@theokit/http 0.5.4 → 0.6.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for describing the origin of the Work and
+      reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 usetheo.dev
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/app.d.ts

@@ -39,11 +39,26 @@ interface TheoAppOptions {
     healthPath?: string;
     /** Custom readiness endpoint path (default: '/__theo/ready'). */
     readyPath?: string;
+    /**
+     * Enable streaming SSR via `renderToReadableStream` (default: false).
+     *
+     * When `true` AND `root` is provided, the app serves GET / with a streamed
+     * HTML response instead of a static `renderToString` result. This enables
+     * progressive rendering with React Suspense boundaries.
+     *
+     * **EC-7 — Error handling difference:** In streaming mode, errors inside
+     * Suspense boundaries are caught by React's streaming error handler and
+     * activate client-side error boundaries (the shell is already sent). In
+     * string mode, errors throw synchronously before any bytes are sent,
+     * allowing a full 500 error page.
+     */
+    streaming?: boolean;
 }
 declare class TheoApp {
     private serverHandle;
     private readonly routes;
     private frontendHtml?;
+    private streamingRoot?;
     private staticHandler?;
     private readonly startTime;
     private readonly healthPath;
@@ -65,6 +80,7 @@ declare class TheoApp {
     private handleReadinessCheck;
     private createFallbackStream;
     private handleRequest;
+    private handleRequestInContext;
     private findRoute;
     private buildArgs;
 }

package/dist/app.js

@@ -1,6 +1,6 @@
 import {
   TheoApp
-} from "./chunk-NDD7ANXZ.js";
+} from "./chunk-GQ2UH554.js";
 import "./chunk-QGB5YC4T.js";
 import "./chunk-HLW7YKZE.js";
 import "./chunk-3PGQVQWG.js";

package/dist/{chunk-34KOKJ5M.js → chunk-6W4T4DPJ.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-3PGQVQWG.js";
 import {
   resolveOrNew
-} from "./chunk-LKNI6QEP.js";
+} from "./chunk-MQAJWR3K.js";
 import {
   __name
 } from "./chunk-7QVYU63E.js";
@@ -68,4 +68,4 @@ __name(globalFallback, "globalFallback");
 export {
   runExceptionFilters
 };
-//# sourceMappingURL=chunk-34KOKJ5M.js.map
+//# sourceMappingURL=chunk-6W4T4DPJ.js.map

package/dist/{chunk-U46H4CGF.js → chunk-ELCXHPAD.js}

@@ -1,6 +1,6 @@
 import {
   resolveOrNew
-} from "./chunk-LKNI6QEP.js";
+} from "./chunk-MQAJWR3K.js";
 import {
   __name
 } from "./chunk-7QVYU63E.js";
@@ -31,4 +31,4 @@ __name(runInterceptors, "runInterceptors");
 export {
   runInterceptors
 };
-//# sourceMappingURL=chunk-U46H4CGF.js.map
+//# sourceMappingURL=chunk-ELCXHPAD.js.map

package/dist/{chunk-NDD7ANXZ.js → chunk-GQ2UH554.js}

@@ -16,6 +16,26 @@ import {
 // src/app.ts
 import "reflect-metadata";
 
+// src/request-context.ts
+import { AsyncLocalStorage } from "async_hooks";
+var storage = new AsyncLocalStorage();
+function getRequestContext() {
+  const ctx = storage.getStore();
+  if (!ctx) {
+    throw new Error("getRequestContext() called outside a request. This function is only available inside TheoApp request handlers (controllers, guards, interceptors, filters, agents).");
+  }
+  return ctx;
+}
+__name(getRequestContext, "getRequestContext");
+function tryGetRequestContext() {
+  return storage.getStore() ?? null;
+}
+__name(tryGetRequestContext, "tryGetRequestContext");
+async function runWithRequestContext(ctx, fn) {
+  return storage.run(ctx, fn);
+}
+__name(runWithRequestContext, "runWithRequestContext");
+
 // src/static.ts
 var MIME_TYPES = {
   // Text
@@ -191,6 +211,81 @@ function createStaticHandler(options) {
 }
 __name(createStaticHandler, "createStaticHandler");
 
+// src/stream-renderer.ts
+var DOCTYPE = "<!DOCTYPE html>";
+var encoder = new TextEncoder();
+async function renderToStream(options) {
+  const { root, waitForAll = false } = options;
+  const reactDomServer = await import("react-dom/server");
+  if (typeof reactDomServer.renderToReadableStream === "function") {
+    return renderWithReadableStream(reactDomServer.renderToReadableStream, root, waitForAll);
+  }
+  if (typeof reactDomServer.renderToString === "function") {
+    console.warn("[theokit] renderToReadableStream not available \u2014 falling back to renderToString. Upgrade to React 18+ for streaming SSR support.");
+    return renderWithString(reactDomServer.renderToString, root);
+  }
+  throw new Error("[theokit] react-dom/server does not export renderToReadableStream or renderToString. Ensure react-dom >= 17 is installed.");
+}
+__name(renderToStream, "renderToStream");
+async function renderWithReadableStream(renderFn, root, waitForAll) {
+  const reactStream = await renderFn(root);
+  if (waitForAll) {
+    await reactStream.allReady;
+  }
+  const doctypeStream = prependDoctype(reactStream);
+  return {
+    stream: doctypeStream,
+    allReady: reactStream.allReady
+  };
+}
+__name(renderWithReadableStream, "renderWithReadableStream");
+function renderWithString(renderFn, root) {
+  const html = DOCTYPE + renderFn(root);
+  const bytes = encoder.encode(html);
+  const stream = new ReadableStream({
+    start(controller) {
+      controller.enqueue(bytes);
+      controller.close();
+    }
+  });
+  return {
+    stream,
+    allReady: Promise.resolve()
+  };
+}
+__name(renderWithString, "renderWithString");
+function prependDoctype(source) {
+  const reader = source.getReader();
+  let doctypeSent = false;
+  return new ReadableStream({
+    async pull(controller) {
+      if (!doctypeSent) {
+        controller.enqueue(encoder.encode(DOCTYPE));
+        doctypeSent = true;
+      }
+      const { value, done } = await reader.read();
+      if (done) {
+        controller.close();
+        return;
+      }
+      controller.enqueue(value);
+    },
+    cancel() {
+      void reader.cancel();
+    }
+  });
+}
+__name(prependDoctype, "prependDoctype");
+function streamToResponse(result) {
+  return new Response(result.stream, {
+    status: 200,
+    headers: {
+      "content-type": "text/html; charset=utf-8"
+    }
+  });
+}
+__name(streamToResponse, "streamToResponse");
+
 // src/app.ts
 var TheoApp = class _TheoApp {
   static {
@@ -199,6 +294,7 @@ var TheoApp = class _TheoApp {
   serverHandle;
   routes = [];
   frontendHtml;
+  streamingRoot;
   staticHandler;
   startTime = Date.now();
   healthPath;
@@ -288,7 +384,9 @@ var TheoApp = class _TheoApp {
       entry.compiledParamNames = paramNames;
       entry.needsBody = entry.walk.paramEntries.some((p) => p.source === "body");
     }
-    if (opts.root) {
+    if (opts.root && opts.streaming) {
+      app.streamingRoot = opts.root;
+    } else if (opts.root) {
       const { renderToString } = await import("react-dom/server");
       app.frontendHtml = "<!DOCTYPE html>" + renderToString(opts.root);
     } else if (opts.html) {
@@ -457,6 +555,16 @@ var TheoApp = class _TheoApp {
   // ── Web Standard request handler ──────────────────
   async handleRequest(request) {
     const pathname = new URL(request.url).pathname;
+    const reqCtx = {
+      request,
+      pathname,
+      method: request.method,
+      params: {},
+      startedAt: Date.now()
+    };
+    return runWithRequestContext(reqCtx, () => this.handleRequestInContext(request, pathname, reqCtx));
+  }
+  async handleRequestInContext(request, pathname, _reqCtx) {
     if (request.method === "GET") {
       if (pathname === this.healthPath) {
         return jsonResponse(200, {
@@ -470,6 +578,12 @@ var TheoApp = class _TheoApp {
       }
     }
     if (request.method === "GET") {
+      if ((pathname === "/" || pathname === "/index.html") && this.streamingRoot) {
+        const result = await renderToStream({
+          root: this.streamingRoot
+        });
+        return streamToResponse(result);
+      }
       if ((pathname === "/" || pathname === "/index.html") && this.frontendHtml) {
         return new Response(this.frontendHtml, {
           status: 200,
@@ -556,7 +670,7 @@ var TheoApp = class _TheoApp {
       const handlerFn = entry.instance[entry.walk.propertyKey];
       let result;
       if (entry.walk.interceptors.length > 0) {
-        const { runInterceptors } = await import("./interceptor-chain-6S3PUV7J.js");
+        const { runInterceptors } = await import("./interceptor-chain-ELSL6KZT.js");
         result = await runInterceptors(entry.walk.interceptors, () => handlerFn.apply(entry.instance, args), request);
       } else {
         result = await handlerFn.apply(entry.instance, args);
@@ -564,7 +678,7 @@ var TheoApp = class _TheoApp {
       return buildResponse(result, entry.walk, method);
     } catch (err) {
       if (entry.walk.filters.length > 0) {
-        const { runExceptionFilters } = await import("./exception-filter-chain-BCSQ3MZ2.js");
+        const { runExceptionFilters } = await import("./exception-filter-chain-O45FXGEB.js");
         return runExceptionFilters(err, entry.walk.filters, request);
       }
       if (err instanceof HttpException) {
@@ -664,9 +778,13 @@ function buildResponse(result, walk, method) {
 __name(buildResponse, "buildResponse");
 
 export {
+  getRequestContext,
+  tryGetRequestContext,
   getMimeType,
   isSafePath,
   createStaticHandler,
+  renderToStream,
+  streamToResponse,
   TheoApp
 };
-//# sourceMappingURL=chunk-NDD7ANXZ.js.map
+//# sourceMappingURL=chunk-GQ2UH554.js.map

package/dist/chunk-GQ2UH554.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/app.ts","../src/request-context.ts","../src/static.ts","../src/stream-renderer.ts"],"sourcesContent":["/* eslint-disable security/detect-non-literal-regexp, complexity, sonarjs/cognitive-complexity, max-depth, sonarjs/no-collapsible-if, max-lines, max-lines-per-function */\nimport 'reflect-metadata'\n\nimport { createExecutionContext, type CanActivate } from './bridge/execution-context.js'\nimport { createNodeAdapter } from './bridge/runtime/node.js'\nimport type { ServerHandle } from './bridge/runtime/types.js'\nimport { walkControllerMetadata, type WalkResult } from './bridge/walk-metadata.js'\nimport type { ParamEntry } from './decorators/params.js'\nimport { ForbiddenException, HttpException } from './exceptions/http-exception.js'\nimport { runWithRequestContext, type TheoRequestContext } from './request-context.js'\nimport { createStaticHandler } from './static.js'\nimport { renderToStream, streamToResponse } from './stream-renderer.js'\n\n/**\n * TheoApp — NestJS/Spring Boot-style application bootstrap.\n *\n * Internally uses Web Standard Request/Response pipeline.\n * Node adapter converts at the HTTP server boundary.\n */\n\n/** Readiness check — async function returning health status. */\nexport type ReadinessCheck = () => Promise<{ name: string; healthy: boolean; message?: string }>\n\nexport interface TheoAppOptions {\n  /** Controller classes decorated with @Controller. */\n  controllers: Function[]\n  /** Agent classes decorated with @Agent — auto-wired with routes + SSE + tools. */\n  agents?: Function[]\n  /** @Module class for structured DI. */\n  module?: Function\n  /** Provider/toolbox classes — instantiated and injected into controllers + agents. */\n  providers?: Function[]\n  /** LLM API key for agent execution (reads OPENROUTER_API_KEY env if not set). */\n  llmApiKey?: string\n  /** LLM model override (default: from @Agent({ model }) metadata). */\n  llmModel?: string\n  /** Agent stream factory override (for testing or custom SDK wiring). */\n  agentStreamFactory?: (\n    walk: unknown,\n    tools: unknown[],\n    apiKey: string,\n    model?: string,\n  ) => (message: string, sessionId: string) => AsyncIterable<unknown>\n  /** HTML string to serve at GET / (inline frontend). */\n  html?: string\n  /** React root element — framework renders SSR internally (preferred over html). */\n  root?: unknown\n  /** Directory for static file serving (default: 'public', false to disable). */\n  staticDir?: string | false\n  /** Readiness checks for GET /__theo/ready (K8s readiness probe). */\n  readinessChecks?: ReadinessCheck[]\n  /** Custom health endpoint path (default: '/__theo/health'). */\n  healthPath?: string\n  /** Custom readiness endpoint path (default: '/__theo/ready'). */\n  readyPath?: string\n  /**\n   * Enable streaming SSR via `renderToReadableStream` (default: false).\n   *\n   * When `true` AND `root` is provided, the app serves GET / with a streamed\n   * HTML response instead of a static `renderToString` result. This enables\n   * progressive rendering with React Suspense boundaries.\n   *\n   * **EC-7 — Error handling difference:** In streaming mode, errors inside\n   * Suspense boundaries are caught by React's streaming error handler and\n   * activate client-side error boundaries (the shell is already sent). In\n   * string mode, errors throw synchronously before any bytes are sent,\n   * allowing a full 500 error page.\n   */\n  streaming?: boolean\n}\n\ninterface RouteEntry {\n  walk: WalkResult\n  instance: object\n  /** Pre-compiled regex + param names (Elysia-inspired: compile once at create, not per-request). */\n  compiledPattern?: RegExp\n  compiledParamNames?: string[]\n  /** Whether handler needs body parsing (skip for GET/DELETE without @Body). */\n  needsBody?: boolean\n}\n\nexport class TheoApp {\n  private serverHandle: ServerHandle\n  private readonly routes: RouteEntry[] = []\n  private frontendHtml?: string\n  private streamingRoot?: unknown\n  private staticHandler?: (request: Request) => Promise<Response | null>\n  private readonly startTime = Date.now()\n  private readonly healthPath: string\n  private readonly readyPath: string\n  private readonly readinessChecks: ReadinessCheck[]\n\n  private constructor(opts?: Pick<TheoAppOptions, 'readinessChecks' | 'healthPath' | 'readyPath'>) {\n    const hp = opts?.healthPath ?? '/__theo/health'\n    const rp = opts?.readyPath ?? '/__theo/ready'\n    // Security: prevent health paths from colliding with user API routes\n    if (hp.startsWith('/api/'))\n      throw new Error(\n        `[TheoApp] healthPath \"${hp}\" must not start with /api/ — would collide with user routes`,\n      )\n    if (rp.startsWith('/api/'))\n      throw new Error(\n        `[TheoApp] readyPath \"${rp}\" must not start with /api/ — would collide with user routes`,\n      )\n    this.healthPath = hp\n    this.readyPath = rp\n    this.readinessChecks = opts?.readinessChecks ?? []\n    const adapter = createNodeAdapter()\n    this.serverHandle = adapter.createServer((request) => this.handleRequest(request))\n  }\n\n  /**\n   * Create a TheoKit application with Spring Boot-style DI.\n   *\n   * EC-7: async because Container may resolve async factories (Agent.create).\n   * EC-2: Registration order guaranteed: providers → controllers → agents.\n   */\n  static async create(opts: TheoAppOptions): Promise<TheoApp> {\n    const app = new TheoApp(opts)\n\n    // ── DI Container (replaces manual Map<Function, object>) ──\n    // Uses @theokit/di Container for: scopes, lifecycle, async, typed errors.\n    // Fallback to manual resolution when @theokit/di is not available.\n    const registry = new Map<Function, object>()\n\n    // 1. Module resolution (@Module metadata)\n    if (opts.module) {\n      const moduleMeta = Reflect.getMetadata('usetheo:di:module', opts.module)\n      if (moduleMeta) {\n        const allModules = [opts.module, ...(moduleMeta.imports ?? [])]\n        for (const Mod of allModules) {\n          const meta = Reflect.getMetadata('usetheo:di:module', Mod)\n          if (!meta) continue\n          for (const Prov of (meta.providers ?? []) as Function[]) {\n            if (!registry.has(Prov)) {\n              registry.set(Prov, new (Prov as new () => object)())\n            }\n          }\n        }\n      }\n    }\n\n    // 2. Inline providers (EC-2: BEFORE controllers and agents)\n    if (opts.providers) {\n      for (const Prov of opts.providers) {\n        if (!registry.has(Prov)) {\n          registry.set(Prov, new (Prov as new () => object)())\n        }\n      }\n    }\n\n    // 3. Controllers with DI\n    for (const Controller of opts.controllers) {\n      const paramTypes: Function[] = Reflect.getMetadata('design:paramtypes', Controller) ?? []\n      const args = paramTypes.map((pt: Function) => {\n        const dep = registry.get(pt)\n        if (!dep) {\n          throw new Error(\n            `[TheoApp] Cannot resolve ${pt.name} for ${Controller.name}. ` +\n              `Add ${pt.name} to providers (or to @Module({ providers: [...] })).`,\n          )\n        }\n        return dep\n      })\n      const instance = new (Controller as new (...a: unknown[]) => object)(...args)\n\n      // Lifecycle: call @PostConstruct if present\n      const postConstruct = Reflect.getMetadata('usetheo:di:post-construct', Controller)\n      if (\n        postConstruct &&\n        typeof (instance as Record<string, Function>)[postConstruct] === 'function'\n      ) {\n        const result = (instance as Record<string, Function>)[postConstruct]()\n        if (result instanceof Promise) await result // EC-1: await async PostConstruct\n      }\n\n      const walks = walkControllerMetadata(Controller)\n      for (const w of walks) {\n        app.routes.push({ walk: w, instance })\n      }\n    }\n\n    // Sort: static before parameterized\n    app.routes.sort((a, b) => {\n      const aP = a.walk.fullPath.includes(':')\n      const bP = b.walk.fullPath.includes(':')\n      if (aP !== bP) return aP ? 1 : -1\n      return 0\n    })\n\n    // Pre-compile route patterns (Elysia-inspired: regex built once, not per-request)\n    for (const entry of app.routes) {\n      const paramNames: string[] = []\n      const regexStr = entry.walk.fullPath.replace(/:(\\w+)/g, (_m, name: string) => {\n        paramNames.push(name)\n        return '([^/]+)'\n      })\n      entry.compiledPattern = new RegExp(`^${regexStr}$`)\n      entry.compiledParamNames = paramNames\n      // Determine if handler needs body parsing (skip if no @Body decorator)\n      entry.needsBody = entry.walk.paramEntries.some((p) => p.source === 'body')\n    }\n\n    // Frontend HTML — from root (React SSR) or html string\n    if (opts.root && opts.streaming) {\n      // Streaming mode: store the root element; render per-request via renderToStream\n      app.streamingRoot = opts.root\n    } else if (opts.root) {\n      const { renderToString } = await import('react-dom/server')\n      app.frontendHtml = '<!DOCTYPE html>' + renderToString(opts.root as React.ReactElement)\n    } else if (opts.html) {\n      app.frontendHtml = opts.html\n    }\n\n    // Static file serving from public/ (default: enabled)\n    if (opts.staticDir !== false) {\n      app.staticHandler = createStaticHandler({ root: opts.staticDir ?? 'public' })\n    }\n\n    // 4. Auto-wire agents (EC-2: AFTER providers and controllers)\n    // The framework handles EVERYTHING — walk, compile, mount, stream.\n    // Consumer writes: agents: [MyAgent] — and that's it.\n    if (opts.agents?.length) {\n      await app.autoWireAgents(opts.agents, registry, opts)\n    }\n\n    return app\n  }\n\n  async listen(port: number): Promise<void> {\n    return new Promise((resolve) => {\n      this.serverHandle.listen(port, () => {\n        console.log(`TheoKit app listening on http://localhost:${port}`)\n        resolve()\n      })\n    })\n  }\n\n  getServerHandle(): ServerHandle {\n    return this.serverHandle\n  }\n\n  async close(): Promise<void> {\n    return new Promise((resolve) => {\n      this.serverHandle.close(() => {\n        resolve()\n      })\n    })\n  }\n\n  // ── Auto-wire agents (the \"SpringApplication.run()\" moment) ──\n\n  private agentRoutes: {\n    method: string\n    pattern: RegExp\n    paramNames: string[]\n    handler: (request: Request) => Promise<Response>\n    guards: Function[]\n    agentClass: Function\n    methodName: string | symbol\n  }[] = []\n\n  private async autoWireAgents(\n    agentClasses: Function[],\n    registry: Map<Function, object>,\n    opts: TheoAppOptions,\n  ) {\n    // Dynamic import — @theokit/agents is optional peer dependency\n    // SECURITY: new Function used for dynamic import of optional peer dep.\n    // Argument is HARDCODED ('@theokit/agents'), never user input. Safe.\n    // eslint-disable-next-line @typescript-eslint/no-implied-eval -- dynamic import avoids compile-time dependency on optional peer\n    const importFn = new Function('specifier', 'return import(specifier)') as (\n      s: string,\n    ) => Promise<Record<string, Function>>\n    let walkAgentMetadata: Function,\n      compileAgent: Function,\n      generateAgentRoutes: Function,\n      getMixins: Function,\n      createSdkAgentStreamFn: Function\n    try {\n      const mod = await importFn('@theokit/agents')\n      walkAgentMetadata = mod.walkAgentMetadata\n      compileAgent = mod.compileAgent\n      generateAgentRoutes = mod.generateAgentRoutes\n      getMixins = mod.getMixins\n      createSdkAgentStreamFn = mod.createSdkAgentStream\n    } catch {\n      throw new Error(\n        '[TheoApp] @theokit/agents is required when agents[] is provided. Install: npm install @theokit/agents',\n      )\n    }\n\n    const apiKey = opts.llmApiKey ?? process.env.OPENROUTER_API_KEY ?? ''\n\n    for (const AgentClass of agentClasses) {\n      // 1. Walk metadata (decorators → structured data)\n      const mixins = getMixins(AgentClass)\n      const allToolboxes = [...mixins]\n\n      // Also check providers for @Toolbox classes\n      for (const [Cls] of registry) {\n        if (Reflect.getMetadata(Symbol.for('theokit:agents:toolbox'), Cls)) {\n          if (!allToolboxes.includes(Cls)) allToolboxes.push(Cls)\n        }\n      }\n\n      const walk = walkAgentMetadata(AgentClass, allToolboxes)\n\n      // 2. Resolve toolbox instances from registry (DI)\n      const toolboxInstances = new Map<Function, object>()\n      for (const tb of walk.toolboxes) {\n        let instance = registry.get(tb.class)\n        if (!instance) {\n          instance = new (tb.class as new () => object)()\n          registry.set(tb.class, instance)\n        }\n        toolboxInstances.set(tb.class, instance)\n      }\n\n      // 3. Compile tools (decorator metadata → defineTool-compatible)\n      const compiled = compileAgent(walk, toolboxInstances)\n\n      // 4. Create SDK agent stream factory\n      let createRun: (message: string, sessionId: string) => AsyncIterable<unknown>\n\n      if (opts.agentStreamFactory) {\n        createRun = opts.agentStreamFactory(walk, compiled.tools, apiKey, opts.llmModel)\n      } else if (apiKey) {\n        // SDK adapter: bridges @theokit/agents decorators → @theokit/sdk runtime\n        createRun = createSdkAgentStreamFn(walk, compiled.tools, apiKey, opts.llmModel) as (\n          m: string,\n          s: string,\n        ) => AsyncIterable<unknown>\n      } else {\n        createRun = this.createFallbackStream(walk.agentConfig.name, apiKey)\n      }\n\n      // 5. Generate routes (POST /chat, GET /runs/:id)\n      const routes = generateAgentRoutes({\n        walkResult: walk,\n        compiledOptions: compiled,\n        createRun: createRun as (\n          message: string,\n          sessionId: string,\n        ) => AsyncIterable<{ type: string; [k: string]: unknown }>,\n      })\n\n      // 6. Mount routes\n      for (const route of routes) {\n        const paramNames: string[] = []\n        const regexStr = route.path.replace(/:(\\w+)/g, (_m: string, name: string) => {\n          paramNames.push(name)\n          return '([^/]+)'\n        })\n        this.agentRoutes.push({\n          method: route.method,\n          pattern: new RegExp(`^${regexStr}$`),\n          paramNames,\n          handler: route.handler,\n          guards: walk.guards ?? [],\n          agentClass: AgentClass,\n          methodName: walk.mainLoop?.propertyKey ?? 'run',\n        })\n      }\n\n      console.log(\n        `  🤖 Agent \"${walk.agentConfig.name}\" mounted at ${walk.route}/chat (${compiled.tools.length} tools)`,\n      )\n    }\n  }\n\n  private async handleReadinessCheck(): Promise<Response> {\n    if (this.readinessChecks.length === 0) {\n      return jsonResponse(200, { status: 'ready', checks: [] })\n    }\n    const results = await Promise.all(\n      this.readinessChecks.map(async (check) => {\n        try {\n          return await Promise.race([\n            check(),\n            new Promise<{ name: string; healthy: boolean; message?: string }>((resolve) =>\n              setTimeout(\n                () =>\n                  resolve({\n                    name: 'unknown',\n                    healthy: false,\n                    message: 'Readiness check timed out (5s)',\n                  }),\n                5000,\n              ),\n            ),\n          ])\n        } catch (err) {\n          return {\n            name: 'unknown',\n            healthy: false,\n            message: err instanceof Error ? err.message : 'Check failed',\n          }\n        }\n      }),\n    )\n    const allHealthy = results.every((r) => r.healthy)\n    return jsonResponse(allHealthy ? 200 : 503, {\n      status: allHealthy ? 'ready' : 'not_ready',\n      checks: results,\n    })\n  }\n\n  private createFallbackStream(agentName: string, apiKey: string) {\n    const msg = !apiKey\n      ? 'Set OPENROUTER_API_KEY environment variable or pass llmApiKey to TheoApp.create()'\n      : 'Pass agentStreamFactory to TheoApp.create() to connect your LLM provider'\n    return (_message: string, _sessionId: string) => {\n      const events = [\n        { type: 'run_started', runId: `run-${Date.now()}`, agentName },\n        { type: 'error', code: 'AGENT_NOT_WIRED', message: msg, retryable: false },\n      ]\n      return {\n        [Symbol.asyncIterator]: () => {\n          let i = 0\n          return {\n            next: () =>\n              Promise.resolve(\n                i < events.length\n                  ? { value: events[i++], done: false as const }\n                  : { value: undefined, done: true as const },\n              ),\n          }\n        },\n      }\n    }\n  }\n\n  // ── Web Standard request handler ──────────────────\n\n  private async handleRequest(request: Request): Promise<Response> {\n    const pathname = new URL(request.url).pathname\n\n    // Wrap entire request in AsyncLocalStorage context\n    const reqCtx: TheoRequestContext = {\n      request,\n      pathname,\n      method: request.method,\n      params: {},\n      startedAt: Date.now(),\n    }\n    return runWithRequestContext(reqCtx, () =>\n      this.handleRequestInContext(request, pathname, reqCtx),\n    )\n  }\n\n  private async handleRequestInContext(\n    request: Request,\n    pathname: string,\n    _reqCtx: TheoRequestContext,\n  ): Promise<Response> {\n    // ── Health & Readiness probes (bypass guards/interceptors) ──\n    if (request.method === 'GET') {\n      if (pathname === this.healthPath) {\n        return jsonResponse(200, {\n          status: 'ok',\n          uptime: (Date.now() - this.startTime) / 1000,\n          timestamp: Date.now(),\n        })\n      }\n      if (pathname === this.readyPath) {\n        return this.handleReadinessCheck()\n      }\n    }\n\n    // Bug #8: Serve frontend HTML at GET /\n    if (request.method === 'GET') {\n      if ((pathname === '/' || pathname === '/index.html') && this.streamingRoot) {\n        const result = await renderToStream({\n          root: this.streamingRoot as React.ReactElement,\n        })\n        return streamToResponse(result)\n      }\n      if ((pathname === '/' || pathname === '/index.html') && this.frontendHtml) {\n        return new Response(this.frontendHtml, {\n          status: 200,\n          headers: { 'content-type': 'text/html; charset=utf-8' },\n        })\n      }\n    }\n\n    // Static files from public/ (runtime-agnostic — Node/Bun/Deno)\n    if (this.staticHandler && (request.method === 'GET' || request.method === 'HEAD')) {\n      const staticResponse = await this.staticHandler(request)\n      if (staticResponse) return staticResponse\n    }\n\n    // Agent routes (auto-wired — checked first, with guard enforcement per Bug #4)\n    for (const route of this.agentRoutes) {\n      if (request.method.toUpperCase() === route.method && route.pattern.test(pathname)) {\n        // Bug #4 fix: enforce @UseGuards on agent routes (same pipeline as controllers)\n        if (route.guards.length > 0) {\n          const ctx = createExecutionContext(request, route.agentClass, route.methodName)\n          for (const GuardCtor of route.guards) {\n            const guard = new (GuardCtor as new () => CanActivate)()\n            if (!(await guard.canActivate(ctx))) {\n              const ex = new ForbiddenException('Forbidden resource')\n              return jsonResponse(ex.statusCode, ex.toJSON())\n            }\n          }\n        }\n        return route.handler(request)\n      }\n    }\n\n    const url = new URL(request.url)\n    const method = request.method.toUpperCase()\n\n    const match = this.findRoute(method, url.pathname)\n    if (!match) {\n      return jsonResponse(404, {\n        error: { code: 'NOT_FOUND', message: `No route for ${method} ${url.pathname}` },\n      })\n    }\n\n    const { entry, params } = match\n\n    try {\n      // Guards\n      const ctx = createExecutionContext(\n        request,\n        entry.instance.constructor,\n        entry.walk.propertyKey,\n      )\n      for (const GuardCtor of entry.walk.guards) {\n        const guard = new (GuardCtor as new () => CanActivate)()\n        if (!(await guard.canActivate(ctx))) {\n          const ex = new ForbiddenException('Forbidden resource')\n          return jsonResponse(ex.statusCode, ex.toJSON())\n        }\n      }\n\n      // Body — skip parsing entirely if handler has no @Body decorator (Elysia-inspired lazy parsing)\n      let body: unknown\n      if (entry.needsBody && ['POST', 'PUT', 'PATCH'].includes(method)) {\n        try {\n          const text = await request.text()\n          body = text ? JSON.parse(text) : undefined\n        } catch {\n          body = undefined\n        }\n\n        if (entry.walk.bodySchema && body !== undefined) {\n          const result = entry.walk.bodySchema.safeParse(body)\n          if (!result.success) {\n            return jsonResponse(422, {\n              error: { code: 'VALIDATION_ERROR', issues: result.error.issues },\n            })\n          }\n          body = result.data\n        }\n      }\n\n      // Args\n      const args = this.buildArgs(\n        entry.walk.paramEntries,\n        request,\n        body,\n        params,\n        Object.fromEntries(url.searchParams),\n      )\n\n      // Redirect\n      if (entry.walk.redirect) {\n        return new Response(null, {\n          status: entry.walk.redirect.status,\n          headers: { location: entry.walk.redirect.url },\n        })\n      }\n\n      // Handler — wrapped by interceptor chain (Bug #2 fix)\n      const handlerFn = (entry.instance as Record<string | symbol, Function>)[\n        entry.walk.propertyKey\n      ]\n\n      let result: unknown\n      if (entry.walk.interceptors.length > 0) {\n        // Import runInterceptors dynamically to avoid circular dep\n        const { runInterceptors } = await import('./bridge/interceptor-chain.js')\n        result = await runInterceptors(\n          entry.walk.interceptors,\n          () => handlerFn.apply(entry.instance, args) as Promise<unknown>,\n          request,\n        )\n      } else {\n        result = await handlerFn.apply(entry.instance, args)\n      }\n\n      return buildResponse(result, entry.walk, method)\n    } catch (err) {\n      // Exception filters (Bug #2 fix — filters also wired)\n      if (entry.walk.filters.length > 0) {\n        const { runExceptionFilters } = await import('./bridge/exception-filter-chain.js')\n        return runExceptionFilters(err, entry.walk.filters, request)\n      }\n      // Fallback: HttpException subclasses (Bug #3 fix)\n      if (err instanceof HttpException) {\n        return jsonResponse(err.statusCode, err.toJSON())\n      }\n      // Security: never leak raw error messages to clients\n      console.error('[theokit] Internal error:', err instanceof Error ? err.message : err)\n      return jsonResponse(500, {\n        error: { code: 'INTERNAL_SERVER_ERROR', message: 'Internal Server Error' },\n      })\n    }\n  }\n\n  private findRoute(method: string, pathname: string) {\n    for (const entry of this.routes) {\n      if (entry.walk.verb !== 'ALL' && entry.walk.verb !== method) continue\n      // Use pre-compiled regex (built once at create time, not per-request)\n      const match = entry.compiledPattern!.exec(pathname)\n      if (!match) continue\n      const params: Record<string, string> = {}\n      entry.compiledParamNames!.forEach((name, i) => {\n        params[name] = match[i + 1]\n      })\n      return { entry, params }\n    }\n    return null\n  }\n\n  private buildArgs(\n    entries: ParamEntry[],\n    request: Request,\n    body: unknown,\n    params: Record<string, string>,\n    query: Record<string, string>,\n  ): unknown[] {\n    if (entries.length === 0) return []\n    const max = Math.max(...entries.map((p) => p.index))\n    const args: unknown[] = Array.from({ length: max + 1 }, () => undefined)\n    for (const p of entries) {\n      switch (p.source) {\n        case 'req':\n          args[p.index] = request\n          break\n        case 'body':\n          args[p.index] = p.key ? (body as Record<string, unknown>)[p.key] : body\n          break\n        case 'param':\n          args[p.index] = p.key ? params[p.key] : params\n          break\n        case 'query':\n          args[p.index] = p.key ? query[p.key] : query\n          break\n        case 'headers':\n          args[p.index] = p.key\n            ? request.headers.get(p.key.toLowerCase())\n            : Object.fromEntries(request.headers.entries())\n          break\n        case 'ip':\n          args[p.index] = request.headers.get('x-forwarded-for') ?? '127.0.0.1'\n          break\n        default:\n          args[p.index] = undefined\n      }\n    }\n    return args\n  }\n}\n\nfunction jsonResponse(status: number, body: unknown): Response {\n  return new Response(JSON.stringify(body), {\n    status,\n    headers: { 'content-type': 'application/json' },\n  })\n}\n\nfunction buildResponse(result: unknown, walk: WalkResult, method: string): Response {\n  const status = walk.status ?? (method === 'POST' ? 201 : 200)\n  const headers: Record<string, string> = { 'content-type': 'application/json' }\n  for (const [n, v] of walk.headers) headers[n.toLowerCase()] = v\n\n  if (result === undefined || result === null) {\n    return new Response(null, { status: status === 200 ? 204 : status, headers })\n  }\n  if (typeof result === 'string') {\n    headers['content-type'] = 'text/plain'\n    return new Response(result, { status, headers })\n  }\n  return new Response(JSON.stringify(result), { status, headers })\n}\n","/**\n * Request Context — per-request state via AsyncLocalStorage.\n *\n * Inspired by Next.js workAsyncStorage pattern (app-render.tsx:3325).\n * Eliminates prop drilling — any code in the request path can access\n * the current request without receiving it as a parameter.\n *\n * Usage:\n *   import { getRequestContext } from '@theokit/http'\n *   const { request, pathname, method, params } = getRequestContext()\n *\n * The context is populated by TheoApp.handleRequest() and available\n * to guards, interceptors, filters, controllers, agents, and tools.\n */\nimport { AsyncLocalStorage } from 'node:async_hooks'\n\nexport interface TheoRequestContext {\n  /** The raw Web Standard Request object. */\n  request: Request\n  /** URL pathname (e.g., '/api/tasks'). */\n  pathname: string\n  /** HTTP method (e.g., 'GET', 'POST'). */\n  method: string\n  /** Route params extracted from URL (e.g., { id: '42' }). */\n  params: Record<string, string>\n  /** Matched controller or agent class name (if resolved). */\n  handler?: string\n  /** Request start time (ms). */\n  startedAt: number\n}\n\nconst storage = new AsyncLocalStorage<TheoRequestContext>()\n\n/**\n * Get the current request context.\n *\n * @throws Error if called outside a request (e.g., at module load time).\n *\n * @example\n * ```typescript\n * import { getRequestContext } from '@theokit/http'\n *\n * class AuthGuard {\n *   canActivate() {\n *     const { request } = getRequestContext()\n *     return request.headers.get('authorization') !== null\n *   }\n * }\n * ```\n */\nexport function getRequestContext(): TheoRequestContext {\n  const ctx = storage.getStore()\n  if (!ctx) {\n    throw new Error(\n      'getRequestContext() called outside a request. ' +\n        'This function is only available inside TheoApp request handlers ' +\n        '(controllers, guards, interceptors, filters, agents).',\n    )\n  }\n  return ctx\n}\n\n/**\n * Try to get the current request context, or null if not in a request.\n * Useful for code that may run both inside and outside requests.\n */\nexport function tryGetRequestContext(): TheoRequestContext | null {\n  return storage.getStore() ?? null\n}\n\n/**\n * Run a function within a request context.\n * Used internally by TheoApp — not part of public API.\n * @internal\n */\nexport async function runWithRequestContext<T>(\n  ctx: TheoRequestContext,\n  fn: () => T | Promise<T>,\n): Promise<T> {\n  return storage.run(ctx, fn)\n}\n","/**\n * Static file handler — runtime-agnostic (Node/Bun/Deno).\n *\n * Serves files from a root directory (default: `public/`).\n * Derived from Hono's serve-static middleware pattern:\n *   - MIME type detection from extension\n *   - Path traversal prevention via regex guard\n *   - Runtime-agnostic file reading (Bun.file / Deno.readFile / node:fs)\n */\n\n// ── MIME type map (50+ types) ──────────────────────────\n\nconst MIME_TYPES: Record<string, string> = {\n  // Text\n  '.html': 'text/html; charset=utf-8',\n  '.htm': 'text/html; charset=utf-8',\n  '.css': 'text/css; charset=utf-8',\n  '.js': 'text/javascript; charset=utf-8',\n  '.mjs': 'text/javascript; charset=utf-8',\n  '.json': 'application/json; charset=utf-8',\n  '.xml': 'application/xml; charset=utf-8',\n  '.txt': 'text/plain; charset=utf-8',\n  '.csv': 'text/csv; charset=utf-8',\n  '.md': 'text/markdown; charset=utf-8',\n  '.yaml': 'text/yaml; charset=utf-8',\n  '.yml': 'text/yaml; charset=utf-8',\n  '.ts': 'text/typescript; charset=utf-8',\n  '.tsx': 'text/tsx; charset=utf-8',\n  '.jsx': 'text/jsx; charset=utf-8',\n\n  // Images\n  '.png': 'image/png',\n  '.jpg': 'image/jpeg',\n  '.jpeg': 'image/jpeg',\n  '.gif': 'image/gif',\n  '.svg': 'image/svg+xml',\n  '.ico': 'image/x-icon',\n  '.webp': 'image/webp',\n  '.avif': 'image/avif',\n  '.bmp': 'image/bmp',\n  '.tiff': 'image/tiff',\n  '.tif': 'image/tiff',\n\n  // Fonts\n  '.woff': 'font/woff',\n  '.woff2': 'font/woff2',\n  '.ttf': 'font/ttf',\n  '.otf': 'font/otf',\n  '.eot': 'application/vnd.ms-fontobject',\n\n  // Media\n  '.mp3': 'audio/mpeg',\n  '.wav': 'audio/wav',\n  '.ogg': 'audio/ogg',\n  '.mp4': 'video/mp4',\n  '.webm': 'video/webm',\n  '.avi': 'video/x-msvideo',\n\n  // Documents\n  '.pdf': 'application/pdf',\n  '.zip': 'application/zip',\n  '.gz': 'application/gzip',\n  '.tar': 'application/x-tar',\n  '.wasm': 'application/wasm',\n\n  // Misc\n  '.map': 'application/json; charset=utf-8',\n  '.jsonld': 'application/ld+json; charset=utf-8',\n  '.manifest': 'application/manifest+json; charset=utf-8',\n  '.webmanifest': 'application/manifest+json; charset=utf-8',\n}\n\n// ── Path traversal guard (Hono-derived regex) ──────────\n\n/**\n * Regex that catches path traversal attacks:\n * - `..` segments (beginning, middle, or end of path)\n * - Double slashes `//`\n * - Backslash sequences `\\\\`\n */\nconst UNSAFE_PATH_RE = /(?:^|[/\\\\])\\.{1,2}(?:$|[/\\\\])|[/\\\\]{2,}/\n\n// ── Public API ─────────────────────────────────────────\n\nexport interface StaticOptions {\n  /** Root directory to serve from (default: 'public'). */\n  root?: string\n  /** Cache-Control max-age in seconds (default: 0 — no caching). */\n  maxAge?: number\n}\n\n/**\n * Returns the MIME type for a given file path based on its extension.\n * Falls back to 'application/octet-stream' for unknown extensions.\n */\nexport function getMimeType(filePath: string): string {\n  const dot = filePath.lastIndexOf('.')\n  if (dot === -1) return 'application/octet-stream'\n  const ext = filePath.slice(dot).toLowerCase()\n  return MIME_TYPES[ext] ?? 'application/octet-stream'\n}\n\n/**\n * Returns true when the path is safe (no traversal, no double slashes).\n */\nexport function isSafePath(pathname: string): boolean {\n  return !UNSAFE_PATH_RE.test(pathname)\n}\n\n// ── Runtime-agnostic file reader ───────────────────────\n\ninterface FileResult {\n  content: Uint8Array\n  size: number\n}\n\nasync function readFileBun(fullPath: string): Promise<FileResult | null> {\n  const g = globalThis as Record<string, unknown>\n  const BunRT = g.Bun as {\n    file: (path: string) => {\n      exists: () => Promise<boolean>\n      arrayBuffer: () => Promise<ArrayBuffer>\n      size: number\n    }\n  }\n  const file = BunRT.file(fullPath)\n  if (!(await file.exists())) return null\n  const buf = await file.arrayBuffer()\n  return { content: new Uint8Array(buf), size: file.size }\n}\n\nasync function readFileDeno(fullPath: string): Promise<FileResult | null> {\n  const g = globalThis as Record<string, unknown>\n  const DenoRT = g.Deno as {\n    readFile: (path: string) => Promise<Uint8Array>\n    stat: (path: string) => Promise<{ isDirectory: boolean }>\n  }\n  try {\n    const stat = await DenoRT.stat(fullPath)\n    if (stat.isDirectory) return null\n    const content = await DenoRT.readFile(fullPath)\n    return { content, size: content.byteLength }\n  } catch {\n    return null\n  }\n}\n\nasync function readFileNode(fullPath: string): Promise<FileResult | null> {\n  try {\n    const fs = await import('node:fs/promises')\n    const stat = await fs.stat(fullPath)\n    if (stat.isDirectory()) return null\n    const content = await fs.readFile(fullPath)\n    return { content: new Uint8Array(content), size: stat.size }\n  } catch {\n    return null\n  }\n}\n\nasync function readFile(fullPath: string): Promise<FileResult | null> {\n  const g = globalThis as Record<string, unknown>\n  if (g.Bun) return readFileBun(fullPath)\n  if (g.Deno) return readFileDeno(fullPath)\n  return readFileNode(fullPath)\n}\n\n// ── Resolve root to absolute path ──────────────────────\n\nasync function resolveRoot(root: string): Promise<string> {\n  const g = globalThis as Record<string, unknown>\n  if (g.Deno) {\n    const DenoRT = g.Deno as { cwd: () => string }\n    const { join } = await import('node:path')\n    return join(DenoRT.cwd(), root)\n  }\n  const { resolve } = await import('node:path')\n  return resolve(root)\n}\n\n// ── Factory ────────────────────────────────────────────\n\n/**\n * Creates a static file handler that serves files from `root` directory.\n *\n * Returns `null` when the request does not match a static file (allowing\n * the caller to fall through to the next handler).\n */\nexport function createStaticHandler(\n  options?: StaticOptions,\n): (request: Request) => Promise<Response | null> {\n  const root = options?.root ?? 'public'\n  const maxAge = options?.maxAge ?? 0\n\n  let resolvedRoot: string | undefined\n\n  return async (request: Request): Promise<Response | null> => {\n    // Only serve GET and HEAD\n    const method = request.method.toUpperCase()\n    if (method !== 'GET' && method !== 'HEAD') return null\n\n    // Extract pathname, strip query params\n    const url = new URL(request.url)\n    let pathname: string\n    try {\n      pathname = decodeURIComponent(url.pathname)\n    } catch {\n      return null // Malformed URL encoding\n    }\n\n    // Skip framework-reserved paths\n    if (pathname.startsWith('/api/') || pathname.startsWith('/@theo/')) return null\n\n    // Path traversal guard\n    if (!isSafePath(pathname)) return null\n\n    // Lazy-resolve root to absolute path (once per handler lifetime)\n    resolvedRoot ??= await resolveRoot(root)\n\n    // Build full file path\n    const { join } = await import('node:path')\n    let fullPath = join(resolvedRoot, pathname)\n\n    // Directory → try index.html\n    let result = await readFile(fullPath)\n    if (!result && (pathname.endsWith('/') || !pathname.includes('.'))) {\n      fullPath = join(fullPath, 'index.html')\n      result = await readFile(fullPath)\n    }\n\n    if (!result) return null\n\n    // Build response headers\n    const contentType = getMimeType(fullPath)\n    const headers: Record<string, string> = {\n      'content-type': contentType,\n      'content-length': String(result.size),\n    }\n    if (maxAge > 0) {\n      headers['cache-control'] = `public, max-age=${String(maxAge)}`\n    }\n\n    // HEAD: headers only, no body\n    if (method === 'HEAD') {\n      return new Response(null, { status: 200, headers })\n    }\n\n    return new Response(result.content as unknown as BodyInit, { status: 200, headers })\n  }\n}\n","/**\n * Streaming SSR — renders a React element tree to a `ReadableStream<Uint8Array>`.\n *\n * Inspired by Next.js `stream-ops.ts`. Uses Web Standard `renderToReadableStream`\n * (works on Node 18+, Bun, Deno). Falls back to `renderToString` wrapped in a\n * ReadableStream when `renderToReadableStream` is not available (React 17 — EC-4).\n *\n * React is loaded via dynamic `import('react-dom/server')` because react-dom\n * is an optional peerDep of @theokit/http (ADR D2).\n */\n\nimport type * as ReactTypes from 'react'\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\nexport interface StreamRenderOptions {\n  /** React element to render */\n  root: ReactTypes.ReactElement\n  /** Whether to wait for all Suspense to resolve (default: false — stream immediately) */\n  waitForAll?: boolean\n}\n\nexport interface StreamRenderResult {\n  /** The HTML stream */\n  stream: ReadableStream<Uint8Array>\n  /** Promise that resolves when all content has been flushed */\n  allReady: Promise<void>\n}\n\n// ---------------------------------------------------------------------------\n// Doctype prefix\n// ---------------------------------------------------------------------------\n\nconst DOCTYPE = '<!DOCTYPE html>'\nconst encoder = new TextEncoder()\n\n// ---------------------------------------------------------------------------\n// Core\n// ---------------------------------------------------------------------------\n\n/**\n * Renders a React element to a `ReadableStream<Uint8Array>` (Web Standard).\n *\n * 1. Tries `renderToReadableStream` first (React 18+ — Web Standard API).\n * 2. Falls back to `renderToString` wrapped in a ReadableStream when\n *    `renderToReadableStream` is not available (React 17 compat — EC-4).\n * 3. Prepends `<!DOCTYPE html>` to the stream.\n *\n * **EC-7 — Streaming error handling:** In streaming mode, errors thrown inside\n * Suspense boundaries are caught by React's streaming error handler and result\n * in a client-side error boundary activation (the shell is already sent). In\n * string mode (`renderToString`), errors throw synchronously before any bytes\n * are sent, allowing a full 500 error page. Choose streaming when you want\n * progressive rendering; choose string mode when you want atomic error handling.\n */\nexport async function renderToStream(options: StreamRenderOptions): Promise<StreamRenderResult> {\n  const { root, waitForAll = false } = options\n\n  // Dynamic import — react-dom is optional peerDep\n  const reactDomServer = await import('react-dom/server')\n\n  // Prefer renderToReadableStream (Web Standard — React 18+)\n  if (typeof reactDomServer.renderToReadableStream === 'function') {\n    return renderWithReadableStream(reactDomServer.renderToReadableStream, root, waitForAll)\n  }\n\n  // EC-4: Fallback to renderToString wrapped in ReadableStream (React 17)\n  if (typeof reactDomServer.renderToString === 'function') {\n    console.warn(\n      '[theokit] renderToReadableStream not available — falling back to renderToString. ' +\n        'Upgrade to React 18+ for streaming SSR support.',\n    )\n    return renderWithString(reactDomServer.renderToString, root)\n  }\n\n  throw new Error(\n    '[theokit] react-dom/server does not export renderToReadableStream or renderToString. ' +\n      'Ensure react-dom >= 17 is installed.',\n  )\n}\n\n// ---------------------------------------------------------------------------\n// Strategy: Web Standard renderToReadableStream\n// ---------------------------------------------------------------------------\n\nasync function renderWithReadableStream(\n  renderFn: (\n    element: ReactTypes.ReactElement,\n  ) => Promise<ReadableStream & { allReady: Promise<void> }>,\n  root: ReactTypes.ReactElement,\n  waitForAll: boolean,\n): Promise<StreamRenderResult> {\n  const reactStream = await renderFn(root)\n\n  // If waitForAll, wait for all Suspense boundaries to resolve before emitting\n  if (waitForAll) {\n    await reactStream.allReady\n  }\n\n  // Prepend DOCTYPE\n  const doctypeStream = prependDoctype(reactStream)\n\n  return {\n    stream: doctypeStream,\n    allReady: reactStream.allReady,\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Strategy: Fallback renderToString (EC-4)\n// ---------------------------------------------------------------------------\n\nfunction renderWithString(\n  renderFn: (element: ReactTypes.ReactElement) => string,\n  root: ReactTypes.ReactElement,\n): StreamRenderResult {\n  const html = DOCTYPE + renderFn(root)\n  const bytes = encoder.encode(html)\n\n  const stream = new ReadableStream<Uint8Array>({\n    start(controller) {\n      controller.enqueue(bytes)\n      controller.close()\n    },\n  })\n\n  return {\n    stream,\n    allReady: Promise.resolve(),\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Prepends `<!DOCTYPE html>` bytes to a ReadableStream.\n */\nfunction prependDoctype(source: ReadableStream<Uint8Array>): ReadableStream<Uint8Array> {\n  const reader = source.getReader()\n  let doctypeSent = false\n\n  return new ReadableStream<Uint8Array>({\n    async pull(controller) {\n      if (!doctypeSent) {\n        controller.enqueue(encoder.encode(DOCTYPE))\n        doctypeSent = true\n      }\n      const { value, done } = await reader.read()\n      if (done) {\n        controller.close()\n        return\n      }\n      controller.enqueue(value)\n    },\n    cancel() {\n      void reader.cancel()\n    },\n  })\n}\n\n// ---------------------------------------------------------------------------\n// Response helper\n// ---------------------------------------------------------------------------\n\n/**\n * Converts a {@link StreamRenderResult} into a Web Standard `Response`.\n *\n * Convenience wrapper for use in request handlers:\n * ```ts\n * const result = await renderToStream({ root: <App /> })\n * return streamToResponse(result)\n * ```\n */\nexport function streamToResponse(result: StreamRenderResult): Response {\n  return new Response(result.stream, {\n    status: 200,\n    headers: { 'content-type': 'text/html; charset=utf-8' },\n  })\n}\n"],"mappings":";;;;;;;;;;;;;;;;AACA,OAAO;;;ACaP,SAASA,yBAAyB;AAiBlC,IAAMC,UAAU,IAAIC,kBAAAA;AAmBb,SAASC,oBAAAA;AACd,QAAMC,MAAMH,QAAQI,SAAQ;AAC5B,MAAI,CAACD,KAAK;AACR,UAAM,IAAIE,MACR,qKAEE;EAEN;AACA,SAAOF;AACT;AAVgBD;AAgBT,SAASI,uBAAAA;AACd,SAAON,QAAQI,SAAQ,KAAM;AAC/B;AAFgBE;AAShB,eAAsBC,sBACpBJ,KACAK,IAAwB;AAExB,SAAOR,QAAQS,IAAIN,KAAKK,EAAAA;AAC1B;AALsBD;;;AC/DtB,IAAMG,aAAqC;;EAEzC,SAAS;EACT,QAAQ;EACR,QAAQ;EACR,OAAO;EACP,QAAQ;EACR,SAAS;EACT,QAAQ;EACR,QAAQ;EACR,QAAQ;EACR,OAAO;EACP,SAAS;EACT,QAAQ;EACR,OAAO;EACP,QAAQ;EACR,QAAQ;;EAGR,QAAQ;EACR,QAAQ;EACR,SAAS;EACT,QAAQ;EACR,QAAQ;EACR,QAAQ;EACR,SAAS;EACT,SAAS;EACT,QAAQ;EACR,SAAS;EACT,QAAQ;;EAGR,SAAS;EACT,UAAU;EACV,QAAQ;EACR,QAAQ;EACR,QAAQ;;EAGR,QAAQ;EACR,QAAQ;EACR,QAAQ;EACR,QAAQ;EACR,SAAS;EACT,QAAQ;;EAGR,QAAQ;EACR,QAAQ;EACR,OAAO;EACP,QAAQ;EACR,SAAS;;EAGT,QAAQ;EACR,WAAW;EACX,aAAa;EACb,gBAAgB;AAClB;AAUA,IAAMC,iBAAiB;AAehB,SAASC,YAAYC,UAAgB;AAC1C,QAAMC,MAAMD,SAASE,YAAY,GAAA;AACjC,MAAID,QAAQ,GAAI,QAAO;AACvB,QAAME,MAAMH,SAASI,MAAMH,GAAAA,EAAKI,YAAW;AAC3C,SAAOR,WAAWM,GAAAA,KAAQ;AAC5B;AALgBJ;AAUT,SAASO,WAAWC,UAAgB;AACzC,SAAO,CAACT,eAAeU,KAAKD,QAAAA;AAC9B;AAFgBD;AAWhB,eAAeG,YAAYC,UAAgB;AACzC,QAAMC,IAAIC;AACV,QAAMC,QAAQF,EAAEG;AAOhB,QAAMC,OAAOF,MAAME,KAAKL,QAAAA;AACxB,MAAI,CAAE,MAAMK,KAAKC,OAAM,EAAK,QAAO;AACnC,QAAMC,MAAM,MAAMF,KAAKG,YAAW;AAClC,SAAO;IAAEC,SAAS,IAAIC,WAAWH,GAAAA;IAAMI,MAAMN,KAAKM;EAAK;AACzD;AAbeZ;AAef,eAAea,aAAaZ,UAAgB;AAC1C,QAAMC,IAAIC;AACV,QAAMW,SAASZ,EAAEa;AAIjB,MAAI;AACF,UAAMC,OAAO,MAAMF,OAAOE,KAAKf,QAAAA;AAC/B,QAAIe,KAAKC,YAAa,QAAO;AAC7B,UAAMP,UAAU,MAAMI,OAAOI,SAASjB,QAAAA;AACtC,WAAO;MAAES;MAASE,MAAMF,QAAQS;IAAW;EAC7C,QAAQ;AACN,WAAO;EACT;AACF;AAdeN;AAgBf,eAAeO,aAAanB,UAAgB;AAC1C,MAAI;AACF,UAAMoB,KAAK,MAAM,OAAO,aAAA;AACxB,UAAML,OAAO,MAAMK,GAAGL,KAAKf,QAAAA;AAC3B,QAAIe,KAAKC,YAAW,EAAI,QAAO;AAC/B,UAAMP,UAAU,MAAMW,GAAGH,SAASjB,QAAAA;AAClC,WAAO;MAAES,SAAS,IAAIC,WAAWD,OAAAA;MAAUE,MAAMI,KAAKJ;IAAK;EAC7D,QAAQ;AACN,WAAO;EACT;AACF;AAVeQ;AAYf,eAAeF,SAASjB,UAAgB;AACtC,QAAMC,IAAIC;AACV,MAAID,EAAEG,IAAK,QAAOL,YAAYC,QAAAA;AAC9B,MAAIC,EAAEa,KAAM,QAAOF,aAAaZ,QAAAA;AAChC,SAAOmB,aAAanB,QAAAA;AACtB;AALeiB;AASf,eAAeI,YAAYC,MAAY;AACrC,QAAMrB,IAAIC;AACV,MAAID,EAAEa,MAAM;AACV,UAAMD,SAASZ,EAAEa;AACjB,UAAM,EAAES,KAAI,IAAK,MAAM,OAAO,MAAA;AAC9B,WAAOA,KAAKV,OAAOW,IAAG,GAAIF,IAAAA;EAC5B;AACA,QAAM,EAAEG,QAAO,IAAK,MAAM,OAAO,MAAA;AACjC,SAAOA,QAAQH,IAAAA;AACjB;AATeD;AAmBR,SAASK,oBACdC,SAAuB;AAEvB,QAAML,OAAOK,SAASL,QAAQ;AAC9B,QAAMM,SAASD,SAASC,UAAU;AAElC,MAAIC;AAEJ,SAAO,OAAOC,YAAAA;AAEZ,UAAMC,SAASD,QAAQC,OAAOC,YAAW;AACzC,QAAID,WAAW,SAASA,WAAW,OAAQ,QAAO;AAGlD,UAAME,MAAM,IAAIC,IAAIJ,QAAQG,GAAG;AAC/B,QAAIpC;AACJ,QAAI;AACFA,iBAAWsC,mBAAmBF,IAAIpC,QAAQ;IAC5C,QAAQ;AACN,aAAO;IACT;AAGA,QAAIA,SAASuC,WAAW,OAAA,KAAYvC,SAASuC,WAAW,SAAA,EAAY,QAAO;AAG3E,QAAI,CAACxC,WAAWC,QAAAA,EAAW,QAAO;AAGlCgC,qBAAiB,MAAMR,YAAYC,IAAAA;AAGnC,UAAM,EAAEC,KAAI,IAAK,MAAM,OAAO,MAAA;AAC9B,QAAIvB,WAAWuB,KAAKM,cAAchC,QAAAA;AAGlC,QAAIwC,SAAS,MAAMpB,SAASjB,QAAAA;AAC5B,QAAI,CAACqC,WAAWxC,SAASyC,SAAS,GAAA,KAAQ,CAACzC,SAAS0C,SAAS,GAAA,IAAO;AAClEvC,iBAAWuB,KAAKvB,UAAU,YAAA;AAC1BqC,eAAS,MAAMpB,SAASjB,QAAAA;IAC1B;AAEA,QAAI,CAACqC,OAAQ,QAAO;AAGpB,UAAMG,cAAcnD,YAAYW,QAAAA;AAChC,UAAMyC,UAAkC;MACtC,gBAAgBD;MAChB,kBAAkBE,OAAOL,OAAO1B,IAAI;IACtC;AACA,QAAIiB,SAAS,GAAG;AACda,cAAQ,eAAA,IAAmB,mBAAmBC,OAAOd,MAAAA,CAAAA;IACvD;AAGA,QAAIG,WAAW,QAAQ;AACrB,aAAO,IAAIY,SAAS,MAAM;QAAEC,QAAQ;QAAKH;MAAQ,CAAA;IACnD;AAEA,WAAO,IAAIE,SAASN,OAAO5B,SAAgC;MAAEmC,QAAQ;MAAKH;IAAQ,CAAA;EACpF;AACF;AA7DgBf;;;ACxJhB,IAAMmB,UAAU;AAChB,IAAMC,UAAU,IAAIC,YAAAA;AAqBpB,eAAsBC,eAAeC,SAA4B;AAC/D,QAAM,EAAEC,MAAMC,aAAa,MAAK,IAAKF;AAGrC,QAAMG,iBAAiB,MAAM,OAAO,kBAAA;AAGpC,MAAI,OAAOA,eAAeC,2BAA2B,YAAY;AAC/D,WAAOC,yBAAyBF,eAAeC,wBAAwBH,MAAMC,UAAAA;EAC/E;AAGA,MAAI,OAAOC,eAAeG,mBAAmB,YAAY;AACvDC,YAAQC,KACN,uIACE;AAEJ,WAAOC,iBAAiBN,eAAeG,gBAAgBL,IAAAA;EACzD;AAEA,QAAM,IAAIS,MACR,2HACE;AAEN;AAxBsBX;AA8BtB,eAAeM,yBACbM,UAGAV,MACAC,YAAmB;AAEnB,QAAMU,cAAc,MAAMD,SAASV,IAAAA;AAGnC,MAAIC,YAAY;AACd,UAAMU,YAAYC;EACpB;AAGA,QAAMC,gBAAgBC,eAAeH,WAAAA;AAErC,SAAO;IACLI,QAAQF;IACRD,UAAUD,YAAYC;EACxB;AACF;AArBeR;AA2Bf,SAASI,iBACPE,UACAV,MAA6B;AAE7B,QAAMgB,OAAOrB,UAAUe,SAASV,IAAAA;AAChC,QAAMiB,QAAQrB,QAAQsB,OAAOF,IAAAA;AAE7B,QAAMD,SAAS,IAAII,eAA2B;IAC5CC,MAAMC,YAAU;AACdA,iBAAWC,QAAQL,KAAAA;AACnBI,iBAAWE,MAAK;IAClB;EACF,CAAA;AAEA,SAAO;IACLR;IACAH,UAAUY,QAAQC,QAAO;EAC3B;AACF;AAlBSjB;AA2BT,SAASM,eAAeY,QAAkC;AACxD,QAAMC,SAASD,OAAOE,UAAS;AAC/B,MAAIC,cAAc;AAElB,SAAO,IAAIV,eAA2B;IACpC,MAAMW,KAAKT,YAAU;AACnB,UAAI,CAACQ,aAAa;AAChBR,mBAAWC,QAAQ1B,QAAQsB,OAAOvB,OAAAA,CAAAA;AAClCkC,sBAAc;MAChB;AACA,YAAM,EAAEE,OAAOC,KAAI,IAAK,MAAML,OAAOM,KAAI;AACzC,UAAID,MAAM;AACRX,mBAAWE,MAAK;AAChB;MACF;AACAF,iBAAWC,QAAQS,KAAAA;IACrB;IACAG,SAAAA;AACE,WAAKP,OAAOO,OAAM;IACpB;EACF,CAAA;AACF;AArBSpB;AAoCF,SAASqB,iBAAiBC,QAA0B;AACzD,SAAO,IAAIC,SAASD,OAAOrB,QAAQ;IACjCuB,QAAQ;IACRC,SAAS;MAAE,gBAAgB;IAA2B;EACxD,CAAA;AACF;AALgBJ;;;AHhGT,IAAMK,UAAN,MAAMA,SAAAA;EAjFb,OAiFaA;;;EACHC;EACSC,SAAuB,CAAA;EAChCC;EACAC;EACAC;EACSC,YAAYC,KAAKC,IAAG;EACpBC;EACAC;EACAC;EAEjB,YAAoBC,MAA6E;AAC/F,UAAMC,KAAKD,MAAMH,cAAc;AAC/B,UAAMK,KAAKF,MAAMF,aAAa;AAE9B,QAAIG,GAAGE,WAAW,OAAA,EAChB,OAAM,IAAIC,MACR,yBAAyBH,EAAAA,mEAAgE;AAE7F,QAAIC,GAAGC,WAAW,OAAA,EAChB,OAAM,IAAIC,MACR,wBAAwBF,EAAAA,mEAAgE;AAE5F,SAAKL,aAAaI;AAClB,SAAKH,YAAYI;AACjB,SAAKH,kBAAkBC,MAAMD,mBAAmB,CAAA;AAChD,UAAMM,UAAUC,kBAAAA;AAChB,SAAKjB,eAAegB,QAAQE,aAAa,CAACC,YAAY,KAAKC,cAAcD,OAAAA,CAAAA;EAC3E;;;;;;;EAQA,aAAaE,OAAOV,MAAwC;AAC1D,UAAMW,MAAM,IAAIvB,SAAQY,IAAAA;AAKxB,UAAMY,WAAW,oBAAIC,IAAAA;AAGrB,QAAIb,KAAKc,QAAQ;AACf,YAAMC,aAAaC,QAAQC,YAAY,qBAAqBjB,KAAKc,MAAM;AACvE,UAAIC,YAAY;AACd,cAAMG,aAAa;UAAClB,KAAKc;aAAYC,WAAWI,WAAW,CAAA;;AAC3D,mBAAWC,OAAOF,YAAY;AAC5B,gBAAMG,OAAOL,QAAQC,YAAY,qBAAqBG,GAAAA;AACtD,cAAI,CAACC,KAAM;AACX,qBAAWC,QAASD,KAAKE,aAAa,CAAA,GAAmB;AACvD,gBAAI,CAACX,SAASY,IAAIF,IAAAA,GAAO;AACvBV,uBAASa,IAAIH,MAAM,IAAKA,KAAAA,CAAAA;YAC1B;UACF;QACF;MACF;IACF;AAGA,QAAItB,KAAKuB,WAAW;AAClB,iBAAWD,QAAQtB,KAAKuB,WAAW;AACjC,YAAI,CAACX,SAASY,IAAIF,IAAAA,GAAO;AACvBV,mBAASa,IAAIH,MAAM,IAAKA,KAAAA,CAAAA;QAC1B;MACF;IACF;AAGA,eAAWI,cAAc1B,KAAK2B,aAAa;AACzC,YAAMC,aAAyBZ,QAAQC,YAAY,qBAAqBS,UAAAA,KAAe,CAAA;AACvF,YAAMG,OAAOD,WAAWE,IAAI,CAACC,OAAAA;AAC3B,cAAMC,MAAMpB,SAASqB,IAAIF,EAAAA;AACzB,YAAI,CAACC,KAAK;AACR,gBAAM,IAAI5B,MACR,4BAA4B2B,GAAGG,IAAI,QAAQR,WAAWQ,IAAI,SACjDH,GAAGG,IAAI,sDAAsD;QAE1E;AACA,eAAOF;MACT,CAAA;AACA,YAAMG,WAAW,IAAKT,WAAAA,GAAkDG,IAAAA;AAGxE,YAAMO,gBAAgBpB,QAAQC,YAAY,6BAA6BS,UAAAA;AACvE,UACEU,iBACA,OAAQD,SAAsCC,aAAAA,MAAmB,YACjE;AACA,cAAMC,SAAUF,SAAsCC,aAAAA,EAAc;AACpE,YAAIC,kBAAkBC,QAAS,OAAMD;MACvC;AAEA,YAAME,QAAQC,uBAAuBd,UAAAA;AACrC,iBAAWe,KAAKF,OAAO;AACrB5B,YAAIrB,OAAOoD,KAAK;UAAEC,MAAMF;UAAGN;QAAS,CAAA;MACtC;IACF;AAGAxB,QAAIrB,OAAOsD,KAAK,CAACC,GAAGC,MAAAA;AAClB,YAAMC,KAAKF,EAAEF,KAAKK,SAASC,SAAS,GAAA;AACpC,YAAMC,KAAKJ,EAAEH,KAAKK,SAASC,SAAS,GAAA;AACpC,UAAIF,OAAOG,GAAI,QAAOH,KAAK,IAAI;AAC/B,aAAO;IACT,CAAA;AAGA,eAAWI,SAASxC,IAAIrB,QAAQ;AAC9B,YAAM8D,aAAuB,CAAA;AAC7B,YAAMC,WAAWF,MAAMR,KAAKK,SAASM,QAAQ,WAAW,CAACC,IAAIrB,SAAAA;AAC3DkB,mBAAWV,KAAKR,IAAAA;AAChB,eAAO;MACT,CAAA;AACAiB,YAAMK,kBAAkB,IAAIC,OAAO,IAAIJ,QAAAA,GAAW;AAClDF,YAAMO,qBAAqBN;AAE3BD,YAAMQ,YAAYR,MAAMR,KAAKiB,aAAaC,KAAK,CAACC,MAAMA,EAAEC,WAAW,MAAA;IACrE;AAGA,QAAI/D,KAAKgE,QAAQhE,KAAKiE,WAAW;AAE/BtD,UAAInB,gBAAgBQ,KAAKgE;IAC3B,WAAWhE,KAAKgE,MAAM;AACpB,YAAM,EAAEE,eAAc,IAAK,MAAM,OAAO,kBAAA;AACxCvD,UAAIpB,eAAe,oBAAoB2E,eAAelE,KAAKgE,IAAI;IACjE,WAAWhE,KAAKmE,MAAM;AACpBxD,UAAIpB,eAAeS,KAAKmE;IAC1B;AAGA,QAAInE,KAAKoE,cAAc,OAAO;AAC5BzD,UAAIlB,gBAAgB4E,oBAAoB;QAAEL,MAAMhE,KAAKoE,aAAa;MAAS,CAAA;IAC7E;AAKA,QAAIpE,KAAKsE,QAAQC,QAAQ;AACvB,YAAM5D,IAAI6D,eAAexE,KAAKsE,QAAQ1D,UAAUZ,IAAAA;IAClD;AAEA,WAAOW;EACT;EAEA,MAAM8D,OAAOC,MAA6B;AACxC,WAAO,IAAIpC,QAAQ,CAACqC,YAAAA;AAClB,WAAKtF,aAAaoF,OAAOC,MAAM,MAAA;AAC7BE,gBAAQC,IAAI,6CAA6CH,IAAAA,EAAM;AAC/DC,gBAAAA;MACF,CAAA;IACF,CAAA;EACF;EAEAG,kBAAgC;AAC9B,WAAO,KAAKzF;EACd;EAEA,MAAM0F,QAAuB;AAC3B,WAAO,IAAIzC,QAAQ,CAACqC,YAAAA;AAClB,WAAKtF,aAAa0F,MAAM,MAAA;AACtBJ,gBAAAA;MACF,CAAA;IACF,CAAA;EACF;;EAIQK,cAQF,CAAA;EAEN,MAAcR,eACZS,cACArE,UACAZ,MACA;AAKA,UAAMkF,WAAW,IAAIC,SAAS,aAAa,0BAAA;AAG3C,QAAIC,mBACFC,cACAC,qBACAC,WACAC;AACF,QAAI;AACF,YAAMC,MAAM,MAAMP,SAAS,iBAAA;AAC3BE,0BAAoBK,IAAIL;AACxBC,qBAAeI,IAAIJ;AACnBC,4BAAsBG,IAAIH;AAC1BC,kBAAYE,IAAIF;AAChBC,+BAAyBC,IAAIC;IAC/B,QAAQ;AACN,YAAM,IAAItF,MACR,uGAAA;IAEJ;AAEA,UAAMuF,SAAS3F,KAAK4F,aAAaC,QAAQC,IAAIC,sBAAsB;AAEnE,eAAWC,cAAcf,cAAc;AAErC,YAAMgB,SAASV,UAAUS,UAAAA;AACzB,YAAME,eAAe;WAAID;;AAGzB,iBAAW,CAACE,GAAAA,KAAQvF,UAAU;AAC5B,YAAII,QAAQC,YAAYmF,uBAAOC,IAAI,wBAAA,GAA2BF,GAAAA,GAAM;AAClE,cAAI,CAACD,aAAajD,SAASkD,GAAAA,EAAMD,cAAaxD,KAAKyD,GAAAA;QACrD;MACF;AAEA,YAAMxD,OAAOyC,kBAAkBY,YAAYE,YAAAA;AAG3C,YAAMI,mBAAmB,oBAAIzF,IAAAA;AAC7B,iBAAW0F,MAAM5D,KAAK6D,WAAW;AAC/B,YAAIrE,WAAWvB,SAASqB,IAAIsE,GAAGE,KAAK;AACpC,YAAI,CAACtE,UAAU;AACbA,qBAAW,IAAKoE,GAAGE,MAAK;AACxB7F,mBAASa,IAAI8E,GAAGE,OAAOtE,QAAAA;QACzB;AACAmE,yBAAiB7E,IAAI8E,GAAGE,OAAOtE,QAAAA;MACjC;AAGA,YAAMuE,WAAWrB,aAAa1C,MAAM2D,gBAAAA;AAGpC,UAAIK;AAEJ,UAAI3G,KAAK4G,oBAAoB;AAC3BD,oBAAY3G,KAAK4G,mBAAmBjE,MAAM+D,SAASG,OAAOlB,QAAQ3F,KAAK8G,QAAQ;MACjF,WAAWnB,QAAQ;AAEjBgB,oBAAYnB,uBAAuB7C,MAAM+D,SAASG,OAAOlB,QAAQ3F,KAAK8G,QAAQ;MAIhF,OAAO;AACLH,oBAAY,KAAKI,qBAAqBpE,KAAKqE,YAAY9E,MAAMyD,MAAAA;MAC/D;AAGA,YAAMrG,SAASgG,oBAAoB;QACjC2B,YAAYtE;QACZuE,iBAAiBR;QACjBC;MAIF,CAAA;AAGA,iBAAWQ,SAAS7H,QAAQ;AAC1B,cAAM8D,aAAuB,CAAA;AAC7B,cAAMC,WAAW8D,MAAMC,KAAK9D,QAAQ,WAAW,CAACC,IAAYrB,SAAAA;AAC1DkB,qBAAWV,KAAKR,IAAAA;AAChB,iBAAO;QACT,CAAA;AACA,aAAK8C,YAAYtC,KAAK;UACpB2E,QAAQF,MAAME;UACdC,SAAS,IAAI7D,OAAO,IAAIJ,QAAAA,GAAW;UACnCD;UACAmE,SAASJ,MAAMI;UACfC,QAAQ7E,KAAK6E,UAAU,CAAA;UACvBC,YAAYzB;UACZ0B,YAAY/E,KAAKgF,UAAUC,eAAe;QAC5C,CAAA;MACF;AAEAhD,cAAQC,IACN,sBAAelC,KAAKqE,YAAY9E,IAAI,gBAAgBS,KAAKwE,KAAK,UAAUT,SAASG,MAAMtC,MAAM,SAAS;IAE1G;EACF;EAEA,MAAcsD,uBAA0C;AACtD,QAAI,KAAK9H,gBAAgBwE,WAAW,GAAG;AACrC,aAAOuD,aAAa,KAAK;QAAEC,QAAQ;QAASC,QAAQ,CAAA;MAAG,CAAA;IACzD;AACA,UAAMC,UAAU,MAAM3F,QAAQ4F,IAC5B,KAAKnI,gBAAgB+B,IAAI,OAAOqG,UAAAA;AAC9B,UAAI;AACF,eAAO,MAAM7F,QAAQ8F,KAAK;UACxBD,MAAAA;UACA,IAAI7F,QAA8D,CAACqC,YACjE0D,WACE,MACE1D,QAAQ;YACNzC,MAAM;YACNoG,SAAS;YACTC,SAAS;UACX,CAAA,GACF,GAAA,CAAA;SAGL;MACH,SAASC,KAAK;AACZ,eAAO;UACLtG,MAAM;UACNoG,SAAS;UACTC,SAASC,eAAepI,QAAQoI,IAAID,UAAU;QAChD;MACF;IACF,CAAA,CAAA;AAEF,UAAME,aAAaR,QAAQS,MAAM,CAACC,MAAMA,EAAEL,OAAO;AACjD,WAAOR,aAAaW,aAAa,MAAM,KAAK;MAC1CV,QAAQU,aAAa,UAAU;MAC/BT,QAAQC;IACV,CAAA;EACF;EAEQlB,qBAAqB6B,WAAmBjD,QAAgB;AAC9D,UAAMkD,MAAM,CAAClD,SACT,sFACA;AACJ,WAAO,CAACmD,UAAkBC,eAAAA;AACxB,YAAMC,SAAS;QACb;UAAEC,MAAM;UAAeC,OAAO,OAAOvJ,KAAKC,IAAG,CAAA;UAAMgJ;QAAU;QAC7D;UAAEK,MAAM;UAASE,MAAM;UAAmBZ,SAASM;UAAKO,WAAW;QAAM;;AAE3E,aAAO;QACL,CAAChD,OAAOiD,aAAa,GAAG,MAAA;AACtB,cAAIC,IAAI;AACR,iBAAO;YACLC,MAAM,6BACJjH,QAAQqC,QACN2E,IAAIN,OAAOzE,SACP;cAAEiF,OAAOR,OAAOM,GAAAA;cAAMG,MAAM;YAAe,IAC3C;cAAED,OAAOE;cAAWD,MAAM;YAAc,CAAA,GAJ1C;UAMR;QACF;MACF;IACF;EACF;;EAIA,MAAchJ,cAAcD,SAAqC;AAC/D,UAAMmJ,WAAW,IAAIC,IAAIpJ,QAAQqJ,GAAG,EAAEF;AAGtC,UAAMG,SAA6B;MACjCtJ;MACAmJ;MACAtC,QAAQ7G,QAAQ6G;MAChB0C,QAAQ,CAAC;MACTC,WAAWrK,KAAKC,IAAG;IACrB;AACA,WAAOqK,sBAAsBH,QAAQ,MACnC,KAAKI,uBAAuB1J,SAASmJ,UAAUG,MAAAA,CAAAA;EAEnD;EAEA,MAAcI,uBACZ1J,SACAmJ,UACAQ,SACmB;AAEnB,QAAI3J,QAAQ6G,WAAW,OAAO;AAC5B,UAAIsC,aAAa,KAAK9J,YAAY;AAChC,eAAOiI,aAAa,KAAK;UACvBC,QAAQ;UACRqC,SAASzK,KAAKC,IAAG,IAAK,KAAKF,aAAa;UACxC2K,WAAW1K,KAAKC,IAAG;QACrB,CAAA;MACF;AACA,UAAI+J,aAAa,KAAK7J,WAAW;AAC/B,eAAO,KAAK+H,qBAAoB;MAClC;IACF;AAGA,QAAIrH,QAAQ6G,WAAW,OAAO;AAC5B,WAAKsC,aAAa,OAAOA,aAAa,kBAAkB,KAAKnK,eAAe;AAC1E,cAAM6C,SAAS,MAAMiI,eAAe;UAClCtG,MAAM,KAAKxE;QACb,CAAA;AACA,eAAO+K,iBAAiBlI,MAAAA;MAC1B;AACA,WAAKsH,aAAa,OAAOA,aAAa,kBAAkB,KAAKpK,cAAc;AACzE,eAAO,IAAIiL,SAAS,KAAKjL,cAAc;UACrCwI,QAAQ;UACR0C,SAAS;YAAE,gBAAgB;UAA2B;QACxD,CAAA;MACF;IACF;AAGA,QAAI,KAAKhL,kBAAkBe,QAAQ6G,WAAW,SAAS7G,QAAQ6G,WAAW,SAAS;AACjF,YAAMqD,iBAAiB,MAAM,KAAKjL,cAAce,OAAAA;AAChD,UAAIkK,eAAgB,QAAOA;IAC7B;AAGA,eAAWvD,SAAS,KAAKnC,aAAa;AACpC,UAAIxE,QAAQ6G,OAAOsD,YAAW,MAAOxD,MAAME,UAAUF,MAAMG,QAAQsD,KAAKjB,QAAAA,GAAW;AAEjF,YAAIxC,MAAMK,OAAOjD,SAAS,GAAG;AAC3B,gBAAMsG,MAAMC,uBAAuBtK,SAAS2G,MAAMM,YAAYN,MAAMO,UAAU;AAC9E,qBAAWqD,aAAa5D,MAAMK,QAAQ;AACpC,kBAAMwD,QAAQ,IAAKD,UAAAA;AACnB,gBAAI,CAAE,MAAMC,MAAMC,YAAYJ,GAAAA,GAAO;AACnC,oBAAMK,KAAK,IAAIC,mBAAmB,oBAAA;AAClC,qBAAOrD,aAAaoD,GAAGE,YAAYF,GAAGG,OAAM,CAAA;YAC9C;UACF;QACF;AACA,eAAOlE,MAAMI,QAAQ/G,OAAAA;MACvB;IACF;AAEA,UAAMqJ,MAAM,IAAID,IAAIpJ,QAAQqJ,GAAG;AAC/B,UAAMxC,SAAS7G,QAAQ6G,OAAOsD,YAAW;AAEzC,UAAMW,QAAQ,KAAKC,UAAUlE,QAAQwC,IAAIF,QAAQ;AACjD,QAAI,CAAC2B,OAAO;AACV,aAAOxD,aAAa,KAAK;QACvB0D,OAAO;UAAErC,MAAM;UAAaZ,SAAS,gBAAgBlB,MAAAA,IAAUwC,IAAIF,QAAQ;QAAG;MAChF,CAAA;IACF;AAEA,UAAM,EAAExG,OAAO4G,OAAM,IAAKuB;AAE1B,QAAI;AAEF,YAAMT,MAAMC,uBACVtK,SACA2C,MAAMhB,SAAS,aACfgB,MAAMR,KAAKiF,WAAW;AAExB,iBAAWmD,aAAa5H,MAAMR,KAAK6E,QAAQ;AACzC,cAAMwD,QAAQ,IAAKD,UAAAA;AACnB,YAAI,CAAE,MAAMC,MAAMC,YAAYJ,GAAAA,GAAO;AACnC,gBAAMK,KAAK,IAAIC,mBAAmB,oBAAA;AAClC,iBAAOrD,aAAaoD,GAAGE,YAAYF,GAAGG,OAAM,CAAA;QAC9C;MACF;AAGA,UAAII;AACJ,UAAItI,MAAMQ,aAAa;QAAC;QAAQ;QAAO;QAASV,SAASoE,MAAAA,GAAS;AAChE,YAAI;AACF,gBAAMqE,OAAO,MAAMlL,QAAQkL,KAAI;AAC/BD,iBAAOC,OAAOC,KAAKC,MAAMF,IAAAA,IAAQhC;QACnC,QAAQ;AACN+B,iBAAO/B;QACT;AAEA,YAAIvG,MAAMR,KAAKkJ,cAAcJ,SAAS/B,QAAW;AAC/C,gBAAMrH,UAASc,MAAMR,KAAKkJ,WAAWC,UAAUL,IAAAA;AAC/C,cAAI,CAACpJ,QAAO0J,SAAS;AACnB,mBAAOjE,aAAa,KAAK;cACvB0D,OAAO;gBAAErC,MAAM;gBAAoB6C,QAAQ3J,QAAOmJ,MAAMQ;cAAO;YACjE,CAAA;UACF;AACAP,iBAAOpJ,QAAO4J;QAChB;MACF;AAGA,YAAMpK,OAAO,KAAKqK,UAChB/I,MAAMR,KAAKiB,cACXpD,SACAiL,MACA1B,QACAoC,OAAOC,YAAYvC,IAAIwC,YAAY,CAAA;AAIrC,UAAIlJ,MAAMR,KAAK2J,UAAU;AACvB,eAAO,IAAI9B,SAAS,MAAM;UACxBzC,QAAQ5E,MAAMR,KAAK2J,SAASvE;UAC5B0C,SAAS;YAAE8B,UAAUpJ,MAAMR,KAAK2J,SAASzC;UAAI;QAC/C,CAAA;MACF;AAGA,YAAM2C,YAAarJ,MAAMhB,SACvBgB,MAAMR,KAAKiF,WAAW;AAGxB,UAAIvF;AACJ,UAAIc,MAAMR,KAAK8J,aAAalI,SAAS,GAAG;AAEtC,cAAM,EAAEmI,gBAAe,IAAK,MAAM,OAAO,iCAAA;AACzCrK,iBAAS,MAAMqK,gBACbvJ,MAAMR,KAAK8J,cACX,MAAMD,UAAUG,MAAMxJ,MAAMhB,UAAUN,IAAAA,GACtCrB,OAAAA;MAEJ,OAAO;AACL6B,iBAAS,MAAMmK,UAAUG,MAAMxJ,MAAMhB,UAAUN,IAAAA;MACjD;AAEA,aAAO+K,cAAcvK,QAAQc,MAAMR,MAAM0E,MAAAA;IAC3C,SAASmB,KAAK;AAEZ,UAAIrF,MAAMR,KAAKkK,QAAQtI,SAAS,GAAG;AACjC,cAAM,EAAEuI,oBAAmB,IAAK,MAAM,OAAO,sCAAA;AAC7C,eAAOA,oBAAoBtE,KAAKrF,MAAMR,KAAKkK,SAASrM,OAAAA;MACtD;AAEA,UAAIgI,eAAeuE,eAAe;AAChC,eAAOjF,aAAaU,IAAI4C,YAAY5C,IAAI6C,OAAM,CAAA;MAChD;AAEAzG,cAAQ4G,MAAM,6BAA6BhD,eAAepI,QAAQoI,IAAID,UAAUC,GAAAA;AAChF,aAAOV,aAAa,KAAK;QACvB0D,OAAO;UAAErC,MAAM;UAAyBZ,SAAS;QAAwB;MAC3E,CAAA;IACF;EACF;EAEQgD,UAAUlE,QAAgBsC,UAAkB;AAClD,eAAWxG,SAAS,KAAK7D,QAAQ;AAC/B,UAAI6D,MAAMR,KAAKqK,SAAS,SAAS7J,MAAMR,KAAKqK,SAAS3F,OAAQ;AAE7D,YAAMiE,QAAQnI,MAAMK,gBAAiByJ,KAAKtD,QAAAA;AAC1C,UAAI,CAAC2B,MAAO;AACZ,YAAMvB,SAAiC,CAAC;AACxC5G,YAAMO,mBAAoBwJ,QAAQ,CAAChL,MAAMoH,MAAAA;AACvCS,eAAO7H,IAAAA,IAAQoJ,MAAMhC,IAAI,CAAA;MAC3B,CAAA;AACA,aAAO;QAAEnG;QAAO4G;MAAO;IACzB;AACA,WAAO;EACT;EAEQmC,UACNiB,SACA3M,SACAiL,MACA1B,QACAqD,OACW;AACX,QAAID,QAAQ5I,WAAW,EAAG,QAAO,CAAA;AACjC,UAAM8I,MAAMC,KAAKD,IAAG,GAAIF,QAAQrL,IAAI,CAACgC,MAAMA,EAAEyJ,KAAK,CAAA;AAClD,UAAM1L,OAAkB2L,MAAMC,KAAK;MAAElJ,QAAQ8I,MAAM;IAAE,GAAG,MAAM3D,MAAAA;AAC9D,eAAW5F,KAAKqJ,SAAS;AACvB,cAAQrJ,EAAEC,QAAM;QACd,KAAK;AACHlC,eAAKiC,EAAEyJ,KAAK,IAAI/M;AAChB;QACF,KAAK;AACHqB,eAAKiC,EAAEyJ,KAAK,IAAIzJ,EAAE4J,MAAOjC,KAAiC3H,EAAE4J,GAAG,IAAIjC;AACnE;QACF,KAAK;AACH5J,eAAKiC,EAAEyJ,KAAK,IAAIzJ,EAAE4J,MAAM3D,OAAOjG,EAAE4J,GAAG,IAAI3D;AACxC;QACF,KAAK;AACHlI,eAAKiC,EAAEyJ,KAAK,IAAIzJ,EAAE4J,MAAMN,MAAMtJ,EAAE4J,GAAG,IAAIN;AACvC;QACF,KAAK;AACHvL,eAAKiC,EAAEyJ,KAAK,IAAIzJ,EAAE4J,MACdlN,QAAQiK,QAAQxI,IAAI6B,EAAE4J,IAAIC,YAAW,CAAA,IACrCxB,OAAOC,YAAY5L,QAAQiK,QAAQ0C,QAAO,CAAA;AAC9C;QACF,KAAK;AACHtL,eAAKiC,EAAEyJ,KAAK,IAAI/M,QAAQiK,QAAQxI,IAAI,iBAAA,KAAsB;AAC1D;QACF;AACEJ,eAAKiC,EAAEyJ,KAAK,IAAI7D;MACpB;IACF;AACA,WAAO7H;EACT;AACF;AAEA,SAASiG,aAAaC,QAAgB0D,MAAa;AACjD,SAAO,IAAIjB,SAASmB,KAAKiC,UAAUnC,IAAAA,GAAO;IACxC1D;IACA0C,SAAS;MAAE,gBAAgB;IAAmB;EAChD,CAAA;AACF;AALS3C;AAOT,SAAS8E,cAAcvK,QAAiBM,MAAkB0E,QAAc;AACtE,QAAMU,SAASpF,KAAKoF,WAAWV,WAAW,SAAS,MAAM;AACzD,QAAMoD,UAAkC;IAAE,gBAAgB;EAAmB;AAC7E,aAAW,CAACoD,GAAGC,CAAAA,KAAMnL,KAAK8H,QAASA,SAAQoD,EAAEF,YAAW,CAAA,IAAMG;AAE9D,MAAIzL,WAAWqH,UAAarH,WAAW,MAAM;AAC3C,WAAO,IAAImI,SAAS,MAAM;MAAEzC,QAAQA,WAAW,MAAM,MAAMA;MAAQ0C;IAAQ,CAAA;EAC7E;AACA,MAAI,OAAOpI,WAAW,UAAU;AAC9BoI,YAAQ,cAAA,IAAkB;AAC1B,WAAO,IAAID,SAASnI,QAAQ;MAAE0F;MAAQ0C;IAAQ,CAAA;EAChD;AACA,SAAO,IAAID,SAASmB,KAAKiC,UAAUvL,MAAAA,GAAS;IAAE0F;IAAQ0C;EAAQ,CAAA;AAChE;AAbSmC;","names":["AsyncLocalStorage","storage","AsyncLocalStorage","getRequestContext","ctx","getStore","Error","tryGetRequestContext","runWithRequestContext","fn","run","MIME_TYPES","UNSAFE_PATH_RE","getMimeType","filePath","dot","lastIndexOf","ext","slice","toLowerCase","isSafePath","pathname","test","readFileBun","fullPath","g","globalThis","BunRT","Bun","file","exists","buf","arrayBuffer","content","Uint8Array","size","readFileDeno","DenoRT","Deno","stat","isDirectory","readFile","byteLength","readFileNode","fs","resolveRoot","root","join","cwd","resolve","createStaticHandler","options","maxAge","resolvedRoot","request","method","toUpperCase","url","URL","decodeURIComponent","startsWith","result","endsWith","includes","contentType","headers","String","Response","status","DOCTYPE","encoder","TextEncoder","renderToStream","options","root","waitForAll","reactDomServer","renderToReadableStream","renderWithReadableStream","renderToString","console","warn","renderWithString","Error","renderFn","reactStream","allReady","doctypeStream","prependDoctype","stream","html","bytes","encode","ReadableStream","start","controller","enqueue","close","Promise","resolve","source","reader","getReader","doctypeSent","pull","value","done","read","cancel","streamToResponse","result","Response","status","headers","TheoApp","serverHandle","routes","frontendHtml","streamingRoot","staticHandler","startTime","Date","now","healthPath","readyPath","readinessChecks","opts","hp","rp","startsWith","Error","adapter","createNodeAdapter","createServer","request","handleRequest","create","app","registry","Map","module","moduleMeta","Reflect","getMetadata","allModules","imports","Mod","meta","Prov","providers","has","set","Controller","controllers","paramTypes","args","map","pt","dep","get","name","instance","postConstruct","result","Promise","walks","walkControllerMetadata","w","push","walk","sort","a","b","aP","fullPath","includes","bP","entry","paramNames","regexStr","replace","_m","compiledPattern","RegExp","compiledParamNames","needsBody","paramEntries","some","p","source","root","streaming","renderToString","html","staticDir","createStaticHandler","agents","length","autoWireAgents","listen","port","resolve","console","log","getServerHandle","close","agentRoutes","agentClasses","importFn","Function","walkAgentMetadata","compileAgent","generateAgentRoutes","getMixins","createSdkAgentStreamFn","mod","createSdkAgentStream","apiKey","llmApiKey","process","env","OPENROUTER_API_KEY","AgentClass","mixins","allToolboxes","Cls","Symbol","for","toolboxInstances","tb","toolboxes","class","compiled","createRun","agentStreamFactory","tools","llmModel","createFallbackStream","agentConfig","walkResult","compiledOptions","route","path","method","pattern","handler","guards","agentClass","methodName","mainLoop","propertyKey","handleReadinessCheck","jsonResponse","status","checks","results","all","check","race","setTimeout","healthy","message","err","allHealthy","every","r","agentName","msg","_message","_sessionId","events","type","runId","code","retryable","asyncIterator","i","next","value","done","undefined","pathname","URL","url","reqCtx","params","startedAt","runWithRequestContext","handleRequestInContext","_reqCtx","uptime","timestamp","renderToStream","streamToResponse","Response","headers","staticResponse","toUpperCase","test","ctx","createExecutionContext","GuardCtor","guard","canActivate","ex","ForbiddenException","statusCode","toJSON","match","findRoute","error","body","text","JSON","parse","bodySchema","safeParse","success","issues","data","buildArgs","Object","fromEntries","searchParams","redirect","location","handlerFn","interceptors","runInterceptors","apply","buildResponse","filters","runExceptionFilters","HttpException","verb","exec","forEach","entries","query","max","Math","index","Array","from","key","toLowerCase","stringify","n","v"]}

package/dist/{chunk-LKNI6QEP.js → chunk-MQAJWR3K.js}

@@ -17,4 +17,4 @@ __name(resolveOrNew, "resolveOrNew");
 export {
   resolveOrNew
 };
-//# sourceMappingURL=chunk-LKNI6QEP.js.map
+//# sourceMappingURL=chunk-MQAJWR3K.js.map

package/dist/chunk-MQAJWR3K.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/bridge/di-resolve.ts"],"sourcesContent":["/**\n * Shared DI resolution helper for guards, interceptors, and middleware.\n * Extracted to avoid DRY violation (EC-3) — was duplicated in create-server.ts\n * and theokit-plugin.ts.\n */\n\n/** DI container interface — structural match for @theokit/di Container. */\nexport interface DiContainer {\n  resolve(token: Function): unknown\n}\n\n/**\n * Resolve a class via DI container if provided; otherwise fall back to bare `new`.\n * Guards, interceptors, and middleware classes all use this pattern.\n */\nexport function resolveOrNew(Ctor: Function, container?: DiContainer): object {\n  if (container) {\n    try {\n      return container.resolve(Ctor) as object\n    } catch {\n      // MissingInjectableError or similar — fall back to bare new\n    }\n  }\n  return new (Ctor as new () => object)()\n}\n"],"mappings":";;;;;AAeO,SAASA,aAAaC,MAAgBC,WAAuB;AAClE,MAAIA,WAAW;AACb,QAAI;AACF,aAAOA,UAAUC,QAAQF,IAAAA;IAC3B,QAAQ;IAER;EACF;AACA,SAAO,IAAKA,KAAAA;AACd;AATgBD;","names":["resolveOrNew","Ctor","container","resolve"]}