stitchkit 0.88.0 → 0.90.0

package/dist/testing.js

@@ -1,47 +1,39 @@
 import {
   createApplication
-} from "./index-evcnmsc3.js";
-import"./index-2k4yrqkc.js";
+} from "./index-t7fkyxcr.js";
 import"./index-3gye9wzb.js";
+import"./index-2k4yrqkc.js";
 import"./index-3z73fh2c.js";
 import {
   createMemoryAgentRuntimeStore
-} from "./index-v1qk37y9.js";
-import {
-  createAgentRaceBarrier,
-  createAgentRaceDriver,
-  createAgentRaceTrace
-} from "./index-cnyk6te3.js";
+} from "./index-hrbajay7.js";
 import {
   decodeAgentConversationArchive
-} from "./index-6krwcdcf.js";
+} from "./index-zwkgfq1s.js";
 import {
   AgentMessageSchema,
   AgentRunSchema
 } from "./index-gtj3zc53.js";
+import {
+  createAgentRaceBarrier,
+  createAgentRaceDriver,
+  createAgentRaceTrace
+} from "./index-cnyk6te3.js";
 import {
   RealtimeRejectDirectionSchema,
   RealtimeRejectFaultSchema,
   RealtimeRejectPhaseSchema,
   RealtimeRejectReasonSchema
 } from "./index-p7hgdyhb.js";
+import {
+  createClient,
+  createClients
+} from "./index-27gm3d6g.js";
 import {
   RealtimeRequestDisconnectedError,
   RealtimeRequestInvalidAcknowledgementError,
   RealtimeRequestTimeoutError
 } from "./index-2qzskm8h.js";
-import {
-  mcpProjectionCandidate,
-  prepareProjectedMcpTools,
-  projectToolSurface
-} from "./index-r159gjwy.js";
-import {
-  toJsonSchema
-} from "./index-cby4ar3v.js";
-import {
-  createClient,
-  createClients
-} from "./index-27gm3d6g.js";
 import"./index-qmgs7y68.js";
 import"./index-3xwxfj4z.js";
 import"./index-7evdsyez.js";
@@ -52,6 +44,14 @@ import"./index-6k1937bx.js";
 import"./index-0w9abg87.js";
 import"./index-zcgf3gqf.js";
 import"./index-kzfs85xp.js";
+import {
+  mcpProjectionCandidate,
+  prepareProjectedMcpTools,
+  projectToolSurface
+} from "./index-r159gjwy.js";
+import {
+  toJsonSchema
+} from "./index-cby4ar3v.js";
 import {
   isRecord
 } from "./index-77fekveh.js";
@@ -97,7 +97,8 @@ async function runAgentStoreConformance(config) {
       `${run}-causal-active`,
       `${run}-interrupt-priority`,
       `${run}-ledger`,
-      `${run}-archive`
+      `${run}-archive`,
+      `${run}-seed`
     ]
   };
   const store = await config.createStore(context);
@@ -117,6 +118,36 @@ async function runAgentStoreConformance(config) {
   if (failure !== undefined)
     throw failure;
 }
+async function seedScenario(store, conversationId) {
+  const input = {
+    conversationId,
+    seedKey: "brief",
+    inputs: [userMessage(conversationId, "seed-a"), userMessage(conversationId, "seed-b")]
+  };
+  const first = await store.seedConversationInput(input);
+  requireOutcome(first, "applied");
+  const before = await store.loadSnapshot(conversationId);
+  if (before.messages.map((message) => message.id).join(",") !== "seed-a,seed-b")
+    throw new Error("Seed conformance: complete ordered seed missing");
+  await Promise.all([store.seedConversationInput(input), store.seedConversationInput(input)]);
+  const repeated = await store.loadSnapshot(conversationId);
+  if (repeated.version !== before.version || repeated.messages.length !== 2)
+    throw new Error("Seed conformance: replay changed history");
+  const compacted = await store.replaceCompactedRange({
+    conversationId,
+    expectedVersion: repeated.version,
+    replacedMessageIds: ["seed-a", "seed-b"],
+    summary: AgentMessageSchema.parse({
+      ...userMessage(conversationId, "seed-summary"),
+      role: "summary"
+    })
+  });
+  requireOutcome(compacted, "applied");
+  await store.seedConversationInput(input);
+  const after = await store.loadSnapshot(conversationId);
+  if (after.messages.some((message) => message.id === "seed-a" || message.id === "seed-b"))
+    throw new Error("Seed conformance: compacted instructions resurrected");
+}
 async function conformanceScenario(store, conversationIds) {
   const [
     conversationId,
@@ -126,8 +157,11 @@ async function conformanceScenario(store, conversationIds) {
     causalActiveConversationId,
     interruptPriorityConversationId,
     ledgerConversationId,
-    archiveConversationId
+    archiveConversationId,
+    seedConversationId
   ] = conversationIds;
+  if (seedConversationId)
+    await seedScenario(store, seedConversationId);
   if (ledgerConversationId)
     await ledgerScenario(store, ledgerConversationId);
   if (archiveConversationId)

package/dist/tool-invoker.js

@@ -1,19 +1,19 @@
 import {
   createToolInvoker
-} from "./index-0ydchz76.js";
-import"./index-0vfdh685.js";
-import"./index-wn9cb82y.js";
+} from "./index-mnm4qp0p.js";
+import"./index-8c3a7m4g.js";
+import"./index-zyvby92n.js";
 import"./index-vsbzgd7b.js";
 import"./index-f9mb610r.js";
-import"./index-r159gjwy.js";
-import"./index-cby4ar3v.js";
-import"./index-7zbps32p.js";
 import"./index-7evdsyez.js";
 import"./index-2bxcmqkb.js";
 import"./index-6k1937bx.js";
 import"./index-0w9abg87.js";
 import"./index-zcgf3gqf.js";
+import"./index-7zbps32p.js";
 import"./index-kzfs85xp.js";
+import"./index-r159gjwy.js";
+import"./index-cby4ar3v.js";
 import"./index-77fekveh.js";
 export {
   createToolInvoker

package/dist/tools/agent.d.ts

@@ -2,6 +2,7 @@ import type { ToolSet } from 'ai';
 import type { ServiceDef } from '../server/types.js';
 import { type ErrorHintFn, type ToolCallHooks, type ToolLifecycle } from './execute.js';
 import { type ToolExtend } from './mount.js';
+import type { AgentToolRegistry } from './registry.js';
 import type { RuntimeToolDefinition } from './runtime-tool.js';
 export interface AgentContext {
     [key: string]: unknown;
@@ -27,6 +28,11 @@ export interface AgentMountConfig {
     errorHint?: ErrorHintFn;
     /** Framework-managed pathless operations mounted beside contract tools. */
     runtimeTools?: readonly RuntimeToolDefinition[];
+    /**
+     * A composed tool registry. Mutually exclusive with `runtimeTools`: one
+     * declaration of the runtime surface, not two lists to reconcile.
+     */
+    registry?: AgentToolRegistry;
 }
 export declare function mountAgent(services: ServiceDef | ServiceDef[], config?: AgentMountConfig): ToolSet;
 //# sourceMappingURL=agent.d.ts.map

package/dist/tools/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/tools/agent.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAwB,OAAO,EAAE,MAAM,IAAI,CAAC;AAGxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,EACL,KAAK,WAAW,EAEhB,KAAK,aAAa,EAClB,KAAK,aAAa,EAEnB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAqC,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAG5D,MAAM,WAAW,YAAY;IAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,qCAAqC;IACrC,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB;;;;OAIG;IACH,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,+EAA+E;IAC/E,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,mEAAmE;IACnE,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;IAC5D,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,gEAAgE;IAChE,SAAS,CAAC,EAAE,WAAW,CAAC;IACxB,2EAA2E;IAC3E,YAAY,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACjD;AAED,wBAAgB,UAAU,CACxB,QAAQ,EAAE,UAAU,GAAG,UAAU,EAAE,EACnC,MAAM,GAAE,gBAAqB,GAC5B,OAAO,CA4ET"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/tools/agent.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAwB,OAAO,EAAE,MAAM,IAAI,CAAC;AAGxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGlD,OAAO,EACL,KAAK,WAAW,EAEhB,KAAK,aAAa,EAClB,KAAK,aAAa,EAGnB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAqC,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAG5D,MAAM,WAAW,YAAY;IAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,qCAAqC;IACrC,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB;;;;OAIG;IACH,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,+EAA+E;IAC/E,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,mEAAmE;IACnE,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;IAC5D,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,gEAAgE;IAChE,SAAS,CAAC,EAAE,WAAW,CAAC;IACxB,2EAA2E;IAC3E,YAAY,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAChD;;;OAGG;IACH,QAAQ,CAAC,EAAE,iBAAiB,CAAC;CAC9B;AAED,wBAAgB,UAAU,CACxB,QAAQ,EAAE,UAAU,GAAG,UAAU,EAAE,EACnC,MAAM,GAAE,gBAAqB,GAC5B,OAAO,CAyGT"}

package/dist/tools/connections/define.d.ts

@@ -0,0 +1,6 @@
+import type { McpClientConnection, McpClientConnectionConfig, OpenApiConnection, OpenApiConnectionConfig } from './types.js';
+/** Define one external MCP server connection. */
+export declare function defineMcpClientConnection(config: McpClientConnectionConfig): McpClientConnection;
+/** Define one external OpenAPI connection. */
+export declare function defineOpenApiConnection(config: OpenApiConnectionConfig): OpenApiConnection;
+//# sourceMappingURL=define.d.ts.map

package/dist/tools/connections/define.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"define.d.ts","sourceRoot":"","sources":["../../../src/tools/connections/define.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,EACxB,MAAM,SAAS,CAAC;AAEjB,iDAAiD;AACjD,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,yBAAyB,GAChC,mBAAmB,CAIrB;AAED,8CAA8C;AAC9C,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,uBAAuB,GAAG,iBAAiB,CAI1F"}

package/dist/tools/connections/errors.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Typed failures of the external-connection surface.
+ *
+ * These are deliberately not `AppError`s: a connection failure is not a
+ * contract error and must not be confused with one by an in-process caller.
+ * The reauthorization signal is distinct because it is recoverable — the
+ * application starts its existing flow — while every other status is terminal
+ * for the call.
+ */
+/** A `401`: the current credential was rejected and must be re-obtained. */
+export declare class ConnectionAuthorizationRequiredError extends Error {
+    readonly connectionName: string;
+    readonly instanceId: string;
+    constructor(connectionName: string, instanceId: string);
+}
+/** Any non-2xx response other than the reauthorization signal. */
+export declare class ConnectionRequestError extends Error {
+    readonly connectionName: string;
+    readonly status: number;
+    readonly body: string;
+    constructor(connectionName: string, status: number, body: string);
+}
+/** A URL the SSRF guard refused before any request left the process. */
+export declare class ConnectionUrlError extends Error {
+    readonly url: string;
+    constructor(message: string, url: string);
+}
+/** The mount would expose more foreign tools than its declared budget. */
+export declare class ConnectionBudgetExceededError extends Error {
+    readonly limit: number;
+    readonly actual: number;
+    constructor(limit: number, actual: number, unit?: string);
+}
+/**
+ * A request exceeded the connection's declared deadline. This is not exported
+ * from the public subexport; it is a typed boundary between the transport and
+ * the caller, so an application can still tell a timeout from a network error.
+ */
+export declare class ConnectionTimeoutError extends Error {
+    readonly connectionName: string;
+    readonly timeoutMs: number;
+    constructor(connectionName: string, timeoutMs: number);
+}
+/** A response exceeded the connection's declared byte ceiling. Internal. */
+export declare class ConnectionResponseTooLargeError extends Error {
+    readonly connectionName: string;
+    readonly maxBytes: number;
+    constructor(connectionName: string, maxBytes: number);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/tools/connections/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/tools/connections/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,4EAA4E;AAC5E,qBAAa,oCAAqC,SAAQ,KAAK;IAC7D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,YAAY,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAKrD;CACF;AAED,kEAAkE;AAClE,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,YAAY,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAM/D;CACF;AAED,wEAAwE;AACxE,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAErB,YAAY,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAIvC;CACF;AAED,0EAA0E;AAC1E,qBAAa,6BAA8B,SAAQ,KAAK;IACtD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,YAAY,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,SAAU,EAKxD;CACF;AAED;;;;GAIG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,YAAY,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAKpD;CACF;AAED,4EAA4E;AAC5E,qBAAa,+BAAgC,SAAQ,KAAK;IACxD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,YAAY,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAKnD;CACF"}

package/dist/tools/connections/http.d.ts

@@ -0,0 +1,3 @@
+/** Redirects require a new host-owned connection declaration. */
+export declare function fetchConnection(target: URL | string, init: RequestInit, allowedHosts: ReadonlySet<string>, connectionName: string): Promise<Response>;
+//# sourceMappingURL=http.d.ts.map

package/dist/tools/connections/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../../src/tools/connections/http.ts"],"names":[],"mappings":"AAGA,iEAAiE;AACjE,wBAAsB,eAAe,CACnC,MAAM,EAAE,GAAG,GAAG,MAAM,EACpB,IAAI,EAAE,WAAW,EACjB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EACjC,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,QAAQ,CAAC,CAYnB"}

package/dist/tools/connections/index.d.ts

@@ -0,0 +1,19 @@
+/**
+ * `stitchkit/tools/connections` — consume external MCP servers and OpenAPI
+ * specs as typed tools.
+ *
+ * This is a server-only subexport of `stitchkit/tools`: a connection pulls in no
+ * peer package into the stable tools import, but mounts its foreign operations
+ * as plain `RuntimeToolDefinition`s, so `mountAgent({ runtimeTools })` runs them
+ * through the same lifecycle, hooks and approval path as our own.
+ *
+ * A connection URL is application configuration, not a trust boundary: every
+ * outbound request is checked against the connection's own host (plus any
+ * explicit `allowHosts`), and credentials are resolved separately for each call.
+ */
+export { defineMcpClientConnection, defineOpenApiConnection } from './define.js';
+export { ConnectionAuthorizationRequiredError, ConnectionBudgetExceededError, ConnectionRequestError, ConnectionUrlError, } from './errors.js';
+export { mountConnections } from './mount.js';
+export type { ConnectionTokenProvider } from './runtime.js';
+export type { ConnectionBudget, ConnectionDefinition, ConnectionMountOptions, McpClientConnection, McpClientConnectionConfig, McpConnectionTransport, McpToolFilter, OpenApiConnection, OpenApiConnectionConfig, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/tools/connections/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/connections/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAC9E,OAAO,EACL,oCAAoC,EACpC,6BAA6B,EAC7B,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,YAAY,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AACzD,YAAY,EACV,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,yBAAyB,EACzB,sBAAsB,EACtB,aAAa,EACb,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,SAAS,CAAC"}