@papert-code/papert-code 0.3.95 → 0.3.96

package/README.md

@@ -1,5 +1,18 @@
 # Papert Code
 
+[![npm version](https://img.shields.io/npm/v/%40papert-code%2Fpapert-code?logo=npm&label=npm)](https://www.npmjs.com/package/@papert-code/papert-code)
+[![npm downloads](https://img.shields.io/npm/dm/%40papert-code%2Fpapert-code?logo=npm&label=downloads)](https://www.npmjs.com/package/@papert-code/papert-code)
+[![License](https://img.shields.io/github/license/azharlabs/papert-code)](LICENSE)
+[![Stars](https://img.shields.io/github/stars/azharlabs/papert-code?style=social)](https://github.com/azharlabs/papert-code/stargazers)
+[![Forks](https://img.shields.io/github/forks/azharlabs/papert-code?style=social)](https://github.com/azharlabs/papert-code/network/members)
+
+[![GitHub issues](https://img.shields.io/github/issues/azharlabs/papert-code)](https://github.com/azharlabs/papert-code/issues)
+[![GitHub pull requests](https://img.shields.io/github/issues-pr/azharlabs/papert-code)](https://github.com/azharlabs/papert-code/pulls)
+[![Last commit](https://img.shields.io/github/last-commit/azharlabs/papert-code)](https://github.com/azharlabs/papert-code/commits/main)
+[![Release](https://img.shields.io/github/v/release/azharlabs/papert-code?sort=semver)](https://github.com/azharlabs/papert-code/releases)
+[![npm install](https://img.shields.io/badge/npm%20i%20-g%20%40papert--code%2Fpapert--code-CB3837?logo=npm&logoColor=white)](https://www.npmjs.com/package/@papert-code/papert-code)
+[![Run with npx](https://img.shields.io/badge/npx-papert-CB3837?logo=npm&logoColor=white)](https://www.npmjs.com/package/@papert-code/papert-code)
+
 ![Papert Terminal UI](docs/assets/papert-screenshot.png)
 
 Papert Code is an AI agent engine for software engineering workflows. It plans, reads, edits, and generates code across large repositories, executes shell and tool actions with safety controls, and exposes the same agent runtime through TypeScript and Python SDKs plus a VS Code companion extension.

package/dist/chunks/{chunk-Q5TJEKUL.js → chunk-HSYOWGEB.js}

@@ -31,7 +31,7 @@ import {
   logApiError,
   logApiResponse,
   tokenLimit
-} from "./chunk-KDPC3L34.js";
+} from "./chunk-IK4ISYCE.js";
 import {
   __name,
   init_esbuild_shims

package/dist/chunks/{chunk-KDPC3L34.js → chunk-IK4ISYCE.js}

@@ -106342,7 +106342,7 @@ var __filename = fileURLToPath(import.meta.url);
 var __dirname2 = path4.dirname(__filename);
 async function getVersion() {
   const pkgJson = await getPackageJson(__dirname2);
-  return "0.3.95";
+  return "0.3.96";
 }
 __name(getVersion, "getVersion");
 
@@ -110213,7 +110213,7 @@ function createContentGeneratorConfig(config, authType, generationConfig) {
 }
 __name(createContentGeneratorConfig, "createContentGeneratorConfig");
 async function createContentGenerator(config, gcConfig, isInitialAuth) {
-  const version2 = "0.3.95";
+  const version2 = "0.3.96";
   const userAgent = `PapertCode/${version2} (${process.platform}; ${process.arch})`;
   const baseHeaders = {
     "User-Agent": userAgent
@@ -110244,12 +110244,12 @@ async function createContentGenerator(config, gcConfig, isInitialAuth) {
     if (!config.apiKey) {
       throw new Error("OpenAI API key is required");
     }
-    const { createOpenAIContentGenerator } = await import("./openaiContentGenerator-P6VRBRRB.js");
+    const { createOpenAIContentGenerator } = await import("./openaiContentGenerator-GTG5MK5E.js");
     return createOpenAIContentGenerator(config, gcConfig);
   }
   if (config.authType === AuthType2.PAPERT_OAUTH) {
     const { getPapertOAuthClient: getPapertOauthClient } = await import("./papertOAuth2-4I4JYPZW.js");
-    const { PapertContentGenerator } = await import("./papertContentGenerator-E64QQV3K.js");
+    const { PapertContentGenerator } = await import("./papertContentGenerator-Q5TTXUE6.js");
     try {
       const papertClient = await getPapertOauthClient(gcConfig, isInitialAuth ? { requireCachedCredentials: true } : void 0);
       return new PapertContentGenerator(papertClient, config, gcConfig);

package/dist/chunks/{chunk-JATIVKZP.js → chunk-KBPFDUTA.js}

@@ -24,11 +24,30 @@ import {
 
 // packages/cli/src/commands/server.ts
 init_esbuild_shims();
-import { spawn } from "node:child_process";
+import { spawn as childProcessSpawn } from "node:child_process";
 import * as fs from "node:fs";
 import * as path from "node:path";
 import { fileURLToPath } from "node:url";
 import { createRequire } from "node:module";
+import { randomBytes } from "node:crypto";
+var spawnImpl = childProcessSpawn;
+var __setSpawnForServer = /* @__PURE__ */ __name((spawn) => {
+  spawnImpl = spawn;
+}, "__setSpawnForServer");
+var __resetSpawnForServer = /* @__PURE__ */ __name(() => {
+  spawnImpl = childProcessSpawn;
+}, "__resetSpawnForServer");
+var __testSpawnForServer = /* @__PURE__ */ __name(() => spawnImpl, "__testSpawnForServer");
+function resolveServerToken(tokenArg, allowEmptyToken) {
+  if (typeof tokenArg === "string" && tokenArg.trim().length > 0) {
+    return tokenArg.trim();
+  }
+  if (allowEmptyToken) {
+    return "";
+  }
+  return randomBytes(24).toString("base64url");
+}
+__name(resolveServerToken, "resolveServerToken");
 function resolveA2aServerEntrypoint() {
   const candidates = [];
   const commandFile = fileURLToPath(import.meta.url);
@@ -80,7 +99,7 @@ function resolveA2aServerEntrypoint() {
 }
 __name(resolveA2aServerEntrypoint, "resolveA2aServerEntrypoint");
 var serverCommand = {
-  command: "server",
+  command: "server|serve",
   describe: "Run Papert Code daemon (remote driving server).",
   builder: /* @__PURE__ */ __name((yargs) => yargs.option("port", {
     type: "number",
@@ -96,31 +115,54 @@ var serverCommand = {
   }).option("host", {
     type: "string",
     description: "Host to bind to.",
-    default: "0.0.0.0"
+    default: "127.0.0.1"
+  }).option("allow-empty-token", {
+    type: "boolean",
+    description: "Allow creating remote sessions without a server token (insecure, local-only).",
+    default: false
   }).option("docs", {
     type: "boolean",
     description: "Enable OpenAPI docs UI at /docs and spec at /openapi.json.",
     default: false
   }).version(false), "builder"),
   handler: /* @__PURE__ */ __name(async (argv) => {
-    const token = typeof argv["token"] === "string" && argv["token"].trim().length > 0 ? argv["token"].trim() : void 0;
+    const allowEmptyToken = Boolean(argv["allow-empty-token"]);
+    const token = resolveServerToken(argv["token"], allowEmptyToken);
+    const bindHost = String(argv["host"] ?? "127.0.0.1");
+    const port = Number(argv["port"] ?? 41242);
+    const connectHost = bindHost === "0.0.0.0" || bindHost === "::" ? "127.0.0.1" : bindHost;
+    const connectUrl = `http://${connectHost}:${port}`;
     const env = {
       ...process.env,
       PAPERT_REMOTE_ENABLED: "1",
-      PAPERT_REMOTE_SERVER_TOKEN: token ?? "",
+      PAPERT_REMOTE_SERVER_TOKEN: token,
       PAPERT_REMOTE_SESSION_TTL_MS: String(argv["session-ttl-ms"] ?? 6e4),
       PAPERT_REMOTE_DOCS_ENABLED: argv["docs"] ? "1" : "0",
-      CODER_AGENT_PORT: String(argv["port"] ?? 41242),
-      CODER_AGENT_HOST: String(argv["host"] ?? "0.0.0.0")
+      CODER_AGENT_PORT: String(port),
+      CODER_AGENT_HOST: bindHost
     };
-    const url = `http://127.0.0.1:${Number(argv["port"] ?? 41242)}`;
     console.error(
       `[papert] starting a2a server
-  url:   ${url}
+  bind:  ${bindHost}:${port}
+  url:   ${connectUrl}
   port:  ${env.CODER_AGENT_PORT}
   token: ${env.PAPERT_REMOTE_SERVER_TOKEN}
   cmd:   papert-a2a-server`
     );
+    if (allowEmptyToken) {
+      console.error(
+        "[papert] warning: --allow-empty-token disables server-token auth for session creation"
+      );
+    }
+    if (!allowEmptyToken && typeof argv["token"] !== "string") {
+      console.error("[papert] generated ephemeral server token for this run");
+    }
+    console.error(
+      `[papert] connect: papert connect ${connectUrl} --token ${token}`
+    );
+    console.error(
+      `[papert] attach:  papert attach ${connectUrl} --server-token ${token}`
+    );
     const localServerEntrypoint = resolveA2aServerEntrypoint();
     const spawnCommand = localServerEntrypoint ? {
       command: process.execPath,
@@ -134,7 +176,7 @@ var serverCommand = {
     console.error(`[papert] spawning: ${spawnCommand.display}`);
     let child;
     try {
-      child = spawn(spawnCommand.command, spawnCommand.args, {
+      child = __testSpawnForServer()(spawnCommand.command, spawnCommand.args, {
         stdio: "inherit",
         env
       });
@@ -157,6 +199,9 @@ var serverCommand = {
 };
 
 export {
+  __setSpawnForServer,
+  __resetSpawnForServer,
+  __testSpawnForServer,
   serverCommand
 };
 /**