theokit 0.43.6 → 0.43.12

package/dist/router-6MAACS25.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/commands/migrate/router.ts","../src/cli/commands/migrate/router-codemod.ts"],"sourcesContent":["/**\n * G6 T2.1 — `theokit migrate router` CLI subcommand.\n *\n * Plan: .claude/knowledge-base/plans/g6-router-convention-plan.md v1.1\n *\n * Wraps the pure `planRouterMigration` with side effects:\n *   - EC-2: pre-flight `isPortInUse(3000|3100)` warning to prevent the\n *     dev-server HMR cascade described in the edge-case review.\n *   - EC-7: partial failure produces a typed `RouterMigrationPartialFailure`\n *     with `filesAlreadyMigrated` so a re-run can continue from where it\n *     stopped (idempotent by virtue of `planRouterMigration`).\n *   - Prefers `git mv $from $to` so the rename appears as a single\n *     history entry; falls back to `mkdir -p $(dirname $to) && fs.rename`\n *     when not in a git repo or git mv fails.\n */\nimport { execFileSync } from 'node:child_process'\nimport { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs'\nimport { createServer } from 'node:net'\nimport { dirname, resolve } from 'node:path'\n\nimport {\n  computeDepthDelta,\n  planRouterMigration,\n  rewriteRelativeImports,\n  type RouterMigrationPlanItem,\n} from './router-codemod.js'\n\ninterface RouterMigrateOptions {\n  /** Absolute path to `<project>/server/routes`. Defaults to `<cwd>/server/routes`. */\n  routesDir?: string\n  /**\n   * Skip the EC-2 dev-server port pre-flight check (CI / non-TTY).\n   * Default: false.\n   */\n  force?: boolean\n  /** When true, prints the plan but performs no renames (dry-run). */\n  dryRun?: boolean\n  /** When true, suppresses stdout (used in tests). */\n  silent?: boolean\n}\n\n/**\n * Thrown when the codemod completes with at least one successful rename\n * AND at least one failure — caller can re-run safely (idempotent) and\n * the second pass will skip already-migrated files.\n */\nclass RouterMigrationPartialFailure extends Error {\n  override readonly name = 'RouterMigrationPartialFailure'\n  readonly filesAlreadyMigrated: string[]\n  readonly failedFile: string\n  readonly causeMessage: string\n  constructor(filesAlreadyMigrated: string[], failedFile: string, causeMessage: string) {\n    super(\n      `Router migration partial failure: ${filesAlreadyMigrated.length} files migrated successfully, then failed on ${failedFile}: ${causeMessage}. Re-run \\`theokit migrate router\\` to retry — already-migrated files will be skipped.`,\n    )\n    this.filesAlreadyMigrated = filesAlreadyMigrated\n    this.failedFile = failedFile\n    this.causeMessage = causeMessage\n  }\n}\n\n/**\n * EC-2: dev-server detection. Returns true if the port is in use (someone\n * is already listening on localhost:<port>). Uses Node's `node:net` —\n * zero new deps.\n */\nexport async function isPortInUse(port: number): Promise<boolean> {\n  return await new Promise<boolean>((resolve) => {\n    const probe = createServer()\n    probe.once('error', (err: NodeJS.ErrnoException) => {\n      probe.close(() => {\n        resolve(err.code === 'EADDRINUSE')\n      })\n    })\n    probe.once('listening', () => {\n      probe.close(() => {\n        resolve(false)\n      })\n    })\n    probe.listen(port, '127.0.0.1')\n  })\n}\n\n/**\n * EC-2 pre-flight: returns the first port in use among the typical\n * theokit dev ports (3000 + 3100) so the caller can warn the user.\n */\nexport async function findRunningDevServerPort(): Promise<number | null> {\n  for (const port of [3000, 3100]) {\n    if (await isPortInUse(port)) return port\n  }\n  return null\n}\n\nfunction tryGitMv(from: string, to: string): boolean {\n  try {\n    mkdirSync(dirname(to), { recursive: true })\n    // Arguments are absolute paths from a recursive walk of <routesDir>.\n    // Pass as argv to avoid shell parsing entirely (no `shell: true`).\n    // `git` is resolved via the operator's PATH (same security model as\n    // every other CLI tool — `theokit dev`, `pnpm install`, etc.).\n\n    execFileSync('git', ['mv', from, to], { stdio: 'pipe' })\n    return true\n  } catch {\n    return false\n  }\n}\n\nfunction fallbackRename(from: string, to: string): void {\n  mkdirSync(dirname(to), { recursive: true })\n  renameSync(from, to)\n}\n\nfunction applyRename(item: RouterMigrationPlanItem): void {\n  if (!existsSync(item.from)) {\n    // Idempotency: already migrated — skip silently\n    return\n  }\n  if (existsSync(item.to)) {\n    // The plan() phase would have thrown CollisionError if we knew about\n    // it at plan time. This branch covers a race condition where the\n    // target was created between plan and apply.\n    throw new Error(\n      `Refusing to overwrite existing file at ${item.to} during migration of ${item.from}`,\n    )\n  }\n  if (!tryGitMv(item.from, item.to)) {\n    fallbackRename(item.from, item.to)\n  }\n}\n\n/**\n * Adjust relative imports inside the renamed file to compensate for the\n * extra nesting depth. Without this, `import { foo } from './chat'` inside\n * a file moved from `routes/admin.sdk-config.ts` → `routes/admin/sdk-config.ts`\n * would fail to resolve at typecheck/runtime — the import needs `../chat`\n * now that the file lives one level deeper.\n */\nfunction applyImportRewrite(item: RouterMigrationPlanItem, routesDir: string): void {\n  const delta = computeDepthDelta(item.from, item.to, routesDir)\n  if (delta <= 0) return\n  const source = readFileSync(item.to, 'utf8')\n  const rewritten = rewriteRelativeImports(source, delta)\n  if (rewritten !== source) {\n    writeFileSync(item.to, rewritten, 'utf8')\n  }\n}\n\ninterface RouterMigrateResult {\n  /** Successfully renamed (from, to) pairs. */\n  migrated: RouterMigrationPlanItem[]\n  /** Plan was empty — nothing to do (already-nested). */\n  alreadyClean: boolean\n}\n\ntype LogFn = (msg: string) => void\n\nfunction makeLog(silent: boolean | undefined): LogFn {\n  if (silent) {\n    return (_msg: string) => {\n      // intentionally silent\n    }\n  }\n  return (msg: string) => {\n    console.log(msg)\n  }\n}\n\nasync function assertNoRunningDevServer(opts: RouterMigrateOptions): Promise<void> {\n  if (opts.force) return\n  const runningPort = await findRunningDevServerPort()\n  if (runningPort !== null) {\n    throw new Error(\n      `Detected theokit dev server running on port ${runningPort}. STOP it before running migration to avoid HMR cascade (see EC-2). Re-run with --force to override.`,\n    )\n  }\n}\n\nfunction executeRenames(\n  plan: readonly RouterMigrationPlanItem[],\n  routesDir: string,\n  log: LogFn,\n): RouterMigrationPlanItem[] {\n  const migrated: RouterMigrationPlanItem[] = []\n  for (const item of plan) {\n    try {\n      applyRename(item)\n      applyImportRewrite(item, routesDir)\n      migrated.push(item)\n      log(`     ✓ ${item.from} → ${item.to}`)\n    } catch (err) {\n      // EC-7: partial failure observability — emit structured error with\n      // the list of already-migrated files so a re-run can recover.\n      const causeMessage = err instanceof Error ? err.message : String(err)\n      throw new RouterMigrationPartialFailure(\n        migrated.map((m) => m.from),\n        item.from,\n        causeMessage,\n      )\n    }\n  }\n  return migrated\n}\n\nexport async function routerMigrateCommand(\n  opts: RouterMigrateOptions = {},\n): Promise<RouterMigrateResult> {\n  const routesDir = opts.routesDir ?? resolve(process.cwd(), 'server', 'routes')\n  const log = makeLog(opts.silent)\n\n  await assertNoRunningDevServer(opts)\n\n  const plan = planRouterMigration(routesDir)\n  if (plan.length === 0) {\n    log('  ✓ Router already uses directory-nested convention. Nothing to do.')\n    return { migrated: [], alreadyClean: true }\n  }\n\n  log(`  → Migrating ${plan.length} dotted route(s) to directory-nested form...`)\n\n  if (opts.dryRun) {\n    for (const item of plan) {\n      log(`     [dry-run] ${item.from} → ${item.to}`)\n    }\n    return { migrated: [], alreadyClean: false }\n  }\n\n  const migrated = executeRenames(plan, routesDir, log)\n  log(`  ✓ Migrated ${migrated.length} route(s).`)\n  return { migrated, alreadyClean: false }\n}\n","/**\n * G6 T2.1 — Pure codemod core for `theokit migrate router`.\n *\n * Plan: .claude/knowledge-base/plans/g6-router-convention-plan.md v1.1\n *\n * `planRouterMigration` walks `<routesDir>` recursively and returns the\n * set of (from, to) renames required to convert legacy dotted-basename\n * routes (`auth.[provider].login.ts`) into the directory-nested form\n * (`auth/[provider]/login.ts`). The function is PURE — it does NOT\n * touch the filesystem beyond `readdirSync`/`statSync`. The CLI subcommand\n * (`router.ts`) is responsible for executing the renames via `git mv`\n * or `fs.rename` with the appropriate error handling.\n *\n * Edge cases covered:\n *   - EC-4: co-located `*.test.[jt]sx?` / `*.spec.[jt]sx?` files are\n *     silently skipped (same filter as the scanner).\n *   - EC-5: target collision detection is CASE-INSENSITIVE so a\n *     macOS/Windows dev doesn't silently overwrite a sibling file that\n *     differs only in case.\n *   - Idempotent: invoked twice on the same tree, the second pass is empty.\n */\nimport { readdirSync, statSync } from 'node:fs'\nimport { extname, join, relative, sep } from 'node:path'\n\nconst ROUTE_EXTENSIONS = new Set(['.ts', '.tsx', '.js', '.jsx'])\nconst TEST_OR_SPEC_RE = /\\.(test|spec)\\.[jt]sx?$/\n\n/**\n * One pending rename emitted by `planRouterMigration`.\n */\nexport interface RouterMigrationPlanItem {\n  /** Absolute path of the offending dotted-basename file. */\n  from: string\n  /** Absolute path of the proposed directory-nested replacement. */\n  to: string\n}\n\n/**\n * `RouterMigrationCollisionError` is thrown when migrating a dotted file\n * would overwrite an existing file (case-insensitive). The caller MUST\n * resolve the conflict manually before re-running the codemod.\n */\nexport class RouterMigrationCollisionError extends Error {\n  override readonly name = 'RouterMigrationCollisionError'\n  readonly from: string\n  readonly to: string\n  constructor(from: string, to: string) {\n    super(\n      `Router migration collision: ${from} would rename to ${to}, but that file already exists (case-insensitive match). Resolve manually.`,\n    )\n    this.from = from\n    this.to = to\n  }\n}\n\n/**\n * Compute the depth delta (number of extra `..` levels needed) between\n * the original (dotted) path and the migrated (nested) path, relative\n * to a common `routesDir` ancestor.\n *\n * - `admin.sdk-config.ts` (depth 0) → `admin/sdk-config.ts` (depth 1): delta = 1\n * - `debug.stability.last.ts` (depth 0) → `debug/stability/last.ts` (depth 2): delta = 2\n * - `canvas/artifacts.[id].ts` (depth 1) → `canvas/artifacts/[id].ts` (depth 2): delta = 1\n */\nexport function computeDepthDelta(from: string, to: string, routesDir: string): number {\n  const depthOf = (p: string): number => {\n    const rel = relative(routesDir, p).replace(/\\\\/g, '/')\n    // depth = number of `/` separators in the relative path\n    return rel.split('/').length - 1\n  }\n  return depthOf(to) - depthOf(from)\n}\n\n/**\n * Rewrite all relative imports in `source` by prepending `../` × `delta`\n * to every `./X` or `../X` specifier. Absolute / package specifiers\n * (`theokit/server`, `zod`, `node:fs`) are untouched.\n *\n * Handles three import shapes:\n *   - `import ... from './foo'`\n *   - `import('./foo')` (dynamic)\n *   - `import './foo'` (side-effect only)\n *   - `export ... from './foo'` (re-exports)\n *\n * Pure: returns the new source; does NOT touch disk.\n */\nexport function rewriteRelativeImports(source: string, delta: number): string {\n  if (delta <= 0) return source\n\n  const prefix = '../'.repeat(delta)\n\n  // Rewrites a captured relative specifier: `./foo` → `<prefix>foo`,\n  // `../foo` → `<prefix>../foo`. Single source of truth for the algorithm\n  // shared by all three import-shape regexes below.\n  const transformSpecifier = (specifier: string): string => {\n    if (specifier.startsWith('./')) return `${prefix}${specifier.slice(2)}`\n    return `${prefix}${specifier}`\n  }\n\n  // Three narrow regexes keep us out of catastrophic-backtracking territory.\n  // Each is anchored on a keyword (`from`, `import`) and uses a possessive\n  // character class (`[^'\"]+`) for the specifier, so backtracking is bounded.\n  const fromRe = /\\bfrom\\s+(['\"])(\\.{1,2}\\/[^'\"]+)\\1/g\n  const dynRe = /\\bimport\\s*\\(\\s*(['\"])(\\.{1,2}\\/[^'\"]+)\\1\\s*\\)/g\n  const sideRe = /\\bimport\\s+(['\"])(\\.{1,2}\\/[^'\"]+)\\1/g\n\n  const fromSub = (_m: string, q: string, spec: string): string =>\n    `from ${q}${transformSpecifier(spec)}${q}`\n  const dynSub = (_m: string, q: string, spec: string): string =>\n    `import(${q}${transformSpecifier(spec)}${q})`\n  const sideSub = (_m: string, q: string, spec: string): string =>\n    `import ${q}${transformSpecifier(spec)}${q}`\n\n  // `from` covers both `import ... from '...'` and `export ... from '...'`\n  // (the `\\bfrom\\s+` anchor matches the keyword position in both shapes).\n  // `dynRe` handles `import('...')`. `sideRe` handles bare `import '...'`.\n  // No overlap — `sideRe` requires `import` followed by whitespace then\n  // a quote (vs. `import(` for dynRe and `import ... from` for fromRe).\n  return source.replace(fromRe, fromSub).replace(dynRe, dynSub).replace(sideRe, sideSub)\n}\n\nfunction isTestOrSpecFile(filePath: string): boolean {\n  return TEST_OR_SPEC_RE.test(filePath)\n}\n\nfunction hasDotOutsideBrackets(segment: string): boolean {\n  let depth = 0\n  for (const ch of segment) {\n    if (ch === '[') depth++\n    else if (ch === ']') depth--\n    else if (ch === '.' && depth === 0) return true\n  }\n  return false\n}\n\nfunction splitDottedSegmentOutsideBrackets(segment: string): string[] {\n  const parts: string[] = []\n  let current = ''\n  let depth = 0\n  for (const ch of segment) {\n    if (ch === '[') {\n      depth++\n      current += ch\n    } else if (ch === ']') {\n      depth--\n      current += ch\n    } else if (ch === '.' && depth === 0) {\n      if (current) parts.push(current)\n      current = ''\n    } else {\n      current += ch\n    }\n  }\n  if (current) parts.push(current)\n  return parts\n}\n\nfunction toDirectoryNestedPath(filePath: string, routesDir: string): string {\n  const rel = relative(routesDir, filePath).replace(/\\\\/g, '/')\n  const ext = extname(rel)\n  const withoutExt = rel.slice(0, -ext.length)\n  const flattened = withoutExt.split('/').flatMap(splitDottedSegmentOutsideBrackets)\n  return join(routesDir, `${flattened.join(sep)}${ext}`)\n}\n\nfunction walkRoutes(root: string, onFile: (absPath: string) => void): void {\n  let entries\n  try {\n    entries = readdirSync(root, { withFileTypes: true })\n  } catch {\n    return\n  }\n  for (const entry of entries) {\n    if (entry.name.startsWith('_') || entry.name.startsWith('.')) continue\n    const full = join(root, entry.name)\n    if (entry.isDirectory()) {\n      walkRoutes(full, onFile)\n    } else if (entry.isFile() && ROUTE_EXTENSIONS.has(extname(entry.name))) {\n      onFile(full)\n    }\n  }\n}\n\nfunction isDottedRouteFile(filePath: string, routesDir: string): boolean {\n  const rel = relative(routesDir, filePath).replace(/\\\\/g, '/')\n  const ext = extname(rel)\n  const withoutExt = rel.slice(0, -ext.length)\n  return withoutExt.split('/').some(hasDotOutsideBrackets)\n}\n\n/**\n * Compute the migration plan for a `<server>/routes` tree.\n *\n * Pure: does NOT mutate the filesystem.\n *\n * @throws RouterMigrationCollisionError when a target collides with an\n *   existing file (case-insensitive).\n */\nexport function planRouterMigration(routesDir: string): RouterMigrationPlanItem[] {\n  const plan: RouterMigrationPlanItem[] = []\n  const existingPathsLowercase = new Set<string>()\n\n  walkRoutes(routesDir, (absPath) => {\n    existingPathsLowercase.add(absPath.toLowerCase())\n  })\n\n  walkRoutes(routesDir, (absPath) => {\n    if (isTestOrSpecFile(absPath)) return\n    if (!isDottedRouteFile(absPath, routesDir)) return\n\n    const to = toDirectoryNestedPath(absPath, routesDir)\n\n    // EC-5: case-insensitive collision check — macOS HFS+/APFS default\n    // and Windows NTFS treat case-only differences as the same path. If\n    // any pre-existing file at a case-insensitive match exists, the codemod\n    // would silently overwrite on those platforms; we bail explicitly.\n    const targetLower = to.toLowerCase()\n    if (existingPathsLowercase.has(targetLower) && targetLower !== absPath.toLowerCase()) {\n      throw new RouterMigrationCollisionError(absPath, to)\n    }\n    // Also guard against statSync race using an explicit existence check.\n    try {\n      if (statSync(to).isFile()) {\n        throw new RouterMigrationCollisionError(absPath, to)\n      }\n    } catch (err) {\n      if (err instanceof RouterMigrationCollisionError) throw err\n      // ENOENT — fine, target does not exist\n    }\n\n    plan.push({ from: absPath, to })\n  })\n\n  return plan\n}\n"],"mappings":";;;;AAeA,SAAS,oBAAoB;AAC7B,SAAS,YAAY,WAAW,cAAc,YAAY,qBAAqB;AAC/E,SAAS,oBAAoB;AAC7B,SAAS,SAAS,eAAe;;;ACGjC,SAAS,aAAa,gBAAgB;AACtC,SAAS,SAAS,MAAM,UAAU,WAAW;AAE7C,IAAM,mBAAmB,oBAAI,IAAI,CAAC,OAAO,QAAQ,OAAO,MAAM,CAAC;AAC/D,IAAM,kBAAkB;AAiBjB,IAAM,gCAAN,cAA4C,MAAM;AAAA,EACrC,OAAO;AAAA,EAChB;AAAA,EACA;AAAA,EACT,YAAY,MAAc,IAAY;AACpC;AAAA,MACE,+BAA+B,IAAI,oBAAoB,EAAE;AAAA,IAC3D;AACA,SAAK,OAAO;AACZ,SAAK,KAAK;AAAA,EACZ;AACF;AAWO,SAAS,kBAAkB,MAAc,IAAY,WAA2B;AACrF,QAAM,UAAU,CAAC,MAAsB;AACrC,UAAM,MAAM,SAAS,WAAW,CAAC,EAAE,QAAQ,OAAO,GAAG;AAErD,WAAO,IAAI,MAAM,GAAG,EAAE,SAAS;AAAA,EACjC;AACA,SAAO,QAAQ,EAAE,IAAI,QAAQ,IAAI;AACnC;AAeO,SAAS,uBAAuB,QAAgB,OAAuB;AAC5E,MAAI,SAAS,EAAG,QAAO;AAEvB,QAAM,SAAS,MAAM,OAAO,KAAK;AAKjC,QAAM,qBAAqB,CAAC,cAA8B;AACxD,QAAI,UAAU,WAAW,IAAI,EAAG,QAAO,GAAG,MAAM,GAAG,UAAU,MAAM,CAAC,CAAC;AACrE,WAAO,GAAG,MAAM,GAAG,SAAS;AAAA,EAC9B;AAKA,QAAM,SAAS;AACf,QAAM,QAAQ;AACd,QAAM,SAAS;AAEf,QAAM,UAAU,CAAC,IAAY,GAAW,SACtC,QAAQ,CAAC,GAAG,mBAAmB,IAAI,CAAC,GAAG,CAAC;AAC1C,QAAM,SAAS,CAAC,IAAY,GAAW,SACrC,UAAU,CAAC,GAAG,mBAAmB,IAAI,CAAC,GAAG,CAAC;AAC5C,QAAM,UAAU,CAAC,IAAY,GAAW,SACtC,UAAU,CAAC,GAAG,mBAAmB,IAAI,CAAC,GAAG,CAAC;AAO5C,SAAO,OAAO,QAAQ,QAAQ,OAAO,EAAE,QAAQ,OAAO,MAAM,EAAE,QAAQ,QAAQ,OAAO;AACvF;AAEA,SAAS,iBAAiB,UAA2B;AACnD,SAAO,gBAAgB,KAAK,QAAQ;AACtC;AAEA,SAAS,sBAAsB,SAA0B;AACvD,MAAI,QAAQ;AACZ,aAAW,MAAM,SAAS;AACxB,QAAI,OAAO,IAAK;AAAA,aACP,OAAO,IAAK;AAAA,aACZ,OAAO,OAAO,UAAU,EAAG,QAAO;AAAA,EAC7C;AACA,SAAO;AACT;AAEA,SAAS,kCAAkC,SAA2B;AACpE,QAAM,QAAkB,CAAC;AACzB,MAAI,UAAU;AACd,MAAI,QAAQ;AACZ,aAAW,MAAM,SAAS;AACxB,QAAI,OAAO,KAAK;AACd;AACA,iBAAW;AAAA,IACb,WAAW,OAAO,KAAK;AACrB;AACA,iBAAW;AAAA,IACb,WAAW,OAAO,OAAO,UAAU,GAAG;AACpC,UAAI,QAAS,OAAM,KAAK,OAAO;AAC/B,gBAAU;AAAA,IACZ,OAAO;AACL,iBAAW;AAAA,IACb;AAAA,EACF;AACA,MAAI,QAAS,OAAM,KAAK,OAAO;AAC/B,SAAO;AACT;AAEA,SAAS,sBAAsB,UAAkB,WAA2B;AAC1E,QAAM,MAAM,SAAS,WAAW,QAAQ,EAAE,QAAQ,OAAO,GAAG;AAC5D,QAAM,MAAM,QAAQ,GAAG;AACvB,QAAM,aAAa,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM;AAC3C,QAAM,YAAY,WAAW,MAAM,GAAG,EAAE,QAAQ,iCAAiC;AACjF,SAAO,KAAK,WAAW,GAAG,UAAU,KAAK,GAAG,CAAC,GAAG,GAAG,EAAE;AACvD;AAEA,SAAS,WAAW,MAAc,QAAyC;AACzE,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,MAAM,EAAE,eAAe,KAAK,CAAC;AAAA,EACrD,QAAQ;AACN;AAAA,EACF;AACA,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,KAAK,WAAW,GAAG,KAAK,MAAM,KAAK,WAAW,GAAG,EAAG;AAC9D,UAAM,OAAO,KAAK,MAAM,MAAM,IAAI;AAClC,QAAI,MAAM,YAAY,GAAG;AACvB,iBAAW,MAAM,MAAM;AAAA,IACzB,WAAW,MAAM,OAAO,KAAK,iBAAiB,IAAI,QAAQ,MAAM,IAAI,CAAC,GAAG;AACtE,aAAO,IAAI;AAAA,IACb;AAAA,EACF;AACF;AAEA,SAAS,kBAAkB,UAAkB,WAA4B;AACvE,QAAM,MAAM,SAAS,WAAW,QAAQ,EAAE,QAAQ,OAAO,GAAG;AAC5D,QAAM,MAAM,QAAQ,GAAG;AACvB,QAAM,aAAa,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM;AAC3C,SAAO,WAAW,MAAM,GAAG,EAAE,KAAK,qBAAqB;AACzD;AAUO,SAAS,oBAAoB,WAA8C;AAChF,QAAM,OAAkC,CAAC;AACzC,QAAM,yBAAyB,oBAAI,IAAY;AAE/C,aAAW,WAAW,CAAC,YAAY;AACjC,2BAAuB,IAAI,QAAQ,YAAY,CAAC;AAAA,EAClD,CAAC;AAED,aAAW,WAAW,CAAC,YAAY;AACjC,QAAI,iBAAiB,OAAO,EAAG;AAC/B,QAAI,CAAC,kBAAkB,SAAS,SAAS,EAAG;AAE5C,UAAM,KAAK,sBAAsB,SAAS,SAAS;AAMnD,UAAM,cAAc,GAAG,YAAY;AACnC,QAAI,uBAAuB,IAAI,WAAW,KAAK,gBAAgB,QAAQ,YAAY,GAAG;AACpF,YAAM,IAAI,8BAA8B,SAAS,EAAE;AAAA,IACrD;AAEA,QAAI;AACF,UAAI,SAAS,EAAE,EAAE,OAAO,GAAG;AACzB,cAAM,IAAI,8BAA8B,SAAS,EAAE;AAAA,MACrD;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,eAAe,8BAA+B,OAAM;AAAA,IAE1D;AAEA,SAAK,KAAK,EAAE,MAAM,SAAS,GAAG,CAAC;AAAA,EACjC,CAAC;AAED,SAAO;AACT;;;AD5LA,IAAM,gCAAN,cAA4C,MAAM;AAAA,EAC9B,OAAO;AAAA,EAChB;AAAA,EACA;AAAA,EACA;AAAA,EACT,YAAY,sBAAgC,YAAoB,cAAsB;AACpF;AAAA,MACE,qCAAqC,qBAAqB,MAAM,gDAAgD,UAAU,KAAK,YAAY;AAAA,IAC7I;AACA,SAAK,uBAAuB;AAC5B,SAAK,aAAa;AAClB,SAAK,eAAe;AAAA,EACtB;AACF;AAOA,eAAsB,YAAY,MAAgC;AAChE,SAAO,MAAM,IAAI,QAAiB,CAACA,aAAY;AAC7C,UAAM,QAAQ,aAAa;AAC3B,UAAM,KAAK,SAAS,CAAC,QAA+B;AAClD,YAAM,MAAM,MAAM;AAChB,QAAAA,SAAQ,IAAI,SAAS,YAAY;AAAA,MACnC,CAAC;AAAA,IACH,CAAC;AACD,UAAM,KAAK,aAAa,MAAM;AAC5B,YAAM,MAAM,MAAM;AAChB,QAAAA,SAAQ,KAAK;AAAA,MACf,CAAC;AAAA,IACH,CAAC;AACD,UAAM,OAAO,MAAM,WAAW;AAAA,EAChC,CAAC;AACH;AAMA,eAAsB,2BAAmD;AACvE,aAAW,QAAQ,CAAC,KAAM,IAAI,GAAG;AAC/B,QAAI,MAAM,YAAY,IAAI,EAAG,QAAO;AAAA,EACtC;AACA,SAAO;AACT;AAEA,SAAS,SAAS,MAAc,IAAqB;AACnD,MAAI;AACF,cAAU,QAAQ,EAAE,GAAG,EAAE,WAAW,KAAK,CAAC;AAM1C,iBAAa,OAAO,CAAC,MAAM,MAAM,EAAE,GAAG,EAAE,OAAO,OAAO,CAAC;AACvD,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,eAAe,MAAc,IAAkB;AACtD,YAAU,QAAQ,EAAE,GAAG,EAAE,WAAW,KAAK,CAAC;AAC1C,aAAW,MAAM,EAAE;AACrB;AAEA,SAAS,YAAY,MAAqC;AACxD,MAAI,CAAC,WAAW,KAAK,IAAI,GAAG;AAE1B;AAAA,EACF;AACA,MAAI,WAAW,KAAK,EAAE,GAAG;AAIvB,UAAM,IAAI;AAAA,MACR,0CAA0C,KAAK,EAAE,wBAAwB,KAAK,IAAI;AAAA,IACpF;AAAA,EACF;AACA,MAAI,CAAC,SAAS,KAAK,MAAM,KAAK,EAAE,GAAG;AACjC,mBAAe,KAAK,MAAM,KAAK,EAAE;AAAA,EACnC;AACF;AASA,SAAS,mBAAmB,MAA+B,WAAyB;AAClF,QAAM,QAAQ,kBAAkB,KAAK,MAAM,KAAK,IAAI,SAAS;AAC7D,MAAI,SAAS,EAAG;AAChB,QAAM,SAAS,aAAa,KAAK,IAAI,MAAM;AAC3C,QAAM,YAAY,uBAAuB,QAAQ,KAAK;AACtD,MAAI,cAAc,QAAQ;AACxB,kBAAc,KAAK,IAAI,WAAW,MAAM;AAAA,EAC1C;AACF;AAWA,SAAS,QAAQ,QAAoC;AACnD,MAAI,QAAQ;AACV,WAAO,CAAC,SAAiB;AAAA,IAEzB;AAAA,EACF;AACA,SAAO,CAAC,QAAgB;AACtB,YAAQ,IAAI,GAAG;AAAA,EACjB;AACF;AAEA,eAAe,yBAAyB,MAA2C;AACjF,MAAI,KAAK,MAAO;AAChB,QAAM,cAAc,MAAM,yBAAyB;AACnD,MAAI,gBAAgB,MAAM;AACxB,UAAM,IAAI;AAAA,MACR,+CAA+C,WAAW;AAAA,IAC5D;AAAA,EACF;AACF;AAEA,SAAS,eACP,MACA,WACA,KAC2B;AAC3B,QAAM,WAAsC,CAAC;AAC7C,aAAW,QAAQ,MAAM;AACvB,QAAI;AACF,kBAAY,IAAI;AAChB,yBAAmB,MAAM,SAAS;AAClC,eAAS,KAAK,IAAI;AAClB,UAAI,eAAU,KAAK,IAAI,WAAM,KAAK,EAAE,EAAE;AAAA,IACxC,SAAS,KAAK;AAGZ,YAAM,eAAe,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AACpE,YAAM,IAAI;AAAA,QACR,SAAS,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,QAC1B,KAAK;AAAA,QACL;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAsB,qBACpB,OAA6B,CAAC,GACA;AAC9B,QAAM,YAAY,KAAK,aAAa,QAAQ,QAAQ,IAAI,GAAG,UAAU,QAAQ;AAC7E,QAAM,MAAM,QAAQ,KAAK,MAAM;AAE/B,QAAM,yBAAyB,IAAI;AAEnC,QAAM,OAAO,oBAAoB,SAAS;AAC1C,MAAI,KAAK,WAAW,GAAG;AACrB,QAAI,0EAAqE;AACzE,WAAO,EAAE,UAAU,CAAC,GAAG,cAAc,KAAK;AAAA,EAC5C;AAEA,MAAI,sBAAiB,KAAK,MAAM,8CAA8C;AAE9E,MAAI,KAAK,QAAQ;AACf,eAAW,QAAQ,MAAM;AACvB,UAAI,kBAAkB,KAAK,IAAI,WAAM,KAAK,EAAE,EAAE;AAAA,IAChD;AACA,WAAO,EAAE,UAAU,CAAC,GAAG,cAAc,MAAM;AAAA,EAC7C;AAEA,QAAM,WAAW,eAAe,MAAM,WAAW,GAAG;AACpD,MAAI,qBAAgB,SAAS,MAAM,YAAY;AAC/C,SAAO,EAAE,UAAU,cAAc,MAAM;AACzC;","names":["resolve"]}

package/dist/{routes-XNS3UM3B.js → routes-ZVDKABXZ.js}

@@ -5,16 +5,16 @@ import {
 } from "./chunk-GEQJAFSV.js";
 import {
   loadConfig
-} from "./chunk-AFVTEAES.js";
+} from "./chunk-CJNMJUHE.js";
 import "./chunk-GDN3PXFH.js";
-import "./chunk-GSO77FSM.js";
-import "./chunk-45C3WUQ7.js";
+import "./chunk-6OXCZMW3.js";
+import "./chunk-QPVXGC7O.js";
 import {
   scanServerActions,
   scanServerRoutes,
   scanWebSocketRoutes
-} from "./chunk-FRUEDJFX.js";
-import "./chunk-P37RZRFV.js";
+} from "./chunk-226KMIGZ.js";
+import "./chunk-A7JBF5FO.js";
 
 // src/cli/commands/routes.ts
 import { resolve, relative } from "path";
@@ -62,4 +62,4 @@ async function routesCommand() {
 export {
   routesCommand
 };
-//# sourceMappingURL=routes-XNS3UM3B.js.map
+//# sourceMappingURL=routes-ZVDKABXZ.js.map

package/dist/schema-FBOTN46F.js

@@ -0,0 +1,22 @@
+#!/usr/bin/env node
+import "tsx/esm";
+import {
+  cacheSchema,
+  corsSchema,
+  rateLimitSchema,
+  securityHeadersSchema,
+  securitySchema,
+  storageSchema,
+  theoConfigSchema
+} from "./chunk-6OXCZMW3.js";
+import "./chunk-QPVXGC7O.js";
+export {
+  cacheSchema,
+  corsSchema,
+  rateLimitSchema,
+  securityHeadersSchema,
+  securitySchema,
+  storageSchema,
+  theoConfigSchema
+};
+//# sourceMappingURL=schema-FBOTN46F.js.map

package/dist/server/agent/index.js

@@ -12,7 +12,7 @@ import {
   parseChannelPath,
   serveMcpStdio,
   streamAgentTurnInProcess
-} from "../../chunk-5AVPWHUE.js";
+} from "../../chunk-HGUZWG2C.js";
 import {
   buildResourceDescriptors,
   defineAppResource,

package/dist/server/cost/index.js

@@ -2,7 +2,7 @@ import {
   InMemoryUsageStorage,
   trackAgentRun,
   trackAgentTools
-} from "../../chunk-RMU7EBRO.js";
+} from "../../chunk-OP7QCTR5.js";
 import "../../chunk-DGUM43GV.js";
 export {
   InMemoryUsageStorage,

package/dist/server/cron/index.js

@@ -14,11 +14,11 @@ import {
   translateCronToVercel,
   validateCronSchedule,
   writeCronManifest
-} from "../../chunk-U3NTEK46.js";
+} from "../../chunk-26ECIX74.js";
 import "../../chunk-YB5DJJ4U.js";
 import "../../chunk-6NEXVBPY.js";
 import "../../chunk-7MQOHNHE.js";
-import "../../chunk-X2VVCJ4V.js";
+import "../../chunk-65EFIUDD.js";
 import "../../chunk-DGUM43GV.js";
 export {
   CRON_MANIFEST_SCHEMA_VERSION,

package/dist/server/http/index.js

@@ -24,9 +24,9 @@ import {
   runMiddlewareAndContext,
   sendError,
   sendJson
-} from "../../chunk-QWBXUZAX.js";
-import "../../chunk-GY5Q27BJ.js";
-import "../../chunk-WFNLNIJX.js";
+} from "../../chunk-JIL74SFK.js";
+import "../../chunk-6FK7FKY6.js";
+import "../../chunk-VPISAMXU.js";
 import "../../chunk-ZEGYW52B.js";
 import "../../chunk-TSLSIRBR.js";
 import "../../chunk-UD3LFGDL.js";

package/dist/server/index.js

@@ -28,7 +28,7 @@ import {
   defineJob,
   scanJobs,
   writeJobManifest
-} from "../chunk-GUUWDMR2.js";
+} from "../chunk-OVHW23YC.js";
 import {
   ConsoleObservabilityAdapter,
   NoopObservabilityAdapter,
@@ -39,7 +39,7 @@ import {
   defineObservabilityAdapter,
   resolveAdapter,
   serializeSpansToOtlp
-} from "../chunk-KI7OWQUX.js";
+} from "../chunk-L2S2R3TI.js";
 import "../chunk-NPMCKOX4.js";
 import {
   createRouteRateLimiter,
@@ -61,7 +61,7 @@ import {
   resolveTransformer,
   superjsonTransformer,
   validateRouteInput
-} from "../chunk-GW5H4KB4.js";
+} from "../chunk-FX72VHAE.js";
 import {
   ActionError,
   ActionInputError,
@@ -88,13 +88,13 @@ import {
   runMiddlewareAndContext,
   sendError,
   sendJson
-} from "../chunk-QWBXUZAX.js";
+} from "../chunk-JIL74SFK.js";
 import {
   DuplicateContextKeyError,
   createOutbox,
   createOutboxDispatcher,
   createQueueClient
-} from "../chunk-GY5Q27BJ.js";
+} from "../chunk-6FK7FKY6.js";
 import {
   findSuggestion,
   levenshtein
@@ -106,7 +106,7 @@ import {
   logRequest,
   parseRequestBody,
   warnOnce
-} from "../chunk-WFNLNIJX.js";
+} from "../chunk-VPISAMXU.js";
 import {
   DuplicateDecorationError,
   DuplicatePluginError,
@@ -134,7 +134,7 @@ import {
   scanServerRoutes,
   scanWebSocketRoutes,
   writeManifest
-} from "../chunk-IHJZPQEF.js";
+} from "../chunk-4HAU7AJM.js";
 import "../chunk-WSJKACWB.js";
 import {
   scanMiddlewares
@@ -191,7 +191,7 @@ import {
   parseChannelPath,
   serveMcpStdio,
   streamAgentTurnInProcess
-} from "../chunk-5AVPWHUE.js";
+} from "../chunk-HGUZWG2C.js";
 import {
   buildResourceDescriptors,
   defineAppResource,
@@ -241,7 +241,7 @@ import {
   InMemoryUsageStorage,
   trackAgentRun,
   trackAgentTools
-} from "../chunk-RMU7EBRO.js";
+} from "../chunk-OP7QCTR5.js";
 import {
   CRON_MANIFEST_SCHEMA_VERSION,
   DuplicateCronNameError,
@@ -258,11 +258,11 @@ import {
   translateCronToVercel,
   validateCronSchedule,
   writeCronManifest
-} from "../chunk-U3NTEK46.js";
+} from "../chunk-26ECIX74.js";
 import "../chunk-YB5DJJ4U.js";
 import "../chunk-6NEXVBPY.js";
 import "../chunk-7MQOHNHE.js";
-import "../chunk-X2VVCJ4V.js";
+import "../chunk-65EFIUDD.js";
 import {
   action,
   defineChannel,

package/dist/server/jobs/index.js

@@ -9,17 +9,17 @@ import {
   defineJob,
   scanJobs,
   writeJobManifest
-} from "../../chunk-GUUWDMR2.js";
+} from "../../chunk-OVHW23YC.js";
 import {
   DuplicateContextKeyError,
   createOutbox,
   createOutboxDispatcher,
   createQueueClient
-} from "../../chunk-GY5Q27BJ.js";
+} from "../../chunk-6FK7FKY6.js";
 import "../../chunk-YB5DJJ4U.js";
 import "../../chunk-6NEXVBPY.js";
 import "../../chunk-7MQOHNHE.js";
-import "../../chunk-X2VVCJ4V.js";
+import "../../chunk-65EFIUDD.js";
 import "../../chunk-DGUM43GV.js";
 export {
   DuplicateContextKeyError,

package/dist/server/observability/index.d.ts

@@ -71,9 +71,7 @@ declare function findSuggestion(input: string, candidates: string[], maxDistance
  * Per ADR D456: implementations can be lightweight (50 LoC OTLP serializer)
  * or full OTel SDK wrappers via defineObservabilityAdapter().
  */
-interface SpanAttributes {
-    [key: string]: string | number | boolean | undefined;
-}
+type SpanAttributes = Record<string, string | number | boolean | undefined>;
 /** Handle to an active span — setAttribute, setStatus, end. */
 interface SpanHandle {
     /** Set a key-value attribute on this span. */
@@ -101,14 +99,6 @@ interface ObservabilityAdapter {
     shutdown(): Promise<void>;
 }
 
-/**
- * NoopObservabilityAdapter — silent fallback.
- *
- * All methods are no-ops. Never throws, never blocks.
- * Used as the default when no other adapter is configured.
- * EC-2: startSpan after shutdown returns a noop span (no crash).
- */
-
 declare class NoopObservabilityAdapter implements ObservabilityAdapter {
     readonly name = "noop";
     private isShutdown;
@@ -120,13 +110,6 @@ declare class NoopObservabilityAdapter implements ObservabilityAdapter {
     shutdown(): Promise<void>;
 }
 
-/**
- * ConsoleObservabilityAdapter — dev-mode console output.
- *
- * Emits JSON-structured lines to a configurable writer (default: process.stderr).
- * Inspired by Hono middleware timing pattern.
- */
-
 interface ConsoleAdapterOptions {
     /** Writer function — defaults to process.stderr.write. */
     write?: (line: string) => void;
@@ -147,16 +130,6 @@ declare class ConsoleObservabilityAdapter implements ObservabilityAdapter {
     private emit;
 }
 
-/**
- * TheoCloudObservabilityAdapter — OTLP/HTTP batched export for TheoCloud.
- *
- * Zero-config via env vars (THEO_CLOUD_INGEST_URL, THEO_CLOUD_API_KEY).
- * Batches spans and flushes via native fetch() POST.
- *
- * EC-1: flush failure logs warning, does NOT throw, does NOT retry (KISS).
- * EC-2: startSpan after shutdown returns noop span.
- */
-
 interface TheoCloudAdapterOptions {
     /** TheoCloud ingest endpoint URL. */
     ingestUrl: string;
@@ -181,16 +154,6 @@ declare class TheoCloudObservabilityAdapter implements ObservabilityAdapter {
     shutdown(): Promise<void>;
 }
 
-/**
- * Adapter registry — resolves the active observability adapter.
- *
- * Per ADR D457 (v1.1) priority chain:
- *   1. Explicit config (theo.config.ts observability.provider) — ALWAYS wins
- *   2. THEO_CLOUD_INGEST_URL env → theo-cloud adapter
- *   3. NODE_ENV=development → console adapter
- *   4. Fallback → noop adapter
- */
-
 interface ResolveAdapterOptions {
     env: Record<string, string | undefined>;
     config?: {

package/dist/server/observability/index.js

@@ -8,7 +8,7 @@ import {
   defineObservabilityAdapter,
   resolveAdapter,
   serializeSpansToOtlp
-} from "../../chunk-KI7OWQUX.js";
+} from "../../chunk-L2S2R3TI.js";
 import {
   findSuggestion,
   levenshtein
@@ -18,7 +18,7 @@ import {
   createLogger,
   logRequest,
   warnOnce
-} from "../../chunk-WFNLNIJX.js";
+} from "../../chunk-VPISAMXU.js";
 import {
   JsonStdoutSink,
   createNoOpLogger,

package/dist/server/scan/index.js

@@ -14,12 +14,12 @@ import {
   scanServerRoutes,
   scanWebSocketRoutes,
   writeManifest
-} from "../../chunk-IHJZPQEF.js";
+} from "../../chunk-4HAU7AJM.js";
 import "../../chunk-WSJKACWB.js";
 import {
   scanMiddlewares
 } from "../../chunk-ZEGYW52B.js";
-import "../../chunk-X2VVCJ4V.js";
+import "../../chunk-65EFIUDD.js";
 import "../../chunk-DGUM43GV.js";
 export {
   ActionScanError,

package/dist/{server-routes-hmr-VZXOP5YT.js → server-routes-hmr-4W5L2MKN.js}

@@ -40,4 +40,4 @@ function serverRoutesHmrPlugin(opts) {
 export {
   serverRoutesHmrPlugin
 };
-//# sourceMappingURL=server-routes-hmr-VZXOP5YT.js.map
+//# sourceMappingURL=server-routes-hmr-4W5L2MKN.js.map

package/dist/server-routes-hmr-4W5L2MKN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/vite-plugin/server-routes-hmr.ts"],"sourcesContent":["/**\n * G6 T1.2 — Vite plugin: watch `server/routes/**` and invalidate SSR module\n * cache on add/change/unlink with a 50 ms debounce window.\n *\n * Plan: .claude/knowledge-base/plans/g6-router-convention-plan.md v1.1\n *\n * Pattern reference: SvelteKit `exports/vite/dev/index.js:335-398`.\n *\n * Why this exists: in dev, `scanServerRoutes` runs per-request (fresh disk\n * read), so adding/removing routes already takes effect on next request.\n * But the SSR dynamic-import cache holds stale code for EDITED routes — Vite\n * needs an explicit `invalidateModule` call to bust it. We also send a\n * `full-reload` so any browser code that imported a route module\n * (rare, but the typed client G1 does this for ts-only type resolution)\n * picks up the change.\n *\n * EC-6: 50 ms debounce collapses bursty file events (e.g., codemod-driven\n * 21-rename storm in T2.1) into a single invalidation cycle — without it,\n * 21 invalidations + 21 full-reloads in 5 s would hang the dev server.\n */\nimport { sep } from 'node:path'\n\nimport type { Plugin, ViteDevServer } from 'vite'\n\ninterface ServerRoutesHmrPluginOptions {\n  /** Absolute path of the consumer's `server/` directory. */\n  serverDir: string\n  /** Debounce window in milliseconds (default 50 ms per EC-6). */\n  debounceMs?: number\n}\n\ninterface ModuleGraphLike {\n  getModuleById: (id: string) => unknown\n  invalidateModule: (mod: unknown) => void\n  idToModuleMap: Map<string, { id: string }>\n}\n\ninterface ViteDevServerLike {\n  watcher: { on: (event: string, listener: (path: string) => void) => void }\n  moduleGraph: ModuleGraphLike\n  ws: { send: (payload: { type: string }) => void }\n}\n\nexport function serverRoutesHmrPlugin(opts: ServerRoutesHmrPluginOptions): Plugin {\n  const routesDir = `${opts.serverDir}${sep}routes${sep}`\n  // Cross-platform: on Windows the watcher MAY emit forward slashes even on NTFS.\n  const routesDirPosix = routesDir.replace(/\\\\/g, '/')\n  const debounceMs = opts.debounceMs ?? 50\n\n  const isUnderRoutes = (filePath: string): boolean => {\n    const normalized = filePath.replace(/\\\\/g, '/')\n    return normalized.startsWith(routesDirPosix)\n  }\n\n  return {\n    name: 'theokit:server-routes-hmr',\n\n    configureServer(server: ViteDevServer) {\n      const srv = server as unknown as ViteDevServerLike\n      let timer: ReturnType<typeof setTimeout> | null = null\n\n      const fireInvalidation = (): void => {\n        timer = null\n        for (const mod of srv.moduleGraph.idToModuleMap.values()) {\n          const normalizedId = mod.id.replace(/\\\\/g, '/')\n          if (normalizedId.startsWith(routesDirPosix)) {\n            srv.moduleGraph.invalidateModule(mod)\n          }\n        }\n        srv.ws.send({ type: 'full-reload' })\n      }\n\n      const scheduleInvalidation = (filePath: string): void => {\n        if (!isUnderRoutes(filePath)) return\n        if (timer !== null) clearTimeout(timer)\n        timer = setTimeout(fireInvalidation, debounceMs)\n      }\n\n      srv.watcher.on('add', scheduleInvalidation)\n      srv.watcher.on('change', scheduleInvalidation)\n      srv.watcher.on('unlink', scheduleInvalidation)\n    },\n  }\n}\n"],"mappings":";;;;AAoBA,SAAS,WAAW;AAuBb,SAAS,sBAAsB,MAA4C;AAChF,QAAM,YAAY,GAAG,KAAK,SAAS,GAAG,GAAG,SAAS,GAAG;AAErD,QAAM,iBAAiB,UAAU,QAAQ,OAAO,GAAG;AACnD,QAAM,aAAa,KAAK,cAAc;AAEtC,QAAM,gBAAgB,CAAC,aAA8B;AACnD,UAAM,aAAa,SAAS,QAAQ,OAAO,GAAG;AAC9C,WAAO,WAAW,WAAW,cAAc;AAAA,EAC7C;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IAEN,gBAAgB,QAAuB;AACrC,YAAM,MAAM;AACZ,UAAI,QAA8C;AAElD,YAAM,mBAAmB,MAAY;AACnC,gBAAQ;AACR,mBAAW,OAAO,IAAI,YAAY,cAAc,OAAO,GAAG;AACxD,gBAAM,eAAe,IAAI,GAAG,QAAQ,OAAO,GAAG;AAC9C,cAAI,aAAa,WAAW,cAAc,GAAG;AAC3C,gBAAI,YAAY,iBAAiB,GAAG;AAAA,UACtC;AAAA,QACF;AACA,YAAI,GAAG,KAAK,EAAE,MAAM,cAAc,CAAC;AAAA,MACrC;AAEA,YAAM,uBAAuB,CAAC,aAA2B;AACvD,YAAI,CAAC,cAAc,QAAQ,EAAG;AAC9B,YAAI,UAAU,KAAM,cAAa,KAAK;AACtC,gBAAQ,WAAW,kBAAkB,UAAU;AAAA,MACjD;AAEA,UAAI,QAAQ,GAAG,OAAO,oBAAoB;AAC1C,UAAI,QAAQ,GAAG,UAAU,oBAAoB;AAC7C,UAAI,QAAQ,GAAG,UAAU,oBAAoB;AAAA,IAC/C;AAAA,EACF;AACF;","names":[]}

package/dist/{server-routes-hmr-PBHSKCQJ.js → server-routes-hmr-RI7SYNT2.js}

@@ -39,4 +39,4 @@ function serverRoutesHmrPlugin(opts) {
 export {
   serverRoutesHmrPlugin
 };
-//# sourceMappingURL=server-routes-hmr-PBHSKCQJ.js.map
+//# sourceMappingURL=server-routes-hmr-RI7SYNT2.js.map

package/dist/server-routes-hmr-RI7SYNT2.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/vite-plugin/server-routes-hmr.ts"],"sourcesContent":["/**\n * G6 T1.2 — Vite plugin: watch `server/routes/**` and invalidate SSR module\n * cache on add/change/unlink with a 50 ms debounce window.\n *\n * Plan: .claude/knowledge-base/plans/g6-router-convention-plan.md v1.1\n *\n * Pattern reference: SvelteKit `exports/vite/dev/index.js:335-398`.\n *\n * Why this exists: in dev, `scanServerRoutes` runs per-request (fresh disk\n * read), so adding/removing routes already takes effect on next request.\n * But the SSR dynamic-import cache holds stale code for EDITED routes — Vite\n * needs an explicit `invalidateModule` call to bust it. We also send a\n * `full-reload` so any browser code that imported a route module\n * (rare, but the typed client G1 does this for ts-only type resolution)\n * picks up the change.\n *\n * EC-6: 50 ms debounce collapses bursty file events (e.g., codemod-driven\n * 21-rename storm in T2.1) into a single invalidation cycle — without it,\n * 21 invalidations + 21 full-reloads in 5 s would hang the dev server.\n */\nimport { sep } from 'node:path'\n\nimport type { Plugin, ViteDevServer } from 'vite'\n\ninterface ServerRoutesHmrPluginOptions {\n  /** Absolute path of the consumer's `server/` directory. */\n  serverDir: string\n  /** Debounce window in milliseconds (default 50 ms per EC-6). */\n  debounceMs?: number\n}\n\ninterface ModuleGraphLike {\n  getModuleById: (id: string) => unknown\n  invalidateModule: (mod: unknown) => void\n  idToModuleMap: Map<string, { id: string }>\n}\n\ninterface ViteDevServerLike {\n  watcher: { on: (event: string, listener: (path: string) => void) => void }\n  moduleGraph: ModuleGraphLike\n  ws: { send: (payload: { type: string }) => void }\n}\n\nexport function serverRoutesHmrPlugin(opts: ServerRoutesHmrPluginOptions): Plugin {\n  const routesDir = `${opts.serverDir}${sep}routes${sep}`\n  // Cross-platform: on Windows the watcher MAY emit forward slashes even on NTFS.\n  const routesDirPosix = routesDir.replace(/\\\\/g, '/')\n  const debounceMs = opts.debounceMs ?? 50\n\n  const isUnderRoutes = (filePath: string): boolean => {\n    const normalized = filePath.replace(/\\\\/g, '/')\n    return normalized.startsWith(routesDirPosix)\n  }\n\n  return {\n    name: 'theokit:server-routes-hmr',\n\n    configureServer(server: ViteDevServer) {\n      const srv = server as unknown as ViteDevServerLike\n      let timer: ReturnType<typeof setTimeout> | null = null\n\n      const fireInvalidation = (): void => {\n        timer = null\n        for (const mod of srv.moduleGraph.idToModuleMap.values()) {\n          const normalizedId = mod.id.replace(/\\\\/g, '/')\n          if (normalizedId.startsWith(routesDirPosix)) {\n            srv.moduleGraph.invalidateModule(mod)\n          }\n        }\n        srv.ws.send({ type: 'full-reload' })\n      }\n\n      const scheduleInvalidation = (filePath: string): void => {\n        if (!isUnderRoutes(filePath)) return\n        if (timer !== null) clearTimeout(timer)\n        timer = setTimeout(fireInvalidation, debounceMs)\n      }\n\n      srv.watcher.on('add', scheduleInvalidation)\n      srv.watcher.on('change', scheduleInvalidation)\n      srv.watcher.on('unlink', scheduleInvalidation)\n    },\n  }\n}\n"],"mappings":";;;AAoBA,SAAS,WAAW;AAuBb,SAAS,sBAAsB,MAA4C;AAChF,QAAM,YAAY,GAAG,KAAK,SAAS,GAAG,GAAG,SAAS,GAAG;AAErD,QAAM,iBAAiB,UAAU,QAAQ,OAAO,GAAG;AACnD,QAAM,aAAa,KAAK,cAAc;AAEtC,QAAM,gBAAgB,CAAC,aAA8B;AACnD,UAAM,aAAa,SAAS,QAAQ,OAAO,GAAG;AAC9C,WAAO,WAAW,WAAW,cAAc;AAAA,EAC7C;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IAEN,gBAAgB,QAAuB;AACrC,YAAM,MAAM;AACZ,UAAI,QAA8C;AAElD,YAAM,mBAAmB,MAAY;AACnC,gBAAQ;AACR,mBAAW,OAAO,IAAI,YAAY,cAAc,OAAO,GAAG;AACxD,gBAAM,eAAe,IAAI,GAAG,QAAQ,OAAO,GAAG;AAC9C,cAAI,aAAa,WAAW,cAAc,GAAG;AAC3C,gBAAI,YAAY,iBAAiB,GAAG;AAAA,UACtC;AAAA,QACF;AACA,YAAI,GAAG,KAAK,EAAE,MAAM,cAAc,CAAC;AAAA,MACrC;AAEA,YAAM,uBAAuB,CAAC,aAA2B;AACvD,YAAI,CAAC,cAAc,QAAQ,EAAG;AAC9B,YAAI,UAAU,KAAM,cAAa,KAAK;AACtC,gBAAQ,WAAW,kBAAkB,UAAU;AAAA,MACjD;AAEA,UAAI,QAAQ,GAAG,OAAO,oBAAoB;AAC1C,UAAI,QAAQ,GAAG,UAAU,oBAAoB;AAC7C,UAAI,QAAQ,GAAG,UAAU,oBAAoB;AAAA,IAC/C;AAAA,EACF;AACF;","names":[]}

package/dist/{services-json-Y3XODNB5.js → services-json-7ZXJ4CIS.js}

@@ -138,4 +138,4 @@ export {
   servicesJsonMigrateCommand,
   slugify
 };
-//# sourceMappingURL=services-json-Y3XODNB5.js.map
+//# sourceMappingURL=services-json-7ZXJ4CIS.js.map

package/dist/services-json-7ZXJ4CIS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/commands/migrate/services-json.ts"],"sourcesContent":["/**\n * Plan v1.2 T2.3 + EC-2 — `theokit migrate services-json-v1-to-v2`.\n *\n * Idempotent codemod that injects a top-level `name` field into\n * `theo.config.ts` (and refreshes `.theokit/services.json` if a build artifact\n * exists). When the resolved `name` would be `services-bundle`, the codemod\n * emits an actionable warning so the operator can decide between:\n *   a) keeping `services-bundle` (zero-downtime — preserves the Gitea repo\n *      lineage shipped by Plan B v3.1); or\n *   b) renaming to a new project — requires ArgoCD App rewire downtime.\n *\n * Inputs (in order of precedence):\n *   1) explicit `--name <slug>` CLI argument\n *   2) `package.json` `name` field (slugified to DNS-1123)\n *   3) directory basename\n *   4) `services-bundle` fallback with a warning\n */\nimport { existsSync, readFileSync, writeFileSync } from 'node:fs'\nimport { basename, join, resolve } from 'node:path'\n\ninterface ServicesJsonMigrateOptions {\n  /** Override theo.config.ts path. Defaults to `<cwd>/theo.config.ts`. */\n  configPath?: string\n  /** Override package.json path. Defaults to `<cwd>/package.json`. */\n  pkgPath?: string\n  /** Explicit project name. When set, bypasses package.json / dir-basename. */\n  name?: string\n  /** When true, prints the plan but performs no writes. */\n  dryRun?: boolean\n  /** When true, suppresses stdout (used in tests). */\n  silent?: boolean\n  /** When set, treats this as the working directory (defaults to process.cwd). */\n  cwd?: string\n}\n\ninterface ServicesJsonMigratePlan {\n  /** The DNS-1123 project name that will land in theo.config.ts. */\n  projectName: string\n  /** Reason describing where the name came from. */\n  source: 'flag' | 'package-json' | 'directory' | 'fallback'\n  /** Whether `theo.config.ts` already declared `name`. */\n  alreadyMigrated: boolean\n  /** Warning string when projectName=services-bundle. Empty otherwise. */\n  warning: string\n}\n\n// Canonical DNS-1123 anchor. Equivalent to ^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$\n// but split into explicit single-char anchors so neither security/detect-\n// unsafe-regex nor sonarjs/slow-regex flag it (linear scan, no backtracking\n// hot paths over arbitrary input).\nfunction isDns1123(s: string): boolean {\n  if (s.length === 0 || s.length > 63) return false\n  for (let i = 0; i < s.length; i += 1) {\n    const c = s.charCodeAt(i)\n    const isLower = c >= 0x61 && c <= 0x7a\n    const isDigit = c >= 0x30 && c <= 0x39\n    const isHyphen = c === 0x2d\n    if (!(isLower || isDigit || isHyphen)) return false\n    if (i === 0 && isHyphen) return false\n    if (i === s.length - 1 && isHyphen) return false\n  }\n  return true\n}\n\n/**\n * Best-effort slugifier: lowercases, replaces underscores with hyphens,\n * drops invalid characters, collapses repeated hyphens, trims leading /\n * trailing hyphens. Returns empty string when nothing survives.\n */\nexport function slugify(input: string): string {\n  const lowered = input.toLowerCase()\n  let result = ''\n  let lastWasHyphen = false\n  for (let i = 0; i < lowered.length; i += 1) {\n    const ch = lowered.charAt(i)\n    const code = lowered.charCodeAt(i)\n    const isLower = code >= 0x61 && code <= 0x7a\n    const isDigit = code >= 0x30 && code <= 0x39\n    if (isLower || isDigit) {\n      result += ch\n      lastWasHyphen = false\n      continue\n    }\n    if ((ch === '-' || ch === '_') && !lastWasHyphen && result.length > 0) {\n      result += '-'\n      lastWasHyphen = true\n    }\n  }\n  while (result.endsWith('-')) result = result.slice(0, -1)\n  return result.slice(0, 63)\n}\n\n/** Returns `true` when `theo.config.ts` source already declares `name: …`. */\nexport function configDeclaresName(source: string): boolean {\n  // Linear scan instead of `[\\s\\S]*?` lookahead so sonarjs/slow-regex\n  // stays clean (no super-linear backtracking). We anchor on `defineConfig(`\n  // then walk forward looking for `name:` inside the literal block.\n  const start = source.indexOf('defineConfig(')\n  if (start < 0) return false\n  return /\\bname\\s*:\\s*['\"]/u.test(source.slice(start))\n}\n\n/**\n * Inject `name: <project>,` into the first `defineConfig({ ... })` call.\n * Idempotent: when the config already declares `name`, returns the source\n * untouched.\n */\nexport function injectName(source: string, projectName: string): string {\n  if (configDeclaresName(source)) return source\n  return source.replace(/(defineConfig\\(\\s*\\{)([\\s\\S])/u, (_match, head: string, next: string) => {\n    // Preserve existing whitespace style by sniffing the next character.\n    const nl = next === '\\n' || next === '\\r' ? next : '\\n'\n    return `${head}\\n  name: '${projectName}',${nl === '\\n' ? '' : nl}`\n  })\n}\n\ninterface CandidateResolution {\n  projectName: string\n  source: ServicesJsonMigratePlan['source']\n}\n\nfunction fromPackageJson(pkgPath: string): CandidateResolution | null {\n  if (!existsSync(pkgPath)) return null\n  try {\n    const pkg = JSON.parse(readFileSync(pkgPath, 'utf-8')) as { name?: string }\n    if (typeof pkg.name !== 'string' || pkg.name.length === 0) return null\n    const candidate = slugify(pkg.name)\n    return isDns1123(candidate) ? { projectName: candidate, source: 'package-json' } : null\n  } catch {\n    return null\n  }\n}\n\nfunction fromDirectoryBasename(cwd: string): CandidateResolution | null {\n  const candidate = slugify(basename(resolve(cwd)))\n  return isDns1123(candidate) ? { projectName: candidate, source: 'directory' } : null\n}\n\nfunction resolveProjectName(\n  opts: ServicesJsonMigrateOptions,\n  cwd: string,\n  pkgPath: string,\n): CandidateResolution {\n  if (opts.name !== undefined && opts.name.length > 0) {\n    return { projectName: opts.name, source: 'flag' }\n  }\n  return (\n    fromPackageJson(pkgPath) ??\n    fromDirectoryBasename(cwd) ?? {\n      projectName: 'services-bundle',\n      source: 'fallback',\n    }\n  )\n}\n\nexport function planServicesJsonMigration(\n  opts: ServicesJsonMigrateOptions,\n): ServicesJsonMigratePlan {\n  const cwd = opts.cwd ?? process.cwd()\n  const configPath = opts.configPath ?? join(cwd, 'theo.config.ts')\n  const pkgPath = opts.pkgPath ?? join(cwd, 'package.json')\n\n  const configSource = existsSync(configPath) ? readFileSync(configPath, 'utf-8') : ''\n  const alreadyMigrated = configSource.length > 0 ? configDeclaresName(configSource) : false\n\n  const resolution = resolveProjectName(opts, cwd, pkgPath)\n  const warning =\n    resolution.source === 'fallback'\n      ? 'Using fallback project name `services-bundle`. This preserves the Gitea ' +\n        'repo lineage shipped by Plan B v3.1 (zero downtime). To adopt a new project ' +\n        'name, re-run with `--name <slug>` and coordinate the ArgoCD App rewire.'\n      : ''\n\n  if (!isDns1123(resolution.projectName)) {\n    throw new Error(\n      `services-json migrate: resolved project name \"${resolution.projectName}\" is not DNS-1123 ` +\n        '(1-63 chars, lowercase alphanumeric+hyphens, no leading/trailing hyphen). Re-run with --name <slug>.',\n    )\n  }\n\n  return {\n    projectName: resolution.projectName,\n    source: resolution.source,\n    alreadyMigrated,\n    warning,\n  }\n}\n\n// Returns void; not async — kept Promise-bearing via the CLI dispatcher's\n// `await` site by wrapping into Promise.resolve(...) on the call boundary.\nexport function servicesJsonMigrateCommand(opts: ServicesJsonMigrateOptions): Promise<void> {\n  const cwd = opts.cwd ?? process.cwd()\n  const configPath = opts.configPath ?? join(cwd, 'theo.config.ts')\n  const log = (m: string): void => {\n    if (opts.silent === true) return\n    process.stdout.write(`${m}\\n`)\n  }\n\n  if (!existsSync(configPath)) {\n    return Promise.reject(\n      new Error(`services-json migrate: ${configPath} not found. Run from a TheoKit project root.`),\n    )\n  }\n\n  const plan = planServicesJsonMigration(opts)\n  log(`  • Resolved project name: '${plan.projectName}' (source: ${plan.source})`)\n  if (plan.warning.length > 0) log(`  ⚠ ${plan.warning}`)\n\n  if (plan.alreadyMigrated) {\n    log('  ✓ theo.config.ts already declares `name` — nothing to do (idempotent).')\n    return Promise.resolve()\n  }\n\n  if (opts.dryRun === true) {\n    log('  • Dry-run: would inject `name` into theo.config.ts (no write).')\n    return Promise.resolve()\n  }\n\n  const before = readFileSync(configPath, 'utf-8')\n  const after = injectName(before, plan.projectName)\n  if (after === before) {\n    log(\"  ⚠ Could not locate `defineConfig({ ... })` block. Add `name: '<slug>',` manually.\")\n    return Promise.resolve()\n  }\n  writeFileSync(configPath, after, 'utf-8')\n  log(`  ✓ Injected name='${plan.projectName}' into theo.config.ts`)\n  log('  • Next: re-run `theokit build --target theo-cloud` to emit services.json v2.')\n  return Promise.resolve()\n}\n"],"mappings":";;;;AAiBA,SAAS,YAAY,cAAc,qBAAqB;AACxD,SAAS,UAAU,MAAM,eAAe;AAgCxC,SAAS,UAAU,GAAoB;AACrC,MAAI,EAAE,WAAW,KAAK,EAAE,SAAS,GAAI,QAAO;AAC5C,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,KAAK,GAAG;AACpC,UAAM,IAAI,EAAE,WAAW,CAAC;AACxB,UAAM,UAAU,KAAK,MAAQ,KAAK;AAClC,UAAM,UAAU,KAAK,MAAQ,KAAK;AAClC,UAAM,WAAW,MAAM;AACvB,QAAI,EAAE,WAAW,WAAW,UAAW,QAAO;AAC9C,QAAI,MAAM,KAAK,SAAU,QAAO;AAChC,QAAI,MAAM,EAAE,SAAS,KAAK,SAAU,QAAO;AAAA,EAC7C;AACA,SAAO;AACT;AAOO,SAAS,QAAQ,OAAuB;AAC7C,QAAM,UAAU,MAAM,YAAY;AAClC,MAAI,SAAS;AACb,MAAI,gBAAgB;AACpB,WAAS,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK,GAAG;AAC1C,UAAM,KAAK,QAAQ,OAAO,CAAC;AAC3B,UAAM,OAAO,QAAQ,WAAW,CAAC;AACjC,UAAM,UAAU,QAAQ,MAAQ,QAAQ;AACxC,UAAM,UAAU,QAAQ,MAAQ,QAAQ;AACxC,QAAI,WAAW,SAAS;AACtB,gBAAU;AACV,sBAAgB;AAChB;AAAA,IACF;AACA,SAAK,OAAO,OAAO,OAAO,QAAQ,CAAC,iBAAiB,OAAO,SAAS,GAAG;AACrE,gBAAU;AACV,sBAAgB;AAAA,IAClB;AAAA,EACF;AACA,SAAO,OAAO,SAAS,GAAG,EAAG,UAAS,OAAO,MAAM,GAAG,EAAE;AACxD,SAAO,OAAO,MAAM,GAAG,EAAE;AAC3B;AAGO,SAAS,mBAAmB,QAAyB;AAI1D,QAAM,QAAQ,OAAO,QAAQ,eAAe;AAC5C,MAAI,QAAQ,EAAG,QAAO;AACtB,SAAO,qBAAqB,KAAK,OAAO,MAAM,KAAK,CAAC;AACtD;AAOO,SAAS,WAAW,QAAgB,aAA6B;AACtE,MAAI,mBAAmB,MAAM,EAAG,QAAO;AACvC,SAAO,OAAO,QAAQ,kCAAkC,CAAC,QAAQ,MAAc,SAAiB;AAE9F,UAAM,KAAK,SAAS,QAAQ,SAAS,OAAO,OAAO;AACnD,WAAO,GAAG,IAAI;AAAA,WAAc,WAAW,KAAK,OAAO,OAAO,KAAK,EAAE;AAAA,EACnE,CAAC;AACH;AAOA,SAAS,gBAAgB,SAA6C;AACpE,MAAI,CAAC,WAAW,OAAO,EAAG,QAAO;AACjC,MAAI;AACF,UAAM,MAAM,KAAK,MAAM,aAAa,SAAS,OAAO,CAAC;AACrD,QAAI,OAAO,IAAI,SAAS,YAAY,IAAI,KAAK,WAAW,EAAG,QAAO;AAClE,UAAM,YAAY,QAAQ,IAAI,IAAI;AAClC,WAAO,UAAU,SAAS,IAAI,EAAE,aAAa,WAAW,QAAQ,eAAe,IAAI;AAAA,EACrF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,sBAAsB,KAAyC;AACtE,QAAM,YAAY,QAAQ,SAAS,QAAQ,GAAG,CAAC,CAAC;AAChD,SAAO,UAAU,SAAS,IAAI,EAAE,aAAa,WAAW,QAAQ,YAAY,IAAI;AAClF;AAEA,SAAS,mBACP,MACA,KACA,SACqB;AACrB,MAAI,KAAK,SAAS,UAAa,KAAK,KAAK,SAAS,GAAG;AACnD,WAAO,EAAE,aAAa,KAAK,MAAM,QAAQ,OAAO;AAAA,EAClD;AACA,SACE,gBAAgB,OAAO,KACvB,sBAAsB,GAAG,KAAK;AAAA,IAC5B,aAAa;AAAA,IACb,QAAQ;AAAA,EACV;AAEJ;AAEO,SAAS,0BACd,MACyB;AACzB,QAAM,MAAM,KAAK,OAAO,QAAQ,IAAI;AACpC,QAAM,aAAa,KAAK,cAAc,KAAK,KAAK,gBAAgB;AAChE,QAAM,UAAU,KAAK,WAAW,KAAK,KAAK,cAAc;AAExD,QAAM,eAAe,WAAW,UAAU,IAAI,aAAa,YAAY,OAAO,IAAI;AAClF,QAAM,kBAAkB,aAAa,SAAS,IAAI,mBAAmB,YAAY,IAAI;AAErF,QAAM,aAAa,mBAAmB,MAAM,KAAK,OAAO;AACxD,QAAM,UACJ,WAAW,WAAW,aAClB,gOAGA;AAEN,MAAI,CAAC,UAAU,WAAW,WAAW,GAAG;AACtC,UAAM,IAAI;AAAA,MACR,iDAAiD,WAAW,WAAW;AAAA,IAEzE;AAAA,EACF;AAEA,SAAO;AAAA,IACL,aAAa,WAAW;AAAA,IACxB,QAAQ,WAAW;AAAA,IACnB;AAAA,IACA;AAAA,EACF;AACF;AAIO,SAAS,2BAA2B,MAAiD;AAC1F,QAAM,MAAM,KAAK,OAAO,QAAQ,IAAI;AACpC,QAAM,aAAa,KAAK,cAAc,KAAK,KAAK,gBAAgB;AAChE,QAAM,MAAM,CAAC,MAAoB;AAC/B,QAAI,KAAK,WAAW,KAAM;AAC1B,YAAQ,OAAO,MAAM,GAAG,CAAC;AAAA,CAAI;AAAA,EAC/B;AAEA,MAAI,CAAC,WAAW,UAAU,GAAG;AAC3B,WAAO,QAAQ;AAAA,MACb,IAAI,MAAM,0BAA0B,UAAU,8CAA8C;AAAA,IAC9F;AAAA,EACF;AAEA,QAAM,OAAO,0BAA0B,IAAI;AAC3C,MAAI,oCAA+B,KAAK,WAAW,cAAc,KAAK,MAAM,GAAG;AAC/E,MAAI,KAAK,QAAQ,SAAS,EAAG,KAAI,YAAO,KAAK,OAAO,EAAE;AAEtD,MAAI,KAAK,iBAAiB;AACxB,QAAI,oFAA0E;AAC9E,WAAO,QAAQ,QAAQ;AAAA,EACzB;AAEA,MAAI,KAAK,WAAW,MAAM;AACxB,QAAI,uEAAkE;AACtE,WAAO,QAAQ,QAAQ;AAAA,EACzB;AAEA,QAAM,SAAS,aAAa,YAAY,OAAO;AAC/C,QAAM,QAAQ,WAAW,QAAQ,KAAK,WAAW;AACjD,MAAI,UAAU,QAAQ;AACpB,QAAI,0FAAqF;AACzF,WAAO,QAAQ,QAAQ;AAAA,EACzB;AACA,gBAAc,YAAY,OAAO,OAAO;AACxC,MAAI,2BAAsB,KAAK,WAAW,uBAAuB;AACjE,MAAI,qFAAgF;AACpF,SAAO,QAAQ,QAAQ;AACzB;","names":[]}

package/dist/{services-typed-client-IETY2SAK.js → services-typed-client-AU6DKXAO.js}

@@ -1,6 +1,6 @@
 import {
   generateTypedClient
-} from "./chunk-D7ZH7DTG.js";
+} from "./chunk-4B2ZMX45.js";
 import "./chunk-DGUM43GV.js";
 
 // src/vite-plugin/services-typed-client.ts
@@ -43,4 +43,4 @@ function servicesTypedClientPlugin(opts) {
 export {
   servicesTypedClientPlugin
 };
-//# sourceMappingURL=services-typed-client-IETY2SAK.js.map
+//# sourceMappingURL=services-typed-client-AU6DKXAO.js.map

package/dist/services-typed-client-AU6DKXAO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/vite-plugin/services-typed-client.ts"],"sourcesContent":["/**\n * Vite plugin (T3.1) — generates a typed TS client from each service's\n * OpenAPI URL using `@hey-api/openapi-ts` (soft dep — graceful skip when\n * not installed; warns on failure).\n *\n * Dev-only (`apply: 'serve'`). Fire-and-forget — never blocks dev startup.\n *\n * D3: best-effort, warn-only. Generator failure must NEVER crash dev.\n */\nimport { resolve } from 'node:path'\n\nimport type { Plugin } from 'vite'\n\nimport { generateTypedClient, type ServicesConfig } from '../services/index.js'\n\ninterface ServicesTypedClientPluginOptions {\n  cwd: string\n  services: ServicesConfig\n}\n\nexport function servicesTypedClientPlugin(opts: ServicesTypedClientPluginOptions): Plugin {\n  return {\n    name: 'theokit:services-typed-client',\n    apply: 'serve', // dev-only; never runs in build\n    configureServer() {\n      // EC-5: ordering — services-typed-client fires AFTER orchestrateDev's\n      // healthcheck-gated readiness (orchestrateDev is awaited synchronously\n      // in cli/commands/dev.ts BEFORE createServer, so by the time Vite's\n      // configureServer hook fires, services are healthy).\n      const outputDir = resolve(opts.cwd, 'clients')\n      for (const [name, def] of Object.entries(opts.services)) {\n        if (!def.openapi) continue\n        const openapi = def.openapi\n        void generateTypedClient({\n          service: {\n            name,\n            runtime: def.runtime,\n            port: def.port,\n            proxy: def.proxy,\n            dev: def.dev,\n            start: def.start,\n            healthcheck: def.healthcheck,\n            cors: def.cors,\n            passSetCookie: def.passSetCookie,\n            openapi,\n            ...(def.build !== undefined ? { build: def.build } : {}),\n            ...(def.env !== undefined ? { env: def.env } : {}),\n            ...(def.dependsOn !== undefined ? { dependsOn: def.dependsOn } : {}),\n          },\n          outputDir,\n          log: (_level, msg) => {\n            // Use console.warn unconditionally — eslint disallows console.log\n            // in source code; warn is appropriate for \"best-effort with skip\"\n            // semantics of this plugin.\n            console.warn(`[services-typed-client] ${msg}`)\n          },\n        })\n      }\n    },\n  }\n}\n"],"mappings":";;;;;;AASA,SAAS,eAAe;AAWjB,SAAS,0BAA0B,MAAgD;AACxF,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA;AAAA,IACP,kBAAkB;AAKhB,YAAM,YAAY,QAAQ,KAAK,KAAK,SAAS;AAC7C,iBAAW,CAAC,MAAM,GAAG,KAAK,OAAO,QAAQ,KAAK,QAAQ,GAAG;AACvD,YAAI,CAAC,IAAI,QAAS;AAClB,cAAM,UAAU,IAAI;AACpB,aAAK,oBAAoB;AAAA,UACvB,SAAS;AAAA,YACP;AAAA,YACA,SAAS,IAAI;AAAA,YACb,MAAM,IAAI;AAAA,YACV,OAAO,IAAI;AAAA,YACX,KAAK,IAAI;AAAA,YACT,OAAO,IAAI;AAAA,YACX,aAAa,IAAI;AAAA,YACjB,MAAM,IAAI;AAAA,YACV,eAAe,IAAI;AAAA,YACnB;AAAA,YACA,GAAI,IAAI,UAAU,SAAY,EAAE,OAAO,IAAI,MAAM,IAAI,CAAC;AAAA,YACtD,GAAI,IAAI,QAAQ,SAAY,EAAE,KAAK,IAAI,IAAI,IAAI,CAAC;AAAA,YAChD,GAAI,IAAI,cAAc,SAAY,EAAE,WAAW,IAAI,UAAU,IAAI,CAAC;AAAA,UACpE;AAAA,UACA;AAAA,UACA,KAAK,CAAC,QAAQ,QAAQ;AAIpB,oBAAQ,KAAK,2BAA2B,GAAG,EAAE;AAAA,UAC/C;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/{services-typed-client-32KMTTXR.js → services-typed-client-EO4RFNTZ.js}

@@ -2,7 +2,7 @@
 import "tsx/esm";
 import {
   generateTypedClient
-} from "./chunk-45C3WUQ7.js";
+} from "./chunk-QPVXGC7O.js";
 
 // src/vite-plugin/services-typed-client.ts
 import { resolve } from "path";
@@ -44,4 +44,4 @@ function servicesTypedClientPlugin(opts) {
 export {
   servicesTypedClientPlugin
 };
-//# sourceMappingURL=services-typed-client-32KMTTXR.js.map
+//# sourceMappingURL=services-typed-client-EO4RFNTZ.js.map

package/dist/services-typed-client-EO4RFNTZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/vite-plugin/services-typed-client.ts"],"sourcesContent":["/**\n * Vite plugin (T3.1) — generates a typed TS client from each service's\n * OpenAPI URL using `@hey-api/openapi-ts` (soft dep — graceful skip when\n * not installed; warns on failure).\n *\n * Dev-only (`apply: 'serve'`). Fire-and-forget — never blocks dev startup.\n *\n * D3: best-effort, warn-only. Generator failure must NEVER crash dev.\n */\nimport { resolve } from 'node:path'\n\nimport type { Plugin } from 'vite'\n\nimport { generateTypedClient, type ServicesConfig } from '../services/index.js'\n\ninterface ServicesTypedClientPluginOptions {\n  cwd: string\n  services: ServicesConfig\n}\n\nexport function servicesTypedClientPlugin(opts: ServicesTypedClientPluginOptions): Plugin {\n  return {\n    name: 'theokit:services-typed-client',\n    apply: 'serve', // dev-only; never runs in build\n    configureServer() {\n      // EC-5: ordering — services-typed-client fires AFTER orchestrateDev's\n      // healthcheck-gated readiness (orchestrateDev is awaited synchronously\n      // in cli/commands/dev.ts BEFORE createServer, so by the time Vite's\n      // configureServer hook fires, services are healthy).\n      const outputDir = resolve(opts.cwd, 'clients')\n      for (const [name, def] of Object.entries(opts.services)) {\n        if (!def.openapi) continue\n        const openapi = def.openapi\n        void generateTypedClient({\n          service: {\n            name,\n            runtime: def.runtime,\n            port: def.port,\n            proxy: def.proxy,\n            dev: def.dev,\n            start: def.start,\n            healthcheck: def.healthcheck,\n            cors: def.cors,\n            passSetCookie: def.passSetCookie,\n            openapi,\n            ...(def.build !== undefined ? { build: def.build } : {}),\n            ...(def.env !== undefined ? { env: def.env } : {}),\n            ...(def.dependsOn !== undefined ? { dependsOn: def.dependsOn } : {}),\n          },\n          outputDir,\n          log: (_level, msg) => {\n            // Use console.warn unconditionally — eslint disallows console.log\n            // in source code; warn is appropriate for \"best-effort with skip\"\n            // semantics of this plugin.\n            console.warn(`[services-typed-client] ${msg}`)\n          },\n        })\n      }\n    },\n  }\n}\n"],"mappings":";;;;;;;AASA,SAAS,eAAe;AAWjB,SAAS,0BAA0B,MAAgD;AACxF,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA;AAAA,IACP,kBAAkB;AAKhB,YAAM,YAAY,QAAQ,KAAK,KAAK,SAAS;AAC7C,iBAAW,CAAC,MAAM,GAAG,KAAK,OAAO,QAAQ,KAAK,QAAQ,GAAG;AACvD,YAAI,CAAC,IAAI,QAAS;AAClB,cAAM,UAAU,IAAI;AACpB,aAAK,oBAAoB;AAAA,UACvB,SAAS;AAAA,YACP;AAAA,YACA,SAAS,IAAI;AAAA,YACb,MAAM,IAAI;AAAA,YACV,OAAO,IAAI;AAAA,YACX,KAAK,IAAI;AAAA,YACT,OAAO,IAAI;AAAA,YACX,aAAa,IAAI;AAAA,YACjB,MAAM,IAAI;AAAA,YACV,eAAe,IAAI;AAAA,YACnB;AAAA,YACA,GAAI,IAAI,UAAU,SAAY,EAAE,OAAO,IAAI,MAAM,IAAI,CAAC;AAAA,YACtD,GAAI,IAAI,QAAQ,SAAY,EAAE,KAAK,IAAI,IAAI,IAAI,CAAC;AAAA,YAChD,GAAI,IAAI,cAAc,SAAY,EAAE,WAAW,IAAI,UAAU,IAAI,CAAC;AAAA,UACpE;AAAA,UACA;AAAA,UACA,KAAK,CAAC,QAAQ,QAAQ;AAIpB,oBAAQ,KAAK,2BAA2B,GAAG,EAAE;AAAA,UAC/C;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/{start-YLR2SFHU.js → start-2U3FUCJX.js}

@@ -9,16 +9,16 @@ import {
   resolveTransformer,
   serveAgentAuxRoute,
   writeWebResponseToServerResponse
-} from "./chunk-UO7WS32S.js";
+} from "./chunk-OI6DK6ZJ.js";
 import "./chunk-2CVV6CNN.js";
 import {
   loadConfig
-} from "./chunk-AFVTEAES.js";
+} from "./chunk-CJNMJUHE.js";
 import {
   loadEnv
 } from "./chunk-GDN3PXFH.js";
-import "./chunk-GSO77FSM.js";
-import "./chunk-45C3WUQ7.js";
+import "./chunk-6OXCZMW3.js";
+import "./chunk-QPVXGC7O.js";
 import {
   buildSecurityHeaders,
   createPluginRunnerFromConfig,
@@ -33,24 +33,24 @@ import {
   mountAgent,
   sendError,
   warnOnce
-} from "./chunk-UNLG36Z5.js";
+} from "./chunk-IE6C4KZX.js";
 import {
   getApprovalRegistry,
   resolveProvider
-} from "./chunk-M6NMS5LR.js";
+} from "./chunk-TDNNBLGW.js";
 import {
   loadManifest
-} from "./chunk-NQRNDPZJ.js";
+} from "./chunk-OXCALO3W.js";
 import {
   scanAgents
-} from "./chunk-L4GCEMNW.js";
+} from "./chunk-LNVMHQ2Z.js";
 import {
   matchRoute,
   scanServerActions,
   scanServerRoutes,
   scanWebSocketRoutes
-} from "./chunk-FRUEDJFX.js";
-import "./chunk-P37RZRFV.js";
+} from "./chunk-226KMIGZ.js";
+import "./chunk-A7JBF5FO.js";
 import "./chunk-HGZL5EOI.js";
 
 // src/cli/commands/start/index.ts
@@ -190,7 +190,7 @@ async function configureStorageManagerFromConfig(storageConfig) {
   if (storageConfig === void 0 || storageConfig === null) return;
   try {
     const { getStorageManager } = await import("./storage-manager-ZSQFLEYT.js");
-    const { storageSchema } = await import("./schema-LYOLNHZ7.js");
+    const { storageSchema } = await import("./schema-FBOTN46F.js");
     const parsed = storageSchema.parse(storageConfig);
     getStorageManager().configure(parsed);
   } catch (err) {
@@ -904,4 +904,4 @@ export {
   resolveSsrEntry,
   startCommand
 };
-//# sourceMappingURL=start-YLR2SFHU.js.map
+//# sourceMappingURL=start-2U3FUCJX.js.map