stitchkit 0.88.0 → 0.90.0

package/dist/agent-runtime-harness.d.ts

@@ -1,2 +1,2 @@
-export { type AgentHarnessApprovalDecision, type AgentHarnessControlConnection, type AgentHarnessControlServer, type AgentHarnessControlServerConfig, type AgentHarnessFileLimits, AgentHarnessFileLimitsSchema, type AgentHarnessFileResources, type AgentHarnessFileRoot, AgentHarnessFileRootSchema, type AgentHarnessLimits, AgentHarnessLimitsSchema, type AgentHarnessPendingApproval, type AgentHarnessProfileEvent, AgentHarnessProfileEventSchema, type AgentHarnessResource, type AgentHarnessResourceDiagnostic, AgentHarnessResourceDiagnosticSchema, type AgentHarnessResourceKind, AgentHarnessResourceKindSchema, type AgentHarnessResourceResult, AgentHarnessResourceSchema, createAgentHarnessControlServer, createAgentHarnessFileResources, createHeadlessAgentHarness, type HeadlessAgentHarness, type HeadlessAgentHarnessConfig, type HeadlessAgentModelResolver, } from './agent-runtime/harness.js';
+export { type AgentHarnessApprovalAuthorization, type AgentHarnessApprovalAuthorizationResult, type AgentHarnessApprovalDecision, AgentHarnessApprovalRejectedError, type AgentHarnessApprovalRequest, type AgentHarnessControlConnection, type AgentHarnessControlServer, type AgentHarnessControlServerConfig, type AgentHarnessFileLimits, AgentHarnessFileLimitsSchema, type AgentHarnessFileResources, type AgentHarnessFileRoot, AgentHarnessFileRootSchema, type AgentHarnessLimits, AgentHarnessLimitsSchema, type AgentHarnessPendingApproval, type AgentHarnessProfileEvent, AgentHarnessProfileEventSchema, type AgentHarnessResource, type AgentHarnessResourceDiagnostic, AgentHarnessResourceDiagnosticSchema, type AgentHarnessResourceKind, AgentHarnessResourceKindSchema, type AgentHarnessResourceResult, AgentHarnessResourceSchema, createAgentHarnessControlServer, createAgentHarnessFileResources, createHeadlessAgentHarness, type HeadlessAgentHarness, type HeadlessAgentHarnessConfig, type HeadlessAgentModelResolver, } from './agent-runtime/harness.js';
 //# sourceMappingURL=agent-runtime-harness.d.ts.map

package/dist/agent-runtime-harness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-runtime-harness.d.ts","sourceRoot":"","sources":["../src/agent-runtime-harness.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,KAAK,yBAAyB,EAC9B,KAAK,+BAA+B,EACpC,KAAK,sBAAsB,EAC3B,4BAA4B,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,EACzB,0BAA0B,EAC1B,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,8BAA8B,EAC9B,KAAK,oBAAoB,EACzB,KAAK,8BAA8B,EACnC,oCAAoC,EACpC,KAAK,wBAAwB,EAC7B,8BAA8B,EAC9B,KAAK,0BAA0B,EAC/B,0BAA0B,EAC1B,+BAA+B,EAC/B,+BAA+B,EAC/B,0BAA0B,EAC1B,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,GAChC,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"agent-runtime-harness.d.ts","sourceRoot":"","sources":["../src/agent-runtime-harness.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,iCAAiC,EACtC,KAAK,uCAAuC,EAC5C,KAAK,4BAA4B,EACjC,iCAAiC,EACjC,KAAK,2BAA2B,EAChC,KAAK,6BAA6B,EAClC,KAAK,yBAAyB,EAC9B,KAAK,+BAA+B,EACpC,KAAK,sBAAsB,EAC3B,4BAA4B,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,EACzB,0BAA0B,EAC1B,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,8BAA8B,EAC9B,KAAK,oBAAoB,EACzB,KAAK,8BAA8B,EACnC,oCAAoC,EACpC,KAAK,wBAAwB,EAC7B,8BAA8B,EAC9B,KAAK,0BAA0B,EAC/B,0BAA0B,EAC1B,+BAA+B,EAC/B,+BAA+B,EAC/B,0BAA0B,EAC1B,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,GAChC,MAAM,yBAAyB,CAAC"}

package/dist/agent-runtime-harness.js

@@ -6,34 +6,34 @@ import {
   composeAgentPrompt,
   createAgentRuntime,
   createAgentRuntimeEventSink
-} from "./index-p86mxmpp.js";
+} from "./index-hw2chdvy.js";
 import"./index-p13mwz16.js";
 import"./index-y64k3s0h.js";
 import {
   AgentModelDescriptorSchema
 } from "./index-mqv3b5rh.js";
-import"./index-6krwcdcf.js";
+import"./index-zwkgfq1s.js";
 import"./index-gtj3zc53.js";
 import"./index-wnfk50r0.js";
 import {
   walkContainedFiles
-} from "./index-t7gh5w3v.js";
-import"./index-3xnq72rz.js";
-import {
-  defineRuntimeTool
-} from "./index-kc6h6hg0.js";
-import"./index-wn9cb82y.js";
+} from "./index-bn2cjajt.js";
+import"./index-7rkhw9ec.js";
+import"./index-zyvby92n.js";
 import"./index-vsbzgd7b.js";
 import"./index-f9mb610r.js";
-import"./index-r159gjwy.js";
-import"./index-cby4ar3v.js";
-import"./index-7zbps32p.js";
 import"./index-7evdsyez.js";
 import"./index-2bxcmqkb.js";
 import"./index-6k1937bx.js";
 import"./index-0w9abg87.js";
 import"./index-zcgf3gqf.js";
+import"./index-7zbps32p.js";
 import"./index-kzfs85xp.js";
+import {
+  defineRuntimeTool
+} from "./index-kc6h6hg0.js";
+import"./index-r159gjwy.js";
+import"./index-cby4ar3v.js";
 import"./index-77fekveh.js";
 
 // src/agent-runtime/harness-contract.ts
@@ -485,6 +485,14 @@ function createAgentHarnessControlServer(harness, config = {}) {
 }
 
 // src/agent-runtime/harness.ts
+class AgentHarnessApprovalRejectedError extends Error {
+  reason;
+  constructor(reason) {
+    super(`Approval response rejected: ${reason}`);
+    this.name = "AgentHarnessApprovalRejectedError";
+    this.reason = reason;
+  }
+}
 function activeRunId(snapshot) {
   const active = snapshot.runs.filter((run2) => run2.state === "running" || run2.state === "interrupt_requested");
   if (active.length !== 1) {
@@ -506,6 +514,7 @@ function createHeadlessAgentHarness(config) {
     onProfile,
     onProfileError,
     publish: applicationPublish,
+    blockingPresentation = "local",
     ...runtimeConfig
   } = config;
   const limits = resolveHarnessLimits(inputLimits);
@@ -543,7 +552,15 @@ function createHeadlessAgentHarness(config) {
     entry.emitting = emitting;
     return emitting;
   };
-  const publish = async (event) => {
+  const presentationMessage = (message) => blockingPresentation === "parent" ? {
+    ...message,
+    parts: message.parts.filter((part) => part.type !== "tool-approval-request")
+  } : message;
+  const publish = async (rawEvent) => {
+    let event = rawEvent;
+    if (blockingPresentation === "parent" && (event.type === "assistant-checkpoint" || event.type === "terminal")) {
+      event = { ...event, message: presentationMessage(event.message) };
+    }
     try {
       await applicationPublish?.(event);
     } finally {
@@ -558,7 +575,7 @@ function createHeadlessAgentHarness(config) {
     ...runtimeConfig,
     models,
     publish,
-    prompt: async ({ context, signal, model, snapshot }) => {
+    prompt: async ({ context, signal, model, snapshot, event }) => {
       const loaded = validateHarnessResources(await resources.load({ context, signal, model, snapshot }), limits);
       try {
         await resources.onDiagnostics?.({ context, diagnostics: loaded.diagnostics });
@@ -584,6 +601,7 @@ function createHeadlessAgentHarness(config) {
       return prompt({
         context,
         signal,
+        event,
         budget: await promptBudget({
           context,
           contextWindow: model.descriptor.contextWindow
@@ -627,7 +645,10 @@ function createHeadlessAgentHarness(config) {
   };
   return {
     ...runtime,
-    snapshot: (conversationId) => config.store.loadSnapshot(conversationId),
+    snapshot: async (conversationId) => {
+      const snapshot = await config.store.loadSnapshot(conversationId);
+      return { ...snapshot, messages: snapshot.messages.map(presentationMessage) };
+    },
     subscribe(listener) {
       subscribers.add(listener);
       return () => subscribers.delete(listener);
@@ -638,6 +659,34 @@ function createHeadlessAgentHarness(config) {
       if (pending2.length !== 1) {
         throw new Error("Approval request is missing, stale or already answered");
       }
+      const request = pending2[0];
+      if (!request) {
+        throw new Error("Approval request is missing, stale or already answered");
+      }
+      const authorization = config.authorizeApprovalResponse ? await config.authorizeApprovalResponse({
+        responder: input.context,
+        conversationId: input.conversationId,
+        request: {
+          approvalId: request.approvalId,
+          callId: request.callId,
+          toolName: request.toolName,
+          input: request.input
+        },
+        approved: input.approved
+      }) : { status: "allowed" };
+      if (authorization.status === "rejected") {
+        await runtimeConfig.store.appendEvent({
+          conversationId: input.conversationId,
+          kind: "approval/response-rejected",
+          payload: {
+            approvalId: request.approvalId,
+            callId: request.callId,
+            toolName: request.toolName,
+            reason: authorization.reason
+          }
+        });
+        throw new AgentHarnessApprovalRejectedError(authorization.reason);
+      }
       const ticket = runtime.submit({
         conversationId: input.conversationId,
         idempotencyKey: `tool-approval:${input.approvalId}`,
@@ -674,5 +723,6 @@ export {
   AgentHarnessProfileEventSchema,
   AgentHarnessLimitsSchema,
   AgentHarnessFileRootSchema,
-  AgentHarnessFileLimitsSchema
+  AgentHarnessFileLimitsSchema,
+  AgentHarnessApprovalRejectedError
 };

package/dist/agent-runtime-openrouter.d.ts

@@ -21,18 +21,9 @@ export declare function openRouterProvider(settings: OpenRouterProviderSettings)
 /**
  * Read OpenRouter's token counts and cost out of one SDK step, with provenance.
  *
- * Exported, and that is the point of it existing here at all. The same function
- * has always run inside `openRouterProvider`, which means it was reachable only
- * by building the whole agent runtime — durable store, execution protocol and
- * recovery included. An application that calls `generateText` directly, and only
- * wants an honest number for its own ledger, could not reach it and derived it
- * again; two of them did, and more than half of the two files agree line for
- * line.
- *
- * What is easy to get wrong when deriving it again is not the arithmetic but the
- * provenance: a number the provider reported, a number nobody reported and a
- * zero are three different facts, and a value invented for a missing field is
- * the one that reads as true and is not.
+ * Raw step usage is authoritative: the SDK adapter substitutes zero for some
+ * absent counters. Normalized counters (including aggregate usage without raw)
+ * therefore cannot establish provider-reported provenance. Use each SDK step.
  */
 export declare function normalizeOpenRouterUsage(usage: LanguageModelUsage, providerMetadata: unknown): AgentUsage;
 //# sourceMappingURL=agent-runtime-openrouter.d.ts.map

package/dist/agent-runtime-openrouter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-runtime-openrouter.d.ts","sourceRoot":"","sources":["../src/agent-runtime-openrouter.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,IAAI,CAAC;AAE7C,OAAO,EACL,KAAK,0BAA0B,EAE/B,KAAK,iBAAiB,EAGvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAG1D,YAAY,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAkD9E,MAAM,MAAM,sBAAsB,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAE3F,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,sBAAsB,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAyFD,+FAA+F;AAC/F,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,6BAA6B,GAAG;IAC9E,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACpE,CAyGA;AAED,kFAAkF;AAClF,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,0BAA0B,GACnC,0BAA0B,CAQ5B;AA0CD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,kBAAkB,EACzB,gBAAgB,EAAE,OAAO,GACxB,UAAU,CASZ"}
+{"version":3,"file":"agent-runtime-openrouter.d.ts","sourceRoot":"","sources":["../src/agent-runtime-openrouter.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,IAAI,CAAC;AAE7C,OAAO,EACL,KAAK,0BAA0B,EAE/B,KAAK,iBAAiB,EAGvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAG1D,YAAY,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAkD9E,MAAM,MAAM,sBAAsB,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAE3F,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,sBAAsB,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAyFD,+FAA+F;AAC/F,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,6BAA6B,GAAG;IAC9E,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACpE,CAyGA;AAED,kFAAkF;AAClF,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,0BAA0B,GACnC,0BAA0B,CAQ5B;AA0CD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,kBAAkB,EACzB,gBAAgB,EAAE,OAAO,GACxB,UAAU,CAcZ"}

package/dist/agent-runtime-openrouter.js

@@ -234,10 +234,10 @@ function readUpstreamProvider(metadata) {
   return typeof name === "string" && name.length > 0 ? name : undefined;
 }
 function reported(value) {
-  return value === undefined || !Number.isSafeInteger(value) || value < 0 ? { provenance: "unavailable" } : { value, provenance: "provider-reported" };
+  return typeof value !== "number" || !Number.isSafeInteger(value) || value < 0 ? { provenance: "unavailable" } : { value, provenance: "provider-reported" };
 }
 function reportedUsd(value) {
-  return value === undefined ? { provenance: "unavailable" } : { value, currency: "USD", provenance: "provider-reported" };
+  return value === undefined || !Number.isFinite(value) || value < 0 ? { provenance: "unavailable" } : { value, currency: "USD", provenance: "provider-reported" };
 }
 function readCost(metadata) {
   if (!isRecord(metadata))
@@ -251,12 +251,15 @@ function readCost(metadata) {
   return isRecord(usage) && typeof usage.cost === "number" && usage.cost >= 0 ? usage.cost : undefined;
 }
 function normalizeOpenRouterUsage(usage, providerMetadata) {
+  const raw = isRecord(usage.raw) ? usage.raw : {};
+  const prompt = isRecord(raw.prompt_tokens_details) ? raw.prompt_tokens_details : {};
+  const completion = isRecord(raw.completion_tokens_details) ? raw.completion_tokens_details : {};
   return {
-    inputTokens: reported(usage.inputTokens),
-    outputTokens: reported(usage.outputTokens),
-    reasoningTokens: reported(usage.outputTokenDetails.reasoningTokens),
-    cacheReadTokens: reported(usage.inputTokenDetails.cacheReadTokens),
-    cacheWriteTokens: reported(usage.inputTokenDetails.cacheWriteTokens),
+    inputTokens: reported(raw.prompt_tokens),
+    outputTokens: reported(raw.completion_tokens),
+    reasoningTokens: reported(completion.reasoning_tokens),
+    cacheReadTokens: reported(prompt.cached_tokens),
+    cacheWriteTokens: reported(prompt.cache_write_tokens),
     cost: reportedUsd(readCost(providerMetadata))
   };
 }

package/dist/agent-runtime-sandbox.d.ts

@@ -0,0 +1,5 @@
+export { type BubblewrapSandboxConfig, createBubblewrapSandboxBackend, } from './agent-runtime/sandbox-bubblewrap.js';
+export { createSandboxCodingTools, type SandboxCodingBinding, } from './agent-runtime/sandbox-coding.js';
+export { type SandboxBackend, type SandboxCommand, SandboxCommandSchema, type SandboxCreateInput, type SandboxDriver, SandboxError, type SandboxHandle, type SandboxNetworkPolicy, SandboxNetworkPolicySchema, type SandboxPrewarmInput, type SandboxProcess, type SandboxRunOptions, type SandboxSession, type SandboxState, SandboxStateSchema, } from './agent-runtime/sandbox-contract.js';
+export { createSandboxSession } from './agent-runtime/sandbox-session.js';
+//# sourceMappingURL=agent-runtime-sandbox.d.ts.map

package/dist/agent-runtime-sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-runtime-sandbox.d.ts","sourceRoot":"","sources":["../src/agent-runtime-sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,uBAAuB,EAC5B,8BAA8B,GAC/B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,wBAAwB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,oBAAoB,EACpB,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,YAAY,EACZ,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,0BAA0B,EAC1B,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,kBAAkB,GACnB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC"}