stitchkit 0.112.2 → 0.113.0

package/dist/{index-38gvr73z.js → index-yjnmac9b.js}

@@ -4,7 +4,7 @@ import {
   AgentSandboxRestrictionSchema2,
   AgentSandboxGradeSchema2,
   AGENT_CODING_TOOL_NAMES
-} from "./index-n0adphfg.js";
+} from "./index-dsxrcseb.js";
 import {
   AgentRecordIdSchema2,
   AgentRecordVersionSchema2,
@@ -39,7 +39,7 @@ import {
   ProviderJournalMessageSchema,
   ProviderJournalRequestSchema,
   ProviderJournalResponseSchema
-} from "./index-jna0ejsa.js";
+} from "./index-fggxgbrk.js";
 import {
   StepEventPayloadSchema,
   ParkEventPayloadSchema,
@@ -154,6 +154,11 @@ var AgentHistoryMutationSchema2 = z3.discriminatedUnion("type", [
   z3.object({
     type: z3.literal("seed"),
     message: AgentMessageSchema2
+  }),
+  z3.object({
+    type: z3.literal("insert"),
+    message: AgentMessageSchema2,
+    beforeMessageId: AgentRecordIdSchema2.optional()
   })
 ]);
 var ACTIVE_AGENT_RUN_STATES2 = [
@@ -362,22 +367,51 @@ function reduceAccept(current, input) {
     historyMutations: [{ type: "admit", input: input.input }]
   });
 }
+function seedReceipt(input) {
+  return AgentSeedReceiptSchema2.parse({
+    schemaVersion: 1,
+    conversationId: input.conversationId,
+    seedKey: input.seedKey,
+    messageIds: input.inputs.map((message) => message.id)
+  });
+}
+function reduceSettledSeed(current, input) {
+  for (const message of input.inputs) {
+    if (message.conversationId !== input.conversationId || message.runId !== undefined || !(message.role === "user" && message.status === "committed" || message.role === "assistant" && message.status === "completed")) {
+      throw new TypeError("A settled exchange must be committed user and completed assistant messages no run owns");
+    }
+  }
+  const activeMessageIds = new Set(current.runs.filter((run) => isActiveRunState(run.state)).flatMap((run) => [...run.inputMessageIds, run.assistantMessageId]));
+  const anchor = current.messages.find((message) => activeMessageIds.has(message.id));
+  const at = anchor ? current.messages.indexOf(anchor) : current.messages.length;
+  return applied(current, {
+    messages: [
+      ...current.messages.slice(0, at),
+      ...input.inputs,
+      ...current.messages.slice(at)
+    ]
+  }, {
+    seedReceipt: seedReceipt(input),
+    historyMutations: input.inputs.map((message) => ({
+      type: "insert",
+      message,
+      ...anchor && { beforeMessageId: anchor.id }
+    }))
+  });
+}
 function reduceSeed(current, input) {
   const conversationId = input.conversationId;
   if (current.conversationId !== conversationId)
     return { outcome: "not_found" };
+  if (input.placement === "after-settled")
+    return reduceSettledSeed(current, input);
   for (const message of input.inputs) {
     if (message.conversationId !== conversationId || message.role !== "user" || message.status !== "committed" || message.runId !== undefined) {
       throw new TypeError("Seeded conversation input must be committed unowned user messages");
     }
   }
   return applied(current, { messages: [...input.inputs, ...current.messages] }, {
-    seedReceipt: AgentSeedReceiptSchema2.parse({
-      schemaVersion: 1,
-      conversationId,
-      seedKey: input.seedKey,
-      messageIds: input.inputs.map((message) => message.id)
-    }),
+    seedReceipt: seedReceipt(input),
     historyMutations: [...input.inputs].reverse().map((message) => ({
       type: "seed",
       message

package/dist/{index-02h0dfpr.js → index-z4ga1fa1.js}

@@ -12,7 +12,7 @@ import {
   applyToolViewDefaults,
   projectToolView,
   objectShapeKeys
-} from "./index-h7accrrv.js";
+} from "./index-jgwqc38k.js";
 import {
   runWithRequestContext2,
   getRequestContext2

package/dist/{index-vqdjym30.js → index-zm1k7hhv.js}

@@ -3,11 +3,11 @@ import {
   mergeSchemas,
   assertToolExtensionCompatible,
   projectToolSurface
-} from "./index-h7accrrv.js";
+} from "./index-jgwqc38k.js";
 import {
   toolErrorFromResult,
   executeToolMethod
-} from "./index-02h0dfpr.js";
+} from "./index-z4ga1fa1.js";
 import {
   isRetryableStatus2
 } from "./index-j9gxbztg.js";

package/dist/json-schema/dialect.d.ts

@@ -1,17 +1,19 @@
 /** True when a document says, in its own `$schema`, that it is draft-07. */
 export declare function declaresDraft07(dialect: unknown): boolean;
 /**
- * Move a document's top-level `definitions` to `$defs`, carrying its pointers.
+ * Write a document in the keywords of 2020-12, the dialect an MCP client reads
+ * tool schemas in. Two draft-07 keywords mean something else there or nothing:
+ * reusable subschemas move from `definitions` to `$defs` with their pointers,
+ * and a tuple's `items` list becomes `prefixItems`.
  *
- * A JSON Schema document that names one dialect and uses another's keyword is
- * not a style question: a reader registers reusable subschemas from the keyword
- * the dialect declares and then cannot resolve `#/definitions/x` at all. Both
- * halves of this framework met that document — the MCP SDK stamps 2020-12 onto
- * the metadata it is handed, and our own MCP client obeyed the stamp.
+ * A document that names one dialect and uses another's keyword is not a style
+ * question: a reader registers subschemas from the keyword its dialect declares
+ * and cannot resolve `#/definitions/x`, and a reader that validates the schema
+ * itself refuses an `items` list and drops the whole tool.
  *
- * Only the top level moves. A `definitions` deeper in the document may be a
- * property literally called "definitions", and guessing which is worse than
- * leaving it where the author put it.
+ * Only the top-level `definitions` moves. A `definitions` deeper in the
+ * document may be a property literally called "definitions", and guessing which
+ * is worse than leaving it where the author put it.
  */
-export declare function withDefsDialect(schema: Record<string, unknown>): Record<string, unknown>;
+export declare function withDraft2020Keywords(schema: Record<string, unknown>): Record<string, unknown>;
 //# sourceMappingURL=dialect.d.ts.map

package/dist/json-schema/dialect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dialect.d.ts","sourceRoot":"","sources":["../../src/json-schema/dialect.ts"],"names":[],"mappings":"AAQA,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAEzD;AAeD;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAUxF"}
+{"version":3,"file":"dialect.d.ts","sourceRoot":"","sources":["../../src/json-schema/dialect.ts"],"names":[],"mappings":"AAiCA,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAEzD;AAmDD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAYzB"}

package/dist/tools/schema/presentation.d.ts

@@ -16,9 +16,10 @@ export declare function isObjectPresentationSchema(schema: ToolPresentationSchem
  * Metadata passed to the Zod identity carrier.
  *
  * The SDK supplies its own dialect and it is 2020-12, so the document has to
- * speak 2020-12: a draft-07 `definitions` block under a 2020-12 `$schema` is a
- * document that says one thing and does another, and a client that believes the
- * stamp cannot resolve a single `#/definitions/...` pointer in it.
+ * speak 2020-12: draft-07 `definitions` under a 2020-12 `$schema` leave every
+ * `#/definitions/...` pointer unresolvable, and a tuple's draft-07 `items` list
+ * is not a schema there, so a client that validates tool schemas drops the tool.
+ * → ADR 0185, ADR 0268.
  */
 export declare function presentationMetadata(schema: ToolPresentationSchema): ToolPresentationSchema;
 //# sourceMappingURL=presentation.d.ts.map

package/dist/tools/schema/presentation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"presentation.d.ts","sourceRoot":"","sources":["../../../src/tools/schema/presentation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAGL,KAAK,sBAAsB,EAC5B,MAAM,WAAW,CAAC;AAEnB,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;IACzB,WAAW,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IACzC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,eAAe,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC;IAClC,uFAAuF;IACvF,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC9C;AA+KD,+EAA+E;AAC/E,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,sBAAsB,GAC7B,sBAAsB,CAkDxB;AAoCD,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAElF;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,sBAAsB,GAAG,sBAAsB,CAE3F"}
+{"version":3,"file":"presentation.d.ts","sourceRoot":"","sources":["../../../src/tools/schema/presentation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAGL,KAAK,sBAAsB,EAC5B,MAAM,WAAW,CAAC;AAEnB,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;IACzB,WAAW,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IACzC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,eAAe,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC;IAClC,uFAAuF;IACvF,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC9C;AA+KD,+EAA+E;AAC/E,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,sBAAsB,GAC7B,sBAAsB,CAkDxB;AAoCD,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAElF;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,sBAAsB,GAAG,sBAAsB,CAE3F"}

package/llms/agent-runtime.2.txt

@@ -256,6 +256,31 @@ implement the smaller `AgentRuntimeStoreDriver` rather than these eleven members
   calls this and nothing else, so an adapter that implements the interface has
   everything recovery needs
 
+### Writing history no run owns
+
+`seedConversationInput` writes messages no run owns, exactly once per `seedKey`; the key is
+recorded beside the history, so compaction or replacement of the messages never brings them
+back. It places them by `placement`:
+
+- absent or `'lead'` — committed user instructions ahead of the whole conversation;
+- `'after-settled'` — an exchange that already happened without a model (a confirmed voice
+  command and its receipt): committed `user` and completed `assistant` messages. They land after
+  the settled history and ahead of the first message of any run still active, so an active run's
+  input and answer stay adjacent and the next run reads the exchange before the input queued
+  behind it. With no active run they are the tail.
+
+```ts
+await store.seedConversationInput({
+  conversationId,
+  seedKey: `voice:${commandId}`,
+  placement: 'after-settled',
+  inputs: [ownerMessage, receiptMessage],
+})
+```
+
+The pair is ordinary history: it is in `loadSnapshot`, compaction may summarize it, and the next
+provider request carries it. No model is called and no run is created.
+
 ### Reading a conversation
 
 Two shapes of read, and the difference matters as a conversation grows.

package/llms/agent-runtime.3.txt

@@ -181,7 +181,7 @@ Server-only optional application runtime. See the
 | `selectCompactableHistory` | function | which oldest whole complete turns may be summarised away — the half of compaction that needs no store (→ ADR 0142) |
 | `SelectCompactableHistoryOptions` / `CompactableHistory` | _type_ | message list, retained-turn count and evidence policy in; `leadingSummary`, `compactable` and `retained` out |
 | `createAgentSessionCoordinator` | function | strict process-local queue/interrupt/supersede lifecycle |
-| `AgentRuntimeStopPolicy` | _type_ | named custom AI SDK stop condition persisted and published on policy stop |
+| `AgentRuntimeStopPolicy` | _type_ | named stop rule persisted and published on policy stop; `when` receives the AI SDK `steps` plus the run context `prepareStep` gets (`context`, `run`, `signal`, `toolFenceLifecycle`, `contextUsage`) |
 | `AgentRuntimePrepareStep` | _type_ | per-run controlled step callback with typed domain context and managed run signal/fence |
 | `AgentContextOverflowError` | class | deliberate application budget refusal thrown from `loop.prepareStep`; terminalizes as `context_overflow` without classifying arbitrary error text |
 | `AgentRuntimeRecordIds` | _type_ | optional caller-provided input, run and assistant IDs for stable application records |

package/llms/agent-runtime.txt

@@ -165,6 +165,12 @@ await ticket.accepted
 const terminal = await ticket.result
 ```
 
+A stop policy's `when` receives the steps so far together with the same run context
+`prepareStep` gets — `context`, `run`, `signal`, `toolFenceLifecycle` and `contextUsage` —
+typed by the runtime's `CONTEXT`. A rule that depends on its own run (a receipt bound to the
+run's request, a per-tenant limit) reads it there; it needs no map of its own keyed by `runId`.
+The first policy to return `true` ends the run as `policy_stop` with its `name` as `policyName`.
+
 ## Bounded deferred tool catalogs
 
 Use `createDeferredAgentToolSurface` when a measured large catalog makes

package/llms/stitchkit.txt

@@ -85,12 +85,12 @@ own, recorded as an ADR.
 | `stitchkit/geo` | server (Bun or Node) | evolving | managed GeoIP reader generations, last-known-good reload and the optional MaxMind adapter |
 | `stitchkit/oauth` | browser **and** server | evolving | provider-neutral Authorization Code + PKCE request and one-shot callback transaction mechanics |
 | `stitchkit/google` | server (Bun or Node) | evolving | optional Google code exchange and verified OIDC identity adapter |
-| `stitchkit/observability` | server | stable<br>_redefined in 2 of the 57 minors since 0.56.2, most recently 0.92.0_ | request/tool event projections — `createObservability`, trace context, sanitisation |
+| `stitchkit/observability` | server | stable<br>_redefined in 2 of the 58 minors since 0.56.2, most recently 0.92.0_ | request/tool event projections — `createObservability`, trace context, sanitisation |
 | `stitchkit/testing` | tests on Bun or Node | stable | in-process generated clients over a real Fetch handler, the managed-resource conformance kit and manual time for schedules and retries |
 | `stitchkit/declaration` | browser + build and deployment tooling (Bun or Node) | evolving | `ProjectDeclarationSchema` — the one machine-readable statement a repository makes about itself |
 | `stitchkit/react` | browser + server rendering | stable | `createCursorQuery`, `createCacheBridge`, QueryClient and `ApiError` retry policy |
 | `stitchkit/react/keyboard` | browser | evolving | which part of a screen gets a key — ordered layers, one Escape per level, list zones with real focus; see [keyboard guide](keyboard.md) |
-| `stitchkit/agent-runtime` | server | evolving<br>_redefined in 23 of the 57 minors since 0.56.2, most recently 0.105.0_ | optional durable conversation/run loop, history, models, prompts, fencing and events |
+| `stitchkit/agent-runtime` | server | evolving<br>_redefined in 24 of the 58 minors since 0.56.2, most recently 0.113.0_ | optional durable conversation/run loop, history, models, prompts, fencing and events |
 | `stitchkit/agent-runtime/sandbox` | server | evolving | optional Linux Bubblewrap sessions, durable workspaces and a host HTTP credential gateway; see [sandbox guide](sandbox.md) |
 | `stitchkit/agent-runtime/testing` | tests on Bun or Node | evolving | credential-free replay, scripted provider faults, deterministic race controls and the agent-store conformance kit |
 | `stitchkit/agent-runtime/harness` | server | evolving | resource-aware process-local facade over the canonical Agent runtime; supervision stays outside |
@@ -102,7 +102,7 @@ own, recorded as an ADR.
 | `stitchkit/agent-runtime/sqlite/bun` | server (Bun) | evolving | durable built-in SQLite store for the agent runtime |
 | `stitchkit/agent-runtime/sqlite/node` | server (Node ≥ 22.5) | evolving | durable built-in SQLite store for the agent runtime |
 | `stitchkit-tui` | terminal (Bun) | evolving | optional official OpenTUI host over a caller-composed headless runtime |
-| `stitchkit/application` | browser + server | evolving<br>_redefined in 14 of the 57 minors since 0.56.2, most recently 0.110.0_ | managed resource graph, readiness, admission, schedules, subtree restart and bounded shutdown |
+| `stitchkit/application` | browser + server | evolving<br>_redefined in 14 of the 58 minors since 0.56.2, most recently 0.110.0_ | managed resource graph, readiness, admission, schedules, subtree restart and bounded shutdown |
 | `stitchkit/application/grammy` | server | evolving | a grammY bot as application resources — configuration, then polling with updates admitted by batch — and the webhook adapter |
 | `stitchkit/application/opentelemetry` | server | evolving | maps application snapshots onto an injected OpenTelemetry `Meter` |
 | `stitchkit/application/schemas` | browser + server | evolving | the application's snapshot, health and shutdown schemas alone, without the kernel |

package/llms/{upgrading-0.103.0-0.112.0.txt → upgrading-0.103.13-0.113.0.txt}

@@ -1,14 +1,33 @@
-# Upgrading 0.103.0 → 0.112.0 — stitchkit docs slice
+# Upgrading 0.103.13 → 0.113.0 — stitchkit docs slice
 
 > Generated from the `docs/` tree by `bun run gen:llms`. The index of all slices is
 > `llms.txt` in this package.
 
-Contains: Guide: Upgrading, 0.103.0 → 0.112.0  (docs/guide/upgrading.md)
+Contains: Guide: Upgrading, 0.103.13 → 0.113.0  (docs/guide/upgrading.md)
 
 ==============================================================================
-# Guide: Upgrading, 0.103.0 → 0.112.0  (docs/guide/upgrading.md)
+# Guide: Upgrading, 0.103.13 → 0.113.0  (docs/guide/upgrading.md)
 ==============================================================================
 
+## Released migration: 0.113.0
+
+**Who must act:** custom `AgentRuntimeStoreDriver` adapters and custom `AgentRuntimeStore` implementations of `seedConversationInput`. The built-in memory and SQLite stores already implement the contract.
+
+`seedConversationInput({ placement: 'after-settled' })` emits one `insert` history mutation per message. A driver's `history.apply` places the message ahead of the active row named `beforeMessageId`, or at the end when it is absent, and replaces a message already present in place:
+
+```ts
+// after: one more branch in history.apply
+if (mutation.type === 'insert') {
+  if (await exists(mutation.message.id)) return replaceInPlace(mutation.message)
+  if (mutation.beforeMessageId === undefined) return appendAtEnd(mutation.message)
+  const anchor = await activePosition(mutation.beforeMessageId) // refuse when missing
+  await shiftPositionsFrom(anchor) // every row at or after it moves one down
+  return insertAt(anchor, mutation.message)
+}
+```
+
+A custom `AgentRuntimeStore` that implements `seedConversationInput` itself places `'after-settled'` messages after the settled history and ahead of the first message of any active run, and keeps `'lead'` (or an absent `placement`) as before. Run `runAgentStoreConformance` against the adapter; `examples/agent-store-prisma/adapter.ts` shows the Prisma form.
+
 ## Released migration: 0.112.0
 
 **Who must act:** scripts using an array option together with bare positional arguments without a declared `positionals` policy, including calls to `parseCliArgs`.
@@ -876,32 +895,3 @@ mytool deploy --profile "${PROFILE:-production}" "$@"
 
 Dotted leaves such as `--filter.name` follow the same rule as their parent field. Declare a
 field as an array when repetition is meant.
-
-## Released migration: 0.103.0
-
-### Diagnostic journal startup preserves torn evidence and inspects archives
-
-**Who must act:** operators using `maxFiles: 1` who can encounter a torn active
-file, or whose retained files are unreadable by the writer. Clean single-file
-journals continue to work; successful startup now requires read access to every
-retained generation.
-
-```ts
-import { createDiagnosticJournal } from 'stitchkit/application/diagnostic-journal'
-
-// Before: a torn active file could be discarded during startup.
-await createDiagnosticJournal({ ...config, limits: { ...config.limits, maxFiles: 1 } })
-// After: retain the torn file while the fresh writer starts in a new active file.
-await createDiagnosticJournal({ ...config, limits: { ...config.limits, maxFiles: 2 } })
-```
-
-With single-file retention, a torn active file throws `DiagnosticJournalRecoveryError`
-from `stitchkit/application`, carrying `recovery` observations and releasing its lock
-without deleting evidence. Inspection I/O errors also fail startup and release the
-lock; restore filesystem access rather than treating that failure as a bad JSON row.
-Normal rotation retains the configured finite eviction policy.
-
-For archive inspection, replace ad hoc line parsing with `readDiagnosticJournal`
-from the same filesystem leaf. Handle its `frame | anomaly` stream explicitly;
-missing files, permissions and unsafe paths still throw. See the
-[journal guide](application-kernel.md#bounded-local-diagnostic-journal).

package/llms/{upgrading-0.75.0-0.102.0.txt → upgrading-0.75.0-0.103.0.txt}

@@ -1,14 +1,43 @@
-# Upgrading 0.75.0 → 0.102.0 — stitchkit docs slice
+# Upgrading 0.75.0 → 0.103.0 — stitchkit docs slice
 
 > Generated from the `docs/` tree by `bun run gen:llms`. The index of all slices is
 > `llms.txt` in this package.
 
-Contains: Guide: Upgrading, 0.75.0 → 0.102.0  (docs/guide/upgrading.md)
+Contains: Guide: Upgrading, 0.75.0 → 0.103.0  (docs/guide/upgrading.md)
 
 ==============================================================================
-# Guide: Upgrading, 0.75.0 → 0.102.0  (docs/guide/upgrading.md)
+# Guide: Upgrading, 0.75.0 → 0.103.0  (docs/guide/upgrading.md)
 ==============================================================================
 
+## Released migration: 0.103.0
+
+### Diagnostic journal startup preserves torn evidence and inspects archives
+
+**Who must act:** operators using `maxFiles: 1` who can encounter a torn active
+file, or whose retained files are unreadable by the writer. Clean single-file
+journals continue to work; successful startup now requires read access to every
+retained generation.
+
+```ts
+import { createDiagnosticJournal } from 'stitchkit/application/diagnostic-journal'
+
+// Before: a torn active file could be discarded during startup.
+await createDiagnosticJournal({ ...config, limits: { ...config.limits, maxFiles: 1 } })
+// After: retain the torn file while the fresh writer starts in a new active file.
+await createDiagnosticJournal({ ...config, limits: { ...config.limits, maxFiles: 2 } })
+```
+
+With single-file retention, a torn active file throws `DiagnosticJournalRecoveryError`
+from `stitchkit/application`, carrying `recovery` observations and releasing its lock
+without deleting evidence. Inspection I/O errors also fail startup and release the
+lock; restore filesystem access rather than treating that failure as a bad JSON row.
+Normal rotation retains the configured finite eviction policy.
+
+For archive inspection, replace ad hoc line parsing with `readDiagnosticJournal`
+from the same filesystem leaf. Handle its `frame | anomaly` stream explicitly;
+missing files, permissions and unsafe paths still throw. See the
+[journal guide](application-kernel.md#bounded-local-diagnostic-journal).
+
 ## Released migration: 0.102.0
 
 ### `view_file` receives an array, not an array encoded as text

package/llms/upgrading.txt

@@ -11,8 +11,8 @@ Contains: Guide: Upgrading, general  (docs/guide/upgrading.md)
 
 Load this slice, then every range slice between your installed version and the target:
 
-- 0.103.0 → 0.112.0: `llms/upgrading-0.103.0-0.112.0.txt`
-- 0.75.0 → 0.102.0: `llms/upgrading-0.75.0-0.102.0.txt`
+- 0.103.13 → 0.113.0: `llms/upgrading-0.103.13-0.113.0.txt`
+- 0.75.0 → 0.103.0: `llms/upgrading-0.75.0-0.103.0.txt`
 - 0.61.0 → 0.74.0: `llms/upgrading-0.61.0-0.74.0.txt`
 - 0.44.0 → 0.60.0: `llms/upgrading-0.44.0-0.60.0.txt`
 - 0.37.0 → 0.37.0: `llms/upgrading-0.37.0.txt`

package/llms-full.txt

@@ -77,12 +77,12 @@ own, recorded as an ADR.
 | `stitchkit/geo` | server (Bun or Node) | evolving | managed GeoIP reader generations, last-known-good reload and the optional MaxMind adapter |
 | `stitchkit/oauth` | browser **and** server | evolving | provider-neutral Authorization Code + PKCE request and one-shot callback transaction mechanics |
 | `stitchkit/google` | server (Bun or Node) | evolving | optional Google code exchange and verified OIDC identity adapter |
-| `stitchkit/observability` | server | stable<br>_redefined in 2 of the 57 minors since 0.56.2, most recently 0.92.0_ | request/tool event projections — `createObservability`, trace context, sanitisation |
+| `stitchkit/observability` | server | stable<br>_redefined in 2 of the 58 minors since 0.56.2, most recently 0.92.0_ | request/tool event projections — `createObservability`, trace context, sanitisation |
 | `stitchkit/testing` | tests on Bun or Node | stable | in-process generated clients over a real Fetch handler, the managed-resource conformance kit and manual time for schedules and retries |
 | `stitchkit/declaration` | browser + build and deployment tooling (Bun or Node) | evolving | `ProjectDeclarationSchema` — the one machine-readable statement a repository makes about itself |
 | `stitchkit/react` | browser + server rendering | stable | `createCursorQuery`, `createCacheBridge`, QueryClient and `ApiError` retry policy |
 | `stitchkit/react/keyboard` | browser | evolving | which part of a screen gets a key — ordered layers, one Escape per level, list zones with real focus; see [keyboard guide](keyboard.md) |
-| `stitchkit/agent-runtime` | server | evolving<br>_redefined in 23 of the 57 minors since 0.56.2, most recently 0.105.0_ | optional durable conversation/run loop, history, models, prompts, fencing and events |
+| `stitchkit/agent-runtime` | server | evolving<br>_redefined in 24 of the 58 minors since 0.56.2, most recently 0.113.0_ | optional durable conversation/run loop, history, models, prompts, fencing and events |
 | `stitchkit/agent-runtime/sandbox` | server | evolving | optional Linux Bubblewrap sessions, durable workspaces and a host HTTP credential gateway; see [sandbox guide](sandbox.md) |
 | `stitchkit/agent-runtime/testing` | tests on Bun or Node | evolving | credential-free replay, scripted provider faults, deterministic race controls and the agent-store conformance kit |
 | `stitchkit/agent-runtime/harness` | server | evolving | resource-aware process-local facade over the canonical Agent runtime; supervision stays outside |
@@ -94,7 +94,7 @@ own, recorded as an ADR.
 | `stitchkit/agent-runtime/sqlite/bun` | server (Bun) | evolving | durable built-in SQLite store for the agent runtime |
 | `stitchkit/agent-runtime/sqlite/node` | server (Node ≥ 22.5) | evolving | durable built-in SQLite store for the agent runtime |
 | `stitchkit-tui` | terminal (Bun) | evolving | optional official OpenTUI host over a caller-composed headless runtime |
-| `stitchkit/application` | browser + server | evolving<br>_redefined in 14 of the 57 minors since 0.56.2, most recently 0.110.0_ | managed resource graph, readiness, admission, schedules, subtree restart and bounded shutdown |
+| `stitchkit/application` | browser + server | evolving<br>_redefined in 14 of the 58 minors since 0.56.2, most recently 0.110.0_ | managed resource graph, readiness, admission, schedules, subtree restart and bounded shutdown |
 | `stitchkit/application/grammy` | server | evolving | a grammY bot as application resources — configuration, then polling with updates admitted by batch — and the webhook adapter |
 | `stitchkit/application/opentelemetry` | server | evolving | maps application snapshots onto an injected OpenTelemetry `Meter` |
 | `stitchkit/application/schemas` | browser + server | evolving | the application's snapshot, health and shutdown schemas alone, without the kernel |
@@ -5518,6 +5518,12 @@ await ticket.accepted
 const terminal = await ticket.result
 ```
 
+A stop policy's `when` receives the steps so far together with the same run context
+`prepareStep` gets — `context`, `run`, `signal`, `toolFenceLifecycle` and `contextUsage` —
+typed by the runtime's `CONTEXT`. A rule that depends on its own run (a receipt bound to the
+run's request, a per-tenant limit) reads it there; it needs no map of its own keyed by `runId`.
+The first policy to return `true` ends the run as `policy_stop` with its `name` as `policyName`.
+
 ## Bounded deferred tool catalogs
 
 Use `createDeferredAgentToolSurface` when a measured large catalog makes
@@ -6365,6 +6371,31 @@ implement the smaller `AgentRuntimeStoreDriver` rather than these eleven members
   calls this and nothing else, so an adapter that implements the interface has
   everything recovery needs
 
+### Writing history no run owns
+
+`seedConversationInput` writes messages no run owns, exactly once per `seedKey`; the key is
+recorded beside the history, so compaction or replacement of the messages never brings them
+back. It places them by `placement`:
+
+- absent or `'lead'` — committed user instructions ahead of the whole conversation;
+- `'after-settled'` — an exchange that already happened without a model (a confirmed voice
+  command and its receipt): committed `user` and completed `assistant` messages. They land after
+  the settled history and ahead of the first message of any run still active, so an active run's
+  input and answer stay adjacent and the next run reads the exchange before the input queued
+  behind it. With no active run they are the tail.
+
+```ts
+await store.seedConversationInput({
+  conversationId,
+  seedKey: `voice:${commandId}`,
+  placement: 'after-settled',
+  inputs: [ownerMessage, receiptMessage],
+})
+```
+
+The pair is ordinary history: it is in `loadSnapshot`, compaction may summarize it, and the next
+provider request carries it. No model is called and no run is created.
+
 ### Reading a conversation
 
 Two shapes of read, and the difference matters as a conversation grows.
@@ -16276,6 +16307,25 @@ analytics policy belong to the application.
 
 # Upgrading stitchkit
 
+## Released migration: 0.113.0
+
+**Who must act:** custom `AgentRuntimeStoreDriver` adapters and custom `AgentRuntimeStore` implementations of `seedConversationInput`. The built-in memory and SQLite stores already implement the contract.
+
+`seedConversationInput({ placement: 'after-settled' })` emits one `insert` history mutation per message. A driver's `history.apply` places the message ahead of the active row named `beforeMessageId`, or at the end when it is absent, and replaces a message already present in place:
+
+```ts
+// after: one more branch in history.apply
+if (mutation.type === 'insert') {
+  if (await exists(mutation.message.id)) return replaceInPlace(mutation.message)
+  if (mutation.beforeMessageId === undefined) return appendAtEnd(mutation.message)
+  const anchor = await activePosition(mutation.beforeMessageId) // refuse when missing
+  await shiftPositionsFrom(anchor) // every row at or after it moves one down
+  return insertAt(anchor, mutation.message)
+}
+```
+
+A custom `AgentRuntimeStore` that implements `seedConversationInput` itself places `'after-settled'` messages after the settled history and ahead of the first message of any active run, and keeps `'lead'` (or an absent `placement`) as before. Run `runAgentStoreConformance` against the adapter; `examples/agent-store-prisma/adapter.ts` shows the Prisma form.
+
 ## Released migration: 0.112.0
 
 **Who must act:** scripts using an array option together with bare positional arguments without a declared `positionals` policy, including calls to `parseCliArgs`.
@@ -22193,7 +22243,7 @@ Server-only optional application runtime. See the
 | `selectCompactableHistory` | function | which oldest whole complete turns may be summarised away — the half of compaction that needs no store (→ ADR 0142) |
 | `SelectCompactableHistoryOptions` / `CompactableHistory` | _type_ | message list, retained-turn count and evidence policy in; `leadingSummary`, `compactable` and `retained` out |
 | `createAgentSessionCoordinator` | function | strict process-local queue/interrupt/supersede lifecycle |
-| `AgentRuntimeStopPolicy` | _type_ | named custom AI SDK stop condition persisted and published on policy stop |
+| `AgentRuntimeStopPolicy` | _type_ | named stop rule persisted and published on policy stop; `when` receives the AI SDK `steps` plus the run context `prepareStep` gets (`context`, `run`, `signal`, `toolFenceLifecycle`, `contextUsage`) |
 | `AgentRuntimePrepareStep` | _type_ | per-run controlled step callback with typed domain context and managed run signal/fence |
 | `AgentContextOverflowError` | class | deliberate application budget refusal thrown from `loop.prepareStep`; terminalizes as `context_overflow` without classifying arbitrary error text |
 | `AgentRuntimeRecordIds` | _type_ | optional caller-provided input, run and assistant IDs for stable application records |

package/llms.txt

@@ -25,7 +25,7 @@ Load the slice for each entrypoint your code imports — `import … from 'stitc
 - **stitchkit/primitives**: [llms/primitives.txt](llms/primitives.txt) 11.7 KB
 - **stitchkit/server**: [llms/server.txt](llms/server.txt) 44.2 KB → [llms/server.2.txt](llms/server.2.txt) 20.5 KB → [llms/server.3.txt](llms/server.3.txt) 45.6 KB → [llms/server.4.txt](llms/server.4.txt) 38.3 KB → [llms/server.5.txt](llms/server.5.txt) 22.9 KB
 - **stitchkit/observability**: [llms/observability.txt](llms/observability.txt) 46.9 KB
-- **stitchkit/agent-runtime**: [llms/agent-runtime.txt](llms/agent-runtime.txt) 42.7 KB → [llms/agent-runtime.2.txt](llms/agent-runtime.2.txt) 44.8 KB → [llms/agent-runtime.3.txt](llms/agent-runtime.3.txt) 42.1 KB
+- **stitchkit/agent-runtime**: [llms/agent-runtime.txt](llms/agent-runtime.txt) 43.2 KB → [llms/agent-runtime.2.txt](llms/agent-runtime.2.txt) 45.9 KB → [llms/agent-runtime.3.txt](llms/agent-runtime.3.txt) 42.2 KB
 - **stitchkit/agent-runtime/testing**: [llms/agent-runtime-testing.txt](llms/agent-runtime-testing.txt) 2.6 KB
 - **stitchkit/agent-runtime/harness**: [llms/agent-runtime-harness.txt](llms/agent-runtime-harness.txt) 11.0 KB
 - **stitchkit/agent-runtime/coding-tools**: [llms/agent-runtime-coding-tools.txt](llms/agent-runtime-coding-tools.txt) 5.0 KB
@@ -64,8 +64,8 @@ Load the slice for each entrypoint your code imports — `import … from 'stitc
 
 ## Upgrading slices
 - **Upgrading — how to move across versions**: [llms/upgrading.txt](llms/upgrading.txt) 12.7 KB
-- **Upgrading 0.103.0 → 0.112.0**: [llms/upgrading-0.103.0-0.112.0.txt](llms/upgrading-0.103.0-0.112.0.txt) 46.6 KB
-- **Upgrading 0.75.0 → 0.102.0**: [llms/upgrading-0.75.0-0.102.0.txt](llms/upgrading-0.75.0-0.102.0.txt) 44.8 KB
+- **Upgrading 0.103.13 → 0.113.0**: [llms/upgrading-0.103.13-0.113.0.txt](llms/upgrading-0.103.13-0.113.0.txt) 46.4 KB
+- **Upgrading 0.75.0 → 0.103.0**: [llms/upgrading-0.75.0-0.103.0.txt](llms/upgrading-0.75.0-0.103.0.txt) 46.3 KB
 - **Upgrading 0.61.0 → 0.74.0**: [llms/upgrading-0.61.0-0.74.0.txt](llms/upgrading-0.61.0-0.74.0.txt) 43.5 KB
 - **Upgrading 0.44.0 → 0.60.0**: [llms/upgrading-0.44.0-0.60.0.txt](llms/upgrading-0.44.0-0.60.0.txt) 43.9 KB
 - **Upgrading 0.37.0 → 0.37.0**: [llms/upgrading-0.37.0.txt](llms/upgrading-0.37.0.txt) 6.2 KB

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stitchkit",
-  "version": "0.112.2",
+  "version": "0.113.0",
   "description": "Contract-first backend framework — one defineContract() into an HTTP API, MCP tools, AI-agent tools and a typed client. Bun and Node.",
   "keywords": [
     "bun",
@@ -378,6 +378,7 @@
     "@types/react-dom": "^19.3.0",
     "@typescript/typescript6": "^6.0.2",
     "ai": "^7.0.111",
+    "ajv": "^8.20.0",
     "fake-indexeddb": "^6.2.5",
     "google-auth-library": "^11.1.0",
     "grammy": "^1.46.0",