stitchkit 0.106.1 → 0.108.0

package/CHANGELOG.md

@@ -15,6 +15,131 @@ additive**; the first breaking change landed in 0.10.0. Grep the file for
 
 ## [Unreleased]
 
+## [0.108.0] - 2026-10-06
+
+### ⚠️ Breaking changes
+
+**Who must act:** code with an exhaustive `switch` or `Record` over `TelegramSendFailureReason` or
+`TelegramSendFailure['evidence']`; builds whose entry imports a `stitchkit` installation other
+than the one their native packaging plugin came from.
+
+- `stitchkit/telegram` — **a request that never left is its own send outcome.**
+  `TelegramSendFailureReason` gains `not-dispatched` (retryable, recipient reachable) and
+  `TelegramSendFailure.evidence` gains `transport`: `classifyTelegramSendFailure` returns them for a
+  `TelegramNotDispatchedError` anywhere in the cause chain, so a broadcast retries such a send as
+  `transient` and the operator channel sends it again, where both used to give it up as unknown.
+  `// before: const code: Record<TelegramSendFailureReason, string> = { …, unknown: 'E_UNKNOWN' }`
+  → `// after: const code: Record<TelegramSendFailureReason, string> = { …, 'not-dispatched': 'E_NOT_SENT', unknown: 'E_UNKNOWN' }`
+  **Who must act:** exhaustive code over the reasons or the evidence. See
+  [migration](docs/guide/upgrading.md#a-request-that-never-left-is-its-own-send-outcome). → ADR 0253
+  **Affects:** `stitchkit/telegram` TelegramSendFailureReason, TelegramSendFailure(evidence), TELEGRAM_SEND_FAILURE_REASONS, classifyTelegramSendFailure(reason)
+- `stitchkit/files/packaging` — **a packaging plugin fails a build that carries another
+  installation's loader.** The plugin packages only the default Darwin loader of the `stitchkit` it
+  was created from; an entry that imports another installation (another version, or the same
+  version under another path, as when a build tool brings its own copy) used to build, ship that
+  installation's default loader and refuse the addon on macOS at run time. The build now fails with
+  an error naming both versions and roots.
+  `// before: Bun.build({ plugins: [toolCopy.createNativePackaging(…).plugin] }) // entry imports another stitchkit`
+  → `// after: Bun.build({ plugins: [entryCopy.createNativePackaging(…).plugin] })`
+  **Who must act:** builds that take the plugin from a `stitchkit` the entry does not import. See
+  [migration](docs/guide/upgrading.md#a-packaging-plugin-packages-only-its-own-installation). → ADR 0254
+  **Affects:** `stitchkit/files/packaging` createNativePackaging(plugin)
+
+### Added
+
+- `stitchkit/telegram` — `createTelegramBotTransport()`, a `fetch` for the Bot API senders that
+  connects before it writes: a failure before the first byte is `TelegramNotDispatchedError`
+  (`stage`: `lookup`, `connect`, `request`), any later one stays unknown. Addresses race in the
+  resolver's order (Happy Eyeballs); the lookup, the connection rounds, the answer's time and its size are bounded.
+  The senders' `fetch` option is now typed `TelegramFetch` (`(url, init) => Promise<Response>`), which
+  the global `fetch` still satisfies. → ADR 0253
+- `stitchkit` — `parseNDJSON` and `parseSSE` read any byte source: a `Response`, a
+  `ReadableStream<Uint8Array>` (a Bun child's `stdout`) or an `AsyncIterable<Uint8Array>` (a Node
+  child's `stdout`), with `signal` cancelling the source. `createNDJSONDecoder` drives the same
+  bounded reader by `push(chunk)` / `end()` for a socket's `data` callback. A line past
+  `maxLineBytes` throws `StreamLineLimitError` (`limitBytes`, `lineBytes`) at the chunk that crossed
+  the limit, so memory stays bounded; a source ended inside a line under `finalLine:
+  'require-newline'` throws `StreamTruncatedLineError`. They extend the `RangeError` and `SyntaxError`
+  thrown before, so `instanceof` still holds; their `name` is now the class name and their message
+  ends with the bytes seen. A decoder stops at
+  its first error, and an abort rejects with the signal's reason even when `onParseError` is set.
+- `stitchkit/files/packaging` — `inspectNativeArtifact(bytes)` classifies a built artifact as
+  `packaged`, `unpackaged` or `no-loader` by a marker every generated loader now carries
+  (`module.exports.stitchkitNativeLoader`), in latin1 and UTF-16LE. It replaces the documented search
+  for `STITCHKIT_NATIVE_NOT_PACKAGED`, which every bundle with a lock carries as an error code and so
+  refused correct builds. → ADR 0254
+- `stitchkit upgrade` — every breaking item from 0.104.0 carries an `**Affects:**` line naming its
+  entrypoints and exports (or `behaviour`), and `release:check` refuses a breaking item without it.
+  The CLI reads the project's imports (`--cwd`, default `.`) and gives each item a verdict:
+  `affects this project` with `path:line`, `not used here`, `behavioural — check by hand` with the
+  importing files, or `not declared — check by hand` for older items; `--json` prints the verdicts.
+- `stitchkit/testing` — `createManualClock()`: manual time for schedules, retries and deadlines. Due
+  timers fire in deadline order with real event-loop yields between them, so `advance(10_000)` does
+  not skip a retry armed at the fifth second; `hold` keeps time still while real work of unknown
+  length runs and fails naming it past `holdLimitMs`; `until` moves deadline to deadline; one move
+  runs at a time. It is the
+  clock of `createManagedSchedule`, a durable sleep, a revision signal and bounded admission.
+
+### Fixed
+
+- `stitchkit/server`, `stitchkit/process`, `stitchkit/files` — loading these leaves no longer calls
+  a Node API: process identity built its command runner with `promisify(execFile)` at module scope,
+  so a browser bundle that reached the server leaf for an error class (where `node:util` is an empty
+  module) threw `promisify is not a function` while loading, although nothing called it.
+
+## [0.107.0] - 2026-10-06
+
+### ⚠️ Breaking changes
+
+**Who must act:** builds that call `createNativePackaging` with `delivery: 'embedded'`; also rebuild
+any artifact made without the packaging plugin by 0.105.0–0.106.1.
+
+- `stitchkit/files/packaging` — **embedded delivery names no output paths.** A standalone executable
+  carries the Darwin addon inside itself, so `createNativePackaging({ delivery: 'embedded' })` takes
+  only `platform` and `architecture`; `entryPath` and `assetPath` changed nothing in the executable
+  and are now refused by the type and the schema. The ready result types its addon as
+  `NativePackagingEmbeddedAsset` (`bytes`, `size`, `sha256`, no `outputPath`), with
+  `NativePackagingEmbeddedOptions` and `NativePackagingEmbeddedResult` beside it. Companion
+  delivery is unchanged.
+  `// before: createNativePackaging({ platform: 'darwin', architecture: 'arm64', delivery: 'embedded', entryPath, assetPath })`
+  → `// after: createNativePackaging({ platform: 'darwin', architecture: 'arm64', delivery: 'embedded' })`
+  **Who must act:** builds with `delivery: 'embedded'`. See
+  [migration](docs/guide/upgrading.md#embedded-native-packaging-names-no-paths). → ADR 0252
+  **Affects:** `stitchkit/files/packaging` createNativePackaging(delivery: 'embedded'), NativePackagingOptions, NativePackagingResult, NativePackagingAsset
+
+### Fixed
+
+- `stitchkit/files`, `stitchkit/server`, `stitchkit/process` — a bundle or compiled executable
+  built without native packaging no longer carries the absolute path of the package on the build
+  machine. Since 0.105.0 the default Darwin loader computed its addon path from `__dirname`, which
+  Bun inlines as a string, so the artifact named the builder's directories and on another Mac
+  looked for the addon there. The loader now reads its own file through `module.filename`, which is
+  not an absolute path inside a bundle, and refuses there: the first call that needs the addon
+  reports the Darwin backend `unavailable` with the new stage `packaging` and native code
+  `STITCHKIT_NATIVE_NOT_PACKAGED`, and the message names `createNativePackaging`. An installed
+  package loads the addon as before (ADR 0252).
+- `stitchkit` — the package declares `"sideEffects": false`: it has no import side effects, so a
+  bundler drops what a consumer does not use. A bundle that imports only the managed file boundary
+  from `stitchkit/files` no longer carries the lock, process identity or the Darwin loader, and
+  needs no decision about native packaging.
+
+- `stitchkit/agent-runtime` — `createDeferredAgentToolSurface({ runtimeTools })` accepts a
+  `RuntimeToolDefinition[]` from `stitchkit/tools` again, without a cast. Since 0.105.0 the
+  registration type holds `present` as `unknown` while the deferred catalog expected
+  `{ agent?: unknown }`, so the two public types of one package no longer met.
+  `DeferredAgentRuntimeToolDefinition.present` is open like the registration's; a presenter that is
+  not a function, or that has no `output` schema, is still refused at construction.
+
+### Documentation
+
+- The 0.105.0 entry "bundles no longer emit Darwin addons" said an unpackaged bundle looks for the
+  addon beside the original package files and reports the backend `unavailable` elsewhere. In
+  0.105.0–0.106.1 "beside the original package files" was the absolute path of the package on the
+  build machine, inlined into the artifact. The native IO guide and the 0.103.13 migration now say
+  what each release does, which calls load the addon (process identity, exclusive locks and
+  contained Agent file operations, on macOS only; never the managed file boundary), and how to
+  check an artifact by its loader instead of by the presence of `.node` bytes.
+
 ## [0.106.1] - 2026-10-06
 
 ### Documentation
@@ -47,6 +172,7 @@ or a failing sink).
   `// after: onLeaderSettled: (e) => { if (e.kind === 'stopped') stopped(e.cause, e.signal) }`
   **Who must act:** code that handles a stop in `kind === 'error'`. See
   [migration](docs/guide/upgrading.md#a-stopped-leader-settles-as-stopped). → ADR 0248
+  **Affects:** `stitchkit/process` runNativeCommand(onLeaderSettled), NativeCommandOptions(onLeaderSettled), NativeCommandSettlement
 
 ### Added
 
@@ -131,6 +257,7 @@ and code that imports `publishCli` or its types from `stitchkit/cli`.
   **Who must act:** code that imports `publishCli` or a `CliPublication*` type from
   `stitchkit/cli`. See [migration](docs/guide/upgrading.md#cli-publication-has-its-own-entrypoint).
   → ADR 0245
+  **Affects:** `stitchkit/cli` publishCli, CliPublicationOptions, CliPublicationPhase, CliPublicationResult
 
 - `stitchkit/process` — **`killGraceMs` becomes the `stop` policy.** How a cancelled command
   stops is one named object: `target` `'group'` (the signal goes to every member, as before) or
@@ -143,6 +270,7 @@ and code that imports `publishCli` or its types from `stitchkit/cli`.
   `// before: runNativeCommand({ …, killGraceMs: 500 })` →
   `// after: runNativeCommand({ …, stop: { target: 'group', graceMs: 500 } })`
   **Who must act:** callers that pass `killGraceMs`. → ADR 0243
+  **Affects:** `stitchkit/process` runNativeCommand(killGraceMs), NativeCommandOptions(killGraceMs)
 
 - `stitchkit/process` — **a command's leftover group members are stopped after its leader
   exits.** `runNativeCommand` takes `descendants: 'terminate-after-leader' | 'leave'`, and
@@ -157,6 +285,7 @@ and code that imports `publishCli` or its types from `stitchkit/cli`.
   keep running after the command returns. See
   [migration](docs/guide/upgrading.md#a-command-stops-what-its-leader-left).
   → ADR 0246
+  **Affects:** `stitchkit/process` runNativeCommand(descendants), NativeCommandOptions(descendants)
 
 - `stitchkit/server`, `stitchkit/files`, `stitchkit/process` — **bundles no longer emit Darwin
   addons.** The packaged Darwin loader names its addon by a computed path, so a Bun bundle of
@@ -170,6 +299,7 @@ and code that imports `publishCli` or its types from `stitchkit/cli`.
   **Who must act:** Darwin packagers of bundled or compiled artifacts using these entrypoints.
   Linux and portable bundles need no change. See [migration](docs/guide/upgrading.md#released-migration-010313).
   → ADR 0235
+  **Affects:** `stitchkit/server`, `stitchkit/files`, `stitchkit/process` behaviour
 - `stitchkit/files/packaging` — **`createNativePackaging` checks each addon against a digest the
   package published, and returns the verified bytes.** `native-assets.json` is now written when
   Stitchkit is built, at `formatVersion: 2`, with the `path`, `size` and `sha256` of every Darwin
@@ -195,6 +325,7 @@ and code that imports `publishCli` or its types from `stitchkit/cli`.
   than the literal `'darwin'`.
   See [migration](docs/guide/upgrading.md#native-packaging-verifies-published-digests).
   → ADR 0241
+  **Affects:** `stitchkit/files/packaging` createNativePackaging(platform), NativePackagingAsset(sourcePath), NativePackagingResult(code)
 - `stitchkit/files` — **`withExclusiveLock` publishes its lock with the owner already recorded,
   and `ownerlessGraceMs` defaults to `null`.** The owner record is written to a temporary file
   and hard-linked to the lock name, so the name never exists without an owner and a stalled
@@ -208,6 +339,7 @@ and code that imports `publishCli` or its types from `stitchkit/cli`.
   file, and locks on a filesystem without hard links; every other caller is unaffected.
   See [migration](docs/guide/upgrading.md#exclusive-locks-publish-their-owner-first).
   → ADR 0238
+  **Affects:** `stitchkit/files` withExclusiveLock(ownerlessGraceMs), ExclusiveLockOptions(ownerlessGraceMs)
 - `stitchkit/tools/connections` — **a `timeoutMs` or `maxResponseBytes` that is not a positive
   integer within range throws a `RangeError`** instead of falling back to the default. This
   shipped in 0.104.0 without a breaking entry.
@@ -215,6 +347,7 @@ and code that imports `publishCli` or its types from `stitchkit/cli`.
   `// after: timeoutMs: 0  (RangeError; omit the option to take the default)`
   **Who must act:** callers that passed 0, a negative, a fractional or an oversized limit.
   See [migration](docs/guide/upgrading.md#connection-limits-are-validated).
+  **Affects:** `stitchkit/tools/connections` defineMcpClientConnection(timeoutMs), defineOpenApiConnection(timeoutMs), McpConnectionLimits, ConnectionOperationLimits
 - `stitchkit/testing` — **`serializeSurfaceValue` is removed.** It was a second name for the
   package's one canonical serializer. `canonicalJson` from `stitchkit/primitives` is that
   serializer, bounded and with a typed refusal:
@@ -223,6 +356,7 @@ and code that imports `publishCli` or its types from `stitchkit/cli`.
   **Who must act:** tests that call `serializeSurfaceValue`.
   See [migration](docs/guide/upgrading.md#one-canonical-json-serializer).
   → ADR 0199, ADR 0238
+  **Affects:** `stitchkit/testing` serializeSurfaceValue
 - `stitchkit/agent-runtime` — **`canonicalAgentJson` follows the one admissibility table of
   `canonicalJson`.** A value nested deeper than 100 levels is refused with a
   `CanonicalJsonError`, and an `undefined` object member is omitted instead of failing. It still
@@ -234,6 +368,7 @@ and code that imports `publishCli` or its types from `stitchkit/cli`.
   **Who must act:** code that puts a value nested deeper than 100 levels into agent store events,
   archives or projections. See
   [migration](docs/guide/upgrading.md#one-canonical-json-serializer).
+  **Affects:** `stitchkit/agent-runtime` canonicalAgentJson
 - `stitchkit/application` — **`DirectoryInbox` sets a hard-linked entry file aside as
   `invalid`, and `accept` takes the schema's input type.** A dropped file with more than one
   link is never trusted, because another name can still rewrite it (since 0.104.0, without a
@@ -246,6 +381,7 @@ and code that imports `publishCli` or its types from `stitchkit/cli`.
   **Who must act:** producers that drop hard links into an inbox directory, and callers that pass
   `accept` the output of a transforming schema.
   See [migration](docs/guide/upgrading.md#directory-inbox-entries).
+  **Affects:** `stitchkit/application` DirectoryInbox, DirectoryInboxConfig, DirectoryInboxResource; `stitchkit/application/directory-inbox` createDirectoryInbox
 - `stitchkit/application` — **`createDiagnosticJournal` checks only the last line of each file
   when it opens** (`startupScan: 'tails'`, the default), so opening no longer parses and
   validates every line of every retained generation. The scan still reads each file once in
@@ -256,6 +392,7 @@ and code that imports `publishCli` or its types from `stitchkit/cli`.
   `// after: createDiagnosticJournal({ path, eventSchema, limits, startupScan: 'full' })  (the same full scan)`
   **Who must act:** operators that read `recovery` at startup to find damaged rows in the middle
   of a file. See [migration](docs/guide/upgrading.md#journal-startup-scan).
+  **Affects:** `stitchkit/application/diagnostic-journal` createDiagnosticJournal(startupScan)
 - `stitchkit/application/diagnostic-journal`, `stitchkit/application` — **opening a diagnostic
   journal moves a file it cannot keep in place aside and starts, instead of refusing to start.**
   A torn active file with `maxFiles: 1`, a generation name that is not a regular file and a
@@ -278,6 +415,7 @@ and code that imports `publishCli` or its types from `stitchkit/cli`.
   `recovery`; protocols that embed `DiagnosticJournalRecoveryStatusSchema` and their readers.
   See [migration](docs/guide/upgrading.md#journal-startup-quarantine).
   → ADR 0240
+  **Affects:** `stitchkit/application/diagnostic-journal` createDiagnosticJournal(onStartupRefusal); `stitchkit/application` DiagnosticJournalRecoveryError, DiagnosticJournalRecoveryStatusSchema
 
 - `stitchkit/cli`, `stitchkit/tools`, `stitchkit/tools/mcp` — **one runtime-tool declaration.**
   `RuntimeToolExecution`, `RuntimeToolExecutionWithOutput` (cli), `RuntimeMcpToolDefinition`,
@@ -299,6 +437,7 @@ and code that imports `publishCli` or its types from `stitchkit/cli`.
   `createRuntimeToolFactory` need no change.
   See [migration](docs/guide/upgrading.md#one-runtime-tool-declaration).
   → ADR 0236, ADR 0238
+  **Affects:** `stitchkit/cli` RuntimeToolExecution, RuntimeToolExecutionWithOutput; `stitchkit/tools/mcp` RuntimeMcpToolDefinition, RuntimeMcpToolDefinitionWithOutput; `stitchkit/tools` ToolSurfaceDefinition, RuntimeToolDefinitionWithOutput
 - `stitchkit/tools`, `stitchkit/tools/mcp` — **a flattened union keeps declaration order.**
   With `flattenUnionInput: true`, properties, enum values and branch labels are advertised in the
   order of their first appearance across the variants instead of alphabetically, so the bytes of
@@ -310,6 +449,7 @@ and code that imports `publishCli` or its types from `stitchkit/cli`.
   anyone using `flattenUnionInput: true`: regenerate the snapshots.
   See [migration](docs/guide/upgrading.md#flattened-unions-keep-declaration-order).
   → ADR 0238
+  **Affects:** `stitchkit/tools`, `stitchkit/tools/mcp` behaviour
 - `stitchkit/tools`, `stitchkit/cli` — **a list written as text is refused in every
   string-or-array field.** `coerceJsonArgs`, and so every tool surface, throws a validation error
   naming the field when a union that keeps a string member receives a string that parses to an
@@ -321,12 +461,14 @@ and code that imports `publishCli` or its types from `stitchkit/cli`.
   **Who must act:** callers that send a JSON array as text to a string-or-array field; a plain
   string, including one that is not a list the array member accepts, is unchanged.
   → ADR 0218, ADR 0239, ADR 0238
+  **Affects:** `stitchkit/tools`, `stitchkit/cli` behaviour
 - `stitchkit/agent-runtime` — **the `stitchkit/agent-runtime/harness-tools` leaf is removed.** It
   was one `mountAgent` call with the run's fence composed in; no consumer imported it.
   `// before: tools: createAgentHarnessTools(({ context }) => ({ services: [svc], context }))` →
   `// after: tools: ({ context, toolFenceLifecycle }) => mountAgent([svc], { context, lifecycle: composeToolLifecycle(undefined, toolFenceLifecycle) })`
   **Who must act:** imports of `stitchkit/agent-runtime/harness-tools`. See
   [migration](docs/guide/upgrading.md#one-runtime-tool-declaration).
+  **Affects:** `stitchkit/agent-runtime/harness-tools` *
 - `stitchkit/agent-runtime/realtime`, `stitchkit/agent-runtime/browser` — **control errors use one
   vocabulary, and the binding authorizes requests, not events.** `ACCESS_DENIED` is `FORBIDDEN`, and
   a closed connection answers `CONNECTION_CLOSED` instead of a denial. `AgentControlErrorCode`
@@ -341,6 +483,7 @@ and code that imports `publishCli` or its types from `stitchkit/cli`.
   `// after: if (state.error?.code === 'FORBIDDEN') …`
   **Who must act:** code that compares control error codes, and applications that revoke access while
   a stream is open (call `binding.revoke`; before, every event re-asked `authorize`).
+  **Affects:** `stitchkit/agent-runtime/browser` AgentControlErrorCode, AgentControlErrorCodeSchema, AgentControllerState(error); `stitchkit/agent-runtime/realtime` bindAgentHarnessRealtime(authorize), AgentHarnessRealtimeBinding(revoke)
 - `stitchkit/contract`, `stitchkit/server`, `stitchkit/node` — **`AppError` takes its fields by
   name.** The constructor had seven positions, so a call that set only `retryable` read
   `new AppError(code, message, 409, undefined, undefined, undefined, true)`. The code stays first;
@@ -353,6 +496,7 @@ and code that imports `publishCli` or its types from `stitchkit/cli`.
   The `notFound`, `badRequest`, `unauthorized`, `forbidden`, `conflict` and `rateLimited` helpers
   are unchanged. See [migration](docs/guide/upgrading.md#error-constructors-take-named-options).
   → ADR 0238
+  **Affects:** `stitchkit/contract`, `stitchkit/server`, `stitchkit/node` AppError
 - `stitchkit` — **`ApiError` takes its fields by name.** The constructor had eight positions
   and call sites ended in `undefined, undefined, retryable`. The code stays first and the rest
   is one options object; `new ApiError(code)` still works:
@@ -364,6 +508,7 @@ and code that imports `publishCli` or its types from `stitchkit/cli`.
   `retryable` or `cause` is unaffected. See
   [migration](docs/guide/upgrading.md#error-constructors-take-named-options).
   → ADR 0238
+  **Affects:** `stitchkit` ApiError
 
 ### Added
 
@@ -507,16 +652,19 @@ native CLI commands and ordinary one-argument state transitions remain valid.
   in `CliConfig.runtimeTools` / `CliInvokerConfig.runtimeTools`. Existing typed definitions and
   native `commands` need no change. See [migration](docs/guide/upgrading.md#released-migration-01040).
   → ADR 0227
+  **Affects:** `stitchkit/cli` CliConfig(runtimeTools), CliInvokerConfig(runtimeTools)
 - `stitchkit/application` — custom state adapters must supply an active, fenced
   `StateStoreUpdateContext`: `transition(current)` → `transition(current, context)` inside
   their protected transaction. Remove file-store `staleLockMs` / `retryMs`:
   `{ staleLockMs, retryMs, lockTimeoutMs }` → `{ lockTimeoutMs }`. Live and unknown owners
   cannot be reclaimed by age; legacy lock recovery requires proof that the owner stopped.
   Ordinary one-argument transition callbacks still work. → ADR 0228
+  **Affects:** `stitchkit/application` StateStore, StateStoreUpdate, StateStoreUpdateContext; `stitchkit/server` createFileStateStore(staleLockMs), FileStateStoreOptions(retryMs)
 - `stitchkit/telegram` — broadcast halt uses `TelegramBroadcastFailure`:
   `report.halt.reason` → `report.halt.kind`. An unknown send outcome becomes durable
   `uncertain` and halts without replay; explicit retry classifiers certify that the failed
   attempt did not apply its effect. → ADR 0228
+  **Affects:** `stitchkit/telegram` runTelegramBroadcast(halt), TelegramBroadcastReport(halt)
 - `stitchkit/tools`, `stitchkit/tools/mcp` — construct schema-dependent MCP tools before
   heterogeneous registration: `runtimeTools: [{ input, output, handler, present }]` →
   `const tool = { … } satisfies RuntimeMcpToolDefinitionWithOutput<typeof input, typeof output>; runtimeTools: [tool]`.
@@ -524,16 +672,19 @@ native CLI commands and ordinary one-argument state transitions remain valid.
   official SDK's required content and metadata types: `present: { mcp: () => ({}) }` →
   `present: { mcp: () => ({ content: [] }) }`. **Who must act:** inline MCP constructors
   and presenters returning malformed content or metadata. → ADR 0231
+  **Affects:** `stitchkit/tools` createMcpHandler(runtimeTools), mountMcp(runtimeTools); `stitchkit/tools/mcp` buildMcpServer(runtimeTools), RuntimeMcpToolPresenters
 - `stitchkit/contract`, `stitchkit/remote` — error envelopes and framed errors admit an
   optional boolean `retryable`. A closed error schema must add
   `retryable: z.boolean().optional()` before upgrading producers that declare it; envelopes
   without a declaration remain unchanged. See [migrations](docs/guide/upgrading.md).
   These migrations require a minor release. → ADR 0232
+  **Affects:** `stitchkit/contract`, `stitchkit/remote` behaviour
 - `stitchkit/tools`, `stitchkit/cli` — raw unexpected tool errors are observed through
   `hooks.onToolError` / `hooks.afterToolCall` instead of being printed on protocol stderr.
   **Who must act:** applications collecting raw tool causes from `console.error`; configure
   an internal hook sink instead. MCP resolver failures reach the same observing hooks without
   rerunning the handler or its lifecycle. → ADR 0229
+  **Affects:** `stitchkit/tools`, `stitchkit/cli` behaviour
 
 ### Fixed
 

package/README.md

@@ -359,11 +359,13 @@ import { parseSSE } from 'stitchkit'           // client: Response → AsyncGene
 | **Cache Bridge** | `createCacheBridge()` — socket events → TanStack Query cache |
 | **Auth** | `createAuthHook()` / `createBearerResolver()` — scope-aware auth from `contract.scope` |
 | **SSE Streaming** | `streamSSE()` / `parseSSE()` — async generator ↔ SSE |
+| **NDJSON** | `ndjsonRoute()` / `parseNDJSON()` / `createNDJSONDecoder()` — bounded lines from a response, a child's stdout or a socket |
 | **Events** | `createEventBus<EventMap>()` — typed in-process pub/sub |
 | **Multipart** | typed buffered or streaming single/multi-file uploads with limits and MIME policy |
 | **Rate Limiting** | `createRateLimiter()` — token bucket, per-key |
 | **Cache** | `createCache()` — in-memory with TTL + `cacheHeaders()` |
 | **Errors** | `AppError`, `notFound()`, `badRequest()`, `unauthorized()` |
+| **Manual time** | `createManualClock()` (`stitchkit/testing`) — schedules, retries and deadlines advanced by the test, in order |
 
 ## How it compares
 

package/darwin-native.cjs

@@ -1,12 +1,25 @@
 /** Generated from the owning native asset graph. Loading remains lazy. */
-// The addon path is computed, so a bundler never follows or embeds it. A packaging
-// plugin replaces this file with a static loader when an artifact must carry the addon.
+// The addon path is computed from this file's own location, so a bundler never follows
+// or embeds it and the build machine never becomes a literal of the artifact. Inside a
+// bundle the file has no location (`module.filename` is not absolute there): loading
+// refuses and names the packaging plugin, which replaces this file with a static loader
+// when an artifact must carry the addon.
 module.exports = function loadDarwinAddon() {
+  const location = module.filename;
+  if (typeof location !== 'string' || !location.startsWith('/')) {
+    const refusal = new Error(
+      'The Darwin addon is not packaged into this bundle: build it with createNativePackaging from stitchkit/files/packaging',
+    );
+    refusal.code = 'STITCHKIT_NATIVE_NOT_PACKAGED';
+    throw refusal;
+  }
+  const directory = location.slice(0, location.lastIndexOf('/'));
   try {
-    if (process.arch === 'arm64') return require(`${__dirname}/native/darwin-arm64.node`);
-    if (process.arch === 'x64') return require(`${__dirname}/native/darwin-x64.node`);
+    if (process.arch === 'arm64') return require(`${directory}/native/darwin-arm64.node`);
+    if (process.arch === 'x64') return require(`${directory}/native/darwin-x64.node`);
     throw new Error('Unsupported Darwin addon architecture');
   } catch (cause) {
     throw new Error('Darwin addon loading failed', { cause });
   }
 };
+module.exports.stitchkitNativeLoader = 'stitchkit-native-loader:unpackaged';

package/dist/agent-runtime/deferred-tool-types.d.ts

@@ -1,22 +1,21 @@
 import type { ToolSet } from 'ai';
-import { type ZodObject, type ZodType, z } from 'zod';
-import type { HttpMethod, ToolTransport } from '../contract/define.js';
-import type { EndpointToolAnnotations, EndpointUiMeta } from '../contract/tool-options.js';
+import { z } from 'zod';
 import type { ServiceDef } from '../server/types.js';
 import type { ErrorHintFn, ToolCallHooks, ToolLifecycle } from '../tools/execute-hooks.js';
 import type { ToolExtend } from '../tools/mount.js';
+import type { DeferredAgentRuntimeToolDefinition } from '../tools/runtime-tool-declaration.js';
 import type { AgentRuntimePrepareStep, AgentRuntimeRunContext } from './runtime.js';
-export declare const DeferredAgentToolSearchInputSchema: ZodObject<{
+export declare const DeferredAgentToolSearchInputSchema: z.ZodObject<{
     query: z.ZodString;
     reason: z.ZodOptional<z.ZodEnum<{
         inactive_call: "inactive_call";
     }>>;
 }, z.core.$strip>;
-export declare const DeferredAgentToolMatchSchema: ZodObject<{
+export declare const DeferredAgentToolMatchSchema: z.ZodObject<{
     name: z.ZodString;
     description: z.ZodString;
 }, z.core.$strip>;
-export declare const DeferredAgentToolReceiptSchema: ZodObject<{
+export declare const DeferredAgentToolReceiptSchema: z.ZodObject<{
     schemaVersion: z.ZodLiteral<1>;
     kind: z.ZodLiteral<"stitchkit.deferred-tool-selection">;
     status: z.ZodEnum<{
@@ -28,33 +27,13 @@ export declare const DeferredAgentToolReceiptSchema: ZodObject<{
     runId: z.ZodString;
     surfaceKey: z.ZodString;
     selected: z.ZodArray<z.ZodString>;
-    matches: z.ZodArray<ZodObject<{
+    matches: z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         description: z.ZodString;
     }, z.core.$strip>>;
     truncated: z.ZodBoolean;
 }, z.core.$strip>;
 export type DeferredAgentToolReceipt = z.infer<typeof DeferredAgentToolReceiptSchema>;
-export interface DeferredAgentRuntimeToolDefinition {
-    name: string;
-    description: string;
-    identity: {
-        serviceName: string;
-        action: string;
-        method: HttpMethod;
-        scope?: string;
-        meta?: Record<string, unknown>;
-    };
-    input: ZodObject;
-    output?: ZodType;
-    transports?: readonly ToolTransport[];
-    annotations?: EndpointToolAnnotations;
-    ui?: EndpointUiMeta;
-    handler: unknown;
-    present?: {
-        agent?: unknown;
-    };
-}
 export interface DeferredAgentToolManifestEntry {
     name: string;
     description: string;

package/dist/agent-runtime/deferred-tool-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deferred-tool-types.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/deferred-tool-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,KAAK,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AACxF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACxF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAEjF,eAAO,MAAM,kCAAkC;;;;;iBAQ7C,CAAC;AACH,eAAO,MAAM,4BAA4B;;;iBAGvC,CAAC;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;iBAoBvC,CAAC;AAEL,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,WAAW,kCAAkC;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE;QACR,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,UAAU,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAChC,CAAC;IACF,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IACtC,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC,EAAE,CAAC,EAAE,cAAc,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAC/B;AACD,MAAM,WAAW,8BAA8B;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AACD,MAAM,WAAW,4BAA4B;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;IAC5D,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,SAAS,CAAC,EAAE,WAAW,CAAC;CACzB;AACD,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IACjC,YAAY,CAAC,EAAE,SAAS,kCAAkC,EAAE,CAAC;IAC7D,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9B;AACD,MAAM,WAAW,8BAA8B,CAAC,OAAO;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,SAAS,8BAA8B,EAAE,CAAC;IACpD,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AACD,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,CAAC,CAAC;IACjB,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;CAC3C;AACD,MAAM,WAAW,6BAA6B,CAAC,OAAO;IACpD,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,MAAM,EAAE,CAAC;IACjF,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,CAAC,CACL,KAAK,EAAE,8BAA8B,CAAC,OAAO,CAAC,GAC7C,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;KACnD,CAAC;IACF,UAAU,EAAE;QACV,gBAAgB,EAAE,MAAM,CAAC;QACzB,cAAc,EAAE,MAAM,CAAC;QACvB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,OAAO,CAAC,CAAC,KAAK,EAAE,sBAAsB,GAAG,IAAI,CAAC;CAC/C;AACD,MAAM,MAAM,8BAA8B,CAAC,OAAO,IAAI,6BAA6B,CAAC,OAAO,CAAC,GAC1F,CACI,kCAAkC,GAClC;IACE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kCAAkC,CAAC,CAAC,CAAC;IACvE,aAAa,CAAC,KAAK,EAAE,sBAAsB,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC;CAC/D,CACJ,CAAC;AACJ,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,kCAAkC,CAAC;IAC/C,QAAQ,EAAE,SAAS,8BAA8B,EAAE,CAAC;IACpD,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAC;IAC5D,WAAW,EAAE,8BAA8B,CAAC;IAC5C,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B;AACD,MAAM,WAAW,2BAA2B,CAAC,OAAO;IAClD,KAAK,CACH,UAAU,EAAE,sBAAsB,CAAC,OAAO,CAAC,EAC3C,MAAM,CAAC,EAAE,4BAA4B,GACpC,OAAO,CAAC;IACX,WAAW,CACT,sBAAsB,CAAC,EAAE,uBAAuB,CAAC,OAAO,CAAC,GACxD,uBAAuB,CAAC,OAAO,CAAC,CAAC;CACrC"}
+{"version":3,"file":"deferred-tool-types.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/deferred-tool-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACxF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,mCAAmC,CAAC;AAC5F,OAAO,KAAK,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAEjF,eAAO,MAAM,kCAAkC;;;;;iBAQ7C,CAAC;AACH,eAAO,MAAM,4BAA4B;;;iBAGvC,CAAC;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;iBAoBvC,CAAC;AAEL,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,WAAW,8BAA8B;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AACD,MAAM,WAAW,4BAA4B;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;IAC5D,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,SAAS,CAAC,EAAE,WAAW,CAAC;CACzB;AACD,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IACjC,YAAY,CAAC,EAAE,SAAS,kCAAkC,EAAE,CAAC;IAC7D,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9B;AACD,MAAM,WAAW,8BAA8B,CAAC,OAAO;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,SAAS,8BAA8B,EAAE,CAAC;IACpD,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AACD,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,CAAC,CAAC;IACjB,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;CAC3C;AACD,MAAM,WAAW,6BAA6B,CAAC,OAAO;IACpD,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,MAAM,EAAE,CAAC;IACjF,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,CAAC,CACL,KAAK,EAAE,8BAA8B,CAAC,OAAO,CAAC,GAC7C,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;KACnD,CAAC;IACF,UAAU,EAAE;QACV,gBAAgB,EAAE,MAAM,CAAC;QACzB,cAAc,EAAE,MAAM,CAAC;QACvB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,OAAO,CAAC,CAAC,KAAK,EAAE,sBAAsB,GAAG,IAAI,CAAC;CAC/C;AACD,MAAM,MAAM,8BAA8B,CAAC,OAAO,IAAI,6BAA6B,CAAC,OAAO,CAAC,GAC1F,CACI,kCAAkC,GAClC;IACE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kCAAkC,CAAC,CAAC,CAAC;IACvE,aAAa,CAAC,KAAK,EAAE,sBAAsB,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC;CAC/D,CACJ,CAAC;AACJ,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,kCAAkC,CAAC;IAC/C,QAAQ,EAAE,SAAS,8BAA8B,EAAE,CAAC;IACpD,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAC;IAC5D,WAAW,EAAE,8BAA8B,CAAC;IAC5C,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B;AACD,MAAM,WAAW,2BAA2B,CAAC,OAAO;IAClD,KAAK,CACH,UAAU,EAAE,sBAAsB,CAAC,OAAO,CAAC,EAC3C,MAAM,CAAC,EAAE,4BAA4B,GACpC,OAAO,CAAC;IACX,WAAW,CACT,sBAAsB,CAAC,EAAE,uBAAuB,CAAC,OAAO,CAAC,GACxD,uBAAuB,CAAC,OAAO,CAAC,CAAC;CACrC"}

package/dist/browser/stream.d.ts

@@ -1,17 +1,25 @@
 import type { StreamFinalLinePolicy } from '../contract/define.js';
-export { DEFAULT_STREAM_LINE_BYTES } from '../internal/bounded-lines.js';
-/** Options for `parseNDJSON`. */
+import { type StreamByteSource } from '../internal/bounded-lines.js';
+export { DEFAULT_STREAM_LINE_BYTES, type StreamByteSource, StreamLineLimitError, StreamTruncatedLineError, } from '../internal/bounded-lines.js';
+/** Options for `parseNDJSON` and `createNDJSONDecoder`. */
 export interface ParseNDJSONOptions {
-    /** Maximum bytes retained for one line. Default 1 MiB. */
+    /** Maximum bytes retained for one line; past it, `StreamLineLimitError`. Default 1 MiB. */
     maxLineBytes?: number;
     /** Called for invalid UTF-8/JSON; without it parsing fails closed. */
     onParseError?: (raw: string, error: Error) => void;
-    /** Default `allow`; use `require-newline` when a missing delimiter means truncation. */
+    /**
+     * Default `allow`; use `require-newline` when a missing delimiter means truncation (a socket or
+     * a child's stdout that ends mid-line), so the fragment is `StreamTruncatedLineError`, not a value.
+     */
     finalLine?: StreamFinalLinePolicy;
+    /** Stops reading and cancels the source; the iteration rejects with the signal's reason. */
+    signal?: AbortSignal;
 }
 /**
- * Parse a newline-delimited JSON response body — the client half of
- * `ndjsonRoute`.
+ * Parse newline-delimited JSON — the client half of `ndjsonRoute`, and the reader for any other
+ * byte source: a `Response`, a `ReadableStream<Uint8Array>` (a fetch body, a Bun child's
+ * `stdout`) or an `AsyncIterable<Uint8Array>` (a Node child's `stdout`). A source that delivers
+ * bytes through a callback, such as a `Bun.listen` socket, uses `createNDJSONDecoder`.
  *
  * **Blank lines are skipped**, and that is the contract rather than a
  * convenience. A long-lived NDJSON stream has to send something while it is
@@ -26,18 +34,36 @@ export interface ParseNDJSONOptions {
  * the other end stayed alive for seconds afterwards. An aborted request reaches
  * the route's `context.signal` at once.
  */
-export declare function parseNDJSON<T>(response: Response, options?: ParseNDJSONOptions): AsyncGenerator<T>;
+export declare function parseNDJSON<T>(source: StreamByteSource, options?: ParseNDJSONOptions): AsyncGenerator<T>;
+/**
+ * Push-driven NDJSON for a source that hands over bytes through a callback. `push` returns the
+ * values its chunk completed; `end` returns the value of an unterminated final line, or throws
+ * `StreamTruncatedLineError` under `finalLine: 'require-newline'`.
+ */
+export interface NDJSONDecoder<T> {
+    push(chunk: Uint8Array): T[];
+    end(): T[];
+}
+/**
+ * The same bounded, fatal-UTF-8 NDJSON reading as `parseNDJSON`, for a `Bun.listen` /
+ * `Bun.connect` socket's `data` handler or any other callback source. A line past
+ * `maxLineBytes` throws `StreamLineLimitError` as soon as it crosses the limit; invalid JSON
+ * goes to `onParseError` or throws. (`signal` does not apply: the caller owns the source.)
+ */
+export declare function createNDJSONDecoder<T>(options?: Omit<ParseNDJSONOptions, 'signal'>): NDJSONDecoder<T>;
 /** Options for `parseSSE`. */
 export interface ParseSSEOptions {
-    /** Maximum bytes retained for one SSE line. Default 1 MiB. */
+    /** Maximum bytes retained for one SSE line; past it, `StreamLineLimitError`. Default 1 MiB. */
     maxLineBytes?: number;
     /** Called for invalid UTF-8/JSON; without it parsing fails closed. */
     onParseError?: (raw: string, error: Error) => void;
+    /** Stops reading and cancels the source; the iteration rejects with the signal's reason. */
+    signal?: AbortSignal;
 }
 /**
- * Parse a Server-Sent Events `Response` body into an async generator of JSON
- * values — the client counterpart of `streamSSE`. Stops at the `[DONE]`
- * sentinel; the stream lock is released on every exit path.
+ * Parse Server-Sent Events into an async generator of JSON values — the client counterpart of
+ * `streamSSE`. Reads the same byte sources as `parseNDJSON`. Stops at the `[DONE]` sentinel;
+ * the source is cancelled on every exit path.
  */
-export declare function parseSSE<T>(response: Response, options?: ParseSSEOptions): AsyncGenerator<T>;
+export declare function parseSSE<T>(source: StreamByteSource, options?: ParseSSEOptions): AsyncGenerator<T>;
 //# sourceMappingURL=stream.d.ts.map

package/dist/browser/stream.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stream.d.ts","sourceRoot":"","sources":["../../src/browser/stream.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAGhE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,iCAAiC;AACjC,MAAM,WAAW,kBAAkB;IACjC,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACnD,wFAAwF;IACxF,SAAS,CAAC,EAAE,qBAAqB,CAAC;CACnC;AAYD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAuB,WAAW,CAAC,CAAC,EAClC,QAAQ,EAAE,QAAQ,EAClB,OAAO,CAAC,EAAE,kBAAkB,GAC3B,cAAc,CAAC,CAAC,CAAC,CAkBnB;AAED,8BAA8B;AAC9B,MAAM,WAAW,eAAe;IAC9B,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CACpD;AAED;;;;GAIG;AACH,wBAAuB,QAAQ,CAAC,CAAC,EAC/B,QAAQ,EAAE,QAAQ,EAClB,OAAO,CAAC,EAAE,eAAe,GACxB,cAAc,CAAC,CAAC,CAAC,CAuBnB"}
+{"version":3,"file":"stream.d.ts","sourceRoot":"","sources":["../../src/browser/stream.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAIL,KAAK,gBAAgB,EACtB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,yBAAyB,EACzB,KAAK,gBAAgB,EACrB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AAEnC,2DAA2D;AAC3D,MAAM,WAAW,kBAAkB;IACjC,2FAA2F;IAC3F,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACnD;;;OAGG;IACH,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,4FAA4F;IAC5F,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAiBD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAuB,WAAW,CAAC,CAAC,EAClC,MAAM,EAAE,gBAAgB,EACxB,OAAO,CAAC,EAAE,kBAAkB,GAC3B,cAAc,CAAC,CAAC,CAAC,CA4BnB;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,CAAC,EAAE,CAAC;IAC7B,GAAG,IAAI,CAAC,EAAE,CAAC;CACZ;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EACnC,OAAO,CAAC,EAAE,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAC,GAC3C,aAAa,CAAC,CAAC,CAAC,CAkClB;AAED,8BAA8B;AAC9B,MAAM,WAAW,eAAe;IAC9B,+FAA+F;IAC/F,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACnD,4FAA4F;IAC5F,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAuB,QAAQ,CAAC,CAAC,EAC/B,MAAM,EAAE,gBAAgB,EACxB,OAAO,CAAC,EAAE,eAAe,GACxB,cAAc,CAAC,CAAC,CAAC,CA6BnB"}

package/dist/entrypoints/agent-runtime/browser.js

@@ -68,12 +68,11 @@ import {
   AgentBrowserRequestSchema2,
   agentControlRealtimeContract2
 } from "../../index-yt7gyg5x.js";
-import"../../index-j9gxbztg.js";
-import"../../index-pzb63z66.js";
+import"../../index-ykdcnq1f.js";
 import"../../index-4s0fep5q.js";
 import {
   bindRealtimeClient2
-} from "../../index-sj28htvf.js";
+} from "../../index-pvh3z03x.js";
 import {
   assertPositiveSafeInteger
 } from "../../index-0s4xebbg.js";

package/dist/entrypoints/agent-runtime/coding-tools.js

@@ -1,19 +1,17 @@
 import"../../index-ct75c3at.js";
-import"../../index-r393tnfp.js";
-import"../../index-j9gxbztg.js";
-import"../../index-rpzewktb.js";
+import"../../index-q6crhe1n.js";
+import"../../index-fynr93w4.js";
 import {
   AgentCodingToolLimitsSchema2,
   AgentCodingToolAuthorizationSchema2,
   AgentCodingToolPathAuthorizationSchema2,
   createAgentCodingTools2
-} from "../../index-9bskshe3.js";
-import"../../index-v5ee8ath.js";
-import"../../index-j4zh647a.js";
+} from "../../index-dwf0gymy.js";
+import"../../index-2kbysk9s.js";
 import"../../index-4q9jvqg7.js";
 import"../../index-8ks9b85e.js";
-import"../../index-gxm9rc97.js";
-import"../../index-yvfk3y36.js";
+import"../../index-zrtrjkbf.js";
+import"../../index-636mggad.js";
 export {
   AgentCodingToolAuthorizationSchema2 as AgentCodingToolAuthorizationSchema,
   AgentCodingToolLimitsSchema2 as AgentCodingToolLimitsSchema,

package/dist/entrypoints/agent-runtime/harness.js

@@ -5,33 +5,29 @@ import"../../index-8kzct1d6.js";
 import {
   composeAgentPrompt2,
   createAgentRuntime2
-} from "../../index-gr5g3xfw.js";
+} from "../../index-yz8x0hbx.js";
 import"../../index-qaet40b2.js";
 import"../../index-mnkk1ffz.js";
-import"../../index-j9gxbztg.js";
-import"../../index-rpzewktb.js";
-import"../../index-yex7eg1v.js";
+import"../../index-fynr93w4.js";
 import"../../index-6yxhe58g.js";
 import"../../index-ct75c3at.js";
-import"../../index-r393tnfp.js";
-import"../../index-2k91mewf.js";
-import"../../index-556g5hsh.js";
+import"../../index-q6crhe1n.js";
+import"../../index-dm2fv45z.js";
 import"../../index-c17xcx4k.js";
 import"../../index-0gs4ymfj.js";
 import"../../index-5w6t91ze.js";
-import"../../index-v5ee8ath.js";
+import"../../index-2kbysk9s.js";
 import"../../index-b0w7rbpt.js";
 import {
   walkContainedFiles
-} from "../../index-gxm9rc97.js";
+} from "../../index-zrtrjkbf.js";
 import {
   createAgentHarnessControlServer2
 } from "../../index-hjvje0pf.js";
 import"../../index-299sm5tr.js";
 import {
   defineRuntimeTool2
-} from "../../index-yvfk3y36.js";
-import"../../index-7n68nmc6.js";
+} from "../../index-636mggad.js";
 
 // src/agent-runtime/harness-contract.ts
 import { z } from "zod";