stitchkit 0.113.0 → 0.113.1

package/CHANGELOG.md

@@ -15,6 +15,13 @@ additive**; the first breaking change landed in 0.10.0. Grep the file for
 
 ## [Unreleased]
 
+## [0.113.1] - 2026-10-28
+
+### Fixed
+
+- `stitchkit/tools/connections` — restored MCP and OpenAPI tool schemas leave string-format and pattern refusals to the remote instead of substituting a generic datetime/email/regex error before sending. MCP relays the original validation message; OpenAPI retains its existing safe HTTP error projection. Record-key wrappers retain only reported local failures; structural errors, bounds and locally authored schemas keep their existing checks. → ADR 0272
+  **Affects:** `stitchkit/tools/connections` behaviour
+
 ## [0.113.0] - 2026-10-26
 
 ### ⚠️ Breaking changes

package/dist/entrypoints/agent-runtime/harness.js

@@ -5,15 +5,15 @@ import"../../index-8kzct1d6.js";
 import {
   composeAgentPrompt2,
   createAgentRuntime2
-} from "../../index-ppf5nerp.js";
+} from "../../index-mhrtwttb.js";
 import"../../index-qaet40b2.js";
 import"../../index-mnkk1ffz.js";
 import"../../index-fynr93w4.js";
-import"../../index-epmnrnth.js";
-import"../../index-jy9wq8tp.js";
+import"../../index-dsa676h8.js";
+import"../../index-rbzq0q16.js";
 import"../../index-ct75c3at.js";
 import"../../index-jgwqc38k.js";
-import"../../index-z4ga1fa1.js";
+import"../../index-tg2q89ps.js";
 import"../../index-snef22zr.js";
 import"../../index-56yx8dxp.js";
 import"../../index-fggxgbrk.js";

package/dist/entrypoints/agent-runtime.js

@@ -123,23 +123,23 @@ import {
   agentGoalStateSlot2,
   agentTodoStateSlot2,
   createAgentRuntime2
-} from "../index-ppf5nerp.js";
+} from "../index-mhrtwttb.js";
 import {
   AgentConversationSummarySchema2,
   AgentConversationPageSchema2,
   AgentConversationMessagePageSchema2
 } from "../index-kqnd6a85.js";
 import"../index-fynr93w4.js";
-import"../index-epmnrnth.js";
-import"../index-jy9wq8tp.js";
+import"../index-dsa676h8.js";
+import"../index-rbzq0q16.js";
 import"../index-ct75c3at.js";
 import"../index-jgwqc38k.js";
-import"../index-z4ga1fa1.js";
-import"../index-zm1k7hhv.js";
+import"../index-tg2q89ps.js";
+import"../index-v6mzw27b.js";
 import {
   mountAgent2,
   buildToolManifest2
-} from "../index-5jjda9a4.js";
+} from "../index-sjww6myv.js";
 import {
   createBoundedSinkManager
 } from "../index-qaet40b2.js";
@@ -202,7 +202,7 @@ import {
 import {
   assertPositiveSafeInteger
 } from "../index-0s4xebbg.js";
-import"../index-eddzs589.js";
+import"../index-emrmgq3s.js";
 import {
   defineRuntimeTool2,
   executableAgentRuntimeTools

package/dist/entrypoints/cli.js

@@ -1,7 +1,7 @@
-import"../index-epmnrnth.js";
+import"../index-dsa676h8.js";
 import {
   coerceJsonArgs2
-} from "../index-jy9wq8tp.js";
+} from "../index-rbzq0q16.js";
 import {
   defineCliCommand2,
   DEFAULT_EXIT_CODES2,
@@ -16,12 +16,12 @@ import {
   renderCliView2,
   pollUntilDone2,
   createCli2
-} from "../index-gpbk7yse.js";
+} from "../index-fytsnhzj.js";
 import"../index-fynr93w4.js";
 import"../index-ct75c3at.js";
 import"../index-jgwqc38k.js";
-import"../index-z4ga1fa1.js";
-import"../index-zm1k7hhv.js";
+import"../index-tg2q89ps.js";
+import"../index-v6mzw27b.js";
 import {
   CliBuildSignatureSchema2,
   cliManifestSigningPayload2,
@@ -44,7 +44,7 @@ import {
 import {
   writeFileAtomicSync2
 } from "../index-07dcf2yn.js";
-import"../index-eddzs589.js";
+import"../index-emrmgq3s.js";
 import"../index-nk1mh535.js";
 import {
   safeJsonParse

package/dist/entrypoints/tools/connections.js

@@ -6,8 +6,8 @@ import {
 import"../../index-fynr93w4.js";
 import {
   markJsonSchemaObjectGuards,
-  markRemoteUnionVerdict
-} from "../../index-epmnrnth.js";
+  markRemoteSchemaVerdict
+} from "../../index-dsa676h8.js";
 import {
   withSignalDeadline
 } from "../../index-9tqbxv5p.js";
@@ -847,7 +847,7 @@ function zodObjectFromJsonSchema(schema) {
   const parsed = z.fromJSONSchema(reconcileDialect(schema));
   if (parsed instanceof z.ZodObject) {
     markJsonSchemaObjectGuards(parsed);
-    markRemoteUnionVerdict(parsed);
+    markRemoteSchemaVerdict(parsed);
     return parsed;
   }
   return z.looseObject({});

package/dist/entrypoints/tools/contract.js

@@ -9,8 +9,8 @@ import {
 } from "../../index-0gxvns6s.js";
 import {
   coerceJsonArgs2
-} from "../../index-jy9wq8tp.js";
-import"../../index-epmnrnth.js";
+} from "../../index-rbzq0q16.js";
+import"../../index-dsa676h8.js";
 export {
   AsyncOperationCancelResultSchema2 as AsyncOperationCancelResultSchema,
   McpAnnotationsSchema2 as McpAnnotationsSchema,

package/dist/entrypoints/tools/invoker.js

@@ -1,13 +1,13 @@
 import"../../index-fynr93w4.js";
-import"../../index-epmnrnth.js";
-import"../../index-jy9wq8tp.js";
+import"../../index-dsa676h8.js";
+import"../../index-rbzq0q16.js";
 import"../../index-ct75c3at.js";
 import"../../index-jgwqc38k.js";
-import"../../index-z4ga1fa1.js";
-import"../../index-zm1k7hhv.js";
+import"../../index-tg2q89ps.js";
+import"../../index-v6mzw27b.js";
 import {
   createToolInvoker2
-} from "../../index-4dh3hfs7.js";
+} from "../../index-nn6607y3.js";
 export {
   createToolInvoker2 as createToolInvoker
 };

package/dist/entrypoints/tools/mcp.js

@@ -1,10 +1,10 @@
 import"../../index-ct75c3at.js";
 import"../../index-fynr93w4.js";
-import"../../index-epmnrnth.js";
-import"../../index-jy9wq8tp.js";
+import"../../index-dsa676h8.js";
+import"../../index-rbzq0q16.js";
 import"../../index-jgwqc38k.js";
-import"../../index-z4ga1fa1.js";
-import"../../index-zm1k7hhv.js";
+import"../../index-tg2q89ps.js";
+import"../../index-v6mzw27b.js";
 import {
   RESOURCE_MIME_TYPE2,
   EXT_APPS_BUNDLE_PLACEHOLDER2,
@@ -20,8 +20,8 @@ import {
   createMcpHttpRoute2,
   createStdioMcpServer2,
   bindStdioProcessSignals2
-} from "../../index-54q2mghq.js";
-import"../../index-eddzs589.js";
+} from "../../index-8jjzfts8.js";
+import"../../index-emrmgq3s.js";
 import"../../index-nk1mh535.js";
 export {
   EXT_APPS_BUNDLE_PLACEHOLDER2 as EXT_APPS_BUNDLE_PLACEHOLDER,

package/dist/entrypoints/tools.js

@@ -9,10 +9,10 @@ import {
 import {
   normalizeError2
 } from "../index-fynr93w4.js";
-import"../index-epmnrnth.js";
+import"../index-dsa676h8.js";
 import {
   coerceJsonArgs2
-} from "../index-jy9wq8tp.js";
+} from "../index-rbzq0q16.js";
 import"../index-ct75c3at.js";
 import {
   assertToolName,
@@ -25,15 +25,15 @@ import {
 import {
   ToolExecutionControlError2,
   isToolExecutionControlError2
-} from "../index-z4ga1fa1.js";
+} from "../index-tg2q89ps.js";
 import {
   collectTools2
-} from "../index-zm1k7hhv.js";
+} from "../index-v6mzw27b.js";
 import {
   mountAgent2,
   describeToolCatalog2,
   buildToolManifest2
-} from "../index-5jjda9a4.js";
+} from "../index-sjww6myv.js";
 import"../index-m38ej7e5.js";
 import {
   ALL_TRANSPORTS2,
@@ -60,7 +60,7 @@ import {
   createMcpHttpRoute2,
   createStdioMcpServer2,
   bindStdioProcessSignals2
-} from "../index-54q2mghq.js";
+} from "../index-8jjzfts8.js";
 import {
   AsyncOperationCancelResultSchema2,
   createAsyncOperationSnapshotSchema2,
@@ -74,7 +74,7 @@ import {
   WaitTimeoutError,
   runWaitOperation,
   createCli2
-} from "../index-gpbk7yse.js";
+} from "../index-fytsnhzj.js";
 import {
   ManagedFilePathSchema2,
   ManagedFileRefSchema2
@@ -89,7 +89,7 @@ import {
 } from "../index-pzw0fpek.js";
 import {
   createToolInvoker2
-} from "../index-4dh3hfs7.js";
+} from "../index-nn6607y3.js";
 import {
   ManagedFileError2
 } from "../index-2f9r0jgr.js";
@@ -111,7 +111,7 @@ import {
 } from "../index-yk4g8805.js";
 import {
   collectToolSurface
-} from "../index-eddzs589.js";
+} from "../index-emrmgq3s.js";
 import {
   getTraceId2
 } from "../index-r6v4mc67.js";

package/dist/{index-54q2mghq.js → index-8jjzfts8.js}

@@ -13,12 +13,12 @@ import {
   parseToolCallArguments,
   toolResultFromError,
   observed
-} from "./index-z4ga1fa1.js";
+} from "./index-tg2q89ps.js";
 import {
   collectTools2,
   createToolRunner,
   formatToolError
-} from "./index-zm1k7hhv.js";
+} from "./index-v6mzw27b.js";
 import {
   DEFAULT_CORS_ALLOW_HEADERS2,
   DEFAULT_PROCESS_SIGNALS,
@@ -31,7 +31,7 @@ import {
 } from "./index-e6c2spsd.js";
 import {
   collectToolSurface
-} from "./index-eddzs589.js";
+} from "./index-emrmgq3s.js";
 import {
   runWithRequestContext2,
   getRequestContext2

package/dist/{index-epmnrnth.js → index-dsa676h8.js}

@@ -82,9 +82,9 @@ function markJsonSchemaObjectGuards(schema) {
   };
   visit(schema);
 }
-var REMOTE_UNION_VERDICT = Symbol.for("stitchkit.tools.json-schema-remote-union-verdict.v1");
-function markRemoteUnionVerdict(schema) {
-  Reflect.defineProperty(schema, REMOTE_UNION_VERDICT, {
+var REMOTE_SCHEMA_VERDICT = Symbol.for("stitchkit.tools.json-schema-remote-verdict.v1");
+function markRemoteSchemaVerdict(schema) {
+  Reflect.defineProperty(schema, REMOTE_SCHEMA_VERDICT, {
     configurable: false,
     enumerable: false,
     value: true,
@@ -92,12 +92,29 @@ function markRemoteUnionVerdict(schema) {
   });
 }
 function localVerdict(schema, error) {
-  if (Reflect.get(schema, REMOTE_UNION_VERDICT) !== true)
+  if (Reflect.get(schema, REMOTE_SCHEMA_VERDICT) !== true)
     return error;
-  const local = error.issues.filter((issue) => issue.code !== "invalid_union");
+  const local = localIssues(error.issues);
   if (local.length === 0)
     return null;
-  return local.length === error.issues.length ? error : new z.ZodError(local);
+  return sameIssues(local, error.issues) ? error : new z.ZodError(local);
+}
+function sameIssues(left, right) {
+  return left.length === right.length && left.every((issue, index) => issue === right[index]);
+}
+function localIssues(issues) {
+  return issues.flatMap((issue) => {
+    if (issue.code === "invalid_union" || issue.code === "invalid_format")
+      return [];
+    if (issue.code === "invalid_key") {
+      const children = localIssues(issue.issues);
+      if (children.length === 0)
+        return [];
+      if (!sameIssues(children, issue.issues))
+        return [{ ...issue, issues: children }];
+    }
+    return [issue];
+  });
 }
 function jsonSchemaObjectCoercionMembers(schema) {
   if (Reflect.get(schema, JSON_SCHEMA_OBJECT_GUARD) !== true)
@@ -114,4 +131,4 @@ function jsonSchemaObjectCoercionMembers(schema) {
   return;
 }
 
-export { markJsonSchemaObjectGuards, markRemoteUnionVerdict, localVerdict, jsonSchemaObjectCoercionMembers };
+export { markJsonSchemaObjectGuards, markRemoteSchemaVerdict, localVerdict, jsonSchemaObjectCoercionMembers };

package/dist/{index-eddzs589.js → index-emrmgq3s.js}

@@ -3,7 +3,7 @@ import {
 } from "./index-jgwqc38k.js";
 import {
   contractToolMountable
-} from "./index-zm1k7hhv.js";
+} from "./index-v6mzw27b.js";
 import {
   runtimeToolMountable
 } from "./index-nk1mh535.js";

package/dist/{index-gpbk7yse.js → index-fytsnhzj.js}

@@ -3,10 +3,10 @@ import {
 } from "./index-fynr93w4.js";
 import {
   jsonSchemaObjectCoercionMembers
-} from "./index-epmnrnth.js";
+} from "./index-dsa676h8.js";
 import {
   coerceJsonArgs2
-} from "./index-jy9wq8tp.js";
+} from "./index-rbzq0q16.js";
 import {
   jsonSchemaFields
 } from "./index-ct75c3at.js";
@@ -18,11 +18,11 @@ import {
 import {
   toolResultFromError,
   toolErrorFromResult
-} from "./index-z4ga1fa1.js";
+} from "./index-tg2q89ps.js";
 import {
   createToolRunner,
   formatToolError
-} from "./index-zm1k7hhv.js";
+} from "./index-v6mzw27b.js";
 import {
   fetchGuarded,
   readCapped
@@ -35,7 +35,7 @@ import {
 } from "./index-eemvahkc.js";
 import {
   collectToolSurface
-} from "./index-eddzs589.js";
+} from "./index-emrmgq3s.js";
 import {
   isUnsafeKey,
   safeJsonParse

package/dist/{index-ppf5nerp.js → index-mhrtwttb.js}

@@ -14,7 +14,7 @@ import {
 import {
   ToolExecutionControlError2,
   isToolExecutionControlError2
-} from "./index-z4ga1fa1.js";
+} from "./index-tg2q89ps.js";
 import {
   agentDurableEventId2
 } from "./index-mnkk1ffz.js";

package/dist/{index-4dh3hfs7.js → index-nn6607y3.js}

@@ -3,11 +3,11 @@ import {
 } from "./index-jgwqc38k.js";
 import {
   toolErrorFromResult
-} from "./index-z4ga1fa1.js";
+} from "./index-tg2q89ps.js";
 import {
   collectTools2,
   createToolRunner
-} from "./index-zm1k7hhv.js";
+} from "./index-v6mzw27b.js";
 import {
   AppError2
 } from "./index-j9gxbztg.js";

package/dist/{index-jy9wq8tp.js → index-rbzq0q16.js}

@@ -1,6 +1,6 @@
 import {
   jsonSchemaObjectCoercionMembers
-} from "./index-epmnrnth.js";
+} from "./index-dsa676h8.js";
 import {
   safeJsonParse
 } from "./index-zsarb5xp.js";

package/dist/{index-5jjda9a4.js → index-sjww6myv.js}

@@ -2,18 +2,18 @@ import {
   toolResultFromError,
   toolCauseFromResult,
   isToolExecutionControlError2
-} from "./index-z4ga1fa1.js";
+} from "./index-tg2q89ps.js";
 import {
   createToolRunner,
   formatToolError
-} from "./index-zm1k7hhv.js";
+} from "./index-v6mzw27b.js";
 import {
   AgentToolError2,
   resolveToolDurability
 } from "./index-56yx8dxp.js";
 import {
   collectToolSurface
-} from "./index-eddzs589.js";
+} from "./index-emrmgq3s.js";
 import {
   agentPresenterOf
 } from "./index-nk1mh535.js";

package/dist/{index-z4ga1fa1.js → index-tg2q89ps.js}

@@ -4,10 +4,10 @@ import {
 } from "./index-fynr93w4.js";
 import {
   localVerdict
-} from "./index-epmnrnth.js";
+} from "./index-dsa676h8.js";
 import {
   coerceJsonArgs2
-} from "./index-jy9wq8tp.js";
+} from "./index-rbzq0q16.js";
 import {
   applyToolViewDefaults,
   projectToolView,

package/dist/{index-zm1k7hhv.js → index-v6mzw27b.js}

@@ -7,7 +7,7 @@ import {
 import {
   toolErrorFromResult,
   executeToolMethod
-} from "./index-z4ga1fa1.js";
+} from "./index-tg2q89ps.js";
 import {
   isRetryableStatus2
 } from "./index-j9gxbztg.js";

package/dist/tools/connections/runtime.d.ts

@@ -21,7 +21,7 @@ export declare function withConnectionToken<T>(params: {
  * Turn a discovered JSON Schema into a `ZodObject`, falling back to a permissive
  * object when the external schema is absent or not an object. This is the typed
  * boundary: the schema crosses from an untrusted foreign document into Zod here
- * and nowhere else. Its unions are left to the remote that owns the schema.
+ * and nowhere else. Unions and string formats are left to the remote that owns the schema.
  */
 export declare function zodObjectFromJsonSchema(schema: Record<string, unknown> | undefined): ZodObject;
 /** Normalise a tool name into the characters every provider accepts. */

package/dist/tools/schema/json-schema-origin.d.ts

@@ -6,19 +6,20 @@ import { z } from 'zod';
  */
 export declare function markJsonSchemaObjectGuards(schema: z.core.$ZodType): void;
 /**
- * Record that a schema restored from a foreign document leaves its unions to the remote.
+ * Record that a foreign schema leaves unions and string formats to its remote owner.
  *
  * A foreign tool schema is the remote's presentation, and a presentation may join a
  * discriminated union into one object whose shared field is an unlabelled `anyOf` (a stitchkit
  * server with `flattenUnionInput` does, ADR 0205). Every value the remote accepts still passes
  * such a union; which branch a value was meant for does not survive. Judged here, a wrong value
  * can only be refused with every branch listed, while the remote, which holds the original
- * schema, names the one field that is wrong.
+ * schema, names the one field that is wrong. JSON Schema also carries string formats and
+ * patterns without the author's error messages; only the remote can report those faithfully.
  */
-export declare function markRemoteUnionVerdict(schema: z.ZodObject): void;
+export declare function markRemoteSchemaVerdict(schema: z.ZodObject): void;
 /**
- * What a local parse refuses of a value the remote judges: everything but its unions. `null` when
- * every refusal was a union's — the value goes to the remote, whose refusal is the answer.
+ * Retain every reported issue except foreign unions and string formats. `null` means that
+ * every refusal belongs to the remote, whose answer carries the original schema's wording.
  * A schema that is not a restored foreign one keeps its own verdict whole.
  */
 export declare function localVerdict(schema: z.core.$ZodType, error: z.ZodError): z.ZodError | null;

package/dist/tools/schema/json-schema-origin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"json-schema-origin.d.ts","sourceRoot":"","sources":["../../../src/tools/schema/json-schema-origin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgCxB;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAiExE;AAID;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,GAAG,IAAI,CAOhE;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,GAAG,IAAI,CAK1F;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,GACtB,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,SAAS,CAsBxC"}
+{"version":3,"file":"json-schema-origin.d.ts","sourceRoot":"","sources":["../../../src/tools/schema/json-schema-origin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgCxB;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAiExE;AAID;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,GAAG,IAAI,CAOjE;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,GAAG,IAAI,CAK1F;AAuBD;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,GACtB,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,SAAS,CAsBxC"}

package/llms/cli.2.txt

@@ -149,9 +149,10 @@ One unconvertible schema does not take the connection down. The tool
 is skipped and **named** (`onSkippedTool`, or a stderr line by default), so a
 surface of two hundred tools is not lost to one.
 
-**A discovered schema is checked locally, except for its unions.** The arguments are
-coerced and parsed against the schema the server advertised, so a missing field or a
-wrong scalar is refused before anything is sent. A union in that schema is not judged
+**A discovered schema leaves unions and string formats to its server.** The arguments are
+coerced and parsed against the schema the server advertised. Reported structural failures
+(a missing field, wrong scalar type, unknown key or enum value) and bounds stay local.
+A union in that schema is not judged
 here: a server's presentation may join a discriminated union into one object whose
 shared field is an unlabelled `anyOf` (a stitchkit server with `flattenUnionInput`
 does), and judged against that, a wrong value could only be refused with every branch
@@ -159,6 +160,16 @@ listed. The value goes to the server, which holds the original schema, and its r
 names the one wrong field — `blocks.0.data.artifactId: expected string` rather than
 `No union branch matched — branch 1 … and 6 more branches`.
 
+String formats and patterns also lose the author's error messages in JSON Schema. A
+restored `date-time`, email, UUID or regex check would substitute Zod's generic wording.
+Those `invalid_format` refusals go to the remote instead: a bare `2026-10-12` reaches
+the original datetime schema, whose answer can explain that a full UTC timestamp such
+as `2026-10-12T00:00:00Z` is required. This also applies inside arrays, objects and
+record keys. A mixed refusal retains only its reported local reasons; a record-key
+wrapper stays local when it contains any of those reasons. A schema authored locally
+keeps its complete verdict, including custom errors and refinements. No second parse
+invents checks that the first parse did not reach. See [ADR 0272](../decisions/0272-a-restored-string-format-is-judged-by-its-server.md).
+
 MCP connection limits follow the operation phase. `initialize`, the initialized
 notification, `tools/list` and legacy endpoint discovery use `limits.discovery`;
 `tools/call` uses `limits.call`. A mounted call's handshake still uses discovery

package/llms/tools-connections.txt

@@ -27,7 +27,7 @@ and approval path.
 | `ConnectionPhase` / `ConnectionOperation` / `ConnectionFailureContext` | _type_ | closed operation/phase vocabulary and measured read context for existing typed connection errors |
 | `ConnectionTimeoutError` / `ConnectionResponseTooLargeError` | class | bounded operation refusal, with phase, operation and finite observed bytes; safe tool projection retains the raw cause locally |
 | `defineOpenApiConnection` | function | declare one OpenAPI document (object, JSON text or JSON URL) as a tool surface |
-| `mountConnections` | function | discover every connection and return readonly `RuntimeToolDefinition`s for `mountAgent`; a call's arguments are parsed against the discovered schema before sending, except its unions, which the server judges (ADR 0266) |
+| `mountConnections` | function | discover every connection and return readonly `RuntimeToolDefinition`s for `mountAgent`; reported structural failures and bounds stay local, while unions and string-format/pattern refusals (including inside record keys) are judged by the server that owns the original schema (ADR 0266, ADR 0272) |
 | `ConnectionAuthorizationRequiredError` | class | typed reauthorization signal raised on `401` with credentials resolved again on the next call |
 | `ConnectionBudgetExceededError` | class | the mount would expose more foreign tools than its declared budget |
 | `ConnectionRequestError` | class | any non-`2xx` connection response other than the reauthorization signal |

package/llms-full.txt

@@ -10900,9 +10900,10 @@ One unconvertible schema does not take the connection down. The tool
 is skipped and **named** (`onSkippedTool`, or a stderr line by default), so a
 surface of two hundred tools is not lost to one.
 
-**A discovered schema is checked locally, except for its unions.** The arguments are
-coerced and parsed against the schema the server advertised, so a missing field or a
-wrong scalar is refused before anything is sent. A union in that schema is not judged
+**A discovered schema leaves unions and string formats to its server.** The arguments are
+coerced and parsed against the schema the server advertised. Reported structural failures
+(a missing field, wrong scalar type, unknown key or enum value) and bounds stay local.
+A union in that schema is not judged
 here: a server's presentation may join a discriminated union into one object whose
 shared field is an unlabelled `anyOf` (a stitchkit server with `flattenUnionInput`
 does), and judged against that, a wrong value could only be refused with every branch
@@ -10910,6 +10911,16 @@ listed. The value goes to the server, which holds the original schema, and its r
 names the one wrong field — `blocks.0.data.artifactId: expected string` rather than
 `No union branch matched — branch 1 … and 6 more branches`.
 
+String formats and patterns also lose the author's error messages in JSON Schema. A
+restored `date-time`, email, UUID or regex check would substitute Zod's generic wording.
+Those `invalid_format` refusals go to the remote instead: a bare `2026-10-12` reaches
+the original datetime schema, whose answer can explain that a full UTC timestamp such
+as `2026-10-12T00:00:00Z` is required. This also applies inside arrays, objects and
+record keys. A mixed refusal retains only its reported local reasons; a record-key
+wrapper stays local when it contains any of those reasons. A schema authored locally
+keeps its complete verdict, including custom errors and refinements. No second parse
+invents checks that the first parse did not reach. See [ADR 0272](../decisions/0272-a-restored-string-format-is-judged-by-its-server.md).
+
 MCP connection limits follow the operation phase. `initialize`, the initialized
 notification, `tools/list` and legacy endpoint discovery use `limits.discovery`;
 `tools/call` uses `limits.call`. A mounted call's handshake still uses discovery
@@ -23103,7 +23114,7 @@ and approval path.
 | `ConnectionPhase` / `ConnectionOperation` / `ConnectionFailureContext` | _type_ | closed operation/phase vocabulary and measured read context for existing typed connection errors |
 | `ConnectionTimeoutError` / `ConnectionResponseTooLargeError` | class | bounded operation refusal, with phase, operation and finite observed bytes; safe tool projection retains the raw cause locally |
 | `defineOpenApiConnection` | function | declare one OpenAPI document (object, JSON text or JSON URL) as a tool surface |
-| `mountConnections` | function | discover every connection and return readonly `RuntimeToolDefinition`s for `mountAgent`; a call's arguments are parsed against the discovered schema before sending, except its unions, which the server judges (ADR 0266) |
+| `mountConnections` | function | discover every connection and return readonly `RuntimeToolDefinition`s for `mountAgent`; reported structural failures and bounds stay local, while unions and string-format/pattern refusals (including inside record keys) are judged by the server that owns the original schema (ADR 0266, ADR 0272) |
 | `ConnectionAuthorizationRequiredError` | class | typed reauthorization signal raised on `401` with credentials resolved again on the next call |
 | `ConnectionBudgetExceededError` | class | the mount would expose more foreign tools than its declared budget |
 | `ConnectionRequestError` | class | any non-`2xx` connection response other than the reauthorization signal |

package/llms.txt

@@ -17,8 +17,8 @@ Load the slice for each entrypoint your code imports — `import … from 'stitc
 - **stitchkit/tools/mcp**: [llms/tools-mcp.txt](llms/tools-mcp.txt) 1.8 KB
 - **stitchkit/tools/contract**: [llms/tools-contract.txt](llms/tools-contract.txt) 0.2 KB
 - **stitchkit/tools/invoker**: [llms/tools-invoker.txt](llms/tools-invoker.txt) 0.2 KB
-- **stitchkit/tools/connections**: [llms/tools-connections.txt](llms/tools-connections.txt) 3.8 KB
-- **stitchkit/cli**: [llms/cli.txt](llms/cli.txt) 45.3 KB → [llms/cli.2.txt](llms/cli.2.txt) 21.4 KB
+- **stitchkit/tools/connections**: [llms/tools-connections.txt](llms/tools-connections.txt) 3.9 KB
+- **stitchkit/cli**: [llms/cli.txt](llms/cli.txt) 45.3 KB → [llms/cli.2.txt](llms/cli.2.txt) 22.3 KB
 - **stitchkit/cli/publish**: [llms/cli-publish.txt](llms/cli-publish.txt) 1.5 KB
 - **stitchkit/remote**: [llms/remote.txt](llms/remote.txt) 1.0 KB
 - **stitchkit/contract**: [llms/contract.txt](llms/contract.txt) 31.9 KB

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stitchkit",
-  "version": "0.113.0",
+  "version": "0.113.1",
   "description": "Contract-first backend framework — one defineContract() into an HTTP API, MCP tools, AI-agent tools and a typed client. Bun and Node.",
   "keywords": [
     "bun",