apps 0.0.1-beta.24 → 0.0.1-beta.25

package/js/{chunk-K2QATKIF.js → chunk-GG4IFBN3.js}

@@ -1,37 +1,42 @@
 import {
   adaptMcpTools,
+  answeredError,
   mcpClient,
   mcpJsonSchemaValidator
-} from "./chunk-B3T7CZOH.js";
+} from "./chunk-VSLWGXPW.js";
 import {
   accountProviderError,
-  httpProviderError
-} from "./chunk-MKWZPDR6.js";
+  bodyUpstreamError,
+  httpProviderError,
+  providerErrorDetail
+} from "./chunk-DAIW2WM3.js";
 import {
   McpError,
   McpToolsOptions,
   defaultMcpClientLimits
-} from "./chunk-2KZ7GG43.js";
+} from "./chunk-VGEPL4BV.js";
 import {
   ProviderError
-} from "./chunk-R3EV5FTO.js";
+} from "./chunk-T7WRQJUF.js";
 import {
   captureTelemetry
-} from "./chunk-ODEIDRGW.js";
+} from "./chunk-DUEZ2XCO.js";
 import {
   FetchHttpClient_exports
-} from "./chunk-57RKNWL2.js";
+} from "./chunk-KNJAOYV4.js";
 import {
   HttpClientRequest_exports,
   HttpClient_exports
-} from "./chunk-UK573G7W.js";
+} from "./chunk-OBXHLFGQ.js";
 import {
   Deferred_exports,
   Effect_exports,
+  Option_exports,
   Redacted_exports,
+  Ref_exports,
   Schema_exports,
   Stream_exports
-} from "./chunk-CDL5PM2Q.js";
+} from "./chunk-DM5U7G7V.js";
 
 // src/implementation/mcp.ts
 import { UnauthorizedError } from "@modelcontextprotocol/sdk/client/auth.js";
@@ -51,13 +56,39 @@ var failure = (phase, error) => {
   const status = error instanceof UnauthorizedError ? 401 : error instanceof StreamableHTTPError || error instanceof SseError ? error.code : void 0;
   const provider = status === void 0 ? void 0 : httpProviderError(status);
   if (provider !== void 0) return provider;
+  const upstream = answeredError(error);
   return new McpError({
     phase,
     reason: error instanceof ProtocolError && error.code === ErrorCode.RequestTimeout ? "timeout" : "request",
-    ...status === void 0 ? {} : { status }
+    ...status === void 0 ? {} : { status },
+    ...upstream === void 0 ? {} : { upstream }
   });
 };
-var transportFetch = (connection, telemetry, rejected) => (url, init) => Effect_exports.runPromiseWith(telemetry.context)(
+var errorBodyLimits = { maxBytes: 65536, readTimeoutMs: 2e3 };
+var errorBody = (response) => Effect_exports.gen(function* () {
+  const json = /^application\/(?:[\w.-]+\+)?json$/i.test(
+    response.headers["content-type"]?.split(";")[0]?.trim() ?? ""
+  );
+  const length = response.headers["content-length"];
+  if (!json || length !== void 0 && Number(length) > errorBodyLimits.maxBytes)
+    return { body: Stream_exports.toReadableStream(response.stream), upstream: void 0 };
+  const unreadable = new McpError({ phase: "transport", reason: "invalid_response" });
+  const read = yield* response.stream.pipe(
+    Stream_exports.mapError(() => unreadable),
+    Stream_exports.limitBytes(errorBodyLimits.maxBytes, () => Stream_exports.fail(unreadable)),
+    Stream_exports.decodeText,
+    Stream_exports.mkString,
+    Effect_exports.timeout(errorBodyLimits.readTimeoutMs),
+    Effect_exports.option
+  );
+  if (Option_exports.isNone(read)) return { body: null, upstream: void 0 };
+  const parsed = Schema_exports.decodeUnknownOption(Schema_exports.fromJsonString(Schema_exports.Json))(read.value);
+  return {
+    body: read.value,
+    upstream: Option_exports.isSome(parsed) ? bodyUpstreamError(parsed.value) : void 0
+  };
+});
+var transportFetch = (connection, telemetry, rejected, answered) => (url, init) => Effect_exports.runPromiseWith(telemetry.context)(
   Effect_exports.gen(function* () {
     const target = yield* Effect_exports.try({
       try: () => new URL(url),
@@ -75,18 +106,23 @@ var transportFetch = (connection, telemetry, rejected) => (url, init) => Effect_
     });
     const client = yield* HttpClient_exports.HttpClient;
     const response = yield* client.execute(request);
+    if (response.status < 400)
+      return new Response(
+        [204, 205, 304].includes(response.status) ? null : Stream_exports.toReadableStream(response.stream),
+        {
+          status: response.status,
+          headers: response.headers
+        }
+      );
+    const { body, upstream } = yield* errorBody(response);
     const provider = httpProviderError(response.status, response.headers);
     if (provider !== void 0) {
-      yield* Deferred_exports.fail(rejected, provider);
-      return yield* provider;
+      const refused = providerErrorDetail(provider, { upstream });
+      yield* Deferred_exports.fail(rejected, refused);
+      return yield* refused;
     }
-    return new Response(
-      [204, 205, 304].includes(response.status) ? null : Stream_exports.toReadableStream(response.stream),
-      {
-        status: response.status,
-        headers: response.headers
-      }
-    );
+    yield* Ref_exports.set(answered, { status: response.status, upstream });
+    return new Response(body, { status: response.status, headers: response.headers });
   }).pipe(
     Effect_exports.provide(FetchHttpClient_exports.layer),
     Effect_exports.provideService(FetchHttpClient_exports.RequestInit, { redirect: "manual" }),
@@ -104,15 +140,30 @@ var transportFetch = (connection, telemetry, rejected) => (url, init) => Effect_
   ),
   init?.signal ? { signal: init.signal } : {}
 );
+var explain = (error, phase, response) => {
+  if (Schema_exports.is(ProviderError)(error)) return providerErrorDetail(error, { phase });
+  if (!Schema_exports.is(McpError)(error) || error.upstream !== void 0 || error.status === void 0 || response?.status !== error.status || response.upstream === void 0)
+    return error;
+  return new McpError({
+    phase: error.phase,
+    reason: error.reason,
+    status: error.status,
+    upstream: response.upstream
+  });
+};
+var explained = (phase, answered) => (error) => Ref_exports.get(answered).pipe(
+  Effect_exports.flatMap((response) => Effect_exports.fail(explain(error, phase, response)))
+);
 function withClient(connection, mode, use, changed) {
   const attempt = (kind) => Effect_exports.scoped(
     Effect_exports.gen(function* () {
       const telemetry = yield* captureTelemetry;
       const rejected = yield* Deferred_exports.make();
+      const answered = yield* Ref_exports.make(void 0);
       const pending = /* @__PURE__ */ new Set();
       const { client, transport } = yield* Effect_exports.acquireRelease(
         Effect_exports.sync(() => {
-          const fetch = transportFetch(connection, telemetry, rejected);
+          const fetch = transportFetch(connection, telemetry, rejected, answered);
           const client2 = new Client(
             { name: "executor-apps", version: "0.1.0" },
             {
@@ -168,10 +219,14 @@ function withClient(connection, mode, use, changed) {
         catch: (error) => failure("connect", error)
       }).pipe(
         Effect_exports.raceFirst(Deferred_exports.await(rejected)),
+        Effect_exports.catch(explained("connect", answered)),
         Effect_exports.timeout(connection.timeoutMs),
         Effect_exports.withSpan("provider.mcp.connect")
       );
-      return yield* use(client).pipe(Effect_exports.raceFirst(Deferred_exports.await(rejected)));
+      return yield* use(client).pipe(
+        Effect_exports.raceFirst(Deferred_exports.await(rejected)),
+        Effect_exports.catch(explained(mode, answered))
+      );
     })
   ).pipe(
     Effect_exports.withSpan("provider.mcp.session", {

package/js/{chunk-N7YDVXYJ.js → chunk-GH6PY5BQ.js}

@@ -1,6 +1,6 @@
 import {
   Schema_exports
-} from "./chunk-CDL5PM2Q.js";
+} from "./chunk-DM5U7G7V.js";
 
 // ../app-data/src/contracts/database.ts
 var DataName = Schema_exports.String.check(

package/js/{chunk-PZB6T6KU.js → chunk-HQKIPKM5.js}

@@ -1,6 +1,6 @@
 import {
   Schema_exports
-} from "./chunk-CDL5PM2Q.js";
+} from "./chunk-DM5U7G7V.js";
 
 // src/contracts/storage.ts
 var StorageName = Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(200));

package/js/{chunk-66JAEDTE.js → chunk-IE6W5RNN.js}

@@ -1,7 +1,7 @@
 import {
   JsonObject,
   ValidationError
-} from "./chunk-27F7W2LG.js";
+} from "./chunk-KKGRSXUK.js";
 import {
   Cause_exports,
   Effect_exports,
@@ -10,7 +10,7 @@ import {
   SchemaIssue_exports,
   SchemaParser_exports,
   Schema_exports
-} from "./chunk-CDL5PM2Q.js";
+} from "./chunk-DM5U7G7V.js";
 
 // ../../node_modules/.bun/@cfworker+json-schema@4.1.1/node_modules/@cfworker/json-schema/dist/esm/deep-compare-strict.js
 function deepCompareStrict(a, b) {

package/js/{chunk-WFEUCUFF.js → chunk-J3RUZMLO.js}

@@ -1,13 +1,15 @@
 import {
   skillFromFiles
-} from "./chunk-IPI4MFSN.js";
+} from "./chunk-PC5RHPUP.js";
 import {
   joinPath,
   mergeMeta
-} from "./chunk-S47NFEWF.js";
+} from "./chunk-WPKXOTKM.js";
 import {
-  parseProviderError
-} from "./chunk-MKWZPDR6.js";
+  isShortenedUpstream,
+  parseProviderError,
+  providerError
+} from "./chunk-DAIW2WM3.js";
 import {
   ApiErrorResponse,
   HostDeclarationInvalid,
@@ -15,31 +17,36 @@ import {
   HostedRouter,
   HostedTool,
   HostedToolSummary,
-  McpError,
-  maxFailureMessageLength
-} from "./chunk-2KZ7GG43.js";
+  McpError
+} from "./chunk-VGEPL4BV.js";
 import {
   AppDatabaseError
-} from "./chunk-N7YDVXYJ.js";
+} from "./chunk-GH6PY5BQ.js";
 import {
-  CacheError
-} from "./chunk-R3EV5FTO.js";
+  CacheError,
+  FailureCode,
+  FailureFieldName,
+  maxFailureFieldLength,
+  maxFailureFields,
+  maxFailureMessageLength,
+  maxUpstreamMessageLength
+} from "./chunk-T7WRQJUF.js";
 import {
   SkillLoadFailed,
   skillFormatLimits
-} from "./chunk-JU7VHODU.js";
+} from "./chunk-TACLXEAE.js";
 import {
   jsonSchemaDocument
-} from "./chunk-66JAEDTE.js";
+} from "./chunk-IE6W5RNN.js";
 import {
   AppStorageError,
   AppStorageUnavailable
-} from "./chunk-PZB6T6KU.js";
+} from "./chunk-HQKIPKM5.js";
 import {
   AccountId,
   HttpUrl,
   JsonObject
-} from "./chunk-27F7W2LG.js";
+} from "./chunk-KKGRSXUK.js";
 import {
   Cause_exports,
   Effect_exports,
@@ -48,7 +55,7 @@ import {
   Redacted_exports,
   Result_exports,
   Schema_exports
-} from "./chunk-CDL5PM2Q.js";
+} from "./chunk-DM5U7G7V.js";
 
 // src/contracts/openapi.ts
 var OpenapiErrorResponse = Schema_exports.Struct({
@@ -204,12 +211,63 @@ var accountFieldSecrets = (accounts) => {
   return [...found].sort((a, b) => b.length - a.length);
 };
 var accountSecrets = (accounts) => accountFieldSecrets(Redacted_exports.value(accounts));
-var boundFailureMessage = (message, secrets) => {
-  let redacted = message;
+var replaceSecrets = (text, secrets) => {
+  let redacted = text;
   for (const secret of secrets) redacted = redacted.split(secret).join("[redacted]");
-  return redacted.length <= maxFailureMessageLength ? redacted : `${redacted.slice(0, maxFailureMessageLength - 1)}\u2026`;
+  return redacted;
 };
+var bound = (text, maximum) => text.length <= maximum ? text : `${text.slice(0, maximum - 1)}\u2026`;
+var boundText = (text, secrets, maximum) => bound(replaceSecrets(text, secrets), maximum);
+var replaceSecretStart = (text, secrets) => {
+  let longest = 0;
+  for (const secret of secrets)
+    for (let length = Math.min(secret.length - 1, text.length); length > longest; length--)
+      if (text.endsWith(secret.slice(0, length))) {
+        longest = length;
+        break;
+      }
+  return longest === 0 ? text : `${text.slice(0, -longest)}[redacted]`;
+};
+var boundFailureMessage = (message, secrets) => boundText(message, secrets, maxFailureMessageLength);
+var redactUpstream = (upstream, secrets) => {
+  if (upstream?.message === void 0) return upstream;
+  const message = isShortenedUpstream(upstream.message) ? `${replaceSecretStart(replaceSecrets(upstream.message.slice(0, -1), secrets), secrets)}\u2026` : replaceSecrets(upstream.message, secrets);
+  return { code: upstream.code, message: bound(message, maxUpstreamMessageLength) };
+};
+var leavingProviderError = (error, secrets, phase) => providerError({
+  ...error,
+  phase: error.phase ?? phase,
+  upstream: redactUpstream(error.upstream, secrets)
+});
+var parseMcpError = (error, secrets) => Schema_exports.decodeUnknownOption(McpError)(error).pipe(
+  Option_exports.map(({ phase, reason, status, upstream }) => {
+    const stated = redactUpstream(upstream, secrets);
+    return new McpError({
+      phase,
+      reason,
+      ...status === void 0 ? {} : { status },
+      ...stated === void 0 ? {} : { upstream: stated }
+    });
+  })
+);
 var errorName = (error) => (error.name.length > 0 ? error.name : "Error").slice(0, 128);
+var ownCode = (error, secrets) => Predicate_exports.hasProperty(error, "code") && Schema_exports.is(FailureCode)(error.code) && error.code !== "" ? boundText(error.code, secrets, 128) : void 0;
+var reservedFields = /* @__PURE__ */ new Set(["name", "message", "stack", "cause", "_tag"]);
+var ownFields = (error, code, secrets) => {
+  const fields = {};
+  let count = 0;
+  for (const [key, value] of Object.entries(error)) {
+    if (count === maxFailureFields) break;
+    if (reservedFields.has(key) || key === "code" && code !== void 0) continue;
+    if (!Schema_exports.is(FailureFieldName)(key)) continue;
+    if (typeof value === "string") fields[key] = boundText(value, secrets, maxFailureFieldLength);
+    else if (typeof value === "boolean" || typeof value === "number" && Number.isFinite(value))
+      fields[key] = value;
+    else continue;
+    count++;
+  }
+  return count === 0 ? void 0 : fields;
+};
 var ownMessage = (error) => {
   const cause = error.cause;
   const suffix = cause instanceof Error && cause.message.length > 0 ? ` (caused by ${errorName(cause)}: ${cause.message})` : "";
@@ -250,15 +308,20 @@ var failureDetail = (error, secrets) => {
       code: error.reason,
       message: error.reason === "request" ? error.status === void 0 ? "The API request failed before a response arrived." : `The API responded with HTTP ${error.status}, which its OpenAPI document does not declare as an error with a message.` : error.reason === "invalid_input" ? "The input could not be encoded as a request for this API operation." : "The API's OpenAPI definition for this operation is invalid."
     };
-  if (error instanceof Error)
+  if (error instanceof Error) {
+    const code = ownCode(error, secrets);
+    const fields = ownFields(error, code, secrets);
     return {
       source: "app",
       errorName: errorName(error),
+      ...code === void 0 ? {} : { code },
       message: boundFailureMessage(
         ownMessage(error) ?? `${errorName(error)} was thrown without a message.`,
         secrets
-      )
+      ),
+      ...fields === void 0 ? {} : { fields }
     };
+  }
   if (typeof error === "string")
     return { source: "app", errorName: "string", message: boundFailureMessage(error, secrets) };
   return {
@@ -271,7 +334,7 @@ var failureDetail = (error, secrets) => {
 // src/implementation/router-catalog.ts
 var safeFailure = (error, secrets) => {
   const provider = parseProviderError(error);
-  if (Option_exports.isSome(provider)) return provider.value;
+  if (Option_exports.isSome(provider)) return leavingProviderError(provider.value, secrets, "discover");
   const skills = Schema_exports.decodeUnknownOption(SkillLoadFailed)(error);
   if (Option_exports.isSome(skills)) {
     const { reason, message, status } = skills.value;
@@ -281,11 +344,8 @@ var safeFailure = (error, secrets) => {
       ...status === void 0 ? {} : { status }
     });
   }
-  const mcp = Schema_exports.decodeUnknownOption(McpError)(error);
-  if (Option_exports.isSome(mcp)) {
-    const { phase, reason, status } = mcp.value;
-    return new McpError({ phase, reason, ...status === void 0 ? {} : { status } });
-  }
+  const mcp = parseMcpError(error, secrets);
+  if (Option_exports.isSome(mcp)) return mcp.value;
   if (Schema_exports.is(HostDeclarationInvalid)(error)) return error;
   return new HostEvaluationFailed(failureDetail(error, secrets));
 };
@@ -516,6 +576,8 @@ export {
   openapiMediaKind,
   accountSecrets,
   boundFailureMessage,
+  leavingProviderError,
+  parseMcpError,
   describeFailure,
   failureDetail,
   operationDescription,

package/js/{chunk-JWNSH5CA.js → chunk-K3MQX2KO.js}

@@ -1,11 +1,11 @@
 import {
   fixedRouter
-} from "./chunk-WFEUCUFF.js";
+} from "./chunk-J3RUZMLO.js";
 import {
   nativeOperation,
   operationDeclaration,
   routerDeclaration
-} from "./chunk-S47NFEWF.js";
+} from "./chunk-WPKXOTKM.js";
 
 // src/implementation/protocol-operations.ts
 var protocolOperations = (operations, kinds = {}) => {

package/js/{chunk-27F7W2LG.js → chunk-KKGRSXUK.js}

@@ -1,6 +1,6 @@
 import {
   Schema_exports
-} from "./chunk-CDL5PM2Q.js";
+} from "./chunk-DM5U7G7V.js";
 
 // src/contracts/schema.ts
 var JsonValue = Schema_exports.Json;

package/js/{chunk-57RKNWL2.js → chunk-KNJAOYV4.js}

@@ -4,7 +4,7 @@ import {
   fromWeb,
   layerMergedContext,
   make2 as make
-} from "./chunk-UK573G7W.js";
+} from "./chunk-OBXHLFGQ.js";
 import {
   Reference,
   Service,
@@ -17,7 +17,7 @@ import {
   succeed4 as succeed,
   toReadableStreamEffect,
   tryPromise
-} from "./chunk-CDL5PM2Q.js";
+} from "./chunk-DM5U7G7V.js";
 import {
   __export
 } from "./chunk-CZ7CSFO4.js";

package/js/{chunk-ZQINWV4W.js → chunk-LPN4ONWW.js}

@@ -12,7 +12,7 @@ import {
   defaultDatabaseLimits,
   defaultDatabaseRuntimeLimits,
   reservedFieldNames
-} from "./chunk-N7YDVXYJ.js";
+} from "./chunk-GH6PY5BQ.js";
 import {
   Cause_exports,
   Clock_exports,
@@ -20,7 +20,7 @@ import {
   Encoding_exports,
   Schema_exports,
   Semaphore_exports
-} from "./chunk-CDL5PM2Q.js";
+} from "./chunk-DM5U7G7V.js";
 
 // ../app-data/src/implementation/schema.ts
 var metadata = new Set(reservedFieldNames);

package/js/{chunk-A5BSZKFF.js → chunk-NXO2GN2T.js}

@@ -1,33 +1,33 @@
 import {
   promiseTable
-} from "./chunk-ZQINWV4W.js";
+} from "./chunk-LPN4ONWW.js";
 import {
   declaredOperations,
   fromPromise,
   nativeOperation,
   nativeRouter
-} from "./chunk-S47NFEWF.js";
+} from "./chunk-WPKXOTKM.js";
 import {
   ScheduleTiming
-} from "./chunk-2KZ7GG43.js";
+} from "./chunk-VGEPL4BV.js";
 import {
   DatabaseSchema
-} from "./chunk-N7YDVXYJ.js";
+} from "./chunk-GH6PY5BQ.js";
 import {
   decoderOf,
   isSchema,
   storageFieldOf
-} from "./chunk-66JAEDTE.js";
+} from "./chunk-IE6W5RNN.js";
 import {
   AppStorageUnavailable
-} from "./chunk-PZB6T6KU.js";
+} from "./chunk-HQKIPKM5.js";
 import {
   JsonValue
-} from "./chunk-27F7W2LG.js";
+} from "./chunk-KKGRSXUK.js";
 import {
   Effect_exports,
   Schema_exports
-} from "./chunk-CDL5PM2Q.js";
+} from "./chunk-DM5U7G7V.js";
 
 // src/contracts/http.ts
 var ResponseStatusError = class extends Schema_exports.TaggedError()(

package/js/{chunk-UK573G7W.js → chunk-OBXHLFGQ.js}

@@ -211,7 +211,7 @@ import {
   withFiber,
   withParentSpan,
   zero2 as zero
-} from "./chunk-CDL5PM2Q.js";
+} from "./chunk-DM5U7G7V.js";
 import {
   __export
 } from "./chunk-CZ7CSFO4.js";

package/js/{chunk-IPI4MFSN.js → chunk-PC5RHPUP.js}

@@ -5,11 +5,11 @@ import {
   SkillDefinitionInvalid,
   SkillFile,
   SkillFilePath
-} from "./chunk-JU7VHODU.js";
+} from "./chunk-TACLXEAE.js";
 import {
   Effect_exports,
   Schema_exports
-} from "./chunk-CDL5PM2Q.js";
+} from "./chunk-DM5U7G7V.js";
 
 // src/implementation/skill-files.ts
 var skillFromFiles = (input, source = {}) => Effect_exports.gen(function* () {

package/js/{chunk-VFZKSM3T.js → chunk-SUY33XAY.js}

@@ -1,6 +1,6 @@
 import {
   Schema_exports
-} from "./chunk-CDL5PM2Q.js";
+} from "./chunk-DM5U7G7V.js";
 
 // src/contracts/ui-auth.ts
 var AppSignInId = Schema_exports.String.check(Schema_exports.isPattern(/^[a-f0-9]{64}$/)).pipe(

package/js/{chunk-R3EV5FTO.js → chunk-T7WRQJUF.js}

@@ -1,15 +1,53 @@
 import {
   AccountId
-} from "./chunk-27F7W2LG.js";
+} from "./chunk-KKGRSXUK.js";
 import {
   Schema_exports
-} from "./chunk-CDL5PM2Q.js";
+} from "./chunk-DM5U7G7V.js";
+
+// src/contracts/failure.ts
+var maxFailureMessageLength = 2048;
+var FailureSource = Schema_exports.Literals(["app", "storage", "service"]);
+var FailureName = Schema_exports.String.check(Schema_exports.isMaxLength(128));
+var FailureCode = Schema_exports.String.check(Schema_exports.isMaxLength(128));
+var FailureMessage = Schema_exports.String.check(Schema_exports.isMaxLength(maxFailureMessageLength));
+var maxFailureFields = 8;
+var maxFailureFieldLength = 256;
+var FailureFieldName = Schema_exports.String.check(
+  Schema_exports.isPattern(/^[A-Za-z_$][A-Za-z0-9_$]{0,63}$/)
+);
+var FailureFieldValue = Schema_exports.Union([
+  Schema_exports.String.check(Schema_exports.isMaxLength(maxFailureFieldLength)),
+  Schema_exports.Finite,
+  Schema_exports.Boolean
+]);
+var FailureFields = Schema_exports.Record(FailureFieldName, FailureFieldValue).check(
+  Schema_exports.isMaxProperties(maxFailureFields)
+);
+var FailureDetail = {
+  source: Schema_exports.optionalKey(FailureSource),
+  errorName: Schema_exports.optionalKey(FailureName),
+  code: Schema_exports.optionalKey(FailureCode),
+  message: Schema_exports.optionalKey(FailureMessage),
+  fields: Schema_exports.optionalKey(FailureFields)
+};
+var maxUpstreamMessageLength = 1024;
+var UpstreamError = Schema_exports.Struct({
+  code: Schema_exports.Union([
+    Schema_exports.Int,
+    Schema_exports.String.check(Schema_exports.isMinLength(1), Schema_exports.isMaxLength(128))
+  ]),
+  message: Schema_exports.optionalKey(Schema_exports.String.check(Schema_exports.isMaxLength(maxUpstreamMessageLength)))
+});
+var FailurePhase = Schema_exports.Literals(["connect", "discover", "call"]);
 
 // src/contracts/provider-error.ts
 var ProviderError = class extends Schema_exports.TaggedError()("ProviderError", {
   reason: Schema_exports.Literals(["unauthorized", "forbidden", "rate_limited", "unavailable", "rejected"]),
   status: Schema_exports.optional(Schema_exports.Int.check(Schema_exports.isBetween({ minimum: 100, maximum: 599 }))),
-  accountId: Schema_exports.optional(AccountId)
+  accountId: Schema_exports.optional(AccountId),
+  phase: Schema_exports.optional(FailurePhase),
+  upstream: Schema_exports.optional(UpstreamError)
 }) {
 };
 
@@ -87,6 +125,20 @@ var CacheReply = Schema_exports.Union([
 ]);
 
 export {
+  maxFailureMessageLength,
+  FailureSource,
+  FailureName,
+  FailureCode,
+  FailureMessage,
+  maxFailureFields,
+  maxFailureFieldLength,
+  FailureFieldName,
+  FailureFieldValue,
+  FailureFields,
+  FailureDetail,
+  maxUpstreamMessageLength,
+  UpstreamError,
+  FailurePhase,
   ProviderError,
   CacheError,
   cacheLimits,

package/js/{chunk-JU7VHODU.js → chunk-TACLXEAE.js}

@@ -1,6 +1,6 @@
 import {
   Schema_exports
-} from "./chunk-CDL5PM2Q.js";
+} from "./chunk-DM5U7G7V.js";
 
 // src/contracts/skills.ts
 var SkillFilePath = Schema_exports.NonEmptyString.check(