apps 0.0.1-beta.2 → 0.0.1-beta.4

package/js/{chunk-RN2MXB4R.js → chunk-2VPJHFOU.js}

@@ -1,6 +1,6 @@
 import {
   prepareElicitation
-} from "./chunk-J7O55ZV7.js";
+} from "./chunk-6VRYO2BG.js";
 import {
   fromPromise
 } from "./chunk-PYUYJRSK.js";
@@ -13,7 +13,7 @@ import {
   defaultElicitationLimits,
   defaultMcpClientLimits,
   mcpSdkTimerCeilingMs
-} from "./chunk-MYYEW3RA.js";
+} from "./chunk-3M2MEDNL.js";
 import {
   compileJsonSchemaDecoder,
   jsonSchemaDecoder

package/js/{chunk-MYYEW3RA.js → chunk-3M2MEDNL.js}

@@ -1819,7 +1819,7 @@ var ManyAccounts = class extends Data_exports.TaggedClass("many") {
 };
 
 // src/contracts/protocol-version.ts
-var frameworkProtocol = 1;
+var frameworkProtocol = 2;
 
 // src/contracts/schedules.ts
 var minimumIntervalMilliseconds = 6e4;
@@ -2092,12 +2092,24 @@ var protocol1 = {
   }
 };
 
+// src/contracts/protocols/2.ts
+var SkillSources2 = Schema_exports.Struct({
+  skills: AppSkills,
+  dynamic: Schema_exports.Boolean,
+  cached: Schema_exports.optionalKey(Schema_exports.Boolean)
+});
+var SkillCatalogResponse2 = Schema_exports.Union([SkillSources2, AppSkills]);
+var protocol2 = {
+  version: 2,
+  schemas: { ...protocol1.schemas, skills: SkillCatalogResponse2 }
+};
+
 // src/contracts/operations.ts
 var OperationToolPrefixes = { query: "queries.", mutate: "mutations." };
 
 // src/contracts/host.ts
 var skillsCommand = (sources) => sources ? { operation: "skills", sources: true } : { operation: "skills" };
-var skillCatalog = (response) => Schema_exports.is(SkillSources)(response) ? response : { skills: response };
+var skillCatalog = (response) => Schema_exports.is(SkillSources2)(response) ? response : { skills: response };
 var inspectCommand = (tools, scheduled) => ({
   operation: "inspect",
   ...tools === void 0 ? {} : { tools: [...tools] },
@@ -2202,8 +2214,6 @@ export {
   InvocationDeadline,
   HostedTool,
   HostedToolSummary,
-  SkillSources,
-  SkillCatalogResponse,
   HostRequest,
   HostRequestInvalid,
   HostAccountsInvalid,
@@ -2223,6 +2233,9 @@ export {
   HostResponse,
   HostInvocation,
   protocol1,
+  SkillSources2 as SkillSources,
+  SkillCatalogResponse2 as SkillCatalogResponse,
+  protocol2,
   OperationToolPrefixes,
   skillsCommand,
   skillCatalog,

package/js/{chunk-J7O55ZV7.js → chunk-6VRYO2BG.js}

@@ -9,7 +9,7 @@ import {
   isApp,
   toEffectApp,
   unavailableStorage
-} from "./chunk-JN55AYQH.js";
+} from "./chunk-DHUDODG5.js";
 import {
   fromPromise,
   nativeOperation,
@@ -62,7 +62,7 @@ import {
   defaultWebhookTransportLimits,
   maxInputProblems,
   workflowDurationMillis
-} from "./chunk-MYYEW3RA.js";
+} from "./chunk-3M2MEDNL.js";
 import {
   CacheError
 } from "./chunk-LGIYBDWA.js";
@@ -723,9 +723,17 @@ function dispatch(app, request, context, signal) {
       const files = yield* Schema_exports.decodeUnknownEffect(Schema_exports.Array(SkillFile))(
         context.files ?? []
       ).pipe(Effect_exports.mapError(() => new HostDeclarationInvalid()));
+      let cacheCommands = 0;
+      const hostCache = context.cache ?? unavailableCache;
       const bound = {
         cache: authorCache(
-          context.cache ?? unavailableCache,
+          {
+            ...hostCache,
+            transport: (command) => {
+              cacheCommands += 1;
+              return hostCache.transport(command);
+            }
+          },
           Redacted_exports.value(context.accounts),
           invocationSignal,
           deadline
@@ -747,13 +755,15 @@ function dispatch(app, request, context, signal) {
           Effect_exports.mapError(() => new HostDeclarationInvalid())
         ));
         const source2 = definition.dynamicSkills;
+        const before = cacheCommands;
         const dynamic = source2 === void 0 ? [] : yield* evaluationSafe(Effect_exports.suspend(source2.list)).pipe(
           Effect_exports.withSpan("app.skills.load")
         );
+        const cached = source2 !== void 0 && cacheCommands > before;
         const skills = yield* Schema_exports.decodeUnknownEffect(AppSkills)([...declared2, ...dynamic]).pipe(
           Effect_exports.mapError(() => new HostDeclarationInvalid())
         );
-        return request.sources === true ? { skills, dynamic: source2 !== void 0 } : skills;
+        return request.sources === true ? { skills, dynamic: source2 !== void 0, cached } : skills;
       }
       if (request.operation === "workflows") {
         return yield* Effect_exports.forEach(

package/js/{chunk-JN55AYQH.js → chunk-DHUDODG5.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-PYUYJRSK.js";
 import {
   ScheduleTiming
-} from "./chunk-MYYEW3RA.js";
+} from "./chunk-3M2MEDNL.js";
 import {
   decoderOf,
   isSchema,

package/js/{chunk-HDTGZWP2.js → chunk-EQB7JMAL.js}

@@ -2,7 +2,7 @@ import {
   adaptMcpTools,
   mcpClient,
   mcpJsonSchemaValidator
-} from "./chunk-RN2MXB4R.js";
+} from "./chunk-2VPJHFOU.js";
 import {
   accountProviderError,
   httpProviderError
@@ -11,7 +11,7 @@ import {
   McpError,
   McpToolsOptions,
   defaultMcpClientLimits
-} from "./chunk-MYYEW3RA.js";
+} from "./chunk-3M2MEDNL.js";
 import {
   ProviderError
 } from "./chunk-W7D7WVSY.js";

package/js/{chunk-OHRT55C4.js → chunk-G7ZIRKMK.js}

@@ -1784,10 +1784,7 @@ var AppUiApi = HttpApi_exports.make("app-ui").add(
 );
 
 export {
-  HttpApiEndpoint_exports,
-  HttpApi_exports,
   HttpApiClient_exports,
-  HttpApiGroup_exports,
   UiContext,
   UiOperation,
   UiUnauthorized,

package/js/chunk-NQ3OMCA5.js

@@ -0,0 +1,39 @@
+import {
+  appSignInCallbackPath
+} from "./chunk-T2LAZCAD.js";
+import {
+  HttpServerResponse_exports
+} from "./chunk-QKHR7BMF.js";
+
+// src/implementation/ui-auth.ts
+var appPrivateHeaders = {
+  "cache-control": "no-store",
+  "referrer-policy": "no-referrer",
+  "x-content-type-options": "nosniff",
+  "content-security-policy": "frame-ancestors 'none'"
+};
+var appRedirect = (url) => HttpServerResponse_exports.redirect(url, { status: 302, headers: appPrivateHeaders });
+var appSignInCallback = (origin, request, code) => {
+  const callback = new URL(appSignInCallbackPath, origin);
+  callback.searchParams.set("request", request);
+  callback.searchParams.set("code", code);
+  return callback.href;
+};
+var appSignInFailed = () => HttpServerResponse_exports.text(
+  `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Could not open app</title></head><body><p>Could not sign in to this app. Try opening it again.</p><a href="/">Try again</a></body></html>`,
+  {
+    status: 401,
+    contentType: "text/html",
+    headers: {
+      ...appPrivateHeaders,
+      "content-security-policy": "default-src 'none'; frame-ancestors 'none'; base-uri 'none'"
+    }
+  }
+);
+
+export {
+  appPrivateHeaders,
+  appRedirect,
+  appSignInCallback,
+  appSignInFailed
+};

package/js/{chunk-4LPG6RCH.js → chunk-T2LAZCAD.js}

@@ -1,11 +1,3 @@
-import {
-  HttpApiEndpoint_exports,
-  HttpApiGroup_exports,
-  HttpApi_exports,
-  UiFailed,
-  UiForbidden,
-  UiUnauthorized
-} from "./chunk-OHRT55C4.js";
 import {
   Schema_exports
 } from "./chunk-FW5HBOIK.js";
@@ -31,26 +23,14 @@ var AppReturnPath = Schema_exports.String.check(
   })
 ).pipe(Schema_exports.brand("AppReturnPath"));
 var AppSignInCallback = Schema_exports.Struct({ request: AppSignInId, code: AppSignInCode });
-var AppSignInApi = HttpApi_exports.make("app-sign-in").add(
-  HttpApiGroup_exports.make("appSignIn").add(
-    HttpApiEndpoint_exports.post("start", "/_executor/auth/start", {
-      payload: Schema_exports.Struct({ returnTo: AppReturnPath }),
-      success: Schema_exports.Struct({ url: Schema_exports.String }),
-      error: [UiForbidden, UiFailed]
-    })
-  ).add(
-    HttpApiEndpoint_exports.post("complete", "/_executor/auth/complete", {
-      payload: AppSignInCallback,
-      success: Schema_exports.Struct({ returnTo: AppReturnPath }),
-      error: [UiUnauthorized, UiForbidden, UiFailed]
-    })
-  )
-);
+var appSignInCallbackPath = "/_executor/auth/callback";
+var AppSignInFailure = Schema_exports.Literals(["ended", "forbidden", "unavailable"]);
 
 export {
   AppSignInId,
   AppSignInCode,
   AppReturnPath,
   AppSignInCallback,
-  AppSignInApi
+  appSignInCallbackPath,
+  AppSignInFailure
 };

package/js/client.js

@@ -4,7 +4,7 @@ import {
   UiContext,
   UiDeploymentChanged,
   UiFailed
-} from "./chunk-OHRT55C4.js";
+} from "./chunk-G7ZIRKMK.js";
 import {
   AsyncResult_exports,
   AtomRegistry_exports,

package/js/contracts.js

@@ -80,11 +80,12 @@ import {
   maxInputProblems,
   minimumIntervalMilliseconds,
   protocol1,
+  protocol2,
   selectTools,
   skillCatalog,
   skillsCommand,
   workflowDurationMillis
-} from "./chunk-MYYEW3RA.js";
+} from "./chunk-3M2MEDNL.js";
 import "./chunk-BMOIAIVR.js";
 import "./chunk-LGIYBDWA.js";
 import {
@@ -217,6 +218,7 @@ export {
   maxInputProblems,
   minimumIntervalMilliseconds,
   protocol1,
+  protocol2,
   selectTools,
   skillCatalog,
   skillFormatLimits,

package/js/effect.js

@@ -3,16 +3,16 @@ import {
   ApprovalDecision,
   createAppHandler,
   prepareElicitation
-} from "./chunk-J7O55ZV7.js";
+} from "./chunk-6VRYO2BG.js";
 import "./chunk-D47C7KG5.js";
 import "./chunk-FDNTX5QJ.js";
-import "./chunk-JN55AYQH.js";
+import "./chunk-DHUDODG5.js";
 import "./chunk-PLCMJREA.js";
 import "./chunk-PYUYJRSK.js";
 import "./chunk-ZJWDMTE3.js";
 import {
   ToolAnnotations
-} from "./chunk-MYYEW3RA.js";
+} from "./chunk-3M2MEDNL.js";
 import "./chunk-BMOIAIVR.js";
 import "./chunk-LGIYBDWA.js";
 import "./chunk-YEJOQEII.js";

package/js/graphql.js

@@ -5,12 +5,12 @@ import {
   protocolOperations
 } from "./chunk-Z5NMEGJN.js";
 import "./chunk-BCSNKUAC.js";
-import "./chunk-J7O55ZV7.js";
+import "./chunk-6VRYO2BG.js";
 import {
   cacheKey
 } from "./chunk-D47C7KG5.js";
 import "./chunk-FDNTX5QJ.js";
-import "./chunk-JN55AYQH.js";
+import "./chunk-DHUDODG5.js";
 import "./chunk-PLCMJREA.js";
 import {
   nativeOperation
@@ -20,7 +20,7 @@ import {
   graphqlProviderError,
   httpProviderError
 } from "./chunk-ZJWDMTE3.js";
-import "./chunk-MYYEW3RA.js";
+import "./chunk-3M2MEDNL.js";
 import "./chunk-BMOIAIVR.js";
 import "./chunk-LGIYBDWA.js";
 import "./chunk-YEJOQEII.js";

package/js/host.js

@@ -1,9 +1,9 @@
 import {
   createAppHandler
-} from "./chunk-J7O55ZV7.js";
+} from "./chunk-6VRYO2BG.js";
 import "./chunk-D47C7KG5.js";
 import "./chunk-FDNTX5QJ.js";
-import "./chunk-JN55AYQH.js";
+import "./chunk-DHUDODG5.js";
 import "./chunk-PLCMJREA.js";
 import "./chunk-PYUYJRSK.js";
 import "./chunk-ZJWDMTE3.js";
@@ -20,7 +20,7 @@ import {
   WorkflowRun,
   WorkflowRunId,
   WorkflowRunPage
-} from "./chunk-MYYEW3RA.js";
+} from "./chunk-3M2MEDNL.js";
 import "./chunk-BMOIAIVR.js";
 import {
   CacheCommand,

package/js/index.js

@@ -3,7 +3,7 @@ import {
   defineDatabase,
   table,
   workflow
-} from "./chunk-JN55AYQH.js";
+} from "./chunk-DHUDODG5.js";
 import "./chunk-PLCMJREA.js";
 import {
   fromPromise,
@@ -30,7 +30,7 @@ import {
   ScheduleTiming,
   SecretsMethod,
   WorkflowFailure
-} from "./chunk-MYYEW3RA.js";
+} from "./chunk-3M2MEDNL.js";
 import "./chunk-BMOIAIVR.js";
 import {
   CacheError

package/js/mcp/effect.js

@@ -1,17 +1,17 @@
 import {
   mcpClientEffect,
   mcpToolsEffect
-} from "../chunk-HDTGZWP2.js";
-import "../chunk-RN2MXB4R.js";
+} from "../chunk-EQB7JMAL.js";
+import "../chunk-2VPJHFOU.js";
 import "../chunk-BCSNKUAC.js";
-import "../chunk-J7O55ZV7.js";
+import "../chunk-6VRYO2BG.js";
 import "../chunk-D47C7KG5.js";
 import "../chunk-FDNTX5QJ.js";
-import "../chunk-JN55AYQH.js";
+import "../chunk-DHUDODG5.js";
 import "../chunk-PLCMJREA.js";
 import "../chunk-PYUYJRSK.js";
 import "../chunk-ZJWDMTE3.js";
-import "../chunk-MYYEW3RA.js";
+import "../chunk-3M2MEDNL.js";
 import "../chunk-BMOIAIVR.js";
 import "../chunk-LGIYBDWA.js";
 import "../chunk-YEJOQEII.js";

package/js/mcp/stdio.js

@@ -2,22 +2,22 @@ import {
   adaptMcpTools,
   mcpClient,
   mcpJsonSchemaValidator
-} from "../chunk-RN2MXB4R.js";
+} from "../chunk-2VPJHFOU.js";
 import {
   protocolOperations
 } from "../chunk-Z5NMEGJN.js";
 import "../chunk-BCSNKUAC.js";
-import "../chunk-J7O55ZV7.js";
+import "../chunk-6VRYO2BG.js";
 import "../chunk-D47C7KG5.js";
 import "../chunk-FDNTX5QJ.js";
-import "../chunk-JN55AYQH.js";
+import "../chunk-DHUDODG5.js";
 import "../chunk-PLCMJREA.js";
 import "../chunk-PYUYJRSK.js";
 import "../chunk-ZJWDMTE3.js";
 import {
   McpError,
   ProcessConfig
-} from "../chunk-MYYEW3RA.js";
+} from "../chunk-3M2MEDNL.js";
 import "../chunk-BMOIAIVR.js";
 import "../chunk-LGIYBDWA.js";
 import "../chunk-YEJOQEII.js";

package/js/mcp.js

@@ -1,22 +1,22 @@
 import {
   mcpClientEffect
-} from "./chunk-HDTGZWP2.js";
+} from "./chunk-EQB7JMAL.js";
 import {
   catalogCache
 } from "./chunk-5MQZEB6Y.js";
 import {
   adaptMcpTool
-} from "./chunk-RN2MXB4R.js";
+} from "./chunk-2VPJHFOU.js";
 import {
   protocolOperations
 } from "./chunk-Z5NMEGJN.js";
 import "./chunk-BCSNKUAC.js";
-import "./chunk-J7O55ZV7.js";
+import "./chunk-6VRYO2BG.js";
 import {
   cacheKey
 } from "./chunk-D47C7KG5.js";
 import "./chunk-FDNTX5QJ.js";
-import "./chunk-JN55AYQH.js";
+import "./chunk-DHUDODG5.js";
 import "./chunk-PLCMJREA.js";
 import {
   nativeOperation
@@ -26,7 +26,7 @@ import {
   McpError,
   McpToolMetadata,
   McpToolsOptions
-} from "./chunk-MYYEW3RA.js";
+} from "./chunk-3M2MEDNL.js";
 import "./chunk-BMOIAIVR.js";
 import "./chunk-LGIYBDWA.js";
 import "./chunk-YEJOQEII.js";

package/js/ui/auth/contracts.js

@@ -1,19 +1,18 @@
 import {
   AppReturnPath,
-  AppSignInApi,
   AppSignInCallback,
   AppSignInCode,
-  AppSignInId
-} from "../../chunk-4LPG6RCH.js";
-import "../../chunk-OHRT55C4.js";
-import "../../chunk-QKHR7BMF.js";
-import "../../chunk-SATWJKN6.js";
+  AppSignInFailure,
+  AppSignInId,
+  appSignInCallbackPath
+} from "../../chunk-T2LAZCAD.js";
 import "../../chunk-FW5HBOIK.js";
 import "../../chunk-CZ7CSFO4.js";
 export {
   AppReturnPath,
-  AppSignInApi,
   AppSignInCallback,
   AppSignInCode,
-  AppSignInId
+  AppSignInFailure,
+  AppSignInId,
+  appSignInCallbackPath
 };

package/js/ui/auth.js

@@ -1,28 +1,30 @@
 import {
   appPrivateHeaders,
-  appSignInPage,
-  appSignInScript
-} from "../chunk-TE4KO4HI.js";
+  appRedirect,
+  appSignInCallback,
+  appSignInFailed
+} from "../chunk-NQ3OMCA5.js";
 import {
   AppReturnPath,
-  AppSignInApi,
   AppSignInCallback,
   AppSignInCode,
-  AppSignInId
-} from "../chunk-4LPG6RCH.js";
-import "../chunk-OHRT55C4.js";
+  AppSignInFailure,
+  AppSignInId,
+  appSignInCallbackPath
+} from "../chunk-T2LAZCAD.js";
 import "../chunk-HDJH3RPR.js";
 import "../chunk-QKHR7BMF.js";
-import "../chunk-SATWJKN6.js";
 import "../chunk-FW5HBOIK.js";
 import "../chunk-CZ7CSFO4.js";
 export {
   AppReturnPath,
-  AppSignInApi,
   AppSignInCallback,
   AppSignInCode,
+  AppSignInFailure,
   AppSignInId,
   appPrivateHeaders,
-  appSignInPage,
-  appSignInScript
+  appRedirect,
+  appSignInCallback,
+  appSignInCallbackPath,
+  appSignInFailed
 };

package/js/ui/contracts.js

@@ -7,7 +7,7 @@ import {
   UiOperation,
   UiSnapshot,
   UiUnauthorized
-} from "../chunk-OHRT55C4.js";
+} from "../chunk-G7ZIRKMK.js";
 import "../chunk-QKHR7BMF.js";
 import "../chunk-SATWJKN6.js";
 import "../chunk-FW5HBOIK.js";

package/js/ui/serving.js

@@ -1,9 +1,10 @@
 import {
   appPrivateHeaders
-} from "../chunk-TE4KO4HI.js";
+} from "../chunk-NQ3OMCA5.js";
+import "../chunk-T2LAZCAD.js";
 import {
   UiForbidden
-} from "../chunk-OHRT55C4.js";
+} from "../chunk-G7ZIRKMK.js";
 import {
   CurrentTelemetryConfig
 } from "../chunk-ZCAMUXSG.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apps",
-  "version": "0.0.1-beta.2",
+  "version": "0.0.1-beta.4",
   "description": "TypeScript apps with typed tools, accounts, storage, and UI.",
   "type": "module",
   "sideEffects": false,