apps 0.0.1-beta.106 → 0.0.1-beta.109

package/js/{chunk-QN5BMAG7.js → chunk-3BI34I5S.js}

@@ -2,11 +2,11 @@ import {
   declaredOperations,
   nativeOperation,
   nativeRouter
-} from "./chunk-PILIRGJA.js";
+} from "./chunk-ZXG7RMCB.js";
 import {
   fromPromise,
   method
-} from "./chunk-R3O32PQV.js";
+} from "./chunk-OIH73VFM.js";
 import {
   EmittedEvent,
   EventName,

package/js/{chunk-X45GWW4A.js → chunk-3BOEMXAJ.js}

@@ -1,6 +1,6 @@
 import {
   prepareElicitation
-} from "./chunk-3UWLQMMK.js";
+} from "./chunk-JCX2K2SI.js";
 import {
   failOnNetworkRefusal
 } from "./chunk-HLMJBE4T.js";
@@ -10,7 +10,7 @@ import {
   fromPromise,
   httpProviderError,
   providerErrorDetail
-} from "./chunk-R3O32PQV.js";
+} from "./chunk-OIH73VFM.js";
 import {
   ElicitationFailed,
   McpCredentialsUnverified,

package/js/{chunk-OTDKCYMH.js → chunk-BKIQCV72.js}

@@ -4,12 +4,12 @@ import {
 import {
   joinPath,
   mergeMeta
-} from "./chunk-PILIRGJA.js";
+} from "./chunk-ZXG7RMCB.js";
 import {
-  isShortenedUpstream,
+  isShortenedStated,
   parseProviderError,
   providerError
-} from "./chunk-R3O32PQV.js";
+} from "./chunk-OIH73VFM.js";
 import {
   ApiErrorResponse,
   CacheError,
@@ -27,6 +27,7 @@ import {
   NetworkRefused,
   SkillLoadFailed as SkillLoadFailed2,
   cacheLimits,
+  defaultOpenapiErrorLimits,
   maxFailureFieldLength,
   maxFailureFields,
   maxFailureMessageLength,
@@ -291,6 +292,133 @@ var OpenapiToolNames = Schema_exports.Struct({
   skipped: Schema_exports.Array(OpenapiSkippedOperation)
 });
 
+// src/contracts/graphql.ts
+var GraphqlClientLimits = Schema_exports.Struct({
+  timeoutMs: Schema_exports.Int.check(Schema_exports.isGreaterThan(0)),
+  maxTimeoutMs: Schema_exports.Int.check(Schema_exports.isGreaterThan(0))
+});
+var defaultGraphqlClientLimits = GraphqlClientLimits.make({
+  timeoutMs: 3e4,
+  maxTimeoutMs: 3e5
+});
+var GraphqlToolsOptions = Schema_exports.Struct({
+  url: HttpUrl,
+  accountId: Schema_exports.optional(AccountId),
+  headers: Schema_exports.optional(Schema_exports.Record(Schema_exports.String, Schema_exports.String)),
+  signal: Schema_exports.optional(Schema_exports.instanceOf(AbortSignal)),
+  timeoutMs: Schema_exports.optional(
+    Schema_exports.Int.check(
+      Schema_exports.isBetween({ minimum: 1, maximum: defaultGraphqlClientLimits.maxTimeoutMs })
+    )
+  )
+});
+var maxGraphqlStatedErrors = 5;
+var maxGraphqlStatedExtensions = 4;
+var maxGraphqlStatedFieldLength = 256;
+var GraphqlStatedError = Schema_exports.Struct({
+  message: Schema_exports.String.check(Schema_exports.isMaxLength(maxUpstreamMessageLength)),
+  /** The first segments of the path, as many as a path of the longest carried length shows. */
+  path: Schema_exports.optional(
+    Schema_exports.Array(
+      Schema_exports.Union([
+        Schema_exports.String.check(Schema_exports.isMaxLength(maxGraphqlStatedFieldLength)),
+        Schema_exports.Int
+      ])
+    ).check(Schema_exports.isMaxLength(maxGraphqlStatedFieldLength + 1))
+  ),
+  extensions: Schema_exports.optional(
+    Schema_exports.Record(
+      FailureFieldName,
+      Schema_exports.Union([
+        Schema_exports.String.check(Schema_exports.isMaxLength(maxGraphqlStatedFieldLength)),
+        Schema_exports.Finite,
+        Schema_exports.Boolean
+      ])
+    ).check(Schema_exports.isMaxProperties(maxGraphqlStatedExtensions))
+  )
+});
+var GraphqlError = class extends Schema_exports.TaggedError()("GraphqlError", {
+  phase: Schema_exports.Literals(["discover", "call"]),
+  reason: Schema_exports.Literals([
+    "request",
+    "unauthorized",
+    "invalid_response",
+    "invalid_input",
+    "timeout",
+    "execution"
+  ]),
+  status: Schema_exports.optional(Schema_exports.Number),
+  /** The first errors the server stated, in its order. */
+  errors: Schema_exports.optional(
+    Schema_exports.Array(GraphqlStatedError).check(Schema_exports.isMaxLength(maxGraphqlStatedErrors))
+  ),
+  /** How many errors the server stated in all, when it stated more than `errors` carries. */
+  stated: Schema_exports.optional(Schema_exports.Int),
+  /**
+   * Why Executor did not read the JSON body of a refused request: it was larger than error bodies
+   * may be, or it did not arrive in time. The status is still the server's answer.
+   */
+  unreadBody: Schema_exports.optional(Schema_exports.Literals(["too_large", "incomplete"]))
+}) {
+};
+var Name = Schema_exports.String.check(Schema_exports.isPattern(/^[_A-Za-z][_0-9A-Za-z]*$/u));
+var Kind = Schema_exports.Literals([
+  "SCALAR",
+  "OBJECT",
+  "INTERFACE",
+  "UNION",
+  "ENUM",
+  "INPUT_OBJECT",
+  "LIST",
+  "NON_NULL"
+]);
+var GraphqlTypeRef = Schema_exports.Struct({
+  kind: Kind,
+  name: Schema_exports.NullOr(Name),
+  ofType: Schema_exports.optional(Schema_exports.NullOr(Schema_exports.suspend(() => GraphqlTypeRef)))
+});
+var Argument = Schema_exports.Struct({
+  name: Name,
+  description: Schema_exports.NullOr(Schema_exports.String),
+  type: GraphqlTypeRef,
+  defaultValue: Schema_exports.NullOr(Schema_exports.String)
+});
+var GraphqlField = Schema_exports.Struct({
+  name: Name,
+  description: Schema_exports.NullOr(Schema_exports.String),
+  args: Schema_exports.Array(Argument),
+  type: GraphqlTypeRef
+});
+var GraphqlIntrospection = Schema_exports.Struct({
+  __schema: Schema_exports.Struct({
+    queryType: Schema_exports.NullOr(Schema_exports.Struct({ name: Name })),
+    mutationType: Schema_exports.NullOr(Schema_exports.Struct({ name: Name })),
+    types: Schema_exports.Array(
+      Schema_exports.Struct({
+        kind: Kind,
+        name: Name,
+        fields: Schema_exports.NullOr(Schema_exports.Array(GraphqlField)),
+        inputFields: Schema_exports.NullOr(Schema_exports.Array(Argument)),
+        enumValues: Schema_exports.NullOr(Schema_exports.Array(Schema_exports.Struct({ name: Name })))
+      })
+    )
+  })
+});
+var GraphqlResponse = Schema_exports.Struct({
+  data: Schema_exports.optional(Schema_exports.NullOr(JsonObject)),
+  errors: Schema_exports.optional(Schema_exports.Array(JsonObject))
+});
+var GraphqlToolDefinition = Schema_exports.Struct({
+  name: Name,
+  kind: Schema_exports.Literals(["query", "mutation"]),
+  field: Name,
+  description: Schema_exports.String,
+  arguments: Schema_exports.Array(Schema_exports.Struct({ name: Name, type: Schema_exports.String })),
+  inputSchema: JsonObject,
+  composite: Schema_exports.Boolean,
+  selection: Schema_exports.String
+});
+
 // src/implementation/failure-detail.ts
 var cacheMessages = {
   capacity: "A cache key, value or batch exceeded the app cache's size limits.",
@@ -356,9 +484,19 @@ var accountFieldSecrets = (accounts) => {
   return [...found].sort((a, b) => b.length - a.length);
 };
 var accountSecrets = (accounts) => accountFieldSecrets(Redacted_exports.value(accounts));
+var secretSpellings = (secrets) => [
+  ...new Set(
+    secrets.flatMap((secret) => [
+      secret,
+      JSON.stringify(secret).slice(1, -1),
+      .../\p{Cs}/u.test(secret) ? [] : [encodeURIComponent(secret)]
+    ])
+  )
+].sort((a, b) => b.length - a.length);
 var replaceSecrets = (text, secrets) => {
   let redacted = text;
-  for (const secret of secrets) redacted = redacted.split(secret).join("[redacted]");
+  for (const secret of secretSpellings(secrets))
+    redacted = redacted.split(secret).join("[redacted]");
   return redacted;
 };
 var bound = (text, maximum) => text.length <= maximum ? text : `${text.slice(0, maximum - 1)}\u2026`;
@@ -376,9 +514,10 @@ var replaceSecretStart = (text, secrets) => {
 var boundFailureMessage = (message, secrets) => boundText(message, secrets, maxFailureMessageLength);
 var redactUpstream = (upstream, secrets) => {
   if (upstream?.message === void 0) return upstream;
-  const message = isShortenedUpstream(upstream.message) ? `${replaceSecretStart(replaceSecrets(upstream.message.slice(0, -1), secrets), secrets)}\u2026` : replaceSecrets(upstream.message, secrets);
+  const message = redactStated(upstream.message, secrets, maxUpstreamMessageLength);
   return { code: upstream.code, message: bound(message, maxUpstreamMessageLength) };
 };
+var redactStated = (text, secrets, maximum) => isShortenedStated(text, maximum) ? `${replaceSecretStart(replaceSecrets(text.slice(0, -1), secrets), secrets)}\u2026` : replaceSecrets(text, secrets);
 var leavingProviderError = (error, secrets, phase) => providerError({
   ...error,
   phase: error.phase ?? phase,
@@ -441,6 +580,57 @@ var openapiFailureMessage = (error) => {
   const response = `${operation} responded with HTTP ${error.status}${shape === "" ? "" : ` (${shape})`}`;
   return error.status >= 200 && error.status < 300 ? `${response}, but its body could not be read within the response limits.` : `${response}, which matches no error with a message in the API's OpenAPI document.`;
 };
+var graphqlStages = {
+  discover: "while Executor read its schema",
+  call: "to this tool call"
+};
+var graphqlPathText = (path, secrets) => bound(
+  path.map((segment, index) => {
+    if (typeof segment === "number") return `[${segment}]`;
+    const name = redactStated(segment, secrets, maxGraphqlStatedFieldLength);
+    return /^[_A-Za-z][_0-9A-Za-z]*$/u.test(name) ? index === 0 ? name : `.${name}` : `[${JSON.stringify(name)}]`;
+  }).join(""),
+  maxGraphqlStatedFieldLength
+);
+var graphqlStatedText = ({ message, path, extensions }, secrets) => {
+  const field = (text) => redactStated(text, secrets, maxGraphqlStatedFieldLength);
+  const entries = Object.entries(extensions ?? {}).map(
+    ([name, value]) => `${name}: ${JSON.stringify(typeof value === "string" ? field(value) : value)}`
+  );
+  return `${JSON.stringify(redactStated(message, secrets, maxUpstreamMessageLength))}${path === void 0 ? "" : ` at ${graphqlPathText(path, secrets)}`}${entries.length === 0 ? "" : ` (${entries.join(", ")})`}`;
+};
+var unreadBodies = {
+  too_large: `Executor did not read its response body, which was larger than ${defaultOpenapiErrorLimits.maxBodyBytes / 1024} KiB.`,
+  incomplete: "Executor did not read its response body, which did not arrive in time."
+};
+var graphqlFailureMessage = (error, secrets) => {
+  const stage = graphqlStages[error.phase];
+  const answered = error.status === void 0 ? "answered" : `answered HTTP ${error.status}`;
+  const explanation = Match_exports.value(error.reason).pipe(
+    Match_exports.when("timeout", () => `The GraphQL server did not respond in time ${stage}.`),
+    Match_exports.when("unauthorized", () => `The GraphQL server rejected the credentials ${stage}.`),
+    Match_exports.when(
+      "invalid_response",
+      () => `The GraphQL server returned a response Executor could not use ${stage}.`
+    ),
+    Match_exports.when(
+      "invalid_input",
+      () => error.phase === "call" ? "The input could not be encoded as a GraphQL request for this tool." : "The GraphQL endpoint URL or connection settings are invalid."
+    ),
+    Match_exports.when(
+      "request",
+      () => error.status === void 0 ? `The request to the GraphQL server failed ${stage}.` : `The GraphQL server ${answered} ${stage}.`
+    ),
+    Match_exports.when("execution", () => `The GraphQL server ${answered} with errors ${stage}.`),
+    Match_exports.exhaustive
+  );
+  if (error.unreadBody !== void 0) return `${explanation} ${unreadBodies[error.unreadBody]}`;
+  const errors = error.errors ?? [];
+  if (errors.length === 0) return explanation;
+  const total = error.stated ?? errors.length;
+  const more = total - errors.length;
+  return `${explanation} It stated${total === 1 ? "" : ` ${total} errors`}: ${errors.map((stated) => graphqlStatedText(stated, secrets)).join("; ")}.${more === 0 ? "" : ` ${more} more ${more === 1 ? "error is" : "errors are"} not shown.`}`;
+};
 var failureDetail = (error, secrets) => {
   if (Schema_exports.is(CacheError)(error))
     return {
@@ -456,6 +646,13 @@ var failureDetail = (error, secrets) => {
       code: error.reason,
       message: boundFailureMessage(openapiFailureMessage(error), secrets)
     };
+  if (Schema_exports.is(GraphqlError)(error))
+    return {
+      source: "service",
+      errorName: "GraphqlError",
+      code: error.reason,
+      message: boundFailureMessage(graphqlFailureMessage(error, secrets), secrets)
+    };
   if (Schema_exports.is(McpError)(error))
     return {
       source: "service",
@@ -774,6 +971,15 @@ export {
   OpenapiCompileError,
   OpenapiToolName,
   OpenapiToolNames,
+  defaultGraphqlClientLimits,
+  GraphqlToolsOptions,
+  maxGraphqlStatedErrors,
+  maxGraphqlStatedExtensions,
+  maxGraphqlStatedFieldLength,
+  GraphqlError,
+  GraphqlIntrospection,
+  GraphqlResponse,
+  GraphqlToolDefinition,
   accountSecrets,
   boundFailureMessage,
   leavingProviderError,

package/js/{chunk-3UWLQMMK.js → chunk-JCX2K2SI.js}

@@ -1,7 +1,7 @@
 import {
   authorCache,
   unavailableCache
-} from "./chunk-2B7FHH7S.js";
+} from "./chunk-UPTAFF6L.js";
 import {
   accountSecrets,
   boundFailureMessage,
@@ -12,7 +12,7 @@ import {
   parseSkillLoadFailed,
   readCatalog,
   routerSkills
-} from "./chunk-OTDKCYMH.js";
+} from "./chunk-BKIQCV72.js";
 import {
   appInvocationFetch
 } from "./chunk-HLMJBE4T.js";
@@ -26,12 +26,12 @@ import {
   makeEmitter,
   toEffectApp,
   withPlacements
-} from "./chunk-QN5BMAG7.js";
+} from "./chunk-3BI34I5S.js";
 import {
   declaredOperations,
   locate,
   nativeOperation
-} from "./chunk-PILIRGJA.js";
+} from "./chunk-ZXG7RMCB.js";
 import {
   accountProviderError,
   appCode,
@@ -39,7 +39,7 @@ import {
   httpProviderError,
   parseProviderError,
   toPromise
-} from "./chunk-R3O32PQV.js";
+} from "./chunk-OIH73VFM.js";
 import {
   AccountCheckResult,
   DeclaredProvider,

package/js/{chunk-R3O32PQV.js → chunk-OIH73VFM.js}

@@ -68,17 +68,19 @@ var OAuthError = Schema_exports.Struct({
   error: ErrorToken,
   error_description: Schema_exports.optional(Schema_exports.String)
 });
-var bounded = (message) => message.length <= maxUpstreamMessageLength ? message : `${message.slice(0, maxUpstreamMessageLength - 1)}\u2026`;
-var isShortenedUpstream = (message) => message.length === maxUpstreamMessageLength && message.endsWith("\u2026");
-var stated = (code, message) => ({
+var boundStated = (text, maximum) => text.length <= maximum ? text : `${text.slice(0, maximum - 1)}\u2026`;
+var isShortenedStated = (text, maximum) => text.length === maximum && text.endsWith("\u2026");
+var bounded = (message) => boundStated(message, maxUpstreamMessageLength);
+var statedUpstream = (code, message) => ({
   code,
   ...message === void 0 || message === "" ? {} : { message: bounded(message) }
 });
 var bodyUpstreamError = (json) => {
   const nested = Schema_exports.decodeUnknownOption(NestedError)(json);
-  if (Option_exports.isSome(nested)) return stated(nested.value.error.code, nested.value.error.message);
+  if (Option_exports.isSome(nested))
+    return statedUpstream(nested.value.error.code, nested.value.error.message);
   const oauth = Schema_exports.decodeUnknownOption(OAuthError)(json);
-  if (Option_exports.isSome(oauth)) return stated(oauth.value.error, oauth.value.error_description);
+  if (Option_exports.isSome(oauth)) return statedUpstream(oauth.value.error, oauth.value.error_description);
   return void 0;
 };
 var authParam = /([A-Za-z][A-Za-z0-9_-]*)\s*=\s*(?:"((?:[^"\\]|\\.)*)"|([^\s,"]+))/g;
@@ -90,7 +92,7 @@ var challengeUpstreamError = (header) => {
     if (name !== void 0 && !params.has(name.toLowerCase()))
       params.set(name.toLowerCase(), quoted?.replace(/\\(.)/g, "$1") ?? token ?? "");
   const code = Schema_exports.decodeUnknownOption(ErrorToken)(params.get("error"));
-  return Option_exports.isNone(code) ? void 0 : stated(code.value, params.get("error_description"));
+  return Option_exports.isNone(code) ? void 0 : statedUpstream(code.value, params.get("error_description"));
 };
 
 // src/implementation/provider-error.ts
@@ -160,7 +162,9 @@ export {
   fromPromise,
   method,
   toPromise,
-  isShortenedUpstream,
+  boundStated,
+  isShortenedStated,
+  statedUpstream,
   bodyUpstreamError,
   providerError,
   parseProviderError,

package/js/{chunk-KY7C6BWO.js → chunk-RIV62DRM.js}

@@ -1,11 +1,11 @@
 import {
   fixedRouter
-} from "./chunk-OTDKCYMH.js";
+} from "./chunk-BKIQCV72.js";
 import {
   nativeOperation,
   operationDeclaration,
   routerDeclaration
-} from "./chunk-PILIRGJA.js";
+} from "./chunk-ZXG7RMCB.js";
 
 // src/implementation/protocol-operations.ts
 var protocolOperations = (operations, kinds = {}) => {

package/js/{chunk-EDXNAZLI.js → chunk-SXQVVXJE.js}

@@ -1,11 +1,11 @@
 import {
   getWithReads
-} from "./chunk-2B7FHH7S.js";
+} from "./chunk-UPTAFF6L.js";
 import {
   fromPromise,
   method,
   toPromise
-} from "./chunk-R3O32PQV.js";
+} from "./chunk-OIH73VFM.js";
 import {
   CacheError
 } from "./chunk-2RGJMA7N.js";

package/js/{chunk-2B7FHH7S.js → chunk-UPTAFF6L.js}

@@ -5,7 +5,7 @@ import {
   fromPromise,
   method,
   toPromise
-} from "./chunk-R3O32PQV.js";
+} from "./chunk-OIH73VFM.js";
 import {
   CacheAcquired,
   CacheEntry,

package/js/{chunk-PILIRGJA.js → chunk-ZXG7RMCB.js}

@@ -1,6 +1,6 @@
 import {
   fromPromise
-} from "./chunk-R3O32PQV.js";
+} from "./chunk-OIH73VFM.js";
 import {
   HostedTool,
   RouterKey,

package/js/effect.js

@@ -3,14 +3,14 @@ import {
   ApprovalDecision,
   createAppHandler,
   prepareElicitation
-} from "./chunk-3UWLQMMK.js";
-import "./chunk-2B7FHH7S.js";
-import "./chunk-OTDKCYMH.js";
+} from "./chunk-JCX2K2SI.js";
+import "./chunk-UPTAFF6L.js";
+import "./chunk-BKIQCV72.js";
 import "./chunk-HLMJBE4T.js";
 import "./chunk-PBGPES67.js";
-import "./chunk-QN5BMAG7.js";
-import "./chunk-PILIRGJA.js";
-import "./chunk-R3O32PQV.js";
+import "./chunk-3BI34I5S.js";
+import "./chunk-ZXG7RMCB.js";
+import "./chunk-OIH73VFM.js";
 import {
   ToolAnnotations
 } from "./chunk-2RGJMA7N.js";