theokit 0.18.0 → 0.19.1

package/dist/cli/index.js

@@ -5,12 +5,12 @@ import "tsx/esm";
 import cac from "cac";
 var cli = cac("theokit");
 cli.command("dev", "Start development server").option("--port <port>", "Port number").action(async (options) => {
-  const { devCommand } = await import("../dev-A7NESJ7S.js");
+  const { devCommand } = await import("../dev-HBXSZSDL.js");
   await devCommand({ port: options.port ? Number(options.port) : void 0 });
 });
 cli.command("build", "Build for production").option("--target <target>", "Deploy target (node, vercel, cloudflare)").action(async (options) => {
   try {
-    const { buildCommand } = await import("../build-5PSDDMFB.js");
+    const { buildCommand } = await import("../build-QGHSA7FT.js");
     await buildCommand({ target: options.target });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
@@ -22,7 +22,7 @@ cli.command("build", "Build for production").option("--target <target>", "Deploy
 });
 cli.command("start", "Start production server").option("--port <port>", "Port number").action(async (options) => {
   try {
-    const { startCommand } = await import("../start-WGOKQEUW.js");
+    const { startCommand } = await import("../start-A5BPZ3KH.js");
     await startCommand({ port: options.port ? Number(options.port) : void 0 });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
@@ -52,7 +52,7 @@ cli.command(
   "Run an agent in the terminal (stream + tool calls + approval)"
 ).action(async (name, message) => {
   try {
-    const { agentCommand } = await import("../agent-TZ5JZUJ7.js");
+    const { agentCommand } = await import("../agent-5UMCZYY4.js");
     const { sawError } = await agentCommand(name, message);
     if (sawError) process.exit(1);
   } catch (err) {
@@ -63,9 +63,21 @@ cli.command(
     process.exit(1);
   }
 });
+cli.command("mcp <agent>", "Serve an agent as an MCP server over stdio (for desktop MCP clients)").action(async (agent) => {
+  try {
+    const { mcpCommand } = await import("../mcp-VWUOA7T7.js");
+    await mcpCommand(agent);
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    console.error(`
+  \u2717 ${msg}
+`);
+    process.exit(1);
+  }
+});
 cli.command("routes", "List all routes, actions, and WebSocket endpoints").action(async () => {
   try {
-    const { routesCommand } = await import("../routes-NNBEZSGN.js");
+    const { routesCommand } = await import("../routes-WKG3UKDX.js");
     await routesCommand();
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
@@ -114,7 +126,7 @@ cli.command(
   "Generate <distDir>/openapi.json from route schemas (opt-in via config.openapi)"
 ).option("--dry-run", "Print the document to stdout without writing to disk (EC-3)").action(async (options) => {
   try {
-    const { openapiCommand } = await import("../openapi-MXMLZCXC.js");
+    const { openapiCommand } = await import("../openapi-PAXSR4UA.js");
     await openapiCommand({ dryRun: Boolean(options.dryRun) });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);

package/dist/cli/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/cli/index.ts"],"sourcesContent":["import cac from 'cac'\n\ninterface CliOptions {\n  port?: string | number\n  target?: string\n  upgradeReadiness?: string | number\n  json?: boolean\n  allowWarnings?: boolean\n  force?: boolean\n  dryRun?: boolean\n}\n\nconst cli = cac('theokit')\n\ncli\n  .command('dev', 'Start development server')\n  .option('--port <port>', 'Port number')\n  .action(async (options: CliOptions) => {\n    const { devCommand } = await import('./commands/dev.js')\n    await devCommand({ port: options.port ? Number(options.port) : undefined })\n  })\n\ncli\n  .command('build', 'Build for production')\n  .option('--target <target>', 'Deploy target (node, vercel, cloudflare)')\n  .action(async (options: CliOptions) => {\n    try {\n      const { buildCommand } = await import('./commands/build.js')\n      await buildCommand({ target: options.target })\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err)\n      console.error(`\\n  ✗ ${msg}\\n`)\n      process.exit(1)\n    }\n  })\n\ncli\n  .command('start', 'Start production server')\n  .option('--port <port>', 'Port number')\n  .action(async (options: CliOptions) => {\n    try {\n      const { startCommand } = await import('./commands/start/index.js')\n      await startCommand({ port: options.port ? Number(options.port) : undefined })\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err)\n      console.error(`\\n  ✗ ${msg}\\n`)\n      process.exit(1)\n    }\n  })\n\ncli\n  .command(\n    'generate <type> <name> [...fields]',\n    'Generate a route, action, page, ws, controller, or resource (resource accepts field:type args)',\n  )\n  .action(async (type: string, name: string, fields: string[]) => {\n    try {\n      const { generateCommand } = await import('./commands/generate.js')\n      await generateCommand(type, name, fields.length > 0 ? fields : undefined)\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err)\n      console.error(`\\n  ✗ ${msg}\\n`)\n      process.exit(1)\n    }\n  })\n\ncli\n  .command(\n    'agent <name> [message]',\n    'Run an agent in the terminal (stream + tool calls + approval)',\n  )\n  .action(async (name: string, message: string | undefined) => {\n    try {\n      const { agentCommand } = await import('./commands/agent.js')\n      const { sawError } = await agentCommand(name, message)\n      // The run ended with an error chunk (already rendered) — exit non-zero so `$?` / CI reflects it.\n      if (sawError) process.exit(1)\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err)\n      console.error(`\\n  ✗ ${msg}\\n`)\n      process.exit(1)\n    }\n  })\n\ncli.command('routes', 'List all routes, actions, and WebSocket endpoints').action(async () => {\n  try {\n    const { routesCommand } = await import('./commands/routes.js')\n    await routesCommand()\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err)\n    console.error(`\\n  ✗ ${msg}\\n`)\n    process.exit(1)\n  }\n})\n\ncli\n  .command('check', 'Run typecheck + scan + (optional) eslint')\n  .option(\n    '--upgrade-readiness <version>',\n    'Scan source for anticipated breakage under a future TheoKit version (currently supports 0.3). See docs/migration/0.2-to-0.3.md',\n  )\n  .option('--json', 'Emit machine-readable JSON (only with --upgrade-readiness)')\n  .option(\n    '--allow-warnings',\n    'Do not fail the build when violations are present (only with --upgrade-readiness)',\n  )\n  .action(async (options: CliOptions) => {\n    // cac may coerce `0.3` to a JS number — normalize before comparing.\n    const targetRaw = options.upgradeReadiness\n    if (targetRaw !== undefined) {\n      const target = String(targetRaw)\n      if (target !== '0.3') {\n        console.error(`\\n  ✗ --upgrade-readiness: only '0.3' is supported (got '${target}')\\n`)\n        process.exit(1)\n      }\n      const { upgradeReadinessCommand } = await import('./commands/upgrade-readiness.js')\n      await upgradeReadinessCommand({\n        json: Boolean(options.json),\n        allowWarnings: Boolean(options.allowWarnings),\n      })\n      return\n    }\n    const { checkCommand } = await import('./commands/check.js')\n    await checkCommand()\n  })\n\ncli\n  .command('add <package>', 'Install a known TheoKit adapter or plugin (whitelist-only)')\n  .action(async (pkg: string) => {\n    const { addCommand } = await import('./commands/add.js')\n    await addCommand(pkg)\n  })\n\ncli.command('info', 'Print environment info (runtime, config, routes)').action(async () => {\n  const { infoCommand } = await import('./commands/info.js')\n  await infoCommand()\n})\n\ncli\n  .command(\n    'openapi',\n    'Generate <distDir>/openapi.json from route schemas (opt-in via config.openapi)',\n  )\n  .option('--dry-run', 'Print the document to stdout without writing to disk (EC-3)')\n  .action(async (options: CliOptions) => {\n    try {\n      const { openapiCommand } = await import('./commands/openapi.js')\n      await openapiCommand({ dryRun: Boolean(options.dryRun) })\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err)\n      console.error(`\\n  ✗ ${msg}\\n`)\n      process.exit(1)\n    }\n  })\n\ncli\n  .command(\n    'migrate <kind>',\n    'Run a one-shot convention migration. Supported: router (G6 dotted→nested), services-json-v1-to-v2 (Plan v1.2 T2.3)',\n  )\n  .option('--dry-run', 'Print the migration plan but do not touch the filesystem')\n  .option('--force', 'Skip the dev-server port pre-flight check (CI / non-TTY)')\n  .option('--name <slug>', 'Explicit project name (DNS-1123). Services-json migrate only.')\n  .action(async (kind: string, options: CliOptions & { name?: string }) => {\n    try {\n      if (kind === 'router') {\n        const { routerMigrateCommand } = await import('./commands/migrate/router.js')\n        await routerMigrateCommand({\n          dryRun: Boolean(options.dryRun),\n          force: Boolean(options.force),\n        })\n        return\n      }\n      if (kind === 'services-json-v1-to-v2' || kind === 'services-json') {\n        const { servicesJsonMigrateCommand } = await import('./commands/migrate/services-json.js')\n        await servicesJsonMigrateCommand({\n          dryRun: Boolean(options.dryRun),\n          name: options.name,\n        })\n        return\n      }\n      console.error(\n        `\\n  ✗ Unknown migration kind: ${kind}. Supported: router, services-json-v1-to-v2\\n`,\n      )\n      process.exit(1)\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err)\n      console.error(`\\n  ✗ ${msg}\\n`)\n      process.exit(1)\n    }\n  })\n\ncli\n  .command('docker', 'Generate Dockerfile for production')\n  .option('--force', 'Overwrite existing Dockerfile')\n  .action(async (options: CliOptions) => {\n    try {\n      const { dockerCommand } = await import('./commands/docker.js')\n      await dockerCommand({ force: options.force })\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err)\n      console.error(`\\n  ✗ ${msg}\\n`)\n      process.exit(1)\n    }\n  })\n\ncli\n  .command('db <action>', 'Database commands: migrate (push schema), generate (SQL files), seed')\n  .action(async (action: string) => {\n    try {\n      const { dbCommandCli } = await import('./commands/db.js')\n      dbCommandCli(action)\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err)\n      console.error(`\\n  ✗ ${msg}\\n`)\n      process.exit(1)\n    }\n  })\n\ncli.help()\ncli.version('0.1.0-alpha.0')\n\nexport function main(): void {\n  cli.parse()\n}\n\n// Auto-execute when run as script\nmain()\n"],"mappings":";;;;AAAA,OAAO,SAAS;AAYhB,IAAM,MAAM,IAAI,SAAS;AAEzB,IACG,QAAQ,OAAO,0BAA0B,EACzC,OAAO,iBAAiB,aAAa,EACrC,OAAO,OAAO,YAAwB;AACrC,QAAM,EAAE,WAAW,IAAI,MAAM,OAAO,oBAAmB;AACvD,QAAM,WAAW,EAAE,MAAM,QAAQ,OAAO,OAAO,QAAQ,IAAI,IAAI,OAAU,CAAC;AAC5E,CAAC;AAEH,IACG,QAAQ,SAAS,sBAAsB,EACvC,OAAO,qBAAqB,0CAA0C,EACtE,OAAO,OAAO,YAAwB;AACrC,MAAI;AACF,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,sBAAqB;AAC3D,UAAM,aAAa,EAAE,QAAQ,QAAQ,OAAO,CAAC;AAAA,EAC/C,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAQ,MAAM;AAAA,WAAS,GAAG;AAAA,CAAI;AAC9B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAEH,IACG,QAAQ,SAAS,yBAAyB,EAC1C,OAAO,iBAAiB,aAAa,EACrC,OAAO,OAAO,YAAwB;AACrC,MAAI;AACF,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,sBAA2B;AACjE,UAAM,aAAa,EAAE,MAAM,QAAQ,OAAO,OAAO,QAAQ,IAAI,IAAI,OAAU,CAAC;AAAA,EAC9E,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAQ,MAAM;AAAA,WAAS,GAAG;AAAA,CAAI;AAC9B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAEH,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,OAAO,MAAc,MAAc,WAAqB;AAC9D,MAAI;AACF,UAAM,EAAE,gBAAgB,IAAI,MAAM,OAAO,yBAAwB;AACjE,UAAM,gBAAgB,MAAM,MAAM,OAAO,SAAS,IAAI,SAAS,MAAS;AAAA,EAC1E,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAQ,MAAM;AAAA,WAAS,GAAG;AAAA,CAAI;AAC9B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAEH,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,OAAO,MAAc,YAAgC;AAC3D,MAAI;AACF,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,sBAAqB;AAC3D,UAAM,EAAE,SAAS,IAAI,MAAM,aAAa,MAAM,OAAO;AAErD,QAAI,SAAU,SAAQ,KAAK,CAAC;AAAA,EAC9B,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAQ,MAAM;AAAA,WAAS,GAAG;AAAA,CAAI;AAC9B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAEH,IAAI,QAAQ,UAAU,mDAAmD,EAAE,OAAO,YAAY;AAC5F,MAAI;AACF,UAAM,EAAE,cAAc,IAAI,MAAM,OAAO,uBAAsB;AAC7D,UAAM,cAAc;AAAA,EACtB,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAQ,MAAM;AAAA,WAAS,GAAG;AAAA,CAAI;AAC9B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAED,IACG,QAAQ,SAAS,0CAA0C,EAC3D;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,UAAU,4DAA4D,EAC7E;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,OAAO,YAAwB;AAErC,QAAM,YAAY,QAAQ;AAC1B,MAAI,cAAc,QAAW;AAC3B,UAAM,SAAS,OAAO,SAAS;AAC/B,QAAI,WAAW,OAAO;AACpB,cAAQ,MAAM;AAAA,8DAA4D,MAAM;AAAA,CAAM;AACtF,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,UAAM,EAAE,wBAAwB,IAAI,MAAM,OAAO,kCAAiC;AAClF,UAAM,wBAAwB;AAAA,MAC5B,MAAM,QAAQ,QAAQ,IAAI;AAAA,MAC1B,eAAe,QAAQ,QAAQ,aAAa;AAAA,IAC9C,CAAC;AACD;AAAA,EACF;AACA,QAAM,EAAE,aAAa,IAAI,MAAM,OAAO,sBAAqB;AAC3D,QAAM,aAAa;AACrB,CAAC;AAEH,IACG,QAAQ,iBAAiB,4DAA4D,EACrF,OAAO,OAAO,QAAgB;AAC7B,QAAM,EAAE,WAAW,IAAI,MAAM,OAAO,oBAAmB;AACvD,QAAM,WAAW,GAAG;AACtB,CAAC;AAEH,IAAI,QAAQ,QAAQ,kDAAkD,EAAE,OAAO,YAAY;AACzF,QAAM,EAAE,YAAY,IAAI,MAAM,OAAO,qBAAoB;AACzD,QAAM,YAAY;AACpB,CAAC;AAED,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,aAAa,6DAA6D,EACjF,OAAO,OAAO,YAAwB;AACrC,MAAI;AACF,UAAM,EAAE,eAAe,IAAI,MAAM,OAAO,wBAAuB;AAC/D,UAAM,eAAe,EAAE,QAAQ,QAAQ,QAAQ,MAAM,EAAE,CAAC;AAAA,EAC1D,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAQ,MAAM;AAAA,WAAS,GAAG;AAAA,CAAI;AAC9B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAEH,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,aAAa,0DAA0D,EAC9E,OAAO,WAAW,0DAA0D,EAC5E,OAAO,iBAAiB,+DAA+D,EACvF,OAAO,OAAO,MAAc,YAA4C;AACvE,MAAI;AACF,QAAI,SAAS,UAAU;AACrB,YAAM,EAAE,qBAAqB,IAAI,MAAM,OAAO,uBAA8B;AAC5E,YAAM,qBAAqB;AAAA,QACzB,QAAQ,QAAQ,QAAQ,MAAM;AAAA,QAC9B,OAAO,QAAQ,QAAQ,KAAK;AAAA,MAC9B,CAAC;AACD;AAAA,IACF;AACA,QAAI,SAAS,4BAA4B,SAAS,iBAAiB;AACjE,YAAM,EAAE,2BAA2B,IAAI,MAAM,OAAO,8BAAqC;AACzF,YAAM,2BAA2B;AAAA,QAC/B,QAAQ,QAAQ,QAAQ,MAAM;AAAA,QAC9B,MAAM,QAAQ;AAAA,MAChB,CAAC;AACD;AAAA,IACF;AACA,YAAQ;AAAA,MACN;AAAA,mCAAiC,IAAI;AAAA;AAAA,IACvC;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAQ,MAAM;AAAA,WAAS,GAAG;AAAA,CAAI;AAC9B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAEH,IACG,QAAQ,UAAU,oCAAoC,EACtD,OAAO,WAAW,+BAA+B,EACjD,OAAO,OAAO,YAAwB;AACrC,MAAI;AACF,UAAM,EAAE,cAAc,IAAI,MAAM,OAAO,uBAAsB;AAC7D,UAAM,cAAc,EAAE,OAAO,QAAQ,MAAM,CAAC;AAAA,EAC9C,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAQ,MAAM;AAAA,WAAS,GAAG;AAAA,CAAI;AAC9B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAEH,IACG,QAAQ,eAAe,sEAAsE,EAC7F,OAAO,OAAO,WAAmB;AAChC,MAAI;AACF,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,mBAAkB;AACxD,iBAAa,MAAM;AAAA,EACrB,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAQ,MAAM;AAAA,WAAS,GAAG;AAAA,CAAI;AAC9B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAEH,IAAI,KAAK;AACT,IAAI,QAAQ,eAAe;AAEpB,SAAS,OAAa;AAC3B,MAAI,MAAM;AACZ;AAGA,KAAK;","names":[]}
+{"version":3,"sources":["../../src/cli/index.ts"],"sourcesContent":["import cac from 'cac'\n\ninterface CliOptions {\n  port?: string | number\n  target?: string\n  upgradeReadiness?: string | number\n  json?: boolean\n  allowWarnings?: boolean\n  force?: boolean\n  dryRun?: boolean\n}\n\nconst cli = cac('theokit')\n\ncli\n  .command('dev', 'Start development server')\n  .option('--port <port>', 'Port number')\n  .action(async (options: CliOptions) => {\n    const { devCommand } = await import('./commands/dev.js')\n    await devCommand({ port: options.port ? Number(options.port) : undefined })\n  })\n\ncli\n  .command('build', 'Build for production')\n  .option('--target <target>', 'Deploy target (node, vercel, cloudflare)')\n  .action(async (options: CliOptions) => {\n    try {\n      const { buildCommand } = await import('./commands/build.js')\n      await buildCommand({ target: options.target })\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err)\n      console.error(`\\n  ✗ ${msg}\\n`)\n      process.exit(1)\n    }\n  })\n\ncli\n  .command('start', 'Start production server')\n  .option('--port <port>', 'Port number')\n  .action(async (options: CliOptions) => {\n    try {\n      const { startCommand } = await import('./commands/start/index.js')\n      await startCommand({ port: options.port ? Number(options.port) : undefined })\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err)\n      console.error(`\\n  ✗ ${msg}\\n`)\n      process.exit(1)\n    }\n  })\n\ncli\n  .command(\n    'generate <type> <name> [...fields]',\n    'Generate a route, action, page, ws, controller, or resource (resource accepts field:type args)',\n  )\n  .action(async (type: string, name: string, fields: string[]) => {\n    try {\n      const { generateCommand } = await import('./commands/generate.js')\n      await generateCommand(type, name, fields.length > 0 ? fields : undefined)\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err)\n      console.error(`\\n  ✗ ${msg}\\n`)\n      process.exit(1)\n    }\n  })\n\ncli\n  .command(\n    'agent <name> [message]',\n    'Run an agent in the terminal (stream + tool calls + approval)',\n  )\n  .action(async (name: string, message: string | undefined) => {\n    try {\n      const { agentCommand } = await import('./commands/agent.js')\n      const { sawError } = await agentCommand(name, message)\n      // The run ended with an error chunk (already rendered) — exit non-zero so `$?` / CI reflects it.\n      if (sawError) process.exit(1)\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err)\n      console.error(`\\n  ✗ ${msg}\\n`)\n      process.exit(1)\n    }\n  })\n\ncli\n  .command('mcp <agent>', 'Serve an agent as an MCP server over stdio (for desktop MCP clients)')\n  .action(async (agent: string) => {\n    try {\n      const { mcpCommand } = await import('./commands/mcp.js')\n      await mcpCommand(agent)\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err)\n      console.error(`\\n  ✗ ${msg}\\n`)\n      process.exit(1)\n    }\n  })\n\ncli.command('routes', 'List all routes, actions, and WebSocket endpoints').action(async () => {\n  try {\n    const { routesCommand } = await import('./commands/routes.js')\n    await routesCommand()\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err)\n    console.error(`\\n  ✗ ${msg}\\n`)\n    process.exit(1)\n  }\n})\n\ncli\n  .command('check', 'Run typecheck + scan + (optional) eslint')\n  .option(\n    '--upgrade-readiness <version>',\n    'Scan source for anticipated breakage under a future TheoKit version (currently supports 0.3). See docs/migration/0.2-to-0.3.md',\n  )\n  .option('--json', 'Emit machine-readable JSON (only with --upgrade-readiness)')\n  .option(\n    '--allow-warnings',\n    'Do not fail the build when violations are present (only with --upgrade-readiness)',\n  )\n  .action(async (options: CliOptions) => {\n    // cac may coerce `0.3` to a JS number — normalize before comparing.\n    const targetRaw = options.upgradeReadiness\n    if (targetRaw !== undefined) {\n      const target = String(targetRaw)\n      if (target !== '0.3') {\n        console.error(`\\n  ✗ --upgrade-readiness: only '0.3' is supported (got '${target}')\\n`)\n        process.exit(1)\n      }\n      const { upgradeReadinessCommand } = await import('./commands/upgrade-readiness.js')\n      await upgradeReadinessCommand({\n        json: Boolean(options.json),\n        allowWarnings: Boolean(options.allowWarnings),\n      })\n      return\n    }\n    const { checkCommand } = await import('./commands/check.js')\n    await checkCommand()\n  })\n\ncli\n  .command('add <package>', 'Install a known TheoKit adapter or plugin (whitelist-only)')\n  .action(async (pkg: string) => {\n    const { addCommand } = await import('./commands/add.js')\n    await addCommand(pkg)\n  })\n\ncli.command('info', 'Print environment info (runtime, config, routes)').action(async () => {\n  const { infoCommand } = await import('./commands/info.js')\n  await infoCommand()\n})\n\ncli\n  .command(\n    'openapi',\n    'Generate <distDir>/openapi.json from route schemas (opt-in via config.openapi)',\n  )\n  .option('--dry-run', 'Print the document to stdout without writing to disk (EC-3)')\n  .action(async (options: CliOptions) => {\n    try {\n      const { openapiCommand } = await import('./commands/openapi.js')\n      await openapiCommand({ dryRun: Boolean(options.dryRun) })\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err)\n      console.error(`\\n  ✗ ${msg}\\n`)\n      process.exit(1)\n    }\n  })\n\ncli\n  .command(\n    'migrate <kind>',\n    'Run a one-shot convention migration. Supported: router (G6 dotted→nested), services-json-v1-to-v2 (Plan v1.2 T2.3)',\n  )\n  .option('--dry-run', 'Print the migration plan but do not touch the filesystem')\n  .option('--force', 'Skip the dev-server port pre-flight check (CI / non-TTY)')\n  .option('--name <slug>', 'Explicit project name (DNS-1123). Services-json migrate only.')\n  .action(async (kind: string, options: CliOptions & { name?: string }) => {\n    try {\n      if (kind === 'router') {\n        const { routerMigrateCommand } = await import('./commands/migrate/router.js')\n        await routerMigrateCommand({\n          dryRun: Boolean(options.dryRun),\n          force: Boolean(options.force),\n        })\n        return\n      }\n      if (kind === 'services-json-v1-to-v2' || kind === 'services-json') {\n        const { servicesJsonMigrateCommand } = await import('./commands/migrate/services-json.js')\n        await servicesJsonMigrateCommand({\n          dryRun: Boolean(options.dryRun),\n          name: options.name,\n        })\n        return\n      }\n      console.error(\n        `\\n  ✗ Unknown migration kind: ${kind}. Supported: router, services-json-v1-to-v2\\n`,\n      )\n      process.exit(1)\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err)\n      console.error(`\\n  ✗ ${msg}\\n`)\n      process.exit(1)\n    }\n  })\n\ncli\n  .command('docker', 'Generate Dockerfile for production')\n  .option('--force', 'Overwrite existing Dockerfile')\n  .action(async (options: CliOptions) => {\n    try {\n      const { dockerCommand } = await import('./commands/docker.js')\n      await dockerCommand({ force: options.force })\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err)\n      console.error(`\\n  ✗ ${msg}\\n`)\n      process.exit(1)\n    }\n  })\n\ncli\n  .command('db <action>', 'Database commands: migrate (push schema), generate (SQL files), seed')\n  .action(async (action: string) => {\n    try {\n      const { dbCommandCli } = await import('./commands/db.js')\n      dbCommandCli(action)\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err)\n      console.error(`\\n  ✗ ${msg}\\n`)\n      process.exit(1)\n    }\n  })\n\ncli.help()\ncli.version('0.1.0-alpha.0')\n\nexport function main(): void {\n  cli.parse()\n}\n\n// Auto-execute when run as script\nmain()\n"],"mappings":";;;;AAAA,OAAO,SAAS;AAYhB,IAAM,MAAM,IAAI,SAAS;AAEzB,IACG,QAAQ,OAAO,0BAA0B,EACzC,OAAO,iBAAiB,aAAa,EACrC,OAAO,OAAO,YAAwB;AACrC,QAAM,EAAE,WAAW,IAAI,MAAM,OAAO,oBAAmB;AACvD,QAAM,WAAW,EAAE,MAAM,QAAQ,OAAO,OAAO,QAAQ,IAAI,IAAI,OAAU,CAAC;AAC5E,CAAC;AAEH,IACG,QAAQ,SAAS,sBAAsB,EACvC,OAAO,qBAAqB,0CAA0C,EACtE,OAAO,OAAO,YAAwB;AACrC,MAAI;AACF,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,sBAAqB;AAC3D,UAAM,aAAa,EAAE,QAAQ,QAAQ,OAAO,CAAC;AAAA,EAC/C,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAQ,MAAM;AAAA,WAAS,GAAG;AAAA,CAAI;AAC9B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAEH,IACG,QAAQ,SAAS,yBAAyB,EAC1C,OAAO,iBAAiB,aAAa,EACrC,OAAO,OAAO,YAAwB;AACrC,MAAI;AACF,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,sBAA2B;AACjE,UAAM,aAAa,EAAE,MAAM,QAAQ,OAAO,OAAO,QAAQ,IAAI,IAAI,OAAU,CAAC;AAAA,EAC9E,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAQ,MAAM;AAAA,WAAS,GAAG;AAAA,CAAI;AAC9B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAEH,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,OAAO,MAAc,MAAc,WAAqB;AAC9D,MAAI;AACF,UAAM,EAAE,gBAAgB,IAAI,MAAM,OAAO,yBAAwB;AACjE,UAAM,gBAAgB,MAAM,MAAM,OAAO,SAAS,IAAI,SAAS,MAAS;AAAA,EAC1E,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAQ,MAAM;AAAA,WAAS,GAAG;AAAA,CAAI;AAC9B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAEH,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,OAAO,MAAc,YAAgC;AAC3D,MAAI;AACF,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,sBAAqB;AAC3D,UAAM,EAAE,SAAS,IAAI,MAAM,aAAa,MAAM,OAAO;AAErD,QAAI,SAAU,SAAQ,KAAK,CAAC;AAAA,EAC9B,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAQ,MAAM;AAAA,WAAS,GAAG;AAAA,CAAI;AAC9B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAEH,IACG,QAAQ,eAAe,sEAAsE,EAC7F,OAAO,OAAO,UAAkB;AAC/B,MAAI;AACF,UAAM,EAAE,WAAW,IAAI,MAAM,OAAO,oBAAmB;AACvD,UAAM,WAAW,KAAK;AAAA,EACxB,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAQ,MAAM;AAAA,WAAS,GAAG;AAAA,CAAI;AAC9B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAEH,IAAI,QAAQ,UAAU,mDAAmD,EAAE,OAAO,YAAY;AAC5F,MAAI;AACF,UAAM,EAAE,cAAc,IAAI,MAAM,OAAO,uBAAsB;AAC7D,UAAM,cAAc;AAAA,EACtB,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAQ,MAAM;AAAA,WAAS,GAAG;AAAA,CAAI;AAC9B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAED,IACG,QAAQ,SAAS,0CAA0C,EAC3D;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,UAAU,4DAA4D,EAC7E;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,OAAO,YAAwB;AAErC,QAAM,YAAY,QAAQ;AAC1B,MAAI,cAAc,QAAW;AAC3B,UAAM,SAAS,OAAO,SAAS;AAC/B,QAAI,WAAW,OAAO;AACpB,cAAQ,MAAM;AAAA,8DAA4D,MAAM;AAAA,CAAM;AACtF,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,UAAM,EAAE,wBAAwB,IAAI,MAAM,OAAO,kCAAiC;AAClF,UAAM,wBAAwB;AAAA,MAC5B,MAAM,QAAQ,QAAQ,IAAI;AAAA,MAC1B,eAAe,QAAQ,QAAQ,aAAa;AAAA,IAC9C,CAAC;AACD;AAAA,EACF;AACA,QAAM,EAAE,aAAa,IAAI,MAAM,OAAO,sBAAqB;AAC3D,QAAM,aAAa;AACrB,CAAC;AAEH,IACG,QAAQ,iBAAiB,4DAA4D,EACrF,OAAO,OAAO,QAAgB;AAC7B,QAAM,EAAE,WAAW,IAAI,MAAM,OAAO,oBAAmB;AACvD,QAAM,WAAW,GAAG;AACtB,CAAC;AAEH,IAAI,QAAQ,QAAQ,kDAAkD,EAAE,OAAO,YAAY;AACzF,QAAM,EAAE,YAAY,IAAI,MAAM,OAAO,qBAAoB;AACzD,QAAM,YAAY;AACpB,CAAC;AAED,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,aAAa,6DAA6D,EACjF,OAAO,OAAO,YAAwB;AACrC,MAAI;AACF,UAAM,EAAE,eAAe,IAAI,MAAM,OAAO,wBAAuB;AAC/D,UAAM,eAAe,EAAE,QAAQ,QAAQ,QAAQ,MAAM,EAAE,CAAC;AAAA,EAC1D,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAQ,MAAM;AAAA,WAAS,GAAG;AAAA,CAAI;AAC9B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAEH,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,aAAa,0DAA0D,EAC9E,OAAO,WAAW,0DAA0D,EAC5E,OAAO,iBAAiB,+DAA+D,EACvF,OAAO,OAAO,MAAc,YAA4C;AACvE,MAAI;AACF,QAAI,SAAS,UAAU;AACrB,YAAM,EAAE,qBAAqB,IAAI,MAAM,OAAO,uBAA8B;AAC5E,YAAM,qBAAqB;AAAA,QACzB,QAAQ,QAAQ,QAAQ,MAAM;AAAA,QAC9B,OAAO,QAAQ,QAAQ,KAAK;AAAA,MAC9B,CAAC;AACD;AAAA,IACF;AACA,QAAI,SAAS,4BAA4B,SAAS,iBAAiB;AACjE,YAAM,EAAE,2BAA2B,IAAI,MAAM,OAAO,8BAAqC;AACzF,YAAM,2BAA2B;AAAA,QAC/B,QAAQ,QAAQ,QAAQ,MAAM;AAAA,QAC9B,MAAM,QAAQ;AAAA,MAChB,CAAC;AACD;AAAA,IACF;AACA,YAAQ;AAAA,MACN;AAAA,mCAAiC,IAAI;AAAA;AAAA,IACvC;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAQ,MAAM;AAAA,WAAS,GAAG;AAAA,CAAI;AAC9B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAEH,IACG,QAAQ,UAAU,oCAAoC,EACtD,OAAO,WAAW,+BAA+B,EACjD,OAAO,OAAO,YAAwB;AACrC,MAAI;AACF,UAAM,EAAE,cAAc,IAAI,MAAM,OAAO,uBAAsB;AAC7D,UAAM,cAAc,EAAE,OAAO,QAAQ,MAAM,CAAC;AAAA,EAC9C,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAQ,MAAM;AAAA,WAAS,GAAG;AAAA,CAAI;AAC9B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAEH,IACG,QAAQ,eAAe,sEAAsE,EAC7F,OAAO,OAAO,WAAmB;AAChC,MAAI;AACF,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,mBAAkB;AACxD,iBAAa,MAAM;AAAA,EACrB,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAQ,MAAM;AAAA,WAAS,GAAG;AAAA,CAAI;AAC9B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAEH,IAAI,KAAK;AACT,IAAI,QAAQ,eAAe;AAEpB,SAAS,OAAa;AAC3B,MAAI,MAAM;AACZ;AAGA,KAAK;","names":[]}

package/dist/{dev-A7NESJ7S.js → dev-HBXSZSDL.js}

@@ -8,8 +8,9 @@ import {
 } from "./chunk-HNBWZKIQ.js";
 import {
   theoPluginAsync
-} from "./chunk-CC5WOQUV.js";
-import "./chunk-XVFMSNDE.js";
+} from "./chunk-N3WK6MKO.js";
+import "./chunk-DXF64KS5.js";
+import "./chunk-DMC6HYUR.js";
 import "./chunk-M6NMS5LR.js";
 import "./chunk-IEES3CHD.js";
 import {
@@ -25,9 +26,9 @@ import {
 import "./chunk-5ODOE6EF.js";
 import "./chunk-KXA37ONC.js";
 import "./chunk-WR4F4EEZ.js";
-import "./chunk-NXTF5PPW.js";
+import "./chunk-TIZBKEDV.js";
 import "./chunk-34YQOXGM.js";
-import "./chunk-GBXLKYIA.js";
+import "./chunk-FRUEDJFX.js";
 import "./chunk-P37RZRFV.js";
 import "./chunk-HGZL5EOI.js";
 
@@ -104,4 +105,4 @@ export {
   devCommand,
   startDevServer
 };
-//# sourceMappingURL=dev-A7NESJ7S.js.map
+//# sourceMappingURL=dev-HBXSZSDL.js.map

package/dist/{dev-A7NESJ7S.js.map → dev-HBXSZSDL.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/cli/commands/dev.ts"],"sourcesContent":["import react from '@vitejs/plugin-react'\nimport { createServer, type Plugin, type ViteDevServer } from 'vite'\n\nimport { loadConfig } from '../../config/load-config.js'\nimport { loadEnv } from '../../config/load-env.js'\nimport { validateProjectStructure } from '../../config/validate-structure.js'\nimport { orchestrateDev } from '../../services/index.js'\nimport { theoPluginAsync } from '../../vite-plugin/index.js'\nimport { preflightNodeAndBindings } from '../preflight-node-version.js'\n\ninterface DevOptions {\n  port?: number\n}\n\nexport async function startDevServer(cwd: string, options?: DevOptions): Promise<ViteDevServer> {\n  // Preflight (FIRST — BEFORE anything that touches native bindings):\n  // verifies Node version + native binding ABI match. Emits actionable\n  // error referencing `nvm use` + `pnpm rebuild` when the dev server\n  // was spawned under the wrong Node (common gotcha with `nohup env ...`\n  // stripping the nvm PATH prefix).\n  preflightNodeAndBindings(cwd)\n\n  // Phase 1 (T1.2) — Load .env files into process.env BEFORE any module\n  // reads them. Must run before loadConfig() so theo.config.ts functions\n  // referencing process.env.* resolve correctly.\n  loadEnv({ cwd, mode: 'development' })\n\n  const config = await loadConfig(cwd)\n  validateProjectStructure(cwd)\n\n  // Wave 2 (T1.1) — spawn polyglot services BEFORE Vite. Healthcheck gates\n  // readiness. Empty `services: {}` → early return (Wave 1 BC preserved).\n  const orchestration = await orchestrateDev({\n    cwd,\n    services: config.services,\n  })\n  if (!orchestration.allHealthy) {\n    await orchestration.stop()\n    throw new Error(\n      `[services] services failed healthcheck: ${orchestration.unhealthy.join(', ')}. ` +\n        `Check that each declared service binds its port and responds 200 on its ` +\n        `healthcheck path within 30s.`,\n    )\n  }\n\n  // Phase 7 — legacy fs-mtime sweep removed: SDK's Agent.registry handles\n  // LRU + idle eviction natively (configurable via theo.config.ts >\n  // agents.registry; lazy-configured on first request).\n\n  const port = options?.port ?? config.port\n  // Narrow the rateLimit union: only the legacy flat shape (windowMs+max)\n  // flows into the theoPlugin's RateLimitConfig parameter. The per-route\n  // variant is consumed inside the api-middleware via the loaded user\n  // config separately.\n  const flatRateLimit =\n    config.rateLimit && 'windowMs' in config.rateLimit && 'max' in config.rateLimit\n      ? config.rateLimit\n      : undefined\n  // theoPluginAsync auto-chains @theokit/ui + @tailwindcss/vite via\n  // top-level Plugin[] return (sync `theoPlugin()` factory's config()\n  // hook returning {plugins:[...]} is silently dropped by Vite — see\n  // commit history). Spread the result so Vite flattens them.\n  let server: ViteDevServer\n  try {\n    const theoPlugins = await theoPluginAsync({\n      root: cwd,\n      rateLimit: flatRateLimit,\n      ssr: config.ssr,\n      // Wave 2 (T3.1) — wire typed-client plugin when services declared.\n      services: config.services,\n      // T4.1 (canvas-ecosystem-refactor / ADR D6) — passthrough peer-deps\n      // that plugins import dynamically (e.g., mermaid via plugin-canvas).\n      viteOptimizeDeps: config.viteOptimizeDeps,\n    })\n    server = await createServer({\n      root: cwd,\n      plugins: [react(), ...theoPlugins] as Plugin[],\n      server: {\n        port,\n        host: config.host,\n        open: config.open,\n        strictPort: config.strictPort,\n        warmup: config.warmup ?? {\n          clientFiles: ['./app/**/*.tsx', './app/**/*.ts'],\n        },\n      },\n      logLevel: options?.port === 0 ? 'silent' : undefined,\n    })\n\n    await server.listen()\n  } catch (err) {\n    // EC-1 / try-finally pattern: if Vite create/listen fails AFTER services\n    // started, stop them so we don't leak child processes.\n    await orchestration.stop()\n    throw err\n  }\n\n  // EC-1 fix: attach orchestration.stop() to the underlying HTTP server's\n  // close event via Node-native API. We do NOT mutate `server.close`\n  // (fragile across Vite upgrades). httpServer is `http.Server | null`.\n  server.httpServer?.on('close', () => {\n    void orchestration.stop()\n  })\n\n  return server\n}\n\nexport async function devCommand(options: DevOptions): Promise<void> {\n  try {\n    const cwd = process.cwd()\n    const server = await startDevServer(cwd, options)\n    server.printUrls()\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err)\n    console.error(`\\n  ✗ ${msg}\\n`)\n    process.exit(1)\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,WAAW;AAClB,SAAS,oBAAqD;AAa9D,eAAsB,eAAe,KAAa,SAA8C;AAM9F,2BAAyB,GAAG;AAK5B,UAAQ,EAAE,KAAK,MAAM,cAAc,CAAC;AAEpC,QAAM,SAAS,MAAM,WAAW,GAAG;AACnC,2BAAyB,GAAG;AAI5B,QAAM,gBAAgB,MAAM,eAAe;AAAA,IACzC;AAAA,IACA,UAAU,OAAO;AAAA,EACnB,CAAC;AACD,MAAI,CAAC,cAAc,YAAY;AAC7B,UAAM,cAAc,KAAK;AACzB,UAAM,IAAI;AAAA,MACR,2CAA2C,cAAc,UAAU,KAAK,IAAI,CAAC;AAAA,IAG/E;AAAA,EACF;AAMA,QAAM,OAAO,SAAS,QAAQ,OAAO;AAKrC,QAAM,gBACJ,OAAO,aAAa,cAAc,OAAO,aAAa,SAAS,OAAO,YAClE,OAAO,YACP;AAKN,MAAI;AACJ,MAAI;AACF,UAAM,cAAc,MAAM,gBAAgB;AAAA,MACxC,MAAM;AAAA,MACN,WAAW;AAAA,MACX,KAAK,OAAO;AAAA;AAAA,MAEZ,UAAU,OAAO;AAAA;AAAA;AAAA,MAGjB,kBAAkB,OAAO;AAAA,IAC3B,CAAC;AACD,aAAS,MAAM,aAAa;AAAA,MAC1B,MAAM;AAAA,MACN,SAAS,CAAC,MAAM,GAAG,GAAG,WAAW;AAAA,MACjC,QAAQ;AAAA,QACN;AAAA,QACA,MAAM,OAAO;AAAA,QACb,MAAM,OAAO;AAAA,QACb,YAAY,OAAO;AAAA,QACnB,QAAQ,OAAO,UAAU;AAAA,UACvB,aAAa,CAAC,kBAAkB,eAAe;AAAA,QACjD;AAAA,MACF;AAAA,MACA,UAAU,SAAS,SAAS,IAAI,WAAW;AAAA,IAC7C,CAAC;AAED,UAAM,OAAO,OAAO;AAAA,EACtB,SAAS,KAAK;AAGZ,UAAM,cAAc,KAAK;AACzB,UAAM;AAAA,EACR;AAKA,SAAO,YAAY,GAAG,SAAS,MAAM;AACnC,SAAK,cAAc,KAAK;AAAA,EAC1B,CAAC;AAED,SAAO;AACT;AAEA,eAAsB,WAAW,SAAoC;AACnE,MAAI;AACF,UAAM,MAAM,QAAQ,IAAI;AACxB,UAAM,SAAS,MAAM,eAAe,KAAK,OAAO;AAChD,WAAO,UAAU;AAAA,EACnB,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAQ,MAAM;AAAA,WAAS,GAAG;AAAA,CAAI;AAC9B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;","names":[]}
+{"version":3,"sources":["../src/cli/commands/dev.ts"],"sourcesContent":["import react from '@vitejs/plugin-react'\nimport { createServer, type Plugin, type ViteDevServer } from 'vite'\n\nimport { loadConfig } from '../../config/load-config.js'\nimport { loadEnv } from '../../config/load-env.js'\nimport { validateProjectStructure } from '../../config/validate-structure.js'\nimport { orchestrateDev } from '../../services/index.js'\nimport { theoPluginAsync } from '../../vite-plugin/index.js'\nimport { preflightNodeAndBindings } from '../preflight-node-version.js'\n\ninterface DevOptions {\n  port?: number\n}\n\nexport async function startDevServer(cwd: string, options?: DevOptions): Promise<ViteDevServer> {\n  // Preflight (FIRST — BEFORE anything that touches native bindings):\n  // verifies Node version + native binding ABI match. Emits actionable\n  // error referencing `nvm use` + `pnpm rebuild` when the dev server\n  // was spawned under the wrong Node (common gotcha with `nohup env ...`\n  // stripping the nvm PATH prefix).\n  preflightNodeAndBindings(cwd)\n\n  // Phase 1 (T1.2) — Load .env files into process.env BEFORE any module\n  // reads them. Must run before loadConfig() so theo.config.ts functions\n  // referencing process.env.* resolve correctly.\n  loadEnv({ cwd, mode: 'development' })\n\n  const config = await loadConfig(cwd)\n  validateProjectStructure(cwd)\n\n  // Wave 2 (T1.1) — spawn polyglot services BEFORE Vite. Healthcheck gates\n  // readiness. Empty `services: {}` → early return (Wave 1 BC preserved).\n  const orchestration = await orchestrateDev({\n    cwd,\n    services: config.services,\n  })\n  if (!orchestration.allHealthy) {\n    await orchestration.stop()\n    throw new Error(\n      `[services] services failed healthcheck: ${orchestration.unhealthy.join(', ')}. ` +\n        `Check that each declared service binds its port and responds 200 on its ` +\n        `healthcheck path within 30s.`,\n    )\n  }\n\n  // Phase 7 — legacy fs-mtime sweep removed: SDK's Agent.registry handles\n  // LRU + idle eviction natively (configurable via theo.config.ts >\n  // agents.registry; lazy-configured on first request).\n\n  const port = options?.port ?? config.port\n  // Narrow the rateLimit union: only the legacy flat shape (windowMs+max)\n  // flows into the theoPlugin's RateLimitConfig parameter. The per-route\n  // variant is consumed inside the api-middleware via the loaded user\n  // config separately.\n  const flatRateLimit =\n    config.rateLimit && 'windowMs' in config.rateLimit && 'max' in config.rateLimit\n      ? config.rateLimit\n      : undefined\n  // theoPluginAsync auto-chains @theokit/ui + @tailwindcss/vite via\n  // top-level Plugin[] return (sync `theoPlugin()` factory's config()\n  // hook returning {plugins:[...]} is silently dropped by Vite — see\n  // commit history). Spread the result so Vite flattens them.\n  let server: ViteDevServer\n  try {\n    const theoPlugins = await theoPluginAsync({\n      root: cwd,\n      rateLimit: flatRateLimit,\n      ssr: config.ssr,\n      // Wave 2 (T3.1) — wire typed-client plugin when services declared.\n      services: config.services,\n      // T4.1 (canvas-ecosystem-refactor / ADR D6) — passthrough peer-deps\n      // that plugins import dynamically (e.g., mermaid via plugin-canvas).\n      viteOptimizeDeps: config.viteOptimizeDeps,\n    })\n    server = await createServer({\n      root: cwd,\n      plugins: [react(), ...theoPlugins] as Plugin[],\n      server: {\n        port,\n        host: config.host,\n        open: config.open,\n        strictPort: config.strictPort,\n        warmup: config.warmup ?? {\n          clientFiles: ['./app/**/*.tsx', './app/**/*.ts'],\n        },\n      },\n      logLevel: options?.port === 0 ? 'silent' : undefined,\n    })\n\n    await server.listen()\n  } catch (err) {\n    // EC-1 / try-finally pattern: if Vite create/listen fails AFTER services\n    // started, stop them so we don't leak child processes.\n    await orchestration.stop()\n    throw err\n  }\n\n  // EC-1 fix: attach orchestration.stop() to the underlying HTTP server's\n  // close event via Node-native API. We do NOT mutate `server.close`\n  // (fragile across Vite upgrades). httpServer is `http.Server | null`.\n  server.httpServer?.on('close', () => {\n    void orchestration.stop()\n  })\n\n  return server\n}\n\nexport async function devCommand(options: DevOptions): Promise<void> {\n  try {\n    const cwd = process.cwd()\n    const server = await startDevServer(cwd, options)\n    server.printUrls()\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err)\n    console.error(`\\n  ✗ ${msg}\\n`)\n    process.exit(1)\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,WAAW;AAClB,SAAS,oBAAqD;AAa9D,eAAsB,eAAe,KAAa,SAA8C;AAM9F,2BAAyB,GAAG;AAK5B,UAAQ,EAAE,KAAK,MAAM,cAAc,CAAC;AAEpC,QAAM,SAAS,MAAM,WAAW,GAAG;AACnC,2BAAyB,GAAG;AAI5B,QAAM,gBAAgB,MAAM,eAAe;AAAA,IACzC;AAAA,IACA,UAAU,OAAO;AAAA,EACnB,CAAC;AACD,MAAI,CAAC,cAAc,YAAY;AAC7B,UAAM,cAAc,KAAK;AACzB,UAAM,IAAI;AAAA,MACR,2CAA2C,cAAc,UAAU,KAAK,IAAI,CAAC;AAAA,IAG/E;AAAA,EACF;AAMA,QAAM,OAAO,SAAS,QAAQ,OAAO;AAKrC,QAAM,gBACJ,OAAO,aAAa,cAAc,OAAO,aAAa,SAAS,OAAO,YAClE,OAAO,YACP;AAKN,MAAI;AACJ,MAAI;AACF,UAAM,cAAc,MAAM,gBAAgB;AAAA,MACxC,MAAM;AAAA,MACN,WAAW;AAAA,MACX,KAAK,OAAO;AAAA;AAAA,MAEZ,UAAU,OAAO;AAAA;AAAA;AAAA,MAGjB,kBAAkB,OAAO;AAAA,IAC3B,CAAC;AACD,aAAS,MAAM,aAAa;AAAA,MAC1B,MAAM;AAAA,MACN,SAAS,CAAC,MAAM,GAAG,GAAG,WAAW;AAAA,MACjC,QAAQ;AAAA,QACN;AAAA,QACA,MAAM,OAAO;AAAA,QACb,MAAM,OAAO;AAAA,QACb,YAAY,OAAO;AAAA,QACnB,QAAQ,OAAO,UAAU;AAAA,UACvB,aAAa,CAAC,kBAAkB,eAAe;AAAA,QACjD;AAAA,MACF;AAAA,MACA,UAAU,SAAS,SAAS,IAAI,WAAW;AAAA,IAC7C,CAAC;AAED,UAAM,OAAO,OAAO;AAAA,EACtB,SAAS,KAAK;AAGZ,UAAM,cAAc,KAAK;AACzB,UAAM;AAAA,EACR;AAKA,SAAO,YAAY,GAAG,SAAS,MAAM;AACnC,SAAK,cAAc,KAAK;AAAA,EAC1B,CAAC;AAED,SAAO;AACT;AAEA,eAAsB,WAAW,SAAoC;AACnE,MAAI;AACF,UAAM,MAAM,QAAQ,IAAI;AACxB,UAAM,SAAS,MAAM,eAAe,KAAK,OAAO;AAChD,WAAO,UAAU;AAAA,EACnB,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAQ,MAAM;AAAA,WAAS,GAAG;AAAA,CAAI;AAC9B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;","names":[]}

package/dist/{dev-emit-VJ5CFMPY.js → dev-emit-M4KBDBB6.js}

@@ -6,9 +6,9 @@ import {
 } from "./chunk-JAIKGP3Q.js";
 import {
   generateManifest
-} from "./chunk-NXTF5PPW.js";
+} from "./chunk-TIZBKEDV.js";
 import "./chunk-34YQOXGM.js";
-import "./chunk-GBXLKYIA.js";
+import "./chunk-FRUEDJFX.js";
 import "./chunk-P37RZRFV.js";
 
 // src/vite-plugin/openapi-emit/dev-emit.ts
@@ -41,4 +41,4 @@ export {
   _resetInFlightForTests,
   reEmitOpenApi
 };
-//# sourceMappingURL=dev-emit-VJ5CFMPY.js.map
+//# sourceMappingURL=dev-emit-M4KBDBB6.js.map

package/dist/{dev-emit-QH2YGZXN.js → dev-emit-YSQ7SMXA.js}

@@ -1,6 +1,6 @@
 import {
   generateManifest
-} from "./chunk-2J7XU3PW.js";
+} from "./chunk-AKTGTUU5.js";
 import "./chunk-WSJKACWB.js";
 import "./chunk-X2VVCJ4V.js";
 import "./chunk-DGUM43GV.js";
@@ -337,4 +337,4 @@ export {
   _resetInFlightForTests,
   reEmitOpenApi
 };
-//# sourceMappingURL=dev-emit-QH2YGZXN.js.map
+//# sourceMappingURL=dev-emit-YSQ7SMXA.js.map

package/dist/index.js

@@ -8,16 +8,16 @@ import {
   scanRoutes,
   theoConfigSchema,
   theoPlugin
-} from "./chunk-DEO2VAJE.js";
+} from "./chunk-X53XXQCX.js";
 import "./chunk-D7ZH7DTG.js";
 import "./chunk-RSVN727G.js";
 import "./chunk-7BIM27LV.js";
-import "./chunk-XWS4RZCE.js";
+import "./chunk-W4YO6S4I.js";
 import "./chunk-5QW7IQQU.js";
 import "./chunk-IAJ2JVEH.js";
 import "./chunk-VMEWD57H.js";
 import "./chunk-JQSKBMXP.js";
-import "./chunk-2J7XU3PW.js";
+import "./chunk-AKTGTUU5.js";
 import "./chunk-WSJKACWB.js";
 import "./chunk-JBCHWRKF.js";
 import "./chunk-C3ZZ56YZ.js";

package/dist/{internal-api-5BDI6N5U.js → internal-api-IBZ4QZAC.js}

@@ -19,7 +19,7 @@ import {
   scanServerActionsEnriched,
   scanServerRoutes,
   scanWebSocketRoutes
-} from "./chunk-2J7XU3PW.js";
+} from "./chunk-AKTGTUU5.js";
 import "./chunk-WSJKACWB.js";
 import {
   CSP_REPORT_PATH,
@@ -80,4 +80,4 @@ export {
   scanWebSocketRoutes,
   sendError
 };
-//# sourceMappingURL=internal-api-5BDI6N5U.js.map
+//# sourceMappingURL=internal-api-IBZ4QZAC.js.map

package/dist/{internal-api-J27TYE2I.js → internal-api-U3ARINWN.js}

@@ -25,7 +25,7 @@ import {
 } from "./chunk-WR4F4EEZ.js";
 import {
   generateManifest
-} from "./chunk-NXTF5PPW.js";
+} from "./chunk-TIZBKEDV.js";
 import {
   scanAgents
 } from "./chunk-34YQOXGM.js";
@@ -35,7 +35,7 @@ import {
   scanServerActionsEnriched,
   scanServerRoutes,
   scanWebSocketRoutes
-} from "./chunk-GBXLKYIA.js";
+} from "./chunk-FRUEDJFX.js";
 import "./chunk-P37RZRFV.js";
 import "./chunk-HGZL5EOI.js";
 export {
@@ -66,4 +66,4 @@ export {
   scanWebSocketRoutes,
   sendError
 };
-//# sourceMappingURL=internal-api-J27TYE2I.js.map
+//# sourceMappingURL=internal-api-U3ARINWN.js.map

package/dist/mcp-VWUOA7T7.js

@@ -0,0 +1,77 @@
+#!/usr/bin/env node
+import "tsx/esm";
+import {
+  createAgentSsrLoader
+} from "./chunk-5VNZ5EG3.js";
+import {
+  extractAppResources,
+  handleMcpJsonRpc
+} from "./chunk-DMC6HYUR.js";
+import "./chunk-M6NMS5LR.js";
+import "./chunk-GDN3PXFH.js";
+import {
+  scanAgents
+} from "./chunk-34YQOXGM.js";
+import "./chunk-P37RZRFV.js";
+
+// src/cli/commands/mcp.ts
+import { createInterface } from "readline";
+
+// src/server/agent/mcp-stdio.ts
+async function handleMcpStdioLine(line, mod, name, appResources = []) {
+  const trimmed = line.trim();
+  if (trimmed.length === 0) return null;
+  let body;
+  try {
+    body = JSON.parse(trimmed);
+  } catch {
+    return JSON.stringify({
+      jsonrpc: "2.0",
+      id: null,
+      error: { code: -32700, message: "Parse error" }
+    });
+  }
+  const response = handleMcpJsonRpc(mod, name, body, appResources);
+  const payload = await response.json();
+  return JSON.stringify(payload);
+}
+async function serveMcpStdio(mod, name, appResources, streams) {
+  for await (const line of streams.lines) {
+    const out = await handleMcpStdioLine(line, mod, name, appResources);
+    if (out !== null) streams.write(`${out}
+`);
+  }
+}
+
+// src/cli/commands/mcp.ts
+async function mcpCommand(name, deps = {}) {
+  const projectRoot = deps.projectRoot ?? process.cwd();
+  const agent = scanAgents(projectRoot).find((a) => a.name === name);
+  if (!agent) {
+    const names = scanAgents(projectRoot).map((a) => a.name).join(", ");
+    throw new Error(
+      `theokit mcp: agent '${name}' not found. Available: ${names || "(none in agents/)"}`
+    );
+  }
+  let loadModule = deps.loadModule;
+  let dispose;
+  if (!loadModule) {
+    const loader = await createAgentSsrLoader(projectRoot);
+    loadModule = loader.load;
+    dispose = loader.dispose;
+  }
+  const streams = deps.streams ?? {
+    lines: createInterface({ input: process.stdin }),
+    write: (line) => process.stdout.write(line)
+  };
+  try {
+    const mod = await loadModule(agent.filePath);
+    await serveMcpStdio(mod, agent.name, extractAppResources(mod), streams);
+  } finally {
+    if (dispose) await dispose();
+  }
+}
+export {
+  mcpCommand
+};
+//# sourceMappingURL=mcp-VWUOA7T7.js.map

package/dist/mcp-VWUOA7T7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/commands/mcp.ts","../src/server/agent/mcp-stdio.ts"],"sourcesContent":["/**\n * `theokit mcp <agent>` — expose a scanned agent as an MCP server over stdio.\n *\n * The stdio sibling of the M16 HTTP route (`POST /api/agents/<name>/mcp`): a desktop MCP client\n * (e.g. Claude Desktop) spawns this command and speaks newline-delimited JSON-RPC over the pipe.\n * It reuses the framework's OWN `serveMcpStdio` / `handleMcpJsonRpc` (no LLM call, no runtime — a\n * TRANSPORT, like the HTTP route). `deps` is injectable so the routing is tested without Vite/stdin.\n */\nimport { createInterface } from 'node:readline'\n\nimport { extractAppResources } from '../../server/agent/mcp-app-resources.js'\nimport { type StdioStreams, serveMcpStdio } from '../../server/agent/mcp-stdio.js'\nimport { scanAgents } from '../../server/scan/agent-scan.js'\n\nimport { createAgentSsrLoader } from './agent.js'\n\nexport interface McpCommandDeps {\n  projectRoot?: string\n  /** Load a TS agent module; defaults to the framework's Vite SSR loader (same transpile as dev). */\n  loadModule?: (filePath: string) => Promise<Record<string, unknown>>\n  /** stdio streams; defaults to `readline(process.stdin)` + `process.stdout`. Injected in tests. */\n  streams?: StdioStreams\n}\n\nexport async function mcpCommand(name: string, deps: McpCommandDeps = {}): Promise<void> {\n  const projectRoot = deps.projectRoot ?? process.cwd()\n  const agent = scanAgents(projectRoot).find((a) => a.name === name)\n  if (!agent) {\n    const names = scanAgents(projectRoot)\n      .map((a) => a.name)\n      .join(', ')\n    throw new Error(\n      `theokit mcp: agent '${name}' not found. Available: ${names || '(none in agents/)'}`,\n    )\n  }\n\n  let loadModule = deps.loadModule\n  let dispose: (() => Promise<void>) | undefined\n  if (!loadModule) {\n    const loader = await createAgentSsrLoader(projectRoot)\n    loadModule = loader.load\n    dispose = loader.dispose\n  }\n\n  const streams =\n    deps.streams ??\n    ({\n      lines: createInterface({ input: process.stdin }),\n      write: (line: string) => process.stdout.write(line),\n    } satisfies StdioStreams)\n\n  try {\n    const mod = await loadModule(agent.filePath)\n    await serveMcpStdio(mod, agent.name, extractAppResources(mod), streams)\n  } finally {\n    if (dispose) await dispose()\n  }\n}\n","/**\n * MCP stdio transport (M16 follow-up) — expose a TheoKit agent as an MCP server over stdin/stdout,\n * the sibling of the M16 HTTP route (`POST /api/agents/<name>/mcp`). A desktop MCP client (e.g.\n * Claude Desktop) spawns `theokit mcp <agent>` and speaks newline-delimited JSON-RPC over the pipe.\n *\n * This is a TRANSPORT over the framework's OWN {@link handleMcpJsonRpc} — it reuses the exact handler\n * the HTTP route uses; it calls no LLM, spawns no MCP client, and reimplements no runtime (G2 /\n * sdk-runtime.md). Distinct from the SDK's MCP CLIENT stdio (which spawns external MCP servers via\n * `mcpServers` command/args) — that stays SDK-side. Here TheoKit is the SERVER. The framework-side\n * placement of this server-exposure transport is recorded in ADR-0042 (refining ADR-0040's M16 note).\n */\nimport type { AppResource } from './mcp-app-resources.js'\nimport { handleMcpJsonRpc } from './mcp-handler.js'\n\n/**\n * Handle one newline-delimited JSON-RPC line. Returns the response line to write to stdout, or\n * `null` for a blank line (nothing to emit). A malformed JSON line yields a `-32700` (Parse error)\n * envelope — never throws, so the stdio loop never dies on bad input.\n */\nexport async function handleMcpStdioLine(\n  line: string,\n  mod: unknown,\n  name: string,\n  appResources: readonly AppResource[] = [],\n): Promise<string | null> {\n  const trimmed = line.trim()\n  if (trimmed.length === 0) return null\n  let body: unknown\n  try {\n    body = JSON.parse(trimmed)\n  } catch {\n    return JSON.stringify({\n      jsonrpc: '2.0',\n      id: null,\n      error: { code: -32700, message: 'Parse error' },\n    })\n  }\n  const response = handleMcpJsonRpc(mod, name, body, appResources)\n  const payload: unknown = await response.json()\n  return JSON.stringify(payload)\n}\n\n/** A minimal readable line source (an async iterable of lines) + a writable sink. */\nexport interface StdioStreams {\n  /** Async iterable of newline-delimited input lines (e.g. `readline.createInterface({ input })`). */\n  lines: AsyncIterable<string>\n  /** Write a response line (the caller appends no newline). */\n  write: (line: string) => void\n}\n\n/**\n * Drive the MCP stdio server loop: for each input line, dispatch via {@link handleMcpStdioLine} and\n * write the response line (with a trailing `\\n`). Returns when the input stream ends (EOF).\n */\nexport async function serveMcpStdio(\n  mod: unknown,\n  name: string,\n  appResources: readonly AppResource[],\n  streams: StdioStreams,\n): Promise<void> {\n  for await (const line of streams.lines) {\n    const out = await handleMcpStdioLine(line, mod, name, appResources)\n    if (out !== null) streams.write(`${out}\\n`)\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAQA,SAAS,uBAAuB;;;ACWhC,eAAsB,mBACpB,MACA,KACA,MACA,eAAuC,CAAC,GAChB;AACxB,QAAM,UAAU,KAAK,KAAK;AAC1B,MAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,MAAI;AACJ,MAAI;AACF,WAAO,KAAK,MAAM,OAAO;AAAA,EAC3B,QAAQ;AACN,WAAO,KAAK,UAAU;AAAA,MACpB,SAAS;AAAA,MACT,IAAI;AAAA,MACJ,OAAO,EAAE,MAAM,QAAQ,SAAS,cAAc;AAAA,IAChD,CAAC;AAAA,EACH;AACA,QAAM,WAAW,iBAAiB,KAAK,MAAM,MAAM,YAAY;AAC/D,QAAM,UAAmB,MAAM,SAAS,KAAK;AAC7C,SAAO,KAAK,UAAU,OAAO;AAC/B;AAcA,eAAsB,cACpB,KACA,MACA,cACA,SACe;AACf,mBAAiB,QAAQ,QAAQ,OAAO;AACtC,UAAM,MAAM,MAAM,mBAAmB,MAAM,KAAK,MAAM,YAAY;AAClE,QAAI,QAAQ,KAAM,SAAQ,MAAM,GAAG,GAAG;AAAA,CAAI;AAAA,EAC5C;AACF;;;ADxCA,eAAsB,WAAW,MAAc,OAAuB,CAAC,GAAkB;AACvF,QAAM,cAAc,KAAK,eAAe,QAAQ,IAAI;AACpD,QAAM,QAAQ,WAAW,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,IAAI;AACjE,MAAI,CAAC,OAAO;AACV,UAAM,QAAQ,WAAW,WAAW,EACjC,IAAI,CAAC,MAAM,EAAE,IAAI,EACjB,KAAK,IAAI;AACZ,UAAM,IAAI;AAAA,MACR,uBAAuB,IAAI,2BAA2B,SAAS,mBAAmB;AAAA,IACpF;AAAA,EACF;AAEA,MAAI,aAAa,KAAK;AACtB,MAAI;AACJ,MAAI,CAAC,YAAY;AACf,UAAM,SAAS,MAAM,qBAAqB,WAAW;AACrD,iBAAa,OAAO;AACpB,cAAU,OAAO;AAAA,EACnB;AAEA,QAAM,UACJ,KAAK,WACJ;AAAA,IACC,OAAO,gBAAgB,EAAE,OAAO,QAAQ,MAAM,CAAC;AAAA,IAC/C,OAAO,CAAC,SAAiB,QAAQ,OAAO,MAAM,IAAI;AAAA,EACpD;AAEF,MAAI;AACF,UAAM,MAAM,MAAM,WAAW,MAAM,QAAQ;AAC3C,UAAM,cAAc,KAAK,MAAM,MAAM,oBAAoB,GAAG,GAAG,OAAO;AAAA,EACxE,UAAE;AACA,QAAI,QAAS,OAAM,QAAQ;AAAA,EAC7B;AACF;","names":[]}

package/dist/{openapi-MXMLZCXC.js → openapi-PAXSR4UA.js}

@@ -12,9 +12,9 @@ import "./chunk-YJAUJXZS.js";
 import "./chunk-45C3WUQ7.js";
 import {
   generateManifest
-} from "./chunk-NXTF5PPW.js";
+} from "./chunk-TIZBKEDV.js";
 import "./chunk-34YQOXGM.js";
-import "./chunk-GBXLKYIA.js";
+import "./chunk-FRUEDJFX.js";
 import "./chunk-P37RZRFV.js";
 
 // src/cli/commands/openapi.ts
@@ -82,4 +82,4 @@ function emitOpenApiInMemory(manifest, config) {
 export {
   openapiCommand
 };
-//# sourceMappingURL=openapi-MXMLZCXC.js.map
+//# sourceMappingURL=openapi-PAXSR4UA.js.map

package/dist/{routes-NNBEZSGN.js → routes-WKG3UKDX.js}

@@ -13,7 +13,7 @@ import {
   scanServerActions,
   scanServerRoutes,
   scanWebSocketRoutes
-} from "./chunk-GBXLKYIA.js";
+} from "./chunk-FRUEDJFX.js";
 import "./chunk-P37RZRFV.js";
 
 // src/cli/commands/routes.ts
@@ -62,4 +62,4 @@ async function routesCommand() {
 export {
   routesCommand
 };
-//# sourceMappingURL=routes-NNBEZSGN.js.map
+//# sourceMappingURL=routes-WKG3UKDX.js.map

package/dist/server/index.d.ts

@@ -929,6 +929,37 @@ declare function readAppResource(resources: readonly AppResource[], uri: string)
  */
 declare function extractAppResources(mod: unknown): AppResource[];
 
+/**
+ * MCP stdio transport (M16 follow-up) — expose a TheoKit agent as an MCP server over stdin/stdout,
+ * the sibling of the M16 HTTP route (`POST /api/agents/<name>/mcp`). A desktop MCP client (e.g.
+ * Claude Desktop) spawns `theokit mcp <agent>` and speaks newline-delimited JSON-RPC over the pipe.
+ *
+ * This is a TRANSPORT over the framework's OWN {@link handleMcpJsonRpc} — it reuses the exact handler
+ * the HTTP route uses; it calls no LLM, spawns no MCP client, and reimplements no runtime (G2 /
+ * sdk-runtime.md). Distinct from the SDK's MCP CLIENT stdio (which spawns external MCP servers via
+ * `mcpServers` command/args) — that stays SDK-side. Here TheoKit is the SERVER. The framework-side
+ * placement of this server-exposure transport is recorded in ADR-0042 (refining ADR-0040's M16 note).
+ */
+
+/**
+ * Handle one newline-delimited JSON-RPC line. Returns the response line to write to stdout, or
+ * `null` for a blank line (nothing to emit). A malformed JSON line yields a `-32700` (Parse error)
+ * envelope — never throws, so the stdio loop never dies on bad input.
+ */
+declare function handleMcpStdioLine(line: string, mod: unknown, name: string, appResources?: readonly AppResource[]): Promise<string | null>;
+/** A minimal readable line source (an async iterable of lines) + a writable sink. */
+interface StdioStreams {
+    /** Async iterable of newline-delimited input lines (e.g. `readline.createInterface({ input })`). */
+    lines: AsyncIterable<string>;
+    /** Write a response line (the caller appends no newline). */
+    write: (line: string) => void;
+}
+/**
+ * Drive the MCP stdio server loop: for each input line, dispatch via {@link handleMcpStdioLine} and
+ * write the response line (with a trailing `\n`). Returns when the input stream ends (EOF).
+ */
+declare function serveMcpStdio(mod: unknown, name: string, appResources: readonly AppResource[], streams: StdioStreams): Promise<void>;
+
 interface UploadedFile {
     fieldname: string;
     filename: string;
@@ -1125,4 +1156,4 @@ interface LoadEnvResult {
 declare function _resetEnvCache(): void;
 declare function loadEnv(options?: LoadEnvOptions): LoadEnvResult;
 
-export { type AcpToolConfig, ActionError, type ActionErrorCode, ActionInputError, type ActionManifestEntry, type ActionResult, type AppResource, type AppResourceInput, type BodyParserOptions, DEFAULT_MAX_AGE as CACHE_DEFAULT_MAX_AGE, DEFAULT_MAX_ENTRY_SIZE as CACHE_DEFAULT_MAX_ENTRY_SIZE, DEFAULT_SWR_MULTIPLIER as CACHE_DEFAULT_SWR_MULTIPLIER, CACHE_TAG_MAX_ITEMS, CACHE_TAG_MAX_LENGTH, type CacheControlInput, type CacheEngine, type CacheEngineOptions, type CacheEntry, type CacheStatus, type CacheStorageAdapter, type CacheStore, type CacheStoreAdmin, type ValidationResult as CacheValidationResult, type CachedFunction, type CachedRouteConfig, type ChannelMessage, type ChannelWebhookConfig, type CodeModeApi, type CodeModeConfig, type CodeModePermission, CodeModePermissionDeniedError, type CompiledRouteRule, CustomTool, DEFAULT_EXCLUDED_QUERY_PARAMS, type DefineCachedFunctionOptions, FileTooLargeError, type GetOrComputeOptions, InMemoryCacheAdapter, type InMemoryCacheAdapterOptions, type KeyDerivationOptions, type LoadEnvOptions, type LoadEnvResult, type McpResourceContents, type McpResourceDescriptor, NodeAcpTransport, type NormalizedCacheConfig, type OpenApiDocsOptions, type ParsedBody, type RevalidateResult, type RouteCacheOptions, RouteConfig, type RouteRule, type RouteRules, type Sandbox, type SerializedActionResult, type SerializedResponse, THEO_T_PREFIX, type UniversalZodIssue, type UploadedFile, type VendorAgentClient, type VendorAgentToolConfig, VerifyFn, type WorkflowLike, type WorkflowToolConfig, _resetCacheEngine, _resetEnvCache, buildResourceDescriptors, compileRouteRules, createACPTool, createCacheEngine, createCodeMode, createOpenApiHandler, createVendorAgentTool, createWorkflowTool, defineAppResource, defineCachedFunction, defineCachedRoute, deriveKey as deriveCacheKey, deserializeResponse, executeWebRequest, extractAppResources, extractUniversalIssues, getCacheControlHeader, getCacheEngine, handleChannelWebhook, initCacheEngine, isActionError, isChannelPath, isInputError, loadEnv, parseChannelPath, parseRequestBody, readAppResource, resolveRouteRule, revalidatePath, revalidateTag, serializeResponse, updateTag, validateExpire as validateCacheExpire, validateMaxAge as validateCacheMaxAge, validateTags as validateCacheTags };
+export { type AcpToolConfig, ActionError, type ActionErrorCode, ActionInputError, type ActionManifestEntry, type ActionResult, type AppResource, type AppResourceInput, type BodyParserOptions, DEFAULT_MAX_AGE as CACHE_DEFAULT_MAX_AGE, DEFAULT_MAX_ENTRY_SIZE as CACHE_DEFAULT_MAX_ENTRY_SIZE, DEFAULT_SWR_MULTIPLIER as CACHE_DEFAULT_SWR_MULTIPLIER, CACHE_TAG_MAX_ITEMS, CACHE_TAG_MAX_LENGTH, type CacheControlInput, type CacheEngine, type CacheEngineOptions, type CacheEntry, type CacheStatus, type CacheStorageAdapter, type CacheStore, type CacheStoreAdmin, type ValidationResult as CacheValidationResult, type CachedFunction, type CachedRouteConfig, type ChannelMessage, type ChannelWebhookConfig, type CodeModeApi, type CodeModeConfig, type CodeModePermission, CodeModePermissionDeniedError, type CompiledRouteRule, CustomTool, DEFAULT_EXCLUDED_QUERY_PARAMS, type DefineCachedFunctionOptions, FileTooLargeError, type GetOrComputeOptions, InMemoryCacheAdapter, type InMemoryCacheAdapterOptions, type KeyDerivationOptions, type LoadEnvOptions, type LoadEnvResult, type McpResourceContents, type McpResourceDescriptor, NodeAcpTransport, type NormalizedCacheConfig, type OpenApiDocsOptions, type ParsedBody, type RevalidateResult, type RouteCacheOptions, RouteConfig, type RouteRule, type RouteRules, type Sandbox, type SerializedActionResult, type SerializedResponse, type StdioStreams, THEO_T_PREFIX, type UniversalZodIssue, type UploadedFile, type VendorAgentClient, type VendorAgentToolConfig, VerifyFn, type WorkflowLike, type WorkflowToolConfig, _resetCacheEngine, _resetEnvCache, buildResourceDescriptors, compileRouteRules, createACPTool, createCacheEngine, createCodeMode, createOpenApiHandler, createVendorAgentTool, createWorkflowTool, defineAppResource, defineCachedFunction, defineCachedRoute, deriveKey as deriveCacheKey, deserializeResponse, executeWebRequest, extractAppResources, extractUniversalIssues, getCacheControlHeader, getCacheEngine, handleChannelWebhook, handleMcpStdioLine, initCacheEngine, isActionError, isChannelPath, isInputError, loadEnv, parseChannelPath, parseRequestBody, readAppResource, resolveRouteRule, revalidatePath, revalidateTag, serializeResponse, serveMcpStdio, updateTag, validateExpire as validateCacheExpire, validateMaxAge as validateCacheMaxAge, validateTags as validateCacheTags };

package/dist/server/index.js

@@ -54,12 +54,13 @@ import {
   defineAppResource,
   executeWebRequest,
   extractAppResources,
+  handleMcpJsonRpc,
   jsonTransformer,
   loadEnv,
   readAppResource,
   resolveTransformer,
   superjsonTransformer
-} from "../chunk-XWS4RZCE.js";
+} from "../chunk-W4YO6S4I.js";
 import {
   findSuggestion,
   levenshtein
@@ -91,7 +92,7 @@ import {
   scanServerRoutes,
   scanWebSocketRoutes,
   writeManifest
-} from "../chunk-2J7XU3PW.js";
+} from "../chunk-AKTGTUU5.js";
 import "../chunk-WSJKACWB.js";
 import {
   CSP_REPORT_PATH,
@@ -1313,6 +1314,32 @@ async function handleChannelWebhook(request, urlPath, config) {
   });
 }
 
+// src/server/agent/mcp-stdio.ts
+async function handleMcpStdioLine(line, mod, name, appResources = []) {
+  const trimmed = line.trim();
+  if (trimmed.length === 0) return null;
+  let body;
+  try {
+    body = JSON.parse(trimmed);
+  } catch {
+    return JSON.stringify({
+      jsonrpc: "2.0",
+      id: null,
+      error: { code: -32700, message: "Parse error" }
+    });
+  }
+  const response = handleMcpJsonRpc(mod, name, body, appResources);
+  const payload = await response.json();
+  return JSON.stringify(payload);
+}
+async function serveMcpStdio(mod, name, appResources, streams) {
+  for await (const line of streams.lines) {
+    const out = await handleMcpStdioLine(line, mod, name, appResources);
+    if (out !== null) streams.write(`${out}
+`);
+  }
+}
+
 // src/server/serialization.ts
 import superjson from "superjson";
 function serializeResponse(data) {
@@ -1498,6 +1525,7 @@ export {
   handleCspReportRequest,
   handleCsrfReadiness,
   handleCsrfReadinessRequest,
+  handleMcpStdioLine,
   handleRequestError,
   handleWebRequestError,
   initCacheEngine,
@@ -1546,6 +1574,7 @@ export {
   serializeCookie,
   serializeResponse,
   serializeSpansToOtlp,
+  serveMcpStdio,
   serveReservedRoute,
   serveStaticFile,
   serverErrorToEnvelope,