theokit 0.2.4 → 0.4.0

package/dist/chunk-FI7MPTJW.js

@@ -0,0 +1,77 @@
+// src/server/http/error-pages.ts
+import { existsSync, readFileSync, statSync } from "fs";
+import { resolve } from "path";
+var MAX_ERROR_HTML_BYTES = 1048576;
+function loadIfSafe(dir, name) {
+  const path = resolve(dir, name);
+  if (!existsSync(path)) return void 0;
+  try {
+    const stat = statSync(path);
+    if (stat.size > MAX_ERROR_HTML_BYTES) {
+      console.warn(
+        `[theokit] Custom error page ${name} is ${stat.size} bytes (max ${MAX_ERROR_HTML_BYTES}); skipping.`
+      );
+      return void 0;
+    }
+    return readFileSync(path, "utf-8");
+  } catch (err) {
+    console.warn(`[theokit] Failed to read ${name}: ${err.message}`);
+    return void 0;
+  }
+}
+function loadCustomErrorPages(clientDir) {
+  return {
+    custom404Html: loadIfSafe(clientDir, "404.html"),
+    custom500Html: loadIfSafe(clientDir, "500.html")
+  };
+}
+
+// src/server/http/static.ts
+import { existsSync as existsSync2, readFileSync as readFileSync2, statSync as statSync2 } from "fs";
+import { resolve as resolve2, extname } from "path";
+var MIME_TYPES = {
+  ".html": "text/html",
+  ".js": "application/javascript",
+  ".mjs": "application/javascript",
+  ".css": "text/css",
+  ".json": "application/json",
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".gif": "image/gif",
+  ".svg": "image/svg+xml",
+  ".ico": "image/x-icon",
+  ".woff": "font/woff",
+  ".woff2": "font/woff2",
+  ".ttf": "font/ttf",
+  ".txt": "text/plain",
+  ".map": "application/json"
+};
+function serveStaticFile(req, res, clientDir) {
+  const urlPath = (req.url ?? "/").split("?")[0];
+  const filePath = resolve2(clientDir, "." + urlPath);
+  if (!filePath.startsWith(clientDir)) {
+    res.writeHead(403);
+    res.end("Forbidden");
+    return true;
+  }
+  if (!existsSync2(filePath)) return false;
+  const stat = statSync2(filePath);
+  if (!stat.isFile()) return false;
+  const ext = extname(filePath);
+  const contentType = MIME_TYPES[ext] ?? "application/octet-stream";
+  const content = readFileSync2(filePath);
+  res.writeHead(200, {
+    "Content-Type": contentType,
+    "Content-Length": content.length
+  });
+  res.end(content);
+  return true;
+}
+
+export {
+  MAX_ERROR_HTML_BYTES,
+  loadCustomErrorPages,
+  serveStaticFile
+};
+//# sourceMappingURL=chunk-FI7MPTJW.js.map

package/dist/chunk-FI7MPTJW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/http/error-pages.ts","../src/server/http/static.ts"],"sourcesContent":["/**\n * T2.4 — Custom error pages loader.\n *\n * Loads optional `.theo/client/404.html` and `500.html` from disk so adapters\n * (Node, CF, Vercel, Bun, Netlify, AWS Lambda, Deno) can pass them to the\n * shared `sendError` pipeline.\n *\n * EC-9: caps file size at 1MB. Files beyond the limit are skipped with a\n * console.warn and the default JSON error path is used.\n */\n\n/* eslint-disable security/detect-non-literal-fs-filename --\n * Loads `.theo/client/404.html` and `500.html` from a directory `dir` that\n * is always the build output of the current project. The names are fixed\n * literals (`'404.html'` / `'500.html'`) — no HTTP input.\n */\nimport { existsSync, readFileSync, statSync } from 'node:fs'\nimport { resolve } from 'node:path'\n\nexport const MAX_ERROR_HTML_BYTES = 1_048_576 // 1MB\n\nexport interface CustomErrorPages {\n  custom404Html?: string\n  custom500Html?: string\n}\n\nfunction loadIfSafe(dir: string, name: string): string | undefined {\n  const path = resolve(dir, name)\n  if (!existsSync(path)) return undefined\n  try {\n    const stat = statSync(path)\n    if (stat.size > MAX_ERROR_HTML_BYTES) {\n      console.warn(\n        `[theokit] Custom error page ${name} is ${stat.size} bytes (max ${MAX_ERROR_HTML_BYTES}); skipping.`,\n      )\n      return undefined\n    }\n    return readFileSync(path, 'utf-8')\n  } catch (err) {\n    console.warn(`[theokit] Failed to read ${name}: ${(err as Error).message}`)\n    return undefined\n  }\n}\n\n/**\n * Load `.theo/client/{404,500}.html` from the given client directory.\n * Returns object with both fields when present; missing pages remain undefined.\n */\nexport function loadCustomErrorPages(clientDir: string): CustomErrorPages {\n  return {\n    custom404Html: loadIfSafe(clientDir, '404.html'),\n    custom500Html: loadIfSafe(clientDir, '500.html'),\n  }\n}\n","/* eslint-disable security/detect-non-literal-fs-filename --\n * Static-file server. The URL path IS user-controlled, BUT before any fs\n * call we resolve to absolute and reject with 403 if the resolved path\n * escapes `clientDir` (see EC-1 guard at line below). The guard is\n * authoritative; the rule cannot see it.\n */\nimport { existsSync, readFileSync, statSync } from 'node:fs'\nimport type { IncomingMessage, ServerResponse } from 'node:http'\nimport { resolve, extname } from 'node:path'\n\nconst MIME_TYPES: Record<string, string> = {\n  '.html': 'text/html',\n  '.js': 'application/javascript',\n  '.mjs': 'application/javascript',\n  '.css': 'text/css',\n  '.json': 'application/json',\n  '.png': 'image/png',\n  '.jpg': 'image/jpeg',\n  '.jpeg': 'image/jpeg',\n  '.gif': 'image/gif',\n  '.svg': 'image/svg+xml',\n  '.ico': 'image/x-icon',\n  '.woff': 'font/woff',\n  '.woff2': 'font/woff2',\n  '.ttf': 'font/ttf',\n  '.txt': 'text/plain',\n  '.map': 'application/json',\n}\n\nexport function serveStaticFile(\n  req: IncomingMessage,\n  res: ServerResponse,\n  clientDir: string,\n): boolean {\n  const urlPath = (req.url ?? '/').split('?')[0]\n\n  // Path traversal prevention (EC-1)\n  const filePath = resolve(clientDir, '.' + urlPath)\n  if (!filePath.startsWith(clientDir)) {\n    res.writeHead(403)\n    res.end('Forbidden')\n    return true\n  }\n\n  if (!existsSync(filePath)) return false\n\n  const stat = statSync(filePath)\n  if (!stat.isFile()) return false\n\n  const ext = extname(filePath)\n  const contentType = MIME_TYPES[ext] ?? 'application/octet-stream'\n  const content = readFileSync(filePath)\n\n  res.writeHead(200, {\n    'Content-Type': contentType,\n    'Content-Length': content.length,\n  })\n  res.end(content)\n  return true\n}\n"],"mappings":";AAgBA,SAAS,YAAY,cAAc,gBAAgB;AACnD,SAAS,eAAe;AAEjB,IAAM,uBAAuB;AAOpC,SAAS,WAAW,KAAa,MAAkC;AACjE,QAAM,OAAO,QAAQ,KAAK,IAAI;AAC9B,MAAI,CAAC,WAAW,IAAI,EAAG,QAAO;AAC9B,MAAI;AACF,UAAM,OAAO,SAAS,IAAI;AAC1B,QAAI,KAAK,OAAO,sBAAsB;AACpC,cAAQ;AAAA,QACN,+BAA+B,IAAI,OAAO,KAAK,IAAI,eAAe,oBAAoB;AAAA,MACxF;AACA,aAAO;AAAA,IACT;AACA,WAAO,aAAa,MAAM,OAAO;AAAA,EACnC,SAAS,KAAK;AACZ,YAAQ,KAAK,4BAA4B,IAAI,KAAM,IAAc,OAAO,EAAE;AAC1E,WAAO;AAAA,EACT;AACF;AAMO,SAAS,qBAAqB,WAAqC;AACxE,SAAO;AAAA,IACL,eAAe,WAAW,WAAW,UAAU;AAAA,IAC/C,eAAe,WAAW,WAAW,UAAU;AAAA,EACjD;AACF;;;AC/CA,SAAS,cAAAA,aAAY,gBAAAC,eAAc,YAAAC,iBAAgB;AAEnD,SAAS,WAAAC,UAAS,eAAe;AAEjC,IAAM,aAAqC;AAAA,EACzC,SAAS;AAAA,EACT,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AACV;AAEO,SAAS,gBACd,KACA,KACA,WACS;AACT,QAAM,WAAW,IAAI,OAAO,KAAK,MAAM,GAAG,EAAE,CAAC;AAG7C,QAAM,WAAWA,SAAQ,WAAW,MAAM,OAAO;AACjD,MAAI,CAAC,SAAS,WAAW,SAAS,GAAG;AACnC,QAAI,UAAU,GAAG;AACjB,QAAI,IAAI,WAAW;AACnB,WAAO;AAAA,EACT;AAEA,MAAI,CAACH,YAAW,QAAQ,EAAG,QAAO;AAElC,QAAM,OAAOE,UAAS,QAAQ;AAC9B,MAAI,CAAC,KAAK,OAAO,EAAG,QAAO;AAE3B,QAAM,MAAM,QAAQ,QAAQ;AAC5B,QAAM,cAAc,WAAW,GAAG,KAAK;AACvC,QAAM,UAAUD,cAAa,QAAQ;AAErC,MAAI,UAAU,KAAK;AAAA,IACjB,gBAAgB;AAAA,IAChB,kBAAkB,QAAQ;AAAA,EAC5B,CAAC;AACD,MAAI,IAAI,OAAO;AACf,SAAO;AACT;","names":["existsSync","readFileSync","statSync","resolve"]}

package/dist/chunk-H4J2LECY.js

@@ -0,0 +1,201 @@
+// src/server/define/define-route.ts
+function defineRoute(config) {
+  return config;
+}
+
+// src/server/define/define-action.ts
+function defineAction(config) {
+  return config;
+}
+
+// src/server/define/define-middleware.ts
+function defineMiddleware(handler) {
+  return handler;
+}
+
+// src/server/define/define-agent-endpoint.ts
+var SSE_HEADERS = {
+  "content-type": "text/event-stream",
+  "cache-control": "no-cache, no-transform",
+  connection: "keep-alive"
+};
+function encodeSSE(event) {
+  return new TextEncoder().encode(`data: ${JSON.stringify(event)}
+
+`);
+}
+function resolveAbortSignal(request) {
+  if (typeof request !== "object" || request === null) {
+    return new AbortController().signal;
+  }
+  const r = request;
+  if (typeof r.signal === "object" && r.signal !== null && "aborted" in r.signal && typeof r.signal.addEventListener === "function") {
+    return r.signal;
+  }
+  const controller = new AbortController();
+  if (r.aborted === true) controller.abort();
+  if (typeof r.on === "function") {
+    r.on("close", () => {
+      if (!controller.signal.aborted) controller.abort();
+    });
+    r.on("aborted", () => {
+      if (!controller.signal.aborted) controller.abort();
+    });
+  }
+  return controller.signal;
+}
+function defineAgentEndpoint(config) {
+  return {
+    handler: async ({ request, ctx, body, query, params }) => {
+      const cookieHeaders = new Headers();
+      const signal = resolveAbortSignal(request);
+      const generator = config.handler({
+        request,
+        ctx,
+        body,
+        query,
+        params,
+        cookieHeaders,
+        signal
+      });
+      let firstResult;
+      let primeError;
+      try {
+        firstResult = await generator.next();
+      } catch (err) {
+        primeError = err;
+        firstResult = { value: void 0, done: true };
+      }
+      const responseHeaders = new Headers(SSE_HEADERS);
+      for (const value of cookieHeaders.getSetCookie()) {
+        responseHeaders.append("set-cookie", value);
+      }
+      const stream = new ReadableStream({
+        async start(controller) {
+          const onAbort = () => {
+            void generator.return(void 0);
+          };
+          if (signal.aborted) {
+            controller.close();
+            return;
+          }
+          signal.addEventListener("abort", onAbort, { once: true });
+          try {
+            if (primeError !== void 0) {
+              let message;
+              if (primeError instanceof Error) {
+                message = primeError.message;
+              } else if (typeof primeError === "string") {
+                message = primeError;
+              } else {
+                message = "agent handler failed during setup";
+              }
+              controller.enqueue(encodeSSE({ type: "error", message }));
+              return;
+            }
+            if (firstResult.done !== true) {
+              controller.enqueue(encodeSSE(firstResult.value));
+            } else {
+              return;
+            }
+            for await (const event of generator) {
+              if (signal.aborted) break;
+              controller.enqueue(encodeSSE(event));
+            }
+          } catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            controller.enqueue(encodeSSE({ type: "error", message }));
+          } finally {
+            signal.removeEventListener("abort", onAbort);
+            controller.close();
+          }
+        },
+        cancel() {
+          void generator.return(void 0);
+        }
+      });
+      return new Response(stream, { headers: responseHeaders });
+    }
+  };
+}
+
+// src/server/define/define-agent-tool.ts
+import { z } from "zod";
+var TOOL_NAME_REGEX = /^[a-zA-Z][a-zA-Z0-9_-]{0,63}$/;
+function isZodObject(schema) {
+  let current = schema;
+  for (let depth = 0; depth < 10; depth++) {
+    const def = current._def;
+    if (def?.typeName === "ZodObject") return true;
+    if (def?.schema !== void 0) {
+      current = def.schema;
+      continue;
+    }
+    if (def?.innerType !== void 0) {
+      current = def.innerType;
+      continue;
+    }
+    return false;
+  }
+  return false;
+}
+function defineAgentTool(spec) {
+  if (!TOOL_NAME_REGEX.test(spec.name)) {
+    throw new Error(
+      `defineAgentTool: name must match ${TOOL_NAME_REGEX.source}. Got: ${JSON.stringify(spec.name)}`
+    );
+  }
+  if (!isZodObject(spec.inputSchema)) {
+    throw new Error("defineAgentTool: inputSchema must be a ZodObject (z.object({...}))");
+  }
+  if (spec.description.length === 0) {
+    console.warn(
+      `defineAgentTool(${JSON.stringify(spec.name)}): empty description degrades LLM tool selection \u2014 provide a one-sentence summary.`
+    );
+  }
+  const { $schema: _$schema, ...inputSchema } = z.toJSONSchema(spec.inputSchema);
+  return {
+    name: spec.name,
+    description: spec.description,
+    inputSchema,
+    handler: async (input) => {
+      const parsed = spec.inputSchema.parse(input);
+      return await spec.handler(parsed);
+    }
+  };
+}
+
+// src/server/define/define-websocket.ts
+function defineWebSocket(handler) {
+  return handler;
+}
+function defineWebSocketWeb(handler) {
+  return handler;
+}
+
+// src/server/define/define-channel.ts
+function defineChannel(handler) {
+  return handler;
+}
+function defineWebChannel(handler) {
+  return handler;
+}
+
+// src/server/define/define-plugin.ts
+function defineTheoPlugin(plugin) {
+  return plugin;
+}
+
+export {
+  defineRoute,
+  defineAction,
+  defineMiddleware,
+  defineAgentEndpoint,
+  defineAgentTool,
+  defineWebSocket,
+  defineWebSocketWeb,
+  defineChannel,
+  defineWebChannel,
+  defineTheoPlugin
+};
+//# sourceMappingURL=chunk-H4J2LECY.js.map

package/dist/chunk-H4J2LECY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/define/define-route.ts","../src/server/define/define-action.ts","../src/server/define/define-middleware.ts","../src/server/define/define-agent-endpoint.ts","../src/server/define/define-agent-tool.ts","../src/server/define/define-websocket.ts","../src/server/define/define-channel.ts","../src/server/define/define-plugin.ts"],"sourcesContent":["import type { z } from 'zod'\n\n// T2.2 (architecture-cleanup) — RouteConfig type moved to core/contracts/\n// (canonical home per ADR-0001 v3). Re-export preserves the public path\n// `import { type RouteConfig } from 'theokit/server'`.\nexport type { RouteConfig } from '../../core/contracts/route-config.js'\n\nimport type { RouteConfig } from '../../core/contracts/route-config.js'\n\n/**\n * Define a typed HTTP route.\n * Identity function — provides type inference for route handlers.\n */\nexport function defineRoute<\n  TQuery extends z.ZodType = z.ZodUndefined,\n  TBody extends z.ZodType = z.ZodUndefined,\n  TParams extends z.ZodType = z.ZodUndefined,\n  TCtx = unknown,\n  TResponse = unknown,\n>(\n  config: RouteConfig<TQuery, TBody, TParams, TCtx, TResponse>,\n): RouteConfig<TQuery, TBody, TParams, TCtx, TResponse> {\n  return config\n}\n","import type { z } from 'zod'\n\n/**\n * Action wire-protocol accept mode per plan g3-server-actions-and-useaction\n * v1.2 ADR D1. Default behavior (when omitted) is `'json'`. `'form'` opts the\n * action into FormData multipart parsing for progressive-enhancement forms;\n * the runtime in `server/http/action-execute.ts` will coerce FormData entries\n * against the `input` schema via `formDataToObject` (Astro pattern).\n */\nexport type ActionAccept = 'form' | 'json'\n\nexport interface ActionConfig<TInput extends z.ZodType, TCtx = unknown> {\n  /**\n   * Zod input schema. Required: every action declares its input contract via\n   * Zod (architecture rule: zod-is-SSOT). The shape becomes the handler's\n   * typed `input` parameter via `z.infer<TInput>`.\n   */\n  input: TInput\n  /**\n   * Wire-protocol accept mode. Defaults to `'json'` when omitted. Setting\n   * `'form'` switches the runtime to FormData multipart parsing — the input\n   * schema MUST be `z.object(...)` so field-by-field coercion can drive\n   * boolean string / number / array coercion (Astro pattern).\n   */\n  accept?: ActionAccept\n  handler: (ctx: { input: z.infer<TInput>; ctx: TCtx }) => unknown\n}\n\n/**\n * Define a typed server action.\n *\n * Identity function — provides type inference for action handlers. The\n * runtime that consumes the config (validation + invocation + serialization)\n * lives in `server/http/action-execute.ts`.\n *\n * Per plan g3-server-actions-and-useaction v1.2 § Phase 1 / T1.2: the new\n * `accept?: 'form' | 'json'` field is the only contract change vs the\n * pre-G3 identity. Existing callsites (`defineAction({input, handler})`)\n * continue to compile — `accept` is opt-in.\n */\nexport function defineAction<TInput extends z.ZodType, TCtx = unknown>(\n  config: ActionConfig<TInput, TCtx>,\n): ActionConfig<TInput, TCtx> {\n  return config\n}\n","export type MiddlewareHandler = (\n  request: Request,\n  next: (request: Request) => Promise<Response>,\n) => Response | Promise<Response>\n\n/**\n * Define a middleware handler.\n * Identity function — provides type annotation for middleware.\n */\nexport function defineMiddleware(handler: MiddlewareHandler): MiddlewareHandler {\n  return handler\n}\n","import type { z } from 'zod'\n\nimport type { AgentEvent } from '../agent/agent-types.js'\n\nimport type { RouteConfig } from './define-route.js'\n\n/**\n * T5.1 — defineAgentEndpoint\n *\n * Sugar over defineRoute (ADR D4). Accepts an async generator that yields\n * AgentEvents and produces a RouteConfig whose handler returns a Response\n * streaming Server-Sent Events (SSE).\n *\n * Wire format: `data: <JSON>\\n\\n` per event. Standards-compliant.\n *\n * The generator may throw — the wrapper catches and emits a final\n * `{ type: 'error', message }` event before closing the stream.\n *\n * The wrapper observes `request.signal` (EC-7) — when aborted, the\n * underlying generator is told to `return()` and the stream closes\n * promptly.\n *\n * Note (EC-12, Out of Scope): SSE backpressure (slow consumer) is not\n * handled here. For high-frequency token streaming consider a different\n * transport (WS) or a buffer policy. This MVP enqueues each event\n * immediately.\n */\n\nexport interface AgentEndpointHandlerArgs<TCtx = unknown, TBody = unknown> {\n  query: undefined\n  body: TBody\n  params: undefined\n  request: Request\n  ctx: TCtx\n  /**\n   * Mutable headers bag that the wrapper merges into the SSE response BEFORE\n   * the stream starts. Used by `createConversationHistory` to issue a\n   * conversation-id cookie on first request. Append entries via\n   * `cookieHeaders.append('set-cookie', '<cookie-string>')`.\n   *\n   * Cookies appended AFTER the first yield are NOT applied — the response\n   * headers commit when the wrapper constructs the Response, before the\n   * async generator runs. This is per HTTP semantics, not a wrapper choice.\n   */\n  cookieHeaders: Headers\n  /**\n   * Phase 3 (Production-Readiness #5) — request abort signal.\n   *\n   * Fires when the SSE client disconnects (browser closes tab, abort fetch,\n   * etc.). Thread this to `agent.send(msg, { signal })` so the SDK cancels\n   * the in-flight provider call — STOPS TOKENS FROM CHARGING for output\n   * the user will never receive.\n   *\n   * EC-1 (MUST FIX): the signal is derived via duck-type detection\n   * (`'aborted' in r.signal && typeof r.signal.addEventListener === 'function'`)\n   * to survive cross-realm scenarios (Node 18 polyfills, undici, Edge\n   * runtimes with their own AbortSignal globals). `instanceof AbortSignal`\n   * would fail in those cases.\n   */\n  signal: AbortSignal\n}\n\nexport interface AgentEndpointConfig<TCtx = unknown, TBody = unknown> {\n  handler: (\n    args: AgentEndpointHandlerArgs<TCtx, TBody>,\n  ) => AsyncGenerator<AgentEvent, void, unknown>\n}\n\nconst SSE_HEADERS = {\n  'content-type': 'text/event-stream',\n  'cache-control': 'no-cache, no-transform',\n  connection: 'keep-alive',\n} as const\n\nfunction encodeSSE(event: AgentEvent): Uint8Array {\n  return new TextEncoder().encode(`data: ${JSON.stringify(event)}\\n\\n`)\n}\n\n/**\n * Resolve an AbortSignal from either a Web `Request` (`.signal`) or a\n * Node `IncomingMessage` (`.aborted` flag + `'close'`/'aborted' events).\n *\n * The framework's `executeRoute` passes IncomingMessage to route handlers\n * today, but `defineAgentEndpoint` was designed for the Web Standards\n * `Request` shape. This helper bridges both — preventing a runtime crash\n * (`Cannot read properties of undefined (reading 'aborted')`) that would\n * otherwise abort the SSE stream silently before the first yield.\n */\nfunction resolveAbortSignal(request: unknown): AbortSignal {\n  if (typeof request !== 'object' || request === null) {\n    return new AbortController().signal\n  }\n  const r = request as {\n    signal?: unknown\n    aborted?: boolean\n    on?: (event: string, cb: () => void) => void\n  }\n  if (\n    typeof r.signal === 'object' &&\n    r.signal !== null &&\n    'aborted' in r.signal &&\n    typeof (r.signal as AbortSignal).addEventListener === 'function'\n  ) {\n    return r.signal as AbortSignal\n  }\n\n  const controller = new AbortController()\n  if (r.aborted === true) controller.abort()\n  if (typeof r.on === 'function') {\n    r.on('close', () => {\n      if (!controller.signal.aborted) controller.abort()\n    })\n    r.on('aborted', () => {\n      if (!controller.signal.aborted) controller.abort()\n    })\n  }\n  return controller.signal\n}\n\nexport function defineAgentEndpoint<TBody = unknown, TCtx = unknown>(\n  config: AgentEndpointConfig<TCtx, TBody>,\n): RouteConfig<z.ZodUndefined, z.ZodUndefined, z.ZodUndefined, TCtx, Response> {\n  return {\n    handler: async ({ request, ctx, body, query, params }) => {\n      const cookieHeaders = new Headers()\n      const signal = resolveAbortSignal(request)\n      const generator = config.handler({\n        request,\n        ctx: ctx,\n        body: body as TBody,\n        query: query,\n        params: params,\n        cookieHeaders,\n        signal,\n      })\n\n      // Prime the generator to its first yield. This forces the handler's\n      // synchronous + async setup (including `createConversationHistory` if\n      // used) to run BEFORE the Response headers commit, so any Set-Cookie\n      // lines appended to `cookieHeaders` land in the actual response.\n      //\n      // First-byte latency cost: bounded by the work up to the first yield\n      // (typically 100-500ms for an LLM chat with `agent.send`). Acceptable\n      // for the use case; alternative (heuristic detection of cookie writes)\n      // is brittle.\n      let firstResult: IteratorResult<AgentEvent, void>\n      let primeError: unknown\n      try {\n        firstResult = await generator.next()\n      } catch (err) {\n        primeError = err\n        firstResult = { value: undefined, done: true }\n      }\n\n      // Merge any cookies the handler issued into the response headers.\n      const responseHeaders = new Headers(SSE_HEADERS)\n      for (const value of cookieHeaders.getSetCookie()) {\n        responseHeaders.append('set-cookie', value)\n      }\n\n      const stream = new ReadableStream<Uint8Array>({\n        async start(controller) {\n          const onAbort = () => {\n            void generator.return(undefined)\n          }\n\n          if (signal.aborted) {\n            controller.close()\n            return\n          }\n          signal.addEventListener('abort', onAbort, { once: true })\n\n          try {\n            // If priming threw, yield a final error event and close.\n            if (primeError !== undefined) {\n              let message: string\n              if (primeError instanceof Error) {\n                message = primeError.message\n              } else if (typeof primeError === 'string') {\n                message = primeError\n              } else {\n                message = 'agent handler failed during setup'\n              }\n              controller.enqueue(encodeSSE({ type: 'error', message }))\n              return\n            }\n            // Enqueue the primed first value (if any).\n            if (firstResult.done !== true) {\n              controller.enqueue(encodeSSE(firstResult.value))\n            } else {\n              return\n            }\n            // Continue iterating remaining events.\n            for await (const event of generator) {\n              // `signal.aborted` can flip true asynchronously via the\n              // listener registered above. ESLint's narrowing only sees\n              // the false assertion at line 114; the dynamic abort is\n              // legitimate and the guard prevents enqueue-after-close.\n              // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition\n              if (signal.aborted) break\n              controller.enqueue(encodeSSE(event))\n            }\n          } catch (err) {\n            const message = err instanceof Error ? err.message : String(err)\n            controller.enqueue(encodeSSE({ type: 'error', message }))\n          } finally {\n            signal.removeEventListener('abort', onAbort)\n            controller.close()\n          }\n        },\n        cancel() {\n          void generator.return(undefined)\n        },\n      })\n\n      return new Response(stream, { headers: responseHeaders })\n    },\n  }\n}\n","import { z } from 'zod'\n\n/**\n * Item #4 — `defineAgentTool`\n *\n * Sugar over the `@theokit/sdk` `CustomTool` contract. Takes a Zod schema +\n * handler and produces a structurally-compatible `CustomTool` that\n * `Agent.create({ tools: [...] })` accepts.\n *\n * Uses Zod v4's native `z.toJSONSchema()` to convert the input schema to\n * JSON Schema for LLM providers.\n *\n * Handler error propagation:\n *   `defineAgentTool` parses the input via the Zod schema BEFORE calling the\n *   user handler. Invalid input throws a `ZodError`, which the SDK's tool-\n *   dispatcher (or the `streamAgentRun` adapter) sees as a tool failure and\n *   surfaces as an `error` AgentEvent on the SSE wire (ADR D3).\n */\n\n/**\n * Local mirror of the SDK's `CustomTool` interface. We don't `import type`\n * from `@theokit/sdk` because the SDK is an optional peer (consumers who\n * never call `defineAgentTool` shouldn't need it installed). The shape is\n * the wire contract; any structurally-matching object is accepted by\n * `Agent.create({ tools })`.\n *\n * @public\n */\nexport interface CustomTool {\n  name: string\n  description: string\n  inputSchema: Record<string, unknown>\n  handler: (input: Record<string, unknown>) => string | Promise<string>\n}\n\n/**\n * Spec accepted by {@link defineAgentTool}. `inputSchema` is a Zod 3 schema\n * rooted in `z.object(...)`. The `handler` argument type is inferred via\n * `z.infer<T>`.\n *\n * @public\n */\nexport interface DefineAgentToolSpec<T extends z.ZodType> {\n  /** Tool name surfaced to the LLM. Must match `^[a-zA-Z][a-zA-Z0-9_-]{0,63}$`. */\n  name: string\n  /** Description surfaced to the LLM. Required — drives tool-selection accuracy. */\n  description: string\n  /** Zod schema describing the input. Must be `z.object(...)` at the root. */\n  inputSchema: T\n  /** Handler invoked with the parsed input. */\n  handler: (input: z.infer<T>) => string | Promise<string>\n}\n\nconst TOOL_NAME_REGEX = /^[a-zA-Z][a-zA-Z0-9_-]{0,63}$/\n\nfunction isZodObject(schema: z.ZodType): boolean {\n  // Zod 3 stores the typeName at `_def.typeName`. ZodObject has 'ZodObject'.\n  // Refinements (`.refine`), transforms (`.transform`), and defaults wrap the\n  // underlying schema in ZodEffects / ZodDefault / etc. — walk the chain via\n  // `_def.schema` / `_def.innerType` until we hit ZodObject (or give up).\n  // Avoids importing the ZodObject class to keep the runtime import surface\n  // minimal.\n  let current: unknown = schema\n  for (let depth = 0; depth < 10; depth++) {\n    const def = (current as { _def?: { typeName?: string; schema?: unknown; innerType?: unknown } })\n      ._def\n    if (def?.typeName === 'ZodObject') return true\n    if (def?.schema !== undefined) {\n      current = def.schema\n      continue\n    }\n    if (def?.innerType !== undefined) {\n      current = def.innerType\n      continue\n    }\n    return false\n  }\n  return false\n}\n\n/**\n * Build a {@link CustomTool} from a Zod 3 schema + handler.\n *\n * Behavior:\n * - Validates `name` matches the LLM tool-name regex.\n * - Requires `inputSchema` to be a `ZodObject` (Anthropic + SDK contract).\n * - Warns (not throws) if `description` is empty — empty descriptions\n *   degrade LLM tool selection.\n * - Converts the Zod schema to JSON Schema 7 inline (no `$ref`s — LLMs handle\n *   inline schemas more reliably).\n * - Strips the top-level `$schema` field (Anthropic rejects schemas with\n *   `$schema` at root in some provider modes).\n * - Wraps the handler to parse the input via the Zod schema BEFORE invoking\n *   the user code — bad LLM-supplied input throws `ZodError`, which the SDK\n *   converts to `tool_result(isError)`.\n *\n * @public\n */\nexport function defineAgentTool<T extends z.ZodType>(spec: DefineAgentToolSpec<T>): CustomTool {\n  if (!TOOL_NAME_REGEX.test(spec.name)) {\n    throw new Error(\n      `defineAgentTool: name must match ${TOOL_NAME_REGEX.source}. Got: ${JSON.stringify(spec.name)}`,\n    )\n  }\n  if (!isZodObject(spec.inputSchema)) {\n    throw new Error('defineAgentTool: inputSchema must be a ZodObject (z.object({...}))')\n  }\n  if (spec.description.length === 0) {\n    console.warn(\n      `defineAgentTool(${JSON.stringify(spec.name)}): empty description degrades LLM tool selection — provide a one-sentence summary.`,\n    )\n  }\n\n  // Zod v4 native JSON Schema conversion — replaces zod-to-json-schema dep.\n  // Strip $schema (Anthropic + some providers reject it).\n  const { $schema: _$schema, ...inputSchema } = z.toJSONSchema(spec.inputSchema) as Record<string, unknown> & {\n    $schema?: unknown\n  }\n\n  return {\n    name: spec.name,\n    description: spec.description,\n    inputSchema,\n    handler: async (input: Record<string, unknown>): Promise<string> => {\n      const parsed = spec.inputSchema.parse(input) as z.infer<T>\n      return await spec.handler(parsed)\n    },\n  }\n}\n","import type { IncomingMessage } from 'node:http'\n\nexport interface WebSocketLike {\n  send(data: string | Buffer): void\n  close(code?: number, reason?: string): void\n}\n\nexport interface WebSocketHandler {\n  onOpen?: (ws: WebSocketLike, req: IncomingMessage) => void\n  onMessage?: (ws: WebSocketLike, data: string | Buffer) => void\n  onClose?: (ws: WebSocketLike, code: number, reason: Buffer) => void\n  onError?: (ws: WebSocketLike, error: Error) => void\n}\n\n/**\n * Define a WebSocket endpoint handler.\n * Identity function — provides type inference for WebSocket handlers.\n */\nexport function defineWebSocket(handler: WebSocketHandler): WebSocketHandler {\n  return handler\n}\n\n/**\n * T5a.2 Phase F slice 3/3 — Web-Standards WebSocket endpoint handler.\n *\n * Mirror of `WebSocketHandler` for the Web `Request` shape. `onOpen`\n * receives `request: Request` instead of `req: IncomingMessage`. The\n * rest of the lifecycle (onMessage, onClose, onError) is shape-agnostic\n * (`WebSocketLike` is already Web-standards-compatible per the existing\n * design — `send(string | Buffer)` works on both Node `ws` and Web\n * `WebSocket` instances; CF Workers / Bun / Deno coerce as needed at\n * the adapter boundary).\n *\n * Per `docs/plans/t5a2-incoming-message-to-request-shape-refactor-plan.md`\n * v1.0 § Phase F (closes Phase F).\n *\n * **Architectural note — WebSocket upgrade semantics differ across runtimes:**\n *   - Node + `ws`: `WebSocketServer.handleUpgrade(req, socket, head, cb)` —\n *     `req` is `IncomingMessage`. Use `WebSocketHandler`.\n *   - CF Workers: `new WebSocketPair()` + `request.headers` (the upgrade\n *     handshake IS a Web Request). Use `WebSocketHandlerWeb`.\n *   - Bun: `server.upgrade(request, { data })` — same Web Request shape.\n *   - Deno: `Deno.upgradeWebSocket(request)` — same Web Request shape.\n *\n * Cross-runtime WebSocket endpoints ship BOTH `WebSocketHandler` +\n * `WebSocketHandlerWeb` exports; the runtime adapter picks the matching\n * one. This is the canonical Hono / Nitric pattern.\n */\nexport interface WebSocketHandlerWeb {\n  onOpen?: (ws: WebSocketLike, request: Request) => void\n  onMessage?: (ws: WebSocketLike, data: string | Uint8Array) => void\n  onClose?: (ws: WebSocketLike, code: number, reason: string) => void\n  onError?: (ws: WebSocketLike, error: Error) => void\n}\n\n/**\n * Web-Standards `defineWebSocket` sibling. Identity function — provides\n * type inference for Web WebSocket handlers.\n *\n * **Type difference note vs Node path:**\n *   - `onMessage` data is `string | Uint8Array` instead of `string | Buffer`\n *     (Web standards have no `Buffer`; Node's Buffer is a Uint8Array\n *     subclass so the Node path's Buffer values flow through unchanged\n *     when adapters wrap them).\n *   - `onClose` reason is `string` instead of `Buffer` (Web `CloseEvent`\n *     exposes the reason as a UTF-8 string natively).\n */\nexport function defineWebSocketWeb(handler: WebSocketHandlerWeb): WebSocketHandlerWeb {\n  return handler\n}\n","import type { IncomingMessage } from 'node:http'\n\nimport type { WebSocketLike } from './define-websocket.js'\n\nexport interface ChannelHandler<TMessage = unknown> {\n  onSubscribe?: (ws: WebSocketLike, room: string, req: IncomingMessage) => void\n  onMessage?: (ws: WebSocketLike, room: string, data: TMessage) => void\n  onUnsubscribe?: (ws: WebSocketLike, room: string) => void\n}\n\n/**\n * Define a channel handler for WebSocket rooms.\n * Identity function — provides type inference for channel handlers.\n */\nexport function defineChannel<TMessage = unknown>(\n  handler: ChannelHandler<TMessage>,\n): ChannelHandler<TMessage> {\n  return handler\n}\n\n/**\n * T5a.2 Phase F slice 2/3 — Web-Standards channel handler.\n *\n * Mirror of `ChannelHandler<TMessage>` for the Web `Request` shape.\n * `onSubscribe` receives `request: Request` instead of `req: IncomingMessage`\n * — the rest of the surface (onMessage, onUnsubscribe) is shape-agnostic\n * (WebSocketLike is already Web-standards-compatible per `define-websocket.ts`).\n *\n * Per `docs/plans/t5a2-incoming-message-to-request-shape-refactor-plan.md`\n * v1.0 § Phase F.\n *\n * **Architectural note:** WebSocket upgrade semantics differ across\n * runtimes:\n *   - Node: `WebSocketServer.handleUpgrade(req, socket, head, cb)` —\n *     hands you `req: IncomingMessage` at the upgrade handshake.\n *   - CF Workers: `new WebSocketPair()` + `request.headers` (the upgrade\n *     handshake IS a Web Request) — hands you `request: Request`.\n *   - Bun: `server.upgrade(request, { data })` — same Web Request shape.\n *   - Deno: `Deno.upgradeWebSocket(request)` — same Web Request shape.\n *\n * Channel handlers targeting CF/Bun/Deno use `WebChannelHandler`; legacy\n * Node consumers stay on `ChannelHandler`. Cross-runtime channels ship\n * both shapes.\n */\nexport interface WebChannelHandler<TMessage = unknown> {\n  onSubscribe?: (ws: WebSocketLike, room: string, request: Request) => void\n  onMessage?: (ws: WebSocketLike, room: string, data: TMessage) => void\n  onUnsubscribe?: (ws: WebSocketLike, room: string) => void\n}\n\n/**\n * Web-Standards `defineChannel` sibling. Identity function — provides\n * type inference for Web channel handlers.\n */\nexport function defineWebChannel<TMessage = unknown>(\n  handler: WebChannelHandler<TMessage>,\n): WebChannelHandler<TMessage> {\n  return handler\n}\n","import type { TheoPlugin } from '../plugin-types.js'\n\n/**\n * Identity function for defining a Theo plugin.\n *\n * **Note:** Prefer `definePlugin` (shorter, canonical name per ADR-0008 D6).\n * Both functions are identical — `defineTheoPlugin` is kept as an alias for\n * existing in-tree consumers without forcing a migration sweep.\n */\nexport function defineTheoPlugin(plugin: TheoPlugin): TheoPlugin {\n  return plugin\n}\n"],"mappings":";AAaO,SAAS,YAOd,QACsD;AACtD,SAAO;AACT;;;ACiBO,SAAS,aACd,QAC4B;AAC5B,SAAO;AACT;;;ACnCO,SAAS,iBAAiB,SAA+C;AAC9E,SAAO;AACT;;;ACyDA,IAAM,cAAc;AAAA,EAClB,gBAAgB;AAAA,EAChB,iBAAiB;AAAA,EACjB,YAAY;AACd;AAEA,SAAS,UAAU,OAA+B;AAChD,SAAO,IAAI,YAAY,EAAE,OAAO,SAAS,KAAK,UAAU,KAAK,CAAC;AAAA;AAAA,CAAM;AACtE;AAYA,SAAS,mBAAmB,SAA+B;AACzD,MAAI,OAAO,YAAY,YAAY,YAAY,MAAM;AACnD,WAAO,IAAI,gBAAgB,EAAE;AAAA,EAC/B;AACA,QAAM,IAAI;AAKV,MACE,OAAO,EAAE,WAAW,YACpB,EAAE,WAAW,QACb,aAAa,EAAE,UACf,OAAQ,EAAE,OAAuB,qBAAqB,YACtD;AACA,WAAO,EAAE;AAAA,EACX;AAEA,QAAM,aAAa,IAAI,gBAAgB;AACvC,MAAI,EAAE,YAAY,KAAM,YAAW,MAAM;AACzC,MAAI,OAAO,EAAE,OAAO,YAAY;AAC9B,MAAE,GAAG,SAAS,MAAM;AAClB,UAAI,CAAC,WAAW,OAAO,QAAS,YAAW,MAAM;AAAA,IACnD,CAAC;AACD,MAAE,GAAG,WAAW,MAAM;AACpB,UAAI,CAAC,WAAW,OAAO,QAAS,YAAW,MAAM;AAAA,IACnD,CAAC;AAAA,EACH;AACA,SAAO,WAAW;AACpB;AAEO,SAAS,oBACd,QAC6E;AAC7E,SAAO;AAAA,IACL,SAAS,OAAO,EAAE,SAAS,KAAK,MAAM,OAAO,OAAO,MAAM;AACxD,YAAM,gBAAgB,IAAI,QAAQ;AAClC,YAAM,SAAS,mBAAmB,OAAO;AACzC,YAAM,YAAY,OAAO,QAAQ;AAAA,QAC/B;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAWD,UAAI;AACJ,UAAI;AACJ,UAAI;AACF,sBAAc,MAAM,UAAU,KAAK;AAAA,MACrC,SAAS,KAAK;AACZ,qBAAa;AACb,sBAAc,EAAE,OAAO,QAAW,MAAM,KAAK;AAAA,MAC/C;AAGA,YAAM,kBAAkB,IAAI,QAAQ,WAAW;AAC/C,iBAAW,SAAS,cAAc,aAAa,GAAG;AAChD,wBAAgB,OAAO,cAAc,KAAK;AAAA,MAC5C;AAEA,YAAM,SAAS,IAAI,eAA2B;AAAA,QAC5C,MAAM,MAAM,YAAY;AACtB,gBAAM,UAAU,MAAM;AACpB,iBAAK,UAAU,OAAO,MAAS;AAAA,UACjC;AAEA,cAAI,OAAO,SAAS;AAClB,uBAAW,MAAM;AACjB;AAAA,UACF;AACA,iBAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AAExD,cAAI;AAEF,gBAAI,eAAe,QAAW;AAC5B,kBAAI;AACJ,kBAAI,sBAAsB,OAAO;AAC/B,0BAAU,WAAW;AAAA,cACvB,WAAW,OAAO,eAAe,UAAU;AACzC,0BAAU;AAAA,cACZ,OAAO;AACL,0BAAU;AAAA,cACZ;AACA,yBAAW,QAAQ,UAAU,EAAE,MAAM,SAAS,QAAQ,CAAC,CAAC;AACxD;AAAA,YACF;AAEA,gBAAI,YAAY,SAAS,MAAM;AAC7B,yBAAW,QAAQ,UAAU,YAAY,KAAK,CAAC;AAAA,YACjD,OAAO;AACL;AAAA,YACF;AAEA,6BAAiB,SAAS,WAAW;AAMnC,kBAAI,OAAO,QAAS;AACpB,yBAAW,QAAQ,UAAU,KAAK,CAAC;AAAA,YACrC;AAAA,UACF,SAAS,KAAK;AACZ,kBAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,uBAAW,QAAQ,UAAU,EAAE,MAAM,SAAS,QAAQ,CAAC,CAAC;AAAA,UAC1D,UAAE;AACA,mBAAO,oBAAoB,SAAS,OAAO;AAC3C,uBAAW,MAAM;AAAA,UACnB;AAAA,QACF;AAAA,QACA,SAAS;AACP,eAAK,UAAU,OAAO,MAAS;AAAA,QACjC;AAAA,MACF,CAAC;AAED,aAAO,IAAI,SAAS,QAAQ,EAAE,SAAS,gBAAgB,CAAC;AAAA,IAC1D;AAAA,EACF;AACF;;;AC1NA,SAAS,SAAS;AAqDlB,IAAM,kBAAkB;AAExB,SAAS,YAAY,QAA4B;AAO/C,MAAI,UAAmB;AACvB,WAAS,QAAQ,GAAG,QAAQ,IAAI,SAAS;AACvC,UAAM,MAAO,QACV;AACH,QAAI,KAAK,aAAa,YAAa,QAAO;AAC1C,QAAI,KAAK,WAAW,QAAW;AAC7B,gBAAU,IAAI;AACd;AAAA,IACF;AACA,QAAI,KAAK,cAAc,QAAW;AAChC,gBAAU,IAAI;AACd;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAoBO,SAAS,gBAAqC,MAA0C;AAC7F,MAAI,CAAC,gBAAgB,KAAK,KAAK,IAAI,GAAG;AACpC,UAAM,IAAI;AAAA,MACR,oCAAoC,gBAAgB,MAAM,UAAU,KAAK,UAAU,KAAK,IAAI,CAAC;AAAA,IAC/F;AAAA,EACF;AACA,MAAI,CAAC,YAAY,KAAK,WAAW,GAAG;AAClC,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACtF;AACA,MAAI,KAAK,YAAY,WAAW,GAAG;AACjC,YAAQ;AAAA,MACN,mBAAmB,KAAK,UAAU,KAAK,IAAI,CAAC;AAAA,IAC9C;AAAA,EACF;AAIA,QAAM,EAAE,SAAS,UAAU,GAAG,YAAY,IAAI,EAAE,aAAa,KAAK,WAAW;AAI7E,SAAO;AAAA,IACL,MAAM,KAAK;AAAA,IACX,aAAa,KAAK;AAAA,IAClB;AAAA,IACA,SAAS,OAAO,UAAoD;AAClE,YAAM,SAAS,KAAK,YAAY,MAAM,KAAK;AAC3C,aAAO,MAAM,KAAK,QAAQ,MAAM;AAAA,IAClC;AAAA,EACF;AACF;;;AC9GO,SAAS,gBAAgB,SAA6C;AAC3E,SAAO;AACT;AA+CO,SAAS,mBAAmB,SAAmD;AACpF,SAAO;AACT;;;ACvDO,SAAS,cACd,SAC0B;AAC1B,SAAO;AACT;AAoCO,SAAS,iBACd,SAC6B;AAC7B,SAAO;AACT;;;ACjDO,SAAS,iBAAiB,QAAgC;AAC/D,SAAO;AACT;","names":[]}

package/dist/chunk-IAJ2JVEH.js

@@ -0,0 +1,256 @@
+// src/server/plugins/plugin-runner.ts
+var DuplicatePluginError = class extends Error {
+  constructor(name) {
+    super(`Plugin "${name}" is already registered.`);
+    this.name = "DuplicatePluginError";
+  }
+};
+var DuplicateDecorationError = class extends Error {
+  constructor(key, existingPlugin, newPlugin) {
+    super(
+      `Plugin "${newPlugin}" tried to decorate ctx.${key}, but it is already declared by plugin "${existingPlugin}".`
+    );
+    this.name = "DuplicateDecorationError";
+  }
+};
+var PluginRunner = class {
+  plugins = /* @__PURE__ */ new Set();
+  pluginScopes = /* @__PURE__ */ new Map();
+  onRequestHooks = [];
+  preHandlerHooks = [];
+  onResponseHooks = [];
+  onErrorHooks = [];
+  /**
+   * Parent app — proto-chain root for all child scopes. Has its OWN empty
+   * decorations map (parent never receives `decorateRequest` calls under
+   * the T3.1 contract; only child scopes do).
+   */
+  parentDecorations = /* @__PURE__ */ new Map();
+  parentApp = this.buildParentAppFacade();
+  has(name) {
+    return this.plugins.has(name);
+  }
+  /**
+   * Per T3.1 (C1 plugin scope encapsulation):
+   * 1. Reserve the plugin name (still rejects duplicates).
+   * 2. Build a CHILD TheoApp via `Object.create(parentApp)` — Fastify
+   *    `plugin-override.js:38` pattern. The child's own `decorateRequest`
+   *    populates per-scope `decorations`; the child's `addHook` still
+   *    forwards into the shared hook lists (hooks ARE process-global —
+   *    only decorations are scoped, mirroring Fastify's decoration vs
+   *    hook semantics).
+   * 3. Invoke `plugin.register(childApp)`.
+   *
+   * Cross-plugin decoration-key collisions are PERMITTED (per blueprint
+   * D1). The legacy `DuplicateDecorationError` is no longer thrown.
+   */
+  async register(plugin) {
+    if (this.plugins.has(plugin.name)) {
+      throw new DuplicatePluginError(plugin.name);
+    }
+    this.plugins.add(plugin.name);
+    const scope = this.buildPluginScope(plugin.name);
+    this.pluginScopes.set(plugin.name, scope);
+    try {
+      await plugin.register(scope.app);
+    } catch (err) {
+      this.plugins.delete(plugin.name);
+      this.pluginScopes.delete(plugin.name);
+      throw err;
+    }
+  }
+  /**
+   * Build the parent app facade. Hooks forward to shared lists.
+   * `decorateRequest` writes into the parent decorations map — used only
+   * if a future consumer registers a non-plugin "app-level" decoration
+   * directly. T3.1 contract: plugins decorate ONLY through child scopes.
+   */
+  buildParentAppFacade() {
+    const facade = {
+      addHook: (name, fn) => {
+        this.routeHookByName(name, fn);
+      },
+      // eslint-disable-next-line @typescript-eslint/no-unnecessary-type-parameters -- T documents the per-decoration type for consumers
+      decorateRequest: (key, value) => {
+        this.parentDecorations.set(key, value);
+      }
+    };
+    return facade;
+  }
+  /**
+   * Build a child scope via `Object.create(parentApp)` so the child
+   * inherits the parent's facade methods through the prototype chain.
+   * Then override `decorateRequest` on the child instance so writes
+   * land in the per-scope `decorations` map (parent is NOT mutated).
+   */
+  buildPluginScope(_pluginName) {
+    const decorations = /* @__PURE__ */ new Map();
+    const childApp = Object.create(this.parentApp);
+    Object.defineProperty(childApp, "decorateRequest", {
+      // eslint-disable-next-line @typescript-eslint/no-unnecessary-type-parameters -- T documents the per-decoration type for consumers
+      value: (key, value) => {
+        if (typeof key !== "string") {
+          throw new TypeError(
+            `decorateRequest: invalid key (expected string, got ${typeof key}). Plugin authors MUST pass string keys.`
+          );
+        }
+        decorations.set(key, value);
+      },
+      enumerable: false,
+      writable: false,
+      configurable: false
+    });
+    Object.defineProperty(childApp, "decorations", {
+      get: () => Object.fromEntries(decorations),
+      enumerable: false,
+      configurable: false
+    });
+    return { app: childApp, decorations };
+  }
+  routeHookByName(name, fn) {
+    switch (name) {
+      case "onRequest":
+        this.onRequestHooks.push(fn);
+        return;
+      case "preHandler":
+        this.preHandlerHooks.push(fn);
+        return;
+      case "onResponse":
+        this.onResponseHooks.push(fn);
+        return;
+      case "onError":
+        this.onErrorHooks.push(fn);
+        return;
+    }
+  }
+  /**
+   * Apply ALL plugin scopes' decorations into the request ctx. Per T3.1,
+   * sibling plugins MAY decorate the same key — last-writer-wins at apply
+   * time (ordering = registration order). This keeps the legacy
+   * `ctx.<key>` flat surface working for consumers that already aggregate
+   * decorations into a single bag.
+   */
+  applyDecorations(ctx) {
+    for (const scope of this.pluginScopes.values()) {
+      for (const [key, value] of scope.decorations.entries()) {
+        ctx[key] = value;
+      }
+    }
+  }
+  /**
+   * Apply ONLY one plugin's scoped decorations into `target`. Used by
+   * the T1.1 RED-3 test (sibling isolation proof) and by future scope-aware
+   * dispatch paths. Throws if the plugin name isn't registered.
+   */
+  applyScopedDecorations(pluginName, target) {
+    const scope = this.pluginScopes.get(pluginName);
+    if (!scope) throw new Error(`PluginRunner: unknown plugin "${pluginName}"`);
+    for (const [key, value] of scope.decorations.entries()) {
+      target[key] = value;
+    }
+  }
+  /** T1.1 RED-1/RED-4 introspection: returns the child TheoApp built for `pluginName`. */
+  getPluginScope(pluginName) {
+    const scope = this.pluginScopes.get(pluginName);
+    if (!scope) throw new Error(`PluginRunner: unknown plugin "${pluginName}"`);
+    return scope.app;
+  }
+  /** T1.1 RED-4: returns the parent TheoApp (root of every child's proto chain). */
+  getParentApp() {
+    return this.parentApp;
+  }
+  /** T1.1 RED-2: returns the parent's decorations map (NEVER touched by plugin decorate calls under T3.1 contract). */
+  getParentDecorations() {
+    return this.parentDecorations;
+  }
+  async runOnRequest(ctx) {
+    return this.runHookList(this.onRequestHooks, ctx);
+  }
+  async runPreHandler(ctx) {
+    return this.runHookList(this.preHandlerHooks, ctx);
+  }
+  async runOnResponse(ctx, options = {}) {
+    return this.runHookList(this.onResponseHooks, ctx, options);
+  }
+  /**
+   * Run all onError hooks. Swallows errors thrown inside hooks themselves to
+   * prevent recursion (an error in an error handler must not trigger onError
+   * again).
+   */
+  async runOnError(ctx, error) {
+    const errorCtx = { ...ctx, error };
+    for (const hook of this.onErrorHooks) {
+      try {
+        await hook(errorCtx);
+      } catch (innerErr) {
+        console.error(
+          `[plugin-runner] onError hook threw; suppressed to avoid recursion:`,
+          innerErr
+        );
+      }
+    }
+    return { shortCircuited: false };
+  }
+  async runHookList(hooks, ctx, options = {}) {
+    for (const hook of hooks) {
+      try {
+        await hook(ctx);
+      } catch (err) {
+        if (options.inErrorPath) {
+          console.error(`[plugin-runner] hook threw during error path; suppressed (EC-9):`, err);
+          continue;
+        }
+        throw err;
+      }
+      if (ctx.response.writableEnded || ctx.response.headersSent) {
+        return { shortCircuited: true };
+      }
+    }
+    return { shortCircuited: false };
+  }
+};
+
+// src/server/plugins/load-plugins.ts
+var InvalidPluginShapeError = class extends Error {
+  constructor(index, reason) {
+    super(`plugins[${index}] is not a valid TheoPlugin: ${reason}`);
+    this.name = "InvalidPluginShapeError";
+  }
+};
+function isPlugin(value, index) {
+  if (value == null || typeof value !== "object") {
+    throw new InvalidPluginShapeError(index, "expected an object");
+  }
+  const v = value;
+  if (typeof v.name !== "string" || v.name.length === 0) {
+    throw new InvalidPluginShapeError(index, 'missing "name" string');
+  }
+  if (typeof v.register !== "function") {
+    throw new InvalidPluginShapeError(index, 'missing "register" function');
+  }
+  return true;
+}
+async function createPluginRunnerFromConfig(plugins) {
+  if (plugins == null) return void 0;
+  if (!Array.isArray(plugins)) return void 0;
+  if (plugins.length === 0) return void 0;
+  const runner = new PluginRunner();
+  const pluginsArray = plugins;
+  for (let i = 0; i < pluginsArray.length; i++) {
+    const candidate = pluginsArray[i];
+    if (!isPlugin(candidate, i)) {
+      continue;
+    }
+    await runner.register(candidate);
+  }
+  return runner;
+}
+
+export {
+  DuplicatePluginError,
+  DuplicateDecorationError,
+  PluginRunner,
+  InvalidPluginShapeError,
+  createPluginRunnerFromConfig
+};
+//# sourceMappingURL=chunk-IAJ2JVEH.js.map

package/dist/chunk-IAJ2JVEH.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/plugins/plugin-runner.ts","../src/server/plugins/load-plugins.ts"],"sourcesContent":["import type {\n  HookName,\n  HookResult,\n  OnErrorHook,\n  OnRequestHook,\n  OnResponseHook,\n  PluginContext,\n  PluginErrorContext,\n  PreHandlerHook,\n  RunHookOptions,\n  TheoApp,\n  TheoPlugin,\n} from '../plugin-types.js'\n\nexport class DuplicatePluginError extends Error {\n  constructor(name: string) {\n    super(`Plugin \"${name}\" is already registered.`)\n    this.name = 'DuplicatePluginError'\n  }\n}\n\n/**\n * @deprecated Per T3.1 (C1 plugin scope encapsulation) — duplicate decoration\n * keys across sibling plugins are now PERMITTED because each plugin gets its\n * own child scope via `Object.create(parent)` (Fastify pattern, ADR-0028\n * blueprint D1). This class is retained for one minor cycle so consumers who\n * `instanceof DuplicateDecorationError` continue to compile; the constructor\n * is no longer reachable from `PluginRunner.register()`. Removal scheduled\n * for 0.x+2 per CHANGELOG.\n */\nexport class DuplicateDecorationError extends Error {\n  constructor(key: string, existingPlugin: string, newPlugin: string) {\n    super(\n      `Plugin \"${newPlugin}\" tried to decorate ctx.${key}, but it is already declared by plugin \"${existingPlugin}\".`,\n    )\n    this.name = 'DuplicateDecorationError'\n  }\n}\n\n/**\n * Per-plugin scope built by `Object.create(parentApp)` at `register()` time\n * (T3.1 / Fastify `plugin-override.js:38` pattern). Each plugin's\n * `decorateRequest` calls populate THIS scope's `decorations` map only —\n * parent + sibling scopes are isolated through the JavaScript prototype chain.\n */\ninterface PluginScope {\n  /** The child TheoApp instance whose proto chain points at `parentApp`. */\n  app: TheoApp\n  /** Per-plugin decorations map. Cross-plugin key collision is permitted. */\n  decorations: Map<string, unknown>\n}\n\nexport class PluginRunner {\n  private plugins = new Set<string>()\n  private pluginScopes = new Map<string, PluginScope>()\n  private onRequestHooks: OnRequestHook[] = []\n  private preHandlerHooks: PreHandlerHook[] = []\n  private onResponseHooks: OnResponseHook[] = []\n  private onErrorHooks: OnErrorHook[] = []\n\n  /**\n   * Parent app — proto-chain root for all child scopes. Has its OWN empty\n   * decorations map (parent never receives `decorateRequest` calls under\n   * the T3.1 contract; only child scopes do).\n   */\n  private parentDecorations = new Map<string, unknown>()\n  private parentApp: TheoApp = this.buildParentAppFacade()\n\n  has(name: string): boolean {\n    return this.plugins.has(name)\n  }\n\n  /**\n   * Per T3.1 (C1 plugin scope encapsulation):\n   * 1. Reserve the plugin name (still rejects duplicates).\n   * 2. Build a CHILD TheoApp via `Object.create(parentApp)` — Fastify\n   *    `plugin-override.js:38` pattern. The child's own `decorateRequest`\n   *    populates per-scope `decorations`; the child's `addHook` still\n   *    forwards into the shared hook lists (hooks ARE process-global —\n   *    only decorations are scoped, mirroring Fastify's decoration vs\n   *    hook semantics).\n   * 3. Invoke `plugin.register(childApp)`.\n   *\n   * Cross-plugin decoration-key collisions are PERMITTED (per blueprint\n   * D1). The legacy `DuplicateDecorationError` is no longer thrown.\n   */\n  async register(plugin: TheoPlugin): Promise<void> {\n    if (this.plugins.has(plugin.name)) {\n      throw new DuplicatePluginError(plugin.name)\n    }\n    // Add to registry FIRST so duplicate detection works even if register throws.\n    this.plugins.add(plugin.name)\n\n    const scope = this.buildPluginScope(plugin.name)\n    this.pluginScopes.set(plugin.name, scope)\n\n    try {\n      await plugin.register(scope.app)\n    } catch (err) {\n      // Roll back partial registration so a failed plugin does not leave\n      // half-mounted state (T1.1 BDD \"error scenario: plugin throws in\n      // register → parent recovery is clean\").\n      this.plugins.delete(plugin.name)\n      this.pluginScopes.delete(plugin.name)\n      throw err\n    }\n  }\n\n  /**\n   * Build the parent app facade. Hooks forward to shared lists.\n   * `decorateRequest` writes into the parent decorations map — used only\n   * if a future consumer registers a non-plugin \"app-level\" decoration\n   * directly. T3.1 contract: plugins decorate ONLY through child scopes.\n   */\n  private buildParentAppFacade(): TheoApp {\n    const facade: TheoApp = {\n      addHook: (name: HookName, fn: unknown) => {\n        this.routeHookByName(name, fn)\n      },\n      // eslint-disable-next-line @typescript-eslint/no-unnecessary-type-parameters -- T documents the per-decoration type for consumers\n      decorateRequest: <T>(key: string, value: T) => {\n        this.parentDecorations.set(key, value)\n      },\n    }\n    return facade\n  }\n\n  /**\n   * Build a child scope via `Object.create(parentApp)` so the child\n   * inherits the parent's facade methods through the prototype chain.\n   * Then override `decorateRequest` on the child instance so writes\n   * land in the per-scope `decorations` map (parent is NOT mutated).\n   */\n  private buildPluginScope(_pluginName: string): PluginScope {\n    const decorations = new Map<string, unknown>()\n    const childApp: TheoApp = Object.create(this.parentApp) as TheoApp\n    // Override decorateRequest on the child instance — parent's facade\n    // method stays untouched, so `getParentApp().decorateRequest` still\n    // writes to parentDecorations. This is the canonical Fastify pattern.\n    // `_pluginName` reserved for future per-scope diagnostics (underscore\n    // prefix marks intentional unused param per project lint convention).\n    Object.defineProperty(childApp, 'decorateRequest', {\n      // eslint-disable-next-line @typescript-eslint/no-unnecessary-type-parameters -- T documents the per-decoration type for consumers\n      value: <T>(key: string, value: T) => {\n        if (typeof key !== 'string') {\n          throw new TypeError(\n            `decorateRequest: invalid key (expected string, got ${typeof key}). ` +\n              `Plugin authors MUST pass string keys.`,\n          )\n        }\n        decorations.set(key, value)\n      },\n      enumerable: false,\n      writable: false,\n      configurable: false,\n    })\n    // Expose `decorations` on the child instance so `getPluginScope()`\n    // consumers (devtools, tests) can introspect without touching this\n    // private map. Read-only property — the JS prototype chain rule means\n    // child.decorations shadows any parent.decorations the proto exposes.\n    Object.defineProperty(childApp, 'decorations', {\n      get: () => Object.fromEntries(decorations),\n      enumerable: false,\n      configurable: false,\n    })\n    return { app: childApp, decorations }\n  }\n\n  private routeHookByName(name: HookName, fn: unknown): void {\n    switch (name) {\n      case 'onRequest':\n        this.onRequestHooks.push(fn as OnRequestHook)\n        return\n      case 'preHandler':\n        this.preHandlerHooks.push(fn as PreHandlerHook)\n        return\n      case 'onResponse':\n        this.onResponseHooks.push(fn as OnResponseHook)\n        return\n      case 'onError':\n        this.onErrorHooks.push(fn as OnErrorHook)\n        return\n    }\n  }\n\n  /**\n   * Apply ALL plugin scopes' decorations into the request ctx. Per T3.1,\n   * sibling plugins MAY decorate the same key — last-writer-wins at apply\n   * time (ordering = registration order). This keeps the legacy\n   * `ctx.<key>` flat surface working for consumers that already aggregate\n   * decorations into a single bag.\n   */\n  applyDecorations(ctx: Record<string, unknown>): void {\n    for (const scope of this.pluginScopes.values()) {\n      for (const [key, value] of scope.decorations.entries()) {\n        ctx[key] = value\n      }\n    }\n  }\n\n  /**\n   * Apply ONLY one plugin's scoped decorations into `target`. Used by\n   * the T1.1 RED-3 test (sibling isolation proof) and by future scope-aware\n   * dispatch paths. Throws if the plugin name isn't registered.\n   */\n  applyScopedDecorations(pluginName: string, target: Record<string, unknown>): void {\n    const scope = this.pluginScopes.get(pluginName)\n    if (!scope) throw new Error(`PluginRunner: unknown plugin \"${pluginName}\"`)\n    for (const [key, value] of scope.decorations.entries()) {\n      target[key] = value\n    }\n  }\n\n  /** T1.1 RED-1/RED-4 introspection: returns the child TheoApp built for `pluginName`. */\n  getPluginScope(pluginName: string): TheoApp {\n    const scope = this.pluginScopes.get(pluginName)\n    if (!scope) throw new Error(`PluginRunner: unknown plugin \"${pluginName}\"`)\n    return scope.app\n  }\n\n  /** T1.1 RED-4: returns the parent TheoApp (root of every child's proto chain). */\n  getParentApp(): TheoApp {\n    return this.parentApp\n  }\n\n  /** T1.1 RED-2: returns the parent's decorations map (NEVER touched by plugin decorate calls under T3.1 contract). */\n  getParentDecorations(): Map<string, unknown> {\n    return this.parentDecorations\n  }\n\n  async runOnRequest(ctx: PluginContext): Promise<HookResult> {\n    return this.runHookList(this.onRequestHooks, ctx)\n  }\n\n  async runPreHandler(ctx: PluginContext): Promise<HookResult> {\n    return this.runHookList(this.preHandlerHooks, ctx)\n  }\n\n  async runOnResponse(ctx: PluginContext, options: RunHookOptions = {}): Promise<HookResult> {\n    return this.runHookList(this.onResponseHooks, ctx, options)\n  }\n\n  /**\n   * Run all onError hooks. Swallows errors thrown inside hooks themselves to\n   * prevent recursion (an error in an error handler must not trigger onError\n   * again).\n   */\n  async runOnError(ctx: PluginContext, error: unknown): Promise<HookResult> {\n    const errorCtx: PluginErrorContext = { ...ctx, error }\n    for (const hook of this.onErrorHooks) {\n      try {\n        await hook(errorCtx)\n      } catch (innerErr) {\n        // EC-9 + onError-safety: swallow to avoid recursion. Diagnostic\n        // surface only — error context is preserved via innerErr arg.\n        console.error(\n          `[plugin-runner] onError hook threw; suppressed to avoid recursion:`,\n          innerErr,\n        )\n      }\n    }\n    return { shortCircuited: false }\n  }\n\n  private async runHookList(\n    hooks: readonly ((ctx: PluginContext) => void | Promise<void>)[],\n    ctx: PluginContext,\n    options: RunHookOptions = {},\n  ): Promise<HookResult> {\n    for (const hook of hooks) {\n      try {\n        await hook(ctx)\n      } catch (err) {\n        if (options.inErrorPath) {\n          // EC-9: we're already handling an error; do NOT trigger onError again.\n          // Diagnostic surface only — original error preserved via err arg.\n          console.error(`[plugin-runner] hook threw during error path; suppressed (EC-9):`, err)\n          continue\n        }\n        throw err\n      }\n      if (ctx.response.writableEnded || ctx.response.headersSent) {\n        return { shortCircuited: true }\n      }\n    }\n    return { shortCircuited: false }\n  }\n}\n","import type { TheoPlugin } from '../plugin-types.js'\n\nimport { PluginRunner } from './plugin-runner.js'\n\nexport class InvalidPluginShapeError extends Error {\n  constructor(index: number, reason: string) {\n    super(`plugins[${index}] is not a valid TheoPlugin: ${reason}`)\n    this.name = 'InvalidPluginShapeError'\n  }\n}\n\nfunction isPlugin(value: unknown, index: number): value is TheoPlugin {\n  if (value == null || typeof value !== 'object') {\n    throw new InvalidPluginShapeError(index, 'expected an object')\n  }\n  const v = value as Record<string, unknown>\n  if (typeof v.name !== 'string' || v.name.length === 0) {\n    throw new InvalidPluginShapeError(index, 'missing \"name\" string')\n  }\n  if (typeof v.register !== 'function') {\n    throw new InvalidPluginShapeError(index, 'missing \"register\" function')\n  }\n  return true\n}\n\n/**\n * Build a PluginRunner from a list of plugins typically declared in\n * `theo.config.ts` under the `plugins` field. Returns `undefined` when no\n * plugins are configured so callers can pass `undefined` to `executeRoute`\n * and preserve the zero-overhead path.\n */\nexport async function createPluginRunnerFromConfig(\n  plugins: unknown,\n): Promise<PluginRunner | undefined> {\n  if (plugins == null) return undefined\n  if (!Array.isArray(plugins)) return undefined\n  if (plugins.length === 0) return undefined\n\n  const runner = new PluginRunner()\n  const pluginsArray: unknown[] = plugins\n  for (let i = 0; i < pluginsArray.length; i++) {\n    const candidate: unknown = pluginsArray[i]\n    if (!isPlugin(candidate, i)) {\n      // Unreachable in practice — `isPlugin` throws on invalid input.\n      // The branch exists to narrow `candidate` to TheoPlugin below.\n      continue\n    }\n    await runner.register(candidate)\n  }\n  return runner\n}\n"],"mappings":";AAcO,IAAM,uBAAN,cAAmC,MAAM;AAAA,EAC9C,YAAY,MAAc;AACxB,UAAM,WAAW,IAAI,0BAA0B;AAC/C,SAAK,OAAO;AAAA,EACd;AACF;AAWO,IAAM,2BAAN,cAAuC,MAAM;AAAA,EAClD,YAAY,KAAa,gBAAwB,WAAmB;AAClE;AAAA,MACE,WAAW,SAAS,2BAA2B,GAAG,2CAA2C,cAAc;AAAA,IAC7G;AACA,SAAK,OAAO;AAAA,EACd;AACF;AAeO,IAAM,eAAN,MAAmB;AAAA,EAChB,UAAU,oBAAI,IAAY;AAAA,EAC1B,eAAe,oBAAI,IAAyB;AAAA,EAC5C,iBAAkC,CAAC;AAAA,EACnC,kBAAoC,CAAC;AAAA,EACrC,kBAAoC,CAAC;AAAA,EACrC,eAA8B,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO/B,oBAAoB,oBAAI,IAAqB;AAAA,EAC7C,YAAqB,KAAK,qBAAqB;AAAA,EAEvD,IAAI,MAAuB;AACzB,WAAO,KAAK,QAAQ,IAAI,IAAI;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,MAAM,SAAS,QAAmC;AAChD,QAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,GAAG;AACjC,YAAM,IAAI,qBAAqB,OAAO,IAAI;AAAA,IAC5C;AAEA,SAAK,QAAQ,IAAI,OAAO,IAAI;AAE5B,UAAM,QAAQ,KAAK,iBAAiB,OAAO,IAAI;AAC/C,SAAK,aAAa,IAAI,OAAO,MAAM,KAAK;AAExC,QAAI;AACF,YAAM,OAAO,SAAS,MAAM,GAAG;AAAA,IACjC,SAAS,KAAK;AAIZ,WAAK,QAAQ,OAAO,OAAO,IAAI;AAC/B,WAAK,aAAa,OAAO,OAAO,IAAI;AACpC,YAAM;AAAA,IACR;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,uBAAgC;AACtC,UAAM,SAAkB;AAAA,MACtB,SAAS,CAAC,MAAgB,OAAgB;AACxC,aAAK,gBAAgB,MAAM,EAAE;AAAA,MAC/B;AAAA;AAAA,MAEA,iBAAiB,CAAI,KAAa,UAAa;AAC7C,aAAK,kBAAkB,IAAI,KAAK,KAAK;AAAA,MACvC;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,iBAAiB,aAAkC;AACzD,UAAM,cAAc,oBAAI,IAAqB;AAC7C,UAAM,WAAoB,OAAO,OAAO,KAAK,SAAS;AAMtD,WAAO,eAAe,UAAU,mBAAmB;AAAA;AAAA,MAEjD,OAAO,CAAI,KAAa,UAAa;AACnC,YAAI,OAAO,QAAQ,UAAU;AAC3B,gBAAM,IAAI;AAAA,YACR,sDAAsD,OAAO,GAAG;AAAA,UAElE;AAAA,QACF;AACA,oBAAY,IAAI,KAAK,KAAK;AAAA,MAC5B;AAAA,MACA,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,cAAc;AAAA,IAChB,CAAC;AAKD,WAAO,eAAe,UAAU,eAAe;AAAA,MAC7C,KAAK,MAAM,OAAO,YAAY,WAAW;AAAA,MACzC,YAAY;AAAA,MACZ,cAAc;AAAA,IAChB,CAAC;AACD,WAAO,EAAE,KAAK,UAAU,YAAY;AAAA,EACtC;AAAA,EAEQ,gBAAgB,MAAgB,IAAmB;AACzD,YAAQ,MAAM;AAAA,MACZ,KAAK;AACH,aAAK,eAAe,KAAK,EAAmB;AAC5C;AAAA,MACF,KAAK;AACH,aAAK,gBAAgB,KAAK,EAAoB;AAC9C;AAAA,MACF,KAAK;AACH,aAAK,gBAAgB,KAAK,EAAoB;AAC9C;AAAA,MACF,KAAK;AACH,aAAK,aAAa,KAAK,EAAiB;AACxC;AAAA,IACJ;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,iBAAiB,KAAoC;AACnD,eAAW,SAAS,KAAK,aAAa,OAAO,GAAG;AAC9C,iBAAW,CAAC,KAAK,KAAK,KAAK,MAAM,YAAY,QAAQ,GAAG;AACtD,YAAI,GAAG,IAAI;AAAA,MACb;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,uBAAuB,YAAoB,QAAuC;AAChF,UAAM,QAAQ,KAAK,aAAa,IAAI,UAAU;AAC9C,QAAI,CAAC,MAAO,OAAM,IAAI,MAAM,iCAAiC,UAAU,GAAG;AAC1E,eAAW,CAAC,KAAK,KAAK,KAAK,MAAM,YAAY,QAAQ,GAAG;AACtD,aAAO,GAAG,IAAI;AAAA,IAChB;AAAA,EACF;AAAA;AAAA,EAGA,eAAe,YAA6B;AAC1C,UAAM,QAAQ,KAAK,aAAa,IAAI,UAAU;AAC9C,QAAI,CAAC,MAAO,OAAM,IAAI,MAAM,iCAAiC,UAAU,GAAG;AAC1E,WAAO,MAAM;AAAA,EACf;AAAA;AAAA,EAGA,eAAwB;AACtB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,uBAA6C;AAC3C,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,aAAa,KAAyC;AAC1D,WAAO,KAAK,YAAY,KAAK,gBAAgB,GAAG;AAAA,EAClD;AAAA,EAEA,MAAM,cAAc,KAAyC;AAC3D,WAAO,KAAK,YAAY,KAAK,iBAAiB,GAAG;AAAA,EACnD;AAAA,EAEA,MAAM,cAAc,KAAoB,UAA0B,CAAC,GAAwB;AACzF,WAAO,KAAK,YAAY,KAAK,iBAAiB,KAAK,OAAO;AAAA,EAC5D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,WAAW,KAAoB,OAAqC;AACxE,UAAM,WAA+B,EAAE,GAAG,KAAK,MAAM;AACrD,eAAW,QAAQ,KAAK,cAAc;AACpC,UAAI;AACF,cAAM,KAAK,QAAQ;AAAA,MACrB,SAAS,UAAU;AAGjB,gBAAQ;AAAA,UACN;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,WAAO,EAAE,gBAAgB,MAAM;AAAA,EACjC;AAAA,EAEA,MAAc,YACZ,OACA,KACA,UAA0B,CAAC,GACN;AACrB,eAAW,QAAQ,OAAO;AACxB,UAAI;AACF,cAAM,KAAK,GAAG;AAAA,MAChB,SAAS,KAAK;AACZ,YAAI,QAAQ,aAAa;AAGvB,kBAAQ,MAAM,oEAAoE,GAAG;AACrF;AAAA,QACF;AACA,cAAM;AAAA,MACR;AACA,UAAI,IAAI,SAAS,iBAAiB,IAAI,SAAS,aAAa;AAC1D,eAAO,EAAE,gBAAgB,KAAK;AAAA,MAChC;AAAA,IACF;AACA,WAAO,EAAE,gBAAgB,MAAM;AAAA,EACjC;AACF;;;AC3RO,IAAM,0BAAN,cAAsC,MAAM;AAAA,EACjD,YAAY,OAAe,QAAgB;AACzC,UAAM,WAAW,KAAK,gCAAgC,MAAM,EAAE;AAC9D,SAAK,OAAO;AAAA,EACd;AACF;AAEA,SAAS,SAAS,OAAgB,OAAoC;AACpE,MAAI,SAAS,QAAQ,OAAO,UAAU,UAAU;AAC9C,UAAM,IAAI,wBAAwB,OAAO,oBAAoB;AAAA,EAC/D;AACA,QAAM,IAAI;AACV,MAAI,OAAO,EAAE,SAAS,YAAY,EAAE,KAAK,WAAW,GAAG;AACrD,UAAM,IAAI,wBAAwB,OAAO,uBAAuB;AAAA,EAClE;AACA,MAAI,OAAO,EAAE,aAAa,YAAY;AACpC,UAAM,IAAI,wBAAwB,OAAO,6BAA6B;AAAA,EACxE;AACA,SAAO;AACT;AAQA,eAAsB,6BACpB,SACmC;AACnC,MAAI,WAAW,KAAM,QAAO;AAC5B,MAAI,CAAC,MAAM,QAAQ,OAAO,EAAG,QAAO;AACpC,MAAI,QAAQ,WAAW,EAAG,QAAO;AAEjC,QAAM,SAAS,IAAI,aAAa;AAChC,QAAM,eAA0B;AAChC,WAAS,IAAI,GAAG,IAAI,aAAa,QAAQ,KAAK;AAC5C,UAAM,YAAqB,aAAa,CAAC;AACzC,QAAI,CAAC,SAAS,WAAW,CAAC,GAAG;AAG3B;AAAA,IACF;AACA,UAAM,OAAO,SAAS,SAAS;AAAA,EACjC;AACA,SAAO;AACT;","names":[]}