apps 0.0.1-beta.32 → 0.0.1-beta.34

package/js/{chunk-W7F23NQ2.js → chunk-5OM6HBNU.js}

@@ -1,9 +1,8 @@
 import {
   makeCache
-} from "./chunk-AYM2FUI5.js";
+} from "./chunk-Q7Q5JTRW.js";
 import {
   accountSecrets,
-  appInvocationFetch,
   boundFailureMessage,
   describeFailure,
   failureDetail,
@@ -11,7 +10,10 @@ import {
   parseMcpError,
   readCatalog,
   routerSkills
-} from "./chunk-RULZPNGP.js";
+} from "./chunk-O4QOPXQT.js";
+import {
+  appInvocationFetch
+} from "./chunk-EPUWF4ZG.js";
 import {
   folderSkillsEffect
 } from "./chunk-OX233L7N.js";
@@ -21,7 +23,7 @@ import {
   isApp,
   toEffectApp,
   unavailableStorage
-} from "./chunk-FULRJSWU.js";
+} from "./chunk-QZD2RZ4S.js";
 import {
   parseDatabaseSchema
 } from "./chunk-5JVNM3CQ.js";
@@ -31,12 +33,12 @@ import {
   locate,
   nativeOperation,
   toPromise
-} from "./chunk-5XJR4XGW.js";
+} from "./chunk-QUEPZ67T.js";
 import {
   accountProviderError,
   httpProviderError,
   parseProviderError
-} from "./chunk-4OKYLVU4.js";
+} from "./chunk-IU6OK5G2.js";
 import {
   AccountCheckResult,
   DeclaredProvider,
@@ -83,10 +85,10 @@ import {
   defaultWebhookTransportLimits,
   maxInputProblems,
   workflowDurationMillis
-} from "./chunk-N72RKJ5E.js";
+} from "./chunk-DSUKW6KJ.js";
 import {
   CacheError
-} from "./chunk-5DLG2FVN.js";
+} from "./chunk-DXGWKNTQ.js";
 import {
   AppSkills,
   SkillFile,
@@ -105,7 +107,7 @@ import {
   maxAlternativeKeys,
   objectShape,
   unionShape
-} from "./chunk-NPGRURDG.js";
+} from "./chunk-O3OAFU7Q.js";
 import {
   JsonObject,
   JsonValue

package/js/{chunk-N72RKJ5E.js → chunk-DSUKW6KJ.js}

@@ -13,7 +13,7 @@ import {
   FailureSource,
   ProviderError,
   UpstreamError
-} from "./chunk-5DLG2FVN.js";
+} from "./chunk-DXGWKNTQ.js";
 import {
   AppSkillName,
   AppSkills,
@@ -226,88 +226,6 @@ var defaultOpenapiErrorLimits = OpenapiErrorLimits.make({
   readTimeoutMs: 2e3
 });
 
-// src/contracts/network.ts
-var NetworkRefusal = Schema_exports.Union([
-  Schema_exports.Struct({ reason: Schema_exports.Literal("private_address") }),
-  Schema_exports.Struct({
-    reason: Schema_exports.Literal("credential_host"),
-    /** The provider of the credential handle the request carried. */
-    provider: Schema_exports.String,
-    /** The hosts that provider's credentials may reach; empty when it declares none. */
-    allowedHosts: Schema_exports.Array(Schema_exports.String)
-  }),
-  Schema_exports.Struct({ reason: Schema_exports.Literal("credential_app") }),
-  Schema_exports.Struct({
-    reason: Schema_exports.Literal("credential_expired"),
-    /** The provider of the expired credential handle. */
-    provider: Schema_exports.String
-  })
-]);
-var NetworkRefused = class extends Schema_exports.TaggedError()("NetworkRefused", {
-  /** The refused destination, with its port when the URL names one. */
-  host: Schema_exports.String,
-  refusal: NetworkRefusal
-}) {
-  get message() {
-    const refusal = this.refusal;
-    switch (refusal.reason) {
-      case "private_address":
-        return `Executor refused a request to ${this.host}: apps on this instance can reach only public addresses, and ${this.host} is a private, loopback or internal address. The request was not sent.`;
-      case "credential_host":
-        return refusal.allowedHosts.length === 0 ? `Executor refused this request: ${refusal.provider} credentials cannot be sent to ${this.host}: the provider declares no hosts.` : `Executor refused this request: ${refusal.provider} credentials cannot be sent to ${this.host}. The provider allows: ${refusal.allowedHosts.join(", ")}.`;
-      case "credential_app":
-        return "Executor refused this request: it carries a credential handle that is not valid for this app. Use the account fields this invocation received.";
-      case "credential_expired":
-        return `Executor refused this request: it carries an expired ${refusal.provider} credential handle. Use the account fields this invocation received.`;
-    }
-  }
-};
-var networkRefusalStatus = 421;
-var networkRefusalHeader = "x-executor-refused";
-var NetworkRefusedHeader = Schema_exports.StringFromUriComponent.pipe(
-  Schema_exports.decodeTo(Schema_exports.fromJsonString(NetworkRefused))
-);
-var encodeRefusal = Schema_exports.encodeSync(NetworkRefused);
-var encodeRefusalHeader = Schema_exports.encodeSync(NetworkRefusedHeader);
-var networkRefusalResponse = (refused) => new Response(JSON.stringify({ ...encodeRefusal(refused), message: refused.message }), {
-  status: networkRefusalStatus,
-  statusText: "Refused by Executor",
-  headers: {
-    "content-type": "application/json; charset=utf-8",
-    [networkRefusalHeader]: encodeRefusalHeader(refused)
-  }
-});
-var RestrictedFetchOption = Schema_exports.Literals(["redirect", "cache", "integrity"]);
-var supportedFetchOptions = {
-  redirect: ["follow", "manual"],
-  cache: ["no-store", "no-cache"],
-  integrity: [""]
-};
-var FetchOptionUnsupported = class extends Schema_exports.TaggedError()(
-  "FetchOptionUnsupported",
-  {
-    option: RestrictedFetchOption,
-    value: Schema_exports.String,
-    supported: Schema_exports.Array(Schema_exports.String)
-  }
-) {
-  get message() {
-    const supported = this.supported.map((value) => JSON.stringify(value)).join(" or ");
-    return `fetch option ${this.option}: ${JSON.stringify(this.value)} is not supported by Executor's app runtime. Use ${supported}, or omit ${this.option}.${this.advice}`;
-  }
-  /** What to do instead, when the standard value has an equivalent the runtime supports. */
-  get advice() {
-    switch (this.option) {
-      case "redirect":
-        return this.value === "error" ? ` To reject redirects, send redirect: "manual" and treat a 3xx response as the error.` : "";
-      case "cache":
-        return "";
-      case "integrity":
-        return " To check a digest, read the body and hash it with crypto.subtle.digest.";
-    }
-  }
-};
-
 // src/contracts/workflows.ts
 var WorkflowRunId = Schema_exports.NonEmptyString.pipe(Schema_exports.brand("wfr"));
 var WorkflowName = Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(200));
@@ -3017,15 +2935,6 @@ var ToolResultObservation = Context_exports.Reference(
 );
 
 export {
-  NetworkRefusal,
-  NetworkRefused,
-  networkRefusalStatus,
-  networkRefusalHeader,
-  NetworkRefusedHeader,
-  networkRefusalResponse,
-  RestrictedFetchOption,
-  supportedFetchOptions,
-  FetchOptionUnsupported,
   SecretsMethod,
   OAuthClientAuth,
   OAuthSecretClientAuth,

package/js/{chunk-5DLG2FVN.js → chunk-DXGWKNTQ.js}

@@ -51,6 +51,88 @@ var ProviderError = class extends Schema_exports.TaggedError()("ProviderError",
 }) {
 };
 
+// src/contracts/network.ts
+var NetworkRefusal = Schema_exports.Union([
+  Schema_exports.Struct({ reason: Schema_exports.Literal("private_address") }),
+  Schema_exports.Struct({
+    reason: Schema_exports.Literal("credential_host"),
+    /** The provider of the credential handle the request carried. */
+    provider: Schema_exports.String,
+    /** The hosts that provider's credentials may reach; empty when it declares none. */
+    allowedHosts: Schema_exports.Array(Schema_exports.String)
+  }),
+  Schema_exports.Struct({ reason: Schema_exports.Literal("credential_app") }),
+  Schema_exports.Struct({
+    reason: Schema_exports.Literal("credential_expired"),
+    /** The provider of the expired credential handle. */
+    provider: Schema_exports.String
+  })
+]);
+var NetworkRefused = class extends Schema_exports.TaggedError()("NetworkRefused", {
+  /** The refused destination, with its port when the URL names one. */
+  host: Schema_exports.String,
+  refusal: NetworkRefusal
+}) {
+  get message() {
+    const refusal = this.refusal;
+    switch (refusal.reason) {
+      case "private_address":
+        return `Executor refused a request to ${this.host}: apps on this instance can reach only public addresses, and ${this.host} is a private, loopback or internal address. The request was not sent.`;
+      case "credential_host":
+        return refusal.allowedHosts.length === 0 ? `Executor refused this request: ${refusal.provider} credentials cannot be sent to ${this.host}: the provider declares no hosts.` : `Executor refused this request: ${refusal.provider} credentials cannot be sent to ${this.host}. The provider allows: ${refusal.allowedHosts.join(", ")}.`;
+      case "credential_app":
+        return "Executor refused this request: it carries a credential handle that is not valid for this app. Use the account fields this invocation received.";
+      case "credential_expired":
+        return `Executor refused this request: it carries an expired ${refusal.provider} credential handle. Use the account fields this invocation received.`;
+    }
+  }
+};
+var networkRefusalStatus = 421;
+var networkRefusalHeader = "x-executor-refused";
+var NetworkRefusedHeader = Schema_exports.StringFromUriComponent.pipe(
+  Schema_exports.decodeTo(Schema_exports.fromJsonString(NetworkRefused))
+);
+var encodeRefusal = Schema_exports.encodeSync(NetworkRefused);
+var encodeRefusalHeader = Schema_exports.encodeSync(NetworkRefusedHeader);
+var networkRefusalResponse = (refused) => new Response(JSON.stringify({ ...encodeRefusal(refused), message: refused.message }), {
+  status: networkRefusalStatus,
+  statusText: "Refused by Executor",
+  headers: {
+    "content-type": "application/json; charset=utf-8",
+    [networkRefusalHeader]: encodeRefusalHeader(refused)
+  }
+});
+var RestrictedFetchOption = Schema_exports.Literals(["redirect", "cache", "integrity"]);
+var supportedFetchOptions = {
+  redirect: ["follow", "manual"],
+  cache: ["no-store", "no-cache"],
+  integrity: [""]
+};
+var FetchOptionUnsupported = class extends Schema_exports.TaggedError()(
+  "FetchOptionUnsupported",
+  {
+    option: RestrictedFetchOption,
+    value: Schema_exports.String,
+    supported: Schema_exports.Array(Schema_exports.String)
+  }
+) {
+  get message() {
+    const supported = this.supported.map((value) => JSON.stringify(value)).join(" or ");
+    return `fetch option ${this.option}: ${JSON.stringify(this.value)} is not supported by Executor's app runtime. Use ${supported}, or omit ${this.option}.${this.advice}`;
+  }
+  /** What to do instead, when the standard value has an equivalent the runtime supports. */
+  get advice() {
+    switch (this.option) {
+      case "redirect":
+        return this.value === "error" ? ` To reject redirects, send redirect: "manual" and treat a 3xx response as the error.` : "";
+      case "cache":
+        return "";
+      case "integrity":
+        return " To check a digest, read the body and hash it with crypto.subtle.digest.";
+    }
+  }
+};
+
 // ../app-cache/src/contracts/cache.ts
 var CacheError = class extends Schema_exports.TaggedError()("CacheError", {
   reason: Schema_exports.Literals(["unavailable", "storage", "invalid", "capacity", "timeout"])
@@ -140,6 +222,15 @@ export {
   UpstreamError,
   FailurePhase,
   ProviderError,
+  NetworkRefusal,
+  NetworkRefused,
+  networkRefusalStatus,
+  networkRefusalHeader,
+  NetworkRefusedHeader,
+  networkRefusalResponse,
+  RestrictedFetchOption,
+  supportedFetchOptions,
+  FetchOptionUnsupported,
   CacheError,
   cacheLimits,
   CacheEntry,

package/js/chunk-EPUWF4ZG.js

@@ -0,0 +1,49 @@
+import {
+  FetchOptionUnsupported,
+  NetworkRefusedHeader,
+  RestrictedFetchOption,
+  networkRefusalHeader,
+  networkRefusalStatus,
+  supportedFetchOptions
+} from "./chunk-DXGWKNTQ.js";
+import {
+  invocationFetch
+} from "./chunk-ETLILMHY.js";
+import {
+  Effect_exports,
+  Schema_exports
+} from "./chunk-EXGKN554.js";
+
+// src/implementation/network.ts
+var refusalHeader = (status, header) => status === networkRefusalStatus && header !== null && header !== void 0 ? header : void 0;
+var failOnNetworkRefusal = (response) => {
+  const header = refusalHeader(response.status, response.headers[networkRefusalHeader]);
+  return header === void 0 ? Effect_exports.void : Schema_exports.decodeUnknownEffect(NetworkRefusedHeader)(header).pipe(
+    Effect_exports.orDie,
+    Effect_exports.flatMap(Effect_exports.fail)
+  );
+};
+var unsupportedOption = (init) => {
+  for (const option of RestrictedFetchOption.literals) {
+    const value = init?.[option];
+    const supported = supportedFetchOptions[option];
+    if (value !== void 0 && !supported.includes(value))
+      return new FetchOptionUnsupported({ option, value: String(value), supported });
+  }
+  return void 0;
+};
+var appFetch = (fetch) => async (input, init) => {
+  const unsupported = unsupportedOption(init);
+  if (unsupported !== void 0) throw unsupported;
+  const response = await fetch(input, init);
+  const header = refusalHeader(response.status, response.headers.get(networkRefusalHeader));
+  if (header === void 0) return response;
+  await response.body?.cancel();
+  throw Schema_exports.decodeUnknownSync(NetworkRefusedHeader)(header);
+};
+var appInvocationFetch = (signal) => invocationFetch(signal).pipe(Effect_exports.map(appFetch));
+
+export {
+  failOnNetworkRefusal,
+  appInvocationFetch
+};

package/js/{chunk-4OKYLVU4.js → chunk-IU6OK5G2.js}

@@ -1,7 +1,7 @@
 import {
   ProviderError,
   maxUpstreamMessageLength
-} from "./chunk-5DLG2FVN.js";
+} from "./chunk-DXGWKNTQ.js";
 import {
   AccountId
 } from "./chunk-FBBXFFFJ.js";

package/js/{chunk-GG566OOE.js → chunk-MYH3QZ4L.js}

@@ -3,28 +3,28 @@ import {
   answeredError,
   mcpClient,
   mcpJsonSchemaValidator
-} from "./chunk-3FJYVAE4.js";
+} from "./chunk-QKVZGWGZ.js";
 import {
   failOnNetworkRefusal
-} from "./chunk-RULZPNGP.js";
+} from "./chunk-EPUWF4ZG.js";
 import {
   accountProviderError,
   bodyUpstreamError,
   httpProviderError,
   providerErrorDetail
-} from "./chunk-4OKYLVU4.js";
+} from "./chunk-IU6OK5G2.js";
 import {
   McpCredentialsUnverified,
   McpError,
   McpHealthInput,
   McpToolsOptions,
-  NetworkRefused,
   defaultMcpClientLimits,
   mcpHealthReserveMs
-} from "./chunk-N72RKJ5E.js";
+} from "./chunk-DSUKW6KJ.js";
 import {
+  NetworkRefused,
   ProviderError
-} from "./chunk-5DLG2FVN.js";
+} from "./chunk-DXGWKNTQ.js";
 import {
   captureTelemetry
 } from "./chunk-ETLILMHY.js";

package/js/{chunk-NPGRURDG.js → chunk-O3OAFU7Q.js}

@@ -1073,6 +1073,13 @@ var StorageField = /* @__PURE__ */ Symbol("apps.StorageField");
 var Decoder = /* @__PURE__ */ Symbol("apps.Schema");
 var decoderOf = (schema) => schema[Decoder];
 var isSchema = (value) => typeof value === "object" && value !== null && Decoder in value;
+var schemaArgument = (value, role) => {
+  if (isSchema(value)) return value;
+  const received = value;
+  throw new TypeError(
+    `${role} must be a schema, such as string() or object({ ... }), but ${typeof received === "function" ? "it is a function. Call it, as in string()." : received === void 0 ? "it is undefined. Check that it is defined and imported before this declaration." : typeof received === "object" && received !== null && Object.getPrototypeOf(received) === Object.prototype ? "it is a plain object. Wrap its fields in object({ ... })." : "no apps schema constructor created it."}`
+  );
+};
 var parse = (decoder, input) => Effect_exports.suspend(() => Schema_exports.decodeUnknownEffect(decoder)(input)).pipe(
   Effect_exports.mapError(() => new ValidationError())
 );
@@ -1120,7 +1127,13 @@ function string(options = {}) {
 var number = () => wrap(Schema_exports.Finite, false, { kind: "number" });
 var boolean = () => wrap(Schema_exports.Boolean, false, { kind: "boolean" });
 var json = () => wrap(Schema_exports.Json, false);
-var record = (value) => wrap(Schema_exports.Record(Schema_exports.String, decoderOf(value)), false);
+var record = (value) => wrap(
+  Schema_exports.Record(
+    Schema_exports.String,
+    decoderOf(schemaArgument(value, "The record() value"))
+  ),
+  false
+);
 function literal(value) {
   if (typeof value === "number") Effect_exports.runSync(parse(Schema_exports.Finite, value));
   return wrap(
@@ -1128,10 +1141,13 @@ function literal(value) {
     false
   );
 }
-var array = (item) => wrap(Schema_exports.Array(decoderOf(item)), false);
+var array = (item) => wrap(Schema_exports.Array(decoderOf(schemaArgument(item, "The array() item"))), false);
 function object(fields) {
   const entries = Object.entries(fields).map(
-    ([key, field]) => [key, decoderOf(field)]
+    ([key, field]) => [
+      key,
+      decoderOf(schemaArgument(field, `The object() field ${JSON.stringify(key)}`))
+    ]
   );
   const decoder = entries.length === 0 ? withJsonSchemaDocument(
     // Native Struct({}) accepts every non-null value and retains undeclared fields.
@@ -1753,6 +1769,7 @@ var jsonSchemaDocument = (decoder) => {
 export {
   decoderOf,
   isSchema,
+  schemaArgument,
   parse,
   wrap,
   string,

package/js/{chunk-RULZPNGP.js → chunk-O4QOPXQT.js}

@@ -4,29 +4,22 @@ import {
 import {
   joinPath,
   mergeMeta
-} from "./chunk-5XJR4XGW.js";
+} from "./chunk-QUEPZ67T.js";
 import {
   isShortenedUpstream,
   parseProviderError,
   providerError
-} from "./chunk-4OKYLVU4.js";
+} from "./chunk-IU6OK5G2.js";
 import {
   ApiErrorResponse,
-  FetchOptionUnsupported,
   HostDeclarationInvalid,
   HostEvaluationFailed,
   HostedRouter,
   HostedTool,
   HostedToolSummary,
   McpCredentialsUnverified,
-  McpError,
-  NetworkRefused,
-  NetworkRefusedHeader,
-  RestrictedFetchOption,
-  networkRefusalHeader,
-  networkRefusalStatus,
-  supportedFetchOptions
-} from "./chunk-N72RKJ5E.js";
+  McpError
+} from "./chunk-DSUKW6KJ.js";
 import {
   AppDatabaseError
 } from "./chunk-UMCMZFXW.js";
@@ -34,21 +27,20 @@ import {
   CacheError,
   FailureCode,
   FailureFieldName,
+  FetchOptionUnsupported,
+  NetworkRefused,
   maxFailureFieldLength,
   maxFailureFields,
   maxFailureMessageLength,
   maxUpstreamMessageLength
-} from "./chunk-5DLG2FVN.js";
+} from "./chunk-DXGWKNTQ.js";
 import {
   SkillLoadFailed,
   skillFormatLimits
 } from "./chunk-HW3DPBZR.js";
-import {
-  invocationFetch
-} from "./chunk-ETLILMHY.js";
 import {
   jsonSchemaDocument
-} from "./chunk-NPGRURDG.js";
+} from "./chunk-O3OAFU7Q.js";
 import {
   AppStorageError,
   AppStorageUnavailable
@@ -275,35 +267,6 @@ var OpenapiCompileError = class extends Schema_exports.TaggedError()(
   }
 };
 
-// src/implementation/network.ts
-var refusalHeader = (status, header) => status === networkRefusalStatus && header !== null && header !== void 0 ? header : void 0;
-var failOnNetworkRefusal = (response) => {
-  const header = refusalHeader(response.status, response.headers[networkRefusalHeader]);
-  return header === void 0 ? Effect_exports.void : Schema_exports.decodeUnknownEffect(NetworkRefusedHeader)(header).pipe(
-    Effect_exports.orDie,
-    Effect_exports.flatMap(Effect_exports.fail)
-  );
-};
-var unsupportedOption = (init) => {
-  for (const option of RestrictedFetchOption.literals) {
-    const value = init?.[option];
-    const supported = supportedFetchOptions[option];
-    if (value !== void 0 && !supported.includes(value))
-      return new FetchOptionUnsupported({ option, value: String(value), supported });
-  }
-  return void 0;
-};
-var appFetch = (fetch) => async (input, init) => {
-  const unsupported = unsupportedOption(init);
-  if (unsupported !== void 0) throw unsupported;
-  const response = await fetch(input, init);
-  const header = refusalHeader(response.status, response.headers.get(networkRefusalHeader));
-  if (header === void 0) return response;
-  await response.body?.cancel();
-  throw Schema_exports.decodeUnknownSync(NetworkRefusedHeader)(header);
-};
-var appInvocationFetch = (signal) => invocationFetch(signal).pipe(Effect_exports.map(appFetch));
-
 // src/implementation/failure-detail.ts
 var storageMessages = {
   schema: "The app's database schema is invalid.",
@@ -792,8 +755,6 @@ export {
   parseMcpError,
   describeFailure,
   failureDetail,
-  failOnNetworkRefusal,
-  appInvocationFetch,
   operationDescription,
   fixedRouter,
   readCatalog,

package/js/{chunk-WG5DFZFT.js → chunk-PUBNIORL.js}

@@ -1,11 +1,11 @@
 import {
   fixedRouter
-} from "./chunk-RULZPNGP.js";
+} from "./chunk-O4QOPXQT.js";
 import {
   nativeOperation,
   operationDeclaration,
   routerDeclaration
-} from "./chunk-5XJR4XGW.js";
+} from "./chunk-QUEPZ67T.js";
 
 // src/implementation/protocol-operations.ts
 var protocolOperations = (operations, kinds = {}) => {

package/js/{chunk-AYM2FUI5.js → chunk-Q7Q5JTRW.js}

@@ -3,7 +3,7 @@ import {
   CacheEntry,
   CacheError,
   cacheLimits
-} from "./chunk-5DLG2FVN.js";
+} from "./chunk-DXGWKNTQ.js";
 import {
   Clock_exports,
   Duration_exports,

package/js/{chunk-3FJYVAE4.js → chunk-QKVZGWGZ.js}

@@ -1,12 +1,12 @@
 import {
   prepareElicitation
-} from "./chunk-W7F23NQ2.js";
+} from "./chunk-5OM6HBNU.js";
 import {
   fromPromise
-} from "./chunk-5XJR4XGW.js";
+} from "./chunk-QUEPZ67T.js";
 import {
   bodyUpstreamError
-} from "./chunk-4OKYLVU4.js";
+} from "./chunk-IU6OK5G2.js";
 import {
   ElicitationFailed,
   McpError,
@@ -18,12 +18,12 @@ import {
   defaultElicitationLimits,
   defaultMcpClientLimits,
   mcpSdkTimerCeilingMs
-} from "./chunk-N72RKJ5E.js";
+} from "./chunk-DSUKW6KJ.js";
 import {
   jsonSchemaDecoder,
   nestJsonSchema,
   preparedJsonSchemaDecoder
-} from "./chunk-NPGRURDG.js";
+} from "./chunk-O3OAFU7Q.js";
 import {
   JsonObject
 } from "./chunk-FBBXFFFJ.js";

package/js/{chunk-5XJR4XGW.js → chunk-QUEPZ67T.js}

@@ -3,10 +3,11 @@ import {
   RouterKey,
   RouterMeta,
   reservedRouterKeys
-} from "./chunk-N72RKJ5E.js";
+} from "./chunk-DSUKW6KJ.js";
 import {
-  decoderOf
-} from "./chunk-NPGRURDG.js";
+  decoderOf,
+  schemaArgument
+} from "./chunk-O3OAFU7Q.js";
 import {
   Effect_exports,
   Schema_exports
@@ -81,10 +82,10 @@ var withApproval = (operation, approval) => ({
 });
 var toolAnnotations = (operation) => nativeOperation(operation)?.annotations;
 var make = (kind, options, run) => operationDeclaration({
-  ...operationOptions(options),
+  ...operationOptions({ ...options, input: schemaArgument(options.input, `The ${kind} input`) }),
   kind,
   // The host always validates JSON serialization, even without a stronger output declaration.
-  ...options.output === void 0 ? {} : { output: decoderOf(options.output) },
+  ...options.output === void 0 ? {} : { output: decoderOf(schemaArgument(options.output, `The ${kind} output`)) },
   run: (context, input) => Effect_exports.tryPromise({
     // SAFETY: defineApp checks the handler context against its requirements.
     // The host validates account bindings and creates the matching storage facade.

package/js/{chunk-FULRJSWU.js → chunk-QZD2RZ4S.js}

@@ -6,18 +6,19 @@ import {
   fromPromise,
   nativeOperation,
   nativeRouter
-} from "./chunk-5XJR4XGW.js";
+} from "./chunk-QUEPZ67T.js";
 import {
   ScheduleTiming
-} from "./chunk-N72RKJ5E.js";
+} from "./chunk-DSUKW6KJ.js";
 import {
   DatabaseSchema
 } from "./chunk-UMCMZFXW.js";
 import {
   decoderOf,
   isSchema,
+  schemaArgument,
   storageFieldOf
-} from "./chunk-NPGRURDG.js";
+} from "./chunk-O3OAFU7Q.js";
 import {
   AppStorageUnavailable
 } from "./chunk-6KG4DZD7.js";
@@ -51,8 +52,8 @@ var ResponseDecodeError = class extends Schema_exports.TaggedError()(
 var NativeWorkflow = /* @__PURE__ */ Symbol("apps.Workflow");
 var workflow = (options, run) => ({
   [NativeWorkflow]: {
-    input: decoderOf(options.input),
-    ...options.output === void 0 ? {} : { output: decoderOf(options.output) },
+    input: decoderOf(schemaArgument(options.input, "The workflow input")),
+    ...options.output === void 0 ? {} : { output: decoderOf(schemaArgument(options.output, "The workflow output")) },
     ...options.description === void 0 ? {} : { description: options.description },
     run: (context, input) => Effect_exports.tryPromise({
       // SAFETY: defineApp checks required context; the host supplies the pinned run's capabilities.