stitchkit 0.103.9 → 0.103.11

package/CHANGELOG.md

@@ -15,6 +15,27 @@ additive**; the first breaking change landed in 0.10.0. Grep the file for
 
 ## [Unreleased]
 
+## [0.103.11] - 2026-10-02
+
+### Added
+
+- `stitchkit/process`: native command limit errors expose a typed `reason` (`deadline` or `output-budget`) independent of their message; existing codes, causes, cancellation and cleanup guarantees are preserved.
+
+### Fixed
+
+- `stitchkit/files`: cancellation after acquiring an exclusive lock refuses the callback and releases ownership. Lock and reclaim-guard records use bounded descriptor reads and refuse FIFO, nonregular, linked, oversized or changing records.
+- `stitchkit/process`: synchronous native launch failures settle external resources once before rejecting, with bounded cleanup and the original syscall cause.
+- `stitchkit/agent-runtime`: coding commands share the native execution owner while retaining forced descendant cleanup, structural sandbox launchers, bounded artifacts and UTF-8 previews.
+- Local gate evidence is saved only for stable inputs, including content changed and restored during a run. PostgreSQL fingerprint probes have finite budgets and distinguish URI connection overrides; unknown external inputs cannot authorize heavy memo reuse. Heavy concurrency accounts for visible cgroup memory limits.
+
+## [0.103.10] - 2026-10-01
+
+### Added
+
+- `stitchkit/process`: `onLeaderSettled` observes launcher exit before inherited-pipe drain and settles resource scopes once on terminal failure; callbacks have bounded cancellation and preserve initial causes. Public process identity observation/probing preserves unavailable evidence and its cause from the existing Linux/Darwin owner.
+- `stitchkit/files`: `ownerlessGraceMs: null` explicitly refuses age-based reclaim of unknown locks and guards; exact requested lock permissions survive restrictive umask, and failed descriptor setup cannot remove a replacement inode.
+- Document and qualify neutral library bundling from public imports and published declarations with Zod as its only runtime peer; full-kernel install remains a build-time choice.
+
 ## [0.103.9] - 2026-10-01
 
 ### Added

package/dist/agent-runtime/coding-shell-process.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coding-shell-process.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-shell-process.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,qBAAqB,EAAqB,MAAM,wBAAwB,CAAC;AAEvF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAuCrD,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAC1C,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAC/C,aAAa,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,KAAK,CAAC,EAAE,MAAM,UAAU,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;CACrE;;;;;;;;;;;;;;;GAsKA"}
+{"version":3,"file":"coding-shell-process.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-shell-process.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,qBAAqB,EAAqB,MAAM,wBAAwB,CAAC;AAEvF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAuCrD,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAC1C,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAC/C,aAAa,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,KAAK,CAAC,EAAE,MAAM,UAAU,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;CACrE;;;;;;;;;;;;;;;GAkKA"}

package/dist/agent-runtime/sandbox-process-owner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-process-owner.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/sandbox-process-owner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,8BAA8B,EAAS,MAAM,oBAAoB,CAAC;AAChF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAGrD,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM;;mBAOrD,8BAA8B;;iBAerC,UAAU,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;;EA0B7D"}
+{"version":3,"file":"sandbox-process-owner.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/sandbox-process-owner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,8BAA8B,EAAS,MAAM,oBAAoB,CAAC;AAIhF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAGrD,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM;;mBAOrD,8BAA8B;;iBA6BrC,UAAU,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;;EAkC7D"}

package/dist/entrypoints/agent-runtime/coding-tools.js

@@ -7,7 +7,8 @@ import {
   AgentCodingToolAuthorizationSchema2,
   AgentCodingToolPathAuthorizationSchema2,
   createAgentCodingTools2
-} from "../../index-a4ajxwmb.js";
+} from "../../index-g4jxe7ve.js";
+import"../../index-32jkwkdm.js";
 import"../../index-ahvsksw5.js";
 import"../../index-tgzhq07n.js";
 export {

package/dist/entrypoints/agent-runtime/sandbox.js

@@ -9,11 +9,12 @@ import"../../index-x87j7csh.js";
 import"../../index-b2bz0kdm.js";
 import {
   createAgentCodingTools2
-} from "../../index-a4ajxwmb.js";
+} from "../../index-g4jxe7ve.js";
 import {
   NativeCommandError2,
+  nativeCommandOwner,
   startNativeCommand
-} from "../../index-eeqmg7qm.js";
+} from "../../index-32jkwkdm.js";
 import"../../index-tgzhq07n.js";
 
 // src/agent-runtime/sandbox-bubblewrap.ts
@@ -548,12 +549,25 @@ function sandboxProcessOwner(assertActive, maximum) {
       throw new SandboxError("SANDBOX_BUSY", "Sandbox command concurrency limit reached");
   };
   const track = (child) => {
-    const closed = new Promise((resolve) => {
+    const closed = new Promise((resolve, reject) => {
       child.once("close", () => {
-        children.delete(child);
-        resolve();
+        const settled = nativeCommandOwner(child)?.result ?? Promise.resolve();
+        settled.then(() => {
+          children.delete(child);
+          resolve();
+        }, (error) => {
+          if (error instanceof NativeCommandError2 && error.code === "COMMAND_CLEANUP")
+            reject(error);
+          else {
+            children.delete(child);
+            resolve();
+          }
+        });
       });
     });
+    closed.catch(() => {
+      return;
+    });
     children.set(child, closed);
   };
   return {
@@ -576,16 +590,16 @@ function sandboxProcessOwner(assertActive, maximum) {
     },
     async stop() {
       const pending = [...children];
-      for (const [child] of pending) {
-        if (child.pid === undefined)
-          continue;
-        try {
-          process.kill(-child.pid, "SIGKILL");
-        } catch (error) {
-          if (!(error instanceof Error && ("code" in error) && error.code === "ESRCH"))
-            throw error;
+      await Promise.all(pending.map(([child]) => {
+        let owner = nativeCommandOwner(child);
+        if (!owner) {
+          const adopted = startNativeCommand({ executable: "host-owned-command", signal: new AbortController().signal }, undefined, { launch: () => child, group: process.platform !== "win32", force: true });
+          owner = nativeCommandOwner(child);
+          if (!owner)
+            return adopted.stop();
         }
-      }
+        return owner.terminate();
+      }));
       await Promise.all(pending.map(([, closed]) => closed));
     }
   };

package/dist/entrypoints/application/diagnostic-journal.js

@@ -16,7 +16,8 @@ import {
 } from "../../index-w0eqdhyd.js";
 import {
   attemptExclusiveLock
-} from "../../index-7kxw1awn.js";
+} from "../../index-ttf0y7b8.js";
+import"../../index-nybn2err.js";
 import {
   isRecord
 } from "../../index-9jfdm5tg.js";

package/dist/entrypoints/files.js

@@ -11,7 +11,8 @@ import {
 } from "../index-n53mswt3.js";
 import {
   attemptExclusiveLock
-} from "../index-7kxw1awn.js";
+} from "../index-ttf0y7b8.js";
+import"../index-nybn2err.js";
 import {
   writeFileAtomic2,
   writeFileAtomicSync2
@@ -300,7 +301,10 @@ function pause(ms, signal) {
 async function withExclusiveLock(path, run, options = {}) {
   const label = options.label ?? path;
   const timeoutMs = nonNegative("timeoutMs", options.timeoutMs, DEFAULT_TIMEOUT_MS);
-  const ownerlessGraceMs = nonNegative("ownerlessGraceMs", options.ownerlessGraceMs, DEFAULT_OWNERLESS_GRACE_MS);
+  const ownerlessGraceMs = options.ownerlessGraceMs === null ? null : nonNegative("ownerlessGraceMs", options.ownerlessGraceMs, DEFAULT_OWNERLESS_GRACE_MS);
+  const mode = options.mode ?? 384;
+  if (!Number.isInteger(mode) || mode < 0 || mode > 511)
+    throw new RangeError("[stitchkit] withExclusiveLock: mode must be permission bits from 0000 to 0777");
   const { signal } = options;
   const deadline = performance.now() + timeoutMs;
   let delay = FIRST_RETRY_MS;
@@ -309,8 +313,9 @@ async function withExclusiveLock(path, run, options = {}) {
       throw new ExclusiveLockError("LOCK_ABORTED", label, null, `[stitchkit] waiting for the lock on "${label}" was cancelled`, { cause: signal.reason });
     }
     const attempt = await attemptExclusiveLock(path, {
-      mode: options.mode ?? 384,
+      mode,
       reclaim: true,
+      signal,
       ownerlessGraceMs,
       ...options.machineIdentity !== undefined && {
         machineIdentity: options.machineIdentity
@@ -320,6 +325,9 @@ async function withExclusiveLock(path, run, options = {}) {
       const { held } = attempt;
       let result;
       try {
+        if (signal?.aborted) {
+          throw new ExclusiveLockError("LOCK_ABORTED", label, null, `[stitchkit] waiting for the lock on "${label}" was cancelled`, { cause: signal.reason });
+        }
         result = await run({ path: held.path, owner: held.owner, reclaimed: held.reclaimed });
       } catch (error) {
         await held.release().catch(() => {
@@ -330,10 +338,12 @@ async function withExclusiveLock(path, run, options = {}) {
       await held.release();
       return result;
     }
+    if (signal?.aborted)
+      continue;
     const remaining = deadline - performance.now();
     if (remaining <= 0) {
       const holder = attempt.diagnosis?.owner ?? null;
-      throw new ExclusiveLockError("LOCK_TIMEOUT", label, holder, `[stitchkit] the lock on "${label}" is held by ${describeHolder(holder)}${describeEvidence(attempt.diagnosis)}; gave up after ${timeoutMs} ms`, { cause: attempt.error });
+      throw new ExclusiveLockError("LOCK_TIMEOUT", label, holder, `[stitchkit] the lock on "${label}" is held by ${describeHolder(holder)}${describeEvidence(attempt.diagnosis)}; gave up after ${timeoutMs} ms`, { cause: attempt.diagnosis?.cause ?? attempt.error });
     }
     await pause(Math.min(delay * (0.5 + Math.random() / 2), remaining), signal);
     delay = Math.min(delay * 2, MAX_RETRY_MS);

package/dist/entrypoints/process.d.ts

@@ -1,4 +1,5 @@
 /** POSIX Node/Bun finite native commands, independent of the agent runtime. */
+export { observeProcessInstance, type ProcessInstance, type ProcessInstanceObservation, ProcessInstanceSchema, type ProcessOwnerEvidence, probeProcessOwner, } from '../internal/process-instance.js';
 export { runNativeCommand } from '../process/command.js';
-export { NativeCommandError, type NativeCommandOptions, type NativeCommandResult, } from '../process/contract.js';
+export { NativeCommandError, type NativeCommandOptions, type NativeCommandResult, type NativeCommandSettlement, } from '../process/contract.js';
 //# sourceMappingURL=process.d.ts.map

package/dist/entrypoints/process.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"process.d.ts","sourceRoot":"","sources":["../../src/entrypoints/process.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EACL,kBAAkB,EAClB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"process.d.ts","sourceRoot":"","sources":["../../src/entrypoints/process.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAE/E,OAAO,EACL,sBAAsB,EACtB,KAAK,eAAe,EACpB,KAAK,0BAA0B,EAC/B,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,iBAAiB,GAClB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EACL,kBAAkB,EAClB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,GAC7B,MAAM,qBAAqB,CAAC"}

package/dist/entrypoints/process.js

@@ -1,13 +1,20 @@
+import {
+  ProcessInstanceSchema2,
+  observeProcessInstance2,
+  probeProcessOwner2
+} from "../index-nybn2err.js";
 import {
   NativeCommandError2,
   startNativeCommand
-} from "../index-eeqmg7qm.js";
-
+} from "../index-32jkwkdm.js";
 // src/process/command.ts
 function runNativeCommand(input) {
   return startNativeCommand(input).result;
 }
 export {
   NativeCommandError2 as NativeCommandError,
+  ProcessInstanceSchema2 as ProcessInstanceSchema,
+  observeProcessInstance2 as observeProcessInstance,
+  probeProcessOwner2 as probeProcessOwner,
   runNativeCommand
 };