stitchkit 0.108.4 → 0.108.5

package/CHANGELOG.md

@@ -15,6 +15,16 @@ additive**; the first breaking change landed in 0.10.0. Grep the file for
 
 ## [Unreleased]
 
+## [0.108.5] - 2026-10-10
+
+### Fixed
+
+- `stitchkit/cli` — JSON object and record flags now keep working after an MCP input schema is
+  restored through `z.fromJSONSchema`, including schemas with `propertyNames`, `minProperties` or
+  `maxProperties`. The CLI accepts both `--data '{"code":"007"}'` and
+  `--data='{"code":"007"}'`, preserves lexical strings and nested values, and still applies the
+  restored object guards before remote dispatch. Application transform pipes remain untouched.
+
 ## [0.108.4] - 2026-10-09
 
 ### Fixed

package/dist/entrypoints/agent-runtime/harness.js

@@ -5,14 +5,15 @@ import"../../index-8kzct1d6.js";
 import {
   composeAgentPrompt2,
   createAgentRuntime2
-} from "../../index-yz8x0hbx.js";
+} from "../../index-tpk71wqn.js";
 import"../../index-qaet40b2.js";
 import"../../index-mnkk1ffz.js";
 import"../../index-fynr93w4.js";
-import"../../index-6yxhe58g.js";
+import"../../index-t5sjh517.js";
+import"../../index-cykxpxz5.js";
 import"../../index-ct75c3at.js";
 import"../../index-q6crhe1n.js";
-import"../../index-dm2fv45z.js";
+import"../../index-k4v2kq4q.js";
 import"../../index-c17xcx4k.js";
 import"../../index-0gs4ymfj.js";
 import"../../index-5w6t91ze.js";

package/dist/entrypoints/agent-runtime.js

@@ -111,22 +111,23 @@ import {
   agentGoalStateSlot2,
   agentTodoStateSlot2,
   createAgentRuntime2
-} from "../index-yz8x0hbx.js";
+} from "../index-tpk71wqn.js";
 import {
   AgentConversationSummarySchema2,
   AgentConversationPageSchema2,
   AgentConversationMessagePageSchema2
 } from "../index-kqnd6a85.js";
 import"../index-fynr93w4.js";
-import"../index-6yxhe58g.js";
+import"../index-t5sjh517.js";
+import"../index-cykxpxz5.js";
 import"../index-ct75c3at.js";
 import"../index-q6crhe1n.js";
-import"../index-dm2fv45z.js";
-import"../index-2s6fpehp.js";
+import"../index-k4v2kq4q.js";
+import"../index-ryv32myz.js";
 import {
   mountAgent2,
   buildToolManifest2
-} from "../index-h7qms8f9.js";
+} from "../index-68y3n9j3.js";
 import {
   createBoundedSinkManager
 } from "../index-qaet40b2.js";
@@ -192,7 +193,7 @@ import {
 import {
   assertPositiveSafeInteger
 } from "../index-0s4xebbg.js";
-import"../index-cx2nh595.js";
+import"../index-3wm2xp2a.js";
 import {
   defineRuntimeTool2,
   executableAgentRuntimeTools

package/dist/entrypoints/cli.js

@@ -1,6 +1,7 @@
+import"../index-t5sjh517.js";
 import {
   coerceJsonArgs2
-} from "../index-6yxhe58g.js";
+} from "../index-cykxpxz5.js";
 import {
   defineCliCommand2,
   DEFAULT_EXIT_CODES2,
@@ -15,12 +16,12 @@ import {
   renderCliView2,
   pollUntilDone2,
   createCli2
-} from "../index-fgq4w9bf.js";
+} from "../index-05s01c94.js";
 import"../index-fynr93w4.js";
 import"../index-ct75c3at.js";
 import"../index-q6crhe1n.js";
-import"../index-dm2fv45z.js";
-import"../index-2s6fpehp.js";
+import"../index-k4v2kq4q.js";
+import"../index-ryv32myz.js";
 import {
   CliBuildSignatureSchema2,
   cliManifestSigningPayload2,
@@ -43,7 +44,7 @@ import {
 import {
   writeFileAtomicSync2
 } from "../index-07dcf2yn.js";
-import"../index-cx2nh595.js";
+import"../index-3wm2xp2a.js";
 import"../index-636mggad.js";
 import {
   argumentsDigest

package/dist/entrypoints/tools/connections.js

@@ -4,6 +4,9 @@ import {
   withDefsDialect
 } from "../../index-q6crhe1n.js";
 import"../../index-fynr93w4.js";
+import {
+  markJsonSchemaObjectGuards
+} from "../../index-t5sjh517.js";
 import {
   withSignalDeadline
 } from "../../index-9tqbxv5p.js";
@@ -856,8 +859,10 @@ function zodObjectFromJsonSchema(schema) {
   if (!schema || Object.keys(schema).length === 0)
     return z.looseObject({});
   const parsed = z.fromJSONSchema(reconcileDefinitionKeyword(schema));
-  if (parsed instanceof z.ZodObject)
+  if (parsed instanceof z.ZodObject) {
+    markJsonSchemaObjectGuards(parsed);
     return parsed;
+  }
   return z.looseObject({});
 }
 function reconcileDefinitionKeyword(schema) {

package/dist/entrypoints/tools/contract.js

@@ -9,7 +9,8 @@ import {
 } from "../../index-0gxvns6s.js";
 import {
   coerceJsonArgs2
-} from "../../index-6yxhe58g.js";
+} from "../../index-cykxpxz5.js";
+import"../../index-t5sjh517.js";
 export {
   AsyncOperationCancelResultSchema2 as AsyncOperationCancelResultSchema,
   McpAnnotationsSchema2 as McpAnnotationsSchema,

package/dist/entrypoints/tools/invoker.js

@@ -1,12 +1,13 @@
 import"../../index-fynr93w4.js";
-import"../../index-6yxhe58g.js";
+import"../../index-t5sjh517.js";
+import"../../index-cykxpxz5.js";
 import"../../index-ct75c3at.js";
 import"../../index-q6crhe1n.js";
-import"../../index-dm2fv45z.js";
-import"../../index-2s6fpehp.js";
+import"../../index-k4v2kq4q.js";
+import"../../index-ryv32myz.js";
 import {
   createToolInvoker2
-} from "../../index-6y9t2fwz.js";
+} from "../../index-kvvpw1kq.js";
 export {
   createToolInvoker2 as createToolInvoker
 };

package/dist/entrypoints/tools/mcp.js

@@ -1,9 +1,10 @@
 import"../../index-ct75c3at.js";
 import"../../index-fynr93w4.js";
-import"../../index-6yxhe58g.js";
+import"../../index-t5sjh517.js";
+import"../../index-cykxpxz5.js";
 import"../../index-q6crhe1n.js";
-import"../../index-dm2fv45z.js";
-import"../../index-2s6fpehp.js";
+import"../../index-k4v2kq4q.js";
+import"../../index-ryv32myz.js";
 import {
   RESOURCE_MIME_TYPE2,
   EXT_APPS_BUNDLE_PLACEHOLDER2,
@@ -19,8 +20,8 @@ import {
   createMcpHttpRoute2,
   createStdioMcpServer2,
   bindStdioProcessSignals2
-} from "../../index-mep4sb48.js";
-import"../../index-cx2nh595.js";
+} from "../../index-x5xs71dw.js";
+import"../../index-3wm2xp2a.js";
 import"../../index-636mggad.js";
 export {
   EXT_APPS_BUNDLE_PLACEHOLDER2 as EXT_APPS_BUNDLE_PLACEHOLDER,

package/dist/entrypoints/tools.js

@@ -7,9 +7,10 @@ import {
 import {
   normalizeError2
 } from "../index-fynr93w4.js";
+import"../index-t5sjh517.js";
 import {
   coerceJsonArgs2
-} from "../index-6yxhe58g.js";
+} from "../index-cykxpxz5.js";
 import"../index-ct75c3at.js";
 import {
   assertToolName,
@@ -22,15 +23,15 @@ import {
 import {
   ToolExecutionControlError2,
   isToolExecutionControlError2
-} from "../index-dm2fv45z.js";
+} from "../index-k4v2kq4q.js";
 import {
   collectTools2
-} from "../index-2s6fpehp.js";
+} from "../index-ryv32myz.js";
 import {
   mountAgent2,
   describeToolCatalog2,
   buildToolManifest2
-} from "../index-h7qms8f9.js";
+} from "../index-68y3n9j3.js";
 import"../index-m38ej7e5.js";
 import {
   ALL_TRANSPORTS2,
@@ -57,7 +58,7 @@ import {
   createMcpHttpRoute2,
   createStdioMcpServer2,
   bindStdioProcessSignals2
-} from "../index-mep4sb48.js";
+} from "../index-x5xs71dw.js";
 import {
   AsyncOperationCancelResultSchema2,
   createAsyncOperationSnapshotSchema2,
@@ -71,7 +72,7 @@ import {
   WaitTimeoutError,
   runWaitOperation,
   createCli2
-} from "../index-fgq4w9bf.js";
+} from "../index-05s01c94.js";
 import {
   ManagedFilePathSchema2,
   ManagedFileRefSchema2
@@ -95,7 +96,7 @@ import {
 import"../index-1bx1xv1k.js";
 import {
   collectToolSurface
-} from "../index-cx2nh595.js";
+} from "../index-3wm2xp2a.js";
 import {
   defineRuntimeTool2,
   createRuntimeToolFactory2
@@ -105,7 +106,7 @@ import {
 } from "../index-yk4g8805.js";
 import {
   createToolInvoker2
-} from "../index-6y9t2fwz.js";
+} from "../index-kvvpw1kq.js";
 import {
   getTraceId2
 } from "../index-y3nemndz.js";

package/dist/{index-fgq4w9bf.js → index-05s01c94.js}

@@ -3,7 +3,7 @@ import {
 } from "./index-fynr93w4.js";
 import {
   coerceJsonArgs2
-} from "./index-6yxhe58g.js";
+} from "./index-cykxpxz5.js";
 import {
   jsonSchemaFields
 } from "./index-ct75c3at.js";
@@ -15,11 +15,11 @@ import {
 import {
   toolResultFromError,
   toolErrorFromResult
-} from "./index-dm2fv45z.js";
+} from "./index-k4v2kq4q.js";
 import {
   createToolRunner,
   formatToolError
-} from "./index-2s6fpehp.js";
+} from "./index-ryv32myz.js";
 import {
   fetchGuarded,
   readCapped
@@ -32,7 +32,7 @@ import {
 } from "./index-eemvahkc.js";
 import {
   collectToolSurface
-} from "./index-cx2nh595.js";
+} from "./index-3wm2xp2a.js";
 import {
   formatZodError2
 } from "./index-1eeqpadm.js";

package/dist/{index-cx2nh595.js → index-3wm2xp2a.js}

@@ -3,7 +3,7 @@ import {
 } from "./index-q6crhe1n.js";
 import {
   contractToolMountable
-} from "./index-2s6fpehp.js";
+} from "./index-ryv32myz.js";
 import {
   runtimeToolMountable
 } from "./index-636mggad.js";

package/dist/{index-h7qms8f9.js → index-68y3n9j3.js}

@@ -2,18 +2,18 @@ import {
   toolResultFromError,
   toolCauseFromResult,
   isToolExecutionControlError2
-} from "./index-dm2fv45z.js";
+} from "./index-k4v2kq4q.js";
 import {
   createToolRunner,
   formatToolError
-} from "./index-2s6fpehp.js";
+} from "./index-ryv32myz.js";
 import {
   AgentToolError2,
   resolveToolDurability
 } from "./index-c17xcx4k.js";
 import {
   collectToolSurface
-} from "./index-cx2nh595.js";
+} from "./index-3wm2xp2a.js";
 import {
   agentPresenterOf
 } from "./index-636mggad.js";

package/dist/{index-6yxhe58g.js → index-cykxpxz5.js}

@@ -1,3 +1,6 @@
+import {
+  jsonSchemaObjectCoercionMembers
+} from "./index-t5sjh517.js";
 import {
   safeJsonParse
 } from "./index-zsarb5xp.js";
@@ -76,6 +79,10 @@ function coerceValue(value, schema, path) {
   if (schema instanceof z.ZodOptional || schema instanceof z.ZodNullable || schema instanceof z.ZodDefault) {
     return coerceValue(value, schema.unwrap(), path);
   }
+  const guardedMembers = jsonSchemaObjectCoercionMembers(schema);
+  if (guardedMembers) {
+    return guardedMembers.reduce((current, member) => coerceValue(current, member, path), value);
+  }
   let current = value;
   if (typeof current === "string" && needsJsonCoercion(schema)) {
     if (acceptsRawString(schema)) {

package/dist/{index-dm2fv45z.js → index-k4v2kq4q.js}

@@ -4,7 +4,7 @@ import {
 } from "./index-fynr93w4.js";
 import {
   coerceJsonArgs2
-} from "./index-6yxhe58g.js";
+} from "./index-cykxpxz5.js";
 import {
   applyToolViewDefaults,
   projectToolView,

package/dist/{index-6y9t2fwz.js → index-kvvpw1kq.js}

@@ -3,11 +3,11 @@ import {
 } from "./index-q6crhe1n.js";
 import {
   toolErrorFromResult
-} from "./index-dm2fv45z.js";
+} from "./index-k4v2kq4q.js";
 import {
   collectTools2,
   createToolRunner
-} from "./index-2s6fpehp.js";
+} from "./index-ryv32myz.js";
 import {
   AppError2
 } from "./index-j9gxbztg.js";

package/dist/{index-2s6fpehp.js → index-ryv32myz.js}

@@ -7,7 +7,7 @@ import {
 import {
   toolErrorFromResult,
   executeToolMethod
-} from "./index-dm2fv45z.js";
+} from "./index-k4v2kq4q.js";
 import {
   isRetryableStatus2
 } from "./index-j9gxbztg.js";

package/dist/index-t5sjh517.js

@@ -0,0 +1,100 @@
+// src/tools/schema/json-schema-origin.ts
+import { z } from "zod";
+var JSON_SCHEMA_OBJECT_GUARD = Symbol.for("stitchkit.tools.json-schema-object-guard-origin.v1");
+function mark(schema) {
+  if (Reflect.get(schema, JSON_SCHEMA_OBJECT_GUARD) === true)
+    return;
+  const marked = Reflect.defineProperty(schema, JSON_SCHEMA_OBJECT_GUARD, {
+    configurable: false,
+    enumerable: false,
+    value: true,
+    writable: false
+  });
+  if (!marked)
+    throw new Error("Cannot mark a restored JSON Schema object guard");
+}
+function markObjectGuard(schema) {
+  if (schema.in instanceof z.ZodTransform && schema.out instanceof z.ZodObject && schema.in.def.checks?.length) {
+    mark(schema);
+    return true;
+  }
+  return false;
+}
+function markJsonSchemaObjectGuards(schema) {
+  const visited = new WeakMap;
+  const visit = (current) => {
+    const known = visited.get(current);
+    if (known !== undefined)
+      return known;
+    visited.set(current, false);
+    if (current instanceof z.ZodPipe) {
+      const guarded = markObjectGuard(current);
+      visit(current.out);
+      visited.set(current, guarded);
+      return guarded;
+    }
+    if (current instanceof z.ZodObject) {
+      for (const field of Object.values(current.shape))
+        visit(field);
+      const catchall = current.def.catchall;
+      if (catchall)
+        visit(catchall);
+      return false;
+    }
+    if (current instanceof z.ZodArray) {
+      visit(current.element);
+      return false;
+    }
+    if (current instanceof z.ZodTuple) {
+      for (const item of current.def.items)
+        visit(item);
+      if (current.def.rest)
+        visit(current.def.rest);
+      return false;
+    }
+    if (current instanceof z.ZodRecord) {
+      visit(current.keyType);
+      visit(current.valueType);
+      return false;
+    }
+    if (current instanceof z.ZodUnion) {
+      for (const option of current.def.options)
+        visit(option);
+      return false;
+    }
+    if (current instanceof z.ZodIntersection) {
+      const leftGuarded = visit(current.def.left);
+      const rightGuarded = visit(current.def.right);
+      const guarded = leftGuarded || rightGuarded;
+      if (guarded)
+        mark(current);
+      visited.set(current, guarded);
+      return guarded;
+    }
+    if (current instanceof z.ZodOptional || current instanceof z.ZodExactOptional || current instanceof z.ZodNullable || current instanceof z.ZodDefault || current instanceof z.ZodPrefault || current instanceof z.ZodNonOptional || current instanceof z.ZodCatch || current instanceof z.ZodReadonly || current instanceof z.ZodLazy) {
+      const guarded = visit(current.unwrap());
+      if (guarded)
+        mark(current);
+      visited.set(current, guarded);
+      return guarded;
+    }
+    return false;
+  };
+  visit(schema);
+}
+function jsonSchemaObjectCoercionMembers(schema) {
+  if (Reflect.get(schema, JSON_SCHEMA_OBJECT_GUARD) !== true)
+    return;
+  if (schema instanceof z.ZodPipe && schema.out instanceof z.ZodObject) {
+    return [schema.out];
+  }
+  if (schema instanceof z.ZodIntersection) {
+    return [schema.def.left, schema.def.right];
+  }
+  if (schema instanceof z.ZodOptional || schema instanceof z.ZodExactOptional || schema instanceof z.ZodNullable || schema instanceof z.ZodDefault || schema instanceof z.ZodPrefault || schema instanceof z.ZodNonOptional || schema instanceof z.ZodCatch || schema instanceof z.ZodReadonly || schema instanceof z.ZodLazy) {
+    return [schema.unwrap()];
+  }
+  return;
+}
+
+export { markJsonSchemaObjectGuards, jsonSchemaObjectCoercionMembers };

package/dist/{index-yz8x0hbx.js → index-tpk71wqn.js}

@@ -14,7 +14,7 @@ import {
 import {
   ToolExecutionControlError2,
   isToolExecutionControlError2
-} from "./index-dm2fv45z.js";
+} from "./index-k4v2kq4q.js";
 import {
   agentDurableEventId2
 } from "./index-mnkk1ffz.js";

package/dist/{index-mep4sb48.js → index-x5xs71dw.js}

@@ -13,15 +13,15 @@ import {
   parseToolCallArguments,
   toolResultFromError,
   observed
-} from "./index-dm2fv45z.js";
+} from "./index-k4v2kq4q.js";
 import {
   collectTools2,
   createToolRunner,
   formatToolError
-} from "./index-2s6fpehp.js";
+} from "./index-ryv32myz.js";
 import {
   collectToolSurface
-} from "./index-cx2nh595.js";
+} from "./index-3wm2xp2a.js";
 import {
   DEFAULT_CORS_ALLOW_HEADERS2,
   DEFAULT_PROCESS_SIGNALS,

package/dist/tools/connections/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../src/tools/connections/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,SAAS,EAAK,MAAM,KAAK,CAAC;AACxC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAErE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAG7D,oEAAoE;AACpE,MAAM,MAAM,uBAAuB,GAAG,CACpC,OAAO,CAAC,EAAE,cAAc,KACrB,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;AAEtD,UAAU,cAAc;IACtB,QAAQ,IAAI,IAAI,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,EACzC,MAAM,EAAE;IACN,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B,EACD,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,GAC9C,OAAO,CAAC,CAAC,CAAC,CAUZ;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAC1C,SAAS,CAKX;AAcD,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,sEAAsE;AACtE,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,EAAE,qBAAqB,KAAK,IAAI,CAAC;AAElF,6EAA6E;AAC7E,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAIhF;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EACzC,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,EACjC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,qBAAqB,EAC/C,SAAS,EAAE,0BAA0B,GACpC,qBAAqB,EAAE,CAczB"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../src/tools/connections/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,SAAS,EAAK,MAAM,KAAK,CAAC;AACxC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAErE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAI7D,oEAAoE;AACpE,MAAM,MAAM,uBAAuB,GAAG,CACpC,OAAO,CAAC,EAAE,cAAc,KACrB,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;AAEtD,UAAU,cAAc;IACtB,QAAQ,IAAI,IAAI,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,EACzC,MAAM,EAAE;IACN,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B,EACD,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,GAC9C,OAAO,CAAC,CAAC,CAAC,CAUZ;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAC1C,SAAS,CAQX;AAcD,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,sEAAsE;AACtE,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,EAAE,qBAAqB,KAAK,IAAI,CAAC;AAElF,6EAA6E;AAC7E,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAIhF;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EACzC,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,EACjC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,qBAAqB,EAC/C,SAAS,EAAE,0BAA0B,GACpC,qBAAqB,EAAE,CAczB"}

package/dist/tools/schema/coerce.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coerce.d.ts","sourceRoot":"","sources":["../../../src/tools/schema/coerce.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA2KxB;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,SAAS,GAC5B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGzB"}
+{"version":3,"file":"coerce.d.ts","sourceRoot":"","sources":["../../../src/tools/schema/coerce.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAoLxB;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,SAAS,GAC5B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGzB"}

package/dist/tools/schema/json-schema-origin.d.ts

@@ -0,0 +1,14 @@
+import { z } from 'zod';
+/**
+ * Record which structural pipes came from the one foreign JSON Schema boundary.
+ * The walk runs once after `z.fromJSONSchema`; coercion later reads only this
+ * provenance and never guesses from a transform's public shape or metadata.
+ */
+export declare function markJsonSchemaObjectGuards(schema: z.core.$ZodType): void;
+/**
+ * Schemas that can guide coercion at a proven foreign object boundary.
+ * Intersections need both branches: one carries the key guard, while another
+ * can carry nested object fields that also need recursive coercion.
+ */
+export declare function jsonSchemaObjectCoercionMembers(schema: z.core.$ZodType): readonly z.core.$ZodType[] | undefined;
+//# sourceMappingURL=json-schema-origin.d.ts.map

package/dist/tools/schema/json-schema-origin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-schema-origin.d.ts","sourceRoot":"","sources":["../../../src/tools/schema/json-schema-origin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgCxB;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAiExE;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,GACtB,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,SAAS,CAsBxC"}

package/llms/cli.2.txt

@@ -269,7 +269,7 @@ SDK nor the `ai` peer.
 | `parseCliArgs` | function | argv → typed tool args against a schema (advanced) |
 | `routeCliArgv` | function | select the command out of argv without duplicating the global-option grammar (advanced) |
 | `extractCliGlobalOptions` | function | lift the application's own global options out of argv before routing (advanced) |
-| `coerceJsonArgs` | function | the second half of `parseCliArgs` — parse array/object values a consumer sends itself, without the `stitchkit/tools` barrel |
+| `coerceJsonArgs` | function | the second half of `parseCliArgs` — parse array/object values a consumer sends itself, including discovered MCP object guards restored from JSON Schema, without the `stitchkit/tools` barrel |
 | `CliArgumentError` | class | the refusal `parseCliArgs` and the view flags raise; a CLI reports it and exits `2` |
 | `renderCliView` | function | compute an aggregate over a result (`--count-by`, `--sum`, `--top`, `--table`) — [guide](../guide/cli.md#aggregate-views) |
 | `createCliProfileStore` | function | named `0600` credential profiles resolved by name, with the never-substitute rule built in — [guide](../guide/cli.md#named-profiles) |

package/llms/cli.txt

@@ -244,12 +244,16 @@ string, the schema says what it should be:
 | `z.enum([...])`      | `--size large`                                 |
 | `z.array(z.string())`| `--tag a --tag b` → `["a","b"]`                |
 | `z.object({...})`    | `--opts '{"k":"v"}'` (JSON) or `--opts.k v`    |
+| `z.record(z.string(), z.unknown())` | `--data '{"code":"007"}'` (JSON) |
 | `.optional()` / `.default()` | not required                           |
 
 Primitive literals use the same coercion through optional, nullable and default wrappers and as
 array elements. A literal set whose members have different primitive types stays lexical because
 argv has no type tag: for `z.literal([7, '007'])`, `--value 007` remains the string `"007"` rather
 than being guessed as the number `7`. The unchanged Zod schema makes the final admission decision.
+Object and record JSON keeps the same behavior when a CLI discovers a tool through MCP. Restored
+`propertyNames`, `minProperties` and `maxProperties` constraints still run before dispatch; CLI
+coercion does not execute application transforms.
 
 After a bare boolean flag, the next token is its value when it is exactly
 `true` or `false` — `--active false` turns it off, as it reads. Any other word

package/llms/tools.3.txt

@@ -279,7 +279,7 @@ Advanced building blocks — the shared machinery the mounts are built on.
 | `TransportCounts` | _type_ | per-transport counts (`{ HTTP, MCP, AGENT, CLI }`) |
 | `ToolSurfaceProjection` | _type_ | the one readonly `{ services?, runtimeTools? }` container shared by full, MCP-only and introspection surfaces (`buildToolManifest`, `listToolNames`, `summarizeTransports` take `ToolSurfaceProjection<RuntimeToolDefinition>`) |
 | `ToolManifestConfig` | _type_ | mixed surface plus required model-facing `transport` and presentation options |
-| `coerceJsonArgs` | function | coerce JSON-stringified array/object tool arguments; throws a `ZodError` naming the field when a union that keeps a string member receives a string that parses to an array its array member accepts |
+| `coerceJsonArgs` | function | coerce JSON-stringified array/object tool arguments, including object guards restored from JSON Schema; arbitrary transform pipes stay untouched; throws a `ZodError` naming the field when a union that keeps a string member receives a string that parses to an array its array member accepts |
 | `flattenToolJsonSchema` | function | project structurally identifiable discriminated unions into conservative object joins; scalar collisions retain provable types, object/array collisions retain structural alternatives, and field descriptions retain discriminator labels plus availability/requiredness hints; the projection never executes validation |
 | `ToolPresentationSchema` | _type_ | immutable model-facing JSON Schema document shared by tool transports |
 | `MountableTool` | _type_ | one operation with separate executable CLI argument schema and model-facing presentation schema |

package/llms-full.txt

@@ -9648,12 +9648,16 @@ string, the schema says what it should be:
 | `z.enum([...])`      | `--size large`                                 |
 | `z.array(z.string())`| `--tag a --tag b` → `["a","b"]`                |
 | `z.object({...})`    | `--opts '{"k":"v"}'` (JSON) or `--opts.k v`    |
+| `z.record(z.string(), z.unknown())` | `--data '{"code":"007"}'` (JSON) |
 | `.optional()` / `.default()` | not required                           |
 
 Primitive literals use the same coercion through optional, nullable and default wrappers and as
 array elements. A literal set whose members have different primitive types stays lexical because
 argv has no type tag: for `z.literal([7, '007'])`, `--value 007` remains the string `"007"` rather
 than being guessed as the number `7`. The unchanged Zod schema makes the final admission decision.
+Object and record JSON keeps the same behavior when a CLI discovers a tool through MCP. Restored
+`propertyNames`, `minProperties` and `maxProperties` constraints still run before dispatch; CLI
+coercion does not execute application transforms.
 
 After a bare boolean flag, the next token is its value when it is exactly
 `true` or `false` — `--active false` turns it off, as it reads. Any other word
@@ -22369,7 +22373,7 @@ Advanced building blocks — the shared machinery the mounts are built on.
 | `TransportCounts` | _type_ | per-transport counts (`{ HTTP, MCP, AGENT, CLI }`) |
 | `ToolSurfaceProjection` | _type_ | the one readonly `{ services?, runtimeTools? }` container shared by full, MCP-only and introspection surfaces (`buildToolManifest`, `listToolNames`, `summarizeTransports` take `ToolSurfaceProjection<RuntimeToolDefinition>`) |
 | `ToolManifestConfig` | _type_ | mixed surface plus required model-facing `transport` and presentation options |
-| `coerceJsonArgs` | function | coerce JSON-stringified array/object tool arguments; throws a `ZodError` naming the field when a union that keeps a string member receives a string that parses to an array its array member accepts |
+| `coerceJsonArgs` | function | coerce JSON-stringified array/object tool arguments, including object guards restored from JSON Schema; arbitrary transform pipes stay untouched; throws a `ZodError` naming the field when a union that keeps a string member receives a string that parses to an array its array member accepts |
 | `flattenToolJsonSchema` | function | project structurally identifiable discriminated unions into conservative object joins; scalar collisions retain provable types, object/array collisions retain structural alternatives, and field descriptions retain discriminator labels plus availability/requiredness hints; the projection never executes validation |
 | `ToolPresentationSchema` | _type_ | immutable model-facing JSON Schema document shared by tool transports |
 | `MountableTool` | _type_ | one operation with separate executable CLI argument schema and model-facing presentation schema |
@@ -22888,7 +22892,7 @@ SDK nor the `ai` peer.
 | `parseCliArgs` | function | argv → typed tool args against a schema (advanced) |
 | `routeCliArgv` | function | select the command out of argv without duplicating the global-option grammar (advanced) |
 | `extractCliGlobalOptions` | function | lift the application's own global options out of argv before routing (advanced) |
-| `coerceJsonArgs` | function | the second half of `parseCliArgs` — parse array/object values a consumer sends itself, without the `stitchkit/tools` barrel |
+| `coerceJsonArgs` | function | the second half of `parseCliArgs` — parse array/object values a consumer sends itself, including discovered MCP object guards restored from JSON Schema, without the `stitchkit/tools` barrel |
 | `CliArgumentError` | class | the refusal `parseCliArgs` and the view flags raise; a CLI reports it and exits `2` |
 | `renderCliView` | function | compute an aggregate over a result (`--count-by`, `--sum`, `--top`, `--table`) — [guide](../guide/cli.md#aggregate-views) |
 | `createCliProfileStore` | function | named `0600` credential profiles resolved by name, with the never-substitute rule built in — [guide](../guide/cli.md#named-profiles) |

package/llms.txt

@@ -18,7 +18,7 @@ Load the slice for each entrypoint your code imports — `import … from 'stitc
 - **stitchkit/tools/contract**: [llms/tools-contract.txt](llms/tools-contract.txt) 0.2 KB
 - **stitchkit/tools/invoker**: [llms/tools-invoker.txt](llms/tools-invoker.txt) 0.2 KB
 - **stitchkit/tools/connections**: [llms/tools-connections.txt](llms/tools-connections.txt) 3.7 KB
-- **stitchkit/cli**: [llms/cli.txt](llms/cli.txt) 42.8 KB → [llms/cli.2.txt](llms/cli.2.txt) 20.1 KB
+- **stitchkit/cli**: [llms/cli.txt](llms/cli.txt) 43.1 KB → [llms/cli.2.txt](llms/cli.2.txt) 20.2 KB
 - **stitchkit/cli/publish**: [llms/cli-publish.txt](llms/cli-publish.txt) 1.5 KB
 - **stitchkit/remote**: [llms/remote.txt](llms/remote.txt) 1.0 KB
 - **stitchkit/contract**: [llms/contract.txt](llms/contract.txt) 31.9 KB

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stitchkit",
-  "version": "0.108.4",
+  "version": "0.108.5",
   "description": "Contract-first backend framework — one defineContract() into an HTTP API, MCP tools, AI-agent tools and a typed client. Bun and Node.",
   "keywords": [
     "bun",