apps 0.0.1-beta.0 → 0.0.1-beta.10

package/js/{chunk-HP7E42X6.js → chunk-WLE7WX2U.js}

@@ -1,13 +1,30 @@
 import {
+  DatabaseFieldReserved,
+  DatabaseLimitExceeded,
+  DatabaseSchema
+} from "./chunk-N7YDVXYJ.js";
+import {
+  CacheCommand,
+  CacheReply,
+  ProviderError
+} from "./chunk-R3EV5FTO.js";
+import {
+  AppSkillName,
+  AppSkills,
+  SkillLoadFailed
+} from "./chunk-JU7VHODU.js";
+import {
+  AccountId,
   HttpUrl,
   JsonObject as JsonObject2,
   JsonValue
-} from "./chunk-36DNRFZQ.js";
+} from "./chunk-27F7W2LG.js";
 import {
   Any,
   ArraySchema,
   Boolean,
   Class2 as Class,
+  Context_exports,
   Cron_exports,
   Data_exports,
   Defect,
@@ -55,114 +72,324 @@ import {
   transformOptional,
   withConstructorDefault,
   withDefault
-} from "./chunk-2OTCEKL2.js";
+} from "./chunk-CDL5PM2Q.js";
 
-// src/contracts/provider.ts
-var SecretsMethod = class extends Data_exports.TaggedClass(
-  "secrets"
+// src/contracts/router.ts
+var reservedRouterKeys = /* @__PURE__ */ new Set([
+  "__proto__",
+  "constructor",
+  "prototype"
+]);
+var RouterKey = Schema_exports.String.check(
+  Schema_exports.isPattern(/^[A-Za-z_][A-Za-z0-9_-]{0,99}$/),
+  Schema_exports.makeFilter((key) => !reservedRouterKeys.has(key))
+);
+var RouterIcon = Schema_exports.Struct({
+  src: Schema_exports.NonEmptyString,
+  mimeType: Schema_exports.optionalKey(Schema_exports.String),
+  sizes: Schema_exports.optionalKey(Schema_exports.Array(Schema_exports.String)),
+  theme: Schema_exports.optionalKey(Schema_exports.Literals(["light", "dark"]))
+});
+var RouterMeta = Schema_exports.Struct({
+  title: Schema_exports.optionalKey(Schema_exports.String),
+  description: Schema_exports.optionalKey(Schema_exports.String),
+  instructions: Schema_exports.optionalKey(Schema_exports.String),
+  icons: Schema_exports.optionalKey(Schema_exports.Array(RouterIcon)),
+  tags: Schema_exports.optionalKey(Schema_exports.Record(Schema_exports.NonEmptyString, Schema_exports.String))
+});
+
+// src/contracts/tools.ts
+var ToolAnnotations = Schema_exports.Struct({
+  title: Schema_exports.optionalKey(Schema_exports.String),
+  readOnlyHint: Schema_exports.optionalKey(Schema_exports.Boolean),
+  destructiveHint: Schema_exports.optionalKey(Schema_exports.Boolean),
+  idempotentHint: Schema_exports.optionalKey(Schema_exports.Boolean),
+  openWorldHint: Schema_exports.optionalKey(Schema_exports.Boolean)
+});
+
+// src/contracts/mcp.ts
+var McpClientLimits = Schema_exports.Struct({
+  timeoutMs: Schema_exports.Int.check(Schema_exports.isGreaterThan(0)),
+  maxTimeoutMs: Schema_exports.Int.check(Schema_exports.isGreaterThan(0)),
+  maxTools: Schema_exports.Int.check(Schema_exports.isGreaterThan(0)),
+  maxPaginationCursors: Schema_exports.Int.check(Schema_exports.isGreaterThan(0)),
+  cleanupTimeoutMs: Schema_exports.Int.check(Schema_exports.isGreaterThan(0))
+});
+var defaultMcpClientLimits = McpClientLimits.make({
+  timeoutMs: 3e4,
+  maxTimeoutMs: 3e5,
+  maxTools: 5e4,
+  maxPaginationCursors: 1e3,
+  cleanupTimeoutMs: 1e3
+});
+var mcpSdkTimerCeilingMs = 2147483647;
+var McpToolsOptions = Schema_exports.Struct({
+  url: HttpUrl,
+  accountId: Schema_exports.optional(AccountId),
+  headers: Schema_exports.optional(Schema_exports.Record(Schema_exports.String, Schema_exports.String)),
+  signal: Schema_exports.optional(Schema_exports.instanceOf(AbortSignal)),
+  timeoutMs: Schema_exports.optional(
+    Schema_exports.Number.check(
+      Schema_exports.isInt(),
+      Schema_exports.isBetween({ minimum: 1, maximum: defaultMcpClientLimits.maxTimeoutMs })
+    )
+  )
+});
+var McpToolResult = Schema_exports.Struct({
+  content: Schema_exports.Array(JsonObject2),
+  structuredContent: Schema_exports.optional(JsonObject2),
+  isError: Schema_exports.optional(Schema_exports.Boolean),
+  _meta: Schema_exports.optional(JsonObject2)
+});
+var McpToolMetadata = Schema_exports.Struct({
+  name: Schema_exports.String,
+  title: Schema_exports.optional(Schema_exports.String),
+  description: Schema_exports.optional(Schema_exports.String),
+  inputSchema: JsonObject2,
+  outputSchema: Schema_exports.optional(JsonObject2),
+  annotations: Schema_exports.optional(ToolAnnotations),
+  _meta: Schema_exports.optional(JsonObject2)
+});
+var McpServerHeader = Schema_exports.Struct({
+  name: Schema_exports.optionalKey(Schema_exports.String),
+  title: Schema_exports.optionalKey(Schema_exports.String),
+  version: Schema_exports.optionalKey(Schema_exports.String),
+  description: Schema_exports.optionalKey(Schema_exports.String),
+  websiteUrl: Schema_exports.optionalKey(Schema_exports.String),
+  icons: Schema_exports.optionalKey(Schema_exports.Array(RouterIcon)),
+  instructions: Schema_exports.optionalKey(Schema_exports.String)
+});
+var McpError = class extends Schema_exports.TaggedError()("McpError", {
+  phase: Schema_exports.Literals(["connect", "discover", "call", "schema", "transport"]),
+  reason: Schema_exports.Literals([
+    "request",
+    "unauthorized",
+    "invalid_response",
+    "timeout",
+    "invalid_input"
+  ]),
+  status: Schema_exports.optional(Schema_exports.Number)
+}) {
+};
+var ProcessConfig = Schema_exports.Struct({
+  command: Schema_exports.NonEmptyString,
+  args: Schema_exports.Array(Schema_exports.String),
+  cwd: Schema_exports.optional(Schema_exports.String),
+  env: Schema_exports.Record(Schema_exports.String, Schema_exports.String),
+  timeoutMs: Schema_exports.Int.check(
+    Schema_exports.isBetween({ minimum: 1, maximum: defaultMcpClientLimits.maxTimeoutMs })
+  )
+});
+
+// src/contracts/api-response-error.ts
+var ApiErrorRecovery = Schema_exports.Struct({
+  action: Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(1024)),
+  instructions: Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(4096))
+});
+var ApiErrorResponse = Schema_exports.Struct({
+  code: Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(128)),
+  status: Schema_exports.Int.check(Schema_exports.isBetween({ minimum: 400, maximum: 599 })),
+  message: Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(4096)),
+  recovery: Schema_exports.optionalKey(ApiErrorRecovery)
+});
+var OpenapiResponseError = class extends Schema_exports.TaggedError()(
+  "OpenapiResponseError",
+  ApiErrorResponse.fields
 ) {
 };
-var OAuthClientAuth = Schema_exports.Literals([
-  "none",
-  "client_secret_post",
-  "client_secret_basic",
-  "client_secret_basic_raw"
+var OpenapiErrorLimits = Schema_exports.Struct({
+  maxBodyBytes: Schema_exports.Int.check(Schema_exports.isGreaterThan(0)),
+  readTimeoutMs: Schema_exports.Int.check(Schema_exports.isGreaterThan(0))
+});
+var defaultOpenapiErrorLimits = OpenapiErrorLimits.make({
+  maxBodyBytes: 65536,
+  readTimeoutMs: 2e3
+});
+
+// src/contracts/failure.ts
+var maxFailureMessageLength = 2048;
+var FailureSource = Schema_exports.Literals(["app", "storage", "service"]);
+var FailureName = Schema_exports.String.check(Schema_exports.isMaxLength(128));
+var FailureCode = Schema_exports.String.check(Schema_exports.isMaxLength(128));
+var FailureMessage = Schema_exports.String.check(Schema_exports.isMaxLength(maxFailureMessageLength));
+var FailureDetail = {
+  source: Schema_exports.optionalKey(FailureSource),
+  errorName: Schema_exports.optionalKey(FailureName),
+  code: Schema_exports.optionalKey(FailureCode),
+  message: Schema_exports.optionalKey(FailureMessage)
+};
+
+// src/contracts/workflows.ts
+var WorkflowRunId = Schema_exports.NonEmptyString.pipe(Schema_exports.brand("wfr"));
+var WorkflowName = Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(200));
+var durationUnits = {
+  millisecond: 1,
+  milliseconds: 1,
+  second: 1e3,
+  seconds: 1e3,
+  minute: 6e4,
+  minutes: 6e4,
+  hour: 36e5,
+  hours: 36e5,
+  day: 864e5,
+  days: 864e5,
+  week: 6048e5,
+  weeks: 6048e5
+};
+var workflowDurationMillis = (value) => {
+  if (typeof value === "number") return Number.isFinite(value) && value >= 0 ? value : void 0;
+  const match = /^(\d+(?:\.\d+)?) (milliseconds?|seconds?|minutes?|hours?|days?|weeks?)$/.exec(
+    value
+  );
+  const unit = match?.[2] === void 0 ? void 0 : durationUnits[match[2]];
+  if (unit === void 0) return void 0;
+  const result = Number(match?.[1]) * unit;
+  return Number.isFinite(result) ? result : void 0;
+};
+var WorkflowDuration = Schema_exports.Union([
+  Schema_exports.Finite.check(Schema_exports.isGreaterThanOrEqualTo(0)),
+  Schema_exports.NonEmptyString
+]).check(Schema_exports.makeFilter((value) => workflowDurationMillis(value) !== void 0));
+var WorkflowStepOptions = Schema_exports.Struct({
+  retries: Schema_exports.optionalKey(
+    Schema_exports.Struct({
+      limit: Schema_exports.Int.check(Schema_exports.isGreaterThanOrEqualTo(0)),
+      delay: WorkflowDuration,
+      backoff: Schema_exports.optionalKey(Schema_exports.Literals(["constant", "linear", "exponential"]))
+    })
+  ),
+  timeout: Schema_exports.optionalKey(WorkflowDuration)
+});
+var WorkflowFailureDetail = {
+  step: Schema_exports.optionalKey(Schema_exports.String.check(Schema_exports.isMaxLength(200))),
+  errorName: Schema_exports.optionalKey(FailureName),
+  message: Schema_exports.optionalKey(FailureMessage)
+};
+var WorkflowRunFailure = Schema_exports.Struct(WorkflowFailureDetail);
+var WorkflowFailure = class extends Schema_exports.TaggedError()("WorkflowFailure", {
+  ...WorkflowFailureDetail,
+  reason: Schema_exports.Literals([
+    "unavailable",
+    "not_found",
+    "input",
+    "output",
+    "operation",
+    "approval",
+    "credentials",
+    "terminated",
+    "execution",
+    "conflict",
+    "engine"
+  ]),
+  retryable: Schema_exports.Boolean
+}) {
+};
+var NonRetryableError = class extends Error {
+  name = "NonRetryableError";
+};
+var WorkflowValue = JsonValue.check(
+  Schema_exports.makeFilter(
+    (value) => new TextEncoder().encode(JSON.stringify(value)).byteLength <= 1024 * 1024
+  )
+);
+var HostedWorkflow = Schema_exports.Struct({
+  name: WorkflowName,
+  description: Schema_exports.optionalKey(Schema_exports.String),
+  inputSchema: JsonObject2,
+  outputSchema: Schema_exports.optionalKey(JsonObject2)
+});
+var runFields = {
+  profile: Schema_exports.optionalKey(Schema_exports.NonEmptyString),
+  id: WorkflowRunId,
+  app: Schema_exports.NonEmptyString,
+  deployment: Schema_exports.NonEmptyString,
+  workflow: WorkflowName,
+  createdAt: Schema_exports.String
+};
+var WorkflowRun = Schema_exports.Union([
+  Schema_exports.Struct({
+    ...runFields,
+    status: Schema_exports.Literals(["queued", "running", "waiting", "paused", "waitingForPause"])
+  }),
+  Schema_exports.Struct({ ...runFields, status: Schema_exports.Literal("complete"), output: WorkflowValue }),
+  Schema_exports.Struct({
+    ...runFields,
+    status: Schema_exports.Literal("errored"),
+    error: WorkflowFailure.fields.reason,
+    /** The failing step and the app's own error, when the run recorded them. */
+    failure: Schema_exports.optionalKey(WorkflowRunFailure)
+  }),
+  Schema_exports.Struct({ ...runFields, status: Schema_exports.Literal("terminated") })
 ]);
-var OAuthSecretClientAuth = Schema_exports.Literals([
-  "client_secret_post",
-  "client_secret_basic",
-  "client_secret_basic_raw"
+var WorkflowRunPage = Schema_exports.Struct({
+  items: Schema_exports.Array(WorkflowRun),
+  next: Schema_exports.optionalKey(WorkflowRunId)
+});
+var WorkflowReplay = Schema_exports.Struct({
+  key: Schema_exports.NonEmptyString,
+  fingerprint: Schema_exports.NonEmptyString
+});
+var WorkflowCommand = Schema_exports.Union([
+  Schema_exports.Struct({ operation: Schema_exports.Literal("workflows") }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("workflow-validate"),
+    name: WorkflowName,
+    input: JsonValue
+  }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("workflow-run"),
+    name: WorkflowName,
+    input: JsonValue
+  })
 ]);
-var oauthOptions = {
-  grant: Schema_exports.optionalKey(Schema_exports.Literal("authorization_code")),
-  tokenEndpointAuthMethod: Schema_exports.optionalKey(OAuthClientAuth),
-  /** Omitted uses discovery; null explicitly suppresses the resource parameter. */
-  resource: Schema_exports.optionalKey(Schema_exports.NullOr(HttpUrl))
-};
-var OAuth2Config = Schema_exports.Union([
+var WorkflowRpcCommand = Schema_exports.Union([
   Schema_exports.Struct({
-    ...oauthOptions,
-    discover: HttpUrl,
-    authorizationUrl: Schema_exports.optionalKey(Schema_exports.Never),
-    tokenUrl: Schema_exports.optionalKey(Schema_exports.Never),
-    scopes: Schema_exports.optionalKey(Schema_exports.Array(Schema_exports.String))
+    operation: Schema_exports.Literal("do"),
+    name: WorkflowName,
+    options: WorkflowStepOptions
   }),
   Schema_exports.Struct({
-    ...oauthOptions,
-    authorizationUrl: HttpUrl,
-    tokenUrl: HttpUrl,
-    scopes: Schema_exports.Array(Schema_exports.String),
-    discover: Schema_exports.optionalKey(Schema_exports.Never)
+    operation: Schema_exports.Literal("sleep"),
+    name: WorkflowName,
+    duration: WorkflowDuration
   }),
   Schema_exports.Struct({
-    grant: Schema_exports.Literal("client_credentials"),
-    discover: HttpUrl,
-    authorizationUrl: Schema_exports.optionalKey(Schema_exports.Never),
-    tokenUrl: Schema_exports.optionalKey(Schema_exports.Never),
-    scopes: Schema_exports.optionalKey(Schema_exports.Array(Schema_exports.String)),
-    tokenEndpointAuthMethod: OAuthSecretClientAuth,
-    resource: Schema_exports.optionalKey(Schema_exports.NullOr(HttpUrl))
+    operation: Schema_exports.Literal("until"),
+    name: WorkflowName,
+    timestamp: Schema_exports.Finite
   }),
+  Schema_exports.Struct({ operation: Schema_exports.Literal("context") }),
   Schema_exports.Struct({
-    grant: Schema_exports.Literal("client_credentials"),
-    tokenUrl: HttpUrl,
-    scopes: Schema_exports.Array(Schema_exports.String),
-    tokenEndpointAuthMethod: OAuthSecretClientAuth,
-    resource: Schema_exports.optionalKey(Schema_exports.NullOr(HttpUrl)),
-    authorizationUrl: Schema_exports.optionalKey(Schema_exports.Never),
-    discover: Schema_exports.optionalKey(Schema_exports.Never)
+    operation: Schema_exports.Literal("invoke"),
+    kind: Schema_exports.Literals(["query", "mutation"]),
+    name: Schema_exports.NonEmptyString,
+    input: JsonValue,
+    stepId: Schema_exports.NonEmptyString,
+    timeout: Schema_exports.Finite.check(Schema_exports.isGreaterThanOrEqualTo(0))
   })
 ]);
-var OAuth2AccessToken = Schema_exports.Struct({ access_token: Schema_exports.String });
-var OAuth2Method = class extends Data_exports.TaggedClass(
-  "oauth2"
-) {
-};
-var Provider = class extends Data_exports.Class {
-  /** Declare zero or more accounts from this provider without performing I/O. */
-  many() {
-    return new ManyAccounts({ provider: this });
-  }
-};
-var ManyAccounts = class extends Data_exports.TaggedClass("many") {
-};
-
-// src/contracts/schedules.ts
-var minimumIntervalMilliseconds = 6e4;
-var count = Schema_exports.Int.check(Schema_exports.isGreaterThan(0));
-var absent = Schema_exports.optionalKey(Schema_exports.Never);
-var Interval = Schema_exports.Union([
-  Schema_exports.Struct({ seconds: count, minutes: absent, hours: absent }),
-  Schema_exports.Struct({ seconds: absent, minutes: count, hours: absent }),
-  Schema_exports.Struct({ seconds: absent, minutes: absent, hours: count })
+var WorkflowRpcResult = Schema_exports.Union([
+  Schema_exports.Struct({ ok: Schema_exports.Literal(true), value: JsonValue }),
+  Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: WorkflowFailure })
 ]);
-var CalendarSchedule = Schema_exports.Struct({
-  expression: Schema_exports.NonEmptyString,
-  timezone: Schema_exports.NonEmptyString
-}).check(
-  Schema_exports.makeFilter(
-    (value) => value.expression.trim().split(/\s+/).length === 5 && Result_exports.isSuccess(Cron_exports.parse(value.expression, value.timezone))
-  )
-);
-var ScheduleTiming = Schema_exports.Union([
+var WorkflowControlCommand = Schema_exports.Union([
   Schema_exports.Struct({
-    kind: Schema_exports.Literal("interval"),
-    milliseconds: Schema_exports.Int.check(
-      Schema_exports.makeFilter((value) => value >= minimumIntervalMilliseconds, {
-        message: "Schedule intervals must be at least 60 seconds"
-      }),
-      Schema_exports.isLessThanOrEqualTo(Number.MAX_SAFE_INTEGER)
-    )
+    operation: Schema_exports.Literal("start"),
+    workflow: WorkflowName,
+    input: WorkflowValue,
+    key: Schema_exports.optionalKey(Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(128)))
   }),
-  Schema_exports.Struct({ kind: Schema_exports.Literal("cron"), calendar: CalendarSchedule })
+  Schema_exports.Struct({ operation: Schema_exports.Literal("get"), run: WorkflowRunId }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("list"),
+    workflow: Schema_exports.optionalKey(WorkflowName),
+    cursor: Schema_exports.optionalKey(WorkflowRunId),
+    limit: Schema_exports.optionalKey(Schema_exports.Int.check(Schema_exports.isBetween({ minimum: 1, maximum: 100 })))
+  }),
+  Schema_exports.Struct({ operation: Schema_exports.Literal("terminate"), run: WorkflowRunId })
 ]);
-var OperationSchedule = Schema_exports.Struct({
-  name: Schema_exports.NonEmptyString,
-  timing: ScheduleTiming,
-  input: JsonValue
-});
 
-// ../../node_modules/.bun/effect@https+++pkg.pr.new+Effect-TS+effect+effect@c7d1ffff31a3e2ae0b0b0796b742bddeb797269d/node_modules/effect/dist/unstable/rpc/RpcSchema.js
+// ../../node_modules/.bun/effect@https+++pkg.pr.new+Effect-TS+effect+effect@c7d1ffff31a3e2ae0b0b+a654a55b752bdb24/node_modules/effect/dist/unstable/rpc/RpcSchema.js
 var StreamSchemaTypeId = "~effect/rpc/RpcSchema/StreamSchema";
 var schema = /* @__PURE__ */ declare(isStream);
 function Stream(success, error) {
@@ -173,7 +400,7 @@ function Stream(success, error) {
   });
 }
 
-// ../../node_modules/.bun/effect@https+++pkg.pr.new+Effect-TS+effect+effect@c7d1ffff31a3e2ae0b0b0796b742bddeb797269d/node_modules/effect/dist/unstable/rpc/Rpc.js
+// ../../node_modules/.bun/effect@https+++pkg.pr.new+Effect-TS+effect+effect@c7d1ffff31a3e2ae0b0b+a654a55b752bdb24/node_modules/effect/dist/unstable/rpc/Rpc.js
 var TypeId = "~effect/rpc/Rpc";
 var Proto = {
   [TypeId]: TypeId,
@@ -291,7 +518,7 @@ var make2 = (tag2, options) => {
   });
 };
 
-// ../../node_modules/.bun/effect@https+++pkg.pr.new+Effect-TS+effect+effect@c7d1ffff31a3e2ae0b0b0796b742bddeb797269d/node_modules/effect/dist/unstable/ai/McpSchema.js
+// ../../node_modules/.bun/effect@https+++pkg.pr.new+Effect-TS+effect+effect@c7d1ffff31a3e2ae0b0b+a654a55b752bdb24/node_modules/effect/dist/unstable/ai/McpSchema.js
 var optionalWithDefault = (schema2, defaultValue) => {
   const effect = sync(defaultValue);
   return optionalKey(schema2).pipe(decode({
@@ -561,7 +788,7 @@ var InternalError = class _InternalError extends (/* @__PURE__ */ Error2("effect
     message: "Not implemented"
   });
 };
-var McpError = /* @__PURE__ */ Union([ParseError, InvalidRequest, MethodNotFound, InvalidParams, InternalError, McpErrorBase]);
+var McpError2 = /* @__PURE__ */ Union([ParseError, InvalidRequest, MethodNotFound, InvalidParams, InternalError, McpErrorBase]);
 var InitializeResult = class extends (/* @__PURE__ */ Opaque()(/* @__PURE__ */ Struct({
   ...ResultMeta.fields,
   /**
@@ -584,7 +811,7 @@ var InitializeResult = class extends (/* @__PURE__ */ Opaque()(/* @__PURE__ */ S
 };
 var Initialize = class extends (/* @__PURE__ */ make2("initialize", {
   success: InitializeResult,
-  error: McpError,
+  error: McpError2,
   payload: {
     ...RequestMeta.fields,
     /**
@@ -783,7 +1010,7 @@ var ReadResourceResult = class extends (/* @__PURE__ */ Opaque()(/* @__PURE__ */
 };
 var ReadResource = class extends (/* @__PURE__ */ make2("resources/read", {
   success: ReadResourceResult,
-  error: McpError,
+  error: McpError2,
   payload: {
     ...RequestMeta.fields,
     /**
@@ -796,7 +1023,7 @@ var ReadResource = class extends (/* @__PURE__ */ make2("resources/read", {
 };
 var Subscribe = class extends (/* @__PURE__ */ make2("resources/subscribe", {
   success: /* @__PURE__ */ Struct({}),
-  error: McpError,
+  error: McpError2,
   payload: {
     ...RequestMeta.fields,
     /**
@@ -809,7 +1036,7 @@ var Subscribe = class extends (/* @__PURE__ */ make2("resources/subscribe", {
 };
 var Unsubscribe = class extends (/* @__PURE__ */ make2("resources/unsubscribe", {
   success: /* @__PURE__ */ Struct({}),
-  error: McpError,
+  error: McpError2,
   payload: {
     ...RequestMeta.fields,
     /**
@@ -953,7 +1180,7 @@ var GetPromptResult = class extends (/* @__PURE__ */ Class("@effect/ai/McpSchema
 };
 var GetPrompt = class extends (/* @__PURE__ */ make2("prompts/get", {
   success: GetPromptResult,
-  error: McpError,
+  error: McpError2,
   payload: {
     ...RequestMeta.fields,
     /**
@@ -968,7 +1195,7 @@ var GetPrompt = class extends (/* @__PURE__ */ make2("prompts/get", {
   }
 })) {
 };
-var ToolAnnotations = class extends (/* @__PURE__ */ Opaque()(/* @__PURE__ */ Struct({
+var ToolAnnotations2 = class extends (/* @__PURE__ */ Opaque()(/* @__PURE__ */ Struct({
   /**
    * A human-readable title for the tool.
    */
@@ -1037,7 +1264,7 @@ var Tool = class extends (/* @__PURE__ */ Class("@effect/ai/McpSchema/Tool")({
   /**
    * Optional additional tool information.
    */
-  annotations: /* @__PURE__ */ optional2(ToolAnnotations),
+  annotations: /* @__PURE__ */ optional2(ToolAnnotations2),
   /**
    * Icons that clients can display for this tool.
    */
@@ -1073,7 +1300,7 @@ var CallToolResult = class extends (/* @__PURE__ */ Class("@effect/ai/McpSchema/
 };
 var CallTool = class extends (/* @__PURE__ */ make2("tools/call", {
   success: CallToolResult,
-  error: McpError,
+  error: McpError2,
   payload: {
     ...RequestMeta.fields,
     name: String,
@@ -1093,7 +1320,7 @@ var SetLevel = class extends (/* @__PURE__ */ make2("logging/setLevel", {
     level: LoggingLevel
   },
   success: /* @__PURE__ */ Struct({}),
-  error: McpError
+  error: McpError2
 })) {
 };
 var LoggingMessageNotification = class extends (/* @__PURE__ */ make2("notifications/message", {
@@ -1239,7 +1466,7 @@ var CreateMessageResult = class extends (/* @__PURE__ */ Class("@effect/ai/McpSc
 };
 var CreateMessage = class extends (/* @__PURE__ */ make2("sampling/createMessage", {
   success: CreateMessageResult,
-  error: McpError,
+  error: McpError2,
   payload: {
     messages: /* @__PURE__ */ ArraySchema(SamplingMessage),
     /**
@@ -1450,7 +1677,7 @@ var ElicitDeclineResult = class extends (/* @__PURE__ */ Class("@effect/ai/McpSc
 var ElicitResult = /* @__PURE__ */ Union([ElicitAcceptResult, ElicitDeclineResult]);
 var Elicit = class extends (/* @__PURE__ */ make2("elicitation/create", {
   success: ElicitResult,
-  error: McpError,
+  error: McpError2,
   payload: ElicitRequestParams
 })) {
 };
@@ -1516,48 +1743,209 @@ ${JSON.stringify(input, null, 2)}`,
   requestedSchema: { type: "object", properties: {} }
 });
 
-// src/contracts/workflows.ts
-var WorkflowRunId = Schema_exports.NonEmptyString.pipe(Schema_exports.brand("wfr"));
-var WorkflowName = Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(200));
-var durationUnits = {
-  millisecond: 1,
-  milliseconds: 1,
-  second: 1e3,
-  seconds: 1e3,
-  minute: 6e4,
-  minutes: 6e4,
-  hour: 36e5,
-  hours: 36e5,
-  day: 864e5,
-  days: 864e5,
-  week: 6048e5,
-  weeks: 6048e5
+// src/contracts/webhook-protocol.ts
+var WebhookTransportLimits = Schema_exports.Struct({
+  maxBodyBytes: Schema_exports.Int.check(Schema_exports.isGreaterThan(0))
+});
+var defaultWebhookTransportLimits = WebhookTransportLimits.make({
+  maxBodyBytes: 1024 * 1024
+});
+var encodedBodyChars = 4 * Math.ceil(defaultWebhookTransportLimits.maxBodyBytes / 3);
+var WebhookRequestData = Schema_exports.Struct({
+  url: HttpUrl,
+  method: Schema_exports.Literals(["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"]),
+  headers: Schema_exports.Record(Schema_exports.String, Schema_exports.String),
+  body: Schema_exports.String.check(Schema_exports.isMaxLength(encodedBodyChars))
+});
+var WebhookResponseData = Schema_exports.Struct({
+  status: Schema_exports.Int.check(Schema_exports.isBetween({ minimum: 200, maximum: 599 })),
+  headers: Schema_exports.Record(Schema_exports.String, Schema_exports.String),
+  body: Schema_exports.String.check(Schema_exports.isMaxLength(encodedBodyChars))
+});
+var ManualWebhookSetup = Schema_exports.Struct({
+  instructions: Schema_exports.NonEmptyString,
+  signingSecret: Schema_exports.Literals(["executor", "provider"])
+});
+var ManualWebhookDescriptor = Schema_exports.Struct({
+  ...ManualWebhookSetup.fields,
+  stateSchema: JsonObject2
+});
+var HostedWebhook = Schema_exports.Struct({
+  name: Schema_exports.NonEmptyString,
+  account: Schema_exports.NonEmptyString,
+  configSchema: JsonObject2,
+  setup: Schema_exports.optionalKey(ManualWebhookDescriptor)
+});
+var identity = {
+  name: Schema_exports.NonEmptyString,
+  subscriptionId: Schema_exports.NonEmptyString,
+  sourceAccount: AccountId,
+  callbackUrl: HttpUrl,
+  secret: Schema_exports.String,
+  config: JsonValue
+};
+var WebhookCommand = Schema_exports.Union([
+  Schema_exports.Struct({ operation: Schema_exports.Literal("webhooks") }),
+  Schema_exports.Struct({ operation: Schema_exports.Literal("webhook-validate"), ...identity }),
+  Schema_exports.Struct({ operation: Schema_exports.Literal("webhook-complete"), ...identity, state: JsonValue }),
+  Schema_exports.Struct({ operation: Schema_exports.Literal("webhook-register"), ...identity }),
+  Schema_exports.Struct({ operation: Schema_exports.Literal("webhook-unregister"), ...identity, state: JsonValue }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("webhook-handle"),
+    ...identity,
+    state: JsonValue,
+    request: WebhookRequestData
+  })
+]);
+
+// src/contracts/provider.ts
+var SecretsMethod = class extends Data_exports.TaggedClass(
+  "secrets"
+) {
 };
-var workflowDurationMillis = (value) => {
-  if (typeof value === "number") return Number.isFinite(value) && value >= 0 ? value : void 0;
-  const match = /^(\d+(?:\.\d+)?) (milliseconds?|seconds?|minutes?|hours?|days?|weeks?)$/.exec(
-    value
-  );
-  const unit = match?.[2] === void 0 ? void 0 : durationUnits[match[2]];
-  if (unit === void 0) return void 0;
-  const result = Number(match?.[1]) * unit;
-  return Number.isFinite(result) ? result : void 0;
+var OAuthClientAuth = Schema_exports.Literals([
+  "none",
+  "client_secret_post",
+  "client_secret_basic",
+  "client_secret_basic_raw"
+]);
+var OAuthSecretClientAuth = Schema_exports.Literals([
+  "client_secret_post",
+  "client_secret_basic",
+  "client_secret_basic_raw"
+]);
+var reservedAuthorizationParams = /* @__PURE__ */ new Set([
+  "response_type",
+  "client_id",
+  "redirect_uri",
+  "state",
+  "scope",
+  "code_challenge",
+  "code_challenge_method",
+  "nonce",
+  "resource",
+  "request",
+  "request_uri"
+]);
+var OAuthAuthorizationParams = Schema_exports.Record(Schema_exports.String, Schema_exports.String).check(
+  Schema_exports.makeFilter(
+    (params) => Object.keys(params).every((key) => !reservedAuthorizationParams.has(key)),
+    {
+      message: "Authorization parameters cannot replace protocol parameters such as state or scope."
+    }
+  )
+);
+var oauthOptions = {
+  grant: Schema_exports.optionalKey(Schema_exports.Literal("authorization_code")),
+  authorizationParams: Schema_exports.optionalKey(OAuthAuthorizationParams),
+  tokenEndpointAuthMethod: Schema_exports.optionalKey(OAuthClientAuth),
+  /** Omitted uses discovery; null explicitly suppresses the resource parameter. */
+  resource: Schema_exports.optionalKey(Schema_exports.NullOr(HttpUrl))
 };
-var WorkflowDuration = Schema_exports.Union([
-  Schema_exports.Finite.check(Schema_exports.isGreaterThanOrEqualTo(0)),
-  Schema_exports.NonEmptyString
-]).check(Schema_exports.makeFilter((value) => workflowDurationMillis(value) !== void 0));
-var WorkflowStepOptions = Schema_exports.Struct({
-  retries: Schema_exports.optionalKey(
-    Schema_exports.Struct({
-      limit: Schema_exports.Int.check(Schema_exports.isGreaterThanOrEqualTo(0)),
-      delay: WorkflowDuration,
-      backoff: Schema_exports.optionalKey(Schema_exports.Literals(["constant", "linear", "exponential"]))
-    })
-  ),
-  timeout: Schema_exports.optionalKey(WorkflowDuration)
+var OAuth2Config = Schema_exports.Union([
+  Schema_exports.Struct({
+    ...oauthOptions,
+    discover: HttpUrl,
+    authorizationUrl: Schema_exports.optionalKey(Schema_exports.Never),
+    tokenUrl: Schema_exports.optionalKey(Schema_exports.Never),
+    revocationUrl: Schema_exports.optionalKey(Schema_exports.Never),
+    scopes: Schema_exports.optionalKey(Schema_exports.Array(Schema_exports.String))
+  }),
+  Schema_exports.Struct({
+    ...oauthOptions,
+    authorizationUrl: HttpUrl,
+    tokenUrl: HttpUrl,
+    revocationUrl: Schema_exports.optionalKey(HttpUrl),
+    scopes: Schema_exports.Array(Schema_exports.String),
+    /** RFC 8414 issuer identifier. Declared issuers are checked against the callback's `iss`. */
+    issuer: Schema_exports.optionalKey(HttpUrl),
+    discover: Schema_exports.optionalKey(Schema_exports.Never)
+  }),
+  Schema_exports.Struct({
+    grant: Schema_exports.Literal("client_credentials"),
+    discover: HttpUrl,
+    authorizationUrl: Schema_exports.optionalKey(Schema_exports.Never),
+    tokenUrl: Schema_exports.optionalKey(Schema_exports.Never),
+    revocationUrl: Schema_exports.optionalKey(Schema_exports.Never),
+    scopes: Schema_exports.optionalKey(Schema_exports.Array(Schema_exports.String)),
+    tokenEndpointAuthMethod: OAuthSecretClientAuth,
+    resource: Schema_exports.optionalKey(Schema_exports.NullOr(HttpUrl))
+  }),
+  Schema_exports.Struct({
+    grant: Schema_exports.Literal("client_credentials"),
+    tokenUrl: HttpUrl,
+    revocationUrl: Schema_exports.optionalKey(HttpUrl),
+    scopes: Schema_exports.Array(Schema_exports.String),
+    tokenEndpointAuthMethod: OAuthSecretClientAuth,
+    resource: Schema_exports.optionalKey(Schema_exports.NullOr(HttpUrl)),
+    authorizationUrl: Schema_exports.optionalKey(Schema_exports.Never),
+    discover: Schema_exports.optionalKey(Schema_exports.Never)
+  })
+]);
+var OAuth2AccessToken = Schema_exports.Struct({ access_token: Schema_exports.String });
+var OAuth2Method = class extends Data_exports.TaggedClass(
+  "oauth2"
+) {
+};
+var displayText = Schema_exports.String.check(Schema_exports.isMinLength(1), Schema_exports.isMaxLength(255));
+var AccountInfo = Schema_exports.Struct({
+  externalId: Schema_exports.optionalKey(displayText),
+  displayName: Schema_exports.optionalKey(displayText),
+  username: Schema_exports.optionalKey(displayText),
+  email: Schema_exports.optionalKey(displayText),
+  avatarUrl: Schema_exports.optionalKey(HttpUrl),
+  profileUrl: Schema_exports.optionalKey(HttpUrl)
 });
-var WorkflowFailure = class extends Schema_exports.TaggedError()("WorkflowFailure", {
+var AccountCheckResult = Schema_exports.Struct({ accountInfo: Schema_exports.optionalKey(AccountInfo) });
+var Provider = class extends Data_exports.Class {
+  /** Declare zero or more accounts from this provider without performing I/O. */
+  many() {
+    return new ManyAccounts({ provider: this });
+  }
+};
+var ManyAccounts = class extends Data_exports.TaggedClass("many") {
+};
+
+// src/contracts/protocol-version.ts
+var frameworkProtocol = 5;
+
+// src/contracts/schedules.ts
+var minimumIntervalMilliseconds = 6e4;
+var count = Schema_exports.Int.check(Schema_exports.isGreaterThan(0));
+var absent = Schema_exports.optionalKey(Schema_exports.Never);
+var Interval = Schema_exports.Union([
+  Schema_exports.Struct({ seconds: count, minutes: absent, hours: absent }),
+  Schema_exports.Struct({ seconds: absent, minutes: count, hours: absent }),
+  Schema_exports.Struct({ seconds: absent, minutes: absent, hours: count })
+]);
+var CalendarSchedule = Schema_exports.Struct({
+  expression: Schema_exports.NonEmptyString,
+  timezone: Schema_exports.NonEmptyString
+}).check(
+  Schema_exports.makeFilter(
+    (value) => value.expression.trim().split(/\s+/).length === 5 && Result_exports.isSuccess(Cron_exports.parse(value.expression, value.timezone))
+  )
+);
+var ScheduleTiming = Schema_exports.Union([
+  Schema_exports.Struct({
+    kind: Schema_exports.Literal("interval"),
+    milliseconds: Schema_exports.Int.check(
+      Schema_exports.makeFilter((value) => value >= minimumIntervalMilliseconds, {
+        message: "Schedule intervals must be at least 60 seconds"
+      }),
+      Schema_exports.isLessThanOrEqualTo(Number.MAX_SAFE_INTEGER)
+    )
+  }),
+  Schema_exports.Struct({ kind: Schema_exports.Literal("cron"), calendar: CalendarSchedule })
+]);
+var OperationSchedule = Schema_exports.Struct({
+  name: Schema_exports.NonEmptyString,
+  timing: ScheduleTiming,
+  input: JsonValue
+});
+
+// src/contracts/protocols/1.ts
+var WorkflowFailure2 = class extends Schema_exports.TaggedError()("WorkflowFailure", {
   reason: Schema_exports.Literals([
     "unavailable",
     "not_found",
@@ -1574,108 +1962,558 @@ var WorkflowFailure = class extends Schema_exports.TaggedError()("WorkflowFailur
   retryable: Schema_exports.Boolean
 }) {
 };
-var NonRetryableError = class extends Error {
-  name = "NonRetryableError";
-};
-var WorkflowValue = JsonValue.check(
-  Schema_exports.makeFilter(
-    (value) => new TextEncoder().encode(JSON.stringify(value)).byteLength <= 1024 * 1024
+var WorkflowRpcResult2 = Schema_exports.Union([
+  Schema_exports.Struct({ ok: Schema_exports.Literal(true), value: JsonValue }),
+  Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: WorkflowFailure2 })
+]);
+var DeclaredAuthMethod = Schema_exports.Union([
+  Schema_exports.Struct({ type: Schema_exports.Literal("secrets"), label: Schema_exports.String, fields: JsonObject2 }),
+  Schema_exports.Struct({
+    type: Schema_exports.Literal("oauth2"),
+    ...OAuth2Config.members[0].fields,
+    response: JsonObject2
+  }),
+  Schema_exports.Struct({
+    type: Schema_exports.Literal("oauth2"),
+    ...OAuth2Config.members[1].fields,
+    response: JsonObject2
+  }),
+  Schema_exports.Struct({
+    type: Schema_exports.Literal("oauth2"),
+    ...OAuth2Config.members[2].fields,
+    response: JsonObject2
+  }),
+  Schema_exports.Struct({
+    type: Schema_exports.Literal("oauth2"),
+    ...OAuth2Config.members[3].fields,
+    response: JsonObject2
+  })
+]);
+var DeclaredProvider = Schema_exports.Struct({
+  name: Schema_exports.NonEmptyString,
+  auth: Schema_exports.Record(Schema_exports.NonEmptyString, DeclaredAuthMethod)
+});
+var DeclaredRequirements = Schema_exports.Struct({
+  /** Protocol support of this retained framework build, not an author-declared requirement. */
+  capabilities: Schema_exports.optionalKey(
+    Schema_exports.Struct({
+      skills: Schema_exports.Literal(true),
+      /** Accepts inspect detail and tools. Earlier builds reject both as excess fields. */
+      toolIndex: Schema_exports.optionalKey(Schema_exports.Literal(true)),
+      /** Accepts skills sources and reports whether the catalog includes a live loader. */
+      skillSources: Schema_exports.optionalKey(Schema_exports.Literal(true)),
+      /** Accepts scheduled inspection. Earlier builds reject it as an excess field. */
+      scheduledTools: Schema_exports.optionalKey(Schema_exports.Literal(true))
+    })
+  ),
+  database: Schema_exports.optionalKey(DatabaseSchema),
+  accounts: Schema_exports.Record(
+    Schema_exports.NonEmptyString,
+    Schema_exports.Struct({
+      definition: DeclaredProvider,
+      cardinality: Schema_exports.Literals(["one", "many"])
+    })
   )
+});
+var ResolvedAccount = Schema_exports.Struct({
+  id: AccountId,
+  provider: DeclaredProvider,
+  method: Schema_exports.NonEmptyString,
+  /**
+   * Changes when the account is reconnected or its credentials replaced, not on renewal. Hosts
+   * send it since credential generations; `apps@0.0.1-beta.0` and `beta.1` ignore it.
+   */
+  generation: Schema_exports.optionalKey(Schema_exports.Int),
+  fields: JsonObject2
+});
+var ResolvedAccounts = Schema_exports.Record(
+  Schema_exports.NonEmptyString,
+  Schema_exports.Union([ResolvedAccount, Schema_exports.Array(ResolvedAccount)])
 );
-var HostedWorkflow = Schema_exports.Struct({
-  name: WorkflowName,
-  description: Schema_exports.optionalKey(Schema_exports.String),
+var TrustedToolApproval = Schema_exports.Struct({ tool: Schema_exports.NonEmptyString, input: JsonValue });
+var InvocationDeadline = Schema_exports.Finite.check(Schema_exports.isGreaterThanOrEqualTo(0));
+var HostedTool = Schema_exports.Struct({
+  schedules: Schema_exports.optionalKey(Schema_exports.Array(OperationSchedule)),
+  name: Schema_exports.NonEmptyString,
+  description: Schema_exports.String,
   inputSchema: JsonObject2,
-  outputSchema: Schema_exports.optionalKey(JsonObject2)
+  readOnly: Schema_exports.optionalKey(Schema_exports.Boolean),
+  title: Schema_exports.optionalKey(Schema_exports.String),
+  outputSchema: Schema_exports.optionalKey(JsonObject2),
+  annotations: Schema_exports.optionalKey(ToolAnnotations),
+  _meta: Schema_exports.optionalKey(JsonObject2)
 });
-var runFields = {
-  profile: Schema_exports.optionalKey(Schema_exports.NonEmptyString),
-  id: WorkflowRunId,
-  app: Schema_exports.NonEmptyString,
-  deployment: Schema_exports.NonEmptyString,
-  workflow: WorkflowName,
-  createdAt: Schema_exports.String
-};
-var WorkflowRun = Schema_exports.Union([
+var HostedToolSummary = HostedTool.mapFields(
+  ({ inputSchema: _input, outputSchema: _output, _meta, ...fields }) => fields
+);
+var SkillSources = Schema_exports.Struct({ skills: AppSkills, dynamic: Schema_exports.Boolean });
+var SkillCatalogResponse = Schema_exports.Union([SkillSources, AppSkills]);
+var HostRequest = Schema_exports.Union([
+  WorkflowCommand,
+  WebhookCommand,
+  Schema_exports.Struct({ operation: Schema_exports.Literal("requirements") }),
   Schema_exports.Struct({
-    ...runFields,
-    status: Schema_exports.Literals(["queued", "running", "waiting", "paused", "waitingForPause"])
+    operation: Schema_exports.Literal("inspect"),
+    /** Omit schemas. Only builds that declare the toolIndex capability accept this. */
+    detail: Schema_exports.optionalKey(Schema_exports.Literal("summary")),
+    /** Describe only these tools. Only builds that declare the toolIndex capability accept this. */
+    tools: Schema_exports.optionalKey(Schema_exports.Array(Schema_exports.NonEmptyString)),
+    /**
+     * Describe only declared operations that have schedules, without dynamic tool discovery.
+     * Only builds that declare the scheduledTools capability accept this.
+     */
+    scheduled: Schema_exports.optionalKey(Schema_exports.Literal(true))
   }),
-  Schema_exports.Struct({ ...runFields, status: Schema_exports.Literal("complete"), output: WorkflowValue }),
   Schema_exports.Struct({
-    ...runFields,
-    status: Schema_exports.Literal("errored"),
-    error: WorkflowFailure.fields.reason
+    operation: Schema_exports.Literal("skills"),
+    /** Answer with SkillSources. Only builds that declare the skillSources capability accept this. */
+    sources: Schema_exports.optionalKey(Schema_exports.Literal(true))
   }),
-  Schema_exports.Struct({ ...runFields, status: Schema_exports.Literal("terminated") })
-]);
-var WorkflowRunPage = Schema_exports.Struct({
-  items: Schema_exports.Array(WorkflowRun),
-  next: Schema_exports.optionalKey(WorkflowRunId)
-});
-var WorkflowReplay = Schema_exports.Struct({
-  key: Schema_exports.NonEmptyString,
-  fingerprint: Schema_exports.NonEmptyString
-});
-var WorkflowCommand = Schema_exports.Union([
-  Schema_exports.Struct({ operation: Schema_exports.Literal("workflows") }),
   Schema_exports.Struct({
-    operation: Schema_exports.Literal("workflow-validate"),
-    name: WorkflowName,
+    operation: Schema_exports.Literal("query"),
+    name: Schema_exports.NonEmptyString,
     input: JsonValue
   }),
   Schema_exports.Struct({
-    operation: Schema_exports.Literal("workflow-run"),
-    name: WorkflowName,
+    operation: Schema_exports.Literal("mutate"),
+    name: Schema_exports.NonEmptyString,
+    input: JsonValue
+  }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("call"),
+    tool: Schema_exports.NonEmptyString,
     input: JsonValue
   })
 ]);
-var WorkflowRpcCommand = Schema_exports.Union([
+var HostRequestInvalid = class extends Schema_exports.TaggedError()(
+  "HostRequestInvalid",
+  {}
+) {
+};
+var HostAccountsInvalid = class extends Schema_exports.TaggedError()(
+  "HostAccountsInvalid",
+  {}
+) {
+};
+var HostDeclarationInvalid = class extends Schema_exports.TaggedError()(
+  "HostDeclarationInvalid",
+  {}
+) {
+};
+var HostEvaluationFailed = class extends Schema_exports.TaggedError()(
+  "HostEvaluationFailed",
+  {}
+) {
+};
+var HostOperationNotFound = class extends Schema_exports.TaggedError()(
+  "HostOperationNotFound",
+  {}
+) {
+};
+var HostOperationFailed = class extends Schema_exports.TaggedError()(
+  "HostOperationFailed",
+  {}
+) {
+};
+var HostToolNotFound = class extends Schema_exports.TaggedError()(
+  "HostToolNotFound",
+  {}
+) {
+};
+var InputProblem = Schema_exports.String.check(Schema_exports.isMaxLength(512));
+var maxInputProblems = 10;
+var HostInputInvalid = class extends Schema_exports.TaggedError()("HostInputInvalid", {
+  problems: Schema_exports.optionalKey(
+    Schema_exports.Array(InputProblem).check(Schema_exports.isMaxLength(maxInputProblems))
+  )
+}) {
+};
+var HostToolBlocked = class extends Schema_exports.TaggedError()("HostToolBlocked", {}) {
+};
+var HostToolApprovalRequired = class extends Schema_exports.TaggedError()(
+  "HostToolApprovalRequired",
+  { input: JsonValue, elicitation: ApprovalElicitation }
+) {
+};
+var HostToolPolicyFailed = class extends Schema_exports.TaggedError()(
+  "HostToolPolicyFailed",
+  {}
+) {
+};
+var HostOutputInvalid = class extends Schema_exports.TaggedError()(
+  "HostOutputInvalid",
+  {}
+) {
+};
+var HostError = Schema_exports.Union([
+  OpenapiResponseError,
+  ProviderError,
+  McpError,
+  SkillLoadFailed,
+  WorkflowFailure2,
+  HostRequestInvalid,
+  HostAccountsInvalid,
+  HostDeclarationInvalid,
+  HostEvaluationFailed,
+  HostOperationNotFound,
+  HostOperationFailed,
+  HostToolNotFound,
+  HostInputInvalid,
+  HostOutputInvalid,
+  HostToolBlocked,
+  HostToolApprovalRequired,
+  HostToolPolicyFailed,
+  ElicitationFailed
+]);
+var HostResponse = Schema_exports.Union([
   Schema_exports.Struct({
-    operation: Schema_exports.Literal("do"),
-    name: WorkflowName,
-    options: WorkflowStepOptions
+    ok: Schema_exports.Literal(true),
+    value: JsonValue,
+    toolError: Schema_exports.optionalKey(Schema_exports.Literal(true))
   }),
+  Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: HostError })
+]);
+var HostInvocation = Schema_exports.Struct({
+  command: HostRequest,
+  accounts: ResolvedAccounts,
+  approval: Schema_exports.optionalKey(TrustedToolApproval),
+  replay: Schema_exports.optionalKey(WorkflowReplay),
+  deadline: Schema_exports.optionalKey(InvocationDeadline),
+  workflowRun: Schema_exports.optionalKey(WorkflowRunId)
+});
+var protocol1 = {
+  version: 1,
+  schemas: {
+    invocation: HostInvocation,
+    request: HostRequest,
+    response: HostResponse,
+    requirements: DeclaredRequirements,
+    tools: Schema_exports.Array(HostedTool),
+    toolSummaries: Schema_exports.Array(HostedToolSummary),
+    skills: SkillCatalogResponse,
+    elicitationRequest: FormElicitation,
+    elicitationReply: ElicitationReply,
+    workflowStep: WorkflowRpcCommand,
+    workflowStepReply: WorkflowRpcResult2,
+    workflowControl: WorkflowControlCommand,
+    cacheCommand: CacheCommand,
+    cacheReply: CacheReply
+  }
+};
+
+// src/contracts/protocols/2.ts
+var SkillSources2 = Schema_exports.Struct({
+  skills: AppSkills,
+  dynamic: Schema_exports.Boolean,
+  cached: Schema_exports.optionalKey(Schema_exports.Boolean)
+});
+var SkillCatalogResponse2 = Schema_exports.Union([SkillSources2, AppSkills]);
+var protocol2 = {
+  version: 2,
+  schemas: { ...protocol1.schemas, skills: SkillCatalogResponse2 }
+};
+
+// src/contracts/protocols/3.ts
+var HostDeclarationInvalid2 = class extends Schema_exports.TaggedError()(
+  "HostDeclarationInvalid",
+  FailureDetail
+) {
+};
+var HostEvaluationFailed2 = class extends Schema_exports.TaggedError()(
+  "HostEvaluationFailed",
+  FailureDetail
+) {
+};
+var HostOperationFailed2 = class extends Schema_exports.TaggedError()(
+  "HostOperationFailed",
+  FailureDetail
+) {
+};
+var HostError2 = Schema_exports.Union([
+  OpenapiResponseError,
+  ProviderError,
+  McpError,
+  SkillLoadFailed,
+  WorkflowFailure,
+  HostRequestInvalid,
+  HostAccountsInvalid,
+  HostDeclarationInvalid2,
+  HostEvaluationFailed2,
+  HostOperationNotFound,
+  HostOperationFailed2,
+  DatabaseLimitExceeded,
+  DatabaseFieldReserved,
+  HostToolNotFound,
+  HostInputInvalid,
+  HostOutputInvalid,
+  HostToolBlocked,
+  HostToolApprovalRequired,
+  HostToolPolicyFailed,
+  ElicitationFailed
+]);
+var HostResponse2 = Schema_exports.Union([
   Schema_exports.Struct({
-    operation: Schema_exports.Literal("sleep"),
-    name: WorkflowName,
-    duration: WorkflowDuration
+    ok: Schema_exports.Literal(true),
+    value: JsonValue,
+    toolError: Schema_exports.optionalKey(Schema_exports.Literal(true))
   }),
+  Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: HostError2 })
+]);
+var protocol3 = {
+  version: 3,
+  schemas: {
+    invocation: HostInvocation,
+    request: HostRequest,
+    response: HostResponse2,
+    requirements: DeclaredRequirements,
+    tools: Schema_exports.Array(HostedTool),
+    toolSummaries: Schema_exports.Array(HostedToolSummary),
+    skills: SkillCatalogResponse2,
+    elicitationRequest: FormElicitation,
+    elicitationReply: ElicitationReply,
+    workflowStep: WorkflowRpcCommand,
+    workflowStepReply: WorkflowRpcResult,
+    workflowControl: WorkflowControlCommand,
+    cacheCommand: CacheCommand,
+    cacheReply: CacheReply
+  }
+};
+
+// src/contracts/protocols/4.ts
+var HostedTool2 = Schema_exports.Struct({
+  schedules: Schema_exports.optionalKey(Schema_exports.Array(OperationSchedule)),
+  name: Schema_exports.NonEmptyString,
+  router: Schema_exports.optionalKey(Schema_exports.NonEmptyString),
+  tags: Schema_exports.optionalKey(Schema_exports.Array(Schema_exports.NonEmptyString)),
+  description: Schema_exports.String,
+  inputSchema: JsonObject2,
+  readOnly: Schema_exports.optionalKey(Schema_exports.Boolean),
+  title: Schema_exports.optionalKey(Schema_exports.String),
+  outputSchema: Schema_exports.optionalKey(JsonObject2),
+  annotations: Schema_exports.optionalKey(ToolAnnotations),
+  _meta: Schema_exports.optionalKey(JsonObject2)
+});
+var HostedToolSummary2 = HostedTool2.mapFields(
+  ({ inputSchema: _input, outputSchema: _output, _meta, ...fields }) => fields
+);
+var HostRouterError = Schema_exports.Union([
+  ProviderError,
+  McpError,
+  SkillLoadFailed,
+  HostDeclarationInvalid2,
+  HostEvaluationFailed2
+]);
+var HostedRouter = Schema_exports.Struct({
+  path: Schema_exports.String,
+  title: Schema_exports.optionalKey(Schema_exports.String),
+  description: Schema_exports.optionalKey(Schema_exports.String),
+  icons: Schema_exports.optionalKey(Schema_exports.Array(RouterIcon)),
+  tags: Schema_exports.optionalKey(Schema_exports.Record(Schema_exports.NonEmptyString, Schema_exports.String)),
+  skill: Schema_exports.optionalKey(AppSkillName),
+  error: Schema_exports.optionalKey(HostRouterError)
+});
+var HostedCatalog = Schema_exports.Struct({
+  tools: Schema_exports.Array(HostedTool2),
+  routers: Schema_exports.Array(HostedRouter)
+});
+var HostedCatalogSummary = Schema_exports.Struct({
+  tools: Schema_exports.Array(HostedToolSummary2),
+  routers: Schema_exports.Array(HostedRouter)
+});
+var ToolKind = Schema_exports.Literals(["query", "mutation"]);
+var HostRequest2 = Schema_exports.Union([
+  WorkflowCommand,
+  WebhookCommand,
+  Schema_exports.Struct({ operation: Schema_exports.Literal("requirements") }),
   Schema_exports.Struct({
-    operation: Schema_exports.Literal("until"),
-    name: WorkflowName,
-    timestamp: Schema_exports.Finite
+    operation: Schema_exports.Literal("inspect"),
+    /** Omit schemas. Only builds that declare the toolIndex capability accept this. */
+    detail: Schema_exports.optionalKey(Schema_exports.Literal("summary")),
+    /** Describe only these tools. Only builds that declare the toolIndex capability accept this. */
+    tools: Schema_exports.optionalKey(Schema_exports.Array(Schema_exports.NonEmptyString)),
+    /**
+     * Describe only declared operations that have schedules, without dynamic tool discovery.
+     * Only builds that declare the scheduledTools capability accept this.
+     */
+    scheduled: Schema_exports.optionalKey(Schema_exports.Literal(true))
   }),
-  Schema_exports.Struct({ operation: Schema_exports.Literal("context") }),
   Schema_exports.Struct({
-    operation: Schema_exports.Literal("invoke"),
-    kind: Schema_exports.Literals(["query", "mutation"]),
+    operation: Schema_exports.Literal("skills"),
+    /** Answer with SkillSources. Only builds that declare the skillSources capability accept this. */
+    sources: Schema_exports.optionalKey(Schema_exports.Literal(true))
+  }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("query"),
     name: Schema_exports.NonEmptyString,
-    input: JsonValue,
-    stepId: Schema_exports.NonEmptyString,
-    timeout: Schema_exports.Finite.check(Schema_exports.isGreaterThanOrEqualTo(0))
-  })
-]);
-var WorkflowRpcResult = Schema_exports.Union([
-  Schema_exports.Struct({ ok: Schema_exports.Literal(true), value: JsonValue }),
-  Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: WorkflowFailure })
-]);
-var WorkflowControlCommand = Schema_exports.Union([
+    input: JsonValue
+  }),
   Schema_exports.Struct({
-    operation: Schema_exports.Literal("start"),
-    workflow: WorkflowName,
-    input: WorkflowValue,
-    key: Schema_exports.optionalKey(Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(128)))
+    operation: Schema_exports.Literal("mutate"),
+    name: Schema_exports.NonEmptyString,
+    input: JsonValue
   }),
-  Schema_exports.Struct({ operation: Schema_exports.Literal("get"), run: WorkflowRunId }),
   Schema_exports.Struct({
-    operation: Schema_exports.Literal("list"),
-    workflow: Schema_exports.optionalKey(WorkflowName),
-    cursor: Schema_exports.optionalKey(WorkflowRunId),
-    limit: Schema_exports.optionalKey(Schema_exports.Int.check(Schema_exports.isBetween({ minimum: 1, maximum: 100 })))
+    operation: Schema_exports.Literal("call"),
+    tool: Schema_exports.NonEmptyString,
+    /**
+     * The caller's claim; the bundle rejects a call whose tool has the other kind. The host omits
+     * it for a tool its catalog does not list, and then opens storage for writing.
+     */
+    kind: Schema_exports.optionalKey(ToolKind),
+    input: JsonValue
+  })
+]);
+var HostKindMismatch = class extends Schema_exports.TaggedError()("HostKindMismatch", {
+  tool: Schema_exports.NonEmptyString,
+  requested: ToolKind,
+  actual: ToolKind
+}) {
+};
+var HostError3 = Schema_exports.Union([...HostError2.members, HostKindMismatch]);
+var HostResponse3 = Schema_exports.Union([
+  Schema_exports.Struct({
+    ok: Schema_exports.Literal(true),
+    value: JsonValue,
+    toolError: Schema_exports.optionalKey(Schema_exports.Literal(true))
   }),
-  Schema_exports.Struct({ operation: Schema_exports.Literal("terminate"), run: WorkflowRunId })
+  Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: HostError3 })
+]);
+var HostInvocation2 = Schema_exports.Struct({
+  command: HostRequest2,
+  accounts: ResolvedAccounts,
+  approval: Schema_exports.optionalKey(TrustedToolApproval),
+  replay: Schema_exports.optionalKey(WorkflowReplay),
+  deadline: Schema_exports.optionalKey(InvocationDeadline),
+  workflowRun: Schema_exports.optionalKey(WorkflowRunId)
+});
+var protocol4 = {
+  version: 4,
+  schemas: {
+    invocation: HostInvocation2,
+    request: HostRequest2,
+    response: HostResponse3,
+    requirements: DeclaredRequirements,
+    catalog: HostedCatalog,
+    catalogSummary: HostedCatalogSummary,
+    skills: SkillCatalogResponse2,
+    elicitationRequest: FormElicitation,
+    elicitationReply: ElicitationReply,
+    workflowStep: WorkflowRpcCommand,
+    workflowStepReply: WorkflowRpcResult,
+    workflowControl: WorkflowControlCommand,
+    cacheCommand: CacheCommand,
+    cacheReply: CacheReply
+  }
+};
+
+// src/contracts/protocols/5.ts
+var DeclaredRequirements2 = Schema_exports.Struct({
+  /** Protocol support of this retained framework build, not an author-declared requirement. */
+  capabilities: Schema_exports.optionalKey(
+    Schema_exports.Struct({
+      skills: Schema_exports.Literal(true),
+      toolIndex: Schema_exports.optionalKey(Schema_exports.Literal(true)),
+      skillSources: Schema_exports.optionalKey(Schema_exports.Literal(true)),
+      scheduledTools: Schema_exports.optionalKey(Schema_exports.Literal(true))
+    })
+  ),
+  database: Schema_exports.optionalKey(DatabaseSchema),
+  accounts: Schema_exports.Record(
+    Schema_exports.NonEmptyString,
+    Schema_exports.Struct({
+      definition: DeclaredProvider,
+      cardinality: Schema_exports.Literals(["one", "many"]),
+      /**
+       * The slot's provider defines an account check. Kept beside the definition, not in it, so
+       * adding or editing a check never changes the provider's identity.
+       */
+      health: Schema_exports.optionalKey(Schema_exports.Literal(true))
+    })
+  )
+});
+var AccountCheckCommand = Schema_exports.Struct({
+  operation: Schema_exports.Literal("account-check"),
+  requirement: Schema_exports.NonEmptyString
+});
+var HostRequest3 = Schema_exports.Union([
+  ...protocol4.schemas.request.members,
+  AccountCheckCommand
 ]);
+var HostInvocation3 = Schema_exports.Struct({
+  command: HostRequest3,
+  accounts: ResolvedAccounts,
+  approval: Schema_exports.optionalKey(TrustedToolApproval),
+  replay: Schema_exports.optionalKey(WorkflowReplay),
+  deadline: Schema_exports.optionalKey(InvocationDeadline),
+  workflowRun: Schema_exports.optionalKey(WorkflowRunId)
+});
+var protocol5 = {
+  version: 5,
+  schemas: {
+    ...protocol4.schemas,
+    invocation: HostInvocation3,
+    request: HostRequest3,
+    requirements: DeclaredRequirements2,
+    accountCheck: AccountCheckResult
+  }
+};
+
+// src/contracts/host.ts
+var skillsCommand = (sources) => sources ? { operation: "skills", sources: true } : { operation: "skills" };
+var skillCatalog = (response) => Schema_exports.is(SkillSources2)(response) ? response : { skills: response };
+var inspectCommand = (tools, scheduled) => ({
+  operation: "inspect",
+  ...tools === void 0 ? {} : { tools: [...tools] },
+  ...scheduled === void 0 ? {} : { scheduled }
+});
+var indexCommand = { operation: "inspect", detail: "summary" };
+var selectTools = (tools) => (catalog) => tools === void 0 ? catalog : { ...catalog, tools: catalog.tools.filter((tool) => tools.includes(tool.name)) };
+var HostRequirementsError = Schema_exports.Union([
+  HostRequestInvalid,
+  HostDeclarationInvalid2,
+  DatabaseFieldReserved
+]);
+var HostInspectError = Schema_exports.Union([
+  ProviderError,
+  McpError,
+  SkillLoadFailed,
+  HostRequestInvalid,
+  HostDeclarationInvalid2,
+  HostAccountsInvalid,
+  HostEvaluationFailed2
+]);
+var HostCallError = Schema_exports.Union([
+  OpenapiResponseError,
+  WorkflowFailure,
+  HostInspectError,
+  HostToolNotFound,
+  HostOperationNotFound,
+  HostKindMismatch,
+  HostOperationFailed2,
+  DatabaseLimitExceeded,
+  HostInputInvalid,
+  HostOutputInvalid,
+  HostToolBlocked,
+  HostToolApprovalRequired,
+  HostToolPolicyFailed,
+  ElicitationFailed
+]);
+var HostAccountCheckError = Schema_exports.Union([
+  ProviderError,
+  WorkflowFailure,
+  HostRequestInvalid,
+  HostDeclarationInvalid2,
+  HostAccountsInvalid,
+  HostOperationNotFound,
+  HostOperationFailed2,
+  HostOutputInvalid
+]);
+var HostDataError = HostCallError;
+var ToolResultObservation = Context_exports.Reference(
+  "apps/ToolResultObservation",
+  { defaultValue: () => ({ failed: () => {
+  } }) }
+);
 
 export {
   SecretsMethod,
@@ -1684,27 +2522,41 @@ export {
   OAuth2Config,
   OAuth2AccessToken,
   OAuth2Method,
+  AccountInfo,
+  AccountCheckResult,
   Provider,
   ManyAccounts,
-  minimumIntervalMilliseconds,
-  Interval,
-  CalendarSchedule,
-  ScheduleTiming,
-  OperationSchedule,
-  ElicitationLimits,
-  defaultElicitationLimits,
-  FormElicitation,
-  ElicitationResponse,
-  ElicitationFailed,
-  ElicitationReply,
-  ApprovalElicitation,
-  ApprovalResponse,
-  approvalElicitation,
+  reservedRouterKeys,
+  RouterKey,
+  RouterIcon,
+  RouterMeta,
+  ToolAnnotations,
+  McpClientLimits,
+  defaultMcpClientLimits,
+  mcpSdkTimerCeilingMs,
+  McpToolsOptions,
+  McpToolResult,
+  McpToolMetadata,
+  McpServerHeader,
+  McpError,
+  ProcessConfig,
+  ApiErrorRecovery,
+  ApiErrorResponse,
+  OpenapiResponseError,
+  defaultOpenapiErrorLimits,
+  maxFailureMessageLength,
+  FailureSource,
+  FailureName,
+  FailureCode,
+  FailureMessage,
+  FailureDetail,
   WorkflowRunId,
   WorkflowName,
   workflowDurationMillis,
   WorkflowDuration,
   WorkflowStepOptions,
+  WorkflowFailureDetail,
+  WorkflowRunFailure,
   WorkflowFailure,
   NonRetryableError,
   WorkflowValue,
@@ -1715,5 +2567,79 @@ export {
   WorkflowCommand,
   WorkflowRpcCommand,
   WorkflowRpcResult,
-  WorkflowControlCommand
+  WorkflowControlCommand,
+  ElicitationLimits,
+  defaultElicitationLimits,
+  FormElicitation,
+  ElicitationResponse,
+  ElicitationFailed,
+  ElicitationReply,
+  ApprovalElicitation,
+  ApprovalResponse,
+  approvalElicitation,
+  WebhookTransportLimits,
+  defaultWebhookTransportLimits,
+  WebhookRequestData,
+  WebhookResponseData,
+  ManualWebhookSetup,
+  ManualWebhookDescriptor,
+  HostedWebhook,
+  WebhookCommand,
+  frameworkProtocol,
+  minimumIntervalMilliseconds,
+  Interval,
+  CalendarSchedule,
+  ScheduleTiming,
+  OperationSchedule,
+  DeclaredAuthMethod,
+  DeclaredProvider,
+  ResolvedAccount,
+  ResolvedAccounts,
+  TrustedToolApproval,
+  InvocationDeadline,
+  HostRequestInvalid,
+  HostAccountsInvalid,
+  HostOperationNotFound,
+  HostToolNotFound,
+  InputProblem,
+  maxInputProblems,
+  HostInputInvalid,
+  HostToolBlocked,
+  HostToolApprovalRequired,
+  HostToolPolicyFailed,
+  HostOutputInvalid,
+  protocol1,
+  SkillSources2 as SkillSources,
+  SkillCatalogResponse2 as SkillCatalogResponse,
+  protocol2,
+  HostDeclarationInvalid2 as HostDeclarationInvalid,
+  HostEvaluationFailed2 as HostEvaluationFailed,
+  HostOperationFailed2 as HostOperationFailed,
+  protocol3,
+  HostedTool2 as HostedTool,
+  HostedToolSummary2 as HostedToolSummary,
+  HostRouterError,
+  HostedRouter,
+  HostedCatalog,
+  HostedCatalogSummary,
+  HostKindMismatch,
+  HostError3 as HostError,
+  HostResponse3 as HostResponse,
+  protocol4,
+  DeclaredRequirements2 as DeclaredRequirements,
+  AccountCheckCommand,
+  HostRequest3 as HostRequest,
+  HostInvocation3 as HostInvocation,
+  protocol5,
+  skillsCommand,
+  skillCatalog,
+  inspectCommand,
+  indexCommand,
+  selectTools,
+  HostRequirementsError,
+  HostInspectError,
+  HostCallError,
+  HostAccountCheckError,
+  HostDataError,
+  ToolResultObservation
 };