apps 0.0.1-beta.33 → 0.0.1-beta.35

package/js/{chunk-TEV5IMOM.js → chunk-5CQMUXW7.js}

@@ -1,11 +1,11 @@
 import {
   fixedRouter
-} from "./chunk-2SRLJHPM.js";
+} from "./chunk-YYK6GEMC.js";
 import {
   nativeOperation,
   operationDeclaration,
   routerDeclaration
-} from "./chunk-75JKK3ZE.js";
+} from "./chunk-VBVOPW4U.js";
 
 // src/implementation/protocol-operations.ts
 var protocolOperations = (operations, kinds = {}) => {

package/js/{chunk-N72RKJ5E.js → chunk-5KNA2Z5I.js}

@@ -2,7 +2,7 @@ import {
   DatabaseFieldReserved,
   DatabaseLimitExceeded,
   DatabaseSchema
-} from "./chunk-UMCMZFXW.js";
+} from "./chunk-73AV3JVU.js";
 import {
   CacheCommand,
   CacheReply,
@@ -13,18 +13,18 @@ import {
   FailureSource,
   ProviderError,
   UpstreamError
-} from "./chunk-5DLG2FVN.js";
+} from "./chunk-BI6R577B.js";
 import {
   AppSkillName,
   AppSkills,
   SkillLoadFailed
-} from "./chunk-HW3DPBZR.js";
+} from "./chunk-I7CNZ4CM.js";
 import {
   AccountId,
   HttpUrl,
   JsonObject as JsonObject2,
   JsonValue
-} from "./chunk-FBBXFFFJ.js";
+} from "./chunk-BI45HZWM.js";
 import {
   Any,
   ArraySchema,
@@ -60,13 +60,13 @@ import {
   declare,
   decode,
   decodeTo,
-  empty2 as empty,
+  empty,
   flatMap,
   fromUndefinedOr,
   isBetween,
   isSchema,
   isStream,
-  make6 as make,
+  make4 as make,
   merge,
   optional,
   optionalKey,
@@ -75,10 +75,11 @@ import {
   symbol3 as symbol,
   sync2 as sync,
   tag,
+  toType,
   transformOptional,
   withConstructorDefault,
   withDefault
-} from "./chunk-EXGKN554.js";
+} from "./chunk-IJQ5LE74.js";
 
 // src/contracts/router.ts
 var reservedRouterKeys = /* @__PURE__ */ new Set([
@@ -226,88 +227,6 @@ var defaultOpenapiErrorLimits = OpenapiErrorLimits.make({
   readTimeoutMs: 2e3
 });
 
-// src/contracts/network.ts
-var NetworkRefusal = Schema_exports.Union([
-  Schema_exports.Struct({ reason: Schema_exports.Literal("private_address") }),
-  Schema_exports.Struct({
-    reason: Schema_exports.Literal("credential_host"),
-    /** The provider of the credential handle the request carried. */
-    provider: Schema_exports.String,
-    /** The hosts that provider's credentials may reach; empty when it declares none. */
-    allowedHosts: Schema_exports.Array(Schema_exports.String)
-  }),
-  Schema_exports.Struct({ reason: Schema_exports.Literal("credential_app") }),
-  Schema_exports.Struct({
-    reason: Schema_exports.Literal("credential_expired"),
-    /** The provider of the expired credential handle. */
-    provider: Schema_exports.String
-  })
-]);
-var NetworkRefused = class extends Schema_exports.TaggedError()("NetworkRefused", {
-  /** The refused destination, with its port when the URL names one. */
-  host: Schema_exports.String,
-  refusal: NetworkRefusal
-}) {
-  get message() {
-    const refusal = this.refusal;
-    switch (refusal.reason) {
-      case "private_address":
-        return `Executor refused a request to ${this.host}: apps on this instance can reach only public addresses, and ${this.host} is a private, loopback or internal address. The request was not sent.`;
-      case "credential_host":
-        return refusal.allowedHosts.length === 0 ? `Executor refused this request: ${refusal.provider} credentials cannot be sent to ${this.host}: the provider declares no hosts.` : `Executor refused this request: ${refusal.provider} credentials cannot be sent to ${this.host}. The provider allows: ${refusal.allowedHosts.join(", ")}.`;
-      case "credential_app":
-        return "Executor refused this request: it carries a credential handle that is not valid for this app. Use the account fields this invocation received.";
-      case "credential_expired":
-        return `Executor refused this request: it carries an expired ${refusal.provider} credential handle. Use the account fields this invocation received.`;
-    }
-  }
-};
-var networkRefusalStatus = 421;
-var networkRefusalHeader = "x-executor-refused";
-var NetworkRefusedHeader = Schema_exports.StringFromUriComponent.pipe(
-  Schema_exports.decodeTo(Schema_exports.fromJsonString(NetworkRefused))
-);
-var encodeRefusal = Schema_exports.encodeSync(NetworkRefused);
-var encodeRefusalHeader = Schema_exports.encodeSync(NetworkRefusedHeader);
-var networkRefusalResponse = (refused) => new Response(JSON.stringify({ ...encodeRefusal(refused), message: refused.message }), {
-  status: networkRefusalStatus,
-  statusText: "Refused by Executor",
-  headers: {
-    "content-type": "application/json; charset=utf-8",
-    [networkRefusalHeader]: encodeRefusalHeader(refused)
-  }
-});
-var RestrictedFetchOption = Schema_exports.Literals(["redirect", "cache", "integrity"]);
-var supportedFetchOptions = {
-  redirect: ["follow", "manual"],
-  cache: ["no-store", "no-cache"],
-  integrity: [""]
-};
-var FetchOptionUnsupported = class extends Schema_exports.TaggedError()(
-  "FetchOptionUnsupported",
-  {
-    option: RestrictedFetchOption,
-    value: Schema_exports.String,
-    supported: Schema_exports.Array(Schema_exports.String)
-  }
-) {
-  get message() {
-    const supported = this.supported.map((value) => JSON.stringify(value)).join(" or ");
-    return `fetch option ${this.option}: ${JSON.stringify(this.value)} is not supported by Executor's app runtime. Use ${supported}, or omit ${this.option}.${this.advice}`;
-  }
-  /** What to do instead, when the standard value has an equivalent the runtime supports. */
-  get advice() {
-    switch (this.option) {
-      case "redirect":
-        return this.value === "error" ? ` To reject redirects, send redirect: "manual" and treat a 3xx response as the error.` : "";
-      case "cache":
-        return "";
-      case "integrity":
-        return " To check a digest, read the body and hash it with crypto.subtle.digest.";
-    }
-  }
-};
-
 // src/contracts/workflows.ts
 var WorkflowRunId = Schema_exports.NonEmptyString.pipe(Schema_exports.brand("wfr"));
 var WorkflowName = Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(200));
@@ -478,7 +397,7 @@ var WorkflowControlCommand = Schema_exports.Union([
   Schema_exports.Struct({ operation: Schema_exports.Literal("terminate"), run: WorkflowRunId })
 ]);
 
-// ../../node_modules/.bun/effect@https+++pkg.pr.new+Effect-TS+effect+effect@c7d1ffff31a3e2ae0b0b+a654a55b752bdb24/node_modules/effect/dist/unstable/rpc/RpcSchema.js
+// ../../node_modules/.bun/effect@4.0.1/node_modules/effect/dist/rpc/RpcSchema.js
 var StreamSchemaTypeId = "~effect/rpc/RpcSchema/StreamSchema";
 var schema = /* @__PURE__ */ declare(isStream);
 function Stream(success, error) {
@@ -489,7 +408,7 @@ function Stream(success, error) {
   });
 }
 
-// ../../node_modules/.bun/effect@https+++pkg.pr.new+Effect-TS+effect+effect@c7d1ffff31a3e2ae0b0b+a654a55b752bdb24/node_modules/effect/dist/unstable/rpc/Rpc.js
+// ../../node_modules/.bun/effect@4.0.1/node_modules/effect/dist/rpc/Rpc.js
 var TypeId = "~effect/rpc/Rpc";
 var Proto = {
   [TypeId]: TypeId,
@@ -607,7 +526,7 @@ var make2 = (tag2, options) => {
   });
 };
 
-// ../../node_modules/.bun/effect@https+++pkg.pr.new+Effect-TS+effect+effect@c7d1ffff31a3e2ae0b0b+a654a55b752bdb24/node_modules/effect/dist/unstable/ai/McpSchema.js
+// ../../node_modules/.bun/effect@4.0.1/node_modules/effect/dist/ai/McpSchema.js
 var optionalWithDefault = (schema2, defaultValue) => {
   const effect = sync(defaultValue);
   return optionalKey(schema2).pipe(decode({
@@ -615,7 +534,7 @@ var optionalWithDefault = (schema2, defaultValue) => {
     encode: passthrough()
   }), withConstructorDefault(effect));
 };
-var optional2 = (schema2) => optionalKey(schema2).pipe(decodeTo(optional(schema2), {
+var optional2 = (schema2) => optionalKey(schema2).pipe(decodeTo(toType(optional(schema2)), {
   decode: passthrough(),
   encode: transformOptional(flatMap(fromUndefinedOr))
 }));
@@ -1618,6 +1537,7 @@ var CompleteResult = class _CompleteResult extends (/* @__PURE__ */ Opaque()(/*
   /**
    * Empty completion result used when a completion request has no values.
    *
+   * @stability unstable
    * @since 4.0.0
    */
   static empty = /* @__PURE__ */ _CompleteResult.make({
@@ -3017,15 +2937,6 @@ var ToolResultObservation = Context_exports.Reference(
 );
 
 export {
-  NetworkRefusal,
-  NetworkRefused,
-  networkRefusalStatus,
-  networkRefusalHeader,
-  NetworkRefusedHeader,
-  networkRefusalResponse,
-  RestrictedFetchOption,
-  supportedFetchOptions,
-  FetchOptionUnsupported,
   SecretsMethod,
   OAuthClientAuth,
   OAuthSecretClientAuth,

package/js/{chunk-UMCMZFXW.js → chunk-73AV3JVU.js}

@@ -1,6 +1,6 @@
 import {
   Schema_exports
-} from "./chunk-EXGKN554.js";
+} from "./chunk-IJQ5LE74.js";
 
 // ../app-data/src/contracts/database.ts
 var DataName = Schema_exports.String.check(