stitchkit 0.97.0 → 0.98.0

package/CHANGELOG.md

@@ -15,6 +15,34 @@ additive**; the first breaking change landed in 0.10.0. Grep the file for
 
 ## [Unreleased]
 
+## [0.98.0] — 2026-09-26
+
+### ⚠️ Breaking changes
+
+- `stitchkit/cli` — automatic stdin routing waits only 250 ms for its first byte.
+  A producer that starts later now reaches required-field validation instead of
+  waiting indefinitely. Before: `slow-producer | myapp generate`. After:
+  `myapp generate --prompt "$(slow-producer)"`, or supply an explicit
+  `CliConfig.stdin` reader. Once input starts, it is still read fully to EOF.
+  → ADR 0203
+
+**Who must act:** CLI consumers whose piped producer may take more than 250 ms
+before writing its first byte. See the 0.98.0 migration in `docs/guide/upgrading.md`.
+
+### Fixed
+
+- `stitchkit/cli` — a missing required argument on an empty, open stdin pipe
+  reaches validation after a 250 ms first-byte probe instead of hanging for EOF.
+  Once data starts, the full stream is read to EOF without truncating delayed
+  chunks. TTYs, explicit arguments, custom stdin readers and streaming commands
+  retain their separate input behavior; see the CLI guide for delayed producers.
+
+### Changed
+
+- Release validation no longer limits stable-breaking releases by calendar cadence.
+  Named entrypoints, stable ADR citations, minor versioning, dated changelogs,
+  migrations and exact-SHA CI remain mandatory. See ADR 0204.
+
 ## [0.97.0] — 2026-09-26
 
 ### ⚠️ Breaking changes

package/dist/entrypoints/cli.js

@@ -18,7 +18,7 @@ import {
   readCapped,
   renderCliView,
   routeCliArgv
-} from "../index-t9rhjr9f.js";
+} from "../index-f1nb70ae.js";
 import"../index-sbdmyz75.js";
 import"../index-hmp4800j.js";
 import {

package/dist/entrypoints/tools.js

@@ -60,7 +60,7 @@ import {
   fetchPinnedDocument,
   readCapped,
   runWaitOperation
-} from "../index-t9rhjr9f.js";
+} from "../index-f1nb70ae.js";
 import"../index-sbdmyz75.js";
 import {
   collectToolSurface

package/dist/{index-t9rhjr9f.js → index-f1nb70ae.js}

@@ -1336,16 +1336,52 @@ async function pollUntilDone(params) {
 
 // src/tools/cli/io.ts
 import { writeSync } from "node:fs";
-async function readPipedStdin() {
-  if (process.stdin.isTTY)
-    return null;
-  const chunks = [];
-  for await (const chunk of process.stdin) {
-    chunks.push(typeof chunk === "string" ? Buffer.from(chunk) : chunk);
-  }
-  const text = Buffer.concat(chunks).toString("utf8").trim();
-  return text.length > 0 ? text : null;
+
+// src/tools/cli/stdin.ts
+function readPipedStdin(input = process.stdin) {
+  if (input.isTTY || input.readableEnded)
+    return Promise.resolve(null);
+  if (input.destroyed)
+    return Promise.reject(new Error("stdin closed before EOF"));
+  return new Promise((resolve, reject) => {
+    const chunks = [];
+    const cleanup = () => {
+      clearTimeout(timer);
+      input.pause();
+      input.off("data", onData);
+      input.off("end", onEnd);
+      input.off("error", onError);
+      input.off("close", onClose);
+    };
+    const onData = (chunk) => {
+      if (chunk.length === 0)
+        return;
+      clearTimeout(timer);
+      chunks.push(typeof chunk === "string" ? Buffer.from(chunk) : chunk);
+    };
+    const onEnd = () => {
+      cleanup();
+      const text = Buffer.concat(chunks).toString("utf8").trim();
+      resolve(text.length > 0 ? text : null);
+    };
+    const onError = (error) => {
+      cleanup();
+      reject(error);
+    };
+    const onClose = () => onError(new Error("stdin closed before EOF"));
+    const timer = setTimeout(() => {
+      cleanup();
+      resolve(null);
+    }, 250);
+    input.on("end", onEnd);
+    input.on("error", onError);
+    input.on("close", onClose);
+    input.on("data", onData);
+    input.resume();
+  });
 }
+
+// src/tools/cli/io.ts
 function createCliIo(config) {
   let pendingWrite;
   let writeFailed = false;

package/dist/tools/cli/config.d.ts

@@ -84,7 +84,11 @@ export interface CliConfig<TAuth = unknown, TContext extends Record<string, unkn
     stderr?: (text: string) => void;
     /** Exit hook — default `process.exit`; injectable for tests. */
     exit?: (code: number) => void;
-    /** Read piped stdin — default reads when not a TTY; injectable for tests. */
+    /**
+     * Read stdin for the first required unset field. The default skips TTYs,
+     * waits up to 250 ms for the first byte, then reads to EOF without a deadline.
+     * Override to explicitly wait for a delayed producer; no probe wraps this hook.
+     */
     stdin?: () => Promise<string | null>;
 }
 //# sourceMappingURL=config.d.ts.map

package/dist/tools/cli/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/tools/cli/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxC,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAE5C,MAAM,WAAW,SAAS,CACxB,KAAK,GAAG,OAAO,EACf,QAAQ,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAClE,QAAQ,SAAS,SAAS,GAAG,SAAS,CACtC,SAAQ,gBAAgB,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC;IACnD,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,IAAI,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACtE;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,QAAQ,CAAC;IACzB;;;OAGG;IACH,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC;IACtF,qFAAqF;IACrF,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;+DAC2D;IAC3D,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB;;;;OAIG;IACH,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,0EAA0E;IAC1E,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kEAAkE;IAClE,SAAS,CAAC,EAAE,WAAW,CAAC;IACxB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,WAAW,CAAC;IACxB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACrC,wEAAwE;IACxE,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrE;;;OAGG;IACH,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,oEAAoE;IACpE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,oEAAoE;IACpE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,gEAAgE;IAChE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9B,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACtC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/tools/cli/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxC,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAE5C,MAAM,WAAW,SAAS,CACxB,KAAK,GAAG,OAAO,EACf,QAAQ,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAClE,QAAQ,SAAS,SAAS,GAAG,SAAS,CACtC,SAAQ,gBAAgB,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC;IACnD,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,IAAI,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACtE;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,QAAQ,CAAC;IACzB;;;OAGG;IACH,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC;IACtF,qFAAqF;IACrF,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;+DAC2D;IAC3D,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB;;;;OAIG;IACH,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,0EAA0E;IAC1E,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kEAAkE;IAClE,SAAS,CAAC,EAAE,WAAW,CAAC;IACxB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,WAAW,CAAC;IACxB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACrC,wEAAwE;IACxE,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrE;;;OAGG;IACH,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,oEAAoE;IACpE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,oEAAoE;IACpE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,gEAAgE;IAChE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9B;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACtC"}

package/dist/tools/cli/io.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"io.d.ts","sourceRoot":"","sources":["../../../src/tools/cli/io.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAa1C,yFAAyF;AACzF,MAAM,WAAW,KAAK;IACpB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACzC;AAED,wBAAgB,WAAW,CACzB,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC,GAC9D,KAAK,CAqEP"}
+{"version":3,"file":"io.d.ts","sourceRoot":"","sources":["../../../src/tools/cli/io.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAG1C,yFAAyF;AACzF,MAAM,WAAW,KAAK;IACpB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACzC;AAED,wBAAgB,WAAW,CACzB,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC,GAC9D,KAAK,CAqEP"}

package/dist/tools/cli/stdin.d.ts

@@ -0,0 +1,6 @@
+import type { Readable } from 'node:stream';
+/** Probe automatic stdin routing briefly; once data starts, only EOF completes it. */
+export declare function readPipedStdin(input?: Readable & {
+    isTTY?: boolean;
+}): Promise<string | null>;
+//# sourceMappingURL=stdin.d.ts.map

package/dist/tools/cli/stdin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdin.d.ts","sourceRoot":"","sources":["../../../src/tools/cli/stdin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,sFAAsF;AACtF,wBAAgB,cAAc,CAC5B,KAAK,GAAE,QAAQ,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAkB,GACpD,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAwCxB"}

package/llms/cli.txt

@@ -205,6 +205,21 @@ fields in declaration order, so `myapp generate "a fox"` is
 `--prompt "a fox"`. A piped value fills the first required unset field:
 `echo "a fox" | myapp generate`.
 
+Automatic stdin routing skips TTYs and waits at most **250 ms for the first byte**.
+An empty open pipe or EOF without data leaves the field unset, so normal schema
+validation reports the missing field instead of waiting indefinitely. Once any
+byte arrives, the reader collects the entire stream until EOF, including chunks
+separated by long pauses; it decodes UTF-8 after collecting all bytes and trims
+surrounding whitespace. Read errors or a close before EOF fail the invocation.
+Explicit arguments and commands without required unset fields never read stdin.
+
+A producer that takes longer than 250 ms to start must supply its value as an
+argument (for example, `myapp generate --prompt "$(slow-producer)"`) or the
+application must provide an explicit `CliConfig.stdin` reader that waits for it.
+That hook is not wrapped in the availability timeout. `-` remains literal data,
+not a special stdin marker. JSONL stream/batch commands own their input and wait
+for lines as usual; MCP/serve and long-running handlers have no new deadline.
+
 A token is an option only when it is a long form (`--name`, `--name=value`,
 `--`) or `-` followed by a letter. Anything else that starts with `-` is data:
 `myapp note a "- item"` fills a positional, and after an option that expects a

package/llms/stitchkit.txt

@@ -77,11 +77,11 @@ own, recorded as an ADR.
 | `stitchkit/geo` | server (Bun or Node) | evolving | managed GeoIP reader generations, last-known-good reload and the optional MaxMind adapter |
 | `stitchkit/oauth` | browser **and** server | evolving | provider-neutral Authorization Code + PKCE request and one-shot callback transaction mechanics |
 | `stitchkit/google` | server (Bun or Node) | evolving | optional Google code exchange and verified OIDC identity adapter |
-| `stitchkit/observability` | server | stable<br>_redefined in 2 of the 42 minors since 0.56.2, most recently 0.92.0_ | request/tool event projections — `createObservability`, trace context, sanitisation |
+| `stitchkit/observability` | server | stable<br>_redefined in 2 of the 43 minors since 0.56.2, most recently 0.92.0_ | request/tool event projections — `createObservability`, trace context, sanitisation |
 | `stitchkit/testing` | tests on Bun or Node | stable | in-process generated clients over a real Fetch handler, plus the managed-resource conformance kit |
 | `stitchkit/declaration` | browser + build and deployment tooling (Bun or Node) | evolving | `ProjectDeclarationSchema` — the one machine-readable statement a repository makes about itself |
 | `stitchkit/react` | browser + server rendering | stable | `createCursorQuery`, `createCacheBridge`, QueryClient and `ApiError` retry policy |
-| `stitchkit/agent-runtime` | server | evolving<br>_redefined in 22 of the 42 minors since 0.56.2, most recently 0.97.0_ | optional durable conversation/run loop, history, models, prompts, fencing and events |
+| `stitchkit/agent-runtime` | server | evolving<br>_redefined in 22 of the 43 minors since 0.56.2, most recently 0.97.0_ | optional durable conversation/run loop, history, models, prompts, fencing and events |
 | `stitchkit/agent-runtime/sandbox` | server | evolving | optional Linux Bubblewrap sessions, durable workspaces and a host HTTP credential gateway; see [sandbox guide](sandbox.md) |
 | `stitchkit/agent-runtime/testing` | tests on Bun or Node | evolving | credential-free replay, scripted provider faults, deterministic race controls and the agent-store conformance kit |
 | `stitchkit/agent-runtime/harness` | server | evolving | resource-aware process-local facade over the canonical Agent runtime; supervision stays outside |
@@ -91,7 +91,7 @@ own, recorded as an ADR.
 | `stitchkit/agent-runtime/sqlite/bun` | server (Bun) | evolving | durable built-in SQLite store for the agent runtime |
 | `stitchkit/agent-runtime/sqlite/node` | server (Node ≥ 22.5) | evolving | durable built-in SQLite store for the agent runtime |
 | `stitchkit-tui` | terminal (Bun) | evolving | optional official OpenTUI host over a caller-composed headless runtime |
-| `stitchkit/application` | browser + server | evolving<br>_redefined in 9 of the 42 minors since 0.56.2, most recently 0.96.0_ | managed resource graph, readiness, admission, schedules, subtree restart and bounded shutdown |
+| `stitchkit/application` | browser + server | evolving<br>_redefined in 9 of the 43 minors since 0.56.2, most recently 0.96.0_ | managed resource graph, readiness, admission, schedules, subtree restart and bounded shutdown |
 | `stitchkit/application/grammy` | server | evolving | a grammY bot as application resources — configuration, then polling with updates admitted by batch — and the webhook adapter |
 | `stitchkit/application/opentelemetry` | server | evolving | maps application snapshots onto an injected OpenTelemetry `Meter` |
 | `stitchkit/application/schemas` | browser + server | evolving | the application's snapshot, health and shutdown schemas alone, without the kernel |

package/llms/{upgrading-0.72.0-0.97.0.txt → upgrading-0.72.0-0.98.0.txt}

@@ -1,14 +1,39 @@
-# Upgrading 0.72.0 → 0.97.0 — stitchkit docs slice
+# Upgrading 0.72.0 → 0.98.0 — stitchkit docs slice
 
 > Generated from the `docs/` tree by `bun run gen:llms`. The index of all slices is
 > `llms.txt` in this package.
 
-Contains: Guide: Upgrading, 0.72.0 → 0.97.0  (docs/guide/upgrading.md)
+Contains: Guide: Upgrading, 0.72.0 → 0.98.0  (docs/guide/upgrading.md)
 
 ==============================================================================
-# Guide: Upgrading, 0.72.0 → 0.97.0  (docs/guide/upgrading.md)
+# Guide: Upgrading, 0.72.0 → 0.98.0  (docs/guide/upgrading.md)
 ==============================================================================
 
+## Released migration: 0.98.0
+
+### automatic stdin availability
+
+**Who must act:** CLI applications or scripts relying on automatic stdin routing
+from a producer that can take more than 250 ms to write its first byte.
+
+Automatic routing now probes for the first byte for 250 ms. An empty open pipe
+leaves the required field unset and normal validation reports its name. Once
+data arrives, the entire stream is read until EOF without a total deadline.
+
+```sh
+# before: may now fail if the producer starts late
+slow-producer | myapp generate
+# after: provide the value explicitly after the producer completes
+myapp generate --prompt "$(slow-producer)"
+```
+
+For large input that should stay in a pipe, supply a `CliConfig.stdin` reader
+that waits for the producer and EOF; this existing hook is not wrapped in the
+availability probe. A custom reader owns its limits and error handling.
+`-` remains literal data. TTY and empty EOF produce ordinary validation errors;
+explicit arguments skip stdin. JSONL stream/batch commands, MCP/serve and
+long-running handlers have no new deadline. See ADR 0203.
+
 ## Released migration: 0.97.0
 
 ### schedule delivery

package/llms/upgrading.txt

@@ -11,7 +11,7 @@ Contains: Guide: Upgrading, general  (docs/guide/upgrading.md)
 
 Load this slice, then every range slice between your installed version and the target:
 
-- 0.72.0 → 0.97.0: `llms/upgrading-0.72.0-0.97.0.txt`
+- 0.72.0 → 0.98.0: `llms/upgrading-0.72.0-0.98.0.txt`
 - 0.59.0 → 0.71.0: `llms/upgrading-0.59.0-0.71.0.txt`
 - 0.37.0 → 0.58.0: `llms/upgrading-0.37.0-0.58.0.txt`
 

package/llms-full.txt

@@ -68,11 +68,11 @@ own, recorded as an ADR.
 | `stitchkit/geo` | server (Bun or Node) | evolving | managed GeoIP reader generations, last-known-good reload and the optional MaxMind adapter |
 | `stitchkit/oauth` | browser **and** server | evolving | provider-neutral Authorization Code + PKCE request and one-shot callback transaction mechanics |
 | `stitchkit/google` | server (Bun or Node) | evolving | optional Google code exchange and verified OIDC identity adapter |
-| `stitchkit/observability` | server | stable<br>_redefined in 2 of the 42 minors since 0.56.2, most recently 0.92.0_ | request/tool event projections — `createObservability`, trace context, sanitisation |
+| `stitchkit/observability` | server | stable<br>_redefined in 2 of the 43 minors since 0.56.2, most recently 0.92.0_ | request/tool event projections — `createObservability`, trace context, sanitisation |
 | `stitchkit/testing` | tests on Bun or Node | stable | in-process generated clients over a real Fetch handler, plus the managed-resource conformance kit |
 | `stitchkit/declaration` | browser + build and deployment tooling (Bun or Node) | evolving | `ProjectDeclarationSchema` — the one machine-readable statement a repository makes about itself |
 | `stitchkit/react` | browser + server rendering | stable | `createCursorQuery`, `createCacheBridge`, QueryClient and `ApiError` retry policy |
-| `stitchkit/agent-runtime` | server | evolving<br>_redefined in 22 of the 42 minors since 0.56.2, most recently 0.97.0_ | optional durable conversation/run loop, history, models, prompts, fencing and events |
+| `stitchkit/agent-runtime` | server | evolving<br>_redefined in 22 of the 43 minors since 0.56.2, most recently 0.97.0_ | optional durable conversation/run loop, history, models, prompts, fencing and events |
 | `stitchkit/agent-runtime/sandbox` | server | evolving | optional Linux Bubblewrap sessions, durable workspaces and a host HTTP credential gateway; see [sandbox guide](sandbox.md) |
 | `stitchkit/agent-runtime/testing` | tests on Bun or Node | evolving | credential-free replay, scripted provider faults, deterministic race controls and the agent-store conformance kit |
 | `stitchkit/agent-runtime/harness` | server | evolving | resource-aware process-local facade over the canonical Agent runtime; supervision stays outside |
@@ -82,7 +82,7 @@ own, recorded as an ADR.
 | `stitchkit/agent-runtime/sqlite/bun` | server (Bun) | evolving | durable built-in SQLite store for the agent runtime |
 | `stitchkit/agent-runtime/sqlite/node` | server (Node ≥ 22.5) | evolving | durable built-in SQLite store for the agent runtime |
 | `stitchkit-tui` | terminal (Bun) | evolving | optional official OpenTUI host over a caller-composed headless runtime |
-| `stitchkit/application` | browser + server | evolving<br>_redefined in 9 of the 42 minors since 0.56.2, most recently 0.96.0_ | managed resource graph, readiness, admission, schedules, subtree restart and bounded shutdown |
+| `stitchkit/application` | browser + server | evolving<br>_redefined in 9 of the 43 minors since 0.56.2, most recently 0.96.0_ | managed resource graph, readiness, admission, schedules, subtree restart and bounded shutdown |
 | `stitchkit/application/grammy` | server | evolving | a grammY bot as application resources — configuration, then polling with updates admitted by batch — and the webhook adapter |
 | `stitchkit/application/opentelemetry` | server | evolving | maps application snapshots onto an injected OpenTelemetry `Meter` |
 | `stitchkit/application/schemas` | browser + server | evolving | the application's snapshot, health and shutdown schemas alone, without the kernel |
@@ -7953,6 +7953,21 @@ fields in declaration order, so `myapp generate "a fox"` is
 `--prompt "a fox"`. A piped value fills the first required unset field:
 `echo "a fox" | myapp generate`.
 
+Automatic stdin routing skips TTYs and waits at most **250 ms for the first byte**.
+An empty open pipe or EOF without data leaves the field unset, so normal schema
+validation reports the missing field instead of waiting indefinitely. Once any
+byte arrives, the reader collects the entire stream until EOF, including chunks
+separated by long pauses; it decodes UTF-8 after collecting all bytes and trims
+surrounding whitespace. Read errors or a close before EOF fail the invocation.
+Explicit arguments and commands without required unset fields never read stdin.
+
+A producer that takes longer than 250 ms to start must supply its value as an
+argument (for example, `myapp generate --prompt "$(slow-producer)"`) or the
+application must provide an explicit `CliConfig.stdin` reader that waits for it.
+That hook is not wrapped in the availability timeout. `-` remains literal data,
+not a special stdin marker. JSONL stream/batch commands own their input and wait
+for lines as usual; MCP/serve and long-running handlers have no new deadline.
+
 A token is an option only when it is a long form (`--name`, `--name=value`,
 `--`) or `-` followed by a letter. Anything else that starts with `-` is data:
 `myapp note a "- item"` fills a positional, and after an option that expects a
@@ -13019,6 +13034,31 @@ analytics policy belong to the application.
 
 # Upgrading stitchkit
 
+## Released migration: 0.98.0
+
+### automatic stdin availability
+
+**Who must act:** CLI applications or scripts relying on automatic stdin routing
+from a producer that can take more than 250 ms to write its first byte.
+
+Automatic routing now probes for the first byte for 250 ms. An empty open pipe
+leaves the required field unset and normal validation reports its name. Once
+data arrives, the entire stream is read until EOF without a total deadline.
+
+```sh
+# before: may now fail if the producer starts late
+slow-producer | myapp generate
+# after: provide the value explicitly after the producer completes
+myapp generate --prompt "$(slow-producer)"
+```
+
+For large input that should stay in a pipe, supply a `CliConfig.stdin` reader
+that waits for the producer and EOF; this existing hook is not wrapped in the
+availability probe. A custom reader owns its limits and error handling.
+`-` remains literal data. TTY and empty EOF produce ordinary validation errors;
+explicit arguments skip stdin. JSONL stream/batch commands, MCP/serve and
+long-running handlers have no new deadline. See ADR 0203.
+
 ## Released migration: 0.97.0
 
 ### schedule delivery

package/llms.txt

@@ -16,7 +16,7 @@ Load the slice for each entrypoint your code imports — `import … from 'stitc
 - **stitchkit/tools/contract**: [llms/tools-contract.txt](llms/tools-contract.txt) 0.2 KB
 - **stitchkit/tools/invoker**: [llms/tools-invoker.txt](llms/tools-invoker.txt) 0.2 KB
 - **stitchkit/tools/connections**: [llms/tools-connections.txt](llms/tools-connections.txt) 3.1 KB
-- **stitchkit/cli**: [llms/cli.txt](llms/cli.txt) 41.3 KB → [llms/cli.2.txt](llms/cli.2.txt) 8.1 KB
+- **stitchkit/cli**: [llms/cli.txt](llms/cli.txt) 42.3 KB → [llms/cli.2.txt](llms/cli.2.txt) 8.1 KB
 - **stitchkit/remote**: [llms/remote.txt](llms/remote.txt) 1.0 KB
 - **stitchkit/contract**: [llms/contract.txt](llms/contract.txt) 31.9 KB
 - **stitchkit/primitives**: [llms/primitives.txt](llms/primitives.txt) 9.3 KB
@@ -52,7 +52,7 @@ Load the slice for each entrypoint your code imports — `import … from 'stitc
 
 ## Upgrading slices
 - **Upgrading — how to move across versions**: [llms/upgrading.txt](llms/upgrading.txt) 10.3 KB
-- **Upgrading 0.72.0 → 0.97.0**: [llms/upgrading-0.72.0-0.97.0.txt](llms/upgrading-0.72.0-0.97.0.txt) 43.8 KB
+- **Upgrading 0.72.0 → 0.98.0**: [llms/upgrading-0.72.0-0.98.0.txt](llms/upgrading-0.72.0-0.98.0.txt) 44.8 KB
 - **Upgrading 0.59.0 → 0.71.0**: [llms/upgrading-0.59.0-0.71.0.txt](llms/upgrading-0.59.0-0.71.0.txt) 45.6 KB
 - **Upgrading 0.37.0 → 0.58.0**: [llms/upgrading-0.37.0-0.58.0.txt](llms/upgrading-0.37.0-0.58.0.txt) 40.0 KB
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stitchkit",
-  "version": "0.97.0",
+  "version": "0.98.0",
   "description": "Contract-first backend framework — one defineContract() into an HTTP API, MCP tools, AI-agent tools and a typed client. Bun and Node.",
   "keywords": [
     "bun",