apps 0.0.1-beta.54 → 0.0.1-beta.55

package/types/apps/src/contracts/protocols/2.d.ts

@@ -4,7 +4,8 @@
  *
  * Every other message is protocol 1's, re-exported unchanged. Once released this protocol is
  * frozen like protocol 1: `bun run check` compares `protocol2` with `packages/apps/protocols/2.json`.
- * Define the next protocol to change it. See notes/apps-publishing.md.
+ * The module imports only `effect` and earlier protocol modules, so no change elsewhere can alter
+ * it. Define the next protocol to change it. See notes/apps-publishing.md.
  */
 import { Schema } from "effect";
 export * from "./1.js";
@@ -425,7 +426,7 @@ export declare const protocol2: {
             readonly toolError: Schema.optionalKey<Schema.Literal<true>>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: Schema.Union<readonly [typeof import("../api-response-error.js").OpenapiResponseError, typeof import("./1.js").ProviderError, typeof import("./1.js").McpError, typeof import("./1.js").SkillLoadFailed, typeof import("./1.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof import("./1.js").HostDeclarationInvalid, typeof import("./1.js").HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./1.js").HostOperationFailed, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("../elicitation.js").ElicitationFailed]>;
+            readonly error: Schema.Union<readonly [typeof import("./1.js").OpenapiResponseError, typeof import("./1.js").ProviderError, typeof import("./1.js").McpError, typeof import("./1.js").SkillLoadFailed, typeof import("./1.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof import("./1.js").HostDeclarationInvalid, typeof import("./1.js").HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./1.js").HostOperationFailed, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("./1.js").ElicitationFailed]>;
         }>]>;
         readonly requirements: Schema.Struct<{
             readonly capabilities: Schema.optionalKey<Schema.Struct<{
@@ -599,7 +600,7 @@ export declare const protocol2: {
             }>]>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../elicitation.js").ElicitationFailed;
+            readonly error: typeof import("./1.js").ElicitationFailed;
         }>]>;
         readonly workflowStep: Schema.Union<readonly [Schema.Struct<{
             readonly operation: Schema.Literal<"do">;
@@ -704,7 +705,7 @@ export declare const protocol2: {
             readonly value: Schema.Codec<Schema.Json, Schema.Json, never, never>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../../../../app-cache/src/index.js").CacheError;
+            readonly error: typeof import("./1.js").CacheError;
         }>]>;
     };
 };

package/types/apps/src/contracts/protocols/3.d.ts

@@ -5,17 +5,78 @@
  * database budget, and declarations with a reserved database field, fail with their named error.
  *
  * This protocol is released and frozen once merged. `bun run check` compares `protocol3` with
- * `packages/apps/protocols/3.json`. Do not edit this file or the schemas it reaches to change the
- * wire format; define the next protocol instead. See notes/apps-publishing.md.
+ * `packages/apps/protocols/3.json`. The module imports only `effect` and earlier protocol modules,
+ * so no change elsewhere can alter it; define the next protocol to change the wire format.
+ * See notes/apps-publishing.md.
  */
 import { Schema } from "effect";
-import { DatabaseFieldReserved, DatabaseLimitExceeded } from "../../../../app-data/src/contracts/database.js";
-import { OpenapiResponseError } from "../api-response-error.js";
-import { ElicitationFailed } from "../elicitation.js";
-import { WorkflowFailure } from "../workflows.js";
-import { HostAccountsInvalid, HostInputInvalid, HostOperationNotFound, HostOutputInvalid, HostRequestInvalid, HostToolApprovalRequired, HostToolBlocked, HostToolNotFound, HostToolPolicyFailed, McpError, ProviderError, SkillLoadFailed } from "./1.js";
+import { ElicitationFailed, HostAccountsInvalid, HostInputInvalid, HostOperationNotFound, HostOutputInvalid, HostRequestInvalid, HostToolApprovalRequired, HostToolBlocked, HostToolNotFound, HostToolPolicyFailed, McpError, OpenapiResponseError, ProviderError, SkillLoadFailed } from "./1.js";
 export { DeclaredAuthMethod, DeclaredProvider, DeclaredRequirements, ResolvedAccount, ResolvedAccounts, TrustedToolApproval, InvocationDeadline, HostedTool, HostedToolSummary, HostRequest, HostRequestInvalid, HostAccountsInvalid, HostOperationNotFound, HostToolNotFound, InputProblem, maxInputProblems, HostInputInvalid, HostToolBlocked, HostToolApprovalRequired, HostToolPolicyFailed, HostOutputInvalid, HostInvocation, } from "./1.js";
 export { SkillSources, SkillCatalogResponse } from "./2.js";
+/** Longest failure message carried across the runtime boundary. */
+export declare const maxFailureMessageLength = 2048;
+/**
+ * `app` for errors thrown by authored code, `storage` for app data failures the host raised, and
+ * `service` for an external API the app called through a framework helper.
+ */
+export declare const FailureSource: Schema.Literals<readonly ["app", "storage", "service"]>;
+/** The thrown error's name, such as `TypeError`, or the host error's tag. */
+export declare const FailureName: Schema.String;
+/** A stable host failure code, such as an app data reason, or the thrown error's own `code`. */
+export declare const FailureCode: Schema.String;
+/** Bounded, with the invocation's account secrets replaced. */
+export declare const FailureMessage: Schema.String;
+/**
+ * Where and why a run failed: the failing step and the error the app's own code raised, its
+ * message bounded and with account secrets replaced. Runs from before these fields existed have none.
+ */
+export declare const WorkflowFailureDetail: {
+    step: Schema.optionalKey<Schema.String>;
+    errorName: Schema.optionalKey<Schema.String>;
+    message: Schema.optionalKey<Schema.String>;
+};
+declare const WorkflowFailure_base: Schema.Class<WorkflowFailure, Schema.TaggedStruct<"WorkflowFailure", {
+    readonly reason: Schema.Literals<readonly ["unavailable", "not_found", "input", "output", "operation", "approval", "credentials", "terminated", "execution", "conflict", "engine"]>;
+    readonly retryable: Schema.Boolean;
+    readonly step: Schema.optionalKey<Schema.String>;
+    readonly errorName: Schema.optionalKey<Schema.String>;
+    readonly message: Schema.optionalKey<Schema.String>;
+}>, import("effect/Cause").YieldableError>;
+/** Failures cross host boundaries as reason codes plus the app's own bounded error detail. */
+export declare class WorkflowFailure extends WorkflowFailure_base {
+}
+/** Protocol 3's workflow step reply, carrying the failing step and app error. */
+export declare const WorkflowRpcResult: Schema.Union<readonly [Schema.Struct<{
+    readonly ok: Schema.Literal<true>;
+    readonly value: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+}>, Schema.Struct<{
+    readonly ok: Schema.Literal<false>;
+    readonly error: typeof WorkflowFailure;
+}>]>;
+export type WorkflowRpcResult = typeof WorkflowRpcResult.Type;
+/**
+ * The budget a query or mutation exhausted. `pageSize` bounds one take(n) or paginate call;
+ * `valueBytes` bounds one stored row; the rest accumulate across the whole invocation.
+ */
+export declare const DatabaseLimit: Schema.Literals<readonly ["scanCalls", "directGets", "rowsRead", "rowsReturned", "pageSize", "bytesRead", "writes", "valueBytes"]>;
+export type DatabaseLimit = typeof DatabaseLimit.Type;
+declare const DatabaseLimitExceeded_base: Schema.Class<DatabaseLimitExceeded, Schema.TaggedStruct<"DatabaseLimitExceeded", {
+    readonly limit: Schema.Literals<readonly ["scanCalls", "directGets", "rowsRead", "rowsReturned", "pageSize", "bytesRead", "writes", "valueBytes"]>;
+    readonly maximum: Schema.Int;
+    readonly requested: Schema.Int;
+}>, import("effect/Cause").YieldableError>;
+/** A query or mutation exceeded one of its database budgets. Nothing it wrote is committed. */
+export declare class DatabaseLimitExceeded extends DatabaseLimitExceeded_base {
+}
+/** Host-owned row metadata that authored tables cannot declare. */
+export declare const reservedFieldNames: readonly ["id", "createdAt", "updatedAt"];
+declare const DatabaseFieldReserved_base: Schema.Class<DatabaseFieldReserved, Schema.TaggedStruct<"DatabaseFieldReserved", {
+    readonly table: Schema.String;
+    readonly field: Schema.Literals<readonly ["id", "createdAt", "updatedAt"]>;
+}>, import("effect/Cause").YieldableError>;
+/** A table declared a field the host adds to every row. */
+export declare class DatabaseFieldReserved extends DatabaseFieldReserved_base {
+}
 declare const HostDeclarationInvalid_base: Schema.Class<HostDeclarationInvalid, Schema.TaggedStruct<"HostDeclarationInvalid", {
     source: Schema.optionalKey<Schema.Literals<readonly ["app", "storage", "service"]>>;
     errorName: Schema.optionalKey<Schema.String>;
@@ -709,7 +770,7 @@ export declare const protocol3: {
             readonly value: Schema.Codec<Schema.Json, Schema.Json, never, never>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../../../../app-cache/src/index.js").CacheError;
+            readonly error: typeof import("./1.js").CacheError;
         }>]>;
     };
 };

package/types/apps/src/contracts/protocols/4.d.ts

@@ -2,15 +2,24 @@
  * Host protocol 4: protocol 3 plus call kinds and routers. `call` carries the caller's `kind`, and
  * a bundle refuses a call whose tool has the other kind with `HostKindMismatch`. Inspection
  * answers with a catalog of tools and the routers that group them, instead of a list of tools.
- * Messages it does not change are protocol 3's, imported from its frozen module.
+ * Messages it does not change are protocol 3's, taken from its frozen module.
  *
  * Once released, this protocol is frozen like the earlier ones: `bun run check` compares
- * `protocol4` with `packages/apps/protocols/4.json`. See notes/apps-publishing.md.
+ * `protocol4` with `packages/apps/protocols/4.json`. The module imports only `effect` and earlier
+ * protocol modules, so no change elsewhere can alter it. See notes/apps-publishing.md.
  */
 import { Schema } from "effect";
-import { HostDeclarationInvalid, HostEvaluationFailed } from "./3.js";
 import { McpError, ProviderError, SkillLoadFailed } from "./1.js";
+import { HostDeclarationInvalid, HostEvaluationFailed } from "./3.js";
 export { DeclaredAuthMethod, DeclaredProvider, DeclaredRequirements, ResolvedAccount, ResolvedAccounts, TrustedToolApproval, InvocationDeadline, SkillSources, SkillCatalogResponse, HostRequestInvalid, HostAccountsInvalid, HostDeclarationInvalid, HostEvaluationFailed, HostOperationNotFound, HostOperationFailed, HostToolNotFound, InputProblem, maxInputProblems, HostInputInvalid, HostToolBlocked, HostToolApprovalRequired, HostToolPolicyFailed, HostOutputInvalid, } from "./3.js";
+/** An image a client may show beside a router, such as an MCP server's own icon. Models never read it. */
+export declare const RouterIcon: Schema.Struct<{
+    readonly src: Schema.NonEmptyString;
+    readonly mimeType: Schema.optionalKey<Schema.String>;
+    readonly sizes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    readonly theme: Schema.optionalKey<Schema.Literals<readonly ["light", "dark"]>>;
+}>;
+export type RouterIcon = typeof RouterIcon.Type;
 /**
  * Serializable live tool metadata; executable callbacks never cross this boundary. `name` is the
  * tool's full dotted path. `router` is the path of the router that owns it, omitted at the root.
@@ -313,7 +322,7 @@ export declare class HostKindMismatch extends HostKindMismatch_base {
  * Safe error envelope. Author failures carry only their name and bounded message with account
  * secrets replaced; no source, account fields, stack or cause value is serialized.
  */
-export declare const HostError: Schema.Union<readonly [typeof import("../api-response-error.js").OpenapiResponseError, typeof ProviderError, typeof McpError, typeof SkillLoadFailed, typeof import("../workflows.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof HostDeclarationInvalid, typeof HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./3.js").HostOperationFailed, typeof import("../../../../app-data/src/contracts/database.js").DatabaseLimitExceeded, typeof import("../../../../app-data/src/contracts/database.js").DatabaseFieldReserved, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("../elicitation.js").ElicitationFailed, typeof HostKindMismatch]>;
+export declare const HostError: Schema.Union<readonly [typeof import("./1.js").OpenapiResponseError, typeof ProviderError, typeof McpError, typeof SkillLoadFailed, typeof import("./3.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof HostDeclarationInvalid, typeof HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./3.js").HostOperationFailed, typeof import("./3.js").DatabaseLimitExceeded, typeof import("./3.js").DatabaseFieldReserved, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("./1.js").ElicitationFailed, typeof HostKindMismatch]>;
 /** Expected host failures. */
 export type HostError = typeof HostError.Type;
 /** Portable response envelope; callers parse the success value for their operation. */
@@ -323,7 +332,7 @@ export declare const HostResponse: Schema.Union<readonly [Schema.Struct<{
     readonly toolError: Schema.optionalKey<Schema.Literal<true>>;
 }>, Schema.Struct<{
     readonly ok: Schema.Literal<false>;
-    readonly error: Schema.Union<readonly [typeof import("../api-response-error.js").OpenapiResponseError, typeof ProviderError, typeof McpError, typeof SkillLoadFailed, typeof import("../workflows.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof HostDeclarationInvalid, typeof HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./3.js").HostOperationFailed, typeof import("../../../../app-data/src/contracts/database.js").DatabaseLimitExceeded, typeof import("../../../../app-data/src/contracts/database.js").DatabaseFieldReserved, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("../elicitation.js").ElicitationFailed, typeof HostKindMismatch]>;
+    readonly error: Schema.Union<readonly [typeof import("./1.js").OpenapiResponseError, typeof ProviderError, typeof McpError, typeof SkillLoadFailed, typeof import("./3.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof HostDeclarationInvalid, typeof HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./3.js").HostOperationFailed, typeof import("./3.js").DatabaseLimitExceeded, typeof import("./3.js").DatabaseFieldReserved, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("./1.js").ElicitationFailed, typeof HostKindMismatch]>;
 }>]>;
 /** Parsed response envelope. */
 export type HostResponse = typeof HostResponse.Type;
@@ -949,7 +958,7 @@ export declare const protocol4: {
             readonly toolError: Schema.optionalKey<Schema.Literal<true>>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: Schema.Union<readonly [typeof import("../api-response-error.js").OpenapiResponseError, typeof ProviderError, typeof McpError, typeof SkillLoadFailed, typeof import("../workflows.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof HostDeclarationInvalid, typeof HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./3.js").HostOperationFailed, typeof import("../../../../app-data/src/contracts/database.js").DatabaseLimitExceeded, typeof import("../../../../app-data/src/contracts/database.js").DatabaseFieldReserved, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("../elicitation.js").ElicitationFailed, typeof HostKindMismatch]>;
+            readonly error: Schema.Union<readonly [typeof import("./1.js").OpenapiResponseError, typeof ProviderError, typeof McpError, typeof SkillLoadFailed, typeof import("./3.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof HostDeclarationInvalid, typeof HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./3.js").HostOperationFailed, typeof import("./3.js").DatabaseLimitExceeded, typeof import("./3.js").DatabaseFieldReserved, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("./1.js").ElicitationFailed, typeof HostKindMismatch]>;
         }>]>;
         readonly requirements: Schema.Struct<{
             readonly capabilities: Schema.optionalKey<Schema.Struct<{
@@ -1186,7 +1195,7 @@ export declare const protocol4: {
             }>]>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../elicitation.js").ElicitationFailed;
+            readonly error: typeof import("./1.js").ElicitationFailed;
         }>]>;
         readonly workflowStep: Schema.Union<readonly [Schema.Struct<{
             readonly operation: Schema.Literal<"do">;
@@ -1222,7 +1231,7 @@ export declare const protocol4: {
             readonly value: Schema.Codec<Schema.Json, Schema.Json, never, never>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../workflows.js").WorkflowFailure;
+            readonly error: typeof import("./3.js").WorkflowFailure;
         }>]>;
         readonly workflowControl: Schema.Union<readonly [Schema.Struct<{
             readonly operation: Schema.Literal<"start">;
@@ -1291,7 +1300,7 @@ export declare const protocol4: {
             readonly value: Schema.Codec<Schema.Json, Schema.Json, never, never>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../../../../app-cache/src/index.js").CacheError;
+            readonly error: typeof import("./1.js").CacheError;
         }>]>;
     };
 };

package/types/apps/src/contracts/protocols/5.d.ts

@@ -6,11 +6,37 @@
  * unchanged.
  *
  * Once released this protocol is frozen like the earlier ones: `bun run check` compares `protocol5` with
- * `packages/apps/protocols/5.json`. Define the next protocol instead of editing this file.
+ * `packages/apps/protocols/5.json`. The module imports only `effect` and earlier protocol modules,
+ * so no change elsewhere can alter it. Define the next protocol instead of editing this file.
  * See notes/apps-publishing.md.
  */
 import { Schema } from "effect";
 export * from "./4.js";
+/**
+ * Upstream identity that a passing account check may report for display. Only these fields are
+ * retained; the host never stores raw provider responses.
+ */
+export declare const AccountInfo: Schema.Struct<{
+    readonly externalId: Schema.optionalKey<Schema.String>;
+    readonly displayName: Schema.optionalKey<Schema.String>;
+    readonly username: Schema.optionalKey<Schema.String>;
+    readonly email: Schema.optionalKey<Schema.String>;
+    readonly avatarUrl: Schema.optionalKey<Schema.String>;
+    readonly profileUrl: Schema.optionalKey<Schema.String>;
+}>;
+export type AccountInfo = typeof AccountInfo.Type;
+/** A passing account check. Failures are thrown, so there is no failing variant. */
+export declare const AccountCheckResult: Schema.Struct<{
+    readonly accountInfo: Schema.optionalKey<Schema.Struct<{
+        readonly externalId: Schema.optionalKey<Schema.String>;
+        readonly displayName: Schema.optionalKey<Schema.String>;
+        readonly username: Schema.optionalKey<Schema.String>;
+        readonly email: Schema.optionalKey<Schema.String>;
+        readonly avatarUrl: Schema.optionalKey<Schema.String>;
+        readonly profileUrl: Schema.optionalKey<Schema.String>;
+    }>>;
+}>;
+export type AccountCheckResult = typeof AccountCheckResult.Type;
 /** Account slots available without binding accounts or evaluating the app factory. */
 export declare const DeclaredRequirements: Schema.Struct<{
     /** Protocol support of this retained framework build, not an author-declared requirement. */
@@ -918,7 +944,7 @@ export declare const protocol5: {
             readonly toolError: Schema.optionalKey<Schema.Literal<true>>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: Schema.Union<readonly [typeof import("../api-response-error.js").OpenapiResponseError, typeof import("./1.js").ProviderError, typeof import("./1.js").McpError, typeof import("./1.js").SkillLoadFailed, typeof import("../workflows.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof import("./3.js").HostDeclarationInvalid, typeof import("./3.js").HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./3.js").HostOperationFailed, typeof import("../../../../app-data/src/contracts/database.js").DatabaseLimitExceeded, typeof import("../../../../app-data/src/contracts/database.js").DatabaseFieldReserved, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("../elicitation.js").ElicitationFailed, typeof import("./4.js").HostKindMismatch]>;
+            readonly error: Schema.Union<readonly [typeof import("./1.js").OpenapiResponseError, typeof import("./1.js").ProviderError, typeof import("./1.js").McpError, typeof import("./1.js").SkillLoadFailed, typeof import("./3.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof import("./3.js").HostDeclarationInvalid, typeof import("./3.js").HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./3.js").HostOperationFailed, typeof import("./3.js").DatabaseLimitExceeded, typeof import("./3.js").DatabaseFieldReserved, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("./1.js").ElicitationFailed, typeof import("./4.js").HostKindMismatch]>;
         }>]>;
         readonly catalog: Schema.Struct<{
             readonly tools: Schema.$Array<Schema.Struct<{
@@ -1063,7 +1089,7 @@ export declare const protocol5: {
             }>]>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../elicitation.js").ElicitationFailed;
+            readonly error: typeof import("./1.js").ElicitationFailed;
         }>]>;
         readonly workflowStep: Schema.Union<readonly [Schema.Struct<{
             readonly operation: Schema.Literal<"do">;
@@ -1099,7 +1125,7 @@ export declare const protocol5: {
             readonly value: Schema.Codec<Schema.Json, Schema.Json, never, never>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../workflows.js").WorkflowFailure;
+            readonly error: typeof import("./3.js").WorkflowFailure;
         }>]>;
         readonly workflowControl: Schema.Union<readonly [Schema.Struct<{
             readonly operation: Schema.Literal<"start">;
@@ -1168,7 +1194,7 @@ export declare const protocol5: {
             readonly value: Schema.Codec<Schema.Json, Schema.Json, never, never>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../../../../app-cache/src/index.js").CacheError;
+            readonly error: typeof import("./1.js").CacheError;
         }>]>;
     };
 };

package/types/apps/src/contracts/protocols/6.d.ts

@@ -1,4 +1,13 @@
-/** Host protocol 6 adds an explicit authorization-server metadata URL to OAuth discovery. */
+/**
+ * Host protocol 6: protocol 5 plus an explicit authorization-server metadata URL on OAuth
+ * discovery, in both requirements and resolved account bindings. Every other message is protocol
+ * 5's, re-exported unchanged.
+ *
+ * Once released this protocol is frozen like the earlier ones: `bun run check` compares `protocol6`
+ * with `packages/apps/protocols/6.json`. The module imports only `effect` and earlier protocol
+ * modules, so no change elsewhere can alter it. Define the next protocol instead of editing this
+ * file. See notes/apps-publishing.md.
+ */
 import { Schema } from "effect";
 export * from "./5.js";
 /** Serializable authentication declarations interpreted by the trusted host. */
@@ -1364,7 +1373,7 @@ export declare const protocol6: {
             readonly toolError: Schema.optionalKey<Schema.Literal<true>>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: Schema.Union<readonly [typeof import("../api-response-error.js").OpenapiResponseError, typeof import("./1.js").ProviderError, typeof import("./1.js").McpError, typeof import("./1.js").SkillLoadFailed, typeof import("../workflows.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof import("./3.js").HostDeclarationInvalid, typeof import("./3.js").HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./3.js").HostOperationFailed, typeof import("../../../../app-data/src/contracts/database.js").DatabaseLimitExceeded, typeof import("../../../../app-data/src/contracts/database.js").DatabaseFieldReserved, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("../elicitation.js").ElicitationFailed, typeof import("./4.js").HostKindMismatch]>;
+            readonly error: Schema.Union<readonly [typeof import("./1.js").OpenapiResponseError, typeof import("./1.js").ProviderError, typeof import("./1.js").McpError, typeof import("./1.js").SkillLoadFailed, typeof import("./3.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof import("./3.js").HostDeclarationInvalid, typeof import("./3.js").HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./3.js").HostOperationFailed, typeof import("./3.js").DatabaseLimitExceeded, typeof import("./3.js").DatabaseFieldReserved, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("./1.js").ElicitationFailed, typeof import("./4.js").HostKindMismatch]>;
         }>]>;
         readonly catalog: Schema.Struct<{
             readonly tools: Schema.$Array<Schema.Struct<{
@@ -1509,7 +1518,7 @@ export declare const protocol6: {
             }>]>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../elicitation.js").ElicitationFailed;
+            readonly error: typeof import("./1.js").ElicitationFailed;
         }>]>;
         readonly workflowStep: Schema.Union<readonly [Schema.Struct<{
             readonly operation: Schema.Literal<"do">;
@@ -1545,7 +1554,7 @@ export declare const protocol6: {
             readonly value: Schema.Codec<Schema.Json, Schema.Json, never, never>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../workflows.js").WorkflowFailure;
+            readonly error: typeof import("./3.js").WorkflowFailure;
         }>]>;
         readonly workflowControl: Schema.Union<readonly [Schema.Struct<{
             readonly operation: Schema.Literal<"start">;
@@ -1614,7 +1623,7 @@ export declare const protocol6: {
             readonly value: Schema.Codec<Schema.Json, Schema.Json, never, never>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../../../../app-cache/src/index.js").CacheError;
+            readonly error: typeof import("./1.js").CacheError;
         }>]>;
     };
 };

package/types/apps/src/contracts/protocols/7.d.ts

@@ -10,7 +10,8 @@
  * message is protocol 6's, re-exported unchanged.
  *
  * Once released this protocol is frozen like the earlier ones: `bun run check` compares `protocol7` with
- * `packages/apps/protocols/7.json`. Define the next protocol instead of editing this file.
+ * `packages/apps/protocols/7.json`. The module imports only `effect` and earlier protocol modules,
+ * so no change elsewhere can alter it. Define the next protocol instead of editing this file.
  * See notes/apps-publishing.md.
  */
 import { Schema } from "effect";
@@ -1528,7 +1529,7 @@ export declare const protocol7: {
             readonly toolError: Schema.optionalKey<Schema.Literal<true>>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: Schema.Union<readonly [typeof import("../api-response-error.js").OpenapiResponseError, typeof import("./1.js").ProviderError, typeof import("./1.js").McpError, typeof import("./1.js").SkillLoadFailed, typeof import("../workflows.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof import("./3.js").HostDeclarationInvalid, typeof import("./3.js").HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./3.js").HostOperationFailed, typeof import("../../../../app-data/src/contracts/database.js").DatabaseLimitExceeded, typeof import("../../../../app-data/src/contracts/database.js").DatabaseFieldReserved, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("../elicitation.js").ElicitationFailed, typeof import("./4.js").HostKindMismatch]>;
+            readonly error: Schema.Union<readonly [typeof import("./1.js").OpenapiResponseError, typeof import("./1.js").ProviderError, typeof import("./1.js").McpError, typeof import("./1.js").SkillLoadFailed, typeof import("./3.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof import("./3.js").HostDeclarationInvalid, typeof import("./3.js").HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./3.js").HostOperationFailed, typeof import("./3.js").DatabaseLimitExceeded, typeof import("./3.js").DatabaseFieldReserved, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("./1.js").ElicitationFailed, typeof import("./4.js").HostKindMismatch]>;
         }>]>;
         readonly catalog: Schema.Struct<{
             readonly tools: Schema.$Array<Schema.Struct<{
@@ -1673,7 +1674,7 @@ export declare const protocol7: {
             }>]>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../elicitation.js").ElicitationFailed;
+            readonly error: typeof import("./1.js").ElicitationFailed;
         }>]>;
         readonly workflowStep: Schema.Union<readonly [Schema.Struct<{
             readonly operation: Schema.Literal<"do">;
@@ -1709,7 +1710,7 @@ export declare const protocol7: {
             readonly value: Schema.Codec<Schema.Json, Schema.Json, never, never>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../workflows.js").WorkflowFailure;
+            readonly error: typeof import("./3.js").WorkflowFailure;
         }>]>;
         readonly workflowControl: Schema.Union<readonly [Schema.Struct<{
             readonly operation: Schema.Literal<"start">;
@@ -1778,7 +1779,7 @@ export declare const protocol7: {
             readonly value: Schema.Codec<Schema.Json, Schema.Json, never, never>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../../../../app-cache/src/index.js").CacheError;
+            readonly error: typeof import("./1.js").CacheError;
         }>]>;
     };
 };

package/types/apps/src/contracts/protocols/8.d.ts

@@ -9,18 +9,70 @@
  * protocol 7's, re-exported unchanged.
  *
  * Once released this protocol is frozen like the earlier ones: `bun run check` compares `protocol8`
- * with `packages/apps/protocols/8.json`. Define the next protocol instead of editing this file.
- * See notes/apps-publishing.md.
+ * with `packages/apps/protocols/8.json`. The module imports only `effect` and earlier protocol
+ * modules, so no change elsewhere can alter it. Define the next protocol instead of editing this
+ * file. See notes/apps-publishing.md.
  */
 import { Schema } from "effect";
-import { DatabaseFieldReserved, DatabaseLimitExceeded } from "../../../../app-data/src/contracts/database.js";
-import { OpenapiResponseError } from "../api-response-error.js";
-import { ElicitationFailed } from "../elicitation.js";
-import { ProviderError } from "../provider-error.js";
-import { WorkflowFailure } from "../workflows.js";
+import { ElicitationFailed, OpenapiResponseError, SkillLoadFailed } from "./1.js";
+import { DatabaseFieldReserved, DatabaseLimitExceeded, WorkflowFailure } from "./3.js";
 import { HostAccountsInvalid, HostInputInvalid, HostKindMismatch, HostOperationNotFound, HostOutputInvalid, HostRequestInvalid, HostToolApprovalRequired, HostToolBlocked, HostToolNotFound, HostToolPolicyFailed } from "./7.js";
-import { SkillLoadFailed } from "./1.js";
 export * from "./7.js";
+/** Most fields of one thrown error carried across the runtime boundary. */
+export declare const maxFailureFields = 8;
+/** Longest text field value carried across the runtime boundary. */
+export declare const maxFailureFieldLength = 256;
+/** A field name as the error's code spells it, such as `reason` or `pointer`. */
+export declare const FailureFieldName: Schema.String;
+/** Bounded text with account secrets replaced, a finite number, or a boolean. */
+export declare const FailureFieldValue: Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean]>;
+/**
+ * The thrown error's own scalar fields beside its name, code and message, such as the `reason`
+ * and `pointer` a spec compiler sets. Nested values, stacks and causes are never carried.
+ */
+export declare const FailureFields: Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean]>>;
+export type FailureFields = typeof FailureFields.Type;
+/**
+ * The error an app's own code raised, or the specific host failure it hit. Stacks and cause
+ * values stay private. Builds from before these fields existed send none.
+ */
+export declare const FailureDetail: {
+    source: Schema.optionalKey<Schema.Literals<readonly ["app", "storage", "service"]>>;
+    errorName: Schema.optionalKey<Schema.String>;
+    code: Schema.optionalKey<Schema.String>;
+    message: Schema.optionalKey<Schema.String>;
+    fields: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean]>>>;
+};
+/** Longest error message a service stated, as carried across the runtime boundary. */
+export declare const maxUpstreamMessageLength = 1024;
+/**
+ * The error a service stated in its own response: a JSON-RPC error's code and message, or an
+ * OAuth Bearer error code and description. Bounded, with the invocation's account secrets replaced.
+ */
+export declare const UpstreamError: Schema.Struct<{
+    readonly code: Schema.Union<readonly [Schema.Int, Schema.String]>;
+    readonly message: Schema.optionalKey<Schema.String>;
+}>;
+export type UpstreamError = typeof UpstreamError.Type;
+/** Where a service failed: setting up a session, listing tools, or running one. */
+export declare const FailurePhase: Schema.Literals<readonly ["connect", "discover", "call"]>;
+export type FailurePhase = typeof FailurePhase.Type;
+declare const ProviderError_base: Schema.Class<ProviderError, Schema.TaggedStruct<"ProviderError", {
+    readonly reason: Schema.Literals<readonly ["unauthorized", "forbidden", "rate_limited", "unavailable", "rejected"]>;
+    readonly status: Schema.optional<Schema.Int>;
+    readonly accountId: Schema.optional<Schema.brand<Schema.String, "acc">>;
+    readonly phase: Schema.optional<Schema.Literals<readonly ["connect", "discover", "call"]>>;
+    readonly upstream: Schema.optional<Schema.Struct<{
+        readonly code: Schema.Union<readonly [Schema.Int, Schema.String]>;
+        readonly message: Schema.optionalKey<Schema.String>;
+    }>>;
+}>, import("effect/Cause").YieldableError>;
+/**
+ * Protocol 8's provider failure, as released: protocol 1's with the phase the failure happened in
+ * and the error code and description the service stated. Account secrets in that text are replaced.
+ */
+export declare class ProviderError extends ProviderError_base {
+}
 declare const McpError_base: Schema.Class<McpError, Schema.TaggedStruct<"McpError", {
     readonly phase: Schema.Literals<readonly ["connect", "discover", "call", "schema", "transport"]>;
     readonly reason: Schema.Literals<readonly ["request", "unauthorized", "invalid_response", "timeout", "invalid_input"]>;
@@ -1124,7 +1176,7 @@ export declare const protocol8: {
             readonly value: Schema.Codec<Schema.Json, Schema.Json, never, never>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../../../../app-cache/src/index.js").CacheError;
+            readonly error: typeof import("./1.js").CacheError;
         }>]>;
     };
 };

package/types/apps/src/contracts/protocols/9.d.ts

@@ -9,16 +9,14 @@
  * is protocol 8's, re-exported unchanged.
  *
  * Once released this protocol is frozen like the earlier ones: `bun run check` compares `protocol9`
- * with `packages/apps/protocols/9.json`. Define the next protocol instead of editing this file.
- * See notes/apps-publishing.md.
+ * with `packages/apps/protocols/9.json`. The module imports only `effect` and earlier protocol
+ * modules, so no change elsewhere can alter it. Define the next protocol instead of editing this
+ * file. See notes/apps-publishing.md.
  */
 import { Schema } from "effect";
-import { DatabaseFieldReserved, DatabaseLimitExceeded } from "../../../../app-data/src/contracts/database.js";
-import { OpenapiResponseError } from "../api-response-error.js";
-import { ElicitationFailed } from "../elicitation.js";
-import { ProviderError } from "../provider-error.js";
-import { WorkflowFailure } from "../workflows.js";
-import { HostAccountsInvalid, HostDeclarationInvalid, HostEvaluationFailed, HostInputInvalid, HostKindMismatch, HostOperationFailed, HostOperationNotFound, HostOutputInvalid, HostRequestInvalid, HostToolApprovalRequired, HostToolBlocked, HostToolNotFound, HostToolPolicyFailed } from "./8.js";
+import { ElicitationFailed, OpenapiResponseError } from "./1.js";
+import { DatabaseFieldReserved, DatabaseLimitExceeded, WorkflowFailure } from "./3.js";
+import { HostAccountsInvalid, HostDeclarationInvalid, HostEvaluationFailed, HostInputInvalid, HostKindMismatch, HostOperationFailed, HostOperationNotFound, HostOutputInvalid, HostRequestInvalid, HostToolApprovalRequired, HostToolBlocked, HostToolNotFound, HostToolPolicyFailed, ProviderError } from "./8.js";
 export * from "./8.js";
 declare const McpError_base: Schema.Class<McpError, Schema.TaggedStruct<"McpError", {
     readonly phase: Schema.Literals<readonly ["connect", "discover", "call", "schema", "transport"]>;
@@ -1100,7 +1098,7 @@ export declare const protocol9: {
             readonly value: Schema.Codec<Schema.Json, Schema.Json, never, never>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../../../../app-cache/src/index.js").CacheError;
+            readonly error: typeof import("./1.js").CacheError;
         }>]>;
     };
 };