@theokit/http 0.4.0

package/dist/chunk-TBMGRXH5.js

@@ -0,0 +1,477 @@
+import {
+  createExecutionContext,
+  walkControllerMetadata
+} from "./chunk-SMWUPP2C.js";
+import {
+  createNodeAdapter
+} from "./chunk-HLW7YKZE.js";
+import {
+  ForbiddenException,
+  HttpException
+} from "./chunk-3PGQVQWG.js";
+import {
+  __name
+} from "./chunk-7QVYU63E.js";
+
+// src/app.ts
+import "reflect-metadata";
+var TheoApp = class _TheoApp {
+  static {
+    __name(this, "TheoApp");
+  }
+  serverHandle;
+  routes = [];
+  frontendHtml;
+  startTime = Date.now();
+  healthPath;
+  readyPath;
+  readinessChecks;
+  constructor(opts) {
+    const hp = opts?.healthPath ?? "/__theo/health";
+    const rp = opts?.readyPath ?? "/__theo/ready";
+    if (hp.startsWith("/api/")) throw new Error(`[TheoApp] healthPath "${hp}" must not start with /api/ \u2014 would collide with user routes`);
+    if (rp.startsWith("/api/")) throw new Error(`[TheoApp] readyPath "${rp}" must not start with /api/ \u2014 would collide with user routes`);
+    this.healthPath = hp;
+    this.readyPath = rp;
+    this.readinessChecks = opts?.readinessChecks ?? [];
+    const adapter = createNodeAdapter();
+    this.serverHandle = adapter.createServer((request) => this.handleRequest(request));
+  }
+  /**
+  * Create a TheoKit application with Spring Boot-style DI.
+  *
+  * EC-7: async because Container may resolve async factories (Agent.create).
+  * EC-2: Registration order guaranteed: providers → controllers → agents.
+  */
+  static async create(opts) {
+    const app = new _TheoApp(opts);
+    const registry = /* @__PURE__ */ new Map();
+    if (opts.module) {
+      const moduleMeta = Reflect.getMetadata("usetheo:di:module", opts.module);
+      if (moduleMeta) {
+        const allModules = [
+          opts.module,
+          ...moduleMeta.imports ?? []
+        ];
+        for (const Mod of allModules) {
+          const meta = Reflect.getMetadata("usetheo:di:module", Mod);
+          if (!meta) continue;
+          for (const Prov of meta.providers ?? []) {
+            if (!registry.has(Prov)) {
+              registry.set(Prov, new Prov());
+            }
+          }
+        }
+      }
+    }
+    if (opts.providers) {
+      for (const Prov of opts.providers) {
+        if (!registry.has(Prov)) {
+          registry.set(Prov, new Prov());
+        }
+      }
+    }
+    for (const Controller of opts.controllers) {
+      const paramTypes = Reflect.getMetadata("design:paramtypes", Controller) ?? [];
+      const args = paramTypes.map((pt) => {
+        const dep = registry.get(pt);
+        if (!dep) {
+          throw new Error(`[TheoApp] Cannot resolve ${pt.name} for ${Controller.name}. Add ${pt.name} to providers (or to @Module({ providers: [...] })).`);
+        }
+        return dep;
+      });
+      const instance = new Controller(...args);
+      const postConstruct = Reflect.getMetadata("usetheo:di:post-construct", Controller);
+      if (postConstruct && typeof instance[postConstruct] === "function") {
+        const result = instance[postConstruct]();
+        if (result instanceof Promise) await result;
+      }
+      const walks = walkControllerMetadata(Controller);
+      for (const w of walks) {
+        app.routes.push({
+          walk: w,
+          instance
+        });
+      }
+    }
+    app.routes.sort((a, b) => {
+      const aP = a.walk.fullPath.includes(":");
+      const bP = b.walk.fullPath.includes(":");
+      if (aP !== bP) return aP ? 1 : -1;
+      return 0;
+    });
+    for (const entry of app.routes) {
+      const paramNames = [];
+      const regexStr = entry.walk.fullPath.replace(/:(\w+)/g, (_m, name) => {
+        paramNames.push(name);
+        return "([^/]+)";
+      });
+      entry.compiledPattern = new RegExp(`^${regexStr}$`);
+      entry.compiledParamNames = paramNames;
+      entry.needsBody = entry.walk.paramEntries.some((p) => p.source === "body");
+    }
+    if (opts.html) app.frontendHtml = opts.html;
+    if (opts.agents?.length) {
+      await app.autoWireAgents(opts.agents, registry, opts);
+    }
+    return app;
+  }
+  async listen(port) {
+    return new Promise((resolve) => {
+      this.serverHandle.listen(port, () => {
+        console.log(`TheoKit app listening on http://localhost:${port}`);
+        resolve();
+      });
+    });
+  }
+  getServerHandle() {
+    return this.serverHandle;
+  }
+  async close() {
+    return new Promise((resolve) => {
+      this.serverHandle.close(() => {
+        resolve();
+      });
+    });
+  }
+  // ── Auto-wire agents (the "SpringApplication.run()" moment) ──
+  agentRoutes = [];
+  async autoWireAgents(agentClasses, registry, opts) {
+    const importFn = new Function("specifier", "return import(specifier)");
+    let walkAgentMetadata, compileAgent, generateAgentRoutes, getMixins, createRealAgentStreamFn;
+    try {
+      const mod = await importFn("@theokit/agents");
+      walkAgentMetadata = mod.walkAgentMetadata;
+      compileAgent = mod.compileAgent;
+      generateAgentRoutes = mod.generateAgentRoutes;
+      getMixins = mod.getMixins;
+      createRealAgentStreamFn = mod.createRealAgentStream;
+    } catch {
+      throw new Error("[TheoApp] @theokit/agents is required when agents[] is provided. Install: npm install @theokit/agents");
+    }
+    const apiKey = opts.llmApiKey ?? process.env.OPENROUTER_API_KEY ?? "";
+    for (const AgentClass of agentClasses) {
+      const mixins = getMixins(AgentClass);
+      const allToolboxes = [
+        ...mixins
+      ];
+      for (const [Cls] of registry) {
+        if (Reflect.getMetadata(/* @__PURE__ */ Symbol.for("theokit:agents:toolbox"), Cls)) {
+          if (!allToolboxes.includes(Cls)) allToolboxes.push(Cls);
+        }
+      }
+      const walk = walkAgentMetadata(AgentClass, allToolboxes);
+      const toolboxInstances = /* @__PURE__ */ new Map();
+      for (const tb of walk.toolboxes) {
+        let instance = registry.get(tb.class);
+        if (!instance) {
+          instance = new tb.class();
+          registry.set(tb.class, instance);
+        }
+        toolboxInstances.set(tb.class, instance);
+      }
+      const compiled = compileAgent(walk, toolboxInstances);
+      let createRun;
+      if (opts.agentStreamFactory) {
+        createRun = opts.agentStreamFactory(walk, compiled.tools, apiKey, opts.llmModel);
+      } else if (apiKey && createRealAgentStreamFn !== void 0) {
+        createRun = createRealAgentStreamFn(walk, compiled.tools, apiKey, opts.llmModel);
+      } else {
+        createRun = this.createFallbackStream(walk.agentConfig.name, apiKey);
+      }
+      const routes = generateAgentRoutes({
+        walkResult: walk,
+        compiledOptions: compiled,
+        createRun
+      });
+      for (const route of routes) {
+        const paramNames = [];
+        const regexStr = route.path.replace(/:(\w+)/g, (_m, name) => {
+          paramNames.push(name);
+          return "([^/]+)";
+        });
+        this.agentRoutes.push({
+          method: route.method,
+          pattern: new RegExp(`^${regexStr}$`),
+          paramNames,
+          handler: route.handler,
+          guards: walk.guards ?? [],
+          agentClass: AgentClass,
+          methodName: walk.mainLoop?.propertyKey ?? "run"
+        });
+      }
+      console.log(`  \u{1F916} Agent "${walk.agentConfig.name}" mounted at ${walk.route}/chat (${compiled.tools.length} tools)`);
+    }
+  }
+  async handleReadinessCheck() {
+    if (this.readinessChecks.length === 0) {
+      return jsonResponse(200, {
+        status: "ready",
+        checks: []
+      });
+    }
+    const results = await Promise.all(this.readinessChecks.map(async (check) => {
+      try {
+        return await Promise.race([
+          check(),
+          new Promise((resolve) => setTimeout(() => resolve({
+            name: "unknown",
+            healthy: false,
+            message: "Readiness check timed out (5s)"
+          }), 5e3))
+        ]);
+      } catch (err) {
+        return {
+          name: "unknown",
+          healthy: false,
+          message: err instanceof Error ? err.message : "Check failed"
+        };
+      }
+    }));
+    const allHealthy = results.every((r) => r.healthy);
+    return jsonResponse(allHealthy ? 200 : 503, {
+      status: allHealthy ? "ready" : "not_ready",
+      checks: results
+    });
+  }
+  createFallbackStream(agentName, apiKey) {
+    const msg = !apiKey ? "Set OPENROUTER_API_KEY environment variable or pass llmApiKey to TheoApp.create()" : "Pass agentStreamFactory to TheoApp.create() to connect your LLM provider";
+    return (_message, _sessionId) => {
+      const events = [
+        {
+          type: "run_started",
+          runId: `run-${Date.now()}`,
+          agentName
+        },
+        {
+          type: "error",
+          code: "AGENT_NOT_WIRED",
+          message: msg,
+          retryable: false
+        }
+      ];
+      return {
+        [Symbol.asyncIterator]: () => {
+          let i = 0;
+          return {
+            next: /* @__PURE__ */ __name(() => Promise.resolve(i < events.length ? {
+              value: events[i++],
+              done: false
+            } : {
+              value: void 0,
+              done: true
+            }), "next")
+          };
+        }
+      };
+    };
+  }
+  // ── Web Standard request handler ──────────────────
+  async handleRequest(request) {
+    const pathname = new URL(request.url).pathname;
+    if (request.method === "GET") {
+      if (pathname === this.healthPath) {
+        return jsonResponse(200, {
+          status: "ok",
+          uptime: (Date.now() - this.startTime) / 1e3,
+          timestamp: Date.now()
+        });
+      }
+      if (pathname === this.readyPath) {
+        return this.handleReadinessCheck();
+      }
+    }
+    if (request.method === "GET") {
+      if ((pathname === "/" || pathname === "/index.html") && this.frontendHtml) {
+        return new Response(this.frontendHtml, {
+          status: 200,
+          headers: {
+            "content-type": "text/html; charset=utf-8"
+          }
+        });
+      }
+    }
+    for (const route of this.agentRoutes) {
+      if (request.method.toUpperCase() === route.method && route.pattern.test(pathname)) {
+        if (route.guards.length > 0) {
+          const ctx = createExecutionContext(request, route.agentClass, route.methodName);
+          for (const GuardCtor of route.guards) {
+            const guard = new GuardCtor();
+            if (!await guard.canActivate(ctx)) {
+              const ex = new ForbiddenException("Forbidden resource");
+              return jsonResponse(ex.statusCode, ex.toJSON());
+            }
+          }
+        }
+        return route.handler(request);
+      }
+    }
+    const url = new URL(request.url);
+    const method = request.method.toUpperCase();
+    const match = this.findRoute(method, url.pathname);
+    if (!match) {
+      return jsonResponse(404, {
+        error: {
+          code: "NOT_FOUND",
+          message: `No route for ${method} ${url.pathname}`
+        }
+      });
+    }
+    const { entry, params } = match;
+    try {
+      const ctx = createExecutionContext(request, entry.instance.constructor, entry.walk.propertyKey);
+      for (const GuardCtor of entry.walk.guards) {
+        const guard = new GuardCtor();
+        if (!await guard.canActivate(ctx)) {
+          const ex = new ForbiddenException("Forbidden resource");
+          return jsonResponse(ex.statusCode, ex.toJSON());
+        }
+      }
+      let body;
+      if (entry.needsBody && [
+        "POST",
+        "PUT",
+        "PATCH"
+      ].includes(method)) {
+        try {
+          const text = await request.text();
+          body = text ? JSON.parse(text) : void 0;
+        } catch {
+          body = void 0;
+        }
+        if (entry.walk.bodySchema && body !== void 0) {
+          const result2 = entry.walk.bodySchema.safeParse(body);
+          if (!result2.success) {
+            return jsonResponse(422, {
+              error: {
+                code: "VALIDATION_ERROR",
+                issues: result2.error.issues
+              }
+            });
+          }
+          body = result2.data;
+        }
+      }
+      const args = this.buildArgs(entry.walk.paramEntries, request, body, params, Object.fromEntries(url.searchParams));
+      if (entry.walk.redirect) {
+        return new Response(null, {
+          status: entry.walk.redirect.status,
+          headers: {
+            location: entry.walk.redirect.url
+          }
+        });
+      }
+      const handlerFn = entry.instance[entry.walk.propertyKey];
+      let result;
+      if (entry.walk.interceptors.length > 0) {
+        const { runInterceptors } = await import("./interceptor-chain-6S3PUV7J.js");
+        result = await runInterceptors(entry.walk.interceptors, () => handlerFn.apply(entry.instance, args), request);
+      } else {
+        result = await handlerFn.apply(entry.instance, args);
+      }
+      return buildResponse(result, entry.walk, method);
+    } catch (err) {
+      if (entry.walk.filters.length > 0) {
+        const { runExceptionFilters } = await import("./exception-filter-chain-BCSQ3MZ2.js");
+        return runExceptionFilters(err, entry.walk.filters, request);
+      }
+      if (err instanceof HttpException) {
+        return jsonResponse(err.statusCode, err.toJSON());
+      }
+      console.error("[theokit] Internal error:", err instanceof Error ? err.message : err);
+      return jsonResponse(500, {
+        error: {
+          code: "INTERNAL_SERVER_ERROR",
+          message: "Internal Server Error"
+        }
+      });
+    }
+  }
+  findRoute(method, pathname) {
+    for (const entry of this.routes) {
+      if (entry.walk.verb !== "ALL" && entry.walk.verb !== method) continue;
+      const match = entry.compiledPattern.exec(pathname);
+      if (!match) continue;
+      const params = {};
+      entry.compiledParamNames.forEach((name, i) => {
+        params[name] = match[i + 1];
+      });
+      return {
+        entry,
+        params
+      };
+    }
+    return null;
+  }
+  buildArgs(entries, request, body, params, query) {
+    if (entries.length === 0) return [];
+    const max = Math.max(...entries.map((p) => p.index));
+    const args = Array.from({
+      length: max + 1
+    }, () => void 0);
+    for (const p of entries) {
+      switch (p.source) {
+        case "req":
+          args[p.index] = request;
+          break;
+        case "body":
+          args[p.index] = p.key ? body[p.key] : body;
+          break;
+        case "param":
+          args[p.index] = p.key ? params[p.key] : params;
+          break;
+        case "query":
+          args[p.index] = p.key ? query[p.key] : query;
+          break;
+        case "headers":
+          args[p.index] = p.key ? request.headers.get(p.key.toLowerCase()) : Object.fromEntries(request.headers.entries());
+          break;
+        case "ip":
+          args[p.index] = request.headers.get("x-forwarded-for") ?? "127.0.0.1";
+          break;
+        default:
+          args[p.index] = void 0;
+      }
+    }
+    return args;
+  }
+};
+function jsonResponse(status, body) {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: {
+      "content-type": "application/json"
+    }
+  });
+}
+__name(jsonResponse, "jsonResponse");
+function buildResponse(result, walk, method) {
+  const status = walk.status ?? (method === "POST" ? 201 : 200);
+  const headers = {
+    "content-type": "application/json"
+  };
+  for (const [n, v] of walk.headers) headers[n.toLowerCase()] = v;
+  if (result === void 0 || result === null) {
+    return new Response(null, {
+      status: status === 200 ? 204 : status,
+      headers
+    });
+  }
+  if (typeof result === "string") {
+    headers["content-type"] = "text/plain";
+    return new Response(result, {
+      status,
+      headers
+    });
+  }
+  return new Response(JSON.stringify(result), {
+    status,
+    headers
+  });
+}
+__name(buildResponse, "buildResponse");
+
+export {
+  TheoApp
+};
+//# sourceMappingURL=chunk-TBMGRXH5.js.map

package/dist/chunk-TBMGRXH5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/app.ts"],"sourcesContent":["/* eslint-disable security/detect-non-literal-regexp, complexity, sonarjs/cognitive-complexity, max-depth, sonarjs/no-collapsible-if */\nimport 'reflect-metadata'\n\nimport { createExecutionContext, type CanActivate } from './bridge/execution-context.js'\nimport { createNodeAdapter } from './bridge/runtime/node.js'\nimport type { ServerHandle } from './bridge/runtime/types.js'\nimport { walkControllerMetadata, type WalkResult } from './bridge/walk-metadata.js'\nimport type { ParamEntry } from './decorators/params.js'\nimport { ForbiddenException, HttpException } from './exceptions/http-exception.js'\n\n/**\n * TheoApp — NestJS/Spring Boot-style application bootstrap.\n *\n * Internally uses Web Standard Request/Response pipeline.\n * Node adapter converts at the HTTP server boundary.\n */\n\n/** Readiness check — async function returning health status. */\nexport type ReadinessCheck = () => Promise<{ name: string; healthy: boolean; message?: string }>\n\nexport interface TheoAppOptions {\n  /** Controller classes decorated with @Controller. */\n  controllers: Function[]\n  /** Agent classes decorated with @Agent — auto-wired with routes + SSE + tools. */\n  agents?: Function[]\n  /** @Module class for structured DI. */\n  module?: Function\n  /** Provider/toolbox classes — instantiated and injected into controllers + agents. */\n  providers?: Function[]\n  /** LLM API key for agent execution (reads OPENROUTER_API_KEY env if not set). */\n  llmApiKey?: string\n  /** LLM model override (default: from @Agent({ model }) metadata). */\n  llmModel?: string\n  /** Agent stream factory override (for testing or custom SDK wiring). */\n  agentStreamFactory?: (walk: unknown, tools: unknown[], apiKey: string, model?: string) => (message: string, sessionId: string) => AsyncIterable<unknown>\n  /** HTML string to serve at GET / (inline frontend). */\n  html?: string\n  /** Readiness checks for GET /__theo/ready (K8s readiness probe). */\n  readinessChecks?: ReadinessCheck[]\n  /** Custom health endpoint path (default: '/__theo/health'). */\n  healthPath?: string\n  /** Custom readiness endpoint path (default: '/__theo/ready'). */\n  readyPath?: string\n}\n\ninterface RouteEntry {\n  walk: WalkResult\n  instance: object\n  /** Pre-compiled regex + param names (Elysia-inspired: compile once at create, not per-request). */\n  compiledPattern?: RegExp\n  compiledParamNames?: string[]\n  /** Whether handler needs body parsing (skip for GET/DELETE without @Body). */\n  needsBody?: boolean\n}\n\nexport class TheoApp {\n  private serverHandle: ServerHandle\n  private readonly routes: RouteEntry[] = []\n  private frontendHtml?: string\n  private readonly startTime = Date.now()\n  private readonly healthPath: string\n  private readonly readyPath: string\n  private readonly readinessChecks: ReadinessCheck[]\n\n  private constructor(opts?: Pick<TheoAppOptions, 'readinessChecks' | 'healthPath' | 'readyPath'>) {\n    const hp = opts?.healthPath ?? '/__theo/health'\n    const rp = opts?.readyPath ?? '/__theo/ready'\n    // Security: prevent health paths from colliding with user API routes\n    if (hp.startsWith('/api/')) throw new Error(`[TheoApp] healthPath \"${hp}\" must not start with /api/ — would collide with user routes`)\n    if (rp.startsWith('/api/')) throw new Error(`[TheoApp] readyPath \"${rp}\" must not start with /api/ — would collide with user routes`)\n    this.healthPath = hp\n    this.readyPath = rp\n    this.readinessChecks = opts?.readinessChecks ?? []\n    const adapter = createNodeAdapter()\n    this.serverHandle = adapter.createServer((request) => this.handleRequest(request))\n  }\n\n  /**\n   * Create a TheoKit application with Spring Boot-style DI.\n   *\n   * EC-7: async because Container may resolve async factories (Agent.create).\n   * EC-2: Registration order guaranteed: providers → controllers → agents.\n   */\n  static async create(opts: TheoAppOptions): Promise<TheoApp> {\n    const app = new TheoApp(opts)\n\n    // ── DI Container (replaces manual Map<Function, object>) ──\n    // Uses @theokit/di Container for: scopes, lifecycle, async, typed errors.\n    // Fallback to manual resolution when @theokit/di is not available.\n    const registry = new Map<Function, object>()\n\n    // 1. Module resolution (@Module metadata)\n    if (opts.module) {\n      const moduleMeta = Reflect.getMetadata('usetheo:di:module', opts.module)\n      if (moduleMeta) {\n        const allModules = [opts.module, ...(moduleMeta.imports ?? [])]\n        for (const Mod of allModules) {\n          const meta = Reflect.getMetadata('usetheo:di:module', Mod)\n          if (!meta) continue\n          for (const Prov of (meta.providers ?? []) as Function[]) {\n            if (!registry.has(Prov)) {\n              registry.set(Prov, new (Prov as new () => object)())\n            }\n          }\n        }\n      }\n    }\n\n    // 2. Inline providers (EC-2: BEFORE controllers and agents)\n    if (opts.providers) {\n      for (const Prov of opts.providers) {\n        if (!registry.has(Prov)) {\n          registry.set(Prov, new (Prov as new () => object)())\n        }\n      }\n    }\n\n    // 3. Controllers with DI\n    for (const Controller of opts.controllers) {\n      const paramTypes: Function[] = Reflect.getMetadata('design:paramtypes', Controller) ?? []\n      const args = paramTypes.map((pt: Function) => {\n        const dep = registry.get(pt)\n        if (!dep) {\n          throw new Error(\n            `[TheoApp] Cannot resolve ${pt.name} for ${Controller.name}. ` +\n              `Add ${pt.name} to providers (or to @Module({ providers: [...] })).`,\n          )\n        }\n        return dep\n      })\n      const instance = new (Controller as new (...a: unknown[]) => object)(...args)\n\n      // Lifecycle: call @PostConstruct if present\n      const postConstruct = Reflect.getMetadata('usetheo:di:post-construct', Controller)\n      if (postConstruct && typeof (instance as Record<string, Function>)[postConstruct] === 'function') {\n        const result = (instance as Record<string, Function>)[postConstruct]()\n        if (result instanceof Promise) await result // EC-1: await async PostConstruct\n      }\n\n      const walks = walkControllerMetadata(Controller)\n      for (const w of walks) {\n        app.routes.push({ walk: w, instance })\n      }\n    }\n\n    // Sort: static before parameterized\n    app.routes.sort((a, b) => {\n      const aP = a.walk.fullPath.includes(':')\n      const bP = b.walk.fullPath.includes(':')\n      if (aP !== bP) return aP ? 1 : -1\n      return 0\n    })\n\n    // Pre-compile route patterns (Elysia-inspired: regex built once, not per-request)\n    for (const entry of app.routes) {\n      const paramNames: string[] = []\n      const regexStr = entry.walk.fullPath.replace(/:(\\w+)/g, (_m, name: string) => {\n        paramNames.push(name)\n        return '([^/]+)'\n      })\n      entry.compiledPattern = new RegExp(`^${regexStr}$`)\n      entry.compiledParamNames = paramNames\n      // Determine if handler needs body parsing (skip if no @Body decorator)\n      entry.needsBody = entry.walk.paramEntries.some((p) => p.source === 'body')\n    }\n\n    // Bug #8: Store frontend HTML\n    if (opts.html) app.frontendHtml = opts.html\n\n    // 4. Auto-wire agents (EC-2: AFTER providers and controllers)\n    // The framework handles EVERYTHING — walk, compile, mount, stream.\n    // Consumer writes: agents: [MyAgent] — and that's it.\n    if (opts.agents?.length) {\n      await app.autoWireAgents(opts.agents, registry, opts)\n    }\n\n    return app\n  }\n\n  async listen(port: number): Promise<void> {\n    return new Promise((resolve) => {\n      this.serverHandle.listen(port, () => {\n        console.log(`TheoKit app listening on http://localhost:${port}`)\n        resolve()\n      })\n    })\n  }\n\n  getServerHandle(): ServerHandle {\n    return this.serverHandle\n  }\n\n  async close(): Promise<void> {\n    return new Promise((resolve) => {\n      this.serverHandle.close(() => { resolve(); })\n    })\n  }\n\n  // ── Auto-wire agents (the \"SpringApplication.run()\" moment) ──\n\n  private agentRoutes: { method: string; pattern: RegExp; paramNames: string[]; handler: (request: Request) => Promise<Response>; guards: Function[]; agentClass: Function; methodName: string | symbol }[] = []\n\n  private async autoWireAgents(agentClasses: Function[], registry: Map<Function, object>, opts: TheoAppOptions) {\n    // Dynamic import — @theokit/agents is optional peer dependency\n    // SECURITY: new Function used for dynamic import of optional peer dep.\n    // Argument is HARDCODED ('@theokit/agents'), never user input. Safe.\n    // eslint-disable-next-line @typescript-eslint/no-implied-eval -- dynamic import avoids compile-time dependency on optional peer\n    const importFn = new Function('specifier', 'return import(specifier)') as (s: string) => Promise<Record<string, Function>>\n    let walkAgentMetadata: Function, compileAgent: Function, generateAgentRoutes: Function, getMixins: Function, createRealAgentStreamFn: Function | undefined\n    try {\n      const mod = await importFn('@theokit/agents')\n      walkAgentMetadata = mod.walkAgentMetadata\n      compileAgent = mod.compileAgent\n      generateAgentRoutes = mod.generateAgentRoutes\n      getMixins = mod.getMixins\n      createRealAgentStreamFn = mod.createRealAgentStream\n    } catch {\n      throw new Error('[TheoApp] @theokit/agents is required when agents[] is provided. Install: npm install @theokit/agents')\n    }\n\n    const apiKey = opts.llmApiKey ?? process.env.OPENROUTER_API_KEY ?? ''\n\n    for (const AgentClass of agentClasses) {\n      // 1. Walk metadata (decorators → structured data)\n      const mixins = getMixins(AgentClass)\n      const allToolboxes = [...mixins]\n\n      // Also check providers for @Toolbox classes\n      for (const [Cls] of registry) {\n        if (Reflect.getMetadata(Symbol.for('theokit:agents:toolbox'), Cls)) {\n          if (!allToolboxes.includes(Cls)) allToolboxes.push(Cls)\n        }\n      }\n\n      const walk = walkAgentMetadata(AgentClass, allToolboxes)\n\n      // 2. Resolve toolbox instances from registry (DI)\n      const toolboxInstances = new Map<Function, object>()\n      for (const tb of walk.toolboxes) {\n        let instance = registry.get(tb.class)\n        if (!instance) {\n          instance = new (tb.class as new () => object)()\n          registry.set(tb.class, instance)\n        }\n        toolboxInstances.set(tb.class, instance)\n      }\n\n      // 3. Compile tools (decorator metadata → defineTool-compatible)\n      const compiled = compileAgent(walk, toolboxInstances)\n\n      // 4. Create LLM stream factory\n      let createRun: (message: string, sessionId: string) => AsyncIterable<unknown>\n\n      if (opts.agentStreamFactory) {\n        createRun = opts.agentStreamFactory(walk, compiled.tools, apiKey, opts.llmModel)\n      } else if (apiKey && createRealAgentStreamFn !== undefined) { // eslint-disable-line @typescript-eslint/no-unnecessary-condition -- apiKey can be empty string\n        // Bug #5 fix: use built-in LLM runner from @theokit/agents\n        createRun = createRealAgentStreamFn(walk, compiled.tools, apiKey, opts.llmModel) as (m: string, s: string) => AsyncIterable<unknown>\n      } else {\n        createRun = this.createFallbackStream(walk.agentConfig.name, apiKey)\n      }\n\n      // 5. Generate routes (POST /chat, GET /runs/:id)\n      const routes = generateAgentRoutes({\n        walkResult: walk,\n        compiledOptions: compiled,\n        createRun: createRun as (message: string, sessionId: string) => AsyncIterable<{ type: string;[k: string]: unknown }>,\n      })\n\n      // 6. Mount routes\n      for (const route of routes) {\n        const paramNames: string[] = []\n        const regexStr = route.path.replace(/:(\\w+)/g, (_m: string, name: string) => {\n          paramNames.push(name)\n          return '([^/]+)'\n        })\n        this.agentRoutes.push({\n          method: route.method,\n          pattern: new RegExp(`^${regexStr}$`),\n          paramNames,\n          handler: route.handler,\n          guards: walk.guards ?? [],\n          agentClass: AgentClass,\n          methodName: walk.mainLoop?.propertyKey ?? 'run',\n        })\n      }\n\n      console.log(`  🤖 Agent \"${walk.agentConfig.name}\" mounted at ${walk.route}/chat (${compiled.tools.length} tools)`)\n    }\n  }\n\n  private async handleReadinessCheck(): Promise<Response> {\n    if (this.readinessChecks.length === 0) {\n      return jsonResponse(200, { status: 'ready', checks: [] })\n    }\n    const results = await Promise.all(this.readinessChecks.map(async (check) => {\n      try {\n        return await Promise.race([\n          check(),\n          new Promise<{ name: string; healthy: boolean; message?: string }>((resolve) =>\n            setTimeout(() => resolve({ name: 'unknown', healthy: false, message: 'Readiness check timed out (5s)' }), 5000),\n          ),\n        ])\n      } catch (err) {\n        return { name: 'unknown', healthy: false, message: err instanceof Error ? err.message : 'Check failed' }\n      }\n    }))\n    const allHealthy = results.every((r) => r.healthy)\n    return jsonResponse(allHealthy ? 200 : 503, { status: allHealthy ? 'ready' : 'not_ready', checks: results })\n  }\n\n  private createFallbackStream(agentName: string, apiKey: string) {\n    const msg = !apiKey\n      ? 'Set OPENROUTER_API_KEY environment variable or pass llmApiKey to TheoApp.create()'\n      : 'Pass agentStreamFactory to TheoApp.create() to connect your LLM provider'\n    return (_message: string, _sessionId: string) => {\n      const events = [\n        { type: 'run_started', runId: `run-${Date.now()}`, agentName },\n        { type: 'error', code: 'AGENT_NOT_WIRED', message: msg, retryable: false },\n      ]\n      return {\n        [Symbol.asyncIterator]: () => {\n          let i = 0\n          return { next: () => Promise.resolve(i < events.length ? { value: events[i++], done: false as const } : { value: undefined, done: true as const }) }\n        },\n      }\n    }\n  }\n\n  // ── Web Standard request handler ──────────────────\n\n  private async handleRequest(request: Request): Promise<Response> {\n    const pathname = new URL(request.url).pathname\n\n    // ── Health & Readiness probes (bypass guards/interceptors) ──\n    if (request.method === 'GET') {\n      if (pathname === this.healthPath) {\n        return jsonResponse(200, { status: 'ok', uptime: (Date.now() - this.startTime) / 1000, timestamp: Date.now() })\n      }\n      if (pathname === this.readyPath) {\n        return this.handleReadinessCheck()\n      }\n    }\n\n    // Bug #8: Serve frontend HTML at GET /\n    if (request.method === 'GET') {\n      if ((pathname === '/' || pathname === '/index.html') && this.frontendHtml) {\n        return new Response(this.frontendHtml, { status: 200, headers: { 'content-type': 'text/html; charset=utf-8' } })\n      }\n    }\n\n    // Agent routes (auto-wired — checked first, with guard enforcement per Bug #4)\n    for (const route of this.agentRoutes) {\n      if (request.method.toUpperCase() === route.method && route.pattern.test(pathname)) {\n        // Bug #4 fix: enforce @UseGuards on agent routes (same pipeline as controllers)\n        if (route.guards.length > 0) {\n          const ctx = createExecutionContext(request, route.agentClass, route.methodName)\n          for (const GuardCtor of route.guards) {\n            const guard = new (GuardCtor as new () => CanActivate)()\n            if (!(await guard.canActivate(ctx))) {\n              const ex = new ForbiddenException('Forbidden resource')\n              return jsonResponse(ex.statusCode, ex.toJSON())\n            }\n          }\n        }\n        return route.handler(request)\n      }\n    }\n\n    const url = new URL(request.url)\n    const method = request.method.toUpperCase()\n\n    const match = this.findRoute(method, url.pathname)\n    if (!match) {\n      return jsonResponse(404, { error: { code: 'NOT_FOUND', message: `No route for ${method} ${url.pathname}` } })\n    }\n\n    const { entry, params } = match\n\n    try {\n      // Guards\n      const ctx = createExecutionContext(request, entry.instance.constructor, entry.walk.propertyKey)\n      for (const GuardCtor of entry.walk.guards) {\n        const guard = new (GuardCtor as new () => CanActivate)()\n        if (!(await guard.canActivate(ctx))) {\n          const ex = new ForbiddenException('Forbidden resource')\n          return jsonResponse(ex.statusCode, ex.toJSON())\n        }\n      }\n\n      // Body — skip parsing entirely if handler has no @Body decorator (Elysia-inspired lazy parsing)\n      let body: unknown\n      if (entry.needsBody && ['POST', 'PUT', 'PATCH'].includes(method)) {\n        try {\n          const text = await request.text()\n          body = text ? JSON.parse(text) : undefined\n        } catch { body = undefined }\n\n        if (entry.walk.bodySchema && body !== undefined) {\n          const result = entry.walk.bodySchema.safeParse(body)\n          if (!result.success) {\n            return jsonResponse(422, { error: { code: 'VALIDATION_ERROR', issues: result.error.issues } })\n          }\n          body = result.data\n        }\n      }\n\n      // Args\n      const args = this.buildArgs(entry.walk.paramEntries, request, body, params, Object.fromEntries(url.searchParams))\n\n      // Redirect\n      if (entry.walk.redirect) {\n        return new Response(null, { status: entry.walk.redirect.status, headers: { location: entry.walk.redirect.url } })\n      }\n\n      // Handler — wrapped by interceptor chain (Bug #2 fix)\n      const handlerFn = (entry.instance as Record<string | symbol, Function>)[entry.walk.propertyKey]\n\n      let result: unknown\n      if (entry.walk.interceptors.length > 0) {\n        // Import runInterceptors dynamically to avoid circular dep\n        const { runInterceptors } = await import('./bridge/interceptor-chain.js')\n        result = await runInterceptors(\n          entry.walk.interceptors,\n          () => handlerFn.apply(entry.instance, args) as Promise<unknown>,\n          request,\n        )\n      } else {\n        result = await handlerFn.apply(entry.instance, args)\n      }\n\n      return buildResponse(result, entry.walk, method)\n    } catch (err) {\n      // Exception filters (Bug #2 fix — filters also wired)\n      if (entry.walk.filters.length > 0) {\n        const { runExceptionFilters } = await import('./bridge/exception-filter-chain.js')\n        return runExceptionFilters(err, entry.walk.filters, request)\n      }\n      // Fallback: HttpException subclasses (Bug #3 fix)\n      if (err instanceof HttpException) {\n        return jsonResponse(err.statusCode, err.toJSON())\n      }\n      // Security: never leak raw error messages to clients\n      console.error('[theokit] Internal error:', err instanceof Error ? err.message : err)\n      return jsonResponse(500, { error: { code: 'INTERNAL_SERVER_ERROR', message: 'Internal Server Error' } })\n    }\n  }\n\n  private findRoute(method: string, pathname: string) {\n    for (const entry of this.routes) {\n      if (entry.walk.verb !== 'ALL' && entry.walk.verb !== method) continue\n      // Use pre-compiled regex (built once at create time, not per-request)\n      const match = entry.compiledPattern!.exec(pathname)\n      if (!match) continue\n      const params: Record<string, string> = {}\n      entry.compiledParamNames!.forEach((name, i) => { params[name] = match[i + 1] })\n      return { entry, params }\n    }\n    return null\n  }\n\n  private buildArgs(entries: ParamEntry[], request: Request, body: unknown, params: Record<string, string>, query: Record<string, string>): unknown[] {\n    if (entries.length === 0) return []\n    const max = Math.max(...entries.map(p => p.index))\n    const args: unknown[] = Array.from({ length: max + 1 }, () => undefined)\n    for (const p of entries) {\n      switch (p.source) {\n        case 'req': args[p.index] = request; break\n        case 'body': args[p.index] = p.key ? (body as Record<string, unknown>)[p.key] : body; break\n        case 'param': args[p.index] = p.key ? params[p.key] : params; break\n        case 'query': args[p.index] = p.key ? query[p.key] : query; break\n        case 'headers': args[p.index] = p.key ? request.headers.get(p.key.toLowerCase()) : Object.fromEntries(request.headers.entries()); break\n        case 'ip': args[p.index] = request.headers.get('x-forwarded-for') ?? '127.0.0.1'; break\n        default: args[p.index] = undefined\n      }\n    }\n    return args\n  }\n}\n\nfunction jsonResponse(status: number, body: unknown): Response {\n  return new Response(JSON.stringify(body), {\n    status,\n    headers: { 'content-type': 'application/json' },\n  })\n}\n\nfunction buildResponse(result: unknown, walk: WalkResult, method: string): Response {\n  const status = walk.status ?? (method === 'POST' ? 201 : 200)\n  const headers: Record<string, string> = { 'content-type': 'application/json' }\n  for (const [n, v] of walk.headers) headers[n.toLowerCase()] = v\n\n  if (result === undefined || result === null) {\n    return new Response(null, { status: status === 200 ? 204 : status, headers })\n  }\n  if (typeof result === 'string') {\n    headers['content-type'] = 'text/plain'\n    return new Response(result, { status, headers })\n  }\n  return new Response(JSON.stringify(result), { status, headers })\n}\n"],"mappings":";;;;;;;;;;;;;;;;AACA,OAAO;AAsDA,IAAMA,UAAN,MAAMA,SAAAA;EAvDb,OAuDaA;;;EACHC;EACSC,SAAuB,CAAA;EAChCC;EACSC,YAAYC,KAAKC,IAAG;EACpBC;EACAC;EACAC;EAEjB,YAAoBC,MAA6E;AAC/F,UAAMC,KAAKD,MAAMH,cAAc;AAC/B,UAAMK,KAAKF,MAAMF,aAAa;AAE9B,QAAIG,GAAGE,WAAW,OAAA,EAAU,OAAM,IAAIC,MAAM,yBAAyBH,EAAAA,mEAAgE;AACrI,QAAIC,GAAGC,WAAW,OAAA,EAAU,OAAM,IAAIC,MAAM,wBAAwBF,EAAAA,mEAAgE;AACpI,SAAKL,aAAaI;AAClB,SAAKH,YAAYI;AACjB,SAAKH,kBAAkBC,MAAMD,mBAAmB,CAAA;AAChD,UAAMM,UAAUC,kBAAAA;AAChB,SAAKf,eAAec,QAAQE,aAAa,CAACC,YAAY,KAAKC,cAAcD,OAAAA,CAAAA;EAC3E;;;;;;;EAQA,aAAaE,OAAOV,MAAwC;AAC1D,UAAMW,MAAM,IAAIrB,SAAQU,IAAAA;AAKxB,UAAMY,WAAW,oBAAIC,IAAAA;AAGrB,QAAIb,KAAKc,QAAQ;AACf,YAAMC,aAAaC,QAAQC,YAAY,qBAAqBjB,KAAKc,MAAM;AACvE,UAAIC,YAAY;AACd,cAAMG,aAAa;UAAClB,KAAKc;aAAYC,WAAWI,WAAW,CAAA;;AAC3D,mBAAWC,OAAOF,YAAY;AAC5B,gBAAMG,OAAOL,QAAQC,YAAY,qBAAqBG,GAAAA;AACtD,cAAI,CAACC,KAAM;AACX,qBAAWC,QAASD,KAAKE,aAAa,CAAA,GAAmB;AACvD,gBAAI,CAACX,SAASY,IAAIF,IAAAA,GAAO;AACvBV,uBAASa,IAAIH,MAAM,IAAKA,KAAAA,CAAAA;YAC1B;UACF;QACF;MACF;IACF;AAGA,QAAItB,KAAKuB,WAAW;AAClB,iBAAWD,QAAQtB,KAAKuB,WAAW;AACjC,YAAI,CAACX,SAASY,IAAIF,IAAAA,GAAO;AACvBV,mBAASa,IAAIH,MAAM,IAAKA,KAAAA,CAAAA;QAC1B;MACF;IACF;AAGA,eAAWI,cAAc1B,KAAK2B,aAAa;AACzC,YAAMC,aAAyBZ,QAAQC,YAAY,qBAAqBS,UAAAA,KAAe,CAAA;AACvF,YAAMG,OAAOD,WAAWE,IAAI,CAACC,OAAAA;AAC3B,cAAMC,MAAMpB,SAASqB,IAAIF,EAAAA;AACzB,YAAI,CAACC,KAAK;AACR,gBAAM,IAAI5B,MACR,4BAA4B2B,GAAGG,IAAI,QAAQR,WAAWQ,IAAI,SACjDH,GAAGG,IAAI,sDAAsD;QAE1E;AACA,eAAOF;MACT,CAAA;AACA,YAAMG,WAAW,IAAKT,WAAAA,GAAkDG,IAAAA;AAGxE,YAAMO,gBAAgBpB,QAAQC,YAAY,6BAA6BS,UAAAA;AACvE,UAAIU,iBAAiB,OAAQD,SAAsCC,aAAAA,MAAmB,YAAY;AAChG,cAAMC,SAAUF,SAAsCC,aAAAA,EAAc;AACpE,YAAIC,kBAAkBC,QAAS,OAAMD;MACvC;AAEA,YAAME,QAAQC,uBAAuBd,UAAAA;AACrC,iBAAWe,KAAKF,OAAO;AACrB5B,YAAInB,OAAOkD,KAAK;UAAEC,MAAMF;UAAGN;QAAS,CAAA;MACtC;IACF;AAGAxB,QAAInB,OAAOoD,KAAK,CAACC,GAAGC,MAAAA;AAClB,YAAMC,KAAKF,EAAEF,KAAKK,SAASC,SAAS,GAAA;AACpC,YAAMC,KAAKJ,EAAEH,KAAKK,SAASC,SAAS,GAAA;AACpC,UAAIF,OAAOG,GAAI,QAAOH,KAAK,IAAI;AAC/B,aAAO;IACT,CAAA;AAGA,eAAWI,SAASxC,IAAInB,QAAQ;AAC9B,YAAM4D,aAAuB,CAAA;AAC7B,YAAMC,WAAWF,MAAMR,KAAKK,SAASM,QAAQ,WAAW,CAACC,IAAIrB,SAAAA;AAC3DkB,mBAAWV,KAAKR,IAAAA;AAChB,eAAO;MACT,CAAA;AACAiB,YAAMK,kBAAkB,IAAIC,OAAO,IAAIJ,QAAAA,GAAW;AAClDF,YAAMO,qBAAqBN;AAE3BD,YAAMQ,YAAYR,MAAMR,KAAKiB,aAAaC,KAAK,CAACC,MAAMA,EAAEC,WAAW,MAAA;IACrE;AAGA,QAAI/D,KAAKgE,KAAMrD,KAAIlB,eAAeO,KAAKgE;AAKvC,QAAIhE,KAAKiE,QAAQC,QAAQ;AACvB,YAAMvD,IAAIwD,eAAenE,KAAKiE,QAAQrD,UAAUZ,IAAAA;IAClD;AAEA,WAAOW;EACT;EAEA,MAAMyD,OAAOC,MAA6B;AACxC,WAAO,IAAI/B,QAAQ,CAACgC,YAAAA;AAClB,WAAK/E,aAAa6E,OAAOC,MAAM,MAAA;AAC7BE,gBAAQC,IAAI,6CAA6CH,IAAAA,EAAM;AAC/DC,gBAAAA;MACF,CAAA;IACF,CAAA;EACF;EAEAG,kBAAgC;AAC9B,WAAO,KAAKlF;EACd;EAEA,MAAMmF,QAAuB;AAC3B,WAAO,IAAIpC,QAAQ,CAACgC,YAAAA;AAClB,WAAK/E,aAAamF,MAAM,MAAA;AAAQJ,gBAAAA;MAAW,CAAA;IAC7C,CAAA;EACF;;EAIQK,cAAoM,CAAA;EAE5M,MAAcR,eAAeS,cAA0BhE,UAAiCZ,MAAsB;AAK5G,UAAM6E,WAAW,IAAIC,SAAS,aAAa,0BAAA;AAC3C,QAAIC,mBAA6BC,cAAwBC,qBAA+BC,WAAqBC;AAC7G,QAAI;AACF,YAAMC,MAAM,MAAMP,SAAS,iBAAA;AAC3BE,0BAAoBK,IAAIL;AACxBC,qBAAeI,IAAIJ;AACnBC,4BAAsBG,IAAIH;AAC1BC,kBAAYE,IAAIF;AAChBC,gCAA0BC,IAAIC;IAChC,QAAQ;AACN,YAAM,IAAIjF,MAAM,uGAAA;IAClB;AAEA,UAAMkF,SAAStF,KAAKuF,aAAaC,QAAQC,IAAIC,sBAAsB;AAEnE,eAAWC,cAAcf,cAAc;AAErC,YAAMgB,SAASV,UAAUS,UAAAA;AACzB,YAAME,eAAe;WAAID;;AAGzB,iBAAW,CAACE,GAAAA,KAAQlF,UAAU;AAC5B,YAAII,QAAQC,YAAY8E,uBAAOC,IAAI,wBAAA,GAA2BF,GAAAA,GAAM;AAClE,cAAI,CAACD,aAAa5C,SAAS6C,GAAAA,EAAMD,cAAanD,KAAKoD,GAAAA;QACrD;MACF;AAEA,YAAMnD,OAAOoC,kBAAkBY,YAAYE,YAAAA;AAG3C,YAAMI,mBAAmB,oBAAIpF,IAAAA;AAC7B,iBAAWqF,MAAMvD,KAAKwD,WAAW;AAC/B,YAAIhE,WAAWvB,SAASqB,IAAIiE,GAAGE,KAAK;AACpC,YAAI,CAACjE,UAAU;AACbA,qBAAW,IAAK+D,GAAGE,MAAK;AACxBxF,mBAASa,IAAIyE,GAAGE,OAAOjE,QAAAA;QACzB;AACA8D,yBAAiBxE,IAAIyE,GAAGE,OAAOjE,QAAAA;MACjC;AAGA,YAAMkE,WAAWrB,aAAarC,MAAMsD,gBAAAA;AAGpC,UAAIK;AAEJ,UAAItG,KAAKuG,oBAAoB;AAC3BD,oBAAYtG,KAAKuG,mBAAmB5D,MAAM0D,SAASG,OAAOlB,QAAQtF,KAAKyG,QAAQ;MACjF,WAAWnB,UAAUH,4BAA4BuB,QAAW;AAE1DJ,oBAAYnB,wBAAwBxC,MAAM0D,SAASG,OAAOlB,QAAQtF,KAAKyG,QAAQ;MACjF,OAAO;AACLH,oBAAY,KAAKK,qBAAqBhE,KAAKiE,YAAY1E,MAAMoD,MAAAA;MAC/D;AAGA,YAAM9F,SAASyF,oBAAoB;QACjC4B,YAAYlE;QACZmE,iBAAiBT;QACjBC;MACF,CAAA;AAGA,iBAAWS,SAASvH,QAAQ;AAC1B,cAAM4D,aAAuB,CAAA;AAC7B,cAAMC,WAAW0D,MAAMC,KAAK1D,QAAQ,WAAW,CAACC,IAAYrB,SAAAA;AAC1DkB,qBAAWV,KAAKR,IAAAA;AAChB,iBAAO;QACT,CAAA;AACA,aAAKyC,YAAYjC,KAAK;UACpBuE,QAAQF,MAAME;UACdC,SAAS,IAAIzD,OAAO,IAAIJ,QAAAA,GAAW;UACnCD;UACA+D,SAASJ,MAAMI;UACfC,QAAQzE,KAAKyE,UAAU,CAAA;UACvBC,YAAY1B;UACZ2B,YAAY3E,KAAK4E,UAAUC,eAAe;QAC5C,CAAA;MACF;AAEAjD,cAAQC,IAAI,sBAAe7B,KAAKiE,YAAY1E,IAAI,gBAAgBS,KAAKoE,KAAK,UAAUV,SAASG,MAAMtC,MAAM,SAAS;IACpH;EACF;EAEA,MAAcuD,uBAA0C;AACtD,QAAI,KAAK1H,gBAAgBmE,WAAW,GAAG;AACrC,aAAOwD,aAAa,KAAK;QAAEC,QAAQ;QAASC,QAAQ,CAAA;MAAG,CAAA;IACzD;AACA,UAAMC,UAAU,MAAMvF,QAAQwF,IAAI,KAAK/H,gBAAgB+B,IAAI,OAAOiG,UAAAA;AAChE,UAAI;AACF,eAAO,MAAMzF,QAAQ0F,KAAK;UACxBD,MAAAA;UACA,IAAIzF,QAA8D,CAACgC,YACjE2D,WAAW,MAAM3D,QAAQ;YAAEpC,MAAM;YAAWgG,SAAS;YAAOC,SAAS;UAAiC,CAAA,GAAI,GAAA,CAAA;SAE7G;MACH,SAASC,KAAK;AACZ,eAAO;UAAElG,MAAM;UAAWgG,SAAS;UAAOC,SAASC,eAAehI,QAAQgI,IAAID,UAAU;QAAe;MACzG;IACF,CAAA,CAAA;AACA,UAAME,aAAaR,QAAQS,MAAM,CAACC,MAAMA,EAAEL,OAAO;AACjD,WAAOR,aAAaW,aAAa,MAAM,KAAK;MAAEV,QAAQU,aAAa,UAAU;MAAaT,QAAQC;IAAQ,CAAA;EAC5G;EAEQlB,qBAAqB6B,WAAmBlD,QAAgB;AAC9D,UAAMmD,MAAM,CAACnD,SACT,sFACA;AACJ,WAAO,CAACoD,UAAkBC,eAAAA;AACxB,YAAMC,SAAS;QACb;UAAEC,MAAM;UAAeC,OAAO,OAAOnJ,KAAKC,IAAG,CAAA;UAAM4I;QAAU;QAC7D;UAAEK,MAAM;UAASE,MAAM;UAAmBZ,SAASM;UAAKO,WAAW;QAAM;;AAE3E,aAAO;QACL,CAACjD,OAAOkD,aAAa,GAAG,MAAA;AACtB,cAAIC,IAAI;AACR,iBAAO;YAAEC,MAAM,6BAAM7G,QAAQgC,QAAQ4E,IAAIN,OAAO1E,SAAS;cAAEkF,OAAOR,OAAOM,GAAAA;cAAMG,MAAM;YAAe,IAAI;cAAED,OAAO1C;cAAW2C,MAAM;YAAc,CAAA,GAAjI;UAAoI;QACrJ;MACF;IACF;EACF;;EAIA,MAAc5I,cAAcD,SAAqC;AAC/D,UAAM8I,WAAW,IAAIC,IAAI/I,QAAQgJ,GAAG,EAAEF;AAGtC,QAAI9I,QAAQyG,WAAW,OAAO;AAC5B,UAAIqC,aAAa,KAAKzJ,YAAY;AAChC,eAAO6H,aAAa,KAAK;UAAEC,QAAQ;UAAM8B,SAAS9J,KAAKC,IAAG,IAAK,KAAKF,aAAa;UAAMgK,WAAW/J,KAAKC,IAAG;QAAG,CAAA;MAC/G;AACA,UAAI0J,aAAa,KAAKxJ,WAAW;AAC/B,eAAO,KAAK2H,qBAAoB;MAClC;IACF;AAGA,QAAIjH,QAAQyG,WAAW,OAAO;AAC5B,WAAKqC,aAAa,OAAOA,aAAa,kBAAkB,KAAK7J,cAAc;AACzE,eAAO,IAAIkK,SAAS,KAAKlK,cAAc;UAAEkI,QAAQ;UAAKiC,SAAS;YAAE,gBAAgB;UAA2B;QAAE,CAAA;MAChH;IACF;AAGA,eAAW7C,SAAS,KAAKpC,aAAa;AACpC,UAAInE,QAAQyG,OAAO4C,YAAW,MAAO9C,MAAME,UAAUF,MAAMG,QAAQ4C,KAAKR,QAAAA,GAAW;AAEjF,YAAIvC,MAAMK,OAAOlD,SAAS,GAAG;AAC3B,gBAAM6F,MAAMC,uBAAuBxJ,SAASuG,MAAMM,YAAYN,MAAMO,UAAU;AAC9E,qBAAW2C,aAAalD,MAAMK,QAAQ;AACpC,kBAAM8C,QAAQ,IAAKD,UAAAA;AACnB,gBAAI,CAAE,MAAMC,MAAMC,YAAYJ,GAAAA,GAAO;AACnC,oBAAMK,KAAK,IAAIC,mBAAmB,oBAAA;AAClC,qBAAO3C,aAAa0C,GAAGE,YAAYF,GAAGG,OAAM,CAAA;YAC9C;UACF;QACF;AACA,eAAOxD,MAAMI,QAAQ3G,OAAAA;MACvB;IACF;AAEA,UAAMgJ,MAAM,IAAID,IAAI/I,QAAQgJ,GAAG;AAC/B,UAAMvC,SAASzG,QAAQyG,OAAO4C,YAAW;AAEzC,UAAMW,QAAQ,KAAKC,UAAUxD,QAAQuC,IAAIF,QAAQ;AACjD,QAAI,CAACkB,OAAO;AACV,aAAO9C,aAAa,KAAK;QAAEgD,OAAO;UAAE3B,MAAM;UAAaZ,SAAS,gBAAgBlB,MAAAA,IAAUuC,IAAIF,QAAQ;QAAG;MAAE,CAAA;IAC7G;AAEA,UAAM,EAAEnG,OAAOwH,OAAM,IAAKH;AAE1B,QAAI;AAEF,YAAMT,MAAMC,uBAAuBxJ,SAAS2C,MAAMhB,SAAS,aAAagB,MAAMR,KAAK6E,WAAW;AAC9F,iBAAWyC,aAAa9G,MAAMR,KAAKyE,QAAQ;AACzC,cAAM8C,QAAQ,IAAKD,UAAAA;AACnB,YAAI,CAAE,MAAMC,MAAMC,YAAYJ,GAAAA,GAAO;AACnC,gBAAMK,KAAK,IAAIC,mBAAmB,oBAAA;AAClC,iBAAO3C,aAAa0C,GAAGE,YAAYF,GAAGG,OAAM,CAAA;QAC9C;MACF;AAGA,UAAIK;AACJ,UAAIzH,MAAMQ,aAAa;QAAC;QAAQ;QAAO;QAASV,SAASgE,MAAAA,GAAS;AAChE,YAAI;AACF,gBAAM4D,OAAO,MAAMrK,QAAQqK,KAAI;AAC/BD,iBAAOC,OAAOC,KAAKC,MAAMF,IAAAA,IAAQnE;QACnC,QAAQ;AAAEkE,iBAAOlE;QAAU;AAE3B,YAAIvD,MAAMR,KAAKqI,cAAcJ,SAASlE,QAAW;AAC/C,gBAAMrE,UAASc,MAAMR,KAAKqI,WAAWC,UAAUL,IAAAA;AAC/C,cAAI,CAACvI,QAAO6I,SAAS;AACnB,mBAAOxD,aAAa,KAAK;cAAEgD,OAAO;gBAAE3B,MAAM;gBAAoBoC,QAAQ9I,QAAOqI,MAAMS;cAAO;YAAE,CAAA;UAC9F;AACAP,iBAAOvI,QAAO+I;QAChB;MACF;AAGA,YAAMvJ,OAAO,KAAKwJ,UAAUlI,MAAMR,KAAKiB,cAAcpD,SAASoK,MAAMD,QAAQW,OAAOC,YAAY/B,IAAIgC,YAAY,CAAA;AAG/G,UAAIrI,MAAMR,KAAK8I,UAAU;AACvB,eAAO,IAAI9B,SAAS,MAAM;UAAEhC,QAAQxE,MAAMR,KAAK8I,SAAS9D;UAAQiC,SAAS;YAAE8B,UAAUvI,MAAMR,KAAK8I,SAASjC;UAAI;QAAE,CAAA;MACjH;AAGA,YAAMmC,YAAaxI,MAAMhB,SAA+CgB,MAAMR,KAAK6E,WAAW;AAE9F,UAAInF;AACJ,UAAIc,MAAMR,KAAKiJ,aAAa1H,SAAS,GAAG;AAEtC,cAAM,EAAE2H,gBAAe,IAAK,MAAM,OAAO,iCAAA;AACzCxJ,iBAAS,MAAMwJ,gBACb1I,MAAMR,KAAKiJ,cACX,MAAMD,UAAUG,MAAM3I,MAAMhB,UAAUN,IAAAA,GACtCrB,OAAAA;MAEJ,OAAO;AACL6B,iBAAS,MAAMsJ,UAAUG,MAAM3I,MAAMhB,UAAUN,IAAAA;MACjD;AAEA,aAAOkK,cAAc1J,QAAQc,MAAMR,MAAMsE,MAAAA;IAC3C,SAASmB,KAAK;AAEZ,UAAIjF,MAAMR,KAAKqJ,QAAQ9H,SAAS,GAAG;AACjC,cAAM,EAAE+H,oBAAmB,IAAK,MAAM,OAAO,sCAAA;AAC7C,eAAOA,oBAAoB7D,KAAKjF,MAAMR,KAAKqJ,SAASxL,OAAAA;MACtD;AAEA,UAAI4H,eAAe8D,eAAe;AAChC,eAAOxE,aAAaU,IAAIkC,YAAYlC,IAAImC,OAAM,CAAA;MAChD;AAEAhG,cAAQmG,MAAM,6BAA6BtC,eAAehI,QAAQgI,IAAID,UAAUC,GAAAA;AAChF,aAAOV,aAAa,KAAK;QAAEgD,OAAO;UAAE3B,MAAM;UAAyBZ,SAAS;QAAwB;MAAE,CAAA;IACxG;EACF;EAEQsC,UAAUxD,QAAgBqC,UAAkB;AAClD,eAAWnG,SAAS,KAAK3D,QAAQ;AAC/B,UAAI2D,MAAMR,KAAKwJ,SAAS,SAAShJ,MAAMR,KAAKwJ,SAASlF,OAAQ;AAE7D,YAAMuD,QAAQrH,MAAMK,gBAAiB4I,KAAK9C,QAAAA;AAC1C,UAAI,CAACkB,MAAO;AACZ,YAAMG,SAAiC,CAAC;AACxCxH,YAAMO,mBAAoB2I,QAAQ,CAACnK,MAAMgH,MAAAA;AAAQyB,eAAOzI,IAAAA,IAAQsI,MAAMtB,IAAI,CAAA;MAAG,CAAA;AAC7E,aAAO;QAAE/F;QAAOwH;MAAO;IACzB;AACA,WAAO;EACT;EAEQU,UAAUiB,SAAuB9L,SAAkBoK,MAAeD,QAAgC4B,OAA0C;AAClJ,QAAID,QAAQpI,WAAW,EAAG,QAAO,CAAA;AACjC,UAAMsI,MAAMC,KAAKD,IAAG,GAAIF,QAAQxK,IAAIgC,CAAAA,MAAKA,EAAE4I,KAAK,CAAA;AAChD,UAAM7K,OAAkB8K,MAAMC,KAAK;MAAE1I,QAAQsI,MAAM;IAAE,GAAG,MAAM9F,MAAAA;AAC9D,eAAW5C,KAAKwI,SAAS;AACvB,cAAQxI,EAAEC,QAAM;QACd,KAAK;AAAOlC,eAAKiC,EAAE4I,KAAK,IAAIlM;AAAS;QACrC,KAAK;AAAQqB,eAAKiC,EAAE4I,KAAK,IAAI5I,EAAE+I,MAAOjC,KAAiC9G,EAAE+I,GAAG,IAAIjC;AAAM;QACtF,KAAK;AAAS/I,eAAKiC,EAAE4I,KAAK,IAAI5I,EAAE+I,MAAMlC,OAAO7G,EAAE+I,GAAG,IAAIlC;AAAQ;QAC9D,KAAK;AAAS9I,eAAKiC,EAAE4I,KAAK,IAAI5I,EAAE+I,MAAMN,MAAMzI,EAAE+I,GAAG,IAAIN;AAAO;QAC5D,KAAK;AAAW1K,eAAKiC,EAAE4I,KAAK,IAAI5I,EAAE+I,MAAMrM,QAAQoJ,QAAQ3H,IAAI6B,EAAE+I,IAAIC,YAAW,CAAA,IAAMxB,OAAOC,YAAY/K,QAAQoJ,QAAQ0C,QAAO,CAAA;AAAK;QAClI,KAAK;AAAMzK,eAAKiC,EAAE4I,KAAK,IAAIlM,QAAQoJ,QAAQ3H,IAAI,iBAAA,KAAsB;AAAa;QAClF;AAASJ,eAAKiC,EAAE4I,KAAK,IAAIhG;MAC3B;IACF;AACA,WAAO7E;EACT;AACF;AAEA,SAAS6F,aAAaC,QAAgBiD,MAAa;AACjD,SAAO,IAAIjB,SAASmB,KAAKiC,UAAUnC,IAAAA,GAAO;IACxCjD;IACAiC,SAAS;MAAE,gBAAgB;IAAmB;EAChD,CAAA;AACF;AALSlC;AAOT,SAASqE,cAAc1J,QAAiBM,MAAkBsE,QAAc;AACtE,QAAMU,SAAShF,KAAKgF,WAAWV,WAAW,SAAS,MAAM;AACzD,QAAM2C,UAAkC;IAAE,gBAAgB;EAAmB;AAC7E,aAAW,CAACoD,GAAGC,CAAAA,KAAMtK,KAAKiH,QAASA,SAAQoD,EAAEF,YAAW,CAAA,IAAMG;AAE9D,MAAI5K,WAAWqE,UAAarE,WAAW,MAAM;AAC3C,WAAO,IAAIsH,SAAS,MAAM;MAAEhC,QAAQA,WAAW,MAAM,MAAMA;MAAQiC;IAAQ,CAAA;EAC7E;AACA,MAAI,OAAOvH,WAAW,UAAU;AAC9BuH,YAAQ,cAAA,IAAkB;AAC1B,WAAO,IAAID,SAAStH,QAAQ;MAAEsF;MAAQiC;IAAQ,CAAA;EAChD;AACA,SAAO,IAAID,SAASmB,KAAKiC,UAAU1K,MAAAA,GAAS;IAAEsF;IAAQiC;EAAQ,CAAA;AAChE;AAbSmC;","names":["TheoApp","serverHandle","routes","frontendHtml","startTime","Date","now","healthPath","readyPath","readinessChecks","opts","hp","rp","startsWith","Error","adapter","createNodeAdapter","createServer","request","handleRequest","create","app","registry","Map","module","moduleMeta","Reflect","getMetadata","allModules","imports","Mod","meta","Prov","providers","has","set","Controller","controllers","paramTypes","args","map","pt","dep","get","name","instance","postConstruct","result","Promise","walks","walkControllerMetadata","w","push","walk","sort","a","b","aP","fullPath","includes","bP","entry","paramNames","regexStr","replace","_m","compiledPattern","RegExp","compiledParamNames","needsBody","paramEntries","some","p","source","html","agents","length","autoWireAgents","listen","port","resolve","console","log","getServerHandle","close","agentRoutes","agentClasses","importFn","Function","walkAgentMetadata","compileAgent","generateAgentRoutes","getMixins","createRealAgentStreamFn","mod","createRealAgentStream","apiKey","llmApiKey","process","env","OPENROUTER_API_KEY","AgentClass","mixins","allToolboxes","Cls","Symbol","for","toolboxInstances","tb","toolboxes","class","compiled","createRun","agentStreamFactory","tools","llmModel","undefined","createFallbackStream","agentConfig","walkResult","compiledOptions","route","path","method","pattern","handler","guards","agentClass","methodName","mainLoop","propertyKey","handleReadinessCheck","jsonResponse","status","checks","results","all","check","race","setTimeout","healthy","message","err","allHealthy","every","r","agentName","msg","_message","_sessionId","events","type","runId","code","retryable","asyncIterator","i","next","value","done","pathname","URL","url","uptime","timestamp","Response","headers","toUpperCase","test","ctx","createExecutionContext","GuardCtor","guard","canActivate","ex","ForbiddenException","statusCode","toJSON","match","findRoute","error","params","body","text","JSON","parse","bodySchema","safeParse","success","issues","data","buildArgs","Object","fromEntries","searchParams","redirect","location","handlerFn","interceptors","runInterceptors","apply","buildResponse","filters","runExceptionFilters","HttpException","verb","exec","forEach","entries","query","max","Math","index","Array","from","key","toLowerCase","stringify","n","v"]}

package/dist/chunk-U46H4CGF.js

@@ -0,0 +1,34 @@
+import {
+  resolveOrNew
+} from "./chunk-LKNI6QEP.js";
+import {
+  __name
+} from "./chunk-7QVYU63E.js";
+
+// src/bridge/interceptor-chain.ts
+async function runInterceptors(interceptors, handler, request, container) {
+  if (interceptors.length === 0) return handler();
+  let chain = handler;
+  for (const Ctor of [
+    ...interceptors
+  ].reverse()) {
+    const instance = resolveOrNew(Ctor, container);
+    const nextFn = chain;
+    let called = false;
+    let cachedResult;
+    const memoizedNext = /* @__PURE__ */ __name(async () => {
+      if (called) return cachedResult;
+      called = true;
+      cachedResult = await nextFn();
+      return cachedResult;
+    }, "memoizedNext");
+    chain = /* @__PURE__ */ __name(() => instance.intercept(request, memoizedNext), "chain");
+  }
+  return chain();
+}
+__name(runInterceptors, "runInterceptors");
+
+export {
+  runInterceptors
+};
+//# sourceMappingURL=chunk-U46H4CGF.js.map

package/dist/chunk-U46H4CGF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/bridge/interceptor-chain.ts"],"sourcesContent":["/**\n * Interceptor execution engine — onion-model chain runner.\n *\n * Per Pattern D3: \"@UseInterceptors both translate to defineMiddleware wraps\".\n * Interceptors wrap the handler call (NOT body parsing — EC-1) and can\n * transform the response or short-circuit by not calling next().\n *\n * Execution order follows NestJS convention:\n *   middleware → guards → interceptors → handler\n * Interceptor composition: class-level FIRST, then method-level (EC-9).\n */\nimport { resolveOrNew, type DiContainer } from './di-resolve.js'\n\n/**\n * Interceptor interface — Web Standard Request.\n * `next()` wraps ONLY the handler call — body parsing happens before.\n */\nexport interface Interceptor {\n  intercept(\n    request: Request,\n    next: () => Promise<unknown>,\n  ): Promise<unknown>\n}\n\n/**\n * Run the interceptor chain using the onion model.\n * Outermost interceptor (first in array) wraps all inner ones.\n */\nexport async function runInterceptors(\n  interceptors: Function[],\n  handler: () => Promise<unknown>,\n  request: Request,\n  container?: DiContainer,\n): Promise<unknown> {\n  if (interceptors.length === 0) return handler()\n\n  let chain = handler\n  for (const Ctor of [...interceptors].reverse()) {\n    const instance = resolveOrNew(Ctor, container) as Interceptor\n    const nextFn = chain\n    let called = false\n    let cachedResult: unknown\n    const memoizedNext = async () => {\n      if (called) return cachedResult\n      called = true\n      cachedResult = await nextFn()\n      return cachedResult\n    }\n    chain = () => instance.intercept(request, memoizedNext)\n  }\n  return chain()\n}\n"],"mappings":";;;;;;;;AA4BA,eAAsBA,gBACpBC,cACAC,SACAC,SACAC,WAAuB;AAEvB,MAAIH,aAAaI,WAAW,EAAG,QAAOH,QAAAA;AAEtC,MAAII,QAAQJ;AACZ,aAAWK,QAAQ;OAAIN;IAAcO,QAAO,GAAI;AAC9C,UAAMC,WAAWC,aAAaH,MAAMH,SAAAA;AACpC,UAAMO,SAASL;AACf,QAAIM,SAAS;AACb,QAAIC;AACJ,UAAMC,eAAe,mCAAA;AACnB,UAAIF,OAAQ,QAAOC;AACnBD,eAAS;AACTC,qBAAe,MAAMF,OAAAA;AACrB,aAAOE;IACT,GALqB;AAMrBP,YAAQ,6BAAMG,SAASM,UAAUZ,SAASW,YAAAA,GAAlC;EACV;AACA,SAAOR,MAAAA;AACT;AAvBsBN;","names":["runInterceptors","interceptors","handler","request","container","length","chain","Ctor","reverse","instance","resolveOrNew","nextFn","called","cachedResult","memoizedNext","intercept"]}

package/dist/exception-filter-chain-BCSQ3MZ2.js

@@ -0,0 +1,10 @@
+import {
+  runExceptionFilters
+} from "./chunk-34KOKJ5M.js";
+import "./chunk-3PGQVQWG.js";
+import "./chunk-LKNI6QEP.js";
+import "./chunk-7QVYU63E.js";
+export {
+  runExceptionFilters
+};
+//# sourceMappingURL=exception-filter-chain-BCSQ3MZ2.js.map

package/dist/exception-filter-chain-BCSQ3MZ2.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}