stitchkit 0.70.0 → 0.70.2

package/dist/{index-38hs3a58.js → index-a01jky8m.js}

@@ -21,7 +21,7 @@ import {
 } from "./index-ktsps64f.js";
 import {
   ShutdownOptionsSchema
-} from "./index-dk6e56g0.js";
+} from "./index-7wpgrqa8.js";
 import {
   errorCode,
   normalizeError,
@@ -54,7 +54,20 @@ var DEFAULT_MAX_PARTS = 1000;
 var CRLF = new Uint8Array([13, 10]);
 var HEADER_END = new Uint8Array([13, 10, 13, 10]);
 var decoder = new TextDecoder;
+var headerDecoder = new TextDecoder("utf-8", { fatal: true });
 var encoder = new TextEncoder;
+var TOKEN = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/;
+function hasControl(value, allowTab = false) {
+  for (let index = 0;index < value.length; index++) {
+    const code = value.charCodeAt(index);
+    if (code < 32 && !(allowTab && code === 9) || code === 127)
+      return true;
+  }
+  return false;
+}
+function trimWhitespace(value) {
+  return value.replace(/^[ \t]+|[ \t]+$/g, "");
+}
 function indexOfBytes(haystack, needle) {
   outer:
     for (let index = 0;index <= haystack.length - needle.length; index += 1) {
@@ -97,10 +110,49 @@ function parseBoundary(req) {
   return boundary;
 }
 function parseDisposition(value) {
-  if (!value || !/^form-data(?:;|$)/i.test(value))
+  if (!value)
+    badRequest("Invalid multipart disposition");
+  const separator = value.indexOf(";");
+  const kind = separator < 0 ? value : value.slice(0, separator);
+  if (trimWhitespace(kind).toLowerCase() !== "form-data") {
     badRequest("Invalid multipart disposition");
-  const name = /(?:^|;)\s*name="([^"]*)"/i.exec(value)?.[1];
-  const filename = /(?:^|;)\s*filename="([^"]*)"/i.exec(value)?.[1];
+  }
+  const parameters = new Map;
+  let rest = separator < 0 ? "" : value.slice(separator);
+  while (rest.length > 0) {
+    const match = /^;[ \t]*([^=; \t]+)[ \t]*=[ \t]*(?:"((?:[^"\\]|\\.)*)"|([^; \t]+))[ \t]*/.exec(rest);
+    if (!match?.[1])
+      badRequest("Invalid multipart disposition parameter");
+    const key = match[1].toLowerCase();
+    if (!TOKEN.test(key) || parameters.has(key)) {
+      badRequest("Invalid or duplicate multipart disposition parameter");
+    }
+    const quoted = match[2];
+    const raw = match[3] ?? "";
+    if (quoted === undefined && !TOKEN.test(raw)) {
+      badRequest("Invalid multipart disposition parameter");
+    }
+    const decoded = quoted === undefined ? raw : quoted.replace(/\\(.)/g, "$1");
+    if (hasControl(decoded))
+      badRequest("Invalid multipart disposition parameter");
+    parameters.set(key, decoded);
+    rest = rest.slice(match[0].length);
+  }
+  const name = parameters.get("name");
+  let filename = parameters.get("filename");
+  const extended = parameters.get("filename*");
+  if (extended !== undefined) {
+    const match = /^utf-8'[A-Za-z0-9-]*'((?:[!#$&+.^_`|~0-9A-Za-z-]|%[0-9A-Fa-f]{2})*)$/i.exec(extended);
+    if (!match)
+      badRequest("Invalid multipart extended filename");
+    try {
+      filename = decodeURIComponent(match[1] ?? "");
+    } catch {
+      badRequest("Invalid multipart extended filename");
+    }
+    if (hasControl(filename))
+      badRequest("Invalid multipart extended filename");
+  }
   if (!name || isUnsafeKey(name))
     badRequest("Invalid multipart field name");
   return filename === undefined ? { name } : { name, filename };
@@ -108,23 +160,33 @@ function parseDisposition(value) {
 function parsePartHeaders(bytes) {
   let text;
   try {
-    text = decoder.decode(bytes);
+    text = headerDecoder.decode(bytes);
   } catch {
     badRequest("Invalid multipart headers");
   }
-  const headers = new Headers;
+  const headers = new Map;
   for (const line of text.split(`\r
 `)) {
     const separator = line.indexOf(":");
     if (separator <= 0)
       badRequest("Invalid multipart header");
-    headers.append(line.slice(0, separator).trim(), line.slice(separator + 1).trim());
+    const name = line.slice(0, separator).toLowerCase();
+    const value = trimWhitespace(line.slice(separator + 1));
+    if (!TOKEN.test(name) || hasControl(value, true)) {
+      badRequest("Invalid multipart header");
+    }
+    if (headers.has(name))
+      badRequest("Duplicate multipart header");
+    headers.set(name, value);
   }
   const disposition = parseDisposition(headers.get("content-disposition") ?? undefined);
   const rawContentType = headers.get("content-type");
   const contentType = rawContentType?.split(";", 1)[0]?.trim().toLowerCase();
   const rawSize = headers.get("content-length");
-  const declaredSize = rawSize === null ? undefined : Number(rawSize);
+  if (rawSize !== undefined && !/^[0-9]+$/.test(rawSize)) {
+    badRequest("Invalid multipart part content-length");
+  }
+  const declaredSize = rawSize === undefined ? undefined : Number(rawSize);
   if (declaredSize !== undefined && (!Number.isSafeInteger(declaredSize) || declaredSize < 0)) {
     badRequest("Invalid multipart part content-length");
   }
@@ -1790,6 +1852,9 @@ function bindProcessSignals(handle, options = {}) {
     ...requested.forceTimeoutMs !== undefined && {
       forceTimeoutMs: validated.forceTimeoutMs
     },
+    ...requested.realtimeCloseTimeoutMs !== undefined && {
+      realtimeCloseTimeoutMs: validated.realtimeCloseTimeoutMs
+    },
     ...requested.retryAfterSeconds !== undefined && {
       retryAfterSeconds: validated.retryAfterSeconds
     }

package/dist/{index-hsabxjz0.js → index-jw81xr75.js}

@@ -1,6 +1,6 @@
 import {
   assistantStatus
-} from "./index-es0h4w26.js";
+} from "./index-y2s6h5bf.js";
 import {
   AgentMessageSchema,
   AgentRecordIdSchema,

package/dist/{index-6wzr93cg.js → index-w0445741.js}

@@ -8,7 +8,7 @@ import {
 } from "./index-8eywc9zv.js";
 import {
   ShutdownOptionsSchema
-} from "./index-dk6e56g0.js";
+} from "./index-7wpgrqa8.js";
 import {
   AppError
 } from "./index-0w9abg87.js";

package/dist/index-y2s6h5bf.js

@@ -0,0 +1,83 @@
+// src/agent-runtime/history-chronology.ts
+function createToolChronology() {
+  return { calls: new Map, approvals: new Map, pending: 0, resultsStarted: false };
+}
+function advanceToolChronology(previous, parts) {
+  const calls = new Map(previous.calls);
+  const approvals = new Map(previous.approvals);
+  let { pending, resultsStarted } = previous;
+  for (const part of parts) {
+    if (part.type === "tool-call") {
+      if (calls.has(part.callId) || resultsStarted && pending > 0)
+        return;
+      if (pending === 0)
+        resultsStarted = false;
+      calls.set(part.callId, { toolName: part.toolName, phase: "called" });
+      pending += 1;
+    } else if (part.type === "tool-approval-request") {
+      const call = calls.get(part.callId);
+      if (call?.phase !== "called" || approvals.has(part.approvalId))
+        return;
+      approvals.set(part.approvalId, part.callId);
+      calls.set(part.callId, { ...call, phase: "requested" });
+    } else if (part.type === "tool-approval-response") {
+      const callId = approvals.get(part.approvalId);
+      const call = callId === undefined ? undefined : calls.get(callId);
+      if (callId === undefined || !call || call.phase !== "requested")
+        return;
+      calls.set(callId, { ...call, phase: part.approved ? "approved" : "denied" });
+    } else if (part.type === "tool-result") {
+      const call = calls.get(part.callId);
+      if (!call || call.toolName !== part.toolName || call.phase === "result" || call.phase === "requested" || call.phase === "denied" && part.outcome === "success")
+        return;
+      calls.set(part.callId, { ...call, phase: "result" });
+      pending -= 1;
+      resultsStarted = true;
+    }
+  }
+  return { calls, approvals, pending, resultsStarted };
+}
+function canProjectToolChronology(state) {
+  return [...state.calls.values()].every(({ phase }) => phase !== "called");
+}
+
+// src/agent-runtime/terminal-status.ts
+function isSpeakableAssistantStatus(status) {
+  return status === "completed" || status === "interrupted" || status === "committed";
+}
+function isAssistantHistoryEvidence(status, policy) {
+  return isSpeakableAssistantStatus(status) || status === "failed" && policy?.failedAssistant === "assistant-marked";
+}
+function isCompleteAgentHistoryTurn(messages, policy) {
+  if (messages[0]?.role !== "user")
+    return false;
+  let chronology = createToolChronology();
+  let assistantCount = 0;
+  for (const message of messages) {
+    if (message.role === "assistant") {
+      if (!isAssistantHistoryEvidence(message.status, policy))
+        return false;
+      assistantCount += 1;
+    }
+    const next = advanceToolChronology(chronology, message.parts);
+    if (!next)
+      return false;
+    chronology = next;
+  }
+  return assistantCount > 0 && chronology.pending === 0;
+}
+function assistantStatus(reason) {
+  if (reason === "success" || reason === "policy_stop" || reason === "provider_stop") {
+    return "completed";
+  }
+  if (reason === "superseded")
+    return "superseded";
+  if (reason === "absorbed")
+    return "superseded";
+  if (reason === "interrupted" || reason === "cancelled" || reason === "shutdown") {
+    return "interrupted";
+  }
+  return "failed";
+}
+
+export { createToolChronology, advanceToolChronology, canProjectToolChronology, isAssistantHistoryEvidence, isCompleteAgentHistoryTurn, assistantStatus };

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 export { type ClientConfig, type ClientContract, type ClientFetch, type ClientRegistryValue, type ContractClientConfig, contractEndpointMatchers, createClient, createClients, createScopedClients, createScopedUrlBuilders, createUrlBuilder, createUrlBuilders, type PathPrefixArgs, type RegistryScope, type ScopeClientConfigs, type ScopedClientRegistry, type ScopedUrlBuilderRegistry, type UrlBuilderConfig, } from './browser/client.js';
 export { ApiError, type ApiEvent, type ApiEventListener, type ConfiguredHttpClient, createHttpClient, type HeaderProvider, type HttpClient, type HttpClientConfig, type RequestOptions, type UnauthorizedMatcher, } from './browser/http.js';
+export { createLiveStateController, type LiveStateController, type LiveStateControllerConfig, type LiveStateControllerError, type LiveStateControllerSnapshot, type LiveStateControllerStatus, LiveStateControllerStatusSchema, type LiveStateEventDecision, type LiveStatePhase, LiveStatePhaseSchema, type LiveStateSource, type LiveStateSourceOpenInput, type LiveStateSourceOpenResult, type LiveStateStopReason, LiveStateStopReasonSchema, type LiveStateSubscriberError, } from './browser/live-state.js';
 export type { BindRealtimeClientOptions, BoundRealtimeClient, RealtimeClient, RealtimeClientOptions, RealtimeClientTransport, SocketEventMap, SocketIOClient, SocketIOClientConfig, SocketIOClientPeerLoaders, } from './browser/socket-io.js';
 export { bindRealtimeClient, createRealtimeClient, createSocketIOClient, } from './browser/socket-io.js';
 export { type ParseNDJSONOptions, type ParseSSEOptions, parseNDJSON, parseSSE, } from './browser/stream.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,wBAAwB,EACxB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,QAAQ,EACR,KAAK,QAAQ,EACb,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,mBAAmB,GACzB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,yBAAyB,EACzB,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACrB,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,WAAW,EACX,QAAQ,GACT,MAAM,kBAAkB,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,YAAY,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAG7C,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,YAAY,GAClB,MAAM,uBAAuB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,wBAAwB,EACxB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,QAAQ,EACR,KAAK,QAAQ,EACb,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,mBAAmB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,KAAK,yBAAyB,EAC9B,+BAA+B,EAC/B,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,oBAAoB,EACpB,KAAK,eAAe,EACpB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,KAAK,wBAAwB,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,yBAAyB,EACzB,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACrB,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,WAAW,EACX,QAAQ,GACT,MAAM,kBAAkB,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,YAAY,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAG7C,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,YAAY,GAClB,MAAM,uBAAuB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC"}