stitchkit 0.49.2 → 0.51.0

package/dist/cli.js

@@ -4,10 +4,10 @@ import {
   emitResult,
   parseCliArgs,
   pollUntilDone
-} from "./index-0hj37z43.js";
+} from "./index-h55e1wyq.js";
 import"./index-yxpe3phd.js";
-import"./index-jewp9r0a.js";
-import"./index-h05ygjqx.js";
+import"./index-8qghvg18.js";
+import"./index-bmnhqtya.js";
 export {
   pollUntilDone,
   parseCliArgs,

package/dist/contract/errors-factory.d.ts

@@ -1,18 +1,20 @@
 /**
  * Declare an application's domain errors once. Each definition owns its HTTP
- * status and optional Zod schema for structured details; generated factories
- * construct (but do not throw) branded `AppError` instances.
+ * status, its default message and an optional Zod schema for structured
+ * details; generated factories construct (but do not throw) branded `AppError`
+ * instances.
  *
  * ```ts
  * export const appErrors = defineErrors({
- *   SESSION_NOT_FOUND: { status: 404 },
+ *   SESSION_NOT_FOUND: { status: 404, message: 'No such session' },
  *   QUOTA_EXCEEDED: {
  *     status: 429,
+ *     message: 'Monthly quota exhausted',
  *     details: z.object({ retryAfterSeconds: z.number().int().positive() }),
  *   },
  * })
  *
- * throw appErrors.errors.SESSION_NOT_FOUND({ message: 'No such session' })
+ * throw appErrors.errors.SESSION_NOT_FOUND()
  * throw appErrors.errors.QUOTA_EXCEEDED({
  *   details: { retryAfterSeconds: 30 },
  *   hint: 'Wait for the current window to expire',
@@ -23,12 +25,20 @@ import { z } from 'zod';
 import { AppError } from './errors';
 /** Supported structured-details schemas: a required or optional Zod object. */
 export type ErrorDetailsSchema = z.ZodObject | z.ZodOptional<z.ZodObject>;
-/** One domain error definition. Omitting `details` forbids structured details. */
+/**
+ * One domain error definition. Omitting `details` forbids structured details.
+ *
+ * `message` is the code's default human-readable text: without it `AppError`
+ * falls back to the code itself, and every `throw` site has to repeat the
+ * sentence. A per-call `message` still wins.
+ */
 export type ErrorDefinition = {
     readonly status: number;
+    readonly message?: string;
     readonly details?: never;
 } | {
     readonly status: number;
+    readonly message?: string;
     readonly details: ErrorDetailsSchema;
 };
 export type ErrorDefinitions = Record<string, ErrorDefinition>;
@@ -70,8 +80,19 @@ export type ErrorFactory<TCode extends string, TDefinition extends ErrorDefiniti
 export type ErrorFactories<TDefinitions extends ErrorDefinitions> = {
     readonly [TCode in keyof TDefinitions]: ErrorFactory<TCode & string, TDefinitions[TCode]>;
 };
+/**
+ * `const` inference keeps only the keys a definition actually wrote, so a
+ * registry that mixes codes with and without `message` has no common `message`
+ * key — and `definitions[code].message`, the whole point of declaring it, would
+ * not type-check. Normalising the optional key restores that lookup.
+ *
+ * A declared literal stays literal (`'gone' & string` is `'gone'`); this only
+ * adds the key where a definition omitted it.
+ */
 export type FrozenErrorDefinitions<TDefinitions extends ErrorDefinitions> = {
-    readonly [TCode in keyof TDefinitions]: Readonly<TDefinitions[TCode]>;
+    readonly [TCode in keyof TDefinitions]: Readonly<TDefinitions[TCode]> & {
+        readonly message?: string;
+    };
 };
 /** The immutable handle returned by `defineErrors`. */
 export interface DefinedErrors<TDefinitions extends ErrorDefinitions> {

package/dist/contract/errors-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors-factory.d.ts","sourceRoot":"","sources":["../../src/contract/errors-factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEpC,+EAA+E;AAC/E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAE1E,kFAAkF;AAClF,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAA;CAAE,GACrD;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAEtE,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAE/D,6DAA6D;AAC7D,MAAM,MAAM,kBAAkB,CAAC,WAAW,SAAS,eAAe,IAAI,WAAW,SAAS;IACxF,OAAO,EAAE,MAAM,OAAO,SAAS,kBAAkB,CAAC;CACnD,GACG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,GAC/D,SAAS,CAAC;AAEd,mFAAmF;AACnF,MAAM,MAAM,eAAe,CACzB,KAAK,SAAS,MAAM,EACpB,WAAW,SAAS,eAAe,IACjC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC,GAClD,CAAC,WAAW,SAAS;IAAE,OAAO,EAAE,MAAM,OAAO,SAAS,kBAAkB,CAAA;CAAE,GACtE,SAAS,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GACjC,MAAM,GACN;IAAE,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAA;CAAE,GACvD,MAAM,CAAC,CAAC;AAEd;;;GAGG;AACH,MAAM,MAAM,qBAAqB,CAAC,WAAW,SAAS,eAAe,IAAI,WAAW,SAAS;IAC3F,OAAO,EAAE,MAAM,OAAO,SAAS,kBAAkB,CAAC;CACnD,GACG,SAAS,SAAS,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAChC;IACE,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE,MAAM,CAAC;KACf;CACF,GACD;IACE,OAAO,EAAE;QACP,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;KACf;CACF,GACH,CAAC,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,KAAK,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAErE,4DAA4D;AAC5D,MAAM,MAAM,YAAY,CAAC,KAAK,SAAS,MAAM,EAAE,WAAW,SAAS,eAAe,IAAI,CACpF,GAAG,IAAI,EAAE,qBAAqB,CAAC,WAAW,CAAC,KACxC,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;AAEzC,MAAM,MAAM,cAAc,CAAC,YAAY,SAAS,gBAAgB,IAAI;IAClE,QAAQ,EAAE,KAAK,IAAI,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,GAAG,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;CAC1F,CAAC;AAEF,MAAM,MAAM,sBAAsB,CAAC,YAAY,SAAS,gBAAgB,IAAI;IAC1E,QAAQ,EAAE,KAAK,IAAI,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;CACtE,CAAC;AAEF,uDAAuD;AACvD,MAAM,WAAW,aAAa,CAAC,YAAY,SAAS,gBAAgB;IAClE,mFAAmF;IACnF,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,YAAY,CAAC,CAAC;IAC9C,oEAAoE;IACpE,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,KAAK,IAAI,MAAM,YAAY,GAAG,KAAK,GAAG,MAAM;KAAE,CAAC;IAC3E,oFAAoF;IACpF,QAAQ,CAAC,WAAW,EAAE,sBAAsB,CAAC,YAAY,CAAC,CAAC;IAC3D,uEAAuE;IACvE,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,YAAY,EAAE,MAAM,CAAC,CAAC;CAChF;AAgCD,+DAA+D;AAC/D,wBAAgB,YAAY,CAAC,KAAK,CAAC,YAAY,SAAS,gBAAgB,EACtE,MAAM,EAAE,YAAY,GACnB,aAAa,CAAC,YAAY,CAAC,CA0C7B"}
+{"version":3,"file":"errors-factory.d.ts","sourceRoot":"","sources":["../../src/contract/errors-factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEpC,+EAA+E;AAC/E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAE1E;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAA;CAAE,GAChF;IACE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;CACtC,CAAC;AAEN,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAE/D,6DAA6D;AAC7D,MAAM,MAAM,kBAAkB,CAAC,WAAW,SAAS,eAAe,IAAI,WAAW,SAAS;IACxF,OAAO,EAAE,MAAM,OAAO,SAAS,kBAAkB,CAAC;CACnD,GACG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,GAC/D,SAAS,CAAC;AAEd,mFAAmF;AACnF,MAAM,MAAM,eAAe,CACzB,KAAK,SAAS,MAAM,EACpB,WAAW,SAAS,eAAe,IACjC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC,GAClD,CAAC,WAAW,SAAS;IAAE,OAAO,EAAE,MAAM,OAAO,SAAS,kBAAkB,CAAA;CAAE,GACtE,SAAS,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GACjC,MAAM,GACN;IAAE,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAA;CAAE,GACvD,MAAM,CAAC,CAAC;AAEd;;;GAGG;AACH,MAAM,MAAM,qBAAqB,CAAC,WAAW,SAAS,eAAe,IAAI,WAAW,SAAS;IAC3F,OAAO,EAAE,MAAM,OAAO,SAAS,kBAAkB,CAAC;CACnD,GACG,SAAS,SAAS,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAChC;IACE,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE,MAAM,CAAC;KACf;CACF,GACD;IACE,OAAO,EAAE;QACP,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;KACf;CACF,GACH,CAAC,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,KAAK,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAErE,4DAA4D;AAC5D,MAAM,MAAM,YAAY,CAAC,KAAK,SAAS,MAAM,EAAE,WAAW,SAAS,eAAe,IAAI,CACpF,GAAG,IAAI,EAAE,qBAAqB,CAAC,WAAW,CAAC,KACxC,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;AAEzC,MAAM,MAAM,cAAc,CAAC,YAAY,SAAS,gBAAgB,IAAI;IAClE,QAAQ,EAAE,KAAK,IAAI,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,GAAG,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;CAC1F,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,MAAM,sBAAsB,CAAC,YAAY,SAAS,gBAAgB,IAAI;IAC1E,QAAQ,EAAE,KAAK,IAAI,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,GAAG;QACtE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B;CACF,CAAC;AAEF,uDAAuD;AACvD,MAAM,WAAW,aAAa,CAAC,YAAY,SAAS,gBAAgB;IAClE,mFAAmF;IACnF,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,YAAY,CAAC,CAAC;IAC9C,oEAAoE;IACpE,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,KAAK,IAAI,MAAM,YAAY,GAAG,KAAK,GAAG,MAAM;KAAE,CAAC;IAC3E,oFAAoF;IACpF,QAAQ,CAAC,WAAW,EAAE,sBAAsB,CAAC,YAAY,CAAC,CAAC;IAC3D,uEAAuE;IACvE,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,YAAY,EAAE,MAAM,CAAC,CAAC;CAChF;AAsCD,+DAA+D;AAC/D,wBAAgB,YAAY,CAAC,KAAK,CAAC,YAAY,SAAS,gBAAgB,EACtE,MAAM,EAAE,YAAY,GACnB,aAAa,CAAC,YAAY,CAAC,CA6C7B"}

package/dist/contract/factory.d.ts

@@ -39,14 +39,27 @@ export interface ScopedContractDef<T extends Record<string, EndpointDef> = Recor
         scope: TScope;
     };
 }
+/**
+ * An endpoint authored through the factory: the per-endpoint `scope` override is
+ * held to the same union as the contract's.
+ *
+ * Constraining the type parameter (rather than intersecting the argument) keeps
+ * `T` itself unchanged, so `ExplicitToolExposureEndpoints<T>` and the boundary
+ * mapping below still see the endpoints the caller wrote. The check is
+ * structural, so it also covers `HeadEndpointDef`, which declares its own
+ * `scope` outside `EndpointDefBase`.
+ */
+export type FactoryScopedEndpoint<TScope extends string> = EndpointDef & {
+    scope?: TScope;
+};
 /** A `defineContract` whose `scope` is required and typed to `TScope`. */
-export type ScopedDefineContract<TScope extends string> = <const TContractScope extends TScope, const T extends Record<string, EndpointDef>>(meta: {
+export type ScopedDefineContract<TScope extends string> = <const TContractScope extends TScope, const T extends Record<string, FactoryScopedEndpoint<TScope>>>(meta: {
     prefix: string;
     scope: TContractScope;
     meta?: Record<string, unknown>;
 }, endpoints: T) => ScopedContractDef<T, TContractScope>;
 /** Scoped contract authoring where every omitted exposure becomes HTTP-only. */
-export type ExplicitScopedDefineContract<TScope extends string> = <const TContractScope extends TScope, const T extends Record<string, EndpointDef>>(meta: {
+export type ExplicitScopedDefineContract<TScope extends string> = <const TContractScope extends TScope, const T extends Record<string, FactoryScopedEndpoint<TScope>>>(meta: {
     prefix: string;
     scope: TContractScope;
     meta?: Record<string, unknown>;

package/dist/contract/factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../src/contract/factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAGlF,MAAM,MAAM,2BAA2B,GAAG,UAAU,CAAC;AAErD,MAAM,WAAW,qBAAqB;IACpC,iFAAiF;IACjF,YAAY,EAAE,2BAA2B,CAAC;CAC3C;AAED,MAAM,MAAM,6BAA6B,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI;KAChF,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QAAE,MAAM,EAAE,SAAS,SAAS,EAAE,CAAA;KAAE,GACzD,CAAC,CAAC,CAAC,CAAC,GACJ,CAAC,CAAC,CAAC,CAAC,GAAG;QAAE,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;KAAE;CACzC,CAAC;AAEF,oFAAoF;AACpF,MAAM,WAAW,iBAAiB,CAChC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EACnE,MAAM,SAAS,MAAM,GAAG,MAAM,CAC9B,SAAQ,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC;IAC9B,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAChD;AAED,0EAA0E;AAC1E,MAAM,MAAM,oBAAoB,CAAC,MAAM,SAAS,MAAM,IAAI,CACxD,KAAK,CAAC,cAAc,SAAS,MAAM,EACnC,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EAE3C,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,cAAc,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,EAC/E,SAAS,EAAE,CAAC,KACT,iBAAiB,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;AAE1C,gFAAgF;AAChF,MAAM,MAAM,4BAA4B,CAAC,MAAM,SAAS,MAAM,IAAI,CAChE,KAAK,CAAC,cAAc,SAAS,MAAM,EACnC,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EAE3C,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,cAAc,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,EAC/E,SAAS,EAAE,CAAC,KACT,iBAAiB,CAAC,6BAA6B,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;AAEzE;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,SAAS,MAAM,KAAK;IAC9D,cAAc,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAC;CAC9C,CAAC;AACF,wBAAgB,qBAAqB,CAAC,MAAM,SAAS,MAAM,EACzD,MAAM,EAAE,qBAAqB,GAC5B;IACD,cAAc,EAAE,4BAA4B,CAAC,MAAM,CAAC,CAAC;CACtD,CAAC"}
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../src/contract/factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAGlF,MAAM,MAAM,2BAA2B,GAAG,UAAU,CAAC;AAErD,MAAM,WAAW,qBAAqB;IACpC,iFAAiF;IACjF,YAAY,EAAE,2BAA2B,CAAC;CAC3C;AAED,MAAM,MAAM,6BAA6B,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI;KAChF,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QAAE,MAAM,EAAE,SAAS,SAAS,EAAE,CAAA;KAAE,GACzD,CAAC,CAAC,CAAC,CAAC,GACJ,CAAC,CAAC,CAAC,CAAC,GAAG;QAAE,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;KAAE;CACzC,CAAC;AAEF,oFAAoF;AACpF,MAAM,WAAW,iBAAiB,CAChC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EACnE,MAAM,SAAS,MAAM,GAAG,MAAM,CAC9B,SAAQ,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC;IAC9B,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAChD;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,qBAAqB,CAAC,MAAM,SAAS,MAAM,IAAI,WAAW,GAAG;IACvE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,0EAA0E;AAC1E,MAAM,MAAM,oBAAoB,CAAC,MAAM,SAAS,MAAM,IAAI,CACxD,KAAK,CAAC,cAAc,SAAS,MAAM,EACnC,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC,EAE7D,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,cAAc,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,EAC/E,SAAS,EAAE,CAAC,KACT,iBAAiB,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;AAE1C,gFAAgF;AAChF,MAAM,MAAM,4BAA4B,CAAC,MAAM,SAAS,MAAM,IAAI,CAChE,KAAK,CAAC,cAAc,SAAS,MAAM,EACnC,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC,EAE7D,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,cAAc,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,EAC/E,SAAS,EAAE,CAAC,KACT,iBAAiB,CAAC,6BAA6B,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;AAEzE;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,SAAS,MAAM,KAAK;IAC9D,cAAc,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAC;CAC9C,CAAC;AACF,wBAAgB,qBAAqB,CAAC,MAAM,SAAS,MAAM,EACzD,MAAM,EAAE,qBAAqB,GAC5B;IACD,cAAc,EAAE,4BAA4B,CAAC,MAAM,CAAC,CAAC;CACtD,CAAC"}

package/dist/contract/index.d.ts

@@ -1,6 +1,6 @@
 export { ALL_TRANSPORTS, type BodyHttpSuccessStatus, type ClientRequestOptions, type ContractDef, type ContractMeta, defineContract, type EndpointDef, type EndpointFn, type EndpointMcpInputRequired, type EndpointMcpPolicy, type EndpointResponseMeta, type EndpointToolAnnotations, type EndpointUiMeta, type FileDescriptor, type HandlerContext, type HeadEndpointDef, type HttpMethod, type HttpSuccessStatus, type MultipartBufferedFiles, type MultipartDescriptor, type MultipartFile, type MultipartFilePolicy, type ResponseMetadata, type RuntimeContext, type ScopedEndpointFn, type ScopedHttpClient, type ScopedUrlBuilder, type ScopedUrlFn, type Transport, type TransportSource, type TypedClient, type TypedHttpClient, type TypedUrlBuilder, } from './define';
 export { AppError, appError, badRequest, conflict, type ErrorEnvelope, forbidden, isStitchErrorCode, notFound, rateLimited, STITCH_ERROR_STATUS, type StitchErrorCode, unauthorized, } from './errors';
 export { type DefinedAppError, type DefinedErrors, defineErrors, type ErrorDefinition, type ErrorDefinitions, type ErrorDetailsOutput, type ErrorDetailsSchema, type ErrorFactories, type ErrorFactory, type ErrorFactoryArguments, type FrozenErrorDefinitions, } from './errors-factory';
-export { type ContractFactoryConfig, type ContractFactoryToolExposure, createContractFactory, type ExplicitScopedDefineContract, type ExplicitToolExposureEndpoints, type ScopedContractDef, type ScopedDefineContract, } from './factory';
+export { type ContractFactoryConfig, type ContractFactoryToolExposure, createContractFactory, type ExplicitScopedDefineContract, type ExplicitToolExposureEndpoints, type FactoryScopedEndpoint, type ScopedContractDef, type ScopedDefineContract, } from './factory';
 export { decodeCursor, encodeCursor, type Paginated, paginatedSchema, } from './pagination';
 //# sourceMappingURL=index.d.ts.map

package/dist/contract/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/contract/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,cAAc,EACd,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,wBAAwB,EAC7B,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,KAAK,aAAa,EAClB,SAAS,EACT,iBAAiB,EACjB,QAAQ,EACR,WAAW,EACX,mBAAmB,EACnB,KAAK,eAAe,EACpB,YAAY,GACb,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,YAAY,EACZ,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,GAC5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,qBAAqB,EACrB,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,GAC1B,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,KAAK,SAAS,EACd,eAAe,GAChB,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/contract/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,cAAc,EACd,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,wBAAwB,EAC7B,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,KAAK,aAAa,EAClB,SAAS,EACT,iBAAiB,EACjB,QAAQ,EACR,WAAW,EACX,mBAAmB,EACnB,KAAK,eAAe,EACpB,YAAY,GACb,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,YAAY,EACZ,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,GAC5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,qBAAqB,EACrB,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,GAC1B,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,KAAK,SAAS,EACd,eAAe,GAChB,MAAM,cAAc,CAAC"}

package/dist/contract/index.js

@@ -16,7 +16,7 @@ import {
   paginatedSchema,
   rateLimited,
   unauthorized
-} from "../index-45dz4m51.js";
+} from "../index-trz4ate5.js";
 import"../index-tss6bk5c.js";
 export {
   unauthorized,

package/dist/{index-z992nfbx.js → index-8mt47qk7.js}

@@ -2,7 +2,7 @@ import {
   assertCorsConfig,
   corsHeaders,
   corsPreflightResponse
-} from "./index-r1qp4rve.js";
+} from "./index-ynts85ew.js";
 import {
   AppError,
   badRequest,
@@ -11,7 +11,6 @@ import {
   getClientInfo,
   getRequestContext,
   isUnsafeKey,
-  mergeMeta,
   normalizeError,
   parseQueryParams,
   recordedErrorMessage,
@@ -23,15 +22,13 @@ import {
   setRequestError,
   validateDeclaredOutput,
   zodIssues
-} from "./index-jewp9r0a.js";
+} from "./index-8qghvg18.js";
 import {
   __require,
-  callRuntimeHandler,
   isRecord,
   parseTrailingWildcard,
-  resolveTraceContext,
-  typedEntries
-} from "./index-h05ygjqx.js";
+  resolveTraceContext
+} from "./index-bmnhqtya.js";
 
 // src/server/multipart.ts
 var DEFAULT_MAX_REQUEST_BYTES = 25 * 1024 * 1024;
@@ -1607,131 +1604,138 @@ function createServerLifecycle(getAdapter) {
   };
 }
 
-// src/server/implement.ts
-function isStreamingImplementation(value) {
-  return typeof value === "object" && value !== null && "kind" in value && value.kind === "stitchkit.multipart.stream";
-}
-function defineMultipartStream(endpoint, config) {
-  const receivers = {};
-  for (const [key, receiver] of typedEntries(config.files)) {
-    receivers[String(key)] = receiver;
-  }
-  const declared = Object.keys(endpoint.multipart.files);
-  const configured = Object.keys(receivers);
-  if (declared.length !== configured.length || declared.some((field) => !Object.hasOwn(receivers, field))) {
-    throw new Error("Streaming multipart receivers must exactly match declared file fields");
+// src/server/process-signals.ts
+var DEFAULT_SIGNALS = ["SIGINT", "SIGTERM"];
+var defaultSignalSource = {
+  on: (signal, handler) => {
+    process.on(signal, handler);
+  },
+  off: (signal, handler) => {
+    process.off(signal, handler);
+  },
+  raiseDefault: (signal) => {
+    if (process.listenerCount(signal) > 0)
+      return false;
+    process.kill(process.pid, signal);
+    return true;
   }
-  return {
-    kind: "stitchkit.multipart.stream",
-    receivers,
-    execute(ctx, files) {
-      return callRuntimeHandler(config.handler, { ...ctx, files });
-    }
-  };
+};
+var bound = new WeakSet;
+function reportError(phase, error, onError) {
+  try {
+    onError?.(phase, error);
+  } catch {}
 }
-var HTTP_ONLY = Object.freeze(["HTTP"]);
-function bindContract(contract, handlers) {
-  const methods = {};
-  const groupScope = contract.meta.scope ?? "public";
-  for (const [key, endpoint] of typedEntries(contract.endpoints)) {
-    const typedHandler = handlers[String(key)];
-    const isStreaming = endpoint.multipart?.delivery === "stream";
-    if (!isStreaming && typeof typedHandler !== "function") {
-      throw new Error(`[stitchkit] implement: missing handler for "${contract.meta.prefix}.${String(key)}"`);
+function guard(run, phase, onError) {
+  try {
+    run();
+  } catch (error) {
+    reportError(phase, error, onError);
+  }
+}
+function bindProcessSignals(handle, options = {}) {
+  if (bound.has(handle)) {
+    throw new Error("[stitchkit] bindProcessSignals: this server is already bound; close the first binding before creating another");
+  }
+  bound.add(handle);
+  const signals = [...new Set(options.signals ?? DEFAULT_SIGNALS)];
+  const source = options.signalSource ?? defaultSignalSource;
+  const budgets = ShutdownOptionsSchema.omit({ signal: true }).parse(options.shutdown ?? {});
+  const controller = new AbortController;
+  const handlers = [];
+  let started = false;
+  let sameTurnAsStart = false;
+  let settled = false;
+  let closed = false;
+  let resolveChain = () => {
+    return;
+  };
+  let rejectChain = () => {
+    return;
+  };
+  const promise = new Promise((resolve, reject) => {
+    resolveChain = resolve;
+    rejectChain = reject;
+  });
+  promise.catch(() => {
+    return;
+  });
+  const removeListeners = () => {
+    if (closed)
+      return;
+    closed = true;
+    for (const [signal, handler] of handlers)
+      source.off(signal, handler);
+    if (!started)
+      bound.delete(handle);
+  };
+  const close = () => {
+    const hadStarted = started;
+    removeListeners();
+    if (!hadStarted)
+      resolveChain(undefined);
+  };
+  const run = async (signal) => {
+    try {
+      await options.onShutdown?.(signal);
+    } catch (error) {
+      reportError("prepare", error, options.onError);
     }
-    if (isStreaming && !isStreamingImplementation(typedHandler)) {
-      throw new Error(`[stitchkit] implement: streaming multipart endpoint "${contract.meta.prefix}.${String(key)}" must use defineMultipartStream()`);
+    let result;
+    try {
+      result = await handle.shutdown({ ...budgets, signal: controller.signal });
+    } catch (error) {
+      settled = true;
+      rejectChain(error);
+      reportError("shutdown", error, options.onError);
+      removeListeners();
+      return;
+    }
+    settled = true;
+    resolveChain(result);
+    try {
+      await options.onComplete?.(result);
+    } catch (error) {
+      reportError("complete", error, options.onError);
+    } finally {
+      removeListeners();
     }
-    const streamingHandler = isStreamingImplementation(typedHandler) ? typedHandler : undefined;
-    const regularHandler = typeof typedHandler === "function" ? typedHandler : undefined;
-    methods[String(key)] = {
-      method: endpoint.method,
-      path: endpoint.path,
-      desc: endpoint.desc,
-      serviceName: contract.meta.prefix,
-      key: String(key),
-      toolName: "toolName" in endpoint ? endpoint.toolName : undefined,
-      expose: endpoint.rawResponse || endpoint.rawBody || endpoint.responseMeta ? HTTP_ONLY : endpoint.expose,
-      scope: endpoint.scope ?? groupScope,
-      paramsSchema: endpoint.params,
-      inputSchema: endpoint.input,
-      outputSchema: endpoint.output,
-      multipart: endpoint.multipart,
-      multipartReceivers: streamingHandler?.receivers,
-      maxJsonBodyBytes: endpoint.maxJsonBodyBytes,
-      idempotent: endpoint.idempotent,
-      ui: "ui" in endpoint ? endpoint.ui : undefined,
-      annotations: "annotations" in endpoint ? endpoint.annotations : undefined,
-      mcp: "mcp" in endpoint ? endpoint.mcp : undefined,
-      meta: mergeMeta(contract.meta.meta, endpoint.meta),
-      rawResponse: endpoint.rawResponse,
-      rawBody: endpoint.rawBody,
-      responseMeta: endpoint.responseMeta,
-      contentType: "contentType" in endpoint ? endpoint.contentType : undefined,
-      handler: streamingHandler ? (ctx) => streamingHandler.execute(ctx, ctx.files ?? {}) : (ctx) => {
-        if (!regularHandler) {
-          throw new Error(`[stitchkit] implement: missing handler for "${contract.meta.prefix}.${String(key)}"`);
-        }
-        return callRuntimeHandler(regularHandler, ctx);
-      }
-    };
-  }
-  return {
-    name: contract.meta.prefix,
-    prefix: contract.meta.prefix,
-    scope: groupScope,
-    methods
   };
-}
-function implement(contract, handlers) {
-  return bindContract(contract, handlers);
-}
-function createImplement() {
-  return (contract, handlers) => implement(contract, handlers);
-}
-function isImplementationContract(value) {
-  return isRecord(value) && isRecord(value.meta) && typeof value.meta.prefix === "string" && isRecord(value.endpoints);
-}
-function bindRegistry(contracts, handlers) {
-  const contractKeys = Object.keys(contracts);
-  const handlerKeys = Object.keys(handlers);
-  const missing = contractKeys.filter((key) => !Object.hasOwn(handlers, key));
-  const extra = handlerKeys.filter((key) => !Object.hasOwn(contracts, key));
-  if (missing.length > 0 || extra.length > 0) {
-    throw new Error(`[stitchkit] implementRegistry: registry mismatch (missing: ${missing.join(", ") || "none"}; extra: ${extra.join(", ") || "none"})`);
-  }
-  const prefixes = new Map;
-  const services = [];
-  for (const [key, candidate] of Object.entries(contracts)) {
-    if (!isImplementationContract(candidate)) {
-      throw new TypeError(`[stitchkit] implementRegistry: registry entry "${key}" must be one contract; composed arrays and namespaces are not supported`);
+  const onSignal = (signal) => {
+    if (!started) {
+      started = true;
+      sameTurnAsStart = true;
+      queueMicrotask(() => {
+        sameTurnAsStart = false;
+      });
+      run(signal).catch((error) => reportError("shutdown", error, options.onError));
+      return;
     }
-    const contract = candidate;
-    const previousKey = prefixes.get(contract.meta.prefix);
-    if (previousKey !== undefined) {
-      throw new Error(`[stitchkit] implementRegistry: duplicate contract prefix "${contract.meta.prefix}" at "${previousKey}" and "${key}"`);
+    if (sameTurnAsStart)
+      return;
+    if (!settled && !controller.signal.aborted) {
+      controller.abort();
+      guard(() => options.onRepeatedSignal?.(signal, "force"), "shutdown", options.onError);
+      return;
     }
-    prefixes.set(contract.meta.prefix, key);
-    const entryHandlers = handlers[key];
-    if (!isRecord(entryHandlers)) {
-      throw new TypeError(`[stitchkit] implementRegistry: handlers for "${key}" must be an object`);
+    removeListeners();
+    guard(() => options.onRepeatedSignal?.(signal, "escalate"), "shutdown", options.onError);
+    let restored = false;
+    try {
+      restored = source.raiseDefault(signal);
+    } catch (error) {
+      reportError("shutdown", error, options.onError);
     }
-    const endpointKeys = Object.keys(contract.endpoints);
-    const handlerEntryKeys = Object.keys(entryHandlers);
-    const missingEndpoints = endpointKeys.filter((endpointKey) => !Object.hasOwn(entryHandlers, endpointKey));
-    const extraEndpoints = handlerEntryKeys.filter((endpointKey) => !Object.hasOwn(contract.endpoints, endpointKey));
-    if (missingEndpoints.length > 0 || extraEndpoints.length > 0) {
-      throw new Error(`[stitchkit] implementRegistry: handlers for "${key}" mismatch (missing: ${missingEndpoints.join(", ") || "none"}; extra: ${extraEndpoints.join(", ") || "none"})`);
+    if (!restored) {
+      guard(() => options.onEscalationBlocked?.(signal), "shutdown", options.onError);
     }
-    services.push(bindContract(contract, entryHandlers));
+  };
+  for (const signal of signals) {
+    const handler = () => onSignal(signal);
+    handlers.push([signal, handler]);
+    source.on(signal, handler);
   }
-  return services;
-}
-function implementRegistry(contracts, handlers) {
-  return bindRegistry(contracts, handlers);
-}
-function createImplementRegistry() {
-  return (contracts, handlers) => bindRegistry(contracts, handlers);
+  return { promise, close };
 }
 
 // src/realtime/rejection.ts
@@ -2148,4 +2152,4 @@ function socketIoLane(websocket) {
   });
 }
 
-export { parseMultipart, createHandler, ShutdownStateSchema, ShutdownOptionsSchema, ShutdownStatusSchema, ShutdownResultSchema, createServerLifecycle, defineMultipartStream, implement, createImplement, implementRegistry, createImplementRegistry, bindRealtimeServer, webSocketLane, composeWebSocketHandlers, createSocketIOServer, socketIoLane };
+export { parseMultipart, createHandler, ShutdownStateSchema, ShutdownOptionsSchema, ShutdownStatusSchema, ShutdownResultSchema, createServerLifecycle, bindProcessSignals, bindRealtimeServer, webSocketLane, composeWebSocketHandlers, createSocketIOServer, socketIoLane };

package/dist/{index-jewp9r0a.js → index-8qghvg18.js}

@@ -1,7 +1,7 @@
 import {
   isRecord,
   resolveTraceContext
-} from "./index-h05ygjqx.js";
+} from "./index-bmnhqtya.js";
 
 // src/contract/errors.ts
 var APP_ERROR_BRAND = Symbol.for("stitchkit.AppError");

package/dist/{index-h05ygjqx.js → index-bmnhqtya.js}

@@ -136,6 +136,9 @@ function callRuntimeHandler(handler, context) {
   }
   return Reflect.apply(handler, undefined, [context]);
 }
+function transportResult(value) {
+  return value;
+}
 function mapObject(source, mapper) {
   const result = {};
   for (const [key, value] of typedEntries(source)) {
@@ -146,4 +149,4 @@ function mapObject(source, mapper) {
   return result;
 }
 
-export { __require, parseTrailingWildcard, typedEntries, isRecord, callRuntimeHandler, mapObject, createTraceContext, parseTraceparent, formatTraceparent, resolveTraceContext, childSpan, resolvePropagationContext };
+export { __require, parseTrailingWildcard, typedEntries, isRecord, callRuntimeHandler, transportResult, mapObject, createTraceContext, parseTraceparent, formatTraceparent, resolveTraceContext, childSpan, resolvePropagationContext };

package/dist/{index-p9d4cxt5.js → index-gff2mxzk.js}

@@ -6,7 +6,7 @@ import {
   mapObject,
   parseTrailingWildcard,
   typedEntries
-} from "./index-h05ygjqx.js";
+} from "./index-bmnhqtya.js";
 
 // src/browser/cancellation.ts
 class RequestCancellationError extends Error {

package/dist/{index-0hj37z43.js → index-h55e1wyq.js}

@@ -14,10 +14,10 @@ import {
   runWithRequestContext,
   safeJsonParse,
   validateDeclaredOutput
-} from "./index-jewp9r0a.js";
+} from "./index-8qghvg18.js";
 import {
   isRecord
-} from "./index-h05ygjqx.js";
+} from "./index-bmnhqtya.js";
 
 // src/tools/coerce.ts
 import { z } from "zod";

package/dist/{index-v58mwa19.js → index-psrxjvbw.js}

@@ -1,9 +1,9 @@
 import {
   isUnsafeKey
-} from "./index-jewp9r0a.js";
+} from "./index-8qghvg18.js";
 import {
   isRecord
-} from "./index-h05ygjqx.js";
+} from "./index-bmnhqtya.js";
 
 // src/observability/sanitize.ts
 var SENSITIVE_WORDS = new Set([

package/dist/{index-45dz4m51.js → index-trz4ate5.js}

@@ -295,6 +295,9 @@ function validateDefinition(code, definition) {
   if (definition.details !== undefined && !isErrorDetailsSchema(definition.details)) {
     throw new Error(`[stitchkit] Error "${code}" details must be a Zod object or optional Zod object`);
   }
+  if (definition.message !== undefined && (typeof definition.message !== "string" || definition.message.trim() === "")) {
+    throw new Error(`[stitchkit] Error "${code}" message must be a non-empty string`);
+  }
 }
 function defineErrors(source) {
   const definitions = mapObjectTypeBoundary(source, (code, definition) => {
@@ -306,14 +309,15 @@ function defineErrors(source) {
   const errors = mapObjectTypeBoundary(definitions, (code, definition) => {
     const name = String(code);
     return (options = {}) => {
+      const message = options.message ?? definition.message;
       if (definition.details === undefined) {
         if ("details" in options) {
           throw new Error(`[stitchkit] Error "${name}" does not declare details`);
         }
-        return new AppError(name, options.message, definition.status, undefined, options.hint);
+        return new AppError(name, message, definition.status, undefined, options.hint);
       }
       const details = definition.details.parse(options.details);
-      return new AppError(name, options.message, definition.status, details, options.hint);
+      return new AppError(name, message, definition.status, details, options.hint);
     };
   });
   Object.freeze(errors);

package/dist/{index-03j2t778.js → index-tw7mhqgy.js}

@@ -5,10 +5,10 @@ import {
   isUnsafeKey,
   safeJsonParse,
   unauthorized
-} from "./index-jewp9r0a.js";
+} from "./index-8qghvg18.js";
 import {
   isRecord
-} from "./index-h05ygjqx.js";
+} from "./index-bmnhqtya.js";
 
 // src/server/middleware/cookies.ts
 function parseCookies(header) {
@@ -150,6 +150,9 @@ function extractToken(req, cookieName) {
   }
   return null;
 }
+function isThenable(value) {
+  return "then" in value && typeof value.then === "function";
+}
 function createAuthHook(config) {
   const onAnonymous = config.onAnonymous ?? (() => unauthorized());
   const onForbidden = config.onForbidden ?? (() => forbidden());
@@ -159,10 +162,18 @@ function createAuthHook(config) {
     const scope = endpoint.scope ?? config.defaultScope;
     if (!scope)
       return;
-    const rule = Object.hasOwn(config.rules, scope) ? config.rules[scope] : undefined;
-    if (!rule) {
+    const entry = Object.hasOwn(config.rules, scope) ? config.rules[scope] : undefined;
+    if (!entry) {
       throw new Error(`[stitchkit] auth: no rule for scope "${scope}"`);
     }
+    const rule = typeof entry === "object" ? entry.rule : entry;
+    if (typeof entry === "object" && entry.inject && identity !== null) {
+      const fields = entry.inject(identity, ctx);
+      if (isThenable(fields)) {
+        throw new Error(`[stitchkit] auth: the inject of scope "${scope}" must be synchronous — an async inject merges a Promise, not fields`);
+      }
+      Object.assign(ctx, fields);
+    }
     if (rule === "public")
       return;
     if (!identity) {