apps 0.0.1-beta.4 → 0.0.1-beta.5

package/js/{chunk-6VRYO2BG.js → chunk-LUVSFETN.js}

@@ -1,23 +1,29 @@
 import {
   makeCache
-} from "./chunk-D47C7KG5.js";
+} from "./chunk-CYYBFC2K.js";
 import {
   folderSkillsEffect
-} from "./chunk-FDNTX5QJ.js";
+} from "./chunk-IPI4MFSN.js";
+import {
+  OpenapiError
+} from "./chunk-4M277YTM.js";
 import {
   authorDatabase,
   isApp,
   toEffectApp,
   unavailableStorage
-} from "./chunk-DHUDODG5.js";
+} from "./chunk-C3VAOK5B.js";
+import {
+  parseDatabaseSchema
+} from "./chunk-ZQINWV4W.js";
 import {
   fromPromise,
   nativeOperation,
   toPromise
-} from "./chunk-PYUYJRSK.js";
+} from "./chunk-3XKZDQLM.js";
 import {
   parseProviderError
-} from "./chunk-ZJWDMTE3.js";
+} from "./chunk-G7T27IWB.js";
 import {
   DeclaredProvider,
   DeclaredRequirements,
@@ -60,33 +66,41 @@ import {
   WorkflowValue,
   approvalElicitation,
   defaultWebhookTransportLimits,
+  maxFailureMessageLength,
   maxInputProblems,
   workflowDurationMillis
-} from "./chunk-3M2MEDNL.js";
+} from "./chunk-DQAZTA4I.js";
+import {
+  AppDatabaseError
+} from "./chunk-N7YDVXYJ.js";
 import {
   CacheError
-} from "./chunk-LGIYBDWA.js";
+} from "./chunk-YEPYT6SD.js";
 import {
   AppSkills,
   SkillFile,
   SkillLoadFailed
-} from "./chunk-YEJOQEII.js";
+} from "./chunk-JU7VHODU.js";
 import {
   OpenapiResponseError
-} from "./chunk-SWPD52J7.js";
+} from "./chunk-W4DMKWAB.js";
 import {
   captureTelemetry,
   invocationFetch
-} from "./chunk-ZCAMUXSG.js";
+} from "./chunk-RJDDBDSN.js";
 import {
   decoderOf,
   importedJsonSchema,
   jsonSchemaDecoder
-} from "./chunk-WFSQXYUT.js";
+} from "./chunk-FWQC6I3C.js";
+import {
+  AppStorageError,
+  AppStorageUnavailable
+} from "./chunk-PZB6T6KU.js";
 import {
   JsonObject,
   JsonValue
-} from "./chunk-SATWJKN6.js";
+} from "./chunk-27F7W2LG.js";
 import {
   Cause_exports,
   Clock_exports,
@@ -94,11 +108,12 @@ import {
   Encoding_exports,
   Match_exports,
   Option_exports,
+  Predicate_exports,
   Redacted_exports,
   SchemaIssue_exports,
   Schema_exports,
   Stream_exports
-} from "./chunk-FW5HBOIK.js";
+} from "./chunk-CDL5PM2Q.js";
 
 // src/implementation/elicitation.ts
 var prepareElicitation = (input) => Effect_exports.gen(function* () {
@@ -138,20 +153,121 @@ var makeElicit = (handler, signal) => toPromise(
 // src/contracts/approval.ts
 var ApprovalDecision = Schema_exports.Literals(["approved", "denied", "user-approval"]);
 
+// src/implementation/failure-detail.ts
+var storageMessages = {
+  schema: "The app's database schema is invalid.",
+  schema_changed: "The app's database schema changed during this operation. Retry it.",
+  table: "The operation used a table the app's database schema does not declare.",
+  index: "The operation used an index the table does not declare, or used it incorrectly.",
+  range: "The index range is invalid for the declared index.",
+  value: "A value does not match the table's declared field schema.",
+  readonly: "Queries cannot write. Move writes into a mutation.",
+  cursor: "The pagination cursor is invalid or belongs to a different query.",
+  limit: "The operation exceeded a per-invocation app data limit.",
+  closed: "The database session closed before this operation finished.",
+  storage: "App storage failed to complete the operation.",
+  replay: "A workflow step replayed with different input than its first run."
+};
+var minimumSecretLength = 6;
+var secretValues = (value, found) => {
+  if (typeof value === "string") {
+    if (value.length >= minimumSecretLength) found.add(value);
+  } else if (Array.isArray(value)) for (const item of value) secretValues(item, found);
+  else if (Predicate_exports.isObject(value))
+    for (const item of Object.values(value)) secretValues(item, found);
+  return found;
+};
+var accountFieldSecrets = (accounts) => {
+  const found = /* @__PURE__ */ new Set();
+  if (Predicate_exports.isObject(accounts)) {
+    for (const slot of Object.values(accounts))
+      for (const account of Array.isArray(slot) ? slot : [slot])
+        if (Predicate_exports.hasProperty(account, "fields")) secretValues(account.fields, found);
+  }
+  return [...found].sort((a, b) => b.length - a.length);
+};
+var accountSecrets = (accounts) => accountFieldSecrets(Redacted_exports.value(accounts));
+var boundFailureMessage = (message, secrets) => {
+  let redacted = message;
+  for (const secret of secrets) redacted = redacted.split(secret).join("[redacted]");
+  return redacted.length <= maxFailureMessageLength ? redacted : `${redacted.slice(0, maxFailureMessageLength - 1)}\u2026`;
+};
+var errorName = (error) => (error.name.length > 0 ? error.name : "Error").slice(0, 128);
+var ownMessage = (error) => {
+  const cause = error.cause;
+  const suffix = cause instanceof Error && cause.message.length > 0 ? ` (caused by ${errorName(cause)}: ${cause.message})` : "";
+  return error.message.length > 0 ? `${error.message}${suffix}` : void 0;
+};
+var describeFailure = (error) => error instanceof Error ? `${errorName(error)}: ${ownMessage(error) ?? "(no message)"}` : typeof error === "string" ? error : `A non-Error ${error === null ? "null" : typeof error} value was thrown`;
+var failureDetail = (error, secrets) => {
+  if (Schema_exports.is(AppDatabaseError)(error))
+    return {
+      source: "storage",
+      errorName: "AppDatabaseError",
+      code: error.reason,
+      message: boundFailureMessage(ownMessage(error) ?? storageMessages[error.reason], secrets)
+    };
+  if (Schema_exports.is(AppStorageUnavailable)(error))
+    return {
+      source: "storage",
+      errorName: "AppStorageUnavailable",
+      message: "App storage is not available on this host."
+    };
+  if (Schema_exports.is(AppStorageError)(error))
+    return {
+      source: "storage",
+      errorName: "AppStorageError",
+      message: "App storage failed to complete the operation."
+    };
+  if (Schema_exports.is(OpenapiError)(error))
+    return {
+      source: "service",
+      errorName: "OpenapiError",
+      code: error.reason,
+      message: error.reason === "request" ? error.status === void 0 ? "The API request failed before a response arrived." : `The API responded with HTTP ${error.status}, which its OpenAPI document does not declare as an error with a message.` : error.reason === "invalid_input" ? "The input could not be encoded as a request for this API operation." : "The API's OpenAPI definition for this operation is invalid."
+    };
+  if (error instanceof Error)
+    return {
+      source: "app",
+      errorName: errorName(error),
+      message: boundFailureMessage(
+        ownMessage(error) ?? `${errorName(error)} was thrown without a message.`,
+        secrets
+      )
+    };
+  if (typeof error === "string")
+    return { source: "app", errorName: "string", message: boundFailureMessage(error, secrets) };
+  return {
+    source: "app",
+    errorName: typeof error,
+    message: `A non-Error ${error === null ? "null" : typeof error} value was thrown.`
+  };
+};
+
 // src/implementation/workflow-context.ts
-var workflowSafe = (work) => work.pipe(
+var workflowSafe = (work, secrets) => work.pipe(
   Effect_exports.catchCause((cause) => {
     if (Cause_exports.hasInterrupts(cause)) return Effect_exports.interrupt;
     const error = Cause_exports.squash(cause);
     if (Schema_exports.is(WorkflowFailure)(error)) return Effect_exports.fail(error);
+    const { errorName: errorName2, message } = failureDetail(error, secrets);
     return Effect_exports.fail(
       new WorkflowFailure({
         reason: "execution",
-        retryable: !(error instanceof NonRetryableError)
+        retryable: !(error instanceof NonRetryableError),
+        ...errorName2 === void 0 ? {} : { errorName: errorName2 },
+        ...message === void 0 ? {} : { message }
       })
     );
   })
 );
+var inStep = (step) => (failure) => failure.step === void 0 ? new WorkflowFailure({
+  reason: failure.reason,
+  retryable: failure.retryable,
+  step: step.slice(0, 200),
+  ...failure.errorName === void 0 ? {} : { errorName: failure.errorName },
+  ...failure.message.length === 0 ? {} : { message: failure.message }
+}) : failure;
 var makeWorkflowContext = (execution, definition, fresh, signal) => Effect_exports.gen(function* () {
   const services = yield* Effect_exports.context();
   const counts = /* @__PURE__ */ new Map();
@@ -206,19 +322,27 @@ var makeWorkflowContext = (execution, definition, fresh, signal) => Effect_expor
               Effect_exports.sync(() => new AbortController()),
               (controller2) => Effect_exports.sync(() => controller2.abort())
             );
-            const ctx = yield* fresh(stepId, AbortSignal.any([signal, controller.signal]));
+            const step2 = yield* fresh(stepId, AbortSignal.any([signal, controller.signal]));
             const result = yield* workflowSafe(
-              Effect_exports.tryPromise({ try: () => callback(ctx), catch: (error) => error })
+              Effect_exports.tryPromise({
+                try: () => callback(step2.context),
+                catch: (error) => error
+              }),
+              step2.secrets
             );
             return yield* Schema_exports.decodeUnknownEffect(WorkflowValue)(result).pipe(
               Effect_exports.mapError(
-                () => new WorkflowFailure({ reason: "output", retryable: false })
+                () => new WorkflowFailure({
+                  reason: "output",
+                  retryable: false,
+                  message: "The step returned a value that is not JSON, such as undefined, or is larger than 1 MiB. Return null for no result."
+                })
               )
             );
           })
         ).pipe(Effect_exports.provideContext(services))
       )
-    );
+    ).pipe(Effect_exports.mapError(inStep(name)));
   });
   const operationStep = (kind, name, operation, input, options) => Effect_exports.gen(function* () {
     const target = nativeOperation(operation);
@@ -245,7 +369,7 @@ var makeWorkflowContext = (execution, definition, fresh, signal) => Effect_expor
         parsed,
         execution.invoke({ kind, name: match[0], input: args, stepId, timeout }).pipe(Effect_exports.provideContext(services))
       )
-    );
+    ).pipe(Effect_exports.mapError(inStep(name)));
   });
   const invoke = (effect) => toPromise(() => effect.pipe(Effect_exports.provideContext(services)), signal)();
   const step = {
@@ -530,7 +654,7 @@ function safe2(work, failure) {
     )
   );
 }
-var evaluationSafe = (work) => work.pipe(
+var evaluationSafe = (work, secrets) => work.pipe(
   Effect_exports.catchCause((cause) => {
     if (Cause_exports.hasInterrupts(cause)) return Effect_exports.interrupt;
     const error = Cause_exports.squash(cause);
@@ -538,7 +662,7 @@ var evaluationSafe = (work) => work.pipe(
     const skills = parseSkillLoadFailed(error);
     const mcp = parseMcpError(error);
     return Effect_exports.fail(
-      Option_exports.isSome(provider) ? provider.value : Option_exports.isSome(skills) ? skills.value : Option_exports.isSome(mcp) ? mcp.value : new HostEvaluationFailed()
+      Option_exports.isSome(provider) ? provider.value : Option_exports.isSome(skills) ? skills.value : Option_exports.isSome(mcp) ? mcp.value : new HostEvaluationFailed(failureDetail(error, secrets))
     );
   })
 );
@@ -552,8 +676,21 @@ function jsonSchema(decoder) {
     $schema: "https://json-schema.org/draft/2020-12/schema"
   });
 }
+var declarationInvalid = (summary, cause, secrets = []) => new HostDeclarationInvalid({
+  source: "app",
+  errorName: "HostDeclarationInvalid",
+  message: boundFailureMessage(
+    cause === void 0 ? summary : `${summary}: ${describeFailure(cause)}`,
+    secrets
+  )
+});
+var declarationSafe = (work, summary) => Effect_exports.suspend(work).pipe(
+  Effect_exports.catchCause(
+    (cause) => Cause_exports.hasInterrupts(cause) ? Effect_exports.interrupt : Effect_exports.fail(declarationInvalid(summary, Cause_exports.squash(cause)))
+  )
+);
 function providerDeclaration(provider) {
-  return safe2(
+  return declarationSafe(
     () => Effect_exports.gen(function* () {
       const auth = /* @__PURE__ */ new Map();
       for (const [name, method] of Object.entries(provider.auth)) {
@@ -579,7 +716,7 @@ function providerDeclaration(provider) {
         auth: Object.fromEntries(auth)
       });
     }),
-    new HostDeclarationInvalid()
+    `Account provider "${provider.name}" has an invalid declaration`
   );
 }
 function requirements(slots, database) {
@@ -597,7 +734,11 @@ function requirements(slots, database) {
       accounts: Object.fromEntries(accounts),
       capabilities: { skills: true, toolIndex: true, skillSources: true, scheduledTools: true },
       ...database === void 0 ? {} : { database }
-    }).pipe(Effect_exports.mapError(() => new HostDeclarationInvalid()));
+    }).pipe(
+      Effect_exports.mapError(
+        (cause) => declarationInvalid("The app's account or database declarations are invalid", cause)
+      )
+    );
   });
 }
 function canonical(value) {
@@ -656,14 +797,29 @@ function bindAccounts(slots, declarations, context) {
 function dispatch(app, request, context, signal) {
   return Effect_exports.scoped(
     Effect_exports.gen(function* () {
-      if (!isApp(app)) return yield* Effect_exports.fail(new HostDeclarationInvalid());
+      if (!isApp(app))
+        return yield* Effect_exports.fail(
+          declarationInvalid("The app module's default export is not an app created by defineApp")
+        );
       const native = toEffectApp(app);
+      const secrets = accountSecrets(context.accounts);
+      const storageFailure = (error) => Effect_exports.fail(new HostOperationFailed(failureDetail(error, secrets)));
       const declared = yield* requirements(native.accounts, native.database?.schema);
-      if (request.operation === "requirements")
+      if (request.operation === "requirements") {
+        if (native.database !== void 0)
+          yield* parseDatabaseSchema(native.database.schema).pipe(
+            Effect_exports.catchTag(
+              "AppDatabaseError",
+              (cause) => Effect_exports.fail(
+                declarationInvalid("The app's account or database declarations are invalid", cause)
+              )
+            )
+          );
         return yield* safe2(
           () => Schema_exports.decodeUnknownEffect(JsonValue)(declared),
           new HostDeclarationInvalid()
         );
+      }
       const lifetime = yield* Effect_exports.acquireRelease(
         Effect_exports.sync(() => new AbortController()),
         (controller) => Effect_exports.sync(() => controller.abort())
@@ -747,7 +903,7 @@ function dispatch(app, request, context, signal) {
         fetch: yield* invocationFetch(invocationSignal),
         elicit: makeElicit(delivery, invocationSignal)
       };
-      const definition = yield* evaluationSafe(native.evaluate(bound)).pipe(
+      const definition = yield* evaluationSafe(native.evaluate(bound), secrets).pipe(
         Effect_exports.withSpan("app.evaluate")
       );
       if (request.operation === "skills") {
@@ -756,7 +912,7 @@ function dispatch(app, request, context, signal) {
         ));
         const source2 = definition.dynamicSkills;
         const before = cacheCommands;
-        const dynamic = source2 === void 0 ? [] : yield* evaluationSafe(Effect_exports.suspend(source2.list)).pipe(
+        const dynamic = source2 === void 0 ? [] : yield* evaluationSafe(Effect_exports.suspend(source2.list), secrets).pipe(
           Effect_exports.withSpan("app.skills.load")
         );
         const cached = source2 !== void 0 && cacheCommands > before;
@@ -807,31 +963,43 @@ function dispatch(app, request, context, signal) {
               new WorkflowFailure({ reason: "credentials", retryable: false })
             );
             return {
-              ...accounts,
-              cache: authorCache(
-                context.cache ?? unavailableCache,
-                Redacted_exports.value(current.accounts),
-                signal2
-              ),
-              files,
-              fetch: yield* invocationFetch(signal2),
-              signal: signal2,
-              runId: execution.runId,
-              stepId,
-              idempotencyKey: stepId
+              context: {
+                ...accounts,
+                cache: authorCache(
+                  context.cache ?? unavailableCache,
+                  Redacted_exports.value(current.accounts),
+                  signal2
+                ),
+                files,
+                fetch: yield* invocationFetch(signal2),
+                signal: signal2,
+                runId: execution.runId,
+                stepId,
+                idempotencyKey: stepId
+              },
+              // The resolved values, not the app's decoded fields, which may be `Redacted`.
+              secrets: accountSecrets(current.accounts)
             };
           }),
           invocationSignal
         );
-        const output = yield* workflowSafe(entry.run(workflowContext, input2));
+        const output = yield* workflowSafe(entry.run(workflowContext, input2), secrets);
         const outputSchema = entry.output;
         const decoded = outputSchema === void 0 ? output : yield* safe2(
           () => Schema_exports.decodeUnknownEffect(outputSchema)(output),
-          new WorkflowFailure({ reason: "output", retryable: false })
+          new WorkflowFailure({
+            reason: "output",
+            retryable: false,
+            message: "The workflow's result does not match its declared output schema."
+          })
         );
         return yield* safe2(
           () => Schema_exports.decodeUnknownEffect(WorkflowValue)(decoded),
-          new WorkflowFailure({ reason: "output", retryable: false })
+          new WorkflowFailure({
+            reason: "output",
+            retryable: false,
+            message: "The workflow returned a value that is not JSON, such as undefined, or is larger than 1 MiB. Return null for no result."
+          })
         );
       }
       if (request.operation === "inspect") {
@@ -886,7 +1054,7 @@ function dispatch(app, request, context, signal) {
             }
             return dynamic.list();
           };
-          const discovered = yield* evaluationSafe(discover()).pipe(
+          const discovered = yield* evaluationSafe(discover(), secrets).pipe(
             Effect_exports.flatMap(
               (value) => safe2(
                 () => summary ? Schema_exports.decodeUnknownEffect(Schema_exports.Array(HostedToolSummary))(value) : Schema_exports.decodeUnknownEffect(Schema_exports.Array(HostedTool))(value),
@@ -932,9 +1100,10 @@ function dispatch(app, request, context, signal) {
         const storage2 = context.storage ?? unavailableStorage;
         return yield* storage2.mutate(native.database.schema, executeWebhook).pipe(
           Effect_exports.catchTags({
-            AppDatabaseError: () => Effect_exports.fail(new HostOperationFailed()),
-            AppStorageUnavailable: () => Effect_exports.fail(new HostOperationFailed()),
-            AppStorageError: () => Effect_exports.fail(new HostOperationFailed())
+            AppDatabaseError: storageFailure,
+            DatabaseLimitExceeded: (error) => Effect_exports.fail(error),
+            AppStorageUnavailable: storageFailure,
+            AppStorageError: storageFailure
           })
         );
       }
@@ -945,7 +1114,7 @@ function dispatch(app, request, context, signal) {
       const catalog = kind === "query" ? definition.queries : definition.mutations;
       const declaredTool = catalog !== void 0 && Object.hasOwn(catalog, name) ? catalog[name] : void 0;
       const source = definition.dynamicTools;
-      const resolvedTool = source === void 0 || declaredTool !== void 0 ? void 0 : yield* evaluationSafe(source.resolve(toolName));
+      const resolvedTool = source === void 0 || declaredTool !== void 0 ? void 0 : yield* evaluationSafe(source.resolve(toolName), secrets);
       const tool = declaredTool ?? resolvedTool;
       if (tool !== void 0 && tool.kind !== (kind === "query" ? "query" : "mutation"))
         return yield* new HostDeclarationInvalid();
@@ -1039,7 +1208,7 @@ function dispatch(app, request, context, signal) {
                 status: response.value.status,
                 message: response.value.message,
                 ...response.value.recovery === void 0 ? {} : { recovery: response.value.recovery }
-              }) : Option_exports.isSome(failure) ? failure.value : new HostOperationFailed()
+              }) : Option_exports.isSome(failure) ? failure.value : new HostOperationFailed(failureDetail(error, secrets))
             );
           }),
           Effect_exports.withSpan("app.operation.execute", {
@@ -1070,9 +1239,10 @@ function dispatch(app, request, context, signal) {
         )
       ).pipe(
         Effect_exports.catchTags({
-          AppDatabaseError: () => Effect_exports.fail(new HostOperationFailed()),
-          AppStorageUnavailable: () => Effect_exports.fail(new HostOperationFailed()),
-          AppStorageError: () => Effect_exports.fail(new HostOperationFailed())
+          AppDatabaseError: storageFailure,
+          DatabaseLimitExceeded: (error) => Effect_exports.fail(error),
+          AppStorageUnavailable: storageFailure,
+          AppStorageError: storageFailure
         })
       );
     })
@@ -1108,6 +1278,8 @@ var errorStatus = Match_exports.type().pipe(
     HostToolApprovalRequired: () => 409,
     HostToolPolicyFailed: () => 500,
     HostOperationFailed: () => 500,
+    DatabaseLimitExceeded: () => 422,
+    DatabaseFieldReserved: () => 422,
     HostDeclarationInvalid: () => 500,
     HostEvaluationFailed: () => 500,
     HostOutputInvalid: () => 500,
@@ -1153,12 +1325,17 @@ var createAppHandler = (app) => (request, context) => Effect_exports.gen(functio
   ),
   Effect_exports.catchCause(
     (cause) => Cause_exports.hasInterrupts(cause) ? Effect_exports.interrupt : Effect_exports.logError(cause).pipe(
-      Effect_exports.as(
-        Response.json(
-          { ok: false, error: { _tag: "HostDeclarationInvalid" } },
-          { status: 500 }
+      Effect_exports.andThen(
+        Schema_exports.encodeEffect(HostError)(
+          declarationInvalid(
+            "The app failed while it was loaded",
+            Cause_exports.squash(cause),
+            accountSecrets(context.accounts)
+          )
         )
-      )
+      ),
+      Effect_exports.map((error) => Response.json({ ok: false, error }, { status: 500 })),
+      Effect_exports.orDie
     )
   )
 );

package/js/{chunk-EVJUVWN2.js → chunk-M3B3DE4K.js}

@@ -3,7 +3,7 @@ import {
   invalidate,
   layer,
   mutation
-} from "./chunk-M6ZRRIBI.js";
+} from "./chunk-PJJ24GU7.js";
 import {
   Boolean,
   Cause,
@@ -158,7 +158,7 @@ import {
   void_2,
   whileLoop,
   zipRight
-} from "./chunk-FW5HBOIK.js";
+} from "./chunk-CDL5PM2Q.js";
 import {
   __export
 } from "./chunk-CZ7CSFO4.js";

package/js/{chunk-BMOIAIVR.js → chunk-N7YDVXYJ.js}

@@ -1,6 +1,6 @@
 import {
   Schema_exports
-} from "./chunk-FW5HBOIK.js";
+} from "./chunk-CDL5PM2Q.js";
 
 // ../app-data/src/contracts/database.ts
 var DataName = Schema_exports.String.check(
@@ -113,6 +113,51 @@ var defaultDatabaseLimits = {
   valueBytes: 64 * 1024,
   indexBytes: 2048
 };
+var DatabaseLimit = Schema_exports.Literals([
+  "scanCalls",
+  "directGets",
+  "rowsRead",
+  "rowsReturned",
+  "pageSize",
+  "bytesRead",
+  "writes",
+  "valueBytes"
+]);
+var count = (value) => value.toLocaleString("en-US");
+var limitMessages = {
+  scanCalls: (maximum, requested) => `This invocation made ${count(requested)} index queries; the limit is ${count(maximum)}. Each first(), take(), collect(), count() or paginate() call on withIndex(...) counts once. Read related rows with one take() or paginate() over a shared index prefix instead of one first() per item, use get(id) for known IDs, or split the work across workflow steps.`,
+  directGets: (maximum, requested) => `This invocation made ${count(requested)} get(id) calls, including those made by update and delete; the limit is ${count(maximum)}. Split the work across workflow steps or mutations.`,
+  rowsRead: (maximum, requested) => `This invocation scanned ${count(requested)} rows; the limit is ${count(maximum)}. Narrow the index range, or page with paginate() across calls or workflow steps.`,
+  rowsReturned: (maximum, requested) => `This invocation returned ${count(requested)} rows; the limit is ${count(maximum)}. collect() fails rather than truncating. Page with paginate() across calls or workflow steps.`,
+  pageSize: (maximum, requested) => `One call asked for ${count(requested)} rows; take(n) and paginate({ numItems }) accept at most ${count(maximum)}. Page with paginate() across calls or workflow steps.`,
+  bytesRead: (maximum, requested) => `This invocation read ${count(requested)} bytes; the limit is ${count(maximum)}. Read fewer or smaller rows per call, or page with paginate() across calls or workflow steps.`,
+  writes: (maximum, requested) => `This mutation made ${count(requested)} writes; the limit is ${count(maximum)}. Split large ingests into batches, one batch per mutation or workflow step.`,
+  valueBytes: (maximum, requested) => `A row encodes to ${count(requested)} bytes; each row may use at most ${count(maximum)}. Store large content outside the row or split it across rows.`
+};
+var DatabaseLimitExceeded = class extends Schema_exports.TaggedError()(
+  "DatabaseLimitExceeded",
+  {
+    limit: DatabaseLimit,
+    maximum: Schema_exports.Int,
+    requested: Schema_exports.Int
+  }
+) {
+  get message() {
+    return limitMessages[this.limit](this.maximum, this.requested);
+  }
+};
+var reservedFieldNames = ["id", "createdAt", "updatedAt"];
+var DatabaseFieldReserved = class extends Schema_exports.TaggedError()(
+  "DatabaseFieldReserved",
+  {
+    table: Schema_exports.String,
+    field: Schema_exports.Literals(reservedFieldNames)
+  }
+) {
+  get message() {
+    return `Table "${this.table}" declares "${this.field}", which is reserved: the host adds id, createdAt and updatedAt to every row. Rename the field, or use the row's own ${this.field}.`;
+  }
+};
 var DatabaseRuntimeLimits = Schema_exports.Struct({
   maxCursorChars: Schema_exports.Int.check(Schema_exports.isGreaterThan(0)),
   connectionCacheCapacity: Schema_exports.Int.check(Schema_exports.isGreaterThan(0)),
@@ -134,5 +179,8 @@ export {
   AppDatabaseError,
   DatabaseLimits,
   defaultDatabaseLimits,
+  DatabaseLimitExceeded,
+  reservedFieldNames,
+  DatabaseFieldReserved,
   defaultDatabaseRuntimeLimits
 };

package/js/{chunk-M6ZRRIBI.js → chunk-PJJ24GU7.js}

@@ -58,7 +58,7 @@ import {
   useSpan,
   void_2 as void_,
   withFiber
-} from "./chunk-FW5HBOIK.js";
+} from "./chunk-CDL5PM2Q.js";
 
 // ../../node_modules/.bun/effect@https+++pkg.pr.new+Effect-TS+effect+effect@c7d1ffff31a3e2ae0b0b+a654a55b752bdb24/node_modules/effect/dist/unstable/reactivity/Reactivity.js
 var TypeId = "~effect/reactivity/Reactivity";

package/js/{chunk-FZJOYIZO.js → chunk-PZB6T6KU.js}

@@ -1,6 +1,6 @@
 import {
   Schema_exports
-} from "./chunk-FW5HBOIK.js";
+} from "./chunk-CDL5PM2Q.js";
 
 // src/contracts/storage.ts
 var StorageName = Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(200));

package/js/{chunk-ZCAMUXSG.js → chunk-RJDDBDSN.js}

@@ -1,6 +1,6 @@
 import {
   FetchHttpClient_exports
-} from "./chunk-HDJH3RPR.js";
+} from "./chunk-57RKNWL2.js";
 import {
   HttpBody_exports,
   HttpClient,
@@ -18,7 +18,7 @@ import {
   setBody,
   transformResponse,
   uint8Array
-} from "./chunk-QKHR7BMF.js";
+} from "./chunk-UK573G7W.js";
 import {
   Array as Array2,
   Boolean2 as Boolean,
@@ -125,7 +125,7 @@ import {
   withDefault2 as withDefault,
   withTracerEnabled,
   zero
-} from "./chunk-FW5HBOIK.js";
+} from "./chunk-CDL5PM2Q.js";
 import {
   __export
 } from "./chunk-CZ7CSFO4.js";

package/js/{chunk-W7D7WVSY.js → chunk-SB3V4YVR.js}

@@ -1,9 +1,9 @@
 import {
   AccountId
-} from "./chunk-SATWJKN6.js";
+} from "./chunk-27F7W2LG.js";
 import {
   Schema_exports
-} from "./chunk-FW5HBOIK.js";
+} from "./chunk-CDL5PM2Q.js";
 
 // src/contracts/provider-error.ts
 var ProviderError = class extends Schema_exports.TaggedError()("ProviderError", {

package/js/{chunk-Z5NMEGJN.js → chunk-TDNYXSIX.js}

@@ -1,6 +1,6 @@
 import {
   operationDeclaration
-} from "./chunk-PYUYJRSK.js";
+} from "./chunk-3XKZDQLM.js";
 
 // src/implementation/protocol-operations.ts
 var protocolOperations = (operations, kinds = {}) => {