stitchkit 0.108.3 → 0.108.5

package/CHANGELOG.md

@@ -15,6 +15,24 @@ additive**; the first breaking change landed in 0.10.0. Grep the file for
 
 ## [Unreleased]
 
+## [0.108.5] - 2026-10-10
+
+### Fixed
+
+- `stitchkit/cli` — JSON object and record flags now keep working after an MCP input schema is
+  restored through `z.fromJSONSchema`, including schemas with `propertyNames`, `minProperties` or
+  `maxProperties`. The CLI accepts both `--data '{"code":"007"}'` and
+  `--data='{"code":"007"}'`, preserves lexical strings and nested values, and still applies the
+  restored object guards before remote dispatch. Application transform pipes remain untouched.
+
+## [0.108.4] - 2026-10-09
+
+### Fixed
+
+- `stitchkit/agent-runtime/coding-tools` — `edit_file` now inserts `newText` literally when
+  `replaceAll: true`; JavaScript replacement tokens such as `$$`, `$&`, `` $` `` and `$'` no
+  longer rewrite the requested text. Single replacements already had this literal behavior.
+
 ## [0.108.3] - 2026-10-09
 
 ### Added

package/dist/agent-runtime/coding-tool-search-patch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coding-tool-search-patch.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-tool-search-patch.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AA+VhC,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,qBAAqB,EAC7B,MAAM,EAAE,qBAAqB,GAC5B,SAAS,yBAAyB,EAAE,CAsBtC"}
+{"version":3,"file":"coding-tool-search-patch.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-tool-search-patch.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAgWhC,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,qBAAqB,EAC7B,MAAM,EAAE,qBAAqB,GAC5B,SAAS,yBAAyB,EAAE,CAsBtC"}

package/dist/entrypoints/agent-runtime/coding-tools.js

@@ -6,7 +6,7 @@ import {
   AgentCodingToolAuthorizationSchema2,
   AgentCodingToolPathAuthorizationSchema2,
   createAgentCodingTools2
-} from "../../index-tycmtxky.js";
+} from "../../index-sjntc4az.js";
 import"../../index-2kbysk9s.js";
 import"../../index-dj1aycxw.js";
 import"../../index-8ks9b85e.js";

package/dist/entrypoints/agent-runtime/harness.js

@@ -5,14 +5,15 @@ import"../../index-8kzct1d6.js";
 import {
   composeAgentPrompt2,
   createAgentRuntime2
-} from "../../index-yz8x0hbx.js";
+} from "../../index-tpk71wqn.js";
 import"../../index-qaet40b2.js";
 import"../../index-mnkk1ffz.js";
 import"../../index-fynr93w4.js";
-import"../../index-6yxhe58g.js";
+import"../../index-t5sjh517.js";
+import"../../index-cykxpxz5.js";
 import"../../index-ct75c3at.js";
 import"../../index-q6crhe1n.js";
-import"../../index-dm2fv45z.js";
+import"../../index-k4v2kq4q.js";
 import"../../index-c17xcx4k.js";
 import"../../index-0gs4ymfj.js";
 import"../../index-5w6t91ze.js";

package/dist/entrypoints/agent-runtime/sandbox.js

@@ -8,7 +8,7 @@ import"../../index-q6crhe1n.js";
 import"../../index-fynr93w4.js";
 import {
   createAgentCodingTools2
-} from "../../index-tycmtxky.js";
+} from "../../index-sjntc4az.js";
 import"../../index-2kbysk9s.js";
 import {
   COMMAND_CLEANUP_TIMEOUT_MS,

package/dist/entrypoints/agent-runtime.js

@@ -111,22 +111,23 @@ import {
   agentGoalStateSlot2,
   agentTodoStateSlot2,
   createAgentRuntime2
-} from "../index-yz8x0hbx.js";
+} from "../index-tpk71wqn.js";
 import {
   AgentConversationSummarySchema2,
   AgentConversationPageSchema2,
   AgentConversationMessagePageSchema2
 } from "../index-kqnd6a85.js";
 import"../index-fynr93w4.js";
-import"../index-6yxhe58g.js";
+import"../index-t5sjh517.js";
+import"../index-cykxpxz5.js";
 import"../index-ct75c3at.js";
 import"../index-q6crhe1n.js";
-import"../index-dm2fv45z.js";
-import"../index-2s6fpehp.js";
+import"../index-k4v2kq4q.js";
+import"../index-ryv32myz.js";
 import {
   mountAgent2,
   buildToolManifest2
-} from "../index-h7qms8f9.js";
+} from "../index-68y3n9j3.js";
 import {
   createBoundedSinkManager
 } from "../index-qaet40b2.js";
@@ -192,7 +193,7 @@ import {
 import {
   assertPositiveSafeInteger
 } from "../index-0s4xebbg.js";
-import"../index-cx2nh595.js";
+import"../index-3wm2xp2a.js";
 import {
   defineRuntimeTool2,
   executableAgentRuntimeTools

package/dist/entrypoints/cli.js

@@ -1,6 +1,7 @@
+import"../index-t5sjh517.js";
 import {
   coerceJsonArgs2
-} from "../index-6yxhe58g.js";
+} from "../index-cykxpxz5.js";
 import {
   defineCliCommand2,
   DEFAULT_EXIT_CODES2,
@@ -15,12 +16,12 @@ import {
   renderCliView2,
   pollUntilDone2,
   createCli2
-} from "../index-fgq4w9bf.js";
+} from "../index-05s01c94.js";
 import"../index-fynr93w4.js";
 import"../index-ct75c3at.js";
 import"../index-q6crhe1n.js";
-import"../index-dm2fv45z.js";
-import"../index-2s6fpehp.js";
+import"../index-k4v2kq4q.js";
+import"../index-ryv32myz.js";
 import {
   CliBuildSignatureSchema2,
   cliManifestSigningPayload2,
@@ -43,7 +44,7 @@ import {
 import {
   writeFileAtomicSync2
 } from "../index-07dcf2yn.js";
-import"../index-cx2nh595.js";
+import"../index-3wm2xp2a.js";
 import"../index-636mggad.js";
 import {
   argumentsDigest

package/dist/entrypoints/tools/connections.js

@@ -4,6 +4,9 @@ import {
   withDefsDialect
 } from "../../index-q6crhe1n.js";
 import"../../index-fynr93w4.js";
+import {
+  markJsonSchemaObjectGuards
+} from "../../index-t5sjh517.js";
 import {
   withSignalDeadline
 } from "../../index-9tqbxv5p.js";
@@ -856,8 +859,10 @@ function zodObjectFromJsonSchema(schema) {
   if (!schema || Object.keys(schema).length === 0)
     return z.looseObject({});
   const parsed = z.fromJSONSchema(reconcileDefinitionKeyword(schema));
-  if (parsed instanceof z.ZodObject)
+  if (parsed instanceof z.ZodObject) {
+    markJsonSchemaObjectGuards(parsed);
     return parsed;
+  }
   return z.looseObject({});
 }
 function reconcileDefinitionKeyword(schema) {

package/dist/entrypoints/tools/contract.js

@@ -9,7 +9,8 @@ import {
 } from "../../index-0gxvns6s.js";
 import {
   coerceJsonArgs2
-} from "../../index-6yxhe58g.js";
+} from "../../index-cykxpxz5.js";
+import"../../index-t5sjh517.js";
 export {
   AsyncOperationCancelResultSchema2 as AsyncOperationCancelResultSchema,
   McpAnnotationsSchema2 as McpAnnotationsSchema,

package/dist/entrypoints/tools/invoker.js

@@ -1,12 +1,13 @@
 import"../../index-fynr93w4.js";
-import"../../index-6yxhe58g.js";
+import"../../index-t5sjh517.js";
+import"../../index-cykxpxz5.js";
 import"../../index-ct75c3at.js";
 import"../../index-q6crhe1n.js";
-import"../../index-dm2fv45z.js";
-import"../../index-2s6fpehp.js";
+import"../../index-k4v2kq4q.js";
+import"../../index-ryv32myz.js";
 import {
   createToolInvoker2
-} from "../../index-6y9t2fwz.js";
+} from "../../index-kvvpw1kq.js";
 export {
   createToolInvoker2 as createToolInvoker
 };

package/dist/entrypoints/tools/mcp.js

@@ -1,9 +1,10 @@
 import"../../index-ct75c3at.js";
 import"../../index-fynr93w4.js";
-import"../../index-6yxhe58g.js";
+import"../../index-t5sjh517.js";
+import"../../index-cykxpxz5.js";
 import"../../index-q6crhe1n.js";
-import"../../index-dm2fv45z.js";
-import"../../index-2s6fpehp.js";
+import"../../index-k4v2kq4q.js";
+import"../../index-ryv32myz.js";
 import {
   RESOURCE_MIME_TYPE2,
   EXT_APPS_BUNDLE_PLACEHOLDER2,
@@ -19,8 +20,8 @@ import {
   createMcpHttpRoute2,
   createStdioMcpServer2,
   bindStdioProcessSignals2
-} from "../../index-mep4sb48.js";
-import"../../index-cx2nh595.js";
+} from "../../index-x5xs71dw.js";
+import"../../index-3wm2xp2a.js";
 import"../../index-636mggad.js";
 export {
   EXT_APPS_BUNDLE_PLACEHOLDER2 as EXT_APPS_BUNDLE_PLACEHOLDER,

package/dist/entrypoints/tools.js

@@ -7,9 +7,10 @@ import {
 import {
   normalizeError2
 } from "../index-fynr93w4.js";
+import"../index-t5sjh517.js";
 import {
   coerceJsonArgs2
-} from "../index-6yxhe58g.js";
+} from "../index-cykxpxz5.js";
 import"../index-ct75c3at.js";
 import {
   assertToolName,
@@ -22,15 +23,15 @@ import {
 import {
   ToolExecutionControlError2,
   isToolExecutionControlError2
-} from "../index-dm2fv45z.js";
+} from "../index-k4v2kq4q.js";
 import {
   collectTools2
-} from "../index-2s6fpehp.js";
+} from "../index-ryv32myz.js";
 import {
   mountAgent2,
   describeToolCatalog2,
   buildToolManifest2
-} from "../index-h7qms8f9.js";
+} from "../index-68y3n9j3.js";
 import"../index-m38ej7e5.js";
 import {
   ALL_TRANSPORTS2,
@@ -57,7 +58,7 @@ import {
   createMcpHttpRoute2,
   createStdioMcpServer2,
   bindStdioProcessSignals2
-} from "../index-mep4sb48.js";
+} from "../index-x5xs71dw.js";
 import {
   AsyncOperationCancelResultSchema2,
   createAsyncOperationSnapshotSchema2,
@@ -71,7 +72,7 @@ import {
   WaitTimeoutError,
   runWaitOperation,
   createCli2
-} from "../index-fgq4w9bf.js";
+} from "../index-05s01c94.js";
 import {
   ManagedFilePathSchema2,
   ManagedFileRefSchema2
@@ -95,7 +96,7 @@ import {
 import"../index-1bx1xv1k.js";
 import {
   collectToolSurface
-} from "../index-cx2nh595.js";
+} from "../index-3wm2xp2a.js";
 import {
   defineRuntimeTool2,
   createRuntimeToolFactory2
@@ -105,7 +106,7 @@ import {
 } from "../index-yk4g8805.js";
 import {
   createToolInvoker2
-} from "../index-6y9t2fwz.js";
+} from "../index-kvvpw1kq.js";
 import {
   getTraceId2
 } from "../index-y3nemndz.js";

package/dist/{index-fgq4w9bf.js → index-05s01c94.js}

@@ -3,7 +3,7 @@ import {
 } from "./index-fynr93w4.js";
 import {
   coerceJsonArgs2
-} from "./index-6yxhe58g.js";
+} from "./index-cykxpxz5.js";
 import {
   jsonSchemaFields
 } from "./index-ct75c3at.js";
@@ -15,11 +15,11 @@ import {
 import {
   toolResultFromError,
   toolErrorFromResult
-} from "./index-dm2fv45z.js";
+} from "./index-k4v2kq4q.js";
 import {
   createToolRunner,
   formatToolError
-} from "./index-2s6fpehp.js";
+} from "./index-ryv32myz.js";
 import {
   fetchGuarded,
   readCapped
@@ -32,7 +32,7 @@ import {
 } from "./index-eemvahkc.js";
 import {
   collectToolSurface
-} from "./index-cx2nh595.js";
+} from "./index-3wm2xp2a.js";
 import {
   formatZodError2
 } from "./index-1eeqpadm.js";

package/dist/{index-cx2nh595.js → index-3wm2xp2a.js}

@@ -3,7 +3,7 @@ import {
 } from "./index-q6crhe1n.js";
 import {
   contractToolMountable
-} from "./index-2s6fpehp.js";
+} from "./index-ryv32myz.js";
 import {
   runtimeToolMountable
 } from "./index-636mggad.js";

package/dist/{index-h7qms8f9.js → index-68y3n9j3.js}

@@ -2,18 +2,18 @@ import {
   toolResultFromError,
   toolCauseFromResult,
   isToolExecutionControlError2
-} from "./index-dm2fv45z.js";
+} from "./index-k4v2kq4q.js";
 import {
   createToolRunner,
   formatToolError
-} from "./index-2s6fpehp.js";
+} from "./index-ryv32myz.js";
 import {
   AgentToolError2,
   resolveToolDurability
 } from "./index-c17xcx4k.js";
 import {
   collectToolSurface
-} from "./index-cx2nh595.js";
+} from "./index-3wm2xp2a.js";
 import {
   agentPresenterOf
 } from "./index-636mggad.js";

package/dist/{index-6yxhe58g.js → index-cykxpxz5.js}

@@ -1,3 +1,6 @@
+import {
+  jsonSchemaObjectCoercionMembers
+} from "./index-t5sjh517.js";
 import {
   safeJsonParse
 } from "./index-zsarb5xp.js";
@@ -76,6 +79,10 @@ function coerceValue(value, schema, path) {
   if (schema instanceof z.ZodOptional || schema instanceof z.ZodNullable || schema instanceof z.ZodDefault) {
     return coerceValue(value, schema.unwrap(), path);
   }
+  const guardedMembers = jsonSchemaObjectCoercionMembers(schema);
+  if (guardedMembers) {
+    return guardedMembers.reduce((current, member) => coerceValue(current, member, path), value);
+  }
   let current = value;
   if (typeof current === "string" && needsJsonCoercion(schema)) {
     if (acceptsRawString(schema)) {

package/dist/{index-dm2fv45z.js → index-k4v2kq4q.js}

@@ -4,7 +4,7 @@ import {
 } from "./index-fynr93w4.js";
 import {
   coerceJsonArgs2
-} from "./index-6yxhe58g.js";
+} from "./index-cykxpxz5.js";
 import {
   applyToolViewDefaults,
   projectToolView,

package/dist/{index-6y9t2fwz.js → index-kvvpw1kq.js}

@@ -3,11 +3,11 @@ import {
 } from "./index-q6crhe1n.js";
 import {
   toolErrorFromResult
-} from "./index-dm2fv45z.js";
+} from "./index-k4v2kq4q.js";
 import {
   collectTools2,
   createToolRunner
-} from "./index-2s6fpehp.js";
+} from "./index-ryv32myz.js";
 import {
   AppError2
 } from "./index-j9gxbztg.js";

package/dist/{index-2s6fpehp.js → index-ryv32myz.js}

@@ -7,7 +7,7 @@ import {
 import {
   toolErrorFromResult,
   executeToolMethod
-} from "./index-dm2fv45z.js";
+} from "./index-k4v2kq4q.js";
 import {
   isRetryableStatus2
 } from "./index-j9gxbztg.js";

package/dist/{index-tycmtxky.js → index-sjntc4az.js}

@@ -925,7 +925,8 @@ async function editFile(config, limits, input) {
         });
       }
       const replacements = input.replaceAll ? count : 1;
-      const changed = input.replaceAll ? source.replaceAll(input.oldText, input.newText) : source.replace(input.oldText, () => input.newText);
+      const literalReplacement = () => input.newText;
+      const changed = input.replaceAll ? source.replaceAll(input.oldText, literalReplacement) : source.replace(input.oldText, literalReplacement);
       const bytes = Buffer.byteLength(changed);
       const resultSha256 = sha256(changed);
       if (bytes > limits.maxWriteBytes) {

package/dist/index-t5sjh517.js

@@ -0,0 +1,100 @@
+// src/tools/schema/json-schema-origin.ts
+import { z } from "zod";
+var JSON_SCHEMA_OBJECT_GUARD = Symbol.for("stitchkit.tools.json-schema-object-guard-origin.v1");
+function mark(schema) {
+  if (Reflect.get(schema, JSON_SCHEMA_OBJECT_GUARD) === true)
+    return;
+  const marked = Reflect.defineProperty(schema, JSON_SCHEMA_OBJECT_GUARD, {
+    configurable: false,
+    enumerable: false,
+    value: true,
+    writable: false
+  });
+  if (!marked)
+    throw new Error("Cannot mark a restored JSON Schema object guard");
+}
+function markObjectGuard(schema) {
+  if (schema.in instanceof z.ZodTransform && schema.out instanceof z.ZodObject && schema.in.def.checks?.length) {
+    mark(schema);
+    return true;
+  }
+  return false;
+}
+function markJsonSchemaObjectGuards(schema) {
+  const visited = new WeakMap;
+  const visit = (current) => {
+    const known = visited.get(current);
+    if (known !== undefined)
+      return known;
+    visited.set(current, false);
+    if (current instanceof z.ZodPipe) {
+      const guarded = markObjectGuard(current);
+      visit(current.out);
+      visited.set(current, guarded);
+      return guarded;
+    }
+    if (current instanceof z.ZodObject) {
+      for (const field of Object.values(current.shape))
+        visit(field);
+      const catchall = current.def.catchall;
+      if (catchall)
+        visit(catchall);
+      return false;
+    }
+    if (current instanceof z.ZodArray) {
+      visit(current.element);
+      return false;
+    }
+    if (current instanceof z.ZodTuple) {
+      for (const item of current.def.items)
+        visit(item);
+      if (current.def.rest)
+        visit(current.def.rest);
+      return false;
+    }
+    if (current instanceof z.ZodRecord) {
+      visit(current.keyType);
+      visit(current.valueType);
+      return false;
+    }
+    if (current instanceof z.ZodUnion) {
+      for (const option of current.def.options)
+        visit(option);
+      return false;
+    }
+    if (current instanceof z.ZodIntersection) {
+      const leftGuarded = visit(current.def.left);
+      const rightGuarded = visit(current.def.right);
+      const guarded = leftGuarded || rightGuarded;
+      if (guarded)
+        mark(current);
+      visited.set(current, guarded);
+      return guarded;
+    }
+    if (current instanceof z.ZodOptional || current instanceof z.ZodExactOptional || current instanceof z.ZodNullable || current instanceof z.ZodDefault || current instanceof z.ZodPrefault || current instanceof z.ZodNonOptional || current instanceof z.ZodCatch || current instanceof z.ZodReadonly || current instanceof z.ZodLazy) {
+      const guarded = visit(current.unwrap());
+      if (guarded)
+        mark(current);
+      visited.set(current, guarded);
+      return guarded;
+    }
+    return false;
+  };
+  visit(schema);
+}
+function jsonSchemaObjectCoercionMembers(schema) {
+  if (Reflect.get(schema, JSON_SCHEMA_OBJECT_GUARD) !== true)
+    return;
+  if (schema instanceof z.ZodPipe && schema.out instanceof z.ZodObject) {
+    return [schema.out];
+  }
+  if (schema instanceof z.ZodIntersection) {
+    return [schema.def.left, schema.def.right];
+  }
+  if (schema instanceof z.ZodOptional || schema instanceof z.ZodExactOptional || schema instanceof z.ZodNullable || schema instanceof z.ZodDefault || schema instanceof z.ZodPrefault || schema instanceof z.ZodNonOptional || schema instanceof z.ZodCatch || schema instanceof z.ZodReadonly || schema instanceof z.ZodLazy) {
+    return [schema.unwrap()];
+  }
+  return;
+}
+
+export { markJsonSchemaObjectGuards, jsonSchemaObjectCoercionMembers };

package/dist/{index-yz8x0hbx.js → index-tpk71wqn.js}

@@ -14,7 +14,7 @@ import {
 import {
   ToolExecutionControlError2,
   isToolExecutionControlError2
-} from "./index-dm2fv45z.js";
+} from "./index-k4v2kq4q.js";
 import {
   agentDurableEventId2
 } from "./index-mnkk1ffz.js";

package/dist/{index-mep4sb48.js → index-x5xs71dw.js}

@@ -13,15 +13,15 @@ import {
   parseToolCallArguments,
   toolResultFromError,
   observed
-} from "./index-dm2fv45z.js";
+} from "./index-k4v2kq4q.js";
 import {
   collectTools2,
   createToolRunner,
   formatToolError
-} from "./index-2s6fpehp.js";
+} from "./index-ryv32myz.js";
 import {
   collectToolSurface
-} from "./index-cx2nh595.js";
+} from "./index-3wm2xp2a.js";
 import {
   DEFAULT_CORS_ALLOW_HEADERS2,
   DEFAULT_PROCESS_SIGNALS,

package/dist/tools/connections/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../src/tools/connections/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,SAAS,EAAK,MAAM,KAAK,CAAC;AACxC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAErE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAG7D,oEAAoE;AACpE,MAAM,MAAM,uBAAuB,GAAG,CACpC,OAAO,CAAC,EAAE,cAAc,KACrB,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;AAEtD,UAAU,cAAc;IACtB,QAAQ,IAAI,IAAI,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,EACzC,MAAM,EAAE;IACN,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B,EACD,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,GAC9C,OAAO,CAAC,CAAC,CAAC,CAUZ;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAC1C,SAAS,CAKX;AAcD,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,sEAAsE;AACtE,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,EAAE,qBAAqB,KAAK,IAAI,CAAC;AAElF,6EAA6E;AAC7E,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAIhF;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EACzC,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,EACjC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,qBAAqB,EAC/C,SAAS,EAAE,0BAA0B,GACpC,qBAAqB,EAAE,CAczB"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../src/tools/connections/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,SAAS,EAAK,MAAM,KAAK,CAAC;AACxC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAErE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAI7D,oEAAoE;AACpE,MAAM,MAAM,uBAAuB,GAAG,CACpC,OAAO,CAAC,EAAE,cAAc,KACrB,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;AAEtD,UAAU,cAAc;IACtB,QAAQ,IAAI,IAAI,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,EACzC,MAAM,EAAE;IACN,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B,EACD,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,GAC9C,OAAO,CAAC,CAAC,CAAC,CAUZ;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAC1C,SAAS,CAQX;AAcD,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,sEAAsE;AACtE,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,EAAE,qBAAqB,KAAK,IAAI,CAAC;AAElF,6EAA6E;AAC7E,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAIhF;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EACzC,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,EACjC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,qBAAqB,EAC/C,SAAS,EAAE,0BAA0B,GACpC,qBAAqB,EAAE,CAczB"}

package/dist/tools/schema/coerce.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coerce.d.ts","sourceRoot":"","sources":["../../../src/tools/schema/coerce.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA2KxB;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,SAAS,GAC5B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGzB"}
+{"version":3,"file":"coerce.d.ts","sourceRoot":"","sources":["../../../src/tools/schema/coerce.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAoLxB;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,SAAS,GAC5B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGzB"}

package/dist/tools/schema/json-schema-origin.d.ts

@@ -0,0 +1,14 @@
+import { z } from 'zod';
+/**
+ * Record which structural pipes came from the one foreign JSON Schema boundary.
+ * The walk runs once after `z.fromJSONSchema`; coercion later reads only this
+ * provenance and never guesses from a transform's public shape or metadata.
+ */
+export declare function markJsonSchemaObjectGuards(schema: z.core.$ZodType): void;
+/**
+ * Schemas that can guide coercion at a proven foreign object boundary.
+ * Intersections need both branches: one carries the key guard, while another
+ * can carry nested object fields that also need recursive coercion.
+ */
+export declare function jsonSchemaObjectCoercionMembers(schema: z.core.$ZodType): readonly z.core.$ZodType[] | undefined;
+//# sourceMappingURL=json-schema-origin.d.ts.map

package/dist/tools/schema/json-schema-origin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-schema-origin.d.ts","sourceRoot":"","sources":["../../../src/tools/schema/json-schema-origin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgCxB;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAiExE;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,GACtB,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,SAAS,CAsBxC"}

package/llms/agent-runtime-coding-tools.txt

@@ -21,7 +21,7 @@ artifact store is supplied, `read_output`.
 
 | Export | Kind | Summary |
 |--------|------|---------|
-| `createAgentCodingTools` | function | construct direct host-authorized bounded file, listing, glob, search, exact-snippet edit, shell and artifact runtime-tool definitions; every ordinary refusal is a typed code with an instructive `hint`, and filesystem operations use Linux `/proc/self/fd` or the packaged macOS Node-API backend and otherwise fail closed |
+| `createAgentCodingTools` | function | construct direct host-authorized bounded file, listing, glob, search, exact-snippet edit, shell and artifact runtime-tool definitions; `edit_file` inserts `newText` literally in both single and `replaceAll` modes; every ordinary refusal is a typed code with an instructive `hint`, and filesystem operations use Linux `/proc/self/fd` or the packaged macOS Node-API backend and otherwise fail closed |
 | `AGENT_CODING_TOOL_NAMES` | const | the mounted tool names — `read_file`, `write_file`, `edit_file`, `list_directory`, `glob`, `search_files`, `run_command`, `read_output` |
 | `AgentCodingToolDefinition` | _type_ | peer-free structural direct-tool shape accepted by the canonical runtime-tool surface |
 | `AgentCodingToolConfig` | _type_ | absolute root, required operation authorization, optional async/sync `authorizePath({ path })` shared by direct file effects and discovery, finite executable alias map, exact child environment and optional limits |

package/llms/agent-runtime.txt

@@ -322,8 +322,9 @@ includes the exact workspace-relative `recoveryPath`; an absolute path outside t
 suggested replacement. Applying the suggestion still passes the same descriptor-relative
 containment and symlink checks.
 
-`edit_file` replaces one exact snippet. `oldText` is itself the freshness guard for the region it
-changes, so the digest is the optional `expectedSha256` and an edit is one call; pass the digest
+`edit_file` replaces one exact snippet. It inserts `newText` literally in both single and
+`replaceAll` modes, including JavaScript replacement tokens such as `$$`, `$&`, `` $` `` and `$'`.
+`oldText` is itself the freshness guard for the region it changes, so the digest is the optional `expectedSha256` and an edit is one call; pass the digest
 `read_file` returned when you want the whole-file guarantee, and read the `sha256` it returns to
 chain the next edit without re-reading. The read, the occurrence count and the construction of the
 new content all happen inside one per-target lock, so two concurrent edits of different snippets in

package/llms/cli.2.txt

@@ -269,7 +269,7 @@ SDK nor the `ai` peer.
 | `parseCliArgs` | function | argv → typed tool args against a schema (advanced) |
 | `routeCliArgv` | function | select the command out of argv without duplicating the global-option grammar (advanced) |
 | `extractCliGlobalOptions` | function | lift the application's own global options out of argv before routing (advanced) |
-| `coerceJsonArgs` | function | the second half of `parseCliArgs` — parse array/object values a consumer sends itself, without the `stitchkit/tools` barrel |
+| `coerceJsonArgs` | function | the second half of `parseCliArgs` — parse array/object values a consumer sends itself, including discovered MCP object guards restored from JSON Schema, without the `stitchkit/tools` barrel |
 | `CliArgumentError` | class | the refusal `parseCliArgs` and the view flags raise; a CLI reports it and exits `2` |
 | `renderCliView` | function | compute an aggregate over a result (`--count-by`, `--sum`, `--top`, `--table`) — [guide](../guide/cli.md#aggregate-views) |
 | `createCliProfileStore` | function | named `0600` credential profiles resolved by name, with the never-substitute rule built in — [guide](../guide/cli.md#named-profiles) |

package/llms/cli.txt

@@ -244,12 +244,16 @@ string, the schema says what it should be:
 | `z.enum([...])`      | `--size large`                                 |
 | `z.array(z.string())`| `--tag a --tag b` → `["a","b"]`                |
 | `z.object({...})`    | `--opts '{"k":"v"}'` (JSON) or `--opts.k v`    |
+| `z.record(z.string(), z.unknown())` | `--data '{"code":"007"}'` (JSON) |
 | `.optional()` / `.default()` | not required                           |
 
 Primitive literals use the same coercion through optional, nullable and default wrappers and as
 array elements. A literal set whose members have different primitive types stays lexical because
 argv has no type tag: for `z.literal([7, '007'])`, `--value 007` remains the string `"007"` rather
 than being guessed as the number `7`. The unchanged Zod schema makes the final admission decision.
+Object and record JSON keeps the same behavior when a CLI discovers a tool through MCP. Restored
+`propertyNames`, `minProperties` and `maxProperties` constraints still run before dispatch; CLI
+coercion does not execute application transforms.
 
 After a bare boolean flag, the next token is its value when it is exactly
 `true` or `false` — `--active false` turns it off, as it reads. Any other word

package/llms/tools.3.txt

@@ -279,7 +279,7 @@ Advanced building blocks — the shared machinery the mounts are built on.
 | `TransportCounts` | _type_ | per-transport counts (`{ HTTP, MCP, AGENT, CLI }`) |
 | `ToolSurfaceProjection` | _type_ | the one readonly `{ services?, runtimeTools? }` container shared by full, MCP-only and introspection surfaces (`buildToolManifest`, `listToolNames`, `summarizeTransports` take `ToolSurfaceProjection<RuntimeToolDefinition>`) |
 | `ToolManifestConfig` | _type_ | mixed surface plus required model-facing `transport` and presentation options |
-| `coerceJsonArgs` | function | coerce JSON-stringified array/object tool arguments; throws a `ZodError` naming the field when a union that keeps a string member receives a string that parses to an array its array member accepts |
+| `coerceJsonArgs` | function | coerce JSON-stringified array/object tool arguments, including object guards restored from JSON Schema; arbitrary transform pipes stay untouched; throws a `ZodError` naming the field when a union that keeps a string member receives a string that parses to an array its array member accepts |
 | `flattenToolJsonSchema` | function | project structurally identifiable discriminated unions into conservative object joins; scalar collisions retain provable types, object/array collisions retain structural alternatives, and field descriptions retain discriminator labels plus availability/requiredness hints; the projection never executes validation |
 | `ToolPresentationSchema` | _type_ | immutable model-facing JSON Schema document shared by tool transports |
 | `MountableTool` | _type_ | one operation with separate executable CLI argument schema and model-facing presentation schema |

package/llms-full.txt

@@ -5511,8 +5511,9 @@ includes the exact workspace-relative `recoveryPath`; an absolute path outside t
 suggested replacement. Applying the suggestion still passes the same descriptor-relative
 containment and symlink checks.
 
-`edit_file` replaces one exact snippet. `oldText` is itself the freshness guard for the region it
-changes, so the digest is the optional `expectedSha256` and an edit is one call; pass the digest
+`edit_file` replaces one exact snippet. It inserts `newText` literally in both single and
+`replaceAll` modes, including JavaScript replacement tokens such as `$$`, `$&`, `` $` `` and `$'`.
+`oldText` is itself the freshness guard for the region it changes, so the digest is the optional `expectedSha256` and an edit is one call; pass the digest
 `read_file` returned when you want the whole-file guarantee, and read the `sha256` it returns to
 chain the next edit without re-reading. The read, the occurrence count and the construction of the
 new content all happen inside one per-target lock, so two concurrent edits of different snippets in
@@ -9647,12 +9648,16 @@ string, the schema says what it should be:
 | `z.enum([...])`      | `--size large`                                 |
 | `z.array(z.string())`| `--tag a --tag b` → `["a","b"]`                |
 | `z.object({...})`    | `--opts '{"k":"v"}'` (JSON) or `--opts.k v`    |
+| `z.record(z.string(), z.unknown())` | `--data '{"code":"007"}'` (JSON) |
 | `.optional()` / `.default()` | not required                           |
 
 Primitive literals use the same coercion through optional, nullable and default wrappers and as
 array elements. A literal set whose members have different primitive types stays lexical because
 argv has no type tag: for `z.literal([7, '007'])`, `--value 007` remains the string `"007"` rather
 than being guessed as the number `7`. The unchanged Zod schema makes the final admission decision.
+Object and record JSON keeps the same behavior when a CLI discovers a tool through MCP. Restored
+`propertyNames`, `minProperties` and `maxProperties` constraints still run before dispatch; CLI
+coercion does not execute application transforms.
 
 After a bare boolean flag, the next token is its value when it is exactly
 `true` or `false` — `--active false` turns it off, as it reads. Any other word
@@ -21843,7 +21848,7 @@ artifact store is supplied, `read_output`.
 
 | Export | Kind | Summary |
 |--------|------|---------|
-| `createAgentCodingTools` | function | construct direct host-authorized bounded file, listing, glob, search, exact-snippet edit, shell and artifact runtime-tool definitions; every ordinary refusal is a typed code with an instructive `hint`, and filesystem operations use Linux `/proc/self/fd` or the packaged macOS Node-API backend and otherwise fail closed |
+| `createAgentCodingTools` | function | construct direct host-authorized bounded file, listing, glob, search, exact-snippet edit, shell and artifact runtime-tool definitions; `edit_file` inserts `newText` literally in both single and `replaceAll` modes; every ordinary refusal is a typed code with an instructive `hint`, and filesystem operations use Linux `/proc/self/fd` or the packaged macOS Node-API backend and otherwise fail closed |
 | `AGENT_CODING_TOOL_NAMES` | const | the mounted tool names — `read_file`, `write_file`, `edit_file`, `list_directory`, `glob`, `search_files`, `run_command`, `read_output` |
 | `AgentCodingToolDefinition` | _type_ | peer-free structural direct-tool shape accepted by the canonical runtime-tool surface |
 | `AgentCodingToolConfig` | _type_ | absolute root, required operation authorization, optional async/sync `authorizePath({ path })` shared by direct file effects and discovery, finite executable alias map, exact child environment and optional limits |
@@ -22368,7 +22373,7 @@ Advanced building blocks — the shared machinery the mounts are built on.
 | `TransportCounts` | _type_ | per-transport counts (`{ HTTP, MCP, AGENT, CLI }`) |
 | `ToolSurfaceProjection` | _type_ | the one readonly `{ services?, runtimeTools? }` container shared by full, MCP-only and introspection surfaces (`buildToolManifest`, `listToolNames`, `summarizeTransports` take `ToolSurfaceProjection<RuntimeToolDefinition>`) |
 | `ToolManifestConfig` | _type_ | mixed surface plus required model-facing `transport` and presentation options |
-| `coerceJsonArgs` | function | coerce JSON-stringified array/object tool arguments; throws a `ZodError` naming the field when a union that keeps a string member receives a string that parses to an array its array member accepts |
+| `coerceJsonArgs` | function | coerce JSON-stringified array/object tool arguments, including object guards restored from JSON Schema; arbitrary transform pipes stay untouched; throws a `ZodError` naming the field when a union that keeps a string member receives a string that parses to an array its array member accepts |
 | `flattenToolJsonSchema` | function | project structurally identifiable discriminated unions into conservative object joins; scalar collisions retain provable types, object/array collisions retain structural alternatives, and field descriptions retain discriminator labels plus availability/requiredness hints; the projection never executes validation |
 | `ToolPresentationSchema` | _type_ | immutable model-facing JSON Schema document shared by tool transports |
 | `MountableTool` | _type_ | one operation with separate executable CLI argument schema and model-facing presentation schema |
@@ -22887,7 +22892,7 @@ SDK nor the `ai` peer.
 | `parseCliArgs` | function | argv → typed tool args against a schema (advanced) |
 | `routeCliArgv` | function | select the command out of argv without duplicating the global-option grammar (advanced) |
 | `extractCliGlobalOptions` | function | lift the application's own global options out of argv before routing (advanced) |
-| `coerceJsonArgs` | function | the second half of `parseCliArgs` — parse array/object values a consumer sends itself, without the `stitchkit/tools` barrel |
+| `coerceJsonArgs` | function | the second half of `parseCliArgs` — parse array/object values a consumer sends itself, including discovered MCP object guards restored from JSON Schema, without the `stitchkit/tools` barrel |
 | `CliArgumentError` | class | the refusal `parseCliArgs` and the view flags raise; a CLI reports it and exits `2` |
 | `renderCliView` | function | compute an aggregate over a result (`--count-by`, `--sum`, `--top`, `--table`) — [guide](../guide/cli.md#aggregate-views) |
 | `createCliProfileStore` | function | named `0600` credential profiles resolved by name, with the never-substitute rule built in — [guide](../guide/cli.md#named-profiles) |

package/llms.txt

@@ -18,17 +18,17 @@ Load the slice for each entrypoint your code imports — `import … from 'stitc
 - **stitchkit/tools/contract**: [llms/tools-contract.txt](llms/tools-contract.txt) 0.2 KB
 - **stitchkit/tools/invoker**: [llms/tools-invoker.txt](llms/tools-invoker.txt) 0.2 KB
 - **stitchkit/tools/connections**: [llms/tools-connections.txt](llms/tools-connections.txt) 3.7 KB
-- **stitchkit/cli**: [llms/cli.txt](llms/cli.txt) 42.8 KB → [llms/cli.2.txt](llms/cli.2.txt) 20.1 KB
+- **stitchkit/cli**: [llms/cli.txt](llms/cli.txt) 43.1 KB → [llms/cli.2.txt](llms/cli.2.txt) 20.2 KB
 - **stitchkit/cli/publish**: [llms/cli-publish.txt](llms/cli-publish.txt) 1.5 KB
 - **stitchkit/remote**: [llms/remote.txt](llms/remote.txt) 1.0 KB
 - **stitchkit/contract**: [llms/contract.txt](llms/contract.txt) 31.9 KB
 - **stitchkit/primitives**: [llms/primitives.txt](llms/primitives.txt) 11.7 KB
 - **stitchkit/server**: [llms/server.txt](llms/server.txt) 45.3 KB → [llms/server.2.txt](llms/server.2.txt) 14.6 KB → [llms/server.3.txt](llms/server.3.txt) 45.6 KB → [llms/server.4.txt](llms/server.4.txt) 38.3 KB → [llms/server.5.txt](llms/server.5.txt) 22.1 KB
 - **stitchkit/observability**: [llms/observability.txt](llms/observability.txt) 45.9 KB
-- **stitchkit/agent-runtime**: [llms/agent-runtime.txt](llms/agent-runtime.txt) 37.0 KB → [llms/agent-runtime.2.txt](llms/agent-runtime.2.txt) 46.7 KB → [llms/agent-runtime.3.txt](llms/agent-runtime.3.txt) 34.7 KB
+- **stitchkit/agent-runtime**: [llms/agent-runtime.txt](llms/agent-runtime.txt) 37.1 KB → [llms/agent-runtime.2.txt](llms/agent-runtime.2.txt) 46.7 KB → [llms/agent-runtime.3.txt](llms/agent-runtime.3.txt) 34.7 KB
 - **stitchkit/agent-runtime/testing**: [llms/agent-runtime-testing.txt](llms/agent-runtime-testing.txt) 2.6 KB
 - **stitchkit/agent-runtime/harness**: [llms/agent-runtime-harness.txt](llms/agent-runtime-harness.txt) 11.0 KB
-- **stitchkit/agent-runtime/coding-tools**: [llms/agent-runtime-coding-tools.txt](llms/agent-runtime-coding-tools.txt) 4.9 KB
+- **stitchkit/agent-runtime/coding-tools**: [llms/agent-runtime-coding-tools.txt](llms/agent-runtime-coding-tools.txt) 5.0 KB
 - **stitchkit/agent-runtime/browser**: [llms/agent-runtime-browser.txt](llms/agent-runtime-browser.txt) 3.8 KB
 - **stitchkit/agent-runtime/openrouter**: [llms/agent-runtime-openrouter.txt](llms/agent-runtime-openrouter.txt) 1.1 KB
 - **stitchkit/agent-runtime/sqlite/bun**: [llms/agent-runtime-sqlite-bun.txt](llms/agent-runtime-sqlite-bun.txt) 1.8 KB

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stitchkit",
-  "version": "0.108.3",
+  "version": "0.108.5",
   "description": "Contract-first backend framework — one defineContract() into an HTTP API, MCP tools, AI-agent tools and a typed client. Bun and Node.",
   "keywords": [
     "bun",