stitchkit 0.122.1 → 0.123.0

package/dist/{index-am1h8c9v.js → index-0d3sm0m9.js}

@@ -14,7 +14,7 @@ import {
 import {
   ToolExecutionControlError2,
   isToolExecutionControlError2
-} from "./index-s3yxw6kt.js";
+} from "./index-s512scra.js";
 import {
   AGENT_TOOL_PROGRESS_MESSAGE_MAX2,
   agentDurableEventId2
@@ -34,10 +34,10 @@ import {
   ProviderJournalRequestSchema,
   ProviderJournalResponseSchema,
   isActiveRunState
-} from "./index-8yxgcyt6.js";
+} from "./index-egg0yp2j.js";
 import {
   messageOf
-} from "./index-g149e9pk.js";
+} from "./index-3bzk2645.js";
 import {
   createRuntimeToolContext
 } from "./index-eh71zr32.js";
@@ -52,11 +52,11 @@ import {
 } from "./index-0s4xebbg.js";
 import {
   serializeCanonicalJson
-} from "./index-zsvzhjtk.js";
+} from "./index-20hn8pbh.js";
 import {
   isRecord,
   transportResult
-} from "./index-9jfdm5tg.js";
+} from "./index-hkxgennw.js";
 
 // src/agent-runtime/runtime-internals.ts
 import { z } from "zod";

package/dist/{index-72xtvcvr.js → index-0ndz5r8z.js}

@@ -1,6 +1,6 @@
 import {
   loadDarwinBinding
-} from "./index-m5m9rmvt.js";
+} from "./index-sqc6ezrb.js";
 import {
   errnoOf
 } from "./index-jj9228tt.js";

package/dist/index-0v9xb8pz.js

@@ -0,0 +1,66 @@
+import {
+  untilAborted
+} from "./index-a5qr2rj6.js";
+import {
+  AppError2
+} from "./index-0w0hxp7n.js";
+
+// src/contract/stream.ts
+import { z } from "zod";
+var DEFAULT_CONTRACT_STREAM_FRAME_BYTES2 = 256 * 1024;
+var ContractStreamErrorSchema = z.object({
+  code: z.string(),
+  message: z.string().optional(),
+  details: z.unknown().optional(),
+  hint: z.string().optional(),
+  retryable: z.boolean().optional()
+}).strict();
+var ContractStreamFrameSchema2 = z.discriminatedUnion("type", [
+  z.object({ type: z.literal("data"), data: z.unknown() }).strict(),
+  z.object({ type: z.literal("error"), error: ContractStreamErrorSchema }).strict(),
+  z.object({ type: z.literal("end") }).strict()
+]);
+function checkContractStreamItem(descriptor, value) {
+  const parsed = descriptor.item.safeParse(value);
+  if (!parsed.success) {
+    console.error("[stitchkit] contract stream item failed validation:", parsed.error);
+    throw new AppError2("STREAM_ITEM_INVALID", {
+      message: "Stream item did not match its contract",
+      status: 500
+    });
+  }
+  return {
+    item: parsed.data,
+    terminal: descriptor.terminal?.safeParse(parsed.data).success ?? false
+  };
+}
+async function* readContractStreamItems(iterator, descriptor, signal, observe) {
+  let terminalSeen = descriptor.terminal === undefined;
+  for (;; ) {
+    const pending = Promise.resolve(iterator.next());
+    observe?.(pending);
+    const next = await untilAborted(pending, signal);
+    if (next.done)
+      break;
+    const checked = checkContractStreamItem(descriptor, next.value);
+    if (checked.terminal)
+      terminalSeen = true;
+    yield checked;
+    if (checked.terminal && descriptor.completion === "terminal")
+      return;
+  }
+  if (!terminalSeen) {
+    throw new AppError2("STREAM_TERMINAL_MISSING", {
+      message: "Stream completed before its declared terminal item",
+      status: 500
+    });
+  }
+}
+function contractStreamLifetimeExceeded() {
+  return new AppError2("STREAM_LIFETIME_EXCEEDED", {
+    message: "Stream exceeded its declared lifetime",
+    status: 408
+  });
+}
+
+export { DEFAULT_CONTRACT_STREAM_FRAME_BYTES2, ContractStreamErrorSchema, ContractStreamFrameSchema2, readContractStreamItems, contractStreamLifetimeExceeded };

package/dist/{index-qcn84byh.js → index-0w0hxp7n.js}

@@ -57,6 +57,7 @@ var STITCH_ERROR_STATUS2 = {
   UNAUTHORIZED: 401,
   FORBIDDEN: 403,
   NOT_FOUND: 404,
+  UNKNOWN_OPERATION: 404,
   METHOD_NOT_ALLOWED: 405,
   CONFLICT: 409,
   RATE_LIMITED: 429,
@@ -85,6 +86,9 @@ var STITCH_ERROR_STATUS2 = {
   CONNECTION_REQUEST_FAILED: 502,
   UPSTREAM_TOOL_ERROR: 502,
   OPERATION_NOT_SUCCEEDED: 409,
+  OPERATION_BUSY: 503,
+  OPERATION_RESPONSE_TOO_LARGE: 500,
+  OPERATION_PROCESS_FAILED: 500,
   STREAM_ITEM_INVALID: 500,
   STREAM_FRAME_TOO_LARGE: 500,
   STREAM_TERMINAL_MISSING: 500,

package/dist/{index-3za04re9.js → index-1c945ten.js}

@@ -7,7 +7,7 @@ import {
 } from "./index-1eeqpadm.js";
 import {
   AppError2
-} from "./index-qcn84byh.js";
+} from "./index-0w0hxp7n.js";
 
 // src/realtime/rejected-frame.ts
 var REALTIME_REJECTION_KEY2 = "@stitchkit/realtime-rejected";

package/dist/{index-r6v4mc67.js → index-1d7s7da0.js}

@@ -1,7 +1,7 @@
 import {
   resolveSocketIp2,
   getClientInfo2
-} from "./index-kw1ws0cs.js";
+} from "./index-w3nv6kr8.js";
 import {
   isUnsafeKey
 } from "./index-zsarb5xp.js";

package/dist/{index-zsvzhjtk.js → index-20hn8pbh.js}

@@ -1,6 +1,6 @@
 import {
   isRecord
-} from "./index-9jfdm5tg.js";
+} from "./index-hkxgennw.js";
 
 // src/internal/canonical-json.ts
 function compareCodeUnits(left, right) {

package/dist/{index-f6pw75e1.js → index-2x2ch0bt.js}

@@ -8,7 +8,7 @@ import {
   AgentSeedReceiptSchema2,
   AgentHistoryMutationSchema2,
   isActiveRunState
-} from "./index-8yxgcyt6.js";
+} from "./index-egg0yp2j.js";
 import {
   AgentRecordIdSchema2,
   AgentMessageSchema2
@@ -17,7 +17,7 @@ import {
   replaceMessage,
   ArchiveSpillSchema,
   createAgentRuntimeStore2
-} from "./index-10rg78vf.js";
+} from "./index-v8xm2s9v.js";
 
 // src/agent-runtime/store-memory.ts
 import { z as z2 } from "zod";

package/dist/{index-61hve0ez.js → index-303qne11.js}

@@ -3,7 +3,7 @@ import {
 } from "./index-6j725ez5.js";
 import {
   isRecord
-} from "./index-9jfdm5tg.js";
+} from "./index-hkxgennw.js";
 
 // src/telegram/send-failure.ts
 var BY_DESCRIPTION = [

package/dist/{index-g149e9pk.js → index-3bzk2645.js}

@@ -1,6 +1,6 @@
 import {
   isRecord
-} from "./index-9jfdm5tg.js";
+} from "./index-hkxgennw.js";
 
 // src/internal/error-message.ts
 function messageOf(value) {

package/dist/index-45dyex0j.js

@@ -0,0 +1,119 @@
+import {
+  chunksOf
+} from "./index-cjbn98zt.js";
+import {
+  assertPositiveSafeInteger
+} from "./index-0s4xebbg.js";
+
+// src/internal/bounded-lines.ts
+var DEFAULT_STREAM_LINE_BYTES = 1024 * 1024;
+
+class StreamLineLimitError2 extends RangeError {
+  limitBytes;
+  lineBytes;
+  name = "StreamLineLimitError";
+  constructor(limitBytes, lineBytes) {
+    super(`Stream line exceeds the ${limitBytes} byte limit (${lineBytes} bytes so far)`);
+    this.limitBytes = limitBytes;
+    this.lineBytes = lineBytes;
+  }
+}
+
+class StreamTruncatedLineError2 extends SyntaxError {
+  lineBytes;
+  name = "StreamTruncatedLineError";
+  constructor(lineBytes) {
+    super(`Stream ended with an unterminated final line (${lineBytes} bytes)`);
+    this.lineBytes = lineBytes;
+  }
+}
+function lineLimit(value) {
+  const resolved = value ?? DEFAULT_STREAM_LINE_BYTES;
+  assertPositiveSafeInteger("maxLineBytes", resolved);
+  return resolved;
+}
+function createLineSplitter(maxLineBytes, requireFinalNewline = false) {
+  const limit = lineLimit(maxLineBytes);
+  const decoder = new TextDecoder("utf-8", { fatal: true });
+  let parts = [];
+  let pendingBytes = 0;
+  let ended = false;
+  let failed = false;
+  const drop = () => {
+    parts = [];
+    pendingBytes = 0;
+  };
+  const retain = (bytes) => {
+    if (bytes.byteLength === 0)
+      return;
+    pendingBytes += bytes.byteLength;
+    if (pendingBytes > limit) {
+      const seen = pendingBytes;
+      drop();
+      throw new StreamLineLimitError2(limit, seen);
+    }
+    parts.push(new Uint8Array(bytes));
+  };
+  const take = () => {
+    const line = new Uint8Array(pendingBytes);
+    let at = 0;
+    for (const part of parts) {
+      line.set(part, at);
+      at += part.byteLength;
+    }
+    drop();
+    return decoder.decode(line);
+  };
+  function* lines(chunk) {
+    if (ended)
+      throw new Error("Line decoder received bytes after end()");
+    if (failed)
+      throw new Error("Line decoder stopped at an earlier error; read the source again");
+    try {
+      let start = 0;
+      for (let index = chunk.indexOf(10);index !== -1; index = chunk.indexOf(10, start)) {
+        retain(chunk.subarray(start, index));
+        yield take();
+        start = index + 1;
+      }
+      retain(chunk.subarray(start));
+    } catch (error) {
+      failed = true;
+      throw error;
+    }
+  }
+  return {
+    lines,
+    push: (chunk) => [...lines(chunk)],
+    end() {
+      ended = true;
+      if (pendingBytes === 0)
+        return [];
+      if (requireFinalNewline) {
+        const seen = pendingBytes;
+        drop();
+        throw new StreamTruncatedLineError2(seen);
+      }
+      return [take()];
+    }
+  };
+}
+function createBoundedLineDecoder(maxLineBytes, requireFinalNewline = false) {
+  const { push, end } = createLineSplitter(maxLineBytes, requireFinalNewline);
+  return { push, end };
+}
+async function* readBoundedUtf8Lines(source, maxLineBytes, requireFinalNewline = false, signal) {
+  const splitter = createLineSplitter(maxLineBytes, requireFinalNewline);
+  for await (const chunk of chunksOf(source, signal)) {
+    for (const line of splitter.lines(chunk)) {
+      signal?.throwIfAborted();
+      yield line;
+    }
+  }
+  for (const line of splitter.end()) {
+    signal?.throwIfAborted();
+    yield line;
+  }
+}
+
+export { DEFAULT_STREAM_LINE_BYTES, StreamLineLimitError2, StreamTruncatedLineError2, createBoundedLineDecoder, readBoundedUtf8Lines };

package/dist/{index-nwm3ww60.js → index-64b2dxqz.js}

@@ -1,6 +1,6 @@
 import {
   attemptExclusiveLock
-} from "./index-gtx3eknx.js";
+} from "./index-dv7pa9w6.js";
 import {
   sleep
 } from "./index-eemvahkc.js";

package/dist/{index-aqwg2dm5.js → index-6k47xdtt.js}

@@ -1,9 +1,9 @@
 import {
   projectRuntimeTool
-} from "./index-x4p3kw1p.js";
+} from "./index-tynna0n4.js";
 import {
   isRecord
-} from "./index-9jfdm5tg.js";
+} from "./index-hkxgennw.js";
 
 // src/tools/runtime-tool.ts
 function defineRuntimeTool2(definition) {

package/dist/index-7q05ag0z.js

@@ -0,0 +1,10 @@
+import {
+  startNativeCommand
+} from "./index-gdqawggb.js";
+
+// src/process/command.ts
+function runNativeCommand2(input) {
+  return startNativeCommand(input).result;
+}
+
+export { runNativeCommand2 };

package/dist/{index-kz9734jc.js → index-96yjwwgf.js}

@@ -1,16 +1,16 @@
 import {
   assertUniqueToolName
-} from "./index-x4p3kw1p.js";
+} from "./index-tynna0n4.js";
 import {
   toolErrorFromResult
-} from "./index-s3yxw6kt.js";
+} from "./index-s512scra.js";
 import {
   collectTools2,
   createToolRunner
-} from "./index-ycqhyars.js";
+} from "./index-qc7tq0za.js";
 import {
   AppError2
-} from "./index-qcn84byh.js";
+} from "./index-0w0hxp7n.js";
 
 // src/tools/invoker.ts
 function createToolInvoker2(services, config) {
@@ -30,10 +30,11 @@ function createToolInvoker2(services, config) {
     const tool = tools.get(name);
     if (tool)
       return tool;
-    throw new AppError2("NOT_FOUND", {
+    throw new AppError2("UNKNOWN_OPERATION", {
       message: `Unknown tool: ${name}`,
       status: 404,
       details: {
+        operation: name,
         available: names
       }
     });

package/dist/{index-ff39f9dr.js → index-993vtv1w.js}

@@ -1,12 +1,12 @@
 import {
   projectToolSurface
-} from "./index-x4p3kw1p.js";
+} from "./index-tynna0n4.js";
 import {
   contractToolMountable
-} from "./index-ycqhyars.js";
+} from "./index-qc7tq0za.js";
 import {
   runtimeToolMountable
-} from "./index-aqwg2dm5.js";
+} from "./index-6k47xdtt.js";
 
 // src/tools/surface.ts
 function collectToolSurface({

package/dist/{index-4jpykzvw.js → index-99nnsz39.js}

@@ -5,7 +5,7 @@ import {
   TOOL_TRANSPORTS2,
   isHttpOnlyEndpoint,
   assertEndpointExposure
-} from "./index-69t14s4a.js";
+} from "./index-yt1gg11x.js";
 import {
   isUnsafeKey
 } from "./index-zsarb5xp.js";
@@ -14,7 +14,7 @@ import {
 } from "./index-0s4xebbg.js";
 import {
   isRecord
-} from "./index-9jfdm5tg.js";
+} from "./index-hkxgennw.js";
 
 // src/contract/define-validation.ts
 function assertMultipartEndpoint(prefix, key, ep) {

package/dist/{index-pfvde2fz.js → index-9ypczvpj.js}

@@ -1,7 +1,7 @@
 import {
   HTTP_ONLY_EXPOSURE,
   isHttpOnlyEndpoint
-} from "./index-69t14s4a.js";
+} from "./index-yt1gg11x.js";
 import {
   resolveRouteParamsSchema
 } from "./index-m38ej7e5.js";

package/dist/{index-qch1vcaa.js → index-a7ebd769.js}

@@ -4,10 +4,10 @@ import {
 } from "./index-rfkh44ss.js";
 import {
   serializeCanonicalJson
-} from "./index-zsvzhjtk.js";
+} from "./index-20hn8pbh.js";
 import {
   isRecord
-} from "./index-9jfdm5tg.js";
+} from "./index-hkxgennw.js";
 
 // src/live/watch-contract.ts
 import { z as z2 } from "zod";

package/dist/{index-98hv3sba.js → index-aw6kx2e6.js}

@@ -1,6 +1,6 @@
 import {
   AppError2
-} from "./index-qcn84byh.js";
+} from "./index-0w0hxp7n.js";
 
 // src/tools/internal/tool-error-projection.ts
 var TOOL_ERROR_PROJECTION = Symbol.for("stitchkit.toolErrorProjection");

package/dist/{index-yj6saztf.js → index-bz9cmnqq.js}

@@ -1,10 +1,16 @@
+import {
+  resolveRouteParamsSchema
+} from "./index-m38ej7e5.js";
 import {
   ExposureSchema,
   isHttpOnlyEndpoint
-} from "./index-69t14s4a.js";
+} from "./index-yt1gg11x.js";
 import {
   defineContract2
-} from "./index-4jpykzvw.js";
+} from "./index-99nnsz39.js";
+import {
+  canonicalDigest
+} from "./index-mfntvj58.js";
 import {
   bytesToBase64Url,
   base64UrlToBytes
@@ -13,16 +19,92 @@ import {
   AppError2,
   STITCH_ERROR_STATUS2,
   isStitchErrorCode2
-} from "./index-qcn84byh.js";
+} from "./index-0w0hxp7n.js";
 import {
   typedEntries,
+  isRecord,
   transportResult,
   mapObjectTypeBoundary
-} from "./index-9jfdm5tg.js";
-// src/contract/errors-factory.ts
+} from "./index-hkxgennw.js";
+
+// src/contract/fingerprint.ts
 import { z } from "zod";
+var ContractFingerprintSchema2 = z.strictObject({
+  fingerprint: z.string(),
+  operations: z.record(z.string(), z.string())
+});
+var ANNOTATIONS = new Set(["description", "title", "examples", "deprecated", "$comment"]);
+function constraintsOf(schema) {
+  if (Array.isArray(schema))
+    return schema.map(constraintsOf);
+  if (!isRecord(schema))
+    return schema;
+  const constraints = {};
+  for (const [key, value] of Object.entries(schema)) {
+    if (ANNOTATIONS.has(key))
+      continue;
+    constraints[key] = key === "required" && Array.isArray(value) ? [...value].sort() : key === "properties" && isRecord(value) ? Object.fromEntries(Object.entries(value).map(([name, property]) => [name, constraintsOf(property)])) : constraintsOf(value);
+  }
+  return constraints;
+}
+function schemaIdentity(schema, io) {
+  if (schema === undefined)
+    return null;
+  return constraintsOf(z.toJSONSchema(schema, { io, unrepresentable: "any", cycles: "ref" }));
+}
+function fingerprintOperations(operations) {
+  const digests = {};
+  for (const operation of operations) {
+    if (Object.hasOwn(digests, operation.name)) {
+      throw new Error(`[stitchkit] contract fingerprint: duplicate operation "${operation.name}"`);
+    }
+    digests[operation.name] = canonicalDigest({
+      method: operation.method,
+      path: operation.path,
+      params: schemaIdentity(operation.params, "input"),
+      input: schemaIdentity(operation.input, "input"),
+      output: schemaIdentity(operation.output, "output"),
+      item: schemaIdentity(operation.item, "output")
+    });
+  }
+  return { fingerprint: canonicalDigest(digests), operations: digests };
+}
+function contractFingerprint2(contracts) {
+  const list = Array.isArray(contracts) ? contracts : [contracts];
+  return fingerprintOperations(list.flatMap(contractOperations));
+}
+function contractOperations(contract) {
+  const operations = [];
+  for (const [key, endpoint] of typedEntries(contract.endpoints)) {
+    if (endpoint.expose && !endpoint.expose.includes("HTTP"))
+      continue;
+    operations.push({
+      name: `${contract.meta.prefix}.${key}`,
+      method: endpoint.method,
+      path: endpoint.path,
+      params: resolveRouteParamsSchema(endpoint.path, endpoint.params),
+      input: endpoint.input,
+      output: endpoint.output,
+      item: "stream" in endpoint ? endpoint.stream?.item : undefined
+    });
+  }
+  return operations;
+}
+
+// src/contract/identity.ts
+var contractIdentityContract2 = defineContract2({ prefix: "contract-identity", scope: "public" }, {
+  read: {
+    method: "GET",
+    path: "/",
+    desc: "The fingerprint of the contract operations this server answers",
+    expose: ["HTTP"],
+    output: ContractFingerprintSchema2
+  }
+});
+// src/contract/errors-factory.ts
+import { z as z2 } from "zod";
 function isErrorDetailsSchema(value) {
-  return value instanceof z.ZodObject || value instanceof z.ZodOptional && value.unwrap() instanceof z.ZodObject;
+  return value instanceof z2.ZodObject || value instanceof z2.ZodOptional && value.unwrap() instanceof z2.ZodObject;
 }
 function validateDefinition(code, definition) {
   if (!Number.isInteger(definition.status) || definition.status < 400 || definition.status > 599) {
@@ -123,9 +205,9 @@ function defineErrors2(source, mapping) {
   });
 }
 // src/contract/factory.ts
-import { z as z2 } from "zod";
-var ContractFactoryToolExposureSchema = z2.strictObject({ default: ExposureSchema });
-var ContractFactoryConfigSchema = z2.strictObject({
+import { z as z3 } from "zod";
+var ContractFactoryToolExposureSchema = z3.strictObject({ default: ExposureSchema });
+var ContractFactoryConfigSchema = z3.strictObject({
   toolExposure: ContractFactoryToolExposureSchema
 });
 function createContractFactory2(...args) {
@@ -154,11 +236,11 @@ function createContractFactory2(...args) {
   return { defineContract: scoped, configure };
 }
 // src/contract/pagination.ts
-import { z as z3 } from "zod";
+import { z as z4 } from "zod";
 function paginatedSchema2(itemSchema) {
-  return z3.object({
-    items: z3.array(itemSchema),
-    nextCursor: z3.string().nullable()
+  return z4.object({
+    items: z4.array(itemSchema),
+    nextCursor: z4.string().nullable()
   });
 }
 function toBase64Url(str) {
@@ -180,4 +262,4 @@ function decodeCursor2(cursor, schema) {
     return null;
   }
 }
-export { defineErrors2, createContractFactory2, paginatedSchema2, encodeCursor2, decodeCursor2 };
+export { ContractFingerprintSchema2, fingerprintOperations, contractFingerprint2, contractIdentityContract2, defineErrors2, createContractFactory2, paginatedSchema2, encodeCursor2, decodeCursor2 };

package/dist/{index-mtwh9hyp.js → index-cjzaj7ev.js}

@@ -11,7 +11,7 @@ import {
 } from "./index-50ejfz75.js";
 import {
   AppError2
-} from "./index-qcn84byh.js";
+} from "./index-0w0hxp7n.js";
 
 // src/application/kernel-contract.ts
 import { z } from "zod";

package/dist/{index-gtx3eknx.js → index-dv7pa9w6.js}

@@ -3,7 +3,7 @@ import {
   ProcessInstanceSchema2,
   readProcessInstance,
   probeProcessOwner2
-} from "./index-gq3fnq3f.js";
+} from "./index-n90tkkcv.js";
 import {
   BoundedFileReadError,
   readBoundedFile
@@ -14,7 +14,7 @@ import {
 } from "./index-b56nnscm.js";
 import {
   isRecord
-} from "./index-9jfdm5tg.js";
+} from "./index-hkxgennw.js";
 
 // src/internal/exclusive-lock.ts
 import { randomUUID } from "node:crypto";

package/dist/{index-sa99p98w.js → index-eabx6qjh.js}

@@ -1,13 +1,13 @@
 import {
   contractMethodFields
-} from "./index-pfvde2fz.js";
+} from "./index-9ypczvpj.js";
 import {
   AppError2
-} from "./index-qcn84byh.js";
+} from "./index-0w0hxp7n.js";
 import {
   typedEntries,
   callRuntimeHandler
-} from "./index-9jfdm5tg.js";
+} from "./index-hkxgennw.js";
 
 // src/server/implement.ts
 function isStreamingImplementation(value) {

package/dist/{index-8yxgcyt6.js → index-egg0yp2j.js}

@@ -1,6 +1,6 @@
 import {
   canonicalZodJson
-} from "./index-5w6t91ze.js";
+} from "./index-m8ddk770.js";
 import {
   AgentRecordIdSchema2,
   AgentRecordVersionSchema2,

package/dist/{index-h1j71dr1.js → index-enkc9pem.js}

@@ -1,6 +1,6 @@
 import {
   collectToolSurface
-} from "./index-ff39f9dr.js";
+} from "./index-993vtv1w.js";
 
 // src/tools/manifest.ts
 function utf8Length(value) {