stitchkit 0.104.2 → 0.105.0

package/dist/index-s4evrmp5.js

@@ -1,98 +0,0 @@
-import {
-  publishAtomicFile,
-  publishAtomicFileSync
-} from "./index-8a9ksm91.js";
-
-// src/internal/atomic-file.ts
-import { randomBytes } from "node:crypto";
-import { closeSync, fchmodSync, fsyncSync, openSync, unlinkSync, writeSync } from "node:fs";
-import { open, unlink } from "node:fs/promises";
-import { basename, dirname, join } from "node:path";
-var DEFAULT_MODE = 384;
-function stagingPath(target) {
-  return join(dirname(target), `.${basename(target)}.${randomBytes(12).toString("hex")}.tmp`);
-}
-function bytesOf(data) {
-  return typeof data === "string" ? new TextEncoder().encode(data) : data;
-}
-async function writeFileAtomic2(target, data, options = {}) {
-  return writeAtomicFileData(target, data, options);
-}
-async function writeAtomicFileData(target, data, options, io = { open, unlink, publish: publishAtomicFile }) {
-  const mode = options.mode ?? DEFAULT_MODE;
-  const staged = stagingPath(target);
-  const handle = await io.open(staged, "wx", mode);
-  try {
-    let failed = false;
-    let failure;
-    try {
-      await handle.writeFile(bytesOf(data));
-      await handle.chmod(mode);
-      if (options.durability !== "none")
-        await handle.sync();
-    } catch (error) {
-      failed = true;
-      failure = error;
-    } finally {
-      try {
-        await handle.close();
-      } catch (error) {
-        if (!failed) {
-          failed = true;
-          failure = error;
-        }
-      }
-    }
-    if (failed)
-      throw failure;
-    await io.publish(staged, target, options.replace ?? true, options.durability === "directory");
-  } catch (error) {
-    await io.unlink(staged).catch(() => {
-      return;
-    });
-    throw error;
-  }
-}
-function writeFileAtomicSync2(target, data, options = {}) {
-  const mode = options.mode ?? DEFAULT_MODE;
-  const bytes = bytesOf(data);
-  const staged = stagingPath(target);
-  const handle = openSync(staged, "wx", mode);
-  try {
-    let failed = false;
-    let failure;
-    try {
-      for (let offset = 0;offset < bytes.byteLength; ) {
-        const written = writeSync(handle, bytes, offset, bytes.byteLength - offset);
-        if (written === 0)
-          throw new Error("zero-byte atomic-file write");
-        offset += written;
-      }
-      fchmodSync(handle, mode);
-      if (options.durability !== "none")
-        fsyncSync(handle);
-    } catch (error) {
-      failed = true;
-      failure = error;
-    } finally {
-      try {
-        closeSync(handle);
-      } catch (error) {
-        if (!failed) {
-          failed = true;
-          failure = error;
-        }
-      }
-    }
-    if (failed)
-      throw failure;
-    publishAtomicFileSync(staged, target, options.replace ?? true, options.durability === "directory");
-  } catch (error) {
-    try {
-      unlinkSync(staged);
-    } catch {}
-    throw error;
-  }
-}
-
-export { writeFileAtomic2, writeAtomicFileData, writeFileAtomicSync2 };

package/dist/index-ze1eph1k.js

@@ -1,20 +0,0 @@
-// src/tools/lifecycle.ts
-function composeToolLifecycle2(...hooks) {
-  return {
-    beforeHandle: async (ctx, endpoint) => {
-      for (const hook of hooks)
-        await hook?.beforeHandle?.(ctx, endpoint);
-    },
-    afterHandle: async (ctx, result, endpoint) => {
-      let current = result;
-      for (const hook of hooks) {
-        const transformed = await hook?.afterHandle?.(ctx, current, endpoint);
-        if (transformed !== undefined)
-          current = transformed;
-      }
-      return current;
-    }
-  };
-}
-
-export { composeToolLifecycle2 };

package/dist/tools/connections/error-projection.d.ts

@@ -1,4 +0,0 @@
-import { AppError } from '../../contract/errors.js';
-/** Only fixed diagnostic fields cross the tool boundary; the runner retains the raw cause. */
-export declare function connectionToolError(error: unknown): AppError | undefined;
-//# sourceMappingURL=error-projection.d.ts.map

package/dist/tools/connections/error-projection.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"error-projection.d.ts","sourceRoot":"","sources":["../../../src/tools/connections/error-projection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAA0C,MAAM,uBAAuB,CAAC;AAUzF,8FAA8F;AAC9F,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,CA0GxE"}

package/dist/tools/runtime-tool-execution.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-tool-execution.d.ts","sourceRoot":"","sources":["../../src/tools/runtime-tool-execution.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClF,OAAO,KAAK,EACV,iBAAiB,EACjB,uBAAuB,EACvB,cAAc,EACf,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAElE,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,MAAM,eAAe,CAAC,IAAI,SAAS,iBAAiB,GAAG,SAAS,IACpE,IAAI,SAAS,iBAAiB,CAAC,MAAM,SAAS,CAAC,GAC3C;IACE,QAAQ,CAAC,EAAE;SACR,OAAO,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;KAC9E,CAAC;CACH,GACD,OAAO,CAAC;AAEd,MAAM,MAAM,yBAAyB,CACnC,MAAM,SAAS,SAAS,EACxB,IAAI,SAAS,iBAAiB,GAAG,SAAS,GAAG,SAAS,IACpD,cAAc,GAAG;IACnB,MAAM,EAAE,SAAS,CAAC;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxB,IAAI,CAAC,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrC,OAAO,CAAC,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC;CAC1C,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;AAE1B,MAAM,MAAM,iBAAiB,CAAC,OAAO,SAAS,OAAO,GAAG,SAAS,IAAI,OAAO,SAAS,OAAO,GACxF,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GACjB,SAAS,CAAC;AAEd,+EAA+E;AAC/E,MAAM,MAAM,gCAAgC,CAC1C,QAAQ,SAAS,SAAS,EAC1B,MAAM,SAAS,SAAS,EACxB,IAAI,SAAS,iBAAiB,GAAG,SAAS,GAAG,SAAS,IACpD,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,QAAQ,GAAG,KAAK,CAAC,GAClD,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,KAAK,CAAC,GAAG;IACrD,MAAM,EAAE,SAAS,CAAC;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxB,GAAG,CAAC,EAAE,cAAc,CAAC;CACtB,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;AAE5B,MAAM,WAAW,yBAAyB,CACxC,MAAM,SAAS,SAAS,EACxB,IAAI,SAAS,iBAAiB,GAAG,SAAS,GAAG,SAAS;IAEtD,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,UAAU,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IACtC,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC,EAAE,CAAC,EAAE,cAAc,CAAC;IACpB,+DAA+D;IAC/D,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AAED,+FAA+F;AAC/F,MAAM,WAAW,8BAA8B,CAC7C,MAAM,SAAS,SAAS,EACxB,OAAO,SAAS,OAAO,EACvB,IAAI,SAAS,iBAAiB,GAAG,SAAS,GAAG,SAAS,CACtD,SAAQ,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC;IAC/C,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,CACP,OAAO,EAAE,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC,KAC7C,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,kCAAkC,CACjD,MAAM,SAAS,SAAS,EACxB,IAAI,SAAS,iBAAiB,GAAG,SAAS,GAAG,SAAS,CACtD,SAAQ,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC;IAC/C,MAAM,CAAC,EAAE,KAAK,CAAC;IACf,OAAO,EAAE,CAAC,OAAO,EAAE,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpF,OAAO,CAAC,EAAE,KAAK,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAC5B,CAAC,IAAI,CACH,8BAA8B,CAAC,SAAS,EAAE,OAAO,EAAE,iBAAiB,GAAG,SAAS,CAAC,EACjF,SAAS,CACV,GAAG;IACF,OAAO,EAAE,CACP,OAAO,EAAE,KAAK,KACX,UAAU,CACb,8BAA8B,CAC5B,SAAS,EACT,OAAO,EACP,iBAAiB,GAAG,SAAS,CAC9B,CAAC,SAAS,CAAC,CACb,CAAC;CACH,CAAC,GACF,CAAC,IAAI,CACH,kCAAkC,CAAC,SAAS,EAAE,iBAAiB,GAAG,SAAS,CAAC,EAC5E,SAAS,CACV,GAAG;IACF,OAAO,EAAE,CACP,OAAO,EAAE,KAAK,KACX,UAAU,CACb,kCAAkC,CAAC,SAAS,EAAE,iBAAiB,GAAG,SAAS,CAAC,CAAC,SAAS,CAAC,CACxF,CAAC;CACH,CAAC,CAAC"}

package/llms/agent-runtime-harness-tools.txt

@@ -1,25 +0,0 @@
-# stitchkit/agent-runtime/harness-tools — stitchkit docs slice
-
-> Generated from the `docs/` tree by `bun run gen:llms`. The index of all slices is
-> `llms.txt` in this package.
-
-Contains: API reference: `stitchkit/agent-runtime/harness-tools`  (docs/api/reference.md)
-
-Also read:
-- see `llms/agent-runtime.txt` for the Agent application runtime guide
-- see `llms/agent-runtime-harness.txt` for the Agent composition guide
-
-==============================================================================
-# API reference: `stitchkit/agent-runtime/harness-tools`  (docs/api/reference.md)
-==============================================================================
-
-## `stitchkit/agent-runtime/harness-tools`
-
-Optional evolving composition of the full `mountAgent` configuration with the runtime
-fence. Its runtime peer is `ai`; its full tool presenter declarations also require
-`@modelcontextprotocol/server`, as `stitchkit/tools` does. The base harness retains its
-AI-only peer boundary. Existing custom tool callbacks need no new import.
-
-| Export | Kind | Summary |
-|--------|------|---------|
-| `createAgentHarnessTools` / `AgentHarnessToolsConfig` | function / _type_ | async per-run full mount configuration (`services` plus all `AgentMountConfig` options); composes application lifecycle then runtime fence exactly once |

package/llms/upgrading-0.37.0-0.44.0.txt

@@ -1,444 +0,0 @@
-# Upgrading 0.37.0 → 0.44.0 — stitchkit docs slice
-
-> Generated from the `docs/` tree by `bun run gen:llms`. The index of all slices is
-> `llms.txt` in this package.
-
-Contains: Guide: Upgrading, 0.37.0 → 0.44.0  (docs/guide/upgrading.md)
-
-==============================================================================
-# Guide: Upgrading, 0.37.0 → 0.44.0  (docs/guide/upgrading.md)
-==============================================================================
-
-## Historical breaking migrations through 0.44.0
-
-HTTP observability now completes inside the framework handler instead of a
-nested fetch wrapper. Configure request and tool sinks explicitly:
-
-```ts
-// before
-const audit = createAuditHook({ write })
-createServer({
-  services,
-  wrapFetch: (handler) => wrapInRequestContext(audit.http(handler)),
-})
-mountAgent(services, { hooks: audit.toolCall })
-
-// after
-const observability = createObservability({
-  request: { write, includePayload: true },
-  tools: { write },
-})
-createServer({ services, observability: observability.request })
-mountAgent(services, { hooks: observability.toolCall })
-```
-
-Body capture changed from always-on for body methods to opt-in. Set
-`includePayload: true` only when the request sink needs the sanitized JSON body.
-There is no `createAuditHook` or `audit.http` compatibility path;
-`wrapInRequestContext` remains only for custom fetch pipelines.
-
-Tool introspection now accepts one object-shaped contract/runtime surface. Stop
-calling the internal contract collector or merging a locally converted runtime
-manifest:
-
-```ts
-// before
-buildToolManifest(services.flatMap((service) => collectTools(service, 'AGENT')))
-listToolNames(services)
-summarizeTransports(services)
-
-// after
-const surface = { services, runtimeTools }
-buildToolManifest({ ...surface, transport: 'AGENT' })
-listToolNames(surface)
-summarizeTransports(surface)
-```
-
-`ToolNameEntry` adds `kind: 'contract' | 'runtime'`. `TransportSummary` is now
-`{ contractServices, runtimeTools, totals, sources }`; replace `services` and
-`perService` reads with the explicit counts and mixed-source breakdown. There
-is no positional overload and no `buildRuntimeToolManifest`: Stitchkit owns the
-combined order, transport filtering, canonical presentation schema and
-cross-origin collision checks.
-
-`defineErrors` now uses one Zod-first definition object and returns constructors
-instead of positional throwers. Add explicit `throw`, move message/details/hint
-into one options object, and declare a details schema when that code carries
-structured context:
-
-```ts
-// before
-const { errors } = defineErrors({ QUOTA_EXCEEDED: 429 })
-errors.QUOTA_EXCEEDED('Try later', { retryAfterSeconds: 30 }, 'Wait')
-
-// after
-const { errors, definitions } = defineErrors({
-  QUOTA_EXCEEDED: {
-    status: 429,
-    details: z.object({ retryAfterSeconds: z.number().positive() }),
-  },
-})
-throw errors.QUOTA_EXCEEDED({
-  message: 'Try later',
-  details: { retryAfterSeconds: 30 },
-  hint: 'Wait',
-})
-```
-
-There is no positional overload. A code without `details` forbids them; use an
-optional object schema when the details object itself is optional. Read status
-and schemas from the frozen `definitions` registry instead of maintaining a
-parallel map.
-
-Managed MCP runtime tools are now declared as immutable data. Move protected
-registrar calls to `runtimeTools`; rename deliberate raw SDK registration to
-`rawTools`. There is no registrar alias:
-
-```ts
-// before — protected
-createMcpHandler({
-  services,
-  nativeTools: ({ registerTool }) => registerTool(preview),
-})
-
-// after — protected and prepared with the rest of the surface
-createMcpHandler({ services, runtimeTools: [preview] })
-
-// before — deliberate raw SDK opt-out
-nativeTools: ({ rawServer }, auth) => mountRaw(rawServer, auth)
-
-// after — still a deliberate raw SDK opt-out
-rawTools: (server, auth) => mountRaw(server, auth)
-```
-
-When identity selects from a bounded set, replace a repeatedly prepared
-`services(auth)` factory with a finite registry:
-
-```ts
-createMcpHandler({
-  surfaces: {
-    admin: { services: allServices, runtimeTools: [preview] },
-    member: { services: memberServices, runtimeTools: [preview] },
-  },
-  selectSurface: (auth) => auth.isAdmin ? 'admin' : 'member',
-})
-```
-
-Keep direct `services(auth)` / `runtimeTools(auth)` only for genuinely
-unbounded definitions; Stitchkit intentionally does not cache arbitrary auth
-values.
-
-Contract success bodies are now determined by the presence of `output`, not by
-the handler's runtime value. A nullable output returns JSON `null` with status
-`200`; `undefined` with a declared output and non-null data without an output
-schema are contract violations:
-
-```ts
-// nullable JSON data: 200 with body `null`
-session: {
-  method: 'GET', path: '/session', desc: 'Current session',
-  output: SessionSchema.nullable(),
-}
-
-// bodyless operation: 204 with no body
-logout: {
-  method: 'POST', path: '/logout', desc: 'End the session',
-}
-```
-
-Add an output schema to every handler that returns data. Omit `output` and
-return nothing for bodyless operations; runtime tools follow the same rule and
-type no-output handlers as `void`.
-
-`createToolInvoker` now separates immutable registry preparation from per-call
-runtime state. Move source/context/lifecycle/hooks/output-strip reporting from
-the factory config to the third invocation argument. Use `invokeOrThrow` when a
-nested operation should preserve the normalized `AppError` instead of returning
-a model-facing failure envelope:
-
-```ts
-// before
-const invoker = createToolInvoker(services, {
-  transport: 'AGENT', context: { identity }, lifecycle, hooks,
-})
-const result = await invoker.invoke(name, args)
-
-// after
-const invoker = createToolInvoker(services, { transport: 'AGENT' })
-const result = await invoker.invoke(name, args, {
-  context: { identity }, lifecycle, hooks,
-})
-const data = await invoker.invokeOrThrow(name, args, {
-  context: { identity }, lifecycle, hooks,
-})
-```
-
-There is no static runtime-config overload: request identity must not be retained
-by a reusable compiled registry.
-
-Entity cache handlers now require the cached list shape and CRUD policies. Move
-`listKey` under `list`, make detail keys event-aware, and state the list-item
-identity/projection explicitly:
-
-```ts
-// before
-createEntityCacheHandlers<Entity>({
-  getId,
-  listKey: ['entities'],
-  detailKey: (id) => ['entities', id],
-})
-
-// after
-createEntityCacheHandlers<Entity, EntityListItem>({
-  getId,
-  getListItemId: (item) => item.id,
-  toListItem: (entity) => ({ id: entity.id, name: entity.name }),
-  list: {
-    key: ['entities'],
-    shape: 'paginated',
-    createAt: 'start',
-    updateMissing: 'skip',
-  },
-  detailKey: (event) => ['entities', event.id],
-})
-```
-
-Choose `array`, `paginated`, `infinite-array` or `infinite-paginated` to match
-the actual cached data. A dynamic `list.key` / `detailKey` receives a
-discriminated event and can derive scoped keys from the created/updated entity
-or deleted payload. Add `compare` only when the backend has a canonical order;
-the framework does not guess it or mutate pagination metadata.
-
-Protected native MCP operations now use the transport-neutral runtime tool
-definition. Return the schema-owned value from the handler and move MCP content
-or metadata into `present.mcp`; `structuredContent` and `isError` are
-framework-owned:
-
-```ts
-// before
-registerTool({ input, output, handler: async () => ({
-  content: [{ type: 'image', data, mimeType: 'image/png' }],
-  structuredContent: { assetId },
-}) })
-
-// after
-const preview = defineRuntimeTool({
-  name: 'render_preview', description, identity, input, output,
-  handler: async () => ({ assetId, data }),
-  present: {
-    mcp: (result) => ({
-      content: [{ type: 'image', data: result.data, mimeType: 'image/png' }],
-    }),
-  },
-})
-runtimeTools: [preview]
-```
-
-The removed `NativeMcp*` types have no aliases. Use `RuntimeToolDefinition`,
-`RuntimeToolIdentity`, `RuntimeToolHandlerContext` and
-`RuntimeMcpPresentation`. The same definition can now be passed to
-`mountAgent(services, { runtimeTools: [preview] })`; add `present.agent` only
-when the model needs rich text/file content instead of the neutral JSON result.
-
-Trailing wildcards must be named consistently across the path and params schema:
-
-```ts
-// before
-path: '/app/:slug/*'
-params: z.object({ slug: z.string(), '*': z.string() })
-ctx.params['*']
-api.app({ slug: 'foo', '*': 'a/b' })
-
-// after
-path: '/app/:slug/*filePath'
-params: z.object({ slug: z.string(), filePath: z.string() })
-ctx.params.filePath
-api.app({ slug: 'foo', filePath: 'a/b' })
-```
-
-Bare wildcards have no compatibility alias; raw routes use the same named form.
-
-### Expected-401 matchers
-
-`HttpClientConfig.authEndpoints` is removed. Replace manual path prefixes with
-the operations whose 401 response is expected:
-
-```ts
-// before
-createHttpClient({ baseUrl, authEndpoints: ['/api/auth/'] })
-
-// after
-createHttpClient({
-  baseUrl,
-  suppressUnauthorizedFor: contractEndpointMatchers(authContract, ['login', 'verify']),
-})
-```
-
-There is no implicit `/auth/` suppression. Omit `suppressUnauthorizedFor` when
-every 401 should emit the global `unauthorized` event.
-
-## The 0.37 migration
-
-Tool presentation is no longer an executable Zod parser. Replace the removed
-flatten helpers with the JSON Schema compiler, and choose the explicit
-`MountableTool` surface when using the advanced collection API:
-
-```ts
-// before
-const flat = flattenUnionsDeep(zodSchema)
-mountable.schema
-
-// after
-const flat = flattenToolJsonSchema(
-  z.toJSONSchema(zodSchema, { target: 'draft-07', io: 'input' }),
-)
-mountable.presentationSchema // model/MCP/manifest JSON Schema
-mountable.argumentSchema     // executable CLI argument adapter only
-```
-
-Contract and native handlers keep their original Zod schemas; MCP and agent SDK
-adapters now forward raw arguments so defaults, coercions, refinements and
-transforms execute exactly once inside Stitchkit. There are no compatibility
-exports for `flattenDiscriminatedUnion`, `flattenUnionsDeep` or
-`MountableTool.schema`. → ADR 0050
-
-Tool-call hooks now take one options object. Migrate all three callbacks; there
-are no positional overloads:
-
-```ts
-// before
-beforeToolCall: (toolName, args, context, endpoint) => {}
-afterToolCall: (toolName, args, result, durationMs, context, endpoint, error) => {}
-onToolError: (toolName, error, context, endpoint) => {}
-
-// after
-beforeToolCall: ({ toolName, args, context, endpoint }) => {}
-afterToolCall: ({ toolName, args, result, durationMs, context, endpoint, error }) => {}
-onToolError: ({ toolName, error, context, endpoint }) => {}
-```
-
-### MCP schema validation
-
-The standalone validator now takes one object and live MCP configs carry the
-same rules under `schemaValidation`. Migrate every positional call and every
-`onIncompatibleSchema` field; there is no old-shape overload:
-
-```ts
-// before
-validateMcpSchemas(services, 'throw', logger, { requireTypedProperties: true })
-createMcpHandler({ services, onIncompatibleSchema: 'throw' })
-
-// after
-validateMcpSchemas({ services, policy: 'throw', logger, requireTypedProperties: true })
-createMcpHandler({ services, schemaValidation: { policy: 'throw' } })
-```
-
-Put `extend` and `flattenUnionInput` beside `services`, not inside
-`schemaValidation`. The handler applies the profile to the exact prepared schema
-it advertises. Add `requirePortableFormats: true` when every custom JSON Schema
-format must be rejected before a client sees it.
-
-Native MCP registration also changed shape in 0.37. Move protected tools to the
-framework registrar; keep an SDK-raw tool only by naming the opt-out:
-
-```ts
-// before
-nativeTools: (server, auth) => server.registerTool(name, config, handler)
-
-// after — lifecycle, hooks and schema policy apply
-nativeTools: ({ registerTool }, auth) => registerTool({
-  name, description, identity, input, output, handler,
-})
-
-// after — intentionally raw
-nativeTools: ({ rawServer }, auth) => rawServer.registerTool(name, config, handler)
-```
-
-If a tool hook annotated `endpoint` as `MethodDef`, remove that annotation or
-use `OperationIdentity`: native operations have service/action/scope/method but
-no HTTP path.
-
-### Node-facing server types
-
-`stitchkit/server` remains Bun-concrete: an explicitly annotated `RawRoute`
-still receives `BunServer`. `stitchkit/node` no longer drags Bun declarations
-into a Node project. Its raw routes default the host server to `unknown`, and
-its Socket.IO handle exposes only Node capabilities:
-
-```ts
-// before — Node entry still leaked Bun-only fields and ambient types
-const route: RawRoute = { handler: (_req, ctx) => ctx.server?.upgrade(...) }
-const socket = await createSocketIOServer(config)
-socket.websocket
-
-// after — name a custom embedding host only when one exists
-const route: RawRoute<MyHostServer> = {
-  handler: (_req, ctx) => useHost(ctx.server),
-}
-const socket = await createSocketIOServer(config)
-socket.io
-socket.attach(nodeHttpServer)
-```
-
-Node consumers can remove `@types/bun` unless another dependency independently
-requires it.
-
-### Managed server shutdown
-
-`createServer()` and `serveNode()` now return the same structural managed
-lifecycle. Replace every direct runtime stop and parallel Socket.IO close:
-
-```ts
-// before — split ownership
-const socket = await createSocketIOServer(config)
-const server = createServer({
-  services,
-  websocket: socket.websocket,
-  rawRoutes: [socket.route],
-})
-server.stop()
-await socket.io.close()
-
-// after — one owner and one total deadline
-const socket = await createSocketIOServer(config)
-const server = createServer({ services, socket })
-const result = await server.shutdown({ gracePeriodMs: 30_000 })
-```
-
-On Node, keep the same `socket` field and replace `handle.close()` with
-`handle.shutdown()`. Runtime-specific diagnostics move under `handle.runtime`;
-do not use it as a second shutdown path. Standalone CLI/tools that create a
-Socket.IO handle without an HTTP server call `await socket.close()`.
-
-If Bun Socket.IO shares the port with a raw lane, keep the explicit composition
-but let the server mount the Socket.IO route:
-
-```ts
-createServer({
-  services,
-  socket,
-  websocket: composeWebSocketHandlers([
-    webSocketLane({ match: isRaw, handlers: rawHandlers }),
-    socketIoLane(socket.websocket),
-  ]),
-  rawRoutes: [rawUpgradeRoute],
-})
-```
-
-Move native Bun `routes` entries to `rawRoutes`. Native routes run before the
-Fetch handler and therefore cannot participate in admission or drain. Wire
-`SIGTERM`/`SIGINT` in the application; the first signal starts `shutdown()`, and
-a later signal may abort the same controller. Close MCP, databases and queues
-after the server result—those resources remain application-owned.
-
-Move a handshake policy from the Node-only callback shape inside
-`serverOptions` to the runtime-neutral top-level policy. It receives a Web
-`Request`, may be async, and returns whether to admit the handshake:
-
-```ts
-// before
-serverOptions: { allowRequest: (request, done) => done(null, allowed(request)) }
-
-// after
-allowRequest: (request) => allowed(request)
-```