theokit 0.2.0 → 0.2.1

package/dist/server/index.d.ts

@@ -8,8 +8,8 @@ import { ViteDevServer } from 'vite';
 export { AuthRequiredError, BackupCode, BackupCodeOptions, OidcMetadata, PkceChallenge, SessionConfig, SessionManager, SessionMeta, ThrottleOptions, ThrottleState, TotpAlgorithm, TotpOptions, TotpUriOptions, VerifyTotpOptions, _resetKeyCacheForTests, assertProductionSecret, checkThrottle, clearOidcCache, createSessionManager, decrypt, discoverOidcProvider, encrypt, generateBackupCodes, generateNonce, generateOAuthState, generatePkceChallenge, generateTotp, generateTotpSecret, pkceChallengeFromVerifier, recordAttempt, requireAuth, rotateIfNeeded, totpUri, verifyBackupCode, verifyOAuthState, verifyTotp } from './auth/index.js';
 export { InMemoryUsageStorage, ToolHookEvent, ToolUsageRecord, TrackAgentRunInput, TrackAgentRunOptions, TrackAgentToolsHooks, TrackAgentToolsOptions, UsageQuery, UsageRecord, UsageResult, UsageStorageAdapter, trackAgentRun, trackAgentTools } from './cost/index.js';
 export { CRON_MANIFEST_SCHEMA_VERSION, CronConcurrencyPolicy, CronContext, CronDefinition, CronManifest, CronManifestEntry, CronNode, CronOptions, CronScheduler, DuplicateCronNameError, ExistingConfigUnparseableError, buildCronManifest, convertToAwsCron, createCronScheduler, defineCron, scanCrons, translateCronToAws, translateCronToCloudflare, translateCronToDeno, translateCronToVercel, validateCronSchedule, writeCronManifest } from './cron/index.js';
-import { R as RateLimitConfig, a as RateLimitResult } from '../schema-Cxq2qqwh.js';
-export { b as ServiceDefinition, S as ServicesConfig, c as ServicesConfigInput, d as ServicesConfigOutput, e as createRateLimiter } from '../schema-Cxq2qqwh.js';
+import { R as RateLimitConfig, a as RateLimitResult, C as CsrfReadinessStore } from '../schema-CjVly9c_.js';
+export { b as CsrfReadinessRouteSummary, c as CsrfReadinessSummary, d as CsrfWarnRecord, e as ServiceDefinition, S as ServicesConfig, f as ServicesConfigInput, g as ServicesConfigOutput, h as createRateLimiter } from '../schema-CjVly9c_.js';
 import { R as RateLimitStore } from '../rate-limit-store-BEJnhWdw.js';
 export { I as InMemoryStore, a as RateLimitState } from '../rate-limit-store-BEJnhWdw.js';
 export { G as GenericFactory, P as PoolLike, a as PostgresDatabaseConfig, R as RedisLike, b as RedisServerConfig, S as ServerConfig, c as StorageAdapter, d as StorageConfig, T as TlsConfig } from '../storage-types-DtIVejC1.js';
@@ -58,8 +58,28 @@ interface RouteConfig<TQuery extends z.ZodType = z.ZodUndefined, TBody extends z
  */
 declare function defineRoute<TQuery extends z.ZodType = z.ZodUndefined, TBody extends z.ZodType = z.ZodUndefined, TParams extends z.ZodType = z.ZodUndefined, TCtx = unknown, TResponse = unknown>(config: RouteConfig<TQuery, TBody, TParams, TCtx, TResponse>): RouteConfig<TQuery, TBody, TParams, TCtx, TResponse>;
 
+/**
+ * Action wire-protocol accept mode per plan g3-server-actions-and-useaction
+ * v1.2 ADR D1. Default behavior (when omitted) is `'json'`. `'form'` opts the
+ * action into FormData multipart parsing for progressive-enhancement forms;
+ * the runtime in `server/http/action-execute.ts` will coerce FormData entries
+ * against the `input` schema via `formDataToObject` (Astro pattern).
+ */
+type ActionAccept = 'form' | 'json';
 interface ActionConfig<TInput extends z.ZodType, TCtx = unknown> {
+    /**
+     * Zod input schema. Required: every action declares its input contract via
+     * Zod (architecture rule: zod-is-SSOT). The shape becomes the handler's
+     * typed `input` parameter via `z.infer<TInput>`.
+     */
     input: TInput;
+    /**
+     * Wire-protocol accept mode. Defaults to `'json'` when omitted. Setting
+     * `'form'` switches the runtime to FormData multipart parsing — the input
+     * schema MUST be `z.object(...)` so field-by-field coercion can drive
+     * boolean string / number / array coercion (Astro pattern).
+     */
+    accept?: ActionAccept;
     handler: (ctx: {
         input: z.infer<TInput>;
         ctx: TCtx;
@@ -67,7 +87,15 @@ interface ActionConfig<TInput extends z.ZodType, TCtx = unknown> {
 }
 /**
  * Define a typed server action.
- * Identity function — provides type inference for action handlers.
+ *
+ * Identity function — provides type inference for action handlers. The
+ * runtime that consumes the config (validation + invocation + serialization)
+ * lives in `server/http/action-execute.ts`.
+ *
+ * Per plan g3-server-actions-and-useaction v1.2 § Phase 1 / T1.2: the new
+ * `accept?: 'form' | 'json'` field is the only contract change vs the
+ * pre-G3 identity. Existing callsites (`defineAction({input, handler})`)
+ * continue to compile — `accept` is opt-in.
  */
 declare function defineAction<TInput extends z.ZodType, TCtx = unknown>(config: ActionConfig<TInput, TCtx>): ActionConfig<TInput, TCtx>;
 
@@ -328,6 +356,10 @@ interface ServerRouteNode {
     routePath: string;
     paramNames: string[];
     pattern: RegExp;
+    /** HTTP methods (uppercase) the route file exports. Optional for backward
+     * compatibility with manifests generated before G1. Empty array means the
+     * file has no HTTP exports (util-only); undefined means "not detected". */
+    methods?: string[];
 }
 declare function compilePattern(routePath: string): {
     pattern: RegExp;
@@ -838,7 +870,43 @@ interface ActionNode {
     filePath: string;
     actionPath: string;
 }
+/**
+ * Enriched manifest entry per plan g3-server-actions-and-useaction v1.2
+ * § Phase 1 / T1.4 + ADR D4. Consumed by virtual module `@theo/actions`
+ * (T3.1) and G4 devtools "Actions" tab (T5.1).
+ */
+interface ActionManifestEntry$1 {
+    name: string;
+    filePath: string;
+    urlPath: string;
+    accept: 'form' | 'json';
+    hasInput: boolean;
+}
+/**
+ * EC-2: structured error for scan-time defects (name collision, reserved
+ * identifier, etc.). Throw at scan time to fail loud — silent shadowing is
+ * a security/correctness footgun.
+ */
+declare class ActionScanError extends Error {
+    readonly code: 'NAME_COLLISION' | 'RESERVED_NAME';
+    readonly conflictingPaths: readonly string[];
+    constructor(code: 'NAME_COLLISION' | 'RESERVED_NAME', message: string, conflictingPaths: readonly string[]);
+}
+/**
+ * Backward-compatible: original simple-shape scanner used by existing
+ * consumers. Preserved verbatim; new consumers should call
+ * `scanServerActionsEnriched`.
+ */
 declare function scanServerActions(serverDir: string): ActionNode[];
+/**
+ * Enriched scan: light AST detection of `accept: 'form'|'json'` + `input:`
+ * presence via regex-after-comment-stripping (EC-9). Throws ActionScanError
+ * on file/dir name collision (EC-2) or reserved JS identifier names.
+ *
+ * Output `ActionManifestEntry[]` is sorted by `name` for deterministic
+ * `.theo/actions-manifest.json` emission.
+ */
+declare function scanServerActionsEnriched(serverDir: string): ActionManifestEntry$1[];
 
 interface WebSocketRouteNode {
     filePath: string;
@@ -859,6 +927,9 @@ interface ManifestRoute {
     filePath: string;
     routePath: string;
     paramNames: string[];
+    /** HTTP methods (uppercase) the route file exports. Optional — manifests
+     * generated before G1 omit this; loaders treat absence as "unknown". */
+    methods?: string[];
 }
 interface ManifestAction {
     filePath: string;
@@ -884,6 +955,148 @@ declare function generateManifest(serverDir: string): TheoManifest;
 declare function writeManifest(manifest: TheoManifest, outputDir: string): void;
 declare function loadManifest(distDir: string, serverDir: string): LoadedManifest;
 
+/**
+ * Action protocol — cross-boundary contract for `defineAction` + `useAction`.
+ *
+ * Per plan g3-server-actions-and-useaction v1.2 § Phase 0 / T0.1, ADRs D1 (encoding)
+ * + D6 (full dot-notation path) + D7 (PII mask) — types and runtime referenced
+ * by server (`server/http/action-execute.ts`, `server/define/define-action.ts`)
+ * and client (`@usetheo/react/useAction`, `vite-plugin/actions-virtual-module`).
+ *
+ * Lives in `core/contracts/` per architecture.md v3.1 exception — cross-module
+ * deep imports ALLOWED for this file. Core depends on NOTHING intra-monorepo;
+ * `extractUniversalIssues` is implemented INLINE (NOT imported from `@usetheo/sdk`)
+ * to honor dep-cruiser `core-depends-on-nothing` invariant (EC-1 absorbed).
+ *
+ * Field-key convention (D6 + EC-13): dot-notation full path. Nested objects use
+ * `'user.address.zip'`; array indices use `'items.0.name'` (NOT bracket
+ * `'items[0].name'`). Root-level errors (path = []) use empty string `''`
+ * (EC-7). Consumers needing bracket notation can write a small `dotToBracket`
+ * helper in userland.
+ */
+/**
+ * HTTP-status mapping per IANA HTTP Status Code Registry (subset relevant to
+ * action surface). VALIDATION_ERROR → 422 is preferred over Astro's BAD_REQUEST/400
+ * (more semantic for input-shape mismatch). PAYLOAD_TOO_LARGE → 413 covers EC-3
+ * (response-side size limit; request-side reuses standard 413).
+ */
+type ActionErrorCode = 'VALIDATION_ERROR' | 'BAD_REQUEST' | 'UNAUTHORIZED' | 'FORBIDDEN' | 'NOT_FOUND' | 'METHOD_NOT_ALLOWED' | 'CONFLICT' | 'CONTENT_TOO_LARGE' | 'PAYLOAD_TOO_LARGE' | 'UNSUPPORTED_MEDIA_TYPE' | 'TOO_MANY_REQUESTS' | 'INTERNAL_SERVER_ERROR';
+/**
+ * Universal zod issue shape covering BOTH v3 (`z.ZodIssue`) and v4 (`$ZodIssue`).
+ * Duck-typed minimum surface: `{path, message}`. Implemented per EC-1 absorbed —
+ * consumers chain may ship either zod major; constructor accepts `unknown` and
+ * normalizes via `extractUniversalIssues`.
+ */
+interface UniversalZodIssue {
+    readonly path: readonly (string | number)[];
+    readonly message: string;
+    readonly code?: string;
+}
+/**
+ * `ActionError` — general server-side action failure. Discriminator `type` is
+ * literal `'TheoActionError'`; used by `ActionError.fromJson` to distinguish
+ * from `ActionInputError`.
+ */
+declare class ActionError extends Error {
+    readonly type: 'TheoActionError' | 'TheoActionInputError';
+    readonly code: ActionErrorCode;
+    readonly status: number;
+    constructor(params: {
+        code: ActionErrorCode;
+        message?: string;
+        stack?: string;
+    });
+    static codeToStatus(code: ActionErrorCode): number;
+    static statusToCode(status: number): ActionErrorCode;
+    /**
+     * Parse a serialized error JSON back into the typed class hierarchy.
+     * Distinguishes `TheoActionInputError` (with `issues` array) from
+     * `TheoActionError` via the `type` discriminator. Falls back to
+     * `INTERNAL_SERVER_ERROR` for malformed bodies (non-object, missing
+     * `type`, unknown `code`).
+     */
+    static fromJson(body: unknown): ActionError;
+}
+/**
+ * `ActionInputError` — validation failure with field-level mapping.
+ *
+ * `fields` is auto-derived from `issues`: for each issue, key = full
+ * dot-notation path (`'user.address.zip'`; root-level `path:[]` → `''`;
+ * array indices as numeric segments → `'items.0.name'`). Multiple messages
+ * for the same key accumulate; duplicate (path, message) tuples are deduped.
+ */
+declare class ActionInputError extends ActionError {
+    readonly type: "TheoActionInputError";
+    readonly issues: readonly UniversalZodIssue[];
+    readonly fields: Record<string, string[]>;
+    constructor(rawIssues: unknown);
+}
+/**
+ * Normalize zod v3 (`z.ZodIssue`) and v4 (`$ZodIssue`) raw issues to
+ * `UniversalZodIssue[]` (EC-1 absorbed). Duck-typed on `{path, message}` —
+ * does NOT import zod types (`core/contracts/` depends on no intra-monorepo
+ * + zod is consumer-controlled across the boundary).
+ *
+ * Silently skips entries missing required fields or shape mismatches; returns
+ * empty array on non-array input.
+ */
+declare function extractUniversalIssues(raw: unknown): UniversalZodIssue[];
+/**
+ * Type guard for `ActionError` (and its subclass `ActionInputError`). True
+ * iff the value is an instance of `ActionError`. Use `isInputError` to
+ * narrow specifically to validation failures.
+ */
+declare function isActionError(value: unknown): value is ActionError;
+/**
+ * Type guard narrowing to `ActionInputError`. Requires `instanceof` check
+ * (not duck-typing on `type`) to prevent attacker-controlled JSON from
+ * being mistaken for a real error instance.
+ */
+declare function isInputError(value: unknown): value is ActionInputError;
+/**
+ * `ActionResult<TData, TError>` — discriminated union returned by client-side
+ * action invocation. Either `{data, error: undefined}` (success) or
+ * `{data: undefined, error}` (failure). Mirrors Astro `SafeResult` shape.
+ */
+type ActionResult<TData = unknown, TError extends ActionError = ActionError> = {
+    data: TData;
+    error: undefined;
+} | {
+    data: undefined;
+    error: TError;
+};
+/**
+ * `SerializedActionResult` — wire-shape emitted by `serializeActionResult`
+ * in `server/http/serialize-action-result.ts` (T1.3). Discriminator `type`
+ * distinguishes data (devalue-encoded), error (JSON), and empty (204) cases.
+ */
+type SerializedActionResult = {
+    type: 'data';
+    status: number;
+    contentType: 'application/json+devalue';
+    body: string;
+} | {
+    type: 'error';
+    status: number;
+    contentType: 'application/json';
+    body: string;
+} | {
+    type: 'empty';
+    status: 204;
+};
+/**
+ * `ActionManifestEntry` — per-action metadata emitted by `action-scan.ts`
+ * (T1.4) into `.theo/actions-manifest.json`. Consumed by virtual module
+ * `@theo/actions` (T3.1) and G4 devtools "Actions" tab (T5.1).
+ */
+interface ActionManifestEntry {
+    readonly name: string;
+    readonly filePath: string;
+    readonly urlPath: string;
+    readonly accept: 'form' | 'json';
+    readonly hasInput: boolean;
+}
+
 /**
  * Item #4 — `streamAgentRun`
  *
@@ -1128,6 +1341,7 @@ declare function createConversationHistory(args: ConversationHistoryArgs): Promi
  * Public API surface is unchanged — `logger.ts` re-exports `logRequest`
  * + `RequestLog` + `LoggerFn` for backward compat.
  */
+
 interface RequestLog {
     level: string;
     method: string;
@@ -1138,7 +1352,7 @@ interface RequestLog {
     timestamp: string;
 }
 type LoggerFn = (log: RequestLog) => void;
-declare function logRequest(info: Omit<RequestLog, 'level' | 'timestamp'>, customLogger?: LoggerFn): void;
+declare function logRequest(info: Omit<RequestLog, 'level' | 'timestamp'>, customLogger?: LoggerFn, req?: IncomingMessage): void;
 
 type LogLevel = 'debug' | 'info' | 'warn' | 'error' | 'silent';
 interface StructuredLog {
@@ -1413,48 +1627,6 @@ declare function normalizeLegacy(raw: Record<string, unknown>): CspViolation;
 declare function normalizeNew(entry: unknown): CspViolation | null;
 declare function handleCspReport(req: IncomingMessage, res: ServerResponse, opts: CspReportHandlerOptions): Promise<void>;
 
-/**
- * T2.2 — In-memory bounded counter for CSRF warn events.
- *
- * Aggregates `csrf.warn` payloads by `(method, path, reason)` triple.
- * Used by the `/__theo/csrf-readiness` endpoint to expose a summary the
- * developer (or devtools tab) can inspect, so users do NOT need to grep
- * stdout to know which endpoints will break under 0.3.0 strict CSRF.
- *
- * Bounded at 1000 distinct keys (EC-22). Eviction is LRU-by-insertion —
- * when the cap is hit, the oldest key is dropped and a re-record of an
- * evicted key starts fresh (count: 1).
- *
- * Single-threaded by virtue of the JS event loop; Map operations are
- * atomic. NOT shared across processes — each worker has its own store.
- */
-interface CsrfWarnRecord {
-    method: string;
-    path: string;
-    reason: string;
-}
-interface CsrfReadinessRouteSummary {
-    method: string;
-    path: string;
-    reason: string;
-    count: number;
-    firstSeen: string;
-    lastSeen: string;
-}
-interface CsrfReadinessSummary {
-    generatedAt: string;
-    totalEvents: number;
-    routes: CsrfReadinessRouteSummary[];
-}
-declare class CsrfReadinessStore {
-    static readonly MAX_ENTRIES = 1000;
-    private readonly entries;
-    private keyFor;
-    record(event: CsrfWarnRecord): void;
-    summary(): CsrfReadinessSummary;
-    reset(): void;
-}
-
 /**
  * T2.2 — `/__theo/csrf-readiness` endpoint.
  *
@@ -2154,4 +2326,4 @@ interface LoadEnvResult {
 declare function _resetEnvCache(): void;
 declare function loadEnv(options?: LoadEnvOptions): LoadEnvResult;
 
-export { type ActionConfig, type ActionNode, type AgentEndpointConfig, type AgentEndpointHandlerArgs, AgentErrorEvent, AgentEvent, type AgentRunLike, type AgentRunResult, type AgentRunStreamMessage, type AuditEvent, type AuditLogger, BATCH_PATH, type BatchExecuteFn, BatchPathConflictError, type BatchPayload, type BatchRequestItem, type BatchResponse, type BatchResultItem, type BodyParserOptions, BodyTooLargeError, DEFAULT_MAX_AGE as CACHE_DEFAULT_MAX_AGE, DEFAULT_MAX_ENTRY_SIZE as CACHE_DEFAULT_MAX_ENTRY_SIZE, DEFAULT_SWR_MULTIPLIER as CACHE_DEFAULT_SWR_MULTIPLIER, CACHE_TAG_MAX_ITEMS, CACHE_TAG_MAX_LENGTH, CSP_REPORT_PATH, CSRF_READINESS_PATH, CSRF_READINESS_RESET_PATH, CSRF_WARN_CODE, CSRF_WARN_DOCS_URL, type CacheControlInput, type CacheEngine, type CacheEngineOptions, type CacheEntry, type CacheStatus, type CacheStorageAdapter, type CacheStore, type CacheStoreAdmin, type ValidationResult as CacheValidationResult, type CachedFunction, type CachedRouteConfig, type ChannelHandler, ChannelManager, type CompiledRouteRule, type ConversationHistoryArgs, type ConversationHistoryResult, type ConversationStorageLike, type CookieOptions, type CorsConfig, type CorsHandler, type CorsOrigin, type CspMode, type CspReportHandlerOptions, type CspViolation, type CsrfLogger, type CsrfMode, type CsrfReadinessRouteSummary, CsrfReadinessStore, type CsrfReadinessSummary, type CsrfWarnPayload, type CsrfWarnRecord, type CustomErrorPages, type CustomTool, DEFAULT_CSP, DEFAULT_EXCLUDED_QUERY_PARAMS, DEFAULT_MAX_BODY_BYTES, DEFAULT_PERMISSIONS_POLICY, type Db0Database, type DefineAgentToolSpec, type DefineCachedFunctionOptions, type DefineWebhookOptions, type DisallowedConfig, DuplicateDecorationError, DuplicatePluginError, type ExecuteActionOptions, type ExecuteRouteContext, FileTooLargeError, type GetOrComputeOptions, type HandleBatchOptions, type HookName, type HookResult, InMemoryCacheAdapter, type InMemoryCacheAdapterOptions, InvalidPluginShapeError, JobBackend, JsonStdoutSink, type KeyByMode, type KeyDerivationOptions, type LoadEnvOptions, type LoadEnvResult, type LoadModule, type LoadedManifest, type LogLevel, type LoggerFn, MAX_ERROR_HTML_BYTES, type ManifestAction, type ManifestRoute, type ManifestWebSocket, type MiddlewareHandler, type MiddlewareResult, type NormalizedCacheConfig, type OnErrorHook, type OnRequestHook, type OnResponseHook, type ParsedBody, type PluginContext, type PluginErrorContext, PluginRunner, type PreHandlerHook, RateLimitConfig, RateLimitResult, RateLimitStore, type RawBodyResult, type ReadRawBodyOptions, type RequestLog, type RevalidateResult, type RouteCacheOptions, type RouteConfig, type RouteRateLimitConfig, type RouteRule, type RouteRules, type RunHookOptions, STRIPPED_HEADERS, type SdkAgent, type SdkAgentOptions, type SdkRunLike, type SecurityEnv, type SecurityHeadersConfig, type SecurityHeadersOptions, type SendErrorInput, type SendErrorOptions, type SerializedResponse, type ServerRouteNode, type StructuredLog, THEO_T_PREFIX, TRACE_HEADER, TRACE_PARENT_HEADER, type TheoApp, type TheoLogger, type TheoManifest, type TheoPlugin, type TheoTransformer, type UnstorageInstance, type UploadedFile, type VerifyFn, type VerifyResult, type WebSocketHandler, type WebSocketLike, type WebSocketRouteNode, type WebhookContext, type WebhookDefinition, __resetSdkForTests, __setSdkForTests, _resetCacheEngine, _resetEnvCache, _resetMiddlewareCacheForTests, _resetWarnOnceForTests, applySecurityHeaders, buildSecurityHeaders, compilePattern, compileRouteRules, createCacheEngine, createConversationHistory, createCorsHandler, createLogger, createNoOpLogger, createPluginRunnerFromConfig, createProductionLoader, createRouteRateLimiter, createViteLoader, defineAction, defineAgentEndpoint, defineAgentTool, defineCachedFunction, defineCachedRoute, defineChannel, defineMiddleware, definePlugin, defineRoute, defineTheoPlugin, defineWebSocket, defineWebhook, deleteCookie, deriveKey as deriveCacheKey, deriveKey$1 as deriveKey, deserializeResponse, dispatchWebhook, enforceCsrf, errorToEvent, executeAction, executeRoute, extractTraceId, findSuggestion, generateManifest, getCacheControlHeader, getCacheEngine, getCookie, handleBatchRequest, handleCspReport, handleCsrfReadiness, initCacheEngine, jsonTransformer, levenshtein, loadCustomErrorPages, loadEnv, loadManifest, logRequest, matchDisallowed, matchRoute, matchRoutePattern, matchesOrigin, normalizeLegacy, normalizeNew, parseCookieHeader, parseRequestBody, parseTraceparent, readRawBody, resolveRouteRule, resolveTransformer, revalidatePath, revalidateTag, runMiddlewareAndContext, safeAudit, scanMiddlewares, scanServerActions, scanServerRoutes, scanWebSocketRoutes, sendError, sendJson, serializeResponse, serveStaticFile, setCookie, streamAgentRun, superjsonTransformer, timingSafeEqual, updateTag, useDatabase, useUnstorage, validateExpire as validateCacheExpire, validateMaxAge as validateCacheMaxAge, validateTags as validateCacheTags, validateCsrf, warnOnce, writeManifest };
+export { type ActionAccept, type ActionConfig, ActionError, type ActionErrorCode, ActionInputError, type ActionManifestEntry, type ActionNode, type ActionResult, ActionScanError, type AgentEndpointConfig, type AgentEndpointHandlerArgs, AgentErrorEvent, AgentEvent, type AgentRunLike, type AgentRunResult, type AgentRunStreamMessage, type AuditEvent, type AuditLogger, BATCH_PATH, type BatchExecuteFn, BatchPathConflictError, type BatchPayload, type BatchRequestItem, type BatchResponse, type BatchResultItem, type BodyParserOptions, BodyTooLargeError, DEFAULT_MAX_AGE as CACHE_DEFAULT_MAX_AGE, DEFAULT_MAX_ENTRY_SIZE as CACHE_DEFAULT_MAX_ENTRY_SIZE, DEFAULT_SWR_MULTIPLIER as CACHE_DEFAULT_SWR_MULTIPLIER, CACHE_TAG_MAX_ITEMS, CACHE_TAG_MAX_LENGTH, CSP_REPORT_PATH, CSRF_READINESS_PATH, CSRF_READINESS_RESET_PATH, CSRF_WARN_CODE, CSRF_WARN_DOCS_URL, type CacheControlInput, type CacheEngine, type CacheEngineOptions, type CacheEntry, type CacheStatus, type CacheStorageAdapter, type CacheStore, type CacheStoreAdmin, type ValidationResult as CacheValidationResult, type CachedFunction, type CachedRouteConfig, type ChannelHandler, ChannelManager, type CompiledRouteRule, type ConversationHistoryArgs, type ConversationHistoryResult, type ConversationStorageLike, type CookieOptions, type CorsConfig, type CorsHandler, type CorsOrigin, type CspMode, type CspReportHandlerOptions, type CspViolation, type CsrfLogger, type CsrfMode, CsrfReadinessStore, type CsrfWarnPayload, type CustomErrorPages, type CustomTool, DEFAULT_CSP, DEFAULT_EXCLUDED_QUERY_PARAMS, DEFAULT_MAX_BODY_BYTES, DEFAULT_PERMISSIONS_POLICY, type Db0Database, type DefineAgentToolSpec, type DefineCachedFunctionOptions, type DefineWebhookOptions, type DisallowedConfig, DuplicateDecorationError, DuplicatePluginError, type ExecuteActionOptions, type ExecuteRouteContext, FileTooLargeError, type GetOrComputeOptions, type HandleBatchOptions, type HookName, type HookResult, InMemoryCacheAdapter, type InMemoryCacheAdapterOptions, InvalidPluginShapeError, JobBackend, JsonStdoutSink, type KeyByMode, type KeyDerivationOptions, type LoadEnvOptions, type LoadEnvResult, type LoadModule, type LoadedManifest, type LogLevel, type LoggerFn, MAX_ERROR_HTML_BYTES, type ManifestAction, type ManifestRoute, type ManifestWebSocket, type MiddlewareHandler, type MiddlewareResult, type NormalizedCacheConfig, type OnErrorHook, type OnRequestHook, type OnResponseHook, type ParsedBody, type PluginContext, type PluginErrorContext, PluginRunner, type PreHandlerHook, RateLimitConfig, RateLimitResult, RateLimitStore, type RawBodyResult, type ReadRawBodyOptions, type RequestLog, type RevalidateResult, type RouteCacheOptions, type RouteConfig, type RouteRateLimitConfig, type RouteRule, type RouteRules, type RunHookOptions, STRIPPED_HEADERS, type SdkAgent, type SdkAgentOptions, type SdkRunLike, type SecurityEnv, type SecurityHeadersConfig, type SecurityHeadersOptions, type SendErrorInput, type SendErrorOptions, type SerializedActionResult, type SerializedResponse, type ServerRouteNode, type StructuredLog, THEO_T_PREFIX, TRACE_HEADER, TRACE_PARENT_HEADER, type TheoApp, type TheoLogger, type TheoManifest, type TheoPlugin, type TheoTransformer, type UniversalZodIssue, type UnstorageInstance, type UploadedFile, type VerifyFn, type VerifyResult, type WebSocketHandler, type WebSocketLike, type WebSocketRouteNode, type WebhookContext, type WebhookDefinition, __resetSdkForTests, __setSdkForTests, _resetCacheEngine, _resetEnvCache, _resetMiddlewareCacheForTests, _resetWarnOnceForTests, applySecurityHeaders, buildSecurityHeaders, compilePattern, compileRouteRules, createCacheEngine, createConversationHistory, createCorsHandler, createLogger, createNoOpLogger, createPluginRunnerFromConfig, createProductionLoader, createRouteRateLimiter, createViteLoader, defineAction, defineAgentEndpoint, defineAgentTool, defineCachedFunction, defineCachedRoute, defineChannel, defineMiddleware, definePlugin, defineRoute, defineTheoPlugin, defineWebSocket, defineWebhook, deleteCookie, deriveKey as deriveCacheKey, deriveKey$1 as deriveKey, deserializeResponse, dispatchWebhook, enforceCsrf, errorToEvent, executeAction, executeRoute, extractTraceId, extractUniversalIssues, findSuggestion, generateManifest, getCacheControlHeader, getCacheEngine, getCookie, handleBatchRequest, handleCspReport, handleCsrfReadiness, initCacheEngine, isActionError, isInputError, jsonTransformer, levenshtein, loadCustomErrorPages, loadEnv, loadManifest, logRequest, matchDisallowed, matchRoute, matchRoutePattern, matchesOrigin, normalizeLegacy, normalizeNew, parseCookieHeader, parseRequestBody, parseTraceparent, readRawBody, resolveRouteRule, resolveTransformer, revalidatePath, revalidateTag, runMiddlewareAndContext, safeAudit, scanMiddlewares, scanServerActions, scanServerActionsEnriched, scanServerRoutes, scanWebSocketRoutes, sendError, sendJson, serializeResponse, serveStaticFile, setCookie, streamAgentRun, superjsonTransformer, timingSafeEqual, updateTag, useDatabase, useUnstorage, validateExpire as validateCacheExpire, validateMaxAge as validateCacheMaxAge, validateTags as validateCacheTags, validateCsrf, warnOnce, writeManifest };

package/dist/server/index.js

@@ -1,3 +1,8 @@
+import {
+  generateManifest,
+  loadManifest,
+  writeManifest
+} from "../chunk-ERAZNHHR.js";
 import {
   _resetKeyCacheForTests,
   assertProductionSecret,
@@ -28,7 +33,7 @@ import {
   InMemoryUsageStorage,
   trackAgentRun,
   trackAgentTools
-} from "../chunk-JBC7PFV4.js";
+} from "../chunk-M23FP2AS.js";
 import {
   CRON_MANIFEST_SCHEMA_VERSION,
   DuplicateCronNameError,
@@ -62,6 +67,8 @@ import {
   generateNewTraceContext
 } from "../chunk-YLBSSEHX.js";
 import {
+  ActionError,
+  ActionInputError,
   BATCH_PATH,
   BatchPathConflictError,
   CSP_REPORT_PATH,
@@ -69,6 +76,7 @@ import {
   CSRF_READINESS_RESET_PATH,
   CSRF_WARN_CODE,
   CSRF_WARN_DOCS_URL,
+  CsrfReadinessStore,
   DEFAULT_CSP,
   DEFAULT_PERMISSIONS_POLICY,
   DuplicateDecorationError,
@@ -86,7 +94,6 @@ import {
   _resetWarnOnceForTests,
   applySecurityHeaders,
   buildSecurityHeaders,
-  compilePattern,
   createCorsHandler,
   createLogger,
   createNoOpLogger,
@@ -98,16 +105,18 @@ import {
   executeAction,
   executeRoute,
   extractTraceId,
+  extractUniversalIssues,
   findSuggestion,
   handleBatchRequest,
   handleCspReport,
   handleCsrfReadiness,
+  isActionError,
+  isInputError,
   jsonTransformer,
   levenshtein,
   loadEnv,
   logRequest,
   matchDisallowed,
-  matchRoute,
   matchesOrigin,
   normalizeLegacy,
   normalizeNew,
@@ -117,15 +126,23 @@ import {
   runMiddlewareAndContext,
   safeAudit,
   scanMiddlewares,
-  scanServerActions,
-  scanServerRoutes,
-  scanWebSocketRoutes,
   sendError,
   sendJson,
   superjsonTransformer,
   validateCsrf,
   warnOnce
-} from "../chunk-OEB3OIYP.js";
+} from "../chunk-OJHO2X7C.js";
+import {
+  compilePattern,
+  matchRoute,
+  scanServerRoutes,
+  scanWebSocketRoutes
+} from "../chunk-2BQYEBCK.js";
+import {
+  ActionScanError,
+  scanServerActions,
+  scanServerActionsEnriched
+} from "../chunk-7DHGV77J.js";
 import {
   AuthRequiredError,
   generateNonce,
@@ -138,6 +155,7 @@ import {
   createQueueClient
 } from "../chunk-GY5Q27BJ.js";
 import "../chunk-X2VVCJ4V.js";
+import "../chunk-WSJKACWB.js";
 import {
   __require
 } from "../chunk-DGUM43GV.js";
@@ -399,62 +417,6 @@ function serveStaticFile(req, res, clientDir) {
   return true;
 }
 
-// src/server/scan/manifest.ts
-import { existsSync as existsSync3, readFileSync as readFileSync3, writeFileSync, mkdirSync } from "fs";
-import { join, resolve as resolve3, relative } from "path";
-function generateManifest(serverDir) {
-  const routes = scanServerRoutes(serverDir);
-  const actions = scanServerActions(serverDir);
-  const websockets = scanWebSocketRoutes(serverDir);
-  return {
-    version: 1,
-    generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
-    routes: routes.map((r) => ({
-      filePath: relative(serverDir, r.filePath),
-      routePath: r.routePath,
-      paramNames: r.paramNames
-    })),
-    actions: actions.map((a) => ({
-      filePath: relative(serverDir, a.filePath),
-      actionPath: a.actionPath
-    })),
-    websockets: websockets.map((w) => ({
-      filePath: relative(serverDir, w.filePath),
-      wsPath: w.wsPath
-    }))
-  };
-}
-function writeManifest(manifest, outputDir) {
-  mkdirSync(outputDir, { recursive: true });
-  const manifestPath = join(outputDir, "manifest.json");
-  writeFileSync(manifestPath, JSON.stringify(manifest, null, 2));
-}
-function loadManifest(distDir, serverDir) {
-  const manifestPath = join(distDir, "manifest.json");
-  if (!existsSync3(manifestPath)) {
-    throw new Error(`No manifest found at ${manifestPath}. Run "theo build" first.`);
-  }
-  const raw = JSON.parse(readFileSync3(manifestPath, "utf-8"));
-  const routes = raw.routes.map((r) => {
-    const { pattern, paramNames } = compilePattern(r.routePath);
-    return {
-      filePath: resolve3(serverDir, r.filePath),
-      routePath: r.routePath,
-      paramNames,
-      pattern
-    };
-  });
-  const actions = raw.actions.map((a) => ({
-    filePath: resolve3(serverDir, a.filePath),
-    actionPath: a.actionPath
-  }));
-  const websockets = raw.websockets.map((w) => ({
-    filePath: resolve3(serverDir, w.filePath),
-    wsPath: w.wsPath
-  }));
-  return { routes, actions, websockets };
-}
-
 // src/server/agent/stream-agent-run.ts
 function safeJsonStringify(value) {
   try {
@@ -711,9 +673,7 @@ function autoResolveProviderIfNeeded(options) {
     ...options,
     apiKey: resolved.apiKey,
     providers: {
-      routes: [
-        { capability: "chat", provider: resolved.name, baseUrl: resolved.baseUrl }
-      ]
+      routes: [{ capability: "chat", provider: resolved.name, baseUrl: resolved.baseUrl }]
     }
   };
 }
@@ -871,54 +831,6 @@ var ChannelManager = class {
   }
 };
 
-// src/server/security/csrf-readiness-store.ts
-var CsrfReadinessStore = class _CsrfReadinessStore {
-  static MAX_ENTRIES = 1e3;
-  entries = /* @__PURE__ */ new Map();
-  keyFor(event) {
-    return `${event.method}\0${event.path}\0${event.reason}`;
-  }
-  record(event) {
-    const key = this.keyFor(event);
-    const now = (/* @__PURE__ */ new Date()).toISOString();
-    const existing = this.entries.get(key);
-    if (existing) {
-      existing.count++;
-      existing.lastSeen = now;
-      return;
-    }
-    if (this.entries.size >= _CsrfReadinessStore.MAX_ENTRIES) {
-      const firstKey = this.entries.keys().next().value;
-      if (firstKey !== void 0) this.entries.delete(firstKey);
-    }
-    this.entries.set(key, { count: 1, firstSeen: now, lastSeen: now });
-  }
-  summary() {
-    let total = 0;
-    const routes = [];
-    for (const [key, entry] of this.entries) {
-      const [method, path, reason] = key.split("\0");
-      routes.push({
-        method,
-        path,
-        reason,
-        count: entry.count,
-        firstSeen: entry.firstSeen,
-        lastSeen: entry.lastSeen
-      });
-      total += entry.count;
-    }
-    return {
-      generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
-      totalEvents: total,
-      routes
-    };
-  }
-  reset() {
-    this.entries.clear();
-  }
-};
-
 // src/server/storage/storage-manager.ts
 var StorageManager = class {
   #config;
@@ -1689,8 +1601,8 @@ function createCacheEngine(opts) {
   function claimAndRun(key, fn, options, skipWrite) {
     let resolveOuter;
     let rejectOuter;
-    const outerPromise = new Promise((resolve4, reject) => {
-      resolveOuter = resolve4;
+    const outerPromise = new Promise((resolve3, reject) => {
+      resolveOuter = resolve3;
       rejectOuter = reject;
     });
     void outerPromise.catch(() => {
@@ -2033,6 +1945,9 @@ function definePlugin(plugin) {
   return plugin;
 }
 export {
+  ActionError,
+  ActionInputError,
+  ActionScanError,
   AuthRequiredError,
   BATCH_PATH,
   BatchPathConflictError,
@@ -2138,6 +2053,7 @@ export {
   executeAction,
   executeRoute,
   extractTraceId,
+  extractUniversalIssues,
   findSuggestion,
   generateBackupCodes,
   generateManifest,
@@ -2154,6 +2070,8 @@ export {
   handleCspReport,
   handleCsrfReadiness,
   initCacheEngine,
+  isActionError,
+  isInputError,
   jsonTransformer,
   levenshtein,
   loadCustomErrorPages,
@@ -2184,6 +2102,7 @@ export {
   scanJobs,
   scanMiddlewares,
   scanServerActions,
+  scanServerActionsEnriched,
   scanServerRoutes,
   scanWebSocketRoutes,
   sendError,