stitchkit 0.109.4 → 0.110.1

package/dist/{index-k3ty2b88.js → index-e1sjcjfy.js}

@@ -11,7 +11,7 @@ import {
   spawnBunChild,
   spawnBunInheritedChild,
   ownerLossGuardEntry
-} from "./index-dj1aycxw.js";
+} from "./index-84bf5spd.js";
 import {
   raceAbort
 } from "./index-b0kddvzw.js";
@@ -23,6 +23,73 @@ import {
   assertPositiveSafeInteger
 } from "./index-0s4xebbg.js";
 
+// src/process/group-presence.ts
+function processGroupExists(pid) {
+  try {
+    process.kill(-pid, 0);
+    return true;
+  } catch (error) {
+    if (error instanceof Error && "code" in error) {
+      if (error.code === "ESRCH")
+        return false;
+      if (process.platform === "darwin" && error.code === "EPERM")
+        return true;
+    }
+    throw error;
+  }
+}
+
+// src/process/group-settlement.ts
+import { execFile } from "node:child_process";
+function hasLiveGroupMember(table, group) {
+  for (const row of table.split(/\r?\n/)) {
+    if (!row.trim())
+      continue;
+    const fields = /^\s*(\d+)\s+(\S+)\s*$/.exec(row);
+    if (!fields)
+      throw new Error("Invalid process group observation");
+    if (Number(fields[1]) === group && !/^[ZX]/.test(fields[2] ?? ""))
+      return true;
+  }
+  return false;
+}
+function processGroups(timeoutMs) {
+  return new Promise((resolve, reject) => {
+    execFile("ps", ["-axo", "pgid=,stat="], { encoding: "utf8", timeout: timeoutMs, killSignal: "SIGKILL", maxBuffer: 1024 * 1024 }, (error, stdout) => {
+      if (error)
+        reject(new Error("Could not observe command process group settlement", { cause: error }));
+      else
+        resolve(stdout);
+    });
+  });
+}
+async function waitForProcessGroupExit(pid, deadline) {
+  if (pid === undefined)
+    return;
+  let observations = 0;
+  let lastStates = [];
+  for (;; ) {
+    const remaining = Math.ceil(deadline - performance.now());
+    if (remaining <= 0)
+      throw new Error("Command process group settlement was not confirmed after SIGKILL", {
+        cause: { groupId: pid, observations, lastStates }
+      });
+    if (!processGroupExists(pid))
+      return;
+    const table = await processGroups(remaining);
+    observations++;
+    if (!hasLiveGroupMember(table, pid))
+      return;
+    lastStates = table.split(/\r?\n/).flatMap((row) => {
+      const fields = /^\s*(\d+)\s+(\S+)\s*$/.exec(row);
+      return Number(fields?.[1]) === pid ? [fields?.[2] ?? "unknown"] : [];
+    }).slice(0, 16);
+    if (!processGroupExists(pid))
+      return;
+    await sleep(Math.min(5, Math.max(0, deadline - performance.now())));
+  }
+}
+
 // src/process/group.ts
 function createCommandDeadline(timeoutMs, reason) {
   assertPositiveSafeInteger("Command deadline", timeoutMs, RangeError);
@@ -66,16 +133,7 @@ function signalGroup(pid, signal) {
 function exists(pid) {
   if (pid === undefined)
     return false;
-  try {
-    process.kill(-pid, 0);
-    return true;
-  } catch (error) {
-    if (isErrno(error, "ESRCH"))
-      return false;
-    if (deniedOnDarwin(error))
-      return true;
-    throw error;
-  }
+  return processGroupExists(pid);
 }
 async function signalUntilSettled(pid, signal, deadline) {
   for (;; ) {
@@ -89,11 +147,18 @@ async function signalUntilSettled(pid, signal, deadline) {
     }
   }
 }
+async function killAndSettleGroup(pid, deadline, cleanupTimeoutMs) {
+  const cleanupDeadline = Math.min(deadline, performance.now() + cleanupTimeoutMs);
+  const signalled = await signalUntilSettled(pid, "SIGKILL", cleanupDeadline);
+  if (signalled)
+    await waitForProcessGroupExit(pid, cleanupDeadline);
+  return signalled;
+}
 async function stopCommandGroup(stop) {
   const { pid, policy } = stop;
   const deadline = performance.now() + policy.graceMs + stop.cleanupTimeoutMs;
   if (stop.force || policy.killOn?.aborted)
-    return signalUntilSettled(pid, "SIGKILL", deadline);
+    return killAndSettleGroup(pid, deadline, stop.cleanupTimeoutMs);
   if (!await signalUntilSettled(pid, policy.signal, deadline))
     return false;
   const until = performance.now() + policy.graceMs;
@@ -110,7 +175,7 @@ async function stopCommandGroup(stop) {
     present = exists(pid);
   }
   if (present)
-    await signalUntilSettled(pid, "SIGKILL", deadline);
+    await killAndSettleGroup(pid, deadline, stop.cleanupTimeoutMs);
   return true;
 }
 async function stopCommandLeader(stop) {
@@ -136,7 +201,7 @@ async function stopCommandLeader(stop) {
     policy.killOn?.removeEventListener("abort", end);
     grace.abort();
   }
-  return await signalUntilSettled(pid, "SIGKILL", deadline) || signalled;
+  return await killAndSettleGroup(pid, deadline, stop.cleanupTimeoutMs) || signalled;
 }
 async function stopLeaderAlone(stop) {
   const { leader, policy } = stop;
@@ -676,8 +741,13 @@ function createLeaderSettlement(options, signal) {
 function createOutputDrain(options, signal) {
   const captured = { stdout: [], stderr: [] };
   let total = 0;
-  const drain = async (stream, channel) => {
+  const drain = async (stream, channel, admitted) => {
+    let admission = admitted;
     for await (const chunk of stream) {
+      if (admission) {
+        await admission;
+        admission = undefined;
+      }
       if (signal.aborted)
         continue;
       if (!(chunk instanceof Uint8Array))
@@ -877,15 +947,19 @@ function startNativeCommand(input, onSpawn, driver) {
       throw commandCleanupError(cause);
     }
   };
+  const admitted = Promise.withResolvers();
   const run = (async () => {
     try {
-      const pid = await raceAbort(launched.start(), controller.signal);
-      if (pid !== undefined)
-        options.onLeaderStarted?.({ pid });
+      const started = launched.start();
       const drains = Promise.all([
-        output.drain(stdout, "stdout"),
-        output.drain(stderr, "stderr")
+        output.drain(stdout, "stdout", admitted.promise),
+        output.drain(stderr, "stderr", admitted.promise)
       ]);
+      drains.catch((error) => controller.abort(error));
+      const pid = await raceAbort(started, controller.signal);
+      if (pid !== undefined)
+        options.onLeaderStarted?.({ pid });
+      admitted.resolve();
       await raceAbort(Promise.all([drains, leader.then(settleLeader)]), controller.signal);
       const status = await raceAbort(closed, controller.signal);
       if (spawnFailure !== undefined)
@@ -897,6 +971,7 @@ function startNativeCommand(input, onSpawn, driver) {
       };
     } catch (error) {
       controller.abort(error);
+      admitted.resolve();
       await cleanupNativeCommand({
         error,
         transport: acquired,

package/dist/{index-ryv32myz.js → index-ghwntn9n.js}

@@ -7,7 +7,7 @@ import {
 import {
   toolErrorFromResult,
   executeToolMethod
-} from "./index-k4v2kq4q.js";
+} from "./index-mha6b4vk.js";
 import {
   isRetryableStatus2
 } from "./index-j9gxbztg.js";

package/dist/index-hqsbtvta.js

@@ -0,0 +1,92 @@
+import {
+  ApiError2
+} from "./index-kfjkb396.js";
+import {
+  sleep
+} from "./index-eemvahkc.js";
+
+// src/browser/chunked-upload.ts
+function isRetryableUploadFailure(error) {
+  if (ApiError2.is(error)) {
+    if (error.status === 0)
+      return error.code === "UNKNOWN_ERROR" || error.code === "REQUEST_TIMEOUT";
+    return error.status === 429 || error.status >= 500;
+  }
+  return error instanceof TypeError;
+}
+async function uploadInChunks2(config) {
+  const { file, chunkBytes, signal } = config;
+  if (!Number.isSafeInteger(chunkBytes) || chunkBytes <= 0) {
+    throw new TypeError("uploadInChunks: chunkBytes must be a positive integer");
+  }
+  if (!Number.isSafeInteger(file.size) || file.size < 0) {
+    throw new TypeError("uploadInChunks: the file size must be a whole number of bytes");
+  }
+  if (file.size === 0)
+    throw new TypeError("uploadInChunks: the file is empty");
+  const totalBytes = file.size;
+  const chunkCount = Math.ceil(totalBytes / chunkBytes);
+  const uploadId = config.uploadId ?? crypto.randomUUID();
+  const retries = config.retries ?? 3;
+  const retryDelayMs = config.retryDelayMs ?? 1000;
+  const report = (sentBytes, index, attempt) => {
+    if (!config.onProgress)
+      return;
+    try {
+      config.onProgress({ sentBytes, totalBytes, index, chunkCount, attempt });
+    } catch {}
+  };
+  throwIfAborted(signal);
+  const opened = await repeating(() => config.init({ uploadId, totalBytes, chunkBytes, chunkCount }, { signal }), { retries, retryDelayMs, signal });
+  if (opened) {
+    report(totalBytes, chunkCount, 1);
+    return opened.finished;
+  }
+  report(0, 0, 1);
+  for (let index = 0;index < chunkCount; index += 1) {
+    throwIfAborted(signal);
+    const start = index * chunkBytes;
+    const end = Math.min(totalBytes, start + chunkBytes);
+    const partBytes = end - start;
+    const bytes = file.slice(start, end);
+    await repeating((attempt) => config.chunk({ uploadId, index, bytes }, {
+      ...signal && { signal },
+      onUploadProgress: (progress) => report(start + fileShare(progress, partBytes), index, attempt)
+    }), { retries, retryDelayMs, signal });
+    report(end, index + 1, 1);
+  }
+  throwIfAborted(signal);
+  return config.finalize({ uploadId }, { signal });
+}
+function fileShare(progress, partBytes) {
+  if (progress.totalBytes === 0)
+    return 0;
+  return Math.floor(partBytes * progress.sentBytes / progress.totalBytes);
+}
+async function repeating(call, {
+  retries,
+  retryDelayMs,
+  signal
+}) {
+  for (let attempt = 1;; attempt += 1) {
+    try {
+      return await call(attempt);
+    } catch (error) {
+      if (signal?.aborted || attempt > retries || !isRetryableUploadFailure(error))
+        throw error;
+      try {
+        await sleep(retryDelayMs * 2 ** (attempt - 1), signal);
+      } catch (aborted) {
+        throwIfAborted(signal);
+        throw aborted;
+      }
+    }
+  }
+}
+function throwIfAborted(signal) {
+  if (signal?.aborted) {
+    throw new ApiError2("REQUEST_ABORTED", { status: 0, message: "Request was aborted" });
+  }
+}
+
+export { uploadInChunks2 };

package/dist/{index-e32vy8jw.js → index-jk44mbqb.js}

@@ -13,7 +13,7 @@ import {
   uploadProgressRoute,
   withUploadProgress,
   parseApiErrorBody
-} from "./index-00v1qz76.js";
+} from "./index-p6apg0jg.js";
 import {
   abortReason,
   untilAborted

package/dist/{index-k4v2kq4q.js → index-mha6b4vk.js}

@@ -10,13 +10,16 @@ import {
   projectToolView,
   objectShapeKeys
 } from "./index-q6crhe1n.js";
+import {
+  runWithRequestContext2,
+  getRequestContext2
+} from "./index-r6v4mc67.js";
 import {
   projectedToolError
 } from "./index-556g5hsh.js";
 import {
-  runWithRequestContext2,
-  getRequestContext2
-} from "./index-y3nemndz.js";
+  isUnsafeKey
+} from "./index-zsarb5xp.js";
 import {
   formatZodError2
 } from "./index-1eeqpadm.js";
@@ -26,9 +29,6 @@ import {
   isRetryableStatus2,
   isStitchErrorCode2
 } from "./index-j9gxbztg.js";
-import {
-  isUnsafeKey
-} from "./index-zsarb5xp.js";
 import {
   isRecord
 } from "./index-9jfdm5tg.js";

package/dist/{index-00v1qz76.js → index-p6apg0jg.js}

@@ -383,7 +383,7 @@ function shouldRetryBunNetworkError(error) {
   if (!(error instanceof Error))
     return;
   const code = Object.getOwnPropertyDescriptor(error, "code");
-  return code && "value" in code && code.value === "ConnectionRefused" ? true : undefined;
+  return code && "value" in code && (code.value === "ConnectionRefused" || code.value === "ECONNREFUSED") ? true : undefined;
 }
 function parseApiErrorBody(body) {
   if (!isRecord(body) || !isRecord(body.error))

package/dist/{index-x5xs71dw.js → index-s2eybn7b.js}

@@ -13,15 +13,12 @@ import {
   parseToolCallArguments,
   toolResultFromError,
   observed
-} from "./index-k4v2kq4q.js";
+} from "./index-mha6b4vk.js";
 import {
   collectTools2,
   createToolRunner,
   formatToolError
-} from "./index-ryv32myz.js";
-import {
-  collectToolSurface
-} from "./index-3wm2xp2a.js";
+} from "./index-ghwntn9n.js";
 import {
   DEFAULT_CORS_ALLOW_HEADERS2,
   DEFAULT_PROCESS_SIGNALS,
@@ -33,15 +30,18 @@ import {
   redact2
 } from "./index-e6c2spsd.js";
 import {
-  argumentsDigest
-} from "./index-r7a7r7ha.js";
+  collectToolSurface
+} from "./index-0d8m0kee.js";
 import {
   runWithRequestContext2,
   getRequestContext2
-} from "./index-y3nemndz.js";
+} from "./index-r6v4mc67.js";
 import {
   AppError2
 } from "./index-j9gxbztg.js";
+import {
+  argumentsDigest
+} from "./index-r7a7r7ha.js";
 import {
   compareCodeUnits,
   serializeCanonicalJson

package/dist/{index-njs9gvrh.js → index-s6d8zsha.js}

@@ -26,7 +26,7 @@ import {
 import {
   bindContract,
   mediaTypeEssence
-} from "./index-85qve8mq.js";
+} from "./index-pzw0fpek.js";
 import {
   assertPositiveSafeInteger
 } from "./index-0s4xebbg.js";
@@ -46,7 +46,7 @@ import {
   getRequestContext2,
   setRequestEndpoint2,
   setRequestError2
-} from "./index-y3nemndz.js";
+} from "./index-r6v4mc67.js";
 import {
   resolveTraceId2,
   resolveSocketIp2,
@@ -54,6 +54,10 @@ import {
   getClientInfo2,
   parseQueryParams
 } from "./index-kw1ws0cs.js";
+import {
+  isUnsafeKey,
+  safeJsonParse
+} from "./index-zsarb5xp.js";
 import {
   AppError2,
   badRequest2,
@@ -62,10 +66,6 @@ import {
 import {
   resolveTraceContext2
 } from "./index-yex7eg1v.js";
-import {
-  isUnsafeKey,
-  safeJsonParse
-} from "./index-zsarb5xp.js";
 import {
   isRecord,
   transportResult

package/dist/{index-kc3jqqew.js → index-tjdsyrys.js}

@@ -3,7 +3,7 @@ import {
 } from "./index-2kbysk9s.js";
 import {
   NativeCommandError2
-} from "./index-dj1aycxw.js";
+} from "./index-84bf5spd.js";
 import {
   probeAgentProcessSandboxOutcome,
   missingSandboxRestrictions2,
@@ -14,7 +14,7 @@ import {
 import {
   CommandStopped,
   startNativeCommand
-} from "./index-k3ty2b88.js";
+} from "./index-e1sjcjfy.js";
 import {
   NumericFileHandle,
   descriptorPath,

package/dist/process/command-owner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-owner.d.ts","sourceRoot":"","sources":["../../src/process/command-owner.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAG9C,OAAO,EAEL,KAAK,oBAAoB,EAI1B,MAAM,YAAY,CAAC;AAEpB,OAAO,EAEL,KAAK,yBAAyB,EAG/B,MAAM,UAAU,CAAC;AAQlB,wFAAwF;AACxF,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,oBAAoB,EAC3B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,EACrC,MAAM,CAAC,EAAE,yBAAyB;;;;;;;;;;EA8KnC"}
+{"version":3,"file":"command-owner.d.ts","sourceRoot":"","sources":["../../src/process/command-owner.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAG9C,OAAO,EAEL,KAAK,oBAAoB,EAI1B,MAAM,YAAY,CAAC;AAEpB,OAAO,EAEL,KAAK,yBAAyB,EAG/B,MAAM,UAAU,CAAC;AAQlB,wFAAwF;AACxF,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,oBAAoB,EAC3B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,EACrC,MAAM,CAAC,EAAE,yBAAyB;;;;;;;;;;EAqLnC"}

package/dist/process/group-presence.d.ts

@@ -0,0 +1,3 @@
+/** A kernel absence is decisive; a Darwin permission refusal is still unknown. */
+export declare function processGroupExists(pid: number): boolean;
+//# sourceMappingURL=group-presence.d.ts.map

package/dist/process/group-presence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"group-presence.d.ts","sourceRoot":"","sources":["../../src/process/group-presence.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAWvD"}

package/dist/process/group-settlement.d.ts

@@ -0,0 +1,5 @@
+/** `killpg(..., 0)` also sees Linux zombies; only live members can still perform work. */
+export declare function hasLiveGroupMember(table: string, group: number): boolean;
+/** A delivered SIGKILL is asynchronous; do not report cleanup until every group member is dead. */
+export declare function waitForProcessGroupExit(pid: number | undefined, deadline: number): Promise<void>;
+//# sourceMappingURL=group-settlement.d.ts.map

package/dist/process/group-settlement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"group-settlement.d.ts","sourceRoot":"","sources":["../../src/process/group-settlement.ts"],"names":[],"mappings":"AAIA,0FAA0F;AAC1F,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAQxE;AAmBD,mGAAmG;AACnG,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CA0Bf"}

package/dist/process/group.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"group.d.ts","sourceRoot":"","sources":["../../src/process/group.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,KAAK,6BAA6B,EAAE,MAAM,YAAY,CAAC;AAEpF,+FAA+F;AAC/F,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO;IAYpE,MAAM;IACN,MAAM;EAIT;AAeD,gGAAgG;AAChG,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CASpF;AAoCD,sGAAsG;AACtG,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,gEAAgE;IAChE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAmB/E;AAED,gGAAgG;AAChG,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,gBAAgB,GAAG;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;CAAE,GAC/E,OAAO,CAAC,OAAO,CAAC,CAsBlB;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,6BAA6B,CAAC;IACtC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7B,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,OAAO,CAAC,OAAO,CAAC,CAyBnB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAItE;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAMxF"}
+{"version":3,"file":"group.d.ts","sourceRoot":"","sources":["../../src/process/group.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,KAAK,6BAA6B,EAAE,MAAM,YAAY,CAAC;AAIpF,+FAA+F;AAC/F,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO;IAYpE,MAAM;IACN,MAAM;EAIT;AAeD,gGAAgG;AAChG,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CASpF;AAsCD,sGAAsG;AACtG,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,gEAAgE;IAChE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAmB/E;AAED,gGAAgG;AAChG,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,gBAAgB,GAAG;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;CAAE,GAC/E,OAAO,CAAC,OAAO,CAAC,CAsBlB;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,6BAA6B,CAAC;IACtC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7B,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,OAAO,CAAC,OAAO,CAAC,CAyBnB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAItE;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAMxF"}

package/dist/process/output-drain.d.ts

@@ -4,7 +4,7 @@ import { type ParsedNativeCommandOptions } from './contract.js';
  * captured bytes per channel and the `onOutput` sink, all under the command's lifetime signal.
  */
 export declare function createOutputDrain(options: ParsedNativeCommandOptions, signal: AbortSignal): {
-    drain: (stream: AsyncIterable<Uint8Array>, channel: 'stdout' | 'stderr') => Promise<void>;
+    drain: (stream: AsyncIterable<Uint8Array>, channel: 'stdout' | 'stderr', admitted?: Promise<void>) => Promise<void>;
     /** The captured bytes of each channel; empty unless `capture` was set. */
     captured: () => {
         stdout: Buffer<ArrayBuffer>;

package/dist/process/output-drain.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"output-drain.d.ts","sourceRoot":"","sources":["../../src/process/output-drain.ts"],"names":[],"mappings":"AACA,OAAO,EAAsB,KAAK,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAEjF;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,WAAW;oBAG3D,aAAa,CAAC,UAAU,CAAC,WAAW,QAAQ,GAAG,QAAQ;IA+BlF,0EAA0E;;QAExE,MAAM;QACN,MAAM;;EAGX"}
+{"version":3,"file":"output-drain.d.ts","sourceRoot":"","sources":["../../src/process/output-drain.ts"],"names":[],"mappings":"AACA,OAAO,EAAsB,KAAK,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAEjF;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,WAAW;oBAI9E,aAAa,CAAC,UAAU,CAAC,WACxB,QAAQ,GAAG,QAAQ,aACjB,OAAO,CAAC,IAAI,CAAC;IAuCxB,0EAA0E;;QAExE,MAAM;QACN,MAAM;;EAGX"}

package/dist/process/owner-loss-control.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"owner-loss-control.d.ts","sourceRoot":"","sources":["../../src/process/owner-loss-control.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAe1C,UAAU,YAAY;IACpB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,GAAG,OAAO,CAAC;CAC5F;AASD,2FAA2F;AAC3F,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAOlE;AAQD,mFAAmF;AACnF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAuDjF;AAED,gGAAgG;AAChG,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAG7E;AAED,oGAAoG;AACpG,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAIxF"}
+{"version":3,"file":"owner-loss-control.d.ts","sourceRoot":"","sources":["../../src/process/owner-loss-control.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAe1C,UAAU,YAAY;IACpB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,GAAG,OAAO,CAAC;CAC5F;AASD,2FAA2F;AAC3F,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAOlE;AAQD,mFAAmF;AACnF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAwDjF;AAED,gGAAgG;AAChG,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAG7E;AAED,oGAAoG;AACpG,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAIxF"}

package/llms/application.2.txt

@@ -32,12 +32,13 @@ ever became ready:
 | newest run | same pid | version | `previousExit` | predecessor's `termination` |
 |---|---|---|---|---|
 | none | — | — | `first-boot` | — |
-| recorded `stoppedAt` | — | — | `clean` / `forced` / `startup-failed` / `abnormal` as recorded | unchanged |
+| recorded `stoppedAt` | — | — | the recorded termination, including `interrupted` | unchanged |
 | still open | yes | — | `hot-reload` | `hot-reload`, closed at the new start |
 | still open | no | changed | `handoff` (default) | stays open; it records its own stop later |
-| still open | no | changed, `versionChangeOverlap: 'abnormal'` | `abnormal` / `startup-failed` | closed at the new start, as for the same version |
-| still open, was ready | no | same | `abnormal` (default) | `abnormal`, closed at the new start — an upper bound, the crash time is unknown |
-| still open, never ready | no | same | `startup-failed` (default) | `startup-failed`, closed at the new start |
+| still open | no | changed, `versionChangeOverlap: 'abnormal'` | `interrupted` / `abnormal` / `startup-failed` | closed at the new start, as for the same version |
+| still draining | no | same or non-overlapping build | `interrupted` | closed at the new start; its death time and kill signal are unknown |
+| still active, was ready | no | same | `abnormal` (default) | `abnormal`, closed at the new start — an upper bound, the crash time is unknown |
+| still active, never ready | no | same | `startup-failed` (default) | `startup-failed`, closed at the new start |
 
 Every other open run the start finds was abandoned too and is closed the same
 way — two crashes in a row leave two open runs, and both are closed, not only
@@ -66,10 +67,12 @@ The ledger records what the process says while it can say it. stitchkit never
 calls `process.exit` (ADR 0074), so a stop is recorded on the kernel's `close`
 or `force` path, both awaited. An application that exits the process on its
 own before its shutdown settles loses that last write; the successor then
-finds the run open and closes it as `abnormal`, keeping the `unavailableAt`
+finds the unfinished drain and closes it as `interrupted`, keeping the `unavailableAt`
 already recorded — which is why the drain moment is written first, at
 `stopAdmission`, and the downtime survives a stop that was never recorded.
 
+An abandoned `draining` run closes as `interrupted`, including before readiness. `StartFact.previousDrainUpperBoundMs` is the elapsed time from recorded admission stop to successor start, or `null` when unknown. This is an upper bound, not proof of a supervisor timeout or a particular kill signal. Live handoff predecessors remain open; same-pid restarts remain `hot-reload`.
+
 The `abnormal` default is a choice, and it is the single-process deployment:
 one process per build, a new pid of the same build means the old one stopped
 answering. Where processes of **one** build overlap on purpose — a cluster, a

package/llms/application.3.txt

@@ -14,6 +14,9 @@ Parts of this slice:
 
 ## `stitchkit/application`
 
+`StartFact` also carries `previousDrainUpperBoundMs`: the time from a predecessor's recorded admission stop to this start when its exit is `interrupted`, otherwise `null`. This is an upper bound, and does not identify a kill signal or supervisor deadline.
+
+
 Server-only process-local application composition. See the
 [application kernel guide](../guide/application-kernel.md) and
 [architecture](../architecture/application-kernel.md). Complete consumer

package/llms/http.txt

@@ -0,0 +1,19 @@
+# stitchkit/http — stitchkit docs slice
+
+> Generated from the `docs/` tree by `bun run gen:llms`. The index of all slices is
+> `llms.txt` in this package.
+
+Contains: API reference: `stitchkit/http`  (docs/api/reference.md)
+
+==============================================================================
+# API reference: `stitchkit/http`  (docs/api/reference.md)
+==============================================================================
+
+## `stitchkit/http`
+
+An HTTP-only entrypoint for browsers, React Native/Hermes and servers. It exports the same `createClient`, `createClients`, `createHttpClient`, URL builders, client configuration types and `ApiError` as the root, without loading its optional Socket.IO graph. Import shared contracts from `stitchkit/contract`.
+
+```ts
+import { createClients, createHttpClient } from 'stitchkit/http';
+import { defineContract } from 'stitchkit/contract';
+```

package/llms/realtime.txt

@@ -0,0 +1,31 @@
+# stitchkit/realtime — stitchkit docs slice
+
+> Generated from the `docs/` tree by `bun run gen:llms`. The index of all slices is
+> `llms.txt` in this package.
+
+Contains: API reference: `stitchkit/realtime`  (docs/api/reference.md)
+
+==============================================================================
+# API reference: `stitchkit/realtime`  (docs/api/reference.md)
+==============================================================================
+
+## `stitchkit/realtime`
+
+Hermes-safe realtime clients reuse the root transport and contract implementation. Both
+`createRealtimeClient` and `createSocketIOClient` require `peers.client` here; no default
+computed import enters this graph. Root clients retain their optional lazy runtime loader.
+
+```ts
+import { createRealtimeClient, defineRealtimeContract } from 'stitchkit/realtime';
+const client = createRealtimeClient(contract, {
+  url,
+  peers: { client: () => import('socket.io-client') },
+});
+```
+
+Native consumers import HTTP factories, `ApiError`, `createUrlBuilder`,
+`contractEndpointMatchers` and `uploadInChunks` from `stitchkit/http`; schema factories,
+`ContractDef` and `paginatedSchema` from `stitchkit/contract`; realtime factories,
+`RealtimeClient`, `defineRealtimeContract`, `InferRealtimeEventMap`, `createRetainedTopics`
+and `RetainedTopics` from `stitchkit/realtime`. `createQueryClientFactory` remains in
+`stitchkit/react`. Shared modules must use the same public leaves throughout their graph.

package/llms/stitchkit.txt

@@ -56,6 +56,8 @@ own, recorded as an ADR.
 | Import | Use in | Maturity | Holds |
 |--------|--------|----------|-------|
 | `stitchkit` | browser **and** server | stable | `defineContract`, `createClient`, `createHttpClient`, `createSocketIOClient`, `parseSSE`, the error model |
+| `stitchkit/http` | browser, React Native/Hermes **and** server | evolving | typed HTTP client factories and `ApiError`, without optional realtime peers |
+| `stitchkit/realtime` | browser, React Native/Hermes **and** server | evolving | typed realtime clients and retained topics with a required explicit Socket.IO peer loader |
 | `stitchkit/contract` | browser **and** server | stable | the contract layer alone — `defineContract`, errors, pagination |
 | `stitchkit/live` | browser **and** server | evolving | `defineEvents` — topic declarations beside the operation contract — and watched reads: `createWatchClient`, the value/difference frame and its reassembly |
 | `stitchkit/primitives` | browser **and** server | evolving | generic values and declarations for lifecycle, access, audit, delivery and exports |
@@ -83,12 +85,12 @@ own, recorded as an ADR.
 | `stitchkit/geo` | server (Bun or Node) | evolving | managed GeoIP reader generations, last-known-good reload and the optional MaxMind adapter |
 | `stitchkit/oauth` | browser **and** server | evolving | provider-neutral Authorization Code + PKCE request and one-shot callback transaction mechanics |
 | `stitchkit/google` | server (Bun or Node) | evolving | optional Google code exchange and verified OIDC identity adapter |
-| `stitchkit/observability` | server | stable<br>_redefined in 2 of the 54 minors since 0.56.2, most recently 0.92.0_ | request/tool event projections — `createObservability`, trace context, sanitisation |
+| `stitchkit/observability` | server | stable<br>_redefined in 2 of the 55 minors since 0.56.2, most recently 0.92.0_ | request/tool event projections — `createObservability`, trace context, sanitisation |
 | `stitchkit/testing` | tests on Bun or Node | stable | in-process generated clients over a real Fetch handler, the managed-resource conformance kit and manual time for schedules and retries |
 | `stitchkit/declaration` | browser + build and deployment tooling (Bun or Node) | evolving | `ProjectDeclarationSchema` — the one machine-readable statement a repository makes about itself |
 | `stitchkit/react` | browser + server rendering | stable | `createCursorQuery`, `createCacheBridge`, QueryClient and `ApiError` retry policy |
 | `stitchkit/react/keyboard` | browser | evolving | which part of a screen gets a key — ordered layers, one Escape per level, list zones with real focus; see [keyboard guide](keyboard.md) |
-| `stitchkit/agent-runtime` | server | evolving<br>_redefined in 23 of the 54 minors since 0.56.2, most recently 0.105.0_ | optional durable conversation/run loop, history, models, prompts, fencing and events |
+| `stitchkit/agent-runtime` | server | evolving<br>_redefined in 23 of the 55 minors since 0.56.2, most recently 0.105.0_ | optional durable conversation/run loop, history, models, prompts, fencing and events |
 | `stitchkit/agent-runtime/sandbox` | server | evolving | optional Linux Bubblewrap sessions, durable workspaces and a host HTTP credential gateway; see [sandbox guide](sandbox.md) |
 | `stitchkit/agent-runtime/testing` | tests on Bun or Node | evolving | credential-free replay, scripted provider faults, deterministic race controls and the agent-store conformance kit |
 | `stitchkit/agent-runtime/harness` | server | evolving | resource-aware process-local facade over the canonical Agent runtime; supervision stays outside |
@@ -100,7 +102,7 @@ own, recorded as an ADR.
 | `stitchkit/agent-runtime/sqlite/bun` | server (Bun) | evolving | durable built-in SQLite store for the agent runtime |
 | `stitchkit/agent-runtime/sqlite/node` | server (Node ≥ 22.5) | evolving | durable built-in SQLite store for the agent runtime |
 | `stitchkit-tui` | terminal (Bun) | evolving | optional official OpenTUI host over a caller-composed headless runtime |
-| `stitchkit/application` | browser + server | evolving<br>_redefined in 13 of the 54 minors since 0.56.2, most recently 0.105.0_ | managed resource graph, readiness, admission, schedules, subtree restart and bounded shutdown |
+| `stitchkit/application` | browser + server | evolving<br>_redefined in 14 of the 55 minors since 0.56.2, most recently 0.110.0_ | managed resource graph, readiness, admission, schedules, subtree restart and bounded shutdown |
 | `stitchkit/application/grammy` | server | evolving | a grammY bot as application resources — configuration, then polling with updates admitted by batch — and the webhook adapter |
 | `stitchkit/application/opentelemetry` | server | evolving | maps application snapshots onto an injected OpenTelemetry `Meter` |
 | `stitchkit/application/schemas` | browser + server | evolving | the application's snapshot, health and shutdown schemas alone, without the kernel |