@lotics/app-sdk 0.123.5 → 0.123.7

package/dist/index.js

@@ -802,6 +802,7 @@ var MAX_STRING_LENGTH = 1e7;
 var MAX_RANDOM_LENGTH = 1e3;
 var MAX_RUN_BUILT_BYTES = 512 * 1024 * 1024;
 var MAX_IN_PLACE_BYTES = 1024 * 1024;
+var MAX_IN_PLACE_HELPER_BYTES = 8 * 1024;
 var MAX_PERSISTED_JSON_LENGTH = 64 * 1024 * 1024;
 var ExpressionLimitError = class extends Error {
   constructor(message2) {
@@ -7385,7 +7386,7 @@ var WorkflowExpressionBudgetError = class extends Error {
 };
 var ExpressionNotCheapError = class extends Error {
   constructor() {
-    super(`The expression walks or builds more than ${MAX_IN_PLACE_BYTES / 1024 / 1024}MB at once, past what an evaluation in place may.`);
+    super(`The expression walks or builds more than ${MAX_IN_PLACE_BYTES / 1024 / 1024}MB at once, or hands a helper more than ${MAX_IN_PLACE_HELPER_BYTES / 1024}KB, past what an evaluation in place may.`);
     this.name = "ExpressionNotCheapError";
   }
 };
@@ -7510,11 +7511,14 @@ function parsedSize(text2) {
   return text2.length * CHAR_BYTES + nodes * PARSED_NODE_BYTES;
 }
 function assertCheap(budget, ...values2) {
+  assertWithin(budget, MAX_IN_PLACE_BYTES, values2);
+}
+function assertWithin(budget, limit, values2) {
   if (!budget.bounded) return;
   let bytes = 0;
   for (const value of values2) {
-    bytes += writtenSize(value, MAX_IN_PLACE_BYTES - bytes);
-    if (bytes > MAX_IN_PLACE_BYTES) throw new ExpressionNotCheapError();
+    bytes += writtenSize(value, limit - bytes);
+    if (bytes > limit) throw new ExpressionNotCheapError();
   }
 }
 function charge(ctx, bytes) {
@@ -8116,6 +8120,7 @@ async function callAfter(helper, pending, ctx) {
   return callHelper(helper, values2, ctx);
 }
 function callHelper({ call, cost }, values2, ctx) {
+  assertWithin(ctx.evaluation_budget, MAX_IN_PLACE_HELPER_BYTES, values2);
   if (cost === "parses") charge(ctx, parsedSize(values2[0]));
   const answer = Reflect.apply(call, void 0, values2);
   return answer instanceof Promise ? chargeAnswerAfter(cost, answer, values2, ctx) : chargeAnswer(cost, answer, values2, ctx);

package/docs/ai.md

@@ -336,11 +336,11 @@ This hook is a **one-way push of data the app already showed this member**. (Cha
 
 ### The chat can also USE the app, not just be told about it
 
-While a member has an app open, their chat agent can also **call that app's own
-declared aliases** — named queries via `run_app_query`, workflows via
+A member's chat agent can also **call the declared aliases of any app that member
+can use** (the open app when a call names none): named queries via `run_app_query`, workflows via
 `run_app_workflow`. This adds no exposure: every declared alias is already
 callable by that member ([the devtools test](./security.md#the-devtools-test)).
-It is gated per turn on `app:use`, and runs under the app's OWNER authority with
+It is gated on `app:use` when the call is made, and runs under the app's OWNER authority with
 `is_current_member` bound to the MEMBER, exactly as the app's own UI does.
 
 The agent is handed a **catalog** of those aliases — each one's `description`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lotics/app-sdk",
-  "version": "0.123.5",
+  "version": "0.123.7",
   "description": "The SDK a Lotics custom-code app reads and writes through — typed hooks over the host bridge, cell readers, mount() and AppRouter",
   "type": "module",
   "exports": {