stitchkit 0.90.4 → 0.90.5

package/CHANGELOG.md

@@ -15,6 +15,74 @@ additive**; the first breaking change landed in 0.10.0. Grep the file for
 
 ## [Unreleased]
 
+## [0.90.5] — 2026-09-16
+
+Three gaps a consuming project found on the first live surface after adopting
+0.90.4 — each one a place where the framework handed over parts of the job and
+kept the composition for itself.
+
+### Fixed
+
+- **A connection-mounted command on the CLI prints the answer, not the MCP
+  envelope.** `tools/call` returns `{ content: [...], structuredContent? }`, and
+  an agent mount needs exactly that — the parts are what a model is shown. The
+  CLI is different in kind, because the handler's value is what gets printed,
+  piped and aggregated. Handed the envelope, the first real command answered
+  `no record carries the field "status" — available: text, type`: it was
+  grouping the content parts. `--json` had the same defect one layer down, with
+  the answer a JSON *string* inside `content[0].text`, so every consumer
+  unwrapped before anything else worked. The CLI transport now unwraps, and only
+  it: `structuredContent` when the server sent one, a lone text part when it
+  parses as JSON, its text when it does not. Several parts, an image or audio
+  pass through whole — picking one of many would be inventing an answer.
+
+- **A remote tool's refusal keeps its code and details.** `mountConnections` ended
+  a failed `tools/call` by throwing a one-sentence `Error` and discarding the
+  result. Three things went with it: the code, so `exitCodes` had nothing to map
+  and "not found" and "no rights" both exited `1` — the per-class exit codes the
+  CLI surface exists to provide could not work over a connection at all; the
+  message the operator needed; and the error's own class, because a plain `Error`
+  is an *unexpected* error to the runner, which printed a code frame of the
+  minified framework bundle before the JSON failure and then scrubbed the whole
+  thing to `INTERNAL_SERVER_ERROR`. A structured `{ error, details }` body is now
+  relayed as the contract error it is, on every transport — losing a code is
+  missing information, not a presentation choice. A refusal without one fails as
+  `UPSTREAM_TOOL_ERROR` carrying what the server did send; the status is 502
+  either way, because whatever the code says the failure happened upstream.
+
+### Added
+
+- **`--sort <field>` and `--ascending` — the n largest *records*.** 0.90.4 gave
+  `--top` to groups and left "the five biggest, as a table" with no expression,
+  because `--table` took neither `--by` nor `--top`. Two readings of `--top`
+  would have been exactly the ambiguity that release removed from `--by`, so
+  ordering gets its own word: **`--by` groups, `--sort` orders**, and `--top`
+  keeps one meaning throughout — the n leading entries of the view that was
+  asked for. `--table` and `--sort` describe the same view and therefore
+  compose: `--top 5 --sort messages --table id,messages`. `--sort` without
+  `--table` returns the ordered records as JSON. A record carrying no value for
+  the sort field stays **last in both directions**: it is not the smallest, it
+  is not on the scale. `--sort` together with `--by`, `--count-by` or `--sum` is
+  refused rather than given a second meaning.
+- **`--help <substring>` — a narrower question than "all of them".** On a
+  discovered surface `--help` is the only way to learn what exists, and that can
+  be two hundred commands and 230 lines: at that size the list stops being an
+  answer, scrolling past a person and costing an agent the same context an
+  unfiltered result would. The filter matches a command's name *or* its
+  description — the word someone knows is often in the sentence rather than the
+  name — and the heading says how many of the total matched. No match exits with
+  whatever `NOT_FOUND` maps to rather than succeeding over an empty list, because
+  `0` there reads as "there are none", a different statement from "none of
+  these". `-h <text>`, `help <text>` and `--help=<text>` are the same question;
+  bare `--help` is byte-for-byte unchanged, and `--help=false` keeps its meaning
+  as the reserved boolean's negation.
+- **`renderCliInstaller` renders every published target in one script.** Omit
+  `asset` and the script selects by `uname` at run time, mapping `x86_64` →
+  `x64` and `aarch64` → `arm64` itself, and naming an unpublished combination
+  with what *is* published beside it. Passing one `asset` still pins one target.
+  That dispatch was the last hand-written piece of the install path, and it is
+  the same table every publisher writes from memory. It still parses no JSON.
+
 ## [0.90.4] — 2026-09-16
 
 ### Added

package/dist/agent-runtime-coding-tools.js

@@ -3,16 +3,16 @@ import {
   AgentCodingToolLimitsSchema,
   AgentCodingToolPathAuthorizationSchema,
   createAgentCodingTools
-} from "./index-8crm1srv.js";
+} from "./index-3yqgj323.js";
 import"./index-bn2cjajt.js";
 import"./index-gte38nbm.js";
 import"./index-kazec06k.js";
 import"./index-6k1937bx.js";
-import"./index-scs3f1eg.js";
-import"./index-kzfs85xp.js";
 import"./index-8z9we758.js";
 import"./index-fenaekmk.js";
 import"./index-cby4ar3v.js";
+import"./index-scs3f1eg.js";
+import"./index-kzfs85xp.js";
 import"./index-77fekveh.js";
 export {
   createAgentCodingTools,

package/dist/agent-runtime-harness.js

@@ -6,7 +6,7 @@ import {
   composeAgentPrompt,
   createAgentRuntime,
   createAgentRuntimeEventSink
-} from "./index-6atvfjc1.js";
+} from "./index-s208wab5.js";
 import"./index-p13mwz16.js";
 import"./index-y64k3s0h.js";
 import {
@@ -19,21 +19,21 @@ import {
   walkContainedFiles
 } from "./index-bn2cjajt.js";
 import"./index-7rkhw9ec.js";
-import"./index-vcnfwrtr.js";
+import"./index-8pjqv3zh.js";
 import"./index-vsbzgd7b.js";
 import"./index-f9mb610r.js";
 import"./index-2hryh65w.js";
 import"./index-kazec06k.js";
 import"./index-6k1937bx.js";
-import"./index-scs3f1eg.js";
 import"./index-zcgf3gqf.js";
 import"./index-7zbps32p.js";
-import"./index-kzfs85xp.js";
 import {
   defineRuntimeTool
 } from "./index-8z9we758.js";
 import"./index-fenaekmk.js";
 import"./index-cby4ar3v.js";
+import"./index-scs3f1eg.js";
+import"./index-kzfs85xp.js";
 import"./index-77fekveh.js";
 
 // src/agent-runtime/harness-contract.ts

package/dist/agent-runtime-sandbox.js

@@ -1,6 +1,6 @@
 import {
   createAgentCodingTools
-} from "./index-8crm1srv.js";
+} from "./index-3yqgj323.js";
 import"./index-bn2cjajt.js";
 import {
   codingRefusal,
@@ -9,11 +9,11 @@ import {
 } from "./index-gte38nbm.js";
 import"./index-kazec06k.js";
 import"./index-6k1937bx.js";
-import"./index-scs3f1eg.js";
-import"./index-kzfs85xp.js";
 import"./index-8z9we758.js";
 import"./index-fenaekmk.js";
 import"./index-cby4ar3v.js";
+import"./index-scs3f1eg.js";
+import"./index-kzfs85xp.js";
 import"./index-77fekveh.js";
 
 // src/agent-runtime/sandbox-bubblewrap.ts

package/dist/agent-runtime.js

@@ -31,7 +31,7 @@ import {
   renderAgentStateSlots,
   repairedSearchCall,
   selectAgentHistory
-} from "./index-6atvfjc1.js";
+} from "./index-s208wab5.js";
 import"./index-p13mwz16.js";
 import {
   AgentAdmissionEventSchema,
@@ -169,28 +169,28 @@ import {
 import {
   buildToolManifest,
   mountAgent
-} from "./index-19ryv24q.js";
+} from "./index-83fafqw8.js";
 import"./index-7rkhw9ec.js";
-import"./index-kzxpsf8y.js";
-import"./index-32vjke6q.js";
-import"./index-vcnfwrtr.js";
+import"./index-zsdgd1tz.js";
+import"./index-1bnkzq95.js";
+import"./index-8pjqv3zh.js";
 import"./index-vsbzgd7b.js";
 import"./index-f9mb610r.js";
 import"./index-2hryh65w.js";
 import"./index-kazec06k.js";
 import"./index-6k1937bx.js";
-import"./index-scs3f1eg.js";
 import {
   childSpan,
   createTraceContext
 } from "./index-zcgf3gqf.js";
 import"./index-7zbps32p.js";
-import"./index-kzfs85xp.js";
 import {
   defineRuntimeTool
 } from "./index-8z9we758.js";
 import"./index-fenaekmk.js";
 import"./index-cby4ar3v.js";
+import"./index-scs3f1eg.js";
+import"./index-kzfs85xp.js";
 import {
   executableAgentRuntimeTools
 } from "./index-77fekveh.js";

package/dist/cli.js

@@ -11,29 +11,29 @@ import {
   readCapped,
   renderCliView,
   routeCliArgv
-} from "./index-y47z614h.js";
+} from "./index-fqg5mfk7.js";
 import"./index-sbdmyz75.js";
-import"./index-kzxpsf8y.js";
-import"./index-32vjke6q.js";
-import"./index-vcnfwrtr.js";
+import"./index-zsdgd1tz.js";
+import"./index-1bnkzq95.js";
+import"./index-8pjqv3zh.js";
 import"./index-vsbzgd7b.js";
 import"./index-f9mb610r.js";
 import"./index-2hryh65w.js";
 import"./index-kazec06k.js";
 import"./index-6k1937bx.js";
-import {
-  AppError
-} from "./index-scs3f1eg.js";
 import"./index-zcgf3gqf.js";
 import {
   coerceJsonArgs
 } from "./index-7zbps32p.js";
-import {
-  safeJsonParse
-} from "./index-kzfs85xp.js";
 import"./index-8z9we758.js";
 import"./index-fenaekmk.js";
 import"./index-cby4ar3v.js";
+import {
+  AppError
+} from "./index-scs3f1eg.js";
+import {
+  safeJsonParse
+} from "./index-kzfs85xp.js";
 import"./index-77fekveh.js";
 // src/tools/cli-installer.ts
 function shellQuote(value) {
@@ -42,20 +42,21 @@ function shellQuote(value) {
 function renderCliInstaller(config) {
   const binary = config.binaryName ?? config.manifest.name;
   const installDir = config.installDir ?? "$HOME/.local/bin";
-  const decompress = config.asset.compression === "gzip" ? `  gzip -dc "$tmp/download" > "$tmp/binary"
-` : `  mv "$tmp/download" "$tmp/binary"
-`;
+  const assets = config.asset ? [config.asset] : config.manifest.assets;
+  if (assets.length === 0) {
+    throw new Error("[stitchkit] a build manifest with no assets installs nothing");
+  }
+  const selection = assets.length === 1 && assets[0] !== undefined ? singleTarget(assets[0]) : unameDispatch(assets);
   return `#!/bin/sh
 # ${binary} ${config.manifest.version} (${config.manifest.commit})
 # Generated from the build manifest — it parses no JSON and needs no jq.
 set -eu
 
-url=${shellQuote(config.asset.url)}
-sha256=${shellQuote(config.asset.sha256)}
-size=${shellQuote(String(config.asset.size))}
 binary=${shellQuote(binary)}
 dir="\${INSTALL_DIR:-${installDir}}"
 
+${selection}
+
 fetch() {
   if command -v curl >/dev/null 2>&1; then
     curl -fsSL "$1" -o "$2"
@@ -84,7 +85,12 @@ tmp="$(mktemp -d)"
 trap 'rm -rf "$tmp"' EXIT
 
 fetch "$url" "$tmp/download"
-${decompress}
+if [ "$compression" = "gzip" ]; then
+  gzip -dc "$tmp/download" > "$tmp/binary"
+else
+  mv "$tmp/download" "$tmp/binary"
+fi
+
 actual="$(digest "$tmp/binary")"
 if [ "$actual" != "$sha256" ]; then
   echo "checksum mismatch: expected $sha256, got $actual" >&2
@@ -110,6 +116,43 @@ case ":$PATH:" in
 esac
 `;
 }
+function singleTarget(asset) {
+  return [
+    `url=${shellQuote(asset.url)}`,
+    `sha256=${shellQuote(asset.sha256)}`,
+    `size=${shellQuote(String(asset.size))}`,
+    `compression=${shellQuote(asset.compression)}`
+  ].join(`
+`);
+}
+function unameDispatch(assets) {
+  const cases = assets.map((asset) => `  ${asset.platform}/${asset.arch})
+    url=${shellQuote(asset.url)}
+    sha256=${shellQuote(asset.sha256)}
+    size=${shellQuote(String(asset.size))}
+    compression=${shellQuote(asset.compression)}
+    ;;`).join(`
+`);
+  const published = assets.map((asset) => `${asset.platform}/${asset.arch}`).join(", ");
+  return `case "$(uname -s)" in
+  Darwin) platform=darwin ;;
+  Linux) platform=linux ;;
+  *) platform="$(uname -s)" ;;
+esac
+case "$(uname -m)" in
+  x86_64|amd64) arch=x64 ;;
+  aarch64|arm64) arch=arm64 ;;
+  *) arch="$(uname -m)" ;;
+esac
+
+case "$platform/$arch" in
+${cases}
+  *)
+    echo "no published build for $platform/$arch — published: ${published}" >&2
+    exit 1
+    ;;
+esac`;
+}
 // src/tools/cli-manifest.ts
 import { z } from "zod";
 var CliBuildTargetSchema = z.object({

package/dist/{index-32vjke6q.js → index-1bnkzq95.js}

@@ -1,6 +1,6 @@
 import {
   executeToolMethod
-} from "./index-vcnfwrtr.js";
+} from "./index-8pjqv3zh.js";
 import {
   assertToolExtensionCompatible,
   mergeSchemas,

package/dist/{index-19ryv24q.js → index-83fafqw8.js}

@@ -4,16 +4,16 @@ import {
 } from "./index-7rkhw9ec.js";
 import {
   collectToolSurface
-} from "./index-kzxpsf8y.js";
+} from "./index-zsdgd1tz.js";
 import {
   createToolRunner,
   formatToolError
-} from "./index-32vjke6q.js";
+} from "./index-1bnkzq95.js";
 import {
   isToolExecutionControlError,
   toolCauseFromResult,
   toolResultFromError
-} from "./index-vcnfwrtr.js";
+} from "./index-8pjqv3zh.js";
 import {
   isRecord
 } from "./index-77fekveh.js";