stitchkit 0.104.2 → 0.105.1

package/dist/{index-fm1c1a08.js → index-m6w6jtda.js}

@@ -30,6 +30,14 @@ function jsonStringSize(text, budget) {
 
 // src/internal/json-data.ts
 function isJsonData(value, limits, snapshot) {
+  return jsonDataRefusal(value, limits, snapshot) === undefined;
+}
+function jsonDataRefusal(value, limits, snapshot) {
+  let refusal;
+  const refuse = (reason) => {
+    refusal ??= reason;
+    return false;
+  };
   const ancestors = new Set;
   let nodes = 0;
   let bytes = 0;
@@ -38,12 +46,14 @@ function isJsonData(value, limits, snapshot) {
     if (byteLimit === undefined)
       return true;
     bytes += amount;
-    return bytes <= byteLimit;
+    return bytes <= byteLimit || refuse("bytes");
   };
   const chargeText = (text) => byteLimit === undefined || charge(jsonStringSize(text, byteLimit - bytes));
   const visit = (item, depth, target, key) => {
-    if (++nodes > limits.maxNodes || depth > limits.maxDepth)
-      return false;
+    if (++nodes > limits.maxNodes)
+      return refuse("nodes");
+    if (depth > limits.maxDepth)
+      return refuse("depth");
     let captured = item;
     if (item === null) {
       if (!charge(4))
@@ -55,36 +65,43 @@ function isJsonData(value, limits, snapshot) {
       if (!charge(item ? 4 : 5))
         return false;
     } else if (typeof item === "number") {
-      if (!Number.isFinite(item) || Object.is(item, -0))
-        return false;
+      if (!Number.isFinite(item))
+        return refuse("not-json");
+      if (Object.is(item, -0)) {
+        if (!limits.zodJson)
+          return refuse("negative-zero");
+        captured = 0;
+      }
       if (byteLimit !== undefined && !charge(String(item).length))
         return false;
     } else {
-      if (typeof item !== "object" || ancestors.has(item))
-        return false;
+      if (typeof item !== "object")
+        return refuse("not-json");
+      if (ancestors.has(item))
+        return refuse("cycle");
       const array = Array.isArray(item);
       const prototype = Object.getPrototypeOf(item);
       if (array ? prototype !== Array.prototype : prototype !== Object.prototype && prototype !== null)
-        return false;
+        return refuse("not-json");
       let length = 0;
       if (array) {
         const descriptor = Object.getOwnPropertyDescriptor(item, "length");
         if (!descriptor || !("value" in descriptor))
-          return false;
+          return refuse("not-json");
         const capturedLength = descriptor.value;
         if (typeof capturedLength !== "number" || !Number.isInteger(capturedLength) || capturedLength < 0 || capturedLength > 2 ** 32 - 1)
-          return false;
+          return refuse("not-json");
         length = capturedLength;
         if (length > limits.maxNodes - nodes)
-          return false;
+          return refuse("nodes");
         if (byteLimit !== undefined && Math.max(2, length * 2 + 1) > byteLimit - bytes)
-          return false;
+          return refuse("bytes");
       }
       const keys = Reflect.ownKeys(item);
       if (keys.length > limits.maxNodes - nodes + (array ? 1 : 0))
-        return false;
+        return refuse("nodes");
       if (array && keys.length !== length + 1)
-        return false;
+        return refuse("not-json");
       if (!charge(2))
         return false;
       const copy = target ? array ? [] : {} : undefined;
@@ -95,16 +112,18 @@ function isJsonData(value, limits, snapshot) {
           if (array && memberKey === "length")
             continue;
           if (typeof memberKey !== "string")
-            return false;
+            return refuse("not-json");
+          if (limits.zodJson && !array && memberKey === "__proto__")
+            continue;
           if (array && (!/^(0|[1-9][0-9]*)$/.test(memberKey) || Number(memberKey) >= length))
-            return false;
+            return refuse("not-json");
           const descriptor = Object.getOwnPropertyDescriptor(item, memberKey);
           if (!descriptor?.enumerable || !("value" in descriptor))
-            return false;
+            return refuse("not-json");
           const memberValue = descriptor.value;
           if (!array && limits.omitObjectUndefined && memberValue === undefined) {
             if (++nodes > limits.maxNodes)
-              return false;
+              return refuse("nodes");
             continue;
           }
           if (members++ > 0 && !charge(1))
@@ -129,10 +148,10 @@ function isJsonData(value, limits, snapshot) {
     return true;
   };
   try {
-    return visit(value, 0, snapshot, "value");
+    return visit(value, 0, snapshot, "value") ? undefined : refusal ?? "not-json";
   } catch {
-    return false;
+    return "not-json";
   }
 }
 
-export { isJsonData };
+export { isJsonData, jsonDataRefusal };

package/dist/{index-bakgedh8.js → index-msfpyy2f.js}

@@ -133,10 +133,8 @@ function renewEntry(state, claim, now, leaseMs) {
 }
 function forgetMissing(state, present, now) {
   const live = (claim) => claim.leaseUntil !== null && Date.parse(claim.leaseUntil) > now.getTime();
-  return {
-    ...state,
-    claims: state.claims.filter((claim) => present.has(claim.key) || live(claim))
-  };
+  const claims = state.claims.filter((claim) => present.has(claim.key) || live(claim));
+  return claims.length === state.claims.length ? state : { ...state, claims };
 }
 
 export { DirectoryInboxIdentitySchema2, DirectoryInboxAcceptResultSchema2, DirectoryInboxRejectionReasonSchema2, DirectoryInboxStateSchema2, emptyDirectoryInboxState, withRejection, claimEntry, completeEntry, releaseEntry, ownsClaim, renewEntry, forgetMissing };

package/dist/{index-ywppsaby.js → index-n1nszyk0.js}

@@ -2,6 +2,9 @@ import {
   createTraceContext2,
   formatTraceparent2
 } from "./index-yex7eg1v.js";
+import {
+  ApiError2
+} from "./index-kfjkb396.js";
 import {
   isRecord,
   transportResult
@@ -366,36 +369,6 @@ function responseOf(xhr) {
 }
 
 // src/browser/http.ts
-var API_ERROR_BRAND = Symbol.for("stitchkit.ApiError");
-function messageForCode(code, message) {
-  return message !== undefined && message.length > 0 ? message : `${code} (no message supplied)`;
-}
-
-class ApiError2 extends Error {
-  code;
-  status;
-  details;
-  hint;
-  traceId;
-  retryable;
-  constructor(code, status = 0, details, message, hint, traceId, options, retryable) {
-    super(messageForCode(code, message), options);
-    this.code = code;
-    this.status = status;
-    this.details = details;
-    this.hint = hint;
-    this.traceId = traceId;
-    this.retryable = retryable;
-    this.name = "ApiError";
-    Object.defineProperty(this, API_ERROR_BRAND, { value: true });
-  }
-  static is(error) {
-    return typeof error === "object" && error !== null && API_ERROR_BRAND in error;
-  }
-}
-function refuseLocally(path, message) {
-  return new ApiError2("VALIDATION_ERROR", 0, { issues: [{ path, code: "invalid_type", message }] }, message);
-}
 function isAbortLikeError(error) {
   if (error instanceof RequestCancellationError)
     return true;
@@ -439,7 +412,10 @@ function assertTransportChoice(config) {
 }
 function requestFailure(error, emit) {
   if (error instanceof RequestCancellationError) {
-    return new ApiError2(error.cause === "caller" ? "REQUEST_ABORTED" : "REQUEST_TIMEOUT", 0, undefined, error.message);
+    return new ApiError2(error.cause === "caller" ? "REQUEST_ABORTED" : "REQUEST_TIMEOUT", {
+      status: 0,
+      message: error.message
+    });
   }
   if (ApiError2.is(error))
     return error;
@@ -447,7 +423,13 @@ function requestFailure(error, emit) {
   const response = isHTTPError(error) ? error.response : undefined;
   const status = response?.status ?? 0;
   const msg = error instanceof Error ? error.message : undefined;
-  return new ApiError2("UNKNOWN_ERROR", status, msg ? { message: msg } : undefined, msg, undefined, responseTraceId(response), { cause: error });
+  return new ApiError2("UNKNOWN_ERROR", {
+    status,
+    details: msg ? { message: msg } : undefined,
+    message: msg,
+    traceId: responseTraceId(response),
+    cause: error
+  });
 }
 function jsonBodyOf(data) {
   return data === undefined ? null : JSON.stringify(data);
@@ -526,7 +508,14 @@ function createHttpClient2(config) {
           const parsed = body === null ? null : parseError(body);
           if (!parsed)
             return error;
-          return new ApiError2(parsed.code, error.response.status, parsed.details, parsed.message, parsed.hint, responseTraceId(error.response), undefined, typeof parsed.retryable === "boolean" ? parsed.retryable : undefined);
+          return new ApiError2(parsed.code, {
+            status: error.response.status,
+            details: parsed.details,
+            message: parsed.message,
+            hint: parsed.hint,
+            traceId: responseTraceId(error.response),
+            retryable: typeof parsed.retryable === "boolean" ? parsed.retryable : undefined
+          });
         }
       ]
     }
@@ -581,4 +570,4 @@ function createHttpClient2(config) {
   };
 }
 
-export { RequestCancellationError, createRequestCancellation, resolveClientFetch, responseTraceId, uploadProgressRoute, withUploadProgress, ApiError2, refuseLocally, isAbortLikeError, parseApiErrorBody, createHttpClient2 };
+export { RequestCancellationError, createRequestCancellation, resolveClientFetch, responseTraceId, uploadProgressRoute, withUploadProgress, isAbortLikeError, parseApiErrorBody, createHttpClient2 };

package/dist/{index-v14qqmys.js → index-n4689krb.js}

@@ -4,7 +4,7 @@ import {
 import {
   assertDrainBound,
   withinBound
-} from "./index-h97tqqp1.js";
+} from "./index-qaet40b2.js";
 import {
   ApplicationIdSchema2
 } from "./index-w5s3xftz.js";

package/dist/{index-a0zzh8ak.js → index-pz3y6b6g.js}

@@ -1,12 +1,12 @@
 import {
   projectToolSurface
-} from "./index-77nxk6ay.js";
+} from "./index-r393tnfp.js";
 import {
   contractToolMountable
-} from "./index-2hyavjjj.js";
+} from "./index-wbhdzxar.js";
 import {
   runtimeToolMountable
-} from "./index-cvda079a.js";
+} from "./index-yvfk3y36.js";
 
 // src/tools/surface.ts
 function collectToolSurface({

package/dist/{index-43p08g7t.js → index-pzb63z66.js}

@@ -1,6 +1,6 @@
 import {
   AppError2
-} from "./index-x928baz2.js";
+} from "./index-j9gxbztg.js";
 import {
   RealtimeRequestInvalidAcknowledgementError2,
   RealtimeRequestRejectedError2
@@ -60,13 +60,17 @@ import { z } from "zod";
 function realtimeContractViolation(options) {
   const issues = options.cause instanceof z.ZodError ? zodIssues2(options.cause) : undefined;
   const reason = options.reason.replaceAll("-", " ");
-  const error = new AppError2("REALTIME_CONTRACT_VIOLATION", `Realtime event "${options.event}" (${options.direction}, ${options.phase}): ${reason}`, 500, {
-    event: options.event,
-    direction: options.direction,
-    phase: options.phase,
-    reason: options.reason,
-    fault: options.fault,
-    ...issues !== undefined && { issues }
+  const error = new AppError2("REALTIME_CONTRACT_VIOLATION", {
+    message: `Realtime event "${options.event}" (${options.direction}, ${options.phase}): ${reason}`,
+    status: 500,
+    details: {
+      event: options.event,
+      direction: options.direction,
+      phase: options.phase,
+      reason: options.reason,
+      fault: options.fault,
+      ...issues !== undefined && { issues }
+    }
   });
   if (options.cause !== undefined)
     error.cause = options.cause;

package/dist/{index-h97tqqp1.js → index-qaet40b2.js}

@@ -1,3 +1,7 @@
+import {
+  assertPositiveSafeInteger
+} from "./index-0s4xebbg.js";
+
 // src/observability/status.ts
 import { z } from "zod";
 var NonNegativeIntegerSchema = z.number().int().nonnegative();
@@ -100,9 +104,7 @@ function invokeIsolated(callback) {
 }
 function createBoundedSinkManager(config) {
   const maxPending = config.maxPending ?? DEFAULT_MAX_PENDING;
-  if (!Number.isSafeInteger(maxPending) || maxPending <= 0) {
-    throw new TypeError("Observability maxPending must be a positive safe integer");
-  }
+  assertPositiveSafeInteger("Observability maxPending", maxPending);
   let sequence = 0;
   let closed = false;
   let received = 0;

package/dist/{index-t1sr4aks.js → index-qaqbdm7s.js}

@@ -1,19 +1,22 @@
 import {
   AgentToolError2,
   resolveToolDurability
-} from "./index-nggfa2yn.js";
+} from "./index-c17xcx4k.js";
 import {
   toolResultFromError,
   toolCauseFromResult,
   isToolExecutionControlError2
-} from "./index-2vnh05w4.js";
+} from "./index-2k91mewf.js";
 import {
   createToolRunner,
   formatToolError
-} from "./index-2hyavjjj.js";
+} from "./index-wbhdzxar.js";
 import {
   collectToolSurface
-} from "./index-a0zzh8ak.js";
+} from "./index-pz3y6b6g.js";
+import {
+  agentPresenterOf
+} from "./index-yvfk3y36.js";
 import {
   isRecord
 } from "./index-9jfdm5tg.js";
@@ -75,7 +78,7 @@ function mountAgent2(services, config = {}) {
         return result.data;
       throw new AgentToolError2(formatToolError(result, mountable.name, config.errorHint), toolCauseFromResult(result));
     };
-    const presenter = entry.kind === "runtime" ? entry.definition.present?.agent : undefined;
+    const presenter = entry.kind === "runtime" ? agentPresenterOf(entry.definition) : undefined;
     if (entry.kind === "runtime" && presenter) {
       const { definition } = entry;
       const output = definition.output;
@@ -108,4 +111,47 @@ function mountAgent2(services, config = {}) {
   return tools;
 }
 
-export { mountAgent2 };
+// src/tools/manifest.ts
+function utf8Length(value) {
+  return new TextEncoder().encode(JSON.stringify(value)).byteLength;
+}
+function describeToolCatalog2(config) {
+  const deferred = new Set(config.deferredNames ?? []);
+  const entries = collectToolSurface({
+    surface: config,
+    transport: config.transport,
+    extend: config.extend,
+    flattenUnionInput: config.flattenUnionInput
+  }).map(({ kind, service, action, mountable }) => {
+    const schemaBytes = utf8Length(mountable.presentationSchema);
+    return {
+      name: mountable.name,
+      description: mountable.method.desc,
+      inputSchema: mountable.presentationSchema,
+      source: { kind, service, action },
+      schemaBytes,
+      deferred: deferred.has(mountable.name)
+    };
+  });
+  if (config.maxSchemaBytes !== undefined) {
+    const total = entries.reduce((sum, entry) => sum + entry.schemaBytes, 0);
+    if (total > config.maxSchemaBytes) {
+      throw new TypeError(`Tool catalog schemas use ${total} bytes, exceeding maxSchemaBytes ${config.maxSchemaBytes}`);
+    }
+  }
+  return entries;
+}
+function buildToolManifest2(config) {
+  return collectToolSurface({
+    surface: config,
+    transport: config.transport,
+    extend: config.extend,
+    flattenUnionInput: config.flattenUnionInput
+  }).map(({ mountable }) => ({
+    name: mountable.name,
+    description: mountable.method.desc,
+    inputSchema: mountable.presentationSchema
+  }));
+}
+
+export { mountAgent2, describeToolCatalog2, buildToolManifest2 };

package/dist/{index-77nxk6ay.js → index-r393tnfp.js}

@@ -1,9 +1,9 @@
 import {
   AppError2
-} from "./index-x928baz2.js";
+} from "./index-j9gxbztg.js";
 import {
   validateDeclaredOutput
-} from "./index-kb8styz3.js";
+} from "./index-rpzewktb.js";
 import {
   toJsonSchema
 } from "./index-ct75c3at.js";
@@ -324,8 +324,8 @@ function describeVariants(properties, discriminator) {
   }
   return [...groups].map(([description, labels]) => ({
     description,
-    labels: [...new Set(labels)].sort().join(" | ")
-  })).sort((left, right) => left.labels < right.labels ? -1 : left.labels > right.labels ? 1 : 0).map(({ description, labels }) => `When ${discriminator} = ${labels}: ${description}`).join(" ");
+    labels: [...new Set(labels)].join(" | ")
+  })).map(({ description, labels }) => `When ${discriminator} = ${labels}: ${description}`).join(" ");
 }
 function mergePropertySchemas(properties, discriminator) {
   const schemas = properties.map((property) => nullableProjection(property.schema));
@@ -337,7 +337,7 @@ function mergePropertySchemas(properties, discriminator) {
   } else {
     const values = schemas.map(stringValues);
     const allStrings = values.every((value) => value !== null);
-    merged = allStrings ? { type: "string", enum: [...new Set(values.flatMap((value) => value ?? []))].sort() } : commonBaseType(structural);
+    merged = allStrings ? { type: "string", enum: [...new Set(values.flatMap((value) => value ?? []))] } : commonBaseType(structural);
   }
   const description = describeVariants(properties.map((property, index) => ({
     ...property,
@@ -457,7 +457,7 @@ function flattenNode(node) {
     [discriminator.key]: mergePropertySchemas(discriminatorProperties, discriminator.key)
   };
   const required = [discriminator.key];
-  for (const [key, entries] of [...perKey].sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0)) {
+  for (const [key, entries] of perKey) {
     let merged = mergePropertySchemas(entries, discriminator.key);
     const requiredEverywhere = entries.length === variants.length && entries.every((entry) => entry.required);
     if (requiredEverywhere) {
@@ -465,9 +465,9 @@ function flattenNode(node) {
     } else {
       const requiredLabels = entries.filter((entry) => entry.required).flatMap((entry) => entry.labels);
       const presentLabels = entries.flatMap((entry) => entry.labels);
-      merged = appendHint(merged, `Available if ${discriminator.key} = ${[...new Set(presentLabels)].sort().join(" | ")}.`);
+      merged = appendHint(merged, `Available if ${discriminator.key} = ${[...new Set(presentLabels)].join(" | ")}.`);
       if (requiredLabels.length > 0) {
-        merged = appendHint(merged, `Required if ${discriminator.key} = ${[...new Set(requiredLabels)].sort().join(" | ")}`);
+        merged = appendHint(merged, `Required if ${discriminator.key} = ${[...new Set(requiredLabels)].join(" | ")}`);
       }
     }
     properties[key] = merged;
@@ -597,7 +597,10 @@ function projectToolView(options) {
     try {
       projected = Reflect.apply(view.project, undefined, [options.full, options.call]);
     } catch (error) {
-      const failure = new AppError2("INTERNAL_SERVER_ERROR", `${options.operation} toolView.project threw`, 500);
+      const failure = new AppError2("INTERNAL_SERVER_ERROR", {
+        message: `${options.operation} toolView.project threw`,
+        status: 500
+      });
       failure.cause = error;
       throw failure;
     }
@@ -605,7 +608,10 @@ function projectToolView(options) {
       Promise.resolve(projected).catch(() => {
         return;
       });
-      throw new AppError2("INTERNAL_SERVER_ERROR", `${options.operation} toolView.project returned a Promise — it must be synchronous`, 500);
+      throw new AppError2("INTERNAL_SERVER_ERROR", {
+        message: `${options.operation} toolView.project returned a Promise — it must be synchronous`,
+        status: 500
+      });
     }
     if (projected === undefined) {
       return {

package/dist/{index-kb8styz3.js → index-rpzewktb.js}

@@ -1,6 +1,6 @@
 import {
   AppError2
-} from "./index-x928baz2.js";
+} from "./index-j9gxbztg.js";
 import {
   zodIssues2,
   formatZodError2
@@ -31,18 +31,28 @@ function recordedErrorMessage(code, envelopeMessage, thrown) {
 function normalizeError2(err, options = {}) {
   if (AppError2.is(err)) {
     if (err.code === "REALTIME_CONTRACT_VIOLATION") {
-      return new AppError2("REALTIME_CONTRACT_VIOLATION", "Realtime contract violation", 500);
+      return new AppError2("REALTIME_CONTRACT_VIOLATION", {
+        message: "Realtime contract violation",
+        status: 500
+      });
     }
     return err;
   }
   if (err instanceof z.ZodError) {
-    return new AppError2("VALIDATION_ERROR", formatZodError2(err), 400, {
-      issues: zodIssues2(err).slice(0, MAX_DETAIL_ISSUES)
+    return new AppError2("VALIDATION_ERROR", {
+      message: formatZodError2(err),
+      status: 400,
+      details: {
+        issues: zodIssues2(err).slice(0, MAX_DETAIL_ISSUES)
+      }
     });
   }
   if (options.logUnexpected !== false)
     console.error("[stitchkit] unhandled error:", err);
-  return new AppError2("INTERNAL_SERVER_ERROR", "Internal server error", 500);
+  return new AppError2("INTERNAL_SERVER_ERROR", {
+    message: "Internal server error",
+    status: 500
+  });
 }
 function strippedPaths(before, after, prefix) {
   if (Array.isArray(before)) {

package/dist/{index-27a2pj09.js → index-sj28htvf.js}

@@ -2,7 +2,7 @@ import {
   parseRealtimeRequestArguments,
   parseRealtimeRequestAcknowledgement,
   createValidatedRealtimeSocket
-} from "./index-43p08g7t.js";
+} from "./index-pzb63z66.js";
 import {
   randomHex
 } from "./index-c9d05kvt.js";