stitchkit 0.32.0 → 0.33.0

package/dist/cli.js

@@ -4,10 +4,10 @@ import {
   emitResult,
   parseCliArgs,
   pollUntilDone
-} from "./index-36qnfzxe.js";
+} from "./index-jr8vf7g8.js";
 import"./index-0ed3bx43.js";
-import"./index-zza375qp.js";
-import"./index-c7nyw0yt.js";
+import"./index-x3fcszf8.js";
+import"./index-enc7t99e.js";
 export {
   pollUntilDone,
   parseCliArgs,

package/dist/{index-zza375qp.js → index-enc7t99e.js}

@@ -1,6 +1,5 @@
-import {
-  isRecord
-} from "./index-c7nyw0yt.js";
+import { createRequire } from "node:module";
+var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // src/contract/errors.ts
 var APP_ERROR_BRAND = Symbol.for("stitchkit.AppError");
@@ -77,6 +76,13 @@ function mergeMeta(contractMeta, endpointMeta) {
     return { ...contractMeta };
   return { ...contractMeta, ...endpointMeta };
 }
+// src/internal/typed.ts
+function typedEntries(value) {
+  return Object.entries(value);
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
 // src/contract/pagination.ts
 import { z } from "zod";
 
@@ -123,6 +129,15 @@ function errorCode(err) {
     return "VALIDATION_ERROR";
   return;
 }
+function recordedErrorMessage(code, envelopeMessage, thrown) {
+  if (code === "INTERNAL_SERVER_ERROR" && thrown !== undefined) {
+    if (thrown instanceof Error)
+      return thrown.message;
+    if (typeof thrown === "string")
+      return thrown;
+  }
+  return envelopeMessage;
+}
 function normalizeError(err) {
   if (AppError.is(err))
     return err;
@@ -169,11 +184,12 @@ function validateHandlerOutput(schema, data, onStripped) {
   };
 }
 
-// src/internal/within-dir.ts
-import { sep } from "node:path";
-function isWithinDir(root, target) {
-  const base = root.endsWith(sep) ? root.slice(0, -sep.length) : root;
-  return target === root || target === base || target.startsWith(base + sep);
+// src/internal/safe-json.ts
+function isUnsafeKey(key) {
+  return key === "__proto__";
+}
+function safeJsonParse(text) {
+  return JSON.parse(text, (key, value) => isUnsafeKey(key) ? undefined : value);
 }
 
-export { mergeMeta, AppError, notFound, badRequest, unauthorized, forbidden, conflict, rateLimited, STITCH_ERROR_STATUS, isStitchErrorCode, appError, bytesToBase64Url, base64UrlToBytes, formatZodError, zodIssues, errorCode, normalizeError, validateHandlerOutput, isWithinDir };
+export { __require, mergeMeta, AppError, notFound, badRequest, unauthorized, forbidden, conflict, rateLimited, STITCH_ERROR_STATUS, isStitchErrorCode, appError, typedEntries, isRecord, bytesToBase64Url, base64UrlToBytes, formatZodError, zodIssues, errorCode, recordedErrorMessage, normalizeError, validateHandlerOutput, isUnsafeKey, safeJsonParse };

package/dist/{index-36qnfzxe.js → index-jr8vf7g8.js}

@@ -3,16 +3,16 @@ import {
   toJsonSchema
 } from "./index-0ed3bx43.js";
 import {
-  formatZodError,
-  isWithinDir,
-  normalizeError,
-  validateHandlerOutput
-} from "./index-zza375qp.js";
+  isWithinDir
+} from "./index-x3fcszf8.js";
 import {
+  formatZodError,
   isRecord,
   isUnsafeKey,
-  safeJsonParse
-} from "./index-c7nyw0yt.js";
+  normalizeError,
+  safeJsonParse,
+  validateHandlerOutput
+} from "./index-enc7t99e.js";
 
 // src/tools/coerce.ts
 import { z } from "zod";

package/dist/{index-3hsagjqf.js → index-k7ysesv0.js}

@@ -4,14 +4,8 @@ import {
   corsPreflightResponse
 } from "./index-czmqks7r.js";
 import {
-  AppError,
-  badRequest,
-  errorCode,
-  isWithinDir,
-  mergeMeta,
-  normalizeError,
-  validateHandlerOutput
-} from "./index-zza375qp.js";
+  isWithinDir
+} from "./index-x3fcszf8.js";
 import {
   extractIp,
   getClientInfo,
@@ -19,15 +13,23 @@ import {
   parseQueryParams,
   resolveSocketIp,
   resolveTraceId,
-  setRequestEndpoint
-} from "./index-9g9d6r1h.js";
+  setRequestEndpoint,
+  setRequestError
+} from "./index-wya8bkme.js";
 import {
+  AppError,
   __require,
+  badRequest,
+  errorCode,
   isRecord,
   isUnsafeKey,
+  mergeMeta,
+  normalizeError,
+  recordedErrorMessage,
   safeJsonParse,
-  typedEntries
-} from "./index-c7nyw0yt.js";
+  typedEntries,
+  validateHandlerOutput
+} from "./index-enc7t99e.js";
 
 // src/server/multipart.ts
 var DEFAULT_MAX_UPLOAD_BYTES = 25 * 1024 * 1024;
@@ -646,10 +648,22 @@ function createHandler(config) {
       } catch {}
     };
     const respondError = async (err, errCtx, endpoint) => {
+      const recordFailure = (normalized) => {
+        if (getRequestContext()?.error !== undefined)
+          return;
+        const known = AppError.is(err) ? err : normalized;
+        const code = known?.code ?? errorCode(err) ?? "INTERNAL_SERVER_ERROR";
+        setRequestError({
+          code,
+          message: recordedErrorMessage(code, known?.message, err),
+          details: known?.details
+        });
+      };
       if (hooks?.onError) {
         try {
           const response = await hooks.onError(errCtx ?? buildErrorContext(req, url, traceId, clientIp), err, endpoint);
           if (response instanceof Response) {
+            recordFailure();
             const withCors = applyCors(response, cors, req);
             logDone(withCors.status, errorCode(err));
             return withCors;
@@ -657,6 +671,7 @@ function createHandler(config) {
         } catch {}
       }
       const appErr = normalizeError(err);
+      recordFailure(appErr);
       logDone(appErr.status, appErr.code);
       return json(appErr.toJSON(), appErr.status, cors, req);
     };

package/dist/{index-jvescqgr.js → index-nmq59nae.js}

@@ -2,13 +2,11 @@ import {
   base64UrlToBytes,
   bytesToBase64Url,
   forbidden,
-  unauthorized
-} from "./index-zza375qp.js";
-import {
   isRecord,
   isUnsafeKey,
-  safeJsonParse
-} from "./index-c7nyw0yt.js";
+  safeJsonParse,
+  unauthorized
+} from "./index-enc7t99e.js";
 
 // src/server/middleware/cookies.ts
 function parseCookies(header) {

package/dist/{index-9g9d6r1h.js → index-wya8bkme.js}

@@ -1,7 +1,7 @@
 import {
   isRecord,
   isUnsafeKey
-} from "./index-c7nyw0yt.js";
+} from "./index-enc7t99e.js";
 
 // src/server/request.ts
 function generateTraceId() {

package/dist/index-x3fcszf8.js

@@ -0,0 +1,8 @@
+// src/internal/within-dir.ts
+import { sep } from "node:path";
+function isWithinDir(root, target) {
+  const base = root.endsWith(sep) ? root.slice(0, -sep.length) : root;
+  return target === root || target === base || target.startsWith(base + sep);
+}
+
+export { isWithinDir };

package/dist/internal/errors.d.ts

@@ -24,6 +24,21 @@ export declare function zodIssues(error: z.ZodError): ZodIssueSummary[];
  * produced elsewhere — a custom `onError` hook that returns its own `Response`.
  */
 export declare function errorCode(err: unknown): string | undefined;
+/**
+ * The message a **server-side record** should carry for a failure — an audit
+ * row, not a response.
+ *
+ * Normally the envelope's: it is truthful for an `AppError` or a `ZodError`, and
+ * it is what the caller was told, so the record and the response agree. The
+ * exception is the scrubbed one — an unexpected throw becomes
+ * `INTERNAL_SERVER_ERROR` / "Internal server error", which tells a later reader
+ * nothing at all, and there the raw message goes in instead.
+ *
+ * The line this holds is not "the framework never touches a raw message" but
+ * **"a raw message never crosses to the caller"**. Shared by the HTTP and tool
+ * paths so that line is one rule in one place. → ADR 0042.
+ */
+export declare function recordedErrorMessage(code: string, envelopeMessage: string | undefined, thrown: unknown): string | undefined;
 export declare function normalizeError(err: unknown): AppError;
 /**
  * Validate a handler's return value against the contract `output` schema. A

package/dist/internal/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/internal/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAQvC,wBAAgB,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,GAAG,MAAM,CAMxD;AAED,qFAAqF;AACrF,MAAM,WAAW,eAAe;IAC9B,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,GAAG,eAAe,EAAE,CAM9D;AAKD;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAI1D;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,QAAQ,CAgBrD;AA4BD;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,OAAO,EACb,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,GACrC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAe9D"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/internal/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAQvC,wBAAgB,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,GAAG,MAAM,CAMxD;AAED,qFAAqF;AACrF,MAAM,WAAW,eAAe;IAC9B,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,GAAG,eAAe,EAAE,CAM9D;AAKD;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAI1D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,MAAM,EAAE,OAAO,GACd,MAAM,GAAG,SAAS,CAMpB;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,QAAQ,CAgBrD;AA4BD;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,OAAO,EACb,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,GACrC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAe9D"}

package/dist/node.js

@@ -3,8 +3,10 @@ import {
   createImplement,
   createSocketIOServer,
   implement
-} from "./index-3hsagjqf.js";
+} from "./index-k7ysesv0.js";
 import"./index-czmqks7r.js";
+import"./index-x3fcszf8.js";
+import"./index-wya8bkme.js";
 import {
   AppError,
   appError,
@@ -14,9 +16,7 @@ import {
   notFound,
   rateLimited,
   unauthorized
-} from "./index-zza375qp.js";
-import"./index-9g9d6r1h.js";
-import"./index-c7nyw0yt.js";
+} from "./index-enc7t99e.js";
 // src/server/node.ts
 import { serve } from "srvx";
 async function serveNode(config) {

package/dist/observability/audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/observability/audit.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAc,MAAM,kBAAkB,CAAC;AAElE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAe,KAAK,eAAe,EAAmB,MAAM,YAAY,CAAC;AAGhF,oCAAoC;AACpC,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,KAAK,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,iFAAiF;IACjF,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC;IAC1C,yEAAyE;IACzE,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B;AAED,qEAAqE;AACrE,MAAM,WAAW,SAAS;IACxB;;;;OAIG;IACH,IAAI,EAAE,CAAC,CAAC,EACN,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,KACpD,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpD;;;OAGG;IACH,QAAQ,EAAE,aAAa,CAAC;CACzB;AAyCD,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,CA6G9D"}
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/observability/audit.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,aAAa,EAAc,MAAM,kBAAkB,CAAC;AAElE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAe,KAAK,eAAe,EAAmB,MAAM,YAAY,CAAC;AAGhF,oCAAoC;AACpC,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,KAAK,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,iFAAiF;IACjF,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC;IAC1C,yEAAyE;IACzE,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B;AAED,qEAAqE;AACrE,MAAM,WAAW,SAAS;IACxB;;;;OAIG;IACH,IAAI,EAAE,CAAC,CAAC,EACN,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,KACpD,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpD;;;OAGG;IACH,QAAQ,EAAE,aAAa,CAAC;CACzB;AA8BD,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,CA6G9D"}

package/dist/observability/index.js

@@ -13,11 +13,12 @@ import {
   setRequestError,
   setRequestUser,
   wrapInRequestContext
-} from "../index-9g9d6r1h.js";
+} from "../index-wya8bkme.js";
 import {
   isRecord,
-  isUnsafeKey
-} from "../index-c7nyw0yt.js";
+  isUnsafeKey,
+  recordedErrorMessage
+} from "../index-enc7t99e.js";
 
 // src/observability/sanitize.ts
 var DEFAULT_SENSITIVE_KEYS = /(password|passwd|pwd|secret|token|apikey|api[-_ ]?key|auth|authorization|bearer|session|cookie|init[-_ ]?data|credential|private[-_ ]?key)/i;
@@ -110,13 +111,7 @@ function toolErrorMessage(result) {
   return hint;
 }
 function auditErrorMessage(result, thrown) {
-  if (result.code === "INTERNAL_SERVER_ERROR" && thrown !== undefined) {
-    if (thrown instanceof Error)
-      return thrown.message;
-    if (typeof thrown === "string")
-      return thrown;
-  }
-  return toolErrorMessage(result);
+  return recordedErrorMessage(result.code, toolErrorMessage(result), thrown);
 }
 function readString(value) {
   return typeof value === "string" ? value : undefined;

package/dist/server/create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../src/server/create.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAEV,eAAe,EACf,YAAY,EACZ,aAAa,EAGd,MAAM,SAAS,CAAC;AAEjB,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,YAAY,CA6XjE;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,eAAe,uBAuBnD"}
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../src/server/create.ts"],"names":[],"mappings":"AA2CA,OAAO,KAAK,EAEV,eAAe,EACf,YAAY,EACZ,aAAa,EAGd,MAAM,SAAS,CAAC;AAEjB,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,YAAY,CAoZjE;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,eAAe,uBAuBnD"}

package/dist/server/index.js

@@ -10,7 +10,7 @@ import {
   socketIoLane,
   staticRoute,
   webSocketLane
-} from "../index-3hsagjqf.js";
+} from "../index-k7ysesv0.js";
 import {
   createAuthHook,
   createBearerResolver,
@@ -23,7 +23,7 @@ import {
   signJwt,
   verifyJwt,
   verifyPkce
-} from "../index-jvescqgr.js";
+} from "../index-nmq59nae.js";
 import {
   DEFAULT_CORS_ALLOW_HEADERS,
   DEFAULT_CORS_EXPOSE_HEADERS,
@@ -34,6 +34,17 @@ import {
   jsonSchemaFields,
   toJsonSchema
 } from "../index-0ed3bx43.js";
+import {
+  isWithinDir
+} from "../index-x3fcszf8.js";
+import {
+  extractIp,
+  generateTraceId,
+  getClientInfo,
+  getTraceId,
+  resolveSocketIp,
+  resolveTraceId
+} from "../index-wya8bkme.js";
 import {
   AppError,
   STITCH_ERROR_STATUS,
@@ -43,25 +54,14 @@ import {
   errorCode,
   forbidden,
   formatZodError,
+  isRecord,
   isStitchErrorCode,
-  isWithinDir,
   normalizeError,
   notFound,
   rateLimited,
   unauthorized,
   zodIssues
-} from "../index-zza375qp.js";
-import {
-  extractIp,
-  generateTraceId,
-  getClientInfo,
-  getTraceId,
-  resolveSocketIp,
-  resolveTraceId
-} from "../index-9g9d6r1h.js";
-import {
-  isRecord
-} from "../index-c7nyw0yt.js";
+} from "../index-enc7t99e.js";
 // src/server/swept-map.ts
 function createSweptMap(options) {
   const store = new Map;

package/dist/tools.js

@@ -2,7 +2,7 @@ import {
   inputIsQuery,
   signJwt,
   verifyPkce
-} from "./index-jvescqgr.js";
+} from "./index-nmq59nae.js";
 import {
   DEFAULT_CORS_ALLOW_HEADERS
 } from "./index-czmqks7r.js";
@@ -21,22 +21,22 @@ import {
   readCapped,
   toolResultFromError,
   writeDownload
-} from "./index-36qnfzxe.js";
+} from "./index-jr8vf7g8.js";
 import {
   toJsonSchema
 } from "./index-0ed3bx43.js";
 import {
-  AppError,
-  isWithinDir,
-  mergeMeta
-} from "./index-zza375qp.js";
+  isWithinDir
+} from "./index-x3fcszf8.js";
 import {
   getTraceId
-} from "./index-9g9d6r1h.js";
+} from "./index-wya8bkme.js";
 import {
+  AppError,
   isRecord,
+  mergeMeta,
   typedEntries
-} from "./index-c7nyw0yt.js";
+} from "./index-enc7t99e.js";
 
 // src/tools/agent.ts
 import { tool, zodSchema } from "ai";

package/llms-full.txt

@@ -2879,10 +2879,22 @@ import {
 } from 'stitchkit/observability'
 
 createAuthHook({ /* … */ inject: (ctx, user) => user && setRequestUser(user.id) })
-// in your onError hook:
+// only to override what the framework already recorded — see below:
 setRequestError({ code: err.code, message: err.message, details: err.issues })
 ```
 
+**The failure is recorded for you.** Every error travels one path inside the
+framework, and that path writes `{ code, message, details }` onto the context —
+so an audited failure names its cause whether or not you wrote an `onError`, and
+whether or not your `onError` returns its own `Response`. Where the envelope was
+scrubbed to `INTERNAL_SERVER_ERROR`, the row gets the **real** message rather than
+the placeholder; the caller still receives the scrubbed one. → ADR 0043
+
+`setRequestError` is therefore an **override**, not the wiring: call it when you
+want the row to say something other than what the framework derived (a domain
+code, a curated message, structured issues). The framework writes only when the
+context carries nothing yet, so your value always wins.
+
 **Endpoint identity is automatic.** The framework writes the matched operation's
 `(serviceName, action)` into the context at route-match, *before* validation — so
 `event.serviceName` / `event.action` are present on every event, including a

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stitchkit",
-  "version": "0.32.0",
+  "version": "0.33.0",
   "description": "Contract-first backend framework — one defineContract() into an HTTP API, MCP tools, AI-agent tools and a typed client. Bun and Node.",
   "keywords": [
     "bun",
@@ -90,7 +90,8 @@
     "dev": "bun run build:js -- --watch",
     "prepublishOnly": "cp ../../README.md ./README.md && bun ../../scripts/gen-llms.ts && bun run build",
     "test": "bun test",
-    "smoke:node": "node scripts/node-smoke.mjs"
+    "smoke:node": "node scripts/node-smoke.mjs",
+    "consumer-lane": "bun scripts/consumer-lane/run.mjs"
   },
   "peerDependencies": {
     "@modelcontextprotocol/ext-apps": "^1.7.2",

package/dist/index-c7nyw0yt.js

@@ -1,20 +0,0 @@
-import { createRequire } from "node:module";
-var __require = /* @__PURE__ */ createRequire(import.meta.url);
-
-// src/internal/typed.ts
-function typedEntries(value) {
-  return Object.entries(value);
-}
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-
-// src/internal/safe-json.ts
-function isUnsafeKey(key) {
-  return key === "__proto__";
-}
-function safeJsonParse(text) {
-  return JSON.parse(text, (key, value) => isUnsafeKey(key) ? undefined : value);
-}
-
-export { __require, typedEntries, isRecord, isUnsafeKey, safeJsonParse };