stitchkit 0.90.4 → 0.90.6

package/dist/tools/connections/mcp-envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-envelope.d.ts","sourceRoot":"","sources":["../../../src/tools/connections/mcp-envelope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAIjD,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAaxD;AAED;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AAEzD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,QAAQ,CAa1E"}

package/dist/tools/connections/mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../../src/tools/connections/mcp.ts"],"names":[],"mappings":"AAEA,OAAO,EAAqB,KAAK,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAGhF,OAAO,EACL,KAAK,0BAA0B,EAIhC,MAAM,WAAW,CAAC;AAGnB,OAAO,KAAK,EAAE,mBAAmB,EAAiB,MAAM,SAAS,CAAC;AAQlE,gEAAgE;AAChE,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,mBAAmB,EAC/B,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,0BAA0B,GACpC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAgElC"}
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../../src/tools/connections/mcp.ts"],"names":[],"mappings":"AAEA,OAAO,EAAqB,KAAK,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAIhF,OAAO,EACL,KAAK,0BAA0B,EAIhC,MAAM,WAAW,CAAC;AAGnB,OAAO,KAAK,EAAE,mBAAmB,EAAiB,MAAM,SAAS,CAAC;AAQlE,gEAAgE;AAChE,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,mBAAmB,EAC/B,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,0BAA0B,GACpC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAqElC"}

package/dist/tools.js

@@ -4,7 +4,8 @@ import {
 import {
   signJwt,
   verifyPkce
-} from "./index-bg8ypxzn.js";
+} from "./index-bva395we.js";
+import"./index-hr4tzbwq.js";
 import {
   DEFAULT_CORS_ALLOW_HEADERS,
   DEFAULT_PROCESS_SIGNALS,
@@ -13,7 +14,7 @@ import {
   guardSignalCallback,
   mediaTypeEssence,
   reportSignalError
-} from "./index-z78bjcxj.js";
+} from "./index-aj9geeez.js";
 import {
   redact
 } from "./index-xbppf54a.js";
@@ -21,7 +22,7 @@ import {
   buildToolManifest,
   describeToolCatalog,
   mountAgent
-} from "./index-19ryv24q.js";
+} from "./index-83fafqw8.js";
 import"./index-7rkhw9ec.js";
 import {
   argumentsDigest
@@ -37,7 +38,7 @@ import {
 } from "./index-4fpa9dy2.js";
 import {
   createToolInvoker
-} from "./index-7t0wq6j5.js";
+} from "./index-tgh3ksfh.js";
 import {
   WaitTimeoutError,
   createCli,
@@ -46,22 +47,22 @@ import {
   fetchPinnedDocument,
   readCapped,
   runWaitOperation
-} from "./index-y47z614h.js";
+} from "./index-fqg5mfk7.js";
 import"./index-sbdmyz75.js";
 import {
   collectToolSurface
-} from "./index-kzxpsf8y.js";
+} from "./index-zsdgd1tz.js";
 import {
   collectTools,
   createToolRunner,
   formatToolError
-} from "./index-32vjke6q.js";
+} from "./index-1bnkzq95.js";
 import {
   ToolExecutionControlError,
   executeToolMethod,
   isToolExecutionControlError,
   toolResultFromError
-} from "./index-vcnfwrtr.js";
+} from "./index-8pjqv3zh.js";
 import {
   getRequestContext,
   getTraceId,
@@ -73,22 +74,18 @@ import {
 } from "./index-2hryh65w.js";
 import {
   defineContract
-} from "./index-kazec06k.js";
+} from "./index-nrqg8tks.js";
+import"./index-rxfy4cq7.js";
 import {
   ManagedFilePathSchema,
   ManagedFileRefSchema
 } from "./index-6k1937bx.js";
-import {
-  AppError,
-  STITCH_ERROR_STATUS
-} from "./index-scs3f1eg.js";
 import {
   resolvePropagationContext
 } from "./index-zcgf3gqf.js";
 import {
   coerceJsonArgs
 } from "./index-7zbps32p.js";
-import"./index-kzfs85xp.js";
 import {
   createRuntimeToolFactory,
   defineRuntimeTool
@@ -105,6 +102,11 @@ import {
   validateMcpRoundPolicy
 } from "./index-fenaekmk.js";
 import"./index-cby4ar3v.js";
+import {
+  AppError,
+  STITCH_ERROR_STATUS
+} from "./index-scs3f1eg.js";
+import"./index-kzfs85xp.js";
 import {
   isRecord
 } from "./index-77fekveh.js";

package/dist/tracking.js

@@ -3,10 +3,11 @@ import {
 } from "./index-3xwxfj4z.js";
 import {
   defineContract
-} from "./index-kazec06k.js";
+} from "./index-nrqg8tks.js";
+import"./index-rxfy4cq7.js";
 import"./index-6k1937bx.js";
-import"./index-scs3f1eg.js";
 import"./index-zcgf3gqf.js";
+import"./index-scs3f1eg.js";
 import"./index-kzfs85xp.js";
 import"./index-77fekveh.js";
 

package/llms-full.txt

@@ -64,6 +64,8 @@ own, recorded as an ADR.
 | `stitchkit/tracking/server` | server (Bun or Node) | evolving | the decisions a tracking backend makes — dispositions, visit lease over an application-owned store, active intervals, presence; no database |
 | `stitchkit/release` | browser **and** server | evolving | a page follows the release it was built for — `createReleaseMarker` on the server, `createReleaseWatcher` in the browser, the `X-Build-Id` header and a socket event between them |
 | `stitchkit/geo` | server (Bun or Node) | evolving | managed GeoIP reader generations, last-known-good reload and the optional MaxMind adapter |
+| `stitchkit/oauth` | browser **and** server | evolving | provider-neutral Authorization Code + PKCE request and one-shot callback transaction mechanics |
+| `stitchkit/google` | server (Bun or Node) | evolving | optional Google code exchange and verified OIDC identity adapter |
 | `stitchkit/observability` | server | stable<br>_redefined in 1 of the 35 minors since 0.56.2, most recently 0.83.0_ | request/tool event projections — `createObservability`, trace context, sanitisation |
 | `stitchkit/testing` | tests on Bun or Node | stable | in-process generated clients over a real Fetch handler, plus the store and managed-resource conformance kits |
 | `stitchkit/declaration` | browser + build and deployment tooling (Bun or Node) | evolving | `ProjectDeclarationSchema` — the one machine-readable statement a repository makes about itself |
@@ -190,6 +192,8 @@ map — feature → packages:
 | MCP Apps UI widgets | `@modelcontextprotocol/ext-apps` |
 | React data layer (`stitchkit/react`) | `@tanstack/react-query` `react-query-kit` |
 | MaxMind GeoIP (`stitchkit/geo`) | `maxmind` |
+| Browser OAuth client (`stitchkit/oauth`) | — |
+| Google OIDC verifier (`stitchkit/google`) | `google-auth-library` |
 | **Socket.IO server on Bun** | `socket.io` `@socket.io/bun-engine` |
 | **Socket.IO server on Node** | `socket.io` |
 | Socket.IO client | `socket.io-client` (runtime peer; unrelated root declarations remain peer-free) |
@@ -226,6 +230,7 @@ package. MCP hosts and client E2E additionally install
 - [MCP & agents](./mcp-and-agents.md) — contracts as AI tools.
 - [Realtime](./realtime.md) — Socket.IO and the cache bridge.
 - [Auth & errors](./auth-and-errors.md) — scopes, auth hooks, the error model.
+- [Browser OAuth and Google OIDC](./oauth.md) — PKCE transaction and verified provider identity.
 - [Testing & deployment](./testing-and-deployment.md).
 - [API reference](../api/reference.md) — every export, by entrypoint.
 
@@ -7489,9 +7494,12 @@ same Zod schema an HTTP or MCP call does.
 | `--quiet`             | Suppress non-essential stderr output                       |
 | `--dry-run`           | Print the resolved call without executing                  |
 | `--help`, `-h`        | Usage — top-level or per-command flag table                |
+| `--help <text>`       | List only the commands matching a substring                |
 | `--count-by <field>`  | Count records per distinct value — see [Aggregate views](#aggregate-views) |
 | `--sum <f> [--by <g>]`| Total a numeric field, optionally grouped                  |
-| `--top <n> --by <f>`  | Keep only the n largest groups                             |
+| `--sort <field>`      | Order records by a field, largest first                    |
+| `--ascending`         | Flip `--sort` to smallest first                            |
+| `--top <n>`           | Keep the n leading entries of the view asked for           |
 | `--table <a,b>`       | Render named fields as an aligned table                    |
 
 stdout carries the result; structured errors and progress go to stderr. With
@@ -7502,6 +7510,34 @@ diagnostics remain ordinary stderr text. This keeps stdout pipeable and
 `VALIDATION_ERROR → 1`, `UNAUTHORIZED → 2`, `FORBIDDEN → 3`, `NOT_FOUND → 4`,
 …) — override per app with `exitCodes`.
 
+### A narrower question than "all of them"
+
+On a discovered surface `--help` is the only way to learn what exists, and that
+can be two hundred commands. At that size the list stops being an answer: it
+scrolls past a person and costs an agent the same context an unfiltered result
+would. So there is a question between "one command" and "all of them":
+
+```bash
+myapp --help broadcast     # also: -h broadcast · help broadcast · --help=broadcast
+```
+
+```
+Commands matching "broadcast" (3 of 205):
+  broadcast_send    Send a broadcast to every subscriber
+  broadcast_cancel  Stop a running broadcast
+  announce_publish  Publish an announcement as a broadcast
+```
+
+The description is searched as well as the name, because the word someone knows
+is often in the sentence rather than the name — `announce_publish` above is
+matched that way. The count says what was left out.
+
+**No match is an exit code**, not an empty success: `0` over an empty list reads
+as "there are none", which is a different statement from "none of these". It
+exits with whatever `NOT_FOUND` maps to (`4` by default). Bare `--help` is
+unchanged, and `--help=false` still means what it always did — the reserved
+boolean's negation — so one value never carries two meanings.
+
 ## Application global options
 
 `--json` and friends above are the framework's. An application usually has
@@ -7632,9 +7668,20 @@ myapp item_list --top 5 --by status        # same view, written the other way ro
 myapp item_list --table id,status          # the one human-facing shape
 ```
 
-`--by` always names the **grouping** field, in every form it appears in, so the
-grammar has one meaning rather than two. Groups are ordered largest first, which
-is what makes `--top` a defined slice rather than an arbitrary one.
+Two words, one each: **`--by` groups, `--sort` orders.** That leaves `--top` a
+single meaning everywhere — *the n leading entries of the view you asked for* —
+so the question a CLI actually gets asked composes out of the parts:
+
+```bash
+myapp item_list --top 5 --sort messages --table id,messages   # the five biggest, as a table
+myapp item_list --sort messages --top 5 --json                # the same five, as records
+myapp item_list --sort name --ascending                       # ordered the other way
+```
+
+Groups come back largest first for the same reason. A record that carries no
+value for the sort field sorts **last in both directions**: it is not the
+smallest, it is not on the scale at all, and letting it lead an ascending list
+would answer a question nobody asked.
 
 Three rules worth knowing before you rely on them:
 
@@ -7646,6 +7693,8 @@ Three rules worth knowing before you rely on them:
   over an object with two array fields, is refused rather than guessed.
 - **Without a view flag the output is byte-for-byte what it was.** The flags are
   reserved CLI behaviour like `--json`; they never reach a tool argument.
+- **Ordering and grouping do not mix.** `--sort` with `--by`, `--count-by` or
+  `--sum` is refused rather than given a second meaning.
 
 A failed call still reports its own error and exit code. An aggregate over an
 error is not an answer to the question that was asked.
@@ -7725,8 +7774,12 @@ import {
 // otherwise everyone who already installed it never receives the fix.
 assertCliPublishable(previous, next)
 
-// Serving: one generated script per target, no JSON on the wire.
-renderCliInstaller({ manifest, asset: selectCliBuildAsset(manifest, target)!, binaryName: 'myapp' })
+// Serving: omit `asset` and one script covers every published target, selecting
+// by uname at run time — otherwise that dispatch is the last hand-written piece
+// of the install path, and every publisher writes the same x86_64 → x64 table.
+renderCliInstaller({ manifest, binaryName: 'myapp' })
+// Or pin one target explicitly:
+renderCliInstaller({ manifest, asset: selectCliBuildAsset(manifest, target), binaryName: 'myapp' })
 
 // Checking: bounded, at most once per interval, silent on any failure.
 const check = await checkCliUpdate({ manifestUrl, currentVersion, lastCheckedAt })
@@ -7772,6 +7825,28 @@ One unconvertible schema no longer takes the connection down with it. The tool
 is skipped and **named** (`onSkippedTool`, or a stderr line by default), so a
 surface of two hundred tools is not lost to one.
 
+**A remote refusal keeps its code.** A failed `tools/call` used to become a
+one-sentence `Error` with the result discarded, which cost three things at once:
+the code (so `exitCodes` had nothing to map and every remote failure exited `1`),
+the message the operator needed, and the error's own class — a plain `Error` is
+an *unexpected* error to the runner, so it printed a code frame of the framework
+bundle before the JSON failure and was then scrubbed to `INTERNAL_SERVER_ERROR`.
+A structured `{ error, details }` body is now relayed as the contract error it
+is, on every transport; anything else fails as `UPSTREAM_TOOL_ERROR` carrying
+what the server did send. Not `INTERNAL_SERVER_ERROR`, because nothing of ours
+broke.
+
+**On the CLI a discovered command prints the answer, not the envelope.**
+`tools/call` returns `{ content: [...], structuredContent? }`, and an agent mount
+needs exactly that — the parts are what a model is shown. The CLI is different in
+kind, because the handler's value is what gets printed, piped and aggregated:
+handed the envelope, `--count-by status` groups the *content parts* and answers
+`no record carries the field "status" — available: text, type`. So the CLI
+transport unwraps, and only it: `structuredContent` when the server sent one, a
+lone text part when it parses as JSON, its text when it does not. Several parts,
+an image or audio pass through whole — picking one of many would be inventing an
+answer.
+
 
 ## Auth parity
 
@@ -10028,6 +10103,118 @@ onError: (ctx, err) => {
 ```
 
 
+==============================================================================
+# Guide: OAuth & OpenID Connect  (docs/guide/oauth.md)
+==============================================================================
+
+# Browser OAuth and Google OIDC
+
+Stitchkit separates the browser's Authorization Code + PKCE transaction from the server's
+provider credential verification. The application still owns navigation, users, account matching
+and merge policy, persistence, sessions, roles, unlink policy and UI.
+
+## Supported profile
+
+The current Google adapter supports one explicit profile: **web OpenID Connect Authorization Code
+with PKCE**. A browser performs a top-level redirect, an application backend exchanges the
+one-time code, and Stitchkit returns a verified identity. It is the redirect-based sign-in path;
+it is not a generic name for every Google identity or authorization mechanism.
+
+Keep adjacent Google capabilities separate because their credentials, lifecycle and trust
+boundaries differ:
+
+| Capability | Credential/result | Stitchkit support |
+| --- | --- | --- |
+| Web OIDC Authorization Code + PKCE | verified user identity | `stitchkit/oauth` + `stitchkit/google` |
+| Google Identity Services button, One Tap or FedCM | browser-delivered ID credential | not implemented |
+| Incremental authorization for Drive, Calendar or other Google APIs | access/refresh tokens and granted scopes | not implemented |
+| Installed Android, iOS or desktop application | platform client and system-browser callback | not implemented |
+| Limited-input/device authorization | device/user codes and polling lifecycle | not implemented |
+| Service account or workload identity | application identity, possibly domain-wide delegation | not implemented |
+
+Do not add these as mode flags to `GoogleOidcClient`. Each future capability gets its own adapter
+and result type, while the provider-neutral PKCE transaction can be reused where its protocol
+actually applies. In particular, authentication establishes the person; authorization to Google
+APIs is requested later, in product context, and owns refresh-token persistence and revocation.
+
+## Browser transaction
+
+`stitchkit/oauth` is browser-safe and provider-neutral. It creates independent 32-byte `state`,
+`nonce` and PKCE verifier values, writes one versioned transaction to caller-provided storage and
+returns the authorization URL without navigating:
+
+```ts
+import { createAuthorizationCodeClient, safeInternalReturnPath } from 'stitchkit/oauth'
+import { z } from 'zod'
+
+const oauth = createAuthorizationCodeClient({
+  authorizationEndpoint: 'https://accounts.google.com/o/oauth2/v2/auth',
+  clientId,
+  redirectUri: `${window.location.origin}/auth/google/callback`,
+  scopes: ['openid', 'email', 'profile'],
+  storage: window.sessionStorage,
+  storageKey: 'app:google:oauth',
+  contextSchema: z.object({ mode: z.enum(['login', 'link']), returnTo: z.string() }),
+  authorizationParameters: { prompt: 'select_account' },
+})
+
+const { authorizationUrl } = await oauth.begin({
+  context: { mode: 'login', returnTo: '/account' },
+})
+window.location.assign(authorizationUrl)
+
+// In the callback route. Reading is one-shot even when validation fails.
+const pending = oauth.consume({ state: new URL(location.href).searchParams.get('state') ?? '' })
+const returnTo = safeInternalReturnPath(pending.context.returnTo, '/')
+```
+
+Provider parameters cannot replace protocol-owned fields. `consume` removes the pending value
+before parsing, version checking, context validation or state comparison, so a malformed callback
+and a React Strict Mode replay cannot reuse it. Errors expose a stable
+`AuthorizationCodeClientError.code` and never include transaction contents.
+
+Token exchange, ID-token verification, credential persistence and application identity do not
+belong to this browser entrypoint.
+
+## Google server adapter
+
+Install the optional peer only in an application that imports `stitchkit/google`:
+
+```bash
+bun add google-auth-library
+```
+
+```ts
+import { createGoogleOidcClient } from 'stitchkit/google'
+
+const google = createGoogleOidcClient({
+  clientId: env.GOOGLE_CLIENT_ID,
+  clientSecret: env.GOOGLE_CLIENT_SECRET,
+  allowedRedirectUris: [env.GOOGLE_WEB_CALLBACK, env.GOOGLE_LOOPBACK_CALLBACK],
+  timeoutMs: 10_000,
+})
+
+const identity = await google.exchangeAuthorizationCode({
+  code,
+  codeVerifier: pending.codeVerifier,
+  redirectUri: pending.redirectUri,
+  nonce: pending.nonce,
+})
+// { subject, email, name?, picture? }
+```
+
+The redirect must match the immutable allowlist exactly before any outbound call. The token
+exchange is bounded by an abort deadline; `google-auth-library` verifies the ID-token signature,
+issuer, audience and expiry. Stitchkit additionally requires `sub`, a valid verified email and an
+exact nonce. Access, refresh and raw ID tokens never leave the adapter.
+
+`GoogleOidcError.code` distinguishes `MISCONFIGURED`, `INVALID_CREDENTIAL` and
+`UPSTREAM_UNAVAILABLE` with fixed safe messages. Endpoints compose their own rate limiter and then
+map the verified identity into application-owned user/session policy. Offline access, Google API
+scopes, database writes, user lookup or merging, session rotation, roles and UI remain outside the
+adapter.
+
+
 ==============================================================================
 # Guide: Observability  (docs/guide/observability.md)
 ==============================================================================
@@ -17093,6 +17280,35 @@ adapter is used.
 
 ---
 
+## `stitchkit/oauth`
+
+Browser-safe, provider-neutral Authorization Code + PKCE transaction mechanics. Navigation,
+token exchange, identity and sessions remain application-owned. See the [OAuth guide](../guide/oauth.md).
+
+| Export | Kind | Summary |
+|--------|------|---------|
+| `createAuthorizationCodeClient` / `AuthorizationCodeClient` / `AuthorizationCodeClientConfig` | function / _type_ | begin one S256 authorization request and consume its versioned pending transaction exactly once |
+| `BeginAuthorizationCodeInput` / `BeginAuthorizationCodeResult` / `ConsumeAuthorizationCodeInput` / `ConsumedAuthorizationCode` | _type_ | inputs and safe protocol result around caller-validated context |
+| `AuthorizationCodeStorage` / `AuthorizationCodeCrypto` | _type_ | injected browser capabilities; neither is read at module initialisation |
+| `AuthorizationCodeClientError` / `AuthorizationCodeClientErrorCode` | class / _type_ | fixed safe failure codes for configuration, context, storage, transaction and state failures |
+| `safeInternalReturnPath` | function | accept only a single-slash current-origin path without backslashes or ASCII controls |
+
+---
+
+## `stitchkit/google`
+
+Server-only Google code exchange and verified OIDC identity. This entry requires the optional
+`google-auth-library` peer. See the [OAuth guide](../guide/oauth.md).
+
+| Export | Kind | Summary |
+|--------|------|---------|
+| `createGoogleOidcClient` / `GoogleOidcClient` / `GoogleOidcClientConfig` | function / _type_ | exact-redirect, deadline-bounded code exchange and verified identity projection |
+| `ExchangeGoogleAuthorizationCodeInput` / `GoogleOidcIdentity` / `GoogleOidcClaims` | _type_ | callback input, provider-neutral result and verifier seam claims |
+| `GoogleOidcExchangeInput` / `GoogleOidcTokenTransport` / `GoogleOidcIdTokenVerifier` | _type_ | injectable transport and verifier boundaries used by production and deterministic tests |
+| `GoogleOidcError` / `GoogleOidcErrorCode` | class / _type_ | safe `MISCONFIGURED`, `INVALID_CREDENTIAL` or retryable `UPSTREAM_UNAVAILABLE` failure |
+
+---
+
 ## `stitchkit/declaration`
 
 Zod-only, dependency-free. The **project declaration**: the single
@@ -17224,11 +17440,11 @@ SDK nor the `ai` peer.
 | `CliBuildAssetSchema` / `CliBuildAsset` | schema / _type_ | one download; `size` and `sha256` describe the **decompressed** bytes |
 | `CliBuildTargetSchema` / `CliBuildTarget` | schema / _type_ | `{ platform, arch }` |
 | `CliBuildStampSchema` / `CliBuildStamp` | schema / _type_ | the version/commit/build time carried inside a binary |
-| `CliInstallerConfig` | _type_ | manifest, asset, binary name and default install directory |
+| `CliInstallerConfig` | _type_ | manifest, binary name, default install directory, and an optional `asset` — omit it for one script that selects the target by `uname` |
 | `CliUpdateCheckConfig` / `CliUpdateCheck` | _type_ | check inputs, and its four answers — `skipped`, `current`, `outdated`, `unknown` |
 | `CliUpdateApplyConfig` / `AppliedCliUpdate` | _type_ | apply inputs and the replaced path, byte count and digest |
 | `CliProfileStore` / `CliProfileStoreConfig` / `ResolvedCliProfile` | _type_ | the profile store, its directory/schema/hint config, and one resolution |
-| `CliResultView` | _type_ | the requested aggregate — `count`, `sum` or `table` |
+| `CliResultView` | _type_ | the requested view — `count`, `sum`, or `records` (ordered and/or table-rendered) |
 | `CliViewOutput` | _type_ | a JSON value, or the one human-facing text shape |
 | `CliGlobalOptionsParse` | _type_ | `{ argv, globals }` returned by `extractCliGlobalOptions` |
 | `CliArgvRoute` | _type_ | `{ command, commandArgv, topLevelHelp, version, error? }` returned by `routeCliArgv` |

package/llms.txt

@@ -21,6 +21,7 @@ Build with stitchkit: define a contract once, then `implement` it and serve it (
 - [Realtime](https://github.com/max-listov/stitchkit/blob/master/docs/guide/realtime.md): Socket.IO server/client wrappers, handshake auth, the cache bridge, a raw WebSocket lane
 - [Live data](https://github.com/max-listov/stitchkit/blob/master/docs/guide/live.md): defineEvents beside the contract, watched reads shared by every subscriber, keyspaces with authoritative memory, and the trust fence
 - [Auth & errors](https://github.com/max-listov/stitchkit/blob/master/docs/guide/auth-and-errors.md): scopes, createAuthHook, JWT/cookies, the AppError model, the stitch error-code registry
+- [OAuth & OpenID Connect](https://github.com/max-listov/stitchkit/blob/master/docs/guide/oauth.md): browser Authorization Code + PKCE transactions and the optional Google OIDC server adapter
 - [Observability](https://github.com/max-listov/stitchkit/blob/master/docs/guide/observability.md): request and tool-call observability, W3C trace context, createObservability
 - [Testing & deployment](https://github.com/max-listov/stitchkit/blob/master/docs/guide/testing-and-deployment.md): in-process testing; deploying on Bun and on Node (serveNode)
 - [Multi-tenant](https://github.com/max-listov/stitchkit/blob/master/docs/guide/multi-tenant.md): a /tenants/:id/… scenario end-to-end — scopePrefixes, scoped client, extend

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stitchkit",
-  "version": "0.90.4",
+  "version": "0.90.6",
   "description": "Contract-first backend framework — one defineContract() into an HTTP API, MCP tools, AI-agent tools and a typed client. Bun and Node.",
   "keywords": [
     "bun",
@@ -185,6 +185,14 @@
       "types": "./dist/geo.d.ts",
       "import": "./dist/geo.js"
     },
+    "./oauth": {
+      "types": "./dist/oauth.d.ts",
+      "import": "./dist/oauth.js"
+    },
+    "./google": {
+      "types": "./dist/google.d.ts",
+      "import": "./dist/google.js"
+    },
     "./declaration": {
       "types": "./dist/declaration.d.ts",
       "import": "./dist/declaration.js"
@@ -202,7 +210,8 @@
     "check": "bun x tsc --noEmit",
     "build:js": "bun run build:entrypoints && bun scripts/preserve-webpack-ignore.mjs",
     "build:types": "bun x tsc -p tsconfig.build.json --emitDeclarationOnly && bun scripts/rewrite-declaration-specifiers.mjs",
-    "build": "rm -rf dist && cp ../../CHANGELOG.md ./CHANGELOG.md && bun run build:js && chmod +x dist/upgrade-cli.js && bun run build:types && bun scripts/check-browser-clean.mjs && bun scripts/check-browser-executes.mjs && bun scripts/check-env-live.mjs && bun scripts/check-public-types.mjs && bun scripts/check-declarations-strict.mjs",
+    "build": "bun ../../scripts/package-build-lock.ts -- bun run build:unlocked",
+    "build:unlocked": "rm -rf dist && cp ../../CHANGELOG.md ./CHANGELOG.md && bun run build:js && chmod +x dist/upgrade-cli.js && bun run build:types && bun scripts/check-browser-clean.mjs && bun scripts/check-browser-executes.mjs && bun scripts/check-env-live.mjs && bun scripts/check-public-types.mjs && bun scripts/check-declarations-strict.mjs",
     "dev": "bun run build:entrypoints -- --watch",
     "prepack": "cp ../../README.md ./README.md && bun ../../scripts/gen-llms.ts && bun run build",
     "test": "bun test",
@@ -214,23 +223,24 @@
     "build:entrypoints": "bun scripts/build-entrypoints.mjs"
   },
   "peerDependencies": {
-    "@modelcontextprotocol/ext-apps": "^1.7.2",
+    "@modelcontextprotocol/ext-apps": "^1.7.2 || ^2.0.0",
     "@modelcontextprotocol/server": "^2.0.0",
-    "@openrouter/ai-sdk-provider": "^3.0.0",
+    "@openrouter/ai-sdk-provider": "^3.1.0",
     "@opentelemetry/api": "^1.9.0",
-    "@socket.io/bun-engine": "^0.1.1",
+    "@socket.io/bun-engine": "^0.1.2",
     "@socket.io/component-emitter": "^3.1.2",
     "@tanstack/react-query": ">=5",
-    "@types/bun": "^1.3.14",
-    "ai": "^7.0.0",
-    "grammy": "^1.45.1",
+    "@types/bun": "^1.4.2",
+    "ai": "^7.0.107",
+    "grammy": "^1.46.0",
+    "google-auth-library": "^11.1.0",
     "maxmind": "^5.0.7",
     "react": ">=18",
     "react-query-kit": "^3.3.3",
     "socket.io": "^4.8.3",
     "socket.io-client": "^4.8.3",
-    "srvx": "^0.12.5",
-    "zod": "^4.4.3"
+    "srvx": "^0.12.5 || ^1.0.5",
+    "zod": "^4.6.5"
   },
   "peerDependenciesMeta": {
     "@modelcontextprotocol/ext-apps": {
@@ -263,6 +273,9 @@
     "grammy": {
       "optional": true
     },
+    "google-auth-library": {
+      "optional": true
+    },
     "maxmind": {
       "optional": true
     },
@@ -283,30 +296,31 @@
     }
   },
   "dependencies": {
-    "ky": "^2.0.2"
+    "ky": "^2.1.0"
   },
   "devDependencies": {
     "@modelcontextprotocol/client": "^2.0.0",
-    "@modelcontextprotocol/ext-apps": "^1.7.5",
+    "@modelcontextprotocol/ext-apps": "^2.0.0",
     "@modelcontextprotocol/server": "^2.0.0",
-    "@openrouter/ai-sdk-provider": "^3.0.0",
+    "@openrouter/ai-sdk-provider": "^3.1.0",
     "@opentelemetry/api": "^1.9.0",
-    "@socket.io/bun-engine": "^0.1.1",
+    "@socket.io/bun-engine": "^0.1.2",
     "@socket.io/component-emitter": "^3.1.2",
-    "@tanstack/react-query": "5.102.3",
-    "@types/bun": "^1.4.0",
+    "@tanstack/react-query": "5.103.1",
+    "@types/bun": "^1.4.2",
     "@types/json-schema": "^7.0.15",
-    "@types/react": "^19.2.18",
+    "@types/react": "^19.3.0",
     "@typescript/typescript6": "^6.0.2",
-    "ai": "^7.0.93",
+    "ai": "^7.0.107",
     "fake-indexeddb": "^6.2.5",
-    "grammy": "^1.45.1",
-    "react": "^19.2.8",
+    "grammy": "^1.46.0",
+    "google-auth-library": "^11.1.0",
+    "react": "^19.3.0",
     "react-query-kit": "^3.3.4",
     "socket.io": "^4.8.3",
     "socket.io-client": "^4.8.3",
-    "srvx": "^0.12.7",
+    "srvx": "^1.0.5",
     "typescript": "^7.0.2",
-    "zod": "^4.4.3"
+    "zod": "^4.6.5"
   }
 }

package/dist/{index-8crm1srv.js → index-3yqgj323.js}

@@ -18,13 +18,13 @@ import {
   probeAgentProcessSandbox,
   refuseMissingCodingPath
 } from "./index-gte38nbm.js";
+import {
+  defineRuntimeTool
+} from "./index-8z9we758.js";
 import {
   conflict,
   forbidden
 } from "./index-scs3f1eg.js";
-import {
-  defineRuntimeTool
-} from "./index-8z9we758.js";
 
 // src/agent-runtime/coding-tool-contract.ts
 import { z } from "zod";

package/dist/{index-vcnfwrtr.js → index-8pjqv3zh.js}

@@ -7,20 +7,20 @@ import {
   normalizeError,
   validateDeclaredOutput
 } from "./index-2hryh65w.js";
+import {
+  coerceJsonArgs
+} from "./index-7zbps32p.js";
+import {
+  objectShapeKeys
+} from "./index-fenaekmk.js";
 import {
   AppError,
   STITCH_ERROR_STATUS,
   isStitchErrorCode
 } from "./index-scs3f1eg.js";
-import {
-  coerceJsonArgs
-} from "./index-7zbps32p.js";
 import {
   isUnsafeKey
 } from "./index-kzfs85xp.js";
-import {
-  objectShapeKeys
-} from "./index-fenaekmk.js";
 import {
   isRecord
 } from "./index-77fekveh.js";