stitchkit 0.103.11 → 0.103.13

package/CHANGELOG.md

@@ -15,6 +15,42 @@ additive**; the first breaking change landed in 0.10.0. Grep the file for
 
 ## [Unreleased]
 
+## [0.103.13] - 2026-10-04
+
+### Fixed
+
+- Darwin native process and contained-file backends retain a static addon dependency through
+  Node-compatible package builds, minified Bun/Node bundles and Bun standalone executables.
+  Bundlers emit native assets automatically; Bun compile embeds the target architecture addon.
+  Backend load failures keep their original internal cause and serialize safe stage/code
+  diagnostics instead of an empty object. Installed Darwin proofs exercise relocated artifacts,
+  exact process ownership, lock recovery, contained-file races and missing/corrupt backends.
+
+- `stitchkit/cli`: repeated non-array options are refused before scalar coercion, including
+  mixed boolean presence, separate values, inline values, negation and short aliases. The same
+  rule covers framework and application globals. For example, `--check=false --check` is an
+  argument error instead of silently selecting `false`. Single options, array repetition,
+  untyped passthrough lists and command help retain their grammar.
+
+## [0.103.12] - 2026-10-03
+
+### Fixed
+
+- `stitchkit/primitives`: bounded canonical JSON serializes one admitted snapshot, preserving
+  historical key order and undefined handling while refusing unstable Proxy reads and oversized
+  escaped UTF-8 output before unbounded encoding. Durable JSON predicates avoid copying or encoding.
+- `stitchkit/process`: post-spawn launch failures retain cleanup ownership; process-group cleanup
+  uses proven ownership and monotonic deadlines. Exclusive-lock stale guards have bounded depth.
+- Direct sandbox launchers retain process-group cleanup through leader settlement.
+- Release tooling requires every selected evidence job and remote exact-SHA push CI before tags;
+  CI covers the complete affected tree independently of which packages are published, preserving
+  package paths across renames and Unicode or control characters in filenames.
+- Gate reuse includes tracked inputs matched by ignore rules, fingerprints only selected external
+  inputs, rechecks them after execution and serializes memo mutations. Memory admission reads exact
+  v1/v2 controller paths, including colons and trailing spaces; registry polling
+  bounds requests, bodies and waits with one elapsed deadline.
+
+
 ## [0.103.11] - 2026-10-02
 
 ### Added

package/darwin-native.cjs

@@ -0,0 +1,12 @@
+/** A lazy, statically discoverable addon edge shared by Node and Bun consumers. */
+module.exports = function loadDarwinAddon() {
+  // The catch also keeps non-Darwin builds independent of unavailable slices.
+  // Bun compile selects its target architecture and embeds that literal addon.
+  try {
+    if (process.arch === 'arm64') return require('./native/darwin-arm64.node');
+    if (process.arch === 'x64') return require('./native/darwin-x64.node');
+    throw new Error('Unsupported Darwin addon architecture');
+  } catch (cause) {
+    throw new Error('Darwin addon loading failed', { cause });
+  }
+};

package/darwin-native.d.cts

@@ -0,0 +1,2 @@
+declare function loadDarwinAddon(): unknown;
+export = loadDarwinAddon;

package/dist/agent-runtime/coding-shell-process.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coding-shell-process.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-shell-process.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,qBAAqB,EAAqB,MAAM,wBAAwB,CAAC;AAEvF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAuCrD,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAC1C,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAC/C,aAAa,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,KAAK,CAAC,EAAE,MAAM,UAAU,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;CACrE;;;;;;;;;;;;;;;GAkKA"}
+{"version":3,"file":"coding-shell-process.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-shell-process.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,qBAAqB,EAAqB,MAAM,wBAAwB,CAAC;AAEvF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAuCrD,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAC1C,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAC/C,aAAa,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,KAAK,CAAC,EAAE,MAAM,UAAU,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;CACrE;;;;;;;;;;;;;;;GAkKA"}

package/dist/agent-runtime/sandbox-process-owner.d.ts

@@ -1,4 +1,4 @@
-import { type ChildProcessWithoutNullStreams } from 'node:child_process';
+import type { ChildProcessWithoutNullStreams } from 'node:child_process';
 import type { AgentProcessSandbox } from './sandbox.js';
 /** All entry paths share one command admission limit and one shutdown barrier. */
 export declare function sandboxProcessOwner(assertActive: () => void, maximum: number): {

package/dist/agent-runtime/sandbox-process-owner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-process-owner.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/sandbox-process-owner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,8BAA8B,EAAS,MAAM,oBAAoB,CAAC;AAIhF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAGrD,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM;;mBAOrD,8BAA8B;;iBA6BrC,UAAU,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;;EAkC7D"}
+{"version":3,"file":"sandbox-process-owner.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/sandbox-process-owner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAKzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAGrD,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM;;mBAiBrD,8BAA8B;;iBAmCrC,UAAU,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;;EAmB7D"}

package/dist/agent-runtime/store-conformance-support.d.ts

@@ -8,6 +8,11 @@ export declare function userMessage(conversationId: string, id: string): {
     parts: ({
         type: "text";
         text: string;
+    } | {
+        type: "file";
+        mediaType: string;
+        reference: string;
+        filename?: string | undefined;
     } | {
         type: "reasoning";
         text: string;
@@ -16,11 +21,6 @@ export declare function userMessage(conversationId: string, id: string): {
             provider: string;
             data: Record<string, import("zod").JSONType>;
         } | undefined;
-    } | {
-        type: "file";
-        mediaType: string;
-        reference: string;
-        filename?: string | undefined;
     } | {
         type: "source";
         sourceId: string;

package/dist/durability/json.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"json.d.ts","sourceRoot":"","sources":["../../src/durability/json.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,iBAAiB,qCAS7B,CAAC"}
+{"version":3,"file":"json.d.ts","sourceRoot":"","sources":["../../src/durability/json.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,iBAAiB,qCAQ7B,CAAC"}

package/dist/entrypoints/agent-runtime/coding-tools.js

@@ -7,9 +7,11 @@ import {
   AgentCodingToolAuthorizationSchema2,
   AgentCodingToolPathAuthorizationSchema2,
   createAgentCodingTools2
-} from "../../index-g4jxe7ve.js";
-import"../../index-32jkwkdm.js";
+} from "../../index-db2spkv1.js";
+import"../../index-v5ee8ath.js";
+import"../../index-f330qqyg.js";
 import"../../index-ahvsksw5.js";
+import"../../index-gxm9rc97.js";
 import"../../index-tgzhq07n.js";
 export {
   AgentCodingToolAuthorizationSchema2 as AgentCodingToolAuthorizationSchema,

package/dist/entrypoints/agent-runtime/harness.js

@@ -5,7 +5,7 @@ import"../../index-8kzct1d6.js";
 import {
   composeAgentPrompt2,
   createAgentRuntime2
-} from "../../index-9jb61j5a.js";
+} from "../../index-zp4jpkp0.js";
 import"../../index-h97tqqp1.js";
 import"../../index-mnkk1ffz.js";
 import"../../index-n53mswt3.js";
@@ -15,9 +15,10 @@ import"../../index-9pw0a51a.js";
 import"../../index-ct75c3at.js";
 import"../../index-x87j7csh.js";
 import"../../index-m2xqkv55.js";
-import"../../index-ary5s7k0.js";
+import"../../index-69nvze1q.js";
 import"../../index-nggfa2yn.js";
 import"../../index-r5hsgkz5.js";
+import"../../index-v5ee8ath.js";
 import"../../index-n5yqxd3d.js";
 import {
   createAgentHarnessControlServer2
@@ -25,7 +26,7 @@ import {
 import"../../index-vgkbcnkc.js";
 import {
   walkContainedFiles
-} from "../../index-ej331hah.js";
+} from "../../index-gxm9rc97.js";
 import"../../index-7n68nmc6.js";
 import {
   defineRuntimeTool2

package/dist/entrypoints/agent-runtime/sandbox.js

@@ -9,12 +9,15 @@ import"../../index-x87j7csh.js";
 import"../../index-b2bz0kdm.js";
 import {
   createAgentCodingTools2
-} from "../../index-g4jxe7ve.js";
+} from "../../index-db2spkv1.js";
+import"../../index-v5ee8ath.js";
 import {
   NativeCommandError2,
+  spawnOwnedCommand,
   nativeCommandOwner,
   startNativeCommand
-} from "../../index-32jkwkdm.js";
+} from "../../index-f330qqyg.js";
+import"../../index-gxm9rc97.js";
 import"../../index-tgzhq07n.js";
 
 // src/agent-runtime/sandbox-bubblewrap.ts
@@ -540,7 +543,6 @@ function spawnSandboxProcess(executable, args, limits, options = {}, onSpawn) {
 }
 
 // src/agent-runtime/sandbox-process-owner.ts
-import { spawn } from "node:child_process";
 function sandboxProcessOwner(assertActive, maximum) {
   const children = new Map;
   const admit = () => {
@@ -548,7 +550,19 @@ function sandboxProcessOwner(assertActive, maximum) {
     if (children.size >= maximum)
       throw new SandboxError("SANDBOX_BUSY", "Sandbox command concurrency limit reached");
   };
+  const terminate = (child) => {
+    const owner = nativeCommandOwner(child) ?? startNativeCommand({ executable: "host-owned-command", signal: new AbortController().signal }, undefined, { launch: () => child, group: process.platform !== "win32", force: true });
+    return owner.terminate();
+  };
   const track = (child) => {
+    const settleDirect = () => {
+      if (!nativeCommandOwner(child))
+        terminate(child).catch(() => {
+          return;
+        });
+    };
+    child.once("exit", settleDirect);
+    child.once("error", settleDirect);
     const closed = new Promise((resolve, reject) => {
       child.once("close", () => {
         const settled = nativeCommandOwner(child)?.result ?? Promise.resolve();
@@ -578,11 +592,12 @@ function sandboxProcessOwner(assertActive, maximum) {
     },
     spawn(input) {
       admit();
-      const child = spawn(input.executable, [...input.args], {
+      const child = spawnOwnedCommand({
+        executable: input.executable,
+        args: input.args,
         cwd: input.cwd,
         env: input.environment,
-        detached: true,
-        stdio: ["pipe", "pipe", "pipe"]
+        group: process.platform !== "win32"
       });
       child.stdin.end();
       track(child);
@@ -590,16 +605,7 @@ function sandboxProcessOwner(assertActive, maximum) {
     },
     async stop() {
       const pending = [...children];
-      await Promise.all(pending.map(([child]) => {
-        let owner = nativeCommandOwner(child);
-        if (!owner) {
-          const adopted = startNativeCommand({ executable: "host-owned-command", signal: new AbortController().signal }, undefined, { launch: () => child, group: process.platform !== "win32", force: true });
-          owner = nativeCommandOwner(child);
-          if (!owner)
-            return adopted.stop();
-        }
-        return owner.terminate();
-      }));
+      await Promise.all(pending.map(([child]) => terminate(child)));
       await Promise.all(pending.map(([, closed]) => closed));
     }
   };

package/dist/entrypoints/agent-runtime.js

@@ -110,7 +110,7 @@ import {
   agentGoalStateSlot2,
   agentTodoStateSlot2,
   createAgentRuntime2
-} from "../index-9jb61j5a.js";
+} from "../index-zp4jpkp0.js";
 import {
   AgentConversationSummarySchema2,
   AgentConversationPageSchema2,
@@ -175,7 +175,7 @@ import {
   StepAbortedError2,
   ParkRecordDecodeError2,
   ParkAbortedError2
-} from "../index-ary5s7k0.js";
+} from "../index-69nvze1q.js";
 import {
   AgentSandboxRestrictionSchema2,
   AgentSandboxGradeSchema2,

package/dist/entrypoints/application/diagnostic-journal.js

@@ -16,8 +16,9 @@ import {
 } from "../../index-w0eqdhyd.js";
 import {
   attemptExclusiveLock
-} from "../../index-ttf0y7b8.js";
-import"../../index-nybn2err.js";
+} from "../../index-9853ymwb.js";
+import"../../index-5csmzesf.js";
+import"../../index-v5ee8ath.js";
 import {
   isRecord
 } from "../../index-9jfdm5tg.js";

package/dist/entrypoints/cli.js

@@ -18,7 +18,7 @@ import {
   renderCliView2,
   pollUntilDone2,
   createCli2
-} from "../index-ahtnte39.js";
+} from "../index-8zfsgar0.js";
 import {
   AppError2
 } from "../index-n53mswt3.js";

package/dist/entrypoints/files.js

@@ -11,8 +11,9 @@ import {
 } from "../index-n53mswt3.js";
 import {
   attemptExclusiveLock
-} from "../index-ttf0y7b8.js";
-import"../index-nybn2err.js";
+} from "../index-9853ymwb.js";
+import"../index-5csmzesf.js";
+import"../index-v5ee8ath.js";
 import {
   writeFileAtomic2,
   writeFileAtomicSync2

package/dist/entrypoints/primitives.js

@@ -3,7 +3,7 @@ import {
 } from "../index-xqhede6x.js";
 import {
   isJsonData
-} from "../index-c1jmtxa0.js";
+} from "../index-fm1c1a08.js";
 import {
   serializeCanonicalJson
 } from "../index-zsvzhjtk.js";
@@ -91,9 +91,10 @@ var CanonicalJsonOptionsSchema = z3.strictObject({
 });
 function canonicalJson(value, options = {}) {
   const limits = CanonicalJsonOptionsSchema.parse(options);
-  if (!isJsonData(value, { ...limits, omitObjectUndefined: true }))
+  const snapshot = {};
+  if (!isJsonData(value, { ...limits, omitObjectUndefined: true }, snapshot))
     throw new TypeError("Expected bounded plain JSON: dense arrays, finite numbers, no -0, cycles or accessors");
-  return serializeCanonicalJson(value);
+  return serializeCanonicalJson(snapshot.value);
 }
 // src/primitives/deadline.ts
 import { z as z4 } from "zod";

package/dist/entrypoints/process.js

@@ -1,12 +1,13 @@
+import"../index-v5ee8ath.js";
 import {
   ProcessInstanceSchema2,
   observeProcessInstance2,
   probeProcessOwner2
-} from "../index-nybn2err.js";
+} from "../index-5csmzesf.js";
 import {
   NativeCommandError2,
   startNativeCommand
-} from "../index-32jkwkdm.js";
+} from "../index-f330qqyg.js";
 // src/process/command.ts
 function runNativeCommand(input) {
   return startNativeCommand(input).result;

package/dist/entrypoints/tools.js

@@ -1,7 +1,7 @@
 import {
   EffectUnresolvedError2,
   createLocalStepDurability2
-} from "../index-ary5s7k0.js";
+} from "../index-69nvze1q.js";
 import {
   AppError2,
   STITCH_ERROR_STATUS2
@@ -77,7 +77,7 @@ import {
   WaitTimeoutError,
   runWaitOperation,
   createCli2
-} from "../index-ahtnte39.js";
+} from "../index-8zfsgar0.js";
 import {
   ManagedFilePathSchema2,
   ManagedFileRefSchema2

package/dist/{index-nybn2err.js → index-5csmzesf.js}

@@ -1,6 +1,6 @@
 import {
   loadDarwinBinding
-} from "./index-d4pa2bgs.js";
+} from "./index-v5ee8ath.js";
 import {
   isRecord
 } from "./index-9jfdm5tg.js";

package/dist/{index-ary5s7k0.js → index-69nvze1q.js}

@@ -1,6 +1,6 @@
 import {
   isJsonData
-} from "./index-c1jmtxa0.js";
+} from "./index-fm1c1a08.js";
 import {
   raceAbort
 } from "./index-mbnnw3f2.js";
@@ -103,7 +103,6 @@ import { z as z2 } from "zod";
 var DurableJsonSchema = z2.custom((value) => isJsonData(value, {
   maxDepth: 100,
   maxNodes: Number.MAX_SAFE_INTEGER,
-  maxBytes: Number.MAX_SAFE_INTEGER,
   omitObjectUndefined: false
 }), "Expected lossless JSON data (finite numbers, plain objects and dense arrays; no accessors)");
 

package/dist/{index-ahtnte39.js → index-8zfsgar0.js}

@@ -152,6 +152,18 @@ class CliArgumentError2 extends Error {
 
 // src/tools/cli/args-fields.ts
 import { z } from "zod";
+function appendCliOptionValue(raw, name, value, info) {
+  const existing = raw.get(name);
+  const repeatable = !name.includes(".") && (info === undefined || info.kind === "array");
+  if (existing !== undefined) {
+    if (!repeatable) {
+      throw new CliArgumentError2(`--${name} was passed ${existing.length + 1} times`);
+    }
+    existing.push(value);
+  } else {
+    raw.set(name, [value]);
+  }
+}
 function unwrap(field) {
   if (field instanceof z.ZodOptional || field instanceof z.ZodNullable || field instanceof z.ZodDefault) {
     return unwrap(field.unwrap());
@@ -799,16 +811,13 @@ function readCliTokens(argv, fields, config) {
     help: false
   };
   const flags = new Map;
-  const boolFlags = new Map;
+  const literalBooleanFlags = new Set;
+  const frameworkFlags = new Map;
   const viewFlags = new Map;
   let ascending = false;
   const positionals = [];
   const pushFlag = (name, value) => {
-    const existing = flags.get(name);
-    if (existing)
-      existing.push(value);
-    else
-      flags.set(name, [value]);
+    appendCliOptionValue(flags, name, value, fields.get(name));
   };
   let optionsEnded = false;
   for (let i = 0;i < argv.length; i++) {
@@ -824,6 +833,7 @@ function readCliTokens(argv, fields, config) {
       continue;
     }
     if (tok === "-h") {
+      appendCliOptionValue(frameworkFlags, "help", "true", { kind: "boolean" });
       options.help = true;
       continue;
     }
@@ -839,7 +849,10 @@ function readCliTokens(argv, fields, config) {
         const separate = inline === undefined ? separateBoolValue(argv[i + 1]) : undefined;
         if (separate !== undefined)
           i++;
-        boolFlags.set(field, inline === undefined ? separate ?? true : parseReservedBool(field, inline));
+        pushFlag(field, inline ?? String(separate ?? true));
+        if (inline !== undefined)
+          parseReservedBool(field, inline);
+        literalBooleanFlags.add(field);
         continue;
       }
       let value = inline;
@@ -866,6 +879,9 @@ function readCliTokens(argv, fields, config) {
       const separate = value === undefined ? separateBoolValue(argv[i + 1]) : undefined;
       if (separate !== undefined)
         i++;
+      appendCliOptionValue(frameworkFlags, name, value ?? String(separate ?? true), {
+        kind: "boolean"
+      });
       const enabled = value === undefined ? separate ?? true : parseReservedBool(name, value);
       if (name === "dry-run")
         options.dryRun = enabled;
@@ -889,6 +905,7 @@ function readCliTokens(argv, fields, config) {
       }
       if (!option.inline)
         i++;
+      appendCliOptionValue(frameworkFlags, name, value, { kind: "string" });
       if (name === "wait-timeout") {
         const timeout = Number(value);
         if (!Number.isFinite(timeout) || timeout <= 0) {
@@ -896,8 +913,6 @@ function readCliTokens(argv, fields, config) {
         }
         options.waitTimeout = timeout;
       } else if (VIEW_OPTIONS.has(name)) {
-        if (viewFlags.has(name))
-          throw new CliArgumentError2(`--${name} was given twice`);
         viewFlags.set(name, value);
       } else {
         options.outputDir = value;
@@ -905,7 +920,8 @@ function readCliTokens(argv, fields, config) {
       continue;
     }
     if (value === undefined && name.startsWith("no-") && fields.get(name.slice(3))?.kind === "boolean") {
-      boolFlags.set(name.slice(3), false);
+      pushFlag(name.slice(3), "false");
+      literalBooleanFlags.add(name.slice(3));
       continue;
     }
     const unsafeSegment = name.split(".").find(isUnsafeKey);
@@ -922,7 +938,8 @@ function readCliTokens(argv, fields, config) {
         const separate = separateBoolValue(argv[i + 1]);
         if (separate !== undefined)
           i++;
-        boolFlags.set(name, separate ?? true);
+        pushFlag(name, String(separate ?? true));
+        literalBooleanFlags.add(name);
         continue;
       }
       const next = argv[i + 1];
@@ -935,10 +952,10 @@ function readCliTokens(argv, fields, config) {
     }
     pushFlag(name, value);
   }
-  return { options, flags, boolFlags, viewFlags, ascending, positionals };
+  return { options, flags, literalBooleanFlags, viewFlags, ascending, positionals };
 }
 function buildToolArgs(tokens, fields, declaredPositionals) {
-  const { flags, boolFlags, positionals } = tokens;
+  const { flags, literalBooleanFlags, positionals } = tokens;
   const toolArgs = {};
   const fillable = declaredPositionals === undefined ? [...fields.entries()].filter(([, info]) => info.kind !== "boolean").map(([name]) => name) : [...declaredPositionals];
   const variadicTail = declaredPositionals !== undefined && fields.get(fillable[fillable.length - 1] ?? "")?.kind === "array" ? fillable[fillable.length - 1] : undefined;
@@ -964,14 +981,12 @@ function buildToolArgs(tokens, fields, declaredPositionals) {
   if (pi < positionals.length) {
     throw new CliArgumentError2(`Unexpected positional argument "${positionals[pi]}"`);
   }
-  for (const [key, value] of boolFlags) {
-    toolArgs[key] = value;
-  }
   const dottedRoots = new Map;
   for (const key of flags.keys()) {
     const dot = key.indexOf(".");
-    if (dot > 0)
+    if (dot > 0 && !literalBooleanFlags.has(key)) {
       dottedRoots.set(key.slice(0, dot), key);
+    }
   }
   for (const [root, dotted] of dottedRoots) {
     if (flags.has(root)) {
@@ -979,17 +994,11 @@ function buildToolArgs(tokens, fields, declaredPositionals) {
     }
   }
   for (const [key, values] of flags) {
-    if (key.includes(".")) {
-      if (values.length > 1) {
-        throw new CliArgumentError2(`--${key} was passed ${values.length} times`);
-      }
+    const info = fields.get(key);
+    if (key.includes(".") && !literalBooleanFlags.has(key)) {
       setNested(toolArgs, key.split("."), looseCoerce(values[0] ?? ""));
       continue;
     }
-    const info = fields.get(key);
-    if (values.length > 1 && info !== undefined && info.kind !== "array" && info.kind !== "other") {
-      throw new CliArgumentError2(`--${key} was passed ${values.length} times`);
-    }
     toolArgs[key] = coerceField(info, values, `--${key}`);
   }
   return toolArgs;
@@ -1041,11 +1050,7 @@ function extractCliGlobalOptions2(argv, schema) {
         throw new CliArgumentError2(`--${option.name} requires a value`);
       }
     }
-    const existing = raw.get(option.name);
-    if (existing)
-      existing.push(value);
-    else
-      raw.set(option.name, [value]);
+    appendCliOptionValue(raw, option.name, value, info);
   }
   const args = {};
   for (const [name, values] of raw) {

package/dist/{index-ttf0y7b8.js → index-9853ymwb.js}

@@ -3,7 +3,7 @@ import {
   ProcessInstanceSchema2,
   readProcessInstance,
   probeProcessOwner2
-} from "./index-nybn2err.js";
+} from "./index-5csmzesf.js";
 import {
   isRecord
 } from "./index-9jfdm5tg.js";
@@ -100,6 +100,7 @@ async function diagnose(owner, declaredIdentity) {
     return { attribution, liveness: "not-probed", owner };
   return { attribution, ...await probeProcessOwner2(owner.pid, owner.process), owner };
 }
+var MAX_RECLAIM_DEPTH = 16;
 async function readLockFile(path, onFailure, signal) {
   try {
     const record = await readLockRecord(path, undefined, signal);
@@ -180,33 +181,45 @@ function reclaimable(state, diagnosis, graceMs) {
     return diagnosis.liveness === "gone";
   return typeof graceMs === "number" && Date.now() - state.mtimeMs >= graceMs;
 }
-async function reclaimUnderGuard(path, options) {
+async function reclaimUnderGuard(path, options, depth) {
   const guardPath = `${path}.reclaim`;
-  const acquired = await attemptExclusiveLock(guardPath, {
-    ...options,
-    ownerlessGraceMs: options.ownerlessGraceMs === undefined ? 5000 : options.ownerlessGraceMs
-  });
+  if (depth >= MAX_RECLAIM_DEPTH)
+    return {
+      refused: true,
+      cause: new Error(`Exclusive lock reclaim guard recovery depth exceeds ${MAX_RECLAIM_DEPTH}`)
+    };
+  let acquired;
+  try {
+    acquired = await attemptExclusiveLock(guardPath, {
+      ...options,
+      ownerlessGraceMs: options.ownerlessGraceMs === undefined ? 5000 : options.ownerlessGraceMs
+    }, depth + 1);
+  } catch (cause) {
+    if (!isCode(cause, "ENAMETOOLONG"))
+      throw cause;
+    return { refused: true, cause };
+  }
   if (!("held" in acquired))
-    return;
+    return { refused: true, cause: acquired.diagnosis?.cause ?? acquired.error };
   const guard = acquired.held;
   try {
-    let unsafe = false;
-    const state = await readLockFile(path, () => {
-      unsafe = true;
+    let readFailure;
+    const state = await readLockFile(path, (cause) => {
+      readFailure = cause;
     }, options.signal);
-    if (unsafe)
-      return "refused";
+    if (readFailure !== undefined)
+      return { refused: true, cause: readFailure };
     if (state) {
       const diagnosis = await diagnose(state.owner, options.machineIdentity);
       if (options.signal?.aborted)
-        return "refused";
+        return { refused: true };
       if (!reclaimable(state, diagnosis, options.ownerlessGraceMs))
-        return "refused";
+        return { refused: true, cause: diagnosis.cause };
       await unlinkIfSame(path, state.ino, state.dev);
     }
     return await createOwned(path, options, state !== undefined).catch((error) => {
       if (isCode(error, "EEXIST"))
-        return "refused";
+        return { refused: true, cause: error };
       throw error;
     });
   } finally {
@@ -215,7 +228,7 @@ async function reclaimUnderGuard(path, options) {
     });
   }
 }
-async function attemptExclusiveLock(path, options) {
+async function attemptExclusiveLock(path, options, depth = 0) {
   try {
     return { held: await createOwned(path, options, false) };
   } catch (error) {
@@ -236,10 +249,16 @@ async function attemptExclusiveLock(path, options) {
     if (!state || !reclaimable(state, diagnosis, options.ownerlessGraceMs)) {
       return { error, diagnosis };
     }
-    const reclaimed = await reclaimUnderGuard(path, options);
-    if (reclaimed !== undefined && reclaimed !== "refused")
+    const reclaimed = await reclaimUnderGuard(path, options, depth);
+    if (!("refused" in reclaimed))
       return { held: reclaimed };
-    return { error, diagnosis };
+    return {
+      error,
+      diagnosis: {
+        ...diagnosis,
+        ...reclaimed.cause !== undefined && { cause: reclaimed.cause }
+      }
+    };
   }
 }