stitchkit 0.90.4 → 0.90.6

package/CHANGELOG.md

@@ -15,6 +15,108 @@ additive**; the first breaking change landed in 0.10.0. Grep the file for
 
 ## [Unreleased]
 
+## [0.90.6] — 2026-09-20
+
+### Added
+
+- **Browser Authorization Code + PKCE transactions in `stitchkit/oauth`.** The new
+  browser-safe entrypoint creates authorization URLs, stores one-time state and
+  verifier records, and consumes callbacks with bounded expiry, replay protection,
+  safe return paths and provider errors that do not expose credentials.
+- **A Google OpenID Connect server adapter in `stitchkit/google`.** It exchanges an
+  authorization code through the official optional `google-auth-library` peer,
+  requires an exact redirect allowlist, validates issuer, audience, expiry and nonce,
+  and returns a small stable identity without leaking tokens into application state.
+
+### Fixed
+
+- **Unix-socket servers no longer forward Bun's TCP-only `http2` option.** The Unix
+  variant now strips it beside the other transport-specific settings.
+- **grammY startup accepts the native application abort signal on its Node typing
+  boundary.** Runtime cancellation was already compatible; the adapter now makes that
+  compatibility explicit instead of failing consumer type-checks.
+- **The lane temporary-directory test is isolated from concurrent lanes.** Its real
+  default-path proof runs in a child process with a private system temp root, removing
+  the full-suite timeout caused by scanning unrelated live descriptors.
+- **Concurrent packed lanes serialize the shared core build.** Two release lanes can no
+  longer clean `dist` underneath each other's `prepack`, which previously produced a
+  JavaScript-only tarball during a parallel full gate.
+
+### Changed
+
+- **Supported dependencies and consumer fixtures track current stable releases.** The
+  MCP Apps peer accepts both the existing 1.x line and current 2.x, while development
+  and optional-peer lanes exercise 2.x; the `srvx` peer likewise keeps its supported
+  0.12 line while adding 1.x.
+
+## [0.90.5] — 2026-09-16
+
+Three gaps a consuming project found on the first live surface after adopting
+0.90.4 — each one a place where the framework handed over parts of the job and
+kept the composition for itself.
+
+### Fixed
+
+- **A connection-mounted command on the CLI prints the answer, not the MCP
+  envelope.** `tools/call` returns `{ content: [...], structuredContent? }`, and
+  an agent mount needs exactly that — the parts are what a model is shown. The
+  CLI is different in kind, because the handler's value is what gets printed,
+  piped and aggregated. Handed the envelope, the first real command answered
+  `no record carries the field "status" — available: text, type`: it was
+  grouping the content parts. `--json` had the same defect one layer down, with
+  the answer a JSON *string* inside `content[0].text`, so every consumer
+  unwrapped before anything else worked. The CLI transport now unwraps, and only
+  it: `structuredContent` when the server sent one, a lone text part when it
+  parses as JSON, its text when it does not. Several parts, an image or audio
+  pass through whole — picking one of many would be inventing an answer.
+
+- **A remote tool's refusal keeps its code and details.** `mountConnections` ended
+  a failed `tools/call` by throwing a one-sentence `Error` and discarding the
+  result. Three things went with it: the code, so `exitCodes` had nothing to map
+  and "not found" and "no rights" both exited `1` — the per-class exit codes the
+  CLI surface exists to provide could not work over a connection at all; the
+  message the operator needed; and the error's own class, because a plain `Error`
+  is an *unexpected* error to the runner, which printed a code frame of the
+  minified framework bundle before the JSON failure and then scrubbed the whole
+  thing to `INTERNAL_SERVER_ERROR`. A structured `{ error, details }` body is now
+  relayed as the contract error it is, on every transport — losing a code is
+  missing information, not a presentation choice. A refusal without one fails as
+  `UPSTREAM_TOOL_ERROR` carrying what the server did send; the status is 502
+  either way, because whatever the code says the failure happened upstream.
+
+### Added
+
+- **`--sort <field>` and `--ascending` — the n largest *records*.** 0.90.4 gave
+  `--top` to groups and left "the five biggest, as a table" with no expression,
+  because `--table` took neither `--by` nor `--top`. Two readings of `--top`
+  would have been exactly the ambiguity that release removed from `--by`, so
+  ordering gets its own word: **`--by` groups, `--sort` orders**, and `--top`
+  keeps one meaning throughout — the n leading entries of the view that was
+  asked for. `--table` and `--sort` describe the same view and therefore
+  compose: `--top 5 --sort messages --table id,messages`. `--sort` without
+  `--table` returns the ordered records as JSON. A record carrying no value for
+  the sort field stays **last in both directions**: it is not the smallest, it
+  is not on the scale. `--sort` together with `--by`, `--count-by` or `--sum` is
+  refused rather than given a second meaning.
+- **`--help <substring>` — a narrower question than "all of them".** On a
+  discovered surface `--help` is the only way to learn what exists, and that can
+  be two hundred commands and 230 lines: at that size the list stops being an
+  answer, scrolling past a person and costing an agent the same context an
+  unfiltered result would. The filter matches a command's name *or* its
+  description — the word someone knows is often in the sentence rather than the
+  name — and the heading says how many of the total matched. No match exits with
+  whatever `NOT_FOUND` maps to rather than succeeding over an empty list, because
+  `0` there reads as "there are none", a different statement from "none of
+  these". `-h <text>`, `help <text>` and `--help=<text>` are the same question;
+  bare `--help` is byte-for-byte unchanged, and `--help=false` keeps its meaning
+  as the reserved boolean's negation.
+- **`renderCliInstaller` renders every published target in one script.** Omit
+  `asset` and the script selects by `uname` at run time, mapping `x86_64` →
+  `x64` and `aarch64` → `arm64` itself, and naming an unpublished combination
+  with what *is* published beside it. Passing one `asset` still pins one target.
+  That dispatch was the last hand-written piece of the install path, and it is
+  the same table every publisher writes from memory. It still parses no JSON.
+
 ## [0.90.4] — 2026-09-16
 
 ### Added

package/README.md

@@ -78,6 +78,7 @@ import { createSocketIOClient } from 'stitchkit'
 import { createCursorQuery, createCacheBridge } from 'stitchkit/react'
 import { AgentRunSchema, AgentRuntimeEventSchema } from 'stitchkit/agent-runtime/browser'
 import { parseSSE } from 'stitchkit'
+import { createAuthorizationCodeClient } from 'stitchkit/oauth'
 ```
 
 Server code imports server entrypoints:
@@ -90,6 +91,7 @@ import { createAgentRuntime, defineAgentProtocol } from 'stitchkit/agent-runtime
 import { createBunSqliteAgentRuntimeStore } from 'stitchkit/agent-runtime/sqlite/bun'
 import { createApplication, defineManagedResource } from 'stitchkit/application'
 import { implementRemote } from 'stitchkit/remote'
+import { createGoogleOidcClient } from 'stitchkit/google'
 ```
 
 The root `stitchkit` entrypoint is browser-safe. Server, tool, optional managed

package/dist/agent-runtime-coding-tools.js

@@ -3,16 +3,17 @@ import {
   AgentCodingToolLimitsSchema,
   AgentCodingToolPathAuthorizationSchema,
   createAgentCodingTools
-} from "./index-8crm1srv.js";
+} from "./index-3yqgj323.js";
 import"./index-bn2cjajt.js";
 import"./index-gte38nbm.js";
-import"./index-kazec06k.js";
+import"./index-nrqg8tks.js";
+import"./index-rxfy4cq7.js";
 import"./index-6k1937bx.js";
-import"./index-scs3f1eg.js";
-import"./index-kzfs85xp.js";
 import"./index-8z9we758.js";
 import"./index-fenaekmk.js";
 import"./index-cby4ar3v.js";
+import"./index-scs3f1eg.js";
+import"./index-kzfs85xp.js";
 import"./index-77fekveh.js";
 export {
   createAgentCodingTools,

package/dist/agent-runtime-harness.js

@@ -6,7 +6,7 @@ import {
   composeAgentPrompt,
   createAgentRuntime,
   createAgentRuntimeEventSink
-} from "./index-6atvfjc1.js";
+} from "./index-s208wab5.js";
 import"./index-p13mwz16.js";
 import"./index-y64k3s0h.js";
 import {
@@ -19,21 +19,22 @@ import {
   walkContainedFiles
 } from "./index-bn2cjajt.js";
 import"./index-7rkhw9ec.js";
-import"./index-vcnfwrtr.js";
+import"./index-8pjqv3zh.js";
 import"./index-vsbzgd7b.js";
 import"./index-f9mb610r.js";
 import"./index-2hryh65w.js";
-import"./index-kazec06k.js";
+import"./index-nrqg8tks.js";
+import"./index-rxfy4cq7.js";
 import"./index-6k1937bx.js";
-import"./index-scs3f1eg.js";
 import"./index-zcgf3gqf.js";
 import"./index-7zbps32p.js";
-import"./index-kzfs85xp.js";
 import {
   defineRuntimeTool
 } from "./index-8z9we758.js";
 import"./index-fenaekmk.js";
 import"./index-cby4ar3v.js";
+import"./index-scs3f1eg.js";
+import"./index-kzfs85xp.js";
 import"./index-77fekveh.js";
 
 // src/agent-runtime/harness-contract.ts

package/dist/agent-runtime-sandbox.js

@@ -1,19 +1,20 @@
 import {
   createAgentCodingTools
-} from "./index-8crm1srv.js";
+} from "./index-3yqgj323.js";
 import"./index-bn2cjajt.js";
 import {
   codingRefusal,
   missingSandboxRestrictions,
   probeAgentProcessSandbox
 } from "./index-gte38nbm.js";
-import"./index-kazec06k.js";
+import"./index-nrqg8tks.js";
+import"./index-rxfy4cq7.js";
 import"./index-6k1937bx.js";
-import"./index-scs3f1eg.js";
-import"./index-kzfs85xp.js";
 import"./index-8z9we758.js";
 import"./index-fenaekmk.js";
 import"./index-cby4ar3v.js";
+import"./index-scs3f1eg.js";
+import"./index-kzfs85xp.js";
 import"./index-77fekveh.js";
 
 // src/agent-runtime/sandbox-bubblewrap.ts

package/dist/agent-runtime.js

@@ -31,7 +31,7 @@ import {
   renderAgentStateSlots,
   repairedSearchCall,
   selectAgentHistory
-} from "./index-6atvfjc1.js";
+} from "./index-s208wab5.js";
 import"./index-p13mwz16.js";
 import {
   AgentAdmissionEventSchema,
@@ -169,28 +169,29 @@ import {
 import {
   buildToolManifest,
   mountAgent
-} from "./index-19ryv24q.js";
+} from "./index-83fafqw8.js";
 import"./index-7rkhw9ec.js";
-import"./index-kzxpsf8y.js";
-import"./index-32vjke6q.js";
-import"./index-vcnfwrtr.js";
+import"./index-zsdgd1tz.js";
+import"./index-1bnkzq95.js";
+import"./index-8pjqv3zh.js";
 import"./index-vsbzgd7b.js";
 import"./index-f9mb610r.js";
 import"./index-2hryh65w.js";
-import"./index-kazec06k.js";
+import"./index-nrqg8tks.js";
+import"./index-rxfy4cq7.js";
 import"./index-6k1937bx.js";
-import"./index-scs3f1eg.js";
 import {
   childSpan,
   createTraceContext
 } from "./index-zcgf3gqf.js";
 import"./index-7zbps32p.js";
-import"./index-kzfs85xp.js";
 import {
   defineRuntimeTool
 } from "./index-8z9we758.js";
 import"./index-fenaekmk.js";
 import"./index-cby4ar3v.js";
+import"./index-scs3f1eg.js";
+import"./index-kzfs85xp.js";
 import {
   executableAgentRuntimeTools
 } from "./index-77fekveh.js";

package/dist/application/grammy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grammy.d.ts","sourceRoot":"","sources":["../../src/application/grammy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,GAAG,EAAE,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,oBAAoB,EAAE,MAAM,QAAQ,CAAC;AAC3F,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAMzE,MAAM,WAAW,2BAA2B,CAAC,CAAC,SAAS,OAAO;IAC5D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IAC7C,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7D;AAcD,iEAAiE;AACjE,wBAAgB,qBAAqB,CAAC,CAAC,SAAS,OAAO,EACrD,MAAM,EAAE,2BAA2B,CAAC,CAAC,CAAC,GACrC,eAAe,CAiEjB;AAED,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,OAAO,GAAG,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE9F,MAAM,WAAW,2BAA2B,CAAC,CAAC,SAAS,OAAO;IAC5D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7D;AAED,MAAM,WAAW,qBAAqB,CAAC,CAAC,SAAS,OAAO;IACtD,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,YAAY,CACV,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,EACvB,oBAAoB,CAAC,EAAE,oBAAoB,GAC1C,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,6BAA8B,SAAQ,QAAQ,CAAC,8BAA8B,CAAC;IACzF,cAOC;CACF;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,CAAC,SAAS,OAAO,EAC3D,MAAM,EAAE,2BAA2B,CAAC,CAAC,CAAC,GACrC,qBAAqB,CAAC,CAAC,CAAC,CAiE1B"}
+{"version":3,"file":"grammy.d.ts","sourceRoot":"","sources":["../../src/application/grammy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,GAAG,EAAE,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,oBAAoB,EAAE,MAAM,QAAQ,CAAC;AAC3F,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAMzE,MAAM,WAAW,2BAA2B,CAAC,CAAC,SAAS,OAAO;IAC5D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IAC7C,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7D;AAcD,iEAAiE;AACjE,wBAAgB,qBAAqB,CAAC,CAAC,SAAS,OAAO,EACrD,MAAM,EAAE,2BAA2B,CAAC,CAAC,CAAC,GACrC,eAAe,CAiEjB;AAED,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,OAAO,GAAG,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE9F,MAAM,WAAW,2BAA2B,CAAC,CAAC,SAAS,OAAO;IAC5D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7D;AAED,MAAM,WAAW,qBAAqB,CAAC,CAAC,SAAS,OAAO;IACtD,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,YAAY,CACV,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,EACvB,oBAAoB,CAAC,EAAE,oBAAoB,GAC1C,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAaD;;;;;;;;;;;GAWG;AACH,qBAAa,6BAA8B,SAAQ,QAAQ,CAAC,8BAA8B,CAAC;IACzF,cAOC;CACF;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,CAAC,SAAS,OAAO,EAC3D,MAAM,EAAE,2BAA2B,CAAC,CAAC,CAAC,GACrC,qBAAqB,CAAC,CAAC,CAAC,CAiE1B"}

package/dist/application-grammy.js

@@ -86,6 +86,9 @@ function grammyPollingResource(config) {
     }
   });
 }
+function grammyNodeSignal(signal) {
+  return signal;
+}
 
 class GrammyWebhookUnavailableError extends AppError {
   constructor() {
@@ -115,7 +118,7 @@ function createGrammyWebhookResource(config) {
     ...config.dependsOn && { dependsOn: config.dependsOn },
     ...config.required !== undefined && { required: config.required },
     async start(context) {
-      await config.bot.init(context.signal);
+      await config.bot.init(grammyNodeSignal(context.signal));
     },
     activate() {
       accepting = true;

package/dist/cli.js

@@ -11,29 +11,30 @@ import {
   readCapped,
   renderCliView,
   routeCliArgv
-} from "./index-y47z614h.js";
+} from "./index-fqg5mfk7.js";
 import"./index-sbdmyz75.js";
-import"./index-kzxpsf8y.js";
-import"./index-32vjke6q.js";
-import"./index-vcnfwrtr.js";
+import"./index-zsdgd1tz.js";
+import"./index-1bnkzq95.js";
+import"./index-8pjqv3zh.js";
 import"./index-vsbzgd7b.js";
 import"./index-f9mb610r.js";
 import"./index-2hryh65w.js";
-import"./index-kazec06k.js";
+import"./index-nrqg8tks.js";
+import"./index-rxfy4cq7.js";
 import"./index-6k1937bx.js";
-import {
-  AppError
-} from "./index-scs3f1eg.js";
 import"./index-zcgf3gqf.js";
 import {
   coerceJsonArgs
 } from "./index-7zbps32p.js";
-import {
-  safeJsonParse
-} from "./index-kzfs85xp.js";
 import"./index-8z9we758.js";
 import"./index-fenaekmk.js";
 import"./index-cby4ar3v.js";
+import {
+  AppError
+} from "./index-scs3f1eg.js";
+import {
+  safeJsonParse
+} from "./index-kzfs85xp.js";
 import"./index-77fekveh.js";
 // src/tools/cli-installer.ts
 function shellQuote(value) {
@@ -42,20 +43,21 @@ function shellQuote(value) {
 function renderCliInstaller(config) {
   const binary = config.binaryName ?? config.manifest.name;
   const installDir = config.installDir ?? "$HOME/.local/bin";
-  const decompress = config.asset.compression === "gzip" ? `  gzip -dc "$tmp/download" > "$tmp/binary"
-` : `  mv "$tmp/download" "$tmp/binary"
-`;
+  const assets = config.asset ? [config.asset] : config.manifest.assets;
+  if (assets.length === 0) {
+    throw new Error("[stitchkit] a build manifest with no assets installs nothing");
+  }
+  const selection = assets.length === 1 && assets[0] !== undefined ? singleTarget(assets[0]) : unameDispatch(assets);
   return `#!/bin/sh
 # ${binary} ${config.manifest.version} (${config.manifest.commit})
 # Generated from the build manifest — it parses no JSON and needs no jq.
 set -eu
 
-url=${shellQuote(config.asset.url)}
-sha256=${shellQuote(config.asset.sha256)}
-size=${shellQuote(String(config.asset.size))}
 binary=${shellQuote(binary)}
 dir="\${INSTALL_DIR:-${installDir}}"
 
+${selection}
+
 fetch() {
   if command -v curl >/dev/null 2>&1; then
     curl -fsSL "$1" -o "$2"
@@ -84,7 +86,12 @@ tmp="$(mktemp -d)"
 trap 'rm -rf "$tmp"' EXIT
 
 fetch "$url" "$tmp/download"
-${decompress}
+if [ "$compression" = "gzip" ]; then
+  gzip -dc "$tmp/download" > "$tmp/binary"
+else
+  mv "$tmp/download" "$tmp/binary"
+fi
+
 actual="$(digest "$tmp/binary")"
 if [ "$actual" != "$sha256" ]; then
   echo "checksum mismatch: expected $sha256, got $actual" >&2
@@ -110,6 +117,43 @@ case ":$PATH:" in
 esac
 `;
 }
+function singleTarget(asset) {
+  return [
+    `url=${shellQuote(asset.url)}`,
+    `sha256=${shellQuote(asset.sha256)}`,
+    `size=${shellQuote(String(asset.size))}`,
+    `compression=${shellQuote(asset.compression)}`
+  ].join(`
+`);
+}
+function unameDispatch(assets) {
+  const cases = assets.map((asset) => `  ${asset.platform}/${asset.arch})
+    url=${shellQuote(asset.url)}
+    sha256=${shellQuote(asset.sha256)}
+    size=${shellQuote(String(asset.size))}
+    compression=${shellQuote(asset.compression)}
+    ;;`).join(`
+`);
+  const published = assets.map((asset) => `${asset.platform}/${asset.arch}`).join(", ");
+  return `case "$(uname -s)" in
+  Darwin) platform=darwin ;;
+  Linux) platform=linux ;;
+  *) platform="$(uname -s)" ;;
+esac
+case "$(uname -m)" in
+  x86_64|amd64) arch=x64 ;;
+  aarch64|arm64) arch=arm64 ;;
+  *) arch="$(uname -m)" ;;
+esac
+
+case "$platform/$arch" in
+${cases}
+  *)
+    echo "no published build for $platform/$arch — published: ${published}" >&2
+    exit 1
+    ;;
+esac`;
+}
 // src/tools/cli-manifest.ts
 import { z } from "zod";
 var CliBuildTargetSchema = z.object({

package/dist/contract/index.js

@@ -8,7 +8,8 @@ import {
   defineErrors,
   encodeCursor,
   paginatedSchema
-} from "../index-kazec06k.js";
+} from "../index-nrqg8tks.js";
+import"../index-rxfy4cq7.js";
 import {
   ManagedFilePathSchema,
   ManagedFileRefSchema

package/dist/google.d.ts

@@ -0,0 +1,56 @@
+export type GoogleOidcErrorCode = 'MISCONFIGURED' | 'INVALID_CREDENTIAL' | 'UPSTREAM_UNAVAILABLE';
+export declare class GoogleOidcError extends Error {
+    readonly code: GoogleOidcErrorCode;
+    readonly retryable: boolean;
+    constructor(code: GoogleOidcErrorCode, options?: ErrorOptions);
+}
+export interface GoogleOidcIdentity {
+    subject: string;
+    email: string;
+    name?: string;
+    picture?: string;
+}
+export interface GoogleOidcClaims {
+    sub?: string;
+    email?: string;
+    emailVerified?: boolean;
+    nonce?: string;
+    name?: string;
+    picture?: string;
+}
+export interface GoogleOidcExchangeInput {
+    code: string;
+    codeVerifier: string;
+    redirectUri: string;
+    clientId: string;
+    clientSecret: string;
+    tokenEndpoint: string;
+    signal: AbortSignal;
+}
+export type GoogleOidcTokenTransport = (input: GoogleOidcExchangeInput) => Promise<{
+    idToken: string;
+}>;
+export type GoogleOidcIdTokenVerifier = (input: {
+    idToken: string;
+    audience: string;
+}) => Promise<GoogleOidcClaims>;
+export interface GoogleOidcClientConfig {
+    clientId: string;
+    clientSecret: string;
+    allowedRedirectUris: readonly string[];
+    timeoutMs?: number;
+    fetch?: (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
+    tokenTransport?: GoogleOidcTokenTransport;
+    idTokenVerifier?: GoogleOidcIdTokenVerifier;
+}
+export interface ExchangeGoogleAuthorizationCodeInput {
+    code: string;
+    codeVerifier: string;
+    redirectUri: string;
+    nonce: string;
+}
+export interface GoogleOidcClient {
+    exchangeAuthorizationCode(input: ExchangeGoogleAuthorizationCodeInput): Promise<GoogleOidcIdentity>;
+}
+export declare function createGoogleOidcClient(config: GoogleOidcClientConfig): GoogleOidcClient;
+//# sourceMappingURL=google.d.ts.map

package/dist/google.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google.d.ts","sourceRoot":"","sources":["../src/google.ts"],"names":[],"mappings":"AAYA,MAAM,MAAM,mBAAmB,GAC3B,eAAe,GACf,oBAAoB,GACpB,sBAAsB,CAAC;AAQ3B,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAE5B,YAAY,IAAI,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,YAAY,EAK5D;CACF;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,MAAM,wBAAwB,GAAG,CACrC,KAAK,EAAE,uBAAuB,KAC3B,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAElC,MAAM,MAAM,yBAAyB,GAAG,CAAC,KAAK,EAAE;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAEhC,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjF,cAAc,CAAC,EAAE,wBAAwB,CAAC;IAC1C,eAAe,CAAC,EAAE,yBAAyB,CAAC;CAC7C;AAED,MAAM,WAAW,oCAAoC;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,yBAAyB,CACvB,KAAK,EAAE,oCAAoC,GAC1C,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAChC;AAqGD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,sBAAsB,GAAG,gBAAgB,CAmFvF"}

package/dist/google.js

@@ -0,0 +1,175 @@
+// src/google.ts
+import { OAuth2Client } from "google-auth-library";
+import { z } from "zod";
+var DEFAULT_TOKEN_ENDPOINT = "https://oauth2.googleapis.com/token";
+var DEFAULT_TIMEOUT_MS = 1e4;
+var ERROR_MESSAGES = {
+  MISCONFIGURED: "Google OIDC is not configured correctly.",
+  INVALID_CREDENTIAL: "The Google credential is invalid.",
+  UPSTREAM_UNAVAILABLE: "Google identity verification is temporarily unavailable."
+};
+
+class GoogleOidcError extends Error {
+  code;
+  retryable;
+  constructor(code, options) {
+    super(ERROR_MESSAGES[code], options);
+    this.name = "GoogleOidcError";
+    this.code = code;
+    this.retryable = code === "UPSTREAM_UNAVAILABLE";
+  }
+}
+function recordOf(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value) ? Object.fromEntries(Object.entries(value)) : null;
+}
+function statusOf(error) {
+  const record = recordOf(error);
+  const response = recordOf(record?.response);
+  return typeof response?.status === "number" ? response.status : null;
+}
+function codeOf(error) {
+  const record = recordOf(error);
+  return typeof record?.code === "string" ? record.code : null;
+}
+function upstreamVerifierFailure(error) {
+  const status = statusOf(error);
+  if (status !== null && (status === 429 || status >= 500))
+    return true;
+  return ["ECONNRESET", "ECONNREFUSED", "ETIMEDOUT", "ENOTFOUND", "EAI_AGAIN"].includes(codeOf(error) ?? "");
+}
+function constantTimeEqual(left, right) {
+  const leftBytes = new TextEncoder().encode(left);
+  const rightBytes = new TextEncoder().encode(right);
+  if (leftBytes.length !== rightBytes.length)
+    return false;
+  let difference = 0;
+  for (let index = 0;index < leftBytes.length; index += 1) {
+    difference |= (leftBytes[index] ?? 0) ^ (rightBytes[index] ?? 0);
+  }
+  return difference === 0;
+}
+function defaultTokenTransport(fetcher) {
+  return async (input) => {
+    let response;
+    try {
+      response = await fetcher(input.tokenEndpoint, {
+        method: "POST",
+        headers: { "content-type": "application/x-www-form-urlencoded" },
+        body: new URLSearchParams({
+          grant_type: "authorization_code",
+          code: input.code,
+          code_verifier: input.codeVerifier,
+          redirect_uri: input.redirectUri,
+          client_id: input.clientId,
+          client_secret: input.clientSecret
+        }),
+        signal: input.signal
+      });
+    } catch {
+      throw new GoogleOidcError("UPSTREAM_UNAVAILABLE");
+    }
+    if (!response.ok) {
+      throw new GoogleOidcError(response.status === 429 || response.status >= 500 ? "UPSTREAM_UNAVAILABLE" : "INVALID_CREDENTIAL");
+    }
+    let body;
+    try {
+      body = await response.json();
+    } catch {
+      throw new GoogleOidcError("UPSTREAM_UNAVAILABLE");
+    }
+    const idToken = recordOf(body)?.id_token;
+    if (typeof idToken !== "string" || !idToken) {
+      throw new GoogleOidcError("INVALID_CREDENTIAL");
+    }
+    return { idToken };
+  };
+}
+function defaultIdTokenVerifier(clientId, clientSecret) {
+  const client = new OAuth2Client(clientId, clientSecret);
+  return async ({ idToken, audience }) => {
+    const ticket = await client.verifyIdToken({ idToken, audience });
+    const payload = ticket.getPayload();
+    if (!payload)
+      throw new GoogleOidcError("INVALID_CREDENTIAL");
+    return {
+      sub: payload.sub,
+      email: payload.email,
+      emailVerified: payload.email_verified,
+      nonce: payload.nonce,
+      name: payload.name,
+      picture: payload.picture
+    };
+  };
+}
+function createGoogleOidcClient(config) {
+  const timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  if (!config.clientId || !config.clientSecret || config.allowedRedirectUris.length === 0 || config.allowedRedirectUris.some((uri) => !uri) || !Number.isFinite(timeoutMs) || timeoutMs <= 0) {
+    throw new GoogleOidcError("MISCONFIGURED");
+  }
+  const allowedRedirectUris = new Set(config.allowedRedirectUris);
+  const transport = config.tokenTransport ?? defaultTokenTransport(config.fetch ?? globalThis.fetch);
+  const verify = config.idTokenVerifier ?? defaultIdTokenVerifier(config.clientId, config.clientSecret);
+  return {
+    async exchangeAuthorizationCode(input) {
+      if (!allowedRedirectUris.has(input.redirectUri)) {
+        throw new GoogleOidcError("INVALID_CREDENTIAL");
+      }
+      if (!input.code || !input.codeVerifier || !input.nonce) {
+        throw new GoogleOidcError("INVALID_CREDENTIAL");
+      }
+      const controller = new AbortController;
+      let timer;
+      const deadline = new Promise((_, reject) => {
+        timer = setTimeout(() => {
+          controller.abort();
+          reject(new GoogleOidcError("UPSTREAM_UNAVAILABLE"));
+        }, timeoutMs);
+      });
+      let exchanged;
+      try {
+        exchanged = await Promise.race([
+          transport({
+            code: input.code,
+            codeVerifier: input.codeVerifier,
+            redirectUri: input.redirectUri,
+            clientId: config.clientId,
+            clientSecret: config.clientSecret,
+            tokenEndpoint: DEFAULT_TOKEN_ENDPOINT,
+            signal: controller.signal
+          }),
+          deadline
+        ]);
+      } catch (cause) {
+        if (cause instanceof GoogleOidcError)
+          throw cause;
+        throw new GoogleOidcError("UPSTREAM_UNAVAILABLE");
+      } finally {
+        if (timer)
+          clearTimeout(timer);
+      }
+      if (!exchanged.idToken)
+        throw new GoogleOidcError("INVALID_CREDENTIAL");
+      let claims;
+      try {
+        claims = await verify({ idToken: exchanged.idToken, audience: config.clientId });
+      } catch (cause) {
+        if (cause instanceof GoogleOidcError)
+          throw cause;
+        throw new GoogleOidcError(upstreamVerifierFailure(cause) ? "UPSTREAM_UNAVAILABLE" : "INVALID_CREDENTIAL");
+      }
+      if (!claims.sub || !claims.email || claims.emailVerified !== true || !claims.nonce || !constantTimeEqual(claims.nonce, input.nonce) || !z.email().safeParse(claims.email).success) {
+        throw new GoogleOidcError("INVALID_CREDENTIAL");
+      }
+      return {
+        subject: claims.sub,
+        email: claims.email,
+        ...claims.name ? { name: claims.name } : {},
+        ...claims.picture ? { picture: claims.picture } : {}
+      };
+    }
+  };
+}
+export {
+  createGoogleOidcClient,
+  GoogleOidcError
+};

package/dist/{index-32vjke6q.js → index-1bnkzq95.js}

@@ -1,6 +1,6 @@
 import {
   executeToolMethod
-} from "./index-vcnfwrtr.js";
+} from "./index-8pjqv3zh.js";
 import {
   assertToolExtensionCompatible,
   mergeSchemas,