stitchkit 0.104.1 → 0.105.0

package/dist/entrypoints/agent-runtime/realtime.js

@@ -1,36 +1,73 @@
-import"../../index-x928baz2.js";
-import"../../index-43p08g7t.js";
+import"../../index-j9gxbztg.js";
+import"../../index-pzb63z66.js";
 import"../../index-4s0fep5q.js";
 import"../../index-814xpr6d.js";
 import"../../index-8kzct1d6.js";
 import"../../index-mnkk1ffz.js";
-import"../../index-n5yqxd3d.js";
+import"../../index-b0w7rbpt.js";
 import {
   agentControlRealtimeContract2
-} from "../../index-20yvtn9a.js";
-import"../../index-h97tqqp1.js";
+} from "../../index-yt7gyg5x.js";
+import"../../index-qaet40b2.js";
 import {
   createAgentHarnessControlServer2
-} from "../../index-jn9g8xdt.js";
+} from "../../index-hjvje0pf.js";
+import"../../index-299sm5tr.js";
 import {
   bindRealtimeServer2
-} from "../../index-5z6jn897.js";
-import"../../index-vgkbcnkc.js";
+} from "../../index-z23rfxhj.js";
+import {
+  withSignalDeadline
+} from "../../index-9tqbxv5p.js";
+import {
+  raceAbort
+} from "../../index-b0kddvzw.js";
+import {
+  MAX_TIMER_MS
+} from "../../index-eemvahkc.js";
+import {
+  assertPositiveSafeInteger
+} from "../../index-0s4xebbg.js";
 
 // src/agent-runtime/harness-realtime.ts
+async function askAuthorizationHook(input) {
+  const { config, identity, request, source, timeoutMs, report } = input;
+  const settled = new AbortController;
+  try {
+    return await withSignalDeadline(timeoutMs, undefined, () => new Error("Agent authorization timed out"), (deadline) => {
+      const signal = AbortSignal.any([deadline, settled.signal]);
+      return raceAbort(Promise.resolve().then(() => config.authorize({ identity, request, source, signal })), signal);
+    });
+  } catch (error) {
+    report(error);
+    return null;
+  } finally {
+    settled.abort();
+  }
+}
 function bindAgentHarnessRealtime(harness, handle, config) {
   const control = createAgentHarnessControlServer2(harness, config);
   const realtime = bindRealtimeServer2(agentControlRealtimeContract2, handle);
   const cleanups = new Set;
+  const sockets = new Set;
   const maxPending = config.maxPendingRequests ?? 32;
   const authTimeout = config.authorizationTimeoutMs ?? 1e4;
-  for (const [name, value] of Object.entries({ maxPending, authTimeout })) {
-    if (!Number.isSafeInteger(value) || value < 1)
-      throw new TypeError(`${name} must be a positive safe integer`);
+  assertPositiveSafeInteger("maxPendingRequests", maxPending);
+  assertPositiveSafeInteger("authorizationTimeoutMs", authTimeout);
+  if (authTimeout > MAX_TIMER_MS) {
+    throw new RangeError("authorizationTimeoutMs exceeds the timer range");
   }
   const unsubscribe = realtime.onConnection(({ raw, events }) => {
     let closed = false;
+    const grants = {
+      identity: raw.data,
+      granted: new Set,
+      revocations: new Map,
+      refused: new Set
+    };
+    sockets.add(grants);
     const pending = new Set;
+    const deciding = new Map;
     const report = (error) => {
       try {
         if (config.onError)
@@ -44,42 +81,64 @@ function bindAgentHarnessRealtime(harness, handle, config) {
         });
       }
     };
-    const authorize = async (request) => {
-      let timer;
-      const abort = new AbortController;
-      try {
-        return await Promise.race([
-          Promise.resolve().then(() => config.authorize({ identity: raw.data, request, signal: abort.signal })),
-          new Promise((_resolve, reject) => {
-            timer = setTimeout(() => reject(new Error("Agent authorization timed out")), authTimeout);
-          })
-        ]);
-      } catch (error) {
-        report(error);
-        return null;
-      } finally {
-        abort.abort();
-        if (timer !== undefined)
-          clearTimeout(timer);
+    const authorize = async (request, source = "request") => {
+      const startedAt = grants.revocations.get(request.conversationId) ?? 0;
+      let allowed = await askAuthorizationHook({
+        config,
+        identity: raw.data,
+        request,
+        source,
+        timeoutMs: authTimeout,
+        report
+      });
+      if (allowed && (grants.revocations.get(request.conversationId) ?? 0) !== startedAt) {
+        allowed = null;
       }
+      if (allowed && request.operation !== "detach") {
+        grants.granted.add(request.conversationId);
+        if (request.operation === "attach")
+          grants.refused.delete(request.conversationId);
+      } else
+        grants.granted.delete(request.conversationId);
+      return allowed;
     };
     const connection = control.connect({
       id: raw.id,
       async deliver(delivery) {
-        const allowed = await authorize({
-          schemaVersion: 1,
-          requestId: crypto.randomUUID(),
-          operation: "snapshot",
-          conversationId: delivery.event.conversationId
-        });
-        if (!allowed) {
-          await connection.request({
-            schemaVersion: 1,
-            requestId: crypto.randomUUID(),
-            operation: "detach",
-            conversationId: delivery.event.conversationId
-          });
+        const { conversationId } = delivery.event;
+        if (grants.refused.has(conversationId))
           return;
+        if (!grants.granted.has(conversationId)) {
+          let decision = deciding.get(conversationId);
+          if (!decision) {
+            decision = authorize({
+              schemaVersion: 1,
+              requestId: crypto.randomUUID(),
+              operation: "snapshot",
+              conversationId
+            }, "delivery").finally(() => deciding.delete(conversationId));
+            deciding.set(conversationId, decision);
+          }
+          const allowed = await decision;
+          if (!allowed) {
+            if (grants.refused.has(conversationId))
+              return;
+            grants.refused.add(conversationId);
+            await connection.request({
+              schemaVersion: 1,
+              requestId: crypto.randomUUID(),
+              operation: "detach",
+              conversationId
+            });
+            if (!closed) {
+              events.emit("agent:delivery", {
+                schemaVersion: 1,
+                type: "access-denied",
+                conversationId
+              });
+            }
+            return;
+          }
         }
         if (!closed)
           events.emit("agent:delivery", delivery);
@@ -97,6 +156,7 @@ function bindAgentHarnessRealtime(harness, handle, config) {
         error: { code, message }
       });
       if (request.operation === "detach") {
+        grants.granted.delete(request.conversationId);
         for (const entry of pending)
           if (entry.conversationId === request.conversationId)
             entry.cancelled = true;
@@ -112,21 +172,17 @@ function bindAgentHarnessRealtime(harness, handle, config) {
         const allowed = await authorize(request);
         if (entry.cancelled)
           return fail("REQUEST_CANCELLED", "Agent request was detached");
-        if (!allowed || closed) {
-          if (!allowed)
-            await connection.request({
-              schemaVersion: 1,
-              requestId: crypto.randomUUID(),
-              operation: "detach",
-              conversationId: request.conversationId
-            });
-          return {
+        if (!allowed) {
+          await connection.request({
             schemaVersion: 1,
-            requestId: request.requestId,
-            outcome: "error",
-            error: { code: "ACCESS_DENIED", message: "Agent access denied" }
-          };
+            requestId: crypto.randomUUID(),
+            operation: "detach",
+            conversationId: request.conversationId
+          });
+          return fail("FORBIDDEN", "Agent access denied");
         }
+        if (closed)
+          return fail("CONNECTION_CLOSED", "Connection is closed");
         return connection.request(request.operation === "submit" || request.operation === "respond-approval" ? { ...request, context: allowed.context } : request);
       };
       execute().then(ack).catch(report).finally(() => {
@@ -137,6 +193,7 @@ function bindAgentHarnessRealtime(harness, handle, config) {
       if (closed)
         return;
       closed = true;
+      sockets.delete(grants);
       offRequest();
       raw.off("disconnect", close);
       connection.close();
@@ -146,6 +203,14 @@ function bindAgentHarnessRealtime(harness, handle, config) {
     cleanups.add(close);
   });
   return {
+    revoke(conversationId, matches) {
+      for (const socket of sockets) {
+        if (matches && !matches(socket.identity))
+          continue;
+        socket.granted.delete(conversationId);
+        socket.revocations.set(conversationId, (socket.revocations.get(conversationId) ?? 0) + 1);
+      }
+    },
     close() {
       unsubscribe();
       for (const close of cleanups)

package/dist/entrypoints/agent-runtime/sandbox.js

@@ -2,23 +2,29 @@ import {
   probeAgentProcessSandbox2,
   missingSandboxRestrictions2,
   codingRefusal
-} from "../../index-6d9xaxw1.js";
-import"../../index-x928baz2.js";
+} from "../../index-8ks9b85e.js";
+import"../../index-j9gxbztg.js";
 import"../../index-ct75c3at.js";
-import"../../index-77nxk6ay.js";
-import"../../index-kb8styz3.js";
+import"../../index-r393tnfp.js";
+import"../../index-rpzewktb.js";
 import {
   createAgentCodingTools2
-} from "../../index-ptn0g0gj.js";
+} from "../../index-ma963wz7.js";
 import"../../index-v5ee8ath.js";
+import"../../index-cq59agna.js";
 import {
+  COMMAND_CLEANUP_TIMEOUT_MS,
   NativeCommandError2,
   spawnOwnedCommand,
   nativeCommandOwner,
+  terminateOwnedGroup,
   startNativeCommand
-} from "../../index-f330qqyg.js";
+} from "../../index-g2vfg7ak.js";
 import"../../index-gxm9rc97.js";
-import"../../index-cvda079a.js";
+import {
+  MAX_TIMER_MS
+} from "../../index-eemvahkc.js";
+import"../../index-yvfk3y36.js";
 
 // src/agent-runtime/sandbox-bubblewrap.ts
 import { mkdir as mkdir2, mkdtemp, realpath, rm as rm2 } from "node:fs/promises";
@@ -65,7 +71,7 @@ var SandboxCommandSchema = z.object({
   args: z.array(z.string()).optional(),
   cwd: z.string().optional(),
   environment: z.record(z.string(), z.string()).optional(),
-  timeoutMs: z.number().int().positive().max(2147483647).optional(),
+  timeoutMs: z.number().int().positive().max(MAX_TIMER_MS).optional(),
   maxOutputBytes: z.number().int().positive().optional()
 }).strict();
 
@@ -521,7 +527,7 @@ function spawnSandboxProcess(executable, args, limits, options = {}, onSpawn) {
     capture: true,
     envPolicy: "declared-only",
     env: {},
-    killGraceMs: 0,
+    stop: { target: "group", graceMs: 0 },
     ...options.stdin !== undefined ? {
       stdin: typeof options.stdin === "string" ? new TextEncoder().encode(options.stdin) : options.stdin,
       maxStdinBytes: Math.max(1, typeof options.stdin === "string" ? Buffer.byteLength(options.stdin) : options.stdin.byteLength)
@@ -550,14 +556,14 @@ function sandboxProcessOwner(assertActive, maximum) {
     if (children.size >= maximum)
       throw new SandboxError("SANDBOX_BUSY", "Sandbox command concurrency limit reached");
   };
-  const terminate = (child) => {
-    const owner = nativeCommandOwner(child) ?? startNativeCommand({ executable: "host-owned-command", signal: new AbortController().signal }, undefined, { launch: () => child, group: process.platform !== "win32", force: true });
-    return owner.terminate();
-  };
+  const terminate = (child, closeEvent) => nativeCommandOwner(child)?.terminate() ?? terminateOwnedGroup(child, closeEvent, COMMAND_CLEANUP_TIMEOUT_MS);
   const track = (child) => {
+    const closeEvent = new Promise((resolve) => {
+      child.once("close", () => resolve());
+    });
     const settleDirect = () => {
       if (!nativeCommandOwner(child))
-        terminate(child).catch(() => {
+        terminate(child, closeEvent).catch(() => {
           return;
         });
     };
@@ -582,7 +588,7 @@ function sandboxProcessOwner(assertActive, maximum) {
     closed.catch(() => {
       return;
     });
-    children.set(child, closed);
+    children.set(child, { closed, closeEvent });
   };
   return {
     admit,
@@ -605,8 +611,8 @@ function sandboxProcessOwner(assertActive, maximum) {
     },
     async stop() {
       const pending = [...children];
-      await Promise.all(pending.map(([child]) => terminate(child)));
-      await Promise.all(pending.map(([, closed]) => closed));
+      await Promise.all(pending.map(([child, { closeEvent }]) => terminate(child, closeEvent)));
+      await Promise.all(pending.map(([, { closed }]) => closed));
     }
   };
 }

package/dist/entrypoints/agent-runtime/sqlite/bun.js

@@ -1,11 +1,12 @@
-import"../../../index-r5hsgkz5.js";
+import"../../../index-0gs4ymfj.js";
 import"../../../index-8kzct1d6.js";
-import"../../../index-ssmd41kh.js";
+import"../../../index-d2h99n7d.js";
 import {
   initializeAgentRuntimeSqlite2,
   createSqliteAgentRuntimeStore2
-} from "../../../index-0ndk4555.js";
+} from "../../../index-c0hffcmj.js";
 import"../../../index-kqnd6a85.js";
+import"../../../index-5w6t91ze.js";
 
 // src/agent-runtime/sqlite-bun.ts
 import { Database } from "bun:sqlite";

package/dist/entrypoints/agent-runtime/sqlite/node.js

@@ -1,11 +1,12 @@
-import"../../../index-r5hsgkz5.js";
+import"../../../index-0gs4ymfj.js";
 import"../../../index-8kzct1d6.js";
-import"../../../index-ssmd41kh.js";
+import"../../../index-d2h99n7d.js";
 import {
   initializeAgentRuntimeSqlite2,
   createSqliteAgentRuntimeStore2
-} from "../../../index-0ndk4555.js";
+} from "../../../index-c0hffcmj.js";
 import"../../../index-kqnd6a85.js";
+import"../../../index-5w6t91ze.js";
 
 // src/agent-runtime/sqlite-node.ts
 import { DatabaseSync } from "node:sqlite";

package/dist/entrypoints/agent-runtime/testing.js

@@ -7,11 +7,15 @@ import {
   decodeAgentConversationArchive2,
   createToolChronology,
   advanceToolChronology
-} from "../../index-r5hsgkz5.js";
-import"../../index-ssmd41kh.js";
+} from "../../index-0gs4ymfj.js";
+import"../../index-5w6t91ze.js";
+import"../../index-d2h99n7d.js";
 import {
   createMemoryAgentRuntimeStore2
-} from "../../index-adhgd4pe.js";
+} from "../../index-5p55xreg.js";
+import {
+  assertPositiveSafeInteger
+} from "../../index-0s4xebbg.js";
 
 // src/agent-runtime/fault-bench.ts
 import { createServer } from "node:http";
@@ -1093,9 +1097,7 @@ async function archiveScenario(store, conversationId) {
 }
 // src/agent-runtime/testing.ts
 function createAgentRaceBarrier(timeoutMs = 5000) {
-  if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1) {
-    throw new TypeError("Agent race barrier timeoutMs must be a positive safe integer");
-  }
+  assertPositiveSafeInteger("Agent race barrier timeoutMs", timeoutMs);
   const reached = Promise.withResolvers();
   const released = Promise.withResolvers();
   let announced = false;

package/dist/entrypoints/agent-runtime.js

@@ -47,7 +47,7 @@ import {
   AgentHistoryMutationSchema2,
   ACTIVE_AGENT_RUN_STATES2,
   createAgentRuntimeStore2
-} from "../index-ssmd41kh.js";
+} from "../index-d2h99n7d.js";
 import {
   AgentStoreEventKindSchema2,
   AgentStoreEventEnvelopeSchema2,
@@ -79,7 +79,8 @@ import {
   decodeAgentConversationArchive2,
   isAssistantHistoryEvidence2,
   isCompleteAgentHistoryTurn
-} from "../index-r5hsgkz5.js";
+} from "../index-0gs4ymfj.js";
+import"../index-5w6t91ze.js";
 import {
   AgentRuntimeConflictError2,
   normalizeSdkUsage,
@@ -110,30 +111,39 @@ import {
   agentGoalStateSlot2,
   agentTodoStateSlot2,
   createAgentRuntime2
-} from "../index-fk18k56k.js";
+} from "../index-gr5g3xfw.js";
 import {
   AgentConversationSummarySchema2,
   AgentConversationPageSchema2,
   AgentConversationMessagePageSchema2
 } from "../index-kqnd6a85.js";
-import"../index-nggfa2yn.js";
-import"../index-x928baz2.js";
-import"../index-kb8styz3.js";
+import {
+  DURABILITY_STEP_EVENT_KIND2,
+  StepResultDecodeError2,
+  StepResultNotSerializableError2,
+  StepAbortedError2,
+  ParkRecordDecodeError2,
+  ParkAbortedError2
+} from "../index-c17xcx4k.js";
+import"../index-j9gxbztg.js";
+import"../index-rpzewktb.js";
 import {
   createTraceContext2,
   childSpan2
 } from "../index-yex7eg1v.js";
-import"../index-9pw0a51a.js";
+import"../index-6yxhe58g.js";
 import"../index-ct75c3at.js";
-import"../index-77nxk6ay.js";
-import"../index-2vnh05w4.js";
-import"../index-2hyavjjj.js";
+import"../index-r393tnfp.js";
+import"../index-2k91mewf.js";
+import"../index-556g5hsh.js";
+import"../index-wbhdzxar.js";
 import {
-  mountAgent2
-} from "../index-t1sr4aks.js";
+  mountAgent2,
+  buildToolManifest2
+} from "../index-qaqbdm7s.js";
 import {
   createBoundedSinkManager
-} from "../index-h97tqqp1.js";
+} from "../index-qaet40b2.js";
 import {
   AgentAdmissionEventSchema2,
   AgentTransientDeltaEventSchema2,
@@ -168,14 +178,6 @@ import {
   defineModelRegistry2,
   validateAgentModelSnapshot2
 } from "../index-nx6eazt0.js";
-import {
-  DURABILITY_STEP_EVENT_KIND2,
-  StepResultDecodeError2,
-  StepResultNotSerializableError2,
-  StepAbortedError2,
-  ParkRecordDecodeError2,
-  ParkAbortedError2
-} from "../index-pptyv13k.js";
 import {
   AgentSandboxRestrictionSchema2,
   AgentSandboxGradeSchema2,
@@ -183,21 +185,24 @@ import {
   missingSandboxRestrictions2,
   recordAgentSandboxProbe2,
   refuseUnknownSpillReference
-} from "../index-6d9xaxw1.js";
+} from "../index-8ks9b85e.js";
 import {
   createMemoryAgentRuntimeStore2
-} from "../index-adhgd4pe.js";
+} from "../index-5p55xreg.js";
 import {
   createAgentRuntimeEventSink2
-} from "../index-vgkbcnkc.js";
+} from "../index-299sm5tr.js";
 import {
-  buildToolManifest2
-} from "../index-a3wma1hk.js";
-import"../index-a0zzh8ak.js";
+  MAX_TIMER_MS
+} from "../index-eemvahkc.js";
+import {
+  assertPositiveSafeInteger
+} from "../index-0s4xebbg.js";
+import"../index-pz3y6b6g.js";
 import {
   defineRuntimeTool2,
   executableAgentRuntimeTools
-} from "../index-cvda079a.js";
+} from "../index-yvfk3y36.js";
 import"../index-7n68nmc6.js";
 
 // src/agent-runtime/child-tools.ts
@@ -952,13 +957,9 @@ function mutationSnapshot(result, fallback, attempts) {
   return { outcome: result.outcome, snapshot: fallback, attempts };
 }
 function structuredCompaction(config) {
-  if (!Number.isSafeInteger(config.keepRecentTurns) || config.keepRecentTurns < 1) {
-    throw new TypeError("keepRecentTurns must be a positive safe integer");
-  }
+  assertPositiveSafeInteger("keepRecentTurns", config.keepRecentTurns);
   const maxAttempts = config.maxAttempts ?? 1;
-  if (!Number.isSafeInteger(maxAttempts) || maxAttempts < 1) {
-    throw new TypeError("maxAttempts must be a positive safe integer");
-  }
+  assertPositiveSafeInteger("maxAttempts", maxAttempts);
   return async (input) => {
     let lastSnapshot = await input.store.loadSnapshot(input.conversationId);
     for (let attempt = 1;attempt <= maxAttempts; attempt += 1) {
@@ -2066,9 +2067,7 @@ function newSchedule(request, observedAt) {
   const kind = request.at !== undefined ? "at" : request.afterMs !== undefined ? "after" : "every";
   const intervalMs = request.everyMs;
   const delay = request.afterMs ?? request.everyMs;
-  if (delay !== undefined && (!Number.isSafeInteger(delay) || delay < 1)) {
-    throw new TypeError("Schedule delay must be a positive safe integer");
-  }
+  assertPositiveSafeInteger("Schedule delay", delay);
   const nextAt = request.at ? new Date(z10.iso.datetime({ offset: true }).parse(request.at)).toISOString() : new Date(observedAt.getTime() + (delay ?? 0)).toISOString();
   const schedule = AgentScheduleSchema.parse({
     id: randomUUID2(),
@@ -2333,7 +2332,7 @@ function createAgentScheduleService(input) {
     timer = setTimer(() => {
       timer = undefined;
       tick();
-    }, Math.min(Math.max(0, dueAt - now().getTime()), 2147483647));
+    }, Math.min(Math.max(0, dueAt - now().getTime()), MAX_TIMER_MS));
   };
   const runTick = async () => {
     if (lifecycle.signal.aborted || now().getTime() < recoveryAt)