stitchkit 0.81.0 → 0.83.0

package/dist/observability/index.js

@@ -3,8 +3,10 @@ import {
   ObservabilitySinkStatusSchema,
   ObservabilityStatusSchema,
   aggregateObservabilityStatus,
-  createBoundedSinkManager
-} from "../index-a59da114.js";
+  assertDrainBound,
+  createBoundedSinkManager,
+  withinBound
+} from "../index-7z1h3kbr.js";
 import {
   measureSize,
   redact,
@@ -115,7 +117,9 @@ function createObservability(config) {
   const requestManager = config.request ? createSinkManager(config.request) : undefined;
   const toolManager = config.tools ? createSinkManager(config.tools) : undefined;
   let closed = false;
-  let closePromise;
+  let drain;
+  let drainStartedAt = 0;
+  let unbounded;
   const request = config.request ? {
     includePayload: config.request.includePayload ?? false,
     complete: ({ context, statusCode, durationMs, payload, outcome }) => {
@@ -232,23 +236,34 @@ function createObservability(config) {
   return {
     ...request && { request },
     toolCall: toolCall ?? {},
-    async flush() {
-      await Promise.all([requestManager?.flush(), toolManager?.flush()]);
+    flush(bound) {
+      assertDrainBound(bound);
+      return withinBound(Promise.all([requestManager?.flush(), toolManager?.flush()]), bound);
     },
     getStatus,
-    close() {
-      if (!closePromise) {
+    close(bound) {
+      assertDrainBound(bound);
+      if (!drain) {
         closed = true;
-        const startedAt = performance.now();
-        closePromise = Promise.all([requestManager?.close(), toolManager?.close()]).then(() => {
-          const status = getStatus();
-          return ObservabilityDrainReportSchema.parse({
-            ...status,
-            durationMs: performance.now() - startedAt
-          });
+        drainStartedAt = performance.now();
+        drain = Promise.all([requestManager?.close(), toolManager?.close()]).then(() => {
+          return;
+        });
+      }
+      const startedAt = drainStartedAt;
+      const report = () => {
+        const status = getStatus();
+        return ObservabilityDrainReportSchema.parse({
+          ...status,
+          durationMs: performance.now() - startedAt,
+          drained: status.total.pending + status.total.preparing === 0
         });
+      };
+      if (!bound?.signal && bound?.timeoutMs === undefined) {
+        unbounded ??= withinBound(drain, undefined).then(report);
+        return unbounded;
       }
-      return closePromise;
+      return withinBound(drain, bound).then(report);
     }
   };
 }

package/dist/observability/status.d.ts

@@ -98,6 +98,7 @@ export declare const ObservabilityDrainReportSchema: z.ZodReadonly<z.ZodObject<{
         closed: z.ZodBoolean;
     }, z.core.$strip>>;
     durationMs: z.ZodNumber;
+    drained: z.ZodBoolean;
 }, z.core.$strip>>;
 export type ObservabilityDrainReport = z.infer<typeof ObservabilityDrainReportSchema>;
 /** Build and freeze the aggregate without exposing mutable counters. */

package/dist/observability/status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/observability/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,yEAAyE;AACzE,eAAO,MAAM,6BAA6B;;;;;;;;;;;;kBAc7B,CAAC;AAEd,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AASpF,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAA6C,CAAC;AAEpF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,sFAAsF;AACtF,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAE9B,CAAC;AAEd,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAiBtF,wEAAwE;AACxE,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,SAAS,uBAAuB,EAAE,EAC5C,MAAM,EAAE,OAAO,GACd,uBAAuB,CAiBzB"}
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/observability/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,yEAAyE;AACzE,eAAO,MAAM,6BAA6B;;;;;;;;;;;;kBAc7B,CAAC;AAEd,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AASpF,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAA6C,CAAC;AAEpF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,sFAAsF;AACtF,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAoB9B,CAAC;AAEd,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAiBtF,wEAAwE;AACxE,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,SAAS,uBAAuB,EAAE,EAC5C,MAAM,EAAE,OAAO,GACd,uBAAuB,CAiBzB"}

package/dist/release/socket.d.ts

@@ -1,6 +1,19 @@
 import type { ReleaseMarker } from './marker.js';
 import type { ReleaseWatcher } from './watcher.js';
-/** The little of a Socket.IO server this binding uses — structural, no peer import. */
+/**
+ * The little of a Socket.IO server this binding uses — structural, no peer
+ * import.
+ *
+ * `emit` is declared over `string` because the event name is configurable. A
+ * **typed** `Server<ClientToServer, ServerToClient>` narrows its own `emit` to
+ * the names in its map, so it satisfies this only once that map declares the
+ * event — `release: (payload: { buildId: string | null }) => void`, or whatever
+ * `options.event` renames it to. Until then the compiler reports a structural
+ * mismatch between two large socket.io types, which reads like a defect in this
+ * binding and is a missing line in the application's event map. Adding it is
+ * step 3 of the guide's adoption list for exactly this reason: the same
+ * declaration is what lets the application's own `on` know the event.
+ */
 export interface ReleaseSocketServer {
     on(event: 'connection', handler: (socket: ReleaseSocketEmitter) => void): unknown;
     emit(event: string, payload: {

package/dist/release/socket.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"socket.d.ts","sourceRoot":"","sources":["../../src/release/socket.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhD,uFAAuF;AACvF,MAAM,WAAW,mBAAmB;IAClC,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,IAAI,GAAG,OAAO,CAAC;IAClF,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC;CACnE;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC;CACnE;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC;IACnF,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC;CACtF;AAED,MAAM,WAAW,oBAAoB;IACnC,iDAAiD;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,mBAAmB,EACvB,MAAM,EAAE,aAAa,EACrB,OAAO,GAAE,oBAAoB,GAAG;IAAE,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAAO,GACrE,MAAM,IAAI,CAcZ;AAED,qEAAqE;AACrE,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,qBAAqB,EAC7B,OAAO,EAAE,cAAc,EACvB,OAAO,GAAE,oBAAyB,GACjC,MAAM,IAAI,CAQZ"}
+{"version":3,"file":"socket.d.ts","sourceRoot":"","sources":["../../src/release/socket.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,mBAAmB;IAClC,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,IAAI,GAAG,OAAO,CAAC;IAClF,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC;CACnE;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC;CACnE;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC;IACnF,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC;CACtF;AAED,MAAM,WAAW,oBAAoB;IACnC,iDAAiD;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,mBAAmB,EACvB,MAAM,EAAE,aAAa,EACrB,OAAO,GAAE,oBAAoB,GAAG;IAAE,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAAO,GACrE,MAAM,IAAI,CAcZ;AAED,qEAAqE;AACrE,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,qBAAqB,EAC7B,OAAO,EAAE,cAAc,EACvB,OAAO,GAAE,oBAAyB,GACjC,MAAM,IAAI,CAQZ"}

package/dist/tracking/contract.d.ts

@@ -27,6 +27,7 @@ export type TrackingContractEndpoints<TSchemas extends TrackingSchemas<z.ZodObje
     track: {
         method: 'POST';
         path: '/events';
+        expose: readonly ['HTTP'];
         desc: string;
         input: TSchemas['request'];
         output: TSchemas['response'];
@@ -40,6 +41,16 @@ export type TrackingContractEndpoints<TSchemas extends TrackingSchemas<z.ZodObje
  * `sendUnloadBeacon` with a string body — the only body a document that is
  * being unloaded can deliver to another origin (ADR 0165) — and the server
  * therefore needs an explicit `cors.origin` allow-list for it to arrive.
+ *
+ * **Both endpoints are HTTP-only, and that is not a formality.** An endpoint
+ * with no `expose` is a tool on MCP and AGENT by default, and this contract is
+ * built here rather than by the application's own contract factory — so a
+ * project that sets `toolExposure: 'explicit'` for everything it authors was
+ * still handed a `track` tool it never asked for. An agent has nothing to gain
+ * from a browser-event ingest and one thing to lose by having it: writes into
+ * the application's visitor data, under its own name, indistinguishable
+ * afterwards from a real visitor's. `bootstrap` said `['HTTP']` from the start;
+ * `track` not saying it was an omission, not a decision.
  */
 export declare function createTrackingContract<TType extends string, TScope extends string>(config: TrackingContractConfig<TType, undefined, TScope>): ContractDef<TrackingContractEndpoints<TrackingSchemas<z.ZodObject<TrackingEventShape<TType>>>>, TScope>;
 export declare function createTrackingContract<TType extends string, TExtras extends z.ZodRawShape, TScope extends string>(config: TrackingContractConfig<TType, TExtras, TScope>): ContractDef<TrackingContractEndpoints<TrackingSchemas<z.ZodObject<TrackingEventShape<TType> & TExtras>>>, TScope>;

package/dist/tracking/contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../src/tracking/contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,EAAE,KAAK,WAAW,EAAkB,MAAM,aAAa,CAAC;AAC/D,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC3B,MAAM,WAAW,CAAC;AAEnB,MAAM,WAAW,sBAAsB,CACrC,KAAK,SAAS,MAAM,EACpB,OAAO,SAAS,CAAC,CAAC,WAAW,GAAG,SAAS,EACzC,MAAM,SAAS,MAAM,CACrB,SAAQ,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC;IAC7C,wCAAwC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,yFAAyF;AACzF,MAAM,MAAM,yBAAyB,CAAC,QAAQ,SAAS,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI;IACrF,SAAS,EAAE;QACT,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,QAAQ,CAAC;QACf,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;KAC/B,CAAC;IACF,KAAK,EAAE;QACL,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,SAAS,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC3B,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC7B,cAAc,EAAE,IAAI,CAAC;QACrB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,SAAS,MAAM,EAAE,MAAM,SAAS,MAAM,EAChF,MAAM,EAAE,sBAAsB,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,GACvD,WAAW,CACZ,yBAAyB,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAClF,MAAM,CACP,CAAC;AACF,wBAAgB,sBAAsB,CACpC,KAAK,SAAS,MAAM,EACpB,OAAO,SAAS,CAAC,CAAC,WAAW,EAC7B,MAAM,SAAS,MAAM,EAErB,MAAM,EAAE,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,GACrD,WAAW,CACZ,yBAAyB,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EAC5F,MAAM,CACP,CAAC"}
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../src/tracking/contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,EAAE,KAAK,WAAW,EAAkB,MAAM,aAAa,CAAC;AAC/D,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC3B,MAAM,WAAW,CAAC;AAEnB,MAAM,WAAW,sBAAsB,CACrC,KAAK,SAAS,MAAM,EACpB,OAAO,SAAS,CAAC,CAAC,WAAW,GAAG,SAAS,EACzC,MAAM,SAAS,MAAM,CACrB,SAAQ,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC;IAC7C,wCAAwC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,yFAAyF;AACzF,MAAM,MAAM,yBAAyB,CAAC,QAAQ,SAAS,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI;IACrF,SAAS,EAAE;QACT,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,QAAQ,CAAC;QACf,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;KAC/B,CAAC;IACF,KAAK,EAAE;QACL,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,SAAS,CAAC;QAChB,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC3B,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC7B,cAAc,EAAE,IAAI,CAAC;QACrB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,SAAS,MAAM,EAAE,MAAM,SAAS,MAAM,EAChF,MAAM,EAAE,sBAAsB,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,GACvD,WAAW,CACZ,yBAAyB,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAClF,MAAM,CACP,CAAC;AACF,wBAAgB,sBAAsB,CACpC,KAAK,SAAS,MAAM,EACpB,OAAO,SAAS,CAAC,CAAC,WAAW,EAC7B,MAAM,SAAS,MAAM,EAErB,MAAM,EAAE,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,GACrD,WAAW,CACZ,yBAAyB,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EAC5F,MAAM,CACP,CAAC"}

package/dist/tracking-server.d.ts

@@ -5,6 +5,7 @@
  * back; `issueVisitLease` runs the visit algorithm over a store interface the
  * application implements. No database, no schema, no domain. → ADR 0166.
  */
+export type { TrackingDisposition, VisitBootstrapResponse, VisitEntryContext, } from './tracking/schemas.js';
 export { type ActiveIntervalOptions, type ActiveTimeInterval, activeIntervalOf, } from './tracking/server/active-interval.js';
 export { DEFAULT_BOT_USER_AGENT_PATTERN, isBotUserAgent } from './tracking/server/bot.js';
 export { type DispositionEvent, type DispositionInput, type DispositionResult, dispositionTrackingBatch, type KnownVisit, } from './tracking/server/disposition.js';

package/dist/tracking-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tracking-server.d.ts","sourceRoot":"","sources":["../src/tracking-server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,gBAAgB,GACjB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,8BAA8B,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,wBAAwB,EACxB,KAAK,UAAU,GAChB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EACL,sBAAsB,EACtB,KAAK,aAAa,EAClB,KAAK,gBAAgB,GACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,eAAe,EACf,KAAK,kBAAkB,EACvB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,cAAc,GACpB,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"tracking-server.d.ts","sourceRoot":"","sources":["../src/tracking-server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAUH,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,gBAAgB,GACjB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,8BAA8B,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,wBAAwB,EACxB,KAAK,UAAU,GAChB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EACL,sBAAsB,EACtB,KAAK,aAAa,EAClB,KAAK,gBAAgB,GACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,eAAe,EACf,KAAK,kBAAkB,EACvB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,cAAc,GACpB,MAAM,+BAA+B,CAAC"}

package/dist/tracking.js

@@ -778,6 +778,7 @@ function createTrackingContract(config) {
     track: {
       method: "POST",
       path: "/events",
+      expose: ["HTTP"],
       desc: "Batch track browser events",
       input: schemas.request,
       output: schemas.response,

package/dist/upgrade-cli.d.ts

@@ -0,0 +1,27 @@
+#!/usr/bin/env node
+export interface UpgradeCliResult {
+    /** What to write to stdout. */
+    readonly output: string;
+    /** Process exit code — 0 when the plan (or "nothing to do") was produced. */
+    readonly code: number;
+}
+/**
+ * The whole command as a function of its arguments and the filesystem, so the
+ * gate can exercise the paths that matter — a project with no stitchkit
+ * installed, a range that runs backwards, a changelog the package did not ship.
+ */
+export declare function runUpgradeCli(argv: readonly string[]): UpgradeCliResult;
+/**
+ * Was this file executed as a program, rather than imported?
+ *
+ * Through the real install path that is a **symlink** question, not a string
+ * one: npm and bun link `node_modules/.bin/stitchkit` at the built file, Node
+ * keeps the link in `argv[1]` and resolves `import.meta.url` to its target. A
+ * direct comparison of the two is therefore false for every consumer, and the
+ * binary becomes a silent no-op — exit 0, no output, nothing to notice — while
+ * running the same file in place works perfectly. Both arguments are passed in
+ * so this is decidable without launching a process: under Bun `argv[1]` is
+ * already resolved, so a spawned symlink proves nothing about Node.
+ */
+export declare function isDirectInvocation(invoked: string | undefined, self: string): boolean;
+//# sourceMappingURL=upgrade-cli.d.ts.map

package/dist/upgrade-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade-cli.d.ts","sourceRoot":"","sources":["../src/upgrade-cli.ts"],"names":[],"mappings":";AA4DA,MAAM,WAAW,gBAAgB;IAC/B,+BAA+B;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB,CAqCvE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CASrF"}

package/dist/upgrade-cli.js

@@ -0,0 +1,177 @@
+#!/usr/bin/env node
+
+// src/upgrade-cli.ts
+import { readFileSync, realpathSync } from "node:fs";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+
+// src/internal/upgrade-plan.ts
+function semverParts(version) {
+  const match = /^(\d+)\.(\d+)\.(\d+)$/.exec(version);
+  if (!match)
+    throw new Error(`Expected an exact semver, received "${version}"`);
+  const [, major, minor, patch] = match;
+  if (major === undefined || minor === undefined || patch === undefined) {
+    throw new Error(`Expected an exact semver, received "${version}"`);
+  }
+  return [Number(major), Number(minor), Number(patch)];
+}
+function compareSemver(left, right) {
+  const a = semverParts(left);
+  const b = semverParts(right);
+  for (const index of [0, 1, 2]) {
+    const difference = a[index] - b[index];
+    if (difference !== 0)
+      return difference;
+  }
+  return 0;
+}
+function planUpgrade(changelog, from, to) {
+  semverParts(from);
+  semverParts(to);
+  if (compareSemver(from, to) >= 0) {
+    throw new Error(`Upgrade range must increase: ${from} → ${to}`);
+  }
+  const releases = [...changelog.matchAll(/^## \[(\d+\.\d+\.\d+)\].*$/gm)];
+  const changes = [];
+  for (const [index, release] of releases.entries()) {
+    const version = release[1];
+    if (version === undefined)
+      continue;
+    if (compareSemver(version, from) <= 0 || compareSemver(version, to) > 0)
+      continue;
+    const bodyStart = (release.index ?? 0) + release[0].length;
+    const bodyEnd = releases[index + 1]?.index ?? changelog.length;
+    const body = changelog.slice(bodyStart, bodyEnd);
+    const breakingHeader = /^### ⚠️ Breaking changes\s*$/m.exec(body);
+    if (!breakingHeader)
+      continue;
+    const breakingStart = (breakingHeader.index ?? 0) + breakingHeader[0].length;
+    const afterHeader = body.slice(breakingStart);
+    const nextSection = /^### /m.exec(afterHeader);
+    const markdown = afterHeader.slice(0, nextSection?.index ?? afterHeader.length).trim();
+    const who = /^\*\*Who must act:\*\*\s*([\s\S]*?)(?=\n\s*\n|\n[-*] )/m.exec(markdown);
+    changes.push({
+      version,
+      whoMustAct: who?.[1]?.replace(/\s+/g, " ").trim() ?? "Not declared in this legacy changelog section.",
+      markdown
+    });
+  }
+  return changes.sort((left, right) => compareSemver(left.version, right.version));
+}
+function renderUpgradePlan(changes, from, to) {
+  const header = `# Stitchkit upgrade ${from} → ${to}`;
+  if (changes.length === 0)
+    return `${header}
+
+No breaking sections in this range.
+`;
+  return `${header}
+
+${changes.map((change) => `## ${change.version}
+
+**Who must act:** ${change.whoMustAct}
+
+${change.markdown.replace(/^\*\*Who must act:\*\*[\s\S]*?(?=\n\s*\n|\n[-*] )/m, "").trim()}`).join(`
+
+`)}
+`;
+}
+
+// src/upgrade-cli.ts
+var USAGE = `stitchkit upgrade — print every breaking change between the installed version and this one
+
+  bunx stitchkit@latest upgrade            in a project that depends on stitchkit
+  npx stitchkit@latest upgrade
+
+Options
+  --from <version>     installed version (default: the stitchkit in ./node_modules)
+  --to <version>       target version (default: the version of this package)
+  --cwd <dir>          project to read the installed version from (default: .)
+  --changelog <path>   changelog to plan from (default: the one in this package)
+`;
+function option(argv, name) {
+  const index = argv.indexOf(`--${name}`);
+  if (index < 0)
+    return;
+  const value = argv[index + 1];
+  if (value === undefined || value.startsWith("--")) {
+    throw new Error(`--${name} needs a value`);
+  }
+  return value;
+}
+function packageRoot() {
+  return resolve(dirname(fileURLToPath(import.meta.url)), "..");
+}
+function versionOf(packageJsonPath) {
+  let text;
+  try {
+    text = readFileSync(packageJsonPath, "utf8");
+  } catch {
+    return;
+  }
+  const parsed = JSON.parse(text);
+  if (typeof parsed !== "object" || parsed === null || !("version" in parsed))
+    return;
+  const { version } = parsed;
+  return typeof version === "string" ? version : undefined;
+}
+function runUpgradeCli(argv) {
+  if (argv.includes("--help") || argv.includes("-h") || argv.length === 0) {
+    return { output: USAGE, code: 0 };
+  }
+  const [command] = argv;
+  if (command !== "upgrade") {
+    return { output: `Unknown command "${command}".
+
+${USAGE}`, code: 1 };
+  }
+  const root = packageRoot();
+  const to = option(argv, "to") ?? versionOf(join(root, "package.json"));
+  if (to === undefined) {
+    throw new Error(`Cannot read the version of the stitchkit at ${root}`);
+  }
+  const cwd = resolve(option(argv, "cwd") ?? process.cwd());
+  const from = option(argv, "from") ?? versionOf(join(cwd, "node_modules", "stitchkit", "package.json"));
+  if (from === undefined) {
+    throw new Error(`No stitchkit found in ${join(cwd, "node_modules")} — run this in the project that depends on it, or pass --from <installed version>`);
+  }
+  if (from === to) {
+    return { output: `Already on ${to}. Nothing to upgrade.
+`, code: 0 };
+  }
+  const changelogPath = option(argv, "changelog") ?? join(root, "CHANGELOG.md");
+  let changelog;
+  try {
+    changelog = readFileSync(changelogPath, "utf8");
+  } catch {
+    throw new Error(`Cannot read the changelog at ${changelogPath}`);
+  }
+  return { output: renderUpgradePlan(planUpgrade(changelog, from, to), from, to), code: 0 };
+}
+function isDirectInvocation(invoked, self) {
+  if (invoked === undefined)
+    return false;
+  if (invoked === self || pathToFileURL(invoked).href === pathToFileURL(self).href)
+    return true;
+  try {
+    return realpathSync(invoked) === realpathSync(self);
+  } catch {
+    return false;
+  }
+}
+if (isDirectInvocation(process.argv[1], fileURLToPath(import.meta.url))) {
+  try {
+    const { output, code } = runUpgradeCli(process.argv.slice(2));
+    process.stdout.write(output);
+    process.exit(code);
+  } catch (error) {
+    process.stderr.write(`${error instanceof Error ? error.message : String(error)}
+`);
+    process.exit(1);
+  }
+}
+export {
+  runUpgradeCli,
+  isDirectInvocation
+};