theokit 0.30.1 → 0.30.3

package/dist/{actions-virtual-module-PBLLMJY4.js → actions-virtual-module-XHVLBFNN.js}

@@ -1,5 +1,8 @@
 import "./chunk-RSVN727G.js";
+import "./chunk-TGTNRUH3.js";
+import "./chunk-GY5Q27BJ.js";
 import "./chunk-5QW7IQQU.js";
+import "./chunk-WFNLNIJX.js";
 import "./chunk-IAJ2JVEH.js";
 import "./chunk-VMEWD57H.js";
 import "./chunk-JQSKBMXP.js";
@@ -7,17 +10,14 @@ import {
   scanServerActionsEnriched
 } from "./chunk-RKDH4DWL.js";
 import "./chunk-WSJKACWB.js";
-import "./chunk-JBCHWRKF.js";
-import "./chunk-C3ZZ56YZ.js";
-import "./chunk-X2VVCJ4V.js";
-import "./chunk-TGTNRUH3.js";
-import "./chunk-GY5Q27BJ.js";
-import "./chunk-WFNLNIJX.js";
 import "./chunk-ZEGYW52B.js";
+import "./chunk-JBCHWRKF.js";
 import "./chunk-TSLSIRBR.js";
 import "./chunk-UD3LFGDL.js";
 import "./chunk-X32XEJXR.js";
 import "./chunk-UVXB2ER7.js";
+import "./chunk-C3ZZ56YZ.js";
+import "./chunk-X2VVCJ4V.js";
 import "./chunk-DGUM43GV.js";
 
 // src/vite-plugin/actions-virtual-module.ts
@@ -221,4 +221,4 @@ export const actions = manifest
 export {
   actionsVirtualModule
 };
-//# sourceMappingURL=actions-virtual-module-PBLLMJY4.js.map
+//# sourceMappingURL=actions-virtual-module-XHVLBFNN.js.map

package/dist/{app-typed-client-EXHUWPOI.js → app-typed-client-4PAUHTO6.js}

@@ -1,5 +1,8 @@
 import "./chunk-RSVN727G.js";
+import "./chunk-TGTNRUH3.js";
+import "./chunk-GY5Q27BJ.js";
 import "./chunk-5QW7IQQU.js";
+import "./chunk-WFNLNIJX.js";
 import "./chunk-IAJ2JVEH.js";
 import "./chunk-VMEWD57H.js";
 import "./chunk-JQSKBMXP.js";
@@ -9,17 +12,14 @@ import {
 import {
   HTTP_METHODS
 } from "./chunk-WSJKACWB.js";
-import "./chunk-JBCHWRKF.js";
-import "./chunk-C3ZZ56YZ.js";
-import "./chunk-X2VVCJ4V.js";
-import "./chunk-TGTNRUH3.js";
-import "./chunk-GY5Q27BJ.js";
-import "./chunk-WFNLNIJX.js";
 import "./chunk-ZEGYW52B.js";
+import "./chunk-JBCHWRKF.js";
 import "./chunk-TSLSIRBR.js";
 import "./chunk-UD3LFGDL.js";
 import "./chunk-X32XEJXR.js";
 import "./chunk-UVXB2ER7.js";
+import "./chunk-C3ZZ56YZ.js";
+import "./chunk-X2VVCJ4V.js";
 import "./chunk-DGUM43GV.js";
 
 // src/vite-plugin/app-typed-client.ts
@@ -296,4 +296,4 @@ export {
   emitClientDts,
   generateClientDts
 };
-//# sourceMappingURL=app-typed-client-EXHUWPOI.js.map
+//# sourceMappingURL=app-typed-client-4PAUHTO6.js.map

package/dist/boot/index.js

@@ -1,6 +1,3 @@
-import {
-  serveReservedRoute
-} from "../chunk-V3LJN2GS.js";
 import {
   envelopeCodeToStatus
 } from "../chunk-X32XEJXR.js";
@@ -8,6 +5,9 @@ import {
   NotFoundError,
   serverErrorToEnvelope
 } from "../chunk-UVXB2ER7.js";
+import {
+  serveReservedRoute
+} from "../chunk-V3LJN2GS.js";
 import "../chunk-DGUM43GV.js";
 
 // src/server/boot.ts

package/dist/{chunk-UYFZ6DDW.js → chunk-4MTCKE5I.js}

@@ -146,48 +146,6 @@ function resolveTransformer(selector) {
   return selector;
 }
 
-// src/server/agent/mcp-app-resources.ts
-function defineAppResource(input) {
-  if (!input.uri.startsWith("ui://")) {
-    throw new Error(
-      `defineAppResource: uri must use the ui:// scheme (an app UI resource). Got: ${JSON.stringify(input.uri)}`
-    );
-  }
-  if (input.html.length === 0) {
-    throw new Error(`defineAppResource(${JSON.stringify(input.uri)}): html must be non-empty.`);
-  }
-  return {
-    uri: input.uri,
-    name: input.name,
-    mimeType: "text/html",
-    html: input.html,
-    ...input.description !== void 0 ? { description: input.description } : {}
-  };
-}
-function buildResourceDescriptors(resources) {
-  return resources.map((r) => ({
-    uri: r.uri,
-    name: r.name,
-    mimeType: r.mimeType,
-    ...r.description !== void 0 ? { description: r.description } : {}
-  }));
-}
-function readAppResource(resources, uri) {
-  const found = resources.find((r) => r.uri === uri);
-  if (!found) return null;
-  return { contents: [{ uri: found.uri, mimeType: "text/html", text: found.html }] };
-}
-function isAppResource(v) {
-  if (typeof v !== "object" || v === null) return false;
-  const r = v;
-  return typeof r.uri === "string" && r.uri.startsWith("ui://") && r.mimeType === "text/html" && typeof r.html === "string";
-}
-function extractAppResources(mod) {
-  const raw = mod?.appResources;
-  if (!Array.isArray(raw)) return [];
-  return raw.filter(isAppResource);
-}
-
 // src/server/http/validate-route-input.ts
 function validateRouteInput(config, raw) {
   let query = raw.query;
@@ -487,159 +445,13 @@ async function runErrorHooks(err, hookCtx, onError) {
   return mergeHookHeaders(errorResponse, hookCtx.responseHeaders);
 }
 
-// src/server/agent/mcp-handler.ts
-import { compileAgentModule } from "@theokit/agents";
-var MCP_PATH = /^\/api\/agents\/([^/]+)\/mcp$/;
-var MCP_PROTOCOL_VERSION = "2025-06-18";
-function toolDescriptors(tools) {
-  return tools.map((t) => ({
-    name: t.name,
-    description: t.description,
-    // The compiled tool already carries a JSON Schema (via `z.toJSONSchema()` in defineAgentTool).
-    // Fall back to a permissive object only when a tool genuinely declared no schema.
-    inputSchema: t.inputSchema && typeof t.inputSchema === "object" ? t.inputSchema : { type: "object", properties: {} }
-  }));
-}
-function isMcpPath(urlPath) {
-  const match = MCP_PATH.exec(urlPath);
-  return match ? decodeURIComponent(match[1]) : null;
-}
-function isJsonRpcRequest(body) {
-  return typeof body === "object" && body !== null && body.jsonrpc === "2.0" && typeof body.method === "string";
-}
-function jsonResponse(payload) {
-  return new Response(JSON.stringify(payload), {
-    status: 200,
-    headers: { "content-type": "application/json; charset=utf-8" }
-  });
-}
-async function callTool(tools, toolName, args, hitl) {
-  if (typeof toolName !== "string") {
-    return {
-      content: [{ type: "text", text: "tools/call requires a string `name`." }],
-      isError: true
-    };
-  }
-  const tool = tools.find((t) => t.name === toolName);
-  if (!tool) {
-    return { content: [{ type: "text", text: `Unknown tool: ${toolName}` }], isError: true };
-  }
-  if (hitl?.has(toolName)) {
-    return {
-      content: [
-        {
-          type: "text",
-          text: `Tool "${toolName}" requires human approval, which is not available over MCP. Refused.`
-        }
-      ],
-      isError: true
-    };
-  }
-  try {
-    const result = await tool.handler(args);
-    const text = typeof result === "string" ? result : JSON.stringify(result);
-    return { content: [{ type: "text", text }] };
-  } catch (err) {
-    return {
-      content: [
-        { type: "text", text: err instanceof Error ? err.message : "Tool execution failed" }
-      ],
-      isError: true
-    };
-  }
-}
-function handleResourcesRead(id, params, appResources) {
-  const uri = params?.uri;
-  if (typeof uri !== "string") {
-    return jsonResponse({
-      jsonrpc: "2.0",
-      id,
-      error: { code: -32602, message: "resources/read requires a string `uri` param." }
-    });
-  }
-  const contents = readAppResource(appResources, uri);
-  if (contents === null) {
-    return jsonResponse({
-      jsonrpc: "2.0",
-      id,
-      error: { code: -32602, message: `Resource not found: ${uri}` }
-    });
-  }
-  return jsonResponse({ jsonrpc: "2.0", id, result: contents });
-}
-async function handleMcpJsonRpc(mod, name, body, appResources = []) {
-  if (!isJsonRpcRequest(body)) {
-    return jsonResponse({
-      jsonrpc: "2.0",
-      id: null,
-      error: { code: -32600, message: "Invalid Request" }
-    });
-  }
-  const { id, method, params } = body;
-  try {
-    const compiled = compileAgentModule(mod, `mcp server for "${name}"`);
-    if (method === "initialize") {
-      const capabilities = { tools: {} };
-      if (appResources.length > 0) capabilities.resources = {};
-      return jsonResponse({
-        jsonrpc: "2.0",
-        id,
-        result: {
-          protocolVersion: MCP_PROTOCOL_VERSION,
-          capabilities,
-          serverInfo: { name, version: "1.0" }
-        }
-      });
-    }
-    if (method === "tools/list") {
-      return jsonResponse({
-        jsonrpc: "2.0",
-        id,
-        result: { tools: toolDescriptors(compiled.tools) }
-      });
-    }
-    if (method === "tools/call") {
-      const p = params;
-      const result = await callTool(compiled.tools, p?.name, p?.arguments ?? {}, compiled.hitl);
-      return jsonResponse({ jsonrpc: "2.0", id, result });
-    }
-    if (method === "resources/list") {
-      return jsonResponse({
-        jsonrpc: "2.0",
-        id,
-        result: { resources: buildResourceDescriptors(appResources) }
-      });
-    }
-    if (method === "resources/read") {
-      return handleResourcesRead(id, params, appResources);
-    }
-    return jsonResponse({
-      jsonrpc: "2.0",
-      id,
-      error: { code: -32601, message: `Method not found: ${method}` }
-    });
-  } catch (err) {
-    return jsonResponse({
-      jsonrpc: "2.0",
-      id,
-      error: { code: -32603, message: err instanceof Error ? err.message : "Internal error" }
-    });
-  }
-}
-
 export {
   _resetEnvCache,
   loadEnv,
   superjsonTransformer,
   jsonTransformer,
   resolveTransformer,
-  defineAppResource,
-  buildResourceDescriptors,
-  readAppResource,
-  extractAppResources,
-  isMcpPath,
-  handleMcpJsonRpc,
   validateRouteInput,
   executeWebRequest
 };
-//# sourceMappingURL=chunk-UYFZ6DDW.js.map
+//# sourceMappingURL=chunk-4MTCKE5I.js.map

package/dist/chunk-4MTCKE5I.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/config/load-env.ts","../src/server/transformer.ts","../src/server/http/validate-route-input.ts","../src/server/http/web-middleware-runner.ts","../src/server/web-handler.ts"],"sourcesContent":["/* eslint-disable security/detect-non-literal-fs-filename --\n * Reads `.env` files from a CLI-controlled `cwd`. File names are a fixed\n * literal set. Build-time + CLI tool; no HTTP input.\n */\n/**\n * `loadEnv()` — auto-loads `.env` files into `process.env` for server code.\n *\n * Implements the Next.js `loadEnvConfig` algorithm\n * (`referencias/next.js/packages/next-env/index.ts:114-180`) with TheoKit\n * adaptations:\n *\n * - EC-1: 1MB file-size cap (anti-OOM, anti-supply-chain).\n * - EC-2: `_resetEnvCache()` test-only side-door.\n * - EC-8: `dotenv-expand` circular-ref safe (lib-provided).\n * - EC-13: log when `.env` is a symlink (transparency).\n * - D6: real `process.env` wins over `.env`-file values.\n * - NODE_ENV stash: `.env`-set NODE_ENV NEVER overrides the real\n *   `process.env.NODE_ENV`. Stashed in `__THEOKIT_USER_NODE_ENV` instead.\n */\n\nimport { lstatSync, readFileSync, realpathSync, statSync } from 'node:fs'\nimport { resolve } from 'node:path'\n\nimport dotenv from 'dotenv'\nimport { expand, type DotenvPopulateInput } from 'dotenv-expand'\n\nimport type { LoadEnvOptions, LoadEnvResult } from './load-env-types.js'\n\n/** EC-1: 1MB cap. Real `.env`s are < 10KB. */\nconst MAX_ENV_FILE_BYTES = 1_048_576\n\nconst cache = new Map<string, LoadEnvResult>()\n\n/** Test-only side-door for EC-2 — clear the module-level cache between vitest test files. */\nexport function _resetEnvCache(): void {\n  cache.clear()\n}\n\nfunction envFilesInPriorityOrder(mode: string): string[] {\n  // Top of list = highest priority. Will be read in REVERSE so first-in\n  // wins via overwrite during merge.\n  const files = [`.env.${mode}.local`, `.env.local`, `.env.${mode}`, `.env`]\n  // Test mode skips `.env.local` per dotenv convention (avoid leaking dev\n  // secrets into the test suite).\n  if (mode === 'test') {\n    return files.filter((f) => f !== '.env.local')\n  }\n  return files\n}\n\nfunction readEnvFile(path: string): Record<string, string> | null {\n  let stat\n  try {\n    stat = statSync(path)\n  } catch {\n    return null // ENOENT / EACCES → skip\n  }\n\n  // Allow files + FIFOs (1Password/SOPS pipe support).\n  if (!stat.isFile() && !stat.isFIFO()) return null\n\n  // EC-1 — anti-OOM cap.\n  if (stat.size > MAX_ENV_FILE_BYTES) {\n    console.warn(\n      `[theokit] .env file at ${path} exceeds ${MAX_ENV_FILE_BYTES} bytes — skipping (likely a generated artifact, not a real env file)`,\n    )\n    return null\n  }\n\n  // EC-13 — symlink transparency. Don't refuse; just log.\n  try {\n    const lstat = lstatSync(path)\n    if (lstat.isSymbolicLink()) {\n      const real = realpathSync(path)\n      // eslint-disable-next-line no-console -- intentional transparency log on a build-time tool\n      console.info(`[theokit] .env at ${path} is a symlink → ${real}`)\n    }\n  } catch {\n    // lstat failure is non-fatal — fall through to read.\n  }\n\n  try {\n    const content = readFileSync(path, 'utf-8')\n    return dotenv.parse(content)\n  } catch {\n    return null\n  }\n}\n\n// eslint-disable-next-line complexity -- canonical env-load algorithm (priority → expand → guards → apply); inlining branches is clearer than extracting micro-helpers\nexport function loadEnv(options: LoadEnvOptions = {}): LoadEnvResult {\n  const cwd = options.cwd ?? process.cwd()\n  const mode = options.mode ?? process.env.NODE_ENV ?? 'development'\n  const cacheKey = `${cwd}:${mode}`\n\n  if (!options.forceReload) {\n    const cached = cache.get(cacheKey)\n    if (cached) return cached\n  }\n\n  const fileNames = envFilesInPriorityOrder(mode)\n  const filePaths = fileNames.map((f) => resolve(cwd, f))\n\n  // Read in REVERSE — lower-priority files first, so higher-priority\n  // (lower-index) overwrites during merge.\n  const merged: Record<string, string> = {}\n  const loadedFromFiles: string[] = []\n  for (const path of [...filePaths].reverse()) {\n    const parsed = readEnvFile(path)\n    if (parsed === null) continue\n    for (const [k, v] of Object.entries(parsed)) {\n      merged[k] = v\n    }\n    loadedFromFiles.unshift(path) // keep priority order in result\n  }\n\n  // NODE_ENV stash — `.env`-set NODE_ENV never overrides real process.env.NODE_ENV.\n  if (merged.NODE_ENV && process.env.__THEOKIT_USER_NODE_ENV === undefined) {\n    process.env.__THEOKIT_USER_NODE_ENV = merged.NODE_ENV\n  }\n  delete merged.NODE_ENV // never propagate\n\n  // EC-8 — dotenv-expand@11 stack-overflows on circular refs (A=${B}, B=${A}).\n  // Wrap in try/catch — on overflow, leave the parsed map untouched (literal\n  // values survive). Tested via test_loadEnv_circular_expand_no_loop_EC8.\n  // Pass a CLONE of process.env (string-only, filtered) so expand can\n  // reference real env without mutating it.\n  const processEnvClone: DotenvPopulateInput = {}\n  for (const [k, v] of Object.entries(process.env)) {\n    if (typeof v === 'string') processEnvClone[k] = v\n  }\n  try {\n    expand({ parsed: merged, processEnv: processEnvClone })\n  } catch (err) {\n    if (err instanceof RangeError) {\n      console.warn(\n        `[theokit] .env expansion overflow (likely circular reference like A=\\${B}, B=\\${A}). Leaving values as literals.`,\n      )\n    } else {\n      throw err\n    }\n  }\n\n  // Apply: D6 — real process.env wins over file values.\n  const loaded: Record<string, string> = {}\n  for (const [k, v] of Object.entries(merged)) {\n    if (process.env[k] !== undefined) continue // real env wins\n    process.env[k] = v\n    loaded[k] = v\n  }\n\n  // Sentinel\n  process.env.__THEOKIT_PROCESSED_ENV = 'true'\n\n  const result: LoadEnvResult = { loaded, loadedFromFiles }\n  cache.set(cacheKey, result)\n  return result\n}\n","import superjson from 'superjson'\n\n/**\n * T5.2 — pluggable response/request transformer.\n *\n * `superjson` is the default, preserving Date/Map/Set/BigInt/etc.\n * `json` is the lightweight option (plain JSON.stringify/parse).\n * Users can supply a custom object implementing this contract.\n */\nexport interface TheoTransformer {\n  name: string\n  serialize: (value: unknown) => string\n  deserialize: (raw: string) => unknown\n}\n\nexport const superjsonTransformer: TheoTransformer = {\n  name: 'superjson',\n  serialize: (v) => JSON.stringify(superjson.serialize(v)),\n  deserialize: (raw) => {\n    const parsed = JSON.parse(raw) as Parameters<typeof superjson.deserialize>[0]\n    return superjson.deserialize(parsed)\n  },\n}\n\nexport const jsonTransformer: TheoTransformer = {\n  name: 'json',\n  serialize: (v) => JSON.stringify(v),\n  deserialize: (raw) => JSON.parse(raw) as unknown,\n}\n\nconst BUILT_INS: Record<string, TheoTransformer> = {\n  superjson: superjsonTransformer,\n  json: jsonTransformer,\n}\n\nexport function resolveTransformer(\n  selector: 'json' | 'superjson' | TheoTransformer,\n): TheoTransformer {\n  if (typeof selector === 'string') {\n    // selector is 'json' | 'superjson' literal — both keys exist in\n    // BUILT_INS by construction. Type system guarantees a hit; we keep\n    // a defensive fallback that the compiler cannot see is unreachable\n    // at runtime, just in case someone adds a new literal to the union\n    // but forgets to register the built-in.\n    const built = BUILT_INS[selector]\n    // Defensive: the public union ensures `built` is defined, but if a\n    // future contributor extends the union without registering the impl,\n    // the cast keeps the failure mode loud.\n    if ((built as TheoTransformer | undefined) === undefined) {\n      throw new Error(\n        `Unknown transformer \"${selector}\". Built-in options: ${Object.keys(BUILT_INS).join(', ')}.`,\n      )\n    }\n    return built\n  }\n  if (\n    typeof selector !== 'object' ||\n    typeof selector.serialize !== 'function' ||\n    typeof selector.deserialize !== 'function'\n  ) {\n    throw new Error(\n      `Custom transformer must have serialize and deserialize functions. Got: ${JSON.stringify(selector)}`,\n    )\n  }\n  return selector\n}\n","/**\n * M33 — the SINGLE route-input validation pipeline, shared by the HTTP path (`web-handler.ts`\n * `runHandler`) and the in-process caller (`in-process-caller.ts` `callProcedure`).\n *\n * Both surfaces validate the same three channels (`query`/`body`/`params`) against the same\n * `RouteConfig` Zod schemas. Extracting the logic here means there is ONE validation pipeline\n * (no duplication, no drift) — each caller only differs in how it MAPS a failure: the HTTP path\n * emits a 400 Response, the in-process path throws a typed error.\n */\nimport type { z } from 'zod'\n\n/** The three request-input channels a route may declare a Zod schema for. */\nexport type RouteInputChannel = 'query' | 'body' | 'params'\n\n/**\n * The minimal structural shape the validator needs: the three optional channel schemas. Both\n * `RouteConfig` (the 5-arity generic contract) and `WebRouteHandlerConfig` (the Web runtime shape)\n * satisfy this — the validator depends only on the schemas, not the full route generic.\n */\nexport interface RouteInputSchemas {\n  query?: z.ZodType\n  body?: z.ZodType\n  params?: z.ZodType\n}\n\n/** Raw (pre-validation) channel values. A channel absent from the config passes through unchanged. */\nexport interface RawRouteInput {\n  query?: unknown\n  body?: unknown\n  params?: unknown\n}\n\n/** Discriminated result — each caller maps `ok:false` to its own surface (Response vs throw). */\nexport type RouteInputValidation =\n  | { ok: true; query: unknown; body: unknown; params: unknown }\n  | { ok: false; channel: RouteInputChannel; error: z.ZodError }\n\n/**\n * Validate the three input channels against the route's declared Zod schemas. A channel with no\n * declared schema passes its raw value through. First failing channel short-circuits (query → body\n * → params order, matching `runHandler`).\n */\nexport function validateRouteInput(\n  config: RouteInputSchemas,\n  raw: RawRouteInput,\n): RouteInputValidation {\n  let query: unknown = raw.query\n  if (config.query !== undefined) {\n    const parsed = config.query.safeParse(raw.query)\n    if (!parsed.success) return { ok: false, channel: 'query', error: parsed.error }\n    query = parsed.data\n  }\n  let body: unknown = raw.body\n  if (config.body !== undefined) {\n    const parsed = config.body.safeParse(raw.body)\n    if (!parsed.success) return { ok: false, channel: 'body', error: parsed.error }\n    body = parsed.data\n  }\n  let params: unknown = raw.params\n  if (config.params !== undefined) {\n    const parsed = config.params.safeParse(raw.params)\n    if (!parsed.success) return { ok: false, channel: 'params', error: parsed.error }\n    params = parsed.data\n  }\n  return { ok: true, query, body, params }\n}\n","/**\n * T3.2 — Web-Standards middleware runner for the `executeWebRequest` path.\n *\n * The Node request path (`http/execute.ts`) runs middleware via\n * `runMiddlewareAndContext`, which is coupled to Node `req`/`res`. Per G8\n * (Web Standards over Node APIs) the Web path needs a `Request`-shaped runner;\n * this is it. Extracted to a sibling so `web-handler.ts` stays under its LoC\n * budget (G6).\n *\n * Ordering invariant (EC-3): the caller runs the CSRF gate BEFORE invoking this\n * runner, mirroring the Node path (CSRF stage precedes user middleware).\n *\n * NOTE (D4 / EC-12): this is its own middleware contract — `(request, context)`.\n * Full semantic parity with the Node `defineMiddleware` contract is part of the\n * deferred Node→Web pipeline convergence, not this slice.\n */\n\n/** A Web-path middleware: mutate `context`, or return a `Response` to short-circuit. */\nexport type WebMiddleware = (\n  request: Request,\n  context: Record<string, unknown>,\n  // A middleware may mutate `context` and return nothing (void) OR return a\n  // `Response` to short-circuit (Express/Koa-style). `void` in this union is\n  // intentional — `runWebMiddleware` only inspects `instanceof Response`, so a\n  // void return means \"continue to the next middleware / handler\".\n  // eslint-disable-next-line @typescript-eslint/no-invalid-void-type\n) => Promise<Response | undefined> | Response | undefined | void\n\n/**\n * Run middleware in order against a shared mutable `context`. The first\n * middleware that returns a `Response` short-circuits the chain (the handler\n * is not reached); its `Response` is returned verbatim so headers like\n * `Set-Cookie` are preserved (EC-11). Returns `undefined` when every\n * middleware passes (the handler should run next).\n */\nexport async function runWebMiddleware(\n  request: Request,\n  middleware: readonly WebMiddleware[],\n  context: Record<string, unknown>,\n): Promise<Response | undefined> {\n  for (const mw of middleware) {\n    const result = await mw(request, context)\n    if (result instanceof Response) return result\n  }\n  return undefined\n}\n","/**\n * T5a.2 Phase A — Foundation: Web-Standards request handler entry-point.\n *\n * Per `docs/plans/t5a2-incoming-message-to-request-shape-refactor-plan.md`\n * v1.0 § Phase A. Bridges the gap between Web `Request`/`Response` and the\n * existing `defineRoute` config shape (which is consumed today by the Node-\n * shaped `executeRoute`).\n *\n * This is the entry-point T1.2 RED tests expect:\n *   `executeWebRequest(request: Request, routeModule: { GET?, POST?, ... }): Promise<Response>`\n *\n * Architecture per ADR-0028 (R3a) — this function accepts a native Web\n * `Request` and returns a native Web `Response`. No `node:*` is required in\n * the implementation (Zod + native Headers/URL/Response cover the surface).\n *\n * **Scope (intentionally narrow):**\n *   - Method dispatch (GET/POST/PUT/PATCH/DELETE).\n *   - Zod validation for `query` (from URL.searchParams), `body` (from\n *     request.json() OR request.text()), `params` (consumer-supplied OR\n *     parsed from path).\n *   - Handler invocation.\n *   - Result → JSON Response (200 default, 204 for void return).\n *   - Error → envelope-shaped JSON Response (400 for validation, 500 for\n *     handler throws) per G5 boundary translation (serverErrorToEnvelope).\n *\n * **NOT included (deferred to T5a.2 Phase B-G):**\n *   - Plugin runner integration (onRequest/preHandler/onResponse hooks).\n *   - CSRF / CORS / security headers / rate limiting / cookies / auth.\n *   - Middleware chain. SSR rendering. WebSocket upgrade. File upload.\n *   - File-system routing scan; consumer provides the route module\n *     explicitly (Web Request entry doesn't yet know about scan results).\n *\n * The narrow scope makes this a viable Phase A landing zone — turns the\n * 7 T1.2 RED tests GREEN without prematurely refactoring the full\n * IncomingMessage→Request boundary across server/http/ files.\n */\nimport type { z } from 'zod'\n\nimport { envelopeCodeToStatus } from '../core/contracts/envelope-code-to-status.js'\nimport type { TheoErrorEnvelope } from '../core/contracts/error-envelope.js'\nimport { serverErrorToEnvelope } from '../core/contracts/server-error-to-envelope.js'\nimport { TheoError } from '../core/contracts/theo-error.js'\n\nimport { isZodLike } from './http/execute-stages.js'\nimport { validateRouteInput } from './http/validate-route-input.js'\nimport { runWebMiddleware, type WebMiddleware } from './http/web-middleware-runner.js'\nimport type {\n  WebOnErrorHook,\n  WebOnRequestHook,\n  WebOnResponseHook,\n  WebPluginContext,\n  WebPluginErrorContext,\n  WebPreHandlerHook,\n} from './plugin-types.js'\nimport { validateCsrfRequest } from './security/csrf.js'\n\nexport type { WebMiddleware }\n\n/**\n * Minimal structural type for a `defineRoute` config. Mirrors\n * `core/contracts/route-config.ts` shape but only the fields this entry\n * point needs at runtime (Zod schemas + handler). Kept structural to\n * avoid a hard dep on the full RouteConfig generic chain.\n */\ninterface WebRouteHandlerConfig {\n  query?: z.ZodType\n  body?: z.ZodType\n  params?: z.ZodType\n  /** Optional Zod schema validating a plain-object handler return (D1/D2). */\n  response?: z.ZodType\n  /** Honored for plain-object returns to match the Node runner (D3). */\n  status?: number\n  handler: (ctx: {\n    query: unknown\n    body: unknown\n    params: unknown\n    request: Request\n    /** Mutable per-request context populated by the Web middleware chain (T3.2). */\n    context: Record<string, unknown>\n  }) => unknown\n}\n\n/**\n * The route module exported by a `server/routes/*.ts` file (after T2.6 G6\n * router lockdown). Method-named exports map to `defineRoute` results.\n */\ntype WebRouteModule = Partial<Record<'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE', unknown>>\n\n/**\n * Coerce URL.searchParams into a plain `{ key: value }` object so Zod\n * `z.object({...})` schemas work without per-route adapters. Repeated keys\n * become arrays (most browsers serialize multi-select that way).\n */\nfunction searchParamsToObject(params: URLSearchParams): Record<string, string | string[]> {\n  const out: Record<string, string | string[]> = {}\n  for (const [key, value] of params.entries()) {\n    if (!Object.hasOwn(out, key)) {\n      out[key] = value\n      continue\n    }\n    const existing = out[key]\n    if (Array.isArray(existing)) {\n      existing.push(value)\n    } else {\n      out[key] = [existing, value]\n    }\n  }\n  return out\n}\n\n/**\n * Parse request body based on Content-Type. JSON is the canonical path;\n * empty body returns `undefined` (the handler treats as \"no body\").\n *\n * **Inline-only mode (default):** handles `application/json` and `text/*`.\n * Other content-types return `undefined`. Multipart/form-data requires\n * the opt-in `bodyParser: 'full'` mode (T5a.2 Phase E).\n */\nasync function parseBodyInline(request: Request): Promise<unknown> {\n  // GET/HEAD have no body by spec; even if the consumer sets one, ignore it\n  // (matches Web Request semantics — `body` is null for GET/HEAD anyway).\n  if (request.method === 'GET' || request.method === 'HEAD') return undefined\n  const contentType = request.headers.get('content-type') ?? ''\n  if (contentType.includes('application/json')) {\n    const text = await request.text()\n    if (text.length === 0) return undefined\n    try {\n      return JSON.parse(text)\n    } catch {\n      // Malformed JSON — return undefined; Zod schema (if any) will fail with\n      // a more useful \"required\" message than a raw SyntaxError.\n      return undefined\n    }\n  }\n  // text/plain or no body: return raw text or undefined\n  if (contentType.startsWith('text/')) {\n    const text = await request.text()\n    return text.length === 0 ? undefined : text\n  }\n  return undefined\n}\n\n/**\n * T5a.2 Phase E — \"full\" body parser delegating to `parseWebRequestBody`.\n * Returns a `ParsedWebBody` (`{ json?, fields, files }`) for JSON OR\n * multipart, or `undefined` when the body is empty / unparseable.\n *\n * Handler downstream pattern:\n *   `body?.json` (JSON requests)\n *   `body?.fields` + `body?.files` (multipart upload requests)\n *\n * Limits enforced by parseWebRequestBody:\n *   - declared Content-Length cap (default 10MB × maxFiles + 1MB margin)\n *   - per-file size cap (default 10MB)\n *   - max files (default 10)\n */\nasync function parseBodyFull(request: Request): Promise<unknown> {\n  if (request.method === 'GET' || request.method === 'HEAD') return undefined\n  const { parseWebRequestBody } = await import('./body-parser-web.js')\n  try {\n    const parsed = await parseWebRequestBody(request)\n    // If nothing parsed (empty body OR unhandled content-type), return undefined\n    // so Zod schemas treat it as missing — same semantics as inline parser.\n    if (\n      parsed.json === undefined &&\n      Object.keys(parsed.fields).length === 0 &&\n      parsed.files.length === 0\n    ) {\n      return undefined\n    }\n    return parsed\n  } catch {\n    return undefined\n  }\n}\n\n/**\n * Build an envelope-shaped 400 Response for a Zod validation failure. Uses\n * the canonical `TheoErrorEnvelope` shape per G5 D3 (boundary translation).\n */\nfunction validationErrorResponse(zodError: z.ZodError, field: string): Response {\n  const envelope: TheoErrorEnvelope = {\n    code: 'BAD_REQUEST',\n    message: `Validation failed: ${field}`,\n    ext: {\n      fields: zodError.issues.map((issue) => ({\n        path: issue.path.join('.'),\n        message: issue.message,\n      })),\n    },\n  }\n  return new Response(JSON.stringify(envelope), {\n    status: 400,\n    headers: { 'content-type': 'application/json' },\n  })\n}\n\n/**\n * Run a `defineRoute` config against a parsed Web Request. Returns the raw\n * handler result; serialization to Response happens in the caller.\n *\n * Throws if Zod validation fails (caller catches and emits 400).\n */\nasync function runHandler(\n  config: WebRouteHandlerConfig,\n  request: Request,\n  bodyParser: 'inline' | 'full' = 'inline',\n  paramsInput: Record<string, string> = {},\n  context: Record<string, unknown> = {},\n): Promise<{ ok: true; result: unknown } | { ok: false; response: Response }> {\n  const url = new URL(request.url)\n  const queryRaw = searchParamsToObject(url.searchParams)\n  const bodyRaw =\n    bodyParser === 'full' ? await parseBodyFull(request) : await parseBodyInline(request)\n  // T3.1 — route params resolved upstream (matchRoute) and threaded via\n  // opts.params. Defaults to `{}` so callers that don't supply params keep the\n  // prior behavior (a route declaring config.params then fails validation).\n  const paramsRaw = paramsInput\n\n  // M33 — validate the three input channels via the SINGLE shared pipeline (`validateRouteInput`),\n  // the same one the in-process caller (`callProcedure`) uses. The HTTP path maps a failure to a\n  // 400 Response; the in-process path throws. One pipeline, no drift.\n  const validated = validateRouteInput(config, {\n    query: queryRaw,\n    body: bodyRaw,\n    params: paramsRaw,\n  })\n  if (!validated.ok) {\n    return { ok: false, response: validationErrorResponse(validated.error, validated.channel) }\n  }\n  const { query, body, params } = validated\n\n  const result = await config.handler({ query, body, params, request, context })\n  return validateResponseOutput(config.response, result) ?? { ok: true, result }\n}\n\n/**\n * Validate a plain-object handler return against `config.response` (D1/D2). A\n * mismatch is a SERVER fault → 500 envelope. `Response`-instance returns and\n * `undefined`/`null` (→ 204) skip validation — parity with the Node runner,\n * which validates only in its plain-object branch. Returns `undefined` when no\n * validation applies (caller forwards the raw result).\n */\nfunction validateResponseOutput(\n  response: unknown,\n  result: unknown,\n): { ok: true; result: unknown } | { ok: false; response: Response } | undefined {\n  const validatable = result !== undefined && result !== null && !(result instanceof Response)\n  if (!validatable || !isZodLike(response)) return undefined\n  const parsed = response.safeParse(result)\n  if (parsed.success) return { ok: true, result: parsed.data }\n  const err = new TheoError({\n    code: 'INTERNAL_SERVER_ERROR',\n    message: 'response validation failed',\n    ext: { issues: parsed.error?.issues },\n  })\n  return { ok: false, response: handlerErrorResponse(err) }\n}\n\n/**\n * Serialize a handler return value into a native Web `Response`. Conventions:\n *   - `undefined` / `void` → 204 No Content.\n *   - existing `Response` instance → pass through unchanged.\n *   - everything else → 200 JSON.\n */\nfunction toResponse(result: unknown, status?: number): Response {\n  if (result === undefined) {\n    return new Response(null, { status: 204 })\n  }\n  if (result instanceof Response) {\n    return result\n  }\n  return new Response(JSON.stringify(result), {\n    status: status ?? 200,\n    headers: { 'content-type': 'application/json' },\n  })\n}\n\n/**\n * Build an envelope-shaped 500 Response when a handler throws. Uses\n * `serverErrorToEnvelope` so existing ad-hoc Error classes (AuthRequired,\n * FileTooLarge, etc.) get mapped to canonical envelope codes.\n */\nfunction handlerErrorResponse(err: unknown): Response {\n  const envelope = serverErrorToEnvelope(err)\n  // Map envelope code → HTTP status when possible. Default to 500 for\n  // INTERNAL_SERVER_ERROR. Other codes map per HTTP semantics.\n  const status = envelopeCodeToStatus(envelope.code)\n  return new Response(JSON.stringify(envelope), {\n    status,\n    headers: { 'content-type': 'application/json' },\n  })\n}\n\n// envelopeCodeToStatus extracted to core/contracts/envelope-code-to-status.ts\n// (architecture-remediation T1.2, 2026-06-12)\n\n/**\n * Optional behavior knobs for `executeWebRequest`. Each knob defaults to\n * the safe \"no-op\" stance so existing Phase A consumers (T1.2 fixture\n * tests) keep working unchanged.\n *\n * **`csrfMode`** (T5a.2 Phase B slice 1/6) — when set to `'strict'`, the\n * Web-Standards request gate runs `validateCsrfRequest` BEFORE method\n * dispatch on state-changing methods (POST/PUT/PATCH/DELETE) and emits a\n * `403 FORBIDDEN` envelope when the check fails. Default: `'off'` (no\n * CSRF enforcement) to preserve Phase A backward compat. Production\n * consumers SHOULD pass `csrfMode: 'strict'`.\n *\n * Per the T5a.2 plan v1.0 § Phase B header-only leaves: csrf.ts is the\n * first leaf to be migrated (slice 1/6); 5 more sibling leaves remain\n * (csrf-multi-header, csrf-readiness-endpoint, csp-report, cors, cookies).\n */\nexport interface ExecuteWebRequestOptions {\n  csrfMode?: 'off' | 'strict'\n  /**\n   * T3.1 — route params resolved upstream by `matchRoute` (e.g. `{ id: '42' }`\n   * for `/users/:id`). Threaded to the handler's `params` input and validated\n   * against `config.params` (Zod) when declared. Defaults to `{}` — callers\n   * that don't supply params keep the prior behavior (additive, backward-compat).\n   */\n  params?: Record<string, string>\n  /**\n   * T3.2 — Web-Standards middleware chain. Runs in order AFTER the CSRF gate\n   * (EC-3) and BEFORE the handler. A middleware returning a `Response`\n   * short-circuits (handler not reached); mutating `context` passes data to\n   * the handler. Omitted → zero overhead (handler runs directly).\n   */\n  middleware?: readonly WebMiddleware[]\n  /**\n   * T5a.2 Phase E — body parser strategy.\n   *\n   * - `'inline'` (default): handle `application/json` + `text/*` only.\n   *   Returns the parsed value (object for JSON, string for text). Other\n   *   content-types (e.g., multipart) return `undefined`.\n   * - `'full'`: delegate to `parseWebRequestBody` for multipart support\n   *   + per-file size caps + max-files cap (Web Standards `request.formData()`\n   *   under the hood). Returns a `ParsedWebBody` object:\n   *   `{ json?, fields, files }`. Multipart consumers MUST opt into this\n   *   mode; JSON-only routes pay zero cost staying on `'inline'`.\n   */\n  bodyParser?: 'inline' | 'full'\n  /**\n   * T5a.2 Phase G slice 1/N — plugin lifecycle hooks.\n   *\n   * Adapters (Node, CF Workers, Bun, Deno) wire `WebPluginContext`-shaped\n   * hooks at the executeWebRequest lifecycle. Lifecycle order mirrors the\n   * Fastify / Hono convention:\n   *\n   *   1. CSRF check (when opts.csrfMode === 'strict')\n   *   2. onRequest — earliest, before body parsing. Plugins can short-circuit\n   *      by setting `ctx.response` (handler skipped; subsequent hooks see\n   *      the short-circuit response).\n   *   3. body parse (inline OR full per opts.bodyParser)\n   *   4. preHandler — after body parsed, before handler runs. Same\n   *      short-circuit semantic.\n   *   5. handler invocation\n   *   6. onResponse — after handler returns OR after a hook short-circuit.\n   *      `ctx.response` is populated.\n   *   7. onError — fires if any of (handler, onRequest, preHandler) throws.\n   *      `ctx.response` is the envelope-shaped error response built via\n   *      serverErrorToEnvelope.\n   *\n   * `responseHeaders` is shared across hooks; the final Response merges\n   * them with the handler's Response headers (handler headers win on\n   * conflict; hook headers add new ones). Decorations made via\n   * `ctx.ctx[key] = value` persist across hooks (request-scoped state).\n   *\n   * `hooks: undefined` (default) → no plugin lifecycle, Phase A behavior\n   * preserved. Production consumers wire via the WebPluginRunner facade\n   * (a future Phase G slice).\n   */\n  hooks?: {\n    onRequest?: readonly WebOnRequestHook[]\n    preHandler?: readonly WebPreHandlerHook[]\n    onResponse?: readonly WebOnResponseHook[]\n    onError?: readonly WebOnErrorHook[]\n  }\n  /**\n   * Stable request identifier propagated into hook contexts. Adapters\n   * resolve via traceparent / x-request-id / generated UUID (see\n   * `extractTraceIdFromRequest` from Phase C slice 1/2). Default:\n   * `globalThis.crypto.randomUUID()`.\n   */\n  requestId?: string\n}\n\n/**\n * Methods that require CSRF enforcement when `csrfMode: 'strict'`. GET\n * and HEAD are read-only per HTTP semantics and bypass CSRF (the threat\n * model is state-changing requests forged via cross-origin POSTs); OPTIONS\n * is the CORS preflight and also bypasses.\n */\nexport const CSRF_PROTECTED_METHODS = new Set(['POST', 'PUT', 'PATCH', 'DELETE'])\n\n/**\n * Web-Standards entry-point for executing a route module against a native\n * Web `Request`. Returns a native Web `Response`.\n *\n * Method dispatch: looks up the handler keyed by `request.method`\n * (uppercase). Returns 405 if the method isn't exported.\n *\n * @example\n * import * as users from './app/users/route.js'\n * import { executeWebRequest } from 'theokit/server'\n *\n * const response = await executeWebRequest(\n *   new Request('http://localhost/api/users', { method: 'GET' }),\n *   users,\n *   { csrfMode: 'strict' },\n * )\n */\n/**\n * T5a.2 Phase G slice 1/N — merge hook-mutated response headers into the\n * handler's Response. Handler-set headers win on conflict (the handler\n * has the most context about its own response); hook headers add new\n * entries (e.g., CORS, Set-Cookie). Returns a new Response with the\n * merged headers + same body/status as the source.\n *\n * Set-Cookie is multi-value at the Web spec layer — `getSetCookie()` is\n * the only way to retrieve multiple values. The merge appends ALL hook-\n * set Set-Cookie values to the response (multiple Set-Cookie headers is\n * spec-correct and how browsers expect cookie issuance).\n */\nfunction mergeHookHeaders(response: Response, hookHeaders: Headers): Response {\n  if ([...hookHeaders].length === 0) return response\n  const merged = new Headers(response.headers)\n  for (const [k, v] of hookHeaders.entries()) {\n    if (k.toLowerCase() === 'set-cookie') continue // handled separately\n    if (!merged.has(k)) merged.set(k, v)\n  }\n  for (const sc of hookHeaders.getSetCookie()) {\n    merged.append('Set-Cookie', sc)\n  }\n  return new Response(response.body, {\n    status: response.status,\n    statusText: response.statusText,\n    headers: merged,\n  })\n}\n\n/** Build a 405 envelope Response. */\nfunction methodNotAllowedResponse(method: string): Response {\n  const envelope: TheoErrorEnvelope = {\n    code: 'METHOD_NOT_ALLOWED',\n    message: `Method ${method} not allowed`,\n  }\n  return new Response(JSON.stringify(envelope), {\n    status: 405,\n    headers: { 'content-type': 'application/json' },\n  })\n}\n\n/** Build a 403 CSRF envelope Response. */\nfunction csrfFailedResponse(reason: string): Response {\n  const envelope: TheoErrorEnvelope = {\n    code: 'FORBIDDEN',\n    message: `CSRF check failed: ${reason}`,\n  }\n  return new Response(JSON.stringify(envelope), {\n    status: 403,\n    headers: { 'content-type': 'application/json' },\n  })\n}\n\nexport async function executeWebRequest(\n  request: Request,\n  routeModule: WebRouteModule,\n  opts: ExecuteWebRequestOptions = {},\n): Promise<Response> {\n  const method = request.method.toUpperCase() as keyof WebRouteModule\n  const config = routeModule[method] as WebRouteHandlerConfig | undefined\n\n  // T5a.2 Phase G slice 1/N — plugin lifecycle hooks.\n  // When opts.hooks is undefined, skip the entire hook orchestration to\n  // preserve Phase A backward compat (zero overhead for consumers not\n  // wiring hooks). In the no-hooks branch, dispatch + CSRF gates run\n  // FIRST and 405 short-circuits before the handler runs.\n  if (opts.hooks === undefined) {\n    if (config === undefined || typeof config.handler !== 'function') {\n      return methodNotAllowedResponse(method)\n    }\n    if (opts.csrfMode === 'strict' && CSRF_PROTECTED_METHODS.has(method)) {\n      const csrfCheck = validateCsrfRequest(request)\n      if (!csrfCheck.valid) return csrfFailedResponse(csrfCheck.reason)\n    }\n    try {\n      // T3.2 — middleware runs AFTER the CSRF gate (EC-3), BEFORE the handler.\n      const context: Record<string, unknown> = {}\n      if (opts.middleware?.length) {\n        const shortCircuit = await runWebMiddleware(request, opts.middleware, context)\n        if (shortCircuit) return shortCircuit\n      }\n      const outcome = await runHandler(\n        config,\n        request,\n        opts.bodyParser ?? 'inline',\n        opts.params ?? {},\n        context,\n      )\n      if (!outcome.ok) return outcome.response\n      return toResponse(outcome.result, config.status)\n    } catch (err) {\n      return handlerErrorResponse(err)\n    }\n  }\n\n  // With hooks: onRequest hooks run BEFORE method dispatch (Hono /\n  // Fastify convention) so CORS preflight plugins can intercept OPTIONS\n  // requests regardless of route shape. If no hook short-circuits, then\n  // 405 fires when the method isn't exported by the route module.\n  return runWithHooks(request, config, opts, opts.hooks)\n}\n\n/**\n * Run the request through the full plugin lifecycle. Extracted to keep\n * `executeWebRequest`'s cyclomatic + cognitive complexity under the lint\n * caps (15/20). Pure side-effect surface — same return type as the\n * no-hooks branch.\n */\n/**\n * Pre-handler pipeline: onRequest hooks → CSRF gate → preHandler hooks →\n * method dispatch + handler. Mutates `hookCtx.response` on short-circuit\n * OR on handler completion. Extracted from `runWithHooks` to keep the\n * latter's cyclomatic complexity under the lint cap (15).\n */\nasync function runPreHandlerPipeline(\n  hookCtx: WebPluginContext,\n  request: Request,\n  config: WebRouteHandlerConfig | undefined,\n  opts: ExecuteWebRequestOptions,\n  hooks: NonNullable<ExecuteWebRequestOptions['hooks']>,\n): Promise<void> {\n  const method = request.method.toUpperCase()\n  const runList = async (list: readonly WebOnRequestHook[]): Promise<void> => {\n    for (const hook of list) {\n      if (hookCtx.response !== undefined) return\n      await hook(hookCtx)\n    }\n  }\n  // onRequest first (CORS preflight + auth gate intercept before dispatch).\n  if (hooks.onRequest) await runList(hooks.onRequest)\n  // CSRF gate AFTER onRequest (auth-short-circuit avoids CSRF cost) but\n  // BEFORE the handler.\n  if (\n    hookCtx.response === undefined &&\n    opts.csrfMode === 'strict' &&\n    CSRF_PROTECTED_METHODS.has(method)\n  ) {\n    const csrfCheck = validateCsrfRequest(request)\n    if (!csrfCheck.valid) hookCtx.response = csrfFailedResponse(csrfCheck.reason)\n  }\n  if (hookCtx.response === undefined && hooks.preHandler) {\n    await runList(hooks.preHandler)\n  }\n  if (hookCtx.response === undefined) {\n    await runHandlerStage(hookCtx, request, config, opts, method)\n  }\n}\n\n/**\n * T3.2 — the middleware + handler stage of the hook pipeline. Extracted from\n * `runPreHandlerPipeline` to keep its cyclomatic complexity under the lint cap.\n * Order: 405 check → user middleware (after CSRF + preHandler) → handler.\n */\nasync function runHandlerStage(\n  hookCtx: WebPluginContext,\n  request: Request,\n  config: WebRouteHandlerConfig | undefined,\n  opts: ExecuteWebRequestOptions,\n  method: string,\n): Promise<void> {\n  // 405 if route module doesn't export this method.\n  if (config === undefined || typeof config.handler !== 'function') {\n    hookCtx.response = methodNotAllowedResponse(method)\n    return\n  }\n  // hookCtx.ctx is the shared per-request context the middleware mutates.\n  if (opts.middleware?.length) {\n    const shortCircuit = await runWebMiddleware(request, opts.middleware, hookCtx.ctx)\n    if (shortCircuit) {\n      hookCtx.response = shortCircuit\n      return\n    }\n  }\n  const outcome = await runHandler(\n    config,\n    request,\n    opts.bodyParser ?? 'inline',\n    opts.params ?? {},\n    hookCtx.ctx,\n  )\n  hookCtx.response = outcome.ok ? toResponse(outcome.result, config.status) : outcome.response\n}\n\nasync function runWithHooks(\n  request: Request,\n  config: WebRouteHandlerConfig | undefined,\n  opts: ExecuteWebRequestOptions,\n  hooks: NonNullable<ExecuteWebRequestOptions['hooks']>,\n): Promise<Response> {\n  const hookCtx: WebPluginContext = {\n    request,\n    responseHeaders: new Headers(),\n    ctx: {},\n    requestId: opts.requestId ?? globalThis.crypto.randomUUID(),\n  }\n  try {\n    await runPreHandlerPipeline(hookCtx, request, config, opts, hooks)\n    if (hooks.onResponse) {\n      for (const hook of hooks.onResponse) {\n        await hook(hookCtx)\n      }\n    }\n    // runPreHandlerPipeline guarantees hookCtx.response is set (via either\n    // a hook short-circuit OR handler outcome OR 405). TS doesn't infer this\n    // post-mutation; the assertion is safe per the function's contract.\n    const finalResponse =\n      hookCtx.response ??\n      new Response(\n        JSON.stringify({ code: 'INTERNAL_SERVER_ERROR', message: 'No response built' }),\n        {\n          status: 500,\n          headers: { 'content-type': 'application/json' },\n        },\n      )\n    return mergeHookHeaders(finalResponse, hookCtx.responseHeaders)\n  } catch (err) {\n    return runErrorHooks(err, hookCtx, hooks.onError)\n  }\n}\n\n/**\n * Run onError hooks against an envelope-shaped error response. EC-9 —\n * each hook throw is swallowed to avoid error-in-error-handler recursion.\n * Returns the merged final Response.\n */\nasync function runErrorHooks(\n  err: unknown,\n  hookCtx: WebPluginContext,\n  onError: readonly WebOnErrorHook[] | undefined,\n): Promise<Response> {\n  const errorResponse = handlerErrorResponse(err)\n  if (onError !== undefined) {\n    const errorCtx: WebPluginErrorContext = {\n      ...hookCtx,\n      response: errorResponse,\n      error: err,\n    }\n    for (const hook of onError) {\n      try {\n        await hook(errorCtx)\n      } catch {\n        // EC-9: error in error handler — swallow to avoid recursion.\n      }\n    }\n  }\n  return mergeHookHeaders(errorResponse, hookCtx.responseHeaders)\n}\n"],"mappings":";;;;;;;;;;;;;;;AAoBA,SAAS,WAAW,cAAc,cAAc,gBAAgB;AAChE,SAAS,eAAe;AAExB,OAAO,YAAY;AACnB,SAAS,cAAwC;AAKjD,IAAM,qBAAqB;AAE3B,IAAM,QAAQ,oBAAI,IAA2B;AAGtC,SAAS,iBAAuB;AACrC,QAAM,MAAM;AACd;AAEA,SAAS,wBAAwB,MAAwB;AAGvD,QAAM,QAAQ,CAAC,QAAQ,IAAI,UAAU,cAAc,QAAQ,IAAI,IAAI,MAAM;AAGzE,MAAI,SAAS,QAAQ;AACnB,WAAO,MAAM,OAAO,CAAC,MAAM,MAAM,YAAY;AAAA,EAC/C;AACA,SAAO;AACT;AAEA,SAAS,YAAY,MAA6C;AAChE,MAAI;AACJ,MAAI;AACF,WAAO,SAAS,IAAI;AAAA,EACtB,QAAQ;AACN,WAAO;AAAA,EACT;AAGA,MAAI,CAAC,KAAK,OAAO,KAAK,CAAC,KAAK,OAAO,EAAG,QAAO;AAG7C,MAAI,KAAK,OAAO,oBAAoB;AAClC,YAAQ;AAAA,MACN,0BAA0B,IAAI,YAAY,kBAAkB;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAGA,MAAI;AACF,UAAM,QAAQ,UAAU,IAAI;AAC5B,QAAI,MAAM,eAAe,GAAG;AAC1B,YAAM,OAAO,aAAa,IAAI;AAE9B,cAAQ,KAAK,qBAAqB,IAAI,wBAAmB,IAAI,EAAE;AAAA,IACjE;AAAA,EACF,QAAQ;AAAA,EAER;AAEA,MAAI;AACF,UAAM,UAAU,aAAa,MAAM,OAAO;AAC1C,WAAO,OAAO,MAAM,OAAO;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,QAAQ,UAA0B,CAAC,GAAkB;AACnE,QAAM,MAAM,QAAQ,OAAO,QAAQ,IAAI;AACvC,QAAM,OAAO,QAAQ,QAAQ,QAAQ,IAAI,YAAY;AACrD,QAAM,WAAW,GAAG,GAAG,IAAI,IAAI;AAE/B,MAAI,CAAC,QAAQ,aAAa;AACxB,UAAM,SAAS,MAAM,IAAI,QAAQ;AACjC,QAAI,OAAQ,QAAO;AAAA,EACrB;AAEA,QAAM,YAAY,wBAAwB,IAAI;AAC9C,QAAM,YAAY,UAAU,IAAI,CAAC,MAAM,QAAQ,KAAK,CAAC,CAAC;AAItD,QAAM,SAAiC,CAAC;AACxC,QAAM,kBAA4B,CAAC;AACnC,aAAW,QAAQ,CAAC,GAAG,SAAS,EAAE,QAAQ,GAAG;AAC3C,UAAM,SAAS,YAAY,IAAI;AAC/B,QAAI,WAAW,KAAM;AACrB,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC3C,aAAO,CAAC,IAAI;AAAA,IACd;AACA,oBAAgB,QAAQ,IAAI;AAAA,EAC9B;AAGA,MAAI,OAAO,YAAY,QAAQ,IAAI,4BAA4B,QAAW;AACxE,YAAQ,IAAI,0BAA0B,OAAO;AAAA,EAC/C;AACA,SAAO,OAAO;AAOd,QAAM,kBAAuC,CAAC;AAC9C,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,QAAQ,GAAG,GAAG;AAChD,QAAI,OAAO,MAAM,SAAU,iBAAgB,CAAC,IAAI;AAAA,EAClD;AACA,MAAI;AACF,WAAO,EAAE,QAAQ,QAAQ,YAAY,gBAAgB,CAAC;AAAA,EACxD,SAAS,KAAK;AACZ,QAAI,eAAe,YAAY;AAC7B,cAAQ;AAAA,QACN;AAAA,MACF;AAAA,IACF,OAAO;AACL,YAAM;AAAA,IACR;AAAA,EACF;AAGA,QAAM,SAAiC,CAAC;AACxC,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC3C,QAAI,QAAQ,IAAI,CAAC,MAAM,OAAW;AAClC,YAAQ,IAAI,CAAC,IAAI;AACjB,WAAO,CAAC,IAAI;AAAA,EACd;AAGA,UAAQ,IAAI,0BAA0B;AAEtC,QAAM,SAAwB,EAAE,QAAQ,gBAAgB;AACxD,QAAM,IAAI,UAAU,MAAM;AAC1B,SAAO;AACT;;;AC7JA,OAAO,eAAe;AAef,IAAM,uBAAwC;AAAA,EACnD,MAAM;AAAA,EACN,WAAW,CAAC,MAAM,KAAK,UAAU,UAAU,UAAU,CAAC,CAAC;AAAA,EACvD,aAAa,CAAC,QAAQ;AACpB,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,WAAO,UAAU,YAAY,MAAM;AAAA,EACrC;AACF;AAEO,IAAM,kBAAmC;AAAA,EAC9C,MAAM;AAAA,EACN,WAAW,CAAC,MAAM,KAAK,UAAU,CAAC;AAAA,EAClC,aAAa,CAAC,QAAQ,KAAK,MAAM,GAAG;AACtC;AAEA,IAAM,YAA6C;AAAA,EACjD,WAAW;AAAA,EACX,MAAM;AACR;AAEO,SAAS,mBACd,UACiB;AACjB,MAAI,OAAO,aAAa,UAAU;AAMhC,UAAM,QAAQ,UAAU,QAAQ;AAIhC,QAAK,UAA0C,QAAW;AACxD,YAAM,IAAI;AAAA,QACR,wBAAwB,QAAQ,wBAAwB,OAAO,KAAK,SAAS,EAAE,KAAK,IAAI,CAAC;AAAA,MAC3F;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACA,MACE,OAAO,aAAa,YACpB,OAAO,SAAS,cAAc,cAC9B,OAAO,SAAS,gBAAgB,YAChC;AACA,UAAM,IAAI;AAAA,MACR,0EAA0E,KAAK,UAAU,QAAQ,CAAC;AAAA,IACpG;AAAA,EACF;AACA,SAAO;AACT;;;ACvBO,SAAS,mBACd,QACA,KACsB;AACtB,MAAI,QAAiB,IAAI;AACzB,MAAI,OAAO,UAAU,QAAW;AAC9B,UAAM,SAAS,OAAO,MAAM,UAAU,IAAI,KAAK;AAC/C,QAAI,CAAC,OAAO,QAAS,QAAO,EAAE,IAAI,OAAO,SAAS,SAAS,OAAO,OAAO,MAAM;AAC/E,YAAQ,OAAO;AAAA,EACjB;AACA,MAAI,OAAgB,IAAI;AACxB,MAAI,OAAO,SAAS,QAAW;AAC7B,UAAM,SAAS,OAAO,KAAK,UAAU,IAAI,IAAI;AAC7C,QAAI,CAAC,OAAO,QAAS,QAAO,EAAE,IAAI,OAAO,SAAS,QAAQ,OAAO,OAAO,MAAM;AAC9E,WAAO,OAAO;AAAA,EAChB;AACA,MAAI,SAAkB,IAAI;AAC1B,MAAI,OAAO,WAAW,QAAW;AAC/B,UAAM,SAAS,OAAO,OAAO,UAAU,IAAI,MAAM;AACjD,QAAI,CAAC,OAAO,QAAS,QAAO,EAAE,IAAI,OAAO,SAAS,UAAU,OAAO,OAAO,MAAM;AAChF,aAAS,OAAO;AAAA,EAClB;AACA,SAAO,EAAE,IAAI,MAAM,OAAO,MAAM,OAAO;AACzC;;;AC9BA,eAAsB,iBACpB,SACA,YACA,SAC+B;AAC/B,aAAW,MAAM,YAAY;AAC3B,UAAM,SAAS,MAAM,GAAG,SAAS,OAAO;AACxC,QAAI,kBAAkB,SAAU,QAAO;AAAA,EACzC;AACA,SAAO;AACT;;;ACgDA,SAAS,qBAAqB,QAA4D;AACxF,QAAM,MAAyC,CAAC;AAChD,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG;AAC3C,QAAI,CAAC,OAAO,OAAO,KAAK,GAAG,GAAG;AAC5B,UAAI,GAAG,IAAI;AACX;AAAA,IACF;AACA,UAAM,WAAW,IAAI,GAAG;AACxB,QAAI,MAAM,QAAQ,QAAQ,GAAG;AAC3B,eAAS,KAAK,KAAK;AAAA,IACrB,OAAO;AACL,UAAI,GAAG,IAAI,CAAC,UAAU,KAAK;AAAA,IAC7B;AAAA,EACF;AACA,SAAO;AACT;AAUA,eAAe,gBAAgB,SAAoC;AAGjE,MAAI,QAAQ,WAAW,SAAS,QAAQ,WAAW,OAAQ,QAAO;AAClE,QAAM,cAAc,QAAQ,QAAQ,IAAI,cAAc,KAAK;AAC3D,MAAI,YAAY,SAAS,kBAAkB,GAAG;AAC5C,UAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,QAAI,KAAK,WAAW,EAAG,QAAO;AAC9B,QAAI;AACF,aAAO,KAAK,MAAM,IAAI;AAAA,IACxB,QAAQ;AAGN,aAAO;AAAA,IACT;AAAA,EACF;AAEA,MAAI,YAAY,WAAW,OAAO,GAAG;AACnC,UAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,WAAO,KAAK,WAAW,IAAI,SAAY;AAAA,EACzC;AACA,SAAO;AACT;AAgBA,eAAe,cAAc,SAAoC;AAC/D,MAAI,QAAQ,WAAW,SAAS,QAAQ,WAAW,OAAQ,QAAO;AAClE,QAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,+BAAsB;AACnE,MAAI;AACF,UAAM,SAAS,MAAM,oBAAoB,OAAO;AAGhD,QACE,OAAO,SAAS,UAChB,OAAO,KAAK,OAAO,MAAM,EAAE,WAAW,KACtC,OAAO,MAAM,WAAW,GACxB;AACA,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAMA,SAAS,wBAAwB,UAAsB,OAAyB;AAC9E,QAAM,WAA8B;AAAA,IAClC,MAAM;AAAA,IACN,SAAS,sBAAsB,KAAK;AAAA,IACpC,KAAK;AAAA,MACH,QAAQ,SAAS,OAAO,IAAI,CAAC,WAAW;AAAA,QACtC,MAAM,MAAM,KAAK,KAAK,GAAG;AAAA,QACzB,SAAS,MAAM;AAAA,MACjB,EAAE;AAAA,IACJ;AAAA,EACF;AACA,SAAO,IAAI,SAAS,KAAK,UAAU,QAAQ,GAAG;AAAA,IAC5C,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,EAChD,CAAC;AACH;AAQA,eAAe,WACb,QACA,SACA,aAAgC,UAChC,cAAsC,CAAC,GACvC,UAAmC,CAAC,GACwC;AAC5E,QAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,QAAM,WAAW,qBAAqB,IAAI,YAAY;AACtD,QAAM,UACJ,eAAe,SAAS,MAAM,cAAc,OAAO,IAAI,MAAM,gBAAgB,OAAO;AAItF,QAAM,YAAY;AAKlB,QAAM,YAAY,mBAAmB,QAAQ;AAAA,IAC3C,OAAO;AAAA,IACP,MAAM;AAAA,IACN,QAAQ;AAAA,EACV,CAAC;AACD,MAAI,CAAC,UAAU,IAAI;AACjB,WAAO,EAAE,IAAI,OAAO,UAAU,wBAAwB,UAAU,OAAO,UAAU,OAAO,EAAE;AAAA,EAC5F;AACA,QAAM,EAAE,OAAO,MAAM,OAAO,IAAI;AAEhC,QAAM,SAAS,MAAM,OAAO,QAAQ,EAAE,OAAO,MAAM,QAAQ,SAAS,QAAQ,CAAC;AAC7E,SAAO,uBAAuB,OAAO,UAAU,MAAM,KAAK,EAAE,IAAI,MAAM,OAAO;AAC/E;AASA,SAAS,uBACP,UACA,QAC+E;AAC/E,QAAM,cAAc,WAAW,UAAa,WAAW,QAAQ,EAAE,kBAAkB;AACnF,MAAI,CAAC,eAAe,CAAC,UAAU,QAAQ,EAAG,QAAO;AACjD,QAAM,SAAS,SAAS,UAAU,MAAM;AACxC,MAAI,OAAO,QAAS,QAAO,EAAE,IAAI,MAAM,QAAQ,OAAO,KAAK;AAC3D,QAAM,MAAM,IAAI,UAAU;AAAA,IACxB,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK,EAAE,QAAQ,OAAO,OAAO,OAAO;AAAA,EACtC,CAAC;AACD,SAAO,EAAE,IAAI,OAAO,UAAU,qBAAqB,GAAG,EAAE;AAC1D;AAQA,SAAS,WAAW,QAAiB,QAA2B;AAC9D,MAAI,WAAW,QAAW;AACxB,WAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3C;AACA,MAAI,kBAAkB,UAAU;AAC9B,WAAO;AAAA,EACT;AACA,SAAO,IAAI,SAAS,KAAK,UAAU,MAAM,GAAG;AAAA,IAC1C,QAAQ,UAAU;AAAA,IAClB,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,EAChD,CAAC;AACH;AAOA,SAAS,qBAAqB,KAAwB;AACpD,QAAM,WAAW,sBAAsB,GAAG;AAG1C,QAAM,SAAS,qBAAqB,SAAS,IAAI;AACjD,SAAO,IAAI,SAAS,KAAK,UAAU,QAAQ,GAAG;AAAA,IAC5C;AAAA,IACA,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,EAChD,CAAC;AACH;AAqGO,IAAM,yBAAyB,oBAAI,IAAI,CAAC,QAAQ,OAAO,SAAS,QAAQ,CAAC;AA+BhF,SAAS,iBAAiB,UAAoB,aAAgC;AAC5E,MAAI,CAAC,GAAG,WAAW,EAAE,WAAW,EAAG,QAAO;AAC1C,QAAM,SAAS,IAAI,QAAQ,SAAS,OAAO;AAC3C,aAAW,CAAC,GAAG,CAAC,KAAK,YAAY,QAAQ,GAAG;AAC1C,QAAI,EAAE,YAAY,MAAM,aAAc;AACtC,QAAI,CAAC,OAAO,IAAI,CAAC,EAAG,QAAO,IAAI,GAAG,CAAC;AAAA,EACrC;AACA,aAAW,MAAM,YAAY,aAAa,GAAG;AAC3C,WAAO,OAAO,cAAc,EAAE;AAAA,EAChC;AACA,SAAO,IAAI,SAAS,SAAS,MAAM;AAAA,IACjC,QAAQ,SAAS;AAAA,IACjB,YAAY,SAAS;AAAA,IACrB,SAAS;AAAA,EACX,CAAC;AACH;AAGA,SAAS,yBAAyB,QAA0B;AAC1D,QAAM,WAA8B;AAAA,IAClC,MAAM;AAAA,IACN,SAAS,UAAU,MAAM;AAAA,EAC3B;AACA,SAAO,IAAI,SAAS,KAAK,UAAU,QAAQ,GAAG;AAAA,IAC5C,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,EAChD,CAAC;AACH;AAGA,SAAS,mBAAmB,QAA0B;AACpD,QAAM,WAA8B;AAAA,IAClC,MAAM;AAAA,IACN,SAAS,sBAAsB,MAAM;AAAA,EACvC;AACA,SAAO,IAAI,SAAS,KAAK,UAAU,QAAQ,GAAG;AAAA,IAC5C,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,EAChD,CAAC;AACH;AAEA,eAAsB,kBACpB,SACA,aACA,OAAiC,CAAC,GACf;AACnB,QAAM,SAAS,QAAQ,OAAO,YAAY;AAC1C,QAAM,SAAS,YAAY,MAAM;AAOjC,MAAI,KAAK,UAAU,QAAW;AAC5B,QAAI,WAAW,UAAa,OAAO,OAAO,YAAY,YAAY;AAChE,aAAO,yBAAyB,MAAM;AAAA,IACxC;AACA,QAAI,KAAK,aAAa,YAAY,uBAAuB,IAAI,MAAM,GAAG;AACpE,YAAM,YAAY,oBAAoB,OAAO;AAC7C,UAAI,CAAC,UAAU,MAAO,QAAO,mBAAmB,UAAU,MAAM;AAAA,IAClE;AACA,QAAI;AAEF,YAAM,UAAmC,CAAC;AAC1C,UAAI,KAAK,YAAY,QAAQ;AAC3B,cAAM,eAAe,MAAM,iBAAiB,SAAS,KAAK,YAAY,OAAO;AAC7E,YAAI,aAAc,QAAO;AAAA,MAC3B;AACA,YAAM,UAAU,MAAM;AAAA,QACpB;AAAA,QACA;AAAA,QACA,KAAK,cAAc;AAAA,QACnB,KAAK,UAAU,CAAC;AAAA,QAChB;AAAA,MACF;AACA,UAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ;AAChC,aAAO,WAAW,QAAQ,QAAQ,OAAO,MAAM;AAAA,IACjD,SAAS,KAAK;AACZ,aAAO,qBAAqB,GAAG;AAAA,IACjC;AAAA,EACF;AAMA,SAAO,aAAa,SAAS,QAAQ,MAAM,KAAK,KAAK;AACvD;AAcA,eAAe,sBACb,SACA,SACA,QACA,MACA,OACe;AACf,QAAM,SAAS,QAAQ,OAAO,YAAY;AAC1C,QAAM,UAAU,OAAO,SAAqD;AAC1E,eAAW,QAAQ,MAAM;AACvB,UAAI,QAAQ,aAAa,OAAW;AACpC,YAAM,KAAK,OAAO;AAAA,IACpB;AAAA,EACF;AAEA,MAAI,MAAM,UAAW,OAAM,QAAQ,MAAM,SAAS;AAGlD,MACE,QAAQ,aAAa,UACrB,KAAK,aAAa,YAClB,uBAAuB,IAAI,MAAM,GACjC;AACA,UAAM,YAAY,oBAAoB,OAAO;AAC7C,QAAI,CAAC,UAAU,MAAO,SAAQ,WAAW,mBAAmB,UAAU,MAAM;AAAA,EAC9E;AACA,MAAI,QAAQ,aAAa,UAAa,MAAM,YAAY;AACtD,UAAM,QAAQ,MAAM,UAAU;AAAA,EAChC;AACA,MAAI,QAAQ,aAAa,QAAW;AAClC,UAAM,gBAAgB,SAAS,SAAS,QAAQ,MAAM,MAAM;AAAA,EAC9D;AACF;AAOA,eAAe,gBACb,SACA,SACA,QACA,MACA,QACe;AAEf,MAAI,WAAW,UAAa,OAAO,OAAO,YAAY,YAAY;AAChE,YAAQ,WAAW,yBAAyB,MAAM;AAClD;AAAA,EACF;AAEA,MAAI,KAAK,YAAY,QAAQ;AAC3B,UAAM,eAAe,MAAM,iBAAiB,SAAS,KAAK,YAAY,QAAQ,GAAG;AACjF,QAAI,cAAc;AAChB,cAAQ,WAAW;AACnB;AAAA,IACF;AAAA,EACF;AACA,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,KAAK,cAAc;AAAA,IACnB,KAAK,UAAU,CAAC;AAAA,IAChB,QAAQ;AAAA,EACV;AACA,UAAQ,WAAW,QAAQ,KAAK,WAAW,QAAQ,QAAQ,OAAO,MAAM,IAAI,QAAQ;AACtF;AAEA,eAAe,aACb,SACA,QACA,MACA,OACmB;AACnB,QAAM,UAA4B;AAAA,IAChC;AAAA,IACA,iBAAiB,IAAI,QAAQ;AAAA,IAC7B,KAAK,CAAC;AAAA,IACN,WAAW,KAAK,aAAa,WAAW,OAAO,WAAW;AAAA,EAC5D;AACA,MAAI;AACF,UAAM,sBAAsB,SAAS,SAAS,QAAQ,MAAM,KAAK;AACjE,QAAI,MAAM,YAAY;AACpB,iBAAW,QAAQ,MAAM,YAAY;AACnC,cAAM,KAAK,OAAO;AAAA,MACpB;AAAA,IACF;AAIA,UAAM,gBACJ,QAAQ,YACR,IAAI;AAAA,MACF,KAAK,UAAU,EAAE,MAAM,yBAAyB,SAAS,oBAAoB,CAAC;AAAA,MAC9E;AAAA,QACE,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAChD;AAAA,IACF;AACF,WAAO,iBAAiB,eAAe,QAAQ,eAAe;AAAA,EAChE,SAAS,KAAK;AACZ,WAAO,cAAc,KAAK,SAAS,MAAM,OAAO;AAAA,EAClD;AACF;AAOA,eAAe,cACb,KACA,SACA,SACmB;AACnB,QAAM,gBAAgB,qBAAqB,GAAG;AAC9C,MAAI,YAAY,QAAW;AACzB,UAAM,WAAkC;AAAA,MACtC,GAAG;AAAA,MACH,UAAU;AAAA,MACV,OAAO;AAAA,IACT;AACA,eAAW,QAAQ,SAAS;AAC1B,UAAI;AACF,cAAM,KAAK,QAAQ;AAAA,MACrB,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AACA,SAAO,iBAAiB,eAAe,QAAQ,eAAe;AAChE;","names":[]}

package/dist/chunk-63BUBV5L.js

@@ -0,0 +1,64 @@
+// src/server/define/define-agent-tool.ts
+import { z } from "zod";
+var TOOL_NAME_REGEX = /^[a-zA-Z][a-zA-Z0-9_-]{0,63}$/;
+function isZodObject(schema) {
+  let current = schema;
+  for (let depth = 0; depth < 10; depth++) {
+    if (current instanceof z.ZodObject) return true;
+    const z4 = current.def;
+    if (z4?.type === "object") return true;
+    const z3 = current._def;
+    if (z3?.typeName === "ZodObject") return true;
+    const next = z4?.innerType ?? z4?.in ?? z3?.schema ?? z3?.innerType;
+    if (next !== void 0) {
+      current = next;
+      continue;
+    }
+    return false;
+  }
+  return false;
+}
+function defineAgentTool(spec) {
+  if (!TOOL_NAME_REGEX.test(spec.name)) {
+    throw new Error(
+      `defineAgentTool: name must match ${TOOL_NAME_REGEX.source}. Got: ${JSON.stringify(spec.name)}`
+    );
+  }
+  if (!isZodObject(spec.inputSchema)) {
+    throw new Error("defineAgentTool: inputSchema must be a ZodObject (z.object({...}))");
+  }
+  if (spec.description.length === 0) {
+    console.warn(
+      `defineAgentTool(${JSON.stringify(spec.name)}): empty description degrades LLM tool selection \u2014 provide a one-sentence summary.`
+    );
+  }
+  const { $schema: _$schema, ...inputSchema } = z.toJSONSchema(spec.inputSchema);
+  return {
+    name: spec.name,
+    description: spec.description,
+    inputSchema,
+    handler: async (input, ctx) => {
+      const parsed = spec.inputSchema.parse(input);
+      const result = await spec.handler(parsed, ctx);
+      if (spec.toModelOutput) return spec.toModelOutput(result);
+      if (typeof result !== "string") {
+        throw new Error(
+          `defineAgentTool(${JSON.stringify(spec.name)}): handler returned a non-string; provide toModelOutput to map it to a string for the model.`
+        );
+      }
+      return result;
+    },
+    // M18 — carry the per-target formatters for the app (ignored by the SDK wire).
+    ...spec.transform !== void 0 ? { transform: spec.transform } : {}
+  };
+}
+function applyTransform(tool, result, target) {
+  const fn = tool.transform?.[target];
+  return fn ? fn(result) : result;
+}
+
+export {
+  defineAgentTool,
+  applyTransform
+};
+//# sourceMappingURL=chunk-63BUBV5L.js.map

package/dist/chunk-63BUBV5L.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/define/define-agent-tool.ts"],"sourcesContent":["import { z } from 'zod'\n\n/**\n * Item #4 — `defineAgentTool`\n *\n * Sugar over the `@theokit/sdk` `CustomTool` contract. Takes a Zod schema +\n * handler and produces a structurally-compatible `CustomTool` that\n * `Agent.create({ tools: [...] })` accepts.\n *\n * Uses Zod v4's native `z.toJSONSchema()` to convert the input schema to\n * JSON Schema for LLM providers.\n *\n * Handler error propagation:\n *   `defineAgentTool` parses the input via the Zod schema BEFORE calling the\n *   user handler. Invalid input throws a `ZodError`, which the SDK's tool-\n *   dispatcher treats as a tool failure and surfaces to the model as a tool\n *   error (the SDK owns the wire; ADR D3).\n */\n\n/**\n * Local mirror of the SDK's `CustomTool` interface. We don't `import type`\n * from `@theokit/sdk` because the SDK is an optional peer (consumers who\n * never call `defineAgentTool` shouldn't need it installed). The shape is\n * the wire contract; any structurally-matching object is accepted by\n * `Agent.create({ tools })`.\n *\n * @public\n */\nexport interface CustomTool {\n  name: string\n  description: string\n  inputSchema: Record<string, unknown>\n  handler: (\n    input: Record<string, unknown>,\n    ctx?: { signal?: AbortSignal; context?: unknown },\n  ) => string | Promise<string>\n  /** M18 — optional per-target formatters for the app's UI/transcript (ignored by the SDK wire). */\n  transform?: ToolTransform\n}\n\n/**\n * M18 — per-target formatters. `display` shapes the rich handler result for the UI; `transcript`\n * shapes it for a saved transcript. Applied by {@link applyTransform}, never by the model wire.\n */\nexport interface ToolTransform<R = unknown> {\n  display?: (result: R) => unknown\n  transcript?: (result: R) => unknown\n}\n\n/**\n * Spec accepted by {@link defineAgentTool}. `inputSchema` is a Zod 3 schema\n * rooted in `z.object(...)`. The `handler` argument type is inferred via\n * `z.infer<T>`.\n *\n * @public\n */\nexport interface DefineAgentToolSpec<T extends z.ZodType, R = string> {\n  /** Tool name surfaced to the LLM. Must match `^[a-zA-Z][a-zA-Z0-9_-]{0,63}$`. */\n  name: string\n  /** Description surfaced to the LLM. Required — drives tool-selection accuracy. */\n  description: string\n  /** Zod schema describing the input. Must be `z.object(...)` at the root. */\n  inputSchema: T\n  /**\n   * Handler invoked with the parsed input and, optionally, the run `ctx` (M7). `ctx.context`\n   * is the object supplied once at the agent level (`defineAgent({ context })`) or per-run —\n   * read it for shared config like `projectRoot` instead of baking it into the factory.\n   * `ctx.signal` is the abort signal. Optional so existing one-arg handlers keep working.\n   *\n   * M18 — the handler may return RICH data `R` (not just a string) when `toModelOutput` is\n   * provided to map it to the model-visible string.\n   */\n  handler: (\n    input: z.infer<T>,\n    ctx?: { signal?: AbortSignal; context?: unknown },\n  ) => R | Promise<R>\n  /**\n   * M18 — map the rich handler result `R` to the string the model sees. Required (in practice)\n   * when `handler` returns a non-string; absent ⇒ the handler must return a string.\n   */\n  toModelOutput?: (result: R) => string\n  /** M18 — per-target formatters (`display` / `transcript`) for the app, applied by {@link applyTransform}. */\n  transform?: ToolTransform<R>\n}\n\nconst TOOL_NAME_REGEX = /^[a-zA-Z][a-zA-Z0-9_-]{0,63}$/\n\nfunction isZodObject(schema: z.ZodType): boolean {\n  // Refinements (`.refine`), transforms (`.transform`), and defaults wrap the\n  // underlying schema — walk the chain until we hit a ZodObject (or give up).\n  // Supports both zod 4 (`instanceof z.ZodObject`, `def.type === 'object'`,\n  // wrappers via `def.innerType` / pipe via `def.in`) and zod 3\n  // (`_def.typeName === 'ZodObject'`, wrappers via `_def.schema`/`_def.innerType`).\n  let current: unknown = schema\n  for (let depth = 0; depth < 10; depth++) {\n    if (current instanceof z.ZodObject) return true\n    const z4 = (current as { def?: { type?: string; innerType?: unknown; in?: unknown } }).def\n    if (z4?.type === 'object') return true\n    const z3 = (current as { _def?: { typeName?: string; schema?: unknown; innerType?: unknown } })\n      ._def\n    if (z3?.typeName === 'ZodObject') return true\n    const next = z4?.innerType ?? z4?.in ?? z3?.schema ?? z3?.innerType\n    if (next !== undefined) {\n      current = next\n      continue\n    }\n    return false\n  }\n  return false\n}\n\n/**\n * Build a {@link CustomTool} from a Zod 3 schema + handler.\n *\n * Behavior:\n * - Validates `name` matches the LLM tool-name regex.\n * - Requires `inputSchema` to be a `ZodObject` (Anthropic + SDK contract).\n * - Warns (not throws) if `description` is empty — empty descriptions\n *   degrade LLM tool selection.\n * - Converts the Zod schema to JSON Schema 7 inline (no `$ref`s — LLMs handle\n *   inline schemas more reliably).\n * - Strips the top-level `$schema` field (Anthropic rejects schemas with\n *   `$schema` at root in some provider modes).\n * - Wraps the handler to parse the input via the Zod schema BEFORE invoking\n *   the user code — bad LLM-supplied input throws `ZodError`, which the SDK\n *   converts to `tool_result(isError)`.\n *\n * @public\n */\nexport function defineAgentTool<T extends z.ZodType, R = string>(\n  spec: DefineAgentToolSpec<T, R>,\n): CustomTool {\n  if (!TOOL_NAME_REGEX.test(spec.name)) {\n    throw new Error(\n      `defineAgentTool: name must match ${TOOL_NAME_REGEX.source}. Got: ${JSON.stringify(spec.name)}`,\n    )\n  }\n  if (!isZodObject(spec.inputSchema)) {\n    throw new Error('defineAgentTool: inputSchema must be a ZodObject (z.object({...}))')\n  }\n  if (spec.description.length === 0) {\n    console.warn(\n      `defineAgentTool(${JSON.stringify(spec.name)}): empty description degrades LLM tool selection — provide a one-sentence summary.`,\n    )\n  }\n\n  // Zod v4 native JSON Schema conversion — replaces zod-to-json-schema dep.\n  // Strip $schema (Anthropic + some providers reject it).\n  const { $schema: _$schema, ...inputSchema } = z.toJSONSchema(spec.inputSchema) as Record<\n    string,\n    unknown\n  > & {\n    $schema?: unknown\n  }\n\n  return {\n    name: spec.name,\n    description: spec.description,\n    inputSchema,\n    handler: async (\n      input: Record<string, unknown>,\n      ctx?: { signal?: AbortSignal; context?: unknown },\n    ): Promise<string> => {\n      const parsed = spec.inputSchema.parse(input)\n      // M7 — forward the run ctx so the handler can read `ctx.context` (e.g. projectRoot).\n      const result = await spec.handler(parsed, ctx)\n      // M18 — shape the (possibly rich) result into the model-visible string.\n      if (spec.toModelOutput) return spec.toModelOutput(result)\n      if (typeof result !== 'string') {\n        throw new Error(\n          `defineAgentTool(${JSON.stringify(spec.name)}): handler returned a non-string; provide toModelOutput to map it to a string for the model.`,\n        )\n      }\n      return result\n    },\n    // M18 — carry the per-target formatters for the app (ignored by the SDK wire).\n    ...(spec.transform !== undefined ? { transform: spec.transform as ToolTransform } : {}),\n  }\n}\n\n/**\n * M18 — apply a tool's `transform` for a target (`display` / `transcript`). Returns the formatted\n * value, or the raw `result` when the tool declares no transform for that target.\n */\nexport function applyTransform(\n  tool: CustomTool,\n  result: unknown,\n  target: 'display' | 'transcript',\n): unknown {\n  const fn = tool.transform?.[target]\n  return fn ? fn(result) : result\n}\n"],"mappings":";AAAA,SAAS,SAAS;AAqFlB,IAAM,kBAAkB;AAExB,SAAS,YAAY,QAA4B;AAM/C,MAAI,UAAmB;AACvB,WAAS,QAAQ,GAAG,QAAQ,IAAI,SAAS;AACvC,QAAI,mBAAmB,EAAE,UAAW,QAAO;AAC3C,UAAM,KAAM,QAA2E;AACvF,QAAI,IAAI,SAAS,SAAU,QAAO;AAClC,UAAM,KAAM,QACT;AACH,QAAI,IAAI,aAAa,YAAa,QAAO;AACzC,UAAM,OAAO,IAAI,aAAa,IAAI,MAAM,IAAI,UAAU,IAAI;AAC1D,QAAI,SAAS,QAAW;AACtB,gBAAU;AACV;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAoBO,SAAS,gBACd,MACY;AACZ,MAAI,CAAC,gBAAgB,KAAK,KAAK,IAAI,GAAG;AACpC,UAAM,IAAI;AAAA,MACR,oCAAoC,gBAAgB,MAAM,UAAU,KAAK,UAAU,KAAK,IAAI,CAAC;AAAA,IAC/F;AAAA,EACF;AACA,MAAI,CAAC,YAAY,KAAK,WAAW,GAAG;AAClC,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACtF;AACA,MAAI,KAAK,YAAY,WAAW,GAAG;AACjC,YAAQ;AAAA,MACN,mBAAmB,KAAK,UAAU,KAAK,IAAI,CAAC;AAAA,IAC9C;AAAA,EACF;AAIA,QAAM,EAAE,SAAS,UAAU,GAAG,YAAY,IAAI,EAAE,aAAa,KAAK,WAAW;AAO7E,SAAO;AAAA,IACL,MAAM,KAAK;AAAA,IACX,aAAa,KAAK;AAAA,IAClB;AAAA,IACA,SAAS,OACP,OACA,QACoB;AACpB,YAAM,SAAS,KAAK,YAAY,MAAM,KAAK;AAE3C,YAAM,SAAS,MAAM,KAAK,QAAQ,QAAQ,GAAG;AAE7C,UAAI,KAAK,cAAe,QAAO,KAAK,cAAc,MAAM;AACxD,UAAI,OAAO,WAAW,UAAU;AAC9B,cAAM,IAAI;AAAA,UACR,mBAAmB,KAAK,UAAU,KAAK,IAAI,CAAC;AAAA,QAC9C;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA;AAAA,IAEA,GAAI,KAAK,cAAc,SAAY,EAAE,WAAW,KAAK,UAA2B,IAAI,CAAC;AAAA,EACvF;AACF;AAMO,SAAS,eACd,MACA,QACA,QACS;AACT,QAAM,KAAK,KAAK,YAAY,MAAM;AAClC,SAAO,KAAK,GAAG,MAAM,IAAI;AAC3B;","names":[]}

package/dist/{chunk-RBRDTYOO.js → chunk-CEHXC5NI.js}

@@ -181,7 +181,7 @@ var HttpTransport = class {
   constructor(options) {
     this.#api = options.api;
     this.#headers = options.headers ?? {};
-    this.#fetch = options.fetch ?? globalThis.fetch;
+    this.#fetch = options.fetch ?? globalThis.fetch.bind(globalThis);
   }
   /** Resolve the configured headers per request (a resolver evaluates now — dynamic auth is never stale). */
   #resolveHeaders() {
@@ -467,4 +467,4 @@ export {
   ChannelTransport,
   createAgentClient
 };
-//# sourceMappingURL=chunk-RBRDTYOO.js.map
+//# sourceMappingURL=chunk-CEHXC5NI.js.map

package/dist/chunk-CEHXC5NI.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client/consume-ui-message-stream.ts","../src/client/agent-client.ts","../src/client/http-transport.ts","../src/client/last-user-text.ts","../src/client/in-process-transport.ts","../src/client/channel-transport.ts","../src/client/create-agent-client.ts"],"sourcesContent":["import type { UIMessage, UIMessageChunk } from 'ai'\n\n/**\n * M2 (theokit-ai-first) — read a TheoKit agent endpoint's `UIMessageStream` SSE `Response`\n * into reconstructed assistant `UIMessage`s, reusing the `ai` package's own consumer\n * primitives (`parseJsonEventStream` + `readUIMessageStream`) — the exact path\n * `@ai-sdk/react`'s `useChat` runs internally. No reinvented wire parser (Rule 9).\n *\n * `ai` is an OPTIONAL peer dependency, so it is imported dynamically: an app that never\n * calls an agent never pays for it, and importing `theokit/client` does not hard-require\n * `ai` (mirrors how the agent runtime dynamically imports `@theokit/sdk`). An agent app\n * always has `ai` installed (it is the UIMessageStream consumer).\n *\n * `onMessage` is invoked on every reconstruction step with the latest snapshot of the\n * assistant message, so a caller (the `useAgent` hook) can render streaming updates.\n */\nexport async function consumeUIMessageStream(\n  response: Response,\n  onMessage: (message: UIMessage) => void,\n): Promise<void> {\n  const chunkStream = await responseToChunkStream(response)\n  await consumeChunkStream(chunkStream, onMessage)\n}\n\n/**\n * M41 (ADR-0050 D3) — the reusable middle piece: a UIMessageStream SSE `Response` →\n * `ReadableStream<UIMessageChunk>`, reusing `ai`'s own `parseJsonEventStream` (the exact primitive\n * `useChat` runs). This is precisely what a `ChatTransport.sendMessages` returns, so `HttpTransport`\n * builds on it directly (no reinvented wire parser — Rule 9). A body-less response yields an empty stream.\n */\nexport async function responseToChunkStream(\n  response: Response,\n): Promise<ReadableStream<UIMessageChunk>> {\n  if (response.body === null) {\n    return new ReadableStream<UIMessageChunk>({\n      start(controller) {\n        controller.close()\n      },\n    })\n  }\n\n  const { parseJsonEventStream, uiMessageChunkSchema } = await import('ai')\n\n  // ai validates each SSE JSON frame against its own strict chunk schema (the exact gate `useChat`\n  // runs), then yields `{ success, value }`; forward the valid chunks.\n  const parsed = parseJsonEventStream({ stream: response.body, schema: uiMessageChunkSchema })\n  return new ReadableStream<UIMessageChunk>({\n    async start(controller) {\n      for await (const result of parsed) {\n        if (result.success) controller.enqueue(result.value)\n      }\n      controller.close()\n    },\n  })\n}\n\n/**\n * M41 (ADR-0050 D6) — read a `ReadableStream<UIMessageChunk>` into reconstructed assistant\n * `UIMessage`s via `ai`'s `readUIMessageStream`. Shared by `consumeUIMessageStream` (Response path)\n * and the framework-agnostic `AgentClient` store (transport path). `onMessage` fires on every\n * reconstruction step so a caller can render streaming updates.\n */\nexport async function consumeChunkStream(\n  stream: ReadableStream<UIMessageChunk>,\n  onMessage: (message: UIMessage) => void,\n): Promise<void> {\n  const { readUIMessageStream } = await import('ai')\n  for await (const message of readUIMessageStream({ stream })) {\n    onMessage(message)\n  }\n}\n","import type { UIMessage, UIMessageChunk } from 'ai'\n\nimport { consumeChunkStream } from './consume-ui-message-stream.js'\nimport type { AgentTransport, ApprovalDecision, RequestContext } from './transport.js'\n\nexport type UseAgentStatus = 'idle' | 'streaming' | 'done' | 'error'\n\n/** The observable state the store exposes (stable reference between emits — `useSyncExternalStore` contract). */\nexport interface AgentClientState {\n  messages: UIMessage[]\n  status: UseAgentStatus\n  error: Error | undefined\n}\n\n/** Derive the turn text from a typed input: `input.message` when present, else the serialized input. */\nfunction inputToText(input: unknown): string {\n  if (\n    typeof input === 'object' &&\n    input !== null &&\n    typeof (input as { message?: unknown }).message === 'string'\n  ) {\n    return (input as { message: string }).message\n  }\n  if (typeof input === 'string') return input\n  return JSON.stringify(input)\n}\n\n/** Build a user `UIMessage` from a typed input (text from `{ message }`, else the serialized input). */\nfunction buildUserMessage(input: unknown): UIMessage {\n  return {\n    id: crypto.randomUUID(),\n    role: 'user',\n    parts: [{ type: 'text', text: inputToText(input) }],\n  }\n}\n\n/**\n * M41 (ADR-0050 D6) — the framework-agnostic agent client store.\n *\n * Holds `messages`/`status`/`error`, drives an {@link AgentTransport}, and notifies subscribers on\n * change. It is the SINGLE consolidation point: web (`HttpTransport`) and terminal/desktop\n * (`InProcessTransport`) run the SAME store. `useAgent` is a thin React binding over it via\n * `useSyncExternalStore`; a standalone (no-React) client (M44) can subscribe directly. Being\n * framework-agnostic, it is unit-tested without a DOM.\n */\nexport class AgentClient<TInput = unknown> {\n  readonly #transport: AgentTransport\n  readonly #chatId = crypto.randomUUID()\n  readonly #listeners = new Set<() => void>()\n  /** M43 — resolves per-request context (evaluated on every send/reconnect — dynamic, never stale). */\n  readonly #contextResolver: (() => RequestContext | undefined) | undefined\n\n  #messages: UIMessage[] = []\n  #status: UseAgentStatus = 'idle'\n  #error: Error | undefined\n  #controller: AbortController | null = null\n  #snapshot: AgentClientState = { messages: [], status: 'idle', error: undefined }\n\n  constructor(transport: AgentTransport, contextResolver?: () => RequestContext | undefined) {\n    this.#transport = transport\n    this.#contextResolver = contextResolver\n  }\n\n  /** Subscribe to state changes; returns an unsubscribe fn. */\n  subscribe = (listener: () => void): (() => void) => {\n    this.#listeners.add(listener)\n    return () => {\n      this.#listeners.delete(listener)\n    }\n  }\n\n  /** The current immutable snapshot (stable reference until the next emit). */\n  getSnapshot = (): AgentClientState => this.#snapshot\n\n  #emit(): void {\n    this.#snapshot = { messages: this.#messages, status: this.#status, error: this.#error }\n    for (const listener of this.#listeners) listener()\n  }\n\n  #upsert(message: UIMessage): void {\n    const next = [...this.#messages]\n    const idx = next.findIndex((existing) => existing.id === message.id)\n    if (idx >= 0) next[idx] = message\n    else next.push(message)\n    this.#messages = next\n  }\n\n  async #drive(\n    open: () => Promise<ReadableStream<UIMessageChunk> | null>,\n    controller: AbortController,\n  ): Promise<void> {\n    // Read via a function (not a narrowed local) — `aborted` flips ASYNC across the awaits below, so the\n    // control-flow narrowing of a direct `signal.aborted` read would be wrong. A stale drive (its\n    // controller aborted because a newer send/abort took over) MUST NOT clobber the newer status.\n    const aborted = (): boolean => controller.signal.aborted\n    try {\n      const stream = await open()\n      if (aborted()) return\n      if (stream === null) {\n        // Nothing to resume (e.g. reconnect after the run completed). Settle without error.\n        this.#status = this.#messages.length > 0 ? 'done' : 'idle'\n        this.#emit()\n        return\n      }\n      await consumeChunkStream(stream, (message) => {\n        if (aborted()) return\n        this.#upsert(message)\n        this.#emit()\n      })\n      if (aborted()) return\n      this.#status = 'done'\n      this.#emit()\n    } catch (err) {\n      if (aborted()) return\n      this.#error = err instanceof Error ? err : new Error(String(err))\n      this.#status = 'error'\n      this.#emit()\n    }\n  }\n\n  /** Send a typed input; opens a fresh stream (replaces prior messages). */\n  send = (input: TInput): void => {\n    this.abort()\n    const controller = new AbortController()\n    this.#controller = controller\n    this.#messages = []\n    this.#error = undefined\n    this.#status = 'streaming'\n    this.#emit()\n    const context = this.#contextResolver?.()\n    void this.#drive(\n      () =>\n        this.#transport.sendMessages({\n          trigger: 'submit-message',\n          chatId: this.#chatId,\n          messageId: undefined,\n          messages: [buildUserMessage(input)],\n          abortSignal: controller.signal,\n          // Only object inputs flow as the request `body` (the turn text is always in `messages`);\n          // a primitive input is carried by the user message, never spread into the body.\n          body: typeof input === 'object' && input !== null ? input : undefined,\n          // M43 — per-request context reaches every transport (headers → HTTP, metadata → in-process/channel).\n          headers: context?.headers,\n          metadata: context?.metadata,\n        }),\n      controller,\n    )\n  }\n\n  /** Resume an interrupted stream via the transport's `reconnectToStream` (no-op when unavailable). */\n  reconnect = (): void => {\n    const controller = new AbortController()\n    this.#controller = controller\n    this.#status = 'streaming'\n    this.#emit()\n    const context = this.#contextResolver?.()\n    void this.#drive(\n      () =>\n        this.#transport.reconnectToStream({\n          chatId: this.#chatId,\n          headers: context?.headers,\n          metadata: context?.metadata,\n        }),\n      controller,\n    )\n  }\n\n  /** Abort an in-flight stream (not an error — leaves messages as-is). */\n  abort = (): void => {\n    this.#controller?.abort()\n    this.#controller = null\n  }\n\n  /** Clear messages + error, back to idle. */\n  reset = (): void => {\n    this.abort()\n    this.#messages = []\n    this.#error = undefined\n    this.#status = 'idle'\n    this.#emit()\n  }\n\n  /** Settle a paused HITL approval via the transport's HITL path (HTTP POST or inline callback). */\n  approve = async (approvalId: string, decision: ApprovalDecision): Promise<void> => {\n    await this.#transport.approve?.(approvalId, decision)\n  }\n}\n","import type { ChatTransport, UIMessage, UIMessageChunk } from 'ai'\n\nimport { responseToChunkStream } from './consume-ui-message-stream.js'\nimport type { AgentTransport, ApprovalDecision } from './transport.js'\n\n/** Extra request headers — a static record OR a resolver called per request (for dynamic auth). */\nexport type HeadersResolver = Record<string, string> | (() => Record<string, string> | undefined)\n\nexport interface HttpTransportOptions {\n  /** Agent endpoint path or URL, e.g. `/api/agents/support`. */\n  api: string\n  /**\n   * Extra request headers (e.g. auth). Static record OR a resolver evaluated on EVERY request — pass a\n   * resolver when the value is dynamic (a rotating JWT), so a stale header is never sent. Merged UNDER\n   * per-request headers.\n   */\n  headers?: HeadersResolver\n  /** Override fetch (primarily for tests / non-browser hosts) — static; resolved once at construction. */\n  fetch?: typeof fetch\n}\n\n/** Normalize `ai`'s `Record | Headers | undefined` header option into a plain record. */\nfunction toRecord(headers: Record<string, string> | Headers | undefined): Record<string, string> {\n  if (headers === undefined) return {}\n  if (headers instanceof Headers) return Object.fromEntries(headers.entries())\n  return headers\n}\n\n/**\n * M41 (ADR-0050 D3) — `ChatTransport` over the web agent path.\n *\n * - `sendMessages`: `POST <api>` with the UIMessageStream `accept` + the `X-Theo-Action` CSRF header\n *   (HTTP method + headers are identical to the pre-M41 `useAgent` fetch; the body shape is a superset —\n *   `{ ...input, messages: [UIMessage] }` — which the server's dual-path parser accepts, so no\n *   regression), captures the server-minted `x-theokit-run-id`, and returns `ReadableStream<UIMessageChunk>`\n *   via `ai`'s own SSE parser (`responseToChunkStream`).\n * - `reconnectToStream`: `GET <api>/runs/<runId>/stream` (M37 durable transport); 404 → `null` (the run\n *   completed / was evicted). A caller may pass a `Last-Event-ID` header to resume only the tail; by\n *   default the server replays the run from the start and the client upserts by message id (idempotent).\n * - `approve`: `POST <api>/approve/<id>` (out-of-band HITL settle).\n *\n * Implemented directly (not by subclassing `DefaultChatTransport`) because reconnect keys on our\n * server-minted `runId` captured from a response header, which the base class does not expose — see\n * ADR-0050 D3.\n */\nexport class HttpTransport implements AgentTransport {\n  readonly #api: string\n  readonly #headers: HeadersResolver\n  readonly #fetch: typeof fetch\n  /** Server-minted id of the last run (from `x-theokit-run-id`) — the reconnect key. */\n  #lastRunId: string | undefined\n\n  constructor(options: HttpTransportOptions) {\n    this.#api = options.api\n    this.#headers = options.headers ?? {}\n    // BIND the default fetch to globalThis — the native `fetch` throws `TypeError: Illegal invocation` when\n    // invoked as a method (`this.#fetch(...)` would set `this` to this transport instance, not the window).\n    // An injected fetch (tests / non-browser hosts) is a plain function and is used as-is.\n    this.#fetch = options.fetch ?? globalThis.fetch.bind(globalThis)\n  }\n\n  /** Resolve the configured headers per request (a resolver evaluates now — dynamic auth is never stale). */\n  #resolveHeaders(): Record<string, string> {\n    return (typeof this.#headers === 'function' ? this.#headers() : this.#headers) ?? {}\n  }\n\n  async sendMessages(\n    options: Parameters<ChatTransport<UIMessage>['sendMessages']>[0],\n  ): Promise<ReadableStream<UIMessageChunk>> {\n    const { messages, abortSignal, headers, body } = options\n    // Only spread an object body (never a primitive — that would emit char-indexed keys). `body` is typed\n    // `object | undefined` (ai's `ChatRequestOptions`), so no cast is needed — the guard narrows to\n    // `object`. (A runtime-`null` body, which the type forbids, spreads to `{}` — harmless.) The server\n    // accepts `{ messages }` (ai shape) AND `{ ...input }` (typed input), preferring the turn text.\n    const extra = typeof body === 'object' ? body : undefined\n    const response = await this.#fetch(this.#api, {\n      method: 'POST',\n      headers: {\n        'content-type': 'application/json',\n        accept: 'text/event-stream',\n        'X-Theo-Action': '1',\n        ...this.#resolveHeaders(),\n        ...toRecord(headers),\n      },\n      body: JSON.stringify({ ...extra, messages }),\n      signal: abortSignal,\n    })\n    if (!response.ok) {\n      throw new Error(\n        `Agent request to ${this.#api} failed: ${response.status} ${response.statusText}`,\n      )\n    }\n    this.#lastRunId = response.headers.get('x-theokit-run-id') ?? undefined\n    return responseToChunkStream(response)\n  }\n\n  async reconnectToStream(\n    options: Parameters<ChatTransport<UIMessage>['reconnectToStream']>[0],\n  ): Promise<ReadableStream<UIMessageChunk> | null> {\n    if (this.#lastRunId === undefined) return null\n    const response = await this.#fetch(`${this.#api}/runs/${this.#lastRunId}/stream`, {\n      method: 'GET',\n      headers: { ...this.#resolveHeaders(), ...toRecord(options.headers) },\n    })\n    if (response.status === 404) return null\n    if (!response.ok) {\n      throw new Error(\n        `Agent reconnect to run ${this.#lastRunId} failed: ${response.status} ${response.statusText}`,\n      )\n    }\n    return responseToChunkStream(response)\n  }\n\n  async approve(approvalId: string, decision: ApprovalDecision): Promise<void> {\n    const response = await this.#fetch(`${this.#api}/approve/${approvalId}`, {\n      method: 'POST',\n      headers: {\n        'content-type': 'application/json',\n        'X-Theo-Action': '1',\n        ...this.#resolveHeaders(),\n      },\n      body: JSON.stringify(decision),\n    })\n    if (!response.ok) {\n      throw new Error(`Approve ${approvalId} failed: ${response.status} ${response.statusText}`)\n    }\n  }\n}\n","import type { UIMessage } from 'ai'\n\n/**\n * M41/M42 — extract the turn text from the last user message's text parts. Shared by the transports\n * that hand a plain `message` string to an in-process/push runner (`InProcessTransport`,\n * `ChannelTransport`) rather than POSTing the `messages[]` array (`HttpTransport`). One definition (G12).\n */\nexport function extractLastUserText(messages: readonly UIMessage[]): string {\n  for (let i = messages.length - 1; i >= 0; i--) {\n    const message = messages[i]\n    if (message.role !== 'user') continue\n    const text = message.parts\n      .filter((part): part is { type: 'text'; text: string } => part.type === 'text')\n      .map((part) => part.text)\n      .join('')\n    if (text.length > 0) return text\n  }\n  return ''\n}\n","import type { ChatTransport, UIMessage, UIMessageChunk } from 'ai'\n\nimport { extractLastUserText } from './last-user-text.js'\nimport type { AgentTransport, ApprovalDecision } from './transport.js'\n\n/** An inline approval request handed to the transport's resolver (structural — no server import). */\nexport interface InProcessApprovalRequestLike {\n  approvalId: string\n  toolName: string\n  opts: unknown\n}\n\n/** Resolve one gated-tool approval inline (mirrors the SDK's `boolean | HitlDecision` return). */\nexport type InProcessAwaitApproval = (\n  req: InProcessApprovalRequestLike,\n) => Promise<boolean | ApprovalDecision>\n\n/** The input the injected runner receives (structurally compatible with `StreamAgentTurnInProcessInput`). */\nexport interface InProcessRunInput {\n  message: string\n  sessionId?: string\n  signal?: AbortSignal\n  awaitApproval?: InProcessAwaitApproval\n  /** M43 — per-request context (from `sendMessages`'s `metadata`) — tenant / provider / auth for the runner. */\n  context?: unknown\n}\n\n/**\n * The in-process turn runner. The consumer binds `streamAgentTurnInProcess(mod, apiKey, …)`:\n * `new InProcessTransport({ run: (input) => streamAgentTurnInProcess(mod, apiKey, input) })`.\n * Injecting it keeps this client module decoupled from `server/` and makes the transport testable.\n */\nexport type InProcessRunner = (input: InProcessRunInput) => AsyncGenerator<UIMessageChunk>\n\nexport interface InProcessTransportOptions {\n  run: InProcessRunner\n}\n\n/** Bridge an `AsyncGenerator<UIMessageChunk>` into a pull-based `ReadableStream<UIMessageChunk>`. */\nfunction generatorToStream(gen: AsyncGenerator<UIMessageChunk>): ReadableStream<UIMessageChunk> {\n  return new ReadableStream<UIMessageChunk>({\n    async pull(controller) {\n      try {\n        const result = await gen.next()\n        if (result.done === true) {\n          controller.close()\n          return\n        }\n        // After the done-guard, `result` is an IteratorYieldResult<UIMessageChunk> — value is typed.\n        controller.enqueue(result.value)\n      } catch (err) {\n        controller.error(err)\n      }\n    },\n    async cancel() {\n      await gen.return(undefined)\n    },\n  })\n}\n\n/**\n * M41 (ADR-0050 D4) — `ChatTransport` over the in-process seam (`streamAgentTurnInProcess`), for the\n * terminal/desktop surfaces that run client + server in ONE process (no HTTP loopback).\n *\n * - `sendMessages`: bridge the injected runner's `AsyncGenerator<UIMessageChunk>` into a\n *   `ReadableStream<UIMessageChunk>` (honoring `abortSignal`, which the runner forwards to the SDK).\n * - `reconnectToStream`: always `null` — a single process has no dropped server-side stream to resume\n *   (mirrors `ai`'s `DirectChatTransport`).\n * - `approve`: resolve the pending inline approval by id (the run parks on `awaitApproval`). An unknown\n *   id rejects (fail-fast, Rule 8 — never a silent resolve).\n *\n * Error asymmetry vs `HttpTransport` (by design, matching the `ChatTransport` contract): a runner that\n * throws SYNCHRONOUSLY surfaces the error when the stream is READ (via `controller.error`), not from the\n * `sendMessages` promise — whereas `HttpTransport` throws from `sendMessages` on a non-2xx response.\n */\nexport class InProcessTransport implements AgentTransport {\n  readonly #run: InProcessRunner\n  /** Pending inline approvals: approvalId → resolver of the parked `awaitApproval` promise. */\n  readonly #pending = new Map<string, (decision: boolean | ApprovalDecision) => void>()\n\n  constructor(options: InProcessTransportOptions) {\n    this.#run = options.run\n  }\n\n  #awaitApproval: InProcessAwaitApproval = (req) =>\n    new Promise<boolean | ApprovalDecision>((resolve, reject) => {\n      // Approval ids are server-minted UUIDs — a collision means a real bug (two turns reusing an id).\n      // Fail fast rather than silently overwrite the earlier turn's parked resolver (Rule 8).\n      if (this.#pending.has(req.approvalId)) {\n        reject(new Error(`Duplicate pending approval id '${req.approvalId}' — ids must be unique.`))\n        return\n      }\n      this.#pending.set(req.approvalId, resolve)\n    })\n\n  sendMessages(\n    options: Parameters<ChatTransport<UIMessage>['sendMessages']>[0],\n  ): Promise<ReadableStream<UIMessageChunk>> {\n    const { messages, abortSignal, metadata } = options\n    const generator = this.#run({\n      message: extractLastUserText(messages),\n      signal: abortSignal ?? undefined,\n      awaitApproval: this.#awaitApproval,\n      // M43 — forward per-request context (the seam's `metadata`) to the runner.\n      context: metadata,\n    })\n    return Promise.resolve(generatorToStream(generator))\n  }\n\n  reconnectToStream(): Promise<ReadableStream<UIMessageChunk> | null> {\n    return Promise.resolve(null)\n  }\n\n  approve(approvalId: string, decision: ApprovalDecision): Promise<void> {\n    const resolve = this.#pending.get(approvalId)\n    if (resolve === undefined) {\n      return Promise.reject(\n        new Error(`No pending approval '${approvalId}' (unknown or already settled).`),\n      )\n    }\n    this.#pending.delete(approvalId)\n    resolve(decision)\n    return Promise.resolve()\n  }\n}\n","import type { ChatTransport, UIMessage, UIMessageChunk } from 'ai'\n\nimport { extractLastUserText } from './last-user-text.js'\nimport type { AgentTransport, ApprovalDecision } from './transport.js'\n\n/** Handlers the transport hands to the injected push source for one turn. */\nexport interface ChannelTurnHandlers {\n  /** One pushed JSONL line (a serialized `UIMessageChunk`). */\n  onLine: (line: string) => void\n  /** The turn ended — no more lines. */\n  onClose: () => void\n  /** The push source failed. */\n  onError?: (err: unknown) => void\n}\n\n/**\n * The injected push source — a Tauri `Channel`/`invoke` bridge, kept STRUCTURAL so core adds no\n * `@tauri-apps/*` dependency and the transport is testable with a fake (ADR-0051 D2). The Tauri app\n * wires it: `new Channel()`, `channel.onmessage = onLine`, `invoke('run_agent', { message, channel })`,\n * returning a teardown that aborts the sidecar turn.\n */\nexport interface ChannelPushSource {\n  /**\n   * Start a turn; deliver each JSONL `UIMessageChunk` line to `onLine`, then `onClose`. Return a teardown.\n   * `turn.context` (M43) is the per-request context (from the seam's `metadata`) — the Tauri `invoke`\n   * forwards it to the sidecar. When no context is set it is present as `context: undefined` (the key is\n   * NOT absent) — a sidecar that checks `'context' in turn` should treat `undefined` as \"no context\".\n   */\n  start(turn: { message: string; context?: unknown }, handlers: ChannelTurnHandlers): () => void\n  /** Optional HITL settle (another Tauri `invoke`). */\n  settle?(approvalId: string, decision: ApprovalDecision): Promise<void>\n}\n\nexport interface ChannelTransportOptions {\n  source: ChannelPushSource\n}\n\n/**\n * M42 (ADR-0051) — `ChatTransport` over a Tauri-`Channel`-shaped push source, for the desktop webview.\n *\n * - `sendMessages`: start the turn via the injected source and bridge its pushed JSONL frames into a\n *   `ReadableStream<UIMessageChunk>` (built in `start` — a Channel is push, so the stream's queue buffers\n *   frames; ADR-0051 D3). A malformed JSONL line is SKIPPED, never fatal (ADR-0051 D4, Rule 8). `abortSignal`\n *   tears down the source and closes the stream.\n * - `reconnectToStream`: always `null` — the M36 sidecar runs the turn directly (no durable server stream);\n *   this is the honest parity for a single-process push surface (ADR-0051 D5; mirrors `InProcessTransport`).\n * - `approve`: routes to the injected `settle` (another Tauri `invoke`); absent `settle` → a typed error.\n *\n * The push source is INJECTED — core stays Tauri-agnostic and this transport is unit-tested with a fake.\n */\nexport class ChannelTransport implements AgentTransport {\n  readonly #source: ChannelPushSource\n\n  constructor(options: ChannelTransportOptions) {\n    this.#source = options.source\n  }\n\n  sendMessages(\n    options: Parameters<ChatTransport<UIMessage>['sendMessages']>[0],\n  ): Promise<ReadableStream<UIMessageChunk>> {\n    const { messages, abortSignal, metadata } = options\n    const message = extractLastUserText(messages)\n    const source = this.#source\n\n    // Per-stream teardown/abort-detach, hoisted so `cancel` (consumer stops reading) can also tear the\n    // source down. `closed` makes every terminal transition idempotent (no enqueue/close after close).\n    let closed = false\n    let teardown: () => void = () => undefined\n    let detachAbort: () => void = () => undefined\n\n    const stream = new ReadableStream<UIMessageChunk>({\n      start(controller) {\n        const finish = (settle: () => void): void => {\n          if (closed) return\n          closed = true\n          detachAbort()\n          settle()\n        }\n        teardown = source.start(\n          { message, context: metadata },\n          {\n            onLine: (line) => {\n              if (closed) return\n              // Skip a malformed pushed line — one bad frame must never crash the webview (ADR-0051 D4).\n              let parsed: unknown\n              try {\n                parsed = JSON.parse(line)\n              } catch {\n                return\n              }\n              // Discriminant guard: a `UIMessageChunk` is an object with a string `type`. The trust\n              // boundary here is the LOCAL sidecar (not the network), so a discriminant check — not the\n              // full `ai` schema (which isn't exposed standalone) — is proportionate: it rejects\n              // structureless / wrong-shape payloads before they reach `readUIMessageStream`. Same\n              // skip-not-crash policy as a parse error.\n              if (\n                typeof parsed !== 'object' ||\n                parsed === null ||\n                typeof (parsed as { type?: unknown }).type !== 'string'\n              ) {\n                return\n              }\n              controller.enqueue(parsed as UIMessageChunk)\n            },\n            onClose: () => {\n              finish(() => {\n                controller.close()\n              })\n            },\n            onError: (err) => {\n              finish(() => {\n                controller.error(err)\n              })\n            },\n          },\n        )\n        if (abortSignal !== undefined) {\n          const onAbort = (): void => {\n            finish(() => {\n              teardown()\n              controller.close()\n            })\n          }\n          if (abortSignal.aborted) onAbort()\n          else {\n            abortSignal.addEventListener('abort', onAbort)\n            detachAbort = () => {\n              abortSignal.removeEventListener('abort', onAbort)\n            }\n          }\n        }\n      },\n      cancel() {\n        // The consumer stopped reading (reader.cancel) — abort the source turn + drop the abort listener.\n        if (closed) return\n        closed = true\n        detachAbort()\n        teardown()\n      },\n    })\n    return Promise.resolve(stream)\n  }\n\n  reconnectToStream(): Promise<ReadableStream<UIMessageChunk> | null> {\n    return Promise.resolve(null)\n  }\n\n  async approve(approvalId: string, decision: ApprovalDecision): Promise<void> {\n    if (this.#source.settle === undefined) {\n      throw new Error(`This channel source has no HITL settle — cannot approve '${approvalId}'.`)\n    }\n    await this.#source.settle(approvalId, decision)\n  }\n}\n","import type { UIMessage } from 'ai'\n\nimport { AgentClient, type AgentClientState } from './agent-client.js'\nimport type { AgentTransport, ApprovalDecision, RequestContext } from './transport.js'\n\nexport interface CreateAgentClientOptions {\n  /**\n   * M43 — per-request context attached to every turn (`headers` → HTTP; `metadata` → in-process/channel).\n   * A value OR a resolver. **To keep context live across sends, pass a RESOLVER** (`() => ({...})`) — a\n   * plain value is captured at construction and not re-read, so mutating `options.context` afterwards has\n   * no effect (unlike `useAgent`, which reads a live ref). A resolver is re-evaluated every send/reconnect.\n   */\n  context?: RequestContext | (() => RequestContext | undefined)\n}\n\n/**\n * M44 (ADR-0053) — the standalone (no-React) agent client. A plain handle over the framework-agnostic\n * {@link AgentClient} store: drive a turn, observe state, settle HITL — from a node script, a CLI, a\n * test, or a non-React UI, over ANY {@link AgentTransport}.\n */\nexport interface AgentClientHandle<TInput = unknown> {\n  /** Send a typed input; opens a fresh stream (replaces prior messages). */\n  send(input: TInput): void\n  /** Abort an in-flight stream. */\n  abort(): void\n  /** Clear messages + error, back to idle. */\n  reset(): void\n  /** Settle a paused HITL approval via the transport's HITL path. */\n  approve(approvalId: string, decision: ApprovalDecision): Promise<void>\n  /** Resume an interrupted stream (no-op when the transport can't). */\n  reconnect(): void\n  /** Subscribe to state changes; returns an unsubscribe fn. */\n  subscribe(listener: () => void): () => void\n  /** The current immutable snapshot (messages / status / error). */\n  getState(): AgentClientState\n  /**\n   * Drive one turn and yield the assistant `UIMessage` as it streams (progressive snapshots); iteration\n   * ends when the turn settles. A `for await` script takes the last yielded value as the final result;\n   * a failed turn rejects the iterator with the run error.\n   */\n  stream(input: TInput): AsyncIterable<UIMessage>\n}\n\n/** Drive a turn on the store and yield the latest assistant message on each streaming update. */\nfunction streamTurn<TInput>(client: AgentClient<TInput>, input: TInput): AsyncIterable<UIMessage> {\n  return {\n    async *[Symbol.asyncIterator]() {\n      const pending: UIMessage[] = []\n      let finished = false\n      let streamError: Error | undefined\n      let notify: (() => void) | null = null\n      // Read via functions — `finished`/`streamError` flip ASYNC in the subscribe callback, so a direct\n      // read would be wrongly narrowed to its initial literal by control-flow analysis (M41 pattern).\n      const isFinished = (): boolean => finished\n      const takeError = (): Error | undefined => streamError\n\n      const unsubscribe = client.subscribe(() => {\n        const snapshot = client.getSnapshot()\n        if (snapshot.status === 'streaming') {\n          // Push the growing assistant message ONLY on streaming updates. The terminal ('done'/'error')\n          // emit carries the SAME final message already yielded on the last streaming update — pushing it\n          // again would yield a duplicate. So the terminal emit only flips `finished` (+ captures error).\n          const last = snapshot.messages.at(-1)\n          if (last !== undefined) pending.push(last)\n        } else {\n          if (snapshot.status === 'error') streamError = snapshot.error\n          finished = true\n        }\n        notify?.()\n      })\n\n      client.send(input)\n      try {\n        for (;;) {\n          while (pending.length > 0) {\n            const message = pending.shift()\n            if (message !== undefined) yield message\n          }\n          if (isFinished()) break\n          await new Promise<void>((resolve) => {\n            notify = resolve\n            // Close the lost-wakeup window: an emit may have fired during the drain, BEFORE `notify` was\n            // set (its `notify?.()` was then a no-op). If work already arrived, resolve now, don't sleep.\n            if (pending.length > 0 || isFinished()) resolve()\n          })\n          notify = null\n        }\n        const err = takeError()\n        if (err !== undefined) throw err\n      } finally {\n        // Runs on normal completion AND on early `break` (the for-await calls the generator's return()):\n        // stop observing, and abort the turn so an early-exiting consumer doesn't leave it running (abort\n        // is a no-op once the turn has settled).\n        unsubscribe()\n        client.abort()\n      }\n    },\n  }\n}\n\n/**\n * Create a standalone (no-React) agent client over a transport. `useAgent` is the React binding over the\n * same store; this is the equivalent for any JS runtime — one agent, consumable everywhere on the seam.\n */\nexport function createAgentClient<TInput = unknown>(\n  transport: AgentTransport,\n  options: CreateAgentClientOptions = {},\n): AgentClientHandle<TInput> {\n  const { context } = options\n  const contextResolver =\n    context === undefined\n      ? undefined\n      : (): RequestContext | undefined => (typeof context === 'function' ? context() : context)\n  const client = new AgentClient<TInput>(transport, contextResolver)\n\n  return {\n    send: client.send,\n    abort: client.abort,\n    reset: client.reset,\n    approve: client.approve,\n    reconnect: client.reconnect,\n    subscribe: client.subscribe,\n    getState: client.getSnapshot,\n    stream: (input: TInput) => streamTurn(client, input),\n  }\n}\n"],"mappings":";AAgBA,eAAsB,uBACpB,UACA,WACe;AACf,QAAM,cAAc,MAAM,sBAAsB,QAAQ;AACxD,QAAM,mBAAmB,aAAa,SAAS;AACjD;AAQA,eAAsB,sBACpB,UACyC;AACzC,MAAI,SAAS,SAAS,MAAM;AAC1B,WAAO,IAAI,eAA+B;AAAA,MACxC,MAAM,YAAY;AAChB,mBAAW,MAAM;AAAA,MACnB;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,EAAE,sBAAsB,qBAAqB,IAAI,MAAM,OAAO,IAAI;AAIxE,QAAM,SAAS,qBAAqB,EAAE,QAAQ,SAAS,MAAM,QAAQ,qBAAqB,CAAC;AAC3F,SAAO,IAAI,eAA+B;AAAA,IACxC,MAAM,MAAM,YAAY;AACtB,uBAAiB,UAAU,QAAQ;AACjC,YAAI,OAAO,QAAS,YAAW,QAAQ,OAAO,KAAK;AAAA,MACrD;AACA,iBAAW,MAAM;AAAA,IACnB;AAAA,EACF,CAAC;AACH;AAQA,eAAsB,mBACpB,QACA,WACe;AACf,QAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,IAAI;AACjD,mBAAiB,WAAW,oBAAoB,EAAE,OAAO,CAAC,GAAG;AAC3D,cAAU,OAAO;AAAA,EACnB;AACF;;;ACvDA,SAAS,YAAY,OAAwB;AAC3C,MACE,OAAO,UAAU,YACjB,UAAU,QACV,OAAQ,MAAgC,YAAY,UACpD;AACA,WAAQ,MAA8B;AAAA,EACxC;AACA,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,SAAO,KAAK,UAAU,KAAK;AAC7B;AAGA,SAAS,iBAAiB,OAA2B;AACnD,SAAO;AAAA,IACL,IAAI,OAAO,WAAW;AAAA,IACtB,MAAM;AAAA,IACN,OAAO,CAAC,EAAE,MAAM,QAAQ,MAAM,YAAY,KAAK,EAAE,CAAC;AAAA,EACpD;AACF;AAWO,IAAM,cAAN,MAAoC;AAAA,EAChC;AAAA,EACA,UAAU,OAAO,WAAW;AAAA,EAC5B,aAAa,oBAAI,IAAgB;AAAA;AAAA,EAEjC;AAAA,EAET,YAAyB,CAAC;AAAA,EAC1B,UAA0B;AAAA,EAC1B;AAAA,EACA,cAAsC;AAAA,EACtC,YAA8B,EAAE,UAAU,CAAC,GAAG,QAAQ,QAAQ,OAAO,OAAU;AAAA,EAE/E,YAAY,WAA2B,iBAAoD;AACzF,SAAK,aAAa;AAClB,SAAK,mBAAmB;AAAA,EAC1B;AAAA;AAAA,EAGA,YAAY,CAAC,aAAuC;AAClD,SAAK,WAAW,IAAI,QAAQ;AAC5B,WAAO,MAAM;AACX,WAAK,WAAW,OAAO,QAAQ;AAAA,IACjC;AAAA,EACF;AAAA;AAAA,EAGA,cAAc,MAAwB,KAAK;AAAA,EAE3C,QAAc;AACZ,SAAK,YAAY,EAAE,UAAU,KAAK,WAAW,QAAQ,KAAK,SAAS,OAAO,KAAK,OAAO;AACtF,eAAW,YAAY,KAAK,WAAY,UAAS;AAAA,EACnD;AAAA,EAEA,QAAQ,SAA0B;AAChC,UAAM,OAAO,CAAC,GAAG,KAAK,SAAS;AAC/B,UAAM,MAAM,KAAK,UAAU,CAAC,aAAa,SAAS,OAAO,QAAQ,EAAE;AACnE,QAAI,OAAO,EAAG,MAAK,GAAG,IAAI;AAAA,QACrB,MAAK,KAAK,OAAO;AACtB,SAAK,YAAY;AAAA,EACnB;AAAA,EAEA,MAAM,OACJ,MACA,YACe;AAIf,UAAM,UAAU,MAAe,WAAW,OAAO;AACjD,QAAI;AACF,YAAM,SAAS,MAAM,KAAK;AAC1B,UAAI,QAAQ,EAAG;AACf,UAAI,WAAW,MAAM;AAEnB,aAAK,UAAU,KAAK,UAAU,SAAS,IAAI,SAAS;AACpD,aAAK,MAAM;AACX;AAAA,MACF;AACA,YAAM,mBAAmB,QAAQ,CAAC,YAAY;AAC5C,YAAI,QAAQ,EAAG;AACf,aAAK,QAAQ,OAAO;AACpB,aAAK,MAAM;AAAA,MACb,CAAC;AACD,UAAI,QAAQ,EAAG;AACf,WAAK,UAAU;AACf,WAAK,MAAM;AAAA,IACb,SAAS,KAAK;AACZ,UAAI,QAAQ,EAAG;AACf,WAAK,SAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAChE,WAAK,UAAU;AACf,WAAK,MAAM;AAAA,IACb;AAAA,EACF;AAAA;AAAA,EAGA,OAAO,CAAC,UAAwB;AAC9B,SAAK,MAAM;AACX,UAAM,aAAa,IAAI,gBAAgB;AACvC,SAAK,cAAc;AACnB,SAAK,YAAY,CAAC;AAClB,SAAK,SAAS;AACd,SAAK,UAAU;AACf,SAAK,MAAM;AACX,UAAM,UAAU,KAAK,mBAAmB;AACxC,SAAK,KAAK;AAAA,MACR,MACE,KAAK,WAAW,aAAa;AAAA,QAC3B,SAAS;AAAA,QACT,QAAQ,KAAK;AAAA,QACb,WAAW;AAAA,QACX,UAAU,CAAC,iBAAiB,KAAK,CAAC;AAAA,QAClC,aAAa,WAAW;AAAA;AAAA;AAAA,QAGxB,MAAM,OAAO,UAAU,YAAY,UAAU,OAAO,QAAQ;AAAA;AAAA,QAE5D,SAAS,SAAS;AAAA,QAClB,UAAU,SAAS;AAAA,MACrB,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,YAAY,MAAY;AACtB,UAAM,aAAa,IAAI,gBAAgB;AACvC,SAAK,cAAc;AACnB,SAAK,UAAU;AACf,SAAK,MAAM;AACX,UAAM,UAAU,KAAK,mBAAmB;AACxC,SAAK,KAAK;AAAA,MACR,MACE,KAAK,WAAW,kBAAkB;AAAA,QAChC,QAAQ,KAAK;AAAA,QACb,SAAS,SAAS;AAAA,QAClB,UAAU,SAAS;AAAA,MACrB,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,QAAQ,MAAY;AAClB,SAAK,aAAa,MAAM;AACxB,SAAK,cAAc;AAAA,EACrB;AAAA;AAAA,EAGA,QAAQ,MAAY;AAClB,SAAK,MAAM;AACX,SAAK,YAAY,CAAC;AAClB,SAAK,SAAS;AACd,SAAK,UAAU;AACf,SAAK,MAAM;AAAA,EACb;AAAA;AAAA,EAGA,UAAU,OAAO,YAAoB,aAA8C;AACjF,UAAM,KAAK,WAAW,UAAU,YAAY,QAAQ;AAAA,EACtD;AACF;;;ACpKA,SAAS,SAAS,SAA+E;AAC/F,MAAI,YAAY,OAAW,QAAO,CAAC;AACnC,MAAI,mBAAmB,QAAS,QAAO,OAAO,YAAY,QAAQ,QAAQ,CAAC;AAC3E,SAAO;AACT;AAmBO,IAAM,gBAAN,MAA8C;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAET;AAAA,EAEA,YAAY,SAA+B;AACzC,SAAK,OAAO,QAAQ;AACpB,SAAK,WAAW,QAAQ,WAAW,CAAC;AAIpC,SAAK,SAAS,QAAQ,SAAS,WAAW,MAAM,KAAK,UAAU;AAAA,EACjE;AAAA;AAAA,EAGA,kBAA0C;AACxC,YAAQ,OAAO,KAAK,aAAa,aAAa,KAAK,SAAS,IAAI,KAAK,aAAa,CAAC;AAAA,EACrF;AAAA,EAEA,MAAM,aACJ,SACyC;AACzC,UAAM,EAAE,UAAU,aAAa,SAAS,KAAK,IAAI;AAKjD,UAAM,QAAQ,OAAO,SAAS,WAAW,OAAO;AAChD,UAAM,WAAW,MAAM,KAAK,OAAO,KAAK,MAAM;AAAA,MAC5C,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,iBAAiB;AAAA,QACjB,GAAG,KAAK,gBAAgB;AAAA,QACxB,GAAG,SAAS,OAAO;AAAA,MACrB;AAAA,MACA,MAAM,KAAK,UAAU,EAAE,GAAG,OAAO,SAAS,CAAC;AAAA,MAC3C,QAAQ;AAAA,IACV,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,oBAAoB,KAAK,IAAI,YAAY,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,MACjF;AAAA,IACF;AACA,SAAK,aAAa,SAAS,QAAQ,IAAI,kBAAkB,KAAK;AAC9D,WAAO,sBAAsB,QAAQ;AAAA,EACvC;AAAA,EAEA,MAAM,kBACJ,SACgD;AAChD,QAAI,KAAK,eAAe,OAAW,QAAO;AAC1C,UAAM,WAAW,MAAM,KAAK,OAAO,GAAG,KAAK,IAAI,SAAS,KAAK,UAAU,WAAW;AAAA,MAChF,QAAQ;AAAA,MACR,SAAS,EAAE,GAAG,KAAK,gBAAgB,GAAG,GAAG,SAAS,QAAQ,OAAO,EAAE;AAAA,IACrE,CAAC;AACD,QAAI,SAAS,WAAW,IAAK,QAAO;AACpC,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,0BAA0B,KAAK,UAAU,YAAY,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,MAC7F;AAAA,IACF;AACA,WAAO,sBAAsB,QAAQ;AAAA,EACvC;AAAA,EAEA,MAAM,QAAQ,YAAoB,UAA2C;AAC3E,UAAM,WAAW,MAAM,KAAK,OAAO,GAAG,KAAK,IAAI,YAAY,UAAU,IAAI;AAAA,MACvE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,iBAAiB;AAAA,QACjB,GAAG,KAAK,gBAAgB;AAAA,MAC1B;AAAA,MACA,MAAM,KAAK,UAAU,QAAQ;AAAA,IAC/B,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,MAAM,WAAW,UAAU,YAAY,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,IAC3F;AAAA,EACF;AACF;;;ACxHO,SAAS,oBAAoB,UAAwC;AAC1E,WAAS,IAAI,SAAS,SAAS,GAAG,KAAK,GAAG,KAAK;AAC7C,UAAM,UAAU,SAAS,CAAC;AAC1B,QAAI,QAAQ,SAAS,OAAQ;AAC7B,UAAM,OAAO,QAAQ,MAClB,OAAO,CAAC,SAAiD,KAAK,SAAS,MAAM,EAC7E,IAAI,CAAC,SAAS,KAAK,IAAI,EACvB,KAAK,EAAE;AACV,QAAI,KAAK,SAAS,EAAG,QAAO;AAAA,EAC9B;AACA,SAAO;AACT;;;ACqBA,SAAS,kBAAkB,KAAqE;AAC9F,SAAO,IAAI,eAA+B;AAAA,IACxC,MAAM,KAAK,YAAY;AACrB,UAAI;AACF,cAAM,SAAS,MAAM,IAAI,KAAK;AAC9B,YAAI,OAAO,SAAS,MAAM;AACxB,qBAAW,MAAM;AACjB;AAAA,QACF;AAEA,mBAAW,QAAQ,OAAO,KAAK;AAAA,MACjC,SAAS,KAAK;AACZ,mBAAW,MAAM,GAAG;AAAA,MACtB;AAAA,IACF;AAAA,IACA,MAAM,SAAS;AACb,YAAM,IAAI,OAAO,MAAS;AAAA,IAC5B;AAAA,EACF,CAAC;AACH;AAiBO,IAAM,qBAAN,MAAmD;AAAA,EAC/C;AAAA;AAAA,EAEA,WAAW,oBAAI,IAA4D;AAAA,EAEpF,YAAY,SAAoC;AAC9C,SAAK,OAAO,QAAQ;AAAA,EACtB;AAAA,EAEA,iBAAyC,CAAC,QACxC,IAAI,QAAoC,CAAC,SAAS,WAAW;AAG3D,QAAI,KAAK,SAAS,IAAI,IAAI,UAAU,GAAG;AACrC,aAAO,IAAI,MAAM,kCAAkC,IAAI,UAAU,8BAAyB,CAAC;AAC3F;AAAA,IACF;AACA,SAAK,SAAS,IAAI,IAAI,YAAY,OAAO;AAAA,EAC3C,CAAC;AAAA,EAEH,aACE,SACyC;AACzC,UAAM,EAAE,UAAU,aAAa,SAAS,IAAI;AAC5C,UAAM,YAAY,KAAK,KAAK;AAAA,MAC1B,SAAS,oBAAoB,QAAQ;AAAA,MACrC,QAAQ,eAAe;AAAA,MACvB,eAAe,KAAK;AAAA;AAAA,MAEpB,SAAS;AAAA,IACX,CAAC;AACD,WAAO,QAAQ,QAAQ,kBAAkB,SAAS,CAAC;AAAA,EACrD;AAAA,EAEA,oBAAoE;AAClE,WAAO,QAAQ,QAAQ,IAAI;AAAA,EAC7B;AAAA,EAEA,QAAQ,YAAoB,UAA2C;AACrE,UAAM,UAAU,KAAK,SAAS,IAAI,UAAU;AAC5C,QAAI,YAAY,QAAW;AACzB,aAAO,QAAQ;AAAA,QACb,IAAI,MAAM,wBAAwB,UAAU,iCAAiC;AAAA,MAC/E;AAAA,IACF;AACA,SAAK,SAAS,OAAO,UAAU;AAC/B,YAAQ,QAAQ;AAChB,WAAO,QAAQ,QAAQ;AAAA,EACzB;AACF;;;AC1EO,IAAM,mBAAN,MAAiD;AAAA,EAC7C;AAAA,EAET,YAAY,SAAkC;AAC5C,SAAK,UAAU,QAAQ;AAAA,EACzB;AAAA,EAEA,aACE,SACyC;AACzC,UAAM,EAAE,UAAU,aAAa,SAAS,IAAI;AAC5C,UAAM,UAAU,oBAAoB,QAAQ;AAC5C,UAAM,SAAS,KAAK;AAIpB,QAAI,SAAS;AACb,QAAI,WAAuB,MAAM;AACjC,QAAI,cAA0B,MAAM;AAEpC,UAAM,SAAS,IAAI,eAA+B;AAAA,MAChD,MAAM,YAAY;AAChB,cAAM,SAAS,CAAC,WAA6B;AAC3C,cAAI,OAAQ;AACZ,mBAAS;AACT,sBAAY;AACZ,iBAAO;AAAA,QACT;AACA,mBAAW,OAAO;AAAA,UAChB,EAAE,SAAS,SAAS,SAAS;AAAA,UAC7B;AAAA,YACE,QAAQ,CAAC,SAAS;AAChB,kBAAI,OAAQ;AAEZ,kBAAI;AACJ,kBAAI;AACF,yBAAS,KAAK,MAAM,IAAI;AAAA,cAC1B,QAAQ;AACN;AAAA,cACF;AAMA,kBACE,OAAO,WAAW,YAClB,WAAW,QACX,OAAQ,OAA8B,SAAS,UAC/C;AACA;AAAA,cACF;AACA,yBAAW,QAAQ,MAAwB;AAAA,YAC7C;AAAA,YACA,SAAS,MAAM;AACb,qBAAO,MAAM;AACX,2BAAW,MAAM;AAAA,cACnB,CAAC;AAAA,YACH;AAAA,YACA,SAAS,CAAC,QAAQ;AAChB,qBAAO,MAAM;AACX,2BAAW,MAAM,GAAG;AAAA,cACtB,CAAC;AAAA,YACH;AAAA,UACF;AAAA,QACF;AACA,YAAI,gBAAgB,QAAW;AAC7B,gBAAM,UAAU,MAAY;AAC1B,mBAAO,MAAM;AACX,uBAAS;AACT,yBAAW,MAAM;AAAA,YACnB,CAAC;AAAA,UACH;AACA,cAAI,YAAY,QAAS,SAAQ;AAAA,eAC5B;AACH,wBAAY,iBAAiB,SAAS,OAAO;AAC7C,0BAAc,MAAM;AAClB,0BAAY,oBAAoB,SAAS,OAAO;AAAA,YAClD;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MACA,SAAS;AAEP,YAAI,OAAQ;AACZ,iBAAS;AACT,oBAAY;AACZ,iBAAS;AAAA,MACX;AAAA,IACF,CAAC;AACD,WAAO,QAAQ,QAAQ,MAAM;AAAA,EAC/B;AAAA,EAEA,oBAAoE;AAClE,WAAO,QAAQ,QAAQ,IAAI;AAAA,EAC7B;AAAA,EAEA,MAAM,QAAQ,YAAoB,UAA2C;AAC3E,QAAI,KAAK,QAAQ,WAAW,QAAW;AACrC,YAAM,IAAI,MAAM,iEAA4D,UAAU,IAAI;AAAA,IAC5F;AACA,UAAM,KAAK,QAAQ,OAAO,YAAY,QAAQ;AAAA,EAChD;AACF;;;AC7GA,SAAS,WAAmB,QAA6B,OAAyC;AAChG,SAAO;AAAA,IACL,QAAQ,OAAO,aAAa,IAAI;AAC9B,YAAM,UAAuB,CAAC;AAC9B,UAAI,WAAW;AACf,UAAI;AACJ,UAAI,SAA8B;AAGlC,YAAM,aAAa,MAAe;AAClC,YAAM,YAAY,MAAyB;AAE3C,YAAM,cAAc,OAAO,UAAU,MAAM;AACzC,cAAM,WAAW,OAAO,YAAY;AACpC,YAAI,SAAS,WAAW,aAAa;AAInC,gBAAM,OAAO,SAAS,SAAS,GAAG,EAAE;AACpC,cAAI,SAAS,OAAW,SAAQ,KAAK,IAAI;AAAA,QAC3C,OAAO;AACL,cAAI,SAAS,WAAW,QAAS,eAAc,SAAS;AACxD,qBAAW;AAAA,QACb;AACA,iBAAS;AAAA,MACX,CAAC;AAED,aAAO,KAAK,KAAK;AACjB,UAAI;AACF,mBAAS;AACP,iBAAO,QAAQ,SAAS,GAAG;AACzB,kBAAM,UAAU,QAAQ,MAAM;AAC9B,gBAAI,YAAY,OAAW,OAAM;AAAA,UACnC;AACA,cAAI,WAAW,EAAG;AAClB,gBAAM,IAAI,QAAc,CAAC,YAAY;AACnC,qBAAS;AAGT,gBAAI,QAAQ,SAAS,KAAK,WAAW,EAAG,SAAQ;AAAA,UAClD,CAAC;AACD,mBAAS;AAAA,QACX;AACA,cAAM,MAAM,UAAU;AACtB,YAAI,QAAQ,OAAW,OAAM;AAAA,MAC/B,UAAE;AAIA,oBAAY;AACZ,eAAO,MAAM;AAAA,MACf;AAAA,IACF;AAAA,EACF;AACF;AAMO,SAAS,kBACd,WACA,UAAoC,CAAC,GACV;AAC3B,QAAM,EAAE,QAAQ,IAAI;AACpB,QAAM,kBACJ,YAAY,SACR,SACA,MAAmC,OAAO,YAAY,aAAa,QAAQ,IAAI;AACrF,QAAM,SAAS,IAAI,YAAoB,WAAW,eAAe;AAEjE,SAAO;AAAA,IACL,MAAM,OAAO;AAAA,IACb,OAAO,OAAO;AAAA,IACd,OAAO,OAAO;AAAA,IACd,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,IACjB,QAAQ,CAAC,UAAkB,WAAW,QAAQ,KAAK;AAAA,EACrD;AACF;","names":[]}