stitchkit 0.69.0 → 0.70.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stitchkit",
-  "version": "0.69.0",
+  "version": "0.70.0",
   "description": "Contract-first backend framework — one defineContract() into an HTTP API, MCP tools, AI-agent tools and a typed client. Bun and Node.",
   "keywords": [
     "bun",

package/dist/index-v3dpzpjw.js

@@ -1,92 +0,0 @@
-// src/agent-runtime/contained-files.ts
-import { constants } from "node:fs";
-import { lstat, open, readdir, realpath } from "node:fs/promises";
-import path from "node:path";
-async function readContainedUtf8File(absolute, maxBytes) {
-  const handle = await open(absolute, constants.O_RDONLY | constants.O_NOFOLLOW);
-  try {
-    const metadata = await handle.stat();
-    if (!metadata.isFile())
-      throw new Error("Contained path is not a regular file");
-    if (metadata.size > maxBytes)
-      throw new Error("Contained file exceeds byte budget");
-    const buffer = Buffer.alloc(metadata.size);
-    let offset = 0;
-    while (offset < buffer.byteLength) {
-      const { bytesRead } = await handle.read(buffer, offset, buffer.byteLength - offset, offset);
-      if (bytesRead === 0)
-        break;
-      offset += bytesRead;
-    }
-    if (offset !== metadata.size)
-      throw new Error("Contained file changed while being read");
-    return {
-      text: new TextDecoder("utf-8", { fatal: true }).decode(buffer),
-      bytes: offset,
-      mode: metadata.mode
-    };
-  } finally {
-    await handle.close();
-  }
-}
-function inside(root, target) {
-  const relative = path.relative(root, target);
-  return relative === "" || !relative.startsWith("..") && !path.isAbsolute(relative);
-}
-async function walkContainedFiles(input) {
-  const scan = await scanContainedFiles({ ...input, symlinks: "refuse" });
-  if (scan.truncated)
-    throw new Error("Contained file traversal exceeded its bounds");
-  return scan.files;
-}
-async function scanContainedFiles(input) {
-  const root = await realpath(input.root);
-  const files = [];
-  let truncated = false;
-  let skippedDirectories = 0;
-  let skippedSymlinks = 0;
-  const visit = async (directory, depth) => {
-    if (truncated)
-      return;
-    if (depth > input.maxDepth) {
-      truncated = true;
-      return;
-    }
-    const entries = await readdir(directory, { withFileTypes: true });
-    entries.sort((left, right) => left.name.localeCompare(right.name));
-    for (const entry of entries) {
-      const absolute = path.join(directory, entry.name);
-      const metadata = await lstat(absolute);
-      if (metadata.isSymbolicLink()) {
-        if (input.symlinks === "refuse") {
-          throw new Error(`Contained file traversal refuses symlink: ${path.relative(root, absolute)}`);
-        }
-        skippedSymlinks += 1;
-        continue;
-      }
-      if (metadata.isDirectory()) {
-        const relative = path.relative(root, absolute);
-        if (input.excludeDirectory?.(relative)) {
-          skippedDirectories += 1;
-          continue;
-        }
-        await visit(absolute, depth + 1);
-        continue;
-      }
-      if (!metadata.isFile())
-        continue;
-      const resolved = await realpath(absolute);
-      if (!inside(root, resolved))
-        throw new Error("Contained file traversal escaped root");
-      if (files.length >= input.maxFiles) {
-        truncated = true;
-        return;
-      }
-      files.push({ absolute: resolved, relative: path.relative(root, resolved) });
-    }
-  };
-  await visit(root, 0);
-  return { files, truncated, skippedDirectories, skippedSymlinks };
-}
-
-export { readContainedUtf8File, walkContainedFiles, scanContainedFiles };