theokit 0.19.0 → 0.19.2

package/dist/cli/index.js

@@ -5,12 +5,12 @@ import "tsx/esm";
 import cac from "cac";
 var cli = cac("theokit");
 cli.command("dev", "Start development server").option("--port <port>", "Port number").action(async (options) => {
-  const { devCommand } = await import("../dev-D7PKQUL2.js");
+  const { devCommand } = await import("../dev-RQLE5W72.js");
   await devCommand({ port: options.port ? Number(options.port) : void 0 });
 });
 cli.command("build", "Build for production").option("--target <target>", "Deploy target (node, vercel, cloudflare)").action(async (options) => {
   try {
-    const { buildCommand } = await import("../build-ESXLJKYY.js");
+    const { buildCommand } = await import("../build-KZBSHSKG.js");
     await buildCommand({ target: options.target });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
@@ -22,7 +22,7 @@ cli.command("build", "Build for production").option("--target <target>", "Deploy
 });
 cli.command("start", "Start production server").option("--port <port>", "Port number").action(async (options) => {
   try {
-    const { startCommand } = await import("../start-5UDUXYKC.js");
+    const { startCommand } = await import("../start-TGNHQ7NZ.js");
     await startCommand({ port: options.port ? Number(options.port) : void 0 });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
@@ -52,7 +52,7 @@ cli.command(
   "Run an agent in the terminal (stream + tool calls + approval)"
 ).action(async (name, message) => {
   try {
-    const { agentCommand } = await import("../agent-Y4W4X46A.js");
+    const { agentCommand } = await import("../agent-UGVJJXRY.js");
     const { sawError } = await agentCommand(name, message);
     if (sawError) process.exit(1);
   } catch (err) {
@@ -65,7 +65,7 @@ cli.command(
 });
 cli.command("mcp <agent>", "Serve an agent as an MCP server over stdio (for desktop MCP clients)").action(async (agent) => {
   try {
-    const { mcpCommand } = await import("../mcp-3C4CMHP4.js");
+    const { mcpCommand } = await import("../mcp-H5GWOGD7.js");
     await mcpCommand(agent);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
@@ -77,7 +77,7 @@ cli.command("mcp <agent>", "Serve an agent as an MCP server over stdio (for desk
 });
 cli.command("routes", "List all routes, actions, and WebSocket endpoints").action(async () => {
   try {
-    const { routesCommand } = await import("../routes-NNBEZSGN.js");
+    const { routesCommand } = await import("../routes-WKG3UKDX.js");
     await routesCommand();
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
@@ -126,7 +126,7 @@ cli.command(
   "Generate <distDir>/openapi.json from route schemas (opt-in via config.openapi)"
 ).option("--dry-run", "Print the document to stdout without writing to disk (EC-3)").action(async (options) => {
   try {
-    const { openapiCommand } = await import("../openapi-MXMLZCXC.js");
+    const { openapiCommand } = await import("../openapi-PAXSR4UA.js");
     await openapiCommand({ dryRun: Boolean(options.dryRun) });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);

package/dist/{dev-D7PKQUL2.js → dev-RQLE5W72.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-HNBWZKIQ.js";
 import {
   theoPluginAsync
-} from "./chunk-ULFNEG27.js";
+} from "./chunk-RRJ66UTS.js";
 import "./chunk-DXF64KS5.js";
 import "./chunk-DMC6HYUR.js";
 import "./chunk-M6NMS5LR.js";
@@ -26,9 +26,9 @@ import {
 import "./chunk-5ODOE6EF.js";
 import "./chunk-KXA37ONC.js";
 import "./chunk-WR4F4EEZ.js";
-import "./chunk-NXTF5PPW.js";
+import "./chunk-TIZBKEDV.js";
 import "./chunk-34YQOXGM.js";
-import "./chunk-GBXLKYIA.js";
+import "./chunk-FRUEDJFX.js";
 import "./chunk-P37RZRFV.js";
 import "./chunk-HGZL5EOI.js";
 
@@ -58,6 +58,8 @@ async function startDevServer(cwd, options) {
       root: cwd,
       rateLimit: flatRateLimit,
       ssr: config.ssr,
+      // #95 — honor config `serverDir` (default "server") so route/action discovery scans it.
+      serverDir: config.serverDir,
       // Wave 2 (T3.1) — wire typed-client plugin when services declared.
       services: config.services,
       // T4.1 (canvas-ecosystem-refactor / ADR D6) — passthrough peer-deps
@@ -105,4 +107,4 @@ export {
   devCommand,
   startDevServer
 };
-//# sourceMappingURL=dev-D7PKQUL2.js.map
+//# sourceMappingURL=dev-RQLE5W72.js.map

package/dist/dev-RQLE5W72.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/commands/dev.ts"],"sourcesContent":["import react from '@vitejs/plugin-react'\nimport { createServer, type Plugin, type ViteDevServer } from 'vite'\n\nimport { loadConfig } from '../../config/load-config.js'\nimport { loadEnv } from '../../config/load-env.js'\nimport { validateProjectStructure } from '../../config/validate-structure.js'\nimport { orchestrateDev } from '../../services/index.js'\nimport { theoPluginAsync } from '../../vite-plugin/index.js'\nimport { preflightNodeAndBindings } from '../preflight-node-version.js'\n\ninterface DevOptions {\n  port?: number\n}\n\nexport async function startDevServer(cwd: string, options?: DevOptions): Promise<ViteDevServer> {\n  // Preflight (FIRST — BEFORE anything that touches native bindings):\n  // verifies Node version + native binding ABI match. Emits actionable\n  // error referencing `nvm use` + `pnpm rebuild` when the dev server\n  // was spawned under the wrong Node (common gotcha with `nohup env ...`\n  // stripping the nvm PATH prefix).\n  preflightNodeAndBindings(cwd)\n\n  // Phase 1 (T1.2) — Load .env files into process.env BEFORE any module\n  // reads them. Must run before loadConfig() so theo.config.ts functions\n  // referencing process.env.* resolve correctly.\n  loadEnv({ cwd, mode: 'development' })\n\n  const config = await loadConfig(cwd)\n  validateProjectStructure(cwd)\n\n  // Wave 2 (T1.1) — spawn polyglot services BEFORE Vite. Healthcheck gates\n  // readiness. Empty `services: {}` → early return (Wave 1 BC preserved).\n  const orchestration = await orchestrateDev({\n    cwd,\n    services: config.services,\n  })\n  if (!orchestration.allHealthy) {\n    await orchestration.stop()\n    throw new Error(\n      `[services] services failed healthcheck: ${orchestration.unhealthy.join(', ')}. ` +\n        `Check that each declared service binds its port and responds 200 on its ` +\n        `healthcheck path within 30s.`,\n    )\n  }\n\n  // Phase 7 — legacy fs-mtime sweep removed: SDK's Agent.registry handles\n  // LRU + idle eviction natively (configurable via theo.config.ts >\n  // agents.registry; lazy-configured on first request).\n\n  const port = options?.port ?? config.port\n  // Narrow the rateLimit union: only the legacy flat shape (windowMs+max)\n  // flows into the theoPlugin's RateLimitConfig parameter. The per-route\n  // variant is consumed inside the api-middleware via the loaded user\n  // config separately.\n  const flatRateLimit =\n    config.rateLimit && 'windowMs' in config.rateLimit && 'max' in config.rateLimit\n      ? config.rateLimit\n      : undefined\n  // theoPluginAsync auto-chains @theokit/ui + @tailwindcss/vite via\n  // top-level Plugin[] return (sync `theoPlugin()` factory's config()\n  // hook returning {plugins:[...]} is silently dropped by Vite — see\n  // commit history). Spread the result so Vite flattens them.\n  let server: ViteDevServer\n  try {\n    const theoPlugins = await theoPluginAsync({\n      root: cwd,\n      rateLimit: flatRateLimit,\n      ssr: config.ssr,\n      // #95 — honor config `serverDir` (default \"server\") so route/action discovery scans it.\n      serverDir: config.serverDir,\n      // Wave 2 (T3.1) — wire typed-client plugin when services declared.\n      services: config.services,\n      // T4.1 (canvas-ecosystem-refactor / ADR D6) — passthrough peer-deps\n      // that plugins import dynamically (e.g., mermaid via plugin-canvas).\n      viteOptimizeDeps: config.viteOptimizeDeps,\n    })\n    server = await createServer({\n      root: cwd,\n      plugins: [react(), ...theoPlugins] as Plugin[],\n      server: {\n        port,\n        host: config.host,\n        open: config.open,\n        strictPort: config.strictPort,\n        warmup: config.warmup ?? {\n          clientFiles: ['./app/**/*.tsx', './app/**/*.ts'],\n        },\n      },\n      logLevel: options?.port === 0 ? 'silent' : undefined,\n    })\n\n    await server.listen()\n  } catch (err) {\n    // EC-1 / try-finally pattern: if Vite create/listen fails AFTER services\n    // started, stop them so we don't leak child processes.\n    await orchestration.stop()\n    throw err\n  }\n\n  // EC-1 fix: attach orchestration.stop() to the underlying HTTP server's\n  // close event via Node-native API. We do NOT mutate `server.close`\n  // (fragile across Vite upgrades). httpServer is `http.Server | null`.\n  server.httpServer?.on('close', () => {\n    void orchestration.stop()\n  })\n\n  return server\n}\n\nexport async function devCommand(options: DevOptions): Promise<void> {\n  try {\n    const cwd = process.cwd()\n    const server = await startDevServer(cwd, options)\n    server.printUrls()\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err)\n    console.error(`\\n  ✗ ${msg}\\n`)\n    process.exit(1)\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,WAAW;AAClB,SAAS,oBAAqD;AAa9D,eAAsB,eAAe,KAAa,SAA8C;AAM9F,2BAAyB,GAAG;AAK5B,UAAQ,EAAE,KAAK,MAAM,cAAc,CAAC;AAEpC,QAAM,SAAS,MAAM,WAAW,GAAG;AACnC,2BAAyB,GAAG;AAI5B,QAAM,gBAAgB,MAAM,eAAe;AAAA,IACzC;AAAA,IACA,UAAU,OAAO;AAAA,EACnB,CAAC;AACD,MAAI,CAAC,cAAc,YAAY;AAC7B,UAAM,cAAc,KAAK;AACzB,UAAM,IAAI;AAAA,MACR,2CAA2C,cAAc,UAAU,KAAK,IAAI,CAAC;AAAA,IAG/E;AAAA,EACF;AAMA,QAAM,OAAO,SAAS,QAAQ,OAAO;AAKrC,QAAM,gBACJ,OAAO,aAAa,cAAc,OAAO,aAAa,SAAS,OAAO,YAClE,OAAO,YACP;AAKN,MAAI;AACJ,MAAI;AACF,UAAM,cAAc,MAAM,gBAAgB;AAAA,MACxC,MAAM;AAAA,MACN,WAAW;AAAA,MACX,KAAK,OAAO;AAAA;AAAA,MAEZ,WAAW,OAAO;AAAA;AAAA,MAElB,UAAU,OAAO;AAAA;AAAA;AAAA,MAGjB,kBAAkB,OAAO;AAAA,IAC3B,CAAC;AACD,aAAS,MAAM,aAAa;AAAA,MAC1B,MAAM;AAAA,MACN,SAAS,CAAC,MAAM,GAAG,GAAG,WAAW;AAAA,MACjC,QAAQ;AAAA,QACN;AAAA,QACA,MAAM,OAAO;AAAA,QACb,MAAM,OAAO;AAAA,QACb,YAAY,OAAO;AAAA,QACnB,QAAQ,OAAO,UAAU;AAAA,UACvB,aAAa,CAAC,kBAAkB,eAAe;AAAA,QACjD;AAAA,MACF;AAAA,MACA,UAAU,SAAS,SAAS,IAAI,WAAW;AAAA,IAC7C,CAAC;AAED,UAAM,OAAO,OAAO;AAAA,EACtB,SAAS,KAAK;AAGZ,UAAM,cAAc,KAAK;AACzB,UAAM;AAAA,EACR;AAKA,SAAO,YAAY,GAAG,SAAS,MAAM;AACnC,SAAK,cAAc,KAAK;AAAA,EAC1B,CAAC;AAED,SAAO;AACT;AAEA,eAAsB,WAAW,SAAoC;AACnE,MAAI;AACF,UAAM,MAAM,QAAQ,IAAI;AACxB,UAAM,SAAS,MAAM,eAAe,KAAK,OAAO;AAChD,WAAO,UAAU;AAAA,EACnB,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAQ,MAAM;AAAA,WAAS,GAAG;AAAA,CAAI;AAC9B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;","names":[]}

package/dist/{dev-emit-VJ5CFMPY.js → dev-emit-M4KBDBB6.js}

@@ -6,9 +6,9 @@ import {
 } from "./chunk-JAIKGP3Q.js";
 import {
   generateManifest
-} from "./chunk-NXTF5PPW.js";
+} from "./chunk-TIZBKEDV.js";
 import "./chunk-34YQOXGM.js";
-import "./chunk-GBXLKYIA.js";
+import "./chunk-FRUEDJFX.js";
 import "./chunk-P37RZRFV.js";
 
 // src/vite-plugin/openapi-emit/dev-emit.ts
@@ -41,4 +41,4 @@ export {
   _resetInFlightForTests,
   reEmitOpenApi
 };
-//# sourceMappingURL=dev-emit-VJ5CFMPY.js.map
+//# sourceMappingURL=dev-emit-M4KBDBB6.js.map

package/dist/{dev-emit-QH2YGZXN.js → dev-emit-YSQ7SMXA.js}

@@ -1,6 +1,6 @@
 import {
   generateManifest
-} from "./chunk-2J7XU3PW.js";
+} from "./chunk-AKTGTUU5.js";
 import "./chunk-WSJKACWB.js";
 import "./chunk-X2VVCJ4V.js";
 import "./chunk-DGUM43GV.js";
@@ -337,4 +337,4 @@ export {
   _resetInFlightForTests,
   reEmitOpenApi
 };
-//# sourceMappingURL=dev-emit-QH2YGZXN.js.map
+//# sourceMappingURL=dev-emit-YSQ7SMXA.js.map

package/dist/index.js

@@ -8,7 +8,7 @@ import {
   scanRoutes,
   theoConfigSchema,
   theoPlugin
-} from "./chunk-7NTXG7SI.js";
+} from "./chunk-2YS3CNO4.js";
 import "./chunk-D7ZH7DTG.js";
 import "./chunk-RSVN727G.js";
 import "./chunk-7BIM27LV.js";
@@ -17,7 +17,7 @@ import "./chunk-5QW7IQQU.js";
 import "./chunk-IAJ2JVEH.js";
 import "./chunk-VMEWD57H.js";
 import "./chunk-JQSKBMXP.js";
-import "./chunk-2J7XU3PW.js";
+import "./chunk-AKTGTUU5.js";
 import "./chunk-WSJKACWB.js";
 import "./chunk-JBCHWRKF.js";
 import "./chunk-C3ZZ56YZ.js";

package/dist/{internal-api-5BDI6N5U.js → internal-api-IBZ4QZAC.js}

@@ -19,7 +19,7 @@ import {
   scanServerActionsEnriched,
   scanServerRoutes,
   scanWebSocketRoutes
-} from "./chunk-2J7XU3PW.js";
+} from "./chunk-AKTGTUU5.js";
 import "./chunk-WSJKACWB.js";
 import {
   CSP_REPORT_PATH,
@@ -80,4 +80,4 @@ export {
   scanWebSocketRoutes,
   sendError
 };
-//# sourceMappingURL=internal-api-5BDI6N5U.js.map
+//# sourceMappingURL=internal-api-IBZ4QZAC.js.map

package/dist/{internal-api-J27TYE2I.js → internal-api-U3ARINWN.js}

@@ -25,7 +25,7 @@ import {
 } from "./chunk-WR4F4EEZ.js";
 import {
   generateManifest
-} from "./chunk-NXTF5PPW.js";
+} from "./chunk-TIZBKEDV.js";
 import {
   scanAgents
 } from "./chunk-34YQOXGM.js";
@@ -35,7 +35,7 @@ import {
   scanServerActionsEnriched,
   scanServerRoutes,
   scanWebSocketRoutes
-} from "./chunk-GBXLKYIA.js";
+} from "./chunk-FRUEDJFX.js";
 import "./chunk-P37RZRFV.js";
 import "./chunk-HGZL5EOI.js";
 export {
@@ -66,4 +66,4 @@ export {
   scanWebSocketRoutes,
   sendError
 };
-//# sourceMappingURL=internal-api-J27TYE2I.js.map
+//# sourceMappingURL=internal-api-U3ARINWN.js.map

package/dist/{mcp-3C4CMHP4.js → mcp-H5GWOGD7.js}

@@ -2,7 +2,7 @@
 import "tsx/esm";
 import {
   createAgentSsrLoader
-} from "./chunk-ZYMFKYLM.js";
+} from "./chunk-7BYQD7IE.js";
 import {
   extractAppResources,
   handleMcpJsonRpc
@@ -74,4 +74,4 @@ async function mcpCommand(name, deps = {}) {
 export {
   mcpCommand
 };
-//# sourceMappingURL=mcp-3C4CMHP4.js.map
+//# sourceMappingURL=mcp-H5GWOGD7.js.map

package/dist/mcp-H5GWOGD7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/commands/mcp.ts","../src/server/agent/mcp-stdio.ts"],"sourcesContent":["/**\n * `theokit mcp <agent>` — expose a scanned agent as an MCP server over stdio.\n *\n * The stdio sibling of the M16 HTTP route (`POST /api/agents/<name>/mcp`): a desktop MCP client\n * (e.g. Claude Desktop) spawns this command and speaks newline-delimited JSON-RPC over the pipe.\n * It reuses the framework's OWN `serveMcpStdio` / `handleMcpJsonRpc` (no LLM call, no runtime — a\n * TRANSPORT, like the HTTP route). `deps` is injectable so the routing is tested without Vite/stdin.\n */\nimport { createInterface } from 'node:readline'\n\nimport { extractAppResources } from '../../server/agent/mcp-app-resources.js'\nimport { type StdioStreams, serveMcpStdio } from '../../server/agent/mcp-stdio.js'\nimport { scanAgents } from '../../server/scan/agent-scan.js'\n\nimport { createAgentSsrLoader } from './agent.js'\n\nexport interface McpCommandDeps {\n  projectRoot?: string\n  /** Load a TS agent module; defaults to the framework's Vite SSR loader (same transpile as dev). */\n  loadModule?: (filePath: string) => Promise<Record<string, unknown>>\n  /** stdio streams; defaults to `readline(process.stdin)` + `process.stdout`. Injected in tests. */\n  streams?: StdioStreams\n}\n\nexport async function mcpCommand(name: string, deps: McpCommandDeps = {}): Promise<void> {\n  const projectRoot = deps.projectRoot ?? process.cwd()\n  const agent = scanAgents(projectRoot).find((a) => a.name === name)\n  if (!agent) {\n    const names = scanAgents(projectRoot)\n      .map((a) => a.name)\n      .join(', ')\n    throw new Error(\n      `theokit mcp: agent '${name}' not found. Available: ${names || '(none in agents/)'}`,\n    )\n  }\n\n  let loadModule = deps.loadModule\n  let dispose: (() => Promise<void>) | undefined\n  if (!loadModule) {\n    const loader = await createAgentSsrLoader(projectRoot)\n    loadModule = loader.load\n    dispose = loader.dispose\n  }\n\n  const streams =\n    deps.streams ??\n    ({\n      lines: createInterface({ input: process.stdin }),\n      write: (line: string) => process.stdout.write(line),\n    } satisfies StdioStreams)\n\n  try {\n    const mod = await loadModule(agent.filePath)\n    await serveMcpStdio(mod, agent.name, extractAppResources(mod), streams)\n  } finally {\n    if (dispose) await dispose()\n  }\n}\n","/**\n * MCP stdio transport (M16 follow-up) — expose a TheoKit agent as an MCP server over stdin/stdout,\n * the sibling of the M16 HTTP route (`POST /api/agents/<name>/mcp`). A desktop MCP client (e.g.\n * Claude Desktop) spawns `theokit mcp <agent>` and speaks newline-delimited JSON-RPC over the pipe.\n *\n * This is a TRANSPORT over the framework's OWN {@link handleMcpJsonRpc} — it reuses the exact handler\n * the HTTP route uses; it calls no LLM, spawns no MCP client, and reimplements no runtime (G2 /\n * sdk-runtime.md). Distinct from the SDK's MCP CLIENT stdio (which spawns external MCP servers via\n * `mcpServers` command/args) — that stays SDK-side. Here TheoKit is the SERVER. The framework-side\n * placement of this server-exposure transport is recorded in ADR-0042 (refining ADR-0040's M16 note).\n */\nimport type { AppResource } from './mcp-app-resources.js'\nimport { handleMcpJsonRpc } from './mcp-handler.js'\n\n/**\n * Handle one newline-delimited JSON-RPC line. Returns the response line to write to stdout, or\n * `null` for a blank line (nothing to emit). A malformed JSON line yields a `-32700` (Parse error)\n * envelope — never throws, so the stdio loop never dies on bad input.\n */\nexport async function handleMcpStdioLine(\n  line: string,\n  mod: unknown,\n  name: string,\n  appResources: readonly AppResource[] = [],\n): Promise<string | null> {\n  const trimmed = line.trim()\n  if (trimmed.length === 0) return null\n  let body: unknown\n  try {\n    body = JSON.parse(trimmed)\n  } catch {\n    return JSON.stringify({\n      jsonrpc: '2.0',\n      id: null,\n      error: { code: -32700, message: 'Parse error' },\n    })\n  }\n  const response = handleMcpJsonRpc(mod, name, body, appResources)\n  const payload: unknown = await response.json()\n  return JSON.stringify(payload)\n}\n\n/** A minimal readable line source (an async iterable of lines) + a writable sink. */\nexport interface StdioStreams {\n  /** Async iterable of newline-delimited input lines (e.g. `readline.createInterface({ input })`). */\n  lines: AsyncIterable<string>\n  /** Write a response line (the caller appends no newline). */\n  write: (line: string) => void\n}\n\n/**\n * Drive the MCP stdio server loop: for each input line, dispatch via {@link handleMcpStdioLine} and\n * write the response line (with a trailing `\\n`). Returns when the input stream ends (EOF).\n */\nexport async function serveMcpStdio(\n  mod: unknown,\n  name: string,\n  appResources: readonly AppResource[],\n  streams: StdioStreams,\n): Promise<void> {\n  for await (const line of streams.lines) {\n    const out = await handleMcpStdioLine(line, mod, name, appResources)\n    if (out !== null) streams.write(`${out}\\n`)\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAQA,SAAS,uBAAuB;;;ACWhC,eAAsB,mBACpB,MACA,KACA,MACA,eAAuC,CAAC,GAChB;AACxB,QAAM,UAAU,KAAK,KAAK;AAC1B,MAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,MAAI;AACJ,MAAI;AACF,WAAO,KAAK,MAAM,OAAO;AAAA,EAC3B,QAAQ;AACN,WAAO,KAAK,UAAU;AAAA,MACpB,SAAS;AAAA,MACT,IAAI;AAAA,MACJ,OAAO,EAAE,MAAM,QAAQ,SAAS,cAAc;AAAA,IAChD,CAAC;AAAA,EACH;AACA,QAAM,WAAW,iBAAiB,KAAK,MAAM,MAAM,YAAY;AAC/D,QAAM,UAAmB,MAAM,SAAS,KAAK;AAC7C,SAAO,KAAK,UAAU,OAAO;AAC/B;AAcA,eAAsB,cACpB,KACA,MACA,cACA,SACe;AACf,mBAAiB,QAAQ,QAAQ,OAAO;AACtC,UAAM,MAAM,MAAM,mBAAmB,MAAM,KAAK,MAAM,YAAY;AAClE,QAAI,QAAQ,KAAM,SAAQ,MAAM,GAAG,GAAG;AAAA,CAAI;AAAA,EAC5C;AACF;;;ADxCA,eAAsB,WAAW,MAAc,OAAuB,CAAC,GAAkB;AACvF,QAAM,cAAc,KAAK,eAAe,QAAQ,IAAI;AACpD,QAAM,QAAQ,WAAW,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,IAAI;AACjE,MAAI,CAAC,OAAO;AACV,UAAM,QAAQ,WAAW,WAAW,EACjC,IAAI,CAAC,MAAM,EAAE,IAAI,EACjB,KAAK,IAAI;AACZ,UAAM,IAAI;AAAA,MACR,uBAAuB,IAAI,2BAA2B,SAAS,mBAAmB;AAAA,IACpF;AAAA,EACF;AAEA,MAAI,aAAa,KAAK;AACtB,MAAI;AACJ,MAAI,CAAC,YAAY;AACf,UAAM,SAAS,MAAM,qBAAqB,WAAW;AACrD,iBAAa,OAAO;AACpB,cAAU,OAAO;AAAA,EACnB;AAEA,QAAM,UACJ,KAAK,WACJ;AAAA,IACC,OAAO,gBAAgB,EAAE,OAAO,QAAQ,MAAM,CAAC;AAAA,IAC/C,OAAO,CAAC,SAAiB,QAAQ,OAAO,MAAM,IAAI;AAAA,EACpD;AAEF,MAAI;AACF,UAAM,MAAM,MAAM,WAAW,MAAM,QAAQ;AAC3C,UAAM,cAAc,KAAK,MAAM,MAAM,oBAAoB,GAAG,GAAG,OAAO;AAAA,EACxE,UAAE;AACA,QAAI,QAAS,OAAM,QAAQ;AAAA,EAC7B;AACF;","names":[]}

package/dist/{openapi-MXMLZCXC.js → openapi-PAXSR4UA.js}

@@ -12,9 +12,9 @@ import "./chunk-YJAUJXZS.js";
 import "./chunk-45C3WUQ7.js";
 import {
   generateManifest
-} from "./chunk-NXTF5PPW.js";
+} from "./chunk-TIZBKEDV.js";
 import "./chunk-34YQOXGM.js";
-import "./chunk-GBXLKYIA.js";
+import "./chunk-FRUEDJFX.js";
 import "./chunk-P37RZRFV.js";
 
 // src/cli/commands/openapi.ts
@@ -82,4 +82,4 @@ function emitOpenApiInMemory(manifest, config) {
 export {
   openapiCommand
 };
-//# sourceMappingURL=openapi-MXMLZCXC.js.map
+//# sourceMappingURL=openapi-PAXSR4UA.js.map

package/dist/{routes-NNBEZSGN.js → routes-WKG3UKDX.js}

@@ -13,7 +13,7 @@ import {
   scanServerActions,
   scanServerRoutes,
   scanWebSocketRoutes
-} from "./chunk-GBXLKYIA.js";
+} from "./chunk-FRUEDJFX.js";
 import "./chunk-P37RZRFV.js";
 
 // src/cli/commands/routes.ts
@@ -62,4 +62,4 @@ async function routesCommand() {
 export {
   routesCommand
 };
-//# sourceMappingURL=routes-NNBEZSGN.js.map
+//# sourceMappingURL=routes-WKG3UKDX.js.map

package/dist/server/index.d.ts

@@ -937,7 +937,8 @@ declare function extractAppResources(mod: unknown): AppResource[];
  * This is a TRANSPORT over the framework's OWN {@link handleMcpJsonRpc} — it reuses the exact handler
  * the HTTP route uses; it calls no LLM, spawns no MCP client, and reimplements no runtime (G2 /
  * sdk-runtime.md). Distinct from the SDK's MCP CLIENT stdio (which spawns external MCP servers via
- * `mcpServers` command/args) — that stays SDK-side per ADR-0040. Here TheoKit is the SERVER.
+ * `mcpServers` command/args) — that stays SDK-side. Here TheoKit is the SERVER. The framework-side
+ * placement of this server-exposure transport is recorded in ADR-0042 (refining ADR-0040's M16 note).
  */
 
 /**

package/dist/server/index.js

@@ -92,7 +92,7 @@ import {
   scanServerRoutes,
   scanWebSocketRoutes,
   writeManifest
-} from "../chunk-2J7XU3PW.js";
+} from "../chunk-AKTGTUU5.js";
 import "../chunk-WSJKACWB.js";
 import {
   CSP_REPORT_PATH,