stitchkit 0.104.1 → 0.105.0

package/dist/files/native-packaging.d.ts

@@ -1,34 +1,99 @@
 import { z } from 'zod';
-declare const OptionsSchema: z.ZodObject<{
-    platform: z.ZodString;
+declare const ArchitectureSchema: z.ZodEnum<{
+    arm64: "arm64";
+    x64: "x64";
+}>;
+/** The platforms this package ships native addons for; any other name is refused by the schema. */
+declare const PlatformSchema: z.ZodEnum<{
+    darwin: "darwin";
+}>;
+declare const SingleOptionsSchema: z.ZodObject<{
+    platform: z.ZodEnum<{
+        darwin: "darwin";
+    }>;
+    entryPath: z.ZodString;
     architecture: z.ZodString;
     delivery: z.ZodEnum<{
         companion: "companion";
         embedded: "embedded";
     }>;
-    entryPath: z.ZodString;
     assetPath: z.ZodString;
 }, z.core.$strip>;
+declare const MultipleOptionsSchema: z.ZodObject<{
+    platform: z.ZodEnum<{
+        darwin: "darwin";
+    }>;
+    entryPath: z.ZodString;
+    architecture: z.ZodArray<z.ZodString> & z.ZodType<[string, ...string[]], string[], z.core.$ZodTypeInternals<[string, ...string[]], string[]>>;
+    delivery: z.ZodLiteral<"companion">;
+    assetPath: z.ZodRecord<z.ZodString, z.ZodString>;
+}, z.core.$strip>;
 declare const AssetSchema: z.ZodObject<{
-    sourcePath: z.ZodString;
     outputPath: z.ZodString;
+    size: z.ZodInt;
+    sha256: z.ZodString;
+    bytes: z.ZodCustom<Uint8Array<ArrayBufferLike>, Uint8Array<ArrayBufferLike>>;
+}, z.core.$strip>;
+declare const TargetAssetSchema: z.ZodObject<{
+    outputPath: z.ZodString;
+    size: z.ZodInt;
     sha256: z.ZodString;
+    bytes: z.ZodCustom<Uint8Array<ArrayBufferLike>, Uint8Array<ArrayBufferLike>>;
+    architecture: z.ZodEnum<{
+        arm64: "arm64";
+        x64: "x64";
+    }>;
 }, z.core.$strip>;
-declare const RefusalSchema: z.ZodObject<{
-    state: z.ZodEnum<{
-        missing: "missing";
-        unsupported: "unsupported";
+declare const RefusalSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    state: z.ZodLiteral<"unsupported">;
+    platform: z.ZodEnum<{
+        darwin: "darwin";
     }>;
-    platform: z.ZodString;
     architecture: z.ZodString;
-    code: z.ZodEnum<{
-        NATIVE_ASSET_MISSING: "NATIVE_ASSET_MISSING";
-        NATIVE_TARGET_UNSUPPORTED: "NATIVE_TARGET_UNSUPPORTED";
+    code: z.ZodLiteral<"NATIVE_TARGET_UNSUPPORTED">;
+}, z.core.$strip>, z.ZodObject<{
+    state: z.ZodLiteral<"missing">;
+    platform: z.ZodEnum<{
+        darwin: "darwin";
     }>;
-}, z.core.$strip>;
-export type NativePackagingOptions = z.input<typeof OptionsSchema>;
-export type NativePackagingAsset = z.infer<typeof AssetSchema>;
-/** Structural Bun plugin protocol: declarations need no Bun runtime or ambient types. */
+    architecture: z.ZodEnum<{
+        arm64: "arm64";
+        x64: "x64";
+    }>;
+    code: z.ZodLiteral<"NATIVE_ASSET_MISSING">;
+}, z.core.$strip>, z.ZodObject<{
+    state: z.ZodLiteral<"mismatch">;
+    platform: z.ZodEnum<{
+        darwin: "darwin";
+    }>;
+    architecture: z.ZodEnum<{
+        arm64: "arm64";
+        x64: "x64";
+    }>;
+    code: z.ZodLiteral<"NATIVE_ASSET_DIGEST_MISMATCH">;
+    expected: z.ZodObject<{
+        size: z.ZodInt;
+        sha256: z.ZodString;
+    }, z.core.$strip>;
+    actual: z.ZodObject<{
+        size: z.ZodInt;
+        sha256: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>], "state">;
+/**
+ * Input to `createNativePackaging`: platform, entry path, delivery and addon path per
+ * architecture; `Multiple` selects one target or a list of them.
+ */
+export type NativePackagingOptions<Multiple extends boolean = false> = Multiple extends true ? z.input<typeof MultipleOptionsSchema> : z.input<typeof SingleOptionsSchema>;
+/**
+ * One native addon to ship with the bundle: where it lands in the output, its `bytes` already
+ * checked against the `size` and `sha256` the package published, and those published values.
+ * Write `bytes` to `outputPath`; never read the addon from the installed package a second time.
+ */
+export type NativePackagingAsset<Multiple extends boolean = false> = Multiple extends true ? z.infer<typeof TargetAssetSchema> : z.infer<typeof AssetSchema>;
+/**
+ * Structural Bun plugin protocol: declarations need no Bun runtime or ambient types.
+ */
 export type NativePackagingPlugin = {
     name: string;
     setup: (build: {
@@ -46,6 +111,9 @@ export type NativePackagingPlugin = {
         }) => {
             contents: string;
             loader: 'js';
+        } | {
+            contents: Uint8Array;
+            loader: 'napi';
         } | undefined) => unknown;
         onResolve: (options: {
             filter: RegExp;
@@ -58,15 +126,30 @@ export type NativePackagingPlugin = {
         } | undefined) => unknown;
     }) => void;
 };
-export type NativePackagingResult = z.infer<typeof RefusalSchema> | {
+/**
+ * `ready` with the verified assets to write and the Bun plugin to add, or a refusal naming an
+ * unsupported architecture, a missing asset or an asset whose bytes differ from the published
+ * digest (`mismatch` carries the `expected` and `actual` size and SHA256); check `state` first.
+ */
+export type NativePackagingResult<Multiple extends boolean = false> = z.infer<typeof RefusalSchema> | {
     state: 'ready';
-    platform: 'darwin';
-    architecture: 'arm64' | 'x64';
+    platform: z.infer<typeof PlatformSchema>;
+    architecture: Multiple extends true ? z.infer<typeof ArchitectureSchema>[] : z.infer<typeof ArchitectureSchema>;
     packageVersion: string;
-    assets: NativePackagingAsset[];
+    assets: NativePackagingAsset<Multiple>[];
     plugin: NativePackagingPlugin;
 };
-/** Resolve this installed package's asset graph, without parsing downstream loader text. */
+/**
+ * Resolve this installed package's asset graph, without parsing downstream loader text.
+ * `platform` is `'darwin'`, the only platform with native addons; another name throws.
+ * Each selected addon is read and hashed once per call and checked against the size and
+ * SHA256 published in the package's `native-assets.json`; the first one that differs refuses
+ * with `NATIVE_ASSET_DIGEST_MISMATCH` and its `expected` and `actual` size and SHA256. Call it
+ * once per build and reuse the result: its `assets` carry the verified bytes to write and its
+ * plugin embeds those same bytes.
+ */
 export declare function createNativePackaging(options: NativePackagingOptions): NativePackagingResult;
+export declare function createNativePackaging(options: NativePackagingOptions<true>): NativePackagingResult<true>;
+export declare function createNativePackaging(options: NativePackagingOptions<boolean>): NativePackagingResult<boolean>;
 export {};
 //# sourceMappingURL=native-packaging.d.ts.map

package/dist/files/native-packaging.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"native-packaging.d.ts","sourceRoot":"","sources":["../../src/files/native-packaging.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAcxB,QAAA,MAAM,aAAa;;;;;;;;;iBAiBhB,CAAC;AACJ,QAAA,MAAM,WAAW;;;;iBAIf,CAAC;AACH,QAAA,MAAM,aAAa;;;;;;;;;;;iBAKjB,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AACnE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAE/D,yFAAyF;AACzF,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,CAAC,KAAK,EAAE;QACb,MAAM,EAAE;YACN,SAAS,CAAC,EAAE,OAAO,CAAC;YACpB,MAAM,CAAC,EAAE,MAAM,GAAG;gBAAE,KAAK,CAAC,EAAE,MAAM,CAAA;aAAE,CAAC;YACrC,WAAW,EAAE,MAAM,EAAE,CAAC;SACvB,CAAC;QACF,MAAM,EAAE,CACN,OAAO,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,EAC3B,QAAQ,EAAE,CAAC,IAAI,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,KAAK;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,IAAI,CAAA;SAAE,GAAG,SAAS,KACjF,OAAO,CAAC;QACb,SAAS,EAAE,CACT,OAAO,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,EAC3B,QAAQ,EAAE,CAAC,IAAI,EAAE;YACf,IAAI,EAAE,MAAM,CAAC;YACb,QAAQ,EAAE,MAAM,CAAC;SAClB,KAAK;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,OAAO,CAAA;SAAE,GAAG,SAAS,KAClD,OAAO,CAAC;KACd,KAAK,IAAI,CAAC;CACZ,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAC7B,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,GAC7B;IACE,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,OAAO,GAAG,KAAK,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC/B,MAAM,EAAE,qBAAqB,CAAC;CAC/B,CAAC;AAaN,4FAA4F;AAC5F,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,GAAG,qBAAqB,CAoF5F"}
+{"version":3,"file":"native-packaging.d.ts","sourceRoot":"","sources":["../../src/files/native-packaging.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB,QAAA,MAAM,kBAAkB;;;EAA2B,CAAC;AACpD,mGAAmG;AACnG,QAAA,MAAM,cAAc;;EAAqB,CAAC;AAQ1C,QAAA,MAAM,mBAAmB;;;;;;;;;;;iBAKvB,CAAC;AACH,QAAA,MAAM,qBAAqB;;;;;;;;iBAOzB,CAAC;AAsCH,QAAA,MAAM,WAAW;;;;;iBAKf,CAAC;AACH,QAAA,MAAM,iBAAiB;;;;;;;;;iBAA2D,CAAC;AAKnF,QAAA,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAuBjB,CAAC;AAEH;;;GAGG;AACH,MAAM,MAAM,sBAAsB,CAAC,QAAQ,SAAS,OAAO,GAAG,KAAK,IAAI,QAAQ,SAAS,IAAI,GACxF,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,GACrC,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AACxC;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,CAAC,QAAQ,SAAS,OAAO,GAAG,KAAK,IAAI,QAAQ,SAAS,IAAI,GACtF,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,GACjC,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEhC;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,CAAC,KAAK,EAAE;QACb,MAAM,EAAE;YACN,SAAS,CAAC,EAAE,OAAO,CAAC;YACpB,MAAM,CAAC,EAAE,MAAM,GAAG;gBAAE,KAAK,CAAC,EAAE,MAAM,CAAA;aAAE,CAAC;YACrC,WAAW,EAAE,MAAM,EAAE,CAAC;SACvB,CAAC;QACF,MAAM,EAAE,CACN,OAAO,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,EAC3B,QAAQ,EAAE,CAAC,IAAI,EAAE;YACf,IAAI,EAAE,MAAM,CAAC;SACd,KACG;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,IAAI,CAAA;SAAE,GAClC;YAAE,QAAQ,EAAE,UAAU,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,GACxC,SAAS,KACV,OAAO,CAAC;QACb,SAAS,EAAE,CACT,OAAO,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,EAC3B,QAAQ,EAAE,CAAC,IAAI,EAAE;YACf,IAAI,EAAE,MAAM,CAAC;YACb,QAAQ,EAAE,MAAM,CAAC;SAClB,KAAK;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,OAAO,CAAA;SAAE,GAAG,SAAS,KAClD,OAAO,CAAC;KACd,KAAK,IAAI,CAAC;CACZ,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,CAAC,QAAQ,SAAS,OAAO,GAAG,KAAK,IAC9D,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,GAC7B;IACE,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;IACzC,YAAY,EAAE,QAAQ,SAAS,IAAI,GAC/B,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,EAAE,GACpC,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;IACvC,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC;IACzC,MAAM,EAAE,qBAAqB,CAAC;CAC/B,CAAC;AAsFN;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,GAAG,qBAAqB,CAAC;AAC9F,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,sBAAsB,CAAC,IAAI,CAAC,GACpC,qBAAqB,CAAC,IAAI,CAAC,CAAC;AAC/B,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,sBAAsB,CAAC,OAAO,CAAC,GACvC,qBAAqB,CAAC,OAAO,CAAC,CAAC"}

package/dist/{index-r5hsgkz5.js → index-0gs4ymfj.js}

@@ -9,8 +9,8 @@ import {
   AgentSnapshotSchema2
 } from "./index-8kzct1d6.js";
 import {
-  serializeCanonicalJson
-} from "./index-zsvzhjtk.js";
+  canonicalZodJson
+} from "./index-5w6t91ze.js";
 
 // src/durability/events.ts
 import { z } from "zod";
@@ -225,7 +225,10 @@ function agentStoreEventDraft(input) {
   };
 }
 function canonicalAgentJson2(value) {
-  return serializeCanonicalJson(z3.json().parse(value));
+  return canonicalZodJson(value, {
+    maxNodes: Number.MAX_SAFE_INTEGER,
+    maxBytes: Number.MAX_SAFE_INTEGER
+  });
 }
 var AgentConversationArchiveSchema2 = z3.object({
   format: z3.literal("stitchkit.agent-conversation"),

package/dist/{index-zax7resm.js → index-0gxvns6s.js}

@@ -45,19 +45,7 @@ var ViewFileOutputSchema2 = z2.object({
   content: z2.array(McpMediaContentSchema2),
   errors: z2.array(ViewFileErrorSchema2)
 });
-function isTextList(value) {
-  if (!value.trimStart().startsWith("["))
-    return false;
-  try {
-    return Array.isArray(JSON.parse(value));
-  } catch {
-    return false;
-  }
-}
-var MediaPathSchema = z2.string().refine((value) => !isTextList(value), {
-  message: "paths is a list written as text — pass an array of paths or one path"
-});
 var ViewFileInputSchema2 = z2.object({
-  paths: z2.union([MediaPathSchema, z2.array(MediaPathSchema).max(MAX_VIEW_FILES)]).describe("One media URL or file path, or an array of them. Pass the array itself, not JSON written as text.")
+  paths: z2.union([z2.string(), z2.array(z2.string()).max(MAX_VIEW_FILES)]).describe("One media URL or file path, or an array of them. Pass the array itself, not JSON written as text.")
 });
 export { AsyncOperationCancelResultSchema2, createAsyncOperationSnapshotSchema2, McpAnnotationsSchema2, McpMediaContentSchema2, ViewFileErrorSchema2, ViewFileOutputSchema2, ViewFileInputSchema2 };

package/dist/index-0s4xebbg.js

@@ -0,0 +1,8 @@
+// src/internal/positive-integer.ts
+function assertPositiveSafeInteger(name, value, errorType = TypeError) {
+  if (value !== undefined && (!Number.isSafeInteger(value) || value <= 0)) {
+    throw new errorType(`${name} must be a positive safe integer, received ${value}`);
+  }
+}
+
+export { assertPositiveSafeInteger };

package/dist/{index-r4r70zmh.js → index-12zsej7b.js}

@@ -1,6 +1,6 @@
 import {
   AppError2
-} from "./index-x928baz2.js";
+} from "./index-j9gxbztg.js";
 import {
   ShutdownOptionsSchema2
 } from "./index-q0th8q0z.js";
@@ -40,7 +40,10 @@ var ApplicationRestartResultSchema2 = z.object({
 
 class ApplicationAdmissionError2 extends AppError2 {
   constructor() {
-    super("APPLICATION_NOT_ACCEPTING", "Application is not accepting new operations", 503);
+    super("APPLICATION_NOT_ACCEPTING", {
+      message: "Application is not accepting new operations",
+      status: 503
+    });
     this.name = "ApplicationAdmissionError";
   }
 }

package/dist/{index-kemm0ej5.js → index-1pwwan01.js}

@@ -1,14 +1,7 @@
 import {
-  RequestCancellationError,
-  createRequestCancellation,
-  resolveClientFetch,
-  responseTraceId,
-  uploadProgressRoute,
-  withUploadProgress,
   ApiError2,
-  refuseLocally,
-  parseApiErrorBody
-} from "./index-ywppsaby.js";
+  refuseLocally
+} from "./index-kfjkb396.js";
 import {
   parseTrailingWildcard
 } from "./index-m38ej7e5.js";
@@ -16,9 +9,21 @@ import {
   DEFAULT_CONTRACT_STREAM_FRAME_BYTES2,
   ContractStreamFrameSchema2
 } from "./index-h2fhjqy7.js";
+import {
+  RequestCancellationError,
+  createRequestCancellation,
+  resolveClientFetch,
+  responseTraceId,
+  uploadProgressRoute,
+  withUploadProgress,
+  parseApiErrorBody
+} from "./index-n1nszyk0.js";
 import {
   inputIsQuery
 } from "./index-xhzq2qvj.js";
+import {
+  assertPositiveSafeInteger
+} from "./index-0s4xebbg.js";
 import {
   typedEntries,
   isRecord,
@@ -29,9 +34,7 @@ import {
 var DEFAULT_STREAM_LINE_BYTES = 1024 * 1024;
 function lineLimit(value) {
   const resolved = value ?? DEFAULT_STREAM_LINE_BYTES;
-  if (!Number.isSafeInteger(resolved) || resolved <= 0) {
-    throw new TypeError("maxLineBytes must be a positive safe integer");
-  }
+  assertPositiveSafeInteger("maxLineBytes", resolved);
   return resolved;
 }
 function joinBytes(left, right) {
@@ -369,15 +372,27 @@ async function* readContractStream(response, descriptor, abort) {
       if (descriptor.framing !== "item") {
         const parsedFrame = ContractStreamFrameSchema2.safeParse(candidate);
         if (!parsedFrame.success) {
-          throw new ApiError2("STREAM_PROTOCOL_ERROR", 0, undefined, "Stream frame did not match the protocol envelope");
+          throw new ApiError2("STREAM_PROTOCOL_ERROR", {
+            status: 0,
+            message: "Stream frame did not match the protocol envelope"
+          });
         }
         const frame = parsedFrame.data;
         if (frame.type === "error") {
-          throw new ApiError2(frame.error.code, 0, frame.error.details, frame.error.message, frame.error.hint, undefined, undefined, frame.error.retryable);
+          throw new ApiError2(frame.error.code, {
+            status: 0,
+            details: frame.error.details,
+            message: frame.error.message,
+            hint: frame.error.hint,
+            retryable: frame.error.retryable
+          });
         }
         if (frame.type === "end") {
           if (!terminalSeen) {
-            throw new ApiError2("STREAM_TERMINAL_MISSING", 0, undefined, "Stream completed before its declared terminal item");
+            throw new ApiError2("STREAM_TERMINAL_MISSING", {
+              status: 0,
+              message: "Stream completed before its declared terminal item"
+            });
           }
           ended = true;
           return;
@@ -386,7 +401,10 @@ async function* readContractStream(response, descriptor, abort) {
       }
       const parsedItem = descriptor.item.safeParse(candidate);
       if (!parsedItem.success) {
-        throw new ApiError2("STREAM_ITEM_INVALID", 0, undefined, "Stream item did not match its contract");
+        throw new ApiError2("STREAM_ITEM_INVALID", {
+          status: 0,
+          message: "Stream item did not match its contract"
+        });
       }
       const item = parsedItem.data;
       const terminal = descriptor.terminal?.safeParse(item).success ?? false;
@@ -404,10 +422,16 @@ async function* readContractStream(response, descriptor, abort) {
     if (descriptor.framing === "item") {
       if (terminalSeen)
         return;
-      throw new ApiError2("STREAM_TERMINAL_MISSING", 0, undefined, "Stream completed before its declared terminal item");
+      throw new ApiError2("STREAM_TERMINAL_MISSING", {
+        status: 0,
+        message: "Stream completed before its declared terminal item"
+      });
     }
     if (!ended) {
-      throw new ApiError2("STREAM_TRUNCATED", 0, undefined, "Stream ended without its protocol terminal frame");
+      throw new ApiError2("STREAM_TRUNCATED", {
+        status: 0,
+        message: "Stream ended without its protocol terminal frame"
+      });
     }
   } finally {
     abort();
@@ -579,12 +603,20 @@ function createFetchExecutor(endpoint, prefix, config, contractConfig) {
       });
     } catch (error) {
       if (error instanceof RequestCancellationError) {
-        throw new ApiError2(error.cause === "caller" ? "REQUEST_ABORTED" : "REQUEST_TIMEOUT", 0, undefined, error.message);
+        throw new ApiError2(error.cause === "caller" ? "REQUEST_ABORTED" : "REQUEST_TIMEOUT", {
+          status: 0,
+          message: error.message
+        });
       }
       if (ApiError2.is(error))
         throw error;
       const message = error instanceof Error ? error.message : undefined;
-      throw new ApiError2("UNKNOWN_ERROR", 0, message ? { message } : undefined, message, undefined, undefined, { cause: error });
+      throw new ApiError2("UNKNOWN_ERROR", {
+        status: 0,
+        details: message ? { message } : undefined,
+        message,
+        cause: error
+      });
     }
   };
 }
@@ -593,9 +625,20 @@ async function throwForErrorResponse(res, config, fallbackBody) {
   config.onError?.(res.status, body);
   const parsed = parseApiErrorBody(body);
   if (parsed) {
-    throw new ApiError2(parsed.code, res.status, parsed.details, parsed.message, parsed.hint, responseTraceId(res), undefined, parsed.retryable);
+    throw new ApiError2(parsed.code, {
+      status: res.status,
+      details: parsed.details,
+      message: parsed.message,
+      hint: parsed.hint,
+      traceId: responseTraceId(res),
+      retryable: parsed.retryable
+    });
   }
-  throw new ApiError2("HTTP_ERROR", res.status, { body }, undefined, undefined, responseTraceId(res));
+  throw new ApiError2("HTTP_ERROR", {
+    status: res.status,
+    details: { body },
+    traceId: responseTraceId(res)
+  });
 }
 
 // src/browser/client.ts

package/dist/{index-vgkbcnkc.js → index-299sm5tr.js}

@@ -1,6 +1,6 @@
 import {
   createBoundedSinkManager
-} from "./index-h97tqqp1.js";
+} from "./index-qaet40b2.js";
 import {
   AgentRuntimeEventSchema2
 } from "./index-mnkk1ffz.js";

package/dist/{index-2vnh05w4.js → index-2k91mewf.js}

@@ -3,27 +3,22 @@ import {
   STITCH_ERROR_STATUS2,
   isRetryableStatus2,
   isStitchErrorCode2
-} from "./index-x928baz2.js";
+} from "./index-j9gxbztg.js";
 import {
   normalizeError2,
   validateDeclaredOutput
-} from "./index-kb8styz3.js";
+} from "./index-rpzewktb.js";
 import {
   coerceJsonArgs2
-} from "./index-9pw0a51a.js";
+} from "./index-6yxhe58g.js";
 import {
   applyToolViewDefaults,
   projectToolView,
   objectShapeKeys
-} from "./index-77nxk6ay.js";
+} from "./index-r393tnfp.js";
 import {
-  ConnectionAuthorizationRequiredError2,
-  ConnectionRequestError2,
-  ConnectionUrlError2,
-  ConnectionBudgetExceededError2,
-  ConnectionTimeoutError2,
-  ConnectionResponseTooLargeError2
-} from "./index-1a6jtnd9.js";
+  projectedToolError
+} from "./index-556g5hsh.js";
 import {
   runWithRequestContext2,
   getRequestContext2
@@ -39,6 +34,7 @@ import {
 } from "./index-9jfdm5tg.js";
 
 // src/tools/execute-args.ts
+import { z } from "zod";
 function parseToolCallArguments(method, callArgs, {
   coerceJson = false,
   toolSurface = false
@@ -55,8 +51,22 @@ function parseToolCallArguments(method, callArgs, {
       inputArgs[key] = value;
   }
   if (coerceJson) {
-    paramArgs = coerceJsonArgs2(paramArgs, method.paramsSchema);
-    inputArgs = coerceJsonArgs2(inputArgs, method.inputSchema);
+    try {
+      paramArgs = coerceJsonArgs2(paramArgs, method.paramsSchema);
+    } catch (err) {
+      if (err instanceof z.ZodError) {
+        return { ok: false, message: `Invalid params: ${formatZodError2(err)}` };
+      }
+      throw err;
+    }
+    try {
+      inputArgs = coerceJsonArgs2(inputArgs, method.inputSchema);
+    } catch (err) {
+      if (err instanceof z.ZodError) {
+        return { ok: false, message: `Invalid input: ${formatZodError2(err)}` };
+      }
+      throw err;
+    }
   }
   if (toolSurface)
     inputArgs = applyToolViewDefaults(inputArgs, method.toolView?.defaults);
@@ -89,69 +99,10 @@ function parseToolCallArguments(method, callArgs, {
   return { ok: true, params, input };
 }
 
-// src/tools/connections/error-projection.ts
-function connectionToolError(error) {
-  if (error instanceof ConnectionTimeoutError2) {
-    const message = "Connection deadline exceeded";
-    return new AppError2("CONNECTION_TIMEOUT", message, STITCH_ERROR_STATUS2.CONNECTION_TIMEOUT, {
-      message,
-      reason: "deadline-exceeded",
-      operation: error.operation,
-      phase: error.phase,
-      timeoutMs: error.timeoutMs,
-      observedReadBytes: error.observedReadBytes
-    }, "Check the connection deadline and verify any write outcome before retrying.", undefined, false);
-  }
-  if (error instanceof ConnectionResponseTooLargeError2) {
-    const message = "Connection response exceeds the byte limit";
-    return new AppError2("CONNECTION_RESPONSE_TOO_LARGE", message, STITCH_ERROR_STATUS2.CONNECTION_RESPONSE_TOO_LARGE, {
-      message,
-      reason: "response-too-large",
-      operation: error.operation,
-      phase: error.phase,
-      maxResponseBytes: error.maxBytes,
-      observedReadBytes: error.observedReadBytes
-    }, "Narrow the response or increase the limit for this operation phase.", undefined, false);
-  }
-  if (error instanceof ConnectionAuthorizationRequiredError2) {
-    const message = "Authorization required";
-    return new AppError2("UNAUTHORIZED", message, STITCH_ERROR_STATUS2.UNAUTHORIZED, {
-      message,
-      reason: "authorization-required",
-      operation: error.operation,
-      phase: error.phase
-    }, "Obtain a new credential before retrying.", undefined, false);
-  }
-  if (error instanceof ConnectionRequestError2) {
-    const forbidden = error.status === 403;
-    const code = forbidden ? "FORBIDDEN" : "CONNECTION_REQUEST_FAILED";
-    const message = forbidden ? "Connection access denied" : "Connection request failed";
-    return new AppError2(code, message, STITCH_ERROR_STATUS2[code], {
-      message,
-      reason: forbidden ? "permission-denied" : "upstream-request-failed",
-      operation: error.operation,
-      phase: error.phase,
-      upstreamStatus: error.status
-    }, forbidden ? "Check the credential permissions." : "Check the upstream service and verify any write outcome before retrying.", undefined, !forbidden && isRetryableStatus2(error.status));
-  }
-  if (error instanceof ConnectionUrlError2) {
-    return new AppError2("BAD_REQUEST", "Connection URL refused", STITCH_ERROR_STATUS2.BAD_REQUEST, { message: "Connection URL refused", reason: "url-rejected" }, "Check the connection URL and its allowed hosts.", undefined, false);
-  }
-  if (error instanceof ConnectionBudgetExceededError2) {
-    return new AppError2("BAD_REQUEST", "Connection mount budget exceeded", STITCH_ERROR_STATUS2.BAD_REQUEST, {
-      message: "Connection mount budget exceeded",
-      reason: "mount-budget-exceeded",
-      limit: error.limit,
-      actual: error.actual
-    }, "Narrow the mounted tool surface or increase its mount budget.", undefined, false);
-  }
-  return;
-}
-
 // src/tools/execute-result.ts
 var normalizedToolErrors = new WeakMap;
 function toolResultFromError(err) {
-  const appErr = normalizeError2(connectionToolError(err) ?? err, { logUnexpected: false });
+  const appErr = normalizeError2(projectedToolError(err) ?? err, { logUnexpected: false });
   const result = {
     ok: false,
     code: appErr.code,
@@ -169,7 +120,13 @@ function toolErrorFromResult(result) {
   const details = isRecord(result.details) ? result.details : undefined;
   const message = typeof details?.message === "string" ? details.message : result.code;
   const status = isStitchErrorCode2(result.code) ? STITCH_ERROR_STATUS2[result.code] : 500;
-  return new AppError2(result.code, message, status, details, result.hint, undefined, result.retryable);
+  return new AppError2(result.code, {
+    message,
+    status,
+    details,
+    hint: result.hint,
+    retryable: result.retryable
+  });
 }
 function toolCauseFromResult(result) {
   return normalizedToolErrors.get(result)?.cause;

package/dist/{index-269zqj8m.js → index-2rc6jd9n.js}

@@ -1,27 +1,42 @@
 import {
   withExclusiveLock2
-} from "./index-g95fk660.js";
+} from "./index-4vsby8n8.js";
+import {
+  readBoundedFile
+} from "./index-m616f0yz.js";
 import {
   writeAtomicFileData
-} from "./index-s4evrmp5.js";
+} from "./index-ef8gdaq0.js";
 import {
   publishAtomicFile
-} from "./index-8a9ksm91.js";
+} from "./index-b56nnscm.js";
+import {
+  assertPositiveSafeInteger
+} from "./index-0s4xebbg.js";
 
 // src/application/file-state-store.ts
-import { mkdir, open, readFile, unlink } from "node:fs/promises";
+import { mkdir, open, unlink } from "node:fs/promises";
 import { dirname } from "node:path";
+var NATIVE_IO = { write: writeAtomicFileData, lock: withExclusiveLock2 };
+var DEFAULT_MAX_BYTES = 64 * 1024 * 1024;
+var encode = (state) => `${JSON.stringify(state)}
+`;
 var missing = (error) => error instanceof Error && ("code" in error) && error.code === "ENOENT";
 function createFileStateStore2(path, options) {
+  return createFileStateStoreOn(path, options, NATIVE_IO);
+}
+function createFileStateStoreOn(path, options, io) {
   if ("staleLockMs" in options || "retryMs" in options)
     throw new TypeError("File state store lock age/retry options are unsupported");
   const lockTimeoutMs = options.lockTimeoutMs ?? 1e4;
   if (!Number.isSafeInteger(lockTimeoutMs) || lockTimeoutMs < 0)
     throw new TypeError("lockTimeoutMs must be a nonnegative safe integer");
+  const maxBytes = options.maxBytes ?? DEFAULT_MAX_BYTES;
+  assertPositiveSafeInteger("maxBytes", maxBytes);
   const parseFile = async () => {
     let source;
     try {
-      source = await readFile(path, "utf8");
+      source = new TextDecoder().decode((await readBoundedFile(path, maxBytes)).bytes);
     } catch (error) {
       if (missing(error))
         return null;
@@ -40,7 +55,7 @@ function createFileStateStore2(path, options) {
     read: parseFile,
     async update(transition) {
       await mkdir(dirname(path), { recursive: true });
-      return withExclusiveLock2(`${path}.lock`, async (lock) => {
+      return io.lock(`${path}.lock`, async (lock) => {
         let active = true;
         const context = {
           async assertHeld() {
@@ -50,19 +65,20 @@ function createFileStateStore2(path, options) {
           }
         };
         try {
-          await context.assertHeld();
           const current = await parseFile();
+          const before = current === null ? null : encode(current);
           await context.assertHeld();
           const next = await transition(current, context);
-          await context.assertHeld();
           const state = options.schema.parse(next.state);
-          await writeAtomicFileData(path, `${JSON.stringify(state)}
-`, { durability: "directory" }, {
+          const text = encode(state);
+          if (text === before)
+            return next.result;
+          await io.write(path, text, { durability: "directory" }, {
             open,
             unlink,
-            async publish(staged, target, replace, directorySync) {
+            async publish(staged, target, publication) {
               await context.assertHeld();
-              await publishAtomicFile(staged, target, replace, directorySync);
+              await publishAtomicFile(staged, target, publication);
             }
           });
           return next.result;

package/dist/{index-wh0ecvyk.js → index-37asdw3a.js}

@@ -1,6 +1,6 @@
 import {
   unauthorized2
-} from "./index-x928baz2.js";
+} from "./index-j9gxbztg.js";
 import {
   deriveCodeChallenge2
 } from "./index-ap3gqe56.js";