theokit 0.2.4 → 0.4.0

package/dist/registry-QHEZ3BWB.js

@@ -0,0 +1,25 @@
+#!/usr/bin/env node
+import "tsx/esm";
+import "./chunk-KT3MWNZG.js";
+
+// src/adapters/registry.ts
+var adapterRegistry = {
+  node: async () => (await import("./node-6I5B6RL3.js")).nodeAdapter,
+  vercel: async () => (await import("./vercel-TKPZK62A.js")).vercelAdapter,
+  cloudflare: async () => (await import("./cloudflare-OJGJ7R2D.js")).cloudflareAdapter,
+  static: async () => (await import("./static-QI5NQT2X.js")).staticAdapter,
+  bun: async () => (await import("./bun-ISHSNFIO.js")).bunAdapter,
+  "deno-deploy": async () => (await import("./deno-deploy-BHWKFTOW.js")).denoDeployAdapter,
+  netlify: async () => (await import("./netlify-GSNSJGMN.js")).netlifyAdapter,
+  "aws-lambda": async () => (await import("./aws-lambda-GKSTX6HD.js")).awsLambdaAdapter,
+  "theo-cloud": async () => (await import("./theo-cloud-RSQCBNXL.js")).theoCloudAdapter
+};
+async function resolveAdapter(target) {
+  const factory = adapterRegistry[target];
+  return factory();
+}
+export {
+  adapterRegistry,
+  resolveAdapter
+};
+//# sourceMappingURL=registry-QHEZ3BWB.js.map

package/dist/router-RGZFX75G.js

@@ -0,0 +1,274 @@
+#!/usr/bin/env node
+import "tsx/esm";
+import "./chunk-KT3MWNZG.js";
+
+// src/cli/commands/migrate/router.ts
+import { execFileSync } from "child_process";
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "fs";
+import { createServer } from "net";
+import { dirname, resolve } from "path";
+
+// src/cli/commands/migrate/router-codemod.ts
+import { readdirSync, statSync } from "fs";
+import { extname, join, relative, sep } from "path";
+var ROUTE_EXTENSIONS = /* @__PURE__ */ new Set([".ts", ".tsx", ".js", ".jsx"]);
+var TEST_OR_SPEC_RE = /\.(test|spec)\.[jt]sx?$/;
+var RouterMigrationCollisionError = class extends Error {
+  name = "RouterMigrationCollisionError";
+  from;
+  to;
+  constructor(from, to) {
+    super(
+      `Router migration collision: ${from} would rename to ${to}, but that file already exists (case-insensitive match). Resolve manually.`
+    );
+    this.from = from;
+    this.to = to;
+  }
+};
+function computeDepthDelta(from, to, routesDir) {
+  const depthOf = (p) => {
+    const rel = relative(routesDir, p).replace(/\\/g, "/");
+    return rel.split("/").length - 1;
+  };
+  return depthOf(to) - depthOf(from);
+}
+function rewriteRelativeImports(source, delta) {
+  if (delta <= 0) return source;
+  const prefix = "../".repeat(delta);
+  const transformSpecifier = (specifier) => {
+    if (specifier.startsWith("./")) return `${prefix}${specifier.slice(2)}`;
+    return `${prefix}${specifier}`;
+  };
+  const fromRe = /\bfrom\s+(['"])(\.{1,2}\/[^'"]+)\1/g;
+  const dynRe = /\bimport\s*\(\s*(['"])(\.{1,2}\/[^'"]+)\1\s*\)/g;
+  const sideRe = /\bimport\s+(['"])(\.{1,2}\/[^'"]+)\1/g;
+  const fromSub = (_m, q, spec) => `from ${q}${transformSpecifier(spec)}${q}`;
+  const dynSub = (_m, q, spec) => `import(${q}${transformSpecifier(spec)}${q})`;
+  const sideSub = (_m, q, spec) => `import ${q}${transformSpecifier(spec)}${q}`;
+  return source.replace(fromRe, fromSub).replace(dynRe, dynSub).replace(sideRe, sideSub);
+}
+function isTestOrSpecFile(filePath) {
+  return TEST_OR_SPEC_RE.test(filePath);
+}
+function hasDotOutsideBrackets(segment) {
+  let depth = 0;
+  for (const ch of segment) {
+    if (ch === "[") depth++;
+    else if (ch === "]") depth--;
+    else if (ch === "." && depth === 0) return true;
+  }
+  return false;
+}
+function splitDottedSegmentOutsideBrackets(segment) {
+  const parts = [];
+  let current = "";
+  let depth = 0;
+  for (const ch of segment) {
+    if (ch === "[") {
+      depth++;
+      current += ch;
+    } else if (ch === "]") {
+      depth--;
+      current += ch;
+    } else if (ch === "." && depth === 0) {
+      if (current) parts.push(current);
+      current = "";
+    } else {
+      current += ch;
+    }
+  }
+  if (current) parts.push(current);
+  return parts;
+}
+function toDirectoryNestedPath(filePath, routesDir) {
+  const rel = relative(routesDir, filePath).replace(/\\/g, "/");
+  const ext = extname(rel);
+  const withoutExt = rel.slice(0, -ext.length);
+  const flattened = withoutExt.split("/").flatMap(splitDottedSegmentOutsideBrackets);
+  return join(routesDir, `${flattened.join(sep)}${ext}`);
+}
+function walkRoutes(root, onFile) {
+  let entries;
+  try {
+    entries = readdirSync(root, { withFileTypes: true });
+  } catch {
+    return;
+  }
+  for (const entry of entries) {
+    if (entry.name.startsWith("_") || entry.name.startsWith(".")) continue;
+    const full = join(root, entry.name);
+    if (entry.isDirectory()) {
+      walkRoutes(full, onFile);
+    } else if (entry.isFile() && ROUTE_EXTENSIONS.has(extname(entry.name))) {
+      onFile(full);
+    }
+  }
+}
+function isDottedRouteFile(filePath, routesDir) {
+  const rel = relative(routesDir, filePath).replace(/\\/g, "/");
+  const ext = extname(rel);
+  const withoutExt = rel.slice(0, -ext.length);
+  return withoutExt.split("/").some(hasDotOutsideBrackets);
+}
+function planRouterMigration(routesDir) {
+  const plan = [];
+  const existingPathsLowercase = /* @__PURE__ */ new Set();
+  walkRoutes(routesDir, (absPath) => {
+    existingPathsLowercase.add(absPath.toLowerCase());
+  });
+  walkRoutes(routesDir, (absPath) => {
+    if (isTestOrSpecFile(absPath)) return;
+    if (!isDottedRouteFile(absPath, routesDir)) return;
+    const to = toDirectoryNestedPath(absPath, routesDir);
+    const targetLower = to.toLowerCase();
+    if (existingPathsLowercase.has(targetLower) && targetLower !== absPath.toLowerCase()) {
+      throw new RouterMigrationCollisionError(absPath, to);
+    }
+    try {
+      if (statSync(to).isFile()) {
+        throw new RouterMigrationCollisionError(absPath, to);
+      }
+    } catch (err) {
+      if (err instanceof RouterMigrationCollisionError) throw err;
+    }
+    plan.push({ from: absPath, to });
+  });
+  return plan;
+}
+
+// src/cli/commands/migrate/router.ts
+var RouterMigrationPartialFailure = class extends Error {
+  name = "RouterMigrationPartialFailure";
+  filesAlreadyMigrated;
+  failedFile;
+  causeMessage;
+  constructor(filesAlreadyMigrated, failedFile, causeMessage) {
+    super(
+      `Router migration partial failure: ${filesAlreadyMigrated.length} files migrated successfully, then failed on ${failedFile}: ${causeMessage}. Re-run \`theokit migrate router\` to retry \u2014 already-migrated files will be skipped.`
+    );
+    this.filesAlreadyMigrated = filesAlreadyMigrated;
+    this.failedFile = failedFile;
+    this.causeMessage = causeMessage;
+  }
+};
+async function isPortInUse(port) {
+  return await new Promise((resolve2) => {
+    const probe = createServer();
+    probe.once("error", (err) => {
+      probe.close(() => {
+        resolve2(err.code === "EADDRINUSE");
+      });
+    });
+    probe.once("listening", () => {
+      probe.close(() => {
+        resolve2(false);
+      });
+    });
+    probe.listen(port, "127.0.0.1");
+  });
+}
+async function findRunningDevServerPort() {
+  for (const port of [3e3, 3100]) {
+    if (await isPortInUse(port)) return port;
+  }
+  return null;
+}
+function tryGitMv(from, to) {
+  try {
+    mkdirSync(dirname(to), { recursive: true });
+    execFileSync("git", ["mv", from, to], { stdio: "pipe" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function fallbackRename(from, to) {
+  mkdirSync(dirname(to), { recursive: true });
+  renameSync(from, to);
+}
+function applyRename(item) {
+  if (!existsSync(item.from)) {
+    return;
+  }
+  if (existsSync(item.to)) {
+    throw new Error(
+      `Refusing to overwrite existing file at ${item.to} during migration of ${item.from}`
+    );
+  }
+  if (!tryGitMv(item.from, item.to)) {
+    fallbackRename(item.from, item.to);
+  }
+}
+function applyImportRewrite(item, routesDir) {
+  const delta = computeDepthDelta(item.from, item.to, routesDir);
+  if (delta <= 0) return;
+  const source = readFileSync(item.to, "utf8");
+  const rewritten = rewriteRelativeImports(source, delta);
+  if (rewritten !== source) {
+    writeFileSync(item.to, rewritten, "utf8");
+  }
+}
+function makeLog(silent) {
+  if (silent) {
+    return (_msg) => {
+    };
+  }
+  return (msg) => {
+    console.log(msg);
+  };
+}
+async function assertNoRunningDevServer(opts) {
+  if (opts.force) return;
+  const runningPort = await findRunningDevServerPort();
+  if (runningPort !== null) {
+    throw new Error(
+      `Detected theokit dev server running on port ${runningPort}. STOP it before running migration to avoid HMR cascade (see EC-2). Re-run with --force to override.`
+    );
+  }
+}
+function executeRenames(plan, routesDir, log) {
+  const migrated = [];
+  for (const item of plan) {
+    try {
+      applyRename(item);
+      applyImportRewrite(item, routesDir);
+      migrated.push(item);
+      log(`     \u2713 ${item.from} \u2192 ${item.to}`);
+    } catch (err) {
+      const causeMessage = err instanceof Error ? err.message : String(err);
+      throw new RouterMigrationPartialFailure(
+        migrated.map((m) => m.from),
+        item.from,
+        causeMessage
+      );
+    }
+  }
+  return migrated;
+}
+async function routerMigrateCommand(opts = {}) {
+  const routesDir = opts.routesDir ?? resolve(process.cwd(), "server", "routes");
+  const log = makeLog(opts.silent);
+  await assertNoRunningDevServer(opts);
+  const plan = planRouterMigration(routesDir);
+  if (plan.length === 0) {
+    log("  \u2713 Router already uses directory-nested convention. Nothing to do.");
+    return { migrated: [], alreadyClean: true };
+  }
+  log(`  \u2192 Migrating ${plan.length} dotted route(s) to directory-nested form...`);
+  if (opts.dryRun) {
+    for (const item of plan) {
+      log(`     [dry-run] ${item.from} \u2192 ${item.to}`);
+    }
+    return { migrated: [], alreadyClean: false };
+  }
+  const migrated = executeRenames(plan, routesDir, log);
+  log(`  \u2713 Migrated ${migrated.length} route(s).`);
+  return { migrated, alreadyClean: false };
+}
+export {
+  RouterMigrationPartialFailure,
+  findRunningDevServerPort,
+  isPortInUse,
+  routerMigrateCommand
+};
+//# sourceMappingURL=router-RGZFX75G.js.map

package/dist/router-RGZFX75G.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/commands/migrate/router.ts","../src/cli/commands/migrate/router-codemod.ts"],"sourcesContent":["/* eslint-disable security/detect-non-literal-fs-filename --\n * Build-time codemod: derives all FS paths from the user's `<routesDir>`\n * argument (defaults to `<cwd>/server/routes`). No HTTP input reaches\n * these fs calls. Operator runs this manually via `theokit migrate router`.\n */\n/**\n * G6 T2.1 — `theokit migrate router` CLI subcommand.\n *\n * Plan: .claude/knowledge-base/plans/g6-router-convention-plan.md v1.1\n *\n * Wraps the pure `planRouterMigration` with side effects:\n *   - EC-2: pre-flight `isPortInUse(3000|3100)` warning to prevent the\n *     dev-server HMR cascade described in the edge-case review.\n *   - EC-7: partial failure produces a typed `RouterMigrationPartialFailure`\n *     with `filesAlreadyMigrated` so a re-run can continue from where it\n *     stopped (idempotent by virtue of `planRouterMigration`).\n *   - Prefers `git mv $from $to` so the rename appears as a single\n *     history entry; falls back to `mkdir -p $(dirname $to) && fs.rename`\n *     when not in a git repo or git mv fails.\n */\nimport { execFileSync } from 'node:child_process'\nimport { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs'\nimport { createServer } from 'node:net'\nimport { dirname, resolve } from 'node:path'\n\nimport {\n  computeDepthDelta,\n  planRouterMigration,\n  rewriteRelativeImports,\n  type RouterMigrationPlanItem,\n} from './router-codemod.js'\n\nexport interface RouterMigrateOptions {\n  /** Absolute path to `<project>/server/routes`. Defaults to `<cwd>/server/routes`. */\n  routesDir?: string\n  /**\n   * Skip the EC-2 dev-server port pre-flight check (CI / non-TTY).\n   * Default: false.\n   */\n  force?: boolean\n  /** When true, prints the plan but performs no renames (dry-run). */\n  dryRun?: boolean\n  /** When true, suppresses stdout (used in tests). */\n  silent?: boolean\n}\n\n/**\n * Thrown when the codemod completes with at least one successful rename\n * AND at least one failure — caller can re-run safely (idempotent) and\n * the second pass will skip already-migrated files.\n */\nexport class RouterMigrationPartialFailure extends Error {\n  override readonly name = 'RouterMigrationPartialFailure'\n  readonly filesAlreadyMigrated: string[]\n  readonly failedFile: string\n  readonly causeMessage: string\n  constructor(filesAlreadyMigrated: string[], failedFile: string, causeMessage: string) {\n    super(\n      `Router migration partial failure: ${filesAlreadyMigrated.length} files migrated successfully, then failed on ${failedFile}: ${causeMessage}. Re-run \\`theokit migrate router\\` to retry — already-migrated files will be skipped.`,\n    )\n    this.filesAlreadyMigrated = filesAlreadyMigrated\n    this.failedFile = failedFile\n    this.causeMessage = causeMessage\n  }\n}\n\n/**\n * EC-2: dev-server detection. Returns true if the port is in use (someone\n * is already listening on localhost:<port>). Uses Node's `node:net` —\n * zero new deps.\n */\nexport async function isPortInUse(port: number): Promise<boolean> {\n  return await new Promise<boolean>((resolve) => {\n    const probe = createServer()\n    probe.once('error', (err: NodeJS.ErrnoException) => {\n      probe.close(() => {\n        resolve(err.code === 'EADDRINUSE')\n      })\n    })\n    probe.once('listening', () => {\n      probe.close(() => {\n        resolve(false)\n      })\n    })\n    probe.listen(port, '127.0.0.1')\n  })\n}\n\n/**\n * EC-2 pre-flight: returns the first port in use among the typical\n * theokit dev ports (3000 + 3100) so the caller can warn the user.\n */\nexport async function findRunningDevServerPort(): Promise<number | null> {\n  for (const port of [3000, 3100]) {\n    if (await isPortInUse(port)) return port\n  }\n  return null\n}\n\nfunction tryGitMv(from: string, to: string): boolean {\n  try {\n    mkdirSync(dirname(to), { recursive: true })\n    // Arguments are absolute paths from a recursive walk of <routesDir>.\n    // Pass as argv to avoid shell parsing entirely (no `shell: true`).\n    // `git` is resolved via the operator's PATH (same security model as\n    // every other CLI tool — `theokit dev`, `pnpm install`, etc.).\n    // eslint-disable-next-line sonarjs/no-os-command-from-path\n    execFileSync('git', ['mv', from, to], { stdio: 'pipe' })\n    return true\n  } catch {\n    return false\n  }\n}\n\nfunction fallbackRename(from: string, to: string): void {\n  mkdirSync(dirname(to), { recursive: true })\n  renameSync(from, to)\n}\n\nfunction applyRename(item: RouterMigrationPlanItem): void {\n  if (!existsSync(item.from)) {\n    // Idempotency: already migrated — skip silently\n    return\n  }\n  if (existsSync(item.to)) {\n    // The plan() phase would have thrown CollisionError if we knew about\n    // it at plan time. This branch covers a race condition where the\n    // target was created between plan and apply.\n    throw new Error(\n      `Refusing to overwrite existing file at ${item.to} during migration of ${item.from}`,\n    )\n  }\n  if (!tryGitMv(item.from, item.to)) {\n    fallbackRename(item.from, item.to)\n  }\n}\n\n/**\n * Adjust relative imports inside the renamed file to compensate for the\n * extra nesting depth. Without this, `import { foo } from './chat'` inside\n * a file moved from `routes/admin.sdk-config.ts` → `routes/admin/sdk-config.ts`\n * would fail to resolve at typecheck/runtime — the import needs `../chat`\n * now that the file lives one level deeper.\n */\nfunction applyImportRewrite(item: RouterMigrationPlanItem, routesDir: string): void {\n  const delta = computeDepthDelta(item.from, item.to, routesDir)\n  if (delta <= 0) return\n  const source = readFileSync(item.to, 'utf8')\n  const rewritten = rewriteRelativeImports(source, delta)\n  if (rewritten !== source) {\n    writeFileSync(item.to, rewritten, 'utf8')\n  }\n}\n\nexport interface RouterMigrateResult {\n  /** Successfully renamed (from, to) pairs. */\n  migrated: RouterMigrationPlanItem[]\n  /** Plan was empty — nothing to do (already-nested). */\n  alreadyClean: boolean\n}\n\ntype LogFn = (msg: string) => void\n\nfunction makeLog(silent: boolean | undefined): LogFn {\n  if (silent) {\n    return (_msg: string) => {\n      // intentionally silent\n    }\n  }\n  return (msg: string) => {\n    console.log(msg)\n  }\n}\n\nasync function assertNoRunningDevServer(opts: RouterMigrateOptions): Promise<void> {\n  if (opts.force) return\n  const runningPort = await findRunningDevServerPort()\n  if (runningPort !== null) {\n    throw new Error(\n      `Detected theokit dev server running on port ${runningPort}. STOP it before running migration to avoid HMR cascade (see EC-2). Re-run with --force to override.`,\n    )\n  }\n}\n\nfunction executeRenames(\n  plan: readonly RouterMigrationPlanItem[],\n  routesDir: string,\n  log: LogFn,\n): RouterMigrationPlanItem[] {\n  const migrated: RouterMigrationPlanItem[] = []\n  for (const item of plan) {\n    try {\n      applyRename(item)\n      applyImportRewrite(item, routesDir)\n      migrated.push(item)\n      log(`     ✓ ${item.from} → ${item.to}`)\n    } catch (err) {\n      // EC-7: partial failure observability — emit structured error with\n      // the list of already-migrated files so a re-run can recover.\n      const causeMessage = err instanceof Error ? err.message : String(err)\n      throw new RouterMigrationPartialFailure(\n        migrated.map((m) => m.from),\n        item.from,\n        causeMessage,\n      )\n    }\n  }\n  return migrated\n}\n\nexport async function routerMigrateCommand(\n  opts: RouterMigrateOptions = {},\n): Promise<RouterMigrateResult> {\n  const routesDir = opts.routesDir ?? resolve(process.cwd(), 'server', 'routes')\n  const log = makeLog(opts.silent)\n\n  await assertNoRunningDevServer(opts)\n\n  const plan = planRouterMigration(routesDir)\n  if (plan.length === 0) {\n    log('  ✓ Router already uses directory-nested convention. Nothing to do.')\n    return { migrated: [], alreadyClean: true }\n  }\n\n  log(`  → Migrating ${plan.length} dotted route(s) to directory-nested form...`)\n\n  if (opts.dryRun) {\n    for (const item of plan) {\n      log(`     [dry-run] ${item.from} → ${item.to}`)\n    }\n    return { migrated: [], alreadyClean: false }\n  }\n\n  const migrated = executeRenames(plan, routesDir, log)\n  log(`  ✓ Migrated ${migrated.length} route(s).`)\n  return { migrated, alreadyClean: false }\n}\n","/* eslint-disable security/detect-non-literal-fs-filename --\n * Build-time codemod: walks `<routesDir>` derived from the operator's\n * cwd via `theokit migrate router`. No HTTP input reaches these fs calls.\n */\n/**\n * G6 T2.1 — Pure codemod core for `theokit migrate router`.\n *\n * Plan: .claude/knowledge-base/plans/g6-router-convention-plan.md v1.1\n *\n * `planRouterMigration` walks `<routesDir>` recursively and returns the\n * set of (from, to) renames required to convert legacy dotted-basename\n * routes (`auth.[provider].login.ts`) into the directory-nested form\n * (`auth/[provider]/login.ts`). The function is PURE — it does NOT\n * touch the filesystem beyond `readdirSync`/`statSync`. The CLI subcommand\n * (`router.ts`) is responsible for executing the renames via `git mv`\n * or `fs.rename` with the appropriate error handling.\n *\n * Edge cases covered:\n *   - EC-4: co-located `*.test.[jt]sx?` / `*.spec.[jt]sx?` files are\n *     silently skipped (same filter as the scanner).\n *   - EC-5: target collision detection is CASE-INSENSITIVE so a\n *     macOS/Windows dev doesn't silently overwrite a sibling file that\n *     differs only in case.\n *   - Idempotent: invoked twice on the same tree, the second pass is empty.\n */\nimport { readdirSync, statSync } from 'node:fs'\nimport { extname, join, relative, sep } from 'node:path'\n\nconst ROUTE_EXTENSIONS = new Set(['.ts', '.tsx', '.js', '.jsx'])\nconst TEST_OR_SPEC_RE = /\\.(test|spec)\\.[jt]sx?$/\n\n/**\n * One pending rename emitted by `planRouterMigration`.\n */\nexport interface RouterMigrationPlanItem {\n  /** Absolute path of the offending dotted-basename file. */\n  from: string\n  /** Absolute path of the proposed directory-nested replacement. */\n  to: string\n}\n\n/**\n * `RouterMigrationCollisionError` is thrown when migrating a dotted file\n * would overwrite an existing file (case-insensitive). The caller MUST\n * resolve the conflict manually before re-running the codemod.\n */\nexport class RouterMigrationCollisionError extends Error {\n  override readonly name = 'RouterMigrationCollisionError'\n  readonly from: string\n  readonly to: string\n  constructor(from: string, to: string) {\n    super(\n      `Router migration collision: ${from} would rename to ${to}, but that file already exists (case-insensitive match). Resolve manually.`,\n    )\n    this.from = from\n    this.to = to\n  }\n}\n\n/**\n * Compute the depth delta (number of extra `..` levels needed) between\n * the original (dotted) path and the migrated (nested) path, relative\n * to a common `routesDir` ancestor.\n *\n * - `admin.sdk-config.ts` (depth 0) → `admin/sdk-config.ts` (depth 1): delta = 1\n * - `debug.stability.last.ts` (depth 0) → `debug/stability/last.ts` (depth 2): delta = 2\n * - `canvas/artifacts.[id].ts` (depth 1) → `canvas/artifacts/[id].ts` (depth 2): delta = 1\n */\nexport function computeDepthDelta(from: string, to: string, routesDir: string): number {\n  const depthOf = (p: string): number => {\n    const rel = relative(routesDir, p).replace(/\\\\/g, '/')\n    // depth = number of `/` separators in the relative path\n    return rel.split('/').length - 1\n  }\n  return depthOf(to) - depthOf(from)\n}\n\n/**\n * Rewrite all relative imports in `source` by prepending `../` × `delta`\n * to every `./X` or `../X` specifier. Absolute / package specifiers\n * (`theokit/server`, `zod`, `node:fs`) are untouched.\n *\n * Handles three import shapes:\n *   - `import ... from './foo'`\n *   - `import('./foo')` (dynamic)\n *   - `import './foo'` (side-effect only)\n *   - `export ... from './foo'` (re-exports)\n *\n * Pure: returns the new source; does NOT touch disk.\n */\nexport function rewriteRelativeImports(source: string, delta: number): string {\n  if (delta <= 0) return source\n\n  const prefix = '../'.repeat(delta)\n\n  // Rewrites a captured relative specifier: `./foo` → `<prefix>foo`,\n  // `../foo` → `<prefix>../foo`. Single source of truth for the algorithm\n  // shared by all three import-shape regexes below.\n  const transformSpecifier = (specifier: string): string => {\n    if (specifier.startsWith('./')) return `${prefix}${specifier.slice(2)}`\n    return `${prefix}${specifier}`\n  }\n\n  // Three narrow regexes keep us out of catastrophic-backtracking territory.\n  // Each is anchored on a keyword (`from`, `import`) and uses a possessive\n  // character class (`[^'\"]+`) for the specifier, so backtracking is bounded.\n  const fromRe = /\\bfrom\\s+(['\"])(\\.{1,2}\\/[^'\"]+)\\1/g\n  const dynRe = /\\bimport\\s*\\(\\s*(['\"])(\\.{1,2}\\/[^'\"]+)\\1\\s*\\)/g\n  const sideRe = /\\bimport\\s+(['\"])(\\.{1,2}\\/[^'\"]+)\\1/g\n\n  const fromSub = (_m: string, q: string, spec: string): string =>\n    `from ${q}${transformSpecifier(spec)}${q}`\n  const dynSub = (_m: string, q: string, spec: string): string =>\n    `import(${q}${transformSpecifier(spec)}${q})`\n  const sideSub = (_m: string, q: string, spec: string): string =>\n    `import ${q}${transformSpecifier(spec)}${q}`\n\n  // `from` covers both `import ... from '...'` and `export ... from '...'`\n  // (the `\\bfrom\\s+` anchor matches the keyword position in both shapes).\n  // `dynRe` handles `import('...')`. `sideRe` handles bare `import '...'`.\n  // No overlap — `sideRe` requires `import` followed by whitespace then\n  // a quote (vs. `import(` for dynRe and `import ... from` for fromRe).\n  return source.replace(fromRe, fromSub).replace(dynRe, dynSub).replace(sideRe, sideSub)\n}\n\nfunction isTestOrSpecFile(filePath: string): boolean {\n  return TEST_OR_SPEC_RE.test(filePath)\n}\n\nfunction hasDotOutsideBrackets(segment: string): boolean {\n  let depth = 0\n  for (const ch of segment) {\n    if (ch === '[') depth++\n    else if (ch === ']') depth--\n    else if (ch === '.' && depth === 0) return true\n  }\n  return false\n}\n\nfunction splitDottedSegmentOutsideBrackets(segment: string): string[] {\n  const parts: string[] = []\n  let current = ''\n  let depth = 0\n  for (const ch of segment) {\n    if (ch === '[') {\n      depth++\n      current += ch\n    } else if (ch === ']') {\n      depth--\n      current += ch\n    } else if (ch === '.' && depth === 0) {\n      if (current) parts.push(current)\n      current = ''\n    } else {\n      current += ch\n    }\n  }\n  if (current) parts.push(current)\n  return parts\n}\n\nfunction toDirectoryNestedPath(filePath: string, routesDir: string): string {\n  const rel = relative(routesDir, filePath).replace(/\\\\/g, '/')\n  const ext = extname(rel)\n  const withoutExt = rel.slice(0, -ext.length)\n  const flattened = withoutExt.split('/').flatMap(splitDottedSegmentOutsideBrackets)\n  return join(routesDir, `${flattened.join(sep)}${ext}`)\n}\n\nfunction walkRoutes(root: string, onFile: (absPath: string) => void): void {\n  let entries\n  try {\n    entries = readdirSync(root, { withFileTypes: true })\n  } catch {\n    return\n  }\n  for (const entry of entries) {\n    if (entry.name.startsWith('_') || entry.name.startsWith('.')) continue\n    const full = join(root, entry.name)\n    if (entry.isDirectory()) {\n      walkRoutes(full, onFile)\n    } else if (entry.isFile() && ROUTE_EXTENSIONS.has(extname(entry.name))) {\n      onFile(full)\n    }\n  }\n}\n\nfunction isDottedRouteFile(filePath: string, routesDir: string): boolean {\n  const rel = relative(routesDir, filePath).replace(/\\\\/g, '/')\n  const ext = extname(rel)\n  const withoutExt = rel.slice(0, -ext.length)\n  return withoutExt.split('/').some(hasDotOutsideBrackets)\n}\n\n/**\n * Compute the migration plan for a `<server>/routes` tree.\n *\n * Pure: does NOT mutate the filesystem.\n *\n * @throws RouterMigrationCollisionError when a target collides with an\n *   existing file (case-insensitive).\n */\nexport function planRouterMigration(routesDir: string): RouterMigrationPlanItem[] {\n  const plan: RouterMigrationPlanItem[] = []\n  const existingPathsLowercase = new Set<string>()\n\n  walkRoutes(routesDir, (absPath) => {\n    existingPathsLowercase.add(absPath.toLowerCase())\n  })\n\n  walkRoutes(routesDir, (absPath) => {\n    if (isTestOrSpecFile(absPath)) return\n    if (!isDottedRouteFile(absPath, routesDir)) return\n\n    const to = toDirectoryNestedPath(absPath, routesDir)\n\n    // EC-5: case-insensitive collision check — macOS HFS+/APFS default\n    // and Windows NTFS treat case-only differences as the same path. If\n    // any pre-existing file at a case-insensitive match exists, the codemod\n    // would silently overwrite on those platforms; we bail explicitly.\n    const targetLower = to.toLowerCase()\n    if (existingPathsLowercase.has(targetLower) && targetLower !== absPath.toLowerCase()) {\n      throw new RouterMigrationCollisionError(absPath, to)\n    }\n    // Also guard against statSync race using an explicit existence check.\n    try {\n      if (statSync(to).isFile()) {\n        throw new RouterMigrationCollisionError(absPath, to)\n      }\n    } catch (err) {\n      if (err instanceof RouterMigrationCollisionError) throw err\n      // ENOENT — fine, target does not exist\n    }\n\n    plan.push({ from: absPath, to })\n  })\n\n  return plan\n}\n"],"mappings":";;;;;AAoBA,SAAS,oBAAoB;AAC7B,SAAS,YAAY,WAAW,cAAc,YAAY,qBAAqB;AAC/E,SAAS,oBAAoB;AAC7B,SAAS,SAAS,eAAe;;;ACEjC,SAAS,aAAa,gBAAgB;AACtC,SAAS,SAAS,MAAM,UAAU,WAAW;AAE7C,IAAM,mBAAmB,oBAAI,IAAI,CAAC,OAAO,QAAQ,OAAO,MAAM,CAAC;AAC/D,IAAM,kBAAkB;AAiBjB,IAAM,gCAAN,cAA4C,MAAM;AAAA,EACrC,OAAO;AAAA,EAChB;AAAA,EACA;AAAA,EACT,YAAY,MAAc,IAAY;AACpC;AAAA,MACE,+BAA+B,IAAI,oBAAoB,EAAE;AAAA,IAC3D;AACA,SAAK,OAAO;AACZ,SAAK,KAAK;AAAA,EACZ;AACF;AAWO,SAAS,kBAAkB,MAAc,IAAY,WAA2B;AACrF,QAAM,UAAU,CAAC,MAAsB;AACrC,UAAM,MAAM,SAAS,WAAW,CAAC,EAAE,QAAQ,OAAO,GAAG;AAErD,WAAO,IAAI,MAAM,GAAG,EAAE,SAAS;AAAA,EACjC;AACA,SAAO,QAAQ,EAAE,IAAI,QAAQ,IAAI;AACnC;AAeO,SAAS,uBAAuB,QAAgB,OAAuB;AAC5E,MAAI,SAAS,EAAG,QAAO;AAEvB,QAAM,SAAS,MAAM,OAAO,KAAK;AAKjC,QAAM,qBAAqB,CAAC,cAA8B;AACxD,QAAI,UAAU,WAAW,IAAI,EAAG,QAAO,GAAG,MAAM,GAAG,UAAU,MAAM,CAAC,CAAC;AACrE,WAAO,GAAG,MAAM,GAAG,SAAS;AAAA,EAC9B;AAKA,QAAM,SAAS;AACf,QAAM,QAAQ;AACd,QAAM,SAAS;AAEf,QAAM,UAAU,CAAC,IAAY,GAAW,SACtC,QAAQ,CAAC,GAAG,mBAAmB,IAAI,CAAC,GAAG,CAAC;AAC1C,QAAM,SAAS,CAAC,IAAY,GAAW,SACrC,UAAU,CAAC,GAAG,mBAAmB,IAAI,CAAC,GAAG,CAAC;AAC5C,QAAM,UAAU,CAAC,IAAY,GAAW,SACtC,UAAU,CAAC,GAAG,mBAAmB,IAAI,CAAC,GAAG,CAAC;AAO5C,SAAO,OAAO,QAAQ,QAAQ,OAAO,EAAE,QAAQ,OAAO,MAAM,EAAE,QAAQ,QAAQ,OAAO;AACvF;AAEA,SAAS,iBAAiB,UAA2B;AACnD,SAAO,gBAAgB,KAAK,QAAQ;AACtC;AAEA,SAAS,sBAAsB,SAA0B;AACvD,MAAI,QAAQ;AACZ,aAAW,MAAM,SAAS;AACxB,QAAI,OAAO,IAAK;AAAA,aACP,OAAO,IAAK;AAAA,aACZ,OAAO,OAAO,UAAU,EAAG,QAAO;AAAA,EAC7C;AACA,SAAO;AACT;AAEA,SAAS,kCAAkC,SAA2B;AACpE,QAAM,QAAkB,CAAC;AACzB,MAAI,UAAU;AACd,MAAI,QAAQ;AACZ,aAAW,MAAM,SAAS;AACxB,QAAI,OAAO,KAAK;AACd;AACA,iBAAW;AAAA,IACb,WAAW,OAAO,KAAK;AACrB;AACA,iBAAW;AAAA,IACb,WAAW,OAAO,OAAO,UAAU,GAAG;AACpC,UAAI,QAAS,OAAM,KAAK,OAAO;AAC/B,gBAAU;AAAA,IACZ,OAAO;AACL,iBAAW;AAAA,IACb;AAAA,EACF;AACA,MAAI,QAAS,OAAM,KAAK,OAAO;AAC/B,SAAO;AACT;AAEA,SAAS,sBAAsB,UAAkB,WAA2B;AAC1E,QAAM,MAAM,SAAS,WAAW,QAAQ,EAAE,QAAQ,OAAO,GAAG;AAC5D,QAAM,MAAM,QAAQ,GAAG;AACvB,QAAM,aAAa,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM;AAC3C,QAAM,YAAY,WAAW,MAAM,GAAG,EAAE,QAAQ,iCAAiC;AACjF,SAAO,KAAK,WAAW,GAAG,UAAU,KAAK,GAAG,CAAC,GAAG,GAAG,EAAE;AACvD;AAEA,SAAS,WAAW,MAAc,QAAyC;AACzE,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,MAAM,EAAE,eAAe,KAAK,CAAC;AAAA,EACrD,QAAQ;AACN;AAAA,EACF;AACA,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,KAAK,WAAW,GAAG,KAAK,MAAM,KAAK,WAAW,GAAG,EAAG;AAC9D,UAAM,OAAO,KAAK,MAAM,MAAM,IAAI;AAClC,QAAI,MAAM,YAAY,GAAG;AACvB,iBAAW,MAAM,MAAM;AAAA,IACzB,WAAW,MAAM,OAAO,KAAK,iBAAiB,IAAI,QAAQ,MAAM,IAAI,CAAC,GAAG;AACtE,aAAO,IAAI;AAAA,IACb;AAAA,EACF;AACF;AAEA,SAAS,kBAAkB,UAAkB,WAA4B;AACvE,QAAM,MAAM,SAAS,WAAW,QAAQ,EAAE,QAAQ,OAAO,GAAG;AAC5D,QAAM,MAAM,QAAQ,GAAG;AACvB,QAAM,aAAa,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM;AAC3C,SAAO,WAAW,MAAM,GAAG,EAAE,KAAK,qBAAqB;AACzD;AAUO,SAAS,oBAAoB,WAA8C;AAChF,QAAM,OAAkC,CAAC;AACzC,QAAM,yBAAyB,oBAAI,IAAY;AAE/C,aAAW,WAAW,CAAC,YAAY;AACjC,2BAAuB,IAAI,QAAQ,YAAY,CAAC;AAAA,EAClD,CAAC;AAED,aAAW,WAAW,CAAC,YAAY;AACjC,QAAI,iBAAiB,OAAO,EAAG;AAC/B,QAAI,CAAC,kBAAkB,SAAS,SAAS,EAAG;AAE5C,UAAM,KAAK,sBAAsB,SAAS,SAAS;AAMnD,UAAM,cAAc,GAAG,YAAY;AACnC,QAAI,uBAAuB,IAAI,WAAW,KAAK,gBAAgB,QAAQ,YAAY,GAAG;AACpF,YAAM,IAAI,8BAA8B,SAAS,EAAE;AAAA,IACrD;AAEA,QAAI;AACF,UAAI,SAAS,EAAE,EAAE,OAAO,GAAG;AACzB,cAAM,IAAI,8BAA8B,SAAS,EAAE;AAAA,MACrD;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,eAAe,8BAA+B,OAAM;AAAA,IAE1D;AAEA,SAAK,KAAK,EAAE,MAAM,SAAS,GAAG,CAAC;AAAA,EACjC,CAAC;AAED,SAAO;AACT;;;AD3LO,IAAM,gCAAN,cAA4C,MAAM;AAAA,EACrC,OAAO;AAAA,EAChB;AAAA,EACA;AAAA,EACA;AAAA,EACT,YAAY,sBAAgC,YAAoB,cAAsB;AACpF;AAAA,MACE,qCAAqC,qBAAqB,MAAM,gDAAgD,UAAU,KAAK,YAAY;AAAA,IAC7I;AACA,SAAK,uBAAuB;AAC5B,SAAK,aAAa;AAClB,SAAK,eAAe;AAAA,EACtB;AACF;AAOA,eAAsB,YAAY,MAAgC;AAChE,SAAO,MAAM,IAAI,QAAiB,CAACA,aAAY;AAC7C,UAAM,QAAQ,aAAa;AAC3B,UAAM,KAAK,SAAS,CAAC,QAA+B;AAClD,YAAM,MAAM,MAAM;AAChB,QAAAA,SAAQ,IAAI,SAAS,YAAY;AAAA,MACnC,CAAC;AAAA,IACH,CAAC;AACD,UAAM,KAAK,aAAa,MAAM;AAC5B,YAAM,MAAM,MAAM;AAChB,QAAAA,SAAQ,KAAK;AAAA,MACf,CAAC;AAAA,IACH,CAAC;AACD,UAAM,OAAO,MAAM,WAAW;AAAA,EAChC,CAAC;AACH;AAMA,eAAsB,2BAAmD;AACvE,aAAW,QAAQ,CAAC,KAAM,IAAI,GAAG;AAC/B,QAAI,MAAM,YAAY,IAAI,EAAG,QAAO;AAAA,EACtC;AACA,SAAO;AACT;AAEA,SAAS,SAAS,MAAc,IAAqB;AACnD,MAAI;AACF,cAAU,QAAQ,EAAE,GAAG,EAAE,WAAW,KAAK,CAAC;AAM1C,iBAAa,OAAO,CAAC,MAAM,MAAM,EAAE,GAAG,EAAE,OAAO,OAAO,CAAC;AACvD,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,eAAe,MAAc,IAAkB;AACtD,YAAU,QAAQ,EAAE,GAAG,EAAE,WAAW,KAAK,CAAC;AAC1C,aAAW,MAAM,EAAE;AACrB;AAEA,SAAS,YAAY,MAAqC;AACxD,MAAI,CAAC,WAAW,KAAK,IAAI,GAAG;AAE1B;AAAA,EACF;AACA,MAAI,WAAW,KAAK,EAAE,GAAG;AAIvB,UAAM,IAAI;AAAA,MACR,0CAA0C,KAAK,EAAE,wBAAwB,KAAK,IAAI;AAAA,IACpF;AAAA,EACF;AACA,MAAI,CAAC,SAAS,KAAK,MAAM,KAAK,EAAE,GAAG;AACjC,mBAAe,KAAK,MAAM,KAAK,EAAE;AAAA,EACnC;AACF;AASA,SAAS,mBAAmB,MAA+B,WAAyB;AAClF,QAAM,QAAQ,kBAAkB,KAAK,MAAM,KAAK,IAAI,SAAS;AAC7D,MAAI,SAAS,EAAG;AAChB,QAAM,SAAS,aAAa,KAAK,IAAI,MAAM;AAC3C,QAAM,YAAY,uBAAuB,QAAQ,KAAK;AACtD,MAAI,cAAc,QAAQ;AACxB,kBAAc,KAAK,IAAI,WAAW,MAAM;AAAA,EAC1C;AACF;AAWA,SAAS,QAAQ,QAAoC;AACnD,MAAI,QAAQ;AACV,WAAO,CAAC,SAAiB;AAAA,IAEzB;AAAA,EACF;AACA,SAAO,CAAC,QAAgB;AACtB,YAAQ,IAAI,GAAG;AAAA,EACjB;AACF;AAEA,eAAe,yBAAyB,MAA2C;AACjF,MAAI,KAAK,MAAO;AAChB,QAAM,cAAc,MAAM,yBAAyB;AACnD,MAAI,gBAAgB,MAAM;AACxB,UAAM,IAAI;AAAA,MACR,+CAA+C,WAAW;AAAA,IAC5D;AAAA,EACF;AACF;AAEA,SAAS,eACP,MACA,WACA,KAC2B;AAC3B,QAAM,WAAsC,CAAC;AAC7C,aAAW,QAAQ,MAAM;AACvB,QAAI;AACF,kBAAY,IAAI;AAChB,yBAAmB,MAAM,SAAS;AAClC,eAAS,KAAK,IAAI;AAClB,UAAI,eAAU,KAAK,IAAI,WAAM,KAAK,EAAE,EAAE;AAAA,IACxC,SAAS,KAAK;AAGZ,YAAM,eAAe,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AACpE,YAAM,IAAI;AAAA,QACR,SAAS,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,QAC1B,KAAK;AAAA,QACL;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAsB,qBACpB,OAA6B,CAAC,GACA;AAC9B,QAAM,YAAY,KAAK,aAAa,QAAQ,QAAQ,IAAI,GAAG,UAAU,QAAQ;AAC7E,QAAM,MAAM,QAAQ,KAAK,MAAM;AAE/B,QAAM,yBAAyB,IAAI;AAEnC,QAAM,OAAO,oBAAoB,SAAS;AAC1C,MAAI,KAAK,WAAW,GAAG;AACrB,QAAI,0EAAqE;AACzE,WAAO,EAAE,UAAU,CAAC,GAAG,cAAc,KAAK;AAAA,EAC5C;AAEA,MAAI,sBAAiB,KAAK,MAAM,8CAA8C;AAE9E,MAAI,KAAK,QAAQ;AACf,eAAW,QAAQ,MAAM;AACvB,UAAI,kBAAkB,KAAK,IAAI,WAAM,KAAK,EAAE,EAAE;AAAA,IAChD;AACA,WAAO,EAAE,UAAU,CAAC,GAAG,cAAc,MAAM;AAAA,EAC7C;AAEA,QAAM,WAAW,eAAe,MAAM,WAAW,GAAG;AACpD,MAAI,qBAAgB,SAAS,MAAM,YAAY;AAC/C,SAAO,EAAE,UAAU,cAAc,MAAM;AACzC;","names":["resolve"]}

package/dist/{routes-XVRAUH6H.js → routes-3A4XGIEJ.js}

@@ -5,16 +5,16 @@ import {
 } from "./chunk-XMS5VRIK.js";
 import {
   loadConfig
-} from "./chunk-XP7YXRHO.js";
-import "./chunk-X4JAX2U3.js";
-import "./chunk-WZ7CPVQB.js";
+} from "./chunk-U6TPSW4L.js";
+import "./chunk-4S2UCILN.js";
+import "./chunk-27LWMYNK.js";
 import {
   scanServerRoutes,
   scanWebSocketRoutes
-} from "./chunk-SNDZQ64K.js";
+} from "./chunk-VBZCVFSA.js";
 import {
   scanServerActions
-} from "./chunk-5OFPQK6N.js";
+} from "./chunk-COXLEZCN.js";
 import "./chunk-KT3MWNZG.js";
 
 // src/cli/commands/routes.ts
@@ -63,4 +63,4 @@ async function routesCommand() {
 export {
   routesCommand
 };
-//# sourceMappingURL=routes-XVRAUH6H.js.map
+//# sourceMappingURL=routes-3A4XGIEJ.js.map

package/dist/{scan-C2BOKLSY.js → scan-NQFI5S7P.js}

@@ -2,9 +2,9 @@
 import "tsx/esm";
 import {
   scanRoutes
-} from "./chunk-O7335ZGH.js";
+} from "./chunk-CG563V5M.js";
 import "./chunk-KT3MWNZG.js";
 export {
   scanRoutes
 };
-//# sourceMappingURL=scan-C2BOKLSY.js.map
+//# sourceMappingURL=scan-NQFI5S7P.js.map

package/dist/scan-NQFI5S7P.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/schema-D3v8VB7o.d.ts

@@ -0,0 +1,76 @@
+import { z } from 'zod';
+
+/**
+ * Wave 2 — Polyglot Services Orchestration (T1.1).
+ *
+ * Declarative `services: {}` primitive for `theo.config.ts`. Each entry
+ * declares an external sidecar process (Python FastAPI / Node Hono) that
+ * boots alongside the TheoKit TS app. Empty `services: {}` is the default
+ * and preserves Wave 1 behavior (no impact on TS-only apps).
+ *
+ * See ADRs 0012-0015 + plan: docs/plans/wave-2-polyglot-services-plan.md
+ */
+
+/**
+ * Single service definition. All commands run from `services/<name>/` cwd.
+ *
+ * EC-4 fix: `proxy` regex requires NON-EMPTY path after `/` (the `+` quantifier)
+ * to reject `/` which would catch-all and conflict with TheoKit's own routing.
+ */
+declare const ServiceDefinitionSchema: z.ZodObject<{
+    runtime: z.ZodEnum<{
+        python: "python";
+        node: "node";
+    }>;
+    type: z.ZodOptional<z.ZodEnum<{
+        server: "server";
+        worker: "worker";
+        frontend: "frontend";
+    }>>;
+    port: z.ZodNumber;
+    proxy: z.ZodString;
+    dev: z.ZodString;
+    build: z.ZodOptional<z.ZodString>;
+    start: z.ZodString;
+    openapi: z.ZodOptional<z.ZodString>;
+    healthcheck: z.ZodDefault<z.ZodString>;
+    cors: z.ZodDefault<z.ZodBoolean>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    dependsOn: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    passSetCookie: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+type ServiceDefinition = z.infer<typeof ServiceDefinitionSchema>;
+type ServicesConfig = Record<string, ServiceDefinition>;
+/**
+ * Full services config schema with cross-service refines.
+ *
+ * EC-1 fix: detect duplicate ports across services.
+ * EC-13: empty `dependsOn: []` accepted as no-deps.
+ * Self-dep, missing-ref, and cycles rejected via topological check.
+ */
+declare const servicesConfigSchema: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+    runtime: z.ZodEnum<{
+        python: "python";
+        node: "node";
+    }>;
+    type: z.ZodOptional<z.ZodEnum<{
+        server: "server";
+        worker: "worker";
+        frontend: "frontend";
+    }>>;
+    port: z.ZodNumber;
+    proxy: z.ZodString;
+    dev: z.ZodString;
+    build: z.ZodOptional<z.ZodString>;
+    start: z.ZodString;
+    openapi: z.ZodOptional<z.ZodString>;
+    healthcheck: z.ZodDefault<z.ZodString>;
+    cors: z.ZodDefault<z.ZodBoolean>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    dependsOn: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    passSetCookie: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>>>;
+type ServicesConfigInput = z.input<typeof servicesConfigSchema>;
+type ServicesConfigOutput = z.output<typeof servicesConfigSchema>;
+
+export type { ServicesConfig as S, ServiceDefinition as a, ServicesConfigInput as b, ServicesConfigOutput as c };

package/dist/{schema-VR6YNVLQ.js → schema-KZVOV333.js}

@@ -4,6 +4,7 @@ import {
   cacheSchema,
   corsSchema,
   disallowedConfigSchema,
+  headerSafeString,
   loggingSchema,
   rateLimitSchema,
   securityHeadersSchema,
@@ -11,13 +12,14 @@ import {
   storageSchema,
   theoConfigSchema,
   uploadSchema
-} from "./chunk-X4JAX2U3.js";
-import "./chunk-WZ7CPVQB.js";
+} from "./chunk-4S2UCILN.js";
+import "./chunk-27LWMYNK.js";
 import "./chunk-KT3MWNZG.js";
 export {
   cacheSchema,
   corsSchema,
   disallowedConfigSchema,
+  headerSafeString,
   loggingSchema,
   rateLimitSchema,
   securityHeadersSchema,
@@ -26,4 +28,4 @@ export {
   theoConfigSchema,
   uploadSchema
 };
-//# sourceMappingURL=schema-VR6YNVLQ.js.map
+//# sourceMappingURL=schema-KZVOV333.js.map

package/dist/schema-KZVOV333.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}