apps 0.0.1-beta.70 → 0.0.1-beta.73

package/js/{chunk-WGQP62EG.js → chunk-G7L5DHQX.js}

@@ -1,6 +1,6 @@
 import {
   prepareElicitation
-} from "./chunk-2YSTJMBD.js";
+} from "./chunk-WCVV4PPS.js";
 import {
   bodyUpstreamError,
   fromPromise

package/js/{chunk-M5OLYYNU.js → chunk-LTF4TLMO.js}

@@ -3,7 +3,7 @@ import {
   answeredError,
   mcpClient,
   mcpJsonSchemaValidator
-} from "./chunk-WGQP62EG.js";
+} from "./chunk-G7L5DHQX.js";
 import {
   failOnNetworkRefusal
 } from "./chunk-MHB7IFG7.js";

package/js/{chunk-4NCIPADO.js → chunk-OBYMFSWA.js}

@@ -229,9 +229,11 @@ var OpenapiSkippedOperation = Schema_exports.Struct({
 var listedReasons = 8;
 var reasonLength = 240;
 var cut = (text) => text.length <= reasonLength ? text : `${text.slice(0, reasonLength - 1)}\u2026`;
+var customTool = `To call a left-out operation anyway, write a custom tool for it in this app with the same account: see "Custom tools beside generated ones" in the app-authoring skill's integrations.md.`;
 var compileMessage = (error) => {
   const skipped = error.skipped ?? [];
   if (skipped.length === 0) return error.reason;
+  const close = skipped.some(({ code }) => code !== "event_stream") ? ` ${customTool}` : "";
   const groups = /* @__PURE__ */ new Map();
   for (const operation of skipped) {
     const key = JSON.stringify([operation.code, operation.reason]);
@@ -242,12 +244,17 @@ var compileMessage = (error) => {
   const example = ({ first, count: count2 }) => `${first.method} ${first.path}${count2 > 1 ? ` and ${count2 - 1} more` : ""}`;
   const [only, ...others] = groups.values();
   if (only !== void 0 && others.length === 0 && only.first.code === error.code && only.first.reason === error.reason)
-    return `${error.reason} Left out: ${example(only)}.`;
-  const listed = [...groups.values()].slice(0, listedReasons);
+    return `${error.reason} Left out: ${example(only)}.${close}`;
+  const listed = [];
+  let room = maxFailureMessageLength - `${error.reason} Left out: ; and ${groups.size} other reasons.${close}`.length;
+  for (const group of groups.values()) {
+    const text = `${example(group)} (${group.first.code}: ${cut(group.first.reason.replace(/\.$/, ""))})`;
+    if (listed.length === listedReasons || text.length + 2 > room) break;
+    listed.push(text);
+    room -= text.length + 2;
+  }
   const rest = groups.size - listed.length;
-  return `${error.reason} Left out: ${listed.map(
-    (group) => `${example(group)} (${group.first.code}: ${cut(group.first.reason.replace(/\.$/, ""))})`
-  ).join("; ")}${rest > 0 ? `; and ${rest} other reasons` : ""}.`;
+  return `${error.reason} Left out: ${listed.join("; ")}${rest > 0 ? `; and ${rest} other reasons` : ""}.${close}`;
 };
 var OpenapiCompileError = class extends Schema_exports.TaggedError()(
   "OpenapiCompileError",

package/js/{chunk-WDIVWSDG.js → chunk-QGHGYH5V.js}

@@ -1,6 +1,6 @@
 import {
   fixedRouter
-} from "./chunk-4NCIPADO.js";
+} from "./chunk-OBYMFSWA.js";
 import {
   nativeOperation,
   operationDeclaration,

package/js/{chunk-2YSTJMBD.js → chunk-WCVV4PPS.js}

@@ -11,7 +11,7 @@ import {
   parseSkillLoadFailed,
   readCatalog,
   routerSkills
-} from "./chunk-4NCIPADO.js";
+} from "./chunk-OBYMFSWA.js";
 import {
   appInvocationFetch
 } from "./chunk-MHB7IFG7.js";

package/js/effect.js

@@ -3,9 +3,9 @@ import {
   ApprovalDecision,
   createAppHandler,
   prepareElicitation
-} from "./chunk-2YSTJMBD.js";
+} from "./chunk-WCVV4PPS.js";
 import "./chunk-RUP4JMKO.js";
-import "./chunk-4NCIPADO.js";
+import "./chunk-OBYMFSWA.js";
 import "./chunk-MHB7IFG7.js";
 import "./chunk-XBG7HHXC.js";
 import "./chunk-3R3KFCDU.js";

package/js/graphql.js

@@ -4,13 +4,13 @@ import {
 } from "./chunk-ECCWT5GJ.js";
 import {
   protocolOperations
-} from "./chunk-WDIVWSDG.js";
+} from "./chunk-QGHGYH5V.js";
 import "./chunk-BCSNKUAC.js";
-import "./chunk-2YSTJMBD.js";
+import "./chunk-WCVV4PPS.js";
 import {
   cacheKey
 } from "./chunk-RUP4JMKO.js";
-import "./chunk-4NCIPADO.js";
+import "./chunk-OBYMFSWA.js";
 import {
   failOnNetworkRefusal
 } from "./chunk-MHB7IFG7.js";

package/js/host.js

@@ -1,8 +1,8 @@
 import {
   createAppHandler
-} from "./chunk-2YSTJMBD.js";
+} from "./chunk-WCVV4PPS.js";
 import "./chunk-RUP4JMKO.js";
-import "./chunk-4NCIPADO.js";
+import "./chunk-OBYMFSWA.js";
 import "./chunk-MHB7IFG7.js";
 import "./chunk-XBG7HHXC.js";
 import "./chunk-3R3KFCDU.js";

package/js/mcp/effect.js

@@ -2,12 +2,12 @@ import {
   mcpClientEffect,
   mcpHealthEffect,
   mcpToolsEffect
-} from "../chunk-M5OLYYNU.js";
-import "../chunk-WGQP62EG.js";
+} from "../chunk-LTF4TLMO.js";
+import "../chunk-G7L5DHQX.js";
 import "../chunk-BCSNKUAC.js";
-import "../chunk-2YSTJMBD.js";
+import "../chunk-WCVV4PPS.js";
 import "../chunk-RUP4JMKO.js";
-import "../chunk-4NCIPADO.js";
+import "../chunk-OBYMFSWA.js";
 import "../chunk-MHB7IFG7.js";
 import "../chunk-XBG7HHXC.js";
 import "../chunk-3R3KFCDU.js";

package/js/mcp/stdio.js

@@ -3,14 +3,14 @@ import {
   answeredError,
   mcpClient,
   mcpJsonSchemaValidator
-} from "../chunk-WGQP62EG.js";
+} from "../chunk-G7L5DHQX.js";
 import {
   protocolRouter
-} from "../chunk-WDIVWSDG.js";
+} from "../chunk-QGHGYH5V.js";
 import "../chunk-BCSNKUAC.js";
-import "../chunk-2YSTJMBD.js";
+import "../chunk-WCVV4PPS.js";
 import "../chunk-RUP4JMKO.js";
-import "../chunk-4NCIPADO.js";
+import "../chunk-OBYMFSWA.js";
 import "../chunk-MHB7IFG7.js";
 import "../chunk-XBG7HHXC.js";
 import "../chunk-3R3KFCDU.js";

package/js/mcp.js

@@ -1,25 +1,25 @@
 import {
   mcpClientEffect,
   mcpHealthEffect
-} from "./chunk-M5OLYYNU.js";
+} from "./chunk-LTF4TLMO.js";
 import {
   catalogCache,
   catalogScope
 } from "./chunk-ECCWT5GJ.js";
 import {
   adaptMcpTool
-} from "./chunk-WGQP62EG.js";
+} from "./chunk-G7L5DHQX.js";
 import {
   protocolOperations
-} from "./chunk-WDIVWSDG.js";
+} from "./chunk-QGHGYH5V.js";
 import "./chunk-BCSNKUAC.js";
-import "./chunk-2YSTJMBD.js";
+import "./chunk-WCVV4PPS.js";
 import {
   cacheKey
 } from "./chunk-RUP4JMKO.js";
 import {
   operationDescription
-} from "./chunk-4NCIPADO.js";
+} from "./chunk-OBYMFSWA.js";
 import "./chunk-MHB7IFG7.js";
 import "./chunk-XBG7HHXC.js";
 import "./chunk-3R3KFCDU.js";

package/js/openapi.js

@@ -8,7 +8,7 @@ import {
 import {
   protocolOperations,
   protocolRouter
-} from "./chunk-WDIVWSDG.js";
+} from "./chunk-QGHGYH5V.js";
 import {
   OpenapiCompileError,
   OpenapiCompileErrorCode,
@@ -29,7 +29,7 @@ import {
   isOpenapiTextMedia,
   openapiBinaryResultSchema,
   openapiMediaKind
-} from "./chunk-4NCIPADO.js";
+} from "./chunk-OBYMFSWA.js";
 import {
   failOnNetworkRefusal
 } from "./chunk-MHB7IFG7.js";
@@ -4887,7 +4887,21 @@ var compileOpenApiDocument = (entry, inputDocument, options = {}) => {
             });
             if (request.required) required.push("body");
           }
-          const security = operation.security ?? spec.security ?? fallback ?? [];
+          const requirements = operation.security ?? spec.security ?? fallback ?? [];
+          const security = requirements.filter(
+            (requirement) => Object.keys(requirement).every((key) => Object.hasOwn(schemes, key))
+          );
+          if (security.length === 0 && requirements.length > 0) {
+            const undeclared = [
+              ...new Set(
+                requirements.flatMap(Object.keys).filter((key) => !Object.hasOwn(schemes, key))
+              )
+            ];
+            fail2(
+              "auth_method",
+              `Every security requirement names a scheme securitySchemes does not declare: ${undeclared.map((key) => JSON.stringify(key)).join(", ")}. Declare and fill every scheme in one complete alternative (securitySchemes plus methods or oauth).`
+            );
+          }
           for (const requirement of security) {
             const keys = Object.keys(requirement).sort();
             if (!keys.length) continue;
@@ -4936,13 +4950,9 @@ var compileOpenApiDocument = (entry, inputDocument, options = {}) => {
               baseUrl,
               openapi: spec.openapi,
               securitySchemes: Object.fromEntries(
-                [...new Set(security.flatMap(Object.keys))].map((key) => [
-                  key,
-                  schemes[key] ?? fail2(
-                    "auth_method",
-                    `A security requirement names ${JSON.stringify(key)}, which securitySchemes does not declare.`
-                  )
-                ])
+                Object.entries(schemes).filter(
+                  ([key]) => security.some((requirement) => Object.hasOwn(requirement, key))
+                )
               ),
               request: {
                 parameters: [...parameters.values()].map(({ parameter }) => parameter),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apps",
-  "version": "0.0.1-beta.70",
+  "version": "0.0.1-beta.73",
   "description": "TypeScript apps with typed tools, accounts, storage, and UI.",
   "type": "module",
   "sideEffects": false,