theokit 0.2.0 → 0.2.2

package/dist/{chunk-ZK5JCE5J.js → chunk-EXJWO2HB.js}

@@ -13,16 +13,10 @@ import {
   resolveTransformer,
   safeAudit,
   sendError
-} from "./chunk-WQCPKA2L.js";
-import {
-  matchRoute,
-  scanServerActions,
-  scanServerRoutes,
-  scanWebSocketRoutes
-} from "./chunk-GQSTRXXB.js";
+} from "./chunk-C27AZN46.js";
 import {
   loadConfig
-} from "./chunk-S3JBIFKS.js";
+} from "./chunk-MG7H3LAW.js";
 import {
   broadcastToDevtools
 } from "./chunk-5ODOE6EF.js";
@@ -33,6 +27,14 @@ import {
 import {
   buildServicesProxyConfig
 } from "./chunk-WZ7CPVQB.js";
+import {
+  matchRoute,
+  scanServerRoutes,
+  scanWebSocketRoutes
+} from "./chunk-QLGES2HC.js";
+import {
+  scanServerActions
+} from "./chunk-MOT42NAH.js";
 
 // src/vite-plugin/index.ts
 import { existsSync as existsSync5 } from "fs";
@@ -468,6 +470,54 @@ function generateRouteManifest(tree) {
   return lines.join("\n");
 }
 
+// src/server/security/csrf-readiness-store.ts
+var CsrfReadinessStore = class _CsrfReadinessStore {
+  static MAX_ENTRIES = 1e3;
+  entries = /* @__PURE__ */ new Map();
+  keyFor(event) {
+    return `${event.method}\0${event.path}\0${event.reason}`;
+  }
+  record(event) {
+    const key = this.keyFor(event);
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    const existing = this.entries.get(key);
+    if (existing) {
+      existing.count++;
+      existing.lastSeen = now;
+      return;
+    }
+    if (this.entries.size >= _CsrfReadinessStore.MAX_ENTRIES) {
+      const firstKey = this.entries.keys().next().value;
+      if (firstKey !== void 0) this.entries.delete(firstKey);
+    }
+    this.entries.set(key, { count: 1, firstSeen: now, lastSeen: now });
+  }
+  summary() {
+    let total = 0;
+    const routes = [];
+    for (const [key, entry] of this.entries) {
+      const [method, path, reason] = key.split("\0");
+      routes.push({
+        method,
+        path,
+        reason,
+        count: entry.count,
+        firstSeen: entry.firstSeen,
+        lastSeen: entry.lastSeen
+      });
+      total += entry.count;
+    }
+    return {
+      generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      totalEvents: total,
+      routes
+    };
+  }
+  reset() {
+    this.entries.clear();
+  }
+};
+
 // src/vite-plugin/action-middleware.ts
 import { randomUUID } from "crypto";
 var PREFIX = "/api/__actions/";
@@ -536,13 +586,17 @@ function createActionMiddleware(vite, serverDir, options) {
         csrfMode,
         disallowed
       );
-      logRequest({
-        method: req.method ?? "POST",
-        url,
-        status: res.statusCode,
-        duration: Date.now() - start,
-        requestId
-      });
+      logRequest(
+        {
+          method: req.method ?? "POST",
+          url,
+          status: res.statusCode,
+          duration: Date.now() - start,
+          requestId
+        },
+        void 0,
+        req
+      );
     })();
   };
 }
@@ -974,6 +1028,35 @@ async function handleBatchInline(req, res, batching, requestId) {
     sendError(res, "BATCH_ERROR", message, 400, void 0, requestId);
   }
 }
+async function runPluginsBeforeRouteMatch(pluginRunner, reqCtx) {
+  const { req, res, requestId, start, url } = reqCtx;
+  try {
+    const hookResult = await pluginRunner.runOnRequest({
+      request: req,
+      response: res,
+      ctx: {},
+      requestId
+    });
+    if (hookResult.shortCircuited) {
+      logRequest(
+        {
+          method: req.method ?? "GET",
+          url,
+          status: res.statusCode,
+          duration: Date.now() - start,
+          requestId
+        },
+        void 0,
+        req
+      );
+      return true;
+    }
+  } catch (err) {
+    sendError(res, "PLUGIN_ERROR", err.message, 500, void 0, requestId);
+    return true;
+  }
+  return false;
+}
 function createApiMiddleware(vite, serverDir, rateLimitConfigOrOptions) {
   const opts = rateLimitConfigOrOptions && "windowMs" in rateLimitConfigOrOptions ? { rateLimitConfig: rateLimitConfigOrOptions } : rateLimitConfigOrOptions ?? {};
   const loadModule = createViteLoader(vite);
@@ -991,7 +1074,7 @@ function createApiMiddleware(vite, serverDir, rateLimitConfigOrOptions) {
   const csrfReadinessStore = opts.csrfReadinessStore;
   const servicesProxyPrefixes = opts.servicesProxyPrefixes ?? [];
   return (req, res, next) => {
-    void (async () => {
+    const handle = async () => {
       const url = req.url ?? "";
       if (await handleCspReportIfMatch(req, res, url, { auditLogger, onCspViolation })) {
         return;
@@ -1015,6 +1098,9 @@ function createApiMiddleware(vite, serverDir, rateLimitConfigOrOptions) {
       if (applyRateLimitOr429(req, res, { rateLimiter, requestId, url, start })) {
         return;
       }
+      if (pluginRunner && await runPluginsBeforeRouteMatch(pluginRunner, { req, res, requestId, start, url })) {
+        return;
+      }
       if (await handleBatchIfMatch(req, res, { url, batching, requestId, start })) {
         return;
       }
@@ -1026,13 +1112,17 @@ function createApiMiddleware(vite, serverDir, rateLimitConfigOrOptions) {
         const suggestion = findSuggestion(urlPath, routePaths);
         const msg = suggestion ? `API route not found: ${urlPath}. Did you mean: ${suggestion}?` : "API route not found";
         sendError(res, "NOT_FOUND", msg, 404, void 0, requestId);
-        logRequest({
-          method: req.method ?? "GET",
-          url,
-          status: 404,
-          duration: Date.now() - start,
-          requestId
-        });
+        logRequest(
+          {
+            method: req.method ?? "GET",
+            url,
+            status: 404,
+            duration: Date.now() - start,
+            requestId
+          },
+          void 0,
+          req
+        );
         return;
       }
       const method = (req.method ?? "GET").toUpperCase();
@@ -1050,8 +1140,13 @@ function createApiMiddleware(vite, serverDir, rateLimitConfigOrOptions) {
         csrfMode,
         disallowed
       });
-      logRequest({ method, url, status: res.statusCode, duration: Date.now() - start, requestId });
-    })();
+      logRequest(
+        { method, url, status: res.statusCode, duration: Date.now() - start, requestId },
+        void 0,
+        req
+      );
+    };
+    void handle();
   };
 }
 
@@ -1077,7 +1172,7 @@ function resolveExportSubpath(pkgRoot, subpath) {
     }
     let target;
     if (typeof exp === "string") target = exp;
-    else if (exp && typeof exp === "object") {
+    else if (typeof exp === "object") {
       const e = exp;
       target = e.import ?? e.default;
     }
@@ -1147,7 +1242,9 @@ var DEFAULT_RESOLVED = {
   disallowed: void 0,
   cors: void 0,
   auditLogger: void 0,
-  devtoolsEnabled: true
+  devtoolsEnabled: true,
+  openapi: void 0,
+  distDir: ".theo"
 };
 async function resolvePluginConfig(projectRoot) {
   try {
@@ -1176,7 +1273,9 @@ async function resolvePluginConfig(projectRoot) {
       disallowed: userConfig.security?.disallowed,
       cors: userConfig.security?.cors,
       auditLogger,
-      devtoolsEnabled: userConfig.devtools !== false
+      devtoolsEnabled: userConfig.devtools !== false,
+      openapi: userConfig.openapi,
+      distDir: userConfig.distDir
     };
   } catch {
     return DEFAULT_RESOLVED;
@@ -1513,9 +1612,7 @@ async function integrateUseTheoUI(cwd, opts) {
   }
   const tailwindPlugins = normalizePluginReturn(tailwindPlugin);
   if (tailwindPlugins === null) {
-    console.warn(
-      `[theokit] @tailwindcss/vite returned unexpected shape. Skipping auto-config.`
-    );
+    console.warn(`[theokit] @tailwindcss/vite returned unexpected shape. Skipping auto-config.`);
     return [];
   }
   const uiPlugins = normalizePluginReturn(uiPlugin);
@@ -1789,7 +1886,42 @@ async function theoPluginAsync(rootOrOptions) {
       })
     );
   }
-  return [theoPlugin(rootOrOptions), ...uiPlugins, ...servicesPlugins];
+  const { appTypedClientPlugin } = await import("./app-typed-client-YIBP6JWH.js");
+  const appClientPlugin = appTypedClientPlugin({
+    cwd: projectRoot,
+    serverDir: resolve4(projectRoot, "server"),
+    distDir: resolve4(projectRoot, ".theo")
+  });
+  const { actionsVirtualModule } = await import("./actions-virtual-module-E6PU47GV.js");
+  const actionsPlugin = actionsVirtualModule({
+    serverDir: resolve4(projectRoot, "server"),
+    distDir: resolve4(projectRoot, ".theo")
+  });
+  return [
+    theoPlugin(rootOrOptions),
+    ...uiPlugins,
+    ...servicesPlugins,
+    appClientPlugin,
+    actionsPlugin
+  ];
+}
+function buildOptimizeDepsInclude(projectRoot, viteOptimizeDeps) {
+  const include = [];
+  if (existsSync5(resolve4(projectRoot, "node_modules", "@usetheo", "ui"))) {
+    include.push("@usetheo/ui");
+  }
+  if (existsSync5(resolve4(projectRoot, "node_modules", "lucide-react"))) {
+    include.push("lucide-react");
+  }
+  include.push("devalue");
+  if (Array.isArray(viteOptimizeDeps)) {
+    for (const pkg of viteOptimizeDeps) {
+      if (typeof pkg === "string" && pkg.length > 0 && !include.includes(pkg)) {
+        include.push(pkg);
+      }
+    }
+  }
+  return include;
 }
 function theoPlugin(rootOrOptions) {
   const options = typeof rootOrOptions === "string" ? { root: rootOrOptions } : rootOrOptions ?? {};
@@ -1808,6 +1940,8 @@ function theoPlugin(rootOrOptions) {
   let cors;
   let auditLogger;
   let devtoolsEnabled = true;
+  let resolvedOpenApi;
+  let resolvedDistDir = ".theo";
   let isDevMode = false;
   let configLoadedOnce = false;
   return {
@@ -1826,6 +1960,8 @@ function theoPlugin(rootOrOptions) {
       cors = resolved.cors;
       auditLogger = resolved.auditLogger;
       devtoolsEnabled = resolved.devtoolsEnabled;
+      resolvedOpenApi = resolved.openapi;
+      resolvedDistDir = resolved.distDir;
     },
     // Vite calls this hook (sync return is fine — no awaits left after
     // the auto-chain moved to theoPluginAsync). The @usetheo/ui +
@@ -1833,13 +1969,7 @@ function theoPlugin(rootOrOptions) {
     // Vite drops plugins returned from a child plugin's config() hook.
     config() {
       const ext = existsSync5(resolve4(theoSrcDir, "index.ts")) ? ".ts" : ".js";
-      const optimizeDepsInclude = [];
-      if (existsSync5(resolve4(projectRoot, "node_modules", "@usetheo", "ui"))) {
-        optimizeDepsInclude.push("@usetheo/ui");
-      }
-      if (existsSync5(resolve4(projectRoot, "node_modules", "lucide-react"))) {
-        optimizeDepsInclude.push("lucide-react");
-      }
+      const optimizeDepsInclude = buildOptimizeDepsInclude(projectRoot, options.viteOptimizeDeps);
       const warmupClientFiles = [];
       for (const candidate of ["app/layout.tsx", "app/page.tsx", "app/page.jsx"]) {
         const full = resolve4(projectRoot, candidate);
@@ -1848,7 +1978,10 @@ function theoPlugin(rootOrOptions) {
       const servicesProxy = options.services && Object.keys(options.services).length > 0 ? buildServicesProxyConfig(options.services) : void 0;
       return {
         envPrefix: "THEO_PUBLIC_",
-        optimizeDeps: optimizeDepsInclude.length > 0 ? { include: optimizeDepsInclude } : void 0,
+        optimizeDeps: {
+          ...optimizeDepsInclude.length > 0 ? { include: optimizeDepsInclude } : {},
+          force: true
+        },
         server: {
           ...warmupClientFiles.length > 0 ? { warmup: { clientFiles: warmupClientFiles } } : {},
           ...servicesProxy !== void 0 ? { proxy: servicesProxy } : {},
@@ -1963,7 +2096,7 @@ function theoPlugin(rootOrOptions) {
         ].join("\n");
       }
     },
-    configureServer(server) {
+    async configureServer(server) {
       isDevMode = true;
       globalThis.__theoViteHotServer = server;
       server.ws.on("theo:devtools:request-manifest", () => {
@@ -1978,6 +2111,7 @@ function theoPlugin(rootOrOptions) {
         createActionMiddleware(server, serverDir, { pluginRunner, csrfMode, disallowed })
       );
       const servicesProxyPrefixes = options.services && Object.keys(options.services).length > 0 ? Object.values(options.services).map((s) => s.proxy) : [];
+      const csrfReadinessStore = options.csrfReadinessStore ?? new CsrfReadinessStore();
       server.middlewares.use(
         createApiMiddleware(server, serverDir, {
           rateLimitConfig: options.rateLimit,
@@ -1989,7 +2123,8 @@ function theoPlugin(rootOrOptions) {
           disallowed,
           cors,
           auditLogger,
-          servicesProxyPrefixes
+          servicesProxyPrefixes,
+          csrfReadinessStore
         })
       );
       const configPath = resolve4(projectRoot, "theo.config.ts");
@@ -2018,6 +2153,29 @@ function theoPlugin(rootOrOptions) {
       }
       server.watcher.on("add", handleRouteChange);
       server.watcher.on("unlink", handleRouteChange);
+      if (resolvedOpenApi !== void 0) {
+        const openApiCfg = resolvedOpenApi;
+        const { reEmitOpenApi } = await import("./dev-emit-I3CKOHML.js");
+        const openApiServerDir = resolve4(projectRoot, "server");
+        const openApiDistDir = resolve4(projectRoot, resolvedDistDir);
+        const isRouteFileForOpenApi = (file) => file.startsWith(openApiServerDir) && /\.(ts|tsx|js|mjs)$/.test(file);
+        void reEmitOpenApi(openApiServerDir, openApiDistDir, openApiCfg);
+        server.watcher.on("change", (file) => {
+          if (isRouteFileForOpenApi(file)) {
+            void reEmitOpenApi(openApiServerDir, openApiDistDir, openApiCfg);
+          }
+        });
+        server.watcher.on("add", (file) => {
+          if (isRouteFileForOpenApi(file)) {
+            void reEmitOpenApi(openApiServerDir, openApiDistDir, openApiCfg);
+          }
+        });
+        server.watcher.on("unlink", (file) => {
+          if (isRouteFileForOpenApi(file)) {
+            void reEmitOpenApi(openApiServerDir, openApiDistDir, openApiCfg);
+          }
+        });
+      }
       setupWsUpgrade(server, projectRoot);
       server.httpServer?.once("close", () => {
         ;
@@ -2035,4 +2193,4 @@ export {
   theoPluginAsync,
   theoPlugin
 };
-//# sourceMappingURL=chunk-ZK5JCE5J.js.map
+//# sourceMappingURL=chunk-EXJWO2HB.js.map