theokit 0.21.0 → 0.22.1

package/dist/{agent-76WK2CZJ.js → agent-7IGDT55V.js}

@@ -3,7 +3,7 @@ import "tsx/esm";
 import {
   agentCommand,
   createAgentSsrLoader
-} from "./chunk-23T4CO4M.js";
+} from "./chunk-JITNAZXE.js";
 import "./chunk-M6NMS5LR.js";
 import "./chunk-GDN3PXFH.js";
 import "./chunk-TERFLG67.js";
@@ -12,4 +12,4 @@ export {
   agentCommand,
   createAgentSsrLoader
 };
-//# sourceMappingURL=agent-76WK2CZJ.js.map
+//# sourceMappingURL=agent-7IGDT55V.js.map

package/dist/{build-TBV4KVXI.js → build-G7WWVZTL.js}

@@ -531,7 +531,7 @@ async function buildCommand(options) {
 `);
 }
 async function runAdapterBuild(target, config, cwd) {
-  const { theoPluginAsync } = await import("./vite-plugin-3UDOJGO5.js");
+  const { theoPluginAsync } = await import("./vite-plugin-A7WGYEMD.js");
   const { default: react } = await import("@vitejs/plugin-react");
   const ctx = {
     // `react()` may return Plugin or Plugin[] depending on version; spread the
@@ -616,4 +616,4 @@ function relativize3(absPath, root) {
 export {
   buildCommand
 };
-//# sourceMappingURL=build-TBV4KVXI.js.map
+//# sourceMappingURL=build-G7WWVZTL.js.map

package/dist/chunk-2CVV6CNN.js

@@ -0,0 +1,174 @@
+#!/usr/bin/env node
+import "tsx/esm";
+
+// src/server/agent/mcp-app-resources.ts
+function buildResourceDescriptors(resources) {
+  return resources.map((r) => ({
+    uri: r.uri,
+    name: r.name,
+    mimeType: r.mimeType,
+    ...r.description !== void 0 ? { description: r.description } : {}
+  }));
+}
+function readAppResource(resources, uri) {
+  const found = resources.find((r) => r.uri === uri);
+  if (!found) return null;
+  return { contents: [{ uri: found.uri, mimeType: "text/html", text: found.html }] };
+}
+function isAppResource(v) {
+  if (typeof v !== "object" || v === null) return false;
+  const r = v;
+  return typeof r.uri === "string" && r.uri.startsWith("ui://") && r.mimeType === "text/html" && typeof r.html === "string";
+}
+function extractAppResources(mod) {
+  const raw = mod?.appResources;
+  if (!Array.isArray(raw)) return [];
+  return raw.filter(isAppResource);
+}
+
+// src/server/agent/mcp-handler.ts
+import { compileAgentModule } from "@theokit/agents";
+var MCP_PATH = /^\/api\/agents\/([^/]+)\/mcp$/;
+var MCP_PROTOCOL_VERSION = "2025-06-18";
+function toolDescriptors(tools) {
+  return tools.map((t) => ({
+    name: t.name,
+    description: t.description,
+    // The compiled tool already carries a JSON Schema (via `z.toJSONSchema()` in defineAgentTool).
+    // Fall back to a permissive object only when a tool genuinely declared no schema.
+    inputSchema: t.inputSchema && typeof t.inputSchema === "object" ? t.inputSchema : { type: "object", properties: {} }
+  }));
+}
+function isMcpPath(urlPath) {
+  const match = MCP_PATH.exec(urlPath);
+  return match ? decodeURIComponent(match[1]) : null;
+}
+function isJsonRpcRequest(body) {
+  return typeof body === "object" && body !== null && body.jsonrpc === "2.0" && typeof body.method === "string";
+}
+function jsonResponse(payload) {
+  return new Response(JSON.stringify(payload), {
+    status: 200,
+    headers: { "content-type": "application/json; charset=utf-8" }
+  });
+}
+async function callTool(tools, toolName, args, hitl) {
+  if (typeof toolName !== "string") {
+    return {
+      content: [{ type: "text", text: "tools/call requires a string `name`." }],
+      isError: true
+    };
+  }
+  const tool = tools.find((t) => t.name === toolName);
+  if (!tool) {
+    return { content: [{ type: "text", text: `Unknown tool: ${toolName}` }], isError: true };
+  }
+  if (hitl?.has(toolName)) {
+    return {
+      content: [
+        {
+          type: "text",
+          text: `Tool "${toolName}" requires human approval, which is not available over MCP. Refused.`
+        }
+      ],
+      isError: true
+    };
+  }
+  try {
+    const result = await tool.handler(args);
+    const text = typeof result === "string" ? result : JSON.stringify(result);
+    return { content: [{ type: "text", text }] };
+  } catch (err) {
+    return {
+      content: [
+        { type: "text", text: err instanceof Error ? err.message : "Tool execution failed" }
+      ],
+      isError: true
+    };
+  }
+}
+function handleResourcesRead(id, params, appResources) {
+  const uri = params?.uri;
+  if (typeof uri !== "string") {
+    return jsonResponse({
+      jsonrpc: "2.0",
+      id,
+      error: { code: -32602, message: "resources/read requires a string `uri` param." }
+    });
+  }
+  const contents = readAppResource(appResources, uri);
+  if (contents === null) {
+    return jsonResponse({
+      jsonrpc: "2.0",
+      id,
+      error: { code: -32602, message: `Resource not found: ${uri}` }
+    });
+  }
+  return jsonResponse({ jsonrpc: "2.0", id, result: contents });
+}
+async function handleMcpJsonRpc(mod, name, body, appResources = []) {
+  if (!isJsonRpcRequest(body)) {
+    return jsonResponse({
+      jsonrpc: "2.0",
+      id: null,
+      error: { code: -32600, message: "Invalid Request" }
+    });
+  }
+  const { id, method, params } = body;
+  try {
+    const compiled = compileAgentModule(mod, `mcp server for "${name}"`);
+    if (method === "initialize") {
+      const capabilities = { tools: {} };
+      if (appResources.length > 0) capabilities.resources = {};
+      return jsonResponse({
+        jsonrpc: "2.0",
+        id,
+        result: {
+          protocolVersion: MCP_PROTOCOL_VERSION,
+          capabilities,
+          serverInfo: { name, version: "1.0" }
+        }
+      });
+    }
+    if (method === "tools/list") {
+      return jsonResponse({
+        jsonrpc: "2.0",
+        id,
+        result: { tools: toolDescriptors(compiled.tools) }
+      });
+    }
+    if (method === "tools/call") {
+      const p = params;
+      const result = await callTool(compiled.tools, p?.name, p?.arguments ?? {}, compiled.hitl);
+      return jsonResponse({ jsonrpc: "2.0", id, result });
+    }
+    if (method === "resources/list") {
+      return jsonResponse({
+        jsonrpc: "2.0",
+        id,
+        result: { resources: buildResourceDescriptors(appResources) }
+      });
+    }
+    if (method === "resources/read") {
+      return handleResourcesRead(id, params, appResources);
+    }
+    return jsonResponse({
+      jsonrpc: "2.0",
+      id,
+      error: { code: -32601, message: `Method not found: ${method}` }
+    });
+  } catch (err) {
+    return jsonResponse({
+      jsonrpc: "2.0",
+      id,
+      error: { code: -32603, message: err instanceof Error ? err.message : "Internal error" }
+    });
+  }
+}
+
+export {
+  extractAppResources,
+  isMcpPath,
+  handleMcpJsonRpc
+};
+//# sourceMappingURL=chunk-2CVV6CNN.js.map

package/dist/chunk-2CVV6CNN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/agent/mcp-app-resources.ts","../src/server/agent/mcp-handler.ts"],"sourcesContent":["/**\n * M30 (ADR-0041) — MCP Apps: `ui://` HTML resources for the MCP server (M16).\n *\n * A tool can declare a `ui://` HTML resource; the MCP server advertises it via `resources/list` and\n * serves the HTML via `resources/read`. The client renders it in a SANDBOXED iframe (see\n * `mcp-app-host.ts`). Pure data transforms here — no LLM, no runtime (ADR-0040 § D2 home concern).\n *\n * Security: only the `ui://` scheme is accepted (an app UI resource), never `http(s)://` — the HTML\n * is rendered sandboxed on the client, and the scheme gate keeps a tool from smuggling a remote URL\n * into the app surface.\n */\n\n/** A declared `ui://` app resource. */\nexport interface AppResource {\n  uri: string\n  name: string\n  mimeType: 'text/html'\n  html: string\n  description?: string\n}\n\n/** Input to {@link defineAppResource}. */\nexport interface AppResourceInput {\n  /** MUST start with `ui://`. */\n  uri: string\n  name: string\n  html: string\n  description?: string\n}\n\n/** An MCP `resources/list` descriptor (no HTML body — that comes from `resources/read`). */\nexport interface McpResourceDescriptor {\n  uri: string\n  name: string\n  mimeType: 'text/html'\n  description?: string\n}\n\n/** An MCP `resources/read` result. */\nexport interface McpResourceContents {\n  contents: { uri: string; mimeType: 'text/html'; text: string }[]\n}\n\n/**\n * Declare a `ui://` HTML app resource. Fails fast if the uri is not a `ui://` scheme or the HTML is\n * empty (error-handling.md) — a misconfigured resource is caught at definition time.\n */\nexport function defineAppResource(input: AppResourceInput): AppResource {\n  if (!input.uri.startsWith('ui://')) {\n    throw new Error(\n      `defineAppResource: uri must use the ui:// scheme (an app UI resource). Got: ${JSON.stringify(input.uri)}`,\n    )\n  }\n  if (input.html.length === 0) {\n    throw new Error(`defineAppResource(${JSON.stringify(input.uri)}): html must be non-empty.`)\n  }\n  return {\n    uri: input.uri,\n    name: input.name,\n    mimeType: 'text/html',\n    html: input.html,\n    ...(input.description !== undefined ? { description: input.description } : {}),\n  }\n}\n\n/** Map app resources to MCP `resources/list` descriptors (the HTML body is omitted from the list). */\nexport function buildResourceDescriptors(\n  resources: readonly AppResource[],\n): McpResourceDescriptor[] {\n  return resources.map((r) => ({\n    uri: r.uri,\n    name: r.name,\n    mimeType: r.mimeType,\n    ...(r.description !== undefined ? { description: r.description } : {}),\n  }))\n}\n\n/** Serve the HTML for `uri` as an MCP `resources/read` result, or `null` when unknown. */\nexport function readAppResource(\n  resources: readonly AppResource[],\n  uri: string,\n): McpResourceContents | null {\n  const found = resources.find((r) => r.uri === uri)\n  if (!found) return null\n  return { contents: [{ uri: found.uri, mimeType: 'text/html', text: found.html }] }\n}\n\n/** True when `v` is a well-formed {@link AppResource} (from `defineAppResource`). */\nfunction isAppResource(v: unknown): v is AppResource {\n  if (typeof v !== 'object' || v === null) return false\n  const r = v as Record<string, unknown>\n  return (\n    typeof r.uri === 'string' &&\n    r.uri.startsWith('ui://') &&\n    r.mimeType === 'text/html' &&\n    typeof r.html === 'string'\n  )\n}\n\n/**\n * M30 wiring — extract the App resources an agent module declares via a named `appResources` export\n * (`export const appResources = [defineAppResource(...)]`). Returns only the well-formed entries; a\n * module without the export (or with a malformed one) yields `[]`. This is how per-agent `ui://`\n * resources reach the MCP server's `resources/list` + `resources/read` without a runtime dependency\n * from `@theokit/agents` on this theo-side type (the module exports them; the serving path reads them).\n */\nexport function extractAppResources(mod: unknown): AppResource[] {\n  const raw = (mod as { appResources?: unknown } | null | undefined)?.appResources\n  if (!Array.isArray(raw)) return []\n  return raw.filter(isAppResource)\n}\n","/**\n * M16 (theokit-ai-first) — serve an agent as an MCP server over HTTP at `/api/agents/<name>/mcp`.\n *\n * Answers the two core MCP methods over JSON-RPC 2.0: `initialize` (server info + capabilities) and\n * `tools/list` (the agent's tools as MCP descriptors, via `buildMcpToolDescriptors`). M30 adds\n * `resources/list` + `resources/read` for `ui://` App resources. Unknown methods return `-32601`\n * (method not found). Web Standards Response (G8). The stdio transport + full method set stay\n * SDK-side (sdk-runtime.md); this exposes the agent over the app's own HTTP route.\n */\nimport { type CompiledTool, compileAgentModule } from '@theokit/agents'\n\nimport { type AppResource, buildResourceDescriptors, readAppResource } from './mcp-app-resources.js'\n\nconst MCP_PATH = /^\\/api\\/agents\\/([^/]+)\\/mcp$/\n\n/**\n * The MCP protocol revision THIS server transport implements (M34). The protocol version is a\n * property of the server that speaks it (this handler), not of the manifest data generator — so the\n * handler owns it. Current MCP revision (`2025-06-18`); replaces the stale `2024-11-05` the manifest\n * generator carried.\n */\nconst MCP_PROTOCOL_VERSION = '2025-06-18'\n\n/** An MCP `tools/list` descriptor with the tool's REAL input schema retained (M34 — no longer dropped). */\ninterface McpToolDescriptor {\n  name: string\n  description: string\n  inputSchema: Record<string, unknown>\n}\n\n/** Build tool descriptors from the compiled tools, retaining each tool's real JSON-Schema input (M34). */\nfunction toolDescriptors(tools: readonly CompiledTool[]): McpToolDescriptor[] {\n  return tools.map((t) => ({\n    name: t.name,\n    description: t.description,\n    // The compiled tool already carries a JSON Schema (via `z.toJSONSchema()` in defineAgentTool).\n    // Fall back to a permissive object only when a tool genuinely declared no schema.\n    inputSchema:\n      t.inputSchema && typeof t.inputSchema === 'object'\n        ? (t.inputSchema as Record<string, unknown>)\n        : { type: 'object', properties: {} },\n  }))\n}\n\n/** An MCP `CallToolResult` — `content[]` + `isError` (the shape MCP clients expect). */\ninterface CallToolResult {\n  content: { type: 'text'; text: string }[]\n  isError?: boolean\n}\n\n/** Return the agent name when `urlPath` is the MCP endpoint, else `null`. */\nexport function isMcpPath(urlPath: string): string | null {\n  const match = MCP_PATH.exec(urlPath)\n  return match ? decodeURIComponent(match[1]) : null\n}\n\ninterface JsonRpcRequest {\n  jsonrpc: '2.0'\n  id: number | string | null\n  method: string\n  params?: unknown\n}\n\nfunction isJsonRpcRequest(body: unknown): body is JsonRpcRequest {\n  return (\n    typeof body === 'object' &&\n    body !== null &&\n    (body as { jsonrpc?: unknown }).jsonrpc === '2.0' &&\n    typeof (body as { method?: unknown }).method === 'string'\n  )\n}\n\nfunction jsonResponse(payload: unknown): Response {\n  return new Response(JSON.stringify(payload), {\n    status: 200,\n    headers: { 'content-type': 'application/json; charset=utf-8' },\n  })\n}\n\n/**\n * Execute an MCP `tools/call` against the compiled tools (M34). Finds the tool by name, runs its\n * handler with the supplied `arguments`, and shapes the result into a `CallToolResult`. An unknown\n * tool or a throwing handler yields `{ isError: true }` (MCP convention — the model sees the failure)\n * rather than a JSON-RPC crash.\n */\nasync function callTool(\n  tools: readonly CompiledTool[],\n  toolName: unknown,\n  args: unknown,\n  hitl?: ReadonlyMap<string, unknown>,\n): Promise<CallToolResult> {\n  if (typeof toolName !== 'string') {\n    return {\n      content: [{ type: 'text', text: 'tools/call requires a string `name`.' }],\n      isError: true,\n    }\n  }\n  const tool = tools.find((t) => t.name === toolName)\n  if (!tool) {\n    return { content: [{ type: 'text', text: `Unknown tool: ${toolName}` }], isError: true }\n  }\n  // #99 — REFUSE a HITL-gated tool. The approval gate (`compiled.hitl`) lives in the SDK run-loop,\n  // not in the raw tool handler; executing the handler here would BYPASS the human approval the web/\n  // TUI surfaces enforce. Over MCP there is no approval mechanism, so a gated tool is not callable —\n  // return an error result instead of running it unguarded (fail-closed, Rule 8).\n  if (hitl?.has(toolName)) {\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `Tool \"${toolName}\" requires human approval, which is not available over MCP. Refused.`,\n        },\n      ],\n      isError: true,\n    }\n  }\n  try {\n    const result = await tool.handler(args)\n    const text = typeof result === 'string' ? result : JSON.stringify(result)\n    return { content: [{ type: 'text', text }] }\n  } catch (err) {\n    return {\n      content: [\n        { type: 'text', text: err instanceof Error ? err.message : 'Tool execution failed' },\n      ],\n      isError: true,\n    }\n  }\n}\n\n/** `resources/read` (M30) — extracted to keep `handleMcpJsonRpc` within the complexity budget. */\nfunction handleResourcesRead(\n  id: number | string | null,\n  params: unknown,\n  appResources: readonly AppResource[],\n): Response {\n  const uri = (params as { uri?: unknown } | undefined)?.uri\n  if (typeof uri !== 'string') {\n    return jsonResponse({\n      jsonrpc: '2.0',\n      id,\n      error: { code: -32602, message: 'resources/read requires a string `uri` param.' },\n    })\n  }\n  const contents = readAppResource(appResources, uri)\n  if (contents === null) {\n    return jsonResponse({\n      jsonrpc: '2.0',\n      id,\n      error: { code: -32602, message: `Resource not found: ${uri}` },\n    })\n  }\n  return jsonResponse({ jsonrpc: '2.0', id, result: contents })\n}\n\n/**\n * Handle one MCP JSON-RPC request for an agent module. Always returns a 200 JSON-RPC envelope.\n *\n * M30 — `appResources` (optional) are the agent's declared `ui://` App resources; when present the\n * server advertises `capabilities.resources` and answers `resources/list` + `resources/read`.\n */\nexport async function handleMcpJsonRpc(\n  mod: unknown,\n  name: string,\n  body: unknown,\n  appResources: readonly AppResource[] = [],\n): Promise<Response> {\n  if (!isJsonRpcRequest(body)) {\n    return jsonResponse({\n      jsonrpc: '2.0',\n      id: null,\n      error: { code: -32600, message: 'Invalid Request' },\n    })\n  }\n  const { id, method, params } = body\n  try {\n    const compiled = compileAgentModule(mod, `mcp server for \"${name}\"`)\n    if (method === 'initialize') {\n      const capabilities: Record<string, unknown> = { tools: {} }\n      if (appResources.length > 0) capabilities.resources = {}\n      return jsonResponse({\n        jsonrpc: '2.0',\n        id,\n        result: {\n          protocolVersion: MCP_PROTOCOL_VERSION,\n          capabilities,\n          serverInfo: { name, version: '1.0' },\n        },\n      })\n    }\n    if (method === 'tools/list') {\n      return jsonResponse({\n        jsonrpc: '2.0',\n        id,\n        result: { tools: toolDescriptors(compiled.tools) },\n      })\n    }\n    if (method === 'tools/call') {\n      const p = params as { name?: unknown; arguments?: unknown } | undefined\n      const result = await callTool(compiled.tools, p?.name, p?.arguments ?? {}, compiled.hitl)\n      return jsonResponse({ jsonrpc: '2.0', id, result })\n    }\n    if (method === 'resources/list') {\n      return jsonResponse({\n        jsonrpc: '2.0',\n        id,\n        result: { resources: buildResourceDescriptors(appResources) },\n      })\n    }\n    if (method === 'resources/read') {\n      return handleResourcesRead(id, params, appResources)\n    }\n    return jsonResponse({\n      jsonrpc: '2.0',\n      id,\n      error: { code: -32601, message: `Method not found: ${method}` },\n    })\n  } catch (err) {\n    return jsonResponse({\n      jsonrpc: '2.0',\n      id,\n      error: { code: -32603, message: err instanceof Error ? err.message : 'Internal error' },\n    })\n  }\n}\n"],"mappings":";;;;AAkEO,SAAS,yBACd,WACyB;AACzB,SAAO,UAAU,IAAI,CAAC,OAAO;AAAA,IAC3B,KAAK,EAAE;AAAA,IACP,MAAM,EAAE;AAAA,IACR,UAAU,EAAE;AAAA,IACZ,GAAI,EAAE,gBAAgB,SAAY,EAAE,aAAa,EAAE,YAAY,IAAI,CAAC;AAAA,EACtE,EAAE;AACJ;AAGO,SAAS,gBACd,WACA,KAC4B;AAC5B,QAAM,QAAQ,UAAU,KAAK,CAAC,MAAM,EAAE,QAAQ,GAAG;AACjD,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,EAAE,UAAU,CAAC,EAAE,KAAK,MAAM,KAAK,UAAU,aAAa,MAAM,MAAM,KAAK,CAAC,EAAE;AACnF;AAGA,SAAS,cAAc,GAA8B;AACnD,MAAI,OAAO,MAAM,YAAY,MAAM,KAAM,QAAO;AAChD,QAAM,IAAI;AACV,SACE,OAAO,EAAE,QAAQ,YACjB,EAAE,IAAI,WAAW,OAAO,KACxB,EAAE,aAAa,eACf,OAAO,EAAE,SAAS;AAEtB;AASO,SAAS,oBAAoB,KAA6B;AAC/D,QAAM,MAAO,KAAuD;AACpE,MAAI,CAAC,MAAM,QAAQ,GAAG,EAAG,QAAO,CAAC;AACjC,SAAO,IAAI,OAAO,aAAa;AACjC;;;ACrGA,SAA4B,0BAA0B;AAItD,IAAM,WAAW;AAQjB,IAAM,uBAAuB;AAU7B,SAAS,gBAAgB,OAAqD;AAC5E,SAAO,MAAM,IAAI,CAAC,OAAO;AAAA,IACvB,MAAM,EAAE;AAAA,IACR,aAAa,EAAE;AAAA;AAAA;AAAA,IAGf,aACE,EAAE,eAAe,OAAO,EAAE,gBAAgB,WACrC,EAAE,cACH,EAAE,MAAM,UAAU,YAAY,CAAC,EAAE;AAAA,EACzC,EAAE;AACJ;AASO,SAAS,UAAU,SAAgC;AACxD,QAAM,QAAQ,SAAS,KAAK,OAAO;AACnC,SAAO,QAAQ,mBAAmB,MAAM,CAAC,CAAC,IAAI;AAChD;AASA,SAAS,iBAAiB,MAAuC;AAC/D,SACE,OAAO,SAAS,YAChB,SAAS,QACR,KAA+B,YAAY,SAC5C,OAAQ,KAA8B,WAAW;AAErD;AAEA,SAAS,aAAa,SAA4B;AAChD,SAAO,IAAI,SAAS,KAAK,UAAU,OAAO,GAAG;AAAA,IAC3C,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,kCAAkC;AAAA,EAC/D,CAAC;AACH;AAQA,eAAe,SACb,OACA,UACA,MACA,MACyB;AACzB,MAAI,OAAO,aAAa,UAAU;AAChC,WAAO;AAAA,MACL,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,uCAAuC,CAAC;AAAA,MACxE,SAAS;AAAA,IACX;AAAA,EACF;AACA,QAAM,OAAO,MAAM,KAAK,CAAC,MAAM,EAAE,SAAS,QAAQ;AAClD,MAAI,CAAC,MAAM;AACT,WAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,iBAAiB,QAAQ,GAAG,CAAC,GAAG,SAAS,KAAK;AAAA,EACzF;AAKA,MAAI,MAAM,IAAI,QAAQ,GAAG;AACvB,WAAO;AAAA,MACL,SAAS;AAAA,QACP;AAAA,UACE,MAAM;AAAA,UACN,MAAM,SAAS,QAAQ;AAAA,QACzB;AAAA,MACF;AAAA,MACA,SAAS;AAAA,IACX;AAAA,EACF;AACA,MAAI;AACF,UAAM,SAAS,MAAM,KAAK,QAAQ,IAAI;AACtC,UAAM,OAAO,OAAO,WAAW,WAAW,SAAS,KAAK,UAAU,MAAM;AACxE,WAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAQ,KAAK,CAAC,EAAE;AAAA,EAC7C,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,SAAS;AAAA,QACP,EAAE,MAAM,QAAQ,MAAM,eAAe,QAAQ,IAAI,UAAU,wBAAwB;AAAA,MACrF;AAAA,MACA,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAGA,SAAS,oBACP,IACA,QACA,cACU;AACV,QAAM,MAAO,QAA0C;AACvD,MAAI,OAAO,QAAQ,UAAU;AAC3B,WAAO,aAAa;AAAA,MAClB,SAAS;AAAA,MACT;AAAA,MACA,OAAO,EAAE,MAAM,QAAQ,SAAS,gDAAgD;AAAA,IAClF,CAAC;AAAA,EACH;AACA,QAAM,WAAW,gBAAgB,cAAc,GAAG;AAClD,MAAI,aAAa,MAAM;AACrB,WAAO,aAAa;AAAA,MAClB,SAAS;AAAA,MACT;AAAA,MACA,OAAO,EAAE,MAAM,QAAQ,SAAS,uBAAuB,GAAG,GAAG;AAAA,IAC/D,CAAC;AAAA,EACH;AACA,SAAO,aAAa,EAAE,SAAS,OAAO,IAAI,QAAQ,SAAS,CAAC;AAC9D;AAQA,eAAsB,iBACpB,KACA,MACA,MACA,eAAuC,CAAC,GACrB;AACnB,MAAI,CAAC,iBAAiB,IAAI,GAAG;AAC3B,WAAO,aAAa;AAAA,MAClB,SAAS;AAAA,MACT,IAAI;AAAA,MACJ,OAAO,EAAE,MAAM,QAAQ,SAAS,kBAAkB;AAAA,IACpD,CAAC;AAAA,EACH;AACA,QAAM,EAAE,IAAI,QAAQ,OAAO,IAAI;AAC/B,MAAI;AACF,UAAM,WAAW,mBAAmB,KAAK,mBAAmB,IAAI,GAAG;AACnE,QAAI,WAAW,cAAc;AAC3B,YAAM,eAAwC,EAAE,OAAO,CAAC,EAAE;AAC1D,UAAI,aAAa,SAAS,EAAG,cAAa,YAAY,CAAC;AACvD,aAAO,aAAa;AAAA,QAClB,SAAS;AAAA,QACT;AAAA,QACA,QAAQ;AAAA,UACN,iBAAiB;AAAA,UACjB;AAAA,UACA,YAAY,EAAE,MAAM,SAAS,MAAM;AAAA,QACrC;AAAA,MACF,CAAC;AAAA,IACH;AACA,QAAI,WAAW,cAAc;AAC3B,aAAO,aAAa;AAAA,QAClB,SAAS;AAAA,QACT;AAAA,QACA,QAAQ,EAAE,OAAO,gBAAgB,SAAS,KAAK,EAAE;AAAA,MACnD,CAAC;AAAA,IACH;AACA,QAAI,WAAW,cAAc;AAC3B,YAAM,IAAI;AACV,YAAM,SAAS,MAAM,SAAS,SAAS,OAAO,GAAG,MAAM,GAAG,aAAa,CAAC,GAAG,SAAS,IAAI;AACxF,aAAO,aAAa,EAAE,SAAS,OAAO,IAAI,OAAO,CAAC;AAAA,IACpD;AACA,QAAI,WAAW,kBAAkB;AAC/B,aAAO,aAAa;AAAA,QAClB,SAAS;AAAA,QACT;AAAA,QACA,QAAQ,EAAE,WAAW,yBAAyB,YAAY,EAAE;AAAA,MAC9D,CAAC;AAAA,IACH;AACA,QAAI,WAAW,kBAAkB;AAC/B,aAAO,oBAAoB,IAAI,QAAQ,YAAY;AAAA,IACrD;AACA,WAAO,aAAa;AAAA,MAClB,SAAS;AAAA,MACT;AAAA,MACA,OAAO,EAAE,MAAM,QAAQ,SAAS,qBAAqB,MAAM,GAAG;AAAA,IAChE,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,aAAa;AAAA,MAClB,SAAS;AAAA,MACT;AAAA,MACA,OAAO,EAAE,MAAM,QAAQ,SAAS,eAAe,QAAQ,IAAI,UAAU,iBAAiB;AAAA,IACxF,CAAC;AAAA,EACH;AACF;","names":[]}

package/dist/{chunk-3WOODHXK.js → chunk-AYZCGJXA.js}

@@ -10,10 +10,10 @@ import {
   resolveTransformer,
   serveAgentAuxRoute,
   writeWebResponseToServerResponse
-} from "./chunk-DXF64KS5.js";
+} from "./chunk-LGVVX3BV.js";
 import {
   isMcpPath
-} from "./chunk-DMC6HYUR.js";
+} from "./chunk-2CVV6CNN.js";
 import {
   getApprovalRegistry,
   resolveProvider
@@ -453,7 +453,8 @@ async function serveAux(req, res, next, urlPath, deps) {
     const response = await serveAgentAuxRoute(request, urlPath, {
       agents: scanAgents(deps.projectRoot, deps.agentsDir),
       loadModule: deps.loadModule,
-      baseUrl: `http://${req.headers.host ?? "localhost"}`
+      baseUrl: `http://${req.headers.host ?? "localhost"}`,
+      csrfMode: deps.csrfMode
     });
     if (response === null) {
       next();
@@ -486,7 +487,12 @@ function createAgentMiddleware(vite, projectRoot, csrfMode = "strict", agentsDir
     void (async () => {
       const url = req.url ?? "";
       if (isAgentCardPath(url.split("?")[0]) !== null) {
-        await serveAux(req, res, next, url.split("?")[0], { projectRoot, loadModule, agentsDir });
+        await serveAux(req, res, next, url.split("?")[0], {
+          projectRoot,
+          loadModule,
+          agentsDir,
+          csrfMode
+        });
         return;
       }
       if (!url.startsWith(PREFIX2)) {
@@ -502,7 +508,7 @@ function createAgentMiddleware(vite, projectRoot, csrfMode = "strict", agentsDir
         return;
       }
       if (isListApprovalsPath(urlPath) !== null || isMcpPath(urlPath) !== null) {
-        await serveAux(req, res, next, urlPath, { projectRoot, loadModule, agentsDir });
+        await serveAux(req, res, next, urlPath, { projectRoot, loadModule, agentsDir, csrfMode });
         return;
       }
       const agent = scanAgents(projectRoot, agentsDir).find((a) => a.agentPath === urlPath);
@@ -2096,4 +2102,4 @@ export {
   theoPluginAsync,
   theoPlugin
 };
-//# sourceMappingURL=chunk-3WOODHXK.js.map
+//# sourceMappingURL=chunk-AYZCGJXA.js.map