apps 0.0.1-beta.1 → 0.0.1-beta.10

package/types/apps/src/openapi.d.ts

@@ -2,11 +2,11 @@
 import { type OperationKinds } from "./implementation/protocol-operations.js";
 import type { OpenapiToolsOptions } from "./contracts/openapi.js";
 export { OpenapiError, isOpenapiTextMedia, openapiBinaryResultSchema, OpenapiErrorResponse, type OpenapiToolsOptions, type OpenapiOperation, type CredentialBinding, OpenapiParameter, OpenapiRequestBody, openapiMediaKind, } from "./contracts/openapi.js";
-/** Discover operations for the selected account. Kinds override uncertain upstream read-only hints. */
-export declare const openapiOperations: (options: OpenapiToolsOptions, kinds?: OperationKinds) => Promise<{
-    queries: Record<string, import("./index.js").Operation<import("effect/Schema").Json, unknown, "query", import("./index.js").OperationContext>>;
-    mutations: Record<string, import("./index.js").Operation<import("effect/Schema").Json, unknown, "mutation", import("./index.js").OperationContext>>;
-}>;
+/**
+ * Discover a document's operations as a router for the selected account. Kinds override uncertain
+ * upstream read-only hints. Mount it under a key, or override its metadata with `router(...)`.
+ */
+export declare const openapiRouter: (options: OpenapiToolsOptions, kinds?: OperationKinds) => Promise<import("./index.js").RouterDeclaration<unknown, unknown>>;
 export type { OperationKinds } from "./implementation/protocol-operations.js";
 export * from "./contracts/openapi-compile.js";
-export { liveOpenapiOperations, type OpenapiSourceOptions, } from "./implementation/openapi-source.js";
+export { liveOpenapiRouter, type OpenapiSourceOptions } from "./implementation/openapi-source.js";

package/types/apps/src/skills.d.ts

@@ -1,6 +1,9 @@
 import { type FolderSkillsOptions, type GitHubSkillsOptions, type SkillReaderOptions, type WellKnownSkillsOptions, type SkillFile } from "./contracts/skills.js";
-export { SkillLoadFailed, SkillDefinitionInvalid, SkillServiceName, type SkillReaderOptions, type FolderSkillsOptions, type AppSkillSource as Skill, type SkillFile, type GitHubSkillsOptions, type WellKnownSkillsOptions, } from "./contracts/skills.js";
-/** Fetch a public GitHub skill collection from one resolved commit. Mutable refs refresh on each call. */
+export { SkillLoadFailed, SkillDefinitionInvalid, SkillServiceName, type SkillReaderOptions, type FolderSkillsOptions, type AppSkillSource as Skill, type SkillFile, type GitHubSkillsOptions, type SkillCacheOptions, type WellKnownSkillsOptions, } from "./contracts/skills.js";
+/**
+ * Fetch a public GitHub skill collection from one resolved commit. Pass `cache: ctx.cache` to reuse
+ * the catalog; without it, mutable refs resolve again on each call.
+ */
 export declare const githubSkills: (options: GitHubSkillsOptions) => Promise<readonly {
     readonly name: string;
     readonly description: string;
@@ -15,7 +18,7 @@ export declare const githubSkills: (options: GitHubSkillsOptions) => Promise<rea
     };
     readonly "allowed-tools"?: string;
 }[]>;
-/** Fetch a published skill index and its text files, with no persistent cache. */
+/** Fetch a published skill index and its text files. Pass `cache: ctx.cache` to reuse the catalog. */
 export declare const wellKnownSkills: (options: WellKnownSkillsOptions) => Promise<readonly {
     readonly name: string;
     readonly description: string;

package/types/apps/src/ui-auth.d.ts

@@ -1,3 +1,3 @@
-/** Host-only app authentication protocol and bootstrap; products supply identity and session lifecycle. */
+/** Host-only app authentication protocol; products supply identity and session lifecycle. */
 export * from "./contracts/ui-auth.js";
-export { appPrivateHeaders, appSignInPage, appSignInScript } from "./implementation/ui-auth.js";
+export { appPrivateHeaders, appRedirect, appSignInCallback, appSignInFailed, } from "./implementation/ui-auth.js";

package/types/telemetry/src/browser-operations.d.ts

@@ -1,8 +1,11 @@
 /** Correlate transport and decoded outcomes without exporting response bodies or errors. */
 import { Effect, Schema, Tracer } from "effect";
 import { HttpClient, HttpClientError } from "effect/unstable/http";
-/** A random document identity. It is never an authentication or user identifier. */
-export declare const browserPageId: () => string;
+/**
+ * A random identity for the current browser document. It is never an authentication or user
+ * identifier. Server renders have no document, so they get none instead of sharing one per isolate.
+ */
+export declare const browserPageId: () => string | undefined;
 /** Safe event shared with the host's error reporter and product analytics. */
 export declare const BrowserOperationFailure: Schema.Struct<{
     readonly error_type: Schema.Literals<readonly ["BrowserDecodeFailed", "BrowserTransportFailed", "BrowserOperationFailed"]>;

package/js/chunk-PZ36XMXW.js

@@ -1,93 +0,0 @@
-import {
-  decoderOf
-} from "./chunk-2HHMABB6.js";
-import {
-  Effect_exports
-} from "./chunk-FW5HBOIK.js";
-
-// src/implementation/authoring.ts
-var NativeCallback = /* @__PURE__ */ Symbol("apps.NativeCallback");
-var fromPromise = (callback) => (...args) => {
-  if (NativeCallback in callback) {
-    const native = callback[NativeCallback];
-    return native(...args);
-  }
-  return Effect_exports.tryPromise({ try: () => callback(...args), catch: (error) => error });
-};
-var toPromise = (operation, signal) => {
-  const native = (...args) => Effect_exports.suspend(() => {
-    if (signal === void 0) return operation(...args);
-    if (signal.aborted) return Effect_exports.interrupt;
-    const cancelled = Effect_exports.callback((resume) => {
-      if (signal.aborted) {
-        resume(Effect_exports.interrupt);
-        return;
-      }
-      const abort = () => resume(Effect_exports.interrupt);
-      signal.addEventListener("abort", abort, { once: true });
-      return Effect_exports.sync(() => signal.removeEventListener("abort", abort));
-    });
-    return Effect_exports.raceFirst(
-      cancelled,
-      Effect_exports.suspend(() => operation(...args))
-    );
-  });
-  return Object.assign((...args) => Effect_exports.runPromise(native(...args)), {
-    [NativeCallback]: native
-  });
-};
-
-// src/implementation/operations.ts
-var NativeOperation = /* @__PURE__ */ Symbol("apps.Operation");
-var operationDeclaration = (operation) => ({
-  kind: operation.kind,
-  [NativeOperation]: operation
-});
-var nativeOperation = (value) => {
-  if (typeof value !== "object" || value === null || !(NativeOperation in value)) return void 0;
-  return value[NativeOperation];
-};
-var operationOptions = (options) => {
-  const approval = options.approval;
-  return {
-    ...options.description === void 0 ? {} : { description: options.description },
-    ...options.title === void 0 ? {} : { title: options.title },
-    ...options.annotations === void 0 ? {} : { annotations: options.annotations },
-    ...options._meta === void 0 ? {} : { _meta: options._meta },
-    input: decoderOf(options.input),
-    ...approval === void 0 ? {} : {
-      approval: (context) => Effect_exports.tryPromise({ try: async () => approval(context), catch: (error) => error })
-    }
-  };
-};
-var withApproval = (operation, approval) => ({
-  ...operation,
-  [NativeOperation]: {
-    ...operation[NativeOperation],
-    approval: (context) => Effect_exports.tryPromise({ try: async () => approval(context), catch: (error) => error })
-  }
-});
-var make = (kind, options, run) => operationDeclaration({
-  ...operationOptions(options),
-  kind,
-  // The host always validates JSON serialization, even without a stronger output declaration.
-  ...options.output === void 0 ? {} : { output: decoderOf(options.output) },
-  run: (context, input) => Effect_exports.tryPromise({
-    // SAFETY: defineApp checks the handler context against its requirements.
-    // The host validates account bindings and creates the matching storage facade.
-    try: () => run(context, input),
-    catch: (error) => error
-  })
-});
-var query = (options, run) => make("query", options, run);
-var mutation = (options, run) => make("mutation", options, run);
-
-export {
-  fromPromise,
-  toPromise,
-  operationDeclaration,
-  nativeOperation,
-  withApproval,
-  query,
-  mutation
-};

package/js/chunk-SWPD52J7.js

@@ -1,35 +0,0 @@
-import {
-  Schema_exports
-} from "./chunk-FW5HBOIK.js";
-
-// src/contracts/api-response-error.ts
-var ApiErrorRecovery = Schema_exports.Struct({
-  action: Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(1024)),
-  instructions: Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(4096))
-});
-var ApiErrorResponse = Schema_exports.Struct({
-  code: Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(128)),
-  status: Schema_exports.Int.check(Schema_exports.isBetween({ minimum: 400, maximum: 599 })),
-  message: Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(4096)),
-  recovery: Schema_exports.optionalKey(ApiErrorRecovery)
-});
-var OpenapiResponseError = class extends Schema_exports.TaggedError()(
-  "OpenapiResponseError",
-  ApiErrorResponse.fields
-) {
-};
-var OpenapiErrorLimits = Schema_exports.Struct({
-  maxBodyBytes: Schema_exports.Int.check(Schema_exports.isGreaterThan(0)),
-  readTimeoutMs: Schema_exports.Int.check(Schema_exports.isGreaterThan(0))
-});
-var defaultOpenapiErrorLimits = OpenapiErrorLimits.make({
-  maxBodyBytes: 65536,
-  readTimeoutMs: 2e3
-});
-
-export {
-  ApiErrorRecovery,
-  ApiErrorResponse,
-  OpenapiResponseError,
-  defaultOpenapiErrorLimits
-};

package/js/chunk-TE4KO4HI.js

@@ -1,47 +0,0 @@
-import {
-  HttpServerResponse_exports
-} from "./chunk-QKHR7BMF.js";
-
-// src/implementation/ui-auth.ts
-var appPrivateHeaders = {
-  "cache-control": "no-store",
-  "referrer-policy": "no-referrer",
-  "x-content-type-options": "nosniff",
-  "content-security-policy": "frame-ancestors 'none'"
-};
-var appSignInPage = () => HttpServerResponse_exports.text(
-  `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Opening app</title></head><body><p>Opening app\u2026</p><a href="/" hidden>Try again</a><script src="/_executor/auth/browser.js"></script></body></html>`,
-  {
-    contentType: "text/html",
-    headers: {
-      ...appPrivateHeaders,
-      "content-security-policy": "default-src 'none'; script-src 'self'; connect-src 'self'; frame-ancestors 'none'; base-uri 'none'"
-    }
-  }
-);
-var appSignInScript = () => HttpServerResponse_exports.text(
-  `
-const callback = location.pathname === "/_executor/auth/callback";
-const parameters = new URLSearchParams(location.hash.slice(1));
-const body = callback
-  ? {request: parameters.get("request"), code: parameters.get("code")}
-  : {returnTo: location.pathname + location.search + location.hash};
-if (callback) history.replaceState(null, "", location.pathname);
-fetch(callback ? "/_executor/auth/complete" : "/_executor/auth/start", {
-  method: "POST", headers: {"content-type":"application/json"}, body: JSON.stringify(body)
-}).then(async response => {
-  if (!response.ok) throw new Error();
-  const result = await response.json();
-  location.replace(callback ? result.returnTo : result.url);
-}).catch(() => {
-  document.querySelector("p").textContent = "Could not sign in to this app. Try opening it again.";
-  document.querySelector("a").hidden = false;
-});`,
-  { contentType: "text/javascript", headers: appPrivateHeaders }
-);
-
-export {
-  appPrivateHeaders,
-  appSignInPage,
-  appSignInScript
-};

package/js/chunk-W7D7WVSY.js

@@ -1,18 +0,0 @@
-import {
-  AccountId
-} from "./chunk-SATWJKN6.js";
-import {
-  Schema_exports
-} from "./chunk-FW5HBOIK.js";
-
-// src/contracts/provider-error.ts
-var ProviderError = class extends Schema_exports.TaggedError()("ProviderError", {
-  reason: Schema_exports.Literals(["unauthorized", "forbidden", "rate_limited", "unavailable", "rejected"]),
-  status: Schema_exports.optional(Schema_exports.Int.check(Schema_exports.isBetween({ minimum: 100, maximum: 599 }))),
-  accountId: Schema_exports.optional(AccountId)
-}) {
-};
-
-export {
-  ProviderError
-};

package/types/apps/src/contracts/dynamic-tools.d.ts

@@ -1,13 +0,0 @@
-/** Lazy operation discovery and resolution. Executables remain invocation-owned. */
-import type { Effect } from "effect";
-import type { HostedTool, HostedToolSummary } from "./host.js";
-import type { AppOperation } from "./operations.js";
-/** Tool names include their queries./mutations. prefix. Resolution never requires listing. */
-export interface DynamicTools {
-    readonly list: () => Effect.Effect<readonly HostedTool[], unknown>;
-    readonly resolve: (name: string) => Effect.Effect<AppOperation | undefined, unknown>;
-    /** Names and descriptions without schemas. Omitted sources reduce list(). */
-    readonly summaries?: () => Effect.Effect<readonly HostedToolSummary[], unknown>;
-    /** One tool's full metadata without listing. Omitted sources search list(). */
-    readonly describe?: (name: string) => Effect.Effect<HostedTool | undefined, unknown>;
-}

package/types/apps/src/implementation/account-operations.d.ts

@@ -1,151 +0,0 @@
-/** Combine account-bound protocol operations without changing their upstream inputs. */
-import { Effect, Schema } from "effect";
-import type { DynamicTools } from "../contracts/dynamic-tools.js";
-import type { AppOperation, OperationContext } from "../contracts/operations.js";
-import { type JsonValue } from "../contracts/schema.js";
-import { type Operation } from "./operations.js";
-type Operations = {
-    readonly queries?: Readonly<Record<string, Operation<JsonValue, unknown, "query", OperationContext>>>;
-    readonly dynamicTools?: DynamicTools;
-    readonly mutations?: Readonly<Record<string, Operation<JsonValue, unknown, "mutation", OperationContext>>>;
-};
-/**
- * Discover each selected account's protocol operations and combine matching names.
- * Calls take { accountId, input }; each branch retains its account's input schema,
- * credentials, approval and output validation. Empty selections expose no operations.
- * Discovery is sequential and cancellation follows the caller's signal.
- */
-export declare const accountOperations: <Account extends {
-    readonly id: string;
-}>(accounts: readonly Account[], discover: (account: Account) => Promise<Operations>, options: {
-    readonly signal: AbortSignal;
-}) => Promise<{
-    queries: {
-        [k: string]: Operation<{
-            readonly accountId: string;
-            readonly input: unknown;
-        }, unknown, "query", import("../index.js").AppContext>;
-    };
-    mutations: {
-        [k: string]: Operation<{
-            readonly accountId: string;
-            readonly input: unknown;
-        }, unknown, "mutation", import("../index.js").AppContext>;
-    };
-} | {
-    dynamicTools: {
-        list: () => Effect.Effect<{
-            readonly name: string;
-            readonly description: string;
-            readonly inputSchema: {
-                readonly [x: string]: Schema.Json;
-            };
-            readonly _meta?: {
-                readonly [x: string]: Schema.Json;
-            };
-            readonly title?: string;
-            readonly outputSchema?: {
-                readonly [x: string]: Schema.Json;
-            };
-            readonly annotations?: {
-                readonly title?: string;
-                readonly readOnlyHint?: boolean;
-                readonly destructiveHint?: boolean;
-                readonly idempotentHint?: boolean;
-                readonly openWorldHint?: boolean;
-            };
-            readonly schedules?: readonly {
-                readonly name: string;
-                readonly timing: {
-                    readonly kind: "interval";
-                    readonly milliseconds: number;
-                } | {
-                    readonly kind: "cron";
-                    readonly calendar: {
-                        readonly expression: string;
-                        readonly timezone: string;
-                    };
-                };
-                readonly input: Schema.Json;
-            }[];
-            readonly readOnly?: boolean;
-        }[], unknown, never>;
-        summaries: () => Effect.Effect<{
-            readonly name: string;
-            readonly description: string;
-            readonly title?: string;
-            readonly annotations?: {
-                readonly title?: string;
-                readonly readOnlyHint?: boolean;
-                readonly destructiveHint?: boolean;
-                readonly idempotentHint?: boolean;
-                readonly openWorldHint?: boolean;
-            };
-            readonly schedules?: readonly {
-                readonly name: string;
-                readonly timing: {
-                    readonly kind: "interval";
-                    readonly milliseconds: number;
-                } | {
-                    readonly kind: "cron";
-                    readonly calendar: {
-                        readonly expression: string;
-                        readonly timezone: string;
-                    };
-                };
-                readonly input: Schema.Json;
-            }[];
-            readonly readOnly?: boolean;
-        }[], unknown, never>;
-        describe: (name: string) => Effect.Effect<{
-            readonly name: string;
-            readonly description: string;
-            readonly inputSchema: {
-                readonly [x: string]: Schema.Json;
-            };
-            readonly _meta?: {
-                readonly [x: string]: Schema.Json;
-            };
-            readonly title?: string;
-            readonly outputSchema?: {
-                readonly [x: string]: Schema.Json;
-            };
-            readonly annotations?: {
-                readonly title?: string;
-                readonly readOnlyHint?: boolean;
-                readonly destructiveHint?: boolean;
-                readonly idempotentHint?: boolean;
-                readonly openWorldHint?: boolean;
-            };
-            readonly schedules?: readonly {
-                readonly name: string;
-                readonly timing: {
-                    readonly kind: "interval";
-                    readonly milliseconds: number;
-                } | {
-                    readonly kind: "cron";
-                    readonly calendar: {
-                        readonly expression: string;
-                        readonly timezone: string;
-                    };
-                };
-                readonly input: Schema.Json;
-            }[];
-            readonly readOnly?: boolean;
-        } | undefined, unknown, never>;
-        resolve: (name: string) => Effect.Effect<AppOperation<unknown, unknown> | undefined, unknown, never>;
-    };
-    queries: {
-        [k: string]: Operation<{
-            readonly accountId: string;
-            readonly input: unknown;
-        }, unknown, "query", import("../index.js").AppContext>;
-    };
-    mutations: {
-        [k: string]: Operation<{
-            readonly accountId: string;
-            readonly input: unknown;
-        }, unknown, "mutation", import("../index.js").AppContext>;
-    };
-}>;
-export {};

package/types/apps/src/implementation/dynamic-tools.d.ts

@@ -1,8 +0,0 @@
-import { HostedTool } from "../contracts/host.js";
-import type { DynamicTools } from "../contracts/dynamic-tools.js";
-import { type OperationDeclaration } from "./operations.js";
-/** Declare metadata discovery separately from executable resolution. Names are fully qualified. */
-export declare const dynamicTools: (source: {
-    readonly list: () => Promise<readonly HostedTool[]>;
-    readonly resolve: (name: string) => Promise<OperationDeclaration<"query" | "mutation"> | undefined>;
-}) => DynamicTools;