theokit 0.20.0 → 0.22.0

package/dist/server/index.d.ts

@@ -1,8 +1,8 @@
 import { RouteConfig, CustomTool } from './define/index.js';
-export { ActionAccept, ActionBuilder, ActionConfig, ChannelHandler, DefineAgentToolSpec, MiddlewareBuilder, MiddlewareHandler, PluginBuilder, RouteBuilder, ToolBuilder, ToolTransform, WebChannelHandler, WebSocketBuilder, action, applyTransform, defineAction, defineAgentTool, defineChannel, defineMiddleware, defineRoute, defineTheoPlugin, defineWebChannel, middleware, plugin, route, tool, uiMessageStreamResponse, websocket } from './define/index.js';
-export { W as WebSocketHandler, a as WebSocketHandlerWeb, b as WebSocketLike, d as defineWebSocket, c as defineWebSocketWeb } from '../define-websocket-CdK94O-D.js';
+export { ActionAccept, ActionBuilder, ActionConfig, ChannelHandler, DefineAgentToolSpec, MiddlewareBuilder, MiddlewareHandler, PluginBuilder, RouteBuilder, ToolBuilder, ToolTransform, WebChannelHandler, WebSocketBuilder, action, applyTransform, defineChannel, defineWebChannel, middleware, plugin, route, tool, uiMessageStreamResponse, websocket } from './define/index.js';
+export { W as WebSocketHandler, a as WebSocketHandlerWeb, b as WebSocketLike } from '../define-websocket-CPQcQK9h.js';
 export { H as HEALTH_PATH, a as HealthRouteConfig, b as READY_PATH, c as ReadyRouteConfig, d as ReservedResponse, R as ReservedRoutes, e as defineHealthRoute, f as defineReadyRoute, s as serveReservedRoute } from '../health-route-C0hk64_U.js';
-export { B as BATCH_PATH, a as BatchExecuteFn, b as BatchPathConflictError, c as BatchPayload, d as BatchRequestItem, e as BatchResponse, f as BatchResultItem, C as CookieOptions, g as CorsConfig, h as CorsHandler, i as CorsOrigin, j as CorsWebHandler, k as CustomErrorPages, E as ExecuteActionOptions, l as ExecuteRouteContext, H as HandleBatchOptions, M as MAX_ERROR_HTML_BYTES, m as MiddlewareResult, N as NotFoundError, S as STRIPPED_HEADERS, n as SendErrorInput, o as SendErrorOptions, T as TRACE_HEADER, p as TRACE_PARENT_HEADER, q as TheoError, r as TheoTransformer, _ as _resetMiddlewareCacheForTests, s as appendCookieToHeaders, t as appendDeleteCookieToHeaders, u as createCorsHandler, v as createCorsWebHandler, w as deleteCookie, x as envelopeCodeToStatus, y as executeAction, z as executeRoute, A as extractTraceId, D as extractTraceIdFromRequest, F as fromUnknown, G as getCookie, I as getCookieFromRequest, J as handleBatchRequest, K as handleRequestError, L as handleWebRequestError, O as jsonTransformer, P as loadCustomErrorPages, Q as matchesOrigin, R as parseCookieHeader, U as parseTraceparent, V as resolveTransformer, W as runMiddlewareAndContext, X as sendError, Y as sendJson, Z as serializeCookie, $ as serveStaticFile, a0 as serverErrorToEnvelope, a1 as setCookie, a2 as superjsonTransformer } from '../index-B40qUSrQ.js';
+export { B as BATCH_PATH, a as BatchExecuteFn, b as BatchPathConflictError, c as BatchPayload, d as BatchRequestItem, e as BatchResponse, f as BatchResultItem, C as CookieOptions, g as CorsConfig, h as CorsHandler, i as CorsOrigin, j as CorsWebHandler, k as CustomErrorPages, E as ExecuteActionOptions, l as ExecuteRouteContext, H as HandleBatchOptions, M as MAX_ERROR_HTML_BYTES, m as MiddlewareResult, N as NotFoundError, S as STRIPPED_HEADERS, n as SendErrorInput, o as SendErrorOptions, T as TRACE_HEADER, p as TRACE_PARENT_HEADER, q as TheoError, r as TheoTransformer, _ as _resetMiddlewareCacheForTests, s as appendCookieToHeaders, t as appendDeleteCookieToHeaders, u as createCorsHandler, v as createCorsWebHandler, w as deleteCookie, x as envelopeCodeToStatus, y as executeAction, z as executeRoute, A as extractTraceId, D as extractTraceIdFromRequest, F as fromUnknown, G as getCookie, I as getCookieFromRequest, J as handleBatchRequest, K as handleRequestError, L as handleWebRequestError, O as jsonTransformer, P as loadCustomErrorPages, Q as matchesOrigin, R as parseCookieHeader, U as parseTraceparent, V as resolveTransformer, W as runMiddlewareAndContext, X as sendError, Y as sendJson, Z as serializeCookie, $ as serveStaticFile, a0 as serverErrorToEnvelope, a1 as setCookie, a2 as superjsonTransformer } from '../index-C3ged4mn.js';
 export { ActionNode, ActionScanError, LoadedManifest, ManifestAction, ManifestAgent, ManifestRoute, ManifestWebSocket, TheoManifest, WebSocketRouteNode, generateManifest, loadManifest, scanMiddlewares, scanServerActions, scanServerActionsEnriched, scanServerRoutes, scanWebSocketRoutes, writeManifest } from './scan/index.js';
 export { L as LoadModule, S as ServerRouteNode, c as compilePattern, a as createProductionLoader, b as createViteLoader, m as matchRoute } from '../match-CfbEFRG4.js';
 import { T as TheoErrorEnvelope, a as TheoErrorCode, V as ValidationFieldsExt } from '../error-envelope-BsNzzAV5.js';
@@ -13,7 +13,7 @@ export { DuplicateContextKeyError, DuplicateJobNameError, EnqueueOptions, InMemo
 export { J as JobBackend, a as JobEnqueueInput, b as JobLease, N as NonRetryableError } from '../job-backend-CgC8Xf33.js';
 export { ConsoleObservabilityAdapter, LogLevel, LoggerFn, NoopObservabilityAdapter, NoopSpan, ObservabilityAdapter, RequestLog, SpanAttributes, SpanHandle, SpanImpl, StructuredLog, TheoCloudObservabilityAdapter, TheoLogger, _resetWarnOnceForTests, createLogger, createObservabilityPlugin, defineObservabilityAdapter, findSuggestion, levenshtein, logRequest, resolveAdapter, serializeSpansToOtlp, warnOnce } from './observability/index.js';
 export { a as AuditEvent, A as AuditLogger, J as JsonStdoutSink, c as createNoOpLogger, s as safeAudit } from '../audit-log-BQWM5YLG.js';
-export { D as DuplicateDecorationError, a as DuplicatePluginError, P as PluginRunner } from '../plugin-runner-BGBkzgi0.js';
+export { D as DuplicateDecorationError, a as DuplicatePluginError, P as PluginRunner } from '../plugin-runner-CMprWWHZ.js';
 export { InvalidPluginShapeError, createPluginRunnerFromConfig } from './plugins/index.js';
 export { R as RateLimitConfig, a as RateLimitResult, c as createRateLimiter, b as createRateLimiterWeb } from '../rate-limit-BdNDZ3vt.js';
 export { I as InMemoryStore, a as RateLimitState, R as RateLimitStore } from '../rate-limit-store-BEJnhWdw.js';
@@ -31,8 +31,8 @@ import { z } from 'zod';
 import { AcpTransport } from '@theokit/agents';
 import { CustomTool as CustomTool$1 } from '@theokit/sdk';
 import { IncomingMessage } from 'node:http';
-import { W as WebOnRequestHook, b as WebPreHandlerHook, c as WebOnResponseHook, d as WebOnErrorHook } from '../plugin-types-DNJGxr4Z.js';
-export { e as HookName, H as HookResult, O as OnErrorHook, f as OnRequestHook, g as OnResponseHook, P as PluginContext, h as PluginErrorContext, i as PreHandlerHook, R as RunHookOptions, a as TheoApp, T as TheoPlugin, j as definePlugin } from '../plugin-types-DNJGxr4Z.js';
+import { W as WebOnRequestHook, b as WebPreHandlerHook, c as WebOnResponseHook, d as WebOnErrorHook } from '../plugin-types-L49QYMb5.js';
+export { e as HookName, H as HookResult, O as OnErrorHook, f as OnRequestHook, g as OnResponseHook, P as PluginContext, h as PluginErrorContext, i as PreHandlerHook, R as RunHookOptions, a as TheoApp, T as TheoPlugin } from '../plugin-types-L49QYMb5.js';
 export { a as ServiceDefinition, S as ServicesConfig, b as ServicesConfigInput, c as ServicesConfigOutput } from '../schema-BpH6ivDY.js';
 import 'ai';
 import 'vite';
@@ -1115,6 +1115,167 @@ interface ExecuteWebRequestOptions {
 }
 declare function executeWebRequest(request: Request, routeModule: WebRouteModule, opts?: ExecuteWebRequestOptions): Promise<Response>;
 
+/**
+ * M33 — the SINGLE route-input validation pipeline, shared by the HTTP path (`web-handler.ts`
+ * `runHandler`) and the in-process caller (`in-process-caller.ts` `callProcedure`).
+ *
+ * Both surfaces validate the same three channels (`query`/`body`/`params`) against the same
+ * `RouteConfig` Zod schemas. Extracting the logic here means there is ONE validation pipeline
+ * (no duplication, no drift) — each caller only differs in how it MAPS a failure: the HTTP path
+ * emits a 400 Response, the in-process path throws a typed error.
+ */
+
+/** The three request-input channels a route may declare a Zod schema for. */
+type RouteInputChannel = 'query' | 'body' | 'params';
+/**
+ * The minimal structural shape the validator needs: the three optional channel schemas. Both
+ * `RouteConfig` (the 5-arity generic contract) and `WebRouteHandlerConfig` (the Web runtime shape)
+ * satisfy this — the validator depends only on the schemas, not the full route generic.
+ */
+interface RouteInputSchemas {
+    query?: z.ZodType;
+    body?: z.ZodType;
+    params?: z.ZodType;
+}
+/** Raw (pre-validation) channel values. A channel absent from the config passes through unchanged. */
+interface RawRouteInput {
+    query?: unknown;
+    body?: unknown;
+    params?: unknown;
+}
+/** Discriminated result — each caller maps `ok:false` to its own surface (Response vs throw). */
+type RouteInputValidation = {
+    ok: true;
+    query: unknown;
+    body: unknown;
+    params: unknown;
+} | {
+    ok: false;
+    channel: RouteInputChannel;
+    error: z.ZodError;
+};
+/**
+ * Validate the three input channels against the route's declared Zod schemas. A channel with no
+ * declared schema passes its raw value through. First failing channel short-circuits (query → body
+ * → params order, matching `runHandler`).
+ */
+declare function validateRouteInput(config: RouteInputSchemas, raw: RawRouteInput): RouteInputValidation;
+
+/**
+ * M33 Phase 1 — `callProcedure`, the in-process typed caller.
+ *
+ * The load-bearing seam for non-HTTP surfaces (TUI / Tauri / MCP-tools): invoke a route's shared
+ * logic with STRUCTURED input, WITHOUT going through the HTTP transport (no URL/body parsing, no
+ * middleware chain, no Response). It reuses the SAME Zod validation pipeline as the HTTP path
+ * (`validateRouteInput`) so there is no drift, and reuses the SAME `config.response` server-fault
+ * check. Failures throw typed errors (there is no HTTP status off-web).
+ *
+ * Prior art: tRPC `callProcedure` / `createCallerFactory`
+ * (`.claude/knowledge-base/references/trpc/packages/server/src/unstable-core-do-not-import/router.ts:401,441`).
+ *
+ * Design (ADR-0044 / blueprint §5.4): the AUTHOR passes structured input `{query?, body?, params?}`
+ * — never synthesizes a Request. A minimal in-process `Request` is provided to the handler ONLY so
+ * handlers that read `request.headers`/`request.url` still work (opencode's proven pattern); the
+ * input itself is NOT parsed from it.
+ */
+
+/** Structured input for an in-process procedure call — one object per declared channel. */
+type ProcedureInput = RawRouteInput;
+/**
+ * Thrown when structured input fails the route's Zod validation. The in-process analog of the HTTP
+ * 400 — carries the failing channel + the Zod issues (typed error, not a magic value; Rule 8).
+ */
+declare class ProcedureInputError extends Error {
+    readonly channel: RouteInputChannel;
+    readonly issues: z.core.$ZodIssue[];
+    constructor(channel: RouteInputChannel, error: z.ZodError);
+}
+/**
+ * Thrown when the handler's plain-object return drifts from `config.response` — a SERVER fault
+ * (the handler violated its own declared contract), mirroring the HTTP path's 500 as a throw.
+ */
+declare class ProcedureOutputError extends Error {
+    readonly issues: z.core.$ZodIssue[];
+    constructor(error: z.ZodError);
+}
+/**
+ * Invoke a route/procedure's handler in-process with structured, Zod-validated input.
+ *
+ * @param config  the `RouteConfig` (what `route().build()` produces).
+ * @param input   structured `{query?, body?, params?}` — validated by the route's schemas.
+ * @param ctx     the typed run-context the handler receives (built by the CALLER — a TUI/Tauri/MCP
+ *                surface supplies its own ctx factory; there is no HTTP middleware chain here).
+ * @returns       the handler's result (validated against `config.response` when declared).
+ * @throws ProcedureInputError  on invalid structured input (the off-web analog of a 400).
+ * @throws ProcedureOutputError on a handler output that drifts from `config.response` (server fault).
+ */
+declare function callProcedure(config: RouteConfig<z.ZodType, z.ZodType, z.ZodType>, input?: ProcedureInput, ctx?: unknown): Promise<unknown>;
+
+/**
+ * M33 Phase 1 — the ctx reconciliation contract (ADR-0044 D4 / blueprint §5.2, §8.5).
+ *
+ * ## The problem the deep research verified against our own code
+ *
+ * At runtime (`execute.ts:122-165`) the handler's `ctx` is written by THREE sources, not one:
+ *
+ *   1. **the user `context.ts` factory** — via `runMiddlewareAndContext` (`execute.ts:131`). This is
+ *      the ONLY writer the author controls + declares a shape for. **This is the typed surface.**
+ *   2. **plugin decorations** — `pluginRunner.applyDecorations(ctx)` (`execute.ts:124,136`). Plugins
+ *      add arbitrary keys (`decorateRequest`) whose types the route author does not see.
+ *   3. **the jobs backend** — `ctx.queue` injected when `jobs.backend` is configured (`execute.ts:141-150`).
+ *
+ * A naive "infer `TCtx` from everything on `ctx`" would LIE — it cannot see writers (2) and (3), so
+ * `ctx.queue` / plugin keys would be typed as present when they are not (or vice-versa). That is the
+ * exact Hono/global-augmentation failure the blueprint refuted (§8.5). oRPC/tRPC avoid it only
+ * because middleware is their SOLE ctx writer; TheoKit is multi-writer.
+ *
+ * ## The reconciliation (what this contract locks)
+ *
+ * The typed `TCtx` a route handler sees reflects **only writer (1)** — the user `context.ts` factory
+ * (`ContextValue` below). Writers (2) and (3) are **explicitly untyped** on the route surface:
+ *
+ *   - `ctx.queue` (jobs) is reached through the dedicated {@link JobsAugmentedCtx} helper, NOT the
+ *     inferred `TCtx` — a handler that needs the queue opts into the augmented type explicitly.
+ *   - plugin-decorated keys are `unknown` by design (a plugin is a cross-cutting, per-app concern;
+ *     typing them into every route's `TCtx` would couple routes to plugin internals — G5).
+ *
+ * This keeps the LOCKED 5-arity `RouteConfig` generic (`route-config-generic-arity.test.ts`, GAP-4)
+ * intact — `TCtx` stays the single typed ctx slot; we only define WHICH writer it corresponds to,
+ * so `runtime ⊇ type` holds honestly (the type is a sound subset of the runtime ctx, never a lie).
+ *
+ * Type-tests proving this live in `tests/ctx-reconciliation.test-d.ts`.
+ */
+/**
+ * The typed run-context a route handler sees = the return of the user `context.ts` factory.
+ * `TValue` is inferred from that factory at the web adapter seam; it EXCLUDES plugin decorations and
+ * `ctx.queue` (those are not part of the author-declared shape).
+ */
+type ContextValue<TValue extends Record<string, unknown> = Record<string, unknown>> = TValue;
+/** The `ctx.queue` client shape injected by the jobs backend (writer 3). Reached explicitly. */
+interface QueueClientLike {
+    enqueue(name: string, input: unknown): void | Promise<void>;
+}
+/**
+ * Opt-in augmentation for handlers that read `ctx.queue`. A route that uses the jobs queue annotates
+ * its ctx as `JobsAugmentedCtx<MyCtx>` — making the jobs dependency explicit in the type, instead of
+ * silently assuming `ctx.queue` exists on every route (which would lie when `jobs.backend` is unset).
+ */
+type JobsAugmentedCtx<TValue extends Record<string, unknown> = Record<string, unknown>> = TValue & {
+    queue: QueueClientLike;
+};
+/**
+ * The three runtime ctx writers, named for documentation + the type-test. This is the reconciliation
+ * artifact the plan requires as a deliverable (not a footnote).
+ */
+declare const CTX_WRITERS: {
+    /** Writer 1 — user `context.ts` factory. THE typed surface (`TCtx`). execute.ts:131 */
+    readonly contextFactory: "context.ts";
+    /** Writer 2 — plugin `decorateRequest`. Untyped on the route surface. execute.ts:124,136 */
+    readonly pluginDecorations: "pluginRunner.applyDecorations";
+    /** Writer 3 — jobs backend `ctx.queue`. Reached via JobsAugmentedCtx, not TCtx. execute.ts:141-150 */
+    readonly jobsQueue: "jobBackend";
+};
+
 /**
  * Types for `loadEnv()` — env auto-load utility (Phase 1 of
  * docs/plans/framework-zero-config-polish-plan.md).
@@ -1156,4 +1317,4 @@ interface LoadEnvResult {
 declare function _resetEnvCache(): void;
 declare function loadEnv(options?: LoadEnvOptions): LoadEnvResult;
 
-export { type AcpToolConfig, ActionError, type ActionErrorCode, ActionInputError, type ActionManifestEntry, type ActionResult, type AppResource, type AppResourceInput, type BodyParserOptions, DEFAULT_MAX_AGE as CACHE_DEFAULT_MAX_AGE, DEFAULT_MAX_ENTRY_SIZE as CACHE_DEFAULT_MAX_ENTRY_SIZE, DEFAULT_SWR_MULTIPLIER as CACHE_DEFAULT_SWR_MULTIPLIER, CACHE_TAG_MAX_ITEMS, CACHE_TAG_MAX_LENGTH, type CacheControlInput, type CacheEngine, type CacheEngineOptions, type CacheEntry, type CacheStatus, type CacheStorageAdapter, type CacheStore, type CacheStoreAdmin, type ValidationResult as CacheValidationResult, type CachedFunction, type CachedRouteConfig, type ChannelMessage, type ChannelWebhookConfig, type CodeModeApi, type CodeModeConfig, type CodeModePermission, CodeModePermissionDeniedError, type CompiledRouteRule, CustomTool, DEFAULT_EXCLUDED_QUERY_PARAMS, type DefineCachedFunctionOptions, FileTooLargeError, type GetOrComputeOptions, InMemoryCacheAdapter, type InMemoryCacheAdapterOptions, type KeyDerivationOptions, type LoadEnvOptions, type LoadEnvResult, type McpResourceContents, type McpResourceDescriptor, NodeAcpTransport, type NormalizedCacheConfig, type OpenApiDocsOptions, type ParsedBody, type RevalidateResult, type RouteCacheOptions, RouteConfig, type RouteRule, type RouteRules, type Sandbox, type SerializedActionResult, type SerializedResponse, type StdioStreams, THEO_T_PREFIX, type UniversalZodIssue, type UploadedFile, type VendorAgentClient, type VendorAgentToolConfig, VerifyFn, type WorkflowLike, type WorkflowToolConfig, _resetCacheEngine, _resetEnvCache, buildResourceDescriptors, compileRouteRules, createACPTool, createCacheEngine, createCodeMode, createOpenApiHandler, createVendorAgentTool, createWorkflowTool, defineAppResource, defineCachedFunction, defineCachedRoute, deriveKey as deriveCacheKey, deserializeResponse, executeWebRequest, extractAppResources, extractUniversalIssues, getCacheControlHeader, getCacheEngine, handleChannelWebhook, handleMcpStdioLine, initCacheEngine, isActionError, isChannelPath, isInputError, loadEnv, parseChannelPath, parseRequestBody, readAppResource, resolveRouteRule, revalidatePath, revalidateTag, serializeResponse, serveMcpStdio, updateTag, validateExpire as validateCacheExpire, validateMaxAge as validateCacheMaxAge, validateTags as validateCacheTags };
+export { type AcpToolConfig, ActionError, type ActionErrorCode, ActionInputError, type ActionManifestEntry, type ActionResult, type AppResource, type AppResourceInput, type BodyParserOptions, DEFAULT_MAX_AGE as CACHE_DEFAULT_MAX_AGE, DEFAULT_MAX_ENTRY_SIZE as CACHE_DEFAULT_MAX_ENTRY_SIZE, DEFAULT_SWR_MULTIPLIER as CACHE_DEFAULT_SWR_MULTIPLIER, CACHE_TAG_MAX_ITEMS, CACHE_TAG_MAX_LENGTH, CTX_WRITERS, type CacheControlInput, type CacheEngine, type CacheEngineOptions, type CacheEntry, type CacheStatus, type CacheStorageAdapter, type CacheStore, type CacheStoreAdmin, type ValidationResult as CacheValidationResult, type CachedFunction, type CachedRouteConfig, type ChannelMessage, type ChannelWebhookConfig, type CodeModeApi, type CodeModeConfig, type CodeModePermission, CodeModePermissionDeniedError, type CompiledRouteRule, type ContextValue, CustomTool, DEFAULT_EXCLUDED_QUERY_PARAMS, type DefineCachedFunctionOptions, FileTooLargeError, type GetOrComputeOptions, InMemoryCacheAdapter, type InMemoryCacheAdapterOptions, type JobsAugmentedCtx, type KeyDerivationOptions, type LoadEnvOptions, type LoadEnvResult, type McpResourceContents, type McpResourceDescriptor, NodeAcpTransport, type NormalizedCacheConfig, type OpenApiDocsOptions, type ParsedBody, type ProcedureInput, ProcedureInputError, ProcedureOutputError, type QueueClientLike, type RawRouteInput, type RevalidateResult, type RouteCacheOptions, RouteConfig, type RouteInputChannel, type RouteInputSchemas, type RouteInputValidation, type RouteRule, type RouteRules, type Sandbox, type SerializedActionResult, type SerializedResponse, type StdioStreams, THEO_T_PREFIX, type UniversalZodIssue, type UploadedFile, type VendorAgentClient, type VendorAgentToolConfig, VerifyFn, type WorkflowLike, type WorkflowToolConfig, _resetCacheEngine, _resetEnvCache, buildResourceDescriptors, callProcedure, compileRouteRules, createACPTool, createCacheEngine, createCodeMode, createOpenApiHandler, createVendorAgentTool, createWorkflowTool, defineAppResource, defineCachedFunction, defineCachedRoute, deriveKey as deriveCacheKey, deserializeResponse, executeWebRequest, extractAppResources, extractUniversalIssues, getCacheControlHeader, getCacheEngine, handleChannelWebhook, handleMcpStdioLine, initCacheEngine, isActionError, isChannelPath, isInputError, loadEnv, parseChannelPath, parseRequestBody, readAppResource, resolveRouteRule, revalidatePath, revalidateTag, serializeResponse, serveMcpStdio, updateTag, validateExpire as validateCacheExpire, validateMaxAge as validateCacheMaxAge, validateTags as validateCacheTags, validateRouteInput };

package/dist/server/index.js

@@ -59,8 +59,9 @@ import {
   loadEnv,
   readAppResource,
   resolveTransformer,
-  superjsonTransformer
-} from "../chunk-W4YO6S4I.js";
+  superjsonTransformer,
+  validateRouteInput
+} from "../chunk-FO2KMFAE.js";
 import {
   findSuggestion,
   levenshtein
@@ -167,22 +168,15 @@ import "../chunk-X2VVCJ4V.js";
 import {
   action,
   applyTransform,
-  defineAction,
   defineAgentTool,
   defineChannel,
-  defineMiddleware,
-  definePlugin,
-  defineRoute,
-  defineTheoPlugin,
   defineWebChannel,
-  defineWebSocket,
-  defineWebSocketWeb,
   middleware,
   plugin,
   route,
   tool,
   websocket
-} from "../chunk-WLKFWVOM.js";
+} from "../chunk-5PY3QPVM.js";
 import {
   uiMessageStreamResponse
 } from "../chunk-JZHT3LW7.js";
@@ -1335,7 +1329,7 @@ async function handleMcpStdioLine(line, mod, name, appResources = []) {
       error: { code: -32700, message: "Parse error" }
     });
   }
-  const response = handleMcpJsonRpc(mod, name, body, appResources);
+  const response = await handleMcpJsonRpc(mod, name, body, appResources);
   const payload = await response.json();
   return JSON.stringify(payload);
 }
@@ -1356,6 +1350,57 @@ function deserializeResponse(serialized) {
   return superjson.deserialize(serialized);
 }
 
+// src/server/http/in-process-caller.ts
+var ProcedureInputError = class extends Error {
+  channel;
+  issues;
+  constructor(channel, error) {
+    super(`Invalid ${channel} for in-process procedure call: ${error.message}`);
+    this.name = "ProcedureInputError";
+    this.channel = channel;
+    this.issues = error.issues;
+  }
+};
+var ProcedureOutputError = class extends Error {
+  issues;
+  constructor(error) {
+    super(`In-process procedure output failed its response schema: ${error.message}`);
+    this.name = "ProcedureOutputError";
+    this.issues = error.issues;
+  }
+};
+function inProcessRequest() {
+  return new Request("theo://in-process/procedure", { method: "POST" });
+}
+async function callProcedure(config, input = {}, ctx) {
+  const validated = validateRouteInput(config, input);
+  if (!validated.ok) throw new ProcedureInputError(validated.channel, validated.error);
+  const result = await config.handler({
+    query: validated.query,
+    body: validated.body,
+    params: validated.params,
+    request: inProcessRequest(),
+    ctx
+  });
+  const responseSchema = config.response;
+  if (responseSchema !== void 0 && !(result instanceof Response)) {
+    const parsed = responseSchema.safeParse(result);
+    if (!parsed.success) throw new ProcedureOutputError(parsed.error);
+    return parsed.data;
+  }
+  return result;
+}
+
+// src/server/http/ctx-reconciliation.ts
+var CTX_WRITERS = {
+  /** Writer 1 — user `context.ts` factory. THE typed surface (`TCtx`). execute.ts:131 */
+  contextFactory: "context.ts",
+  /** Writer 2 — plugin `decorateRequest`. Untyped on the route surface. execute.ts:124,136 */
+  pluginDecorations: "pluginRunner.applyDecorations",
+  /** Writer 3 — jobs backend `ctx.queue`. Reached via JobsAugmentedCtx, not TCtx. execute.ts:141-150 */
+  jobsQueue: "jobBackend"
+};
+
 // src/server/index.ts
 if (typeof globalThis !== "undefined") {
   const WARN_KEY = "__theokit_server_umbrella_warn_emitted__";
@@ -1386,6 +1431,7 @@ export {
   CSRF_READINESS_RESET_PATH,
   CSRF_WARN_CODE,
   CSRF_WARN_DOCS_URL,
+  CTX_WRITERS,
   ChannelManager,
   CodeModePermissionDeniedError,
   ConsoleObservabilityAdapter,
@@ -1417,6 +1463,8 @@ export {
   NotFoundError,
   PluginRunner,
   PostgresJobBackend,
+  ProcedureInputError,
+  ProcedureOutputError,
   READY_PATH,
   STRIPPED_HEADERS,
   SpanImpl,
@@ -1441,6 +1489,7 @@ export {
   buildJobManifest,
   buildResourceDescriptors,
   buildSecurityHeaders,
+  callProcedure,
   checkThrottle,
   clearOidcCache,
   compilePattern,
@@ -1472,8 +1521,6 @@ export {
   createViteLoader,
   createWorkflowTool,
   decrypt,
-  defineAction,
-  defineAgentTool,
   defineAppResource,
   defineCachedFunction,
   defineCachedRoute,
@@ -1481,15 +1528,9 @@ export {
   defineCron,
   defineHealthRoute,
   defineJob,
-  defineMiddleware,
   defineObservabilityAdapter,
-  definePlugin,
   defineReadyRoute,
-  defineRoute,
-  defineTheoPlugin,
   defineWebChannel,
-  defineWebSocket,
-  defineWebSocketWeb,
   defineWebhook,
   deleteCookie,
   deriveKey2 as deriveCacheKey,
@@ -1605,6 +1646,7 @@ export {
   validateCronSchedule,
   validateCsrf,
   validateCsrfRequest,
+  validateRouteInput,
   verifyBackupCode,
   verifyOAuthState,
   verifyTotp,