stitchkit 0.114.2 → 0.115.0

package/llms-full.txt

@@ -78,13 +78,13 @@ own, recorded as an ADR.
 | `stitchkit/geo` | server (Bun or Node) | evolving | managed GeoIP reader generations, last-known-good reload and the optional MaxMind adapter |
 | `stitchkit/oauth` | browser **and** server | evolving | provider-neutral Authorization Code + PKCE request and one-shot callback transaction mechanics |
 | `stitchkit/google` | server (Bun or Node) | evolving | optional Google code exchange and verified OIDC identity adapter |
-| `stitchkit/observability` | server | stable<br>_redefined in 2 of the 59 minors since 0.56.2, most recently 0.92.0_ | request/tool event projections — `createObservability`, trace context, sanitisation |
+| `stitchkit/observability` | server | stable<br>_redefined in 2 of the 60 minors since 0.56.2, most recently 0.92.0_ | request/tool event projections — `createObservability`, trace context, sanitisation |
 | `stitchkit/testing` | tests on Bun or Node | stable | in-process generated clients over a real Fetch handler, the managed-resource conformance kit and manual time for schedules and retries |
 | `stitchkit/declaration` | browser + build and deployment tooling (Bun or Node) | evolving | `ProjectDeclarationSchema` — the one machine-readable statement a repository makes about itself |
 | `stitchkit/react` | browser + server rendering | stable | `createCursorQuery`, `createCacheBridge`, QueryClient and `ApiError` retry policy |
 | `stitchkit/react/keyboard` | browser | evolving | which part of a screen gets a key — ordered layers, one Escape per level, list zones with real focus; see [keyboard guide](keyboard.md) |
 | `stitchkit/react/keyboard/testing` | server (Bun or Node) | evolving | the keyboard layers and zones without a DOM — fakes for the window, elements and key events beside the two engines, to test the order of layers, `scope`/`inert` and the edges of a zone in milliseconds |
-| `stitchkit/agent-runtime` | server | evolving<br>_redefined in 24 of the 59 minors since 0.56.2, most recently 0.113.0_ | optional durable conversation/run loop, history, models, prompts, fencing and events |
+| `stitchkit/agent-runtime` | server | evolving<br>_redefined in 25 of the 60 minors since 0.56.2, most recently 0.115.0_ | optional durable conversation/run loop, history, models, prompts, fencing and events |
 | `stitchkit/agent-runtime/sandbox` | server | evolving | optional Linux Bubblewrap sessions, durable workspaces and a host HTTP credential gateway; see [sandbox guide](sandbox.md) |
 | `stitchkit/agent-runtime/testing` | tests on Bun or Node | evolving | credential-free replay, scripted provider faults, deterministic race controls and the agent-store conformance kit |
 | `stitchkit/agent-runtime/harness` | server | evolving | resource-aware process-local facade over the canonical Agent runtime; supervision stays outside |
@@ -96,7 +96,7 @@ own, recorded as an ADR.
 | `stitchkit/agent-runtime/sqlite/bun` | server (Bun) | evolving | durable built-in SQLite store for the agent runtime |
 | `stitchkit/agent-runtime/sqlite/node` | server (Node ≥ 22.5) | evolving | durable built-in SQLite store for the agent runtime |
 | `stitchkit-tui` | terminal (Bun) | evolving | optional official OpenTUI host over a caller-composed headless runtime |
-| `stitchkit/application` | browser + server | evolving<br>_redefined in 14 of the 59 minors since 0.56.2, most recently 0.110.0_ | managed resource graph, readiness, admission, schedules, subtree restart and bounded shutdown |
+| `stitchkit/application` | browser + server | evolving<br>_redefined in 14 of the 60 minors since 0.56.2, most recently 0.110.0_ | managed resource graph, readiness, admission, schedules, subtree restart and bounded shutdown |
 | `stitchkit/application/grammy` | server | evolving | a grammY bot as application resources — configuration, then polling with updates admitted by batch — and the webhook adapter |
 | `stitchkit/application/opentelemetry` | server | evolving | maps application snapshots onto an injected OpenTelemetry `Meter` |
 | `stitchkit/application/schemas` | browser + server | evolving | the application's snapshot, health and shutdown schemas alone, without the kernel |
@@ -5658,17 +5658,27 @@ approval input fails the run with a private diagnostic rather than starting a fr
 `read_output`. Every call passes a required host authorization callback. An optional async/sync
 `authorizePath({ path })` is the one operation-independent policy for direct file access and
 discovery: direct read/write/edit refuses a denied path, while listing, glob and search omit it.
-Denial is recursive on every surface — direct access and discovery base paths ask about `.` and each
-ancestor, outermost first, stopping at the first refusal, so denying `credentials` denies everything
+Denial is recursive on every surface — direct access asks about each named ancestor and the file,
+outermost first, stopping at the first refusal; discovery rooted at `.` also asks about `.`.
+Thus denying `credentials` denies everything
 under it. The comparison is segment-wise, so it does not deny `credentials-backup`, and a path of
-depth N costs N+1 questions. Directory decisions happen before descent; file decisions and
+depth N costs N questions for direct access. Directory decisions happen before descent; file decisions and
 `search_files.include` happen before opening content. Requested paths use `/`: a backslash is
 refused rather than normalised, because the workspace walk reads it as a separator and every
 authorization callback would otherwise be asked about a different decomposition than the one opened. File paths are relative, bounded and contained after
-descriptor-relative resolution: each ancestor is opened without following symlinks and remains
-pinned through authorization and the filesystem effect. Reads revalidate the pinned file identity;
+descriptor-relative resolution: each ancestor is opened without following symlinks. Reads and edits
+stay pinned through authorization; `write_file` plans before it and opens the parent after, because
+the parent it creates does not exist yet. Reads revalidate the pinned file identity;
 writes and patches revalidate the pinned parent identity; search and resource discovery descend
-only through opened directories. Linux traverses `/proc/self/fd`; macOS uses the package's
+only through opened directories. A path that changed during authorization refuses with `CONFLICT`.
+Policies compare path strings, so on a case-insensitive filesystem such as default macOS volumes a
+rule on `credentials` does not match `CREDENTIALS`; such a host must normalize in its own policy.
+NUL bytes are refused before either host policy sees a path.
+Reads and edits open file candidates without blocking on special files, then require a regular
+file. A writerless FIFO therefore refuses instead of occupying a filesystem worker. `write_file`
+supplies the exact missing-directory plan as `createsDirectories` to host authorization; the
+descriptor walk may create only those entries. An ancestor that disappears after approval refuses
+with `CONFLICT`, without expanding that plan. Linux traverses `/proc/self/fd`; macOS uses the package's
 architecture-specific Node-API `openat` backend. Unsupported platforms, including FreeBSD until a
 real backend is qualified, fail closed. The package needs no install-time compiler or script.
 Other platforms fail these filesystem operations closed because Node exposes no equivalent
@@ -9072,8 +9082,8 @@ a static loader enters a bundle.
 
 Only these calls load the addon, and only on macOS: process identity (`observeProcessInstance`
 and `probeProcessOwner`), every exclusive lock (`withExclusiveLock` and what is built on it, such
-as the file state store and the diagnostic journal) and the contained file operations of the Agent
-coding tools. Without the addon a lock still works, but it cannot record or check its owner's
+as the file state store and the diagnostic journal), the contained file operations of the Agent
+coding tools and `--output-dir` downloads of `stitchkit/cli`. Without the addon a download refuses, and a lock still works, but it cannot record or check its owner's
 identity, so a lock held by a crashed owner is not reclaimed. The managed file boundary
 (`createManagedFileBoundary` and the transfer tools built on it), atomic writes and the chunk
 spool never load it, on any operating system. The package is free of import side effects
@@ -10415,6 +10425,29 @@ myapp generate "a fox" --wait --output-dir ./out
 myapp generate "a fox" --wait --json > result.json &
 ```
 
+### Download filesystem boundary
+
+`--output-dir` resolves the explicitly configured root once before fetching and pins that
+one directory for the whole batch. An initial root alias (including a symbolic link) selects
+its canonical directory; missing components are created through pinned parents. The root
+capability continues to name the same directory if another actor renames it or replaces its
+pathname. The original spelling printed in `saved` is a display path, not a re-open of the root.
+
+Each media name becomes a direct child. Downloads atomically replace an existing file,
+symbolic link (including a dangling link), or hard link without changing the inode a link
+points to. An existing directory refuses replacement. Ordinary files retain their permission
+bits; new files use `0666 & ~umask`. Replacing writes a new file beside the old one, so it needs
+write permission on the directory, gives the file to the process user, replaces a read-only
+file, and refuses a bind-mounted one. Symlinks inside a contained parent path are never followed.
+The successful operation's JSON remains on stdout when a download fails; per-file diagnostics
+go to stderr and any failed file makes the exit non-zero. Already saved files remain saved.
+
+This filesystem protection supports Linux and macOS. On Linux it uses directory descriptors;
+on macOS it uses the packaged native backend. A bundled or compiled macOS CLI must use
+[`createNativePackaging`](./native-io.md) from `stitchkit/files/packaging` at build
+time. Missing native support and unsupported platforms, including Windows, refuse the download;
+CLI commands without downloads continue to work. There is no weaker path-based fallback.
+
 ## Aggregate views
 
 The CLI's audience is agents, scripts and `jq`, so output is JSON. That settles
@@ -10455,11 +10488,20 @@ value for the sort field sorts **last in both directions**: it is not the
 smallest, it is not on the scale at all, and letting it lead an ascending list
 would answer a question nobody asked.
 
-Three rules worth knowing before you rely on them:
+Rules worth knowing before you rely on them:
 
-- **A field the result does not carry is a presentation error.** A group of zero
+- **A field no record carries in a nonempty collection is a presentation error.** A group of zero
   over a misspelled field is indistinguishable from a true empty answer, and the
   caller reads it as data. The message names the fields that *are* there.
+  Plain and dotted field paths read own properties only at every segment; inherited
+  properties are not record data. Own keys named `constructor`, `prototype` or `toString`
+  are ordinary fields.
+- **An empty collection is a successful answer.** Count and grouped sums return `{}`,
+  an ungrouped sum returns `0`, and sorted records return `[]`. Tables keep their header
+  and separator without data rows. This applies both to a direct `[]` and to the single
+  array field of an envelope such as `{ items: [], total: 0 }`. With no records, field
+  presence cannot be checked, so a misspelled field answers empty too; malformed paths, unsafe
+  `__proto__` segments and a field of the envelope itself (`--sum total` here) still refuse.
 - **An aggregate needs a collection** — the result itself when it is an array,
   or the single array field of a result object. An aggregate over a scalar, or
   over an object with two array fields, is refused rather than guessed.
@@ -15342,6 +15384,17 @@ together, only `scope` tells the stack which one is inside.
 **`active`** (default `true`) switches a layer off without unmounting it;
 becoming active again puts it on top of its kind.
 
+Layers register, adopt options and clean up in the browser's layout-effect phase.
+Call the hook before a layout effect that dispatches a key: that effect sees the
+committed `active`, handler and scope immediately, without waiting for passive
+effects. Rendering alone never changes the stack; an abandoned render leaves the
+last committed layer intact. A Suspense boundary that hides committed content
+disconnects its layout effects, so a layer behind the fallback goes quiet and
+returns to its place on reveal. The same lifecycle backs `useEscapeLayer` and a
+zone's outside-key layer. Server rendering installs no listener and does not
+access `window`. The browser phase is chosen when the module loads, so a test
+that installs a DOM does so before it imports these hooks.
+
 **Fields keep their keys.** Keys pressed in an input, a text area, a select, an
 editable region, a combobox, a slider or any area marked `data-local-keys` do not
 reach layers — except Escape, which a field that wants it keeps with
@@ -15393,6 +15446,11 @@ function ChatList({ chats, openId, open }) {
 | `ignore(event)` | — | a key that is the application's own right now — return `true` and the zone leaves it whole; see [dragging](#a-zone-inside-a-drag-and-drop-list) |
 | `onReveal(id)` | — | focus went to an item with no element yet — a row of a virtualized list outside the rendered range; scroll it in, and focus lands on it when it mounts |
 
+`role: 'none'` adds neither a container/item role nor `aria-orientation` or
+`aria-selected`; native links and buttons keep their semantics. The orientation
+still controls which arrows move focus. Only listbox and tablist zones emit
+`aria-orientation` (vertical by default).
+
 The callbacks return `false` to leave the key to the page, anything else takes
 it. A key the zone does not take bubbles on to the layers — in a vertical list
 ← and → are not the list's keys, so the section switch above hears them.
@@ -16728,6 +16786,65 @@ analytics policy belong to the application.
 
 # Upgrading stitchkit
 
+## Released migration: 0.115.0
+
+### contained-cli-downloads
+
+**Who must act:** a CLI that uses `--output-dir` on Windows, from a macOS bundle or compiled binary
+built without `createNativePackaging`, into a directory it cannot write or over bind-mounted files;
+a coding-tools host that allows `edit` but refuses `read` for a path; and code or CSS that reads
+`aria-orientation` of a `role: 'none'` zone. A CLI writing into its own directory on Linux or
+unbundled macOS, and every CLI command without a download, need no change.
+
+`--output-dir` now writes through a pinned directory descriptor
+([ADR 0276](../decisions/0276-a-download-writes-through-its-root-capability.md)). There is no
+path-based fallback, so a platform without that backend refuses the download: the operation still
+succeeds, its result stays on stdout, stderr names the refusal and the exit is non-zero.
+
+1. On macOS, build a bundled or compiled CLI with the native packaging plugin:
+
+   ```ts
+   // before
+   await Bun.build({
+     entrypoints: ['src/cli.ts'],
+     compile: { target: 'bun-darwin-arm64', outfile: 'dist/cli' },
+   })
+   // after
+   import { createNativePackaging } from 'stitchkit/files/packaging'
+
+   const native = createNativePackaging({
+     platform: 'darwin', architecture: 'arm64', delivery: 'embedded',
+   })
+   if (native.state !== 'ready') throw new Error(native.code)
+   await Bun.build({
+     entrypoints: ['src/cli.ts'],
+     compile: { target: 'bun-darwin-arm64', outfile: 'dist/cli' },
+     plugins: [native.plugin],
+   })
+   ```
+
+   A JS bundle uses `delivery: 'companion'`; every shape is in the [native I/O guide](./native-io.md). Search pattern:
+   `createCli` with a `download` option in a project that runs `bun build` for macOS.
+2. On Windows, run the download through Linux or macOS, or read the URLs from the operation's
+   JSON result and fetch them yourself. Stitchkit offers no weaker path on that platform.
+3. A download now replaces a file rather than rewriting it. Give the process write permission on
+   the output directory, and do not point it at a bind-mounted file: that refuses with `EBUSY`. A
+   replaced file belongs to the process user, and a read-only file is replaced like any other.
+4. Read the orientation you configured. A zone with `role: 'none'` has no attribute, and a default
+   would silently turn a horizontal zone vertical:
+
+   ```ts
+   // before
+   const axis: ZoneOrientation = zone.zoneProps['aria-orientation']
+   // after
+   const axis: ZoneOrientation = options.orientation ?? 'vertical'
+   ```
+
+   Search pattern: `aria-orientation` next to `useNavZone`, and `[aria-orientation]` in CSS and
+   test selectors. Type-check: a read typed as `ZoneOrientation` fails to compile.
+5. In a coding-tools `authorize`, answer `read` for every path you answer `edit` for. `edit_file`
+   asks both, `read` first.
+
 ## Released migration: 0.114.0
 
 **Who must act:** code with an exhaustive `switch` or `Record` over
@@ -24193,9 +24310,9 @@ no component, no styles, no router — see the [keyboard guide](../guide/keyboar
 
 | Export | Kind | Summary |
 |--------|------|---------|
-| `useKeyLayer` | hook | put a layer on the window's one key stack — asked `overlay` → `local` → `route` → `zone` → `global`, innermost first within a kind |
+| `useKeyLayer` | hook | put a layer on the window's one key stack; registration, options and cleanup follow the browser layout-effect phase, before later layout effects in the caller; asked `overlay` → `local` → `route` → `zone` → `global`, innermost first within a kind |
 | `useEscapeLayer` | hook | an `overlay`, `local` or `route` layer for Escape: one press closes one level |
-| `useNavZone` | hook | a list zone — roving tab stop, arrows move DOM focus, select, highlight or focus mode, cross-axis enter/exit, boundaries, `ignore` for a key the application is using; props carry no key without a value |
+| `useNavZone` | hook | a list zone — roving tab stop, arrows move DOM focus, select, highlight or focus mode, cross-axis enter/exit, boundaries, `ignore` for a key the application is using; props carry no key without a value; `role: 'none'` omits roles, `aria-orientation` and `aria-selected`, preserving native link/button semantics |
 | `nextZoneIndex` | function | where a move lands in a list of a given length: an index, `'before-start'` or `'after-end'` |
 | `isKeyFieldTarget` | function | whether a key was pressed in a field or a `data-local-keys` area, the test layers use |
 | `KeyLayerOptions` | _type_ | `kind`, `onKey`, `active`, `scope`, `fields`, `phase` — `'capture'` is for a `local` layer only: it hears a key before the element that has focus does, as a menu over a text field must, and a key it takes goes no further |

package/llms.txt

@@ -12,21 +12,21 @@ Load the slice for each entrypoint your code imports — `import … from 'stitc
 - **stitchkit**: [llms/stitchkit.txt](llms/stitchkit.txt) 43.2 KB → [llms/stitchkit.2.txt](llms/stitchkit.2.txt) 43.1 KB
 - **stitchkit/live**: [llms/live.txt](llms/live.txt) 21.2 KB
 - **stitchkit/react**: [llms/react.txt](llms/react.txt) 8.7 KB
-- **stitchkit/react/keyboard**: [llms/react-keyboard.txt](llms/react-keyboard.txt) 21.5 KB
+- **stitchkit/react/keyboard**: [llms/react-keyboard.txt](llms/react-keyboard.txt) 22.7 KB
 - **stitchkit/react/keyboard/testing**: [llms/react-keyboard-testing.txt](llms/react-keyboard-testing.txt) 1.9 KB
 - **stitchkit/tools**: [llms/tools.txt](llms/tools.txt) 46.7 KB → [llms/tools.2.txt](llms/tools.2.txt) 30.4 KB → [llms/tools.3.txt](llms/tools.3.txt) 26.3 KB
 - **stitchkit/tools/mcp**: [llms/tools-mcp.txt](llms/tools-mcp.txt) 1.8 KB
 - **stitchkit/tools/contract**: [llms/tools-contract.txt](llms/tools-contract.txt) 0.2 KB
 - **stitchkit/tools/invoker**: [llms/tools-invoker.txt](llms/tools-invoker.txt) 0.2 KB
 - **stitchkit/tools/connections**: [llms/tools-connections.txt](llms/tools-connections.txt) 3.9 KB
-- **stitchkit/cli**: [llms/cli.txt](llms/cli.txt) 33.9 KB → [llms/cli.2.txt](llms/cli.2.txt) 36.4 KB
+- **stitchkit/cli**: [llms/cli.txt](llms/cli.txt) 36.3 KB → [llms/cli.2.txt](llms/cli.2.txt) 36.4 KB
 - **stitchkit/cli/publish**: [llms/cli-publish.txt](llms/cli-publish.txt) 1.5 KB
 - **stitchkit/remote**: [llms/remote.txt](llms/remote.txt) 1.0 KB
 - **stitchkit/contract**: [llms/contract.txt](llms/contract.txt) 31.9 KB
 - **stitchkit/primitives**: [llms/primitives.txt](llms/primitives.txt) 11.7 KB
 - **stitchkit/server**: [llms/server.txt](llms/server.txt) 44.2 KB → [llms/server.2.txt](llms/server.2.txt) 20.5 KB → [llms/server.3.txt](llms/server.3.txt) 47.0 KB → [llms/server.4.txt](llms/server.4.txt) 38.6 KB → [llms/server.5.txt](llms/server.5.txt) 22.9 KB
 - **stitchkit/observability**: [llms/observability.txt](llms/observability.txt) 46.9 KB
-- **stitchkit/agent-runtime**: [llms/agent-runtime.txt](llms/agent-runtime.txt) 43.2 KB → [llms/agent-runtime.2.txt](llms/agent-runtime.2.txt) 45.9 KB → [llms/agent-runtime.3.txt](llms/agent-runtime.3.txt) 42.2 KB
+- **stitchkit/agent-runtime**: [llms/agent-runtime.txt](llms/agent-runtime.txt) 44.1 KB → [llms/agent-runtime.2.txt](llms/agent-runtime.2.txt) 45.9 KB → [llms/agent-runtime.3.txt](llms/agent-runtime.3.txt) 42.2 KB
 - **stitchkit/agent-runtime/testing**: [llms/agent-runtime-testing.txt](llms/agent-runtime-testing.txt) 2.6 KB
 - **stitchkit/agent-runtime/harness**: [llms/agent-runtime-harness.txt](llms/agent-runtime-harness.txt) 11.0 KB
 - **stitchkit/agent-runtime/coding-tools**: [llms/agent-runtime-coding-tools.txt](llms/agent-runtime-coding-tools.txt) 5.0 KB
@@ -58,7 +58,7 @@ Load the slice for each entrypoint your code imports — `import … from 'stitc
 - **stitchkit/node**: [llms/node.txt](llms/node.txt) 3.1 KB
 - **stitchkit/agent-runtime/react**: [llms/agent-runtime-react.txt](llms/agent-runtime-react.txt) 1.0 KB
 - **stitchkit/agent-runtime/realtime**: [llms/agent-runtime-realtime.txt](llms/agent-runtime-realtime.txt) 2.6 KB
-- **stitchkit/process**: [llms/process.txt](llms/process.txt) 44.4 KB → [llms/process.2.txt](llms/process.2.txt) 4.3 KB
+- **stitchkit/process**: [llms/process.txt](llms/process.txt) 44.5 KB → [llms/process.2.txt](llms/process.2.txt) 4.3 KB
 - **stitchkit/process/owner-loss**: [llms/process-owner-loss.txt](llms/process-owner-loss.txt) 0.9 KB
 - **stitchkit/files/packaging**: [llms/files-packaging.txt](llms/files-packaging.txt) 3.5 KB
 - **stitchkit/http**: [llms/http.txt](llms/http.txt) 0.9 KB
@@ -66,7 +66,7 @@ Load the slice for each entrypoint your code imports — `import … from 'stitc
 
 ## Upgrading slices
 - **Upgrading — how to move across versions**: [llms/upgrading.txt](llms/upgrading.txt) 12.7 KB
-- **Upgrading 0.104.0 → 0.114.0**: [llms/upgrading-0.104.0-0.114.0.txt](llms/upgrading-0.104.0-0.114.0.txt) 43.6 KB
+- **Upgrading 0.104.0 → 0.115.0**: [llms/upgrading-0.104.0-0.115.0.txt](llms/upgrading-0.104.0-0.115.0.txt) 46.3 KB
 - **Upgrading 0.79.0 → 0.103.13**: [llms/upgrading-0.79.0-0.103.13.txt](llms/upgrading-0.79.0-0.103.13.txt) 46.3 KB
 - **Upgrading 0.62.0 → 0.78.0**: [llms/upgrading-0.62.0-0.78.0.txt](llms/upgrading-0.62.0-0.78.0.txt) 42.2 KB
 - **Upgrading 0.44.0 → 0.61.0**: [llms/upgrading-0.44.0-0.61.0.txt](llms/upgrading-0.44.0-0.61.0.txt) 41.4 KB

package/native-assets.json

@@ -4,13 +4,13 @@
   "assets": {
     "arm64": {
       "path": "native/darwin-arm64.node",
-      "size": 52784,
-      "sha256": "65eb5ee5f09e47edb4bee9ddd43dca7fdf0c85676e74648a6d31f6cb70a08219"
+      "size": 52912,
+      "sha256": "abd9f0dcebb9330cc7206d7b7c735e3af5f54436393f482adc8e73e3373bbdf1"
     },
     "x64": {
       "path": "native/darwin-x64.node",
-      "size": 19512,
-      "sha256": "87e9c264e7f504d170d03d32a8ac47c77377603e5216f3503e24df9126fa590c"
+      "size": 23736,
+      "sha256": "aa0bc3084497eea9ac19bd060ee8456e7e8642c1b0035f0b224e9811ccfae133"
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stitchkit",
-  "version": "0.114.2",
+  "version": "0.115.0",
   "description": "Contract-first backend framework — one defineContract() into an HTTP API, MCP tools, AI-agent tools and a typed client. Bun and Node.",
   "keywords": [
     "bun",

package/dist/agent-runtime/contained-darwin.d.ts

@@ -1,21 +0,0 @@
-/**
- * The Darwin half of contained file access: the optional native binding for
- * `openat`-style calls, and a file handle over its numeric descriptor. Loaded
- * lazily and only on darwin, where Node offers no directory-relative open.
- */
-import { type Stats } from 'node:fs';
-import type { ContainedFileHandle } from './contained-files.js';
-export declare const FILE_TYPE_DIRECTORY = 16384;
-export declare const FILE_TYPE_REGULAR = 32768;
-export declare const FILE_TYPE_SYMLINK = 40960;
-export declare function modeIs(mode: number, type: number): boolean;
-export declare class NumericFileHandle implements ContainedFileHandle {
-    readonly fd: number;
-    constructor(fd: number);
-    close(): Promise<void>;
-    read(buffer: Buffer, offset: number, length: number, position: number): Promise<{
-        bytesRead: number;
-    }>;
-    stat(): Promise<Stats>;
-}
-//# sourceMappingURL=contained-darwin.d.ts.map

package/dist/agent-runtime/contained-darwin.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"contained-darwin.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/contained-darwin.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAA2D,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAG7D,eAAO,MAAM,mBAAmB,QAAW,CAAC;AAC5C,eAAO,MAAM,iBAAiB,QAAW,CAAC;AAC1C,eAAO,MAAM,iBAAiB,QAAW,CAAC;AAE1C,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,qBAAa,iBAAkB,YAAW,mBAAmB;IAC/C,QAAQ,CAAC,EAAE,EAAE,MAAM;IAA/B,YAAqB,EAAE,EAAE,MAAM,EAAI;IAEnC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAIrB;IAED,IAAI,CACF,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAMhC;IAED,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,CAIrB;CACF"}

package/dist/agent-runtime/contained-files.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"contained-files.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/contained-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAahD,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACzD;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,SAAS,aAAa,EAAE,CAAC;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,MAAM,EAAE,SAAS;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,kBAAkB,CAAA;KAAE,EAAE,CAAC;IAClE,yEAAyE;IACzE,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC;AAgB5E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CACF,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClC,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;CACxB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAGlE;AAMD,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAmBxF;AAcD,wBAAsB,eAAe,CACnC,SAAS,EAAE,mBAAmB,EAC9B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,mBAAmB,CAAC,CAQ9B;AAED,wBAAsB,UAAU,CAC9B,SAAS,EAAE,mBAAmB,EAC9B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,mBAAmB,CAAC,CAQ9B;AAED,UAAU,sBAAsB;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,IAAI,OAAO,CAAC;IACvB,MAAM,IAAI,OAAO,CAAC;IAClB,cAAc,IAAI,OAAO,CAAC;CAC3B;AAED,UAAU,uBAAuB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,IAAI,OAAO,CAAC;IACvB,MAAM,IAAI,OAAO,CAAC;IAClB,cAAc,IAAI,OAAO,CAAC;CAC3B;AA4BD,wBAAsB,MAAM,CAC1B,SAAS,EAAE,mBAAmB,GAC7B,OAAO,CAAC,SAAS,uBAAuB,EAAE,CAAC,CAO7C;AAED,wEAAwE;AACxE,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAC/D,OAAO,CAAC;IACT,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC;QACjD,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,EAAE,CAAC;IACJ,SAAS,EAAE,OAAO,CAAC;IACnB,yEAAyE;IACzE,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,kBAAkB,CAAA;KAAE,EAAE,CAAC;IACrD,eAAe,EAAE,OAAO,CAAC;CAC1B,CAAC,CA2DD;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAoBD;;;;;GAKG;AACH,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,EAAE,CAAC,CAgCnB;AAED,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,OAAO,CAAC,eAAe,CAAC,CA0B1B;AAED,+FAA+F;AAC/F,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,mBAAmB,CAAC,CAa9B;AAED,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAExC;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,mBAAmB,CAAC,CAO9B;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBxD;AAED,yFAAyF;AACzF,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAOxD"}

package/dist/agent-runtime/contained-write.d.ts

@@ -1,9 +0,0 @@
-import { type ContainedParent } from './contained-files.js';
-/** Create or atomically replace one direct child through the pinned parent descriptor. */
-export declare function writeContainedFile(input: {
-    parent: ContainedParent;
-    content: string;
-    replace: boolean;
-    mode?: number;
-}): Promise<void>;
-//# sourceMappingURL=contained-write.d.ts.map

package/dist/agent-runtime/contained-write.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"contained-write.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/contained-write.ts"],"names":[],"mappings":"AAYA,OAAO,EAEL,KAAK,eAAe,EAErB,MAAM,mBAAmB,CAAC;AAsD3B,0FAA0F;AAC1F,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,IAAI,CAAC,CAsChB"}