apps 0.0.1-beta.1 → 0.0.1-beta.3

package/js/chunk-LGIYBDWA.js

@@ -0,0 +1,85 @@
+import {
+  Schema_exports
+} from "./chunk-FW5HBOIK.js";
+
+// ../app-cache/src/contracts/cache.ts
+var CacheError = class extends Schema_exports.TaggedError()("CacheError", {
+  reason: Schema_exports.Literals(["unavailable", "storage", "invalid", "capacity", "timeout"])
+}) {
+};
+var cacheLimits = {
+  keyBytes: 8192,
+  entryBytes: 2e6,
+  batchBytes: 8e6,
+  batchEntries: 128,
+  totalBytes: 128e6,
+  totalEntries: 1e5,
+  retentionMs: 7 * 24 * 60 * 60 * 1e3,
+  loadTimeoutMs: 9e4,
+  /**
+   * A loader's lease lapses this long after its host last renewed it. Hosts renew every
+   * `renewMs` while the invocation that claimed it runs, so a stalled or lost holder frees the
+   * key well inside an MCP execute budget.
+   */
+  leaseMs: 15e3,
+  renewMs: 5e3,
+  /** The longest a caller waits on another loader before loading for itself without publishing. */
+  waitMs: 1e4,
+  /** Bound for one command to a host store; a lost reply fails instead of holding its caller. */
+  commandTimeoutMs: 1e4
+};
+var Key = Schema_exports.String.check(Schema_exports.isPattern(/^[a-f0-9]{64}$/));
+var Time = Schema_exports.Finite.check(Schema_exports.isGreaterThanOrEqualTo(0));
+var CacheEntry = Schema_exports.Struct({
+  value: Schema_exports.Json,
+  version: Schema_exports.String,
+  freshUntil: Time,
+  staleUntil: Time
+});
+var CacheAcquired = Schema_exports.Struct({
+  entry: Schema_exports.NullOr(CacheEntry),
+  lease: Schema_exports.NullOr(Schema_exports.String)
+});
+var CacheCommand = Schema_exports.Union([
+  Schema_exports.Struct({ operation: Schema_exports.Literal("read"), keys: Schema_exports.Array(Key) }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("acquire"),
+    key: Key,
+    /** Claim even a fresh entry, as an explicit refresh does. */
+    refresh: Schema_exports.Boolean,
+    /** Claim only while the entry still has this version. Absent accepts the current one. */
+    version: Schema_exports.optionalKey(Schema_exports.NullOr(Schema_exports.String))
+  }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("claim"),
+    key: Key,
+    version: Schema_exports.NullOr(Schema_exports.String)
+  }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("publish"),
+    key: Key,
+    lease: Schema_exports.String,
+    entry: CacheEntry
+  }),
+  Schema_exports.Struct({ operation: Schema_exports.Literal("release"), key: Key, lease: Schema_exports.String }),
+  /** Extend a lease its holder still owns. Replies false once the lease lapsed or was replaced. */
+  Schema_exports.Struct({ operation: Schema_exports.Literal("renew"), key: Key, lease: Schema_exports.String }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("write"),
+    entries: Schema_exports.Array(Schema_exports.Struct({ key: Key, entry: CacheEntry }))
+  }),
+  Schema_exports.Struct({ operation: Schema_exports.Literal("invalidate"), key: Key })
+]);
+var CacheReply = Schema_exports.Union([
+  Schema_exports.Struct({ ok: Schema_exports.Literal(true), value: Schema_exports.Json }),
+  Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: CacheError })
+]);
+
+export {
+  CacheError,
+  cacheLimits,
+  CacheEntry,
+  CacheAcquired,
+  CacheCommand,
+  CacheReply
+};

package/js/{chunk-IHQ4ML7K.js → chunk-MYYEW3RA.js}

@@ -1,6 +1,10 @@
 import {
   DatabaseSchema
 } from "./chunk-BMOIAIVR.js";
+import {
+  CacheCommand,
+  CacheReply
+} from "./chunk-LGIYBDWA.js";
 import {
   AppSkills,
   SkillLoadFailed
@@ -307,41 +311,6 @@ var WorkflowControlCommand = Schema_exports.Union([
   Schema_exports.Struct({ operation: Schema_exports.Literal("terminate"), run: WorkflowRunId })
 ]);
 
-// src/contracts/schedules.ts
-var minimumIntervalMilliseconds = 6e4;
-var count = Schema_exports.Int.check(Schema_exports.isGreaterThan(0));
-var absent = Schema_exports.optionalKey(Schema_exports.Never);
-var Interval = Schema_exports.Union([
-  Schema_exports.Struct({ seconds: count, minutes: absent, hours: absent }),
-  Schema_exports.Struct({ seconds: absent, minutes: count, hours: absent }),
-  Schema_exports.Struct({ seconds: absent, minutes: absent, hours: count })
-]);
-var CalendarSchedule = Schema_exports.Struct({
-  expression: Schema_exports.NonEmptyString,
-  timezone: Schema_exports.NonEmptyString
-}).check(
-  Schema_exports.makeFilter(
-    (value) => value.expression.trim().split(/\s+/).length === 5 && Result_exports.isSuccess(Cron_exports.parse(value.expression, value.timezone))
-  )
-);
-var ScheduleTiming = Schema_exports.Union([
-  Schema_exports.Struct({
-    kind: Schema_exports.Literal("interval"),
-    milliseconds: Schema_exports.Int.check(
-      Schema_exports.makeFilter((value) => value >= minimumIntervalMilliseconds, {
-        message: "Schedule intervals must be at least 60 seconds"
-      }),
-      Schema_exports.isLessThanOrEqualTo(Number.MAX_SAFE_INTEGER)
-    )
-  }),
-  Schema_exports.Struct({ kind: Schema_exports.Literal("cron"), calendar: CalendarSchedule })
-]);
-var OperationSchedule = Schema_exports.Struct({
-  name: Schema_exports.NonEmptyString,
-  timing: ScheduleTiming,
-  input: JsonValue
-});
-
 // ../../node_modules/.bun/effect@https+++pkg.pr.new+Effect-TS+effect+effect@c7d1ffff31a3e2ae0b0b+a654a55b752bdb24/node_modules/effect/dist/unstable/rpc/RpcSchema.js
 var StreamSchemaTypeId = "~effect/rpc/RpcSchema/StreamSchema";
 var schema = /* @__PURE__ */ declare(isStream);
@@ -1849,10 +1818,45 @@ var Provider = class extends Data_exports.Class {
 var ManyAccounts = class extends Data_exports.TaggedClass("many") {
 };
 
-// src/contracts/operations.ts
-var OperationToolPrefixes = { query: "queries.", mutate: "mutations." };
+// src/contracts/protocol-version.ts
+var frameworkProtocol = 1;
 
-// src/contracts/host.ts
+// src/contracts/schedules.ts
+var minimumIntervalMilliseconds = 6e4;
+var count = Schema_exports.Int.check(Schema_exports.isGreaterThan(0));
+var absent = Schema_exports.optionalKey(Schema_exports.Never);
+var Interval = Schema_exports.Union([
+  Schema_exports.Struct({ seconds: count, minutes: absent, hours: absent }),
+  Schema_exports.Struct({ seconds: absent, minutes: count, hours: absent }),
+  Schema_exports.Struct({ seconds: absent, minutes: absent, hours: count })
+]);
+var CalendarSchedule = Schema_exports.Struct({
+  expression: Schema_exports.NonEmptyString,
+  timezone: Schema_exports.NonEmptyString
+}).check(
+  Schema_exports.makeFilter(
+    (value) => value.expression.trim().split(/\s+/).length === 5 && Result_exports.isSuccess(Cron_exports.parse(value.expression, value.timezone))
+  )
+);
+var ScheduleTiming = Schema_exports.Union([
+  Schema_exports.Struct({
+    kind: Schema_exports.Literal("interval"),
+    milliseconds: Schema_exports.Int.check(
+      Schema_exports.makeFilter((value) => value >= minimumIntervalMilliseconds, {
+        message: "Schedule intervals must be at least 60 seconds"
+      }),
+      Schema_exports.isLessThanOrEqualTo(Number.MAX_SAFE_INTEGER)
+    )
+  }),
+  Schema_exports.Struct({ kind: Schema_exports.Literal("cron"), calendar: CalendarSchedule })
+]);
+var OperationSchedule = Schema_exports.Struct({
+  name: Schema_exports.NonEmptyString,
+  timing: ScheduleTiming,
+  input: JsonValue
+});
+
+// src/contracts/protocols/1.ts
 var DeclaredAuthMethod = Schema_exports.Union([
   Schema_exports.Struct({ type: Schema_exports.Literal("secrets"), label: Schema_exports.String, fields: JsonObject2 }),
   Schema_exports.Struct({
@@ -1906,6 +1910,11 @@ var ResolvedAccount = Schema_exports.Struct({
   id: AccountId,
   provider: DeclaredProvider,
   method: Schema_exports.NonEmptyString,
+  /**
+   * Changes when the account is reconnected or its credentials replaced, not on renewal. Hosts
+   * send it since credential generations; `apps@0.0.1-beta.0` and `beta.1` ignore it.
+   */
+  generation: Schema_exports.optionalKey(Schema_exports.Int),
   fields: JsonObject2
 });
 var ResolvedAccounts = Schema_exports.Record(
@@ -1929,16 +1938,7 @@ var HostedToolSummary = HostedTool.mapFields(
   ({ inputSchema: _input, outputSchema: _output, _meta, ...fields }) => fields
 );
 var SkillSources = Schema_exports.Struct({ skills: AppSkills, dynamic: Schema_exports.Boolean });
-var skillsCommand = (sources) => sources ? { operation: "skills", sources: true } : { operation: "skills" };
 var SkillCatalogResponse = Schema_exports.Union([SkillSources, AppSkills]);
-var skillCatalog = (response) => Schema_exports.is(SkillSources)(response) ? response : { skills: response };
-var inspectCommand = (tools, scheduled) => ({
-  operation: "inspect",
-  ...tools === void 0 ? {} : { tools: [...tools] },
-  ...scheduled === void 0 ? {} : { scheduled }
-});
-var indexCommand = { operation: "inspect", detail: "summary" };
-var selectTools = (tools) => (all) => tools === void 0 ? all : all.filter((tool) => tools.includes(tool.name));
 var HostRequest = Schema_exports.Union([
   WorkflowCommand,
   WebhookCommand,
@@ -2036,23 +2036,19 @@ var HostOutputInvalid = class extends Schema_exports.TaggedError()(
   {}
 ) {
 };
-var HostRequirementsError = Schema_exports.Union([HostRequestInvalid, HostDeclarationInvalid]);
-var HostInspectError = Schema_exports.Union([
+var HostError = Schema_exports.Union([
+  OpenapiResponseError,
   ProviderError,
   McpError,
   SkillLoadFailed,
+  WorkflowFailure,
   HostRequestInvalid,
-  HostDeclarationInvalid,
   HostAccountsInvalid,
-  HostEvaluationFailed
-]);
-var HostCallError = Schema_exports.Union([
-  OpenapiResponseError,
-  WorkflowFailure,
-  HostInspectError,
-  HostToolNotFound,
+  HostDeclarationInvalid,
+  HostEvaluationFailed,
   HostOperationNotFound,
   HostOperationFailed,
+  HostToolNotFound,
   HostInputInvalid,
   HostOutputInvalid,
   HostToolBlocked,
@@ -2060,20 +2056,72 @@ var HostCallError = Schema_exports.Union([
   HostToolPolicyFailed,
   ElicitationFailed
 ]);
-var HostDataError = HostCallError;
-var HostError = Schema_exports.Union([
-  OpenapiResponseError,
+var HostResponse = Schema_exports.Union([
+  Schema_exports.Struct({
+    ok: Schema_exports.Literal(true),
+    value: JsonValue,
+    toolError: Schema_exports.optionalKey(Schema_exports.Literal(true))
+  }),
+  Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: HostError })
+]);
+var HostInvocation = Schema_exports.Struct({
+  command: HostRequest,
+  accounts: ResolvedAccounts,
+  approval: Schema_exports.optionalKey(TrustedToolApproval),
+  replay: Schema_exports.optionalKey(WorkflowReplay),
+  deadline: Schema_exports.optionalKey(InvocationDeadline),
+  workflowRun: Schema_exports.optionalKey(WorkflowRunId)
+});
+var protocol1 = {
+  version: 1,
+  schemas: {
+    invocation: HostInvocation,
+    request: HostRequest,
+    response: HostResponse,
+    requirements: DeclaredRequirements,
+    tools: Schema_exports.Array(HostedTool),
+    toolSummaries: Schema_exports.Array(HostedToolSummary),
+    skills: SkillCatalogResponse,
+    elicitationRequest: FormElicitation,
+    elicitationReply: ElicitationReply,
+    workflowStep: WorkflowRpcCommand,
+    workflowStepReply: WorkflowRpcResult,
+    workflowControl: WorkflowControlCommand,
+    cacheCommand: CacheCommand,
+    cacheReply: CacheReply
+  }
+};
+
+// src/contracts/operations.ts
+var OperationToolPrefixes = { query: "queries.", mutate: "mutations." };
+
+// src/contracts/host.ts
+var skillsCommand = (sources) => sources ? { operation: "skills", sources: true } : { operation: "skills" };
+var skillCatalog = (response) => Schema_exports.is(SkillSources)(response) ? response : { skills: response };
+var inspectCommand = (tools, scheduled) => ({
+  operation: "inspect",
+  ...tools === void 0 ? {} : { tools: [...tools] },
+  ...scheduled === void 0 ? {} : { scheduled }
+});
+var indexCommand = { operation: "inspect", detail: "summary" };
+var selectTools = (tools) => (all) => tools === void 0 ? all : all.filter((tool) => tools.includes(tool.name));
+var HostRequirementsError = Schema_exports.Union([HostRequestInvalid, HostDeclarationInvalid]);
+var HostInspectError = Schema_exports.Union([
   ProviderError,
   McpError,
   SkillLoadFailed,
-  WorkflowFailure,
   HostRequestInvalid,
-  HostAccountsInvalid,
   HostDeclarationInvalid,
-  HostEvaluationFailed,
+  HostAccountsInvalid,
+  HostEvaluationFailed
+]);
+var HostCallError = Schema_exports.Union([
+  OpenapiResponseError,
+  WorkflowFailure,
+  HostInspectError,
+  HostToolNotFound,
   HostOperationNotFound,
   HostOperationFailed,
-  HostToolNotFound,
   HostInputInvalid,
   HostOutputInvalid,
   HostToolBlocked,
@@ -2081,19 +2129,12 @@ var HostError = Schema_exports.Union([
   HostToolPolicyFailed,
   ElicitationFailed
 ]);
+var HostDataError = HostCallError;
 var ToolResultObservation = Context_exports.Reference(
   "apps/ToolResultObservation",
   { defaultValue: () => ({ failed: () => {
   } }) }
 );
-var HostResponse = Schema_exports.Union([
-  Schema_exports.Struct({
-    ok: Schema_exports.Literal(true),
-    value: JsonValue,
-    toolError: Schema_exports.optionalKey(Schema_exports.Literal(true))
-  }),
-  Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: HostError })
-]);
 
 export {
   SecretsMethod,
@@ -2129,11 +2170,6 @@ export {
   WorkflowRpcCommand,
   WorkflowRpcResult,
   WorkflowControlCommand,
-  minimumIntervalMilliseconds,
-  Interval,
-  CalendarSchedule,
-  ScheduleTiming,
-  OperationSchedule,
   ElicitationLimits,
   defaultElicitationLimits,
   FormElicitation,
@@ -2151,7 +2187,12 @@ export {
   ManualWebhookDescriptor,
   HostedWebhook,
   WebhookCommand,
-  OperationToolPrefixes,
+  frameworkProtocol,
+  minimumIntervalMilliseconds,
+  Interval,
+  CalendarSchedule,
+  ScheduleTiming,
+  OperationSchedule,
   DeclaredAuthMethod,
   DeclaredProvider,
   DeclaredRequirements,
@@ -2162,12 +2203,7 @@ export {
   HostedTool,
   HostedToolSummary,
   SkillSources,
-  skillsCommand,
   SkillCatalogResponse,
-  skillCatalog,
-  inspectCommand,
-  indexCommand,
-  selectTools,
   HostRequest,
   HostRequestInvalid,
   HostAccountsInvalid,
@@ -2183,11 +2219,19 @@ export {
   HostToolApprovalRequired,
   HostToolPolicyFailed,
   HostOutputInvalid,
+  HostError,
+  HostResponse,
+  HostInvocation,
+  protocol1,
+  OperationToolPrefixes,
+  skillsCommand,
+  skillCatalog,
+  inspectCommand,
+  indexCommand,
+  selectTools,
   HostRequirementsError,
   HostInspectError,
   HostCallError,
   HostDataError,
-  HostError,
-  ToolResultObservation,
-  HostResponse
+  ToolResultObservation
 };

package/js/chunk-NQ3OMCA5.js

@@ -0,0 +1,39 @@
+import {
+  appSignInCallbackPath
+} from "./chunk-T2LAZCAD.js";
+import {
+  HttpServerResponse_exports
+} from "./chunk-QKHR7BMF.js";
+
+// src/implementation/ui-auth.ts
+var appPrivateHeaders = {
+  "cache-control": "no-store",
+  "referrer-policy": "no-referrer",
+  "x-content-type-options": "nosniff",
+  "content-security-policy": "frame-ancestors 'none'"
+};
+var appRedirect = (url) => HttpServerResponse_exports.redirect(url, { status: 302, headers: appPrivateHeaders });
+var appSignInCallback = (origin, request, code) => {
+  const callback = new URL(appSignInCallbackPath, origin);
+  callback.searchParams.set("request", request);
+  callback.searchParams.set("code", code);
+  return callback.href;
+};
+var appSignInFailed = () => HttpServerResponse_exports.text(
+  `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Could not open app</title></head><body><p>Could not sign in to this app. Try opening it again.</p><a href="/">Try again</a></body></html>`,
+  {
+    status: 401,
+    contentType: "text/html",
+    headers: {
+      ...appPrivateHeaders,
+      "content-security-policy": "default-src 'none'; frame-ancestors 'none'; base-uri 'none'"
+    }
+  }
+);
+
+export {
+  appPrivateHeaders,
+  appRedirect,
+  appSignInCallback,
+  appSignInFailed
+};

package/js/{chunk-PZ36XMXW.js → chunk-PYUYJRSK.js}

@@ -1,6 +1,6 @@
 import {
   decoderOf
-} from "./chunk-2HHMABB6.js";
+} from "./chunk-WFSQXYUT.js";
 import {
   Effect_exports
 } from "./chunk-FW5HBOIK.js";

package/js/{chunk-X7SFGU4Q.js → chunk-RN2MXB4R.js}

@@ -1,9 +1,9 @@
 import {
   prepareElicitation
-} from "./chunk-KOXMLKTM.js";
+} from "./chunk-J7O55ZV7.js";
 import {
   fromPromise
-} from "./chunk-PZ36XMXW.js";
+} from "./chunk-PYUYJRSK.js";
 import {
   ElicitationFailed,
   McpError,
@@ -13,11 +13,11 @@ import {
   defaultElicitationLimits,
   defaultMcpClientLimits,
   mcpSdkTimerCeilingMs
-} from "./chunk-IHQ4ML7K.js";
+} from "./chunk-MYYEW3RA.js";
 import {
   compileJsonSchemaDecoder,
   jsonSchemaDecoder
-} from "./chunk-2HHMABB6.js";
+} from "./chunk-WFSQXYUT.js";
 import {
   JsonObject
 } from "./chunk-SATWJKN6.js";

package/js/{chunk-4LPG6RCH.js → chunk-T2LAZCAD.js}

@@ -1,11 +1,3 @@
-import {
-  HttpApiEndpoint_exports,
-  HttpApiGroup_exports,
-  HttpApi_exports,
-  UiFailed,
-  UiForbidden,
-  UiUnauthorized
-} from "./chunk-OHRT55C4.js";
 import {
   Schema_exports
 } from "./chunk-FW5HBOIK.js";
@@ -31,26 +23,14 @@ var AppReturnPath = Schema_exports.String.check(
   })
 ).pipe(Schema_exports.brand("AppReturnPath"));
 var AppSignInCallback = Schema_exports.Struct({ request: AppSignInId, code: AppSignInCode });
-var AppSignInApi = HttpApi_exports.make("app-sign-in").add(
-  HttpApiGroup_exports.make("appSignIn").add(
-    HttpApiEndpoint_exports.post("start", "/_executor/auth/start", {
-      payload: Schema_exports.Struct({ returnTo: AppReturnPath }),
-      success: Schema_exports.Struct({ url: Schema_exports.String }),
-      error: [UiForbidden, UiFailed]
-    })
-  ).add(
-    HttpApiEndpoint_exports.post("complete", "/_executor/auth/complete", {
-      payload: AppSignInCallback,
-      success: Schema_exports.Struct({ returnTo: AppReturnPath }),
-      error: [UiUnauthorized, UiForbidden, UiFailed]
-    })
-  )
-);
+var appSignInCallbackPath = "/_executor/auth/callback";
+var AppSignInFailure = Schema_exports.Literals(["ended", "forbidden", "unavailable"]);
 
 export {
   AppSignInId,
   AppSignInCode,
   AppReturnPath,
   AppSignInCallback,
-  AppSignInApi
+  appSignInCallbackPath,
+  AppSignInFailure
 };