theokit 0.13.0 → 0.15.0

package/dist/{chunk-RYTZYFSD.js → chunk-UOR6JTCI.js}

@@ -1,30 +1,17 @@
-import {
-  broadcastToDevtools
-} from "./chunk-7BIM27LV.js";
 import {
   buildServicesProxyConfig,
   servicesConfigSchema
 } from "./chunk-D7ZH7DTG.js";
+import {
+  broadcastToDevtools
+} from "./chunk-7BIM27LV.js";
 import {
   loadEnv,
   resolveTransformer
-} from "./chunk-3S3BNW5K.js";
-import {
-  BATCH_PATH,
-  TRACE_HEADER,
-  createCorsHandler,
-  executeAction,
-  executeRoute,
-  extractTraceId,
-  handleBatchRequest,
-  sendError
-} from "./chunk-TGTNRUH3.js";
+} from "./chunk-5UUOGAJH.js";
 import {
   findSuggestion
 } from "./chunk-5QW7IQQU.js";
-import {
-  logRequest
-} from "./chunk-WFNLNIJX.js";
 import {
   createPluginRunnerFromConfig
 } from "./chunk-IAJ2JVEH.js";
@@ -48,12 +35,6 @@ import {
   handleCspReport,
   handleCsrfReadiness
 } from "./chunk-JBCHWRKF.js";
-import {
-  validateCsrfRequest
-} from "./chunk-TSLSIRBR.js";
-import {
-  resolveProvider
-} from "./chunk-EXP56GFQ.js";
 import {
   generateNonce
 } from "./chunk-C3ZZ56YZ.js";
@@ -62,7 +43,23 @@ import {
 } from "./chunk-7MQOHNHE.js";
 import {
   uiMessageStreamResponse
-} from "./chunk-NHJMZCAS.js";
+} from "./chunk-JZHT3LW7.js";
+import {
+  BATCH_PATH,
+  TRACE_HEADER,
+  createCorsHandler,
+  executeAction,
+  executeRoute,
+  extractTraceId,
+  handleBatchRequest,
+  sendError
+} from "./chunk-H243MR3F.js";
+import {
+  logRequest
+} from "./chunk-Z5IGLBWE.js";
+import {
+  validateCsrfRequest
+} from "./chunk-TSLSIRBR.js";
 
 // src/vite-plugin/index.ts
 import { existsSync as existsSync9 } from "fs";
@@ -987,14 +984,102 @@ function createActionMiddleware(vite, serverDir, options) {
 // src/vite-plugin/agent-middleware.ts
 import { randomUUID as randomUUID2 } from "crypto";
 
+// src/server/agent/approval-registry.ts
+var serverRegistry;
+function getApprovalRegistry() {
+  serverRegistry ??= createInProcessApprovalRegistry();
+  return serverRegistry;
+}
+function createInProcessApprovalRegistry() {
+  const pending = /* @__PURE__ */ new Map();
+  return {
+    register(approvalId, opts) {
+      return new Promise((resolve10) => {
+        const settle = (approved) => {
+          const entry = pending.get(approvalId);
+          if (!entry) return;
+          clearTimeout(entry.timer);
+          pending.delete(approvalId);
+          resolve10(approved);
+        };
+        const timer = setTimeout(() => {
+          settle(opts.onTimeout === "proceed");
+        }, opts.timeoutMs);
+        pending.set(approvalId, { settle, timer });
+      });
+    },
+    resolve(approvalId, approved) {
+      const entry = pending.get(approvalId);
+      if (!entry) return false;
+      entry.settle(approved);
+      return true;
+    }
+  };
+}
+
+// src/server/agent/approve-agent.ts
+var APPROVE_SEGMENT = "/approve/";
+function parseApprovalId(urlPath) {
+  const at = urlPath.indexOf(APPROVE_SEGMENT);
+  if (at === -1) return null;
+  const id = urlPath.slice(at + APPROVE_SEGMENT.length);
+  return id.length > 0 && !id.includes("/") ? id : null;
+}
+function isApprovalPath(urlPath) {
+  return urlPath.includes(APPROVE_SEGMENT);
+}
+function jsonError(status, code, message) {
+  return new Response(JSON.stringify({ error: { code, message } }), {
+    status,
+    headers: { "content-type": "application/json" }
+  });
+}
+function parseApprovalBody(body) {
+  if (typeof body !== "object" || body === null) return null;
+  const b = body;
+  return typeof b.approved === "boolean" ? { approved: b.approved } : null;
+}
+async function handleAgentApproval(request, urlPath, registry2, csrfMode = "strict") {
+  if (csrfMode !== "off") {
+    const csrf = validateCsrfRequest(request);
+    if (!csrf.valid && csrfMode === "strict") {
+      return jsonError(403, "CSRF_FAILED", `CSRF check failed: ${csrf.reason}`);
+    }
+  }
+  const approvalId = parseApprovalId(urlPath);
+  if (approvalId === null) {
+    return jsonError(400, "BAD_REQUEST", "Approval path must be /api/agents/<name>/approve/<id>.");
+  }
+  let body = null;
+  try {
+    body = await request.json();
+  } catch {
+  }
+  const parsed = parseApprovalBody(body);
+  if (parsed === null) {
+    return jsonError(400, "BAD_REQUEST", "Request body must contain a boolean `approved`.");
+  }
+  const resolved = registry2.resolve(approvalId, parsed.approved);
+  if (!resolved) {
+    return jsonError(404, "NOT_PENDING", `No pending approval for id '${approvalId}'.`);
+  }
+  return new Response(JSON.stringify({ resolved: true }), {
+    status: 200,
+    headers: { "content-type": "application/json" }
+  });
+}
+
 // src/server/agent/mount-agent.ts
-import { compileAgentModule, streamAgentUIMessages } from "@theokit/agents";
+import {
+  compileAgentModule,
+  streamAgentUIMessages
+} from "@theokit/agents";
 function partText(part) {
   if (typeof part !== "object" || part === null) return "";
   const p = part;
   return p.type === "text" && typeof p.text === "string" ? p.text : "";
 }
-function jsonError(status, code, message) {
+function jsonError2(status, code, message) {
   return new Response(JSON.stringify({ error: { code, message } }), {
     status,
     headers: { "content-type": "application/json" }
@@ -1021,7 +1106,7 @@ async function mountAgent(mod, request, apiKey, source = "agent module", csrfMod
   if (csrfMode !== "off") {
     const csrf = validateCsrfRequest(request);
     if (!csrf.valid && csrfMode === "strict") {
-      return jsonError(403, "CSRF_FAILED", `CSRF check failed: ${csrf.reason}`);
+      return jsonError2(403, "CSRF_FAILED", `CSRF check failed: ${csrf.reason}`);
     }
   }
   const compiled = compileAgentModule(mod, source);
@@ -1032,9 +1117,60 @@ async function mountAgent(mod, request, apiKey, source = "agent module", csrfMod
   }
   const input = parseAgentRequestBody(body);
   if (input === null) {
-    return jsonError(400, "BAD_REQUEST", "Request must contain a non-empty message or messages[].");
+    return jsonError2(400, "BAD_REQUEST", "Request must contain a non-empty message or messages[].");
+  }
+  const gated = compiled.hitl;
+  const registry2 = getApprovalRegistry();
+  const hitl = gated && gated.size > 0 ? {
+    gated,
+    awaitApproval: (approvalId, opts) => registry2.register(approvalId, {
+      timeoutMs: opts.timeout ?? 3e5,
+      onTimeout: opts.onTimeout ?? "abort"
+    })
+  } : void 0;
+  return uiMessageStreamResponse(
+    streamAgentUIMessages(compiled, apiKey, { ...input, hitl, signal: request.signal })
+  );
+}
+
+// src/server/agent/provider-resolver.ts
+var DEFAULT_REGISTRY = [
+  {
+    name: "openrouter",
+    envKey: "OPENROUTER_API_KEY",
+    baseUrl: "https://openrouter.ai/api/v1",
+    priority: 1
+  },
+  {
+    name: "openai",
+    envKey: "OPENAI_API_KEY",
+    baseUrl: "https://api.openai.com/v1",
+    priority: 2
+  },
+  {
+    name: "anthropic",
+    envKey: "ANTHROPIC_API_KEY",
+    baseUrl: "https://api.anthropic.com",
+    priority: 3
+  }
+];
+var registry = [...DEFAULT_REGISTRY];
+function resolveProvider() {
+  const sorted = [...registry].sort((a, b) => a.priority - b.priority);
+  for (const desc of sorted) {
+    const apiKey = process.env[desc.envKey];
+    if (apiKey && apiKey.length > 0) {
+      return {
+        name: desc.name,
+        apiKey,
+        baseUrl: desc.baseUrl
+      };
+    }
   }
-  return uiMessageStreamResponse(streamAgentUIMessages(compiled, apiKey, input));
+  const envKeys = sorted.map((p) => p.envKey).join(" OR ");
+  throw new Error(
+    `No LLM provider API key found in environment. Set one of: ${envKeys}. Get a free OpenRouter key at https://openrouter.ai/keys (recommended \u2014 one key, many models).`
+  );
 }
 
 // src/server/http/node-web-adapter.ts
@@ -1116,6 +1252,42 @@ function createAgentMiddleware(vite, projectRoot, csrfMode = "strict") {
       const start = Date.now();
       res.setHeader("x-request-id", requestId);
       const urlPath = url.split("?")[0];
+      if (isApprovalPath(urlPath)) {
+        const method2 = (req.method ?? "POST").toUpperCase();
+        if (method2 !== "POST") {
+          sendError(
+            res,
+            "METHOD_NOT_ALLOWED",
+            "Approve endpoints accept POST",
+            405,
+            void 0,
+            requestId
+          );
+          logRequest({ method: method2, url, status: 405, duration: Date.now() - start, requestId });
+          return;
+        }
+        try {
+          const request = incomingMessageToWebRequest(req);
+          const response = await handleAgentApproval(
+            request,
+            urlPath,
+            getApprovalRegistry(),
+            csrfMode
+          );
+          await writeWebResponseToServerResponse(response, res);
+        } catch (err) {
+          sendError(
+            res,
+            "INTERNAL",
+            err instanceof Error ? err.message : "Approve handler failed",
+            500,
+            void 0,
+            requestId
+          );
+        }
+        logRequest({ method: method2, url, status: res.statusCode, duration: Date.now() - start, requestId });
+        return;
+      }
       const agent = scanAgents(projectRoot).find((a) => a.agentPath === urlPath);
       if (!agent) {
         next();
@@ -2516,19 +2688,19 @@ async function theoPluginAsync(rootOrOptions) {
       })
     );
   }
-  const { appTypedClientPlugin } = await import("./app-typed-client-7PBFWZUE.js");
+  const { appTypedClientPlugin } = await import("./app-typed-client-5VQE6DNF.js");
   const appClientPlugin = appTypedClientPlugin({
     cwd: projectRoot,
     serverDir: resolve9(projectRoot, "server"),
     distDir: resolve9(projectRoot, ".theokit")
   });
-  const { actionsVirtualModule } = await import("./actions-virtual-module-EIPXX4ZB.js");
+  const { actionsVirtualModule } = await import("./actions-virtual-module-RM7JRY5N.js");
   const actionsPlugin = actionsVirtualModule({
     serverDir: resolve9(projectRoot, "server"),
     distDir: resolve9(projectRoot, ".theokit")
   });
   const { agentsTypedClientPlugin } = await import("./agents-typed-client-SAWAAH7K.js");
-  const { generateManifest } = await import("./internal-api-4YTJDITC.js");
+  const { generateManifest } = await import("./internal-api-5BDI6N5U.js");
   const agentsClientPlugin = agentsTypedClientPlugin({
     projectRoot,
     distDir: resolve9(projectRoot, ".theokit"),
@@ -2706,4 +2878,4 @@ export {
   theoPluginAsync,
   theoPlugin
 };
-//# sourceMappingURL=chunk-RYTZYFSD.js.map
+//# sourceMappingURL=chunk-UOR6JTCI.js.map