stitchkit 0.103.12 → 0.103.13

package/CHANGELOG.md

@@ -15,6 +15,23 @@ additive**; the first breaking change landed in 0.10.0. Grep the file for
 
 ## [Unreleased]
 
+## [0.103.13] - 2026-10-04
+
+### Fixed
+
+- Darwin native process and contained-file backends retain a static addon dependency through
+  Node-compatible package builds, minified Bun/Node bundles and Bun standalone executables.
+  Bundlers emit native assets automatically; Bun compile embeds the target architecture addon.
+  Backend load failures keep their original internal cause and serialize safe stage/code
+  diagnostics instead of an empty object. Installed Darwin proofs exercise relocated artifacts,
+  exact process ownership, lock recovery, contained-file races and missing/corrupt backends.
+
+- `stitchkit/cli`: repeated non-array options are refused before scalar coercion, including
+  mixed boolean presence, separate values, inline values, negation and short aliases. The same
+  rule covers framework and application globals. For example, `--check=false --check` is an
+  argument error instead of silently selecting `false`. Single options, array repetition,
+  untyped passthrough lists and command help retain their grammar.
+
 ## [0.103.12] - 2026-10-03
 
 ### Fixed

package/darwin-native.cjs

@@ -0,0 +1,12 @@
+/** A lazy, statically discoverable addon edge shared by Node and Bun consumers. */
+module.exports = function loadDarwinAddon() {
+  // The catch also keeps non-Darwin builds independent of unavailable slices.
+  // Bun compile selects its target architecture and embeds that literal addon.
+  try {
+    if (process.arch === 'arm64') return require('./native/darwin-arm64.node');
+    if (process.arch === 'x64') return require('./native/darwin-x64.node');
+    throw new Error('Unsupported Darwin addon architecture');
+  } catch (cause) {
+    throw new Error('Darwin addon loading failed', { cause });
+  }
+};

package/darwin-native.d.cts

@@ -0,0 +1,2 @@
+declare function loadDarwinAddon(): unknown;
+export = loadDarwinAddon;

package/dist/agent-runtime/store-conformance-support.d.ts

@@ -8,6 +8,11 @@ export declare function userMessage(conversationId: string, id: string): {
     parts: ({
         type: "text";
         text: string;
+    } | {
+        type: "file";
+        mediaType: string;
+        reference: string;
+        filename?: string | undefined;
     } | {
         type: "reasoning";
         text: string;
@@ -16,11 +21,6 @@ export declare function userMessage(conversationId: string, id: string): {
             provider: string;
             data: Record<string, import("zod").JSONType>;
         } | undefined;
-    } | {
-        type: "file";
-        mediaType: string;
-        reference: string;
-        filename?: string | undefined;
     } | {
         type: "source";
         sourceId: string;

package/dist/entrypoints/agent-runtime/coding-tools.js

@@ -7,9 +7,11 @@ import {
   AgentCodingToolAuthorizationSchema2,
   AgentCodingToolPathAuthorizationSchema2,
   createAgentCodingTools2
-} from "../../index-806d5phm.js";
+} from "../../index-db2spkv1.js";
+import"../../index-v5ee8ath.js";
 import"../../index-f330qqyg.js";
 import"../../index-ahvsksw5.js";
+import"../../index-gxm9rc97.js";
 import"../../index-tgzhq07n.js";
 export {
   AgentCodingToolAuthorizationSchema2 as AgentCodingToolAuthorizationSchema,

package/dist/entrypoints/agent-runtime/harness.js

@@ -18,6 +18,7 @@ import"../../index-m2xqkv55.js";
 import"../../index-69nvze1q.js";
 import"../../index-nggfa2yn.js";
 import"../../index-r5hsgkz5.js";
+import"../../index-v5ee8ath.js";
 import"../../index-n5yqxd3d.js";
 import {
   createAgentHarnessControlServer2
@@ -25,7 +26,7 @@ import {
 import"../../index-vgkbcnkc.js";
 import {
   walkContainedFiles
-} from "../../index-ej331hah.js";
+} from "../../index-gxm9rc97.js";
 import"../../index-7n68nmc6.js";
 import {
   defineRuntimeTool2

package/dist/entrypoints/agent-runtime/sandbox.js

@@ -9,13 +9,15 @@ import"../../index-x87j7csh.js";
 import"../../index-b2bz0kdm.js";
 import {
   createAgentCodingTools2
-} from "../../index-806d5phm.js";
+} from "../../index-db2spkv1.js";
+import"../../index-v5ee8ath.js";
 import {
   NativeCommandError2,
   spawnOwnedCommand,
   nativeCommandOwner,
   startNativeCommand
 } from "../../index-f330qqyg.js";
+import"../../index-gxm9rc97.js";
 import"../../index-tgzhq07n.js";
 
 // src/agent-runtime/sandbox-bubblewrap.ts

package/dist/entrypoints/application/diagnostic-journal.js

@@ -16,8 +16,9 @@ import {
 } from "../../index-w0eqdhyd.js";
 import {
   attemptExclusiveLock
-} from "../../index-xvdd2rbb.js";
-import"../../index-nybn2err.js";
+} from "../../index-9853ymwb.js";
+import"../../index-5csmzesf.js";
+import"../../index-v5ee8ath.js";
 import {
   isRecord
 } from "../../index-9jfdm5tg.js";

package/dist/entrypoints/cli.js

@@ -18,7 +18,7 @@ import {
   renderCliView2,
   pollUntilDone2,
   createCli2
-} from "../index-ahtnte39.js";
+} from "../index-8zfsgar0.js";
 import {
   AppError2
 } from "../index-n53mswt3.js";

package/dist/entrypoints/files.js

@@ -11,8 +11,9 @@ import {
 } from "../index-n53mswt3.js";
 import {
   attemptExclusiveLock
-} from "../index-xvdd2rbb.js";
-import"../index-nybn2err.js";
+} from "../index-9853ymwb.js";
+import"../index-5csmzesf.js";
+import"../index-v5ee8ath.js";
 import {
   writeFileAtomic2,
   writeFileAtomicSync2

package/dist/entrypoints/process.js

@@ -1,8 +1,9 @@
+import"../index-v5ee8ath.js";
 import {
   ProcessInstanceSchema2,
   observeProcessInstance2,
   probeProcessOwner2
-} from "../index-nybn2err.js";
+} from "../index-5csmzesf.js";
 import {
   NativeCommandError2,
   startNativeCommand

package/dist/entrypoints/tools.js

@@ -77,7 +77,7 @@ import {
   WaitTimeoutError,
   runWaitOperation,
   createCli2
-} from "../index-ahtnte39.js";
+} from "../index-8zfsgar0.js";
 import {
   ManagedFilePathSchema2,
   ManagedFileRefSchema2

package/dist/{index-nybn2err.js → index-5csmzesf.js}

@@ -1,6 +1,6 @@
 import {
   loadDarwinBinding
-} from "./index-d4pa2bgs.js";
+} from "./index-v5ee8ath.js";
 import {
   isRecord
 } from "./index-9jfdm5tg.js";

package/dist/{index-ahtnte39.js → index-8zfsgar0.js}

@@ -152,6 +152,18 @@ class CliArgumentError2 extends Error {
 
 // src/tools/cli/args-fields.ts
 import { z } from "zod";
+function appendCliOptionValue(raw, name, value, info) {
+  const existing = raw.get(name);
+  const repeatable = !name.includes(".") && (info === undefined || info.kind === "array");
+  if (existing !== undefined) {
+    if (!repeatable) {
+      throw new CliArgumentError2(`--${name} was passed ${existing.length + 1} times`);
+    }
+    existing.push(value);
+  } else {
+    raw.set(name, [value]);
+  }
+}
 function unwrap(field) {
   if (field instanceof z.ZodOptional || field instanceof z.ZodNullable || field instanceof z.ZodDefault) {
     return unwrap(field.unwrap());
@@ -799,16 +811,13 @@ function readCliTokens(argv, fields, config) {
     help: false
   };
   const flags = new Map;
-  const boolFlags = new Map;
+  const literalBooleanFlags = new Set;
+  const frameworkFlags = new Map;
   const viewFlags = new Map;
   let ascending = false;
   const positionals = [];
   const pushFlag = (name, value) => {
-    const existing = flags.get(name);
-    if (existing)
-      existing.push(value);
-    else
-      flags.set(name, [value]);
+    appendCliOptionValue(flags, name, value, fields.get(name));
   };
   let optionsEnded = false;
   for (let i = 0;i < argv.length; i++) {
@@ -824,6 +833,7 @@ function readCliTokens(argv, fields, config) {
       continue;
     }
     if (tok === "-h") {
+      appendCliOptionValue(frameworkFlags, "help", "true", { kind: "boolean" });
       options.help = true;
       continue;
     }
@@ -839,7 +849,10 @@ function readCliTokens(argv, fields, config) {
         const separate = inline === undefined ? separateBoolValue(argv[i + 1]) : undefined;
         if (separate !== undefined)
           i++;
-        boolFlags.set(field, inline === undefined ? separate ?? true : parseReservedBool(field, inline));
+        pushFlag(field, inline ?? String(separate ?? true));
+        if (inline !== undefined)
+          parseReservedBool(field, inline);
+        literalBooleanFlags.add(field);
         continue;
       }
       let value = inline;
@@ -866,6 +879,9 @@ function readCliTokens(argv, fields, config) {
       const separate = value === undefined ? separateBoolValue(argv[i + 1]) : undefined;
       if (separate !== undefined)
         i++;
+      appendCliOptionValue(frameworkFlags, name, value ?? String(separate ?? true), {
+        kind: "boolean"
+      });
       const enabled = value === undefined ? separate ?? true : parseReservedBool(name, value);
       if (name === "dry-run")
         options.dryRun = enabled;
@@ -889,6 +905,7 @@ function readCliTokens(argv, fields, config) {
       }
       if (!option.inline)
         i++;
+      appendCliOptionValue(frameworkFlags, name, value, { kind: "string" });
       if (name === "wait-timeout") {
         const timeout = Number(value);
         if (!Number.isFinite(timeout) || timeout <= 0) {
@@ -896,8 +913,6 @@ function readCliTokens(argv, fields, config) {
         }
         options.waitTimeout = timeout;
       } else if (VIEW_OPTIONS.has(name)) {
-        if (viewFlags.has(name))
-          throw new CliArgumentError2(`--${name} was given twice`);
         viewFlags.set(name, value);
       } else {
         options.outputDir = value;
@@ -905,7 +920,8 @@ function readCliTokens(argv, fields, config) {
       continue;
     }
     if (value === undefined && name.startsWith("no-") && fields.get(name.slice(3))?.kind === "boolean") {
-      boolFlags.set(name.slice(3), false);
+      pushFlag(name.slice(3), "false");
+      literalBooleanFlags.add(name.slice(3));
       continue;
     }
     const unsafeSegment = name.split(".").find(isUnsafeKey);
@@ -922,7 +938,8 @@ function readCliTokens(argv, fields, config) {
         const separate = separateBoolValue(argv[i + 1]);
         if (separate !== undefined)
           i++;
-        boolFlags.set(name, separate ?? true);
+        pushFlag(name, String(separate ?? true));
+        literalBooleanFlags.add(name);
         continue;
       }
       const next = argv[i + 1];
@@ -935,10 +952,10 @@ function readCliTokens(argv, fields, config) {
     }
     pushFlag(name, value);
   }
-  return { options, flags, boolFlags, viewFlags, ascending, positionals };
+  return { options, flags, literalBooleanFlags, viewFlags, ascending, positionals };
 }
 function buildToolArgs(tokens, fields, declaredPositionals) {
-  const { flags, boolFlags, positionals } = tokens;
+  const { flags, literalBooleanFlags, positionals } = tokens;
   const toolArgs = {};
   const fillable = declaredPositionals === undefined ? [...fields.entries()].filter(([, info]) => info.kind !== "boolean").map(([name]) => name) : [...declaredPositionals];
   const variadicTail = declaredPositionals !== undefined && fields.get(fillable[fillable.length - 1] ?? "")?.kind === "array" ? fillable[fillable.length - 1] : undefined;
@@ -964,14 +981,12 @@ function buildToolArgs(tokens, fields, declaredPositionals) {
   if (pi < positionals.length) {
     throw new CliArgumentError2(`Unexpected positional argument "${positionals[pi]}"`);
   }
-  for (const [key, value] of boolFlags) {
-    toolArgs[key] = value;
-  }
   const dottedRoots = new Map;
   for (const key of flags.keys()) {
     const dot = key.indexOf(".");
-    if (dot > 0)
+    if (dot > 0 && !literalBooleanFlags.has(key)) {
       dottedRoots.set(key.slice(0, dot), key);
+    }
   }
   for (const [root, dotted] of dottedRoots) {
     if (flags.has(root)) {
@@ -979,17 +994,11 @@ function buildToolArgs(tokens, fields, declaredPositionals) {
     }
   }
   for (const [key, values] of flags) {
-    if (key.includes(".")) {
-      if (values.length > 1) {
-        throw new CliArgumentError2(`--${key} was passed ${values.length} times`);
-      }
+    const info = fields.get(key);
+    if (key.includes(".") && !literalBooleanFlags.has(key)) {
       setNested(toolArgs, key.split("."), looseCoerce(values[0] ?? ""));
       continue;
     }
-    const info = fields.get(key);
-    if (values.length > 1 && info !== undefined && info.kind !== "array" && info.kind !== "other") {
-      throw new CliArgumentError2(`--${key} was passed ${values.length} times`);
-    }
     toolArgs[key] = coerceField(info, values, `--${key}`);
   }
   return toolArgs;
@@ -1041,11 +1050,7 @@ function extractCliGlobalOptions2(argv, schema) {
         throw new CliArgumentError2(`--${option.name} requires a value`);
       }
     }
-    const existing = raw.get(option.name);
-    if (existing)
-      existing.push(value);
-    else
-      raw.set(option.name, [value]);
+    appendCliOptionValue(raw, option.name, value, info);
   }
   const args = {};
   for (const [name, values] of raw) {

package/dist/{index-xvdd2rbb.js → index-9853ymwb.js}

@@ -3,7 +3,7 @@ import {
   ProcessInstanceSchema2,
   readProcessInstance,
   probeProcessOwner2
-} from "./index-nybn2err.js";
+} from "./index-5csmzesf.js";
 import {
   isRecord
 } from "./index-9jfdm5tg.js";

package/dist/{index-806d5phm.js → index-db2spkv1.js}

@@ -2,6 +2,9 @@ import {
   forbidden2,
   conflict2
 } from "./index-n53mswt3.js";
+import {
+  loadDarwinBinding
+} from "./index-v5ee8ath.js";
 import {
   NativeCommandError2,
   stopCommandGroup,
@@ -28,10 +31,7 @@ import {
   openContainedParentFile,
   readContainedUtf8Handle,
   scanContainedFiles
-} from "./index-ej331hah.js";
-import {
-  loadDarwinBinding
-} from "./index-d4pa2bgs.js";
+} from "./index-gxm9rc97.js";
 import {
   defineRuntimeTool2
 } from "./index-tgzhq07n.js";

package/dist/{index-ej331hah.js → index-gxm9rc97.js}

@@ -1,6 +1,6 @@
 import {
   loadDarwinBinding
-} from "./index-d4pa2bgs.js";
+} from "./index-v5ee8ath.js";
 
 // src/agent-runtime/contained-scan.ts
 import path2 from "node:path";

package/dist/index-v5ee8ath.js

@@ -0,0 +1,88 @@
+// src/internal/darwin-binding.ts
+import loadDarwinAddon from "#stitchkit-darwin-native";
+
+// src/internal/darwin-binding-error.ts
+var messages = {
+  architecture: "The packaged Darwin backend does not support this architecture",
+  resolve: "The packaged Darwin backend is missing",
+  load: "The packaged Darwin backend could not be loaded",
+  surface: "The packaged Darwin backend has an invalid surface"
+};
+var nativeCodes = new Set([
+  "MODULE_NOT_FOUND",
+  "ERR_MODULE_NOT_FOUND",
+  "ERR_DLOPEN_FAILED",
+  "ENOENT",
+  "EINVAL",
+  "EPERM",
+  "EACCES",
+  "ENOTSUP"
+]);
+function darwinNativeCode(cause) {
+  let current = cause;
+  for (let depth = 0;depth < 3 && current instanceof Error; depth++) {
+    if ("code" in current && typeof current.code === "string" && nativeCodes.has(current.code)) {
+      return current.code;
+    }
+    current = current.cause;
+  }
+  return;
+}
+
+class DarwinBackendError extends Error {
+  stage;
+  code = "DARWIN_BACKEND_UNAVAILABLE";
+  constructor(stage, cause) {
+    super(messages[stage], { cause });
+    this.stage = stage;
+    this.name = "DarwinBackendError";
+  }
+  toJSON() {
+    return {
+      name: this.name,
+      code: this.code,
+      stage: this.stage,
+      architecture: process.arch,
+      message: this.message,
+      nativeCode: darwinNativeCode(this.cause)
+    };
+  }
+}
+
+// src/internal/darwin-binding.ts
+function hasFunctions(value, names) {
+  return typeof value === "object" && value !== null && names.every((name) => typeof Reflect.get(value, name) === "function");
+}
+var darwinBinding;
+function loadDarwinBinding() {
+  if (darwinBinding)
+    return darwinBinding;
+  if (process.arch !== "arm64" && process.arch !== "x64") {
+    throw new DarwinBackendError("architecture");
+  }
+  let loaded;
+  try {
+    loaded = loadDarwinAddon();
+  } catch (cause) {
+    const code = darwinNativeCode(cause);
+    throw new DarwinBackendError(code === "MODULE_NOT_FOUND" || code === "ERR_MODULE_NOT_FOUND" || code === "ENOENT" ? "resolve" : "load", cause);
+  }
+  const methods = [
+    "openDirectoryAt",
+    "openFileAt",
+    "createFileAt",
+    "createDirectoryAt",
+    "statAt",
+    "listAt",
+    "renameAt",
+    "unlinkAt",
+    "processIdentity"
+  ];
+  if (!hasFunctions(loaded, methods)) {
+    throw new DarwinBackendError("surface");
+  }
+  darwinBinding = loaded;
+  return darwinBinding;
+}
+
+export { loadDarwinBinding };

package/dist/internal/darwin-binding-error.d.ts

@@ -0,0 +1,24 @@
+declare const messages: {
+    architecture: string;
+    resolve: string;
+    load: string;
+    surface: string;
+};
+type Stage = keyof typeof messages;
+export declare function darwinNativeCode(cause: unknown): string | undefined;
+/** Live callers retain the original Error; operator JSON only carries safe loader evidence. */
+export declare class DarwinBackendError extends Error {
+    readonly stage: Stage;
+    readonly code = "DARWIN_BACKEND_UNAVAILABLE";
+    constructor(stage: Stage, cause?: unknown);
+    toJSON(): {
+        name: string;
+        code: string;
+        stage: "architecture" | "load" | "resolve" | "surface";
+        architecture: NodeJS.Architecture;
+        message: string;
+        nativeCode: string | undefined;
+    };
+}
+export {};
+//# sourceMappingURL=darwin-binding-error.d.ts.map

package/dist/internal/darwin-binding-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"darwin-binding-error.d.ts","sourceRoot":"","sources":["../../src/internal/darwin-binding-error.ts"],"names":[],"mappings":"AAAA,QAAA,MAAM,QAAQ;IACZ,YAAY;IACZ,OAAO;IACP,IAAI;IACJ,OAAO;CACR,CAAC;AACF,KAAK,KAAK,GAAG,MAAM,OAAO,QAAQ,CAAC;AAYnC,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAanE;AAED,+FAA+F;AAC/F,qBAAa,kBAAmB,SAAQ,KAAK;IAGzC,QAAQ,CAAC,KAAK,EAAE,KAAK;IAFvB,QAAQ,CAAC,IAAI,gCAAgC;IAC7C,YACW,KAAK,EAAE,KAAK,EACrB,KAAK,CAAC,EAAE,OAAO,EAIhB;IACD,MAAM;;;;;;;MASL;CACF"}

package/dist/internal/darwin-binding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"darwin-binding.d.ts","sourceRoot":"","sources":["../../src/internal/darwin-binding.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACtC,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACzD,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACpD,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACpE,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1E,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAC1E,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,WAAW,EAAE,CAAC;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAClE,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACjD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAM9E;AAID,wBAAgB,iBAAiB,IAAI,aAAa,CAgCjD"}
+{"version":3,"file":"darwin-binding.d.ts","sourceRoot":"","sources":["../../src/internal/darwin-binding.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACtC,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACzD,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACpD,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACpE,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1E,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAC1E,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,WAAW,EAAE,CAAC;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAClE,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACjD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAM9E;AAID,wBAAgB,iBAAiB,IAAI,aAAa,CAkCjD"}

package/dist/tools/cli/args-fields.d.ts

@@ -12,6 +12,8 @@ export interface FieldInfo {
     /** A `number` field that only accepts integers — named in its coercion error. */
     integer?: boolean;
 }
+/** Admit each raw occurrence before scalar coercion can discard a value. */
+export declare function appendCliOptionValue(raw: Map<string, string[]>, name: string, value: string, info: FieldInfo | undefined): void;
 /**
  * Map a merged tool schema to per-field kind info — what each `--flag` should
  * coerce to. Object members of unions and intersections contribute their

package/dist/tools/cli/args-fields.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"args-fields.d.ts","sourceRoot":"","sources":["../../../src/tools/cli/args-fields.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,MAAM,MAAM,SAAS,GACjB,SAAS,GACT,QAAQ,GACR,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,MAAM,GACN,OAAO,GACP,QAAQ,GACR,OAAO,CAAC;AAEZ,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,SAAS,CAAC;IAChB,uEAAuE;IACvE,WAAW,CAAC,EAAE,SAAS,CAAC;IACxB,iFAAiF;IACjF,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AA6ED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAI1F;AAKD,4GAA4G;AAC5G;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAI/E;AAED,oEAAoE;AACpE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAGzD;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAKtE;AA8BD,qFAAqF;AACrF,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAKlD;AAuCD,gFAAgF;AAChF,wBAAgB,WAAW,CACzB,IAAI,EAAE,SAAS,GAAG,SAAS,EAC3B,MAAM,EAAE,MAAM,EAAE,EAChB,KAAK,EAAE,MAAM,GACZ,OAAO,CAaT;AAED,wBAAgB,SAAS,CACvB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,EAAE,MAAM,EAAE,EACd,KAAK,EAAE,OAAO,GACb,IAAI,CAsBN"}
+{"version":3,"file":"args-fields.d.ts","sourceRoot":"","sources":["../../../src/tools/cli/args-fields.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,MAAM,MAAM,SAAS,GACjB,SAAS,GACT,QAAQ,GACR,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,MAAM,GACN,OAAO,GACP,QAAQ,GACR,OAAO,CAAC;AAEZ,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,SAAS,CAAC;IAChB,uEAAuE;IACvE,WAAW,CAAC,EAAE,SAAS,CAAC;IACxB,iFAAiF;IACjF,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,4EAA4E;AAC5E,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAC1B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,SAAS,GAAG,SAAS,GAC1B,IAAI,CAaN;AA6ED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAI1F;AAKD,4GAA4G;AAC5G;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAI/E;AAED,oEAAoE;AACpE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAGzD;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAKtE;AA8BD,qFAAqF;AACrF,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAKlD;AAuCD,gFAAgF;AAChF,wBAAgB,WAAW,CACzB,IAAI,EAAE,SAAS,GAAG,SAAS,EAC3B,MAAM,EAAE,MAAM,EAAE,EAChB,KAAK,EAAE,MAAM,GACZ,OAAO,CAaT;AAED,wBAAgB,SAAS,CACvB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,EAAE,MAAM,EAAE,EACd,KAAK,EAAE,OAAO,GACb,IAAI,CAsBN"}

package/dist/tools/cli/args.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../../src/tools/cli/args.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiB7B,OAAO,EAAE,KAAK,aAAa,EAAkB,MAAM,aAAa,CAAC;AAGjE,yEAAyE;AACzE,MAAM,WAAW,aAAa;IAC5B,sEAAsE;IACtE,IAAI,EAAE,OAAO,CAAC;IACd,iEAAiE;IACjE,IAAI,EAAE,OAAO,CAAC;IACd,8DAA8D;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,KAAK,EAAE,OAAO,CAAC;IACf,qEAAqE;IACrE,MAAM,EAAE,OAAO,CAAC;IAChB,qDAAqD;IACrD,IAAI,EAAE,OAAO,CAAC;IACd,0FAA0F;IAC1F,IAAI,CAAC,EAAE,aAAa,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,+BAA+B;IAC/B,OAAO,EAAE,aAAa,CAAC;CACxB;AA4RD,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EAAE,EACd,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,SAAS,EAC7B,MAAM,GAAE;IACN,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,aAAa,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5B,GACL,aAAa,CAUf;AAED,iFAAiF;AACjF,MAAM,WAAW,qBAAqB;IACpC,0EAA0E;IAC1E,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,MAAM,EAAE,CAAC,CAAC,SAAS,GAAG,SAAS,GAC9B,qBAAqB,CAkDvB"}
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../../src/tools/cli/args.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAkB7B,OAAO,EAAE,KAAK,aAAa,EAAkB,MAAM,aAAa,CAAC;AAGjE,yEAAyE;AACzE,MAAM,WAAW,aAAa;IAC5B,sEAAsE;IACtE,IAAI,EAAE,OAAO,CAAC;IACd,iEAAiE;IACjE,IAAI,EAAE,OAAO,CAAC;IACd,8DAA8D;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,KAAK,EAAE,OAAO,CAAC;IACf,qEAAqE;IACrE,MAAM,EAAE,OAAO,CAAC;IAChB,qDAAqD;IACrD,IAAI,EAAE,OAAO,CAAC;IACd,0FAA0F;IAC1F,IAAI,CAAC,EAAE,aAAa,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,+BAA+B;IAC/B,OAAO,EAAE,aAAa,CAAC;CACxB;AAoRD,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EAAE,EACd,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,SAAS,EAC7B,MAAM,GAAE;IACN,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,aAAa,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5B,GACL,aAAa,CAUf;AAED,iFAAiF;AACjF,MAAM,WAAW,qBAAqB;IACpC,0EAA0E;IAC1E,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,MAAM,EAAE,CAAC,CAAC,SAAS,GAAG,SAAS,GAC9B,qBAAqB,CAgDvB"}

package/llms/cli.txt

@@ -206,6 +206,16 @@ there stays a positional, and `--` makes a literal `false` one too. The same
 holds for a short alias, a framework flag such as `--json false` and an
 application option.
 
+Every declared non-array option is single-use, including framework and
+application globals. Bare, separate-value, inline, negative and short-alias
+forms of a command option count as the same name: `--active=false --active`,
+`--active false --no-active` and `-f --active` are argument errors even when
+the values agree. Duplicates are refused before command execution. Array
+options accumulate across long and short forms; unknown non-dotted passthrough
+options retain their raw-list grammar. Tokens after `--` are literal data.
+Command `--help` and `-h` keep their diagnostic precedence over malformed
+operation arguments; application globals are validated before routing.
+
 Without presentation configuration, positional arguments fill non-boolean
 fields in declaration order, so `myapp generate "a fox"` is
 `--prompt "a fox"`. A piped value fills the first required unset field:

package/llms/process.txt

@@ -15,7 +15,7 @@ description: Native IO для Bun и Node, с явно выбранной durabi
 type: guide
 status: active
 created: 2026-10-01 20:44 +07:00
-updated: 2026-10-03 13:36 +07:00
+updated: 2026-10-04 09:40 +07:00
 participants:
   - role: authored
     harness: Codex
@@ -29,6 +29,10 @@ participants:
     harness: Codex
     model: GPT-6
     at: 2026-10-03 13:36 +07:00
+  - role: implemented
+    harness: Codex
+    model: GPT-6
+    at: 2026-10-04 09:21 +07:00
 ---
 
 # Native IO
@@ -256,10 +260,35 @@ version: carry their reachable relative `.d.ts` closure, rather than emitting re
 instead emit declarations for only that DTO contract. Keep the library's manifest at runtime
 `dependencies: {}` and `peerDependencies: { zod: ... }` when that is its declared promise.
 
-Darwin consumers need the published native binaries at the bundled loader's relative native
-directory. A JS-only bundle is not portable evidence. Qualify the packed library outside its
-build tree in Bun and Node, test its declarations, and check that importing an unbundled
-Stitchkit leaf fails there. A separate schema-only entry must not import the native entry.
+The packaged Darwin loader has static references to both architecture addons. Bun compilation
+embeds the matching `.node` asset; ordinary Bun bundling emits native assets alongside its JS
+output. Publish **every output returned by `Bun.build`**, preserving relative paths. Copying only
+the JS file drops its native dependency. No runtime Stitchkit installation or manually chosen
+native path is required for these bundled artifacts.
+
+```sh
+bun build src/native.ts --target=bun --minify --outdir=dist
+bun build src/native.ts --compile --bytecode --format=esm --outfile=dist/native
+```
+
+For a JS build that previously used `--outfile=dist/native.js`, use
+`--outdir=dist --entry-naming=native.js` instead: the output can now include native assets.
+The standalone executable still uses `--outfile` because those assets are embedded inside it.
+
+Qualify the complete output outside its build tree and installed dependency graph. Test process
+identity, live-owner refusal, dead-owner recovery and contained file operations in the resulting
+JS bundle and standalone executable. Bun and Node package imports retain the same lazy loader;
+importing a portable leaf does not load a Darwin addon on another OS. Test declarations too,
+and check that importing an unbundled Stitchkit leaf fails in a deliberately isolated library
+distribution. A separate schema-only entry must not import the native entry.
+
+If the Darwin backend cannot load, `observeProcessInstance` still returns `unavailable`.
+Its backend `Error` preserves the original `cause`; JSON serialization carries only the stable
+`DARWIN_BACKEND_UNAVAILABLE` code, architecture, safe message and failure stage
+(`architecture`, `resolve`, `load` or `surface`), plus a recognized native error code when present.
+It excludes stack, paths and nested cause. This backend diagnosis does not reclassify kernel
+failures or turn unavailable identity into proof that an owner is dead. If a runtime provides
+no recognized native error code, the stage stays `load`; the loader never infers errno from text.
 
 This delivery removes a runtime kernel installation; it does not remove the build-time
 Stitchkit installation or create an independent lightweight npm package.

package/llms-full.txt

@@ -8045,7 +8045,7 @@ description: Native IO для Bun и Node, с явно выбранной durabi
 type: guide
 status: active
 created: 2026-10-01 20:44 +07:00
-updated: 2026-10-03 13:36 +07:00
+updated: 2026-10-04 09:40 +07:00
 participants:
   - role: authored
     harness: Codex
@@ -8059,6 +8059,10 @@ participants:
     harness: Codex
     model: GPT-6
     at: 2026-10-03 13:36 +07:00
+  - role: implemented
+    harness: Codex
+    model: GPT-6
+    at: 2026-10-04 09:21 +07:00
 ---
 
 # Native IO
@@ -8286,10 +8290,35 @@ version: carry their reachable relative `.d.ts` closure, rather than emitting re
 instead emit declarations for only that DTO contract. Keep the library's manifest at runtime
 `dependencies: {}` and `peerDependencies: { zod: ... }` when that is its declared promise.
 
-Darwin consumers need the published native binaries at the bundled loader's relative native
-directory. A JS-only bundle is not portable evidence. Qualify the packed library outside its
-build tree in Bun and Node, test its declarations, and check that importing an unbundled
-Stitchkit leaf fails there. A separate schema-only entry must not import the native entry.
+The packaged Darwin loader has static references to both architecture addons. Bun compilation
+embeds the matching `.node` asset; ordinary Bun bundling emits native assets alongside its JS
+output. Publish **every output returned by `Bun.build`**, preserving relative paths. Copying only
+the JS file drops its native dependency. No runtime Stitchkit installation or manually chosen
+native path is required for these bundled artifacts.
+
+```sh
+bun build src/native.ts --target=bun --minify --outdir=dist
+bun build src/native.ts --compile --bytecode --format=esm --outfile=dist/native
+```
+
+For a JS build that previously used `--outfile=dist/native.js`, use
+`--outdir=dist --entry-naming=native.js` instead: the output can now include native assets.
+The standalone executable still uses `--outfile` because those assets are embedded inside it.
+
+Qualify the complete output outside its build tree and installed dependency graph. Test process
+identity, live-owner refusal, dead-owner recovery and contained file operations in the resulting
+JS bundle and standalone executable. Bun and Node package imports retain the same lazy loader;
+importing a portable leaf does not load a Darwin addon on another OS. Test declarations too,
+and check that importing an unbundled Stitchkit leaf fails in a deliberately isolated library
+distribution. A separate schema-only entry must not import the native entry.
+
+If the Darwin backend cannot load, `observeProcessInstance` still returns `unavailable`.
+Its backend `Error` preserves the original `cause`; JSON serialization carries only the stable
+`DARWIN_BACKEND_UNAVAILABLE` code, architecture, safe message and failure stage
+(`architecture`, `resolve`, `load` or `surface`), plus a recognized native error code when present.
+It excludes stack, paths and nested cause. This backend diagnosis does not reclassify kernel
+failures or turn unavailable identity into proof that an owner is dead. If a runtime provides
+no recognized native error code, the stage stays `load`; the loader never infers errno from text.
 
 This delivery removes a runtime kernel installation; it does not remove the build-time
 Stitchkit installation or create an independent lightweight npm package.
@@ -8907,6 +8936,16 @@ there stays a positional, and `--` makes a literal `false` one too. The same
 holds for a short alias, a framework flag such as `--json false` and an
 application option.
 
+Every declared non-array option is single-use, including framework and
+application globals. Bare, separate-value, inline, negative and short-alias
+forms of a command option count as the same name: `--active=false --active`,
+`--active false --no-active` and `-f --active` are argument errors even when
+the values agree. Duplicates are refused before command execution. Array
+options accumulate across long and short forms; unknown non-dotted passthrough
+options retain their raw-list grammar. Tokens after `--` are literal data.
+Command `--help` and `-h` keep their diagnostic precedence over malformed
+operation arguments; application globals are validated before routing.
+
 Without presentation configuration, positional arguments fill non-boolean
 fields in declaration order, so `myapp generate "a fox"` is
 `--prompt "a fox"`. A piped value fills the first required unset field:

package/llms.txt

@@ -17,7 +17,7 @@ Load the slice for each entrypoint your code imports — `import … from 'stitc
 - **stitchkit/tools/contract**: [llms/tools-contract.txt](llms/tools-contract.txt) 0.2 KB
 - **stitchkit/tools/invoker**: [llms/tools-invoker.txt](llms/tools-invoker.txt) 0.2 KB
 - **stitchkit/tools/connections**: [llms/tools-connections.txt](llms/tools-connections.txt) 3.1 KB
-- **stitchkit/cli**: [llms/cli.txt](llms/cli.txt) 43.6 KB → [llms/cli.2.txt](llms/cli.2.txt) 8.1 KB
+- **stitchkit/cli**: [llms/cli.txt](llms/cli.txt) 44.2 KB → [llms/cli.2.txt](llms/cli.2.txt) 8.1 KB
 - **stitchkit/remote**: [llms/remote.txt](llms/remote.txt) 1.0 KB
 - **stitchkit/contract**: [llms/contract.txt](llms/contract.txt) 31.9 KB
 - **stitchkit/primitives**: [llms/primitives.txt](llms/primitives.txt) 11.2 KB
@@ -55,7 +55,7 @@ Load the slice for each entrypoint your code imports — `import … from 'stitc
 - **stitchkit/agent-runtime/react**: [llms/agent-runtime-react.txt](llms/agent-runtime-react.txt) 1.0 KB
 - **stitchkit/agent-runtime/realtime**: [llms/agent-runtime-realtime.txt](llms/agent-runtime-realtime.txt) 1.8 KB
 - **stitchkit/agent-runtime/harness-tools**: [llms/agent-runtime-harness-tools.txt](llms/agent-runtime-harness-tools.txt) 1.3 KB
-- **stitchkit/process**: [llms/process.txt](llms/process.txt) 20.0 KB
+- **stitchkit/process**: [llms/process.txt](llms/process.txt) 21.7 KB
 
 ## Upgrading slices
 - **Upgrading — how to move across versions**: [llms/upgrading.txt](llms/upgrading.txt) 10.3 KB

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stitchkit",
-  "version": "0.103.12",
+  "version": "0.103.13",
   "description": "Contract-first backend framework — one defineContract() into an HTTP API, MCP tools, AI-agent tools and a typed client. Bun and Node.",
   "keywords": [
     "bun",
@@ -42,6 +42,8 @@
   "files": [
     "dist",
     "native/*.node",
+    "darwin-native.cjs",
+    "darwin-native.d.cts",
     "llms.txt",
     "llms-full.txt",
     "llms",
@@ -49,6 +51,9 @@
     "CHANGELOG.md",
     "LICENSE"
   ],
+  "imports": {
+    "#stitchkit-darwin-native": "./darwin-native.cjs"
+  },
   "exports": {
     ".": {
       "types": "./dist/entrypoints/index.d.ts",

package/dist/index-d4pa2bgs.js

@@ -1,42 +0,0 @@
-// src/internal/darwin-binding.ts
-import { existsSync } from "node:fs";
-import { createRequire } from "node:module";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-function hasFunctions(value, names) {
-  return typeof value === "object" && value !== null && names.every((name) => typeof Reflect.get(value, name) === "function");
-}
-var darwinBinding;
-function loadDarwinBinding() {
-  if (darwinBinding)
-    return darwinBinding;
-  const directory = path.dirname(fileURLToPath(import.meta.url));
-  const binary = `darwin-${process.arch}.node`;
-  const candidates = [
-    path.resolve(directory, "../native", binary),
-    path.resolve(directory, "../../native", binary)
-  ];
-  const selected = candidates.find((candidate) => existsSync(candidate));
-  if (!selected) {
-    throw new Error(`Contained filesystem operations need the packaged Darwin ${process.arch} backend`);
-  }
-  const loaded = createRequire(import.meta.url)(selected);
-  const methods = [
-    "openDirectoryAt",
-    "openFileAt",
-    "createFileAt",
-    "createDirectoryAt",
-    "statAt",
-    "listAt",
-    "renameAt",
-    "unlinkAt",
-    "processIdentity"
-  ];
-  if (!hasFunctions(loaded, methods)) {
-    throw new Error("The packaged Darwin contained-files backend has an invalid surface");
-  }
-  darwinBinding = loaded;
-  return darwinBinding;
-}
-
-export { loadDarwinBinding };