create-stitchkit 0.1.1 → 0.3.0

package/examples/repository/packages/frontend/src/app/[locale]/starter-page.tsx

@@ -0,0 +1,151 @@
+import { IconArrowUpRight } from '@tabler/icons-react';
+import Image from 'next/image';
+import { BrandMark } from '@/components/brand-mark';
+import { RepositorySummary } from '@/components/repository-summary';
+import { LanguageSwitcher, ThemeToggle } from '@/components/system-controls';
+import { buttonVariants } from '@/components/ui';
+import type { AppLocale } from '@/i18n/locales';
+import { Link } from '@/i18n/navigation';
+import { absoluteSiteUrl } from '@/lib/seo/metadata';
+import { getSeoPage, SITE_NAME } from '@/lib/seo/pages';
+import { cn } from '@/lib/utils/cn';
+
+interface StarterPageProps {
+  applicationName: string;
+  applicationDescription: string;
+  heroTitle: string;
+  catalogueLabel: string;
+  locale: AppLocale;
+}
+
+const architecture = [
+  {
+    name: 'Frontend',
+    detail: 'Web',
+    technologies: [
+      { name: 'Next.js', icon: '/icons/next.svg' },
+      { name: 'React', icon: '/icons/react.svg' },
+      { name: 'Tailwind CSS', icon: '/icons/tailwind.svg' },
+      { name: 'React Query', icon: '/icons/react-query.svg' },
+    ],
+  },
+  {
+    name: 'Backend',
+    detail: 'API',
+    technologies: [
+      { name: 'Stitchkit', icon: '/mascot-stitch.png' },
+      { name: 'Bun', icon: '/icons/bun.svg' },
+      { name: 'Zod', icon: '/icons/zod.svg' },
+    ],
+  },
+  {
+    name: 'Data',
+    detail: 'Storage',
+    technologies: [
+      { name: 'PostgreSQL', icon: '/icons/postgresql.svg' },
+      { name: 'Prisma', icon: '/icons/prisma.svg', invertInDark: true },
+    ],
+  },
+  {
+    name: 'Tooling',
+    detail: 'Quality',
+    technologies: [
+      { name: 'TypeScript', icon: '/icons/typescript.svg' },
+      { name: 'TSConfig', icon: '/icons/tsconfig.svg' },
+      { name: 'Biome', icon: '/icons/biome.svg' },
+    ],
+  },
+];
+
+export function StarterPage({
+  applicationName,
+  applicationDescription,
+  heroTitle,
+  catalogueLabel,
+  locale,
+}: StarterPageProps) {
+  const homeSeo = getSeoPage('home', locale);
+  const structuredData = {
+    '@context': 'https://schema.org',
+    '@type': 'SoftwareApplication',
+    name: SITE_NAME,
+    applicationCategory: 'DeveloperApplication',
+    operatingSystem: 'Web',
+    url: absoluteSiteUrl(`/${locale}`),
+    description: homeSeo.description,
+  };
+
+  return (
+    <main className='h-svh overflow-y-auto bg-background lg:overflow-hidden'>
+      <script type='application/ld+json'>{JSON.stringify(structuredData)}</script>
+      <div className='mx-auto flex min-h-full w-full max-w-7xl flex-col px-5 lg:h-full lg:px-8'>
+        <header className='flex h-16 shrink-0 items-center justify-between'>
+          <div className='flex min-w-0 items-center gap-2 font-medium'>
+            <BrandMark priority />
+            <span className='truncate'>{applicationName}</span>
+          </div>
+          <div className='flex items-center gap-2'>
+            <LanguageSwitcher />
+            <ThemeToggle />
+            <Link
+              aria-label={catalogueLabel}
+              className={cn(buttonVariants({ variant: 'outline', size: 'sm' }))}
+              href='/ui'
+            >
+              <span className='hidden sm:inline'>{catalogueLabel}</span>
+              <IconArrowUpRight />
+            </Link>
+          </div>
+        </header>
+
+        <div className='flex flex-1 flex-col items-center justify-center py-8 text-center lg:min-h-0 lg:py-5'>
+          <section className='flex w-full min-w-0 flex-col items-center'>
+            <h1 className='max-w-4xl font-display text-5xl font-medium tracking-tight sm:text-6xl lg:text-7xl lg:leading-[0.96]'>
+              {heroTitle}
+            </h1>
+            <p className='mt-5 max-w-3xl text-base leading-7 text-muted-foreground lg:text-lg'>
+              {applicationDescription}
+            </p>
+
+            <div className='mt-8 w-full max-w-4xl'>
+              <div className='grid grid-cols-2 overflow-hidden rounded-xl border border-border bg-card text-left sm:grid-cols-4'>
+                {architecture.map((item) => (
+                  <div
+                    className='min-w-0 border-border px-3 py-3 odd:border-r first:border-b second:border-b sm:border-r sm:border-b-0 sm:last:border-r-0 sm:px-4'
+                    key={item.name}
+                  >
+                    <div className='flex min-w-0 items-baseline gap-2'>
+                      <p className='truncate text-sm font-medium'>{item.name}</p>
+                      <p className='text-xs text-muted-foreground'>{item.detail}</p>
+                    </div>
+                    <div className='mt-2 flex min-h-6 items-center gap-2'>
+                      {item.technologies.map((technology) => (
+                        <Image
+                          alt={technology.name}
+                          className={
+                            technology.invertInDark
+                              ? 'technology-icon-invert-dark size-5 shrink-0 object-contain'
+                              : 'size-5 shrink-0 object-contain'
+                          }
+                          height={20}
+                          key={technology.icon}
+                          src={technology.icon}
+                          title={technology.name}
+                          width={20}
+                        />
+                      ))}
+                    </div>
+                  </div>
+                ))}
+              </div>
+            </div>
+
+            <div className='mt-5 w-full'>
+              <RepositorySummary />
+            </div>
+          </section>
+        </div>
+      </div>
+    </main>
+  );
+}

package/{template → examples/repository}/packages/frontend/src/components/repository-summary.tsx

@@ -52,7 +52,11 @@ export function RepositorySummary() {
     : '—';
 
   return (
-    <div className='mx-auto flex w-full max-w-4xl flex-col gap-4 rounded-xl border border-border bg-card/80 px-4 py-4 text-left backdrop-blur sm:flex-row sm:items-center sm:px-5'>
+    <div
+      className='mx-auto flex w-full max-w-4xl flex-col gap-4 rounded-xl border border-border bg-card/80 px-4 py-4 text-left backdrop-blur sm:flex-row sm:items-center sm:px-5'
+      data-fetched-at={snapshot.cache.fetchedAt}
+      data-testid='repository-summary'
+    >
       <a
         className='group flex min-w-0 flex-1 items-center gap-3'
         href={snapshot.htmlUrl}

package/{template → examples/repository}/packages/frontend/src/lib/realtime/repository.ts

@@ -1,14 +1,13 @@
-import type { ClientToServerEvents, ServerToClientEvents } from '@app/shared';
-import { createSocketIOClient } from 'stitchkit';
+import { repositoryRealtimeContract } from '@app/shared';
+import { createRealtimeClient } from 'stitchkit';
 import { createCacheBridge } from 'stitchkit/react';
 import { env } from '@/env';
 import { useRepository } from '@/lib/api/queries';
 import { getQueryClient } from '@/lib/query-client';
 
-export const repositorySocket = createSocketIOClient<
-  ServerToClientEvents,
-  ClientToServerEvents
->({ url: env.NEXT_PUBLIC_API_URL });
+export const repositorySocket = createRealtimeClient(repositoryRealtimeContract, {
+  url: env.NEXT_PUBLIC_API_URL,
+});
 
 export const repositoryBridge = createCacheBridge({
   socket: repositorySocket,

package/examples/repository/packages/frontend/src/providers/index.tsx

@@ -0,0 +1,18 @@
+'use client';
+
+import { TooltipProvider } from '@radix-ui/react-tooltip';
+import type { ReactNode } from 'react';
+import { Toaster } from '@/components/ui/toaster';
+import { ReactQueryProvider } from './react-query';
+import { RealtimeProvider } from './realtime';
+
+export function Providers({ children }: { children: ReactNode }) {
+  return (
+    <ReactQueryProvider>
+      <RealtimeProvider>
+        <TooltipProvider delayDuration={250}>{children}</TooltipProvider>
+      </RealtimeProvider>
+      <Toaster />
+    </ReactQueryProvider>
+  );
+}

package/examples/repository/packages/shared/src/index.ts

@@ -0,0 +1,5 @@
+export * from './contracts/repository';
+export * from './contracts/system';
+export * from './realtime/repository';
+export * from './schemas/repository';
+export * from './schemas/system';

package/examples/repository/packages/shared/src/realtime/repository.ts

@@ -0,0 +1,10 @@
+import { defineRealtimeContract } from 'stitchkit';
+import { z } from 'zod';
+import { RepositorySnapshotSchema } from '../schemas/repository';
+
+export const repositoryRealtimeContract = defineRealtimeContract({
+  serverToClient: {
+    'repository:refreshed': { args: z.tuple([RepositorySnapshotSchema]) },
+  },
+  clientToServer: {},
+});

package/{template → examples/repository}/packages/shared/src/schemas/repository.ts

@@ -1,12 +1,14 @@
-import { RepositoryVisibility } from '@app/db/enums';
 import { z } from 'zod';
 
+export const RepositoryVisibilitySchema = z.enum(['PUBLIC', 'PRIVATE', 'INTERNAL']);
+export type RepositoryVisibility = z.infer<typeof RepositoryVisibilitySchema>;
+
 export const RepositorySnapshotSchema = z.object({
   fullName: z.string().min(1),
   description: z.string().nullable(),
   htmlUrl: z.url(),
   language: z.string().nullable(),
-  visibility: z.enum(RepositoryVisibility),
+  visibility: RepositoryVisibilitySchema,
   stars: z.number().int().nonnegative(),
   forks: z.number().int().nonnegative(),
   openIssues: z.number().int().nonnegative(),

package/examples/repository/scripts/runtime-smoke.ts

@@ -0,0 +1,169 @@
+import { RepositorySnapshotSchema, repositoryRealtimeContract } from '@app/shared';
+import { createRealtimeClient, defineRealtimeContract } from 'stitchkit';
+import { z } from 'zod';
+import { defineSurfaceProbe, runSurfaceConformance } from './surface-conformance';
+import { loadToolingEnv } from './tooling-env';
+
+const toolingEnv = loadToolingEnv();
+const apiOrigin = toolingEnv.NEXT_PUBLIC_API_URL;
+
+async function json(path: string, init?: RequestInit): Promise<unknown> {
+  const response = await fetch(`${apiOrigin}${path}`, init);
+  if (!response.ok)
+    throw new Error(`${init?.method ?? 'GET'} ${path} returned ${response.status}`);
+  return response.json();
+}
+
+z.object({ status: z.literal('ok') }).parse(await json('/health'));
+
+await runSurfaceConformance({
+  apiOrigin,
+  probes: [
+    defineSurfaceProbe({
+      name: 'repository refresh lifecycle',
+      input: z.object({ path: z.literal('/api/repository/refresh') }),
+      fixture: { path: '/api/repository/refresh' },
+      output: RepositorySnapshotSchema,
+      run: async ({ path }) => {
+        const rejected: string[] = [];
+        const socket = createRealtimeClient(repositoryRealtimeContract, {
+          url: apiOrigin,
+          transports: ['websocket'],
+          onRejected: ({ event, direction, phase }) => {
+            rejected.push(`${event}:${direction}:${phase}`);
+          },
+        });
+        try {
+          await new Promise<void>((resolve, reject) => {
+            const timeout = setTimeout(
+              () => reject(new Error('Socket.IO connection timed out')),
+              5_000,
+            );
+            const unsubscribe = socket.onConnectionChange((connected, reason) => {
+              if (!connected) {
+                if (reason) reject(new Error(`Socket.IO disconnected: ${reason}`));
+                return;
+              }
+              clearTimeout(timeout);
+              unsubscribe();
+              resolve();
+            });
+            socket.connect();
+          });
+          const refreshedEvent = new Promise<string>((resolve, reject) => {
+            const timeout = setTimeout(
+              () => reject(new Error('Socket.IO repository refresh event timed out')),
+              5_000,
+            );
+            const unsubscribe = socket.on('repository:refreshed', (snapshot) => {
+              clearTimeout(timeout);
+              unsubscribe();
+              resolve(snapshot.fullName);
+            });
+          });
+          const refreshed = RepositorySnapshotSchema.parse(
+            await json(path, { method: 'POST' }),
+          );
+          if ((await refreshedEvent) !== refreshed.fullName) {
+            throw new Error('Socket.IO repository identity differs');
+          }
+          const cached = RepositorySnapshotSchema.parse(await json('/api/repository/'));
+          if (cached.fullName !== refreshed.fullName) {
+            throw new Error('Repository cache read differs');
+          }
+          if (rejected.length > 0) {
+            throw new Error(`Realtime contract rejected ${rejected.join(', ')}`);
+          }
+          return refreshed;
+        } finally {
+          socket.disconnect();
+        }
+      },
+    }),
+    defineSurfaceProbe({
+      name: 'realtime rejection path fires on a contract mismatch',
+      input: z.object({ path: z.literal('/api/repository/refresh') }),
+      fixture: { path: '/api/repository/refresh' },
+      run: async ({ path }) => {
+        // NEGATIVE probe: a client whose local contract disagrees with the
+        // server must see the real payload REJECTED — this executes the
+        // rejection path instead of merely asserting its absence. Matched by
+        // event/direction/phase, never by message text.
+        const divergentContract = defineRealtimeContract({
+          serverToClient: {
+            'repository:refreshed': { args: z.tuple([z.object({ bogus: z.string() })]) },
+          },
+          clientToServer: {},
+        });
+        const rejections: Array<{ event: string; direction: string; phase: string }> = [];
+        const socket = createRealtimeClient(divergentContract, {
+          url: apiOrigin,
+          transports: ['websocket'],
+          onRejected: ({ event, direction, phase }) => {
+            rejections.push({ event, direction, phase });
+          },
+        });
+        try {
+          await new Promise<void>((resolve, reject) => {
+            const timeout = setTimeout(
+              () => reject(new Error('Socket.IO connection timed out')),
+              5_000,
+            );
+            const unsubscribe = socket.onConnectionChange((connected) => {
+              if (!connected) return;
+              clearTimeout(timeout);
+              unsubscribe();
+              resolve();
+            });
+            socket.connect();
+          });
+          // A handler must be attached for the inbound frame to be validated.
+          const unsubscribe = socket.on('repository:refreshed', () => {
+            throw new Error('a payload outside the local contract reached the handler');
+          });
+          await json(path, { method: 'POST' });
+          const deadline = Date.now() + 5_000;
+          while (rejections.length === 0 && Date.now() < deadline) {
+            await new Promise((resolve) => setTimeout(resolve, 50));
+          }
+          unsubscribe();
+          const rejection = rejections[0];
+          if (!rejection) {
+            throw new Error('the contract mismatch was never rejected');
+          }
+          if (
+            rejection.event !== 'repository:refreshed' ||
+            rejection.direction !== 'client-inbound' ||
+            rejection.phase !== 'arguments'
+          ) {
+            throw new Error(
+              `unexpected rejection identity: ${rejection.event}:${rejection.direction}:${rejection.phase}`,
+            );
+          }
+        } finally {
+          socket.disconnect();
+        }
+      },
+    }),
+  ],
+});
+
+{
+  const corsResponse = await fetch(`${apiOrigin}/api/repository/`, {
+    headers: { Origin: 'http://localhost:58302' },
+  });
+  if (
+    corsResponse.headers.get('access-control-allow-origin') !==
+    new URL(toolingEnv.NEXT_PUBLIC_WEB_URL).origin
+  ) {
+    throw new Error('API CORS origin differs from the configured web origin');
+  }
+  const openApi = z
+    .object({ paths: z.record(z.string(), z.unknown()) })
+    .parse(await json('/openapi.json'));
+  if (!Object.keys(openApi.paths).some((path) => path.startsWith('/api/repository'))) {
+    throw new Error('OpenAPI repository path is missing');
+  }
+}
+
+console.log('Runtime HTTP, OpenAPI, Socket.IO and MCP smoke passed');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-stitchkit",
-  "version": "0.1.1",
+  "version": "0.3.0",
   "description": "Create a production-shaped Stitchkit application",
   "license": "MIT",
   "author": "Max Listov <maxlistov@gmail.com>",
@@ -16,6 +16,7 @@
   "files": [
     "dist",
     "template/**/*",
+    "examples/**/*",
     "!template/**/.env",
     "!template/**/node_modules/**",
     "!template/**/.next/**",
@@ -26,6 +27,11 @@
     "!template/**/src/generated/**",
     "!template/**/*.log",
     "!template/**/*.tsbuildinfo",
+    "!examples/**/node_modules/**",
+    "!examples/**/.next/**",
+    "!examples/**/dist/**",
+    "!examples/**/*.log",
+    "!examples/**/*.tsbuildinfo",
     "README.md",
     "CHANGELOG.md",
     "LICENSE"
@@ -39,6 +45,9 @@
     "build": "rm -rf dist && bun build src/cli.ts --outdir dist --target bun --packages external && chmod +x dist/cli.js",
     "prepublishOnly": "bun run check && bun run test && bun run build"
   },
+  "dependencies": {
+    "zod": "^4.4.3"
+  },
   "devDependencies": {
     "@types/bun": "^1.3.14",
     "typescript": "^7.0.2"

package/template/AGENTS.md

@@ -0,0 +1,50 @@
+# Application agent guide
+
+This repository is a generated Stitchkit application. It is not the Stitchkit
+framework source repository.
+
+## Architecture
+
+- `packages/shared` owns named Zod schemas, inferred DTO types, HTTP contracts
+  and realtime event definitions. It has no database, server or browser imports.
+- `packages/db` owns Prisma schema, migrations and the generated client.
+- `packages/backend` implements contracts, composes the registered surface and
+  owns application policy. Routes remain thin transport boundaries.
+- `packages/frontend` owns Next.js pages, typed clients, query/mutation hooks and
+  cache reactions.
+- `packages/config/src/server.ts` is the only server environment boundary.
+  `app.config.json` is the only application identity boundary.
+
+Dependencies point inward: frontend/backend → shared; backend → db/config.
+Shared never imports an application runtime package.
+
+## Required patterns
+
+- Define each runtime DTO as a named Zod schema in `packages/shared/src/schemas`.
+- Reference schemas from a separate contract module; never inline `z.object()`
+  inside `defineContract`.
+- Implement one service method per contract operation and register the service
+  once in `packages/backend/src/surface.ts`.
+- Use Stitchkit's typed browser client and react-query-kit hooks; do not rebuild
+  endpoint URLs, query keys or error envelopes by hand.
+- Use Socket.IO through the shared realtime contract and Stitchkit wrappers.
+  Authentication, authorization and room membership remain application policy.
+- Extend runtime smoke with an explicit typed probe for operations whose handler
+  behavior matters. Generic OpenAPI/MCP discovery checks are already derived.
+
+Do not duplicate DTOs, copy Stitchkit internals, add raw routes for operations a
+contract can express, or create compatibility aliases. Fix framework gaps in
+Stitchkit rather than copying its implementation into this application.
+
+## Workflow
+
+Follow [`docs/ADDING_A_FEATURE.md`](docs/ADDING_A_FEATURE.md) for the complete
+vertical path. Before handing work off, run:
+
+```bash
+bun run check
+bun run test
+bun run build
+bun run runtime:smoke
+```
+

package/template/README.md

@@ -1,7 +1,11 @@
-# Stitchkit Starter
+# Application starter
 
 Production-shaped application generated by `create-stitchkit`.
 
+Application identity lives in [`app.config.json`](app.config.json). Change the
+slug, display name, version and localized description there; package names,
+process names, MCP/OpenAPI identity, UI copy and SEO derive from it.
+
 ## Start
 
 Point `DATABASE_URL` in `.env` at an existing PostgreSQL database, then run:
@@ -10,8 +14,8 @@ Point `DATABASE_URL` in `.env` at an existing PostgreSQL database, then run:
 bun run dev
 ```
 
-The command validates the environment, generates the Prisma client, applies the
-checked-in migrations and launches:
+The command validates the environment, generates the Prisma client, applies any
+database migrations you add and launches:
 
 - Web: <http://localhost:3210>
 - UI catalogue: <http://localhost:3210/en/ui>
@@ -19,11 +23,16 @@ checked-in migrations and launches:
 - OpenAPI: <http://localhost:3211/openapi.json>
 - MCP: <http://localhost:3211/mcp>
 
-The home page is a compact Stitchkit Starter reference surface. One configured
-GitHub repository exercises the PostgreSQL cache → contract → typed client →
+The home page is a compact, domain-free application reference surface.
+Add application features as vertical schema → contract → service → client slices.
+The exact workflow is in [`docs/ADDING_A_FEATURE.md`](docs/ADDING_A_FEATURE.md),
+and root [`AGENTS.md`](AGENTS.md) gives coding agents the application boundaries.
+
+When generated with `--example repository`, one configured GitHub repository
+exercises the PostgreSQL cache → contract → typed client →
 mutation invalidation → realtime path without adding a demo product domain.
 Configure it with `GITHUB_REPOSITORY`; `GITHUB_TOKEN` is optional.
-Repository visibility demonstrates the canonical Prisma enum → shared Zod schema
+Repository visibility then demonstrates the canonical Prisma enum → shared Zod schema
 → HTTP/UI path without duplicating its allowed values.
 
 The `/en/ui` catalogue is isolated under
@@ -45,6 +54,8 @@ Unsupported browsers and users requesting reduced motion switch immediately.
 bun run check
 bun run test
 bun run build
+bun run runtime:smoke
+bun run e2e
 ```
 
 ## Production
@@ -65,5 +76,3 @@ application owns its schema and migrations; the environment owns the database
 process and supplies its connection through `DATABASE_URL`.
 
 `bun run dev` and `bun run pm2:dev` use the same direct PM2 development path.
-Rename the neutral `stitchkit-starter` package and process names when adopting
-the template for a product.

package/template/_env.example

@@ -6,7 +6,4 @@ NEXT_PUBLIC_API_URL=http://127.0.0.1:3211
 INTERNAL_API_URL=http://127.0.0.1:3211
 NEXT_PUBLIC_WEB_URL=http://127.0.0.1:3210
 LOG_FORMAT=pretty
-GITHUB_REPOSITORY=max-listov/stitchkit
-GITHUB_CACHE_TTL_SECONDS=900
-# Optional. Authenticated conditional requests have a higher GitHub rate limit.
-# GITHUB_TOKEN=github_pat_...
+CORS_ORIGIN=http://127.0.0.1:3210

package/template/app.config.json

@@ -0,0 +1,9 @@
+{
+  "slug": "stitchkit-starter",
+  "name": "Stitchkit Starter",
+  "version": "0.1.0",
+  "description": {
+    "en": "Stitchkit Starter is a production application built with Stitchkit.",
+    "ru": "Stitchkit Starter — production-приложение на Stitchkit."
+  }
+}

package/template/bun.lock

@@ -8,14 +8,17 @@
         "dotenv": "^17.4.2",
       },
       "devDependencies": {
+        "@app/config": "workspace:*",
         "@app/shared": "workspace:*",
         "@axe-core/playwright": "^4.11.0",
         "@biomejs/biome": "^2.5.7",
         "@modelcontextprotocol/client": "^2.0.0",
         "@playwright/test": "^1.55.0",
         "@types/bun": "^1.3.14",
+        "@types/node": "^26.2.0",
         "oxc-parser": "^0.143.0",
         "socket.io-client": "^4.8.3",
+        "stitchkit": "catalog:",
         "typescript": "^7.0.2",
         "zod": "^4.4.3",
       },
@@ -72,7 +75,7 @@
       "name": "@app/frontend",
       "version": "0.1.0",
       "dependencies": {
-        "@app/db": "workspace:*",
+        "@app/config": "workspace:*",
         "@app/shared": "workspace:*",
         "@radix-ui/react-alert-dialog": "^1.1.23",
         "@radix-ui/react-avatar": "^1.2.6",
@@ -125,7 +128,6 @@
       "name": "@app/shared",
       "version": "0.1.0",
       "dependencies": {
-        "@app/db": "workspace:*",
         "stitchkit": "catalog:",
         "zod": "^4.4.3",
       },
@@ -136,7 +138,7 @@
     },
   },
   "catalog": {
-    "stitchkit": "^0.44.0",
+    "stitchkit": "^0.46.0",
   },
   "packages": {
     "@ai-sdk/gateway": ["@ai-sdk/gateway@4.0.46", "", { "dependencies": { "@ai-sdk/provider": "4.0.7", "@ai-sdk/provider-utils": "5.0.25", "@vercel/oidc": "3.2.0" }, "peerDependencies": { "zod": "^3.25.76 || ^4.1.8" } }, "sha512-LIAO6kAG8fpXQb9L0iwPk1FIbXftvqnyC56v5NEAzeWTeL8fUsy/Hx86VPBTWEDFdwbVprjWifJOAqS6AOj3mA=="],
@@ -1115,7 +1117,7 @@
 
     "std-env": ["std-env@3.10.0", "", {}, "sha512-5GS12FdOZNliM5mAOxFRg7Ir0pWz8MdpYm6AY6VPkGpbA7ZzmbzNcBJQ0GPvvyWgcY7QAhCgf9Uy89I03faLkg=="],
 
-    "stitchkit": ["stitchkit@0.44.0", "", { "dependencies": { "ky": "^2.0.2" }, "peerDependencies": { "@modelcontextprotocol/ext-apps": "^1.7.2", "@modelcontextprotocol/server": "^2.0.0", "@socket.io/bun-engine": "^0.1.1", "@socket.io/component-emitter": "^3.1.2", "@tanstack/react-query": ">=5", "@types/bun": "^1.3.14", "ai": "^7.0.0", "react": ">=18", "react-query-kit": "^3.3.3", "socket.io": "^4.8.3", "socket.io-client": "^4.8.3", "srvx": "^0.12.5", "zod": "^4.4.3" }, "optionalPeers": ["@modelcontextprotocol/ext-apps", "@modelcontextprotocol/server", "@socket.io/bun-engine", "@socket.io/component-emitter", "@tanstack/react-query", "@types/bun", "ai", "react", "react-query-kit", "socket.io", "socket.io-client", "srvx"] }, "sha512-B/MBeBpaoruA3bSxQ25oJ7IZUP08+CZGkpxbXH6PtnEsFoDGev2m3+QEULnQCGQYvvuMkrdoB1z/6k1j+hSdZg=="],
+    "stitchkit": ["stitchkit@0.46.0", "", { "dependencies": { "ky": "^2.0.2" }, "peerDependencies": { "@modelcontextprotocol/ext-apps": "^1.7.2", "@modelcontextprotocol/server": "^2.0.0", "@socket.io/bun-engine": "^0.1.1", "@socket.io/component-emitter": "^3.1.2", "@tanstack/react-query": ">=5", "@types/bun": "^1.3.14", "ai": "^7.0.0", "react": ">=18", "react-query-kit": "^3.3.3", "socket.io": "^4.8.3", "socket.io-client": "^4.8.3", "srvx": "^0.12.5", "zod": "^4.4.3" }, "optionalPeers": ["@modelcontextprotocol/ext-apps", "@modelcontextprotocol/server", "@socket.io/bun-engine", "@socket.io/component-emitter", "@tanstack/react-query", "@types/bun", "ai", "react", "react-query-kit", "socket.io", "socket.io-client", "srvx"] }, "sha512-vHFaXHp5Ws4sFSRptqPqwpc7CGEEbmHY+duvvGkNGwuyp51aY4De3bXVh1xiZSGiUN5IS0jhj1P59GG3VjP/Ag=="],
 
     "stringify-entities": ["stringify-entities@4.0.4", "", { "dependencies": { "character-entities-html4": "^2.0.0", "character-entities-legacy": "^3.0.0" } }, "sha512-IwfBptatlO+QCJUo19AqvrPNqlVMpW9YEL2LIVY+Rpv2qsjCGxaDLNRgeGsQWJhfItebuJhsGSLjaBbNSQ+ieg=="],