stitchkit 0.93.0 → 0.94.1

package/dist/tools/cli-stream.d.ts

@@ -1,93 +0,0 @@
-/**
- * One operation per line, and a batch that can be resumed.
- *
- * Every agent-facing CLI grows the same two commands, and the mechanics contain
- * nothing about any product: read a line, run the operation, answer with the
- * same id, do not let one bad line stop the stream — and for a batch, do not
- * run again what already ran.
- *
- * They are factories rather than framework-owned command names. Reserving
- * `jsonl` and `batch` would take two names out of a namespace that belongs to
- * the consumer: an application that already has a `batch` command would either
- * fail at startup or find its own command silently shadowed. So the consumer
- * mounts these under whatever it calls them, exactly like its own commands.
- */
-import { z } from 'zod';
-import type { CliInvocationResult, CliInvoker } from './cli-invoke.js';
-/** One line's answer: the id it came with, plus what running it produced. */
-export interface CliStreamAnswer extends CliInvocationResult {
-    /** Correlation id, echoed from the line. */
-    id: string;
-    /** Present when this answer was replayed from a checkpoint rather than run. */
-    replayed?: true;
-}
-export interface CliStreamCommandConfig {
-    /** Command name — the consumer's namespace, not the framework's. */
-    name?: string;
-    description?: string;
-    /** The compiled surface to run against. */
-    invoker: CliInvoker | (() => Promise<CliInvoker>);
-    /**
-     * Where the lines come from. Default: `process.stdin`, **as they arrive**.
-     *
-     * This is the difference between a pipe and a conversation. The framework's
-     * ordinary stdin routing accumulates the whole stream and hands the command a
-     * string, which is right for `--prompt "$(cat file)"` and fatally wrong here:
-     * an agent that writes one line and waits for its answer would wait for its
-     * own EOF, which never comes. So the stream owns its input and answers each
-     * line as it is read.
-     */
-    readLines?: () => AsyncIterable<string>;
-}
-/**
- * Lines from a byte stream, delivered as they arrive.
- *
- * Split on `\n` with a trailing `\r` dropped, so a producer on Windows is not a
- * silent parse failure on every line. A final line with no newline is delivered
- * at end of stream rather than discarded.
- */
-export declare function readStdinLines(source?: AsyncIterable<Uint8Array | string>): AsyncIterable<string>;
-/**
- * Run each line as it arrives, answering before reading the next.
- *
- * Sequential on purpose: the answers carry ids, so a consumer could correlate
- * out-of-order ones — but a stream that runs ahead of its answers removes the
- * one form of backpressure an agent has, which is not answering yet.
- */
-export declare function runCliStream(invoker: CliInvoker, lines: AsyncIterable<string>, onAnswer: (answer: CliStreamAnswer) => void, hooks?: CliStreamHooks): Promise<void>;
-/** What a caller decides per line, without owning the loop that reads them. */
-export interface CliStreamHooks {
-    /** Answer this line without running it — a replay, or a refusal. */
-    before?: (id: string, line: {
-        command: string;
-        args: Record<string, unknown>;
-    }) => CliStreamAnswer | undefined;
-    /** Observe what running it produced, before the answer is written. */
-    after?: (id: string, line: {
-        command: string;
-        args: Record<string, unknown>;
-    }, outcome: CliInvocationResult) => void;
-}
-/**
- * A stream command the consumer mounts under its own name.
- *
- * Answers go to stdout one JSON object per line; nothing else does, so a script
- * can read stdout as data while diagnostics stay on stderr.
- */
-export declare function defineCliStreamCommand(config: CliStreamCommandConfig): import("./cli-command.js").CliCommandDefinitionWithoutOutput<z.ZodObject<{}, z.core.$strip>>;
-export interface CliBatchCommandConfig extends CliStreamCommandConfig {
-    /** Where the checkpoint lives. Relative paths resolve against the process cwd. */
-    checkpointPath?: string;
-}
-/**
- * A resumable batch.
- *
- * The checkpoint records, per line id, the digest of the line that produced the
- * recorded answer. A re-run replays what already ran; a line whose CONTENT
- * changed under the same id is refused rather than quietly re-run or quietly
- * replayed, because both of those answer a question nobody asked.
- */
-export declare function defineCliBatchCommand(config: CliBatchCommandConfig): import("./cli-command.js").CliCommandDefinitionWithoutOutput<z.ZodObject<{
-    checkpoint: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>>;
-//# sourceMappingURL=cli-stream.d.ts.map

package/dist/tools/cli-stream.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli-stream.d.ts","sourceRoot":"","sources":["../../src/tools/cli-stream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAEpE,6EAA6E;AAC7E,MAAM,WAAW,eAAgB,SAAQ,mBAAmB;IAC1D,4CAA4C;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,IAAI,CAAC;CACjB;AASD,MAAM,WAAW,sBAAsB;IACrC,oEAAoE;IACpE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2CAA2C;IAC3C,OAAO,EAAE,UAAU,GAAG,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IAClD;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;CACzC;AAED;;;;;;GAMG;AACH,wBAAuB,cAAc,CACnC,MAAM,GAAE,aAAa,CAAC,UAAU,GAAG,MAAM,CAAiB,GACzD,aAAa,CAAC,MAAM,CAAC,CAcvB;AAqCD;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,EAC5B,QAAQ,EAAE,CAAC,MAAM,EAAE,eAAe,KAAK,IAAI,EAC3C,KAAK,GAAE,cAAmB,GACzB,OAAO,CAAC,IAAI,CAAC,CAkBf;AAED,+EAA+E;AAC/E,MAAM,WAAW,cAAc;IAC7B,oEAAoE;IACpE,MAAM,CAAC,EAAE,CACP,EAAE,EAAE,MAAM,EACV,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,KACrD,eAAe,GAAG,SAAS,CAAC;IACjC,sEAAsE;IACtE,KAAK,CAAC,EAAE,CACN,EAAE,EAAE,MAAM,EACV,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,EACxD,OAAO,EAAE,mBAAmB,KACzB,IAAI,CAAC;CACX;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,sBAAsB,6FAcpE;AAED,MAAM,WAAW,qBAAsB,SAAQ,sBAAsB;IACnE,kFAAkF;IAClF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB;;mBA+DlE"}

package/dist/tools/cli-update.d.ts

@@ -1,126 +0,0 @@
-import { type CliBuildAsset, type CliBuildManifest, type CliBuildTarget } from './cli-manifest.js';
-import { type CliSignatureVerdict, type CliTrustRoot } from './cli-signature.js';
-export interface CliUpdateCheckConfig {
-    manifestUrl: string;
-    currentVersion: string;
-    /** At most one network check per interval; default 24 h. */
-    intervalMs?: number;
-    /** When the last check happened, from the application's own state. */
-    lastCheckedAt?: number;
-    now?: number;
-    /** Header+body deadline for the check; default 2 s. */
-    timeoutMs?: number;
-    target?: CliBuildTarget;
-    allowPrivateHosts?: boolean;
-    /**
-     * Keys this build trusts. With none, nothing is enforced and the verdict says
-     * so out loud (`unenforced`) rather than leaving "checked" to be assumed.
-     */
-    trust?: CliTrustRoot;
-}
-/**
- * Four answers, never three. "Could not ask" is not "up to date": collapsing
- * them is how a tool goes quiet about its own staleness for months.
- */
-export type CliUpdateCheck = {
-    status: 'skipped';
-    nextCheckAt: number;
-} | {
-    status: 'current';
-    version: string;
-    signature?: CliSignatureVerdict;
-} | {
-    status: 'outdated';
-    version: string;
-    manifest: CliBuildManifest;
-    asset?: CliBuildAsset;
-    /** What the signature check concluded — always present once it ran. */
-    signature?: CliSignatureVerdict;
-} | {
-    status: 'unknown';
-    reason: string;
-};
-/**
- * Compare two versions, or refuse to. `undefined` means "these are not
- * comparable", which the caller reports as unknown rather than guessing an
- * order — an update prompt derived from a guess is worse than no prompt.
- */
-export declare function compareCliVersions(left: string, right: string): number | undefined;
-/** Ask whether a newer build exists. Never throws; never blocks for long. */
-export declare function checkCliUpdate(config: CliUpdateCheckConfig): Promise<CliUpdateCheck>;
-export interface CliUpdateApplyConfig {
-    asset: CliBuildAsset;
-    /** The file to replace; defaults to the running executable. */
-    targetPath?: string;
-    timeoutMs?: number;
-    maxBytes?: number;
-    allowPrivateHosts?: boolean;
-    /**
-     * The document the asset came from, so authorship can be checked here too.
-     *
-     * `CliBuildAsset` cannot carry the proof: the signature covers the manifest's
-     * identity and every asset's digest together, which is what closes the chain
-     * on the file that executes. Passing both is what lets this refuse **before**
-     * it downloads anything.
-     */
-    manifest?: CliBuildManifest;
-    /** Keys this build trusts. With `manifest`, the pair is checked before the fetch. */
-    trust?: CliTrustRoot;
-    /**
-     * Keep the bytes being replaced, here, so there is something to go back to.
-     *
-     * Written after the new bytes are verified and before the target is replaced:
-     * a backup taken earlier could preserve a binary that was about to be
-     * replaced by a download that then failed its digest, and a backup taken
-     * later has nothing left to copy. The target's own mode is carried over — the
-     * point of a backup is to be runnable.
-     */
-    backupPath?: string;
-}
-export interface AppliedCliUpdate {
-    path: string;
-    bytes: number;
-    sha256: string;
-    /** Where the replaced bytes were kept, when a backup was asked for and there was one. */
-    backupPath?: string;
-    /** Digest of the replaced bytes — what `rollbackCliUpdate` expects to find. */
-    backupSha256?: string;
-}
-/**
- * Download, verify and replace the binary.
- *
- * The digest is taken over the decompressed bytes — the file that will be
- * executed — and the last step is a rename inside the target's own directory,
- * so the executable on the PATH is either the old one or the new one and never
- * a partial write.
- */
-export declare function applyCliUpdate(config: CliUpdateApplyConfig): Promise<AppliedCliUpdate>;
-export interface CliRollbackConfig {
-    /** The file to restore onto; defaults to the running executable. */
-    targetPath?: string;
-    /** The copy kept by a previous `applyCliUpdate({ backupPath })`. */
-    backupPath: string;
-    /**
-     * The digest the backup must have — `backupSha256` from that update.
-     *
-     * Required, not optional. A rollback that installs whatever happens to be at
-     * the backup path is a second install of an unverified binary, and the moment
-     * it is used is the moment nobody is in a position to check.
-     */
-    expectedSha256: string;
-}
-export interface RolledBackCliUpdate {
-    path: string;
-    bytes: number;
-    sha256: string;
-}
-/**
- * Put the previous build back.
- *
- * Rolling back is a property of updating, not of the application: the same
- * attention to atomicity and file mode the replacement gets, applied in the
- * other direction. The digest is checked first, so a corrupted or swapped
- * backup is a refusal rather than an unbootable tool.
- */
-export declare function rollbackCliUpdate(config: CliRollbackConfig): RolledBackCliUpdate;
-//# sourceMappingURL=cli-update.d.ts.map

package/dist/tools/cli-update.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli-update.d.ts","sourceRoot":"","sources":["../../src/tools/cli-update.ts"],"names":[],"mappings":"AAeA,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,gBAAgB,EAErB,KAAK,cAAc,EAGpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,YAAY,EAGlB,MAAM,iBAAiB,CAAC;AASzB,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;OAGG;IACH,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,mBAAmB,CAAA;CAAE,GACvE;IACE,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,uEAAuE;IACvE,SAAS,CAAC,EAAE,mBAAmB,CAAC;CACjC,GACD;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAe1C;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAalF;AAED,6EAA6E;AAC7E,wBAAsB,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAmE1F;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,aAAa,CAAC;IACrB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,qFAAqF;IACrF,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,yFAAyF;IACzF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAqE5F;AAkBD,MAAM,WAAW,iBAAiB;IAChC,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,mBAAmB,CAchF"}

package/dist/tools/cli-view.d.ts

@@ -1,12 +0,0 @@
-import { type CliResultView } from './cli-args.js';
-/** What a view produces: a JSON value, or the one human-facing shape. */
-export type CliViewOutput = {
-    kind: 'json';
-    data: unknown;
-} | {
-    kind: 'text';
-    text: string;
-};
-/** Compute the requested view, or refuse it with a message naming the field. */
-export declare function renderCliView(data: unknown, view: CliResultView): CliViewOutput;
-//# sourceMappingURL=cli-view.d.ts.map

package/dist/tools/cli-view.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli-view.d.ts","sourceRoot":"","sources":["../../src/tools/cli-view.ts"],"names":[],"mappings":"AAeA,OAAO,EAAoB,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAElE,yEAAyE;AACzE,MAAM,MAAM,aAAa,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAwK7F,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,GAAG,aAAa,CA+B/E"}

package/dist/tools/cli-wait.d.ts

@@ -1,54 +0,0 @@
-/**
- * `--wait` polling — block on an async tool result until it reaches a terminal
- * state. The headline CLI feature (a `Bash(run_in_background)` generation that
- * notifies when done), kept strictly generic per ADR 0002: the core knows
- * nothing about generations or statuses. The consumer supplies how to read the
- * poll target from the first result (`poll`), which tool to re-call (`tool`)
- * and when it is done (`done`).
- */
-import type { ToolResult } from './execute.js';
-export interface CliWaitConfig {
-    /**
-     * Extract the poll-tool arguments from the initial result (e.g. `{ id }` from
-     * a `generate` response). Return `null` when there is nothing to wait on.
-     */
-    poll: (result: unknown) => Record<string, unknown> | null;
-    /** The tool/command name to call on each poll tick (e.g. `get_generation`). */
-    tool: string;
-    /** Done when this returns `true` for a poll result. */
-    done: (result: unknown) => boolean;
-    /**
-     * Terminal domain failure. A `true` result stops polling and turns the
-     * otherwise-successful tool payload into a `WAIT_FAILED` CLI failure. Checked
-     * before `done`, including for the initial result, so contradictory
-     * predicates fail closed.
-     */
-    failed?: (result: unknown) => boolean;
-    /** Backoff schedule in seconds; the last entry repeats. Default `[2,3,5,5,8,10]`. */
-    backoff?: number[];
-    /** Max seconds before giving up. Default `600`. */
-    timeout?: number;
-}
-export interface PollParams {
-    /** The result of the initial (non-poll) call. */
-    initial: ToolResult;
-    wait: CliWaitConfig;
-    /** Run a tool by name — the CLI binds this to its tool map + runner. */
-    call: (toolName: string, args: Record<string, unknown>) => Promise<ToolResult>;
-    /** Override `wait.timeout` (from `--wait-timeout`). */
-    timeoutSec?: number;
-    /** Progress callback — the CLI logs ticks to stderr unless `--quiet`. */
-    onTick?: (attempt: number, elapsedSec: number) => void;
-    /** Injectable sleep for tests. */
-    sleepFn?: (ms: number) => Promise<void>;
-    /** Explicit caller cancellation. Process SIGINT wiring remains application-owned. */
-    signal?: AbortSignal;
-}
-/**
- * Poll `wait.tool` until `wait.done` or the timeout. Returns the last poll
- * result; returns the initial result untouched when the initial call failed,
- * already satisfies `done`, or yields no poll target. A terminal result matched
- * by `failed` produces `WAIT_FAILED`; a timeout produces `TIMEOUT`.
- */
-export declare function pollUntilDone(params: PollParams): Promise<ToolResult>;
-//# sourceMappingURL=cli-wait.d.ts.map

package/dist/tools/cli-wait.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli-wait.d.ts","sourceRoot":"","sources":["../../src/tools/cli-wait.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAG5C,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC1D,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC;IACnC;;;;;OAKG;IACH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC;IACtC,qFAAqF;IACrF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAeD,MAAM,WAAW,UAAU;IACzB,iDAAiD;IACjD,OAAO,EAAE,UAAU,CAAC;IACpB,IAAI,EAAE,aAAa,CAAC;IACpB,wEAAwE;IACxE,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/E,uDAAuD;IACvD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;IACvD,kCAAkC;IAClC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,qFAAqF;IACrF,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAuC3E"}

package/dist/tools/cli.d.ts

@@ -1,94 +0,0 @@
-import type { ZodObject, z } from 'zod';
-import { type ExitCodeMap } from './cli-format.js';
-import { type CliInvocationResult, type CliInvoker, type CliInvokerCommand, type CliInvokerConfig, type CliSurfaceSource, cliInvocationResult, createCliInvoker } from './cli-invoke.js';
-import { type CliWaitConfig } from './cli-wait.js';
-import { type ErrorHintFn, type ToolCallHooks, type ToolLifecycle } from './execute.js';
-export type { CliInvocationResult, CliInvoker, CliInvokerCommand, CliInvokerConfig, CliSurfaceSource, };
-export { cliInvocationResult, createCliInvoker };
-export interface CliConfig<TAuth = unknown, TContext extends Record<string, unknown> = Record<string, unknown>, TGlobals extends ZodObject = ZodObject> extends CliInvokerConfig<TAuth, TContext, TGlobals> {
-    /** Program version — printed by `--version`. */
-    version: string;
-    /**
-     * Identity for the single CLI invocation — resolved ONCE at startup (from an
-     * env var / token file), like a stdio MCP server, not per call. A value or a
-     * promise of one.
-     */
-    auth?: TAuth | Promise<TAuth>;
-    /**
-     * Lazily resolve identity only when a managed command/surface actually needs
-     * it. Receives the application's global options, so `--caller <key>` can
-     * select WHICH identity this invocation speaks as.
-     */
-    resolveAuth?: (globals: z.output<TGlobals>) => TAuth | Promise<TAuth>;
-    /**
-     * The application's OWN global options — invocation context that belongs to
-     * no single operation: which identity key, which checkout, which profile.
-     * Declared as a Zod object of optional fields; `createCli` lifts these flags
-     * out of argv wherever they stand (before or after the command name),
-     * validates them against this schema and keeps them out of every operation's
-     * arguments. A name that collides with a framework option or with a field of
-     * any command is a startup error, never silent shadowing.
-     */
-    globalOptions?: TGlobals;
-    /**
-     * Context merged into every handler. Typed against the app's context shape
-     * when the CLI is built via `createToolkit<AppContext>()`.
-     */
-    context?: (auth: Awaited<TAuth> | undefined, globals: z.output<TGlobals>) => TContext;
-    /** Explicit cancellation for this invocation; applications may bind SIGINT to it. */
-    signal?: AbortSignal;
-    /** Tool-call observability hooks — `afterToolCall` fires for every result,
-     *  `onToolError` for the raw value behind a thrown one. */
-    hooks?: ToolCallHooks;
-    /**
-     * Auth / scope gate — pass the same `createAuthHook` result used for the HTTP
-     * server's `beforeHandle` so a CLI command is guarded identically. Without it
-     * a scoped command bypasses the gate.
-     */
-    lifecycle?: ToolLifecycle;
-    /** Coerce JSON-stringified arrays/objects in arguments. Default: true. */
-    coerceJsonArgs?: boolean;
-    /** Global error hint appended to every failed command's error. */
-    errorHint?: ErrorHintFn;
-    /** Override exit codes per `ToolResult.code`, merged over the defaults. */
-    exitCodes?: ExitCodeMap;
-    /**
-     * Route a command's unknown `--flags` into a freeform object field, keyed by
-     * command name → field. Lets `generate <model> --prompt … --aspect_ratio 16:9`
-     * fill the model's `parameters` directly, instead of a `--parameters '{json}'`
-     * blob. Values are loosely coerced (`"30"` → `30`, `"true"` → `true`).
-     */
-    passthrough?: Record<string, string>;
-    /** Per-command `--wait` polling behaviour, keyed by command name. */
-    wait?: Record<string, CliWaitConfig>;
-    /** Extract downloadable media URLs from a result for `--output-dir`. */
-    download?: (result: unknown) => Array<{
-        url: string;
-        name: string;
-    }>;
-    /**
-     * Allow `--output-dir` downloads from private / internal / loopback hosts.
-     * Default `false` — the SSRF guard, since the URLs come from handler output.
-     */
-    allowPrivateDownloadHosts?: boolean;
-    /** Max bytes per `--output-dir` download before aborting. Default 100 MB. */
-    maxDownloadBytes?: number;
-    /**
-     * Deadline for producing response headers per `--output-dir` download (DNS,
-     * connects and redirects share it). Default 15 seconds.
-     */
-    downloadTimeoutMs?: number;
-    /** argv to parse — default `process.argv.slice(2)`; injectable for tests. */
-    argv?: string[];
-    /** stdout sink — default `process.stdout`; injectable for tests. */
-    stdout?: (text: string) => void;
-    /** stderr sink — default `process.stderr`; injectable for tests. */
-    stderr?: (text: string) => void;
-    /** Exit hook — default `process.exit`; injectable for tests. */
-    exit?: (code: number) => void;
-    /** Read piped stdin — default reads when not a TTY; injectable for tests. */
-    stdin?: () => Promise<string | null>;
-}
-/** Build and run one mixed contract/runtime/native CLI surface, then exit. */
-export declare function createCli<TAuth = unknown, TContext extends Record<string, unknown> = Record<string, unknown>, TGlobals extends ZodObject = ZodObject>(config: CliConfig<TAuth, TContext, TGlobals>): Promise<void>;
-//# sourceMappingURL=cli.d.ts.map

package/dist/tools/cli.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/tools/cli.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAoBxC,OAAO,EAAsB,KAAK,WAAW,EAAc,MAAM,cAAc,CAAC;AAChF,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,mBAAmB,EACnB,gBAAgB,EACjB,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,KAAK,aAAa,EAAiB,MAAM,YAAY,CAAC;AAC/D,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,aAAa,EAInB,MAAM,WAAW,CAAC;AAOnB,YAAY,EACV,mBAAmB,EACnB,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACjB,CAAC;AACF,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,CAAC;AAEjD,MAAM,WAAW,SAAS,CACxB,KAAK,GAAG,OAAO,EACf,QAAQ,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAClE,QAAQ,SAAS,SAAS,GAAG,SAAS,CACtC,SAAQ,gBAAgB,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC;IACnD,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,IAAI,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACtE;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,QAAQ,CAAC;IACzB;;;OAGG;IACH,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC;IACtF,qFAAqF;IACrF,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;+DAC2D;IAC3D,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB;;;;OAIG;IACH,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,0EAA0E;IAC1E,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kEAAkE;IAClE,SAAS,CAAC,EAAE,WAAW,CAAC;IACxB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,WAAW,CAAC;IACxB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACrC,wEAAwE;IACxE,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrE;;;OAGG;IACH,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,oEAAoE;IACpE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,oEAAoE;IACpE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,gEAAgE;IAChE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9B,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACtC;AAiZD,8EAA8E;AAC9E,wBAAsB,SAAS,CAC7B,KAAK,GAAG,OAAO,EACf,QAAQ,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAClE,QAAQ,SAAS,SAAS,GAAG,SAAS,EACtC,MAAM,EAAE,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAid7D"}

package/dist/tools/coerce.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"coerce.d.ts","sourceRoot":"","sources":["../../src/tools/coerce.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAuHxB;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,SAAS,GAC5B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGzB"}

package/dist/tools/connections/index.d.ts

@@ -1,20 +0,0 @@
-/**
- * `stitchkit/tools/connections` — consume external MCP servers and OpenAPI
- * specs as typed tools.
- *
- * This is a server-only subexport of `stitchkit/tools`: a connection pulls in no
- * peer package into the stable tools import, but mounts its foreign operations
- * as plain `RuntimeToolDefinition`s, so `mountAgent({ runtimeTools })` runs them
- * through the same lifecycle, hooks and approval path as our own.
- *
- * A connection URL is application configuration, not a trust boundary: every
- * outbound request is checked against the connection's own host (plus any
- * explicit `allowHosts`), and credentials are resolved separately for each call.
- */
-export type { RuntimeToolTransport } from '../runtime-tool.js';
-export { defineMcpClientConnection, defineOpenApiConnection } from './define.js';
-export { ConnectionAuthorizationRequiredError, ConnectionBudgetExceededError, ConnectionRequestError, ConnectionUrlError, } from './errors.js';
-export { mountConnections } from './mount.js';
-export type { ConnectionTokenProvider, ConnectionToolSkipReporter, SkippedConnectionTool, } from './runtime.js';
-export type { ConnectionBudget, ConnectionDefinition, ConnectionMountOptions, McpClientConnection, McpClientConnectionConfig, McpConnectionTransport, McpToolFilter, OpenApiConnection, OpenApiConnectionConfig, } from './types.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/tools/connections/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/connections/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,YAAY,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAC9E,OAAO,EACL,oCAAoC,EACpC,6BAA6B,EAC7B,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,YAAY,EACV,uBAAuB,EACvB,0BAA0B,EAC1B,qBAAqB,GACtB,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,yBAAyB,EACzB,sBAAsB,EACtB,aAAa,EACb,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,SAAS,CAAC"}