theokit 0.43.7 → 0.43.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (230) hide show
  1. package/dist/{actions-virtual-module-N7GKUS3D.js → actions-virtual-module-HG66SZ7T.js} +8 -8
  2. package/dist/actions-virtual-module-HG66SZ7T.js.map +1 -0
  3. package/dist/{actions-virtual-module-LD3YKWIX.js → actions-virtual-module-RSFRPJQZ.js} +7 -7
  4. package/dist/actions-virtual-module-RSFRPJQZ.js.map +1 -0
  5. package/dist/{add-W6FNTAFS.js → add-3VLFUPF4.js} +1 -1
  6. package/dist/add-3VLFUPF4.js.map +1 -0
  7. package/dist/{agent-U35G3WNE.js → agent-OXRRKB55.js} +5 -5
  8. package/dist/{agents-typed-client-NJ73Z6XY.js → agents-typed-client-X56CQ6FX.js} +1 -1
  9. package/dist/agents-typed-client-X56CQ6FX.js.map +1 -0
  10. package/dist/{agents-typed-client-CHMVW7MK.js → agents-typed-client-ZP7BKJB3.js} +1 -1
  11. package/dist/agents-typed-client-ZP7BKJB3.js.map +1 -0
  12. package/dist/{app-typed-client-6YZRDAPY.js → app-typed-client-GDF2OMJ2.js} +8 -8
  13. package/dist/app-typed-client-GDF2OMJ2.js.map +1 -0
  14. package/dist/{app-typed-client-V77SVU2O.js → app-typed-client-USLAMN7X.js} +7 -7
  15. package/dist/app-typed-client-USLAMN7X.js.map +1 -0
  16. package/dist/{aws-lambda-7GSCNLPY.js → aws-lambda-473QCOL6.js} +3 -3
  17. package/dist/{body-parser-web-MUWBKZ3F.js → body-parser-web-NNEJGX6Y.js} +1 -1
  18. package/dist/body-parser-web-NNEJGX6Y.js.map +1 -0
  19. package/dist/{body-parser-web-FV5HWCY3.js → body-parser-web-TIOTXPDW.js} +1 -1
  20. package/dist/body-parser-web-TIOTXPDW.js.map +1 -0
  21. package/dist/{build-BYLQZJT2.js → build-MQHIJROR.js} +11 -11
  22. package/dist/{build-BYLQZJT2.js.map → build-MQHIJROR.js.map} +1 -1
  23. package/dist/{build-request-body-preview-EOP2Y4F3.js → build-request-body-preview-FVBQ7LCE.js} +1 -1
  24. package/dist/build-request-body-preview-FVBQ7LCE.js.map +1 -0
  25. package/dist/{build-request-body-preview-QMWD2IXK.js → build-request-body-preview-XPZ2GYMG.js} +1 -1
  26. package/dist/build-request-body-preview-XPZ2GYMG.js.map +1 -0
  27. package/dist/{bun-KP2KES6S.js → bun-OQUCL3XW.js} +3 -3
  28. package/dist/{check-PD2FTKMM.js → check-45NKUVSQ.js} +1 -1
  29. package/dist/check-45NKUVSQ.js.map +1 -0
  30. package/dist/{chunk-FRUEDJFX.js → chunk-226KMIGZ.js} +3 -3
  31. package/dist/{chunk-FRUEDJFX.js.map → chunk-226KMIGZ.js.map} +1 -1
  32. package/dist/{chunk-U3NTEK46.js → chunk-26ECIX74.js} +2 -2
  33. package/dist/{chunk-FEDSPOY6.js → chunk-2WH6SD3C.js} +6 -6
  34. package/dist/chunk-2WH6SD3C.js.map +1 -0
  35. package/dist/{chunk-JAIKGP3Q.js → chunk-47VNWTL4.js} +1 -1
  36. package/dist/chunk-47VNWTL4.js.map +1 -0
  37. package/dist/{chunk-D7ZH7DTG.js → chunk-4B2ZMX45.js} +1 -1
  38. package/dist/chunk-4B2ZMX45.js.map +1 -0
  39. package/dist/{chunk-IHJZPQEF.js → chunk-4HAU7AJM.js} +3 -3
  40. package/dist/chunk-4HAU7AJM.js.map +1 -0
  41. package/dist/{chunk-IPC5UREF.js → chunk-575PAX5L.js} +17 -17
  42. package/dist/chunk-575PAX5L.js.map +1 -0
  43. package/dist/{chunk-X2VVCJ4V.js → chunk-65EFIUDD.js} +1 -1
  44. package/dist/chunk-65EFIUDD.js.map +1 -0
  45. package/dist/{chunk-GY5Q27BJ.js → chunk-6FK7FKY6.js} +1 -1
  46. package/dist/{chunk-GY5Q27BJ.js.map → chunk-6FK7FKY6.js.map} +1 -1
  47. package/dist/{chunk-GSO77FSM.js → chunk-6OXCZMW3.js} +45 -47
  48. package/dist/chunk-6OXCZMW3.js.map +1 -0
  49. package/dist/{chunk-P37RZRFV.js → chunk-A7JBF5FO.js} +1 -1
  50. package/dist/chunk-A7JBF5FO.js.map +1 -0
  51. package/dist/{chunk-AFVTEAES.js → chunk-CJNMJUHE.js} +2 -2
  52. package/dist/{chunk-AXVFVMLM.js → chunk-DJFMAWH5.js} +8 -4
  53. package/dist/chunk-DJFMAWH5.js.map +1 -0
  54. package/dist/{chunk-2ZX4J4SX.js → chunk-DQVBL2G4.js} +58 -56
  55. package/dist/chunk-DQVBL2G4.js.map +1 -0
  56. package/dist/{chunk-GW5H4KB4.js → chunk-FX72VHAE.js} +3 -3
  57. package/dist/{chunk-5AVPWHUE.js → chunk-HGUZWG2C.js} +7 -4
  58. package/dist/chunk-HGUZWG2C.js.map +1 -0
  59. package/dist/{chunk-UNLG36Z5.js → chunk-IE6C4KZX.js} +10 -5
  60. package/dist/chunk-IE6C4KZX.js.map +1 -0
  61. package/dist/{chunk-QWBXUZAX.js → chunk-JIL74SFK.js} +4 -4
  62. package/dist/chunk-JIL74SFK.js.map +1 -0
  63. package/dist/{chunk-KI7OWQUX.js → chunk-L2S2R3TI.js} +63 -20
  64. package/dist/chunk-L2S2R3TI.js.map +1 -0
  65. package/dist/{chunk-L4GCEMNW.js → chunk-LNVMHQ2Z.js} +2 -2
  66. package/dist/{chunk-SPJNVWOK.js → chunk-N2D5AVRR.js} +2 -3
  67. package/dist/chunk-N2D5AVRR.js.map +1 -0
  68. package/dist/{chunk-UO7WS32S.js → chunk-OI6DK6ZJ.js} +3 -3
  69. package/dist/chunk-OI6DK6ZJ.js.map +1 -0
  70. package/dist/{chunk-RMU7EBRO.js → chunk-OP7QCTR5.js} +2 -2
  71. package/dist/{chunk-RMU7EBRO.js.map → chunk-OP7QCTR5.js.map} +1 -1
  72. package/dist/{chunk-GUUWDMR2.js → chunk-OVHW23YC.js} +2 -2
  73. package/dist/{chunk-NQRNDPZJ.js → chunk-OXCALO3W.js} +3 -3
  74. package/dist/{chunk-45C3WUQ7.js → chunk-QPVXGC7O.js} +1 -1
  75. package/dist/chunk-QPVXGC7O.js.map +1 -0
  76. package/dist/{chunk-FOZIR3TG.js → chunk-SMP2T335.js} +2 -2
  77. package/dist/{chunk-M6NMS5LR.js → chunk-TDNNBLGW.js} +1 -1
  78. package/dist/chunk-TDNNBLGW.js.map +1 -0
  79. package/dist/{chunk-WFNLNIJX.js → chunk-VPISAMXU.js} +2 -2
  80. package/dist/{chunk-5PU65T5W.js → chunk-XZ6B2Y2R.js} +1 -1
  81. package/dist/chunk-XZ6B2Y2R.js.map +1 -0
  82. package/dist/cli/index.js +15 -15
  83. package/dist/client/index.d.ts +1 -1
  84. package/dist/client/index.js +20 -25
  85. package/dist/client/index.js.map +1 -1
  86. package/dist/{cloudflare-C6E5SPAE.js → cloudflare-4YT5CK3P.js} +3 -3
  87. package/dist/{controller-swc-transform-URELVCBM.js → controller-swc-transform-JJRMTSDY.js} +1 -1
  88. package/dist/controller-swc-transform-JJRMTSDY.js.map +1 -0
  89. package/dist/{controller-swc-transform-XV3ETSE3.js → controller-swc-transform-LUJ4VAZJ.js} +1 -1
  90. package/dist/controller-swc-transform-LUJ4VAZJ.js.map +1 -0
  91. package/dist/{db-3UNAMSFK.js → db-IVVCQE5Z.js} +1 -2
  92. package/dist/db-IVVCQE5Z.js.map +1 -0
  93. package/dist/{deno-deploy-RFZN56X4.js → deno-deploy-YYN6BNLF.js} +3 -3
  94. package/dist/{dev-PS2NGT6I.js → dev-WQ4LWCAW.js} +13 -13
  95. package/dist/{dev-emit-2DL3MCLM.js → dev-emit-HLGJK3PP.js} +3 -3
  96. package/dist/dev-emit-HLGJK3PP.js.map +1 -0
  97. package/dist/{dev-emit-XVTJXZGA.js → dev-emit-J7V6GWSK.js} +6 -6
  98. package/dist/devtools/entry.js +43 -15
  99. package/dist/devtools/entry.js.map +1 -1
  100. package/dist/{dispatcher-63LBXYLE.js → dispatcher-DLKIXYNO.js} +2 -2
  101. package/dist/{dispatcher-EJHL6JMJ.js → dispatcher-KMZBGMM5.js} +1 -1
  102. package/dist/dispatcher-KMZBGMM5.js.map +1 -0
  103. package/dist/{generate-5X4LG77M.js → generate-GXWPUVS7.js} +4 -5
  104. package/dist/generate-GXWPUVS7.js.map +1 -0
  105. package/dist/index.js +9 -9
  106. package/dist/{info-2OOXFTJX.js → info-75U6GCMD.js} +4 -4
  107. package/dist/info-75U6GCMD.js.map +1 -0
  108. package/dist/{internal-api-LFW7R65K.js → internal-api-DV3H5NNV.js} +7 -9
  109. package/dist/{internal-api-FBFV265J.js → internal-api-JFORKYLR.js} +8 -10
  110. package/dist/{load-config-3EAQTXPH.js → load-config-XP7NSSA7.js} +4 -4
  111. package/dist/{mcp-ML4QK5ON.js → mcp-FF3NTCHB.js} +6 -6
  112. package/dist/mcp-FF3NTCHB.js.map +1 -0
  113. package/dist/{netlify-PMLHVPN4.js → netlify-2WZUQYI3.js} +3 -3
  114. package/dist/node-CMAYKDCM.js +10 -0
  115. package/dist/{openapi-2HVGJMSN.js → openapi-ZPXYRAM2.js} +9 -9
  116. package/dist/openapi-ZPXYRAM2.js.map +1 -0
  117. package/dist/registry-72YH7ZJM.js +23 -0
  118. package/dist/registry-72YH7ZJM.js.map +1 -0
  119. package/dist/{router-TLEAOFID.js → router-6MAACS25.js} +1 -2
  120. package/dist/router-6MAACS25.js.map +1 -0
  121. package/dist/{routes-XNS3UM3B.js → routes-ZVDKABXZ.js} +6 -6
  122. package/dist/schema-FBOTN46F.js +22 -0
  123. package/dist/server/agent/index.js +1 -1
  124. package/dist/server/cost/index.js +1 -1
  125. package/dist/server/cron/index.js +2 -2
  126. package/dist/server/http/index.js +3 -3
  127. package/dist/server/index.js +11 -11
  128. package/dist/server/jobs/index.js +3 -3
  129. package/dist/server/observability/index.d.ts +1 -38
  130. package/dist/server/observability/index.js +2 -2
  131. package/dist/server/scan/index.js +2 -2
  132. package/dist/{server-routes-hmr-VZXOP5YT.js → server-routes-hmr-4W5L2MKN.js} +1 -1
  133. package/dist/server-routes-hmr-4W5L2MKN.js.map +1 -0
  134. package/dist/{server-routes-hmr-PBHSKCQJ.js → server-routes-hmr-RI7SYNT2.js} +1 -1
  135. package/dist/server-routes-hmr-RI7SYNT2.js.map +1 -0
  136. package/dist/{services-json-Y3XODNB5.js → services-json-7ZXJ4CIS.js} +1 -1
  137. package/dist/services-json-7ZXJ4CIS.js.map +1 -0
  138. package/dist/{services-typed-client-IETY2SAK.js → services-typed-client-AU6DKXAO.js} +2 -2
  139. package/dist/services-typed-client-AU6DKXAO.js.map +1 -0
  140. package/dist/{services-typed-client-32KMTTXR.js → services-typed-client-EO4RFNTZ.js} +2 -2
  141. package/dist/services-typed-client-EO4RFNTZ.js.map +1 -0
  142. package/dist/{start-YLR2SFHU.js → start-2U3FUCJX.js} +12 -12
  143. package/dist/start-2U3FUCJX.js.map +1 -0
  144. package/dist/{static-MB2CD5Y3.js → static-25H5K42R.js} +3 -3
  145. package/dist/{static-MB2CD5Y3.js.map → static-25H5K42R.js.map} +1 -1
  146. package/dist/{theo-cloud-DQRP6S6M.js → theo-cloud-JL2KXHIS.js} +2 -2
  147. package/dist/{upgrade-readiness-ACGW44JC.js → upgrade-readiness-77P6VNB4.js} +1 -1
  148. package/dist/upgrade-readiness-77P6VNB4.js.map +1 -0
  149. package/dist/{vercel-J6G7ZHYQ.js → vercel-FP3C6LN6.js} +3 -3
  150. package/dist/vite-plugin/index.js +9 -9
  151. package/dist/{vite-plugin-6VVU6PPC.js → vite-plugin-D2NTPZNC.js} +13 -13
  152. package/package.json +4 -7
  153. package/dist/actions-virtual-module-LD3YKWIX.js.map +0 -1
  154. package/dist/actions-virtual-module-N7GKUS3D.js.map +0 -1
  155. package/dist/add-W6FNTAFS.js.map +0 -1
  156. package/dist/agents-typed-client-CHMVW7MK.js.map +0 -1
  157. package/dist/agents-typed-client-NJ73Z6XY.js.map +0 -1
  158. package/dist/app-typed-client-6YZRDAPY.js.map +0 -1
  159. package/dist/app-typed-client-V77SVU2O.js.map +0 -1
  160. package/dist/body-parser-web-FV5HWCY3.js.map +0 -1
  161. package/dist/body-parser-web-MUWBKZ3F.js.map +0 -1
  162. package/dist/build-request-body-preview-EOP2Y4F3.js.map +0 -1
  163. package/dist/build-request-body-preview-QMWD2IXK.js.map +0 -1
  164. package/dist/check-PD2FTKMM.js.map +0 -1
  165. package/dist/chunk-2ZX4J4SX.js.map +0 -1
  166. package/dist/chunk-45C3WUQ7.js.map +0 -1
  167. package/dist/chunk-5AVPWHUE.js.map +0 -1
  168. package/dist/chunk-5PU65T5W.js.map +0 -1
  169. package/dist/chunk-AXVFVMLM.js.map +0 -1
  170. package/dist/chunk-D7ZH7DTG.js.map +0 -1
  171. package/dist/chunk-FEDSPOY6.js.map +0 -1
  172. package/dist/chunk-GSO77FSM.js.map +0 -1
  173. package/dist/chunk-IHJZPQEF.js.map +0 -1
  174. package/dist/chunk-IPC5UREF.js.map +0 -1
  175. package/dist/chunk-JAIKGP3Q.js.map +0 -1
  176. package/dist/chunk-KI7OWQUX.js.map +0 -1
  177. package/dist/chunk-M6NMS5LR.js.map +0 -1
  178. package/dist/chunk-P37RZRFV.js.map +0 -1
  179. package/dist/chunk-QWBXUZAX.js.map +0 -1
  180. package/dist/chunk-SPJNVWOK.js.map +0 -1
  181. package/dist/chunk-UNLG36Z5.js.map +0 -1
  182. package/dist/chunk-UO7WS32S.js.map +0 -1
  183. package/dist/chunk-X2VVCJ4V.js.map +0 -1
  184. package/dist/controller-swc-transform-URELVCBM.js.map +0 -1
  185. package/dist/controller-swc-transform-XV3ETSE3.js.map +0 -1
  186. package/dist/db-3UNAMSFK.js.map +0 -1
  187. package/dist/dev-emit-2DL3MCLM.js.map +0 -1
  188. package/dist/dispatcher-EJHL6JMJ.js.map +0 -1
  189. package/dist/generate-5X4LG77M.js.map +0 -1
  190. package/dist/info-2OOXFTJX.js.map +0 -1
  191. package/dist/mcp-ML4QK5ON.js.map +0 -1
  192. package/dist/node-BPJ3Z4DT.js +0 -10
  193. package/dist/openapi-2HVGJMSN.js.map +0 -1
  194. package/dist/registry-FKPH7XEL.js +0 -24
  195. package/dist/registry-FKPH7XEL.js.map +0 -1
  196. package/dist/router-TLEAOFID.js.map +0 -1
  197. package/dist/schema-LYOLNHZ7.js +0 -30
  198. package/dist/server-routes-hmr-PBHSKCQJ.js.map +0 -1
  199. package/dist/server-routes-hmr-VZXOP5YT.js.map +0 -1
  200. package/dist/services-json-Y3XODNB5.js.map +0 -1
  201. package/dist/services-typed-client-32KMTTXR.js.map +0 -1
  202. package/dist/services-typed-client-IETY2SAK.js.map +0 -1
  203. package/dist/start-YLR2SFHU.js.map +0 -1
  204. package/dist/upgrade-readiness-ACGW44JC.js.map +0 -1
  205. /package/dist/{agent-U35G3WNE.js.map → agent-OXRRKB55.js.map} +0 -0
  206. /package/dist/{aws-lambda-7GSCNLPY.js.map → aws-lambda-473QCOL6.js.map} +0 -0
  207. /package/dist/{bun-KP2KES6S.js.map → bun-OQUCL3XW.js.map} +0 -0
  208. /package/dist/{chunk-U3NTEK46.js.map → chunk-26ECIX74.js.map} +0 -0
  209. /package/dist/{chunk-AFVTEAES.js.map → chunk-CJNMJUHE.js.map} +0 -0
  210. /package/dist/{chunk-GW5H4KB4.js.map → chunk-FX72VHAE.js.map} +0 -0
  211. /package/dist/{chunk-L4GCEMNW.js.map → chunk-LNVMHQ2Z.js.map} +0 -0
  212. /package/dist/{chunk-GUUWDMR2.js.map → chunk-OVHW23YC.js.map} +0 -0
  213. /package/dist/{chunk-NQRNDPZJ.js.map → chunk-OXCALO3W.js.map} +0 -0
  214. /package/dist/{chunk-FOZIR3TG.js.map → chunk-SMP2T335.js.map} +0 -0
  215. /package/dist/{chunk-WFNLNIJX.js.map → chunk-VPISAMXU.js.map} +0 -0
  216. /package/dist/{cloudflare-C6E5SPAE.js.map → cloudflare-4YT5CK3P.js.map} +0 -0
  217. /package/dist/{deno-deploy-RFZN56X4.js.map → deno-deploy-YYN6BNLF.js.map} +0 -0
  218. /package/dist/{dev-PS2NGT6I.js.map → dev-WQ4LWCAW.js.map} +0 -0
  219. /package/dist/{dev-emit-XVTJXZGA.js.map → dev-emit-J7V6GWSK.js.map} +0 -0
  220. /package/dist/{dispatcher-63LBXYLE.js.map → dispatcher-DLKIXYNO.js.map} +0 -0
  221. /package/dist/{internal-api-FBFV265J.js.map → internal-api-DV3H5NNV.js.map} +0 -0
  222. /package/dist/{internal-api-LFW7R65K.js.map → internal-api-JFORKYLR.js.map} +0 -0
  223. /package/dist/{load-config-3EAQTXPH.js.map → load-config-XP7NSSA7.js.map} +0 -0
  224. /package/dist/{netlify-PMLHVPN4.js.map → netlify-2WZUQYI3.js.map} +0 -0
  225. /package/dist/{node-BPJ3Z4DT.js.map → node-CMAYKDCM.js.map} +0 -0
  226. /package/dist/{routes-XNS3UM3B.js.map → routes-ZVDKABXZ.js.map} +0 -0
  227. /package/dist/{schema-LYOLNHZ7.js.map → schema-FBOTN46F.js.map} +0 -0
  228. /package/dist/{theo-cloud-DQRP6S6M.js.map → theo-cloud-JL2KXHIS.js.map} +0 -0
  229. /package/dist/{vercel-J6G7ZHYQ.js.map → vercel-FP3C6LN6.js.map} +0 -0
  230. /package/dist/{vite-plugin-6VVU6PPC.js.map → vite-plugin-D2NTPZNC.js.map} +0 -0
@@ -1,7 +1,7 @@
1
1
  import {
2
2
  buildServicesProxyConfig,
3
3
  servicesConfigSchema
4
- } from "./chunk-D7ZH7DTG.js";
4
+ } from "./chunk-4B2ZMX45.js";
5
5
  import {
6
6
  broadcastToDevtools
7
7
  } from "./chunk-7BIM27LV.js";
@@ -19,11 +19,11 @@ import {
19
19
  mountAgent,
20
20
  parseAgentRequestBody,
21
21
  resolveProvider
22
- } from "./chunk-AXVFVMLM.js";
22
+ } from "./chunk-DJFMAWH5.js";
23
23
  import {
24
24
  loadEnv,
25
25
  resolveTransformer
26
- } from "./chunk-GW5H4KB4.js";
26
+ } from "./chunk-FX72VHAE.js";
27
27
  import {
28
28
  BATCH_PATH,
29
29
  TRACE_HEADER,
@@ -35,13 +35,13 @@ import {
35
35
  incomingMessageToHandlerRequest,
36
36
  incomingMessageToWebRequest,
37
37
  sendError
38
- } from "./chunk-QWBXUZAX.js";
38
+ } from "./chunk-JIL74SFK.js";
39
39
  import {
40
40
  findSuggestion
41
41
  } from "./chunk-5QW7IQQU.js";
42
42
  import {
43
43
  logRequest
44
- } from "./chunk-WFNLNIJX.js";
44
+ } from "./chunk-VPISAMXU.js";
45
45
  import {
46
46
  createPluginRunnerFromConfig
47
47
  } from "./chunk-IAJ2JVEH.js";
@@ -57,7 +57,7 @@ import {
57
57
  scanServerActions,
58
58
  scanServerRoutes,
59
59
  scanWebSocketRoutes
60
- } from "./chunk-IHJZPQEF.js";
60
+ } from "./chunk-4HAU7AJM.js";
61
61
  import {
62
62
  CSP_REPORT_PATH,
63
63
  CsrfReadinessStore,
@@ -196,72 +196,74 @@ ${issueLines}
196
196
  // src/config/schema.ts
197
197
  import { z as z8 } from "zod";
198
198
 
199
- // src/config/schemas/header-safe.ts
200
- import { z } from "zod";
201
- var headerSafeString = z.string().refine((s) => !/[\r\n]/.test(s), { message: "Header value must not contain CR/LF" });
202
-
203
199
  // src/config/schemas/rate-limit.ts
204
- import { z as z2 } from "zod";
205
- var baseRateLimitSchema = z2.object({
206
- windowMs: z2.number().min(1),
207
- max: z2.number().int().min(1)
200
+ import { z } from "zod";
201
+ var baseRateLimitSchema = z.object({
202
+ windowMs: z.number().min(1),
203
+ max: z.number().int().min(1)
208
204
  });
209
- var rateLimitSchema = z2.union([
205
+ var rateLimitSchema = z.union([
210
206
  baseRateLimitSchema,
211
- z2.object({
207
+ z.object({
212
208
  default: baseRateLimitSchema.optional(),
213
- routes: z2.record(z2.string(), baseRateLimitSchema).optional(),
214
- keyBy: z2.union([
215
- z2.enum(["ip", "session", "user"]),
216
- z2.function({ input: z2.tuple([z2.unknown()]), output: z2.string() })
209
+ routes: z.record(z.string(), baseRateLimitSchema).optional(),
210
+ keyBy: z.union([
211
+ z.enum(["ip", "session", "user"]),
212
+ z.function({ input: z.tuple([z.unknown()]), output: z.string() })
217
213
  ]).optional(),
218
- cookieName: z2.string().min(1).optional()
214
+ cookieName: z.string().min(1).optional()
219
215
  })
220
216
  ]);
221
217
 
222
218
  // src/config/schemas/upload.ts
223
- import { z as z3 } from "zod";
224
- var uploadSchema = z3.object({
225
- maxFileSize: z3.number().min(1).default(10 * 1024 * 1024),
219
+ import { z as z2 } from "zod";
220
+ var uploadSchema = z2.object({
221
+ maxFileSize: z2.number().min(1).default(10 * 1024 * 1024),
226
222
  // 10MB
227
- maxFiles: z3.number().int().min(1).default(10),
228
- maxFieldSize: z3.number().min(1).default(1 * 1024 * 1024)
223
+ maxFiles: z2.number().int().min(1).default(10),
224
+ maxFieldSize: z2.number().min(1).default(1 * 1024 * 1024)
229
225
  // 1MB
230
226
  });
231
227
 
232
228
  // src/config/schemas/logging.ts
233
- import { z as z4 } from "zod";
234
- var loggingSchema = z4.object({
235
- level: z4.enum(["debug", "info", "warn", "error", "silent"]).default("info")
229
+ import { z as z3 } from "zod";
230
+ var loggingSchema = z3.object({
231
+ level: z3.enum(["debug", "info", "warn", "error", "silent"]).default("info")
236
232
  });
237
233
 
238
234
  // src/config/schemas/cache.ts
239
- import { z as z5 } from "zod";
240
- var routeRuleSchema = z5.object({
241
- maxAge: z5.number().nonnegative().finite().optional(),
242
- swr: z5.number().nonnegative().finite().optional(),
243
- tags: z5.array(z5.string()).optional()
235
+ import { z as z4 } from "zod";
236
+ var routeRuleSchema = z4.object({
237
+ maxAge: z4.number().nonnegative().finite().optional(),
238
+ swr: z4.number().nonnegative().finite().optional(),
239
+ tags: z4.array(z4.string()).optional()
244
240
  });
245
- var cacheSchema = z5.object({
246
- enabled: z5.boolean().default(true),
241
+ var cacheSchema = z4.object({
242
+ enabled: z4.boolean().default(true),
247
243
  /** 'memory' uses InMemoryCacheAdapter; otherwise pass a custom adapter instance. */
248
- storage: z5.union([z5.literal("memory"), z5.custom()]).default("memory"),
249
- maxEntries: z5.number().int().positive().default(1e3),
250
- defaults: z5.object({
251
- maxAge: z5.number().nonnegative().finite().default(1),
252
- swr: z5.number().nonnegative().finite().optional(),
253
- cacheErrors: z5.boolean().default(false)
244
+ storage: z4.union([z4.literal("memory"), z4.custom()]).default("memory"),
245
+ maxEntries: z4.number().int().positive().default(1e3),
246
+ defaults: z4.object({
247
+ maxAge: z4.number().nonnegative().finite().default(1),
248
+ swr: z4.number().nonnegative().finite().optional(),
249
+ cacheErrors: z4.boolean().default(false)
254
250
  }).default({ maxAge: 1, cacheErrors: false }),
255
- keyDerivation: z5.object({
256
- excludeQuery: z5.array(z5.string()).optional(),
257
- sortQuery: z5.boolean().default(true),
258
- lowercaseHost: z5.boolean().default(true)
251
+ keyDerivation: z4.object({
252
+ excludeQuery: z4.array(z4.string()).optional(),
253
+ sortQuery: z4.boolean().default(true),
254
+ lowercaseHost: z4.boolean().default(true)
259
255
  }).default({ sortQuery: true, lowercaseHost: true }),
260
- routeRules: z5.record(z5.string(), routeRuleSchema).optional()
256
+ routeRules: z4.record(z4.string(), routeRuleSchema).optional()
261
257
  });
262
258
 
263
259
  // src/config/schemas/security.ts
264
260
  import { z as z6 } from "zod";
261
+
262
+ // src/config/schemas/header-safe.ts
263
+ import { z as z5 } from "zod";
264
+ var headerSafeString = z5.string().refine((s) => !/[\r\n]/.test(s), { message: "Header value must not contain CR/LF" });
265
+
266
+ // src/config/schemas/security.ts
265
267
  var securityHeadersSchema = z6.object({
266
268
  csp: z6.union([headerSafeString, z6.literal(false)]).optional(),
267
269
  // T6.1 — default flipped from 'report-only' to 'enforce' for 0.3.0.
@@ -2093,7 +2095,7 @@ async function runConfigureServer(server, ctx) {
2093
2095
  server.watcher.on("unlink", handleRouteChange);
2094
2096
  if (ctx.resolvedOpenApi !== void 0) {
2095
2097
  const openApiCfg = ctx.resolvedOpenApi;
2096
- const { reEmitOpenApi } = await import("./dev-emit-2DL3MCLM.js");
2098
+ const { reEmitOpenApi } = await import("./dev-emit-HLGJK3PP.js");
2097
2099
  const openApiServerDir = ctx.serverDir;
2098
2100
  const openApiDistDir = resolve7(ctx.projectRoot, ctx.resolvedDistDir);
2099
2101
  const isRouteFileForOpenApi = (file) => file.startsWith(openApiServerDir) && /\.(ts|tsx|js|mjs)$/.test(file);
@@ -3073,7 +3075,7 @@ async function theoPluginAsync(rootOrOptions) {
3073
3075
  });
3074
3076
  const servicesPlugins = [];
3075
3077
  if (options.services && Object.keys(options.services).length > 0) {
3076
- const { servicesTypedClientPlugin } = await import("./services-typed-client-IETY2SAK.js");
3078
+ const { servicesTypedClientPlugin } = await import("./services-typed-client-AU6DKXAO.js");
3077
3079
  servicesPlugins.push(
3078
3080
  servicesTypedClientPlugin({
3079
3081
  cwd: projectRoot,
@@ -3081,19 +3083,19 @@ async function theoPluginAsync(rootOrOptions) {
3081
3083
  })
3082
3084
  );
3083
3085
  }
3084
- const { appTypedClientPlugin } = await import("./app-typed-client-V77SVU2O.js");
3086
+ const { appTypedClientPlugin } = await import("./app-typed-client-USLAMN7X.js");
3085
3087
  const appClientPlugin = appTypedClientPlugin({
3086
3088
  cwd: projectRoot,
3087
3089
  serverDir: serverDirAbs,
3088
3090
  distDir: resolve10(projectRoot, ".theokit")
3089
3091
  });
3090
- const { actionsVirtualModule } = await import("./actions-virtual-module-LD3YKWIX.js");
3092
+ const { actionsVirtualModule } = await import("./actions-virtual-module-RSFRPJQZ.js");
3091
3093
  const actionsPlugin = actionsVirtualModule({
3092
3094
  serverDir: serverDirAbs,
3093
3095
  distDir: resolve10(projectRoot, ".theokit")
3094
3096
  });
3095
- const { agentsTypedClientPlugin } = await import("./agents-typed-client-CHMVW7MK.js");
3096
- const { generateManifest } = await import("./internal-api-LFW7R65K.js");
3097
+ const { agentsTypedClientPlugin } = await import("./agents-typed-client-ZP7BKJB3.js");
3098
+ const { generateManifest } = await import("./internal-api-DV3H5NNV.js");
3097
3099
  const agentsClientPlugin = agentsTypedClientPlugin({
3098
3100
  projectRoot,
3099
3101
  agentsDir: agentsDirName,
@@ -3102,11 +3104,11 @@ async function theoPluginAsync(rootOrOptions) {
3102
3104
  // parent (projectRoot for the canonical layout) + the agents dir name (#95 follow-up).
3103
3105
  scanManifest: () => generateManifest(serverDirAbs, projectRoot, agentsDirName)
3104
3106
  });
3105
- const { serverRoutesHmrPlugin } = await import("./server-routes-hmr-PBHSKCQJ.js");
3107
+ const { serverRoutesHmrPlugin } = await import("./server-routes-hmr-RI7SYNT2.js");
3106
3108
  const routesHmrPlugin = serverRoutesHmrPlugin({
3107
3109
  serverDir: serverDirAbs
3108
3110
  });
3109
- const { controllerSwcTransformPlugin } = await import("./controller-swc-transform-URELVCBM.js");
3111
+ const { controllerSwcTransformPlugin } = await import("./controller-swc-transform-JJRMTSDY.js");
3110
3112
  const controllerTransformPlugin = controllerSwcTransformPlugin({
3111
3113
  serverDir: serverDirAbs
3112
3114
  });
@@ -3282,4 +3284,4 @@ export {
3282
3284
  theoPluginAsync,
3283
3285
  theoPlugin
3284
3286
  };
3285
- //# sourceMappingURL=chunk-2ZX4J4SX.js.map
3287
+ //# sourceMappingURL=chunk-DQVBL2G4.js.map