theokit 0.1.0-alpha.0 → 0.1.0-alpha.11

package/dist/adapters/web-shim.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Web-to-Node bridge used by adapters whose runtimes provide a `Request`
+ * (Web Standard) but where TheoKit's `executeRoute` expects a Node-style
+ * IncomingMessage/ServerResponse pair.
+ *
+ * Used by adapters that target Node-compatible runtimes (Bun, Netlify
+ * Functions, AWS Lambda Node). Cloudflare uses an inline version of the same
+ * pattern — long-term it should consolidate here too.
+ *
+ * NOT used by Deno Deploy: Deno's stdlib does not have `Buffer`/`node:http`
+ * by default and forcing the shim there bloats the bundle. Deno wiring is
+ * tracked separately and will likely require executeRoute to accept Web
+ * Standard Request directly.
+ */
+interface ShimRequest {
+    method: string;
+    url: string;
+    headers: Record<string, string>;
+    socket: {
+        remoteAddress: string;
+    };
+    on: (event: 'data' | 'end' | 'error', cb: (chunk?: unknown) => void) => unknown;
+}
+interface ShimResponse {
+    statusCode: number;
+    headersSent: boolean;
+    writableEnded: boolean;
+    writeHead: (status: number, headers?: Record<string, string>) => void;
+    setHeader: (key: string, value: string) => void;
+    getHeader: (key: string) => string | undefined;
+    write: (chunk: Uint8Array | string) => boolean;
+    end: (body?: Uint8Array | string) => void;
+}
+interface ShimContext {
+    req: ShimRequest;
+    res: ShimResponse;
+    /** Resolves to a Web Standard Response once `res.end()` is called. */
+    toResponse: () => Promise<Response>;
+}
+interface CreateWebShimOptions {
+    /**
+     * CR-018 fix: how to resolve the client IP from forwarded headers.
+     *
+     * - `'platform'` (default for `cf-connecting-ip`): trust runtime-injected
+     *   headers only (`cf-connecting-ip` on Cloudflare, `x-real-ip` on
+     *   Netlify/Vercel when the platform writes it). Ignores
+     *   `x-forwarded-for` because clients can spoof it.
+     * - `'trusted-proxy'`: read the **rightmost** entry of `x-forwarded-for`.
+     *   Only safe when the request literally went through a trusted proxy
+     *   that strips client-set headers and appends the real client IP last.
+     * - `'none'`: skip all forwarded-header lookups and report
+     *   `'0.0.0.0'`. Force this when the adapter has no reliable way to
+     *   identify the client (rate-limiters then must use a different key).
+     *
+     * Default: `'platform'`.
+     */
+    trustedProxy?: 'platform' | 'trusted-proxy' | 'none';
+}
+/**
+ * Build Node-style req/res objects around a Web Standard Request.
+ * `toResponse()` returns a Promise that resolves when `res.end()` has been
+ * invoked, materializing a Web Standard Response with the accumulated body
+ * + headers + status.
+ */
+declare function createWebShim(request: Request, options?: CreateWebShimOptions): ShimContext;
+
+export { type CreateWebShimOptions, type ShimContext, type ShimRequest, type ShimResponse, createWebShim };

package/dist/adapters/web-shim.js

@@ -0,0 +1,129 @@
+import "../chunk-DGUM43GV.js";
+
+// src/adapters/web-shim.ts
+function resolveRemoteAddress(headers, policy) {
+  if (policy === "none") return "0.0.0.0";
+  const cf = headers["cf-connecting-ip"];
+  if (cf) return cf;
+  if (policy === "trusted-proxy") {
+    const xff = headers["x-forwarded-for"];
+    if (xff) {
+      const parts = xff.split(",").map((p) => p.trim()).filter(Boolean);
+      if (parts.length > 0) return parts[parts.length - 1];
+    }
+    const xri = headers["x-real-ip"];
+    if (xri) return xri;
+  }
+  return "0.0.0.0";
+}
+function createWebShim(request, options) {
+  const url = new URL(request.url);
+  const headers = {};
+  request.headers.forEach((value, key) => {
+    headers[key] = value;
+  });
+  const pumpState = { consumed: false };
+  const dataListeners = [];
+  const endListeners = [];
+  const errorListeners = [];
+  async function pumpBody() {
+    if (pumpState.consumed) return;
+    pumpState.consumed = true;
+    if (!request.body) {
+      for (const cb of endListeners) cb();
+      return;
+    }
+    try {
+      const reader = request.body.getReader();
+      let done = false;
+      while (!done) {
+        const chunk = await reader.read();
+        done = chunk.done;
+        if (!done && chunk.value) {
+          for (const cb of dataListeners) cb(chunk.value);
+        }
+      }
+      for (const cb of endListeners) cb();
+    } catch (err) {
+      for (const cb of errorListeners) cb(err);
+    }
+  }
+  const trustedProxy = options?.trustedProxy ?? "platform";
+  const req = {
+    method: request.method,
+    url: url.pathname + url.search,
+    headers,
+    socket: {
+      remoteAddress: resolveRemoteAddress(headers, trustedProxy)
+    },
+    on(event, cb) {
+      if (event === "data") dataListeners.push(cb);
+      if (event === "end") endListeners.push(cb);
+      if (event === "error") errorListeners.push(cb);
+      if (event === "end") void pumpBody();
+      return req;
+    }
+  };
+  const responseChunks = [];
+  const responseHeaders = {};
+  let responseStatus = 200;
+  let resolveResponse;
+  const responsePromise = new Promise((resolve) => {
+    resolveResponse = resolve;
+  });
+  function chunkToBytes(chunk) {
+    if (typeof chunk === "string") return new TextEncoder().encode(chunk);
+    return chunk;
+  }
+  const res = {
+    statusCode: 200,
+    headersSent: false,
+    writableEnded: false,
+    writeHead(status, headers2) {
+      responseStatus = status;
+      this.statusCode = status;
+      if (headers2) {
+        for (const [k, v] of Object.entries(headers2)) {
+          responseHeaders[k.toLowerCase()] = v;
+        }
+      }
+      this.headersSent = true;
+    },
+    setHeader(key, value) {
+      responseHeaders[key.toLowerCase()] = value;
+    },
+    getHeader(key) {
+      return responseHeaders[key.toLowerCase()];
+    },
+    write(chunk) {
+      responseChunks.push(chunkToBytes(chunk));
+      return true;
+    },
+    end(body) {
+      if (body !== void 0) responseChunks.push(chunkToBytes(body));
+      this.writableEnded = true;
+      const totalLength = responseChunks.reduce((n, c) => n + c.length, 0);
+      const concat = new Uint8Array(totalLength);
+      let offset = 0;
+      for (const c of responseChunks) {
+        concat.set(c, offset);
+        offset += c.length;
+      }
+      resolveResponse(
+        new Response(concat, {
+          status: responseStatus,
+          headers: responseHeaders
+        })
+      );
+    }
+  };
+  return {
+    req,
+    res,
+    toResponse: () => responsePromise
+  };
+}
+export {
+  createWebShim
+};
+//# sourceMappingURL=web-shim.js.map

package/dist/adapters/web-shim.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/adapters/web-shim.ts"],"sourcesContent":["/**\n * Web-to-Node bridge used by adapters whose runtimes provide a `Request`\n * (Web Standard) but where TheoKit's `executeRoute` expects a Node-style\n * IncomingMessage/ServerResponse pair.\n *\n * Used by adapters that target Node-compatible runtimes (Bun, Netlify\n * Functions, AWS Lambda Node). Cloudflare uses an inline version of the same\n * pattern — long-term it should consolidate here too.\n *\n * NOT used by Deno Deploy: Deno's stdlib does not have `Buffer`/`node:http`\n * by default and forcing the shim there bloats the bundle. Deno wiring is\n * tracked separately and will likely require executeRoute to accept Web\n * Standard Request directly.\n */\n\nexport interface ShimRequest {\n  method: string\n  url: string\n  headers: Record<string, string>\n  socket: { remoteAddress: string }\n  on: (event: 'data' | 'end' | 'error', cb: (chunk?: unknown) => void) => unknown\n}\n\nexport interface ShimResponse {\n  statusCode: number\n  headersSent: boolean\n  writableEnded: boolean\n  writeHead: (status: number, headers?: Record<string, string>) => void\n  setHeader: (key: string, value: string) => void\n  getHeader: (key: string) => string | undefined\n  write: (chunk: Uint8Array | string) => boolean\n  end: (body?: Uint8Array | string) => void\n}\n\nexport interface ShimContext {\n  req: ShimRequest\n  res: ShimResponse\n  /** Resolves to a Web Standard Response once `res.end()` is called. */\n  toResponse: () => Promise<Response>\n}\n\nexport interface CreateWebShimOptions {\n  /**\n   * CR-018 fix: how to resolve the client IP from forwarded headers.\n   *\n   * - `'platform'` (default for `cf-connecting-ip`): trust runtime-injected\n   *   headers only (`cf-connecting-ip` on Cloudflare, `x-real-ip` on\n   *   Netlify/Vercel when the platform writes it). Ignores\n   *   `x-forwarded-for` because clients can spoof it.\n   * - `'trusted-proxy'`: read the **rightmost** entry of `x-forwarded-for`.\n   *   Only safe when the request literally went through a trusted proxy\n   *   that strips client-set headers and appends the real client IP last.\n   * - `'none'`: skip all forwarded-header lookups and report\n   *   `'0.0.0.0'`. Force this when the adapter has no reliable way to\n   *   identify the client (rate-limiters then must use a different key).\n   *\n   * Default: `'platform'`.\n   */\n  trustedProxy?: 'platform' | 'trusted-proxy' | 'none'\n}\n\nfunction resolveRemoteAddress(\n  headers: Record<string, string>,\n  policy: NonNullable<CreateWebShimOptions['trustedProxy']>,\n): string {\n  if (policy === 'none') return '0.0.0.0'\n\n  // Runtime-injected headers — these come from the platform itself and\n  // cannot be set by the client.\n  const cf = headers['cf-connecting-ip']\n  if (cf) return cf\n\n  if (policy === 'trusted-proxy') {\n    // Take the RIGHTMOST entry of x-forwarded-for. The rightmost is the\n    // hop nearest the application, which a trusted proxy appended; entries\n    // to the left may have been forged by the client.\n    const xff = headers['x-forwarded-for']\n    if (xff) {\n      const parts = xff\n        .split(',')\n        .map((p) => p.trim())\n        .filter(Boolean)\n      if (parts.length > 0) return parts[parts.length - 1]\n    }\n    // x-real-ip is typically platform-set (NGINX/Netlify/Vercel).\n    const xri = headers['x-real-ip']\n    if (xri) return xri\n  }\n\n  return '0.0.0.0'\n}\n\n/**\n * Build Node-style req/res objects around a Web Standard Request.\n * `toResponse()` returns a Promise that resolves when `res.end()` has been\n * invoked, materializing a Web Standard Response with the accumulated body\n * + headers + status.\n */\nexport function createWebShim(request: Request, options?: CreateWebShimOptions): ShimContext {\n  const url = new URL(request.url)\n  const headers: Record<string, string> = {}\n  request.headers.forEach((value, key) => {\n    headers[key] = value\n  })\n\n  const pumpState = { consumed: false }\n\n  // Consume the request body once, then dispatch data/end events to whatever\n  // listener attaches later (executeRoute's body parser).\n  const dataListeners: ((chunk: Uint8Array) => void)[] = []\n  const endListeners: (() => void)[] = []\n  const errorListeners: ((err: unknown) => void)[] = []\n\n  async function pumpBody(): Promise<void> {\n    if (pumpState.consumed) return\n    pumpState.consumed = true\n    if (!request.body) {\n      for (const cb of endListeners) cb()\n      return\n    }\n    try {\n      const reader = request.body.getReader()\n      let done = false\n      while (!done) {\n        const chunk = await reader.read()\n        done = chunk.done\n        if (!done && chunk.value) {\n          for (const cb of dataListeners) cb(chunk.value)\n        }\n      }\n      for (const cb of endListeners) cb()\n    } catch (err) {\n      for (const cb of errorListeners) cb(err)\n    }\n  }\n\n  const trustedProxy = options?.trustedProxy ?? 'platform'\n\n  const req: ShimRequest = {\n    method: request.method,\n    url: url.pathname + url.search,\n    headers,\n    socket: {\n      remoteAddress: resolveRemoteAddress(headers, trustedProxy),\n    },\n    on(event, cb) {\n      if (event === 'data') dataListeners.push(cb)\n      if (event === 'end') endListeners.push(cb)\n      if (event === 'error') errorListeners.push(cb)\n      // Lazily start pumping when end is registered (executeRoute always\n      // listens for end before doing anything with the body).\n      if (event === 'end') void pumpBody()\n      return req\n    },\n  }\n\n  const responseChunks: Uint8Array[] = []\n  const responseHeaders: Record<string, string> = {}\n  let responseStatus = 200\n  let resolveResponse!: (r: Response) => void\n  const responsePromise = new Promise<Response>((resolve) => {\n    resolveResponse = resolve\n  })\n\n  function chunkToBytes(chunk: Uint8Array | string): Uint8Array {\n    if (typeof chunk === 'string') return new TextEncoder().encode(chunk)\n    return chunk\n  }\n\n  const res: ShimResponse = {\n    statusCode: 200,\n    headersSent: false,\n    writableEnded: false,\n    writeHead(status, headers) {\n      responseStatus = status\n      this.statusCode = status\n      if (headers) {\n        for (const [k, v] of Object.entries(headers)) {\n          responseHeaders[k.toLowerCase()] = v\n        }\n      }\n      this.headersSent = true\n    },\n    setHeader(key, value) {\n      responseHeaders[key.toLowerCase()] = value\n    },\n    getHeader(key) {\n      return responseHeaders[key.toLowerCase()]\n    },\n    write(chunk) {\n      responseChunks.push(chunkToBytes(chunk))\n      return true\n    },\n    end(body) {\n      if (body !== undefined) responseChunks.push(chunkToBytes(body))\n      this.writableEnded = true\n      const totalLength = responseChunks.reduce((n, c) => n + c.length, 0)\n      const concat = new Uint8Array(totalLength)\n      let offset = 0\n      for (const c of responseChunks) {\n        concat.set(c, offset)\n        offset += c.length\n      }\n      resolveResponse(\n        new Response(concat, {\n          status: responseStatus,\n          headers: responseHeaders,\n        }),\n      )\n    },\n  }\n\n  return {\n    req,\n    res,\n    toResponse: () => responsePromise,\n  }\n}\n"],"mappings":";;;AA6DA,SAAS,qBACP,SACA,QACQ;AACR,MAAI,WAAW,OAAQ,QAAO;AAI9B,QAAM,KAAK,QAAQ,kBAAkB;AACrC,MAAI,GAAI,QAAO;AAEf,MAAI,WAAW,iBAAiB;AAI9B,UAAM,MAAM,QAAQ,iBAAiB;AACrC,QAAI,KAAK;AACP,YAAM,QAAQ,IACX,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AACjB,UAAI,MAAM,SAAS,EAAG,QAAO,MAAM,MAAM,SAAS,CAAC;AAAA,IACrD;AAEA,UAAM,MAAM,QAAQ,WAAW;AAC/B,QAAI,IAAK,QAAO;AAAA,EAClB;AAEA,SAAO;AACT;AAQO,SAAS,cAAc,SAAkB,SAA6C;AAC3F,QAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,QAAM,UAAkC,CAAC;AACzC,UAAQ,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AACtC,YAAQ,GAAG,IAAI;AAAA,EACjB,CAAC;AAED,QAAM,YAAY,EAAE,UAAU,MAAM;AAIpC,QAAM,gBAAiD,CAAC;AACxD,QAAM,eAA+B,CAAC;AACtC,QAAM,iBAA6C,CAAC;AAEpD,iBAAe,WAA0B;AACvC,QAAI,UAAU,SAAU;AACxB,cAAU,WAAW;AACrB,QAAI,CAAC,QAAQ,MAAM;AACjB,iBAAW,MAAM,aAAc,IAAG;AAClC;AAAA,IACF;AACA,QAAI;AACF,YAAM,SAAS,QAAQ,KAAK,UAAU;AACtC,UAAI,OAAO;AACX,aAAO,CAAC,MAAM;AACZ,cAAM,QAAQ,MAAM,OAAO,KAAK;AAChC,eAAO,MAAM;AACb,YAAI,CAAC,QAAQ,MAAM,OAAO;AACxB,qBAAW,MAAM,cAAe,IAAG,MAAM,KAAK;AAAA,QAChD;AAAA,MACF;AACA,iBAAW,MAAM,aAAc,IAAG;AAAA,IACpC,SAAS,KAAK;AACZ,iBAAW,MAAM,eAAgB,IAAG,GAAG;AAAA,IACzC;AAAA,EACF;AAEA,QAAM,eAAe,SAAS,gBAAgB;AAE9C,QAAM,MAAmB;AAAA,IACvB,QAAQ,QAAQ;AAAA,IAChB,KAAK,IAAI,WAAW,IAAI;AAAA,IACxB;AAAA,IACA,QAAQ;AAAA,MACN,eAAe,qBAAqB,SAAS,YAAY;AAAA,IAC3D;AAAA,IACA,GAAG,OAAO,IAAI;AACZ,UAAI,UAAU,OAAQ,eAAc,KAAK,EAAE;AAC3C,UAAI,UAAU,MAAO,cAAa,KAAK,EAAE;AACzC,UAAI,UAAU,QAAS,gBAAe,KAAK,EAAE;AAG7C,UAAI,UAAU,MAAO,MAAK,SAAS;AACnC,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,iBAA+B,CAAC;AACtC,QAAM,kBAA0C,CAAC;AACjD,MAAI,iBAAiB;AACrB,MAAI;AACJ,QAAM,kBAAkB,IAAI,QAAkB,CAAC,YAAY;AACzD,sBAAkB;AAAA,EACpB,CAAC;AAED,WAAS,aAAa,OAAwC;AAC5D,QAAI,OAAO,UAAU,SAAU,QAAO,IAAI,YAAY,EAAE,OAAO,KAAK;AACpE,WAAO;AAAA,EACT;AAEA,QAAM,MAAoB;AAAA,IACxB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,eAAe;AAAA,IACf,UAAU,QAAQA,UAAS;AACzB,uBAAiB;AACjB,WAAK,aAAa;AAClB,UAAIA,UAAS;AACX,mBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQA,QAAO,GAAG;AAC5C,0BAAgB,EAAE,YAAY,CAAC,IAAI;AAAA,QACrC;AAAA,MACF;AACA,WAAK,cAAc;AAAA,IACrB;AAAA,IACA,UAAU,KAAK,OAAO;AACpB,sBAAgB,IAAI,YAAY,CAAC,IAAI;AAAA,IACvC;AAAA,IACA,UAAU,KAAK;AACb,aAAO,gBAAgB,IAAI,YAAY,CAAC;AAAA,IAC1C;AAAA,IACA,MAAM,OAAO;AACX,qBAAe,KAAK,aAAa,KAAK,CAAC;AACvC,aAAO;AAAA,IACT;AAAA,IACA,IAAI,MAAM;AACR,UAAI,SAAS,OAAW,gBAAe,KAAK,aAAa,IAAI,CAAC;AAC9D,WAAK,gBAAgB;AACrB,YAAM,cAAc,eAAe,OAAO,CAAC,GAAG,MAAM,IAAI,EAAE,QAAQ,CAAC;AACnE,YAAM,SAAS,IAAI,WAAW,WAAW;AACzC,UAAI,SAAS;AACb,iBAAW,KAAK,gBAAgB;AAC9B,eAAO,IAAI,GAAG,MAAM;AACpB,kBAAU,EAAE;AAAA,MACd;AACA;AAAA,QACE,IAAI,SAAS,QAAQ;AAAA,UACnB,QAAQ;AAAA,UACR,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,YAAY,MAAM;AAAA,EACpB;AACF;","names":["headers"]}

package/dist/adapters/ws-shim.d.ts

@@ -0,0 +1,55 @@
+/**
+ * T3.1 — WebSocket cross-runtime bridges.
+ *
+ * Exports 4 bridges (Node `ws` package, Bun.serve, Deno.upgradeWebSocket,
+ * Cloudflare WebSocketPair) that adapt each runtime's native WebSocket API
+ * to a common `WebSocketLike` interface that user handlers (`defineWebSocket`)
+ * can consume uniformly.
+ */
+interface WebSocketLike {
+    send(data: string | Uint8Array | ArrayBuffer): void;
+    close(code?: number, reason?: string): void;
+    on(event: 'message' | 'close' | 'error', cb: (data?: unknown) => void): void;
+}
+interface WsHandler {
+    onOpen?: (ws: WebSocketLike) => void;
+    onMessage?: (ws: WebSocketLike, data: unknown) => void;
+    onClose?: (ws: WebSocketLike, code?: number, reason?: string) => void;
+    onError?: (ws: WebSocketLike, err: unknown) => void;
+}
+interface NodeWsLike {
+    on(event: string, cb: (arg?: unknown) => void): unknown;
+    send(data: unknown): void;
+    close(code?: number, reason?: string): void;
+}
+declare function createNodeWsBridge(handler: WsHandler): {
+    attach(nativeWs: NodeWsLike): WebSocketLike;
+};
+interface BunWsContext {
+    send(data: unknown): void;
+    close(code?: number, reason?: string): void;
+}
+interface BunWebSocketConfig {
+    open: (ws: BunWsContext) => void;
+    message: (ws: BunWsContext, message: unknown) => void;
+    close: (ws: BunWsContext, code?: number, reason?: string) => void;
+}
+declare function createBunWsBridge(handler: WsHandler): BunWebSocketConfig;
+interface DenoLike {
+    upgradeWebSocket(req: Request): {
+        response: Response;
+        socket: {
+            send(data: unknown): void;
+            close(code?: number, reason?: string): void;
+            addEventListener(event: string, cb: (e: unknown) => void): void;
+        };
+    };
+}
+declare function createDenoWsBridge(handler: WsHandler, denoNs: DenoLike): {
+    handle(request: Request): Response;
+};
+declare function createCloudflareWsBridge(handler: WsHandler): {
+    handle(request: Request): Response;
+};
+
+export { type BunWebSocketConfig, type WebSocketLike, type WsHandler, createBunWsBridge, createCloudflareWsBridge, createDenoWsBridge, createNodeWsBridge };

package/dist/adapters/ws-shim.js

@@ -0,0 +1,135 @@
+import "../chunk-DGUM43GV.js";
+
+// src/adapters/ws-shim.ts
+function createNodeWsBridge(handler) {
+  return {
+    attach(nativeWs) {
+      const wsLike = {
+        send: (data) => {
+          nativeWs.send(data);
+        },
+        close: (code, reason) => {
+          nativeWs.close(code, reason);
+        },
+        on: (event, cb) => {
+          nativeWs.on(event, cb);
+        }
+      };
+      nativeWs.on("open", () => handler.onOpen?.(wsLike));
+      nativeWs.on("message", (data) => handler.onMessage?.(wsLike, data));
+      nativeWs.on("close", (codeMaybe) => {
+        const code = typeof codeMaybe === "number" ? codeMaybe : void 0;
+        handler.onClose?.(wsLike, code);
+      });
+      nativeWs.on("error", (err) => handler.onError?.(wsLike, err));
+      return wsLike;
+    }
+  };
+}
+function bunCtxToWsLike(bunWs) {
+  return {
+    send: (data) => {
+      bunWs.send(data);
+    },
+    close: (code, reason) => {
+      bunWs.close(code, reason);
+    },
+    on: () => {
+    }
+  };
+}
+function createBunWsBridge(handler) {
+  return {
+    open(bunWs) {
+      handler.onOpen?.(bunCtxToWsLike(bunWs));
+    },
+    message(bunWs, msg) {
+      handler.onMessage?.(bunCtxToWsLike(bunWs), msg);
+    },
+    close(bunWs, code, reason) {
+      handler.onClose?.(bunCtxToWsLike(bunWs), code, reason);
+    }
+  };
+}
+function createDenoWsBridge(handler, denoNs) {
+  return {
+    handle(request) {
+      const { response, socket } = denoNs.upgradeWebSocket(request);
+      const wsLike = {
+        send: (data) => {
+          socket.send(data);
+        },
+        close: (code, reason) => {
+          socket.close(code, reason);
+        },
+        on: () => {
+        }
+      };
+      socket.addEventListener("open", () => handler.onOpen?.(wsLike));
+      socket.addEventListener("message", (e) => {
+        const data = e.data;
+        handler.onMessage?.(wsLike, data);
+      });
+      socket.addEventListener("close", (e) => {
+        const ev = e;
+        handler.onClose?.(wsLike, ev.code, ev.reason);
+      });
+      socket.addEventListener("error", (err) => handler.onError?.(wsLike, err));
+      return response;
+    }
+  };
+}
+function createCloudflareWsBridge(handler) {
+  return {
+    handle(_request) {
+      const g = globalThis;
+      if (!g.WebSocketPair) {
+        throw new Error("WebSocketPair is not available \u2014 Cloudflare Workers runtime expected.");
+      }
+      const pair = new g.WebSocketPair();
+      const client = pair[0];
+      const server = pair[1];
+      server.accept();
+      const wsLike = {
+        send: (data) => {
+          server.send(data);
+        },
+        close: (code, reason) => {
+          server.close(code, reason);
+        },
+        // Cloudflare's WebSocketPair exposes events via addEventListener;
+        // the WebSocketLike `on` contract is for Node-style ws. We leave
+        // it as a no-op so user handlers that expect Node-style `on(...)`
+        // do not crash — but the events flow through addEventListener
+        // below, not through this method.
+        on: () => {
+        }
+      };
+      server.addEventListener("open", () => handler.onOpen?.(wsLike));
+      server.addEventListener("message", (e) => {
+        const data = e.data;
+        handler.onMessage?.(wsLike, data);
+      });
+      server.addEventListener("close", (e) => {
+        const ev = e;
+        handler.onClose?.(wsLike, ev.code, ev.reason);
+      });
+      server.addEventListener("error", (err) => handler.onError?.(wsLike, err));
+      try {
+        return new Response(null, {
+          status: 101,
+          webSocket: client
+        });
+      } catch {
+        return { status: 101, webSocket: client };
+      }
+    }
+  };
+}
+export {
+  createBunWsBridge,
+  createCloudflareWsBridge,
+  createDenoWsBridge,
+  createNodeWsBridge
+};
+//# sourceMappingURL=ws-shim.js.map

package/dist/adapters/ws-shim.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/adapters/ws-shim.ts"],"sourcesContent":["/**\n * T3.1 — WebSocket cross-runtime bridges.\n *\n * Exports 4 bridges (Node `ws` package, Bun.serve, Deno.upgradeWebSocket,\n * Cloudflare WebSocketPair) that adapt each runtime's native WebSocket API\n * to a common `WebSocketLike` interface that user handlers (`defineWebSocket`)\n * can consume uniformly.\n */\n\nexport interface WebSocketLike {\n  send(data: string | Uint8Array | ArrayBuffer): void\n  close(code?: number, reason?: string): void\n  on(event: 'message' | 'close' | 'error', cb: (data?: unknown) => void): void\n}\n\nexport interface WsHandler {\n  onOpen?: (ws: WebSocketLike) => void\n  onMessage?: (ws: WebSocketLike, data: unknown) => void\n  onClose?: (ws: WebSocketLike, code?: number, reason?: string) => void\n  onError?: (ws: WebSocketLike, err: unknown) => void\n}\n\n// ============================================================\n// Node bridge — wraps `ws` package WebSocket\n// ============================================================\n\ninterface NodeWsLike {\n  on(event: string, cb: (arg?: unknown) => void): unknown\n  send(data: unknown): void\n  close(code?: number, reason?: string): void\n}\n\nexport function createNodeWsBridge(handler: WsHandler): {\n  attach(nativeWs: NodeWsLike): WebSocketLike\n} {\n  return {\n    attach(nativeWs: NodeWsLike): WebSocketLike {\n      const wsLike: WebSocketLike = {\n        send: (data) => {\n          nativeWs.send(data)\n        },\n        close: (code, reason) => {\n          nativeWs.close(code, reason)\n        },\n        on: (event, cb) => {\n          nativeWs.on(event, cb)\n        },\n      }\n      nativeWs.on('open', () => handler.onOpen?.(wsLike))\n      nativeWs.on('message', (data) => handler.onMessage?.(wsLike, data))\n      nativeWs.on('close', (codeMaybe) => {\n        const code = typeof codeMaybe === 'number' ? codeMaybe : undefined\n        handler.onClose?.(wsLike, code)\n      })\n      nativeWs.on('error', (err) => handler.onError?.(wsLike, err))\n      return wsLike\n    },\n  }\n}\n\n// ============================================================\n// Bun bridge — returns config for Bun.serve({ websocket })\n// ============================================================\n\ninterface BunWsContext {\n  send(data: unknown): void\n  close(code?: number, reason?: string): void\n}\n\nexport interface BunWebSocketConfig {\n  open: (ws: BunWsContext) => void\n  message: (ws: BunWsContext, message: unknown) => void\n  close: (ws: BunWsContext, code?: number, reason?: string) => void\n}\n\nfunction bunCtxToWsLike(bunWs: BunWsContext): WebSocketLike {\n  return {\n    send: (data) => {\n      bunWs.send(data)\n    },\n    close: (code, reason) => {\n      bunWs.close(code, reason)\n    },\n    on: () => {\n      // Bun pushes events via the config handlers — no per-instance on()\n    },\n  }\n}\n\nexport function createBunWsBridge(handler: WsHandler): BunWebSocketConfig {\n  return {\n    open(bunWs) {\n      handler.onOpen?.(bunCtxToWsLike(bunWs))\n    },\n    message(bunWs, msg) {\n      handler.onMessage?.(bunCtxToWsLike(bunWs), msg)\n    },\n    close(bunWs, code, reason) {\n      handler.onClose?.(bunCtxToWsLike(bunWs), code, reason)\n    },\n  }\n}\n\n// ============================================================\n// Deno bridge — uses Deno.upgradeWebSocket(request)\n// ============================================================\n\ninterface DenoLike {\n  upgradeWebSocket(req: Request): {\n    response: Response\n    socket: {\n      send(data: unknown): void\n      close(code?: number, reason?: string): void\n      addEventListener(event: string, cb: (e: unknown) => void): void\n    }\n  }\n}\n\nexport function createDenoWsBridge(\n  handler: WsHandler,\n  denoNs: DenoLike,\n): { handle(request: Request): Response } {\n  return {\n    handle(request: Request): Response {\n      const { response, socket } = denoNs.upgradeWebSocket(request)\n      const wsLike: WebSocketLike = {\n        send: (data) => {\n          socket.send(data)\n        },\n        close: (code, reason) => {\n          socket.close(code, reason)\n        },\n        on: () => {\n          // Deno uses addEventListener — adapter dispatches below\n        },\n      }\n      socket.addEventListener('open', () => handler.onOpen?.(wsLike))\n      socket.addEventListener('message', (e) => {\n        const data = (e as { data?: unknown }).data\n        handler.onMessage?.(wsLike, data)\n      })\n      socket.addEventListener('close', (e) => {\n        const ev = e as { code?: number; reason?: string }\n        handler.onClose?.(wsLike, ev.code, ev.reason)\n      })\n      socket.addEventListener('error', (err) => handler.onError?.(wsLike, err))\n      return response\n    },\n  }\n}\n\n// ============================================================\n// Cloudflare bridge — uses globalThis.WebSocketPair\n// ============================================================\n\ninterface CfServerWs {\n  accept(): void\n  addEventListener(event: string, cb: (e: unknown) => void): void\n  send(data: unknown): void\n  close(code?: number, reason?: string): void\n}\n\nexport function createCloudflareWsBridge(handler: WsHandler): {\n  handle(request: Request): Response\n} {\n  return {\n    handle(_request: Request): Response {\n      const g = globalThis as {\n        WebSocketPair?: new () => { 0: unknown; 1: CfServerWs }\n      }\n      if (!g.WebSocketPair) {\n        throw new Error('WebSocketPair is not available — Cloudflare Workers runtime expected.')\n      }\n      const pair = new g.WebSocketPair()\n      const client = pair[0]\n      const server = pair[1]\n      server.accept()\n      const wsLike: WebSocketLike = {\n        send: (data) => {\n          server.send(data)\n        },\n        close: (code, reason) => {\n          server.close(code, reason)\n        },\n        // Cloudflare's WebSocketPair exposes events via addEventListener;\n        // the WebSocketLike `on` contract is for Node-style ws. We leave\n        // it as a no-op so user handlers that expect Node-style `on(...)`\n        // do not crash — but the events flow through addEventListener\n        // below, not through this method.\n        on: (): void => {\n          /* intentional no-op on Cloudflare; see comment above */\n        },\n      }\n      server.addEventListener('open', () => handler.onOpen?.(wsLike))\n      server.addEventListener('message', (e) => {\n        const data = (e as { data?: unknown }).data\n        handler.onMessage?.(wsLike, data)\n      })\n      server.addEventListener('close', (e) => {\n        const ev = e as { code?: number; reason?: string }\n        handler.onClose?.(wsLike, ev.code, ev.reason)\n      })\n      server.addEventListener('error', (err) => handler.onError?.(wsLike, err))\n      // CF requires returning Response with status 101 and webSocket pair.\n      // Node's Response throws on 101; fall back to a plain object that\n      // satisfies the CF runtime's protocol but matches our test shape.\n      try {\n        return new Response(null, {\n          status: 101,\n          webSocket: client,\n        } as ResponseInit & { webSocket: unknown })\n      } catch {\n        return { status: 101, webSocket: client } as unknown as Response\n      }\n    },\n  }\n}\n"],"mappings":";;;AAgCO,SAAS,mBAAmB,SAEjC;AACA,SAAO;AAAA,IACL,OAAO,UAAqC;AAC1C,YAAM,SAAwB;AAAA,QAC5B,MAAM,CAAC,SAAS;AACd,mBAAS,KAAK,IAAI;AAAA,QACpB;AAAA,QACA,OAAO,CAAC,MAAM,WAAW;AACvB,mBAAS,MAAM,MAAM,MAAM;AAAA,QAC7B;AAAA,QACA,IAAI,CAAC,OAAO,OAAO;AACjB,mBAAS,GAAG,OAAO,EAAE;AAAA,QACvB;AAAA,MACF;AACA,eAAS,GAAG,QAAQ,MAAM,QAAQ,SAAS,MAAM,CAAC;AAClD,eAAS,GAAG,WAAW,CAAC,SAAS,QAAQ,YAAY,QAAQ,IAAI,CAAC;AAClE,eAAS,GAAG,SAAS,CAAC,cAAc;AAClC,cAAM,OAAO,OAAO,cAAc,WAAW,YAAY;AACzD,gBAAQ,UAAU,QAAQ,IAAI;AAAA,MAChC,CAAC;AACD,eAAS,GAAG,SAAS,CAAC,QAAQ,QAAQ,UAAU,QAAQ,GAAG,CAAC;AAC5D,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAiBA,SAAS,eAAe,OAAoC;AAC1D,SAAO;AAAA,IACL,MAAM,CAAC,SAAS;AACd,YAAM,KAAK,IAAI;AAAA,IACjB;AAAA,IACA,OAAO,CAAC,MAAM,WAAW;AACvB,YAAM,MAAM,MAAM,MAAM;AAAA,IAC1B;AAAA,IACA,IAAI,MAAM;AAAA,IAEV;AAAA,EACF;AACF;AAEO,SAAS,kBAAkB,SAAwC;AACxE,SAAO;AAAA,IACL,KAAK,OAAO;AACV,cAAQ,SAAS,eAAe,KAAK,CAAC;AAAA,IACxC;AAAA,IACA,QAAQ,OAAO,KAAK;AAClB,cAAQ,YAAY,eAAe,KAAK,GAAG,GAAG;AAAA,IAChD;AAAA,IACA,MAAM,OAAO,MAAM,QAAQ;AACzB,cAAQ,UAAU,eAAe,KAAK,GAAG,MAAM,MAAM;AAAA,IACvD;AAAA,EACF;AACF;AAiBO,SAAS,mBACd,SACA,QACwC;AACxC,SAAO;AAAA,IACL,OAAO,SAA4B;AACjC,YAAM,EAAE,UAAU,OAAO,IAAI,OAAO,iBAAiB,OAAO;AAC5D,YAAM,SAAwB;AAAA,QAC5B,MAAM,CAAC,SAAS;AACd,iBAAO,KAAK,IAAI;AAAA,QAClB;AAAA,QACA,OAAO,CAAC,MAAM,WAAW;AACvB,iBAAO,MAAM,MAAM,MAAM;AAAA,QAC3B;AAAA,QACA,IAAI,MAAM;AAAA,QAEV;AAAA,MACF;AACA,aAAO,iBAAiB,QAAQ,MAAM,QAAQ,SAAS,MAAM,CAAC;AAC9D,aAAO,iBAAiB,WAAW,CAAC,MAAM;AACxC,cAAM,OAAQ,EAAyB;AACvC,gBAAQ,YAAY,QAAQ,IAAI;AAAA,MAClC,CAAC;AACD,aAAO,iBAAiB,SAAS,CAAC,MAAM;AACtC,cAAM,KAAK;AACX,gBAAQ,UAAU,QAAQ,GAAG,MAAM,GAAG,MAAM;AAAA,MAC9C,CAAC;AACD,aAAO,iBAAiB,SAAS,CAAC,QAAQ,QAAQ,UAAU,QAAQ,GAAG,CAAC;AACxE,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAaO,SAAS,yBAAyB,SAEvC;AACA,SAAO;AAAA,IACL,OAAO,UAA6B;AAClC,YAAM,IAAI;AAGV,UAAI,CAAC,EAAE,eAAe;AACpB,cAAM,IAAI,MAAM,4EAAuE;AAAA,MACzF;AACA,YAAM,OAAO,IAAI,EAAE,cAAc;AACjC,YAAM,SAAS,KAAK,CAAC;AACrB,YAAM,SAAS,KAAK,CAAC;AACrB,aAAO,OAAO;AACd,YAAM,SAAwB;AAAA,QAC5B,MAAM,CAAC,SAAS;AACd,iBAAO,KAAK,IAAI;AAAA,QAClB;AAAA,QACA,OAAO,CAAC,MAAM,WAAW;AACvB,iBAAO,MAAM,MAAM,MAAM;AAAA,QAC3B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAMA,IAAI,MAAY;AAAA,QAEhB;AAAA,MACF;AACA,aAAO,iBAAiB,QAAQ,MAAM,QAAQ,SAAS,MAAM,CAAC;AAC9D,aAAO,iBAAiB,WAAW,CAAC,MAAM;AACxC,cAAM,OAAQ,EAAyB;AACvC,gBAAQ,YAAY,QAAQ,IAAI;AAAA,MAClC,CAAC;AACD,aAAO,iBAAiB,SAAS,CAAC,MAAM;AACtC,cAAM,KAAK;AACX,gBAAQ,UAAU,QAAQ,GAAG,MAAM,GAAG,MAAM;AAAA,MAC9C,CAAC;AACD,aAAO,iBAAiB,SAAS,CAAC,QAAQ,QAAQ,UAAU,QAAQ,GAAG,CAAC;AAIxE,UAAI;AACF,eAAO,IAAI,SAAS,MAAM;AAAA,UACxB,QAAQ;AAAA,UACR,WAAW;AAAA,QACb,CAA0C;AAAA,MAC5C,QAAQ;AACN,eAAO,EAAE,QAAQ,KAAK,WAAW,OAAO;AAAA,MAC1C;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/add-2ZFFGGE4.js

@@ -0,0 +1,165 @@
+#!/usr/bin/env node
+import "tsx/esm";
+import "./chunk-KT3MWNZG.js";
+
+// src/cli/commands/add.ts
+import { spawn } from "child_process";
+import { existsSync } from "fs";
+import { resolve } from "path";
+var InvalidPackageNameError = class extends Error {
+  constructor(input, reason) {
+    super(`Invalid package name "${input}": ${reason}`);
+    this.name = "InvalidPackageNameError";
+  }
+};
+var UnknownPackageError = class extends Error {
+  constructor(input, suggestion) {
+    super(
+      suggestion ? `Unknown package: ${input}. Did you mean: ${suggestion}?` : `Unknown package: ${input}.`
+    );
+    this.name = "UnknownPackageError";
+  }
+};
+var PACKAGE_NAME_REGEX = /^[a-z0-9][a-z0-9-]*$/;
+function validatePackageInput(input) {
+  if (typeof input !== "string" || input.length === 0) {
+    throw new InvalidPackageNameError(input, "must be a non-empty string");
+  }
+  if (!PACKAGE_NAME_REGEX.test(input)) {
+    throw new InvalidPackageNameError(input, "allowed: lowercase letters, digits, hyphens only");
+  }
+  return true;
+}
+function detectPackageManager(lockfiles) {
+  if (lockfiles["pnpm-lock.yaml"]) return "pnpm";
+  if (lockfiles["bun.lockb"]) return "bun";
+  if (lockfiles["yarn.lock"]) return "yarn";
+  if (lockfiles["package-lock.json"]) return "npm";
+  return "npm";
+}
+var KNOWN_PACKAGES = {
+  bun: {
+    kind: "bundled",
+    usage: "theokit build --target=bun"
+  },
+  deno: {
+    kind: "bundled",
+    usage: "theokit build --target=deno-deploy"
+  },
+  netlify: {
+    kind: "bundled",
+    usage: "theokit build --target=netlify"
+  },
+  "aws-lambda": {
+    kind: "bundled",
+    usage: "theokit build --target=aws-lambda"
+  },
+  static: {
+    kind: "bundled",
+    usage: "theokit build --target=static"
+  }
+};
+function levenshtein(a, b) {
+  const m = a.length;
+  const n = b.length;
+  if (m === 0) return n;
+  if (n === 0) return m;
+  const dp = Array.from(
+    { length: m + 1 },
+    () => Array.from({ length: n + 1 }).fill(0)
+  );
+  for (let i = 0; i <= m; i++) dp[i][0] = i;
+  for (let j = 0; j <= n; j++) dp[0][j] = j;
+  for (let i = 1; i <= m; i++) {
+    for (let j = 1; j <= n; j++) {
+      const cost = a[i - 1] === b[j - 1] ? 0 : 1;
+      dp[i][j] = Math.min(dp[i - 1][j] + 1, dp[i][j - 1] + 1, dp[i - 1][j - 1] + cost);
+    }
+  }
+  return dp[m][n];
+}
+function findSuggestion(input, candidates) {
+  let best = null;
+  for (const c of candidates) {
+    const d = levenshtein(input, c);
+    if (best === null || d < best.d) best = { name: c, d };
+  }
+  if (best && best.d <= 3) return best.name;
+  return void 0;
+}
+async function runAdd(deps) {
+  validatePackageInput(deps.input);
+  const registry = deps.registry ?? KNOWN_PACKAGES;
+  if (!Object.hasOwn(registry, deps.input)) {
+    const suggestion = findSuggestion(deps.input, Object.keys(registry));
+    throw new UnknownPackageError(deps.input, suggestion);
+  }
+  const entry = registry[deps.input];
+  if (entry.kind === "bundled") {
+    return {
+      packageInstalled: `${deps.input} (bundled inside theokit)`,
+      packageManager: "bundled",
+      usage: entry.usage,
+      exitCode: 0
+    };
+  }
+  if (!entry.npm) {
+    throw new Error(`External package "${deps.input}" missing npm field in registry`);
+  }
+  const existsFn = deps.existsSync ?? ((p) => existsSync(p));
+  const lockfiles = {
+    "pnpm-lock.yaml": existsFn(resolve(deps.cwd, "pnpm-lock.yaml")),
+    "bun.lockb": existsFn(resolve(deps.cwd, "bun.lockb")),
+    "yarn.lock": existsFn(resolve(deps.cwd, "yarn.lock")),
+    "package-lock.json": existsFn(resolve(deps.cwd, "package-lock.json"))
+  };
+  const pm = detectPackageManager(lockfiles);
+  const args = pm === "npm" ? ["install", entry.npm] : ["add", entry.npm];
+  const spawnFn = deps.spawnPm ?? defaultSpawnPm;
+  const result = await spawnFn(pm, args, { cwd: deps.cwd, shell: false });
+  if (!result.ok) {
+    throw new Error(`Package manager exited with non-zero exit code ${result.code}`);
+  }
+  return {
+    packageInstalled: entry.npm,
+    packageManager: pm,
+    usage: entry.usage,
+    exitCode: 0
+  };
+}
+function defaultSpawnPm(cmd, args, opts) {
+  return new Promise((resolve2) => {
+    const proc = spawn(cmd, args, { cwd: opts.cwd, shell: opts.shell, stdio: "inherit" });
+    proc.on("close", (code) => {
+      resolve2({ ok: code === 0, code: code ?? 1 });
+    });
+    proc.on("error", () => {
+      resolve2({ ok: false, code: 1 });
+    });
+  });
+}
+async function addCommand(input) {
+  try {
+    const result = await runAdd({ input, cwd: process.cwd() });
+    console.log(`
+  \u2713 Installed ${result.packageInstalled} via ${result.packageManager}
+`);
+    console.log(`  Next: import { /* ... */ } from '${result.packageInstalled}'
+`);
+  } catch (err) {
+    console.error(`
+  \u2717 ${err.message}
+`);
+    process.exit(1);
+  }
+}
+export {
+  InvalidPackageNameError,
+  KNOWN_PACKAGES,
+  UnknownPackageError,
+  addCommand,
+  detectPackageManager,
+  runAdd,
+  validatePackageInput
+};
+//# sourceMappingURL=add-2ZFFGGE4.js.map

package/dist/add-2ZFFGGE4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/commands/add.ts"],"sourcesContent":["/* eslint-disable security/detect-non-literal-fs-filename --\n * CLI `theo add` — detects pkg manager + writes manifests under user `cwd`.\n * Build-time tool. No HTTP input.\n */\nimport { spawn } from 'node:child_process'\nimport { existsSync } from 'node:fs'\nimport { resolve } from 'node:path'\n\nexport class InvalidPackageNameError extends Error {\n  constructor(input: string, reason: string) {\n    super(`Invalid package name \"${input}\": ${reason}`)\n    this.name = 'InvalidPackageNameError'\n  }\n}\n\nexport class UnknownPackageError extends Error {\n  constructor(input: string, suggestion?: string) {\n    super(\n      suggestion\n        ? `Unknown package: ${input}. Did you mean: ${suggestion}?`\n        : `Unknown package: ${input}.`,\n    )\n    this.name = 'UnknownPackageError'\n  }\n}\n\n/**\n * EC-4 — strict whitelist of characters allowed in package input.\n * Lowercase ASCII letters, digits, hyphens. Must start with letter/digit.\n * Rejects: shell metacharacters, path traversal, scope syntax, uppercase.\n */\nconst PACKAGE_NAME_REGEX = /^[a-z0-9][a-z0-9-]*$/\n\nexport function validatePackageInput(input: string): true {\n  if (typeof input !== 'string' || input.length === 0) {\n    throw new InvalidPackageNameError(input, 'must be a non-empty string')\n  }\n  if (!PACKAGE_NAME_REGEX.test(input)) {\n    throw new InvalidPackageNameError(input, 'allowed: lowercase letters, digits, hyphens only')\n  }\n  return true\n}\n\nexport type PackageManager = 'pnpm' | 'bun' | 'yarn' | 'npm'\n\nexport function detectPackageManager(lockfiles: Record<string, boolean>): PackageManager {\n  if (lockfiles['pnpm-lock.yaml']) return 'pnpm'\n  if (lockfiles['bun.lockb']) return 'bun'\n  if (lockfiles['yarn.lock']) return 'yarn'\n  if (lockfiles['package-lock.json']) return 'npm'\n  return 'npm'\n}\n\nexport interface PackageRegistryEntry {\n  /** 'bundled' = adapter already shipped inside theokit; no npm install needed.\n   *  'external' = adapter/plugin lives as a separate npm package. */\n  kind: 'bundled' | 'external'\n  /** Required when kind === 'external'. */\n  npm?: string\n  /** Usage hint printed to the user (e.g. `theokit build --target=bun`). */\n  usage: string\n}\n\nexport const KNOWN_PACKAGES: Record<string, PackageRegistryEntry> = {\n  bun: {\n    kind: 'bundled',\n    usage: 'theokit build --target=bun',\n  },\n  deno: {\n    kind: 'bundled',\n    usage: 'theokit build --target=deno-deploy',\n  },\n  netlify: {\n    kind: 'bundled',\n    usage: 'theokit build --target=netlify',\n  },\n  'aws-lambda': {\n    kind: 'bundled',\n    usage: 'theokit build --target=aws-lambda',\n  },\n  static: {\n    kind: 'bundled',\n    usage: 'theokit build --target=static',\n  },\n}\n\nfunction levenshtein(a: string, b: string): number {\n  const m = a.length\n  const n = b.length\n  if (m === 0) return n\n  if (n === 0) return m\n  const dp: number[][] = Array.from({ length: m + 1 }, () =>\n    Array.from<number>({ length: n + 1 }).fill(0),\n  )\n  for (let i = 0; i <= m; i++) dp[i][0] = i\n  for (let j = 0; j <= n; j++) dp[0][j] = j\n  for (let i = 1; i <= m; i++) {\n    for (let j = 1; j <= n; j++) {\n      const cost = a[i - 1] === b[j - 1] ? 0 : 1\n      dp[i][j] = Math.min(dp[i - 1][j] + 1, dp[i][j - 1] + 1, dp[i - 1][j - 1] + cost)\n    }\n  }\n  return dp[m][n]\n}\n\nfunction findSuggestion(input: string, candidates: string[]): string | undefined {\n  let best: { name: string; d: number } | null = null\n  for (const c of candidates) {\n    const d = levenshtein(input, c)\n    if (best === null || d < best.d) best = { name: c, d }\n  }\n  if (best && best.d <= 3) return best.name\n  return undefined\n}\n\nexport interface RunAddDeps {\n  input: string\n  cwd: string\n  existsSync?: (path: string) => boolean\n  spawnPm?: (\n    cmd: string,\n    args: string[],\n    opts: { cwd: string; shell: boolean },\n  ) => Promise<{ ok: boolean; code: number }>\n  registry?: Record<string, PackageRegistryEntry>\n}\n\nexport interface AddResult {\n  packageInstalled: string\n  packageManager: PackageManager | 'bundled'\n  usage: string\n  exitCode: 0\n}\n\nexport async function runAdd(deps: RunAddDeps): Promise<AddResult> {\n  validatePackageInput(deps.input)\n\n  const registry = deps.registry ?? KNOWN_PACKAGES\n  if (!Object.hasOwn(registry, deps.input)) {\n    const suggestion = findSuggestion(deps.input, Object.keys(registry))\n    throw new UnknownPackageError(deps.input, suggestion)\n  }\n  const entry = registry[deps.input]\n\n  // T6.1 — bundled adapters need no install\n  if (entry.kind === 'bundled') {\n    return {\n      packageInstalled: `${deps.input} (bundled inside theokit)`,\n      packageManager: 'bundled',\n      usage: entry.usage,\n      exitCode: 0,\n    }\n  }\n\n  if (!entry.npm) {\n    throw new Error(`External package \"${deps.input}\" missing npm field in registry`)\n  }\n\n  const existsFn = deps.existsSync ?? ((p: string) => existsSync(p))\n  const lockfiles = {\n    'pnpm-lock.yaml': existsFn(resolve(deps.cwd, 'pnpm-lock.yaml')),\n    'bun.lockb': existsFn(resolve(deps.cwd, 'bun.lockb')),\n    'yarn.lock': existsFn(resolve(deps.cwd, 'yarn.lock')),\n    'package-lock.json': existsFn(resolve(deps.cwd, 'package-lock.json')),\n  }\n  const pm = detectPackageManager(lockfiles)\n\n  const args = pm === 'npm' ? ['install', entry.npm] : ['add', entry.npm]\n  const spawnFn = deps.spawnPm ?? defaultSpawnPm\n  const result = await spawnFn(pm, args, { cwd: deps.cwd, shell: false })\n\n  if (!result.ok) {\n    throw new Error(`Package manager exited with non-zero exit code ${result.code}`)\n  }\n\n  return {\n    packageInstalled: entry.npm,\n    packageManager: pm,\n    usage: entry.usage,\n    exitCode: 0,\n  }\n}\n\nfunction defaultSpawnPm(\n  cmd: string,\n  args: string[],\n  opts: { cwd: string; shell: boolean },\n): Promise<{ ok: boolean; code: number }> {\n  return new Promise((resolve) => {\n    const proc = spawn(cmd, args, { cwd: opts.cwd, shell: opts.shell, stdio: 'inherit' })\n    proc.on('close', (code) => {\n      resolve({ ok: code === 0, code: code ?? 1 })\n    })\n    proc.on('error', () => {\n      resolve({ ok: false, code: 1 })\n    })\n  })\n}\n\nexport async function addCommand(input: string): Promise<void> {\n  try {\n    const result = await runAdd({ input, cwd: process.cwd() })\n    console.log(`\\n  ✓ Installed ${result.packageInstalled} via ${result.packageManager}\\n`)\n    console.log(`  Next: import { /* ... */ } from '${result.packageInstalled}'\\n`)\n  } catch (err) {\n    console.error(`\\n  ✗ ${(err as Error).message}\\n`)\n    process.exit(1)\n  }\n}\n"],"mappings":";;;;;AAIA,SAAS,aAAa;AACtB,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AAEjB,IAAM,0BAAN,cAAsC,MAAM;AAAA,EACjD,YAAY,OAAe,QAAgB;AACzC,UAAM,yBAAyB,KAAK,MAAM,MAAM,EAAE;AAClD,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,sBAAN,cAAkC,MAAM;AAAA,EAC7C,YAAY,OAAe,YAAqB;AAC9C;AAAA,MACE,aACI,oBAAoB,KAAK,mBAAmB,UAAU,MACtD,oBAAoB,KAAK;AAAA,IAC/B;AACA,SAAK,OAAO;AAAA,EACd;AACF;AAOA,IAAM,qBAAqB;AAEpB,SAAS,qBAAqB,OAAqB;AACxD,MAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG;AACnD,UAAM,IAAI,wBAAwB,OAAO,4BAA4B;AAAA,EACvE;AACA,MAAI,CAAC,mBAAmB,KAAK,KAAK,GAAG;AACnC,UAAM,IAAI,wBAAwB,OAAO,kDAAkD;AAAA,EAC7F;AACA,SAAO;AACT;AAIO,SAAS,qBAAqB,WAAoD;AACvF,MAAI,UAAU,gBAAgB,EAAG,QAAO;AACxC,MAAI,UAAU,WAAW,EAAG,QAAO;AACnC,MAAI,UAAU,WAAW,EAAG,QAAO;AACnC,MAAI,UAAU,mBAAmB,EAAG,QAAO;AAC3C,SAAO;AACT;AAYO,IAAM,iBAAuD;AAAA,EAClE,KAAK;AAAA,IACH,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA,SAAS;AAAA,IACP,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA,cAAc;AAAA,IACZ,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA,QAAQ;AAAA,IACN,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AACF;AAEA,SAAS,YAAY,GAAW,GAAmB;AACjD,QAAM,IAAI,EAAE;AACZ,QAAM,IAAI,EAAE;AACZ,MAAI,MAAM,EAAG,QAAO;AACpB,MAAI,MAAM,EAAG,QAAO;AACpB,QAAM,KAAiB,MAAM;AAAA,IAAK,EAAE,QAAQ,IAAI,EAAE;AAAA,IAAG,MACnD,MAAM,KAAa,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC;AAAA,EAC9C;AACA,WAAS,IAAI,GAAG,KAAK,GAAG,IAAK,IAAG,CAAC,EAAE,CAAC,IAAI;AACxC,WAAS,IAAI,GAAG,KAAK,GAAG,IAAK,IAAG,CAAC,EAAE,CAAC,IAAI;AACxC,WAAS,IAAI,GAAG,KAAK,GAAG,KAAK;AAC3B,aAAS,IAAI,GAAG,KAAK,GAAG,KAAK;AAC3B,YAAM,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,IAAI;AACzC,SAAG,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI;AAAA,IACjF;AAAA,EACF;AACA,SAAO,GAAG,CAAC,EAAE,CAAC;AAChB;AAEA,SAAS,eAAe,OAAe,YAA0C;AAC/E,MAAI,OAA2C;AAC/C,aAAW,KAAK,YAAY;AAC1B,UAAM,IAAI,YAAY,OAAO,CAAC;AAC9B,QAAI,SAAS,QAAQ,IAAI,KAAK,EAAG,QAAO,EAAE,MAAM,GAAG,EAAE;AAAA,EACvD;AACA,MAAI,QAAQ,KAAK,KAAK,EAAG,QAAO,KAAK;AACrC,SAAO;AACT;AAqBA,eAAsB,OAAO,MAAsC;AACjE,uBAAqB,KAAK,KAAK;AAE/B,QAAM,WAAW,KAAK,YAAY;AAClC,MAAI,CAAC,OAAO,OAAO,UAAU,KAAK,KAAK,GAAG;AACxC,UAAM,aAAa,eAAe,KAAK,OAAO,OAAO,KAAK,QAAQ,CAAC;AACnE,UAAM,IAAI,oBAAoB,KAAK,OAAO,UAAU;AAAA,EACtD;AACA,QAAM,QAAQ,SAAS,KAAK,KAAK;AAGjC,MAAI,MAAM,SAAS,WAAW;AAC5B,WAAO;AAAA,MACL,kBAAkB,GAAG,KAAK,KAAK;AAAA,MAC/B,gBAAgB;AAAA,MAChB,OAAO,MAAM;AAAA,MACb,UAAU;AAAA,IACZ;AAAA,EACF;AAEA,MAAI,CAAC,MAAM,KAAK;AACd,UAAM,IAAI,MAAM,qBAAqB,KAAK,KAAK,iCAAiC;AAAA,EAClF;AAEA,QAAM,WAAW,KAAK,eAAe,CAAC,MAAc,WAAW,CAAC;AAChE,QAAM,YAAY;AAAA,IAChB,kBAAkB,SAAS,QAAQ,KAAK,KAAK,gBAAgB,CAAC;AAAA,IAC9D,aAAa,SAAS,QAAQ,KAAK,KAAK,WAAW,CAAC;AAAA,IACpD,aAAa,SAAS,QAAQ,KAAK,KAAK,WAAW,CAAC;AAAA,IACpD,qBAAqB,SAAS,QAAQ,KAAK,KAAK,mBAAmB,CAAC;AAAA,EACtE;AACA,QAAM,KAAK,qBAAqB,SAAS;AAEzC,QAAM,OAAO,OAAO,QAAQ,CAAC,WAAW,MAAM,GAAG,IAAI,CAAC,OAAO,MAAM,GAAG;AACtE,QAAM,UAAU,KAAK,WAAW;AAChC,QAAM,SAAS,MAAM,QAAQ,IAAI,MAAM,EAAE,KAAK,KAAK,KAAK,OAAO,MAAM,CAAC;AAEtE,MAAI,CAAC,OAAO,IAAI;AACd,UAAM,IAAI,MAAM,kDAAkD,OAAO,IAAI,EAAE;AAAA,EACjF;AAEA,SAAO;AAAA,IACL,kBAAkB,MAAM;AAAA,IACxB,gBAAgB;AAAA,IAChB,OAAO,MAAM;AAAA,IACb,UAAU;AAAA,EACZ;AACF;AAEA,SAAS,eACP,KACA,MACA,MACwC;AACxC,SAAO,IAAI,QAAQ,CAACA,aAAY;AAC9B,UAAM,OAAO,MAAM,KAAK,MAAM,EAAE,KAAK,KAAK,KAAK,OAAO,KAAK,OAAO,OAAO,UAAU,CAAC;AACpF,SAAK,GAAG,SAAS,CAAC,SAAS;AACzB,MAAAA,SAAQ,EAAE,IAAI,SAAS,GAAG,MAAM,QAAQ,EAAE,CAAC;AAAA,IAC7C,CAAC;AACD,SAAK,GAAG,SAAS,MAAM;AACrB,MAAAA,SAAQ,EAAE,IAAI,OAAO,MAAM,EAAE,CAAC;AAAA,IAChC,CAAC;AAAA,EACH,CAAC;AACH;AAEA,eAAsB,WAAW,OAA8B;AAC7D,MAAI;AACF,UAAM,SAAS,MAAM,OAAO,EAAE,OAAO,KAAK,QAAQ,IAAI,EAAE,CAAC;AACzD,YAAQ,IAAI;AAAA,qBAAmB,OAAO,gBAAgB,QAAQ,OAAO,cAAc;AAAA,CAAI;AACvF,YAAQ,IAAI,sCAAsC,OAAO,gBAAgB;AAAA,CAAK;AAAA,EAChF,SAAS,KAAK;AACZ,YAAQ,MAAM;AAAA,WAAU,IAAc,OAAO;AAAA,CAAI;AACjD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;","names":["resolve"]}