stitchkit 0.118.0 → 0.119.0

package/dist/{index-tsngj2b5.js → index-2dfvv1jg.js}

@@ -13,7 +13,7 @@ import {
   uploadProgressRoute,
   withUploadProgress,
   parseApiErrorBody
-} from "./index-p6apg0jg.js";
+} from "./index-9frf01t9.js";
 import {
   inputIsQuery
 } from "./index-xhzq2qvj.js";
@@ -33,211 +33,6 @@ import {
   mapObject
 } from "./index-9jfdm5tg.js";
 
-// src/internal/bounded-lines.ts
-var DEFAULT_STREAM_LINE_BYTES = 1024 * 1024;
-
-class StreamLineLimitError2 extends RangeError {
-  limitBytes;
-  lineBytes;
-  name = "StreamLineLimitError";
-  constructor(limitBytes, lineBytes) {
-    super(`Stream line exceeds the ${limitBytes} byte limit (${lineBytes} bytes so far)`);
-    this.limitBytes = limitBytes;
-    this.lineBytes = lineBytes;
-  }
-}
-
-class StreamTruncatedLineError2 extends SyntaxError {
-  lineBytes;
-  name = "StreamTruncatedLineError";
-  constructor(lineBytes) {
-    super(`Stream ended with an unterminated final line (${lineBytes} bytes)`);
-    this.lineBytes = lineBytes;
-  }
-}
-function lineLimit(value) {
-  const resolved = value ?? DEFAULT_STREAM_LINE_BYTES;
-  assertPositiveSafeInteger("maxLineBytes", resolved);
-  return resolved;
-}
-function createLineSplitter(maxLineBytes, requireFinalNewline = false) {
-  const limit = lineLimit(maxLineBytes);
-  const decoder = new TextDecoder("utf-8", { fatal: true });
-  let parts = [];
-  let pendingBytes = 0;
-  let ended = false;
-  let failed = false;
-  const drop = () => {
-    parts = [];
-    pendingBytes = 0;
-  };
-  const retain = (bytes) => {
-    if (bytes.byteLength === 0)
-      return;
-    pendingBytes += bytes.byteLength;
-    if (pendingBytes > limit) {
-      const seen = pendingBytes;
-      drop();
-      throw new StreamLineLimitError2(limit, seen);
-    }
-    parts.push(new Uint8Array(bytes));
-  };
-  const take = () => {
-    const line = new Uint8Array(pendingBytes);
-    let at = 0;
-    for (const part of parts) {
-      line.set(part, at);
-      at += part.byteLength;
-    }
-    drop();
-    return decoder.decode(line);
-  };
-  function* lines(chunk) {
-    if (ended)
-      throw new Error("Line decoder received bytes after end()");
-    if (failed)
-      throw new Error("Line decoder stopped at an earlier error; read the source again");
-    try {
-      let start = 0;
-      for (let index = chunk.indexOf(10);index !== -1; index = chunk.indexOf(10, start)) {
-        retain(chunk.subarray(start, index));
-        yield take();
-        start = index + 1;
-      }
-      retain(chunk.subarray(start));
-    } catch (error) {
-      failed = true;
-      throw error;
-    }
-  }
-  return {
-    lines,
-    push: (chunk) => [...lines(chunk)],
-    end() {
-      ended = true;
-      if (pendingBytes === 0)
-        return [];
-      if (requireFinalNewline) {
-        const seen = pendingBytes;
-        drop();
-        throw new StreamTruncatedLineError2(seen);
-      }
-      return [take()];
-    }
-  };
-}
-function createBoundedLineDecoder(maxLineBytes, requireFinalNewline = false) {
-  const { push, end } = createLineSplitter(maxLineBytes, requireFinalNewline);
-  return { push, end };
-}
-async function* readBoundedUtf8Lines(source, maxLineBytes, requireFinalNewline = false, signal) {
-  const splitter = createLineSplitter(maxLineBytes, requireFinalNewline);
-  for await (const chunk of chunksOf(source, signal)) {
-    for (const line of splitter.lines(chunk)) {
-      signal?.throwIfAborted();
-      yield line;
-    }
-  }
-  for (const line of splitter.end()) {
-    signal?.throwIfAborted();
-    yield line;
-  }
-}
-
-// src/browser/stream.ts
-function ndjsonLine(rawLine) {
-  return (rawLine.endsWith("\r") ? rawLine.slice(0, -1) : rawLine).trim();
-}
-function parseFailure(raw, error, onParseError) {
-  const failure = error instanceof Error ? error : new Error(String(error));
-  if (!onParseError)
-    throw failure;
-  onParseError(raw, failure);
-}
-async function* parseNDJSON2(source, options) {
-  let reporting = false;
-  try {
-    for await (const rawLine of readBoundedUtf8Lines(source, options?.maxLineBytes ?? DEFAULT_STREAM_LINE_BYTES, options?.finalLine === "require-newline", options?.signal)) {
-      const line = ndjsonLine(rawLine);
-      if (line === "")
-        continue;
-      let value;
-      try {
-        value = JSON.parse(line);
-      } catch (error) {
-        reporting = true;
-        parseFailure(line, error, options?.onParseError);
-        reporting = false;
-        continue;
-      }
-      yield value;
-    }
-  } catch (error) {
-    if (reporting || options?.signal?.aborted)
-      throw error;
-    parseFailure("", error, options?.onParseError);
-  }
-}
-function createNDJSONDecoder2(options) {
-  const lines = createBoundedLineDecoder(options?.maxLineBytes ?? DEFAULT_STREAM_LINE_BYTES, options?.finalLine === "require-newline");
-  let failed = false;
-  const values = (rawLines) => {
-    const parsed = [];
-    for (const rawLine of rawLines) {
-      const line = ndjsonLine(rawLine);
-      if (line === "")
-        continue;
-      try {
-        parsed.push(JSON.parse(line));
-      } catch (error) {
-        parseFailure(line, error, options?.onParseError);
-      }
-    }
-    return parsed;
-  };
-  const guarded = (step) => {
-    if (failed)
-      throw new Error("NDJSON decoder stopped at an earlier error; read the source again");
-    try {
-      return values(step());
-    } catch (error) {
-      failed = true;
-      throw error;
-    }
-  };
-  return {
-    push: (chunk) => guarded(() => lines.push(chunk)),
-    end: () => guarded(() => lines.end())
-  };
-}
-async function* parseSSE2(source, options) {
-  let reporting = false;
-  try {
-    for await (const rawLine of readBoundedUtf8Lines(source, options?.maxLineBytes ?? DEFAULT_STREAM_LINE_BYTES, false, options?.signal)) {
-      const line = rawLine.endsWith("\r") ? rawLine.slice(0, -1) : rawLine;
-      if (!line.startsWith("data:"))
-        continue;
-      const data = line.slice(5).replace(/^ /, "");
-      if (data === "[DONE]")
-        return;
-      let value;
-      try {
-        value = JSON.parse(data);
-      } catch (error) {
-        reporting = true;
-        parseFailure(data, error, options?.onParseError);
-        reporting = false;
-        continue;
-      }
-      yield value;
-    }
-  } catch (error) {
-    if (reporting || options?.signal?.aborted)
-      throw error;
-    parseFailure("", error, options?.onParseError);
-  }
-}
-
 // src/browser/client-arguments.ts
 function endpointHasArguments(endpoint) {
   return Boolean(endpoint.params || endpoint.input || endpoint.multipart);
@@ -464,6 +259,211 @@ function joinClientBaseUrl(baseUrl, relativeUrl) {
   return `${base}${path}`;
 }
 
+// src/internal/bounded-lines.ts
+var DEFAULT_STREAM_LINE_BYTES = 1024 * 1024;
+
+class StreamLineLimitError2 extends RangeError {
+  limitBytes;
+  lineBytes;
+  name = "StreamLineLimitError";
+  constructor(limitBytes, lineBytes) {
+    super(`Stream line exceeds the ${limitBytes} byte limit (${lineBytes} bytes so far)`);
+    this.limitBytes = limitBytes;
+    this.lineBytes = lineBytes;
+  }
+}
+
+class StreamTruncatedLineError2 extends SyntaxError {
+  lineBytes;
+  name = "StreamTruncatedLineError";
+  constructor(lineBytes) {
+    super(`Stream ended with an unterminated final line (${lineBytes} bytes)`);
+    this.lineBytes = lineBytes;
+  }
+}
+function lineLimit(value) {
+  const resolved = value ?? DEFAULT_STREAM_LINE_BYTES;
+  assertPositiveSafeInteger("maxLineBytes", resolved);
+  return resolved;
+}
+function createLineSplitter(maxLineBytes, requireFinalNewline = false) {
+  const limit = lineLimit(maxLineBytes);
+  const decoder = new TextDecoder("utf-8", { fatal: true });
+  let parts = [];
+  let pendingBytes = 0;
+  let ended = false;
+  let failed = false;
+  const drop = () => {
+    parts = [];
+    pendingBytes = 0;
+  };
+  const retain = (bytes) => {
+    if (bytes.byteLength === 0)
+      return;
+    pendingBytes += bytes.byteLength;
+    if (pendingBytes > limit) {
+      const seen = pendingBytes;
+      drop();
+      throw new StreamLineLimitError2(limit, seen);
+    }
+    parts.push(new Uint8Array(bytes));
+  };
+  const take = () => {
+    const line = new Uint8Array(pendingBytes);
+    let at = 0;
+    for (const part of parts) {
+      line.set(part, at);
+      at += part.byteLength;
+    }
+    drop();
+    return decoder.decode(line);
+  };
+  function* lines(chunk) {
+    if (ended)
+      throw new Error("Line decoder received bytes after end()");
+    if (failed)
+      throw new Error("Line decoder stopped at an earlier error; read the source again");
+    try {
+      let start = 0;
+      for (let index = chunk.indexOf(10);index !== -1; index = chunk.indexOf(10, start)) {
+        retain(chunk.subarray(start, index));
+        yield take();
+        start = index + 1;
+      }
+      retain(chunk.subarray(start));
+    } catch (error) {
+      failed = true;
+      throw error;
+    }
+  }
+  return {
+    lines,
+    push: (chunk) => [...lines(chunk)],
+    end() {
+      ended = true;
+      if (pendingBytes === 0)
+        return [];
+      if (requireFinalNewline) {
+        const seen = pendingBytes;
+        drop();
+        throw new StreamTruncatedLineError2(seen);
+      }
+      return [take()];
+    }
+  };
+}
+function createBoundedLineDecoder(maxLineBytes, requireFinalNewline = false) {
+  const { push, end } = createLineSplitter(maxLineBytes, requireFinalNewline);
+  return { push, end };
+}
+async function* readBoundedUtf8Lines(source, maxLineBytes, requireFinalNewline = false, signal) {
+  const splitter = createLineSplitter(maxLineBytes, requireFinalNewline);
+  for await (const chunk of chunksOf(source, signal)) {
+    for (const line of splitter.lines(chunk)) {
+      signal?.throwIfAborted();
+      yield line;
+    }
+  }
+  for (const line of splitter.end()) {
+    signal?.throwIfAborted();
+    yield line;
+  }
+}
+
+// src/browser/stream.ts
+function ndjsonLine(rawLine) {
+  return (rawLine.endsWith("\r") ? rawLine.slice(0, -1) : rawLine).trim();
+}
+function parseFailure(raw, error, onParseError) {
+  const failure = error instanceof Error ? error : new Error(String(error));
+  if (!onParseError)
+    throw failure;
+  onParseError(raw, failure);
+}
+async function* parseNDJSON2(source, options) {
+  let reporting = false;
+  try {
+    for await (const rawLine of readBoundedUtf8Lines(source, options?.maxLineBytes ?? DEFAULT_STREAM_LINE_BYTES, options?.finalLine === "require-newline", options?.signal)) {
+      const line = ndjsonLine(rawLine);
+      if (line === "")
+        continue;
+      let value;
+      try {
+        value = JSON.parse(line);
+      } catch (error) {
+        reporting = true;
+        parseFailure(line, error, options?.onParseError);
+        reporting = false;
+        continue;
+      }
+      yield value;
+    }
+  } catch (error) {
+    if (reporting || options?.signal?.aborted)
+      throw error;
+    parseFailure("", error, options?.onParseError);
+  }
+}
+function createNDJSONDecoder2(options) {
+  const lines = createBoundedLineDecoder(options?.maxLineBytes ?? DEFAULT_STREAM_LINE_BYTES, options?.finalLine === "require-newline");
+  let failed = false;
+  const values = (rawLines) => {
+    const parsed = [];
+    for (const rawLine of rawLines) {
+      const line = ndjsonLine(rawLine);
+      if (line === "")
+        continue;
+      try {
+        parsed.push(JSON.parse(line));
+      } catch (error) {
+        parseFailure(line, error, options?.onParseError);
+      }
+    }
+    return parsed;
+  };
+  const guarded = (step) => {
+    if (failed)
+      throw new Error("NDJSON decoder stopped at an earlier error; read the source again");
+    try {
+      return values(step());
+    } catch (error) {
+      failed = true;
+      throw error;
+    }
+  };
+  return {
+    push: (chunk) => guarded(() => lines.push(chunk)),
+    end: () => guarded(() => lines.end())
+  };
+}
+async function* parseSSE2(source, options) {
+  let reporting = false;
+  try {
+    for await (const rawLine of readBoundedUtf8Lines(source, options?.maxLineBytes ?? DEFAULT_STREAM_LINE_BYTES, false, options?.signal)) {
+      const line = rawLine.endsWith("\r") ? rawLine.slice(0, -1) : rawLine;
+      if (!line.startsWith("data:"))
+        continue;
+      const data = line.slice(5).replace(/^ /, "");
+      if (data === "[DONE]")
+        return;
+      let value;
+      try {
+        value = JSON.parse(data);
+      } catch (error) {
+        reporting = true;
+        parseFailure(data, error, options?.onParseError);
+        reporting = false;
+        continue;
+      }
+      yield value;
+    }
+  } catch (error) {
+    if (reporting || options?.signal?.aborted)
+      throw error;
+    parseFailure("", error, options?.onParseError);
+  }
+}
+
 // src/browser/contract-stream.ts
 function sourceFor(response, descriptor) {
   const options = {

package/dist/{index-d9hq291n.js → index-4jpykzvw.js}

@@ -1,6 +1,11 @@
 import {
   resolveRouteParamsSchema
 } from "./index-m38ej7e5.js";
+import {
+  TOOL_TRANSPORTS2,
+  isHttpOnlyEndpoint,
+  assertEndpointExposure
+} from "./index-69t14s4a.js";
 import {
   isUnsafeKey
 } from "./index-zsarb5xp.js";
@@ -11,71 +16,10 @@ import {
   isRecord
 } from "./index-9jfdm5tg.js";
 
-// src/contract/tool-view.ts
-import { z } from "zod";
-var DECLARED_TOOL_VIEW = Symbol.for("stitchkit.toolView");
-function withToolView2(endpoint, view) {
-  const declared = { ...view, [DECLARED_TOOL_VIEW]: true };
-  return { ...endpoint, tool: { ...endpoint.tool, view: declared } };
-}
-function objectKeys(schema) {
-  return schema instanceof z.ZodObject ? new Set(Object.keys(schema.shape)) : new Set;
-}
-function assertToolView(prefix, key, ep) {
-  const where = `Contract "${prefix}": endpoint "${key}" tool.view`;
-  const tool = Reflect.get(ep, "tool");
-  const view = isRecord(tool) ? tool.view : undefined;
-  if (!isRecord(view))
-    throw new Error(`${where} must be an object`);
-  if (Reflect.get(view, DECLARED_TOOL_VIEW) !== true) {
-    throw new Error(`${where} must be declared with withToolView, which types its project`);
-  }
-  if (ep.rawResponse || ep.rawBody || ep.multipart || "responseMeta" in ep || "stream" in ep) {
-    throw new Error(`${where} is only for a JSON tool endpoint — this one is HTTP-only by kind`);
-  }
-  if (!ep.output) {
-    throw new Error(`${where} needs the endpoint's full output — the view is derived from it`);
-  }
-  const output = view.output;
-  const project = view.project;
-  if (output !== undefined && !(output instanceof z.ZodType)) {
-    throw new Error(`${where}.output must be a Zod schema`);
-  }
-  if (project !== undefined && typeof project !== "function") {
-    throw new Error(`${where}.project must be a function`);
-  }
-  const defaults = view.defaults;
-  if (defaults !== undefined && !isRecord(defaults)) {
-    throw new Error(`${where}.defaults must be an object`);
-  }
-  const entries = defaults === undefined ? [] : Object.entries(defaults);
-  if (output === undefined && project === undefined && entries.length === 0) {
-    throw new Error(`${where} declares no defaults, output or project — it would change nothing`);
-  }
-  if (entries.length === 0)
-    return;
-  if (!(ep.input instanceof z.ZodObject)) {
-    throw new Error(`${where}.defaults needs an object input schema to name keys of`);
-  }
-  const inputKeys = objectKeys(ep.input);
-  const paramKeys = objectKeys(ep.params);
-  for (const [name, value] of entries) {
-    if (paramKeys.has(name)) {
-      throw new Error(`${where}.defaults.${name} is a path param — a route segment has no default`);
-    }
-    if (!inputKeys.has(name)) {
-      throw new Error(`${where}.defaults.${name} is not a key of the endpoint's input`);
-    }
-    const field = ep.input.shape[name];
-    if (field === undefined || !z.safeParse(field, value).success) {
-      throw new Error(`${where}.defaults.${name} is not a valid value for that input key`);
-    }
-  }
-}
-
 // src/contract/define-validation.ts
 function assertMultipartEndpoint(prefix, key, ep) {
   const where = `Contract "${prefix}": multipart endpoint "${key}"`;
+  assertNoToolOptions(where, ep);
   if (ep.method !== "POST" && ep.method !== "PUT" && ep.method !== "PATCH") {
     throw new Error(`${where} must use POST, PUT or PATCH`);
   }
@@ -113,10 +57,6 @@ function assertRawEndpoint(prefix, key, ep) {
   if (ep.output)
     throw new Error(`${where} cannot declare an output schema`);
   assertNoToolOptions(where, ep);
-  const nonHttp = (ep.expose ?? []).filter((t) => t !== "HTTP");
-  if (nonHttp.length > 0) {
-    throw new Error(`${where} is HTTP-only — remove ${nonHttp.join(", ")} from expose`);
-  }
 }
 function assertStreamingResponseEndpoint(prefix, key, ep) {
   const where = `Contract "${prefix}": streaming endpoint "${key}"`;
@@ -153,10 +93,6 @@ function assertStreamingResponseEndpoint(prefix, key, ep) {
   if (ep.multipart)
     throw new Error(`${where} cannot be multipart`);
   assertNoToolOptions(where, ep);
-  const nonHttp = (ep.expose ?? []).filter((transport) => transport !== "HTTP");
-  if (nonHttp.length > 0) {
-    throw new Error(`${where} is HTTP-only — remove ${nonHttp.join(", ")} from expose`);
-  }
 }
 var UNGROUPED_TOOL_OPTIONS = {
   toolName: "tool.name",
@@ -214,10 +150,6 @@ function assertRawBodyEndpoint(prefix, key, ep) {
     throw new Error(`${where} must use POST, PUT or PATCH`);
   }
   assertNoToolOptions(where, ep);
-  const nonHttp = (ep.expose ?? []).filter((transport) => transport !== "HTTP");
-  if (nonHttp.length > 0) {
-    throw new Error(`${where} is HTTP-only — remove ${nonHttp.join(", ")} from expose`);
-  }
 }
 function assertSafelistedBodyEndpoint(prefix, key, ep) {
   const where = `Contract "${prefix}": safelistedBody endpoint "${key}"`;
@@ -245,15 +177,71 @@ function assertResponseMetaEndpoint(prefix, key, ep) {
   if (ep.rawResponse)
     throw new Error(`${where} cannot also be a rawResponse endpoint`);
   assertNoToolOptions(where, ep);
-  const nonHttp = (ep.expose ?? []).filter((transport) => transport !== "HTTP");
-  if (nonHttp.length > 0) {
-    throw new Error(`${where} is HTTP-only — remove ${nonHttp.join(", ")} from expose`);
+}
+
+// src/contract/tool-view.ts
+import { z } from "zod";
+var DECLARED_TOOL_VIEW = Symbol.for("stitchkit.toolView");
+function withToolView2(endpoint, view) {
+  const declared = { ...view, [DECLARED_TOOL_VIEW]: true };
+  return { ...endpoint, tool: { ...endpoint.tool, view: declared } };
+}
+function objectKeys(schema) {
+  return schema instanceof z.ZodObject ? new Set(Object.keys(schema.shape)) : new Set;
+}
+function assertToolView(prefix, key, ep) {
+  const where = `Contract "${prefix}": endpoint "${key}" tool.view`;
+  const tool = Reflect.get(ep, "tool");
+  const view = isRecord(tool) ? tool.view : undefined;
+  if (!isRecord(view))
+    throw new Error(`${where} must be an object`);
+  if (Reflect.get(view, DECLARED_TOOL_VIEW) !== true) {
+    throw new Error(`${where} must be declared with withToolView, which types its project`);
+  }
+  if (isHttpOnlyEndpoint(ep)) {
+    throw new Error(`${where} is only for a JSON tool endpoint — this one is HTTP-only by kind`);
+  }
+  if (!ep.output) {
+    throw new Error(`${where} needs the endpoint's full output — the view is derived from it`);
+  }
+  const output = view.output;
+  const project = view.project;
+  if (output !== undefined && !(output instanceof z.ZodType)) {
+    throw new Error(`${where}.output must be a Zod schema`);
+  }
+  if (project !== undefined && typeof project !== "function") {
+    throw new Error(`${where}.project must be a function`);
+  }
+  const defaults = view.defaults;
+  if (defaults !== undefined && !isRecord(defaults)) {
+    throw new Error(`${where}.defaults must be an object`);
+  }
+  const entries = defaults === undefined ? [] : Object.entries(defaults);
+  if (output === undefined && project === undefined && entries.length === 0) {
+    throw new Error(`${where} declares no defaults, output or project — it would change nothing`);
+  }
+  if (entries.length === 0)
+    return;
+  if (!(ep.input instanceof z.ZodObject)) {
+    throw new Error(`${where}.defaults needs an object input schema to name keys of`);
+  }
+  const inputKeys = objectKeys(ep.input);
+  const paramKeys = objectKeys(ep.params);
+  for (const [name, value] of entries) {
+    if (paramKeys.has(name)) {
+      throw new Error(`${where}.defaults.${name} is a path param — a route segment has no default`);
+    }
+    if (!inputKeys.has(name)) {
+      throw new Error(`${where}.defaults.${name} is not a key of the endpoint's input`);
+    }
+    const field = ep.input.shape[name];
+    if (field === undefined || !z.safeParse(field, value).success) {
+      throw new Error(`${where}.defaults.${name} is not a valid value for that input key`);
+    }
   }
 }
 
 // src/contract/define.ts
-var ALL_TRANSPORTS2 = ["HTTP", "MCP", "AGENT", "CLI"];
-var TOOL_TRANSPORTS2 = ["MCP", "AGENT", "CLI"];
 function defineContract2(meta, endpoints) {
   const materializedEndpoints = {};
   for (const [key, endpoint] of Object.entries(endpoints)) {
@@ -262,6 +250,7 @@ function defineContract2(meta, endpoints) {
   }
   const toolTransports = new Map;
   for (const [key, ep] of Object.entries(materializedEndpoints)) {
+    assertEndpointExposure(meta.prefix, key, ep);
     if (ep.desc.trim() === "") {
       throw new Error(`Contract "${meta.prefix}": endpoint "${key}" has an empty desc`);
     }
@@ -289,7 +278,7 @@ function defineContract2(meta, endpoints) {
     }
     const transports = new Set(ep.expose ? ep.expose.filter((t) => t !== "HTTP") : ["MCP", "AGENT"]);
     if (transports.size === 0) {
-      throw new Error(`Contract "${meta.prefix}": endpoint "${key}" sets tool options but is not exposed on any tool transport (${TOOL_TRANSPORTS2.join(" / ")}) — a contract factory with toolExposure 'explicit' makes an omitted expose HTTP-only`);
+      throw new Error(`Contract "${meta.prefix}": endpoint "${key}" sets tool options but is not exposed on any tool transport (${TOOL_TRANSPORTS2.join(" / ")}) — add a tool transport to expose or the factory default`);
     }
     if (tool.view !== undefined)
       assertToolView(meta.prefix, key, ep);
@@ -310,4 +299,4 @@ function defineContract2(meta, endpoints) {
   return { meta, endpoints: materializedEndpoints };
 }
 
-export { withToolView2, ALL_TRANSPORTS2, TOOL_TRANSPORTS2, defineContract2 };
+export { withToolView2, defineContract2 };

package/dist/{index-ghtpfz4z.js → index-57gqaq8b.js}

@@ -8,7 +8,7 @@ import {
   AgentSeedReceiptSchema2,
   AgentHistoryMutationSchema2,
   isActiveRunState
-} from "./index-xx1j310k.js";
+} from "./index-8yxgcyt6.js";
 import {
   AgentRecordIdSchema2,
   AgentMessageSchema2
@@ -17,7 +17,7 @@ import {
   replaceMessage,
   ArchiveSpillSchema,
   createAgentRuntimeStore2
-} from "./index-cycp3r3e.js";
+} from "./index-rxcgp4b9.js";
 
 // src/agent-runtime/store-memory.ts
 import { z as z2 } from "zod";

package/dist/index-69t14s4a.js

@@ -0,0 +1,39 @@
+// src/contract/endpoint-capabilities.ts
+import { z } from "zod";
+
+// src/contract/transports.ts
+var ALL_TRANSPORTS2 = ["HTTP", "MCP", "AGENT", "CLI"];
+var TOOL_TRANSPORTS2 = ["MCP", "AGENT", "CLI"];
+
+// src/contract/endpoint-capabilities.ts
+var HTTP_ONLY_FEATURES = [
+  "rawResponse",
+  "rawBody",
+  "responseMeta",
+  "multipart",
+  "stream"
+];
+var HTTP_ONLY_EXPOSURE = Object.freeze(["HTTP"]);
+var ExposureSchema = z.array(z.enum(ALL_TRANSPORTS2)).refine((transports) => new Set(transports).size === transports.length, {
+  message: "Each transport appears at most once"
+}).readonly();
+function isHttpOnlyEndpoint(endpoint) {
+  return endpoint.method === "HEAD" || HTTP_ONLY_FEATURES.some((feature) => Boolean(endpoint[feature]));
+}
+function assertEndpointExposure(prefix, key, endpoint) {
+  if (endpoint.expose === undefined)
+    return;
+  const exposure = ExposureSchema.safeParse(endpoint.expose);
+  const where = `Contract "${prefix}": endpoint "${key}"`;
+  if (!exposure.success) {
+    throw new Error(`${where} expose must be an array of distinct transports: ${ALL_TRANSPORTS2.join(" / ")}`);
+  }
+  if (isHttpOnlyEndpoint(endpoint)) {
+    const unsupported = exposure.data.filter((transport) => transport !== "HTTP");
+    if (unsupported.length > 0) {
+      throw new Error(`${where} is HTTP-only — remove ${unsupported.join(", ")} from expose`);
+    }
+  }
+}
+
+export { ALL_TRANSPORTS2, TOOL_TRANSPORTS2, HTTP_ONLY_EXPOSURE, ExposureSchema, isHttpOnlyEndpoint, assertEndpointExposure };