apps 0.0.1-beta.9 → 0.0.1-beta.91

package/types/apps/src/contracts/protocols/2.d.ts

@@ -4,7 +4,8 @@
  *
  * Every other message is protocol 1's, re-exported unchanged. Once released this protocol is
  * frozen like protocol 1: `bun run check` compares `protocol2` with `packages/apps/protocols/2.json`.
- * Define the next protocol to change it. See notes/apps-publishing.md.
+ * The module imports only `effect` and earlier protocol modules, so no change elsewhere can alter
+ * it. Define the next protocol to change it. See notes/apps-publishing.md.
  */
 import { Schema } from "effect";
 export * from "./1.js";
@@ -190,10 +191,15 @@ export declare const protocol2: {
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
@@ -203,32 +209,41 @@ export declare const protocol2: {
                         readonly scopes: Schema.$Array<Schema.String>;
                         readonly issuer: Schema.optionalKey<Schema.String>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly grant: Schema.Literal<"client_credentials">;
                         readonly discover: Schema.String;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
-                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-                        readonly grant: Schema.Literal<"client_credentials">;
-                        readonly tokenUrl: Schema.String;
-                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
-                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
+                        readonly grant: Schema.Literal<"client_credentials">;
+                        readonly tokenUrl: Schema.String;
+                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
+                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>]>>;
                 }>;
@@ -250,10 +265,15 @@ export declare const protocol2: {
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
@@ -263,32 +283,41 @@ export declare const protocol2: {
                         readonly scopes: Schema.$Array<Schema.String>;
                         readonly issuer: Schema.optionalKey<Schema.String>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly grant: Schema.Literal<"client_credentials">;
                         readonly discover: Schema.String;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
-                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-                        readonly grant: Schema.Literal<"client_credentials">;
-                        readonly tokenUrl: Schema.String;
-                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
-                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
+                        readonly grant: Schema.Literal<"client_credentials">;
+                        readonly tokenUrl: Schema.String;
+                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
+                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>]>>;
                 }>;
@@ -397,7 +426,7 @@ export declare const protocol2: {
             readonly toolError: Schema.optionalKey<Schema.Literal<true>>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: Schema.Union<readonly [typeof import("../api-response-error.js").OpenapiResponseError, typeof import("../provider-error.js").ProviderError, typeof import("../mcp.js").McpError, typeof import("../skills.js").SkillLoadFailed, typeof import("./1.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof import("./1.js").HostDeclarationInvalid, typeof import("./1.js").HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./1.js").HostOperationFailed, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("../elicitation.js").ElicitationFailed]>;
+            readonly error: Schema.Union<readonly [typeof import("./1.js").OpenapiResponseError, typeof import("./1.js").ProviderError, typeof import("./1.js").McpError, typeof import("./1.js").SkillLoadFailed, typeof import("./1.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof import("./1.js").HostDeclarationInvalid, typeof import("./1.js").HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./1.js").HostOperationFailed, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("./1.js").ElicitationFailed]>;
         }>]>;
         readonly requirements: Schema.Struct<{
             readonly capabilities: Schema.optionalKey<Schema.Struct<{
@@ -432,10 +461,15 @@ export declare const protocol2: {
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
@@ -445,32 +479,41 @@ export declare const protocol2: {
                         readonly scopes: Schema.$Array<Schema.String>;
                         readonly issuer: Schema.optionalKey<Schema.String>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly grant: Schema.Literal<"client_credentials">;
                         readonly discover: Schema.String;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
-                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-                        readonly grant: Schema.Literal<"client_credentials">;
-                        readonly tokenUrl: Schema.String;
-                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
-                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
+                        readonly grant: Schema.Literal<"client_credentials">;
+                        readonly tokenUrl: Schema.String;
+                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
+                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>]>>;
                 }>;
@@ -537,10 +580,10 @@ export declare const protocol2: {
         readonly elicitationRequest: Schema.Struct<{
             readonly mode: Schema.Literal<"form">;
             readonly requestedSchema: Schema.toEncoded<Schema.Struct<{
-                readonly $schema: Schema.decodeTo<Schema.optional<Schema.String>, Schema.optionalKey<Schema.String>, never, never>;
+                readonly $schema: Schema.decodeTo<Schema.toType<Schema.optional<Schema.String>>, Schema.optionalKey<Schema.String>, never, never>;
                 readonly type: Schema.tag<"object">;
-                readonly properties: Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [typeof import("effect/unstable/ai/McpSchema").LegacyTitledEnum, Schema.Union<readonly [typeof import("effect/unstable/ai/McpSchema").UntitledSingleSelectEnum, typeof import("effect/unstable/ai/McpSchema").TitledSingleSelectEnum]>, Schema.Union<readonly [typeof import("effect/unstable/ai/McpSchema").UntitledMultiSelectEnum, typeof import("effect/unstable/ai/McpSchema").TitledMultiSelectEnum]>]>, typeof import("effect/unstable/ai/McpSchema").ElicitationString, typeof import("effect/unstable/ai/McpSchema").ElicitationNumber, typeof import("effect/unstable/ai/McpSchema").ElicitationBoolean]>>;
-                readonly required: Schema.decodeTo<Schema.optional<Schema.$Array<Schema.String>>, Schema.optionalKey<Schema.$Array<Schema.String>>, never, never>;
+                readonly properties: Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [typeof import("effect/ai/McpSchema").LegacyTitledEnum, Schema.Union<readonly [typeof import("effect/ai/McpSchema").UntitledSingleSelectEnum, typeof import("effect/ai/McpSchema").TitledSingleSelectEnum]>, Schema.Union<readonly [typeof import("effect/ai/McpSchema").UntitledMultiSelectEnum, typeof import("effect/ai/McpSchema").TitledMultiSelectEnum]>]>, typeof import("effect/ai/McpSchema").ElicitationString, typeof import("effect/ai/McpSchema").ElicitationNumber, typeof import("effect/ai/McpSchema").ElicitationBoolean]>>;
+                readonly required: Schema.decodeTo<Schema.toType<Schema.optional<Schema.$Array<Schema.String>>>, Schema.optionalKey<Schema.$Array<Schema.String>>, never, never>;
             }>>;
             readonly _meta: Schema.optional<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
             readonly message: Schema.String;
@@ -550,14 +593,14 @@ export declare const protocol2: {
             readonly response: Schema.Union<readonly [Schema.Struct<{
                 readonly _meta: Schema.optional<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
                 readonly action: Schema.Literal<"accept">;
-                readonly content: Schema.decodeTo<Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.$Array<Schema.String>]>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.$Array<Schema.String>]>>>, never, never>;
+                readonly content: Schema.decodeTo<Schema.toType<Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.$Array<Schema.String>]>>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.$Array<Schema.String>]>>>, never, never>;
             }>, Schema.Struct<{
                 readonly _meta: Schema.optional<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
                 readonly action: Schema.Literals<readonly ["cancel", "decline"]>;
             }>]>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../elicitation.js").ElicitationFailed;
+            readonly error: typeof import("./1.js").ElicitationFailed;
         }>]>;
         readonly workflowStep: Schema.Union<readonly [Schema.Struct<{
             readonly operation: Schema.Literal<"do">;
@@ -662,7 +705,7 @@ export declare const protocol2: {
             readonly value: Schema.Codec<Schema.Json, Schema.Json, never, never>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../../../../app-cache/src/index.js").CacheError;
+            readonly error: typeof import("./1.js").CacheError;
         }>]>;
     };
 };

package/types/apps/src/contracts/protocols/3.d.ts

@@ -5,20 +5,78 @@
  * database budget, and declarations with a reserved database field, fail with their named error.
  *
  * This protocol is released and frozen once merged. `bun run check` compares `protocol3` with
- * `packages/apps/protocols/3.json`. Do not edit this file or the schemas it reaches to change the
- * wire format; define the next protocol instead. See notes/apps-publishing.md.
+ * `packages/apps/protocols/3.json`. The module imports only `effect` and earlier protocol modules,
+ * so no change elsewhere can alter it; define the next protocol to change the wire format.
+ * See notes/apps-publishing.md.
  */
 import { Schema } from "effect";
-import { DatabaseFieldReserved, DatabaseLimitExceeded } from "../../../../app-data/src/contracts/database.js";
-import { OpenapiResponseError } from "../api-response-error.js";
-import { ElicitationFailed } from "../elicitation.js";
-import { McpError } from "../mcp.js";
-import { ProviderError } from "../provider-error.js";
-import { SkillLoadFailed } from "../skills.js";
-import { WorkflowFailure } from "../workflows.js";
-import { HostAccountsInvalid, HostInputInvalid, HostOperationNotFound, HostOutputInvalid, HostRequestInvalid, HostToolApprovalRequired, HostToolBlocked, HostToolNotFound, HostToolPolicyFailed } from "./1.js";
+import { ElicitationFailed, HostAccountsInvalid, HostInputInvalid, HostOperationNotFound, HostOutputInvalid, HostRequestInvalid, HostToolApprovalRequired, HostToolBlocked, HostToolNotFound, HostToolPolicyFailed, McpError, OpenapiResponseError, ProviderError, SkillLoadFailed } from "./1.js";
 export { DeclaredAuthMethod, DeclaredProvider, DeclaredRequirements, ResolvedAccount, ResolvedAccounts, TrustedToolApproval, InvocationDeadline, HostedTool, HostedToolSummary, HostRequest, HostRequestInvalid, HostAccountsInvalid, HostOperationNotFound, HostToolNotFound, InputProblem, maxInputProblems, HostInputInvalid, HostToolBlocked, HostToolApprovalRequired, HostToolPolicyFailed, HostOutputInvalid, HostInvocation, } from "./1.js";
 export { SkillSources, SkillCatalogResponse } from "./2.js";
+/** Longest failure message carried across the runtime boundary. */
+export declare const maxFailureMessageLength = 2048;
+/**
+ * `app` for errors thrown by authored code, `storage` for app data failures the host raised, and
+ * `service` for an external API the app called through a framework helper.
+ */
+export declare const FailureSource: Schema.Literals<readonly ["app", "storage", "service"]>;
+/** The thrown error's name, such as `TypeError`, or the host error's tag. */
+export declare const FailureName: Schema.String;
+/** A stable host failure code, such as an app data reason, or the thrown error's own `code`. */
+export declare const FailureCode: Schema.String;
+/** Bounded, with the invocation's account secrets replaced. */
+export declare const FailureMessage: Schema.String;
+/**
+ * Where and why a run failed: the failing step and the error the app's own code raised, its
+ * message bounded and with account secrets replaced. Runs from before these fields existed have none.
+ */
+export declare const WorkflowFailureDetail: {
+    step: Schema.optionalKey<Schema.String>;
+    errorName: Schema.optionalKey<Schema.String>;
+    message: Schema.optionalKey<Schema.String>;
+};
+declare const WorkflowFailure_base: Schema.Class<WorkflowFailure, Schema.TaggedStruct<"WorkflowFailure", {
+    readonly reason: Schema.Literals<readonly ["unavailable", "not_found", "input", "output", "operation", "approval", "credentials", "terminated", "execution", "conflict", "engine"]>;
+    readonly retryable: Schema.Boolean;
+    readonly step: Schema.optionalKey<Schema.String>;
+    readonly errorName: Schema.optionalKey<Schema.String>;
+    readonly message: Schema.optionalKey<Schema.String>;
+}>, import("effect/Cause").YieldableError>;
+/** Failures cross host boundaries as reason codes plus the app's own bounded error detail. */
+export declare class WorkflowFailure extends WorkflowFailure_base {
+}
+/** Protocol 3's workflow step reply, carrying the failing step and app error. */
+export declare const WorkflowRpcResult: Schema.Union<readonly [Schema.Struct<{
+    readonly ok: Schema.Literal<true>;
+    readonly value: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+}>, Schema.Struct<{
+    readonly ok: Schema.Literal<false>;
+    readonly error: typeof WorkflowFailure;
+}>]>;
+export type WorkflowRpcResult = typeof WorkflowRpcResult.Type;
+/**
+ * The budget a query or mutation exhausted. `pageSize` bounds one take(n) or paginate call;
+ * `valueBytes` bounds one stored row; the rest accumulate across the whole invocation.
+ */
+export declare const DatabaseLimit: Schema.Literals<readonly ["scanCalls", "directGets", "rowsRead", "rowsReturned", "pageSize", "bytesRead", "writes", "valueBytes"]>;
+export type DatabaseLimit = typeof DatabaseLimit.Type;
+declare const DatabaseLimitExceeded_base: Schema.Class<DatabaseLimitExceeded, Schema.TaggedStruct<"DatabaseLimitExceeded", {
+    readonly limit: Schema.Literals<readonly ["scanCalls", "directGets", "rowsRead", "rowsReturned", "pageSize", "bytesRead", "writes", "valueBytes"]>;
+    readonly maximum: Schema.Int;
+    readonly requested: Schema.Int;
+}>, import("effect/Cause").YieldableError>;
+/** A query or mutation exceeded one of its database budgets. Nothing it wrote is committed. */
+export declare class DatabaseLimitExceeded extends DatabaseLimitExceeded_base {
+}
+/** Host-owned row metadata that authored tables cannot declare. */
+export declare const reservedFieldNames: readonly ["id", "createdAt", "updatedAt"];
+declare const DatabaseFieldReserved_base: Schema.Class<DatabaseFieldReserved, Schema.TaggedStruct<"DatabaseFieldReserved", {
+    readonly table: Schema.String;
+    readonly field: Schema.Literals<readonly ["id", "createdAt", "updatedAt"]>;
+}>, import("effect/Cause").YieldableError>;
+/** A table declared a field the host adds to every row. */
+export declare class DatabaseFieldReserved extends DatabaseFieldReserved_base {
+}
 declare const HostDeclarationInvalid_base: Schema.Class<HostDeclarationInvalid, Schema.TaggedStruct<"HostDeclarationInvalid", {
     source: Schema.optionalKey<Schema.Literals<readonly ["app", "storage", "service"]>>;
     errorName: Schema.optionalKey<Schema.String>;
@@ -171,10 +229,15 @@ export declare const protocol3: {
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
@@ -184,32 +247,41 @@ export declare const protocol3: {
                         readonly scopes: Schema.$Array<Schema.String>;
                         readonly issuer: Schema.optionalKey<Schema.String>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly grant: Schema.Literal<"client_credentials">;
                         readonly discover: Schema.String;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
-                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-                        readonly grant: Schema.Literal<"client_credentials">;
-                        readonly tokenUrl: Schema.String;
-                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
-                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
+                        readonly grant: Schema.Literal<"client_credentials">;
+                        readonly tokenUrl: Schema.String;
+                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
+                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>]>>;
                 }>;
@@ -231,10 +303,15 @@ export declare const protocol3: {
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
@@ -244,32 +321,41 @@ export declare const protocol3: {
                         readonly scopes: Schema.$Array<Schema.String>;
                         readonly issuer: Schema.optionalKey<Schema.String>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly grant: Schema.Literal<"client_credentials">;
                         readonly discover: Schema.String;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
-                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-                        readonly grant: Schema.Literal<"client_credentials">;
-                        readonly tokenUrl: Schema.String;
-                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
-                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
+                        readonly grant: Schema.Literal<"client_credentials">;
+                        readonly tokenUrl: Schema.String;
+                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
+                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>]>>;
                 }>;
@@ -413,10 +499,15 @@ export declare const protocol3: {
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
@@ -426,32 +517,41 @@ export declare const protocol3: {
                         readonly scopes: Schema.$Array<Schema.String>;
                         readonly issuer: Schema.optionalKey<Schema.String>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly grant: Schema.Literal<"client_credentials">;
                         readonly discover: Schema.String;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
-                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-                        readonly grant: Schema.Literal<"client_credentials">;
-                        readonly tokenUrl: Schema.String;
-                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
-                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
+                        readonly grant: Schema.Literal<"client_credentials">;
+                        readonly tokenUrl: Schema.String;
+                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
+                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>]>>;
                 }>;
@@ -545,10 +645,10 @@ export declare const protocol3: {
         readonly elicitationRequest: Schema.Struct<{
             readonly mode: Schema.Literal<"form">;
             readonly requestedSchema: Schema.toEncoded<Schema.Struct<{
-                readonly $schema: Schema.decodeTo<Schema.optional<Schema.String>, Schema.optionalKey<Schema.String>, never, never>;
+                readonly $schema: Schema.decodeTo<Schema.toType<Schema.optional<Schema.String>>, Schema.optionalKey<Schema.String>, never, never>;
                 readonly type: Schema.tag<"object">;
-                readonly properties: Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [typeof import("effect/unstable/ai/McpSchema").LegacyTitledEnum, Schema.Union<readonly [typeof import("effect/unstable/ai/McpSchema").UntitledSingleSelectEnum, typeof import("effect/unstable/ai/McpSchema").TitledSingleSelectEnum]>, Schema.Union<readonly [typeof import("effect/unstable/ai/McpSchema").UntitledMultiSelectEnum, typeof import("effect/unstable/ai/McpSchema").TitledMultiSelectEnum]>]>, typeof import("effect/unstable/ai/McpSchema").ElicitationString, typeof import("effect/unstable/ai/McpSchema").ElicitationNumber, typeof import("effect/unstable/ai/McpSchema").ElicitationBoolean]>>;
-                readonly required: Schema.decodeTo<Schema.optional<Schema.$Array<Schema.String>>, Schema.optionalKey<Schema.$Array<Schema.String>>, never, never>;
+                readonly properties: Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [typeof import("effect/ai/McpSchema").LegacyTitledEnum, Schema.Union<readonly [typeof import("effect/ai/McpSchema").UntitledSingleSelectEnum, typeof import("effect/ai/McpSchema").TitledSingleSelectEnum]>, Schema.Union<readonly [typeof import("effect/ai/McpSchema").UntitledMultiSelectEnum, typeof import("effect/ai/McpSchema").TitledMultiSelectEnum]>]>, typeof import("effect/ai/McpSchema").ElicitationString, typeof import("effect/ai/McpSchema").ElicitationNumber, typeof import("effect/ai/McpSchema").ElicitationBoolean]>>;
+                readonly required: Schema.decodeTo<Schema.toType<Schema.optional<Schema.$Array<Schema.String>>>, Schema.optionalKey<Schema.$Array<Schema.String>>, never, never>;
             }>>;
             readonly _meta: Schema.optional<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
             readonly message: Schema.String;
@@ -558,7 +658,7 @@ export declare const protocol3: {
             readonly response: Schema.Union<readonly [Schema.Struct<{
                 readonly _meta: Schema.optional<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
                 readonly action: Schema.Literal<"accept">;
-                readonly content: Schema.decodeTo<Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.$Array<Schema.String>]>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.$Array<Schema.String>]>>>, never, never>;
+                readonly content: Schema.decodeTo<Schema.toType<Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.$Array<Schema.String>]>>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.$Array<Schema.String>]>>>, never, never>;
             }>, Schema.Struct<{
                 readonly _meta: Schema.optional<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
                 readonly action: Schema.Literals<readonly ["cancel", "decline"]>;
@@ -670,7 +770,7 @@ export declare const protocol3: {
             readonly value: Schema.Codec<Schema.Json, Schema.Json, never, never>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../../../../app-cache/src/index.js").CacheError;
+            readonly error: typeof import("./1.js").CacheError;
         }>]>;
     };
 };