apps 0.0.1-beta.1 → 0.0.1-beta.11

package/js/{chunk-IHQ4ML7K.js → chunk-KRSCJDTW.js}

@@ -1,22 +1,24 @@
 import {
+  DatabaseFieldReserved,
+  DatabaseLimitExceeded,
   DatabaseSchema
-} from "./chunk-BMOIAIVR.js";
+} from "./chunk-N7YDVXYJ.js";
 import {
+  CacheCommand,
+  CacheReply,
+  ProviderError
+} from "./chunk-R3EV5FTO.js";
+import {
+  AppSkillName,
   AppSkills,
   SkillLoadFailed
-} from "./chunk-YEJOQEII.js";
-import {
-  OpenapiResponseError
-} from "./chunk-SWPD52J7.js";
-import {
-  ProviderError
-} from "./chunk-W7D7WVSY.js";
+} from "./chunk-JU7VHODU.js";
 import {
   AccountId,
   HttpUrl,
   JsonObject as JsonObject2,
   JsonValue
-} from "./chunk-SATWJKN6.js";
+} from "./chunk-27F7W2LG.js";
 import {
   Any,
   ArraySchema,
@@ -70,7 +72,31 @@ import {
   transformOptional,
   withConstructorDefault,
   withDefault
-} from "./chunk-FW5HBOIK.js";
+} from "./chunk-CDL5PM2Q.js";
+
+// src/contracts/router.ts
+var reservedRouterKeys = /* @__PURE__ */ new Set([
+  "__proto__",
+  "constructor",
+  "prototype"
+]);
+var RouterKey = Schema_exports.String.check(
+  Schema_exports.isPattern(/^[A-Za-z_][A-Za-z0-9_-]{0,99}$/),
+  Schema_exports.makeFilter((key) => !reservedRouterKeys.has(key))
+);
+var RouterIcon = Schema_exports.Struct({
+  src: Schema_exports.NonEmptyString,
+  mimeType: Schema_exports.optionalKey(Schema_exports.String),
+  sizes: Schema_exports.optionalKey(Schema_exports.Array(Schema_exports.String)),
+  theme: Schema_exports.optionalKey(Schema_exports.Literals(["light", "dark"]))
+});
+var RouterMeta = Schema_exports.Struct({
+  title: Schema_exports.optionalKey(Schema_exports.String),
+  description: Schema_exports.optionalKey(Schema_exports.String),
+  instructions: Schema_exports.optionalKey(Schema_exports.String),
+  icons: Schema_exports.optionalKey(Schema_exports.Array(RouterIcon)),
+  tags: Schema_exports.optionalKey(Schema_exports.Record(Schema_exports.NonEmptyString, Schema_exports.String))
+});
 
 // src/contracts/tools.ts
 var ToolAnnotations = Schema_exports.Struct({
@@ -124,6 +150,15 @@ var McpToolMetadata = Schema_exports.Struct({
   annotations: Schema_exports.optional(ToolAnnotations),
   _meta: Schema_exports.optional(JsonObject2)
 });
+var McpServerHeader = Schema_exports.Struct({
+  name: Schema_exports.optionalKey(Schema_exports.String),
+  title: Schema_exports.optionalKey(Schema_exports.String),
+  version: Schema_exports.optionalKey(Schema_exports.String),
+  description: Schema_exports.optionalKey(Schema_exports.String),
+  websiteUrl: Schema_exports.optionalKey(Schema_exports.String),
+  icons: Schema_exports.optionalKey(Schema_exports.Array(RouterIcon)),
+  instructions: Schema_exports.optionalKey(Schema_exports.String)
+});
 var McpError = class extends Schema_exports.TaggedError()("McpError", {
   phase: Schema_exports.Literals(["connect", "discover", "call", "schema", "transport"]),
   reason: Schema_exports.Literals([
@@ -146,6 +181,44 @@ var ProcessConfig = Schema_exports.Struct({
   )
 });
 
+// src/contracts/api-response-error.ts
+var ApiErrorRecovery = Schema_exports.Struct({
+  action: Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(1024)),
+  instructions: Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(4096))
+});
+var ApiErrorResponse = Schema_exports.Struct({
+  code: Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(128)),
+  status: Schema_exports.Int.check(Schema_exports.isBetween({ minimum: 400, maximum: 599 })),
+  message: Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(4096)),
+  recovery: Schema_exports.optionalKey(ApiErrorRecovery)
+});
+var OpenapiResponseError = class extends Schema_exports.TaggedError()(
+  "OpenapiResponseError",
+  ApiErrorResponse.fields
+) {
+};
+var OpenapiErrorLimits = Schema_exports.Struct({
+  maxBodyBytes: Schema_exports.Int.check(Schema_exports.isGreaterThan(0)),
+  readTimeoutMs: Schema_exports.Int.check(Schema_exports.isGreaterThan(0))
+});
+var defaultOpenapiErrorLimits = OpenapiErrorLimits.make({
+  maxBodyBytes: 65536,
+  readTimeoutMs: 2e3
+});
+
+// src/contracts/failure.ts
+var maxFailureMessageLength = 2048;
+var FailureSource = Schema_exports.Literals(["app", "storage", "service"]);
+var FailureName = Schema_exports.String.check(Schema_exports.isMaxLength(128));
+var FailureCode = Schema_exports.String.check(Schema_exports.isMaxLength(128));
+var FailureMessage = Schema_exports.String.check(Schema_exports.isMaxLength(maxFailureMessageLength));
+var FailureDetail = {
+  source: Schema_exports.optionalKey(FailureSource),
+  errorName: Schema_exports.optionalKey(FailureName),
+  code: Schema_exports.optionalKey(FailureCode),
+  message: Schema_exports.optionalKey(FailureMessage)
+};
+
 // src/contracts/workflows.ts
 var WorkflowRunId = Schema_exports.NonEmptyString.pipe(Schema_exports.brand("wfr"));
 var WorkflowName = Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(200));
@@ -187,7 +260,14 @@ var WorkflowStepOptions = Schema_exports.Struct({
   ),
   timeout: Schema_exports.optionalKey(WorkflowDuration)
 });
+var WorkflowFailureDetail = {
+  step: Schema_exports.optionalKey(Schema_exports.String.check(Schema_exports.isMaxLength(200))),
+  errorName: Schema_exports.optionalKey(FailureName),
+  message: Schema_exports.optionalKey(FailureMessage)
+};
+var WorkflowRunFailure = Schema_exports.Struct(WorkflowFailureDetail);
 var WorkflowFailure = class extends Schema_exports.TaggedError()("WorkflowFailure", {
+  ...WorkflowFailureDetail,
   reason: Schema_exports.Literals([
     "unavailable",
     "not_found",
@@ -235,7 +315,9 @@ var WorkflowRun = Schema_exports.Union([
   Schema_exports.Struct({
     ...runFields,
     status: Schema_exports.Literal("errored"),
-    error: WorkflowFailure.fields.reason
+    error: WorkflowFailure.fields.reason,
+    /** The failing step and the app's own error, when the run recorded them. */
+    failure: Schema_exports.optionalKey(WorkflowRunFailure)
   }),
   Schema_exports.Struct({ ...runFields, status: Schema_exports.Literal("terminated") })
 ]);
@@ -307,41 +389,6 @@ var WorkflowControlCommand = Schema_exports.Union([
   Schema_exports.Struct({ operation: Schema_exports.Literal("terminate"), run: WorkflowRunId })
 ]);
 
-// src/contracts/schedules.ts
-var minimumIntervalMilliseconds = 6e4;
-var count = Schema_exports.Int.check(Schema_exports.isGreaterThan(0));
-var absent = Schema_exports.optionalKey(Schema_exports.Never);
-var Interval = Schema_exports.Union([
-  Schema_exports.Struct({ seconds: count, minutes: absent, hours: absent }),
-  Schema_exports.Struct({ seconds: absent, minutes: count, hours: absent }),
-  Schema_exports.Struct({ seconds: absent, minutes: absent, hours: count })
-]);
-var CalendarSchedule = Schema_exports.Struct({
-  expression: Schema_exports.NonEmptyString,
-  timezone: Schema_exports.NonEmptyString
-}).check(
-  Schema_exports.makeFilter(
-    (value) => value.expression.trim().split(/\s+/).length === 5 && Result_exports.isSuccess(Cron_exports.parse(value.expression, value.timezone))
-  )
-);
-var ScheduleTiming = Schema_exports.Union([
-  Schema_exports.Struct({
-    kind: Schema_exports.Literal("interval"),
-    milliseconds: Schema_exports.Int.check(
-      Schema_exports.makeFilter((value) => value >= minimumIntervalMilliseconds, {
-        message: "Schedule intervals must be at least 60 seconds"
-      }),
-      Schema_exports.isLessThanOrEqualTo(Number.MAX_SAFE_INTEGER)
-    )
-  }),
-  Schema_exports.Struct({ kind: Schema_exports.Literal("cron"), calendar: CalendarSchedule })
-]);
-var OperationSchedule = Schema_exports.Struct({
-  name: Schema_exports.NonEmptyString,
-  timing: ScheduleTiming,
-  input: JsonValue
-});
-
 // ../../node_modules/.bun/effect@https+++pkg.pr.new+Effect-TS+effect+effect@c7d1ffff31a3e2ae0b0b+a654a55b752bdb24/node_modules/effect/dist/unstable/rpc/RpcSchema.js
 var StreamSchemaTypeId = "~effect/rpc/RpcSchema/StreamSchema";
 var schema = /* @__PURE__ */ declare(isStream);
@@ -1767,7 +1814,7 @@ var OAuthSecretClientAuth = Schema_exports.Literals([
   "client_secret_basic",
   "client_secret_basic_raw"
 ]);
-var reservedAuthorizationParams = /* @__PURE__ */ new Set([
+var reservedAuthorizationParams = [
   "response_type",
   "client_id",
   "redirect_uri",
@@ -1779,17 +1826,39 @@ var reservedAuthorizationParams = /* @__PURE__ */ new Set([
   "resource",
   "request",
   "request_uri"
-]);
+];
+var reserved = new Set(reservedAuthorizationParams);
 var OAuthAuthorizationParams = Schema_exports.Record(Schema_exports.String, Schema_exports.String).check(
-  Schema_exports.makeFilter(
-    (params) => Object.keys(params).every((key) => !reservedAuthorizationParams.has(key)),
-    {
-      message: "Authorization parameters cannot replace protocol parameters such as state or scope."
-    }
-  )
+  Schema_exports.makeFilter((params) => Object.keys(params).every((key) => !reserved.has(key)), {
+    message: "Authorization parameters cannot replace protocol parameters such as state or scope."
+  })
+);
+var declaredAuthorizationQuery = Schema_exports.makeFilter(
+  (config) => {
+    const keys = [...new URL(config.authorizationUrl).searchParams.keys()];
+    const owned = keys.filter((key) => reserved.has(key));
+    if (owned.length > 0)
+      return {
+        path: ["authorizationUrl"],
+        issue: `authorizationUrl cannot set protocol parameters: ${owned.join(", ")}.`
+      };
+    const repeated = keys.filter((key) => Object.hasOwn(config.authorizationParams ?? {}, key));
+    if (repeated.length > 0)
+      return {
+        path: ["authorizationParams"],
+        issue: `Declare each parameter once; authorizationUrl already sets: ${repeated.join(", ")}.`
+      };
+    return void 0;
+  }
 );
 var oauthOptions = {
   grant: Schema_exports.optionalKey(Schema_exports.Literal("authorization_code")),
+  /**
+   * Service-defined authorization request parameters, such as Google's
+   * `{ access_type: "offline", prompt: "consent" }`. Host-owned protocol parameters
+   * (`state`, `scope`, `redirect_uri`, PKCE and the others in `reservedAuthorizationParams`)
+   * are rejected. A discovered endpoint's own query parameter of the same name is replaced.
+   */
   authorizationParams: Schema_exports.optionalKey(OAuthAuthorizationParams),
   tokenEndpointAuthMethod: Schema_exports.optionalKey(OAuthClientAuth),
   /** Omitted uses discovery; null explicitly suppresses the resource parameter. */
@@ -1806,6 +1875,7 @@ var OAuth2Config = Schema_exports.Union([
   }),
   Schema_exports.Struct({
     ...oauthOptions,
+    /** Its query is kept; it cannot set protocol parameters or repeat `authorizationParams`. */
     authorizationUrl: HttpUrl,
     tokenUrl: HttpUrl,
     revocationUrl: Schema_exports.optionalKey(HttpUrl),
@@ -1813,7 +1883,7 @@ var OAuth2Config = Schema_exports.Union([
     /** RFC 8414 issuer identifier. Declared issuers are checked against the callback's `iss`. */
     issuer: Schema_exports.optionalKey(HttpUrl),
     discover: Schema_exports.optionalKey(Schema_exports.Never)
-  }),
+  }).check(declaredAuthorizationQuery),
   Schema_exports.Struct({
     grant: Schema_exports.Literal("client_credentials"),
     discover: HttpUrl,
@@ -1840,6 +1910,16 @@ var OAuth2Method = class extends Data_exports.TaggedClass(
   "oauth2"
 ) {
 };
+var displayText = Schema_exports.String.check(Schema_exports.isMinLength(1), Schema_exports.isMaxLength(255));
+var AccountInfo = Schema_exports.Struct({
+  externalId: Schema_exports.optionalKey(displayText),
+  displayName: Schema_exports.optionalKey(displayText),
+  username: Schema_exports.optionalKey(displayText),
+  email: Schema_exports.optionalKey(displayText),
+  avatarUrl: Schema_exports.optionalKey(HttpUrl),
+  profileUrl: Schema_exports.optionalKey(HttpUrl)
+});
+var AccountCheckResult = Schema_exports.Struct({ accountInfo: Schema_exports.optionalKey(AccountInfo) });
 var Provider = class extends Data_exports.Class {
   /** Declare zero or more accounts from this provider without performing I/O. */
   many() {
@@ -1849,10 +1929,66 @@ var Provider = class extends Data_exports.Class {
 var ManyAccounts = class extends Data_exports.TaggedClass("many") {
 };
 
-// src/contracts/operations.ts
-var OperationToolPrefixes = { query: "queries.", mutate: "mutations." };
+// src/contracts/protocol-version.ts
+var frameworkProtocol = 5;
 
-// src/contracts/host.ts
+// src/contracts/schedules.ts
+var minimumIntervalMilliseconds = 6e4;
+var count = Schema_exports.Int.check(Schema_exports.isGreaterThan(0));
+var absent = Schema_exports.optionalKey(Schema_exports.Never);
+var Interval = Schema_exports.Union([
+  Schema_exports.Struct({ seconds: count, minutes: absent, hours: absent }),
+  Schema_exports.Struct({ seconds: absent, minutes: count, hours: absent }),
+  Schema_exports.Struct({ seconds: absent, minutes: absent, hours: count })
+]);
+var CalendarSchedule = Schema_exports.Struct({
+  expression: Schema_exports.NonEmptyString,
+  timezone: Schema_exports.NonEmptyString
+}).check(
+  Schema_exports.makeFilter(
+    (value) => value.expression.trim().split(/\s+/).length === 5 && Result_exports.isSuccess(Cron_exports.parse(value.expression, value.timezone))
+  )
+);
+var ScheduleTiming = Schema_exports.Union([
+  Schema_exports.Struct({
+    kind: Schema_exports.Literal("interval"),
+    milliseconds: Schema_exports.Int.check(
+      Schema_exports.makeFilter((value) => value >= minimumIntervalMilliseconds, {
+        message: "Schedule intervals must be at least 60 seconds"
+      }),
+      Schema_exports.isLessThanOrEqualTo(Number.MAX_SAFE_INTEGER)
+    )
+  }),
+  Schema_exports.Struct({ kind: Schema_exports.Literal("cron"), calendar: CalendarSchedule })
+]);
+var OperationSchedule = Schema_exports.Struct({
+  name: Schema_exports.NonEmptyString,
+  timing: ScheduleTiming,
+  input: JsonValue
+});
+
+// src/contracts/protocols/1.ts
+var WorkflowFailure2 = class extends Schema_exports.TaggedError()("WorkflowFailure", {
+  reason: Schema_exports.Literals([
+    "unavailable",
+    "not_found",
+    "input",
+    "output",
+    "operation",
+    "approval",
+    "credentials",
+    "terminated",
+    "execution",
+    "conflict",
+    "engine"
+  ]),
+  retryable: Schema_exports.Boolean
+}) {
+};
+var WorkflowRpcResult2 = Schema_exports.Union([
+  Schema_exports.Struct({ ok: Schema_exports.Literal(true), value: JsonValue }),
+  Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: WorkflowFailure2 })
+]);
 var DeclaredAuthMethod = Schema_exports.Union([
   Schema_exports.Struct({ type: Schema_exports.Literal("secrets"), label: Schema_exports.String, fields: JsonObject2 }),
   Schema_exports.Struct({
@@ -1906,6 +2042,11 @@ var ResolvedAccount = Schema_exports.Struct({
   id: AccountId,
   provider: DeclaredProvider,
   method: Schema_exports.NonEmptyString,
+  /**
+   * Changes when the account is reconnected or its credentials replaced, not on renewal. Hosts
+   * send it since credential generations; `apps@0.0.1-beta.0` and `beta.1` ignore it.
+   */
+  generation: Schema_exports.optionalKey(Schema_exports.Int),
   fields: JsonObject2
 });
 var ResolvedAccounts = Schema_exports.Record(
@@ -1929,16 +2070,7 @@ var HostedToolSummary = HostedTool.mapFields(
   ({ inputSchema: _input, outputSchema: _output, _meta, ...fields }) => fields
 );
 var SkillSources = Schema_exports.Struct({ skills: AppSkills, dynamic: Schema_exports.Boolean });
-var skillsCommand = (sources) => sources ? { operation: "skills", sources: true } : { operation: "skills" };
 var SkillCatalogResponse = Schema_exports.Union([SkillSources, AppSkills]);
-var skillCatalog = (response) => Schema_exports.is(SkillSources)(response) ? response : { skills: response };
-var inspectCommand = (tools, scheduled) => ({
-  operation: "inspect",
-  ...tools === void 0 ? {} : { tools: [...tools] },
-  ...scheduled === void 0 ? {} : { scheduled }
-});
-var indexCommand = { operation: "inspect", detail: "summary" };
-var selectTools = (tools) => (all) => tools === void 0 ? all : all.filter((tool) => tools.includes(tool.name));
 var HostRequest = Schema_exports.Union([
   WorkflowCommand,
   WebhookCommand,
@@ -2036,23 +2168,19 @@ var HostOutputInvalid = class extends Schema_exports.TaggedError()(
   {}
 ) {
 };
-var HostRequirementsError = Schema_exports.Union([HostRequestInvalid, HostDeclarationInvalid]);
-var HostInspectError = Schema_exports.Union([
+var HostError = Schema_exports.Union([
+  OpenapiResponseError,
   ProviderError,
   McpError,
   SkillLoadFailed,
+  WorkflowFailure2,
   HostRequestInvalid,
-  HostDeclarationInvalid,
   HostAccountsInvalid,
-  HostEvaluationFailed
-]);
-var HostCallError = Schema_exports.Union([
-  OpenapiResponseError,
-  WorkflowFailure,
-  HostInspectError,
-  HostToolNotFound,
+  HostDeclarationInvalid,
+  HostEvaluationFailed,
   HostOperationNotFound,
   HostOperationFailed,
+  HostToolNotFound,
   HostInputInvalid,
   HostOutputInvalid,
   HostToolBlocked,
@@ -2060,8 +2188,71 @@ var HostCallError = Schema_exports.Union([
   HostToolPolicyFailed,
   ElicitationFailed
 ]);
-var HostDataError = HostCallError;
-var HostError = Schema_exports.Union([
+var HostResponse = Schema_exports.Union([
+  Schema_exports.Struct({
+    ok: Schema_exports.Literal(true),
+    value: JsonValue,
+    toolError: Schema_exports.optionalKey(Schema_exports.Literal(true))
+  }),
+  Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: HostError })
+]);
+var HostInvocation = Schema_exports.Struct({
+  command: HostRequest,
+  accounts: ResolvedAccounts,
+  approval: Schema_exports.optionalKey(TrustedToolApproval),
+  replay: Schema_exports.optionalKey(WorkflowReplay),
+  deadline: Schema_exports.optionalKey(InvocationDeadline),
+  workflowRun: Schema_exports.optionalKey(WorkflowRunId)
+});
+var protocol1 = {
+  version: 1,
+  schemas: {
+    invocation: HostInvocation,
+    request: HostRequest,
+    response: HostResponse,
+    requirements: DeclaredRequirements,
+    tools: Schema_exports.Array(HostedTool),
+    toolSummaries: Schema_exports.Array(HostedToolSummary),
+    skills: SkillCatalogResponse,
+    elicitationRequest: FormElicitation,
+    elicitationReply: ElicitationReply,
+    workflowStep: WorkflowRpcCommand,
+    workflowStepReply: WorkflowRpcResult2,
+    workflowControl: WorkflowControlCommand,
+    cacheCommand: CacheCommand,
+    cacheReply: CacheReply
+  }
+};
+
+// src/contracts/protocols/2.ts
+var SkillSources2 = Schema_exports.Struct({
+  skills: AppSkills,
+  dynamic: Schema_exports.Boolean,
+  cached: Schema_exports.optionalKey(Schema_exports.Boolean)
+});
+var SkillCatalogResponse2 = Schema_exports.Union([SkillSources2, AppSkills]);
+var protocol2 = {
+  version: 2,
+  schemas: { ...protocol1.schemas, skills: SkillCatalogResponse2 }
+};
+
+// src/contracts/protocols/3.ts
+var HostDeclarationInvalid2 = class extends Schema_exports.TaggedError()(
+  "HostDeclarationInvalid",
+  FailureDetail
+) {
+};
+var HostEvaluationFailed2 = class extends Schema_exports.TaggedError()(
+  "HostEvaluationFailed",
+  FailureDetail
+) {
+};
+var HostOperationFailed2 = class extends Schema_exports.TaggedError()(
+  "HostOperationFailed",
+  FailureDetail
+) {
+};
+var HostError2 = Schema_exports.Union([
   OpenapiResponseError,
   ProviderError,
   McpError,
@@ -2069,10 +2260,12 @@ var HostError = Schema_exports.Union([
   WorkflowFailure,
   HostRequestInvalid,
   HostAccountsInvalid,
-  HostDeclarationInvalid,
-  HostEvaluationFailed,
+  HostDeclarationInvalid2,
+  HostEvaluationFailed2,
   HostOperationNotFound,
-  HostOperationFailed,
+  HostOperationFailed2,
+  DatabaseLimitExceeded,
+  DatabaseFieldReserved,
   HostToolNotFound,
   HostInputInvalid,
   HostOutputInvalid,
@@ -2081,19 +2274,269 @@ var HostError = Schema_exports.Union([
   HostToolPolicyFailed,
   ElicitationFailed
 ]);
-var ToolResultObservation = Context_exports.Reference(
-  "apps/ToolResultObservation",
-  { defaultValue: () => ({ failed: () => {
-  } }) }
+var HostResponse2 = Schema_exports.Union([
+  Schema_exports.Struct({
+    ok: Schema_exports.Literal(true),
+    value: JsonValue,
+    toolError: Schema_exports.optionalKey(Schema_exports.Literal(true))
+  }),
+  Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: HostError2 })
+]);
+var protocol3 = {
+  version: 3,
+  schemas: {
+    invocation: HostInvocation,
+    request: HostRequest,
+    response: HostResponse2,
+    requirements: DeclaredRequirements,
+    tools: Schema_exports.Array(HostedTool),
+    toolSummaries: Schema_exports.Array(HostedToolSummary),
+    skills: SkillCatalogResponse2,
+    elicitationRequest: FormElicitation,
+    elicitationReply: ElicitationReply,
+    workflowStep: WorkflowRpcCommand,
+    workflowStepReply: WorkflowRpcResult,
+    workflowControl: WorkflowControlCommand,
+    cacheCommand: CacheCommand,
+    cacheReply: CacheReply
+  }
+};
+
+// src/contracts/protocols/4.ts
+var HostedTool2 = Schema_exports.Struct({
+  schedules: Schema_exports.optionalKey(Schema_exports.Array(OperationSchedule)),
+  name: Schema_exports.NonEmptyString,
+  router: Schema_exports.optionalKey(Schema_exports.NonEmptyString),
+  tags: Schema_exports.optionalKey(Schema_exports.Array(Schema_exports.NonEmptyString)),
+  description: Schema_exports.String,
+  inputSchema: JsonObject2,
+  readOnly: Schema_exports.optionalKey(Schema_exports.Boolean),
+  title: Schema_exports.optionalKey(Schema_exports.String),
+  outputSchema: Schema_exports.optionalKey(JsonObject2),
+  annotations: Schema_exports.optionalKey(ToolAnnotations),
+  _meta: Schema_exports.optionalKey(JsonObject2)
+});
+var HostedToolSummary2 = HostedTool2.mapFields(
+  ({ inputSchema: _input, outputSchema: _output, _meta, ...fields }) => fields
 );
-var HostResponse = Schema_exports.Union([
+var HostRouterError = Schema_exports.Union([
+  ProviderError,
+  McpError,
+  SkillLoadFailed,
+  HostDeclarationInvalid2,
+  HostEvaluationFailed2
+]);
+var HostedRouter = Schema_exports.Struct({
+  path: Schema_exports.String,
+  title: Schema_exports.optionalKey(Schema_exports.String),
+  description: Schema_exports.optionalKey(Schema_exports.String),
+  icons: Schema_exports.optionalKey(Schema_exports.Array(RouterIcon)),
+  tags: Schema_exports.optionalKey(Schema_exports.Record(Schema_exports.NonEmptyString, Schema_exports.String)),
+  skill: Schema_exports.optionalKey(AppSkillName),
+  error: Schema_exports.optionalKey(HostRouterError)
+});
+var HostedCatalog = Schema_exports.Struct({
+  tools: Schema_exports.Array(HostedTool2),
+  routers: Schema_exports.Array(HostedRouter)
+});
+var HostedCatalogSummary = Schema_exports.Struct({
+  tools: Schema_exports.Array(HostedToolSummary2),
+  routers: Schema_exports.Array(HostedRouter)
+});
+var ToolKind = Schema_exports.Literals(["query", "mutation"]);
+var HostRequest2 = Schema_exports.Union([
+  WorkflowCommand,
+  WebhookCommand,
+  Schema_exports.Struct({ operation: Schema_exports.Literal("requirements") }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("inspect"),
+    /** Omit schemas. Only builds that declare the toolIndex capability accept this. */
+    detail: Schema_exports.optionalKey(Schema_exports.Literal("summary")),
+    /** Describe only these tools. Only builds that declare the toolIndex capability accept this. */
+    tools: Schema_exports.optionalKey(Schema_exports.Array(Schema_exports.NonEmptyString)),
+    /**
+     * Describe only declared operations that have schedules, without dynamic tool discovery.
+     * Only builds that declare the scheduledTools capability accept this.
+     */
+    scheduled: Schema_exports.optionalKey(Schema_exports.Literal(true))
+  }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("skills"),
+    /** Answer with SkillSources. Only builds that declare the skillSources capability accept this. */
+    sources: Schema_exports.optionalKey(Schema_exports.Literal(true))
+  }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("query"),
+    name: Schema_exports.NonEmptyString,
+    input: JsonValue
+  }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("mutate"),
+    name: Schema_exports.NonEmptyString,
+    input: JsonValue
+  }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("call"),
+    tool: Schema_exports.NonEmptyString,
+    /**
+     * The caller's claim; the bundle rejects a call whose tool has the other kind. The host omits
+     * it for a tool its catalog does not list, and then opens storage for writing.
+     */
+    kind: Schema_exports.optionalKey(ToolKind),
+    input: JsonValue
+  })
+]);
+var HostKindMismatch = class extends Schema_exports.TaggedError()("HostKindMismatch", {
+  tool: Schema_exports.NonEmptyString,
+  requested: ToolKind,
+  actual: ToolKind
+}) {
+};
+var HostError3 = Schema_exports.Union([...HostError2.members, HostKindMismatch]);
+var HostResponse3 = Schema_exports.Union([
   Schema_exports.Struct({
     ok: Schema_exports.Literal(true),
     value: JsonValue,
     toolError: Schema_exports.optionalKey(Schema_exports.Literal(true))
   }),
-  Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: HostError })
+  Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: HostError3 })
+]);
+var HostInvocation2 = Schema_exports.Struct({
+  command: HostRequest2,
+  accounts: ResolvedAccounts,
+  approval: Schema_exports.optionalKey(TrustedToolApproval),
+  replay: Schema_exports.optionalKey(WorkflowReplay),
+  deadline: Schema_exports.optionalKey(InvocationDeadline),
+  workflowRun: Schema_exports.optionalKey(WorkflowRunId)
+});
+var protocol4 = {
+  version: 4,
+  schemas: {
+    invocation: HostInvocation2,
+    request: HostRequest2,
+    response: HostResponse3,
+    requirements: DeclaredRequirements,
+    catalog: HostedCatalog,
+    catalogSummary: HostedCatalogSummary,
+    skills: SkillCatalogResponse2,
+    elicitationRequest: FormElicitation,
+    elicitationReply: ElicitationReply,
+    workflowStep: WorkflowRpcCommand,
+    workflowStepReply: WorkflowRpcResult,
+    workflowControl: WorkflowControlCommand,
+    cacheCommand: CacheCommand,
+    cacheReply: CacheReply
+  }
+};
+
+// src/contracts/protocols/5.ts
+var DeclaredRequirements2 = Schema_exports.Struct({
+  /** Protocol support of this retained framework build, not an author-declared requirement. */
+  capabilities: Schema_exports.optionalKey(
+    Schema_exports.Struct({
+      skills: Schema_exports.Literal(true),
+      toolIndex: Schema_exports.optionalKey(Schema_exports.Literal(true)),
+      skillSources: Schema_exports.optionalKey(Schema_exports.Literal(true)),
+      scheduledTools: Schema_exports.optionalKey(Schema_exports.Literal(true))
+    })
+  ),
+  database: Schema_exports.optionalKey(DatabaseSchema),
+  accounts: Schema_exports.Record(
+    Schema_exports.NonEmptyString,
+    Schema_exports.Struct({
+      definition: DeclaredProvider,
+      cardinality: Schema_exports.Literals(["one", "many"]),
+      /**
+       * The slot's provider defines an account check. Kept beside the definition, not in it, so
+       * adding or editing a check never changes the provider's identity.
+       */
+      health: Schema_exports.optionalKey(Schema_exports.Literal(true))
+    })
+  )
+});
+var AccountCheckCommand = Schema_exports.Struct({
+  operation: Schema_exports.Literal("account-check"),
+  requirement: Schema_exports.NonEmptyString
+});
+var HostRequest3 = Schema_exports.Union([
+  ...protocol4.schemas.request.members,
+  AccountCheckCommand
+]);
+var HostInvocation3 = Schema_exports.Struct({
+  command: HostRequest3,
+  accounts: ResolvedAccounts,
+  approval: Schema_exports.optionalKey(TrustedToolApproval),
+  replay: Schema_exports.optionalKey(WorkflowReplay),
+  deadline: Schema_exports.optionalKey(InvocationDeadline),
+  workflowRun: Schema_exports.optionalKey(WorkflowRunId)
+});
+var protocol5 = {
+  version: 5,
+  schemas: {
+    ...protocol4.schemas,
+    invocation: HostInvocation3,
+    request: HostRequest3,
+    requirements: DeclaredRequirements2,
+    accountCheck: AccountCheckResult
+  }
+};
+
+// src/contracts/host.ts
+var skillsCommand = (sources) => sources ? { operation: "skills", sources: true } : { operation: "skills" };
+var skillCatalog = (response) => Schema_exports.is(SkillSources2)(response) ? response : { skills: response };
+var inspectCommand = (tools, scheduled) => ({
+  operation: "inspect",
+  ...tools === void 0 ? {} : { tools: [...tools] },
+  ...scheduled === void 0 ? {} : { scheduled }
+});
+var indexCommand = { operation: "inspect", detail: "summary" };
+var selectTools = (tools) => (catalog) => tools === void 0 ? catalog : { ...catalog, tools: catalog.tools.filter((tool) => tools.includes(tool.name)) };
+var HostRequirementsError = Schema_exports.Union([
+  HostRequestInvalid,
+  HostDeclarationInvalid2,
+  DatabaseFieldReserved
+]);
+var HostInspectError = Schema_exports.Union([
+  ProviderError,
+  McpError,
+  SkillLoadFailed,
+  HostRequestInvalid,
+  HostDeclarationInvalid2,
+  HostAccountsInvalid,
+  HostEvaluationFailed2
+]);
+var HostCallError = Schema_exports.Union([
+  OpenapiResponseError,
+  WorkflowFailure,
+  HostInspectError,
+  HostToolNotFound,
+  HostOperationNotFound,
+  HostKindMismatch,
+  HostOperationFailed2,
+  DatabaseLimitExceeded,
+  HostInputInvalid,
+  HostOutputInvalid,
+  HostToolBlocked,
+  HostToolApprovalRequired,
+  HostToolPolicyFailed,
+  ElicitationFailed
+]);
+var HostAccountCheckError = Schema_exports.Union([
+  ProviderError,
+  WorkflowFailure,
+  HostRequestInvalid,
+  HostDeclarationInvalid2,
+  HostAccountsInvalid,
+  HostOperationNotFound,
+  HostOperationFailed2,
+  HostOutputInvalid
 ]);
+var HostDataError = HostCallError;
+var ToolResultObservation = Context_exports.Reference(
+  "apps/ToolResultObservation",
+  { defaultValue: () => ({ failed: () => {
+  } }) }
+);
 
 export {
   SecretsMethod,
@@ -2102,8 +2545,14 @@ export {
   OAuth2Config,
   OAuth2AccessToken,
   OAuth2Method,
+  AccountInfo,
+  AccountCheckResult,
   Provider,
   ManyAccounts,
+  reservedRouterKeys,
+  RouterKey,
+  RouterIcon,
+  RouterMeta,
   ToolAnnotations,
   McpClientLimits,
   defaultMcpClientLimits,
@@ -2111,13 +2560,26 @@ export {
   McpToolsOptions,
   McpToolResult,
   McpToolMetadata,
+  McpServerHeader,
   McpError,
   ProcessConfig,
+  ApiErrorRecovery,
+  ApiErrorResponse,
+  OpenapiResponseError,
+  defaultOpenapiErrorLimits,
+  maxFailureMessageLength,
+  FailureSource,
+  FailureName,
+  FailureCode,
+  FailureMessage,
+  FailureDetail,
   WorkflowRunId,
   WorkflowName,
   workflowDurationMillis,
   WorkflowDuration,
   WorkflowStepOptions,
+  WorkflowFailureDetail,
+  WorkflowRunFailure,
   WorkflowFailure,
   NonRetryableError,
   WorkflowValue,
@@ -2129,11 +2591,6 @@ export {
   WorkflowRpcCommand,
   WorkflowRpcResult,
   WorkflowControlCommand,
-  minimumIntervalMilliseconds,
-  Interval,
-  CalendarSchedule,
-  ScheduleTiming,
-  OperationSchedule,
   ElicitationLimits,
   defaultElicitationLimits,
   FormElicitation,
@@ -2151,30 +2608,21 @@ export {
   ManualWebhookDescriptor,
   HostedWebhook,
   WebhookCommand,
-  OperationToolPrefixes,
+  frameworkProtocol,
+  minimumIntervalMilliseconds,
+  Interval,
+  CalendarSchedule,
+  ScheduleTiming,
+  OperationSchedule,
   DeclaredAuthMethod,
   DeclaredProvider,
-  DeclaredRequirements,
   ResolvedAccount,
   ResolvedAccounts,
   TrustedToolApproval,
   InvocationDeadline,
-  HostedTool,
-  HostedToolSummary,
-  SkillSources,
-  skillsCommand,
-  SkillCatalogResponse,
-  skillCatalog,
-  inspectCommand,
-  indexCommand,
-  selectTools,
-  HostRequest,
   HostRequestInvalid,
   HostAccountsInvalid,
-  HostDeclarationInvalid,
-  HostEvaluationFailed,
   HostOperationNotFound,
-  HostOperationFailed,
   HostToolNotFound,
   InputProblem,
   maxInputProblems,
@@ -2183,11 +2631,38 @@ export {
   HostToolApprovalRequired,
   HostToolPolicyFailed,
   HostOutputInvalid,
+  protocol1,
+  SkillSources2 as SkillSources,
+  SkillCatalogResponse2 as SkillCatalogResponse,
+  protocol2,
+  HostDeclarationInvalid2 as HostDeclarationInvalid,
+  HostEvaluationFailed2 as HostEvaluationFailed,
+  HostOperationFailed2 as HostOperationFailed,
+  protocol3,
+  HostedTool2 as HostedTool,
+  HostedToolSummary2 as HostedToolSummary,
+  HostRouterError,
+  HostedRouter,
+  HostedCatalog,
+  HostedCatalogSummary,
+  HostKindMismatch,
+  HostError3 as HostError,
+  HostResponse3 as HostResponse,
+  protocol4,
+  DeclaredRequirements2 as DeclaredRequirements,
+  AccountCheckCommand,
+  HostRequest3 as HostRequest,
+  HostInvocation3 as HostInvocation,
+  protocol5,
+  skillsCommand,
+  skillCatalog,
+  inspectCommand,
+  indexCommand,
+  selectTools,
   HostRequirementsError,
   HostInspectError,
   HostCallError,
+  HostAccountCheckError,
   HostDataError,
-  HostError,
-  ToolResultObservation,
-  HostResponse
+  ToolResultObservation
 };