stitchkit 0.90.3 → 0.90.5

package/CHANGELOG.md

@@ -15,6 +15,148 @@ additive**; the first breaking change landed in 0.10.0. Grep the file for
 
 ## [Unreleased]
 
+## [0.90.5] — 2026-09-16
+
+Three gaps a consuming project found on the first live surface after adopting
+0.90.4 — each one a place where the framework handed over parts of the job and
+kept the composition for itself.
+
+### Fixed
+
+- **A connection-mounted command on the CLI prints the answer, not the MCP
+  envelope.** `tools/call` returns `{ content: [...], structuredContent? }`, and
+  an agent mount needs exactly that — the parts are what a model is shown. The
+  CLI is different in kind, because the handler's value is what gets printed,
+  piped and aggregated. Handed the envelope, the first real command answered
+  `no record carries the field "status" — available: text, type`: it was
+  grouping the content parts. `--json` had the same defect one layer down, with
+  the answer a JSON *string* inside `content[0].text`, so every consumer
+  unwrapped before anything else worked. The CLI transport now unwraps, and only
+  it: `structuredContent` when the server sent one, a lone text part when it
+  parses as JSON, its text when it does not. Several parts, an image or audio
+  pass through whole — picking one of many would be inventing an answer.
+
+- **A remote tool's refusal keeps its code and details.** `mountConnections` ended
+  a failed `tools/call` by throwing a one-sentence `Error` and discarding the
+  result. Three things went with it: the code, so `exitCodes` had nothing to map
+  and "not found" and "no rights" both exited `1` — the per-class exit codes the
+  CLI surface exists to provide could not work over a connection at all; the
+  message the operator needed; and the error's own class, because a plain `Error`
+  is an *unexpected* error to the runner, which printed a code frame of the
+  minified framework bundle before the JSON failure and then scrubbed the whole
+  thing to `INTERNAL_SERVER_ERROR`. A structured `{ error, details }` body is now
+  relayed as the contract error it is, on every transport — losing a code is
+  missing information, not a presentation choice. A refusal without one fails as
+  `UPSTREAM_TOOL_ERROR` carrying what the server did send; the status is 502
+  either way, because whatever the code says the failure happened upstream.
+
+### Added
+
+- **`--sort <field>` and `--ascending` — the n largest *records*.** 0.90.4 gave
+  `--top` to groups and left "the five biggest, as a table" with no expression,
+  because `--table` took neither `--by` nor `--top`. Two readings of `--top`
+  would have been exactly the ambiguity that release removed from `--by`, so
+  ordering gets its own word: **`--by` groups, `--sort` orders**, and `--top`
+  keeps one meaning throughout — the n leading entries of the view that was
+  asked for. `--table` and `--sort` describe the same view and therefore
+  compose: `--top 5 --sort messages --table id,messages`. `--sort` without
+  `--table` returns the ordered records as JSON. A record carrying no value for
+  the sort field stays **last in both directions**: it is not the smallest, it
+  is not on the scale. `--sort` together with `--by`, `--count-by` or `--sum` is
+  refused rather than given a second meaning.
+- **`--help <substring>` — a narrower question than "all of them".** On a
+  discovered surface `--help` is the only way to learn what exists, and that can
+  be two hundred commands and 230 lines: at that size the list stops being an
+  answer, scrolling past a person and costing an agent the same context an
+  unfiltered result would. The filter matches a command's name *or* its
+  description — the word someone knows is often in the sentence rather than the
+  name — and the heading says how many of the total matched. No match exits with
+  whatever `NOT_FOUND` maps to rather than succeeding over an empty list, because
+  `0` there reads as "there are none", a different statement from "none of
+  these". `-h <text>`, `help <text>` and `--help=<text>` are the same question;
+  bare `--help` is byte-for-byte unchanged, and `--help=false` keeps its meaning
+  as the reserved boolean's negation.
+- **`renderCliInstaller` renders every published target in one script.** Omit
+  `asset` and the script selects by `uname` at run time, mapping `x86_64` →
+  `x64` and `aarch64` → `arm64` itself, and naming an unpublished combination
+  with what *is* published beside it. Passing one `asset` still pins one target.
+  That dispatch was the last hand-written piece of the install path, and it is
+  the same table every publisher writes from memory. It still parses no JSON.
+
+## [0.90.4] — 2026-09-16
+
+### Added
+
+- **Aggregate views on the CLI: `--count-by`, `--sum`, `--top`, `--table`.** The
+  CLI's audience is agents and scripts, which is why output is JSON — but
+  answering "how many per status" by shipping the whole collection is a separate
+  decision, and an expensive one. Measured on a live server: a 98-record listing
+  is 34 750 characters of an agent's context window; `--count-by status` is about
+  ninety. `| jq` cannot recover that, because the bytes have already been read
+  into the conversation by the time the pipe sees them. `--by` names the grouping
+  field in every form it appears in; groups come back largest first, so `--top`
+  is a defined slice. A field no record carries is an argument error naming the
+  fields that exist, never a silent empty group, and an aggregate needs a
+  collection — over a scalar it is refused rather than guessed. Without a view
+  flag the emitted bytes are unchanged, and the flags never reach a tool
+  argument.
+- **`createCliProfileStore` — named credential profiles that are never
+  substituted.** A CLI that talks to more than one deployment picks an
+  environment by name, and the convenient implementation of that is the unsafe
+  one: *the named profile does not exist, but exactly one is configured — use
+  it.* It is correct while a single profile exists and a wrong-environment
+  command the day a second appears. So a name given and not found is a refusal
+  that names the path and how to create it; substitution survives only where no
+  name was given and exactly one profile exists, and it is announced on stderr.
+  Files are `0600` in a `0700` directory, and a profile other users can read is
+  refused with the `chmod` that fixes it.
+- **CLI distribution and self-update.** A build manifest schema
+  (`CliBuildManifestSchema`), an installer generated from it
+  (`renderCliInstaller`), a bounded update check (`checkCliUpdate`) and a
+  verified atomic replace (`applyCliUpdate`). The installer parses no JSON — a
+  `curl … | sh` machine has no `jq`, so the URL and digest are substituted
+  server-side. The digest covers the **decompressed** bytes, because those are
+  what will be executed. The replace is a rename inside the target's own
+  directory, so an interrupted download can never leave a half-written
+  executable on a PATH. `assertCliPublishable` refuses republishing one version
+  from a different commit, and the check has four answers — `skipped`,
+  `current`, `outdated`, `unknown` — because "could not ask" is not "up to
+  date". Checking never replaces anything by itself. → ADR 0186
+- **`transports` on a connection — discovered tools as CLI commands.**
+  `mountConnections` and `createCli` already composed into a CLI whose surface is
+  the one the server has right now rather than the one the binary was compiled
+  against, except that discovered tools were filtered out of the CLI projection
+  with no declarative way in. Naming `transports: ['CLI']` on a connection makes
+  that server's tools commands; a connection without it still contributes
+  nothing, so exposure stays explicit.
+- **`coerceJsonArgs`, `routeCliArgv`, `extractCliGlobalOptions` and
+  `CliArgumentError` are exported from `stitchkit/cli`.** `parseCliArgs`
+  deliberately leaves array and object values as strings for the pass that runs
+  next; a consumer that parses argv and sends the call itself needs both halves,
+  and reaching for the `stitchkit/tools` barrel to get one function pulls the MCP
+  and AI peers into a binary this entrypoint is careful to avoid.
+
+### Fixed
+
+- **A stitchkit MCP surface is readable by the stitchkit MCP client again.**
+  `mountConnections` threw `Reference not found:
+  #/definitions/input/definitions/__schema0` against a server that is itself
+  built on stitchkit, and on one real surface of 205 tools five carried such a
+  reference — enough to lose the whole connection, because the mount was
+  all-or-nothing. Two defects underneath. The served document declared the
+  2020-12 dialect (the SDK stamps it) while using draft-07's `definitions`
+  keyword, so any reader that registers subschemas from the keyword its dialect
+  names found nothing to resolve against; MCP metadata now moves to `$defs` and
+  carries its pointers with it. And definitions were nested one level deeper than
+  a reader looks, because namespacing wrapped each schema instead of prefixing
+  its definition names; they are hoisted to the document root now, `allOf`
+  merges included. The client also no longer believes a contradicted stamp, which
+  is how it reaches every stitchkit server published before this release. → ADR 0185
+- **One unconvertible discovered tool no longer takes the connection down.**
+  `mountConnections` builds per tool, skips what it cannot build and names it —
+  through `onSkippedTool`, or a stderr line naming the connection, the tool and
+  the reason.
+
 ## [0.90.3] — 2026-09-15
 
 ### Added

package/dist/agent-runtime-coding-tools.js

@@ -3,16 +3,16 @@ import {
   AgentCodingToolLimitsSchema,
   AgentCodingToolPathAuthorizationSchema,
   createAgentCodingTools
-} from "./index-j7q0xj6d.js";
+} from "./index-3yqgj323.js";
 import"./index-bn2cjajt.js";
 import"./index-gte38nbm.js";
 import"./index-kazec06k.js";
 import"./index-6k1937bx.js";
+import"./index-8z9we758.js";
+import"./index-fenaekmk.js";
+import"./index-cby4ar3v.js";
 import"./index-scs3f1eg.js";
 import"./index-kzfs85xp.js";
-import"./index-kc6h6hg0.js";
-import"./index-r159gjwy.js";
-import"./index-cby4ar3v.js";
 import"./index-77fekveh.js";
 export {
   createAgentCodingTools,

package/dist/agent-runtime-harness.js

@@ -6,7 +6,7 @@ import {
   composeAgentPrompt,
   createAgentRuntime,
   createAgentRuntimeEventSink
-} from "./index-f475yj00.js";
+} from "./index-s208wab5.js";
 import"./index-p13mwz16.js";
 import"./index-y64k3s0h.js";
 import {
@@ -19,21 +19,21 @@ import {
   walkContainedFiles
 } from "./index-bn2cjajt.js";
 import"./index-7rkhw9ec.js";
-import"./index-44ht2790.js";
+import"./index-8pjqv3zh.js";
 import"./index-vsbzgd7b.js";
 import"./index-f9mb610r.js";
 import"./index-2hryh65w.js";
 import"./index-kazec06k.js";
 import"./index-6k1937bx.js";
-import"./index-scs3f1eg.js";
 import"./index-zcgf3gqf.js";
 import"./index-7zbps32p.js";
-import"./index-kzfs85xp.js";
 import {
   defineRuntimeTool
-} from "./index-kc6h6hg0.js";
-import"./index-r159gjwy.js";
+} from "./index-8z9we758.js";
+import"./index-fenaekmk.js";
 import"./index-cby4ar3v.js";
+import"./index-scs3f1eg.js";
+import"./index-kzfs85xp.js";
 import"./index-77fekveh.js";
 
 // src/agent-runtime/harness-contract.ts

package/dist/agent-runtime-sandbox.js

@@ -1,6 +1,6 @@
 import {
   createAgentCodingTools
-} from "./index-j7q0xj6d.js";
+} from "./index-3yqgj323.js";
 import"./index-bn2cjajt.js";
 import {
   codingRefusal,
@@ -9,11 +9,11 @@ import {
 } from "./index-gte38nbm.js";
 import"./index-kazec06k.js";
 import"./index-6k1937bx.js";
+import"./index-8z9we758.js";
+import"./index-fenaekmk.js";
+import"./index-cby4ar3v.js";
 import"./index-scs3f1eg.js";
 import"./index-kzfs85xp.js";
-import"./index-kc6h6hg0.js";
-import"./index-r159gjwy.js";
-import"./index-cby4ar3v.js";
 import"./index-77fekveh.js";
 
 // src/agent-runtime/sandbox-bubblewrap.ts

package/dist/agent-runtime.js

@@ -31,7 +31,7 @@ import {
   renderAgentStateSlots,
   repairedSearchCall,
   selectAgentHistory
-} from "./index-f475yj00.js";
+} from "./index-s208wab5.js";
 import"./index-p13mwz16.js";
 import {
   AgentAdmissionEventSchema,
@@ -169,28 +169,28 @@ import {
 import {
   buildToolManifest,
   mountAgent
-} from "./index-gbqjt8jz.js";
+} from "./index-83fafqw8.js";
 import"./index-7rkhw9ec.js";
-import"./index-wb15909q.js";
-import"./index-2hrfpw2c.js";
-import"./index-44ht2790.js";
+import"./index-zsdgd1tz.js";
+import"./index-1bnkzq95.js";
+import"./index-8pjqv3zh.js";
 import"./index-vsbzgd7b.js";
 import"./index-f9mb610r.js";
 import"./index-2hryh65w.js";
 import"./index-kazec06k.js";
 import"./index-6k1937bx.js";
-import"./index-scs3f1eg.js";
 import {
   childSpan,
   createTraceContext
 } from "./index-zcgf3gqf.js";
 import"./index-7zbps32p.js";
-import"./index-kzfs85xp.js";
 import {
   defineRuntimeTool
-} from "./index-kc6h6hg0.js";
-import"./index-r159gjwy.js";
+} from "./index-8z9we758.js";
+import"./index-fenaekmk.js";
 import"./index-cby4ar3v.js";
+import"./index-scs3f1eg.js";
+import"./index-kzfs85xp.js";
 import {
   executableAgentRuntimeTools
 } from "./index-77fekveh.js";

package/dist/cli.d.ts

@@ -17,9 +17,22 @@
  * and point your app's `package.json` `bin` at it.
  */
 export { type CliConfig, type CliSurfaceSource, createCli } from './tools/cli.js';
-export { type CliRunOptions, type ParsedCliArgs, parseCliArgs } from './tools/cli-args.js';
+export { CliArgumentError, type CliArgvRoute, type CliGlobalOptionsParse, type CliResultView, type CliRunOptions, extractCliGlobalOptions, type ParsedCliArgs, parseCliArgs, routeCliArgv, } from './tools/cli-args.js';
 export { type CliCommandContext, type CliCommandDefinition, type CliCommandDefinitionBase, type CliCommandDefinitionWithOutput, type CliCommandDefinitionWithoutOutput, defineCliCommand, } from './tools/cli-command.js';
 export { type CliWriters, DEFAULT_EXIT_CODES, type EmitOptions, type ExitCodeMap, emitResult, } from './tools/cli-format.js';
+export { type CliInstallerConfig, renderCliInstaller, } from './tools/cli-installer.js';
+export { assertCliPublishable, type CliBuildAsset, CliBuildAssetSchema, type CliBuildManifest, CliBuildManifestSchema, type CliBuildStamp, CliBuildStampSchema, type CliBuildTarget, CliBuildTargetSchema, currentCliBuildTarget, formatCliBuildStamp, selectCliBuildAsset, } from './tools/cli-manifest.js';
 export type { CliPresentationPolicyConfig } from './tools/cli-policy.js';
+export { CliProfileError, type CliProfileStore, type CliProfileStoreConfig, createCliProfileStore, type ResolvedCliProfile, } from './tools/cli-profile.js';
+export { type AppliedCliUpdate, applyCliUpdate, type CliUpdateApplyConfig, type CliUpdateCheck, type CliUpdateCheckConfig, checkCliUpdate, compareCliVersions, } from './tools/cli-update.js';
+export { type CliViewOutput, renderCliView } from './tools/cli-view.js';
 export { type CliWaitConfig, type PollParams, pollUntilDone } from './tools/cli-wait.js';
+/**
+ * The second half of `parseCliArgs`. The parser leaves array and object values
+ * as strings on purpose, because `executeToolMethod` runs this pass next; a
+ * consumer that parses argv and then sends the call itself needs both halves,
+ * and reaching for the `stitchkit/tools` barrel to get one function would pull
+ * the MCP and AI peers into a binary this entrypoint keeps free of them.
+ */
+export { coerceJsonArgs } from './tools/coerce.js';
 //# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,gBAAgB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,aAAa,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,8BAA8B,EACnC,KAAK,iCAAiC,EACtC,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,KAAK,UAAU,EACf,kBAAkB,EAClB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,UAAU,GACX,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,gBAAgB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,EACL,gBAAgB,EAChB,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,uBAAuB,EACvB,KAAK,aAAa,EAClB,YAAY,EACZ,YAAY,GACb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,8BAA8B,EACnC,KAAK,iCAAiC,EACtC,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,KAAK,UAAU,EACf,kBAAkB,EAClB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,UAAU,GACX,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,kBAAkB,EACvB,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,sBAAsB,EACtB,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,cAAc,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EACL,eAAe,EACf,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,qBAAqB,EACrB,KAAK,kBAAkB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,KAAK,gBAAgB,EACrB,cAAc,EACd,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,cAAc,EACd,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,KAAK,aAAa,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtF;;;;;;GAMG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC"}