createRuntimeTelemetryContext(options) {
@@ -64855,7 +64892,7 @@ var CapletsEngine = class {
 		}
 	}
 	async completeCliWords(words) {
-		const { completeCliWords } = await import("./completion-D9253pYs.js").then((n) => n.r);
+		const { completeCliWords } = await import("./completion-CcNgCYzl.js").then((n) => n.r);
 		return await completeCliWords(words, {
 			config: this.registry.config,
 			managers: {
@@ -82228,6 +82265,8 @@ function downstreamResourceUri$1(capletId, uri) {
 //#endregion
 //#region src/native/remote.ts
 const ATTACH_SESSION_UNSUPPORTED_RETRY_MS = 6e4;
+const ATTACH_SESSION_CREATE_TIMEOUT_MS = 5e3;
+const ATTACH_SESSION_CREATE_TIMED_OUT = Symbol("attach session create timed out");
 function createSdkRemoteCapletsClient(options) {
 	const listeners = /* @__PURE__ */ new Set();
 	let manifest;
@@ -82258,10 +82297,15 @@ function createSdkRemoteCapletsClient(options) {
 		if (attachSessionsUnsupportedUntil > Date.now()) return void 0;
 		attachSessionsUnsupportedUntil = 0;
 		if (attachSessionId) return attachSessionId;
-		if (attachSessionInFlight) return await attachSessionInFlight;
+		if (attachSessionInFlight) {
+			const inFlightSessionId = await attachSessionInFlight;
+			return inFlightSessionId === ATTACH_SESSION_CREATE_TIMED_OUT ? void 0 : inFlightSessionId;
+		}
 		attachSessionInFlight = createAttachSession(runtimeOptions.url, runtimeOptions.requestInit, fetchFor(runtimeOptions), options.attachSessionMetadata);
 		try {
-			attachSessionId = await attachSessionInFlight;
+			const createdSessionId = await attachSessionInFlight;
+			if (createdSessionId === ATTACH_SESSION_CREATE_TIMED_OUT) return;
+			attachSessionId = createdSessionId;
 			if (!attachSessionId) attachSessionsUnsupportedUntil = Date.now() + ATTACH_SESSION_UNSUPPORTED_RETRY_MS;
 			return attachSessionId;
 		} finally {
@@ -82382,8 +82426,8 @@ function createSdkRemoteCapletsClient(options) {
 			eventsAbort?.abort();
 			eventsAbort = void 0;
 			listeners.clear();
-			const pendingSessionId = await attachSessionInFlight?.catch(() => void 0);
-			const sessionId = attachSessionId ?? pendingSessionId;
+			const pendingSessionResult = await attachSessionInFlight?.catch(() => void 0);
+			const sessionId = attachSessionId ?? (typeof pendingSessionResult === "string" ? pendingSessionResult : void 0);
 			attachSessionId = void 0;
 			if (sessionId) await (async () => {
 				const runtimeOptions = await resolveRuntimeOptions();
@@ -82606,12 +82650,39 @@ async function fetchAttachManifest(attachUrl, requestInit, attachSessionId, fetc
 async function createAttachSession(attachUrl, requestInit, fetchImpl, metadata) {
 	const headers = new Headers(requestInit?.headers);
 	headers.set("content-type", "application/json");
-	const response = await fetchImpl(new URL("sessions", slashUrl(attachUrl)), {
+	let timeout;
+	let timedOut = false;
+	const sessionUrl = new URL("sessions", slashUrl(attachUrl));
+	const timeoutReached = new Promise((resolve) => {
+		timeout = setTimeout(() => {
+			timedOut = true;
+			resolve(ATTACH_SESSION_CREATE_TIMED_OUT);
+		}, ATTACH_SESSION_CREATE_TIMEOUT_MS);
+		timeout.unref?.();
+	});
+	const fetchSession = fetchImpl(sessionUrl, {
 		...requestInit,
 		method: "POST",
 		headers,
 		body: JSON.stringify(metadata)
+	}).catch((error) => {
+		if (timedOut) return void 0;
+		throw error;
 	});
+	fetchSession.then(async (response) => {
+		if (!timedOut || !response?.ok) return;
+		const lateSessionId = await attachSessionIdFromResponse(response).catch(() => void 0);
+		if (!lateSessionId) return;
+		await closeAttachSession(attachUrl, requestInit, fetchImpl, lateSessionId).catch(() => void 0);
+	}).catch(() => void 0);
+	let response;
+	try {
+		response = await Promise.race([fetchSession, timeoutReached]);
+	} finally {
+		if (timeout) clearTimeout(timeout);
+	}
+	if (response === ATTACH_SESSION_CREATE_TIMED_OUT) return ATTACH_SESSION_CREATE_TIMED_OUT;
+	if (!response) return void 0;
 	if (!response.ok) {
 		if (response.status === 404) return void 0;
 		let payload;
@@ -82623,9 +82694,16 @@ async function createAttachSession(attachUrl, requestInit, fetchImpl, metadata)
 		if (response.status === 400 && isAttachSessionProjectContextRejected(payload)) return;
 		throw new CapletsError("SERVER_UNAVAILABLE", `Caplets attach session returned HTTP ${response.status}.`);
 	}
+	return await parseAttachSessionIdResponse(response);
+}
+async function parseAttachSessionIdResponse(response) {
+	const sessionId = await attachSessionIdFromResponse(response);
+	if (!sessionId) throw new CapletsError("SERVER_UNAVAILABLE", "Caplets attach session response was invalid.");
+	return sessionId;
+}
+async function attachSessionIdFromResponse(response) {
 	const payload = await response.json();
-	if (!isPlainObject(payload) || typeof payload.sessionId !== "string") throw new CapletsError("SERVER_UNAVAILABLE", "Caplets attach session response was invalid.");
-	return payload.sessionId;
+	return isPlainObject(payload) && typeof payload.sessionId === "string" ? payload.sessionId : void 0;
 }
 async function closeAttachSession(attachUrl, requestInit, fetchImpl, attachSessionId) {
 	await fetchImpl(new URL(`sessions/${encodeURIComponent(attachSessionId)}`, slashUrl(attachUrl)), {
@@ -83631,10 +83709,12 @@ var FileRemoteProfileStore = class {
 			kind: "self-hosted",
 			hostUrl: normalizeRemoteProfileHostUrl(input.hostUrl)
 		});
+		const snapshot = await this.withMutationLock(async () => this.selfHostedRefreshSnapshot(key, input));
+		if (!snapshot || !snapshot.needsRefresh) return snapshot?.result;
 		return await this.withRefreshLock(key, async () => {
-			const snapshot = await this.withMutationLock(async () => this.selfHostedRefreshSnapshot(key, input));
-			if (!snapshot || !snapshot.needsRefresh) return snapshot?.result;
-			const refreshed = await input.refresh(snapshot.result.status, snapshot.result.credential);
+			const lockedSnapshot = await this.withMutationLock(async () => this.selfHostedRefreshSnapshot(key, input));
+			if (!lockedSnapshot || !lockedSnapshot.needsRefresh) return lockedSnapshot?.result;
+			const refreshed = await input.refresh(lockedSnapshot.result.status, lockedSnapshot.result.credential);
 			return await this.withMutationLock(async () => {
 				const current = await this.selfHostedRefreshSnapshot(key, input);
 				if (!current || !current.needsRefresh) return current?.result;
@@ -84282,6 +84362,7 @@ function requiredHostedCloudAttachScopes() {
 //#endregion
 //#region src/native/service.ts
 const REMOTE_PROJECT_BINDING_FALLBACK_WARNING = "Remote project binding unavailable; using local Caplets only. Run caplets doctor for details.\n";
+const SELF_HOSTED_PROJECT_BINDING_UNSUPPORTED_MESSAGE = "Self-hosted Project Binding sessions are not implemented by this runtime.";
 let hasWarnedRemoteProjectBindingFallback = false;
 function createNativeCapletsService(options = {}) {
 	const resolved = resolveNativeCapletsServiceOptions(options);
@@ -85193,6 +85274,7 @@ var CompositeNativeCapletsService = class {
 	}
 	startPresence() {
 		this.presence?.start().catch((error) => {
+			if (isUnsupportedProjectBinding(error)) return;
 			writeErr(this.options, `Could not start upstream Project Binding: ${errorMessage(error)}\n`);
 		});
 	}
@@ -85431,7 +85513,7 @@ var RemoteProjectBindingSessionManager = class {
 	}
 };
 function isUnsupportedProjectBinding(error) {
-	return isRecord(error) && error.code === "UNSUPPORTED_CAPABILITY";
+	return isRecord(error) && error.code === "UNSUPPORTED_CAPABILITY" && error.message === SELF_HOSTED_PROJECT_BINDING_UNSUPPORTED_MESSAGE;
 }
 function projectBindingUrl(attachUrl, ...segments) {
 	const url = new URL(attachUrl);
@@ -85480,4 +85562,4 @@ function errorMessage(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 //#endregion
-export { redactCodeModeLogText as $, getParseErrorMessage as $n, readTokenBundle as $t, resolveRemoteMode as A, GetPromptRequestSchema as An, loadProjectConfig as At, nativeCodeModeToolId as B, LoggingLevelSchema as Bn, discoverCapletFiles as Bt, CapletsCloudClient as C, CreateMessageResultSchema as Cn, ServerRegistry as Ct, normalizeRemoteProfileHostUrl as D, ElicitResultSchema as Dn, loadConfigWithSources as Dt, isCapletsCloudUrl as E, DEFAULT_NEGOTIATED_PROTOCOL_VERSION as En, loadConfig as Et, resolveCapletsServer as F, ListPromptsRequestSchema as Fn, FileVaultStore as Ft, runCodeMode as G, assertCompleteRequestPrompt as Gn, markdownStructuredContent as Gt, codeModeRunInputSchema as H, ReadResourceRequestSchema as Hn, loadCapletFilesFromMap as Ht, nativeCapletPromptGuidance as I, ListResourceTemplatesRequestSchema as In, VAULT_MAX_VALUE_BYTES as It, diagnoseCodeModeTypeScript as J, isJSONRPCErrorResponse as Jn, runOAuthFlow as Jt, CodeModeSessionManager as K, assertCompleteRequestResourceTemplate as Kn, refreshOAuthTokenBundle as Kt, nativeCapletToolDescription as L, ListResourcesRequestSchema as Ln, validateVaultKeyName as Lt, controlUrlForBase as M, InitializedNotificationSchema as Mn, vaultBootstrapResolver as Mt, isLoopbackHost as N, JSONRPCMessageSchema as Nn, vaultResolverForAuthDir as Nt, resolveCapletsRemote as O, EmptyResultSchema as On, loadGlobalConfig as Ot, parseServerBaseUrl as P, LATEST_PROTOCOL_VERSION as Pn, vaultStoreForAuthDir as Pt, CodeModeLogStore as Q, getObjectShape as Qn, isTokenBundleExpired as Qt, nativeCapletToolName as R, ListRootsResultSchema as Rn, decryptVaultValue as Rt, buildProjectSyncManifest as S, CompleteRequestSchema as Sn, handleServerTool as St, hostedCloudWorkspaceFromRemoteUrl as T, CreateTaskResultSchema as Tn, GoogleDiscoveryManager as Tt, codeModeRunParamsSchema as U, SUPPORTED_PROTOCOL_VERSIONS as Un, hasRenderableStructuredContent as Ut, nativeCodeModeToolName as V, McpError as Vn, validateCapletFile as Vt, emptyCodeModeRunMeta as W, SetLevelRequestSchema as Wn, markdownCallToolResultContent as Wt, listCodeModeCallableCaplets as X, isJSONRPCResultResponse as Xn, startOAuthFlow as Xt, createCodeModeCapletsApi as Y, isJSONRPCRequest as Yn, startGenericOAuthFlow as Yt, CodeModeJournalStore as Z, getLiteralValue as Zn, deleteTokenBundle as Zt, attachErrorResponse as _, Protocol as _n, rotateTelemetryIdentity as _t, CloudAuthStore as a, defaultConfigPath as an, safeParse as ar, version as at, invokeAttachExport$1 as b, CallToolRequestSchema as bn, findProjectRoot as bt, redactedCloudAuthStatus as c, resolveCapletsRoot as cn, buildProductTelemetryEvent as ct, projectBindingError as d, resolveProjectConfigPath as dn, maybePrintTelemetryNotice as dt, DEFAULT_AUTH_DIR as en, getSchemaDescription as er, codeModeDeclarationHash as et, projectBindingRecovery as f, ReadBuffer as fn, resolveTelemetryState as ft, CAPLETS_ATTACH_SESSION_HEADER as g, AjvJsonSchemaValidator as gn, readTelemetryNotice as gt, createSdkRemoteCapletsClient as h, assertToolsCallTaskCapability as hn, readTelemetryIdentity as ht, createRemoteProfileStore as i, defaultConfigBaseDir as in, objectFromShape as ir, CapletsEngine as it, appendBasePath as j, InitializeRequestSchema as jn, parseConfig as jt, resolveHostedCloudRemote as k, ErrorCode as kn, loadLocalOverlayConfigWithSources as kt, PROJECT_BINDING_ERROR_CODES as l, resolveConfigPath as ln, buildReliabilityTelemetryEvent as lt, RemoteNativeCapletsService as m, assertClientRequestTaskCapability as mn, readTelemetryDeliveryHealth as mt, resolveRemoteSelection as n, DEFAULT_OBSERVED_OUTPUT_SHAPE_CACHE_DIR as nn, isZ4Schema as nr, generateCodeModeRunToolDescription as nt, cloudAuthPath as o, defaultStateBaseDir as on, safeParseAsync as or, createTelemetryDispatcher as ot, CloudAuthClient as p, serializeMessage as pn, deleteTelemetryIdentity as pt, QuickJsCodeModeSandbox as q, isInitializeRequest as qn, runGenericOAuthFlow as qt, cloudCredentialsFromRemoteProfile as r, defaultCacheBaseDir as rn, normalizeObjectSchema as rr, minifyCodeModeDeclarationText as rt, migrateCredentials as s, defaultTelemetryStateDir as sn, TelemetryDebugSink as st, createNativeCapletsService as t, DEFAULT_COMPLETION_CACHE_DIR as tn, isSchemaOptional as tr, generateCodeModeDeclarations as tt, ProjectBindingError as u, resolveProjectCapletsRoot as un, durationBucket as ut, buildAttachProjection as v, mergeCapabilities as vn, resolveExposure as vt, resolveNativeCapletsServiceOptions as w, CreateMessageResultWithToolsSchema as wn, capabilityDescription as wt, invokeNativeAttachExport as x, CallToolResultSchema as xn, fingerprintProjectRoot as xt, buildNativeAttachProjection as y, toJsonSchemaCompat as yn, decodeDirectResourceUri as yt, nativeCapletsSystemGuidance as z, ListToolsRequestSchema as zn, encryptVaultValue as zt };
+export { redactCodeModeLogText as $, isJSONRPCRequest as $n, readTokenBundle as $t, resolveRemoteMode as A, DEFAULT_NEGOTIATED_PROTOCOL_VERSION as An, loadProjectConfig as At, nativeCodeModeToolId as B, ListResourceTemplatesRequestSchema as Bn, discoverCapletFiles as Bt, CapletsCloudClient as C, toJsonSchemaCompat as Cn, ServerRegistry as Ct, normalizeRemoteProfileHostUrl as D, CreateMessageResultSchema as Dn, loadConfigWithSources as Dt, isCapletsCloudUrl as E, CompleteRequestSchema as En, loadConfig as Et, resolveCapletsServer as F, InitializeRequestSchema as Fn, FileVaultStore as Ft, runCodeMode as G, McpError as Gn, markdownStructuredContent as Gt, codeModeRunInputSchema as H, ListRootsResultSchema as Hn, loadCapletFilesFromMap as Ht, nativeCapletPromptGuidance as I, InitializedNotificationSchema as In, VAULT_MAX_VALUE_BYTES as It, diagnoseCodeModeTypeScript as J, SetLevelRequestSchema as Jn, runOAuthFlow as Jt, CodeModeSessionManager as K, ReadResourceRequestSchema as Kn, refreshOAuthTokenBundle as Kt, nativeCapletToolDescription as L, JSONRPCMessageSchema as Ln, validateVaultKeyName as Lt, controlUrlForBase as M, EmptyResultSchema as Mn, vaultBootstrapResolver as Mt, isLoopbackHost as N, ErrorCode as Nn, vaultResolverForAuthDir as Nt, resolveCapletsRemote as O, CreateMessageResultWithToolsSchema as On, loadGlobalConfig as Ot, parseServerBaseUrl as P, GetPromptRequestSchema as Pn, vaultStoreForAuthDir as Pt, CodeModeLogStore as Q, isJSONRPCErrorResponse as Qn, isTokenBundleExpired as Qt, nativeCapletToolName as R, LATEST_PROTOCOL_VERSION as Rn, decryptVaultValue as Rt, buildProjectSyncManifest as S, mergeCapabilities as Sn, handleServerTool as St, hostedCloudWorkspaceFromRemoteUrl as T, CallToolResultSchema as Tn, GoogleDiscoveryManager as Tt, codeModeRunParamsSchema as U, ListToolsRequestSchema as Un, hasRenderableStructuredContent as Ut, nativeCodeModeToolName as V, ListResourcesRequestSchema as Vn, validateCapletFile as Vt, emptyCodeModeRunMeta as W, LoggingLevelSchema as Wn, markdownCallToolResultContent as Wt, listCodeModeCallableCaplets as X, assertCompleteRequestResourceTemplate as Xn, startOAuthFlow as Xt, createCodeModeCapletsApi as Y, assertCompleteRequestPrompt as Yn, startGenericOAuthFlow as Yt, CodeModeJournalStore as Z, isInitializeRequest as Zn, deleteTokenBundle as Zt, attachErrorResponse as _, serializeMessage as _n, rotateTelemetryIdentity as _t, CloudAuthStore as a, defaultCacheBaseDir as an, isSchemaOptional as ar, version as at, invokeAttachExport$1 as b, AjvJsonSchemaValidator as bn, findProjectRoot as bt, redactedCloudAuthStatus as c, defaultStateBaseDir as cn, objectFromShape as cr, buildProductTelemetryEvent as ct, projectBindingError as d, defaultUpdateCheckStateDir as dn, maybePrintTelemetryNotice as dt, DEFAULT_AUTH_DIR as en, isJSONRPCResultResponse as er, codeModeDeclarationHash as et, projectBindingRecovery as f, resolveCapletsRoot as fn, resolveTelemetryState as ft, CAPLETS_ATTACH_SESSION_HEADER as g, ReadBuffer as gn, readTelemetryNotice as gt, createSdkRemoteCapletsClient as h, resolveProjectConfigPath as hn, readTelemetryIdentity as ht, createRemoteProfileStore as i, DEFAULT_UPDATE_CHECK_STATE_DIR as in, getSchemaDescription as ir, CapletsEngine as it, appendBasePath as j, ElicitResultSchema as jn, parseConfig as jt, resolveHostedCloudRemote as k, CreateTaskResultSchema as kn, loadLocalOverlayConfigWithSources as kt, PROJECT_BINDING_ERROR_CODES as l, defaultTelemetryStateDir as ln, safeParse as lr, buildReliabilityTelemetryEvent as lt, RemoteNativeCapletsService as m, resolveProjectCapletsRoot as mn, readTelemetryDeliveryHealth as mt, resolveRemoteSelection as n, DEFAULT_OBSERVED_OUTPUT_SHAPE_CACHE_DIR as nn, getObjectShape as nr, generateCodeModeRunToolDescription as nt, cloudAuthPath as o, defaultConfigBaseDir as on, isZ4Schema as or, createTelemetryDispatcher as ot, CloudAuthClient as p, resolveConfigPath as pn, deleteTelemetryIdentity as pt, QuickJsCodeModeSandbox as q, SUPPORTED_PROTOCOL_VERSIONS as qn, runGenericOAuthFlow as qt, cloudCredentialsFromRemoteProfile as r, DEFAULT_UPDATE_CHECK_CACHE_DIR as rn, getParseErrorMessage as rr, minifyCodeModeDeclarationText as rt, migrateCredentials as s, defaultConfigPath as sn, normalizeObjectSchema as sr, TelemetryDebugSink as st, createNativeCapletsService as t, DEFAULT_COMPLETION_CACHE_DIR as tn, getLiteralValue as tr, generateCodeModeDeclarations as tt, ProjectBindingError as u, defaultUpdateCheckCacheDir as un, safeParseAsync as ur, durationBucket as ut, buildAttachProjection as v, assertClientRequestTaskCapability as vn, resolveExposure as vt, resolveNativeCapletsServiceOptions as w, CallToolRequestSchema as wn, capabilityDescription as wt, invokeNativeAttachExport as x, Protocol as xn, fingerprintProjectRoot as xt, buildNativeAttachProjection as y, assertToolsCallTaskCapability as yn, decodeDirectResourceUri as yt, nativeCapletsSystemGuidance as z, ListPromptsRequestSchema as zn, encryptVaultValue as zt };

package/dist/update-check/control.d.ts

@@ -0,0 +1,5 @@
+export declare const DISABLE_UPDATE_CHECK_ENV = "CAPLETS_DISABLE_UPDATE_CHECK";
+export declare const UPDATE_NOTICE_STDERR_ENV = "CAPLETS_UPDATE_NOTICE_STDERR";
+export type UpdateCheckEnv = Record<string, string | undefined> | NodeJS.ProcessEnv;
+export declare function isUpdateCheckDisabled(env?: UpdateCheckEnv): boolean;
+export declare function isUpdateNoticeStderrOptIn(env?: UpdateCheckEnv): boolean;

package/dist/update-check/eligibility.d.ts

@@ -0,0 +1,14 @@
+import { type UpdateCheckEnv } from "./control";
+export type UpdateNoticeEligibility = {
+    eligible: true;
+    command: string;
+} | {
+    eligible: false;
+    reason: string;
+};
+export type UpdateNoticeEligibilityInput = {
+    args: string[];
+    env?: UpdateCheckEnv | undefined;
+    stderrIsTTY?: boolean | undefined;
+};
+export declare function classifyUpdateNoticeEligibility(input: UpdateNoticeEligibilityInput): UpdateNoticeEligibility;

package/dist/update-check/index.d.ts

@@ -0,0 +1,8 @@
+export { isUpdateCheckDisabled, isUpdateNoticeStderrOptIn } from "./control";
+export { classifyUpdateNoticeEligibility } from "./eligibility";
+export { maybePrintUpdateNotice } from "./notice";
+export { fetchPublicCapletsMetadata } from "./registry";
+export { refreshUpdateMetadata } from "./refresh";
+export { UPDATE_CHECK_ACCEPT_HEADER, UPDATE_CHECK_CACHE_TTL_MS, UPDATE_CHECK_FETCH_TIMEOUT_MS, UPDATE_CHECK_LOCK_TTL_MS, UPDATE_CHECK_MAX_RESPONSE_BYTES, UPDATE_CHECK_MAX_STALE_MS, UPDATE_CHECK_NEGATIVE_TTL_MS, UPDATE_CHECK_NOTICE_REPEAT_MS, UPDATE_CHECK_PACKAGE_NAME, UPDATE_CHECK_REGISTRY_URL, acquireUpdateRefreshLock, readUpdateMetadataCache, readUpdateNoticeState, recordUpdateNoticeShown, releaseUpdateRefreshLock, shouldShowUpdateNotice, updateCheckCacheDir, updateCheckStateDir, updateMetadataCachePath, updateNoticeStatePath, updateRefreshLockPath, writePrivateJson, writeUpdateMetadataCache, } from "./state";
+export { findAvailableUpdate } from "./version";
+export type { PackageVersionMetadata } from "./version";

package/dist/update-check/notice.d.ts

@@ -0,0 +1,13 @@
+import { type UpdateCheckPathsOptions } from "./state";
+export type MaybePrintUpdateNoticeOptions = UpdateCheckPathsOptions & {
+    args: string[];
+    env?: Record<string, string | undefined> | NodeJS.ProcessEnv | undefined;
+    version?: string | undefined;
+    fetcher?: typeof fetch | undefined;
+    signal?: AbortSignal | undefined;
+    stderrIsTTY?: boolean | undefined;
+    writeErr?: ((value: string) => void) | undefined;
+    now?: number | undefined;
+    refreshForLater?: boolean | undefined;
+};
+export declare function maybePrintUpdateNotice(options: MaybePrintUpdateNoticeOptions): Promise<void>;

package/dist/update-check/refresh.d.ts

@@ -0,0 +1,9 @@
+import { type UpdateCheckPathsOptions } from "./state";
+export type RefreshUpdateMetadataOptions = UpdateCheckPathsOptions & {
+    fetcher?: typeof fetch | undefined;
+    signal?: AbortSignal | undefined;
+    now?: number | undefined;
+    timeoutMs?: number | undefined;
+    maxResponseBytes?: number | undefined;
+};
+export declare function refreshUpdateMetadata(options?: RefreshUpdateMetadataOptions): Promise<"refreshed" | "skipped" | "failed">;

package/dist/update-check/registry.d.ts

@@ -0,0 +1,12 @@
+import type { PackageVersionMetadata } from "./version";
+export declare class UpdateRegistryError extends Error {
+    readonly reason: "http" | "timeout" | "invalid" | "network" | "too_large" | "error";
+    constructor(message: string, reason: "http" | "timeout" | "invalid" | "network" | "too_large" | "error");
+}
+export type FetchUpdateMetadataOptions = {
+    fetcher?: typeof fetch | undefined;
+    signal?: AbortSignal | undefined;
+    timeoutMs: number;
+    maxResponseBytes?: number | undefined;
+};
+export declare function fetchPublicCapletsMetadata(options: FetchUpdateMetadataOptions): Promise<PackageVersionMetadata>;

package/dist/update-check/state.d.ts

@@ -0,0 +1,58 @@
+import type { PackageVersionMetadata } from "./version";
+export declare const UPDATE_CHECK_PACKAGE_NAME = "caplets";
+export declare const UPDATE_CHECK_REGISTRY_URL = "https://registry.npmjs.org/caplets";
+export declare const UPDATE_CHECK_ACCEPT_HEADER = "application/vnd.npm.install-v1+json";
+export declare const UPDATE_CHECK_CACHE_TTL_MS: number;
+export declare const UPDATE_CHECK_MAX_STALE_MS: number;
+export declare const UPDATE_CHECK_NEGATIVE_TTL_MS: number;
+export declare const UPDATE_CHECK_LOCK_TTL_MS: number;
+export declare const UPDATE_CHECK_FETCH_TIMEOUT_MS = 250;
+export declare const UPDATE_CHECK_MAX_RESPONSE_BYTES: number;
+export declare const UPDATE_CHECK_NOTICE_REPEAT_MS: number;
+export type UpdateCheckPathsOptions = {
+    cacheDir?: string | undefined;
+    stateDir?: string | undefined;
+};
+export type UpdateMetadataCacheEntry = {
+    status: "positive";
+    fetchedAt: number;
+    expiresAt: number;
+    staleUntil: number;
+    source: typeof UPDATE_CHECK_REGISTRY_URL;
+    metadata: PackageVersionMetadata;
+} | {
+    status: "negative";
+    fetchedAt: number;
+    expiresAt: number;
+    reason: "http" | "timeout" | "invalid" | "network" | "too_large" | "error";
+};
+export type ReadUpdateMetadataCacheEntry = UpdateMetadataCacheEntry & {
+    fresh: boolean;
+    usable: boolean;
+};
+export type UpdateNoticeState = {
+    shown: Record<string, {
+        shownAt: number;
+    }>;
+};
+export declare function updateCheckCacheDir(options?: UpdateCheckPathsOptions): string;
+export declare function updateCheckStateDir(options?: UpdateCheckPathsOptions): string;
+export declare function updateMetadataCachePath(options?: UpdateCheckPathsOptions): string;
+export declare function updateRefreshLockPath(options?: UpdateCheckPathsOptions): string;
+export declare function updateNoticeStatePath(options?: UpdateCheckPathsOptions): string;
+export declare function readUpdateMetadataCache(options?: UpdateCheckPathsOptions & {
+    now?: number | undefined;
+}): ReadUpdateMetadataCacheEntry | undefined;
+export declare function writeUpdateMetadataCache(entry: UpdateMetadataCacheEntry, options?: UpdateCheckPathsOptions): boolean;
+export declare function readUpdateNoticeState(options?: UpdateCheckPathsOptions): UpdateNoticeState;
+export declare function shouldShowUpdateNotice(version: string, options?: UpdateCheckPathsOptions & {
+    now?: number | undefined;
+}): boolean;
+export declare function recordUpdateNoticeShown(version: string, options?: UpdateCheckPathsOptions & {
+    now?: number | undefined;
+}): boolean;
+export declare function acquireUpdateRefreshLock(options?: UpdateCheckPathsOptions & {
+    now?: number | undefined;
+}): boolean;
+export declare function releaseUpdateRefreshLock(options?: UpdateCheckPathsOptions): void;
+export declare function writePrivateJson(path: string, value: unknown): boolean;

package/dist/update-check/version.d.ts

@@ -0,0 +1,14 @@
+export type PackageVersionMetadata = {
+    packageName: string;
+    distTags: Record<string, string>;
+    versions: string[];
+};
+export type AvailableUpdate = {
+    available: true;
+    runningVersion: string;
+    latestVersion: string;
+} | {
+    available: false;
+    reason: "invalid-running-version" | "no-eligible-version";
+};
+export declare function findAvailableUpdate(runningVersion: string | undefined, metadata: PackageVersionMetadata): AvailableUpdate;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@caplets/core",
-  "version": "0.28.1",
+  "version": "0.29.1",
   "description": "Core runtime library for Caplets Code Mode and progressive disclosure gateways.",
   "keywords": [
     "caplets",
@@ -100,6 +100,7 @@
     "hono": "^4.12.25",
     "posthog-node": "^4.18.0",
     "quickjs-emscripten": "^0.32.0",
+    "semver": "^7.8.5",
     "typescript": "^6.0.3",
     "vfile": "^6.0.3",
     "vfile-matter": "^5.0.1",
@@ -110,6 +111,7 @@
   },
   "devDependencies": {
     "@types/node": "^25.9.3",
+    "@types/semver": "^7.7.1",
     "@typescript/native-preview": "7.0.0-dev.20260613.1",
     "rolldown": "^1.1.1",
     "vitest": "^4.1.8"