stitchkit 0.90.0 → 0.90.2

package/dist/index-gte38nbm.js

@@ -0,0 +1,101 @@
+import {
+  AppError,
+  STITCH_ERROR_STATUS
+} from "./index-scs3f1eg.js";
+
+// src/agent-runtime/sandbox.ts
+import { z } from "zod";
+var AgentSandboxRestrictionSchema = z.enum([
+  "network-denied",
+  "write-contained",
+  "secrets-hidden",
+  "process-contained"
+]);
+var AgentSandboxGradeSchema = z.discriminatedUnion("grade", [
+  z.object({ grade: z.literal("full"), restrictions: z.array(AgentSandboxRestrictionSchema) }).strict(),
+  z.object({
+    grade: z.literal("partial"),
+    restrictions: z.array(AgentSandboxRestrictionSchema),
+    gaps: z.array(AgentSandboxRestrictionSchema)
+  }).strict(),
+  z.object({ grade: z.literal("unavailable"), reason: z.string().min(1) }).strict()
+]);
+var probes = new WeakMap;
+function probeAgentProcessSandbox(sandbox, options = {}) {
+  if (options.refresh)
+    probes.delete(sandbox);
+  const present = probes.get(sandbox);
+  if (present)
+    return present;
+  const pending = Promise.resolve(sandbox.probe()).then((grade) => AgentSandboxGradeSchema.parse(grade));
+  probes.set(sandbox, pending);
+  return pending;
+}
+function missingSandboxRestrictions(grade, required) {
+  if (grade.grade === "unavailable")
+    return required;
+  const present = new Set(grade.restrictions);
+  return required.filter((restriction) => !present.has(restriction));
+}
+async function recordAgentSandboxProbe(input) {
+  const grade = await probeAgentProcessSandbox(input.sandbox);
+  const missing = missingSandboxRestrictions(grade, input.required);
+  await input.store.appendEvent({
+    conversationId: input.conversationId,
+    kind: "sandbox/probed",
+    payload: {
+      result: grade,
+      required: [...input.required],
+      missing: [...missing]
+    }
+  });
+  return grade;
+}
+
+// src/agent-runtime/coding-tool-refusals.ts
+function codingRefusal(code, message, options = {}) {
+  throw new AppError(code, message, STITCH_ERROR_STATUS[code], { message, ...options.details }, options.hint);
+}
+function codingPathRefusal(code, message, path, options = {}) {
+  codingRefusal(code, message, {
+    details: { path, ...options.details },
+    ...options.hint && { hint: options.hint }
+  });
+}
+function refuseMissingCodingPath(error, relative) {
+  const code = error?.code;
+  if (error instanceof Error && error.message.includes("is not a regular file")) {
+    codingPathRefusal("BAD_REQUEST", "This path is not a regular file", relative, {
+      hint: "Use list_directory to see what is here."
+    });
+  }
+  if (code === "ENOENT") {
+    codingPathRefusal("NOT_FOUND", "This path does not exist", relative, {
+      hint: "Use list_directory or glob to find the right path."
+    });
+  }
+  if (code === "ENOTDIR") {
+    codingPathRefusal("BAD_REQUEST", "A segment of this path is not a directory", relative, {
+      hint: "Check the path with list_directory."
+    });
+  }
+  if (code === "ELOOP") {
+    codingPathRefusal("FORBIDDEN", "This path is a symlink, which is not followed", relative, {
+      hint: "Read or write the target directly, by its own workspace-relative path."
+    });
+  }
+  if (code === "EISDIR") {
+    codingPathRefusal("BAD_REQUEST", "This path is not a regular file", relative, {
+      hint: "Use list_directory to see what is here."
+    });
+  }
+  throw error;
+}
+function refuseUnknownSpillReference(reference) {
+  codingRefusal("SPILL_REFERENCE_UNKNOWN", `No spilled output is held under \`${reference}\``, {
+    details: { reference },
+    hint: "Use the reference returned by the command that spilled its output, not a session or call id."
+  });
+}
+
+export { AgentSandboxRestrictionSchema, AgentSandboxGradeSchema, probeAgentProcessSandbox, missingSandboxRestrictions, recordAgentSandboxProbe, codingRefusal, codingPathRefusal, refuseMissingCodingPath, refuseUnknownSpillReference };

package/dist/{index-cp20z0n6.js → index-j7q0xj6d.js}

@@ -12,14 +12,16 @@ import {
   writeContainedFile
 } from "./index-bn2cjajt.js";
 import {
+  codingPathRefusal,
+  codingRefusal,
   missingSandboxRestrictions,
-  probeAgentProcessSandbox
-} from "./index-gskm1k5a.js";
+  probeAgentProcessSandbox,
+  refuseMissingCodingPath
+} from "./index-gte38nbm.js";
 import {
-  AppError,
   conflict,
   forbidden
-} from "./index-0w9abg87.js";
+} from "./index-scs3f1eg.js";
 import {
   defineRuntimeTool
 } from "./index-kc6h6hg0.js";
@@ -178,56 +180,6 @@ import { realpath as realpath2 } from "node:fs/promises";
 // src/agent-runtime/coding-tool-paths.ts
 import { lstat, realpath } from "node:fs/promises";
 import path from "node:path";
-
-// src/agent-runtime/coding-tool-refusals.ts
-var REFUSAL_STATUS = {
-  BAD_REQUEST: 400,
-  FORBIDDEN: 403,
-  NOT_FOUND: 404,
-  CONFLICT: 409,
-  SANDBOX_UNAVAILABLE: 503,
-  SANDBOX_INSUFFICIENT: 503
-};
-function codingRefusal(code, message, options = {}) {
-  throw new AppError(code, message, REFUSAL_STATUS[code], { message, ...options.details }, options.hint);
-}
-function codingPathRefusal(code, message, path, options = {}) {
-  codingRefusal(code, message, {
-    details: { path, ...options.details },
-    ...options.hint && { hint: options.hint }
-  });
-}
-function refuseMissingCodingPath(error, relative) {
-  const code = error?.code;
-  if (error instanceof Error && error.message.includes("is not a regular file")) {
-    codingPathRefusal("BAD_REQUEST", "This path is not a regular file", relative, {
-      hint: "Use list_directory to see what is here."
-    });
-  }
-  if (code === "ENOENT") {
-    codingPathRefusal("NOT_FOUND", "This path does not exist", relative, {
-      hint: "Use list_directory or glob to find the right path."
-    });
-  }
-  if (code === "ENOTDIR") {
-    codingPathRefusal("BAD_REQUEST", "A segment of this path is not a directory", relative, {
-      hint: "Check the path with list_directory."
-    });
-  }
-  if (code === "ELOOP") {
-    codingPathRefusal("FORBIDDEN", "This path is a symlink, which is not followed", relative, {
-      hint: "Read or write the target directly, by its own workspace-relative path."
-    });
-  }
-  if (code === "EISDIR") {
-    codingPathRefusal("BAD_REQUEST", "This path is not a regular file", relative, {
-      hint: "Use list_directory to see what is here."
-    });
-  }
-  throw error;
-}
-
-// src/agent-runtime/coding-tool-paths.ts
 function within(root, target) {
   const relative = path.relative(root, target);
   return relative === "" || !relative.startsWith(`..${path.sep}`) && relative !== ".." && !path.isAbsolute(relative);
@@ -1348,4 +1300,4 @@ function createAgentCodingTools(config) {
   ];
 }
 
-export { codingRefusal, AgentCodingToolLimitsSchema, AgentCodingToolAuthorizationSchema, AgentCodingToolPathAuthorizationSchema, createAgentCodingTools };
+export { AgentCodingToolLimitsSchema, AgentCodingToolAuthorizationSchema, AgentCodingToolPathAuthorizationSchema, createAgentCodingTools };

package/dist/{index-2bxcmqkb.js → index-kazec06k.js}

@@ -2,7 +2,7 @@ import {
   AppError,
   STITCH_ERROR_STATUS,
   isStitchErrorCode
-} from "./index-0w9abg87.js";
+} from "./index-scs3f1eg.js";
 import {
   isUnsafeKey
 } from "./index-kzfs85xp.js";

package/dist/{index-0w9abg87.js → index-scs3f1eg.js}

@@ -77,6 +77,9 @@ var STITCH_ERROR_STATUS = {
   STREAM_FRAME_TOO_LARGE: 500,
   STREAM_TERMINAL_MISSING: 500,
   STREAM_LIFETIME_EXCEEDED: 408,
+  SANDBOX_UNAVAILABLE: 503,
+  SANDBOX_INSUFFICIENT: 503,
+  SPILL_REFERENCE_UNKNOWN: 404,
   INTERNAL_SERVER_ERROR: 500
 };
 function isStitchErrorCode(code) {

package/dist/{index-31jw8fjq.js → index-wb15909q.js}

@@ -1,6 +1,6 @@
 import {
   contractToolMountable
-} from "./index-8c3a7m4g.js";
+} from "./index-2hrfpw2c.js";
 import {
   runtimeToolMountable
 } from "./index-kc6h6hg0.js";

package/dist/{index-p18f59zy.js → index-z78bjcxj.js}

@@ -1,7 +1,7 @@
 import {
   mergeMeta,
   resolveRouteParamsSchema
-} from "./index-2bxcmqkb.js";
+} from "./index-kazec06k.js";
 import {
   isUnsafeKey
 } from "./index-kzfs85xp.js";

package/dist/{index-t7fkyxcr.js → index-zkcqhxx8.js}

@@ -11,7 +11,7 @@ import {
 } from "./index-3z73fh2c.js";
 import {
   AppError
-} from "./index-0w9abg87.js";
+} from "./index-scs3f1eg.js";
 
 // src/application/kernel.ts
 import { z } from "zod";

package/dist/index.js

@@ -15,7 +15,7 @@ import {
   createUrlBuilder,
   createUrlBuilders,
   parseNDJSON
-} from "./index-27gm3d6g.js";
+} from "./index-6q3zjwaz.js";
 import {
   REALTIME_REJECTION_KEY,
   asRealtimeRejection,
@@ -23,7 +23,7 @@ import {
   isModuleNotFound,
   parseRealtimeRequestAcknowledgement,
   parseRealtimeRequestArguments
-} from "./index-apn8repm.js";
+} from "./index-7gqx71yd.js";
 import {
   RealtimeRequestDisconnectedError,
   RealtimeRequestInvalidAcknowledgementError,
@@ -34,7 +34,7 @@ import {
 } from "./index-2qzskm8h.js";
 import {
   parseSSE
-} from "./index-qmgs7y68.js";
+} from "./index-1txvygak.js";
 import {
   LiveStateControllerStatusSchema,
   LiveStatePhaseSchema,
@@ -49,7 +49,7 @@ import {
 import {
   formatZodError,
   zodIssues
-} from "./index-7evdsyez.js";
+} from "./index-2hryh65w.js";
 import {
   ALL_TRANSPORTS,
   ContractStreamFrameSchema,
@@ -60,7 +60,7 @@ import {
   defineErrors,
   encodeCursor,
   paginatedSchema
-} from "./index-2bxcmqkb.js";
+} from "./index-kazec06k.js";
 import {
   ManagedFilePathSchema,
   ManagedFileRefSchema
@@ -76,7 +76,7 @@ import {
   notFound,
   rateLimited,
   unauthorized
-} from "./index-0w9abg87.js";
+} from "./index-scs3f1eg.js";
 import {
   childSpan,
   createTraceContext,

package/dist/node.js

@@ -5,7 +5,7 @@ import {
   createHandler,
   createSocketIOServer,
   createUnixClientTransport
-} from "./index-vchzar7e.js";
+} from "./index-db51n3xr.js";
 import"./index-y91ry9h2.js";
 import {
   ShutdownOptionsSchema,
@@ -14,7 +14,7 @@ import {
   ShutdownStatusSchema,
   createServerLifecycle
 } from "./index-3z73fh2c.js";
-import"./index-apn8repm.js";
+import"./index-7gqx71yd.js";
 import"./index-2qzskm8h.js";
 import {
   createImplement,
@@ -24,11 +24,11 @@ import {
   createScopedImplementRegistry,
   implement,
   implementRegistry
-} from "./index-p18f59zy.js";
+} from "./index-z78bjcxj.js";
 import"./index-vsbzgd7b.js";
 import"./index-f9mb610r.js";
-import"./index-7evdsyez.js";
-import"./index-2bxcmqkb.js";
+import"./index-2hryh65w.js";
+import"./index-kazec06k.js";
 import"./index-6k1937bx.js";
 import {
   AppError,
@@ -39,7 +39,7 @@ import {
   notFound,
   rateLimited,
   unauthorized
-} from "./index-0w9abg87.js";
+} from "./index-scs3f1eg.js";
 import"./index-zcgf3gqf.js";
 import"./index-kzfs85xp.js";
 import"./index-77fekveh.js";

package/dist/observability/index.js

@@ -27,10 +27,10 @@ import {
 import"../index-f9mb610r.js";
 import {
   recordedErrorMessage
-} from "../index-7evdsyez.js";
-import"../index-2bxcmqkb.js";
+} from "../index-2hryh65w.js";
+import"../index-kazec06k.js";
 import"../index-6k1937bx.js";
-import"../index-0w9abg87.js";
+import"../index-scs3f1eg.js";
 import {
   childSpan,
   createTraceContext,

package/dist/primitives.js

@@ -1,8 +1,8 @@
-import"./index-2bxcmqkb.js";
+import"./index-kazec06k.js";
 import {
   ManagedFileRefSchema
 } from "./index-6k1937bx.js";
-import"./index-0w9abg87.js";
+import"./index-scs3f1eg.js";
 import"./index-kzfs85xp.js";
 import"./index-77fekveh.js";
 

package/dist/remote.js

@@ -1,19 +1,19 @@
 import {
   createClient
-} from "./index-27gm3d6g.js";
-import"./index-qmgs7y68.js";
+} from "./index-6q3zjwaz.js";
+import"./index-1txvygak.js";
 import {
   ApiError
 } from "./index-3xwxfj4z.js";
-import"./index-7evdsyez.js";
+import"./index-2hryh65w.js";
 import {
   mergeMeta,
   resolveRouteParamsSchema
-} from "./index-2bxcmqkb.js";
+} from "./index-kazec06k.js";
 import"./index-6k1937bx.js";
 import {
   AppError
-} from "./index-0w9abg87.js";
+} from "./index-scs3f1eg.js";
 import"./index-zcgf3gqf.js";
 import"./index-kzfs85xp.js";
 import {

package/dist/server/index.js

@@ -13,7 +13,7 @@ import {
   sseRoute,
   streamingRoute,
   webSocketLane
-} from "../index-vchzar7e.js";
+} from "../index-db51n3xr.js";
 import"../index-y91ry9h2.js";
 import {
   withDeadline
@@ -25,13 +25,13 @@ import {
   ShutdownStatusSchema,
   createServerLifecycle
 } from "../index-3z73fh2c.js";
-import"../index-apn8repm.js";
+import"../index-7gqx71yd.js";
 import"../index-2qzskm8h.js";
 import {
   inputIsQuery,
   parseSSE,
   streamSSE
-} from "../index-qmgs7y68.js";
+} from "../index-1txvygak.js";
 import {
   composeAuthHooks,
   createAuthHook,
@@ -45,7 +45,7 @@ import {
   signJwt,
   verifyJwt,
   verifyPkce
-} from "../index-90d7h2cr.js";
+} from "../index-bg8ypxzn.js";
 import {
   DEFAULT_CORS_ALLOW_HEADERS,
   DEFAULT_CORS_EXPOSE_HEADERS,
@@ -59,7 +59,7 @@ import {
   defineMultipartStream,
   implement,
   implementRegistry
-} from "../index-p18f59zy.js";
+} from "../index-z78bjcxj.js";
 import {
   isWithinDir,
   realPathWithinDir
@@ -80,12 +80,12 @@ import {
   formatZodError,
   normalizeError,
   zodIssues
-} from "../index-7evdsyez.js";
+} from "../index-2hryh65w.js";
 import {
   DEFAULT_CONTRACT_STREAM_FRAME_BYTES,
   joinRoutePath,
   parseTrailingWildcard
-} from "../index-2bxcmqkb.js";
+} from "../index-kazec06k.js";
 import"../index-6k1937bx.js";
 import {
   AppError,
@@ -98,7 +98,7 @@ import {
   notFound,
   rateLimited,
   unauthorized
-} from "../index-0w9abg87.js";
+} from "../index-scs3f1eg.js";
 import"../index-zcgf3gqf.js";
 import"../index-kzfs85xp.js";
 import {

package/dist/testing.js

@@ -1,6 +1,6 @@
 import {
   createApplication
-} from "./index-t7fkyxcr.js";
+} from "./index-zkcqhxx8.js";
 import"./index-3gye9wzb.js";
 import"./index-2k4yrqkc.js";
 import"./index-3z73fh2c.js";
@@ -28,20 +28,20 @@ import {
 import {
   createClient,
   createClients
-} from "./index-27gm3d6g.js";
+} from "./index-6q3zjwaz.js";
 import {
   RealtimeRequestDisconnectedError,
   RealtimeRequestInvalidAcknowledgementError,
   RealtimeRequestTimeoutError
 } from "./index-2qzskm8h.js";
-import"./index-qmgs7y68.js";
+import"./index-1txvygak.js";
 import"./index-3xwxfj4z.js";
-import"./index-7evdsyez.js";
+import"./index-2hryh65w.js";
 import {
   joinRoutePath
-} from "./index-2bxcmqkb.js";
+} from "./index-kazec06k.js";
 import"./index-6k1937bx.js";
-import"./index-0w9abg87.js";
+import"./index-scs3f1eg.js";
 import"./index-zcgf3gqf.js";
 import"./index-kzfs85xp.js";
 import {

package/dist/tool-invoker.js

@@ -1,14 +1,14 @@
 import {
   createToolInvoker
-} from "./index-mnm4qp0p.js";
-import"./index-8c3a7m4g.js";
-import"./index-zyvby92n.js";
+} from "./index-79hb1wyh.js";
+import"./index-2hrfpw2c.js";
+import"./index-44ht2790.js";
 import"./index-vsbzgd7b.js";
 import"./index-f9mb610r.js";
-import"./index-7evdsyez.js";
-import"./index-2bxcmqkb.js";
+import"./index-2hryh65w.js";
+import"./index-kazec06k.js";
 import"./index-6k1937bx.js";
-import"./index-0w9abg87.js";
+import"./index-scs3f1eg.js";
 import"./index-zcgf3gqf.js";
 import"./index-7zbps32p.js";
 import"./index-kzfs85xp.js";

package/dist/tools.js

@@ -4,7 +4,7 @@ import {
 import {
   signJwt,
   verifyPkce
-} from "./index-90d7h2cr.js";
+} from "./index-bg8ypxzn.js";
 import {
   DEFAULT_CORS_ALLOW_HEADERS,
   DEFAULT_PROCESS_SIGNALS,
@@ -13,7 +13,7 @@ import {
   guardSignalCallback,
   mediaTypeEssence,
   reportSignalError
-} from "./index-p18f59zy.js";
+} from "./index-z78bjcxj.js";
 import {
   redact
 } from "./index-xbppf54a.js";
@@ -21,7 +21,7 @@ import {
   buildToolManifest,
   describeToolCatalog,
   mountAgent
-} from "./index-q3ve2d1k.js";
+} from "./index-gbqjt8jz.js";
 import"./index-7rkhw9ec.js";
 import {
   argumentsDigest
@@ -37,7 +37,7 @@ import {
 } from "./index-4fpa9dy2.js";
 import {
   createToolInvoker
-} from "./index-mnm4qp0p.js";
+} from "./index-79hb1wyh.js";
 import {
   WaitTimeoutError,
   createCli,
@@ -46,22 +46,22 @@ import {
   fetchPinnedDocument,
   readCapped,
   runWaitOperation
-} from "./index-7601qfg1.js";
+} from "./index-8dph3pw6.js";
 import"./index-sbdmyz75.js";
 import {
   collectToolSurface
-} from "./index-31jw8fjq.js";
+} from "./index-wb15909q.js";
 import {
   collectTools,
   createToolRunner,
   formatToolError
-} from "./index-8c3a7m4g.js";
+} from "./index-2hrfpw2c.js";
 import {
   ToolExecutionControlError,
   executeToolMethod,
   isToolExecutionControlError,
   toolResultFromError
-} from "./index-zyvby92n.js";
+} from "./index-44ht2790.js";
 import {
   getRequestContext,
   getTraceId,
@@ -70,10 +70,10 @@ import {
 import"./index-f9mb610r.js";
 import {
   normalizeError
-} from "./index-7evdsyez.js";
+} from "./index-2hryh65w.js";
 import {
   defineContract
-} from "./index-2bxcmqkb.js";
+} from "./index-kazec06k.js";
 import {
   ManagedFilePathSchema,
   ManagedFileRefSchema
@@ -81,7 +81,7 @@ import {
 import {
   AppError,
   STITCH_ERROR_STATUS
-} from "./index-0w9abg87.js";
+} from "./index-scs3f1eg.js";
 import {
   resolvePropagationContext
 } from "./index-zcgf3gqf.js";

package/dist/tracking.js

@@ -3,9 +3,9 @@ import {
 } from "./index-3xwxfj4z.js";
 import {
   defineContract
-} from "./index-2bxcmqkb.js";
+} from "./index-kazec06k.js";
 import"./index-6k1937bx.js";
-import"./index-0w9abg87.js";
+import"./index-scs3f1eg.js";
 import"./index-zcgf3gqf.js";
 import"./index-kzfs85xp.js";
 import"./index-77fekveh.js";

package/llms-full.txt

@@ -4765,8 +4765,11 @@ authorization payload, so no directory is created before a host approves it.
 
 **Every ordinary outcome is a refusal a model can act on** — a missing file is `NOT_FOUND`, an
 existing file without `overwrite` is `CONFLICT`, an ambiguous snippet is `CONFLICT` carrying its
-occurrence count, a path outside the root is `FORBIDDEN` — each with a `hint` naming the next move.
+occurrence count, a path outside the root is `FORBIDDEN`, an unknown spilled-output reference is
+`SPILL_REFERENCE_UNKNOWN` — each with a `hint` naming the next move.
 Host-level causes stay scrubbed to `INTERNAL_SERVER_ERROR` and name nothing outside the workspace.
+Every refusal code is a member of `STITCH_ERROR_STATUS`, so its status survives an envelope that
+crosses a process boundary and is rebuilt from the wire.
 → ADR 0139
 
 `list_directory` marks excluded directories rather than hiding them, and `glob` reports
@@ -5032,7 +5035,11 @@ chat messages.
 `createSqliteAgentSpillStore` persists oversized output separately and records
 its locator, hash and lifecycle in the ledger. `read_output` and
 `search_output` re-run both locator authorization and the originating tool
-authorization before reading bytes. `createSqliteAgentEventSearch` returns the
+authorization before reading bytes. A reference the store does not hold is a
+refusal like any other — `SPILL_REFERENCE_UNKNOWN` / 404, naming the reference
+and pointing at the one the spilling command returned. The lookup is scoped by
+conversation, so a reference belonging to another conversation is absent rather
+than forbidden, and the refusal cannot tell a model that it exists elsewhere. `createSqliteAgentEventSearch` returns the
 exact conversation and event sequence; cross-conversation results are denied
 unless `authorizeConversation` approves each target.
 `createAgentEventSearchTools` supplies `session_search`, `session_trace` and
@@ -9531,7 +9538,10 @@ core never models them (ADR 0002). But stitchkit itself emits a set of its own:
 `FILE_INSPECTION_REJECTED`, `FILE_TOO_LARGE`, `FILE_EXISTS`,
 `REALTIME_CONTRACT_VIOLATION`, `APPLICATION_NOT_ACCEPTING`, `WAIT_TIMEOUT`,
 `WAIT_FAILED`, `DOWNLOAD_NOT_FOUND`, `VIEW_HTTP_ERROR`,
-`OPERATION_NOT_SUCCEEDED`, `INTERNAL_SERVER_ERROR` — a set that grows in
+`OPERATION_NOT_SUCCEEDED`, `STREAM_ITEM_INVALID`, `STREAM_FRAME_TOO_LARGE`,
+`STREAM_TERMINAL_MISSING`, `STREAM_LIFETIME_EXCEEDED`,
+`GRAMMY_WEBHOOK_NOT_ACCEPTING`, `SANDBOX_UNAVAILABLE`, `SANDBOX_INSUFFICIENT`,
+`SPILL_REFERENCE_UNKNOWN`, `INTERNAL_SERVER_ERROR` — a set that grows in
 ordinary releases, each addition named in the changelog. They are
 published as **`STITCH_ERROR_STATUS`** (the `code → status` map) and
 **`StitchErrorCode`** (its `keyof`), with **`isStitchErrorCode()`** (→ ADR 0026).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stitchkit",
-  "version": "0.90.0",
+  "version": "0.90.2",
   "description": "Contract-first backend framework — one defineContract() into an HTTP API, MCP tools, AI-agent tools and a typed client. Bun and Node.",
   "keywords": [
     "bun",