stitchkit 0.118.1 → 0.120.0

package/dist/index-h1j71dr1.js

@@ -0,0 +1,48 @@
+import {
+  collectToolSurface
+} from "./index-ff39f9dr.js";
+
+// src/tools/manifest.ts
+function utf8Length(value) {
+  return new TextEncoder().encode(JSON.stringify(value)).byteLength;
+}
+function describeToolCatalog2(config) {
+  const deferred = new Set(config.deferredNames ?? []);
+  const entries = collectToolSurface({
+    surface: config,
+    transport: config.transport,
+    extend: config.extend,
+    flattenUnionInput: config.flattenUnionInput
+  }).map(({ kind, service, action, mountable }) => {
+    const schemaBytes = utf8Length(mountable.presentationSchema);
+    return {
+      name: mountable.name,
+      description: mountable.method.desc,
+      inputSchema: mountable.presentationSchema,
+      source: { kind, service, action },
+      schemaBytes,
+      deferred: deferred.has(mountable.name)
+    };
+  });
+  if (config.maxSchemaBytes !== undefined) {
+    const total = entries.reduce((sum, entry) => sum + entry.schemaBytes, 0);
+    if (total > config.maxSchemaBytes) {
+      throw new TypeError(`Tool catalog schemas use ${total} bytes, exceeding maxSchemaBytes ${config.maxSchemaBytes}`);
+    }
+  }
+  return entries;
+}
+function buildToolManifest2(config) {
+  return collectToolSurface({
+    surface: config,
+    transport: config.transport,
+    extend: config.extend,
+    flattenUnionInput: config.flattenUnionInput
+  }).map(({ mountable }) => ({
+    name: mountable.name,
+    description: mountable.method.desc,
+    inputSchema: mountable.presentationSchema
+  }));
+}
+
+export { describeToolCatalog2, buildToolManifest2 };

package/dist/{index-mgb7r8b8.js → index-jswst0h3.js}

@@ -3,7 +3,7 @@ import {
 } from "./index-b0kddvzw.js";
 import {
   readBoundedChunks
-} from "./index-qndsr7f0.js";
+} from "./index-5efrpfmj.js";
 
 // src/internal/secure-fetch.ts
 import { lookup } from "node:dns/promises";

package/dist/{index-095ya5hm.js → index-knmnj11j.js}

@@ -8,30 +8,31 @@ import {
   validateResolvedInputRounds,
   presentationMetadata,
   prepareProjectedMcpTools
-} from "./index-rhzkndr5.js";
+} from "./index-x4p3kw1p.js";
 import {
   parseToolCallArguments,
   toolResultFromError,
   observed
-} from "./index-v6vb5qx8.js";
+} from "./index-s3yxw6kt.js";
 import {
   collectTools2,
   createToolRunner,
   formatToolError
-} from "./index-htxh46ej.js";
-import {
-  DEFAULT_CORS_ALLOW_HEADERS2,
-  DEFAULT_PROCESS_SIGNALS,
-  defaultSignalSource,
-  reportSignalError,
-  guardSignalCallback
-} from "./index-yk4g8805.js";
+} from "./index-ycqhyars.js";
 import {
   redact2
 } from "./index-e6c2spsd.js";
+import {
+  argumentsDigest
+} from "./index-r7a7r7ha.js";
+import {
+  wwwAuthenticateHeader2,
+  mcpProgressToken,
+  createMcpProgressReporter
+} from "./index-568w258r.js";
 import {
   collectToolSurface
-} from "./index-86nbfysb.js";
+} from "./index-ff39f9dr.js";
 import {
   runWithRequestContext2,
   getRequestContext2
@@ -42,9 +43,6 @@ import {
 import {
   AppError2
 } from "./index-qcn84byh.js";
-import {
-  argumentsDigest
-} from "./index-r7a7r7ha.js";
 import {
   compareCodeUnits,
   serializeCanonicalJson
@@ -56,46 +54,6 @@ import {
   isRecord
 } from "./index-9jfdm5tg.js";
 
-// src/server/oauth/metadata.ts
-var PROTECTED_RESOURCE_PATH2 = "/.well-known/oauth-protected-resource";
-function metadataPath(resource) {
-  const { pathname } = new URL(resource);
-  return pathname === "/" ? PROTECTED_RESOURCE_PATH2 : `${PROTECTED_RESOURCE_PATH2}${pathname}`;
-}
-function protectedResourceMetadataUrl2(resource) {
-  return `${new URL(resource).origin}${metadataPath(resource)}`;
-}
-function wwwAuthenticateHeader2(resource) {
-  return `Bearer resource_metadata="${protectedResourceMetadataUrl2(resource)}"`;
-}
-var PUBLIC_CORS = {
-  "Access-Control-Allow-Origin": "*",
-  "Access-Control-Allow-Methods": "GET, OPTIONS",
-  "Access-Control-Allow-Headers": DEFAULT_CORS_ALLOW_HEADERS2
-};
-function oauthProtectedResourceRoute2(config) {
-  const body = JSON.stringify({
-    resource: config.resource,
-    authorization_servers: config.authorizationServers,
-    ...config.scopesSupported && { scopes_supported: config.scopesSupported },
-    bearer_methods_supported: ["header"]
-  });
-  return {
-    method: "ALL",
-    path: metadataPath(config.resource),
-    handler: (req) => {
-      if (req.method === "OPTIONS")
-        return new Response(null, { status: 204, headers: PUBLIC_CORS });
-      if (req.method !== "GET")
-        return new Response("Method Not Allowed", { status: 405 });
-      return new Response(body, {
-        status: 200,
-        headers: { "Content-Type": "application/json", ...PUBLIC_CORS }
-      });
-    }
-  };
-}
-
 // src/tools/mcp/app.ts
 import { readFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
@@ -174,6 +132,15 @@ function stampToolResult(result, stamp) {
   return { ...result, _meta: { ...result._meta, ...mcpCatalogMeta2(stamp) } };
 }
 
+// src/tools/mcp/handler.ts
+import {
+  createMcpHandler as createSdkMcpHandler,
+  hostHeaderValidationResponse,
+  localhostAllowedHostnames,
+  localhostAllowedOrigins,
+  originValidationResponse
+} from "@modelcontextprotocol/server";
+
 // src/tools/mcp/mount.ts
 import {
   createRequestStateCodec,
@@ -292,39 +259,6 @@ import {
   CLIENT_INFO_META_KEY,
   PROTOCOL_VERSION_META_KEY
 } from "@modelcontextprotocol/server";
-
-// src/tools/mcp/progress.ts
-function mcpProgressToken(context) {
-  const token = context.mcpReq._meta?.progressToken;
-  return typeof token === "string" || typeof token === "number" ? token : undefined;
-}
-function createMcpProgressReporter(context) {
-  const token = mcpProgressToken(context);
-  if (token === undefined)
-    return async () => {
-      return;
-    };
-  let sent = 0;
-  let highWater = 0;
-  return async (update) => {
-    sent += 1;
-    const value = update.progress ?? Math.max(sent, highWater + 1);
-    highWater = Math.max(highWater, value);
-    try {
-      await context.mcpReq.notify({
-        method: "notifications/progress",
-        params: {
-          progressToken: token,
-          progress: value,
-          ...update.total !== undefined && { total: update.total },
-          ...update.message !== undefined && { message: update.message }
-        }
-      });
-    } catch {}
-  };
-}
-
-// src/tools/mcp/round-context.ts
 function transportContext(context, toolName, outcome, round) {
   const protocolVersionValue = isRecord(context.mcpReq.envelope) ? Reflect.get(context.mcpReq.envelope, PROTOCOL_VERSION_META_KEY) : undefined;
   const protocolVersion = typeof protocolVersionValue === "string" ? protocolVersionValue : undefined;
@@ -911,13 +845,6 @@ function mountMcpResource2(server, resource) {
 }
 
 // src/tools/mcp/handler.ts
-import {
-  createMcpHandler as createSdkMcpHandler,
-  hostHeaderValidationResponse,
-  localhostAllowedHostnames,
-  localhostAllowedOrigins,
-  originValidationResponse
-} from "@modelcontextprotocol/server";
 function jsonRpcError(code, message, status, headers) {
   return Response.json({ jsonrpc: "2.0", error: { code, message }, id: null }, { status, headers });
 }
@@ -1060,100 +987,4 @@ async function createStdioMcpServer2(config) {
   });
 }
 
-// src/tools/mcp/stdio-signals.ts
-var bound = new WeakSet;
-function bindStdioProcessSignals2(handle, options = {}) {
-  if (bound.has(handle)) {
-    throw new Error("[stitchkit] bindStdioProcessSignals: this stdio handle is already bound; close the first binding before creating another");
-  }
-  bound.add(handle);
-  const signals = [...new Set(options.signals ?? DEFAULT_PROCESS_SIGNALS)];
-  const source = options.signalSource ?? defaultSignalSource;
-  const handlers = [];
-  let started = false;
-  let sameTurnAsStart = false;
-  let closed = false;
-  let resolveChain = () => {
-    return;
-  };
-  let rejectChain = () => {
-    return;
-  };
-  const promise = new Promise((resolve, reject) => {
-    resolveChain = resolve;
-    rejectChain = reject;
-  });
-  promise.catch(() => {
-    return;
-  });
-  const removeListeners = () => {
-    if (closed)
-      return;
-    closed = true;
-    for (const [signal, handler] of handlers)
-      source.off(signal, handler);
-    if (!started)
-      bound.delete(handle);
-  };
-  const close = () => {
-    const hadStarted = started;
-    removeListeners();
-    if (!hadStarted)
-      resolveChain();
-  };
-  const run = async (signal) => {
-    try {
-      await options.onClose?.(signal);
-    } catch (error) {
-      reportSignalError("prepare", error, options.onError);
-    }
-    try {
-      await handle.close();
-    } catch (error) {
-      rejectChain(error);
-      reportSignalError("close", error, options.onError);
-      removeListeners();
-      return;
-    }
-    resolveChain();
-    try {
-      await options.onComplete?.();
-    } catch (error) {
-      reportSignalError("complete", error, options.onError);
-    } finally {
-      removeListeners();
-    }
-  };
-  const onSignal = (signal) => {
-    if (!started) {
-      started = true;
-      sameTurnAsStart = true;
-      queueMicrotask(() => {
-        sameTurnAsStart = false;
-      });
-      run(signal).catch((error) => reportSignalError("close", error, options.onError));
-      return;
-    }
-    if (sameTurnAsStart)
-      return;
-    removeListeners();
-    guardSignalCallback(() => options.onRepeatedSignal?.(signal), "close", options.onError);
-    let restored = false;
-    try {
-      restored = source.raiseDefault(signal);
-    } catch (error) {
-      reportSignalError("close", error, options.onError);
-    }
-    if (!restored) {
-      guardSignalCallback(() => options.onEscalationBlocked?.(signal), "close", options.onError);
-    }
-  };
-  for (const signal of signals) {
-    const handler = () => onSignal(signal);
-    handlers.push([signal, handler]);
-    source.on(signal, handler);
-  }
-  return { promise, close };
-}
-
-export { PROTECTED_RESOURCE_PATH2, protectedResourceMetadataUrl2, wwwAuthenticateHeader2, oauthProtectedResourceRoute2, RESOURCE_MIME_TYPE2, EXT_APPS_BUNDLE_PLACEHOLDER2, inlineMcpAppBundle2, MCP_CATALOG_META_KEY2, mcpCatalogMeta2, readMcpCatalogStamp2, createMcpProgressReporter, validateMcpSchemas2, mountMcp2, buildMcpServer2, mountMcpResource2, createMcpHandler2, createMcpHttpRoute2, createStdioMcpServer2, bindStdioProcessSignals2 };
+export { RESOURCE_MIME_TYPE2, EXT_APPS_BUNDLE_PLACEHOLDER2, inlineMcpAppBundle2, MCP_CATALOG_META_KEY2, mcpCatalogMeta2, readMcpCatalogStamp2, validateMcpSchemas2, mountMcp2, buildMcpServer2, mountMcpResource2, createMcpHandler2, createMcpHttpRoute2, createStdioMcpServer2 };

package/dist/{index-vwhrnp67.js → index-kz9734jc.js}

@@ -1,13 +1,13 @@
 import {
   assertUniqueToolName
-} from "./index-rhzkndr5.js";
+} from "./index-x4p3kw1p.js";
 import {
   toolErrorFromResult
-} from "./index-v6vb5qx8.js";
+} from "./index-s3yxw6kt.js";
 import {
   collectTools2,
   createToolRunner
-} from "./index-htxh46ej.js";
+} from "./index-ycqhyars.js";
 import {
   AppError2
 } from "./index-qcn84byh.js";

package/dist/{index-txg1npmg.js → index-mtwh9hyp.js}

@@ -1,6 +1,6 @@
 import {
   ShutdownOptionsSchema2
-} from "./index-q0th8q0z.js";
+} from "./index-9mjrnqxs.js";
 import {
   ApplicationIdSchema2,
   ApplicationSnapshotSchema2,

package/dist/{index-dr3t5n1v.js → index-nn9qvkww.js}

@@ -11,7 +11,7 @@ import {
   spawnBunChild,
   spawnBunInheritedChild,
   ownerLossGuardEntry
-} from "./index-f6m4c545.js";
+} from "./index-zrdcmg6j.js";
 import {
   errnoOf
 } from "./index-jj9228tt.js";
@@ -325,51 +325,6 @@ function waitForCommandClose(closed, timeoutMs) {
   return raceAbort(closed, deadline.signal).finally(() => deadline.cancel());
 }
 
-// src/process/cleanup.ts
-async function cleanupNativeCommand(input) {
-  const signalled = Promise.resolve().then(input.signal);
-  const teardown = () => input.transport?.destroy();
-  const destroyed = signalled.then(teardown, teardown);
-  const awaitRelease = async () => {
-    if (!input.transport)
-      return;
-    try {
-      await waitForCommandClose(input.transport.released, input.timeoutMs);
-    } catch (cause) {
-      throw new Error(`Command handles remained open: ${[...input.transport.pendingHandles].join(", ")}`, { cause });
-    }
-  };
-  const released = signalled.then(awaitRelease, () => {
-    return;
-  });
-  const stopped = async () => {
-    const failed = { kind: "error", cause: input.error };
-    if (!input.transport)
-      return failed;
-    await signalled.catch(() => {
-      return;
-    });
-    const leader = await waitForCommandClose(input.transport.leader, input.timeoutMs).catch(() => {
-      return;
-    });
-    return leader?.kind === "exit" ? {
-      kind: "stopped",
-      cause: input.error,
-      exitCode: leader.exitCode,
-      signal: leader.signal
-    } : failed;
-  };
-  const cleanup = await Promise.allSettled([
-    input.event ? input.settle(input.event) : stopped().then(input.settle),
-    destroyed,
-    signalled,
-    released
-  ]);
-  const failures = cleanup.flatMap((item) => item.status === "rejected" && item.reason !== input.error ? [item.reason] : []);
-  if (failures.length)
-    throw commandCleanupError(new AggregateError([input.error, ...failures], "Command failed and cleanup failed"));
-}
-
 // src/process/command-lifetime.ts
 class CommandStopped extends DOMException {
   constructor() {
@@ -417,6 +372,51 @@ function createCommandLifetime(input) {
   };
 }
 
+// src/process/cleanup.ts
+async function cleanupNativeCommand(input) {
+  const signalled = Promise.resolve().then(input.signal);
+  const teardown = () => input.transport?.destroy();
+  const destroyed = signalled.then(teardown, teardown);
+  const awaitRelease = async () => {
+    if (!input.transport)
+      return;
+    try {
+      await waitForCommandClose(input.transport.released, input.timeoutMs);
+    } catch (cause) {
+      throw new Error(`Command handles remained open: ${[...input.transport.pendingHandles].join(", ")}`, { cause });
+    }
+  };
+  const released = signalled.then(awaitRelease, () => {
+    return;
+  });
+  const stopped = async () => {
+    const failed = { kind: "error", cause: input.error };
+    if (!input.transport)
+      return failed;
+    await signalled.catch(() => {
+      return;
+    });
+    const leader = await waitForCommandClose(input.transport.leader, input.timeoutMs).catch(() => {
+      return;
+    });
+    return leader?.kind === "exit" ? {
+      kind: "stopped",
+      cause: input.error,
+      exitCode: leader.exitCode,
+      signal: leader.signal
+    } : failed;
+  };
+  const cleanup = await Promise.allSettled([
+    input.event ? input.settle(input.event) : stopped().then(input.settle),
+    destroyed,
+    signalled,
+    released
+  ]);
+  const failures = cleanup.flatMap((item) => item.status === "rejected" && item.reason !== input.error ? [item.reason] : []);
+  if (failures.length)
+    throw commandCleanupError(new AggregateError([input.error, ...failures], "Command failed and cleanup failed"));
+}
+
 // src/process/launch.ts
 import { Readable as Readable2 } from "node:stream";
 

package/dist/{index-ghtpfz4z.js → index-nyyam9ce.js}

@@ -8,7 +8,7 @@ import {
   AgentSeedReceiptSchema2,
   AgentHistoryMutationSchema2,
   isActiveRunState
-} from "./index-xx1j310k.js";
+} from "./index-8yxgcyt6.js";
 import {
   AgentRecordIdSchema2,
   AgentMessageSchema2
@@ -17,7 +17,7 @@ import {
   replaceMessage,
   ArchiveSpillSchema,
   createAgentRuntimeStore2
-} from "./index-cycp3r3e.js";
+} from "./index-yb9n4pgj.js";
 
 // src/agent-runtime/store-memory.ts
 import { z as z2 } from "zod";

package/dist/{index-qezhmp51.js → index-nz06qw5a.js}

@@ -62,6 +62,9 @@ var DecimalStringSchema2 = z.string().refine((value) => {
 }, "expected a canonical decimal string");
 var DecimalInputSchema2 = z.string().regex(DECIMAL_PATTERN, "expected a decimal string").transform((value) => formatDecimal(parseDecimal(value)));
 
+// src/primitives/money.ts
+import { z as z3 } from "zod";
+
 // src/primitives/rounding.ts
 import { z as z2 } from "zod";
 var RoundingModeSchema2 = z2.enum(["half-up", "half-even", "up", "down"]);
@@ -130,7 +133,6 @@ function roundDecimal2(value, policy) {
 }
 
 // src/primitives/money.ts
-import { z as z3 } from "zod";
 var IntegerStringSchema = z3.string().regex(/^-?(?:0|[1-9]\d*)$/);
 function createMoneySchema2(currency) {
   return z3.object({

package/dist/{index-1bx1xv1k.js → index-pfvde2fz.js}

@@ -1,3 +1,7 @@
+import {
+  HTTP_ONLY_EXPOSURE,
+  isHttpOnlyEndpoint
+} from "./index-69t14s4a.js";
 import {
   resolveRouteParamsSchema
 } from "./index-m38ej7e5.js";
@@ -12,7 +16,6 @@ function mergeMeta(contractMeta, endpointMeta) {
 }
 
 // src/server/contract-method.ts
-var HTTP_ONLY = Object.freeze(["HTTP"]);
 function contractMethodFields(contract, key, endpoint) {
   const groupScope = contract.meta.scope ?? "public";
   return {
@@ -22,7 +25,7 @@ function contractMethodFields(contract, key, endpoint) {
     serviceName: contract.meta.prefix,
     key,
     toolName: endpoint.tool?.name,
-    expose: endpoint.rawResponse || endpoint.rawBody || endpoint.responseMeta || "stream" in endpoint && endpoint.stream ? HTTP_ONLY : endpoint.expose,
+    expose: endpoint.expose ?? (isHttpOnlyEndpoint(endpoint) ? HTTP_ONLY_EXPOSURE : undefined),
     scope: endpoint.scope ?? groupScope,
     paramsSchema: resolveRouteParamsSchema(endpoint.path, endpoint.params),
     inputSchema: endpoint.input,