theokit 0.12.1 → 0.14.0

package/dist/chunk-PIVX3DYW.js

@@ -1,142 +0,0 @@
-// src/config/load-env.ts
-import { lstatSync, readFileSync, realpathSync, statSync } from "fs";
-import { resolve } from "path";
-import dotenv from "dotenv";
-import { expand } from "dotenv-expand";
-var MAX_ENV_FILE_BYTES = 1048576;
-var cache = /* @__PURE__ */ new Map();
-function _resetEnvCache() {
-  cache.clear();
-}
-function envFilesInPriorityOrder(mode) {
-  const files = [`.env.${mode}.local`, `.env.local`, `.env.${mode}`, `.env`];
-  if (mode === "test") {
-    return files.filter((f) => f !== ".env.local");
-  }
-  return files;
-}
-function readEnvFile(path) {
-  let stat;
-  try {
-    stat = statSync(path);
-  } catch {
-    return null;
-  }
-  if (!stat.isFile() && !stat.isFIFO()) return null;
-  if (stat.size > MAX_ENV_FILE_BYTES) {
-    console.warn(
-      `[theokit] .env file at ${path} exceeds ${MAX_ENV_FILE_BYTES} bytes \u2014 skipping (likely a generated artifact, not a real env file)`
-    );
-    return null;
-  }
-  try {
-    const lstat = lstatSync(path);
-    if (lstat.isSymbolicLink()) {
-      const real = realpathSync(path);
-      console.info(`[theokit] .env at ${path} is a symlink \u2192 ${real}`);
-    }
-  } catch {
-  }
-  try {
-    const content = readFileSync(path, "utf-8");
-    return dotenv.parse(content);
-  } catch {
-    return null;
-  }
-}
-function loadEnv(options = {}) {
-  const cwd = options.cwd ?? process.cwd();
-  const mode = options.mode ?? process.env.NODE_ENV ?? "development";
-  const cacheKey = `${cwd}:${mode}`;
-  if (!options.forceReload) {
-    const cached = cache.get(cacheKey);
-    if (cached) return cached;
-  }
-  const fileNames = envFilesInPriorityOrder(mode);
-  const filePaths = fileNames.map((f) => resolve(cwd, f));
-  const merged = {};
-  const loadedFromFiles = [];
-  for (const path of [...filePaths].reverse()) {
-    const parsed = readEnvFile(path);
-    if (parsed === null) continue;
-    for (const [k, v] of Object.entries(parsed)) {
-      merged[k] = v;
-    }
-    loadedFromFiles.unshift(path);
-  }
-  if (merged.NODE_ENV && process.env.__THEOKIT_USER_NODE_ENV === void 0) {
-    process.env.__THEOKIT_USER_NODE_ENV = merged.NODE_ENV;
-  }
-  delete merged.NODE_ENV;
-  const processEnvClone = {};
-  for (const [k, v] of Object.entries(process.env)) {
-    if (typeof v === "string") processEnvClone[k] = v;
-  }
-  try {
-    expand({ parsed: merged, processEnv: processEnvClone });
-  } catch (err) {
-    if (err instanceof RangeError) {
-      console.warn(
-        `[theokit] .env expansion overflow (likely circular reference like A=\${B}, B=\${A}). Leaving values as literals.`
-      );
-    } else {
-      throw err;
-    }
-  }
-  const loaded = {};
-  for (const [k, v] of Object.entries(merged)) {
-    if (process.env[k] !== void 0) continue;
-    process.env[k] = v;
-    loaded[k] = v;
-  }
-  process.env.__THEOKIT_PROCESSED_ENV = "true";
-  const result = { loaded, loadedFromFiles };
-  cache.set(cacheKey, result);
-  return result;
-}
-
-// src/server/transformer.ts
-import superjson from "superjson";
-var superjsonTransformer = {
-  name: "superjson",
-  serialize: (v) => JSON.stringify(superjson.serialize(v)),
-  deserialize: (raw) => {
-    const parsed = JSON.parse(raw);
-    return superjson.deserialize(parsed);
-  }
-};
-var jsonTransformer = {
-  name: "json",
-  serialize: (v) => JSON.stringify(v),
-  deserialize: (raw) => JSON.parse(raw)
-};
-var BUILT_INS = {
-  superjson: superjsonTransformer,
-  json: jsonTransformer
-};
-function resolveTransformer(selector) {
-  if (typeof selector === "string") {
-    const built = BUILT_INS[selector];
-    if (built === void 0) {
-      throw new Error(
-        `Unknown transformer "${selector}". Built-in options: ${Object.keys(BUILT_INS).join(", ")}.`
-      );
-    }
-    return built;
-  }
-  if (typeof selector !== "object" || typeof selector.serialize !== "function" || typeof selector.deserialize !== "function") {
-    throw new Error(
-      `Custom transformer must have serialize and deserialize functions. Got: ${JSON.stringify(selector)}`
-    );
-  }
-  return selector;
-}
-
-export {
-  _resetEnvCache,
-  loadEnv,
-  superjsonTransformer,
-  jsonTransformer,
-  resolveTransformer
-};
-//# sourceMappingURL=chunk-PIVX3DYW.js.map

package/dist/chunk-PIVX3DYW.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/config/load-env.ts","../src/server/transformer.ts"],"sourcesContent":["/* eslint-disable security/detect-non-literal-fs-filename --\n * Reads `.env` files from a CLI-controlled `cwd`. File names are a fixed\n * literal set. Build-time + CLI tool; no HTTP input.\n */\n/**\n * `loadEnv()` — auto-loads `.env` files into `process.env` for server code.\n *\n * Implements the Next.js `loadEnvConfig` algorithm\n * (`referencias/next.js/packages/next-env/index.ts:114-180`) with TheoKit\n * adaptations:\n *\n * - EC-1: 1MB file-size cap (anti-OOM, anti-supply-chain).\n * - EC-2: `_resetEnvCache()` test-only side-door.\n * - EC-8: `dotenv-expand` circular-ref safe (lib-provided).\n * - EC-13: log when `.env` is a symlink (transparency).\n * - D6: real `process.env` wins over `.env`-file values.\n * - NODE_ENV stash: `.env`-set NODE_ENV NEVER overrides the real\n *   `process.env.NODE_ENV`. Stashed in `__THEOKIT_USER_NODE_ENV` instead.\n */\n\nimport { lstatSync, readFileSync, realpathSync, statSync } from 'node:fs'\nimport { resolve } from 'node:path'\n\nimport dotenv from 'dotenv'\nimport { expand, type DotenvPopulateInput } from 'dotenv-expand'\n\nimport type { LoadEnvOptions, LoadEnvResult } from './load-env-types.js'\n\n/** EC-1: 1MB cap. Real `.env`s are < 10KB. */\nconst MAX_ENV_FILE_BYTES = 1_048_576\n\nconst cache = new Map<string, LoadEnvResult>()\n\n/** Test-only side-door for EC-2 — clear the module-level cache between vitest test files. */\nexport function _resetEnvCache(): void {\n  cache.clear()\n}\n\nfunction envFilesInPriorityOrder(mode: string): string[] {\n  // Top of list = highest priority. Will be read in REVERSE so first-in\n  // wins via overwrite during merge.\n  const files = [`.env.${mode}.local`, `.env.local`, `.env.${mode}`, `.env`]\n  // Test mode skips `.env.local` per dotenv convention (avoid leaking dev\n  // secrets into the test suite).\n  if (mode === 'test') {\n    return files.filter((f) => f !== '.env.local')\n  }\n  return files\n}\n\nfunction readEnvFile(path: string): Record<string, string> | null {\n  let stat\n  try {\n    stat = statSync(path)\n  } catch {\n    return null // ENOENT / EACCES → skip\n  }\n\n  // Allow files + FIFOs (1Password/SOPS pipe support).\n  if (!stat.isFile() && !stat.isFIFO()) return null\n\n  // EC-1 — anti-OOM cap.\n  if (stat.size > MAX_ENV_FILE_BYTES) {\n    console.warn(\n      `[theokit] .env file at ${path} exceeds ${MAX_ENV_FILE_BYTES} bytes — skipping (likely a generated artifact, not a real env file)`,\n    )\n    return null\n  }\n\n  // EC-13 — symlink transparency. Don't refuse; just log.\n  try {\n    const lstat = lstatSync(path)\n    if (lstat.isSymbolicLink()) {\n      const real = realpathSync(path)\n      // eslint-disable-next-line no-console -- intentional transparency log on a build-time tool\n      console.info(`[theokit] .env at ${path} is a symlink → ${real}`)\n    }\n  } catch {\n    // lstat failure is non-fatal — fall through to read.\n  }\n\n  try {\n    const content = readFileSync(path, 'utf-8')\n    return dotenv.parse(content)\n  } catch {\n    return null\n  }\n}\n\n// eslint-disable-next-line complexity -- canonical env-load algorithm (priority → expand → guards → apply); inlining branches is clearer than extracting micro-helpers\nexport function loadEnv(options: LoadEnvOptions = {}): LoadEnvResult {\n  const cwd = options.cwd ?? process.cwd()\n  const mode = options.mode ?? process.env.NODE_ENV ?? 'development'\n  const cacheKey = `${cwd}:${mode}`\n\n  if (!options.forceReload) {\n    const cached = cache.get(cacheKey)\n    if (cached) return cached\n  }\n\n  const fileNames = envFilesInPriorityOrder(mode)\n  const filePaths = fileNames.map((f) => resolve(cwd, f))\n\n  // Read in REVERSE — lower-priority files first, so higher-priority\n  // (lower-index) overwrites during merge.\n  const merged: Record<string, string> = {}\n  const loadedFromFiles: string[] = []\n  for (const path of [...filePaths].reverse()) {\n    const parsed = readEnvFile(path)\n    if (parsed === null) continue\n    for (const [k, v] of Object.entries(parsed)) {\n      merged[k] = v\n    }\n    loadedFromFiles.unshift(path) // keep priority order in result\n  }\n\n  // NODE_ENV stash — `.env`-set NODE_ENV never overrides real process.env.NODE_ENV.\n  if (merged.NODE_ENV && process.env.__THEOKIT_USER_NODE_ENV === undefined) {\n    process.env.__THEOKIT_USER_NODE_ENV = merged.NODE_ENV\n  }\n  delete merged.NODE_ENV // never propagate\n\n  // EC-8 — dotenv-expand@11 stack-overflows on circular refs (A=${B}, B=${A}).\n  // Wrap in try/catch — on overflow, leave the parsed map untouched (literal\n  // values survive). Tested via test_loadEnv_circular_expand_no_loop_EC8.\n  // Pass a CLONE of process.env (string-only, filtered) so expand can\n  // reference real env without mutating it.\n  const processEnvClone: DotenvPopulateInput = {}\n  for (const [k, v] of Object.entries(process.env)) {\n    if (typeof v === 'string') processEnvClone[k] = v\n  }\n  try {\n    expand({ parsed: merged, processEnv: processEnvClone })\n  } catch (err) {\n    if (err instanceof RangeError) {\n      console.warn(\n        `[theokit] .env expansion overflow (likely circular reference like A=\\${B}, B=\\${A}). Leaving values as literals.`,\n      )\n    } else {\n      throw err\n    }\n  }\n\n  // Apply: D6 — real process.env wins over file values.\n  const loaded: Record<string, string> = {}\n  for (const [k, v] of Object.entries(merged)) {\n    if (process.env[k] !== undefined) continue // real env wins\n    process.env[k] = v\n    loaded[k] = v\n  }\n\n  // Sentinel\n  process.env.__THEOKIT_PROCESSED_ENV = 'true'\n\n  const result: LoadEnvResult = { loaded, loadedFromFiles }\n  cache.set(cacheKey, result)\n  return result\n}\n","import superjson from 'superjson'\n\n/**\n * T5.2 — pluggable response/request transformer.\n *\n * `superjson` is the default, preserving Date/Map/Set/BigInt/etc.\n * `json` is the lightweight option (plain JSON.stringify/parse).\n * Users can supply a custom object implementing this contract.\n */\nexport interface TheoTransformer {\n  name: string\n  serialize: (value: unknown) => string\n  deserialize: (raw: string) => unknown\n}\n\nexport const superjsonTransformer: TheoTransformer = {\n  name: 'superjson',\n  serialize: (v) => JSON.stringify(superjson.serialize(v)),\n  deserialize: (raw) => {\n    const parsed = JSON.parse(raw) as Parameters<typeof superjson.deserialize>[0]\n    return superjson.deserialize(parsed)\n  },\n}\n\nexport const jsonTransformer: TheoTransformer = {\n  name: 'json',\n  serialize: (v) => JSON.stringify(v),\n  deserialize: (raw) => JSON.parse(raw) as unknown,\n}\n\nconst BUILT_INS: Record<string, TheoTransformer> = {\n  superjson: superjsonTransformer,\n  json: jsonTransformer,\n}\n\nexport function resolveTransformer(\n  selector: 'json' | 'superjson' | TheoTransformer,\n): TheoTransformer {\n  if (typeof selector === 'string') {\n    // selector is 'json' | 'superjson' literal — both keys exist in\n    // BUILT_INS by construction. Type system guarantees a hit; we keep\n    // a defensive fallback that the compiler cannot see is unreachable\n    // at runtime, just in case someone adds a new literal to the union\n    // but forgets to register the built-in.\n    const built = BUILT_INS[selector]\n    // Defensive: the public union ensures `built` is defined, but if a\n    // future contributor extends the union without registering the impl,\n    // the cast keeps the failure mode loud.\n    if ((built as TheoTransformer | undefined) === undefined) {\n      throw new Error(\n        `Unknown transformer \"${selector}\". Built-in options: ${Object.keys(BUILT_INS).join(', ')}.`,\n      )\n    }\n    return built\n  }\n  if (\n    typeof selector !== 'object' ||\n    typeof selector.serialize !== 'function' ||\n    typeof selector.deserialize !== 'function'\n  ) {\n    throw new Error(\n      `Custom transformer must have serialize and deserialize functions. Got: ${JSON.stringify(selector)}`,\n    )\n  }\n  return selector\n}\n"],"mappings":";AAoBA,SAAS,WAAW,cAAc,cAAc,gBAAgB;AAChE,SAAS,eAAe;AAExB,OAAO,YAAY;AACnB,SAAS,cAAwC;AAKjD,IAAM,qBAAqB;AAE3B,IAAM,QAAQ,oBAAI,IAA2B;AAGtC,SAAS,iBAAuB;AACrC,QAAM,MAAM;AACd;AAEA,SAAS,wBAAwB,MAAwB;AAGvD,QAAM,QAAQ,CAAC,QAAQ,IAAI,UAAU,cAAc,QAAQ,IAAI,IAAI,MAAM;AAGzE,MAAI,SAAS,QAAQ;AACnB,WAAO,MAAM,OAAO,CAAC,MAAM,MAAM,YAAY;AAAA,EAC/C;AACA,SAAO;AACT;AAEA,SAAS,YAAY,MAA6C;AAChE,MAAI;AACJ,MAAI;AACF,WAAO,SAAS,IAAI;AAAA,EACtB,QAAQ;AACN,WAAO;AAAA,EACT;AAGA,MAAI,CAAC,KAAK,OAAO,KAAK,CAAC,KAAK,OAAO,EAAG,QAAO;AAG7C,MAAI,KAAK,OAAO,oBAAoB;AAClC,YAAQ;AAAA,MACN,0BAA0B,IAAI,YAAY,kBAAkB;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAGA,MAAI;AACF,UAAM,QAAQ,UAAU,IAAI;AAC5B,QAAI,MAAM,eAAe,GAAG;AAC1B,YAAM,OAAO,aAAa,IAAI;AAE9B,cAAQ,KAAK,qBAAqB,IAAI,wBAAmB,IAAI,EAAE;AAAA,IACjE;AAAA,EACF,QAAQ;AAAA,EAER;AAEA,MAAI;AACF,UAAM,UAAU,aAAa,MAAM,OAAO;AAC1C,WAAO,OAAO,MAAM,OAAO;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,QAAQ,UAA0B,CAAC,GAAkB;AACnE,QAAM,MAAM,QAAQ,OAAO,QAAQ,IAAI;AACvC,QAAM,OAAO,QAAQ,QAAQ,QAAQ,IAAI,YAAY;AACrD,QAAM,WAAW,GAAG,GAAG,IAAI,IAAI;AAE/B,MAAI,CAAC,QAAQ,aAAa;AACxB,UAAM,SAAS,MAAM,IAAI,QAAQ;AACjC,QAAI,OAAQ,QAAO;AAAA,EACrB;AAEA,QAAM,YAAY,wBAAwB,IAAI;AAC9C,QAAM,YAAY,UAAU,IAAI,CAAC,MAAM,QAAQ,KAAK,CAAC,CAAC;AAItD,QAAM,SAAiC,CAAC;AACxC,QAAM,kBAA4B,CAAC;AACnC,aAAW,QAAQ,CAAC,GAAG,SAAS,EAAE,QAAQ,GAAG;AAC3C,UAAM,SAAS,YAAY,IAAI;AAC/B,QAAI,WAAW,KAAM;AACrB,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC3C,aAAO,CAAC,IAAI;AAAA,IACd;AACA,oBAAgB,QAAQ,IAAI;AAAA,EAC9B;AAGA,MAAI,OAAO,YAAY,QAAQ,IAAI,4BAA4B,QAAW;AACxE,YAAQ,IAAI,0BAA0B,OAAO;AAAA,EAC/C;AACA,SAAO,OAAO;AAOd,QAAM,kBAAuC,CAAC;AAC9C,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,QAAQ,GAAG,GAAG;AAChD,QAAI,OAAO,MAAM,SAAU,iBAAgB,CAAC,IAAI;AAAA,EAClD;AACA,MAAI;AACF,WAAO,EAAE,QAAQ,QAAQ,YAAY,gBAAgB,CAAC;AAAA,EACxD,SAAS,KAAK;AACZ,QAAI,eAAe,YAAY;AAC7B,cAAQ;AAAA,QACN;AAAA,MACF;AAAA,IACF,OAAO;AACL,YAAM;AAAA,IACR;AAAA,EACF;AAGA,QAAM,SAAiC,CAAC;AACxC,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC3C,QAAI,QAAQ,IAAI,CAAC,MAAM,OAAW;AAClC,YAAQ,IAAI,CAAC,IAAI;AACjB,WAAO,CAAC,IAAI;AAAA,EACd;AAGA,UAAQ,IAAI,0BAA0B;AAEtC,QAAM,SAAwB,EAAE,QAAQ,gBAAgB;AACxD,QAAM,IAAI,UAAU,MAAM;AAC1B,SAAO;AACT;;;AC7JA,OAAO,eAAe;AAef,IAAM,uBAAwC;AAAA,EACnD,MAAM;AAAA,EACN,WAAW,CAAC,MAAM,KAAK,UAAU,UAAU,UAAU,CAAC,CAAC;AAAA,EACvD,aAAa,CAAC,QAAQ;AACpB,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,WAAO,UAAU,YAAY,MAAM;AAAA,EACrC;AACF;AAEO,IAAM,kBAAmC;AAAA,EAC9C,MAAM;AAAA,EACN,WAAW,CAAC,MAAM,KAAK,UAAU,CAAC;AAAA,EAClC,aAAa,CAAC,QAAQ,KAAK,MAAM,GAAG;AACtC;AAEA,IAAM,YAA6C;AAAA,EACjD,WAAW;AAAA,EACX,MAAM;AACR;AAEO,SAAS,mBACd,UACiB;AACjB,MAAI,OAAO,aAAa,UAAU;AAMhC,UAAM,QAAQ,UAAU,QAAQ;AAIhC,QAAK,UAA0C,QAAW;AACxD,YAAM,IAAI;AAAA,QACR,wBAAwB,QAAQ,wBAAwB,OAAO,KAAK,SAAS,EAAE,KAAK,IAAI,CAAC;AAAA,MAC3F;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACA,MACE,OAAO,aAAa,YACpB,OAAO,SAAS,cAAc,cAC9B,OAAO,SAAS,gBAAgB,YAChC;AACA,UAAM,IAAI;AAAA,MACR,0EAA0E,KAAK,UAAU,QAAQ,CAAC;AAAA,IACpG;AAAA,EACF;AACA,SAAO;AACT;","names":[]}

package/dist/chunk-PPPR5DGR.js

@@ -1 +0,0 @@
-//# sourceMappingURL=chunk-PPPR5DGR.js.map

package/dist/chunk-RESN62GB.js

@@ -1,269 +0,0 @@
-// src/server/agent/stream-agent-run.ts
-function safeJsonStringify(value) {
-  try {
-    return JSON.stringify(value);
-  } catch {
-    return "[Unserializable]";
-  }
-}
-function safeArgs(args) {
-  if (typeof args === "object" && args !== null && !Array.isArray(args)) {
-    return args;
-  }
-  return {};
-}
-function isAssistant(msg) {
-  const m = msg;
-  return m.type === "assistant" && m.message != null && typeof m.message === "object" && Array.isArray(m.message.content);
-}
-function isToolCall(msg) {
-  const t = msg;
-  return t.type === "tool_call" && typeof t.name === "string" && typeof t.call_id === "string" && (t.status === "running" || t.status === "completed" || t.status === "error");
-}
-function isAgentRunError(err) {
-  if (!(err instanceof Error)) return false;
-  const e = err;
-  return "code" in e && typeof e.code === "string";
-}
-function errorToEvent(err, id) {
-  if (isAgentRunError(err)) {
-    const event2 = {
-      type: "error",
-      message: err.message,
-      code: err.code
-    };
-    if (err.provider !== void 0) event2.provider = err.provider;
-    if (err.retriable !== void 0) event2.retriable = err.retriable;
-    if (err.retryAfterMs !== void 0) event2.retryAfterMs = err.retryAfterMs;
-    if (id !== void 0) event2.id = id;
-    return event2;
-  }
-  let message;
-  if (err instanceof Error) {
-    message = err.message;
-  } else if (typeof err === "string") {
-    message = err;
-  } else if (err !== null && typeof err === "object" && "message" in err) {
-    const candidate = err.message;
-    message = typeof candidate === "string" ? candidate : "[object Object]";
-  } else if (err === null || err === void 0) {
-    message = String(err);
-  } else {
-    message = "[non-stringifiable error]";
-  }
-  const event = { type: "error", message };
-  if (id !== void 0) event.id = id;
-  return event;
-}
-function yieldFromToolCall(msg) {
-  if (msg.status === "running") {
-    return {
-      type: "tool_call",
-      name: msg.name,
-      args: safeArgs(msg.args),
-      id: msg.call_id
-    };
-  }
-  if (msg.status === "completed") {
-    const data = typeof msg.result === "string" ? msg.result : safeJsonStringify(msg.result);
-    return {
-      type: "tool_result",
-      name: msg.name,
-      data,
-      id: msg.call_id
-    };
-  }
-  const message = typeof msg.result === "string" ? msg.result : `Tool ${msg.name} failed`;
-  return { type: "error", message, id: msg.call_id };
-}
-async function* streamAgentRun(run) {
-  for await (const msg of run.stream()) {
-    if (isAssistant(msg)) {
-      for (const block of msg.message.content) {
-        if (block.type === "text" && typeof block.text === "string" && block.text.length > 0) {
-          yield { type: "message", content: block.text };
-        }
-      }
-    } else if (isToolCall(msg)) {
-      yield yieldFromToolCall(msg);
-    }
-  }
-  const result = await run.wait();
-  if (result.status === "error" && result.error !== void 0) {
-    yield errorToEvent(result.error);
-  }
-}
-
-// src/server/agent/provider-resolver.ts
-var DEFAULT_REGISTRY = [
-  {
-    name: "openrouter",
-    envKey: "OPENROUTER_API_KEY",
-    baseUrl: "https://openrouter.ai/api/v1",
-    priority: 1
-  },
-  {
-    name: "openai",
-    envKey: "OPENAI_API_KEY",
-    baseUrl: "https://api.openai.com/v1",
-    priority: 2
-  },
-  {
-    name: "anthropic",
-    envKey: "ANTHROPIC_API_KEY",
-    baseUrl: "https://api.anthropic.com",
-    priority: 3
-  }
-];
-var registry = [...DEFAULT_REGISTRY];
-function resolveProvider() {
-  const sorted = [...registry].sort((a, b) => a.priority - b.priority);
-  for (const desc of sorted) {
-    const apiKey = process.env[desc.envKey];
-    if (apiKey && apiKey.length > 0) {
-      return {
-        name: desc.name,
-        apiKey,
-        baseUrl: desc.baseUrl
-      };
-    }
-  }
-  const envKeys = sorted.map((p) => p.envKey).join(" OR ");
-  throw new Error(
-    `No LLM provider API key found in environment. Set one of: ${envKeys}. Get a free OpenRouter key at https://openrouter.ai/keys (recommended \u2014 one key, many models).`
-  );
-}
-function tryResolveProvider() {
-  try {
-    return resolveProvider();
-  } catch {
-    return null;
-  }
-}
-
-// src/server/agent/create-conversation-history.ts
-var sdkOverride = void 0;
-function __setSdkForTests(sdk) {
-  sdkOverride = sdk;
-}
-function __resetSdkForTests() {
-  sdkOverride = void 0;
-}
-async function loadSdk() {
-  if (sdkOverride === null) {
-    throw new Error(
-      "createConversationHistory requires @theokit/sdk. Install: pnpm add @theokit/sdk"
-    );
-  }
-  if (sdkOverride !== void 0) return sdkOverride;
-  try {
-    const { createRequire } = await import("module");
-    const requireFn = createRequire(import.meta.url);
-    const spec = "@theokit/sdk";
-    const mod = requireFn(spec);
-    return mod;
-  } catch (cause) {
-    throw new Error(
-      "createConversationHistory requires @theokit/sdk. Install: pnpm add @theokit/sdk",
-      { cause }
-    );
-  }
-}
-var DEFAULT_COOKIE_NAME = "theo_conversation";
-var DEFAULT_COOKIE_MAX_AGE = 60 * 60 * 24 * 30;
-var AGENT_ID_REGEX = /^[a-zA-Z0-9_-]{1,128}$/;
-function isValidAgentId(s) {
-  return typeof s === "string" && AGENT_ID_REGEX.test(s);
-}
-function readCookieValue(request, name) {
-  let raw;
-  const h = request.headers;
-  if (h === void 0) return void 0;
-  if (typeof h.get === "function") {
-    raw = h.get("cookie") ?? void 0;
-  } else {
-    raw = h.cookie;
-  }
-  if (raw === void 0 || raw.length === 0) return void 0;
-  const pairs = raw.split(/[;,]/);
-  for (const pair of pairs) {
-    const eq = pair.indexOf("=");
-    if (eq < 0) continue;
-    const k = pair.slice(0, eq).trim();
-    if (k === name) return pair.slice(eq + 1).trim();
-  }
-  return void 0;
-}
-function serializeCookie(name, value, options) {
-  const parts = [`${name}=${value}`];
-  if (options.path !== void 0) parts.push(`Path=${options.path}`);
-  if (options.maxAge !== void 0) parts.push(`Max-Age=${options.maxAge}`);
-  if (options.sameSite !== void 0) {
-    const v = options.sameSite.charAt(0).toUpperCase() + options.sameSite.slice(1);
-    parts.push(`SameSite=${v}`);
-  }
-  if (options.httpOnly === true) parts.push("HttpOnly");
-  return parts.join("; ");
-}
-async function createConversationHistory(args) {
-  const cookieName = args.cookieName ?? DEFAULT_COOKIE_NAME;
-  const rawMaxAge = args.cookieMaxAge;
-  const cookieMaxAge = typeof rawMaxAge === "number" && rawMaxAge > 0 ? rawMaxAge : DEFAULT_COOKIE_MAX_AGE;
-  let conversationId;
-  let isNew = false;
-  const cookieOnRequest = readCookieValue(args.request, cookieName);
-  if (isValidAgentId(args.agentId)) {
-    conversationId = args.agentId;
-  } else if (args.session !== null && args.session !== void 0) {
-    const sId = args.session.conversationId;
-    if (isValidAgentId(sId)) conversationId = sId;
-  }
-  if (conversationId === void 0 && isValidAgentId(cookieOnRequest)) {
-    conversationId = cookieOnRequest;
-  }
-  if (conversationId === void 0) {
-    conversationId = crypto.randomUUID();
-    isNew = true;
-  }
-  const shouldIssueCookie = isNew || cookieOnRequest !== conversationId;
-  if (shouldIssueCookie && args.response !== void 0) {
-    const cookie = serializeCookie(cookieName, conversationId, {
-      httpOnly: true,
-      sameSite: "lax",
-      maxAge: cookieMaxAge,
-      path: "/"
-    });
-    args.response.headers.append("set-cookie", cookie);
-  }
-  const resolvedOptions = autoResolveProviderIfNeeded(args.options);
-  const sdk = await loadSdk();
-  const agent = await sdk.Agent.getOrCreate(conversationId, resolvedOptions);
-  return { agent, conversationId, isNew };
-}
-function autoResolveProviderIfNeeded(options) {
-  if (typeof options.apiKey === "string" && options.apiKey.length > 0) {
-    return options;
-  }
-  const resolved = tryResolveProvider();
-  if (resolved === null) {
-    throw new Error(
-      "No LLM provider API key found in environment. Set OPENROUTER_API_KEY (recommended \u2014 gateway to many models) OR OPENAI_API_KEY OR ANTHROPIC_API_KEY in your .env. Get a free OpenRouter key at https://openrouter.ai/keys. (Pass `options.apiKey` explicitly to bypass auto-resolution.)"
-    );
-  }
-  return {
-    ...options,
-    apiKey: resolved.apiKey,
-    providers: {
-      routes: [{ capability: "chat", provider: resolved.name, baseUrl: resolved.baseUrl }]
-    }
-  };
-}
-
-export {
-  errorToEvent,
-  streamAgentRun,
-  __setSdkForTests,
-  __resetSdkForTests,
-  createConversationHistory
-};
-//# sourceMappingURL=chunk-RESN62GB.js.map

package/dist/chunk-RESN62GB.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/server/agent/stream-agent-run.ts","../src/server/agent/provider-resolver.ts","../src/server/agent/create-conversation-history.ts"],"sourcesContent":["import type { AgentEvent, AgentErrorEvent } from './agent-types.js'\n\n/**\n * Item #4 — `streamAgentRun`\n *\n * Adapter that consumes the `@theokit/sdk` `Run.stream()` async generator\n * (SDKMessage variants) and yields TheoKit `AgentEvent`s suitable for SSE\n * via `defineAgentEndpoint`. One line at the consumer side:\n *\n *   ```ts\n *   const run = await agent.send(message)\n *   yield* streamAgentRun(run)\n *   ```\n *\n * Mapping table (SDK → AgentEvent):\n *\n * | SDK message                          | AgentEvent yielded                     |\n * |---|---|\n * | assistant.content[].type==='text'    | { type: 'message', content }           |\n * | assistant.content[].type==='tool_use'| (none — covered by tool_call below)    |\n * | tool_call(status='running')          | { type: 'tool_call', name, args, id }  |\n * | tool_call(status='completed')        | { type: 'tool_result', name, data, id }|\n * | tool_call(status='error')            | { type: 'error', message, id }         |\n * | run.wait() status==='error'          | { type: 'error', message }             |\n * | run.wait() status==='cancelled'      | (none — cancel ≠ error)                |\n * | system / user / thinking / status /  | (none — internal SDK telemetry)        |\n * |   task / request / object_delta      |                                        |\n *\n * Abort semantics: when the consumer calls `generator.return()` on the\n * outer `defineAgentEndpoint` generator, `streamAgentRun` exits the\n * `for await` loop and does NOT call `run.wait()`. Cleanup of in-flight\n * SDK resources is the SDK consumer's responsibility (`run.cancel()`).\n */\n\n/**\n * Local mirror of the SDK's `Run` interface — only the surfaces we consume.\n * The message contract is minimal (just `{ type: string }`) so the SDK's\n * `SDKMessage` discriminated union IS structurally assignable without any\n * cast at the consumer site (covariant — TS accepts the SDK's typed message\n * as the wider `{ type: string }`). Property access inside `streamAgentRun`\n * narrows via runtime type guards.\n *\n * `import type` from `@theokit/sdk` would couple TheoKit to the SDK at type-\n * resolution time even for consumers who never use the agent surface.\n */\nexport interface AgentRunLike {\n  stream: () => AsyncIterable<{ type: string }>\n  wait: () => Promise<AgentRunResult>\n}\n\n/**\n * Re-exported as a convenience for test fixtures. Production code typically\n * passes an SDK `Run` directly (structural match via `{ type: string }`).\n */\nexport type AgentRunStreamMessage =\n  | {\n      type: 'assistant'\n      message: { role: 'assistant'; content: { type: string; text?: string }[] }\n    }\n  | {\n      type: 'tool_call'\n      name: string\n      status: 'running' | 'completed' | 'error'\n      args?: unknown\n      result?: unknown\n      call_id: string\n    }\n  | { type: string; [k: string]: unknown }\n\n/** Subset of the SDK `RunResult` we consume. */\nexport interface AgentRunResult {\n  status: 'finished' | 'error' | 'cancelled'\n  error?: { message: string; code?: string; cause?: unknown }\n}\n\n/**\n * EC-1 (edge case review): tool result may be a Date, bigint, circular ref,\n * etc. `JSON.stringify` in `encodeSSE` would throw — uncaught inside the\n * outer generator — and `defineAgentEndpoint` would replace the legitimate\n * `tool_result` with a generic `error`. Coerce here so the wire stays honest.\n */\nfunction safeJsonStringify(value: unknown): string {\n  try {\n    return JSON.stringify(value)\n  } catch {\n    return '[Unserializable]'\n  }\n}\n\n/**\n * EC-3 (edge case review): SDK types `args?: unknown`. A raw `as` cast hides\n * the possibility that `msg.args` is an array, primitive, or `null` (null\n * survives `??`). Type-guard BEFORE narrowing to `Record<string, unknown>`.\n */\nfunction safeArgs(args: unknown): Record<string, unknown> {\n  if (typeof args === 'object' && args !== null && !Array.isArray(args)) {\n    return args as Record<string, unknown>\n  }\n  return {}\n}\n\n/**\n * Yield AgentEvents derived from the SDK Run lifecycle.\n *\n * Consumer pattern:\n *\n *   ```ts\n *   export const POST = defineAgentEndpoint({\n *     async *handler({ body }) {\n *       const agent = await Agent.create({ apiKey, model, tools: [...] })\n *       try {\n *         const run = await agent.send(body.message)\n *         yield* streamAgentRun(run)\n *       } finally {\n *         try { await agent.dispose() } catch (e) { console.warn(e) }\n *       }\n *     },\n *   })\n *   ```\n *\n * @public\n */\ninterface AssistantLike {\n  type: 'assistant'\n  message: { role: 'assistant'; content: { type: string; text?: string }[] }\n}\ninterface ToolCallLike {\n  type: 'tool_call'\n  name: string\n  status: 'running' | 'completed' | 'error'\n  args?: unknown\n  result?: unknown\n  call_id: string\n}\n\nfunction isAssistant(msg: { type: string }): msg is AssistantLike {\n  // Wide cast to `unknown` first so runtime null guard survives ESLint\n  // narrowing complaints — the SDK contract permits `null` even when its\n  // TS type does not.\n  const m = msg as unknown as {\n    type: string\n    message?: { content?: unknown } | null\n  }\n  return (\n    m.type === 'assistant' &&\n    m.message != null &&\n    typeof m.message === 'object' &&\n    Array.isArray(m.message.content)\n  )\n}\nfunction isToolCall(msg: { type: string }): msg is ToolCallLike {\n  const t = msg as unknown as {\n    type: string\n    name?: unknown\n    status?: unknown\n    call_id?: unknown\n  }\n  return (\n    t.type === 'tool_call' &&\n    typeof t.name === 'string' &&\n    typeof t.call_id === 'string' &&\n    (t.status === 'running' || t.status === 'completed' || t.status === 'error')\n  )\n}\n\n/**\n * Phase 4 — Production-Readiness #3: structural mirror of SDK's AgentRunError.\n *\n * EC-6 (SHOULD TEST): we only require `code: string` to discriminate.\n * Provider, retriable, retryAfterMs, requestId are all optional — SDK error\n * paths may omit them (e.g., aborted before request, tool runtime error).\n */\ninterface AgentRunErrorLike {\n  message: string\n  code: string\n  provider?: string\n  retriable?: boolean\n  retryAfterMs?: number\n  requestId?: string\n  /**\n   * EC-15 (DOCUMENT) + invariant: `providerError` is QUARANTINED. We read it\n   * for type-narrowing but NEVER serialize into the AgentEvent — leaking the\n   * raw provider response could leak API keys, internal endpoints, or PII.\n   * Only sanitized fields above flow to the SSE wire. `error.message` is\n   * trusted to not contain secrets (SDK's responsibility per the v1.1.0\n   * release contract).\n   */\n  providerError?: unknown\n}\n\n/**\n * EC-6 (SHOULD TEST): minimal type guard — only requires `code: string`.\n * Does NOT require `'provider' in err` because the SDK throws AgentRunErrors\n * without `provider` in local error paths (timeout, tool runtime error,\n * aborted-before-call).\n */\nfunction isAgentRunError(err: unknown): err is AgentRunErrorLike {\n  if (!(err instanceof Error)) return false\n  const e = err as { code?: unknown }\n  return 'code' in e && typeof e.code === 'string'\n}\n\n/**\n * Map an SDK error to the AgentErrorEvent shape. Pure function — easy to test.\n *\n * Backward compat (D4): non-AgentRunError throws yield only `message` field\n * (legacy shape); discriminated fields stay `undefined`.\n *\n * Return type is the specific `AgentErrorEvent` (not the union) for ergonomic\n * call-site access — `errorToEvent(err).code` works without narrowing.\n */\nexport function errorToEvent(err: unknown, id?: string): AgentErrorEvent {\n  if (isAgentRunError(err)) {\n    const event: AgentErrorEvent = {\n      type: 'error',\n      message: err.message,\n      code: err.code,\n    }\n    if (err.provider !== undefined) event.provider = err.provider\n    if (err.retriable !== undefined) event.retriable = err.retriable\n    if (err.retryAfterMs !== undefined) event.retryAfterMs = err.retryAfterMs\n    if (id !== undefined) event.id = id\n    return event\n  }\n  // Fallback for non-AgentRunError throws (plain Error, string, plain object with message)\n  let message: string\n  if (err instanceof Error) {\n    message = err.message\n  } else if (typeof err === 'string') {\n    message = err\n  } else if (err !== null && typeof err === 'object' && 'message' in err) {\n    const candidate: unknown = (err as Record<string, unknown>).message\n    // Plain object with `message: string` — common for SDK status:error payloads\n    message = typeof candidate === 'string' ? candidate : '[object Object]'\n  } else if (err === null || err === undefined) {\n    message = String(err)\n  } else {\n    message = '[non-stringifiable error]'\n  }\n  const event: AgentErrorEvent = { type: 'error', message }\n  if (id !== undefined) event.id = id\n  return event\n}\n\nfunction yieldFromToolCall(msg: ToolCallLike): AgentEvent {\n  if (msg.status === 'running') {\n    return {\n      type: 'tool_call',\n      name: msg.name,\n      args: safeArgs(msg.args),\n      id: msg.call_id,\n    }\n  }\n  if (msg.status === 'completed') {\n    const data = typeof msg.result === 'string' ? msg.result : safeJsonStringify(msg.result)\n    return {\n      type: 'tool_result',\n      name: msg.name,\n      data,\n      id: msg.call_id,\n    }\n  }\n  // status === 'error' — exhaustive by type\n  const message = typeof msg.result === 'string' ? msg.result : `Tool ${msg.name} failed`\n  return { type: 'error', message, id: msg.call_id }\n}\n\nexport async function* streamAgentRun(\n  run: AgentRunLike,\n): AsyncGenerator<AgentEvent, void, unknown> {\n  for await (const msg of run.stream()) {\n    if (isAssistant(msg)) {\n      for (const block of msg.message.content) {\n        if (block.type === 'text' && typeof block.text === 'string' && block.text.length > 0) {\n          yield { type: 'message', content: block.text }\n        }\n      }\n    } else if (isToolCall(msg)) {\n      yield yieldFromToolCall(msg)\n    }\n    // SDK-internal variants (system, user, thinking, status, task,\n    // request, object_delta) are intentionally not yielded.\n  }\n\n  const result = await run.wait()\n  if (result.status === 'error' && result.error !== undefined) {\n    yield errorToEvent(result.error)\n  }\n}\n","/**\n * Provider Resolver — Strategy + Registry pattern (FAANG-grade).\n *\n * Inspiração: Dapr Conversation Registry (`dapr/pkg/components/conversation/registry.go`)\n * + Encore Manager provider array (`encore/runtimes/go/pubsub/manager_internal.go`).\n *\n * Princípio: provider routing é responsabilidade do FRAMEWORK, não do consumer.\n * Consumer template usa `model: { id: 'gpt-4o-mini' }` puro — sem conditionals.\n *\n * Wire protocol: OpenAI Chat Completions (universal — implementado por todos\n * os providers: OpenRouter, Groq, Mistral, Together, Anthropic via proxy, etc).\n *\n * Resolução por prioridade (FIRST match wins):\n *   1. OPENROUTER_API_KEY → baseUrl=openrouter.ai (gateway multi-modelo)\n *   2. OPENAI_API_KEY     → baseUrl=api.openai.com\n *   3. ANTHROPIC_API_KEY  → direct Anthropic (Messages API, não OpenAI-compat)\n *\n * Escape hatch: `options.apiKey` explícito SOBREPÕE auto-resolution\n * (consumer pode forçar provider específico se quiser).\n */\n\n/**\n * Provider configuration descriptor — Registry entry shape.\n *\n * @public\n */\nexport interface ProviderDescriptor {\n  /** Stable name used internally — não exposto no wire. */\n  name: string\n  /** Environment variable that holds the API key for this provider. */\n  envKey: string\n  /** Base URL for the provider's OpenAI-compatible (or native) API. */\n  baseUrl: string\n  /** Resolution priority (lower = higher priority). FIRST match wins. */\n  priority: number\n}\n\n/**\n * Resolved provider configuration — output of `resolveProvider()`.\n *\n * @public\n */\nexport interface ResolvedProvider {\n  name: string\n  apiKey: string\n  baseUrl: string\n}\n\n/**\n * Default provider registry. Order = priority (first = highest).\n *\n * Adding a new provider:\n *   1. Append entry below (or register via `registerProvider()`).\n *   2. Set `envKey` matching the user's env var convention.\n *   3. Set `baseUrl` to the OpenAI-compat endpoint (or native if not compat).\n *   4. Provider name used in telemetry/logs only — never wire-exposed.\n */\nconst DEFAULT_REGISTRY: ProviderDescriptor[] = [\n  {\n    name: 'openrouter',\n    envKey: 'OPENROUTER_API_KEY',\n    baseUrl: 'https://openrouter.ai/api/v1',\n    priority: 1,\n  },\n  {\n    name: 'openai',\n    envKey: 'OPENAI_API_KEY',\n    baseUrl: 'https://api.openai.com/v1',\n    priority: 2,\n  },\n  {\n    name: 'anthropic',\n    envKey: 'ANTHROPIC_API_KEY',\n    baseUrl: 'https://api.anthropic.com',\n    priority: 3,\n  },\n]\n\n/**\n * Runtime registry — copy of DEFAULT_REGISTRY mutable via registerProvider().\n * Sorted by priority on every resolve (stable, O(n log n) — n <= ~10 providers).\n */\nconst registry: ProviderDescriptor[] = [...DEFAULT_REGISTRY]\n\n/**\n * Register a new provider (Registry pattern — runtime extension point).\n * Useful for self-hosted endpoints or custom providers without touching theokit src.\n *\n * @example\n * registerProvider({\n *   name: 'self-hosted',\n *   envKey: 'SELF_HOSTED_API_KEY',\n *   baseUrl: 'https://llm.internal.acme.com/v1',\n *   priority: 0, // highest priority\n * })\n *\n * @public\n */\nexport function registerProvider(descriptor: ProviderDescriptor): void {\n  // Idempotent — replace existing by name.\n  const idx = registry.findIndex((p) => p.name === descriptor.name)\n  if (idx >= 0) registry[idx] = descriptor\n  else registry.push(descriptor)\n}\n\n/**\n * Reset registry to DEFAULT_REGISTRY (test-only / dev escape hatch).\n *\n * @public\n */\nexport function resetProviderRegistry(): void {\n  registry.length = 0\n  registry.push(...DEFAULT_REGISTRY)\n}\n\n/**\n * Get current registry snapshot (read-only — inspection).\n *\n * @public\n */\nexport function listProviders(): readonly ProviderDescriptor[] {\n  return [...registry].sort((a, b) => a.priority - b.priority)\n}\n\n/**\n * Resolve provider from env vars by priority. FIRST env var found wins.\n *\n * @returns ResolvedProvider with apiKey + baseUrl + name\n * @throws Error if NO provider env var is set (actionable message)\n *\n * @public\n */\nexport function resolveProvider(): ResolvedProvider {\n  const sorted = [...registry].sort((a, b) => a.priority - b.priority)\n  for (const desc of sorted) {\n    const apiKey = process.env[desc.envKey]\n    if (apiKey && apiKey.length > 0) {\n      return {\n        name: desc.name,\n        apiKey,\n        baseUrl: desc.baseUrl,\n      }\n    }\n  }\n  // No env var found — emit actionable error.\n  const envKeys = sorted.map((p) => p.envKey).join(' OR ')\n  throw new Error(\n    `No LLM provider API key found in environment. Set one of: ${envKeys}. ` +\n      `Get a free OpenRouter key at https://openrouter.ai/keys (recommended — one key, many models).`,\n  )\n}\n\n/**\n * Try to resolve — does NOT throw. Returns null if no provider available.\n * Useful for graceful degradation (e.g., mock mode).\n *\n * @public\n */\nexport function tryResolveProvider(): ResolvedProvider | null {\n  try {\n    return resolveProvider()\n  } catch {\n    return null\n  }\n}\n","/**\n * Item #5 — `createConversationHistory`\n *\n * Orchestrator that resolves a stable `agentId` from (explicit → session →\n * cookie → fresh UUID), then returns an `@theokit/sdk` `Agent` via\n * `Agent.getOrCreate(agentId, options)`. Conversation turns auto-persist in\n * `<cwd>/.theokit/agents/<agentId>/messages.jsonl` — SDK owns the storage\n * (ADR D1). `MemorySettings` (facts recall layer) is opt-in passthrough via\n * `options.memory` (ADR D2).\n *\n * Security: agentId from cookie/explicit is attacker-controlled. The SDK\n * uses it as a filesystem path component AND we serialize it into Set-Cookie.\n * EC-1 enforces a strict regex `^[a-zA-Z0-9_-]{1,128}$` at every entry point;\n * invalid values fall through (treated as \"missing\") rather than throw.\n */\n\nimport { tryResolveProvider } from './provider-resolver.js'\n\n// ──────────────────────────────────────────────────────────────────────────\n// Structural types — mirrors of SDK shapes we don't want to hard-import\n// (the SDK is an OPTIONAL peer per item #4's stance).\n// ──────────────────────────────────────────────────────────────────────────\n\n/**\n * Minimum surface of an SDK Agent that consumers care about post-creation.\n * Structural match — any object with `send` + `dispose` of compatible\n * shape works. `send` returns a `SdkRunLike` (a Run-shaped object) that\n * `streamAgentRun` can consume. Permissive `unknown` for now; consumers\n * who want stricter types can cast to the SDK's own types.\n *\n * **T5.2 (architecture-cleanup) — DP-7 decision: KEEP (Opt B).** The 5 duck-typed\n * mirrors below were flagged as \"over-engineered\" by the 2026-05-27 architecture\n * review. Decision: KEEP them because `@theokit/sdk` is `devDependency` (not\n * required at runtime for consumers that don't use agent features). Removing\n * the mirrors would force a hard runtime dep on the SDK, breaking consumers\n * who build TheoKit apps without the agent layer.\n *\n * @kept Defensive duck-type. Do NOT replace with direct SDK type imports unless\n *   `@theokit/sdk` is promoted from devDependency to dependency. If promoting,\n *   ALSO drop the mirrors (Opt A from the architecture-cleanup plan T5.2).\n */\nexport interface SdkRunLike {\n  stream: () => AsyncIterable<{ type: string }>\n  wait: () => Promise<{ status: 'finished' | 'error' | 'cancelled'; error?: { message: string } }>\n}\n\nexport interface SdkAgent {\n  send: (message: string, options?: unknown) => Promise<SdkRunLike>\n  dispose: () => Promise<void>\n}\n\n/**\n * Phase 2 — structural duck-type of `@theokit/sdk`'s `ConversationStorageAdapter`.\n *\n * D2 (decoupling): we mirror the SDK's shape locally rather than hard-import\n * the SDK type. This lets consumers pass any object matching the structural\n * contract (own implementation, SDK's `FileSystemConversationStorage`,\n * `InMemoryConversationStorage`, or a Postgres/Redis recipe).\n *\n * EC-5 (SHOULD TEST — sync drift detection): the SDK type MUST be assignable\n * to this interface AND vice-versa. A contract test asserts both directions.\n *\n * `unknown` for the message payload avoids coupling to the SDK's `SDKMessage`\n * shape. Real consumers cast at the call site if they need stricter types.\n */\nexport interface ConversationStorageLike {\n  getMessages(conversationId: string): Promise<readonly unknown[]>\n  appendMessage(conversationId: string, message: unknown): Promise<void>\n  deleteConversation(conversationId: string): Promise<void>\n  listConversationIds?(opts?: { limit?: number }): Promise<readonly string[] | undefined>\n  dispose?(): Promise<void>\n}\n\n/**\n * Minimum surface of `AgentOptions` accepted by `Agent.getOrCreate`. Forward-\n * compatible: callers pass whatever the SDK supports (memory, tools, etc.).\n *\n * Phase 2 adds typed `conversationStorage` slot. The index signature still\n * passes everything else opaquely.\n */\nexport interface SdkAgentOptions {\n  apiKey?: string\n  model?: { id: string }\n  tools?: readonly unknown[]\n  memory?: Record<string, unknown>\n  /**\n   * Phase 2 (Production-Readiness #1) — pluggable conversation persistence.\n   * Default (when omitted): SDK falls back to `FileSystemConversationStorage`.\n   * Required for serverless / multi-host deploys.\n   */\n  conversationStorage?: ConversationStorageLike\n  [key: string]: unknown\n}\n\ninterface SdkModule {\n  Agent: {\n    getOrCreate: (agentId: string, options: SdkAgentOptions) => Promise<SdkAgent>\n  }\n}\n\n// ──────────────────────────────────────────────────────────────────────────\n// Public API\n// ──────────────────────────────────────────────────────────────────────────\n\nexport interface ConversationHistoryArgs {\n  /** Request — for reading the conversation cookie. */\n  request: Request | { headers?: { cookie?: string } | Headers }\n  /**\n   * Response-like surface that accepts a `Set-Cookie` header. The primitive\n   * appends a Set-Cookie line when issuing a new conversation id. If absent,\n   * the primitive still reads the existing cookie but cannot issue a new\n   * one — useful for read-only contexts.\n   */\n  response?: { headers: Headers }\n  /** Explicit override — wins over session/cookie/uuid (ADR D3 step 1). */\n  agentId?: string\n  /** Auth session containing a `conversationId` field — ADR D3 step 2. */\n  session?: { conversationId?: string } | null\n  /** SDK AgentOptions forwarded to Agent.getOrCreate. apiKey + model required. */\n  options: SdkAgentOptions\n  /** Cookie name override. Default: 'theo_conversation'. */\n  cookieName?: string\n  /** Cookie max-age in seconds. Default + min: 30 days. Non-positive coerced to default (EC-4). */\n  cookieMaxAge?: number\n}\n\nexport interface ConversationHistoryResult {\n  /** The SDK Agent, ready to receive `agent.send(message)`. */\n  agent: SdkAgent\n  /** The resolved conversation id (useful for logging / debugging). */\n  conversationId: string\n  /** True when the id was newly generated (no prior cookie / session). */\n  isNew: boolean\n}\n\n// ──────────────────────────────────────────────────────────────────────────\n// Test seam — allows unit tests to swap the SDK without dynamic import flake.\n// Underscore-prefixed: NOT part of the public contract.\n// ──────────────────────────────────────────────────────────────────────────\n\nlet sdkOverride: SdkModule | null | undefined = undefined\n\n/** @internal */\nexport function __setSdkForTests(sdk: SdkModule | null): void {\n  sdkOverride = sdk\n}\n\n/** @internal */\nexport function __resetSdkForTests(): void {\n  sdkOverride = undefined\n}\n\nasync function loadSdk(): Promise<SdkModule> {\n  // EC-2 (edge case review — MUST FIX): the SDK is an optional peer; if the\n  // consumer never installed it, `import('@theokit/sdk')` throws\n  // ERR_MODULE_NOT_FOUND. Re-throw with an actionable message.\n  if (sdkOverride === null) {\n    throw new Error(\n      'createConversationHistory requires @theokit/sdk. Install: pnpm add @theokit/sdk',\n    )\n  }\n  if (sdkOverride !== undefined) return sdkOverride\n  try {\n    // Use `createRequire` — Node's CJS-style require resolves against the\n    // process's actual node_modules tree, bypassing Vite's SSR import-\n    // analysis pipeline. The dynamic ESM `import()` path got intercepted\n    // by Vite's `vite:import-analysis` plugin and failed to find the SDK\n    // even when it was installed; createRequire goes straight to Node.\n    //\n    // The SDK ships dual ESM+CJS (per its tsup build), so `require` yields\n    // the same module the ESM `import` would.\n    const { createRequire } = await import('node:module')\n    const requireFn = createRequire(import.meta.url)\n    const spec = '@theokit/sdk'\n    const mod = requireFn(spec) as unknown as SdkModule\n    return mod\n  } catch (cause) {\n    throw new Error(\n      'createConversationHistory requires @theokit/sdk. Install: pnpm add @theokit/sdk',\n      { cause },\n    )\n  }\n}\n\n// ──────────────────────────────────────────────────────────────────────────\n// Implementation\n// ──────────────────────────────────────────────────────────────────────────\n\nconst DEFAULT_COOKIE_NAME = 'theo_conversation'\nconst DEFAULT_COOKIE_MAX_AGE = 60 * 60 * 24 * 30 // 30 days\n\n/**\n * EC-1 (edge case review — MUST FIX): the agentId becomes a filesystem path\n * component (`<cwd>/.theokit/agents/<agentId>/messages.jsonl`) inside the SDK\n * AND is serialized into a Set-Cookie header. The SDK does NOT validate the\n * char set. An attacker setting `Cookie: theo_conversation=../../../etc/passwd`\n * could trigger arbitrary-path writes; an `agentId` with CRLF would inject\n * HTTP headers. The same regex kills both attacks.\n */\nconst AGENT_ID_REGEX = /^[a-zA-Z0-9_-]{1,128}$/\n\nfunction isValidAgentId(s: string | undefined | null): s is string {\n  return typeof s === 'string' && AGENT_ID_REGEX.test(s)\n}\n\n/**\n * Minimal RFC 6265 cookie parser. Returns the FIRST occurrence of `name`\n * (EC-5 — pins first-wins behavior).\n */\nfunction readCookieValue(\n  request: ConversationHistoryArgs['request'],\n  name: string,\n): string | undefined {\n  let raw: string | undefined\n  const h = request.headers\n  if (h === undefined) return undefined\n  if (typeof (h as Headers).get === 'function') {\n    raw = (h as Headers).get('cookie') ?? undefined\n  } else {\n    raw = (h as { cookie?: string }).cookie\n  }\n  if (raw === undefined || raw.length === 0) return undefined\n  const pairs = raw.split(/[;,]/)\n  for (const pair of pairs) {\n    const eq = pair.indexOf('=')\n    if (eq < 0) continue\n    const k = pair.slice(0, eq).trim()\n    if (k === name) return pair.slice(eq + 1).trim()\n  }\n  return undefined\n}\n\ninterface SerializeCookieOptions {\n  httpOnly?: boolean\n  sameSite?: 'lax' | 'strict' | 'none'\n  maxAge?: number\n  path?: string\n}\n\nfunction serializeCookie(name: string, value: string, options: SerializeCookieOptions): string {\n  const parts: string[] = [`${name}=${value}`]\n  if (options.path !== undefined) parts.push(`Path=${options.path}`)\n  if (options.maxAge !== undefined) parts.push(`Max-Age=${options.maxAge}`)\n  if (options.sameSite !== undefined) {\n    const v = options.sameSite.charAt(0).toUpperCase() + options.sameSite.slice(1)\n    parts.push(`SameSite=${v}`)\n  }\n  if (options.httpOnly === true) parts.push('HttpOnly')\n  return parts.join('; ')\n}\n\nexport async function createConversationHistory(\n  args: ConversationHistoryArgs,\n): Promise<ConversationHistoryResult> {\n  const cookieName = args.cookieName ?? DEFAULT_COOKIE_NAME\n  // EC-4 (edge case review — SHOULD TEST): coerce non-positive to default.\n  // The `??` operator alone would let `0` through, producing `Max-Age=0`\n  // which means \"delete cookie immediately\" — almost certainly not intent.\n  const rawMaxAge = args.cookieMaxAge\n  const cookieMaxAge =\n    typeof rawMaxAge === 'number' && rawMaxAge > 0 ? rawMaxAge : DEFAULT_COOKIE_MAX_AGE\n\n  // 1. Resolve agentId per ADR D3 — sources are validated; invalid values\n  //    fall through (treated as \"missing\") rather than throw.\n  let conversationId: string | undefined\n  let isNew = false\n  const cookieOnRequest = readCookieValue(args.request, cookieName)\n\n  if (isValidAgentId(args.agentId)) {\n    conversationId = args.agentId\n  } else if (args.session !== null && args.session !== undefined) {\n    const sId = args.session.conversationId\n    if (isValidAgentId(sId)) conversationId = sId\n  }\n  if (conversationId === undefined && isValidAgentId(cookieOnRequest)) {\n    conversationId = cookieOnRequest\n  }\n\n  if (conversationId === undefined) {\n    conversationId = crypto.randomUUID()\n    isNew = true\n  }\n\n  // Issue (or refresh) the cookie when:\n  //   1. The id was newly generated (no source had it), OR\n  //   2. The request's cookie does NOT match the resolved id (explicit\n  //      `agentId` override, session-derived id, etc.). Without this,\n  //      callers that pre-probe the id (e.g. to build agentId-scoped tools)\n  //      and pass it via `agentId` would never get a Set-Cookie even on\n  //      first visit. Net effect: every response with a `response` slot\n  //      ensures the browser ends up with a cookie that matches the\n  //      resolved id.\n  const shouldIssueCookie = isNew || cookieOnRequest !== conversationId\n  if (shouldIssueCookie && args.response !== undefined) {\n    const cookie = serializeCookie(cookieName, conversationId, {\n      httpOnly: true,\n      sameSite: 'lax',\n      maxAge: cookieMaxAge,\n      path: '/',\n    })\n    args.response.headers.append('set-cookie', cookie)\n  }\n\n  // 2. Auto-resolve provider via Strategy pattern (FAANG-grade — zero\n  //    conditionals no consumer). If `options.apiKey` ausente, lê env vars\n  //    priorizadas (OPENROUTER > OPENAI > ANTHROPIC) e injeta apiKey +\n  //    providers.baseUrl. Consumer override: passar `options.apiKey` explícito\n  //    SOBREPÕE o auto-resolve (escape hatch). Ver `provider-resolver.ts` +\n  //    Dapr Conversation Registry pattern (`referencias/dapr/pkg/components/conversation/`).\n  const resolvedOptions = autoResolveProviderIfNeeded(args.options)\n\n  // 3. Resolve the agent via SDK.\n  const sdk = await loadSdk()\n  const agent = await sdk.Agent.getOrCreate(conversationId, resolvedOptions)\n\n  return { agent, conversationId, isNew }\n}\n\n/**\n * Auto-inject provider config (apiKey + baseUrl) via Strategy pattern when\n * consumer didn't pass apiKey explicit. Idempotent — se apiKey já set, noop.\n *\n * Output shape:\n *   {\n *     ...originalOptions,\n *     apiKey: env,    // resolved from process.env\n *     providers: { routes: [{ capability: 'chat', provider: name, ... }] }\n *   }\n */\nfunction autoResolveProviderIfNeeded(options: SdkAgentOptions): SdkAgentOptions {\n  // Escape hatch — consumer override wins.\n  if (typeof options.apiKey === 'string' && options.apiKey.length > 0) {\n    return options\n  }\n  // Auto-resolve via Strategy registry.\n  //\n  // Finding A workaround (sdk-residual-behavior-2026-05-28): SDK silently\n  // returns canned \"Hello! How can I assist you today?\" content when no\n  // apiKey AND no provider env vars are present. Fail-fast HERE with an\n  // actionable error — template's try/catch yields `{type:'error'}` SSE\n  // event so consumer sees what's wrong.\n  const resolved = tryResolveProvider()\n  if (resolved === null) {\n    throw new Error(\n      'No LLM provider API key found in environment. ' +\n        'Set OPENROUTER_API_KEY (recommended — gateway to many models) OR ' +\n        'OPENAI_API_KEY OR ANTHROPIC_API_KEY in your .env. ' +\n        'Get a free OpenRouter key at https://openrouter.ai/keys. ' +\n        '(Pass `options.apiKey` explicitly to bypass auto-resolution.)',\n    )\n  }\n  // Inject apiKey + provider routing. SDK ProviderRoutingSettings shape.\n  // Note: we use `chat` capability since this is the conversation primitive;\n  // SDK may extend to embeddings/etc — those routes are separate concerns.\n  return {\n    ...options,\n    apiKey: resolved.apiKey,\n    providers: {\n      routes: [{ capability: 'chat', provider: resolved.name, baseUrl: resolved.baseUrl }],\n    },\n  }\n}\n"],"mappings":";AAiFA,SAAS,kBAAkB,OAAwB;AACjD,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOA,SAAS,SAAS,MAAwC;AACxD,MAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,CAAC,MAAM,QAAQ,IAAI,GAAG;AACrE,WAAO;AAAA,EACT;AACA,SAAO,CAAC;AACV;AAoCA,SAAS,YAAY,KAA6C;AAIhE,QAAM,IAAI;AAIV,SACE,EAAE,SAAS,eACX,EAAE,WAAW,QACb,OAAO,EAAE,YAAY,YACrB,MAAM,QAAQ,EAAE,QAAQ,OAAO;AAEnC;AACA,SAAS,WAAW,KAA4C;AAC9D,QAAM,IAAI;AAMV,SACE,EAAE,SAAS,eACX,OAAO,EAAE,SAAS,YAClB,OAAO,EAAE,YAAY,aACpB,EAAE,WAAW,aAAa,EAAE,WAAW,eAAe,EAAE,WAAW;AAExE;AAiCA,SAAS,gBAAgB,KAAwC;AAC/D,MAAI,EAAE,eAAe,OAAQ,QAAO;AACpC,QAAM,IAAI;AACV,SAAO,UAAU,KAAK,OAAO,EAAE,SAAS;AAC1C;AAWO,SAAS,aAAa,KAAc,IAA8B;AACvE,MAAI,gBAAgB,GAAG,GAAG;AACxB,UAAMA,SAAyB;AAAA,MAC7B,MAAM;AAAA,MACN,SAAS,IAAI;AAAA,MACb,MAAM,IAAI;AAAA,IACZ;AACA,QAAI,IAAI,aAAa,OAAW,CAAAA,OAAM,WAAW,IAAI;AACrD,QAAI,IAAI,cAAc,OAAW,CAAAA,OAAM,YAAY,IAAI;AACvD,QAAI,IAAI,iBAAiB,OAAW,CAAAA,OAAM,eAAe,IAAI;AAC7D,QAAI,OAAO,OAAW,CAAAA,OAAM,KAAK;AACjC,WAAOA;AAAA,EACT;AAEA,MAAI;AACJ,MAAI,eAAe,OAAO;AACxB,cAAU,IAAI;AAAA,EAChB,WAAW,OAAO,QAAQ,UAAU;AAClC,cAAU;AAAA,EACZ,WAAW,QAAQ,QAAQ,OAAO,QAAQ,YAAY,aAAa,KAAK;AACtE,UAAM,YAAsB,IAAgC;AAE5D,cAAU,OAAO,cAAc,WAAW,YAAY;AAAA,EACxD,WAAW,QAAQ,QAAQ,QAAQ,QAAW;AAC5C,cAAU,OAAO,GAAG;AAAA,EACtB,OAAO;AACL,cAAU;AAAA,EACZ;AACA,QAAM,QAAyB,EAAE,MAAM,SAAS,QAAQ;AACxD,MAAI,OAAO,OAAW,OAAM,KAAK;AACjC,SAAO;AACT;AAEA,SAAS,kBAAkB,KAA+B;AACxD,MAAI,IAAI,WAAW,WAAW;AAC5B,WAAO;AAAA,MACL,MAAM;AAAA,MACN,MAAM,IAAI;AAAA,MACV,MAAM,SAAS,IAAI,IAAI;AAAA,MACvB,IAAI,IAAI;AAAA,IACV;AAAA,EACF;AACA,MAAI,IAAI,WAAW,aAAa;AAC9B,UAAM,OAAO,OAAO,IAAI,WAAW,WAAW,IAAI,SAAS,kBAAkB,IAAI,MAAM;AACvF,WAAO;AAAA,MACL,MAAM;AAAA,MACN,MAAM,IAAI;AAAA,MACV;AAAA,MACA,IAAI,IAAI;AAAA,IACV;AAAA,EACF;AAEA,QAAM,UAAU,OAAO,IAAI,WAAW,WAAW,IAAI,SAAS,QAAQ,IAAI,IAAI;AAC9E,SAAO,EAAE,MAAM,SAAS,SAAS,IAAI,IAAI,QAAQ;AACnD;AAEA,gBAAuB,eACrB,KAC2C;AAC3C,mBAAiB,OAAO,IAAI,OAAO,GAAG;AACpC,QAAI,YAAY,GAAG,GAAG;AACpB,iBAAW,SAAS,IAAI,QAAQ,SAAS;AACvC,YAAI,MAAM,SAAS,UAAU,OAAO,MAAM,SAAS,YAAY,MAAM,KAAK,SAAS,GAAG;AACpF,gBAAM,EAAE,MAAM,WAAW,SAAS,MAAM,KAAK;AAAA,QAC/C;AAAA,MACF;AAAA,IACF,WAAW,WAAW,GAAG,GAAG;AAC1B,YAAM,kBAAkB,GAAG;AAAA,IAC7B;AAAA,EAGF;AAEA,QAAM,SAAS,MAAM,IAAI,KAAK;AAC9B,MAAI,OAAO,WAAW,WAAW,OAAO,UAAU,QAAW;AAC3D,UAAM,aAAa,OAAO,KAAK;AAAA,EACjC;AACF;;;ACvOA,IAAM,mBAAyC;AAAA,EAC7C;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AACF;AAMA,IAAM,WAAiC,CAAC,GAAG,gBAAgB;AAkDpD,SAAS,kBAAoC;AAClD,QAAM,SAAS,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ;AACnE,aAAW,QAAQ,QAAQ;AACzB,UAAM,SAAS,QAAQ,IAAI,KAAK,MAAM;AACtC,QAAI,UAAU,OAAO,SAAS,GAAG;AAC/B,aAAO;AAAA,QACL,MAAM,KAAK;AAAA,QACX;AAAA,QACA,SAAS,KAAK;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,OAAO,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,MAAM;AACvD,QAAM,IAAI;AAAA,IACR,6DAA6D,OAAO;AAAA,EAEtE;AACF;AAQO,SAAS,qBAA8C;AAC5D,MAAI;AACF,WAAO,gBAAgB;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;ACxBA,IAAI,cAA4C;AAGzC,SAAS,iBAAiB,KAA6B;AAC5D,gBAAc;AAChB;AAGO,SAAS,qBAA2B;AACzC,gBAAc;AAChB;AAEA,eAAe,UAA8B;AAI3C,MAAI,gBAAgB,MAAM;AACxB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,MAAI,gBAAgB,OAAW,QAAO;AACtC,MAAI;AASF,UAAM,EAAE,cAAc,IAAI,MAAM,OAAO,QAAa;AACpD,UAAM,YAAY,cAAc,YAAY,GAAG;AAC/C,UAAM,OAAO;AACb,UAAM,MAAM,UAAU,IAAI;AAC1B,WAAO;AAAA,EACT,SAAS,OAAO;AACd,UAAM,IAAI;AAAA,MACR;AAAA,MACA,EAAE,MAAM;AAAA,IACV;AAAA,EACF;AACF;AAMA,IAAM,sBAAsB;AAC5B,IAAM,yBAAyB,KAAK,KAAK,KAAK;AAU9C,IAAM,iBAAiB;AAEvB,SAAS,eAAe,GAA2C;AACjE,SAAO,OAAO,MAAM,YAAY,eAAe,KAAK,CAAC;AACvD;AAMA,SAAS,gBACP,SACA,MACoB;AACpB,MAAI;AACJ,QAAM,IAAI,QAAQ;AAClB,MAAI,MAAM,OAAW,QAAO;AAC5B,MAAI,OAAQ,EAAc,QAAQ,YAAY;AAC5C,UAAO,EAAc,IAAI,QAAQ,KAAK;AAAA,EACxC,OAAO;AACL,UAAO,EAA0B;AAAA,EACnC;AACA,MAAI,QAAQ,UAAa,IAAI,WAAW,EAAG,QAAO;AAClD,QAAM,QAAQ,IAAI,MAAM,MAAM;AAC9B,aAAW,QAAQ,OAAO;AACxB,UAAM,KAAK,KAAK,QAAQ,GAAG;AAC3B,QAAI,KAAK,EAAG;AACZ,UAAM,IAAI,KAAK,MAAM,GAAG,EAAE,EAAE,KAAK;AACjC,QAAI,MAAM,KAAM,QAAO,KAAK,MAAM,KAAK,CAAC,EAAE,KAAK;AAAA,EACjD;AACA,SAAO;AACT;AASA,SAAS,gBAAgB,MAAc,OAAe,SAAyC;AAC7F,QAAM,QAAkB,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE;AAC3C,MAAI,QAAQ,SAAS,OAAW,OAAM,KAAK,QAAQ,QAAQ,IAAI,EAAE;AACjE,MAAI,QAAQ,WAAW,OAAW,OAAM,KAAK,WAAW,QAAQ,MAAM,EAAE;AACxE,MAAI,QAAQ,aAAa,QAAW;AAClC,UAAM,IAAI,QAAQ,SAAS,OAAO,CAAC,EAAE,YAAY,IAAI,QAAQ,SAAS,MAAM,CAAC;AAC7E,UAAM,KAAK,YAAY,CAAC,EAAE;AAAA,EAC5B;AACA,MAAI,QAAQ,aAAa,KAAM,OAAM,KAAK,UAAU;AACpD,SAAO,MAAM,KAAK,IAAI;AACxB;AAEA,eAAsB,0BACpB,MACoC;AACpC,QAAM,aAAa,KAAK,cAAc;AAItC,QAAM,YAAY,KAAK;AACvB,QAAM,eACJ,OAAO,cAAc,YAAY,YAAY,IAAI,YAAY;AAI/D,MAAI;AACJ,MAAI,QAAQ;AACZ,QAAM,kBAAkB,gBAAgB,KAAK,SAAS,UAAU;AAEhE,MAAI,eAAe,KAAK,OAAO,GAAG;AAChC,qBAAiB,KAAK;AAAA,EACxB,WAAW,KAAK,YAAY,QAAQ,KAAK,YAAY,QAAW;AAC9D,UAAM,MAAM,KAAK,QAAQ;AACzB,QAAI,eAAe,GAAG,EAAG,kBAAiB;AAAA,EAC5C;AACA,MAAI,mBAAmB,UAAa,eAAe,eAAe,GAAG;AACnE,qBAAiB;AAAA,EACnB;AAEA,MAAI,mBAAmB,QAAW;AAChC,qBAAiB,OAAO,WAAW;AACnC,YAAQ;AAAA,EACV;AAWA,QAAM,oBAAoB,SAAS,oBAAoB;AACvD,MAAI,qBAAqB,KAAK,aAAa,QAAW;AACpD,UAAM,SAAS,gBAAgB,YAAY,gBAAgB;AAAA,MACzD,UAAU;AAAA,MACV,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,MAAM;AAAA,IACR,CAAC;AACD,SAAK,SAAS,QAAQ,OAAO,cAAc,MAAM;AAAA,EACnD;AAQA,QAAM,kBAAkB,4BAA4B,KAAK,OAAO;AAGhE,QAAM,MAAM,MAAM,QAAQ;AAC1B,QAAM,QAAQ,MAAM,IAAI,MAAM,YAAY,gBAAgB,eAAe;AAEzE,SAAO,EAAE,OAAO,gBAAgB,MAAM;AACxC;AAaA,SAAS,4BAA4B,SAA2C;AAE9E,MAAI,OAAO,QAAQ,WAAW,YAAY,QAAQ,OAAO,SAAS,GAAG;AACnE,WAAO;AAAA,EACT;AAQA,QAAM,WAAW,mBAAmB;AACpC,MAAI,aAAa,MAAM;AACrB,UAAM,IAAI;AAAA,MACR;AAAA,IAKF;AAAA,EACF;AAIA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,QAAQ,SAAS;AAAA,IACjB,WAAW;AAAA,MACT,QAAQ,CAAC,EAAE,YAAY,QAAQ,UAAU,SAAS,MAAM,SAAS,SAAS,QAAQ,CAAC;AAAA,IACrF;AAAA,EACF;AACF;","names":["event"]}