stitchkit 0.103.10 → 0.103.11

package/CHANGELOG.md

@@ -15,6 +15,19 @@ additive**; the first breaking change landed in 0.10.0. Grep the file for
 
 ## [Unreleased]
 
+## [0.103.11] - 2026-10-02
+
+### Added
+
+- `stitchkit/process`: native command limit errors expose a typed `reason` (`deadline` or `output-budget`) independent of their message; existing codes, causes, cancellation and cleanup guarantees are preserved.
+
+### Fixed
+
+- `stitchkit/files`: cancellation after acquiring an exclusive lock refuses the callback and releases ownership. Lock and reclaim-guard records use bounded descriptor reads and refuse FIFO, nonregular, linked, oversized or changing records.
+- `stitchkit/process`: synchronous native launch failures settle external resources once before rejecting, with bounded cleanup and the original syscall cause.
+- `stitchkit/agent-runtime`: coding commands share the native execution owner while retaining forced descendant cleanup, structural sandbox launchers, bounded artifacts and UTF-8 previews.
+- Local gate evidence is saved only for stable inputs, including content changed and restored during a run. PostgreSQL fingerprint probes have finite budgets and distinguish URI connection overrides; unknown external inputs cannot authorize heavy memo reuse. Heavy concurrency accounts for visible cgroup memory limits.
+
 ## [0.103.10] - 2026-10-01
 
 ### Added

package/dist/agent-runtime/coding-shell-process.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coding-shell-process.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-shell-process.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,qBAAqB,EAAqB,MAAM,wBAAwB,CAAC;AAEvF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAuCrD,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAC1C,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAC/C,aAAa,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,KAAK,CAAC,EAAE,MAAM,UAAU,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;CACrE;;;;;;;;;;;;;;;GAsKA"}
+{"version":3,"file":"coding-shell-process.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-shell-process.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,qBAAqB,EAAqB,MAAM,wBAAwB,CAAC;AAEvF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAuCrD,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAC1C,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAC/C,aAAa,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,KAAK,CAAC,EAAE,MAAM,UAAU,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;CACrE;;;;;;;;;;;;;;;GAkKA"}

package/dist/agent-runtime/sandbox-process-owner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-process-owner.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/sandbox-process-owner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,8BAA8B,EAAS,MAAM,oBAAoB,CAAC;AAChF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAGrD,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM;;mBAOrD,8BAA8B;;iBAerC,UAAU,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;;EA0B7D"}
+{"version":3,"file":"sandbox-process-owner.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/sandbox-process-owner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,8BAA8B,EAAS,MAAM,oBAAoB,CAAC;AAIhF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAGrD,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM;;mBAOrD,8BAA8B;;iBA6BrC,UAAU,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;;EAkC7D"}

package/dist/agent-runtime/store-conformance-lifecycle.d.ts

@@ -133,11 +133,6 @@ export declare function fencingPhase(store: AgentRuntimeStore, conversationId: s
                 parts: ({
                     type: "text";
                     text: string;
-                } | {
-                    type: "file";
-                    mediaType: string;
-                    reference: string;
-                    filename?: string | undefined;
                 } | {
                     type: "reasoning";
                     text: string;
@@ -146,6 +141,11 @@ export declare function fencingPhase(store: AgentRuntimeStore, conversationId: s
                         provider: string;
                         data: Record<string, import("zod").JSONType>;
                     } | undefined;
+                } | {
+                    type: "file";
+                    mediaType: string;
+                    reference: string;
+                    filename?: string | undefined;
                 } | {
                     type: "source";
                     sourceId: string;
@@ -313,11 +313,6 @@ export declare function fencingPhase(store: AgentRuntimeStore, conversationId: s
         parts: ({
             type: "text";
             text: string;
-        } | {
-            type: "file";
-            mediaType: string;
-            reference: string;
-            filename?: string | undefined;
         } | {
             type: "reasoning";
             text: string;
@@ -326,6 +321,11 @@ export declare function fencingPhase(store: AgentRuntimeStore, conversationId: s
                 provider: string;
                 data: Record<string, import("zod").JSONType>;
             } | undefined;
+        } | {
+            type: "file";
+            mediaType: string;
+            reference: string;
+            filename?: string | undefined;
         } | {
             type: "source";
             sourceId: string;

package/dist/entrypoints/agent-runtime/coding-tools.js

@@ -7,7 +7,8 @@ import {
   AgentCodingToolAuthorizationSchema2,
   AgentCodingToolPathAuthorizationSchema2,
   createAgentCodingTools2
-} from "../../index-a4ajxwmb.js";
+} from "../../index-g4jxe7ve.js";
+import"../../index-32jkwkdm.js";
 import"../../index-ahvsksw5.js";
 import"../../index-tgzhq07n.js";
 export {

package/dist/entrypoints/agent-runtime/sandbox.js

@@ -9,11 +9,12 @@ import"../../index-x87j7csh.js";
 import"../../index-b2bz0kdm.js";
 import {
   createAgentCodingTools2
-} from "../../index-a4ajxwmb.js";
+} from "../../index-g4jxe7ve.js";
 import {
   NativeCommandError2,
+  nativeCommandOwner,
   startNativeCommand
-} from "../../index-6m6a9ty4.js";
+} from "../../index-32jkwkdm.js";
 import"../../index-tgzhq07n.js";
 
 // src/agent-runtime/sandbox-bubblewrap.ts
@@ -548,12 +549,25 @@ function sandboxProcessOwner(assertActive, maximum) {
       throw new SandboxError("SANDBOX_BUSY", "Sandbox command concurrency limit reached");
   };
   const track = (child) => {
-    const closed = new Promise((resolve) => {
+    const closed = new Promise((resolve, reject) => {
       child.once("close", () => {
-        children.delete(child);
-        resolve();
+        const settled = nativeCommandOwner(child)?.result ?? Promise.resolve();
+        settled.then(() => {
+          children.delete(child);
+          resolve();
+        }, (error) => {
+          if (error instanceof NativeCommandError2 && error.code === "COMMAND_CLEANUP")
+            reject(error);
+          else {
+            children.delete(child);
+            resolve();
+          }
+        });
       });
     });
+    closed.catch(() => {
+      return;
+    });
     children.set(child, closed);
   };
   return {
@@ -576,16 +590,16 @@ function sandboxProcessOwner(assertActive, maximum) {
     },
     async stop() {
       const pending = [...children];
-      for (const [child] of pending) {
-        if (child.pid === undefined)
-          continue;
-        try {
-          process.kill(-child.pid, "SIGKILL");
-        } catch (error) {
-          if (!(error instanceof Error && ("code" in error) && error.code === "ESRCH"))
-            throw error;
+      await Promise.all(pending.map(([child]) => {
+        let owner = nativeCommandOwner(child);
+        if (!owner) {
+          const adopted = startNativeCommand({ executable: "host-owned-command", signal: new AbortController().signal }, undefined, { launch: () => child, group: process.platform !== "win32", force: true });
+          owner = nativeCommandOwner(child);
+          if (!owner)
+            return adopted.stop();
         }
-      }
+        return owner.terminate();
+      }));
       await Promise.all(pending.map(([, closed]) => closed));
     }
   };

package/dist/entrypoints/application/diagnostic-journal.js

@@ -14,10 +14,10 @@ import {
 import {
   createBoundedChannel2
 } from "../../index-w0eqdhyd.js";
-import"../../index-nybn2err.js";
 import {
   attemptExclusiveLock
-} from "../../index-ga597cvy.js";
+} from "../../index-ttf0y7b8.js";
+import"../../index-nybn2err.js";
 import {
   isRecord
 } from "../../index-9jfdm5tg.js";

package/dist/entrypoints/files.js

@@ -9,10 +9,10 @@ import {
 import {
   AppError2
 } from "../index-n53mswt3.js";
-import"../index-nybn2err.js";
 import {
   attemptExclusiveLock
-} from "../index-ga597cvy.js";
+} from "../index-ttf0y7b8.js";
+import"../index-nybn2err.js";
 import {
   writeFileAtomic2,
   writeFileAtomicSync2
@@ -315,6 +315,7 @@ async function withExclusiveLock(path, run, options = {}) {
     const attempt = await attemptExclusiveLock(path, {
       mode,
       reclaim: true,
+      signal,
       ownerlessGraceMs,
       ...options.machineIdentity !== undefined && {
         machineIdentity: options.machineIdentity
@@ -324,6 +325,9 @@ async function withExclusiveLock(path, run, options = {}) {
       const { held } = attempt;
       let result;
       try {
+        if (signal?.aborted) {
+          throw new ExclusiveLockError("LOCK_ABORTED", label, null, `[stitchkit] waiting for the lock on "${label}" was cancelled`, { cause: signal.reason });
+        }
         result = await run({ path: held.path, owner: held.owner, reclaimed: held.reclaimed });
       } catch (error) {
         await held.release().catch(() => {
@@ -334,6 +338,8 @@ async function withExclusiveLock(path, run, options = {}) {
       await held.release();
       return result;
     }
+    if (signal?.aborted)
+      continue;
     const remaining = deadline - performance.now();
     if (remaining <= 0) {
       const holder = attempt.diagnosis?.owner ?? null;

package/dist/entrypoints/process.js

@@ -6,7 +6,7 @@ import {
 import {
   NativeCommandError2,
   startNativeCommand
-} from "../index-6m6a9ty4.js";
+} from "../index-32jkwkdm.js";
 // src/process/command.ts
 function runNativeCommand(input) {
   return startNativeCommand(input).result;