stitchkit 0.68.3 → 0.68.5

package/dist/server/index.js

@@ -13,7 +13,7 @@ import {
   sseRoute,
   streamingRoute,
   webSocketLane
-} from "../index-3vq6we8m.js";
+} from "../index-6tqys26z.js";
 import {
   composeAuthHooks,
   createAuthHook,
@@ -26,7 +26,7 @@ import {
   signJwt,
   verifyJwt,
   verifyPkce
-} from "../index-wqyrvhzz.js";
+} from "../index-3ydx9j01.js";
 import {
   DEFAULT_CORS_ALLOW_HEADERS,
   DEFAULT_CORS_EXPOSE_HEADERS,
@@ -40,7 +40,7 @@ import {
   defineMultipartStream,
   implement,
   implementRegistry
-} from "../index-pr0qsmjy.js";
+} from "../index-z575awm9.js";
 import {
   extractIp,
   generateTraceId,
@@ -48,7 +48,7 @@ import {
   getTraceId,
   resolveSocketIp,
   resolveTraceId
-} from "../index-69m2278y.js";
+} from "../index-51a19y3v.js";
 import {
   isWithinDir,
   realPathWithinDir
@@ -69,7 +69,7 @@ import {
   inputIsQuery,
   parseSSE,
   streamSSE
-} from "../index-v5bayx1z.js";
+} from "../index-r5s4wqb5.js";
 import {
   DEFAULT_CONTRACT_STREAM_FRAME_BYTES,
   errorCode,
@@ -78,7 +78,7 @@ import {
   normalizeError,
   parseTrailingWildcard,
   zodIssues
-} from "../index-9ky9hhg3.js";
+} from "../index-bmmtz6r9.js";
 import {
   isRecord
 } from "../index-smpbdg6k.js";
@@ -799,7 +799,10 @@ function generateOpenApiDocument(config) {
               schema: { type: "string" },
               "x-stitchkit-item-schema": safeJson(method.stream.item, "output"),
               "x-stitchkit-max-frame-bytes": method.stream.maxFrameBytes ?? DEFAULT_CONTRACT_STREAM_FRAME_BYTES,
-              "x-stitchkit-terminal-required": Boolean(method.stream.terminal)
+              "x-stitchkit-terminal-required": Boolean(method.stream.terminal),
+              "x-stitchkit-stream-framing": method.stream.framing ?? "envelope",
+              "x-stitchkit-stream-completion": method.stream.completion ?? "stream-end",
+              "x-stitchkit-final-line": method.stream.finalLine ?? "allow"
             }
           }
         };

package/dist/server/openapi.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openapi.d.ts","sourceRoot":"","sources":["../../src/server/openapi.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAOH,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE/D,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,WAAW,CAAC;IAClB,kDAAkD;IAClD,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC;IACxB,iFAAiF;IACjF,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,UAAU,EAAE,CAAA;KAAE,CAAC,CAAC;IAChE,oCAAoC;IACpC,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAC1B;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC;CAC1D;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAChD;AA6DD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,aAAa,GAAG,eAAe,CA8L9E;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,GAAG,QAAQ,CAM9E"}
+{"version":3,"file":"openapi.d.ts","sourceRoot":"","sources":["../../src/server/openapi.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAOH,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE/D,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,WAAW,CAAC;IAClB,kDAAkD;IAClD,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC;IACxB,iFAAiF;IACjF,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,UAAU,EAAE,CAAA;KAAE,CAAC,CAAC;IAChE,oCAAoC;IACpC,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAC1B;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC;CAC1D;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAChD;AA6DD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,aAAa,GAAG,eAAe,CAiM9E;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,GAAG,QAAQ,CAM9E"}

package/dist/testing/agent-store-conformance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-store-conformance.d.ts","sourceRoot":"","sources":["../../src/testing/agent-store-conformance.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhE;;;;;;;;;GASG;AACH,MAAM,WAAW,4BAA4B;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,2BAA2B;IAC1C;;;;OAIG;IACH,WAAW,CACT,OAAO,EAAE,4BAA4B,GACpC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAClD;;;;;;;;OAQG;IACH,OAAO,CAAC,CAAC,OAAO,EAAE,4BAA4B,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvE;AAwCD,gFAAgF;AAChF,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,2BAA2B,GAClC,OAAO,CAAC,IAAI,CAAC,CA2Bf"}
+{"version":3,"file":"agent-store-conformance.d.ts","sourceRoot":"","sources":["../../src/testing/agent-store-conformance.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhE;;;;;;;;;GASG;AACH,MAAM,WAAW,4BAA4B;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,2BAA2B;IAC1C;;;;OAIG;IACH,WAAW,CACT,OAAO,EAAE,4BAA4B,GACpC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAClD;;;;;;;;OAQG;IACH,OAAO,CAAC,CAAC,OAAO,EAAE,4BAA4B,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvE;AAwCD,gFAAgF;AAChF,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,2BAA2B,GAClC,OAAO,CAAC,IAAI,CAAC,CAiCf"}

package/dist/testing.js

@@ -25,11 +25,11 @@ import {
 import {
   createClient,
   createClients
-} from "./index-2ve29dzn.js";
-import"./index-v5bayx1z.js";
+} from "./index-n34x0q5e.js";
+import"./index-r5s4wqb5.js";
 import {
   joinRoutePath
-} from "./index-9ky9hhg3.js";
+} from "./index-bmmtz6r9.js";
 import {
   isRecord
 } from "./index-smpbdg6k.js";
@@ -145,7 +145,13 @@ function requireOutcome(actual, expected) {
 async function runAgentStoreConformance(config) {
   const run = `conformance-${crypto.randomUUID()}`;
   const context = {
-    conversationIds: [run, `${run}-recovery`, `${run}-absorb`, `${run}-causal-history`]
+    conversationIds: [
+      run,
+      `${run}-recovery`,
+      `${run}-absorb`,
+      `${run}-causal-history`,
+      `${run}-causal-active`
+    ]
   };
   const store = await config.createStore(context);
   let failure;
@@ -169,10 +175,11 @@ async function conformanceScenario(store, conversationIds) {
     conversationId,
     recoveryConversationId,
     absorbConversationId,
-    causalHistoryConversationId
+    causalHistoryConversationId,
+    causalActiveConversationId
   ] = conversationIds;
-  if (!conversationId || !recoveryConversationId || !absorbConversationId || !causalHistoryConversationId) {
-    throw new Error("Agent store conformance requires four conversation identities");
+  if (!conversationId || !recoveryConversationId || !absorbConversationId || !causalHistoryConversationId || !causalActiveConversationId) {
+    throw new Error("Agent store conformance requires five conversation identities");
   }
   const absentConversationId = `${conversationId}-absent`;
   const firstInput = userMessage(conversationId, "input-1");
@@ -554,8 +561,23 @@ async function conformanceScenario(store, conversationIds) {
     throw new Error("Abandon recovery did not atomically terminalize its assistant record");
   }
   await assertCausalHistoryOrder(store, causalHistoryConversationId);
+  await assertActiveRunCausalOrder(store, causalActiveConversationId);
   await assertAbsorptionIsAtomic(store, absorbConversationId);
 }
+async function assertActiveRunCausalOrder(store, conversationId) {
+  for (const id of ["z-causal-run", "a-causal-run"]) {
+    const input = userMessage(conversationId, `${id}-input`);
+    requireOutcome(await store.acceptInputAndAssignRun({
+      idempotencyKey: id,
+      input,
+      run: queuedRun(conversationId, input.id, id)
+    }), "applied");
+  }
+  const active = await store.listActiveRuns(conversationId);
+  if (active.map((run) => run.id).join(",") !== "z-causal-run,a-causal-run") {
+    throw new Error("listActiveRuns must preserve causal history order for timestamp ties");
+  }
+}
 async function assertCausalHistoryOrder(store, conversationId) {
   const leadInput = userMessage(conversationId, "causal-input-1");
   const leadRun = queuedRun(conversationId, leadInput.id, "causal-run-1");

package/dist/tool-invoker.js

@@ -1,13 +1,13 @@
 import {
   createToolInvoker
-} from "./index-g2j2m6vv.js";
-import"./index-7etq650s.js";
-import"./index-cz32amcb.js";
-import"./index-69m2278y.js";
+} from "./index-9t2tdk1x.js";
+import"./index-88yyydag.js";
+import"./index-04agqrs8.js";
+import"./index-51a19y3v.js";
 import"./index-vkk06pv1.js";
 import"./index-6djpbnda.js";
 import"./index-cby4ar3v.js";
-import"./index-9ky9hhg3.js";
+import"./index-bmmtz6r9.js";
 import"./index-smpbdg6k.js";
 import"./index-0w9abg87.js";
 import"./index-6k1937bx.js";

package/dist/tools.js

@@ -1,10 +1,10 @@
 import {
   redact
-} from "./index-dafax5md.js";
+} from "./index-hmfpjnh7.js";
 import {
   signJwt,
   verifyPkce
-} from "./index-wqyrvhzz.js";
+} from "./index-3ydx9j01.js";
 import {
   DEFAULT_CORS_ALLOW_HEADERS,
   DEFAULT_PROCESS_SIGNALS,
@@ -12,10 +12,10 @@ import {
   defaultSignalSource,
   guardSignalCallback,
   reportSignalError
-} from "./index-pr0qsmjy.js";
+} from "./index-z575awm9.js";
 import {
   createToolInvoker
-} from "./index-g2j2m6vv.js";
+} from "./index-9t2tdk1x.js";
 import {
   WaitTimeoutError,
   collectToolSurface,
@@ -27,24 +27,24 @@ import {
   fetchPinnedDocument,
   readCapped,
   runWaitOperation
-} from "./index-cszjsxy5.js";
+} from "./index-1bmpkhj2.js";
 import {
   collectTools,
   createToolRunner,
   formatToolError
-} from "./index-7etq650s.js";
+} from "./index-88yyydag.js";
 import {
   ToolExecutionControlError,
   coerceJsonArgs,
   executeToolMethod,
   isToolExecutionControlError,
   toolResultFromError
-} from "./index-cz32amcb.js";
+} from "./index-04agqrs8.js";
 import {
   getRequestContext,
   getTraceId,
   runWithRequestContext
-} from "./index-69m2278y.js";
+} from "./index-51a19y3v.js";
 import {
   ManagedFileError
 } from "./index-bfcpjw20.js";
@@ -66,7 +66,7 @@ import {
   defineContract,
   normalizeError,
   resolvePropagationContext
-} from "./index-9ky9hhg3.js";
+} from "./index-bmmtz6r9.js";
 import {
   isRecord
 } from "./index-smpbdg6k.js";

package/llms-full.txt

@@ -61,6 +61,7 @@ own, recorded as an ADR.
 | `stitchkit/react` | browser | stable | `createCursorQuery`, `createCacheBridge` |
 | `stitchkit/agent-runtime` | server | evolving<br>_redefined in 9 of the 13 minors since 0.56.2, most recently 0.66.0_ | optional durable conversation/run loop, history, models, prompts, fencing and events |
 | `stitchkit/agent-runtime/openrouter` | server | evolving | isolated OpenRouter language-model adapter |
+| `stitchkit/agent-runtime/browser` | browser + server | evolving | canonical agent records, events and reconnect cursor without execution or sinks |
 | `stitchkit/application` | server | evolving<br>_redefined in 3 of the 13 minors since 0.56.2, most recently 0.67.0_ | managed resource graph, readiness, admission, schedules and bounded shutdown |
 | `stitchkit/application/grammy` | server | evolving | isolated grammY polling and webhook lifecycle adapters |
 | `stitchkit/application/opentelemetry` | server | evolving | maps application snapshots onto an injected OpenTelemetry `Meter` |
@@ -1574,6 +1575,27 @@ multipart or tool exposure. They do not provide replay, cursors or durable
 subscriptions. Keep using `streamingRoute` for an application-owned protocol and
 `rawResponse` for arbitrary response bodies. → ADR 0117.
 
+For an existing schema-owned NDJSON protocol, opt into direct item frames and
+terminal-owned completion:
+
+```ts
+stream: {
+  item: Item,
+  framing: 'item',
+  completion: 'terminal',
+  terminal: z.object({ kind: z.literal('complete') }).loose(),
+  finalLine: 'require-newline',
+}
+```
+
+`item` framing is NDJSON-only and requires terminal completion. The server
+writes each validated item directly, stops the source after the terminal and
+never reads trailing producer values. Because this wire has no framework error
+envelope, any producer/lifetime failure before terminal closes the response;
+the typed client reports `STREAM_TERMINAL_MISSING`. The terminal item therefore
+proves success without weakening safe post-header failure semantics. Existing
+streams retain the envelope and explicit end frame by default. → ADR 0126.
+
 ### SSE streaming
 
 `streamSSE` returns a `Response`, so its endpoint declares
@@ -2407,6 +2429,33 @@ wire `end` frame and, when declared, at least one matching terminal item; EOF is
 converge on the request operation. See the
 [server half](./server.md#contract-first-streams). → ADR 0117.
 
+The request deadline bounds the wait for response headers. Once headers arrive,
+that timer is cleared, while the caller signal remains attached to the response
+body until it ends or is cancelled. This is the same for a Fetch-config client,
+`createHttpClient`, the Bun-only `unix` convenience and an injected portable
+Unix transport. Cancelling a quiet stream therefore releases its server source
+and transport connection instead of only settling the local iterator.
+
+An established NDJSON protocol may keep its item schema as the complete wire
+frame. This mode requires a terminal item because an unwrapped response has no
+separate safe error/end envelope:
+
+```ts
+stream: {
+  item: Progress,
+  framing: 'item',
+  completion: 'terminal',
+  terminal: z.object({ kind: z.literal('complete') }).loose(),
+  finalLine: 'require-newline',
+}
+```
+
+The matching terminal item ends the operation. Before `next()` returns that
+item, the client aborts the owned request and cancels its body reader; trailing
+frames are not read. EOF first is `STREAM_TERMINAL_MISSING`. The defaults remain
+`framing: 'envelope'`, `completion: 'stream-end'` and `finalLine: 'allow'`.
+→ ADR 0126.
+
 ## SSE
 
 For a streaming endpoint, consume the response with `parseSSE`:
@@ -2460,6 +2509,10 @@ implementations. One line is bounded by `maxLineBytes` (default 1 MiB), UTF-8 is
 decoded strictly and malformed input throws. Passing `onParseError` explicitly
 selects tolerant skip-and-report behaviour.
 
+Set `finalLine: 'require-newline'` when the final newline is part of the
+protocol's truncation proof. The default `allow` continues to accept one valid
+final JSON document without a newline.
+
 
 ==============================================================================
 # Guide: MCP & agents  (docs/guide/mcp-and-agents.md)
@@ -3697,6 +3750,21 @@ If the application already owns that loop, continue importing `mountAgent` from
 this entrypoint uses the tool executor from it, but pulls no MCP peer, so
 choosing `mountAgent` alone costs you nothing from here.
 
+UI and shared DTO code must import canonical records and delivery validation from
+`stitchkit/agent-runtime/browser`, not from the server runtime barrel:
+
+```ts
+import {
+  AgentRunSchema,
+  AgentRuntimeEventSchema,
+  advanceAgentRuntimeEventCursor,
+} from 'stitchkit/agent-runtime/browser'
+```
+
+This browser-safe entrypoint re-exports the same schemas and inferred types used
+by the runtime. It intentionally excludes model construction, execution,
+persistence, event sinks and every Node context dependency.
+
 ## Install
 
 ```sh
@@ -3721,6 +3789,7 @@ bun add @openrouter/ai-sdk-provider
 ```ts
 import { z } from 'zod'
 import {
+  AgentContextOverflowError,
   composeAgentPrompt,
   createAgentRuntime,
   createMemoryAgentRuntimeStore,
@@ -4144,12 +4213,18 @@ checkpoint/terminal CAS and tool context, so a distributed adapter can reject an
 an owner label is reused. Lease expiry and renewal remain application-owned.
 
 On startup, `runtime.recover({ resolveContext })` consumes bounded lightweight
-pages. Its safe default resumes queued runs and reports acquired or
+pages, then restores each conversation's canonical causal order before any run
+acquires. Scan identifiers and page boundaries therefore never become queue
+order. Its safe default resumes queued runs and reports acquired or
 `interrupt_requested` runs as skipped. A policy may requeue acquired work only
 with explicit replay-safe evidence, or abandon it only with stale-owner
-evidence. Each attempted run returns its own outcome/error; `pageSize`,
-`maxRuns`, and `signal` bound the pass. `runtime.resume(...)` remains available
-for one known queued record.
+evidence. Each attempted run returns its own outcome/error; a `resumed` or
+`requeued` outcome also exposes the terminal `result` promise. The outcome is
+reported only after durable acquisition, so a lost acquisition is `failed`
+rather than a successful-looking handoff. `pageSize`, `maxRuns`, and `signal`
+bound the pass. `runtime.resume(...)` remains available for one known queued
+record; its `accepted` promise likewise means that the recovered run acquired
+durable ownership, while `result` carries terminal completion.
 
 Canonical records currently write `schemaVersion: 1`. A durable adapter owns
 read-time migration of older rows: migrate to the current shape at its storage
@@ -4199,6 +4274,25 @@ is the reserved built-in policy name. `loop.prepareStep` is the controlled AI
 SDK step boundary for changing active tools, model, instructions or messages.
 It cannot replace the managed tool set or bypass its lifecycle fence.
 
+Context can grow between steps as tool results and deferred schemas enter the
+provider prompt. When application budgeting can prove that the next assembled
+step exceeds the selected model window, refuse it by type before that provider
+call:
+
+```ts
+prepareStep: (step) => {
+  if (wouldExceedSelectedModelWindow(step)) {
+    throw new AgentContextOverflowError('Prepared step exceeds the selected model window')
+  }
+  return chooseProductStepOptions(step)
+}
+```
+
+That deliberate refusal ends the run as `context_overflow` on the durable
+record, delivery terminal and operator event. Stitchkit does not inspect error
+messages: every other `prepareStep` or provider error remains
+`provider_failure`, and operator-only observability retains its original cause.
+
 Completion validity belongs to the protocol and is checked before the terminal
 CAS. Protocols that require a visible answer opt in explicitly:
 
@@ -10909,8 +11003,10 @@ The browser-and-server entrypoint. Re-exports everything from
 | `bindRealtimeClient` | function | bind contract validation and typed acknowledgements to an existing Stitchkit client transport without owning its lifecycle |
 | `createRetainedTopics` | function | retained last-value store for sticky events — [guide](../guide/realtime.md#sticky-events) |
 | `parseSSE` | function | parse an SSE `Response` into an async generator — [guide](../guide/client.md#sse) |
-| `parseNDJSON` | function | parse an NDJSON `Response`; blank keep-alive lines are skipped — [guide](../guide/client.md#ndjson) |
-| `ContractStreamFrameSchema` / `ContractStreamFrame` | schema / _type_ | internal-on-the-wire `data` / safe `error` / `end` envelope of a contract-first stream |
+| `parseNDJSON` | function | parse bounded fatal-UTF-8 NDJSON; blank keep-alives are skipped and `finalLine: 'require-newline'` can make the delimiter mandatory — [guide](../guide/client.md#ndjson) |
+| `ContractStreamFrameSchema` / `ContractStreamFrame` | schema / _type_ | default on-the-wire `data` / safe `error` / `end` envelope of a contract-first stream |
+| `ContractStreamFraming` / `ContractStreamCompletion` | _types_ | opt-in item-vs-envelope framing and terminal-vs-stream-end completion policies |
+| `StreamFinalLinePolicy` | _type_ | permissive or newline-required final NDJSON line policy |
 | `DEFAULT_CONTRACT_STREAM_FRAME_BYTES` | const | default maximum encoded contract-stream frame: 256 KiB |
 | `SocketIOClient` | _type_ | low-level client handle; `emit` reports disconnected drops and `emitWithAck` exposes the native Promise primitive used by validated `request()` |
 | `SocketIOClientPeerLoaders` | _type_ | inject `socket.io-client` so a bundler can put it in a self-contained artifact |
@@ -10987,7 +11083,7 @@ from the root `stitchkit`.
 | `ContractDef` | _type_ | a defined contract |
 | `ContractMeta` | _type_ | a contract's `prefix` + optional `scope` and `meta` (a default every endpoint shallow-merges over) |
 | `EndpointDef` | _type_ | a single endpoint definition; `output` declares JSON response presence (`null` is data, `undefined` is invalid) |
-| `EndpointStreamDescriptor` | _type_ | HTTP-only schema-derived stream declaration: item schema, NDJSON/SSE framing, frame/lifetime/heartbeat/idle bounds and optional terminal predicate — [guide](../guide/server.md#contract-first-streams) |
+| `EndpointStreamDescriptor` | _type_ | HTTP-only schema-derived stream declaration: item schema, envelope/item framing, stream-end/terminal completion, NDJSON/SSE encoding and frame/lifetime/heartbeat/idle bounds — [guide](../guide/server.md#contract-first-streams) |
 | `HeadEndpointDef` | _type_ | explicit HTTP-only, bodyless `HEAD` endpoint definition |
 | `EndpointResponseMeta` | _type_ | static success metadata declared by an HTTP-only typed-data endpoint |
 | `ResponseMetadata` | _type_ | per-request outbound collector exposed as `ctx.response` only for a `responseMeta` endpoint |
@@ -11444,11 +11540,12 @@ Server-only optional application runtime. See the
 | `createAgentSessionCoordinator` | function | strict process-local queue/interrupt/supersede lifecycle |
 | `AgentRuntimeStopPolicy` | _type_ | named custom AI SDK stop condition persisted and published on policy stop |
 | `AgentRuntimePrepareStep` | _type_ | per-run controlled step callback with typed domain context and managed run signal/fence |
+| `AgentContextOverflowError` | class | deliberate application budget refusal thrown from `loop.prepareStep`; terminalizes as `context_overflow` without classifying arbitrary error text |
 | `AgentRuntimeRecordIds` | _type_ | optional caller-provided input, run and assistant IDs for stable application records |
 | `AgentRuntimeAdmission` | _type_ | canonical committed input, assigned run, pending assistant projection, compatibility IDs and snapshot version |
 | `AgentAdmissionEventSchema` | schema | post-commit admission projection; removes store rereads but does not imply exactly-once delivery |
 | `AgentRunMetricsSchema` | schema | optional provenance-aware usage and timings; `partial` says the provider never reported the run finished, so the figure beside it is not a confirmed total |
-| `AgentRuntimeRecoverOptions` | _type_ | bounded paged startup recovery with context resolver and explicit evidence policy |
+| `AgentRuntimeRecoverOptions` | _type_ | bounded paged startup recovery with causal per-conversation scheduling, context resolver and explicit evidence policy |
 | `AgentRuntimeConflictError` | class | thrown when a store mutation loses to a concurrent writer — catchable by type from `stitchkit/agent-runtime` |
 | `AgentSessionCloseOptions` | _type_ | `gracePeriodMs` for natural settlement, then abort, then `forceTimeoutMs` for bounded settlement after it |
 | `AgentSessionCloseResult` | _type_ | what `close()` achieved: `settled`, or `timedOut` with `remaining` runs still in flight. Only omitting `forceTimeoutMs` guarantees nothing is in flight on return |
@@ -11561,6 +11658,20 @@ Managed effects and operator telemetry additionally export `AgentToolFenceConfig
 may accompany checkpoint/terminal writes and tool context; internal causes are redacted unless an
 operator-only observability sink explicitly opts in.
 
+## `stitchkit/agent-runtime/browser`
+
+Browser-safe canonical agent data. It re-exports the run, message, part, usage,
+terminal and provider-envelope schemas/types listed under
+`stitchkit/agent-runtime`, together with all runtime delivery event schemas,
+`AgentRuntimeEventCursorSchema`, `advanceAgentRuntimeEventCursor` and
+`agentDurableEventId`. It imports no model provider, executor, store, event sink
+or Node context module.
+
+Use this entrypoint from client components and shared DTO packages. The full
+`stitchkit/agent-runtime` entrypoint remains server-only.
+
+---
+
 ## `stitchkit/agent-runtime/openrouter`
 
 | Export | Kind | Summary |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stitchkit",
-  "version": "0.68.3",
+  "version": "0.68.5",
   "description": "Contract-first backend framework — one defineContract() into an HTTP API, MCP tools, AI-agent tools and a typed client. Bun and Node.",
   "keywords": [
     "bun",
@@ -84,6 +84,10 @@
       "types": "./dist/agent-runtime.d.ts",
       "import": "./dist/agent-runtime.js"
     },
+    "./agent-runtime/browser": {
+      "types": "./dist/agent-runtime-browser.d.ts",
+      "import": "./dist/agent-runtime-browser.js"
+    },
     "./agent-runtime/openrouter": {
       "types": "./dist/agent-runtime-openrouter.d.ts",
       "import": "./dist/agent-runtime-openrouter.js"
@@ -122,7 +126,7 @@
   },
   "scripts": {
     "check": "bun x tsc --noEmit",
-    "build:browser": "bun build src/index.ts src/react.ts src/contract/index.ts src/declaration.ts --outdir dist --target node --packages external --splitting --root src",
+    "build:browser": "bun build src/index.ts src/react.ts src/contract/index.ts src/declaration.ts src/agent-runtime-browser.ts --outdir dist --target node --packages external --splitting --root src",
     "build:server": "bun build src/server/index.ts src/node.ts src/tools.ts src/tool-invoker.ts src/cli.ts src/remote.ts src/files.ts src/testing.ts src/observability/index.ts src/agent-runtime.ts src/agent-runtime-openrouter.ts src/application.ts src/application-grammy.ts src/application-opentelemetry.ts --outdir dist --target node --packages external --splitting --root src",
     "build:js": "bun run build:browser && bun run build:server && bun scripts/preserve-webpack-ignore.mjs",
     "build:types": "bun x tsc -p tsconfig.build.json --emitDeclarationOnly && bun scripts/rewrite-declaration-specifiers.mjs",