stitchkit 0.100.2 → 0.100.3

package/CHANGELOG.md

@@ -15,6 +15,92 @@ additive**; the first breaking change landed in 0.10.0. Grep the file for
 
 ## [Unreleased]
 
+## [0.100.3] — 2026-09-29
+
+### Added
+
+- `stitchkit/react/keyboard` (new, evolving) — which part of a React screen
+  gets a key. `useKeyLayer` puts a layer on one window-wide stack asked
+  `overlay` → `local` → `route` → `zone` → `global`, innermost first within a
+  kind (by element containment, so a panel outranks the page it mounted with);
+  a live overlay is a barrier, keys typed in fields pass layers by except
+  Escape, and the listener sits in the bubbling phase so widgets and fields keep
+  what they handle. `useEscapeLayer` closes one level per press, and a held
+  Escape closes one. `useNavZone` makes a list the arrows move through with real
+  focus — roving `tabIndex`, `listbox`/`tablist` roles or `aria-current`,
+  `select` and `highlight` modes, `onEnter`/`onExit` on the cross axis,
+  `onBoundary` or `loop` at the ends, and `onReveal` for a virtualized list
+  whose next row is not rendered yet — focus lands on it when it mounts. Hooks
+  only; `react` is the only peer.
+  → ADR 0212, [keyboard guide](docs/guide/keyboard.md)
+- `stitchkit/telegram/html` (new, evolving; browser and server, no peer) —
+  Telegram's HTML parse mode as a tree. `parseTelegramHtml` turns any markup
+  into nodes Telegram accepts — synonyms renamed, block tags into line breaks, a
+  link only with an `href` Telegram opens, an entity where Telegram forbids it
+  (formatting inside `code`, a quote in a quote) kept as its words — and
+  `renderTelegramHtml` / `sanitizeTelegramHtml` write it back.
+  `splitTelegramHtml` cuts by what the reader sees, not the markup's length, at
+  a paragraph, a line, a space, never inside a character or a custom emoji, and
+  reopens every element across a cut with its attributes; `truncateTelegramHtml`,
+  `telegramHtmlText`, `checkTelegramHtml` (what Telegram would refuse, without
+  repairing), `escapeTelegramHtml`, `TELEGRAM_TEXT_LIMIT` /
+  `TELEGRAM_CAPTION_LIMIT`. → ADR 0213, [guide](docs/guide/telegram.md#message-markup)
+- `stitchkit/telegram` — a bot on a webhook. `claimTelegramWebhook` sets the
+  webhook only where it already points to this address with this secret, or
+  where `takeoverFrom` names the current owner's host (`'none'` for no webhook);
+  the address carries an `owner` tag of the secret, so a copy of the production
+  address with another secret is refused (`TelegramWebhookClaimError`:
+  `owned-elsewhere`, `other-secret`, `not-confirmed`, hosts only).
+  `checkTelegramWebhook` notices a webhook that moved; `receiveTelegramWebhook`
+  answers a request — 403 without the secret, 200 once the update is recorded.
+  `createTelegramUpdateIntake` records an update before Telegram is answered and
+  handles it after: chat order kept, other chats alongside, a renewed lease per
+  attempt, a sweep that takes over what a restart or a dead process left,
+  retries, `maxAttempts`, repeats refused for `retainMs`; at least once. The
+  store is an interface of atomic steps, with `memoryTelegramUpdateStore` and
+  `sqliteTelegramUpdateStore` over a `bun:sqlite` or `node:sqlite` handle.
+  → ADR 0213, [guide](docs/guide/telegram.md#a-bot-on-a-webhook)
+- `stitchkit/telegram` — `dedupe` on `createTelegramOperatorChannel`: one
+  message per fingerprint per window, the next one sent carries how many were
+  held back, and a budget per window turns a storm into one count; held-back
+  messages reach `onDropped` as `repeated` / `over-budget`. `sensitiveValues`
+  masks exact secrets.
+- `stitchkit/observability` — `sensitiveValues` on `createJsonLogger`,
+  `createBoundedLogger` and `SanitizeOptions` masks exact secret values in every
+  string; `secretValuesFromEnv(env)` collects them from variables named as a
+  token, secret, key, password or credential and from inside URL variables,
+  URL-encoded too.
+- `stitchkit/telegram/screens` (new, evolving) — a bot's menus as declared
+  screens over grammY. `telegramScreens<Ctx>()` declares screens and groups by
+  path (`tg.screen('/project/:id').load(…).action(…).on(…).view(…)`), with params
+  typed from the path literal, typed action buttons (`act.name(label, input)`)
+  and a group `load` that checks access for every screen under it. A view is
+  reconciled against what the chat shows by message key — only the part that
+  changed is edited, order holds, "not modified" and a deleted message are
+  absorbed — and the chat's record lives in any grammY `StorageAdapter`, so
+  navigation and waiting for input survive a restart. Outcomes `stay`, `go`,
+  `back`, `toast` and `notice` (a receipt, or a remark with `expiresInMs`);
+  input deleted before any load or handler unless `keepMessage`; a params
+  schema must accept its own output (a compile error otherwise); a refusal
+  halfway leaves the record on the screen the chat was on; `screens.open`,
+  `screens.button(link(…))` for notifications, `onStale`, `onError`, `onEvent`;
+  a forged `callback_data` never reaches a handler. `createScreenTestChat(bot)`
+  drives the application's own `Bot` against an in-memory Bot API. grammY is
+  named in the declarations only. → ADR 0211, [guide](docs/guide/telegram-screens.md)
+
+### Fixed
+
+- `stitchkit/cli` — `--flag true` and `--flag false` after a boolean flag are
+  its value. The word used to be read as a positional argument: it filled the
+  first non-boolean field, so the refusal named a field nobody had touched, and
+  `--flag false` turned the flag on. The same for a short alias, a framework
+  flag (`--json false`) and an application option; any other word stays a
+  positional, and command help says so.
+- `stitchkit/telegram` — `telegramOperatorSender({ parseMode: 'HTML' })` sends
+  markup Telegram accepts. The channel cuts a long text by characters, and the
+  cut could end inside a tag, so Telegram refused the message and it was dropped
+  as `refused`; the sender now cleans the markup and cuts it by what it shows.
+
 ## [0.100.2] — 2026-09-28
 
 ### Added

package/README.md

@@ -445,9 +445,10 @@ peer — an install pulls in only what the project actually uses.
 | `stitchkit-tui` | separate optional package | Renderer-neutral `./core` state plus a Bun/OpenTUI terminal controller, commands, model/session pickers and authenticated local attachment over a caller-composed harness. |
 | `@openrouter/ai-sdk-provider` | peer, optional | Only `stitchkit/agent-runtime/openrouter`; neutral runtime imports do not resolve it. |
 | SQLite | runtime built-in, optional | `bun:sqlite` through `stitchkit/agent-runtime/sqlite/bun`, or `node:sqlite` on Node ≥ 22.5 through the Node leaf. |
-| `grammy` | peer, optional | Only `stitchkit/application/grammy`; the neutral application kernel does not resolve it. |
+| `grammy` | peer, optional | Only `stitchkit/application/grammy` at run time, and the declarations of `stitchkit/telegram/screens`; the neutral application kernel does not resolve it. |
 | `@opentelemetry/api` | peer, optional | Type-only boundary for `stitchkit/application/opentelemetry`; the adapter has no runtime import and owns no SDK/exporter. |
 | `@tanstack/react-query` + `react-query-kit` | peer, optional | Only `stitchkit/react` — `createCursorQuery`, `createCacheBridge`. |
+| `react` | peer, optional | Only the React subpaths: `stitchkit/react` with the two above, and `stitchkit/react/keyboard` — keyboard layers and list zones, hooks only. |
 | `socket.io` / `@socket.io/bun-engine` / `socket.io-client` | peer, optional | Only the Socket.IO wrappers. `@socket.io/bun-engine` is Bun-only; shipping one self-contained artifact? Hand the loaders to `createSocketIOServer({ peers })`. |
 | `@socket.io/component-emitter` | peer, optional, **types only** | Referenced by the browser Socket.IO declarations. Arrives with `socket.io-client`; nothing imports it at runtime. |
 | `srvx` | peer, optional | Only `serveNode` — the Node ≥ 22 HTTP adapter. Bun uses `Bun.serve` and needs nothing. |

package/dist/entrypoints/agent-runtime/browser.js

@@ -1,124 +1,124 @@
 import {
-  AgentControlDeliverySchema,
-  AgentControlRequestSchema,
-  AgentControlResponseSchema,
-  AgentMultiSessionCursorSchema,
-  advanceAgentMultiSessionCursor,
-  createAgentControlView,
-  reduceAgentControlEvent,
-  reduceAgentControlSnapshot
-} from "../../index-bt14acb5.js";
+  AgentRecordIdSchema2,
+  AgentRecordVersionSchema2,
+  AgentTimestampSchema2,
+  AgentJsonObjectSchema2,
+  AgentProviderEnvelopeSchema2,
+  AgentProviderResponseSchema2,
+  AgentTextPartSchema2,
+  AgentReasoningPartSchema2,
+  AgentFilePartSchema2,
+  AgentSourcePartSchema2,
+  AgentToolCallPartSchema2,
+  AgentToolResultPartSchema2,
+  AgentToolApprovalRequestPartSchema2,
+  AgentToolApprovalResponsePartSchema2,
+  AgentOpaquePartSchema2,
+  AgentControlPartSchema2,
+  AgentMessagePartSchema2,
+  AgentMessageRoleSchema2,
+  AgentMessageStatusSchema2,
+  AgentMessageSchema2,
+  AgentAssistantPlaceholderSchema2,
+  AgentRunStateSchema2,
+  AgentRunQueuePrioritySchema2,
+  AgentRunOperationKindSchema2,
+  AgentRunOperationPhaseSchema2,
+  AgentRunOperationSchema2,
+  AgentTerminalReasonSchema2,
+  runStateForTerminalReason2,
+  AgentProvenanceSchema2,
+  AgentUsageValueSchema2,
+  AgentCostValueSchema2,
+  AgentUsageSchema2,
+  AgentRunSchema2,
+  AgentSnapshotSchema2,
+  AgentRunMetricsSchema2
+} from "../../index-8kzct1d6.js";
 import {
-  AgentAdmissionEventSchema,
-  AgentAttemptResetEventSchema,
-  AgentCheckpointEventSchema,
-  AgentReasoningDeltaEventSchema,
-  AgentReasoningEndEventSchema,
-  AgentReasoningStartEventSchema,
-  AgentRunOperationEventSchema,
-  AgentRunStateEventSchema,
-  AgentRuntimeEventCursorSchema,
-  AgentRuntimeEventSchema,
-  AgentTerminalEventSchema,
-  AgentToolStatusEventSchema,
-  AgentTransientDeltaEventSchema,
-  advanceAgentRuntimeEventCursor,
-  agentDurableEventId
-} from "../../index-y64k3s0h.js";
+  AgentAdmissionEventSchema2,
+  AgentTransientDeltaEventSchema2,
+  AgentReasoningStartEventSchema2,
+  AgentReasoningDeltaEventSchema2,
+  AgentReasoningEndEventSchema2,
+  AgentAttemptResetEventSchema2,
+  AgentCheckpointEventSchema2,
+  AgentRunStateEventSchema2,
+  AgentRunOperationEventSchema2,
+  AgentToolStatusEventSchema2,
+  AgentTerminalEventSchema2,
+  AgentRuntimeEventSchema2,
+  AgentRuntimeEventCursorSchema2,
+  advanceAgentRuntimeEventCursor2,
+  agentDurableEventId2
+} from "../../index-mnkk1ffz.js";
 import {
-  AgentAssistantPlaceholderSchema,
-  AgentControlPartSchema,
-  AgentCostValueSchema,
-  AgentFilePartSchema,
-  AgentJsonObjectSchema,
-  AgentMessagePartSchema,
-  AgentMessageRoleSchema,
-  AgentMessageSchema,
-  AgentMessageStatusSchema,
-  AgentOpaquePartSchema,
-  AgentProvenanceSchema,
-  AgentProviderEnvelopeSchema,
-  AgentProviderResponseSchema,
-  AgentReasoningPartSchema,
-  AgentRecordIdSchema,
-  AgentRecordVersionSchema,
-  AgentRunMetricsSchema,
-  AgentRunOperationKindSchema,
-  AgentRunOperationPhaseSchema,
-  AgentRunOperationSchema,
-  AgentRunQueuePrioritySchema,
-  AgentRunSchema,
-  AgentRunStateSchema,
-  AgentSnapshotSchema,
-  AgentSourcePartSchema,
-  AgentTerminalReasonSchema,
-  AgentTextPartSchema,
-  AgentTimestampSchema,
-  AgentToolApprovalRequestPartSchema,
-  AgentToolApprovalResponsePartSchema,
-  AgentToolCallPartSchema,
-  AgentToolResultPartSchema,
-  AgentUsageSchema,
-  AgentUsageValueSchema,
-  runStateForTerminalReason
-} from "../../index-gtj3zc53.js";
+  AgentControlRequestSchema2,
+  AgentControlResponseSchema2,
+  AgentControlDeliverySchema2,
+  AgentMultiSessionCursorSchema2,
+  advanceAgentMultiSessionCursor2,
+  createAgentControlView2,
+  reduceAgentControlSnapshot2,
+  reduceAgentControlEvent2
+} from "../../index-n5yqxd3d.js";
 export {
-  runStateForTerminalReason,
-  reduceAgentControlSnapshot,
-  reduceAgentControlEvent,
-  createAgentControlView,
-  agentDurableEventId,
-  advanceAgentRuntimeEventCursor,
-  advanceAgentMultiSessionCursor,
-  AgentUsageValueSchema,
-  AgentUsageSchema,
-  AgentTransientDeltaEventSchema,
-  AgentToolStatusEventSchema,
-  AgentToolResultPartSchema,
-  AgentToolCallPartSchema,
-  AgentToolApprovalResponsePartSchema,
-  AgentToolApprovalRequestPartSchema,
-  AgentTimestampSchema,
-  AgentTextPartSchema,
-  AgentTerminalReasonSchema,
-  AgentTerminalEventSchema,
-  AgentSourcePartSchema,
-  AgentSnapshotSchema,
-  AgentRuntimeEventSchema,
-  AgentRuntimeEventCursorSchema,
-  AgentRunStateSchema,
-  AgentRunStateEventSchema,
-  AgentRunSchema,
-  AgentRunQueuePrioritySchema,
-  AgentRunOperationSchema,
-  AgentRunOperationPhaseSchema,
-  AgentRunOperationKindSchema,
-  AgentRunOperationEventSchema,
-  AgentRunMetricsSchema,
-  AgentRecordVersionSchema,
-  AgentRecordIdSchema,
-  AgentReasoningStartEventSchema,
-  AgentReasoningPartSchema,
-  AgentReasoningEndEventSchema,
-  AgentReasoningDeltaEventSchema,
-  AgentProviderResponseSchema,
-  AgentProviderEnvelopeSchema,
-  AgentProvenanceSchema,
-  AgentOpaquePartSchema,
-  AgentMultiSessionCursorSchema,
-  AgentMessageStatusSchema,
-  AgentMessageSchema,
-  AgentMessageRoleSchema,
-  AgentMessagePartSchema,
-  AgentJsonObjectSchema,
-  AgentFilePartSchema,
-  AgentCostValueSchema,
-  AgentControlResponseSchema,
-  AgentControlRequestSchema,
-  AgentControlPartSchema,
-  AgentControlDeliverySchema,
-  AgentCheckpointEventSchema,
-  AgentAttemptResetEventSchema,
-  AgentAssistantPlaceholderSchema,
-  AgentAdmissionEventSchema
+  AgentAdmissionEventSchema2 as AgentAdmissionEventSchema,
+  AgentAssistantPlaceholderSchema2 as AgentAssistantPlaceholderSchema,
+  AgentAttemptResetEventSchema2 as AgentAttemptResetEventSchema,
+  AgentCheckpointEventSchema2 as AgentCheckpointEventSchema,
+  AgentControlDeliverySchema2 as AgentControlDeliverySchema,
+  AgentControlPartSchema2 as AgentControlPartSchema,
+  AgentControlRequestSchema2 as AgentControlRequestSchema,
+  AgentControlResponseSchema2 as AgentControlResponseSchema,
+  AgentCostValueSchema2 as AgentCostValueSchema,
+  AgentFilePartSchema2 as AgentFilePartSchema,
+  AgentJsonObjectSchema2 as AgentJsonObjectSchema,
+  AgentMessagePartSchema2 as AgentMessagePartSchema,
+  AgentMessageRoleSchema2 as AgentMessageRoleSchema,
+  AgentMessageSchema2 as AgentMessageSchema,
+  AgentMessageStatusSchema2 as AgentMessageStatusSchema,
+  AgentMultiSessionCursorSchema2 as AgentMultiSessionCursorSchema,
+  AgentOpaquePartSchema2 as AgentOpaquePartSchema,
+  AgentProvenanceSchema2 as AgentProvenanceSchema,
+  AgentProviderEnvelopeSchema2 as AgentProviderEnvelopeSchema,
+  AgentProviderResponseSchema2 as AgentProviderResponseSchema,
+  AgentReasoningDeltaEventSchema2 as AgentReasoningDeltaEventSchema,
+  AgentReasoningEndEventSchema2 as AgentReasoningEndEventSchema,
+  AgentReasoningPartSchema2 as AgentReasoningPartSchema,
+  AgentReasoningStartEventSchema2 as AgentReasoningStartEventSchema,
+  AgentRecordIdSchema2 as AgentRecordIdSchema,
+  AgentRecordVersionSchema2 as AgentRecordVersionSchema,
+  AgentRunMetricsSchema2 as AgentRunMetricsSchema,
+  AgentRunOperationEventSchema2 as AgentRunOperationEventSchema,
+  AgentRunOperationKindSchema2 as AgentRunOperationKindSchema,
+  AgentRunOperationPhaseSchema2 as AgentRunOperationPhaseSchema,
+  AgentRunOperationSchema2 as AgentRunOperationSchema,
+  AgentRunQueuePrioritySchema2 as AgentRunQueuePrioritySchema,
+  AgentRunSchema2 as AgentRunSchema,
+  AgentRunStateEventSchema2 as AgentRunStateEventSchema,
+  AgentRunStateSchema2 as AgentRunStateSchema,
+  AgentRuntimeEventCursorSchema2 as AgentRuntimeEventCursorSchema,
+  AgentRuntimeEventSchema2 as AgentRuntimeEventSchema,
+  AgentSnapshotSchema2 as AgentSnapshotSchema,
+  AgentSourcePartSchema2 as AgentSourcePartSchema,
+  AgentTerminalEventSchema2 as AgentTerminalEventSchema,
+  AgentTerminalReasonSchema2 as AgentTerminalReasonSchema,
+  AgentTextPartSchema2 as AgentTextPartSchema,
+  AgentTimestampSchema2 as AgentTimestampSchema,
+  AgentToolApprovalRequestPartSchema2 as AgentToolApprovalRequestPartSchema,
+  AgentToolApprovalResponsePartSchema2 as AgentToolApprovalResponsePartSchema,
+  AgentToolCallPartSchema2 as AgentToolCallPartSchema,
+  AgentToolResultPartSchema2 as AgentToolResultPartSchema,
+  AgentToolStatusEventSchema2 as AgentToolStatusEventSchema,
+  AgentTransientDeltaEventSchema2 as AgentTransientDeltaEventSchema,
+  AgentUsageSchema2 as AgentUsageSchema,
+  AgentUsageValueSchema2 as AgentUsageValueSchema,
+  advanceAgentMultiSessionCursor2 as advanceAgentMultiSessionCursor,
+  advanceAgentRuntimeEventCursor2 as advanceAgentRuntimeEventCursor,
+  agentDurableEventId2 as agentDurableEventId,
+  createAgentControlView2 as createAgentControlView,
+  reduceAgentControlEvent2 as reduceAgentControlEvent,
+  reduceAgentControlSnapshot2 as reduceAgentControlSnapshot,
+  runStateForTerminalReason2 as runStateForTerminalReason
 };

package/dist/entrypoints/agent-runtime/coding-tools.js

@@ -1,23 +1,18 @@
+import"../../index-ct75c3at.js";
+import"../../index-7z9ym7t8.js";
+import"../../index-n53mswt3.js";
+import"../../index-b2bz0kdm.js";
 import {
-  AgentCodingToolAuthorizationSchema,
-  AgentCodingToolLimitsSchema,
-  AgentCodingToolPathAuthorizationSchema,
-  createAgentCodingTools
-} from "../../index-gw8bmyaj.js";
-import"../../index-fhwqwxe0.js";
-import"../../index-zjjyynm3.js";
-import"../../index-qmy6zq75.js";
-import"../../index-d8m8zpd8.js";
-import"../../index-0r0fbk7z.js";
-import"../../index-eqqvgdb3.js";
-import"../../index-znfs20ss.js";
-import"../../index-p5r7qpdd.js";
-import"../../index-2vtcmrj9.js";
-import"../../index-k5hsfc3j.js";
-import"../../index-hffjpmq9.js";
+  AgentCodingToolLimitsSchema2,
+  AgentCodingToolAuthorizationSchema2,
+  AgentCodingToolPathAuthorizationSchema2,
+  createAgentCodingTools2
+} from "../../index-djjhhgjk.js";
+import"../../index-ahvsksw5.js";
+import"../../index-jzczzcsb.js";
 export {
-  createAgentCodingTools,
-  AgentCodingToolPathAuthorizationSchema,
-  AgentCodingToolLimitsSchema,
-  AgentCodingToolAuthorizationSchema
+  AgentCodingToolAuthorizationSchema2 as AgentCodingToolAuthorizationSchema,
+  AgentCodingToolLimitsSchema2 as AgentCodingToolLimitsSchema,
+  AgentCodingToolPathAuthorizationSchema2 as AgentCodingToolPathAuthorizationSchema,
+  createAgentCodingTools2 as createAgentCodingTools
 };

package/dist/entrypoints/agent-runtime/harness.js

@@ -1,42 +1,34 @@
 import {
-  AgentControlRequestSchema,
-  AgentControlResponseSchema
-} from "../../index-bt14acb5.js";
+  AgentModelDescriptorSchema2
+} from "../../index-nx6eazt0.js";
+import"../../index-8kzct1d6.js";
 import {
-  composeAgentPrompt,
-  createAgentRuntime,
-  createAgentRuntimeEventSink
-} from "../../index-f4fx2tza.js";
-import"../../index-83bdg97s.js";
-import"../../index-y64k3s0h.js";
+  createAgentRuntimeEventSink2,
+  composeAgentPrompt2,
+  createAgentRuntime2
+} from "../../index-zs4ms3th.js";
+import"../../index-h97tqqp1.js";
+import"../../index-mnkk1ffz.js";
+import"../../index-n53mswt3.js";
+import"../../index-b2bz0kdm.js";
+import"../../index-hby4qhax.js";
+import"../../index-9pw0a51a.js";
+import"../../index-ct75c3at.js";
+import"../../index-7z9ym7t8.js";
+import"../../index-dvwj1f43.js";
+import"../../index-a9pd417t.js";
+import"../../index-r5hsgkz5.js";
 import {
-  AgentModelDescriptorSchema
-} from "../../index-mqv3b5rh.js";
-import"../../index-h6eeys1v.js";
+  AgentControlRequestSchema2,
+  AgentControlResponseSchema2
+} from "../../index-n5yqxd3d.js";
 import {
   walkContainedFiles
-} from "../../index-fhwqwxe0.js";
-import"../../index-zjjyynm3.js";
-import"../../index-cyktc4bp.js";
-import"../../index-gtj3zc53.js";
-import"../../index-q3pyb9n0.js";
-import"../../index-79z7m7dt.js";
-import"../../index-8qt2m66q.js";
-import"../../index-zfrhfn82.js";
-import"../../index-35mh5bhj.js";
-import"../../index-zcgf3gqf.js";
-import"../../index-1zbbzgfh.js";
+} from "../../index-ej331hah.js";
+import"../../index-r1z0rd9c.js";
 import {
-  defineRuntimeTool
-} from "../../index-d8m8zpd8.js";
-import"../../index-0r0fbk7z.js";
-import"../../index-eqqvgdb3.js";
-import"../../index-znfs20ss.js";
-import"../../index-p5r7qpdd.js";
-import"../../index-2vtcmrj9.js";
-import"../../index-k5hsfc3j.js";
-import"../../index-kzfs85xp.js";
-import"../../index-hffjpmq9.js";
+  defineRuntimeTool2
+} from "../../index-jzczzcsb.js";
 
 // src/agent-runtime/harness-contract.ts
 import { z } from "zod";
@@ -65,7 +57,7 @@ var AgentHarnessProfileEventSchema = z.object({
   type: z.literal("profile-applied"),
   conversationId: z.string().min(1),
   runId: z.string().min(1),
-  model: AgentModelDescriptorSchema,
+  model: AgentModelDescriptorSchema2,
   resources: z.array(AgentHarnessAppliedResourceSchema),
   diagnostics: z.array(AgentHarnessResourceDiagnosticSchema),
   toolNames: z.array(z.string().min(1))
@@ -251,7 +243,7 @@ function createAgentHarnessFileResources(config) {
     loaded ??= discover();
     return loaded;
   };
-  const readResource = defineRuntimeTool({
+  const readResource = defineRuntimeTool2({
     name: "read_resource",
     description: "Read one exact discovered harness skill or resource by canonical name.",
     identity: { serviceName: "harness", action: "read-resource", method: "POST" },
@@ -279,7 +271,7 @@ async function runControlledOperation(harness, request) {
       conversationId: request.conversationId,
       runId: request.runId
     });
-    return AgentControlResponseSchema.parse({
+    return AgentControlResponseSchema2.parse({
       schemaVersion: 1,
       requestId: request.requestId,
       outcome: "ok",
@@ -287,7 +279,7 @@ async function runControlledOperation(harness, request) {
     });
   }
   if (request.operation === "respond-approval") {
-    const ticket2 = await harness.respondToApproval({
+    const ticket = await harness.respondToApproval({
       conversationId: request.conversationId,
       approvalId: request.approvalId,
       approved: request.approved,
@@ -295,12 +287,12 @@ async function runControlledOperation(harness, request) {
       context: request.context,
       ...request.metadata !== undefined && { metadata: request.metadata }
     });
-    const admission2 = await ticket2.admission;
-    return AgentControlResponseSchema.parse({
+    const admission = await ticket.admission;
+    return AgentControlResponseSchema2.parse({
       schemaVersion: 1,
       requestId: request.requestId,
       outcome: "ok",
-      runId: admission2.runId,
+      runId: admission.runId,
       snapshot: await harness.snapshot(request.conversationId)
     });
   }
@@ -312,7 +304,7 @@ async function runControlledOperation(harness, request) {
     ...request.metadata !== undefined && { metadata: request.metadata }
   });
   const admission = await ticket.admission;
-  return AgentControlResponseSchema.parse({
+  return AgentControlResponseSchema2.parse({
     schemaVersion: 1,
     requestId: request.requestId,
     outcome: "ok",
@@ -358,7 +350,7 @@ function createAgentHarnessControlServer(harness, config = {}) {
         attached: new Map,
         pendingAttachments: new Set,
         overflowed: false,
-        sink: createAgentRuntimeEventSink({
+        sink: createAgentRuntimeEventSink2({
           write: (event) => deliver({ schemaVersion: 1, type: "event", event }),
           maxPending: config.maxPendingEvents ?? 128,
           onDrop: ({ event }) => {
@@ -378,8 +370,8 @@ function createAgentHarnessControlServer(harness, config = {}) {
       connections.set(id, state);
       return {
         async request(raw) {
-          const request = AgentControlRequestSchema.parse(raw);
-          const fail = (code, message) => AgentControlResponseSchema.parse({
+          const request = AgentControlRequestSchema2.parse(raw);
+          const fail = (code, message) => AgentControlResponseSchema2.parse({
             schemaVersion: 1,
             requestId: request.requestId,
             outcome: "error",
@@ -434,7 +426,7 @@ function createAgentHarnessControlServer(harness, config = {}) {
               if (request.access === "observe" && controllers.get(request.conversationId) === id) {
                 controllers.delete(request.conversationId);
               }
-              return AgentControlResponseSchema.parse({
+              return AgentControlResponseSchema2.parse({
                 schemaVersion: 1,
                 requestId: request.requestId,
                 outcome: "ok",
@@ -448,7 +440,7 @@ function createAgentHarnessControlServer(harness, config = {}) {
               if (controllers.get(request.conversationId) === id)
                 controllers.delete(request.conversationId);
               state.attached.delete(request.conversationId);
-              return AgentControlResponseSchema.parse({
+              return AgentControlResponseSchema2.parse({
                 schemaVersion: 1,
                 requestId: request.requestId,
                 outcome: "ok"
@@ -458,7 +450,7 @@ function createAgentHarnessControlServer(harness, config = {}) {
               return fail("NOT_ATTACHED", "Attach before requesting conversation state");
             if (request.operation === "snapshot") {
               const snapshot = await harness.snapshot(request.conversationId);
-              return AgentControlResponseSchema.parse({
+              return AgentControlResponseSchema2.parse({
                 schemaVersion: 1,
                 requestId: request.requestId,
                 outcome: "ok",
@@ -499,7 +491,7 @@ class AgentHarnessApprovalRejectedError extends Error {
   }
 }
 function activeRunId(snapshot) {
-  const active = snapshot.runs.filter((run2) => run2.state === "running" || run2.state === "interrupt_requested");
+  const active = snapshot.runs.filter((run) => run.state === "running" || run.state === "interrupt_requested");
   if (active.length !== 1) {
     throw new Error("Agent harness prompt requires exactly one active run");
   }
@@ -632,7 +624,7 @@ function createHeadlessAgentHarness(config) {
         pending.delete(event.runId);
     }
   };
-  const runtime = createAgentRuntime({
+  const runtime = createAgentRuntime2({
     ...runtimeConfig,
     models,
     publish,
@@ -651,7 +643,7 @@ function createHeadlessAgentHarness(config) {
       };
       pending.set(runId, entry);
       await emitProfile(runId);
-      const prompt = composeAgentPrompt([
+      const prompt = composeAgentPrompt2([
         {
           name: "harness-resources",
           stability: "dynamic",
@@ -691,11 +683,11 @@ function createHeadlessAgentHarness(config) {
     },
     pendingApprovals,
     async respondToApproval(input) {
-      const pending2 = (await pendingApprovals(input.conversationId)).filter((approval) => approval.approvalId === input.approvalId);
-      if (pending2.length !== 1) {
+      const pending = (await pendingApprovals(input.conversationId)).filter((approval) => approval.approvalId === input.approvalId);
+      if (pending.length !== 1) {
         throw new Error("Approval request is missing, stale or already answered");
       }
-      const request = pending2[0];
+      const request = pending[0];
       if (!request) {
         throw new Error("Approval request is missing, stale or already answered");
       }
@@ -727,15 +719,15 @@ function createHeadlessAgentHarness(config) {
   };
 }
 export {
-  createHeadlessAgentHarness,
-  createAgentHarnessFileResources,
-  createAgentHarnessControlServer,
-  AgentHarnessResourceSchema,
-  AgentHarnessResourceKindSchema,
-  AgentHarnessResourceDiagnosticSchema,
-  AgentHarnessProfileEventSchema,
-  AgentHarnessLimitsSchema,
-  AgentHarnessFileRootSchema,
+  AgentHarnessApprovalRejectedError,
   AgentHarnessFileLimitsSchema,
-  AgentHarnessApprovalRejectedError
+  AgentHarnessFileRootSchema,
+  AgentHarnessLimitsSchema,
+  AgentHarnessProfileEventSchema,
+  AgentHarnessResourceDiagnosticSchema,
+  AgentHarnessResourceKindSchema,
+  AgentHarnessResourceSchema,
+  createAgentHarnessControlServer,
+  createAgentHarnessFileResources,
+  createHeadlessAgentHarness
 };

package/dist/entrypoints/agent-runtime/openrouter.js

@@ -1,9 +1,9 @@
 import {
-  AgentModelCatalogSchema
-} from "../../index-mqv3b5rh.js";
+  AgentModelCatalogSchema2
+} from "../../index-nx6eazt0.js";
 import {
   isRecord
-} from "../../index-hffjpmq9.js";
+} from "../../index-9jfdm5tg.js";
 
 // src/agent-runtime/openrouter.ts
 import {
@@ -166,7 +166,7 @@ function openRouterModelCatalog(options) {
       } else
         diagnostics.push("Design Arena benchmark data is unavailable");
       const seen = new Set;
-      return AgentModelCatalogSchema.parse({
+      return AgentModelCatalogSchema2.parse({
         schemaVersion: 1,
         source: "openrouter",
         observedAt,
@@ -264,7 +264,7 @@ function normalizeOpenRouterUsage(usage, providerMetadata) {
   };
 }
 export {
-  openRouterProvider,
+  normalizeOpenRouterUsage,
   openRouterModelCatalog,
-  normalizeOpenRouterUsage
+  openRouterProvider
 };