apps 0.0.1-beta.54 → 0.0.1-beta.55

package/js/{chunk-JY56GVSV.js → chunk-TLWLJ7PD.js}

@@ -1,11 +1,9 @@
 import {
   CacheCommand,
   CacheReply,
-  FailureCode,
   FailureDetail,
   FailureMessage,
   FailureName,
-  FailureSource,
   ProviderError,
   UpstreamError
 } from "./chunk-MWKHKOTL.js";
@@ -2188,6 +2186,16 @@ var ManyAccounts = class extends Data_exports.TaggedClass("many") {
 var frameworkProtocol = 11;
 
 // src/contracts/protocols/oauth.ts
+var HttpUrl2 = Schema_exports.String.check(
+  Schema_exports.makeFilter((value) => {
+    try {
+      const url = new URL(value);
+      return url.protocol === "https:" || url.protocol === "http:";
+    } catch {
+      return false;
+    }
+  })
+);
 var OAuthClientAuth2 = Schema_exports.Literals([
   "none",
   "client_secret_post",
@@ -2263,12 +2271,12 @@ var oauthOptions2 = {
   authorizationParams: Schema_exports.optionalKey(OAuthAuthorizationParams2),
   tokenEndpointAuthMethod: Schema_exports.optionalKey(OAuthClientAuth2),
   /** Omitted uses discovery; null explicitly suppresses the resource parameter. */
-  resource: Schema_exports.optionalKey(Schema_exports.NullOr(HttpUrl))
+  resource: Schema_exports.optionalKey(Schema_exports.NullOr(HttpUrl2))
 };
 var OAuth2Config2 = Schema_exports.Union([
   Schema_exports.Struct({
     ...oauthOptions2,
-    discover: HttpUrl,
+    discover: HttpUrl2,
     authorizationUrl: Schema_exports.optionalKey(Schema_exports.Never),
     tokenUrl: Schema_exports.optionalKey(Schema_exports.Never),
     revocationUrl: Schema_exports.optionalKey(Schema_exports.Never),
@@ -2277,47 +2285,161 @@ var OAuth2Config2 = Schema_exports.Union([
   Schema_exports.Struct({
     ...oauthOptions2,
     /** Its query is kept; it cannot set protocol parameters or repeat `authorizationParams`. */
-    authorizationUrl: HttpUrl,
-    tokenUrl: HttpUrl,
-    revocationUrl: Schema_exports.optionalKey(HttpUrl),
+    authorizationUrl: HttpUrl2,
+    tokenUrl: HttpUrl2,
+    revocationUrl: Schema_exports.optionalKey(HttpUrl2),
     scopes: Schema_exports.Array(Schema_exports.String),
     /** RFC 8414 issuer identifier. Declared issuers are checked against the callback's `iss`. */
-    issuer: Schema_exports.optionalKey(HttpUrl),
+    issuer: Schema_exports.optionalKey(HttpUrl2),
     discover: Schema_exports.optionalKey(Schema_exports.Never)
   }).check(declaredAuthorizationQuery2),
   Schema_exports.Struct({
     grant: Schema_exports.Literal("client_credentials"),
-    discover: HttpUrl,
+    discover: HttpUrl2,
     authorizationUrl: Schema_exports.optionalKey(Schema_exports.Never),
     tokenUrl: Schema_exports.optionalKey(Schema_exports.Never),
     revocationUrl: Schema_exports.optionalKey(Schema_exports.Never),
     scopes: Schema_exports.optionalKey(Schema_exports.Array(Schema_exports.String)),
     ...tokenRequestOptions2,
     tokenEndpointAuthMethod: OAuthSecretClientAuth2,
-    resource: Schema_exports.optionalKey(Schema_exports.NullOr(HttpUrl))
+    resource: Schema_exports.optionalKey(Schema_exports.NullOr(HttpUrl2))
   }),
   Schema_exports.Struct({
     grant: Schema_exports.Literal("client_credentials"),
-    tokenUrl: HttpUrl,
-    revocationUrl: Schema_exports.optionalKey(HttpUrl),
+    tokenUrl: HttpUrl2,
+    revocationUrl: Schema_exports.optionalKey(HttpUrl2),
     scopes: Schema_exports.Array(Schema_exports.String),
     ...tokenRequestOptions2,
     tokenEndpointAuthMethod: OAuthSecretClientAuth2,
-    resource: Schema_exports.optionalKey(Schema_exports.NullOr(HttpUrl)),
+    resource: Schema_exports.optionalKey(Schema_exports.NullOr(HttpUrl2)),
     authorizationUrl: Schema_exports.optionalKey(Schema_exports.Never),
     discover: Schema_exports.optionalKey(Schema_exports.Never)
   })
 ]);
 
-// src/contracts/schedules.ts
-var minimumIntervalMilliseconds = 6e4;
-var count2 = Schema_exports.Int.check(Schema_exports.isGreaterThan(0));
-var absent = Schema_exports.optionalKey(Schema_exports.Never);
-var Interval = Schema_exports.Union([
-  Schema_exports.Struct({ seconds: count2, minutes: absent, hours: absent }),
-  Schema_exports.Struct({ seconds: absent, minutes: count2, hours: absent }),
-  Schema_exports.Struct({ seconds: absent, minutes: absent, hours: count2 })
+// src/contracts/protocols/1.ts
+var JsonValue2 = Schema_exports.Json;
+var JsonObject3 = Schema_exports.Record(Schema_exports.String, JsonValue2);
+var AccountId2 = Schema_exports.String.pipe(
+  Schema_exports.check(Schema_exports.isStartingWith("acc_"), Schema_exports.isMinLength(5)),
+  Schema_exports.brand("acc")
+);
+var CacheError = class extends Schema_exports.TaggedError()("CacheError", {
+  reason: Schema_exports.Literals(["unavailable", "storage", "invalid", "capacity", "timeout"])
+}) {
+};
+var Key = Schema_exports.String.check(Schema_exports.isPattern(/^[a-f0-9]{64}$/));
+var Time = Schema_exports.Finite.check(Schema_exports.isGreaterThanOrEqualTo(0));
+var CacheEntry = Schema_exports.Struct({
+  value: Schema_exports.Json,
+  version: Schema_exports.String,
+  freshUntil: Time,
+  staleUntil: Time
+});
+var CacheCommand2 = Schema_exports.Union([
+  Schema_exports.Struct({ operation: Schema_exports.Literal("read"), keys: Schema_exports.Array(Key) }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("acquire"),
+    key: Key,
+    /** Claim even a fresh entry, as an explicit refresh does. */
+    refresh: Schema_exports.Boolean,
+    /** Claim only while the entry still has this version. Absent accepts the current one. */
+    version: Schema_exports.optionalKey(Schema_exports.NullOr(Schema_exports.String))
+  }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("claim"),
+    key: Key,
+    version: Schema_exports.NullOr(Schema_exports.String)
+  }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("publish"),
+    key: Key,
+    lease: Schema_exports.String,
+    entry: CacheEntry
+  }),
+  Schema_exports.Struct({ operation: Schema_exports.Literal("release"), key: Key, lease: Schema_exports.String }),
+  /** Extend a lease its holder still owns. Replies false once the lease lapsed or was replaced. */
+  Schema_exports.Struct({ operation: Schema_exports.Literal("renew"), key: Key, lease: Schema_exports.String }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("write"),
+    entries: Schema_exports.Array(Schema_exports.Struct({ key: Key, entry: CacheEntry }))
+  }),
+  Schema_exports.Struct({ operation: Schema_exports.Literal("invalidate"), key: Key })
+]);
+var CacheReply2 = Schema_exports.Union([
+  Schema_exports.Struct({ ok: Schema_exports.Literal(true), value: Schema_exports.Json }),
+  Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: CacheError })
+]);
+var DataName2 = Schema_exports.String.check(
+  Schema_exports.makeFilter((value) => /^[A-Za-z][A-Za-z0-9_]*$/.test(value) && value.length <= 128)
+);
+var Scalar2 = Schema_exports.Union([Schema_exports.String, Schema_exports.Finite, Schema_exports.Boolean]);
+var Field2 = Schema_exports.Struct({
+  kind: Schema_exports.Literals(["string", "number", "boolean", "id", "userId"]),
+  optional: Schema_exports.optional(Schema_exports.Boolean),
+  default: Schema_exports.optional(Scalar2),
+  references: Schema_exports.optional(DataName2)
+});
+var Index2 = Schema_exports.Struct({ name: DataName2, fields: Schema_exports.NonEmptyArray(DataName2) });
+var Table2 = Schema_exports.Struct({
+  fields: Schema_exports.Record(DataName2, Field2),
+  indexes: Schema_exports.Array(Index2)
+});
+var DatabaseSchema2 = Schema_exports.Record(DataName2, Table2);
+var maxApiErrorInstructionsLength2 = 4096;
+var ApiErrorRecovery2 = Schema_exports.Struct({
+  action: Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(1024)),
+  instructions: Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(maxApiErrorInstructionsLength2))
+});
+var maxApiErrorMessageLength2 = 4096;
+var ApiErrorResponse2 = Schema_exports.Struct({
+  code: Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(128)),
+  status: Schema_exports.Int.check(Schema_exports.isBetween({ minimum: 400, maximum: 599 })),
+  message: Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(maxApiErrorMessageLength2)),
+  recovery: Schema_exports.optionalKey(ApiErrorRecovery2)
+});
+var OpenapiResponseError2 = class extends Schema_exports.TaggedError()(
+  "OpenapiResponseError",
+  ApiErrorResponse2.fields
+) {
+};
+var FormElicitation2 = Schema_exports.Struct({
+  ...ElicitRequestFormParams.fields,
+  mode: Schema_exports.Literal("form"),
+  requestedSchema: Schema_exports.toEncoded(ElicitRequestFormParams.fields.requestedSchema),
+  _meta: Schema_exports.optional(JsonObject3)
+});
+var ElicitationResponse2 = Schema_exports.Union([
+  Schema_exports.Struct({ ...ElicitAcceptResult.fields, _meta: Schema_exports.optional(JsonObject3) }),
+  Schema_exports.Struct({ ...ElicitDeclineResult.fields, _meta: Schema_exports.optional(JsonObject3) })
+]);
+var ElicitationFailed2 = class extends Schema_exports.TaggedError()(
+  "ElicitationFailed",
+  {
+    reason: Schema_exports.Literals([
+      "unavailable",
+      "transaction",
+      "invalid-request",
+      "invalid-response",
+      "transport",
+      "expired",
+      "forbidden"
+    ])
+  }
+) {
+};
+var ElicitationReply2 = Schema_exports.Union([
+  Schema_exports.Struct({ ok: Schema_exports.Literal(true), response: ElicitationResponse2 }),
+  Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: ElicitationFailed2 })
 ]);
+var ApprovalElicitation2 = Schema_exports.Struct({
+  ...FormElicitation2.fields,
+  requestedSchema: Schema_exports.Struct({
+    type: Schema_exports.Literal("object"),
+    properties: Schema_exports.Record(Schema_exports.String, Schema_exports.Never)
+  })
+});
+var minimumIntervalMilliseconds = 6e4;
 var CalendarSchedule = Schema_exports.Struct({
   expression: Schema_exports.NonEmptyString,
   timezone: Schema_exports.NonEmptyString
@@ -2341,14 +2463,202 @@ var ScheduleTiming = Schema_exports.Union([
 var OperationSchedule = Schema_exports.Struct({
   name: Schema_exports.NonEmptyString,
   timing: ScheduleTiming,
-  input: JsonValue
+  input: JsonValue2
 });
-
-// src/contracts/protocols/1.ts
+var SkillFilePath = Schema_exports.NonEmptyString.check(
+  Schema_exports.makeFilter(
+    (path) => !path.startsWith("/") && !path.includes("\\") && !path.includes("\0") && path.split("/").every((part) => part !== "" && part !== "." && part !== "..")
+  )
+);
+var SkillFile = Schema_exports.Struct({ path: SkillFilePath, content: Schema_exports.String });
+var skillFormatLimits = {
+  nameCharacters: 64,
+  descriptionCharacters: 1024,
+  compatibilityCharacters: 500
+};
+var AppSkillName2 = Schema_exports.NonEmptyString.check(
+  Schema_exports.makeFilter(
+    (value) => value === value.toLowerCase() && /^[\p{L}\p{N}]+(?:-[\p{L}\p{N}]+)*$/u.test(value) && [...value].length <= skillFormatLimits.nameCharacters
+  )
+);
+var AppSkillMetadata = Schema_exports.Struct({
+  name: AppSkillName2,
+  description: Schema_exports.String.check(
+    Schema_exports.makeFilter(
+      (value) => value.trim().length > 0 && [...value].length <= skillFormatLimits.descriptionCharacters
+    )
+  ),
+  license: Schema_exports.optionalKey(Schema_exports.String),
+  compatibility: Schema_exports.optionalKey(
+    Schema_exports.String.check(
+      Schema_exports.makeFilter(
+        (value) => value.trim().length > 0 && [...value].length <= skillFormatLimits.compatibilityCharacters
+      )
+    )
+  ),
+  metadata: Schema_exports.optionalKey(Schema_exports.Record(Schema_exports.String, Schema_exports.String)),
+  "allowed-tools": Schema_exports.optionalKey(Schema_exports.String)
+});
+var AppSkillSource = Schema_exports.Struct({
+  ...AppSkillMetadata.fields,
+  files: Schema_exports.Array(SkillFile).check(
+    Schema_exports.makeFilter(
+      (files) => files.some((file) => file.path === "SKILL.md") && new Set(files.map((file) => file.path)).size === files.length
+    )
+  )
+});
+var AppSkills2 = Schema_exports.Array(AppSkillSource).check(
+  Schema_exports.makeFilter((skills) => new Set(skills.map((skill) => skill.name)).size === skills.length)
+);
+var ToolAnnotations3 = Schema_exports.Struct({
+  title: Schema_exports.optionalKey(Schema_exports.String),
+  readOnlyHint: Schema_exports.optionalKey(Schema_exports.Boolean),
+  destructiveHint: Schema_exports.optionalKey(Schema_exports.Boolean),
+  idempotentHint: Schema_exports.optionalKey(Schema_exports.Boolean),
+  openWorldHint: Schema_exports.optionalKey(Schema_exports.Boolean)
+});
+var WebhookTransportLimits2 = Schema_exports.Struct({
+  maxBodyBytes: Schema_exports.Int.check(Schema_exports.isGreaterThan(0))
+});
+var defaultWebhookTransportLimits2 = WebhookTransportLimits2.make({
+  maxBodyBytes: 1024 * 1024
+});
+var encodedBodyChars2 = 4 * Math.ceil(defaultWebhookTransportLimits2.maxBodyBytes / 3);
+var WebhookRequestData2 = Schema_exports.Struct({
+  url: HttpUrl2,
+  method: Schema_exports.Literals(["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"]),
+  headers: Schema_exports.Record(Schema_exports.String, Schema_exports.String),
+  body: Schema_exports.String.check(Schema_exports.isMaxLength(encodedBodyChars2))
+});
+var identity2 = {
+  name: Schema_exports.NonEmptyString,
+  subscriptionId: Schema_exports.NonEmptyString,
+  sourceAccount: AccountId2,
+  callbackUrl: HttpUrl2,
+  secret: Schema_exports.String,
+  config: JsonValue2
+};
+var WebhookCommand2 = Schema_exports.Union([
+  Schema_exports.Struct({ operation: Schema_exports.Literal("webhooks") }),
+  Schema_exports.Struct({ operation: Schema_exports.Literal("webhook-validate"), ...identity2 }),
+  Schema_exports.Struct({ operation: Schema_exports.Literal("webhook-complete"), ...identity2, state: JsonValue2 }),
+  Schema_exports.Struct({ operation: Schema_exports.Literal("webhook-register"), ...identity2 }),
+  Schema_exports.Struct({ operation: Schema_exports.Literal("webhook-unregister"), ...identity2, state: JsonValue2 }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("webhook-handle"),
+    ...identity2,
+    state: JsonValue2,
+    request: WebhookRequestData2
+  })
+]);
+var WorkflowRunId2 = Schema_exports.NonEmptyString.pipe(Schema_exports.brand("wfr"));
+var WorkflowName2 = Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(200));
+var durationUnits2 = {
+  millisecond: 1,
+  milliseconds: 1,
+  second: 1e3,
+  seconds: 1e3,
+  minute: 6e4,
+  minutes: 6e4,
+  hour: 36e5,
+  hours: 36e5,
+  day: 864e5,
+  days: 864e5,
+  week: 6048e5,
+  weeks: 6048e5
+};
+var workflowDurationMillis2 = (value) => {
+  if (typeof value === "number") return Number.isFinite(value) && value >= 0 ? value : void 0;
+  const match = /^(\d+(?:\.\d+)?) (milliseconds?|seconds?|minutes?|hours?|days?|weeks?)$/.exec(
+    value
+  );
+  const unit = match?.[2] === void 0 ? void 0 : durationUnits2[match[2]];
+  if (unit === void 0) return void 0;
+  const result = Number(match?.[1]) * unit;
+  return Number.isFinite(result) ? result : void 0;
+};
+var WorkflowDuration2 = Schema_exports.Union([
+  Schema_exports.Finite.check(Schema_exports.isGreaterThanOrEqualTo(0)),
+  Schema_exports.NonEmptyString
+]).check(Schema_exports.makeFilter((value) => workflowDurationMillis2(value) !== void 0));
+var WorkflowStepOptions2 = Schema_exports.Struct({
+  retries: Schema_exports.optionalKey(
+    Schema_exports.Struct({
+      limit: Schema_exports.Int.check(Schema_exports.isGreaterThanOrEqualTo(0)),
+      delay: WorkflowDuration2,
+      backoff: Schema_exports.optionalKey(Schema_exports.Literals(["constant", "linear", "exponential"]))
+    })
+  ),
+  timeout: Schema_exports.optionalKey(WorkflowDuration2)
+});
+var WorkflowValue2 = JsonValue2.check(
+  Schema_exports.makeFilter(
+    (value) => new TextEncoder().encode(JSON.stringify(value)).byteLength <= 1024 * 1024
+  )
+);
+var WorkflowReplay2 = Schema_exports.Struct({
+  key: Schema_exports.NonEmptyString,
+  fingerprint: Schema_exports.NonEmptyString
+});
+var WorkflowCommand2 = Schema_exports.Union([
+  Schema_exports.Struct({ operation: Schema_exports.Literal("workflows") }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("workflow-validate"),
+    name: WorkflowName2,
+    input: JsonValue2
+  }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("workflow-run"),
+    name: WorkflowName2,
+    input: JsonValue2
+  })
+]);
+var WorkflowRpcCommand2 = Schema_exports.Union([
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("do"),
+    name: WorkflowName2,
+    options: WorkflowStepOptions2
+  }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("sleep"),
+    name: WorkflowName2,
+    duration: WorkflowDuration2
+  }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("until"),
+    name: WorkflowName2,
+    timestamp: Schema_exports.Finite
+  }),
+  Schema_exports.Struct({ operation: Schema_exports.Literal("context") }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("invoke"),
+    kind: Schema_exports.Literals(["query", "mutation"]),
+    name: Schema_exports.NonEmptyString,
+    input: JsonValue2,
+    stepId: Schema_exports.NonEmptyString,
+    timeout: Schema_exports.Finite.check(Schema_exports.isGreaterThanOrEqualTo(0))
+  })
+]);
+var WorkflowControlCommand2 = Schema_exports.Union([
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("start"),
+    workflow: WorkflowName2,
+    input: WorkflowValue2,
+    key: Schema_exports.optionalKey(Schema_exports.NonEmptyString.check(Schema_exports.isMaxLength(128)))
+  }),
+  Schema_exports.Struct({ operation: Schema_exports.Literal("get"), run: WorkflowRunId2 }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("list"),
+    workflow: Schema_exports.optionalKey(WorkflowName2),
+    cursor: Schema_exports.optionalKey(WorkflowRunId2),
+    limit: Schema_exports.optionalKey(Schema_exports.Int.check(Schema_exports.isBetween({ minimum: 1, maximum: 100 })))
+  }),
+  Schema_exports.Struct({ operation: Schema_exports.Literal("terminate"), run: WorkflowRunId2 })
+]);
 var ProviderError2 = class extends Schema_exports.TaggedError()("ProviderError", {
   reason: Schema_exports.Literals(["unauthorized", "forbidden", "rate_limited", "unavailable", "rejected"]),
   status: Schema_exports.optional(Schema_exports.Int.check(Schema_exports.isBetween({ minimum: 100, maximum: 599 }))),
-  accountId: Schema_exports.optional(AccountId)
+  accountId: Schema_exports.optional(AccountId2)
 }) {
 };
 var McpError3 = class extends Schema_exports.TaggedError()("McpError", {
@@ -2395,30 +2705,30 @@ var WorkflowFailure2 = class extends Schema_exports.TaggedError()("WorkflowFailu
 }) {
 };
 var WorkflowRpcResult2 = Schema_exports.Union([
-  Schema_exports.Struct({ ok: Schema_exports.Literal(true), value: JsonValue }),
+  Schema_exports.Struct({ ok: Schema_exports.Literal(true), value: JsonValue2 }),
   Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: WorkflowFailure2 })
 ]);
 var DeclaredAuthMethod = Schema_exports.Union([
-  Schema_exports.Struct({ type: Schema_exports.Literal("secrets"), label: Schema_exports.String, fields: JsonObject2 }),
+  Schema_exports.Struct({ type: Schema_exports.Literal("secrets"), label: Schema_exports.String, fields: JsonObject3 }),
   Schema_exports.Struct({
     type: Schema_exports.Literal("oauth2"),
     ...OAuth2Config2.members[0].fields,
-    response: JsonObject2
+    response: JsonObject3
   }),
   Schema_exports.Struct({
     type: Schema_exports.Literal("oauth2"),
     ...OAuth2Config2.members[1].fields,
-    response: JsonObject2
+    response: JsonObject3
   }),
   Schema_exports.Struct({
     type: Schema_exports.Literal("oauth2"),
     ...OAuth2Config2.members[2].fields,
-    response: JsonObject2
+    response: JsonObject3
   }),
   Schema_exports.Struct({
     type: Schema_exports.Literal("oauth2"),
     ...OAuth2Config2.members[3].fields,
-    response: JsonObject2
+    response: JsonObject3
   })
 ]);
 var DeclaredProvider = Schema_exports.Struct({
@@ -2438,7 +2748,7 @@ var DeclaredRequirements = Schema_exports.Struct({
       scheduledTools: Schema_exports.optionalKey(Schema_exports.Literal(true))
     })
   ),
-  database: Schema_exports.optionalKey(DatabaseSchema),
+  database: Schema_exports.optionalKey(DatabaseSchema2),
   accounts: Schema_exports.Record(
     Schema_exports.NonEmptyString,
     Schema_exports.Struct({
@@ -2448,7 +2758,7 @@ var DeclaredRequirements = Schema_exports.Struct({
   )
 });
 var ResolvedAccount = Schema_exports.Struct({
-  id: AccountId,
+  id: AccountId2,
   provider: DeclaredProvider,
   method: Schema_exports.NonEmptyString,
   /**
@@ -2456,33 +2766,33 @@ var ResolvedAccount = Schema_exports.Struct({
    * send it since credential generations; `apps@0.0.1-beta.0` and `beta.1` ignore it.
    */
   generation: Schema_exports.optionalKey(Schema_exports.Int),
-  fields: JsonObject2
+  fields: JsonObject3
 });
 var ResolvedAccounts = Schema_exports.Record(
   Schema_exports.NonEmptyString,
   Schema_exports.Union([ResolvedAccount, Schema_exports.Array(ResolvedAccount)])
 );
-var TrustedToolApproval = Schema_exports.Struct({ tool: Schema_exports.NonEmptyString, input: JsonValue });
+var TrustedToolApproval = Schema_exports.Struct({ tool: Schema_exports.NonEmptyString, input: JsonValue2 });
 var InvocationDeadline = Schema_exports.Finite.check(Schema_exports.isGreaterThanOrEqualTo(0));
 var HostedTool = Schema_exports.Struct({
   schedules: Schema_exports.optionalKey(Schema_exports.Array(OperationSchedule)),
   name: Schema_exports.NonEmptyString,
   description: Schema_exports.String,
-  inputSchema: JsonObject2,
+  inputSchema: JsonObject3,
   readOnly: Schema_exports.optionalKey(Schema_exports.Boolean),
   title: Schema_exports.optionalKey(Schema_exports.String),
-  outputSchema: Schema_exports.optionalKey(JsonObject2),
-  annotations: Schema_exports.optionalKey(ToolAnnotations2),
-  _meta: Schema_exports.optionalKey(JsonObject2)
+  outputSchema: Schema_exports.optionalKey(JsonObject3),
+  annotations: Schema_exports.optionalKey(ToolAnnotations3),
+  _meta: Schema_exports.optionalKey(JsonObject3)
 });
 var HostedToolSummary = HostedTool.mapFields(
   ({ inputSchema: _input, outputSchema: _output, _meta, ...fields }) => fields
 );
-var SkillSources = Schema_exports.Struct({ skills: AppSkills, dynamic: Schema_exports.Boolean });
-var SkillCatalogResponse = Schema_exports.Union([SkillSources, AppSkills]);
+var SkillSources = Schema_exports.Struct({ skills: AppSkills2, dynamic: Schema_exports.Boolean });
+var SkillCatalogResponse = Schema_exports.Union([SkillSources, AppSkills2]);
 var HostRequest = Schema_exports.Union([
-  WorkflowCommand,
-  WebhookCommand,
+  WorkflowCommand2,
+  WebhookCommand2,
   Schema_exports.Struct({ operation: Schema_exports.Literal("requirements") }),
   Schema_exports.Struct({
     operation: Schema_exports.Literal("inspect"),
@@ -2504,17 +2814,17 @@ var HostRequest = Schema_exports.Union([
   Schema_exports.Struct({
     operation: Schema_exports.Literal("query"),
     name: Schema_exports.NonEmptyString,
-    input: JsonValue
+    input: JsonValue2
   }),
   Schema_exports.Struct({
     operation: Schema_exports.Literal("mutate"),
     name: Schema_exports.NonEmptyString,
-    input: JsonValue
+    input: JsonValue2
   }),
   Schema_exports.Struct({
     operation: Schema_exports.Literal("call"),
     tool: Schema_exports.NonEmptyString,
-    input: JsonValue
+    input: JsonValue2
   })
 ]);
 var HostRequestInvalid = class extends Schema_exports.TaggedError()(
@@ -2564,7 +2874,7 @@ var HostToolBlocked = class extends Schema_exports.TaggedError()("HostToolBlocke
 };
 var HostToolApprovalRequired = class extends Schema_exports.TaggedError()(
   "HostToolApprovalRequired",
-  { input: JsonValue, elicitation: ApprovalElicitation }
+  { input: JsonValue2, elicitation: ApprovalElicitation2 }
 ) {
 };
 var HostToolPolicyFailed = class extends Schema_exports.TaggedError()(
@@ -2578,7 +2888,7 @@ var HostOutputInvalid = class extends Schema_exports.TaggedError()(
 ) {
 };
 var HostError = Schema_exports.Union([
-  OpenapiResponseError,
+  OpenapiResponseError2,
   ProviderError2,
   McpError3,
   SkillLoadFailed,
@@ -2595,12 +2905,12 @@ var HostError = Schema_exports.Union([
   HostToolBlocked,
   HostToolApprovalRequired,
   HostToolPolicyFailed,
-  ElicitationFailed
+  ElicitationFailed2
 ]);
 var HostResponse = Schema_exports.Union([
   Schema_exports.Struct({
     ok: Schema_exports.Literal(true),
-    value: JsonValue,
+    value: JsonValue2,
     toolError: Schema_exports.optionalKey(Schema_exports.Literal(true))
   }),
   Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: HostError })
@@ -2609,9 +2919,9 @@ var HostInvocation = Schema_exports.Struct({
   command: HostRequest,
   accounts: ResolvedAccounts,
   approval: Schema_exports.optionalKey(TrustedToolApproval),
-  replay: Schema_exports.optionalKey(WorkflowReplay),
+  replay: Schema_exports.optionalKey(WorkflowReplay2),
   deadline: Schema_exports.optionalKey(InvocationDeadline),
-  workflowRun: Schema_exports.optionalKey(WorkflowRunId)
+  workflowRun: Schema_exports.optionalKey(WorkflowRunId2)
 });
 var protocol1 = {
   version: 1,
@@ -2623,38 +2933,98 @@ var protocol1 = {
     tools: Schema_exports.Array(HostedTool),
     toolSummaries: Schema_exports.Array(HostedToolSummary),
     skills: SkillCatalogResponse,
-    elicitationRequest: FormElicitation,
-    elicitationReply: ElicitationReply,
-    workflowStep: WorkflowRpcCommand,
+    elicitationRequest: FormElicitation2,
+    elicitationReply: ElicitationReply2,
+    workflowStep: WorkflowRpcCommand2,
     workflowStepReply: WorkflowRpcResult2,
-    workflowControl: WorkflowControlCommand,
-    cacheCommand: CacheCommand,
-    cacheReply: CacheReply
+    workflowControl: WorkflowControlCommand2,
+    cacheCommand: CacheCommand2,
+    cacheReply: CacheReply2
   }
 };
 
 // src/contracts/protocols/2.ts
 var SkillSources2 = Schema_exports.Struct({
-  skills: AppSkills,
+  skills: AppSkills2,
   dynamic: Schema_exports.Boolean,
   cached: Schema_exports.optionalKey(Schema_exports.Boolean)
 });
-var SkillCatalogResponse2 = Schema_exports.Union([SkillSources2, AppSkills]);
+var SkillCatalogResponse2 = Schema_exports.Union([SkillSources2, AppSkills2]);
 var protocol2 = {
   version: 2,
   schemas: { ...protocol1.schemas, skills: SkillCatalogResponse2 }
 };
 
 // src/contracts/protocols/3.ts
-var FailureDetail2 = {
-  source: Schema_exports.optionalKey(FailureSource),
-  errorName: Schema_exports.optionalKey(FailureName),
-  code: Schema_exports.optionalKey(FailureCode),
-  message: Schema_exports.optionalKey(FailureMessage)
+var maxFailureMessageLength = 2048;
+var FailureSource = Schema_exports.Literals(["app", "storage", "service"]);
+var FailureName2 = Schema_exports.String.check(Schema_exports.isMaxLength(128));
+var FailureCode = Schema_exports.String.check(Schema_exports.isMaxLength(128));
+var FailureMessage2 = Schema_exports.String.check(Schema_exports.isMaxLength(maxFailureMessageLength));
+var WorkflowFailureDetail2 = {
+  step: Schema_exports.optionalKey(Schema_exports.String.check(Schema_exports.isMaxLength(200))),
+  errorName: Schema_exports.optionalKey(FailureName2),
+  message: Schema_exports.optionalKey(FailureMessage2)
 };
-var HostDeclarationInvalid2 = class extends Schema_exports.TaggedError()(
-  "HostDeclarationInvalid",
-  FailureDetail2
+var WorkflowFailure3 = class extends Schema_exports.TaggedError()("WorkflowFailure", {
+  ...WorkflowFailureDetail2,
+  reason: Schema_exports.Literals([
+    "unavailable",
+    "not_found",
+    "input",
+    "output",
+    "operation",
+    "approval",
+    "credentials",
+    "terminated",
+    "execution",
+    "conflict",
+    "engine"
+  ]),
+  retryable: Schema_exports.Boolean
+}) {
+};
+var WorkflowRpcResult3 = Schema_exports.Union([
+  Schema_exports.Struct({ ok: Schema_exports.Literal(true), value: JsonValue2 }),
+  Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: WorkflowFailure3 })
+]);
+var DatabaseLimit2 = Schema_exports.Literals([
+  "scanCalls",
+  "directGets",
+  "rowsRead",
+  "rowsReturned",
+  "pageSize",
+  "bytesRead",
+  "writes",
+  "valueBytes"
+]);
+var DatabaseLimitExceeded2 = class extends Schema_exports.TaggedError()(
+  "DatabaseLimitExceeded",
+  {
+    limit: DatabaseLimit2,
+    maximum: Schema_exports.Int,
+    requested: Schema_exports.Int
+  }
+) {
+};
+var reservedFieldNames2 = ["id", "createdAt", "updatedAt"];
+var DatabaseFieldReserved2 = class extends Schema_exports.TaggedError()(
+  "DatabaseFieldReserved",
+  {
+    table: Schema_exports.String,
+    field: Schema_exports.Literals(reservedFieldNames2)
+  }
+) {
+};
+var FailureDetail2 = {
+  source: Schema_exports.optionalKey(FailureSource),
+  errorName: Schema_exports.optionalKey(FailureName2),
+  code: Schema_exports.optionalKey(FailureCode),
+  message: Schema_exports.optionalKey(FailureMessage2)
+};
+var HostDeclarationInvalid2 = class extends Schema_exports.TaggedError()(
+  "HostDeclarationInvalid",
+  FailureDetail2
 ) {
 };
 var HostEvaluationFailed2 = class extends Schema_exports.TaggedError()(
@@ -2668,31 +3038,31 @@ var HostOperationFailed2 = class extends Schema_exports.TaggedError()(
 ) {
 };
 var HostError2 = Schema_exports.Union([
-  OpenapiResponseError,
+  OpenapiResponseError2,
   ProviderError2,
   McpError3,
   SkillLoadFailed,
-  WorkflowFailure,
+  WorkflowFailure3,
   HostRequestInvalid,
   HostAccountsInvalid,
   HostDeclarationInvalid2,
   HostEvaluationFailed2,
   HostOperationNotFound,
   HostOperationFailed2,
-  DatabaseLimitExceeded,
-  DatabaseFieldReserved,
+  DatabaseLimitExceeded2,
+  DatabaseFieldReserved2,
   HostToolNotFound,
   HostInputInvalid,
   HostOutputInvalid,
   HostToolBlocked,
   HostToolApprovalRequired,
   HostToolPolicyFailed,
-  ElicitationFailed
+  ElicitationFailed2
 ]);
 var HostResponse2 = Schema_exports.Union([
   Schema_exports.Struct({
     ok: Schema_exports.Literal(true),
-    value: JsonValue,
+    value: JsonValue2,
     toolError: Schema_exports.optionalKey(Schema_exports.Literal(true))
   }),
   Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: HostError2 })
@@ -2704,32 +3074,38 @@ var protocol3 = {
     request: HostRequest,
     response: HostResponse2,
     requirements: DeclaredRequirements,
-    tools: Schema_exports.Array(HostedTool),
-    toolSummaries: Schema_exports.Array(HostedToolSummary),
+    tools: protocol1.schemas.tools,
+    toolSummaries: protocol1.schemas.toolSummaries,
     skills: SkillCatalogResponse2,
-    elicitationRequest: FormElicitation,
-    elicitationReply: ElicitationReply,
-    workflowStep: WorkflowRpcCommand,
-    workflowStepReply: WorkflowRpcResult,
-    workflowControl: WorkflowControlCommand,
-    cacheCommand: CacheCommand,
-    cacheReply: CacheReply
+    elicitationRequest: FormElicitation2,
+    elicitationReply: ElicitationReply2,
+    workflowStep: WorkflowRpcCommand2,
+    workflowStepReply: WorkflowRpcResult3,
+    workflowControl: WorkflowControlCommand2,
+    cacheCommand: CacheCommand2,
+    cacheReply: CacheReply2
   }
 };
 
 // src/contracts/protocols/4.ts
+var RouterIcon2 = Schema_exports.Struct({
+  src: Schema_exports.NonEmptyString,
+  mimeType: Schema_exports.optionalKey(Schema_exports.String),
+  sizes: Schema_exports.optionalKey(Schema_exports.Array(Schema_exports.String)),
+  theme: Schema_exports.optionalKey(Schema_exports.Literals(["light", "dark"]))
+});
 var HostedTool2 = Schema_exports.Struct({
   schedules: Schema_exports.optionalKey(Schema_exports.Array(OperationSchedule)),
   name: Schema_exports.NonEmptyString,
   router: Schema_exports.optionalKey(Schema_exports.NonEmptyString),
   tags: Schema_exports.optionalKey(Schema_exports.Array(Schema_exports.NonEmptyString)),
   description: Schema_exports.String,
-  inputSchema: JsonObject2,
+  inputSchema: JsonObject3,
   readOnly: Schema_exports.optionalKey(Schema_exports.Boolean),
   title: Schema_exports.optionalKey(Schema_exports.String),
-  outputSchema: Schema_exports.optionalKey(JsonObject2),
-  annotations: Schema_exports.optionalKey(ToolAnnotations2),
-  _meta: Schema_exports.optionalKey(JsonObject2)
+  outputSchema: Schema_exports.optionalKey(JsonObject3),
+  annotations: Schema_exports.optionalKey(ToolAnnotations3),
+  _meta: Schema_exports.optionalKey(JsonObject3)
 });
 var HostedToolSummary2 = HostedTool2.mapFields(
   ({ inputSchema: _input, outputSchema: _output, _meta, ...fields }) => fields
@@ -2745,9 +3121,9 @@ var HostedRouter = Schema_exports.Struct({
   path: Schema_exports.String,
   title: Schema_exports.optionalKey(Schema_exports.String),
   description: Schema_exports.optionalKey(Schema_exports.String),
-  icons: Schema_exports.optionalKey(Schema_exports.Array(RouterIcon)),
+  icons: Schema_exports.optionalKey(Schema_exports.Array(RouterIcon2)),
   tags: Schema_exports.optionalKey(Schema_exports.Record(Schema_exports.NonEmptyString, Schema_exports.String)),
-  skill: Schema_exports.optionalKey(AppSkillName),
+  skill: Schema_exports.optionalKey(AppSkillName2),
   error: Schema_exports.optionalKey(HostRouterError)
 });
 var HostedCatalog = Schema_exports.Struct({
@@ -2760,8 +3136,8 @@ var HostedCatalogSummary = Schema_exports.Struct({
 });
 var ToolKind = Schema_exports.Literals(["query", "mutation"]);
 var HostRequest2 = Schema_exports.Union([
-  WorkflowCommand,
-  WebhookCommand,
+  WorkflowCommand2,
+  WebhookCommand2,
   Schema_exports.Struct({ operation: Schema_exports.Literal("requirements") }),
   Schema_exports.Struct({
     operation: Schema_exports.Literal("inspect"),
@@ -2783,12 +3159,12 @@ var HostRequest2 = Schema_exports.Union([
   Schema_exports.Struct({
     operation: Schema_exports.Literal("query"),
     name: Schema_exports.NonEmptyString,
-    input: JsonValue
+    input: JsonValue2
   }),
   Schema_exports.Struct({
     operation: Schema_exports.Literal("mutate"),
     name: Schema_exports.NonEmptyString,
-    input: JsonValue
+    input: JsonValue2
   }),
   Schema_exports.Struct({
     operation: Schema_exports.Literal("call"),
@@ -2798,7 +3174,7 @@ var HostRequest2 = Schema_exports.Union([
      * it for a tool its catalog does not list, and then opens storage for writing.
      */
     kind: Schema_exports.optionalKey(ToolKind),
-    input: JsonValue
+    input: JsonValue2
   })
 ]);
 var HostKindMismatch = class extends Schema_exports.TaggedError()("HostKindMismatch", {
@@ -2811,7 +3187,7 @@ var HostError3 = Schema_exports.Union([...HostError2.members, HostKindMismatch])
 var HostResponse3 = Schema_exports.Union([
   Schema_exports.Struct({
     ok: Schema_exports.Literal(true),
-    value: JsonValue,
+    value: JsonValue2,
     toolError: Schema_exports.optionalKey(Schema_exports.Literal(true))
   }),
   Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: HostError3 })
@@ -2820,9 +3196,9 @@ var HostInvocation2 = Schema_exports.Struct({
   command: HostRequest2,
   accounts: ResolvedAccounts,
   approval: Schema_exports.optionalKey(TrustedToolApproval),
-  replay: Schema_exports.optionalKey(WorkflowReplay),
+  replay: Schema_exports.optionalKey(WorkflowReplay2),
   deadline: Schema_exports.optionalKey(InvocationDeadline),
-  workflowRun: Schema_exports.optionalKey(WorkflowRunId)
+  workflowRun: Schema_exports.optionalKey(WorkflowRunId2)
 });
 var protocol4 = {
   version: 4,
@@ -2830,21 +3206,31 @@ var protocol4 = {
     invocation: HostInvocation2,
     request: HostRequest2,
     response: HostResponse3,
-    requirements: DeclaredRequirements,
+    requirements: protocol3.schemas.requirements,
     catalog: HostedCatalog,
     catalogSummary: HostedCatalogSummary,
-    skills: SkillCatalogResponse2,
-    elicitationRequest: FormElicitation,
-    elicitationReply: ElicitationReply,
-    workflowStep: WorkflowRpcCommand,
-    workflowStepReply: WorkflowRpcResult,
-    workflowControl: WorkflowControlCommand,
-    cacheCommand: CacheCommand,
-    cacheReply: CacheReply
+    skills: protocol3.schemas.skills,
+    elicitationRequest: protocol3.schemas.elicitationRequest,
+    elicitationReply: protocol3.schemas.elicitationReply,
+    workflowStep: protocol3.schemas.workflowStep,
+    workflowStepReply: protocol3.schemas.workflowStepReply,
+    workflowControl: protocol3.schemas.workflowControl,
+    cacheCommand: protocol3.schemas.cacheCommand,
+    cacheReply: protocol3.schemas.cacheReply
   }
 };
 
 // src/contracts/protocols/5.ts
+var displayText2 = Schema_exports.String.check(Schema_exports.isMinLength(1), Schema_exports.isMaxLength(255));
+var AccountInfo2 = Schema_exports.Struct({
+  externalId: Schema_exports.optionalKey(displayText2),
+  displayName: Schema_exports.optionalKey(displayText2),
+  username: Schema_exports.optionalKey(displayText2),
+  email: Schema_exports.optionalKey(displayText2),
+  avatarUrl: Schema_exports.optionalKey(HttpUrl2),
+  profileUrl: Schema_exports.optionalKey(HttpUrl2)
+});
+var AccountCheckResult2 = Schema_exports.Struct({ accountInfo: Schema_exports.optionalKey(AccountInfo2) });
 var DeclaredRequirements2 = Schema_exports.Struct({
   /** Protocol support of this retained framework build, not an author-declared requirement. */
   capabilities: Schema_exports.optionalKey(
@@ -2855,7 +3241,7 @@ var DeclaredRequirements2 = Schema_exports.Struct({
       scheduledTools: Schema_exports.optionalKey(Schema_exports.Literal(true))
     })
   ),
-  database: Schema_exports.optionalKey(DatabaseSchema),
+  database: Schema_exports.optionalKey(DatabaseSchema2),
   accounts: Schema_exports.Record(
     Schema_exports.NonEmptyString,
     Schema_exports.Struct({
@@ -2881,9 +3267,9 @@ var HostInvocation3 = Schema_exports.Struct({
   command: HostRequest3,
   accounts: ResolvedAccounts,
   approval: Schema_exports.optionalKey(TrustedToolApproval),
-  replay: Schema_exports.optionalKey(WorkflowReplay),
+  replay: Schema_exports.optionalKey(WorkflowReplay2),
   deadline: Schema_exports.optionalKey(InvocationDeadline),
-  workflowRun: Schema_exports.optionalKey(WorkflowRunId)
+  workflowRun: Schema_exports.optionalKey(WorkflowRunId2)
 });
 var protocol5 = {
   version: 5,
@@ -2892,32 +3278,83 @@ var protocol5 = {
     invocation: HostInvocation3,
     request: HostRequest3,
     requirements: DeclaredRequirements2,
-    accountCheck: AccountCheckResult
+    accountCheck: AccountCheckResult2
   }
 };
 
+// src/contracts/protocols/oauth-6.ts
+var OAuth2Config3 = Schema_exports.Union([
+  Schema_exports.Struct({
+    ...oauthOptions2,
+    discover: HttpUrl2,
+    /** Fetch this exact metadata document and verify its issuer against discovery. */
+    authorizationServerMetadataUrl: Schema_exports.optionalKey(HttpUrl2),
+    authorizationUrl: Schema_exports.optionalKey(Schema_exports.Never),
+    tokenUrl: Schema_exports.optionalKey(Schema_exports.Never),
+    revocationUrl: Schema_exports.optionalKey(Schema_exports.Never),
+    scopes: Schema_exports.optionalKey(Schema_exports.Array(Schema_exports.String))
+  }),
+  Schema_exports.Struct({
+    ...oauthOptions2,
+    /** Its query is kept; it cannot set protocol parameters or repeat `authorizationParams`. */
+    authorizationUrl: HttpUrl2,
+    tokenUrl: HttpUrl2,
+    revocationUrl: Schema_exports.optionalKey(HttpUrl2),
+    scopes: Schema_exports.Array(Schema_exports.String),
+    /** RFC 8414 issuer identifier. Declared issuers are checked against the callback's `iss`. */
+    issuer: Schema_exports.optionalKey(HttpUrl2),
+    discover: Schema_exports.optionalKey(Schema_exports.Never),
+    authorizationServerMetadataUrl: Schema_exports.optionalKey(Schema_exports.Never)
+  }).check(declaredAuthorizationQuery2),
+  Schema_exports.Struct({
+    grant: Schema_exports.Literal("client_credentials"),
+    discover: HttpUrl2,
+    /** Fetch this exact metadata document and verify its issuer against discovery. */
+    authorizationServerMetadataUrl: Schema_exports.optionalKey(HttpUrl2),
+    authorizationUrl: Schema_exports.optionalKey(Schema_exports.Never),
+    tokenUrl: Schema_exports.optionalKey(Schema_exports.Never),
+    revocationUrl: Schema_exports.optionalKey(Schema_exports.Never),
+    scopes: Schema_exports.optionalKey(Schema_exports.Array(Schema_exports.String)),
+    ...tokenRequestOptions2,
+    tokenEndpointAuthMethod: OAuthSecretClientAuth2,
+    resource: Schema_exports.optionalKey(Schema_exports.NullOr(HttpUrl2))
+  }),
+  Schema_exports.Struct({
+    grant: Schema_exports.Literal("client_credentials"),
+    tokenUrl: HttpUrl2,
+    revocationUrl: Schema_exports.optionalKey(HttpUrl2),
+    scopes: Schema_exports.Array(Schema_exports.String),
+    ...tokenRequestOptions2,
+    tokenEndpointAuthMethod: OAuthSecretClientAuth2,
+    resource: Schema_exports.optionalKey(Schema_exports.NullOr(HttpUrl2)),
+    authorizationUrl: Schema_exports.optionalKey(Schema_exports.Never),
+    discover: Schema_exports.optionalKey(Schema_exports.Never),
+    authorizationServerMetadataUrl: Schema_exports.optionalKey(Schema_exports.Never)
+  })
+]);
+
 // src/contracts/protocols/6.ts
 var DeclaredAuthMethod2 = Schema_exports.Union([
-  Schema_exports.Struct({ type: Schema_exports.Literal("secrets"), label: Schema_exports.String, fields: JsonObject2 }),
+  Schema_exports.Struct({ type: Schema_exports.Literal("secrets"), label: Schema_exports.String, fields: JsonObject3 }),
   Schema_exports.Struct({
     type: Schema_exports.Literal("oauth2"),
-    ...OAuth2Config.members[0].fields,
-    response: JsonObject2
+    ...OAuth2Config3.members[0].fields,
+    response: JsonObject3
   }),
   Schema_exports.Struct({
     type: Schema_exports.Literal("oauth2"),
-    ...OAuth2Config.members[1].fields,
-    response: JsonObject2
+    ...OAuth2Config3.members[1].fields,
+    response: JsonObject3
   }),
   Schema_exports.Struct({
     type: Schema_exports.Literal("oauth2"),
-    ...OAuth2Config.members[2].fields,
-    response: JsonObject2
+    ...OAuth2Config3.members[2].fields,
+    response: JsonObject3
   }),
   Schema_exports.Struct({
     type: Schema_exports.Literal("oauth2"),
-    ...OAuth2Config.members[3].fields,
-    response: JsonObject2
+    ...OAuth2Config3.members[3].fields,
+    response: JsonObject3
   })
 ]);
 var DeclaredProvider2 = Schema_exports.Struct({
@@ -2973,31 +3410,31 @@ var DeclaredAuthMethod3 = Schema_exports.Union([
   Schema_exports.Struct({
     type: Schema_exports.Literal("secrets"),
     label: Schema_exports.String,
-    fields: JsonObject2,
+    fields: JsonObject3,
     ...exposure
   }),
   Schema_exports.Struct({
     type: Schema_exports.Literal("oauth2"),
-    ...OAuth2Config.members[0].fields,
-    response: JsonObject2,
+    ...OAuth2Config3.members[0].fields,
+    response: JsonObject3,
     ...exposure
   }),
   Schema_exports.Struct({
     type: Schema_exports.Literal("oauth2"),
-    ...OAuth2Config.members[1].fields,
-    response: JsonObject2,
+    ...OAuth2Config3.members[1].fields,
+    response: JsonObject3,
     ...exposure
   }),
   Schema_exports.Struct({
     type: Schema_exports.Literal("oauth2"),
-    ...OAuth2Config.members[2].fields,
-    response: JsonObject2,
+    ...OAuth2Config3.members[2].fields,
+    response: JsonObject3,
     ...exposure
   }),
   Schema_exports.Struct({
     type: Schema_exports.Literal("oauth2"),
-    ...OAuth2Config.members[3].fields,
-    response: JsonObject2,
+    ...OAuth2Config3.members[3].fields,
+    response: JsonObject3,
     ...exposure
   })
 ]);
@@ -3040,6 +3477,43 @@ var protocol7 = {
 };
 
 // src/contracts/protocols/8.ts
+var maxFailureFields = 8;
+var maxFailureFieldLength = 256;
+var FailureFieldName = Schema_exports.String.check(
+  Schema_exports.isPattern(/^[A-Za-z_$][A-Za-z0-9_$]{0,63}$/)
+);
+var FailureFieldValue = Schema_exports.Union([
+  Schema_exports.String.check(Schema_exports.isMaxLength(maxFailureFieldLength)),
+  Schema_exports.Finite,
+  Schema_exports.Boolean
+]);
+var FailureFields = Schema_exports.Record(FailureFieldName, FailureFieldValue).check(
+  Schema_exports.isMaxProperties(maxFailureFields)
+);
+var FailureDetail3 = {
+  source: Schema_exports.optionalKey(FailureSource),
+  errorName: Schema_exports.optionalKey(FailureName2),
+  code: Schema_exports.optionalKey(FailureCode),
+  message: Schema_exports.optionalKey(FailureMessage2),
+  fields: Schema_exports.optionalKey(FailureFields)
+};
+var maxUpstreamMessageLength = 1024;
+var UpstreamError2 = Schema_exports.Struct({
+  code: Schema_exports.Union([
+    Schema_exports.Int,
+    Schema_exports.String.check(Schema_exports.isMinLength(1), Schema_exports.isMaxLength(128))
+  ]),
+  message: Schema_exports.optionalKey(Schema_exports.String.check(Schema_exports.isMaxLength(maxUpstreamMessageLength)))
+});
+var FailurePhase = Schema_exports.Literals(["connect", "discover", "call"]);
+var ProviderError3 = class extends Schema_exports.TaggedError()("ProviderError", {
+  reason: Schema_exports.Literals(["unauthorized", "forbidden", "rate_limited", "unavailable", "rejected"]),
+  status: Schema_exports.optional(Schema_exports.Int.check(Schema_exports.isBetween({ minimum: 100, maximum: 599 }))),
+  accountId: Schema_exports.optional(AccountId2),
+  phase: Schema_exports.optional(FailurePhase),
+  upstream: Schema_exports.optional(UpstreamError2)
+}) {
+};
 var McpError4 = class extends Schema_exports.TaggedError()("McpError", {
   phase: Schema_exports.Literals(["connect", "discover", "call", "schema", "transport"]),
   reason: Schema_exports.Literals([
@@ -3050,26 +3524,26 @@ var McpError4 = class extends Schema_exports.TaggedError()("McpError", {
     "invalid_input"
   ]),
   status: Schema_exports.optional(Schema_exports.Number),
-  upstream: Schema_exports.optional(UpstreamError)
+  upstream: Schema_exports.optional(UpstreamError2)
 }) {
 };
 var HostDeclarationInvalid3 = class extends Schema_exports.TaggedError()(
   "HostDeclarationInvalid",
-  FailureDetail
+  FailureDetail3
 ) {
 };
 var HostEvaluationFailed3 = class extends Schema_exports.TaggedError()(
   "HostEvaluationFailed",
-  FailureDetail
+  FailureDetail3
 ) {
 };
 var HostOperationFailed3 = class extends Schema_exports.TaggedError()(
   "HostOperationFailed",
-  FailureDetail
+  FailureDetail3
 ) {
 };
 var HostRouterError2 = Schema_exports.Union([
-  ProviderError,
+  ProviderError3,
   McpError4,
   SkillLoadFailed,
   HostDeclarationInvalid3,
@@ -3088,32 +3562,32 @@ var HostedCatalogSummary2 = Schema_exports.Struct({
   routers: Schema_exports.Array(HostedRouter2)
 });
 var HostError4 = Schema_exports.Union([
-  OpenapiResponseError,
-  ProviderError,
+  OpenapiResponseError2,
+  ProviderError3,
   McpError4,
   SkillLoadFailed,
-  WorkflowFailure,
+  WorkflowFailure3,
   HostRequestInvalid,
   HostAccountsInvalid,
   HostDeclarationInvalid3,
   HostEvaluationFailed3,
   HostOperationNotFound,
   HostOperationFailed3,
-  DatabaseLimitExceeded,
-  DatabaseFieldReserved,
+  DatabaseLimitExceeded2,
+  DatabaseFieldReserved2,
   HostToolNotFound,
   HostInputInvalid,
   HostOutputInvalid,
   HostToolBlocked,
   HostToolApprovalRequired,
   HostToolPolicyFailed,
-  ElicitationFailed,
+  ElicitationFailed2,
   HostKindMismatch
 ]);
 var HostResponse4 = Schema_exports.Union([
   Schema_exports.Struct({
     ok: Schema_exports.Literal(true),
-    value: JsonValue,
+    value: JsonValue2,
     toolError: Schema_exports.optionalKey(Schema_exports.Literal(true))
   }),
   Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: HostError4 })
@@ -3139,7 +3613,7 @@ var McpError5 = class extends Schema_exports.TaggedError()("McpError", {
     "invalid_input"
   ]),
   status: Schema_exports.optional(Schema_exports.Number),
-  upstream: Schema_exports.optional(UpstreamError),
+  upstream: Schema_exports.optional(UpstreamError2),
   session: Schema_exports.optional(Schema_exports.Literal(true))
 }) {
 };
@@ -3159,7 +3633,7 @@ var SkillLoadFailed2 = class extends Schema_exports.TaggedError()("SkillLoadFail
 }) {
 };
 var HostRouterError3 = Schema_exports.Union([
-  ProviderError,
+  ProviderError3,
   McpError5,
   SkillLoadFailed2,
   HostDeclarationInvalid3,
@@ -3178,32 +3652,32 @@ var HostedCatalogSummary3 = Schema_exports.Struct({
   routers: Schema_exports.Array(HostedRouter3)
 });
 var HostError5 = Schema_exports.Union([
-  OpenapiResponseError,
-  ProviderError,
+  OpenapiResponseError2,
+  ProviderError3,
   McpError5,
   SkillLoadFailed2,
-  WorkflowFailure,
+  WorkflowFailure3,
   HostRequestInvalid,
   HostAccountsInvalid,
   HostDeclarationInvalid3,
   HostEvaluationFailed3,
   HostOperationNotFound,
   HostOperationFailed3,
-  DatabaseLimitExceeded,
-  DatabaseFieldReserved,
+  DatabaseLimitExceeded2,
+  DatabaseFieldReserved2,
   HostToolNotFound,
   HostInputInvalid,
   HostOutputInvalid,
   HostToolBlocked,
   HostToolApprovalRequired,
   HostToolPolicyFailed,
-  ElicitationFailed,
+  ElicitationFailed2,
   HostKindMismatch
 ]);
 var HostResponse5 = Schema_exports.Union([
   Schema_exports.Struct({
     ok: Schema_exports.Literal(true),
-    value: JsonValue,
+    value: JsonValue2,
     toolError: Schema_exports.optionalKey(Schema_exports.Literal(true))
   }),
   Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: HostError5 })
@@ -3243,32 +3717,410 @@ var protocol10 = {
   }
 };
 
-// src/contracts/protocols/11.ts
+// src/contracts/schedules.ts
+var minimumIntervalMilliseconds2 = 6e4;
+var count2 = Schema_exports.Int.check(Schema_exports.isGreaterThan(0));
+var absent = Schema_exports.optionalKey(Schema_exports.Never);
+var Interval = Schema_exports.Union([
+  Schema_exports.Struct({ seconds: count2, minutes: absent, hours: absent }),
+  Schema_exports.Struct({ seconds: absent, minutes: count2, hours: absent }),
+  Schema_exports.Struct({ seconds: absent, minutes: absent, hours: count2 })
+]);
+var CalendarSchedule2 = Schema_exports.Struct({
+  expression: Schema_exports.NonEmptyString,
+  timezone: Schema_exports.NonEmptyString
+}).check(
+  Schema_exports.makeFilter(
+    (value) => value.expression.trim().split(/\s+/).length === 5 && Result_exports.isSuccess(Cron_exports.parse(value.expression, value.timezone))
+  )
+);
+var ScheduleTiming2 = Schema_exports.Union([
+  Schema_exports.Struct({
+    kind: Schema_exports.Literal("interval"),
+    milliseconds: Schema_exports.Int.check(
+      Schema_exports.makeFilter((value) => value >= minimumIntervalMilliseconds2, {
+        message: "Schedule intervals must be at least 60 seconds"
+      }),
+      Schema_exports.isLessThanOrEqualTo(Number.MAX_SAFE_INTEGER)
+    )
+  }),
+  Schema_exports.Struct({ kind: Schema_exports.Literal("cron"), calendar: CalendarSchedule2 })
+]);
+var OperationSchedule2 = Schema_exports.Struct({
+  name: Schema_exports.NonEmptyString,
+  timing: ScheduleTiming2,
+  input: JsonValue
+});
+
+// src/contracts/protocols/current.ts
+var McpError6 = class extends Schema_exports.TaggedError()("McpError", {
+  phase: Schema_exports.Literals(["connect", "discover", "call", "schema", "transport"]),
+  reason: Schema_exports.Literals([
+    "request",
+    "unauthorized",
+    "invalid_response",
+    "timeout",
+    "invalid_input"
+  ]),
+  status: Schema_exports.optional(Schema_exports.Number),
+  /** The JSON-RPC error the server stated. */
+  upstream: Schema_exports.optional(UpstreamError),
+  /**
+   * The refused request carried the session ID the server issued at initialization, so a 404 reads
+   * as a session the server may have lost. Chooses the explanation only; the host never decides from
+   * it whose side a failure is on.
+   */
+  session: Schema_exports.optional(Schema_exports.Literal(true))
+}) {
+};
+var SkillLoadFailed3 = class extends Schema_exports.TaggedError()("SkillLoadFailed", {
+  reason: Schema_exports.Literals([
+    "source",
+    "request",
+    "rate_limited",
+    "document",
+    "limit",
+    "changed",
+    "encoding"
+  ]),
+  message: Schema_exports.optional(Schema_exports.String.check(Schema_exports.isMaxLength(500))),
+  status: Schema_exports.optional(Schema_exports.Int.check(Schema_exports.isBetween({ minimum: 100, maximum: 599 }))),
+  /** What the service's answer points to as missing: the repository, or the branch or tag. */
+  missing: Schema_exports.optional(Schema_exports.Literals(["repository", "ref"]))
+}) {
+};
+var CredentialHost2 = Schema_exports.String.check(
+  Schema_exports.isPattern(
+    /^(\*\.)?[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*(?::[0-9]{1,5})?$/
+  )
+);
+var exposure2 = {
+  /** Not secret: app code reads the real value and forms show it. */
+  plain: Schema_exports.optionalKey(Schema_exports.Array(Schema_exports.NonEmptyString)),
+  /** Secret, but app code reads the real value, for signing and similar uses. */
+  raw: Schema_exports.optionalKey(Schema_exports.Array(Schema_exports.NonEmptyString))
+};
+var DeclaredAuthMethod4 = Schema_exports.Union([
+  Schema_exports.Struct({
+    type: Schema_exports.Literal("secrets"),
+    label: Schema_exports.String,
+    fields: JsonObject2,
+    ...exposure2
+  }),
+  Schema_exports.Struct({
+    type: Schema_exports.Literal("oauth2"),
+    ...OAuth2Config.members[0].fields,
+    response: JsonObject2,
+    ...exposure2
+  }),
+  Schema_exports.Struct({
+    type: Schema_exports.Literal("oauth2"),
+    ...OAuth2Config.members[1].fields,
+    response: JsonObject2,
+    ...exposure2
+  }),
+  Schema_exports.Struct({
+    type: Schema_exports.Literal("oauth2"),
+    ...OAuth2Config.members[2].fields,
+    response: JsonObject2,
+    ...exposure2
+  }),
+  Schema_exports.Struct({
+    type: Schema_exports.Literal("oauth2"),
+    ...OAuth2Config.members[3].fields,
+    response: JsonObject2,
+    ...exposure2
+  })
+]);
+var DeclaredProvider4 = Schema_exports.Struct({
+  name: Schema_exports.NonEmptyString,
+  auth: Schema_exports.Record(Schema_exports.NonEmptyString, DeclaredAuthMethod4),
+  hosts: Schema_exports.optionalKey(Schema_exports.Array(CredentialHost2))
+});
 var DeclaredRequirements6 = Schema_exports.Struct({
-  ...DeclaredRequirements5.fields,
+  /** Protocol support of this retained framework build, not an author-declared requirement. */
+  capabilities: Schema_exports.optionalKey(
+    Schema_exports.Struct({
+      skills: Schema_exports.Literal(true),
+      /** Accepts inspect detail and tools. Earlier builds reject both as excess fields. */
+      toolIndex: Schema_exports.optionalKey(Schema_exports.Literal(true)),
+      /** Accepts skills sources and reports whether the catalog includes a live loader. */
+      skillSources: Schema_exports.optionalKey(Schema_exports.Literal(true)),
+      /** Accepts scheduled inspection. Earlier builds reject it as an excess field. */
+      scheduledTools: Schema_exports.optionalKey(Schema_exports.Literal(true))
+    })
+  ),
+  /**
+   * The document database an app of protocol 9 or earlier declared. Apps of this protocol declare
+   * `sql` instead; the field remains so requirements read from older retained builds keep their meaning.
+   */
+  database: Schema_exports.optionalKey(DatabaseSchema),
+  accounts: Schema_exports.Record(
+    Schema_exports.NonEmptyString,
+    Schema_exports.Struct({
+      definition: DeclaredProvider4,
+      cardinality: Schema_exports.Literals(["one", "many"]),
+      /**
+       * The slot's provider defines an account check. Kept beside the definition, not in it, so
+       * adding or editing a check never changes the provider's identity.
+       */
+      health: Schema_exports.optionalKey(Schema_exports.Literal(true))
+    })
+  ),
+  /** The build has SQL files in `migrations/` and owns a raw SQLite database. */
+  sql: Schema_exports.optionalKey(Schema_exports.Literal(true)),
+  /** The events the app declares, so a host lists them without evaluating the app. */
   events: Schema_exports.optionalKey(DeclaredEvents)
 });
+var ResolvedAccount4 = Schema_exports.Struct({
+  id: AccountId,
+  provider: DeclaredProvider4,
+  method: Schema_exports.NonEmptyString,
+  /**
+   * Changes when the account is reconnected or its credentials replaced, not on renewal. Hosts
+   * send it since credential generations; `apps@0.0.1-beta.0` and `beta.1` ignore it.
+   */
+  generation: Schema_exports.optionalKey(Schema_exports.Int),
+  fields: JsonObject2
+});
+var ResolvedAccounts4 = Schema_exports.Record(
+  Schema_exports.NonEmptyString,
+  Schema_exports.Union([ResolvedAccount4, Schema_exports.Array(ResolvedAccount4)])
+);
+var TrustedToolApproval2 = Schema_exports.Struct({ tool: Schema_exports.NonEmptyString, input: JsonValue });
+var InvocationDeadline2 = Schema_exports.Finite.check(Schema_exports.isGreaterThanOrEqualTo(0));
+var HostedTool3 = Schema_exports.Struct({
+  schedules: Schema_exports.optionalKey(Schema_exports.Array(OperationSchedule2)),
+  name: Schema_exports.NonEmptyString,
+  router: Schema_exports.optionalKey(Schema_exports.NonEmptyString),
+  tags: Schema_exports.optionalKey(Schema_exports.Array(Schema_exports.NonEmptyString)),
+  description: Schema_exports.String,
+  inputSchema: JsonObject2,
+  readOnly: Schema_exports.optionalKey(Schema_exports.Boolean),
+  title: Schema_exports.optionalKey(Schema_exports.String),
+  outputSchema: Schema_exports.optionalKey(JsonObject2),
+  annotations: Schema_exports.optionalKey(ToolAnnotations2),
+  _meta: Schema_exports.optionalKey(JsonObject2)
+});
+var HostedToolSummary3 = HostedTool3.mapFields(
+  ({ inputSchema: _input, outputSchema: _output, _meta, ...fields }) => fields
+);
+var HostDeclarationInvalid4 = class extends Schema_exports.TaggedError()(
+  "HostDeclarationInvalid",
+  FailureDetail
+) {
+};
+var HostEvaluationFailed4 = class extends Schema_exports.TaggedError()(
+  "HostEvaluationFailed",
+  FailureDetail
+) {
+};
+var HostRouterError4 = Schema_exports.Union([
+  ProviderError,
+  McpError6,
+  SkillLoadFailed3,
+  HostDeclarationInvalid4,
+  HostEvaluationFailed4
+]);
+var HostedRouter4 = Schema_exports.Struct({
+  path: Schema_exports.String,
+  title: Schema_exports.optionalKey(Schema_exports.String),
+  description: Schema_exports.optionalKey(Schema_exports.String),
+  icons: Schema_exports.optionalKey(Schema_exports.Array(RouterIcon)),
+  tags: Schema_exports.optionalKey(Schema_exports.Record(Schema_exports.NonEmptyString, Schema_exports.String)),
+  skill: Schema_exports.optionalKey(AppSkillName),
+  error: Schema_exports.optionalKey(HostRouterError4)
+});
+var HostedCatalog4 = Schema_exports.Struct({
+  tools: Schema_exports.Array(HostedTool3),
+  routers: Schema_exports.Array(HostedRouter4)
+});
+var HostedCatalogSummary4 = Schema_exports.Struct({
+  tools: Schema_exports.Array(HostedToolSummary3),
+  routers: Schema_exports.Array(HostedRouter4)
+});
+var SkillSources3 = Schema_exports.Struct({
+  skills: AppSkills,
+  dynamic: Schema_exports.Boolean,
+  cached: Schema_exports.optionalKey(Schema_exports.Boolean)
+});
+var SkillCatalogResponse3 = Schema_exports.Union([SkillSources3, AppSkills]);
+var ToolKind2 = Schema_exports.Literals(["query", "mutation"]);
+var AccountCheckCommand2 = Schema_exports.Struct({
+  operation: Schema_exports.Literal("account-check"),
+  requirement: Schema_exports.NonEmptyString
+});
+var MigrateCommand2 = Schema_exports.Struct({ operation: Schema_exports.Literal("migrate") });
+var MigrateResult2 = Schema_exports.Array(
+  Schema_exports.Struct({ id: Schema_exports.Int, name: Schema_exports.NonEmptyString })
+);
+var HostRequest5 = Schema_exports.Union([
+  WorkflowCommand,
+  WebhookCommand,
+  Schema_exports.Struct({ operation: Schema_exports.Literal("requirements") }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("inspect"),
+    /** Omit schemas. Only builds that declare the toolIndex capability accept this. */
+    detail: Schema_exports.optionalKey(Schema_exports.Literal("summary")),
+    /** Describe only these tools. Only builds that declare the toolIndex capability accept this. */
+    tools: Schema_exports.optionalKey(Schema_exports.Array(Schema_exports.NonEmptyString)),
+    /**
+     * Describe only declared operations that have schedules, without dynamic tool discovery.
+     * Only builds that declare the scheduledTools capability accept this.
+     */
+    scheduled: Schema_exports.optionalKey(Schema_exports.Literal(true))
+  }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("skills"),
+    /** Answer with SkillSources. Only builds that declare the skillSources capability accept this. */
+    sources: Schema_exports.optionalKey(Schema_exports.Literal(true))
+  }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("query"),
+    name: Schema_exports.NonEmptyString,
+    input: JsonValue
+  }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("mutate"),
+    name: Schema_exports.NonEmptyString,
+    input: JsonValue
+  }),
+  Schema_exports.Struct({
+    operation: Schema_exports.Literal("call"),
+    tool: Schema_exports.NonEmptyString,
+    /**
+     * The caller's claim; the bundle rejects a call whose tool has the other kind. The host omits
+     * it for a tool its catalog does not list, and then opens storage for writing.
+     */
+    kind: Schema_exports.optionalKey(ToolKind2),
+    input: JsonValue
+  }),
+  AccountCheckCommand2,
+  MigrateCommand2
+]);
+var HostRequestInvalid2 = class extends Schema_exports.TaggedError()(
+  "HostRequestInvalid",
+  {}
+) {
+};
+var HostAccountsInvalid2 = class extends Schema_exports.TaggedError()(
+  "HostAccountsInvalid",
+  {}
+) {
+};
+var HostOperationNotFound2 = class extends Schema_exports.TaggedError()(
+  "HostOperationNotFound",
+  {}
+) {
+};
+var HostOperationFailed4 = class extends Schema_exports.TaggedError()(
+  "HostOperationFailed",
+  FailureDetail
+) {
+};
+var HostToolNotFound2 = class extends Schema_exports.TaggedError()(
+  "HostToolNotFound",
+  {}
+) {
+};
+var HostKindMismatch2 = class extends Schema_exports.TaggedError()("HostKindMismatch", {
+  tool: Schema_exports.NonEmptyString,
+  requested: ToolKind2,
+  actual: ToolKind2
+}) {
+};
+var InputProblem2 = Schema_exports.String.check(Schema_exports.isMaxLength(512));
+var maxInputProblems2 = 10;
+var HostInputInvalid2 = class extends Schema_exports.TaggedError()("HostInputInvalid", {
+  problems: Schema_exports.optionalKey(
+    Schema_exports.Array(InputProblem2).check(Schema_exports.isMaxLength(maxInputProblems2))
+  )
+}) {
+};
+var HostToolBlocked2 = class extends Schema_exports.TaggedError()("HostToolBlocked", {}) {
+};
+var HostToolApprovalRequired2 = class extends Schema_exports.TaggedError()(
+  "HostToolApprovalRequired",
+  { input: JsonValue, elicitation: ApprovalElicitation }
+) {
+};
+var HostToolPolicyFailed2 = class extends Schema_exports.TaggedError()(
+  "HostToolPolicyFailed",
+  {}
+) {
+};
+var HostOutputInvalid2 = class extends Schema_exports.TaggedError()(
+  "HostOutputInvalid",
+  {}
+) {
+};
+var HostError6 = Schema_exports.Union([
+  OpenapiResponseError,
+  ProviderError,
+  McpError6,
+  SkillLoadFailed3,
+  WorkflowFailure,
+  HostRequestInvalid2,
+  HostAccountsInvalid2,
+  HostDeclarationInvalid4,
+  HostEvaluationFailed4,
+  HostOperationNotFound2,
+  HostOperationFailed4,
+  DatabaseLimitExceeded,
+  DatabaseFieldReserved,
+  HostToolNotFound2,
+  HostInputInvalid2,
+  HostOutputInvalid2,
+  HostToolBlocked2,
+  HostToolApprovalRequired2,
+  HostToolPolicyFailed2,
+  ElicitationFailed,
+  HostKindMismatch2
+]);
 var HostResponse6 = Schema_exports.Union([
   Schema_exports.Struct({
     ok: Schema_exports.Literal(true),
     value: JsonValue,
     toolError: Schema_exports.optionalKey(Schema_exports.Literal(true)),
+    /** The occurrences this invocation emitted, kept only because it succeeded. */
     events: Schema_exports.optionalKey(EmittedEvents)
   }),
-  Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: HostError5 })
+  Schema_exports.Struct({ ok: Schema_exports.Literal(false), error: HostError6 })
 ]);
-var protocol11 = {
-  version: 11,
+var HostInvocation7 = Schema_exports.Struct({
+  command: HostRequest5,
+  accounts: ResolvedAccounts4,
+  approval: Schema_exports.optionalKey(TrustedToolApproval2),
+  replay: Schema_exports.optionalKey(WorkflowReplay),
+  deadline: Schema_exports.optionalKey(InvocationDeadline2),
+  workflowRun: Schema_exports.optionalKey(WorkflowRunId)
+});
+var current = {
+  version: frameworkProtocol,
   schemas: {
-    ...protocol10.schemas,
+    invocation: HostInvocation7,
+    request: HostRequest5,
+    response: HostResponse6,
     requirements: DeclaredRequirements6,
-    response: HostResponse6
+    catalog: HostedCatalog4,
+    catalogSummary: HostedCatalogSummary4,
+    skills: SkillCatalogResponse3,
+    elicitationRequest: FormElicitation,
+    elicitationReply: ElicitationReply,
+    workflowStep: WorkflowRpcCommand,
+    workflowStepReply: WorkflowRpcResult,
+    workflowControl: WorkflowControlCommand,
+    cacheCommand: CacheCommand,
+    cacheReply: CacheReply,
+    accountCheck: AccountCheckResult,
+    accounts: ResolvedAccounts4,
+    migrate: MigrateResult2
   }
 };
 
 // src/contracts/host.ts
 var skillsCommand = (sources) => sources ? { operation: "skills", sources: true } : { operation: "skills" };
-var skillCatalog = (response) => Schema_exports.is(SkillSources2)(response) ? response : { skills: response };
+var skillCatalog = (response) => Schema_exports.is(SkillSources3)(response) ? response : { skills: response };
 var inspectCommand = (tools, scheduled) => ({
   operation: "inspect",
   ...tools === void 0 ? {} : { tools: [...tools] },
@@ -3277,44 +4129,44 @@ var inspectCommand = (tools, scheduled) => ({
 var indexCommand = { operation: "inspect", detail: "summary" };
 var selectTools = (tools) => (catalog) => tools === void 0 ? catalog : { ...catalog, tools: catalog.tools.filter((tool) => tools.includes(tool.name)) };
 var HostRequirementsError = Schema_exports.Union([
-  HostRequestInvalid,
-  HostDeclarationInvalid3,
+  HostRequestInvalid2,
+  HostDeclarationInvalid4,
   DatabaseFieldReserved
 ]);
 var HostInspectError = Schema_exports.Union([
   ProviderError,
-  McpError5,
-  SkillLoadFailed2,
-  HostRequestInvalid,
-  HostDeclarationInvalid3,
-  HostAccountsInvalid,
-  HostEvaluationFailed3
+  McpError6,
+  SkillLoadFailed3,
+  HostRequestInvalid2,
+  HostDeclarationInvalid4,
+  HostAccountsInvalid2,
+  HostEvaluationFailed4
 ]);
 var HostCallError = Schema_exports.Union([
   OpenapiResponseError,
   WorkflowFailure,
   HostInspectError,
-  HostToolNotFound,
-  HostOperationNotFound,
-  HostKindMismatch,
-  HostOperationFailed3,
+  HostToolNotFound2,
+  HostOperationNotFound2,
+  HostKindMismatch2,
+  HostOperationFailed4,
   DatabaseLimitExceeded,
-  HostInputInvalid,
-  HostOutputInvalid,
-  HostToolBlocked,
-  HostToolApprovalRequired,
-  HostToolPolicyFailed,
+  HostInputInvalid2,
+  HostOutputInvalid2,
+  HostToolBlocked2,
+  HostToolApprovalRequired2,
+  HostToolPolicyFailed2,
   ElicitationFailed
 ]);
 var HostAccountCheckError = Schema_exports.Union([
   ProviderError,
   WorkflowFailure,
-  HostRequestInvalid,
-  HostDeclarationInvalid3,
-  HostAccountsInvalid,
-  HostOperationNotFound,
-  HostOperationFailed3,
-  HostOutputInvalid
+  HostRequestInvalid2,
+  HostDeclarationInvalid4,
+  HostAccountsInvalid2,
+  HostOperationNotFound2,
+  HostOperationFailed4,
+  HostOutputInvalid2
 ]);
 var HostDataError = HostCallError;
 var ToolResultObservation = Context_exports.Reference(
@@ -3418,62 +4270,62 @@ export {
   EmittedEvent,
   EmittedEvents,
   frameworkProtocol,
-  minimumIntervalMilliseconds,
-  Interval,
-  CalendarSchedule,
-  ScheduleTiming,
-  OperationSchedule,
-  TrustedToolApproval,
-  InvocationDeadline,
-  HostRequestInvalid,
-  HostAccountsInvalid,
-  HostOperationNotFound,
-  HostToolNotFound,
-  InputProblem,
-  maxInputProblems,
-  HostInputInvalid,
-  HostToolBlocked,
-  HostToolApprovalRequired,
-  HostToolPolicyFailed,
-  HostOutputInvalid,
   protocol1,
-  SkillSources2 as SkillSources,
-  SkillCatalogResponse2 as SkillCatalogResponse,
   protocol2,
   protocol3,
-  HostedTool2 as HostedTool,
-  HostedToolSummary2 as HostedToolSummary,
-  HostKindMismatch,
   protocol4,
-  AccountCheckCommand,
   protocol5,
   protocol6,
-  CredentialHost,
-  DeclaredAuthMethod3 as DeclaredAuthMethod,
-  DeclaredProvider3 as DeclaredProvider,
-  ResolvedAccount3 as ResolvedAccount,
-  ResolvedAccounts3 as ResolvedAccounts,
   protocol7,
-  HostDeclarationInvalid3 as HostDeclarationInvalid,
-  HostEvaluationFailed3 as HostEvaluationFailed,
-  HostOperationFailed3 as HostOperationFailed,
   protocol8,
-  McpError5 as McpError2,
-  SkillLoadFailed2 as SkillLoadFailed,
-  HostRouterError3 as HostRouterError,
-  HostedRouter3 as HostedRouter,
-  HostedCatalog3 as HostedCatalog,
-  HostedCatalogSummary3 as HostedCatalogSummary,
-  HostError5 as HostError,
   protocol9,
-  MigrateCommand,
-  MigrateResult,
-  HostRequest4 as HostRequest,
-  HostInvocation6 as HostInvocation,
   protocol10,
+  minimumIntervalMilliseconds2 as minimumIntervalMilliseconds,
+  Interval,
+  CalendarSchedule2 as CalendarSchedule,
+  ScheduleTiming2 as ScheduleTiming,
+  OperationSchedule2 as OperationSchedule,
+  McpError6 as McpError2,
+  SkillLoadFailed3 as SkillLoadFailed,
+  CredentialHost2 as CredentialHost,
+  DeclaredAuthMethod4 as DeclaredAuthMethod,
+  DeclaredProvider4 as DeclaredProvider,
   DeclaredRequirements6 as DeclaredRequirements,
+  ResolvedAccount4 as ResolvedAccount,
+  ResolvedAccounts4 as ResolvedAccounts,
+  TrustedToolApproval2 as TrustedToolApproval,
+  InvocationDeadline2 as InvocationDeadline,
+  HostedTool3 as HostedTool,
+  HostedToolSummary3 as HostedToolSummary,
+  HostDeclarationInvalid4 as HostDeclarationInvalid,
+  HostEvaluationFailed4 as HostEvaluationFailed,
+  HostRouterError4 as HostRouterError,
+  HostedRouter4 as HostedRouter,
+  HostedCatalog4 as HostedCatalog,
+  HostedCatalogSummary4 as HostedCatalogSummary,
+  SkillSources3 as SkillSources,
+  SkillCatalogResponse3 as SkillCatalogResponse,
+  AccountCheckCommand2 as AccountCheckCommand,
+  MigrateCommand2 as MigrateCommand,
+  MigrateResult2 as MigrateResult,
+  HostRequest5 as HostRequest,
+  HostRequestInvalid2 as HostRequestInvalid,
+  HostAccountsInvalid2 as HostAccountsInvalid,
+  HostOperationNotFound2 as HostOperationNotFound,
+  HostOperationFailed4 as HostOperationFailed,
+  HostToolNotFound2 as HostToolNotFound,
+  HostKindMismatch2 as HostKindMismatch,
+  InputProblem2 as InputProblem,
+  maxInputProblems2 as maxInputProblems,
+  HostInputInvalid2 as HostInputInvalid,
+  HostToolBlocked2 as HostToolBlocked,
+  HostToolApprovalRequired2 as HostToolApprovalRequired,
+  HostToolPolicyFailed2 as HostToolPolicyFailed,
+  HostOutputInvalid2 as HostOutputInvalid,
+  HostError6 as HostError,
   HostResponse6 as HostResponse,
-  protocol11,
+  HostInvocation7 as HostInvocation,
+  current,
   skillsCommand,
   skillCatalog,
   inspectCommand,