stitchkit 0.103.12 → 0.104.0

package/llms/{upgrading-0.61.0-0.74.0.txt → upgrading-0.62.0-0.79.0.txt}

@@ -1,14 +1,182 @@
-# Upgrading 0.61.0 → 0.74.0 — stitchkit docs slice
+# Upgrading 0.62.0 → 0.79.0 — stitchkit docs slice
 
 > Generated from the `docs/` tree by `bun run gen:llms`. The index of all slices is
 > `llms.txt` in this package.
 
-Contains: Guide: Upgrading, 0.61.0 → 0.74.0  (docs/guide/upgrading.md)
+Contains: Guide: Upgrading, 0.62.0 → 0.79.0  (docs/guide/upgrading.md)
 
 ==============================================================================
-# Guide: Upgrading, 0.61.0 → 0.74.0  (docs/guide/upgrading.md)
+# Guide: Upgrading, 0.62.0 → 0.79.0  (docs/guide/upgrading.md)
 ==============================================================================
 
+## Released migration: 0.79.0
+
+One thing, and only if you assert on the whole snapshot.
+
+```bash
+rg -n "getSnapshot\(\)|projectApplicationStatus|status\(\)" --glob '*.test.ts' --glob '*.spec.ts'
+```
+
+`ApplicationSnapshot` and `ApplicationStatusProjection` each gained a
+`restarting` field — ids in the snapshot, a count in the projection. A reader
+that names the fields it wants is unaffected. A test that compares the whole
+object with `toEqual` fails until it adds the field:
+
+```ts
+// before
+expect(body).toEqual({ id, lifecycle: 'ready', /* … */ resources: { total: 1, ready: 1, degraded: 0, failed: 0 } })
+// after
+expect(body).toEqual({ id, lifecycle: 'ready', /* … */ resources: { total: 1, ready: 1, degraded: 0, failed: 0 }, restarting: 0 })
+```
+
+It is zero except while a restart is running, and then it names the subtree being
+replaced. That is the point: a snapshot taken mid-restart used to be
+indistinguishable from a resource that had failed on its own, so a dashboard read
+a planned replacement as an outage.
+
+**If you watch a hub across a restart**, nothing to change, but the behaviour is
+different and better: closing a hub now tells its subscribers `unavailable` /
+`source-unavailable` instead of dropping them, so a page stops showing a value
+that will never update again.
+
+**If you need a tool contract in a browser**, `stitchkit/tools/contract` now
+carries the async-operation helpers, its schemas and the view-file input/output
+without the runtime. `stitchkit/tools` still exports all of them.
+
+## Released migration: 0.78.0
+
+Two mechanical edits. Find them both:
+
+```bash
+rg -n "createDecisionPipeline|createDiagnosticJournal" --glob '*.ts' --glob '*.tsx'
+```
+
+**1. `createDecisionPipeline` takes a deadline.**
+
+```ts
+// before
+createDecisionPipeline([policyA, policyB])
+// after
+createDecisionPipeline([policyA, policyB], { policyTimeoutMs: 2_000 })
+```
+
+Pick a number your slowest policy comfortably beats. There is no default on
+purpose: a policy that never settles hangs every caller of the operation it
+guards, and the framework has no basis for choosing that number for you.
+
+Past the deadline — and on a throw, and on a non-decision — the pipeline raises
+`DecisionPolicyError` naming the policy, with the trace so far. If you already
+catch that for a bad return value, you now catch two more cases with it.
+
+**2. `createDiagnosticJournal` moved.**
+
+```ts
+// before
+import { createDiagnosticJournal } from 'stitchkit/application'
+// after
+import { createDiagnosticJournal } from 'stitchkit/application/diagnostic-journal'
+```
+
+Only the factory moved. `DiagnosticJournalConfig`, every
+`DiagnosticJournal*Schema` and `readDiagnosticJournalLockDiagnosis` stay where
+they were.
+
+**If you restart resources**, nothing to change — but three things that did not
+work now do: a managed schedule can be restarted, a restarted keyspace accepts
+writes again, and a restarted managed server is actually shut down at exit. If
+you pass `managedServerResource` a server *instance*, a restart is now refused
+by name; pass a factory (`server: (context) => …`) to restart it.
+
+## Released migration: 0.77.0
+
+Two type renames, and only if you named them. Nothing runtime moved.
+
+```bash
+rg -n "EventDecision|EventUndecided" --glob '*.ts' --glob '*.tsx'
+```
+
+```ts
+// before
+import type { EventDecision, EventUndecided } from 'stitchkit/live'
+// after
+import type { PolicyDecision, UndecidedOutcome } from 'stitchkit/live'
+```
+
+The shapes are identical — `{ outcome: 'allow' } | { outcome: 'deny', reason } | { outcome: 'defer' }`
+and `'allow' | 'deny'`. If you only ever *return* decisions from listeners and never named the
+type, the search above finds nothing and there is nothing to do.
+
+They were renamed because `createDecisionPipeline` (new in this release) votes with exactly the
+same three outcomes, and two identical types under two names is the thing that makes a search for
+either one return half the truth.
+
+## Released migration: 0.76.0
+
+One change, and only if you hand `createWatchClient` a transport you wrote yourself.
+
+```bash
+rg -n "createWatchClient" --glob '*.ts'
+```
+
+If the `transport:` you pass is a bound realtime client — `bindRealtimeClient(...)` or
+`createRealtimeClient(...)` — there is nothing to do: it already carries
+`onConnectionChange`. If it is an object you assembled, add the fourth member:
+
+```ts
+onConnectionChange(listener: (connected: boolean, reason?: string) => void): () => void
+```
+
+It is required because the client recovers through it: on a drop it publishes
+`unavailable` to subscribers and forgets what was opened, and on a fresh
+connection it re-opens every key that still has a listener. Without it a watch
+stays "open" on the client after a server restart while the hub remembers
+nothing, and the face stops updating without saying so.
+
+## Released migration: 0.75.0
+
+Two mechanical renames and one option that has to move. Nothing about a passing
+request changes.
+
+### 1. A route group's `onRequest`
+
+```bash
+rg -n "hooks:\s*\{[^}]*onRequest" --glob '*.ts'
+```
+
+Any match **inside a `groups: [...]` entry** must move. The hook was accepted and
+never dispatched, so the behaviour you have today is "no hook"; the fix is to
+decide which one you meant:
+
+```ts
+// refuse before dispatch, for the whole server
+createServer({ groups, hooks: { onRequest: gate } });
+
+// gate this group once the endpoint is known
+groups: [{ pathPrefix: '/admin', services, hooks: { authorize: gate } }]
+```
+
+A group that still declares `onRequest` fails at startup with that message.
+
+### 2. The SQLite boundary type
+
+```bash
+rg -l "AgentRuntimeSqlite(Database|Statement|Value)" | xargs sed -i \
+  -e 's/AgentRuntimeSqliteDatabase/SqliteDatabase/g' \
+  -e 's/AgentRuntimeSqliteStatement/SqliteStatement/g' \
+  -e 's/AgentRuntimeSqliteValue/SqliteValue/g'
+```
+
+Type-only: the same three methods, the same structural compatibility with
+`bun:sqlite` and a `node:sqlite` wrapper, imported from the same entrypoints.
+`initializeAgentRuntimeSqlite` keeps its name — it really is the agent runtime's
+schema.
+
+### 3. Nothing else
+
+`stitchkit/live`, the watch hub, the keyspace and the trust fence are all
+additive. Adopt them when you want them; the guide is
+[Live data](./live.md).
+
 ## Released migration: 0.74.0
 
 One change, and it only reaches you if you catch a refusal the **client** raised — one it made while
@@ -957,140 +1125,3 @@ exhaustively on any of those enums, add the arm** — that is the part of this
 release that can break a build rather than a behaviour. The record itself is
 kept: it is excluded from the projection, not deleted, so an operator can still
 see what was thrown away.
-
-## Released migration: 0.61.0
-
-Three behaviour changes between versions. None moves an export — the surface is
-strictly additive — and all three change what a running system does, which is
-what this heading is for.
-
-### A failed `start()` now drains before it rejects
-
-The rollback of a failed startup used to close every resource with a zero
-budget: it returned almost at once, by severing requests the server had already
-accepted. It now spends the application's shutdown budget, so a request already
-in flight is answered rather than killed.
-
-**What to check.** Nothing, if a failed startup has nothing in flight — the
-rollback still returns immediately. The case to think about is a request that
-never finishes: a hung upstream, a client ignoring a close frame, a streaming
-subscription. Under the default 30s grace and 5s force, a `start()` that used to
-reject in milliseconds can now take 35 seconds to reject.
-
-If a fast failure matters more than draining — a supervisor waiting to restart,
-a boot check in CI — declare a smaller budget. The same field is the default for
-`shutdown()` with no options, so this is one decision, not two:
-
-```ts
-// before
-createApplication({ id: 'app', resources })
-
-// after
-createApplication({
-  id: 'app',
-  resources,
-  shutdown: { gracePeriodMs: 5_000, forceTimeoutMs: 1_000 },
-})
-```
-
-The budget is a real bound: a `close` that never returns is abandoned when it
-runs out and reported as a `close` failure, and the startup error remains the
-`cause` of the `AggregateError` `start()` rejects with. → ADR 0107
-
-### A refused realtime frame now answers its sender
-
-A frame that fails the receiver's `args` schema used to be dropped where it
-landed. If the event carries an acknowledgement, the receiver now answers it
-with a reserved envelope and the sender's `request()` rejects at once with
-`RealtimeRequestRejectedError`. → ADR 0106
-
-**What to check before you upgrade one half of a distributed pair.** Look at the
-`ack` schemas on the OLDER peer:
-
-```ts
-// safe: a contract-first acknowledgement refuses the envelope, so the older
-// peer raises RealtimeRequestInvalidAcknowledgementError at once instead of
-// waiting out its deadline. Different error, still an error, and sooner.
-ack: z.object({ stored: z.boolean() })
-
-// NOT safe: a schema that validates nothing accepts the refusal AS A VALUE.
-// The older peer reads a refusal as a successful acknowledgement — silently.
-ack: z.unknown()
-ack: z.looseObject({})
-```
-
-If any acknowledgement on the older side is permissive, tighten it before the
-rollout, or upgrade both halves together.
-
-Also: the receiver now invokes the peer's raw acknowledgement callback for a
-refused frame, including when the peer is a plain Socket.IO client. That
-callback previously could not run on a refused frame and now can.
-
-`RealtimeRejectedEvent['reason']` gained `'rejected-by-peer'`. If you `switch`
-over it exhaustively with an `assertNever` default, that stops compiling — add
-the case.
-
-### Two smaller behaviour changes, easy to miss
-
-**`streamSSE`'s `cancel` no longer awaits the generator.** Teardown is now
-unordered relative to request completion. If your generator releases a resource
-in `return()`/`finally` — a temp file, a pooled connection — and anything
-downstream assumed that had finished by the time the response settled, it no
-longer has. Release in the generator's own `finally` and do not depend on the
-ordering.
-
-**A `socket.io-client` peer that cannot load no longer kills the process.** With
-`onConnectError` configured, the failure is delivered there with
-`terminal: true` instead of crashing. If your handler logs and moves on, you now
-have a live process whose client will never connect, where a supervisor used to
-restart it. Treat `terminal: true` as fatal if that is what you want.
-
-### `reportHealth` inside `start` is no longer discarded
-
-Becoming ready assigned `healthy` unconditionally, throwing away whatever a
-resource reported during `start`. It is now kept, and only a resource that
-reported nothing is assumed healthy.
-
-**How to find what this touches:** grep your `start` bodies for **every**
-`reportHealth` call, not only the ones reporting `degraded`. The old
-unconditional assignment was also a repair — a resource that reported
-`'unhealthy'` early in `start` and never corrected itself was quietly fixed up
-on the way to ready.
-
-Two cases, and they need opposite fixes.
-
-**1. A resource that is genuinely expected to start degraded** — up, but still
-dialling something external. `required` defaults to **`true`**, and readiness
-requires every required resource to be healthy, so such a resource now refuses
-the whole startup where before its report vanished. That is the invariant
-working as intended; what changed is that it can be reached. Say what it is:
-
-```ts
-// before: started, and its report was discarded
-defineManagedResource({ id: 'dialling', start: ({ reportHealth }) => reportHealth('degraded') })
-
-// after: says what it is, and does not gate the application
-defineManagedResource({ id: 'dialling', required: false, start: ({ reportHealth }) => reportHealth('degraded') })
-```
-
-**2. A resource that reported `'unhealthy'` early and became healthy later** —
-a pessimistic report before a connection settled. Here `required: false` is the
-**wrong** fix: it would hide a real failure. Report the recovery instead:
-
-```ts
-start: async ({ reportHealth }) => {
-  reportHealth('unhealthy')
-  await connect()
-  reportHealth('healthy')   // ← previously unnecessary; now it is the fix
-}
-```
-
-**Also check your health endpoint.** An **optional** resource reporting
-non-healthy during `start` now moves the application aggregate to `degraded`,
-where before it stayed `healthy`. A readiness probe that maps `degraded` to a
-non-200 will flip on upgrade — and a supervisor that restarts on that will loop.
-
-The refusals now say which of the two happened: a resource that was never
-healthy is told it "is not healthy" and pointed at `required: false`; one that
-was healthy and stopped is told it "lost readiness" and pointed at
-`onResourceFailure`.

package/llms/{upgrading-0.75.0-0.103.0.txt → upgrading-0.80.0-0.104.0.txt}

@@ -1,14 +1,131 @@
-# Upgrading 0.75.0 → 0.103.0 — stitchkit docs slice
+# Upgrading 0.80.0 → 0.104.0 — stitchkit docs slice
 
 > Generated from the `docs/` tree by `bun run gen:llms`. The index of all slices is
 > `llms.txt` in this package.
 
-Contains: Guide: Upgrading, 0.75.0 → 0.103.0  (docs/guide/upgrading.md)
+Contains: Guide: Upgrading, 0.80.0 → 0.104.0  (docs/guide/upgrading.md)
 
 ==============================================================================
-# Guide: Upgrading, 0.75.0 → 0.103.0  (docs/guide/upgrading.md)
+# Guide: Upgrading, 0.80.0 → 0.104.0  (docs/guide/upgrading.md)
 ==============================================================================
 
+## Released migration: 0.104.0
+
+### CLI runtime-tool construction
+
+**Who must act:** callers writing a schema-dependent handler or MCP/AI `present` directly
+inside an annotated `CliConfig.runtimeTools` or `CliInvokerConfig.runtimeTools` object.
+Native `commands` and values returned by `defineRuntimeTool` / `createRuntimeToolFactory`
+remain valid. Execution, auth, validation and the invocation result envelope keep their behavior.
+
+Construct a CLI-only managed definition with the neutral schema-aware type before registration:
+
+```ts
+import type { CliInvokerConfig, RuntimeToolExecutionWithOutput } from 'stitchkit/cli'
+import { z } from 'zod'
+
+const input = z.object({ text: z.string() })
+const output = z.object({ size: z.number() })
+// Before: handler receives the heterogeneous registry context.
+const config: CliInvokerConfig = {
+  name: 'app',
+  runtimeTools: [{
+    name: 'measure', description: 'Measure text',
+    identity: { serviceName: 'text', action: 'measure', method: 'POST' },
+    transports: ['CLI'], input, output,
+    handler: ({ input }) => ({ size: String(input.text).length }),
+  }],
+}
+// After: handler input and output derive from the construction schemas.
+const measure = {
+  name: 'measure', description: 'Measure text',
+  identity: { serviceName: 'text', action: 'measure', method: 'POST' },
+  transports: ['CLI'], input, output,
+  handler: ({ input }) => ({ size: input.text.length }),
+} satisfies RuntimeToolExecutionWithOutput<typeof input, typeof output>
+const nextConfig: CliInvokerConfig = { name: 'app', runtimeTools: [measure] }
+```
+
+For a shared MCP/AI tool, construct the definition with `defineRuntimeTool` from
+`stitchkit/tools`, including its typed SDK `present` callbacks, then pass the returned value
+to `runtimeTools`. Install the corresponding SDK peers for that integration. A CLI-only
+consumer needs `stitchkit`, `zod` and its ordinary Node type tooling.
+
+`RuntimeToolExecution` names the heterogeneous registration contract. Call a registered
+operation through `createCli` or `createCliInvoker`; its erased handler input is `never`
+because the managed runner owns schema validation before execution. For a managed void
+definition, use `RuntimeToolDefinitionWithoutOutput<typeof input>`.
+
+### MCP construction, state stores and delivery
+
+**Who must act:** schema-dependent runtime tool literals written directly inside MCP mount
+configuration, MCP presenters returning malformed content or metadata, custom `StateStore`
+implementations, file-store consumers using retired lock
+options, broadcast consumers reading `halt` or retrying unknown send outcomes, and consumers
+that validate HTTP error envelopes with a closed schema. Applications collecting raw tool
+causes from `console.error` must configure an internal tool hook sink.
+
+MCP-only code can import the existing server factories from `stitchkit/tools/mcp` and
+construct its schema-aware tool before heterogeneous registration:
+
+```ts
+import { buildMcpServer, type RuntimeMcpToolDefinitionWithOutput } from 'stitchkit/tools/mcp'
+import { z } from 'zod'
+const input = z.object({ value: z.number() })
+const output = z.object({ doubled: z.number() })
+// Before: runtimeTools: [{ input, output, handler, present }]
+const double = {
+  name: 'double', description: 'Double a number',
+  identity: { serviceName: 'numbers', action: 'double', method: 'POST' },
+  input, output,
+  handler: ({ input }) => ({ doubled: input.value * 2 }),
+  present: { mcp: ({ doubled }) => ({ content: [{ type: 'text', text: String(doubled) }] }) },
+} satisfies RuntimeMcpToolDefinitionWithOutput<typeof input, typeof output>
+const server = buildMcpServer({ serverInfo: { name: 'numbers', version: '1' }, services: [], runtimeTools: [double] })
+```
+
+Full MCP/AI integrations keep `defineRuntimeTool` from `stitchkit/tools`; those typed values
+remain accepted by the MCP leaf and CLI. The leaf requires the MCP SDK and Zod, with no AI peer.
+
+`RuntimeMcpPresentation` preserves the official SDK's required `content` and typed `_meta`
+fields. A presenter returning `{}` must return `{ content: [] }`; text blocks require string
+text, and metadata must be an object. `structuredContent` and `isError` remain framework-owned.
+This restores SDK checks that an indexed mapped type previously erased.
+
+Unexpected tool causes remain in `hooks.onToolError` and the `error` field of
+`hooks.afterToolCall`. Protocol stderr carries safe errors. MCP resolver failures use those
+same observers without executing the handler or its lifecycle again. HTTP's default
+unexpected-error logging retains its behavior.
+
+A custom state adapter's `update` must invoke `transition(current, context)` while it still
+owns the serialized transaction. `context.assertHeld()` checks the actual transaction or lock
+generation and refuses after completion, rollback or ownership loss. A no-op guard cannot
+satisfy this contract. Existing transition callbacks may keep one parameter. For the owning
+file adapter, replace `{ staleLockMs, retryMs, lockTimeoutMs }` with `{ lockTimeoutMs }`:
+the remaining budget controls acquisition waiting, never expiry of a live transaction.
+Unknown legacy PID locks and historical temporary files are preserved; recover them only
+after independently proving their owner is gone.
+
+Broadcast consumers change `report.halt.reason` checks to the closed `halt.kind` union:
+`retry-after`, `transient`, `permanent` or `ambiguous`. A custom MTProto adapter can classify
+an acknowledged flood refusal as `{ kind: 'retry-after', retryAfterMs: wait }`; the exact
+provider wait is respected. A wait over `maxRetryDelayMs` halts with the recipient pending.
+Unknown write outcome becomes `uncertain`; restarting the same broadcast does not send it
+again. A retry classification must certify that the attempt did not apply the external effect.
+
+HTTP errors gain optional boolean `error.retryable`; framed contract streams use the same
+field. Update closed consumer schemas before producers declaring it. `false` on 502 and
+`true` on 409 remain explicit recommendations through the remote tool path. An absent field
+retains prior status-derived defaults; the field does not change the HTTP client's retry policy.
+The existing seventh `ApiError` constructor argument remains `ErrorOptions`; retryability is
+the new eighth argument.
+
+Caller cancellation now reaches `implementRemote`'s existing HTTP call. Applications bind
+signals to `createCli` / `createCliInvoker` and cooperative handlers observe `ctx.signal`.
+`REQUEST_ABORTED` is nonretryable and exits 130. A disconnected caller does not prove that
+an origin ignoring cancellation or an external provider stopped; keep resource leases until
+that work actually completes.
+
 ## Released migration: 0.103.0
 
 ### Diagnostic journal startup preserves torn evidence and inspects archives
@@ -947,171 +1064,3 @@ this is overloads and not one normalised key.
 **If you compile with `skipLibCheck: false`**, this is also the release that
 makes `stitchkit/tools/contract` compile at all: it carried five `TS2344`
 errors, one per phase, from the same conditional spread.
-
-## Released migration: 0.79.0
-
-One thing, and only if you assert on the whole snapshot.
-
-```bash
-rg -n "getSnapshot\(\)|projectApplicationStatus|status\(\)" --glob '*.test.ts' --glob '*.spec.ts'
-```
-
-`ApplicationSnapshot` and `ApplicationStatusProjection` each gained a
-`restarting` field — ids in the snapshot, a count in the projection. A reader
-that names the fields it wants is unaffected. A test that compares the whole
-object with `toEqual` fails until it adds the field:
-
-```ts
-// before
-expect(body).toEqual({ id, lifecycle: 'ready', /* … */ resources: { total: 1, ready: 1, degraded: 0, failed: 0 } })
-// after
-expect(body).toEqual({ id, lifecycle: 'ready', /* … */ resources: { total: 1, ready: 1, degraded: 0, failed: 0 }, restarting: 0 })
-```
-
-It is zero except while a restart is running, and then it names the subtree being
-replaced. That is the point: a snapshot taken mid-restart used to be
-indistinguishable from a resource that had failed on its own, so a dashboard read
-a planned replacement as an outage.
-
-**If you watch a hub across a restart**, nothing to change, but the behaviour is
-different and better: closing a hub now tells its subscribers `unavailable` /
-`source-unavailable` instead of dropping them, so a page stops showing a value
-that will never update again.
-
-**If you need a tool contract in a browser**, `stitchkit/tools/contract` now
-carries the async-operation helpers, its schemas and the view-file input/output
-without the runtime. `stitchkit/tools` still exports all of them.
-
-## Released migration: 0.78.0
-
-Two mechanical edits. Find them both:
-
-```bash
-rg -n "createDecisionPipeline|createDiagnosticJournal" --glob '*.ts' --glob '*.tsx'
-```
-
-**1. `createDecisionPipeline` takes a deadline.**
-
-```ts
-// before
-createDecisionPipeline([policyA, policyB])
-// after
-createDecisionPipeline([policyA, policyB], { policyTimeoutMs: 2_000 })
-```
-
-Pick a number your slowest policy comfortably beats. There is no default on
-purpose: a policy that never settles hangs every caller of the operation it
-guards, and the framework has no basis for choosing that number for you.
-
-Past the deadline — and on a throw, and on a non-decision — the pipeline raises
-`DecisionPolicyError` naming the policy, with the trace so far. If you already
-catch that for a bad return value, you now catch two more cases with it.
-
-**2. `createDiagnosticJournal` moved.**
-
-```ts
-// before
-import { createDiagnosticJournal } from 'stitchkit/application'
-// after
-import { createDiagnosticJournal } from 'stitchkit/application/diagnostic-journal'
-```
-
-Only the factory moved. `DiagnosticJournalConfig`, every
-`DiagnosticJournal*Schema` and `readDiagnosticJournalLockDiagnosis` stay where
-they were.
-
-**If you restart resources**, nothing to change — but three things that did not
-work now do: a managed schedule can be restarted, a restarted keyspace accepts
-writes again, and a restarted managed server is actually shut down at exit. If
-you pass `managedServerResource` a server *instance*, a restart is now refused
-by name; pass a factory (`server: (context) => …`) to restart it.
-
-## Released migration: 0.77.0
-
-Two type renames, and only if you named them. Nothing runtime moved.
-
-```bash
-rg -n "EventDecision|EventUndecided" --glob '*.ts' --glob '*.tsx'
-```
-
-```ts
-// before
-import type { EventDecision, EventUndecided } from 'stitchkit/live'
-// after
-import type { PolicyDecision, UndecidedOutcome } from 'stitchkit/live'
-```
-
-The shapes are identical — `{ outcome: 'allow' } | { outcome: 'deny', reason } | { outcome: 'defer' }`
-and `'allow' | 'deny'`. If you only ever *return* decisions from listeners and never named the
-type, the search above finds nothing and there is nothing to do.
-
-They were renamed because `createDecisionPipeline` (new in this release) votes with exactly the
-same three outcomes, and two identical types under two names is the thing that makes a search for
-either one return half the truth.
-
-## Released migration: 0.76.0
-
-One change, and only if you hand `createWatchClient` a transport you wrote yourself.
-
-```bash
-rg -n "createWatchClient" --glob '*.ts'
-```
-
-If the `transport:` you pass is a bound realtime client — `bindRealtimeClient(...)` or
-`createRealtimeClient(...)` — there is nothing to do: it already carries
-`onConnectionChange`. If it is an object you assembled, add the fourth member:
-
-```ts
-onConnectionChange(listener: (connected: boolean, reason?: string) => void): () => void
-```
-
-It is required because the client recovers through it: on a drop it publishes
-`unavailable` to subscribers and forgets what was opened, and on a fresh
-connection it re-opens every key that still has a listener. Without it a watch
-stays "open" on the client after a server restart while the hub remembers
-nothing, and the face stops updating without saying so.
-
-## Released migration: 0.75.0
-
-Two mechanical renames and one option that has to move. Nothing about a passing
-request changes.
-
-### 1. A route group's `onRequest`
-
-```bash
-rg -n "hooks:\s*\{[^}]*onRequest" --glob '*.ts'
-```
-
-Any match **inside a `groups: [...]` entry** must move. The hook was accepted and
-never dispatched, so the behaviour you have today is "no hook"; the fix is to
-decide which one you meant:
-
-```ts
-// refuse before dispatch, for the whole server
-createServer({ groups, hooks: { onRequest: gate } });
-
-// gate this group once the endpoint is known
-groups: [{ pathPrefix: '/admin', services, hooks: { authorize: gate } }]
-```
-
-A group that still declares `onRequest` fails at startup with that message.
-
-### 2. The SQLite boundary type
-
-```bash
-rg -l "AgentRuntimeSqlite(Database|Statement|Value)" | xargs sed -i \
-  -e 's/AgentRuntimeSqliteDatabase/SqliteDatabase/g' \
-  -e 's/AgentRuntimeSqliteStatement/SqliteStatement/g' \
-  -e 's/AgentRuntimeSqliteValue/SqliteValue/g'
-```
-
-Type-only: the same three methods, the same structural compatibility with
-`bun:sqlite` and a `node:sqlite` wrapper, imported from the same entrypoints.
-`initializeAgentRuntimeSqlite` keeps its name — it really is the agent runtime's
-schema.
-
-### 3. Nothing else
-
-`stitchkit/live`, the watch hub, the keyspace and the trust fence are all
-additive. Adopt them when you want them; the guide is
-[Live data](./live.md).

package/llms/upgrading.txt

@@ -11,10 +11,10 @@ Contains: Guide: Upgrading, general  (docs/guide/upgrading.md)
 
 Load this slice, then every range slice between your installed version and the target:
 
-- 0.75.0 → 0.103.0: `llms/upgrading-0.75.0-0.103.0.txt`
-- 0.61.0 → 0.74.0: `llms/upgrading-0.61.0-0.74.0.txt`
-- 0.44.0 → 0.60.0: `llms/upgrading-0.44.0-0.60.0.txt`
-- 0.37.0 → 0.37.0: `llms/upgrading-0.37.0.txt`
+- 0.80.0 → 0.104.0: `llms/upgrading-0.80.0-0.104.0.txt`
+- 0.62.0 → 0.79.0: `llms/upgrading-0.62.0-0.79.0.txt`
+- 0.44.0 → 0.61.0: `llms/upgrading-0.44.0-0.61.0.txt`
+- 0.37.0 → 0.44.0: `llms/upgrading-0.37.0-0.44.0.txt`
 
 # Upgrading stitchkit