apps 0.0.1-beta.70 → 0.0.1-beta.74

package/js/{chunk-WGQP62EG.js → chunk-2QWOG4UJ.js}

@@ -1,6 +1,6 @@
 import {
   prepareElicitation
-} from "./chunk-2YSTJMBD.js";
+} from "./chunk-UCQBJUA5.js";
 import {
   bodyUpstreamError,
   fromPromise
@@ -16,7 +16,7 @@ import {
   defaultElicitationLimits,
   defaultMcpClientLimits,
   mcpSdkTimerCeilingMs
-} from "./chunk-JW5LYSER.js";
+} from "./chunk-F2OAC6GE.js";
 import {
   jsonSchemaDecoder,
   nestJsonSchema,

package/js/{chunk-M5OLYYNU.js → chunk-AE45SVBH.js}

@@ -3,7 +3,7 @@ import {
   answeredError,
   mcpClient,
   mcpJsonSchemaValidator
-} from "./chunk-WGQP62EG.js";
+} from "./chunk-2QWOG4UJ.js";
 import {
   failOnNetworkRefusal
 } from "./chunk-MHB7IFG7.js";
@@ -20,7 +20,7 @@ import {
   McpToolsOptions,
   defaultMcpClientLimits,
   mcpHealthReserveMs
-} from "./chunk-JW5LYSER.js";
+} from "./chunk-F2OAC6GE.js";
 import {
   NetworkRefused,
   ProviderError

package/js/{chunk-JW5LYSER.js → chunk-F2OAC6GE.js}

@@ -515,9 +515,9 @@ var Proto = {
       middlewares: /* @__PURE__ */ new Set([...this.middlewares, middleware])
     });
   },
-  prefix(prefix) {
+  prefix(prefix2) {
     return makeProto({
-      _tag: `${prefix}${this._tag}`,
+      _tag: `${prefix2}${this._tag}`,
       payloadSchema: this.payloadSchema,
       successSchema: this.successSchema,
       errorSchema: this.errorSchema,
@@ -1799,14 +1799,94 @@ var ApprovalResponse = ElicitationResponse.check(
     (response) => response.action !== "accept" || response.content === void 0 || Object.keys(response.content).length === 0
   )
 );
-var approvalElicitation = (toolName, input) => ({
+var approvalPreviewChars = 4e3;
+var shortestKept = 32;
+var isHigh = (unit) => unit >= 55296 && unit <= 56319;
+var isLow = (unit) => unit >= 56320 && unit <= 57343;
+var prefix = (text, length) => text.slice(0, isHigh(text.charCodeAt(length - 1)) ? length - 1 : length);
+var isArray = (value) => Array.isArray(value);
+var characters = (text) => {
+  let pairs = 0;
+  for (let index = 1; index < text.length; index += 1)
+    if (isLow(text.charCodeAt(index)) && isHigh(text.charCodeAt(index - 1))) pairs += 1;
+  return text.length - pairs;
+};
+var emit = (output, text) => {
+  output.parts.push(text);
+  output.room -= text.length;
+};
+var write = (value, keep, indent, output) => {
+  if (typeof value === "string") {
+    if (value.length > keep)
+      emit(output, `${JSON.stringify(prefix(value, keep))}\u2026 (${characters(value)} characters)`);
+    else
+      emit(
+        output,
+        JSON.stringify(value.length > output.room ? prefix(value, output.room + 1) : value)
+      );
+    return;
+  }
+  if (typeof value !== "object" || value === null) return emit(output, JSON.stringify(value));
+  const inner = `${indent}  `;
+  const member = (index, key, entry) => {
+    emit(
+      output,
+      `${index === 0 ? "" : ","}
+${inner}${key === void 0 ? "" : `${JSON.stringify(key)}: `}`
+    );
+    if (output.room >= 0) write(entry, keep, inner, output);
+    return output.room >= 0;
+  };
+  if (isArray(value)) {
+    if (value.length === 0) return emit(output, "[]");
+    emit(output, "[");
+    value.every((entry, index) => member(index, void 0, entry));
+    return emit(output, `
+${indent}]`);
+  }
+  const entries = Object.entries(value);
+  if (entries.length === 0) return emit(output, "{}");
+  emit(output, "{");
+  entries.every(([key, entry], index) => member(index, key, entry));
+  emit(output, `
+${indent}}`);
+};
+var printed = (value, keep, room) => {
+  const output = { parts: [], room };
+  write(value, keep, "", output);
+  return { text: output.parts.join(""), fits: output.room >= 0 };
+};
+var shortened = (input) => {
+  let keep = approvalPreviewChars / 2;
+  let shown = printed(input, keep, approvalPreviewChars);
+  while (!shown.fits && keep > shortestKept) {
+    keep = Math.max(shortestKept, Math.floor(keep / 2));
+    shown = printed(input, keep, approvalPreviewChars);
+  }
+  return shown.fits ? shown.text : `${prefix(shown.text, approvalPreviewChars)}
+\u2026 (the rest is not shown)`;
+};
+var consent = (toolName, shown) => ({
   mode: "form",
   message: `Approve ${toolName}?
 
-Arguments:
-${JSON.stringify(input, null, 2)}`,
+${shown}`,
   requestedSchema: { type: "object", properties: {} }
 });
+var exactApprovalElicitation = (toolName, input, maxChars) => {
+  const exact = printed(input, Number.POSITIVE_INFINITY, maxChars);
+  return exact.fits ? consent(toolName, `Arguments:
+${exact.text}`) : void 0;
+};
+var approvalElicitation = (toolName, input) => {
+  const exact = exactApprovalElicitation(toolName, input, approvalPreviewChars);
+  if (exact !== void 0) return exact;
+  return consent(
+    toolName,
+    `Arguments, shortened for review. Approving runs the call with the complete arguments:
+${shortened(input)}`
+  );
+};
 
 // src/contracts/router.ts
 var reservedRouterKeys = /* @__PURE__ */ new Set([
@@ -4324,6 +4404,7 @@ export {
   ElicitationReply,
   ApprovalElicitation,
   ApprovalResponse,
+  exactApprovalElicitation,
   approvalElicitation,
   reservedRouterKeys,
   RouterKey,

package/js/{chunk-3R3KFCDU.js → chunk-JSWN4D6V.js}

@@ -2,7 +2,7 @@ import {
   declaredOperations,
   nativeOperation,
   nativeRouter
-} from "./chunk-ZEJ3IKEC.js";
+} from "./chunk-OABWTKGG.js";
 import {
   fromPromise,
   method
@@ -16,7 +16,7 @@ import {
   normalizePlacements,
   placementFields,
   renderPlacement
-} from "./chunk-JW5LYSER.js";
+} from "./chunk-F2OAC6GE.js";
 import {
   decoderOf,
   isSchema,

package/js/{chunk-ZEJ3IKEC.js → chunk-OABWTKGG.js}

@@ -6,7 +6,7 @@ import {
   RouterKey,
   RouterMeta,
   reservedRouterKeys
-} from "./chunk-JW5LYSER.js";
+} from "./chunk-F2OAC6GE.js";
 import {
   decoderOf,
   schemaArgument

package/js/{chunk-WDIVWSDG.js → chunk-PZ535RJX.js}

@@ -1,11 +1,11 @@
 import {
   fixedRouter
-} from "./chunk-4NCIPADO.js";
+} from "./chunk-TSPJFGA6.js";
 import {
   nativeOperation,
   operationDeclaration,
   routerDeclaration
-} from "./chunk-ZEJ3IKEC.js";
+} from "./chunk-OABWTKGG.js";
 
 // src/implementation/protocol-operations.ts
 var protocolOperations = (operations, kinds = {}) => {

package/js/{chunk-4NCIPADO.js → chunk-TSPJFGA6.js}

@@ -4,7 +4,7 @@ import {
 import {
   joinPath,
   mergeMeta
-} from "./chunk-ZEJ3IKEC.js";
+} from "./chunk-OABWTKGG.js";
 import {
   isShortenedUpstream,
   parseProviderError,
@@ -21,7 +21,7 @@ import {
   McpError,
   McpError2,
   SkillLoadFailed as SkillLoadFailed2
-} from "./chunk-JW5LYSER.js";
+} from "./chunk-F2OAC6GE.js";
 import {
   CacheError,
   FailureCode,
@@ -229,9 +229,11 @@ var OpenapiSkippedOperation = Schema_exports.Struct({
 var listedReasons = 8;
 var reasonLength = 240;
 var cut = (text) => text.length <= reasonLength ? text : `${text.slice(0, reasonLength - 1)}\u2026`;
+var customTool = `To call a left-out operation anyway, write a custom tool for it in this app with the same account: see "Custom tools beside generated ones" in the app-authoring skill's integrations.md.`;
 var compileMessage = (error) => {
   const skipped = error.skipped ?? [];
   if (skipped.length === 0) return error.reason;
+  const close = skipped.some(({ code }) => code !== "event_stream") ? ` ${customTool}` : "";
   const groups = /* @__PURE__ */ new Map();
   for (const operation of skipped) {
     const key = JSON.stringify([operation.code, operation.reason]);
@@ -242,12 +244,17 @@ var compileMessage = (error) => {
   const example = ({ first, count: count2 }) => `${first.method} ${first.path}${count2 > 1 ? ` and ${count2 - 1} more` : ""}`;
   const [only, ...others] = groups.values();
   if (only !== void 0 && others.length === 0 && only.first.code === error.code && only.first.reason === error.reason)
-    return `${error.reason} Left out: ${example(only)}.`;
-  const listed = [...groups.values()].slice(0, listedReasons);
+    return `${error.reason} Left out: ${example(only)}.${close}`;
+  const listed = [];
+  let room = maxFailureMessageLength - `${error.reason} Left out: ; and ${groups.size} other reasons.${close}`.length;
+  for (const group of groups.values()) {
+    const text = `${example(group)} (${group.first.code}: ${cut(group.first.reason.replace(/\.$/, ""))})`;
+    if (listed.length === listedReasons || text.length + 2 > room) break;
+    listed.push(text);
+    room -= text.length + 2;
+  }
   const rest = groups.size - listed.length;
-  return `${error.reason} Left out: ${listed.map(
-    (group) => `${example(group)} (${group.first.code}: ${cut(group.first.reason.replace(/\.$/, ""))})`
-  ).join("; ")}${rest > 0 ? `; and ${rest} other reasons` : ""}.`;
+  return `${error.reason} Left out: ${listed.join("; ")}${rest > 0 ? `; and ${rest} other reasons` : ""}.${close}`;
 };
 var OpenapiCompileError = class extends Schema_exports.TaggedError()(
   "OpenapiCompileError",

package/js/{chunk-2YSTJMBD.js → chunk-UCQBJUA5.js}

@@ -11,7 +11,7 @@ import {
   parseSkillLoadFailed,
   readCatalog,
   routerSkills
-} from "./chunk-4NCIPADO.js";
+} from "./chunk-TSPJFGA6.js";
 import {
   appInvocationFetch
 } from "./chunk-MHB7IFG7.js";
@@ -25,12 +25,12 @@ import {
   makeEmitter,
   toEffectApp,
   withPlacements
-} from "./chunk-3R3KFCDU.js";
+} from "./chunk-JSWN4D6V.js";
 import {
   declaredOperations,
   locate,
   nativeOperation
-} from "./chunk-ZEJ3IKEC.js";
+} from "./chunk-OABWTKGG.js";
 import {
   accountProviderError,
   appCode,
@@ -91,7 +91,7 @@ import {
   reservedTablePrefix,
   sqlBindingsLimit,
   workflowDurationMillis
-} from "./chunk-JW5LYSER.js";
+} from "./chunk-F2OAC6GE.js";
 import {
   CacheError
 } from "./chunk-7LMU3ER3.js";

package/js/contracts.js

@@ -119,6 +119,7 @@ import {
   defaultEventLimits,
   defaultMcpClientLimits,
   defaultWebhookTransportLimits,
+  exactApprovalElicitation,
   frameworkProtocol,
   indexCommand,
   inspectCommand,
@@ -145,7 +146,7 @@ import {
   skillCatalog,
   skillsCommand,
   workflowDurationMillis
-} from "./chunk-JW5LYSER.js";
+} from "./chunk-F2OAC6GE.js";
 import {
   FailureCode,
   FailureDetail,
@@ -334,6 +335,7 @@ export {
   defaultEventLimits,
   defaultMcpClientLimits,
   defaultWebhookTransportLimits,
+  exactApprovalElicitation,
   frameworkProtocol,
   indexCommand,
   inspectCommand,

package/js/effect.js

@@ -3,17 +3,17 @@ import {
   ApprovalDecision,
   createAppHandler,
   prepareElicitation
-} from "./chunk-2YSTJMBD.js";
+} from "./chunk-UCQBJUA5.js";
 import "./chunk-RUP4JMKO.js";
-import "./chunk-4NCIPADO.js";
+import "./chunk-TSPJFGA6.js";
 import "./chunk-MHB7IFG7.js";
 import "./chunk-XBG7HHXC.js";
-import "./chunk-3R3KFCDU.js";
-import "./chunk-ZEJ3IKEC.js";
+import "./chunk-JSWN4D6V.js";
+import "./chunk-OABWTKGG.js";
 import "./chunk-ZR7QAG67.js";
 import {
   ToolAnnotations
-} from "./chunk-JW5LYSER.js";
+} from "./chunk-F2OAC6GE.js";
 import "./chunk-7LMU3ER3.js";
 import "./chunk-H72MEDMN.js";
 import {

package/js/graphql.js

@@ -4,28 +4,28 @@ import {
 } from "./chunk-ECCWT5GJ.js";
 import {
   protocolOperations
-} from "./chunk-WDIVWSDG.js";
+} from "./chunk-PZ535RJX.js";
 import "./chunk-BCSNKUAC.js";
-import "./chunk-2YSTJMBD.js";
+import "./chunk-UCQBJUA5.js";
 import {
   cacheKey
 } from "./chunk-RUP4JMKO.js";
-import "./chunk-4NCIPADO.js";
+import "./chunk-TSPJFGA6.js";
 import {
   failOnNetworkRefusal
 } from "./chunk-MHB7IFG7.js";
 import "./chunk-XBG7HHXC.js";
-import "./chunk-3R3KFCDU.js";
+import "./chunk-JSWN4D6V.js";
 import {
   nativeOperation,
   routerDeclaration
-} from "./chunk-ZEJ3IKEC.js";
+} from "./chunk-OABWTKGG.js";
 import {
   accountProviderError,
   graphqlProviderError,
   httpProviderError
 } from "./chunk-ZR7QAG67.js";
-import "./chunk-JW5LYSER.js";
+import "./chunk-F2OAC6GE.js";
 import {
   NetworkRefused,
   ProviderError

package/js/host.js

@@ -1,12 +1,12 @@
 import {
   createAppHandler
-} from "./chunk-2YSTJMBD.js";
+} from "./chunk-UCQBJUA5.js";
 import "./chunk-RUP4JMKO.js";
-import "./chunk-4NCIPADO.js";
+import "./chunk-TSPJFGA6.js";
 import "./chunk-MHB7IFG7.js";
 import "./chunk-XBG7HHXC.js";
-import "./chunk-3R3KFCDU.js";
-import "./chunk-ZEJ3IKEC.js";
+import "./chunk-JSWN4D6V.js";
+import "./chunk-OABWTKGG.js";
 import "./chunk-ZR7QAG67.js";
 import {
   ElicitationFailed,
@@ -22,7 +22,7 @@ import {
   WorkflowRun,
   WorkflowRunId,
   WorkflowRunPage
-} from "./chunk-JW5LYSER.js";
+} from "./chunk-F2OAC6GE.js";
 import {
   CacheCommand,
   CacheError,

package/js/index.js

@@ -11,7 +11,7 @@ import {
   query,
   t,
   workflow
-} from "./chunk-3R3KFCDU.js";
+} from "./chunk-JSWN4D6V.js";
 import {
   dynamicRouter,
   mutation,
@@ -24,7 +24,7 @@ import {
   toolAnnotations,
   withApproval,
   withApprovals
-} from "./chunk-ZEJ3IKEC.js";
+} from "./chunk-OABWTKGG.js";
 import {
   accountProviderError,
   fromPromise
@@ -43,7 +43,7 @@ import {
   ScheduleTiming,
   SecretsMethod,
   WorkflowFailure
-} from "./chunk-JW5LYSER.js";
+} from "./chunk-F2OAC6GE.js";
 import {
   CacheError,
   FetchOptionUnsupported,

package/js/mcp/effect.js

@@ -2,18 +2,18 @@ import {
   mcpClientEffect,
   mcpHealthEffect,
   mcpToolsEffect
-} from "../chunk-M5OLYYNU.js";
-import "../chunk-WGQP62EG.js";
+} from "../chunk-AE45SVBH.js";
+import "../chunk-2QWOG4UJ.js";
 import "../chunk-BCSNKUAC.js";
-import "../chunk-2YSTJMBD.js";
+import "../chunk-UCQBJUA5.js";
 import "../chunk-RUP4JMKO.js";
-import "../chunk-4NCIPADO.js";
+import "../chunk-TSPJFGA6.js";
 import "../chunk-MHB7IFG7.js";
 import "../chunk-XBG7HHXC.js";
-import "../chunk-3R3KFCDU.js";
-import "../chunk-ZEJ3IKEC.js";
+import "../chunk-JSWN4D6V.js";
+import "../chunk-OABWTKGG.js";
 import "../chunk-ZR7QAG67.js";
-import "../chunk-JW5LYSER.js";
+import "../chunk-F2OAC6GE.js";
 import "../chunk-7LMU3ER3.js";
 import "../chunk-H72MEDMN.js";
 import "../chunk-KGCTYL2S.js";

package/js/mcp/stdio.js

@@ -3,23 +3,23 @@ import {
   answeredError,
   mcpClient,
   mcpJsonSchemaValidator
-} from "../chunk-WGQP62EG.js";
+} from "../chunk-2QWOG4UJ.js";
 import {
   protocolRouter
-} from "../chunk-WDIVWSDG.js";
+} from "../chunk-PZ535RJX.js";
 import "../chunk-BCSNKUAC.js";
-import "../chunk-2YSTJMBD.js";
+import "../chunk-UCQBJUA5.js";
 import "../chunk-RUP4JMKO.js";
-import "../chunk-4NCIPADO.js";
+import "../chunk-TSPJFGA6.js";
 import "../chunk-MHB7IFG7.js";
 import "../chunk-XBG7HHXC.js";
-import "../chunk-3R3KFCDU.js";
-import "../chunk-ZEJ3IKEC.js";
+import "../chunk-JSWN4D6V.js";
+import "../chunk-OABWTKGG.js";
 import "../chunk-ZR7QAG67.js";
 import {
   McpError,
   ProcessConfig
-} from "../chunk-JW5LYSER.js";
+} from "../chunk-F2OAC6GE.js";
 import "../chunk-7LMU3ER3.js";
 import "../chunk-H72MEDMN.js";
 import "../chunk-KGCTYL2S.js";

package/js/mcp.js

@@ -1,32 +1,32 @@
 import {
   mcpClientEffect,
   mcpHealthEffect
-} from "./chunk-M5OLYYNU.js";
+} from "./chunk-AE45SVBH.js";
 import {
   catalogCache,
   catalogScope
 } from "./chunk-ECCWT5GJ.js";
 import {
   adaptMcpTool
-} from "./chunk-WGQP62EG.js";
+} from "./chunk-2QWOG4UJ.js";
 import {
   protocolOperations
-} from "./chunk-WDIVWSDG.js";
+} from "./chunk-PZ535RJX.js";
 import "./chunk-BCSNKUAC.js";
-import "./chunk-2YSTJMBD.js";
+import "./chunk-UCQBJUA5.js";
 import {
   cacheKey
 } from "./chunk-RUP4JMKO.js";
 import {
   operationDescription
-} from "./chunk-4NCIPADO.js";
+} from "./chunk-TSPJFGA6.js";
 import "./chunk-MHB7IFG7.js";
 import "./chunk-XBG7HHXC.js";
-import "./chunk-3R3KFCDU.js";
+import "./chunk-JSWN4D6V.js";
 import {
   nativeOperation,
   routerDeclaration
-} from "./chunk-ZEJ3IKEC.js";
+} from "./chunk-OABWTKGG.js";
 import {
   fromPromise,
   method
@@ -37,7 +37,7 @@ import {
   McpServerHeader,
   McpToolMetadata,
   McpToolsOptions
-} from "./chunk-JW5LYSER.js";
+} from "./chunk-F2OAC6GE.js";
 import "./chunk-7LMU3ER3.js";
 import "./chunk-H72MEDMN.js";
 import "./chunk-KGCTYL2S.js";

package/js/openapi.js

@@ -8,7 +8,7 @@ import {
 import {
   protocolOperations,
   protocolRouter
-} from "./chunk-WDIVWSDG.js";
+} from "./chunk-PZ535RJX.js";
 import {
   OpenapiCompileError,
   OpenapiCompileErrorCode,
@@ -29,7 +29,7 @@ import {
   isOpenapiTextMedia,
   openapiBinaryResultSchema,
   openapiMediaKind
-} from "./chunk-4NCIPADO.js";
+} from "./chunk-TSPJFGA6.js";
 import {
   failOnNetworkRefusal
 } from "./chunk-MHB7IFG7.js";
@@ -37,7 +37,7 @@ import "./chunk-XBG7HHXC.js";
 import {
   nativeOperation,
   routerDeclaration
-} from "./chunk-ZEJ3IKEC.js";
+} from "./chunk-OABWTKGG.js";
 import {
   accountProviderError,
   bodyUpstreamError,
@@ -53,7 +53,7 @@ import {
   OpenapiResponseError,
   RouterMeta,
   defaultOpenapiErrorLimits
-} from "./chunk-JW5LYSER.js";
+} from "./chunk-F2OAC6GE.js";
 import {
   NetworkRefused,
   ProviderError,
@@ -4887,7 +4887,21 @@ var compileOpenApiDocument = (entry, inputDocument, options = {}) => {
             });
             if (request.required) required.push("body");
           }
-          const security = operation.security ?? spec.security ?? fallback ?? [];
+          const requirements = operation.security ?? spec.security ?? fallback ?? [];
+          const security = requirements.filter(
+            (requirement) => Object.keys(requirement).every((key) => Object.hasOwn(schemes, key))
+          );
+          if (security.length === 0 && requirements.length > 0) {
+            const undeclared = [
+              ...new Set(
+                requirements.flatMap(Object.keys).filter((key) => !Object.hasOwn(schemes, key))
+              )
+            ];
+            fail2(
+              "auth_method",
+              `Every security requirement names a scheme securitySchemes does not declare: ${undeclared.map((key) => JSON.stringify(key)).join(", ")}. Declare and fill every scheme in one complete alternative (securitySchemes plus methods or oauth).`
+            );
+          }
           for (const requirement of security) {
             const keys = Object.keys(requirement).sort();
             if (!keys.length) continue;
@@ -4936,13 +4950,9 @@ var compileOpenApiDocument = (entry, inputDocument, options = {}) => {
               baseUrl,
               openapi: spec.openapi,
               securitySchemes: Object.fromEntries(
-                [...new Set(security.flatMap(Object.keys))].map((key) => [
-                  key,
-                  schemes[key] ?? fail2(
-                    "auth_method",
-                    `A security requirement names ${JSON.stringify(key)}, which securitySchemes does not declare.`
-                  )
-                ])
+                Object.entries(schemes).filter(
+                  ([key]) => security.some((requirement) => Object.hasOwn(requirement, key))
+                )
               ),
               request: {
                 parameters: [...parameters.values()].map(({ parameter }) => parameter),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apps",
-  "version": "0.0.1-beta.70",
+  "version": "0.0.1-beta.74",
   "description": "TypeScript apps with typed tools, accounts, storage, and UI.",
   "type": "module",
   "sideEffects": false,