theokit 0.1.0-alpha.8 → 0.2.1

package/dist/server/index.js

@@ -1,3 +1,8 @@
+import {
+  generateManifest,
+  loadManifest,
+  writeManifest
+} from "../chunk-ERAZNHHR.js";
 import {
   _resetKeyCacheForTests,
   assertProductionSecret,
@@ -28,7 +33,7 @@ import {
   InMemoryUsageStorage,
   trackAgentRun,
   trackAgentTools
-} from "../chunk-MCP6Y5BA.js";
+} from "../chunk-M23FP2AS.js";
 import {
   CRON_MANIFEST_SCHEMA_VERSION,
   DuplicateCronNameError,
@@ -62,6 +67,8 @@ import {
   generateNewTraceContext
 } from "../chunk-YLBSSEHX.js";
 import {
+  ActionError,
+  ActionInputError,
   BATCH_PATH,
   BatchPathConflictError,
   CSP_REPORT_PATH,
@@ -69,6 +76,7 @@ import {
   CSRF_READINESS_RESET_PATH,
   CSRF_WARN_CODE,
   CSRF_WARN_DOCS_URL,
+  CsrfReadinessStore,
   DEFAULT_CSP,
   DEFAULT_PERMISSIONS_POLICY,
   DuplicateDecorationError,
@@ -86,7 +94,6 @@ import {
   _resetWarnOnceForTests,
   applySecurityHeaders,
   buildSecurityHeaders,
-  compilePattern,
   createCorsHandler,
   createLogger,
   createNoOpLogger,
@@ -98,16 +105,18 @@ import {
   executeAction,
   executeRoute,
   extractTraceId,
+  extractUniversalIssues,
   findSuggestion,
   handleBatchRequest,
   handleCspReport,
   handleCsrfReadiness,
+  isActionError,
+  isInputError,
   jsonTransformer,
   levenshtein,
   loadEnv,
   logRequest,
   matchDisallowed,
-  matchRoute,
   matchesOrigin,
   normalizeLegacy,
   normalizeNew,
@@ -117,15 +126,23 @@ import {
   runMiddlewareAndContext,
   safeAudit,
   scanMiddlewares,
-  scanServerActions,
-  scanServerRoutes,
-  scanWebSocketRoutes,
   sendError,
   sendJson,
   superjsonTransformer,
   validateCsrf,
   warnOnce
-} from "../chunk-OEB3OIYP.js";
+} from "../chunk-OJHO2X7C.js";
+import {
+  compilePattern,
+  matchRoute,
+  scanServerRoutes,
+  scanWebSocketRoutes
+} from "../chunk-2BQYEBCK.js";
+import {
+  ActionScanError,
+  scanServerActions,
+  scanServerActionsEnriched
+} from "../chunk-7DHGV77J.js";
 import {
   AuthRequiredError,
   generateNonce,
@@ -138,6 +155,7 @@ import {
   createQueueClient
 } from "../chunk-GY5Q27BJ.js";
 import "../chunk-X2VVCJ4V.js";
+import "../chunk-WSJKACWB.js";
 import {
   __require
 } from "../chunk-DGUM43GV.js";
@@ -399,62 +417,6 @@ function serveStaticFile(req, res, clientDir) {
   return true;
 }
 
-// src/server/scan/manifest.ts
-import { existsSync as existsSync3, readFileSync as readFileSync3, writeFileSync, mkdirSync } from "fs";
-import { join, resolve as resolve3, relative } from "path";
-function generateManifest(serverDir) {
-  const routes = scanServerRoutes(serverDir);
-  const actions = scanServerActions(serverDir);
-  const websockets = scanWebSocketRoutes(serverDir);
-  return {
-    version: 1,
-    generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
-    routes: routes.map((r) => ({
-      filePath: relative(serverDir, r.filePath),
-      routePath: r.routePath,
-      paramNames: r.paramNames
-    })),
-    actions: actions.map((a) => ({
-      filePath: relative(serverDir, a.filePath),
-      actionPath: a.actionPath
-    })),
-    websockets: websockets.map((w) => ({
-      filePath: relative(serverDir, w.filePath),
-      wsPath: w.wsPath
-    }))
-  };
-}
-function writeManifest(manifest, outputDir) {
-  mkdirSync(outputDir, { recursive: true });
-  const manifestPath = join(outputDir, "manifest.json");
-  writeFileSync(manifestPath, JSON.stringify(manifest, null, 2));
-}
-function loadManifest(distDir, serverDir) {
-  const manifestPath = join(distDir, "manifest.json");
-  if (!existsSync3(manifestPath)) {
-    throw new Error(`No manifest found at ${manifestPath}. Run "theo build" first.`);
-  }
-  const raw = JSON.parse(readFileSync3(manifestPath, "utf-8"));
-  const routes = raw.routes.map((r) => {
-    const { pattern, paramNames } = compilePattern(r.routePath);
-    return {
-      filePath: resolve3(serverDir, r.filePath),
-      routePath: r.routePath,
-      paramNames,
-      pattern
-    };
-  });
-  const actions = raw.actions.map((a) => ({
-    filePath: resolve3(serverDir, a.filePath),
-    actionPath: a.actionPath
-  }));
-  const websockets = raw.websockets.map((w) => ({
-    filePath: resolve3(serverDir, w.filePath),
-    wsPath: w.wsPath
-  }));
-  return { routes, actions, websockets };
-}
-
 // src/server/agent/stream-agent-run.ts
 function safeJsonStringify(value) {
   try {
@@ -551,6 +513,53 @@ async function* streamAgentRun(run) {
   }
 }
 
+// src/server/agent/provider-resolver.ts
+var DEFAULT_REGISTRY = [
+  {
+    name: "openrouter",
+    envKey: "OPENROUTER_API_KEY",
+    baseUrl: "https://openrouter.ai/api/v1",
+    priority: 1
+  },
+  {
+    name: "openai",
+    envKey: "OPENAI_API_KEY",
+    baseUrl: "https://api.openai.com/v1",
+    priority: 2
+  },
+  {
+    name: "anthropic",
+    envKey: "ANTHROPIC_API_KEY",
+    baseUrl: "https://api.anthropic.com",
+    priority: 3
+  }
+];
+var registry = [...DEFAULT_REGISTRY];
+function resolveProvider() {
+  const sorted = [...registry].sort((a, b) => a.priority - b.priority);
+  for (const desc of sorted) {
+    const apiKey = process.env[desc.envKey];
+    if (apiKey && apiKey.length > 0) {
+      return {
+        name: desc.name,
+        apiKey,
+        baseUrl: desc.baseUrl
+      };
+    }
+  }
+  const envKeys = sorted.map((p) => p.envKey).join(" OR ");
+  throw new Error(
+    `No LLM provider API key found in environment. Set one of: ${envKeys}. Get a free OpenRouter key at https://openrouter.ai/keys (recommended \u2014 one key, many models).`
+  );
+}
+function tryResolveProvider() {
+  try {
+    return resolveProvider();
+  } catch {
+    return null;
+  }
+}
+
 // src/server/agent/create-conversation-history.ts
 var sdkOverride = void 0;
 function __setSdkForTests(sdk) {
@@ -645,10 +654,29 @@ async function createConversationHistory(args) {
     });
     args.response.headers.append("set-cookie", cookie);
   }
+  const resolvedOptions = autoResolveProviderIfNeeded(args.options);
   const sdk = await loadSdk();
-  const agent = await sdk.Agent.getOrCreate(conversationId, args.options);
+  const agent = await sdk.Agent.getOrCreate(conversationId, resolvedOptions);
   return { agent, conversationId, isNew };
 }
+function autoResolveProviderIfNeeded(options) {
+  if (typeof options.apiKey === "string" && options.apiKey.length > 0) {
+    return options;
+  }
+  const resolved = tryResolveProvider();
+  if (resolved === null) {
+    throw new Error(
+      "No LLM provider API key found in environment. Set OPENROUTER_API_KEY (recommended \u2014 gateway to many models) OR OPENAI_API_KEY OR ANTHROPIC_API_KEY in your .env. Get a free OpenRouter key at https://openrouter.ai/keys. (Pass `options.apiKey` explicitly to bypass auto-resolution.)"
+    );
+  }
+  return {
+    ...options,
+    apiKey: resolved.apiKey,
+    providers: {
+      routes: [{ capability: "chat", provider: resolved.name, baseUrl: resolved.baseUrl }]
+    }
+  };
+}
 
 // src/server/rate-limit/rate-limit-per-route.ts
 import { createHash } from "crypto";
@@ -803,54 +831,6 @@ var ChannelManager = class {
   }
 };
 
-// src/server/security/csrf-readiness-store.ts
-var CsrfReadinessStore = class _CsrfReadinessStore {
-  static MAX_ENTRIES = 1e3;
-  entries = /* @__PURE__ */ new Map();
-  keyFor(event) {
-    return `${event.method}\0${event.path}\0${event.reason}`;
-  }
-  record(event) {
-    const key = this.keyFor(event);
-    const now = (/* @__PURE__ */ new Date()).toISOString();
-    const existing = this.entries.get(key);
-    if (existing) {
-      existing.count++;
-      existing.lastSeen = now;
-      return;
-    }
-    if (this.entries.size >= _CsrfReadinessStore.MAX_ENTRIES) {
-      const firstKey = this.entries.keys().next().value;
-      if (firstKey !== void 0) this.entries.delete(firstKey);
-    }
-    this.entries.set(key, { count: 1, firstSeen: now, lastSeen: now });
-  }
-  summary() {
-    let total = 0;
-    const routes = [];
-    for (const [key, entry] of this.entries) {
-      const [method, path, reason] = key.split("\0");
-      routes.push({
-        method,
-        path,
-        reason,
-        count: entry.count,
-        firstSeen: entry.firstSeen,
-        lastSeen: entry.lastSeen
-      });
-      total += entry.count;
-    }
-    return {
-      generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
-      totalEvents: total,
-      routes
-    };
-  }
-  reset() {
-    this.entries.clear();
-  }
-};
-
 // src/server/storage/storage-manager.ts
 var StorageManager = class {
   #config;
@@ -1621,8 +1601,8 @@ function createCacheEngine(opts) {
   function claimAndRun(key, fn, options, skipWrite) {
     let resolveOuter;
     let rejectOuter;
-    const outerPromise = new Promise((resolve4, reject) => {
-      resolveOuter = resolve4;
+    const outerPromise = new Promise((resolve3, reject) => {
+      resolveOuter = resolve3;
       rejectOuter = reject;
     });
     void outerPromise.catch(() => {
@@ -1965,6 +1945,9 @@ function definePlugin(plugin) {
   return plugin;
 }
 export {
+  ActionError,
+  ActionInputError,
+  ActionScanError,
   AuthRequiredError,
   BATCH_PATH,
   BatchPathConflictError,
@@ -2070,6 +2053,7 @@ export {
   executeAction,
   executeRoute,
   extractTraceId,
+  extractUniversalIssues,
   findSuggestion,
   generateBackupCodes,
   generateManifest,
@@ -2086,6 +2070,8 @@ export {
   handleCspReport,
   handleCsrfReadiness,
   initCacheEngine,
+  isActionError,
+  isInputError,
   jsonTransformer,
   levenshtein,
   loadCustomErrorPages,
@@ -2116,6 +2102,7 @@ export {
   scanJobs,
   scanMiddlewares,
   scanServerActions,
+  scanServerActionsEnriched,
   scanServerRoutes,
   scanWebSocketRoutes,
   sendError,